Hacktivities

1,631 results

room

Constrained Language Mode Bypass

Escape PowerShell Constrained Language Mode and see the traces each bypass leaves behind.

medium

Walkthrough

room

Kansa Live Triage

Learn Kansa, a PowerShell framework for sweeping many hosts during incident response.

medium

Walkthrough

room

KAPE Data Triage

Learn KAPE, a targeted Windows artifact collection tool for incident response.

medium

Walkthrough

room

Wi-Fi Fundamentals and Reconnaissance

Learn how Wi-Fi works and use airodump-ng to map networks and reveal hidden SSIDs.

easy

Walkthrough

room

The Clean Exit

THM Security Services has been engaged for a Digital Forensics activity for GlobalTech Manufacturing.

medium

Challenge

room

Key Artifacts for DFIR

Explore what artifacts to collect from a compromised host during DFIR.

medium

Walkthrough

room

Accessing a Compromised Network

Learn the ways to access a compromised network for DFIR needs.

medium

Walkthrough

room

Phantom Fob

The fob locks but won’t unlock. Codes change every second, forge the signal; don’t replay it.

medium

Challenge

room

The Crown Jewel

Triage a critical alert using Wireshark and Splunk to trace the network intrusion attempt.

easy

Challenge

room

Zero Tolerance

A full attack chain investigation CTF challenge using Splunk logs and KAPE artifacts.

medium

Challenge

room

Portal Drop

Investigate a suspected breach on a CRM portal using logs and EDR data.

easy

Challenge

room

Just a VPN Login

Gather threat intel to determine the risks and assist incident response.

easy

Challenge

room

Phishing Books

Uncover and investigate a phishing campaign targeting the education sector.

easy

Challenge

room

Promotion Night

Earn the quickest promotion ever, or make it your last day at ProbablyFine.

medium

Challenge

room

Chameleon Escape

Trace a recent MECCHA CHAMELEON vulnerability from a malicious custom map to remote code execution.

easy

Walkthrough

room

Advanced Container Escape Techniques

Pivot across a hardened Docker network via shared volumes, raw disk mounts, and a kernel module.

medium

Walkthrough

room

Agent Hardening

Learn how to identify security weaknesses in AI agents and harden them against attack.

easy

Walkthrough

room

Detecting Persistent DLL Attacks

Hunt registered DLL persistence in Windows registry extension points across an offline triage collection

hard

Walkthrough

room

Introduction to Windows IR

Begin your journey into incident response for Windows and Active Directory.

easy

Walkthrough

room

Silver, Golden, and Diamond Tickets Detection

Detect and investigate forged Kerberos tickets from the artifacts they leave behind.

hard

Walkthrough

room

Detecting LSASS Memory Dumping

Learn how to identify and defend against LSASS memory dumping with logs and artifacts.

medium

Walkthrough

room

RDP Lateral Movement Analysis

Trace RDP lateral movement through Windows event logs and on-host triage artifacts.

medium

Walkthrough

room

Trusted By Default

Investigate suspected abuse of a trusted service account at Aurora Retail Group.

medium

Challenge

Showing 24 of 1631 results

Search

1.4K+

500+

Phishing Unfolding

Constrained Language Mode Bypass

Kansa Live Triage

KAPE Data Triage

Wi-Fi Fundamentals and Reconnaissance

The Clean Exit

Key Artifacts for DFIR

Accessing a Compromised Network

Phantom Fob

The Crown Jewel

Zero Tolerance

Portal Drop

Just a VPN Login

Phishing Books

Promotion Night

Chameleon Escape

Advanced Container Escape Techniques

Agent Hardening

Detecting Persistent DLL Attacks

Introduction to Windows IR

Silver, Golden, and Diamond Tickets Detection

Detecting LSASS Memory Dumping

RDP Lateral Movement Analysis

Trusted By Default