Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Holo

Holo is an Active Directory (AD) and Web-App attack lab that aims to teach core web attack vectors and more advanced AD attack techniques. This network simulates an external penetration test on a corporate network.

Task 1: Intro Generation One

Task 2: Intro Patching into the Matrix

Task 3: Intro Kill Chain

Task 4: Flag Submission Flag Submission Panel

Task 5: Competition Pwning & Prizes

Task 6: .NET Basics CLR - Commonly Lacking Radiation

Task 7: .NET Basics Rage Against the Compiler

Task 8: Initial Recon NOT EVERY GEEK WITH A COMMODORE 64 CAN HACK INTO NASA!

Task 9: Web App Exploitation Punk Rock 101 err Web App 101

Task 10: Web App Exploitation What the Fuzz?

Task 11: Web App Exploitation LEEROY JENKINS!

Task 12: Web App Exploitation What is this? Vulnversity?

Task 13: Web App Exploitation Remote Control Empanadas

Task 14: Post Exploitation Meterpreter session 1 closed. Reason: RUH ROH

Task 15: Situational Awareness Docker? I hardly even know her!

Task 16: Situational Awareness Living off the LANd

Task 17: Situational Awareness Dorkus Storkus - Protector of the Database

Task 18: Docker Breakout Making Thin Lizzy Proud

Task 19: Docker Breakout Going%20out%20with%20a%20SHEBANG%21

Task 20: Privilege Escalation Call me Mario, because I got all the bits

Task 21: Post Exploitation From the Shadows

Task 22: Post Exploitation Crack all the Things

Task 23: Pivoting Digging a tunnel to nowhere

Task 24: Command and Control Command your Foes and Control your Friends

Task 25: Command and Control Bug on the Wire

Task 26: Command and Control The Blood Oath

Task 27: Command and Control We ran out of Halo and YAML references...

Task 28: Web App Exploitation Hide yo' Kids, Hide yo' Wives, Hide yo' Tokens

Task 29: Web App Exploitation Thanks, I'll let myself in.

Task 30: AV Evasion Basically a joke itself....

Task 31: AV Evasion THEY WONT SEE ME IF I YELL!

Task 32: AV Evasion AMSIception

Task 33: AV Evasion JU57 0BFU$C47E 1T

Task 34: AV Evasion 'Ca' + 'n' + 'you' + ' ' + 'see' + 'me now' + '?'

Task 35: AV Evasion Wrapping the burrito

Task 36: Post Exploitation That's not a cat that's a dawg

Task 37: Post Exploitation Good Intentions, Courtesy of Microsoft: Part II

Task 38: Post Exploitation Watson left her locker open

Task 39: Situational Awareness So it's just fancy malware?

Task 40: Situational Awareness SEATBELT CHECK!

Task 41: Situational Awareness ALL THE POWER!

Task 42: Situational Awareness Import-Module PowerUpGreySkull.ps1

Task 43: Privilege Escalation WERE TAKING OVER THIS DLL!

Task 44: Persistence WERE TAKING OVER THIS DLL! Part: II

Task 45: NTLM Relay Never trust the LanMan

Task 46: NTLM Relay Now you see me, now you don't

Task 47: NTLM Relay Why not just turn it off?

Task 48: NTLM Relay Ready your weapons

Task 49: Conclusion End Game

Back to all networks
Room Icon

Holo

Premium room

Holo is an Active Directory (AD) and Web-App attack lab that aims to teach core web attack vectors and more advanced AD attack techniques. This network simulates an external penetration test on a corporate network.

hard

120 min

4,974

User profile photo.

To access material, start machines and answer questions login.

Press 'Start' to begin


Welcome to Holo!

Holo is an Active Directory and Web Application attack lab that teaches core web attack vectors and advanced\obscure Active Directory attacks along with general red teaming methodology and concepts.

In this lab, you will learn and explore the following topics:

  • .NET basics
  • Web application exploitation
  • evasion
  • Whitelist and escapes
  • Pivoting
  • Operating with a (Command and Control) Framework
  • Post-Exploitation
  • Situational Awareness
  • Active Directory attacks

You will learn and exploit the following attacks and misconfigurations:

  • Misconfigured sub-domains
  • Local file Inclusion
  • Remote code execution
  • Docker containers
  • SUID binaries
  • Password resets
  • Client-side filters
  • Vulnerable DLLs
  • Net-NTLMv2 /

This network simulates an external penetration test on a corporate network "Hololive" with one intended kill chain. All concepts and exploits will be taught in a red teaming methodology and mindset with other methods and techniques taught throughout the network.

This network brings you from zero to red-team, but you are expected to have a general understanding of basic Windows and architecture and the command line for both Windows and Linux. If you need help, please feel free to ask in the TryHackMe Discord; there is a channel set up for this purpose in the help section there.

Answer the questions below
Read the above and prepare to hack all the things.