Skill Progression

Learn to filter through advanced reporting to visualize skill progression mapped to industry frameworks

Tracking skill progression and maximizing performance

HTB Enterprise

Skill Progression
Engagement
Completion
From all completed content
All
41
Academy
Section owns
41
Machines
Machines completed
0
Sherlocks
Sherlocks completed
0
Challenges
Challenges completed
0
Professional Labs
Scenarios completed
0
Cloud Labs
Scenarios completed
0
Academy
NIST NICE
MITRE ATT&CK
N
NIST NICE
All-time coverage of Work Roles, Skills, Tasks and Knowledge progression from all completed modules.
Search Work Roles
View by
Work Roles
Program Manager • OV-PMA-001
2.2%
Authorizing Official/Designating Representative • SP-RSK-001
2.2%
Cyber Workforce Developer and Manager • OV-SPP-001
2.2%
Multi-Disciplined Language Analyst • AN-LNG-001
2.2%
IT Program Auditor • OV-PMA-005
2.2%
Cyber Ops Planner • CO-OPL-002
2.2%
All Source-Collection Manager • CO-CLO-001
2.2%
Product Support Manager • OV-PMA-003
2.2%
Cyber Policy and Strategy Planner • OV-SPP-002
2.2%
Privacy Officer/Privacy Compliance Manager • OV-LGA-002
2.2%
Previous
Next
Machines
Areas and skills from completed Machines
Area of Interest
An overview of all assigned machines areas
FORENSICS
NICHE TECHNOLOGIES
ENTERPRISE NETWORK
WEB​APPLICATION
CLOUD
INCIDENT RESPONSE
MOBILE
VULNERABILITY ASSESSMENT
PERSON
SECURITY​OPERATIONS
THREAT​INTELLIGENCE
All Areas
Forensics
Progress
0%
Niche Technologies
Progress
16.67%
Enterprise Network
Progress
10.5%
Web Application
Progress
2.54%
Cloud
Progress
0%
Incident Response
Progress
0%
Mobile
Progress
0%
Vulnerability Assessment
Progress
2.07%
Person
Progress
3.61%
Security Operations
Progress
0%
Threat Intelligence
Progress
0%
Skill Progression

Skills that are included in the assigned machines

Skills •
Technology
Name
	
Machines completed in date range
	
Growth rate in date range
	
All time Ownership

Atlassian Confluence	0	0	
3.17%

Repetier-Server	0	0	
1.59%

Jetbrains	0	0	
1.59%

Atril	0	0	
1.59%

Apache Spark	0	0	
1.59%

Enlightenment	0	0	
1.59%

Apache Superset	0	0	
1.59%

Linux	0	0	
0.79%

Cacti	0	0	
0.79%

Microsoft Office	0	0	
0.79%

Polkit	0	0	
0.79%

Telnet	0	0	
0.79%

GitLab	0	0	
0.63%

TeamCity	0	0	
0.53%

Rails	0	0	
0.53%
Items per page:
15
1-15 of 360
By Difficulty
EASY - 0%
INSANE - 0%
VERY EASY - 0%
Show More
By OS
LINUX - 0%
WINDOWS - 0%
SOLARIS - 0%
Show More
Sherlocks
Areas and skills from completed Sherlocks
Skill Progression

Skills that are included in the assigned Sherlocks

Name
	
Sherlocks completed in date range
	
Growth rate in date range
	
All time Ownership

Threat-Intelligence	0	0	
1.27%

Operator	0	0	
0.79%

SOC	0	0	
0.72%

DFIR	0	0	
0.26%

Malware-Analysis	0	0	
0.12%

GamePwn	0	-	
0%

Reversing	0	-	
0%

Threat-Hunting	0	-	
0%

AI/ML	0	-	
0%

Seasonal	0	-	
0%

Cloud	0	-	
0%

OSINT	0	-	
0%

Web	0	-	
0%

Hardware	0	-	
0%

ICS/OT	0	-	
0%

Crypto	0	-	
0%

Blockchain	0	-	
0%

Misc	0	-	
0%

Forensics	0	-	
0%

Pwn	0	-	
0%

Mobile	0	-	
0%

Harden	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Challenges
Areas and skills from completed Challenges
Skill Progression

Skills that are included in the assigned Challenges

Name
	
Challenges completed in date range
	
Growth rate in date range
	
All time Ownership

OSINT	0	0	
0.68%

Web	0	0	
0.05%

Forensics	0	0	
0.02%

ICS/OT	0	-	
0%

Hardware	0	-	
0%

Pwn	0	-	
0%

Malware-Analysis	0	-	
0%

SOC	0	-	
0%

DFIR	0	-	
0%

Blockchain	0	-	
0%

Mobile	0	-	
0%

AI/ML	0	-	
0%

Misc	0	-	
0%

Crypto	0	-	
0%

Threat-Intelligence	0	-	
0%

Threat-Hunting	0	-	
0%

Cloud	0	-	
0%

Seasonal	0	-	
0%

Operator	0	-	
0%

Harden	0	-	
0%

GamePwn	0	-	
0%

Reversing	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Pro Labs
Areas and skills from completed Pro Labs
Genesis
Penetration Tester Level 1
COLLAPSE
MITRE ATT&CK Coverage on Genesis
Reconnaissance
Active Scanning
Vulnerability Scanning
Gather Victim Host Information
Client Configurations
Software
Gather Victim Identity Information
Credentials
Employee Names
Gather Victim Network Information
DNS
Domain Properties
IP Addresses
Network Topology
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
External Remote Services
Valid Accounts
Default Accounts
Local Accounts
Execution
Command and Scripting Interpreter
PowerShell
Python
Unix Shell
Windows Command Shell
Scheduled Task/Job
Cron
Persistence
Account Manipulation
SSH Authorized Keys
Create or Modify System Process
Windows Service
Hijack Execution Flow
Scheduled Task/Job
Cron
Server Software Component
Web Shell
Valid Accounts
Local Accounts
Progression
Flags
Completion
beaker1
1/31 Flags (+0)
3.23% (+0)
d3xt3r
21/31 Flags (+0)
67.74% (+0)
dimimelehtb
2/31 Flags (+0)
6.45% (+0)
cyb3rvet
2/31 Flags (+0)
6.45% (+0)
Dante
Penetration Tester Level 1
EXPAND
Offshore
Penetration Tester Level 2
EXPAND
RastaLabs
Red Team Operator Level 2
EXPAND
Cybernetics
Red Team Operator Level 2
EXPAND
APTLabs
Red Team Operator Level 3
EXPAND
Breakpoint
Red Team Operator Level 1
EXPAND
Zephyr
Red Team Operator Level 1
EXPAND
FullHouse
Red Team Operator Level 2
EXPAND
Orion
Penetration Tester Level 2
EXPAND
Alchemy
Red Team Operator Level 2
EXPAND
XEN
Red Team Operator Level 1
EXPAND
P.O.O
Red Team Operator Level 1
EXPAND
Hades
Red Team Operator Level 1
EXPAND
RPG
Red Team Operator Level 1
EXPAND
Solar
Red Team Operator Level 1
EXPAND
Eldritch
Red Team Operator Level 1
EXPAND
Ascension
Red Team Operator Level 1
EXPAND
Odyssey
Red Team Operator Level 1
EXPAND
Wanderer
Red Team Operator Level 2
EXPAND
Cloud Labs
Areas and skills from completed Cloud Labs
BlackSky: Hailstorm
Cloud Security Specialist: AWS Offensive
COLLAPSE
MITRE ATT&CK Coverage on BlackSky: Hailstorm
Reconnaissance
Active Scanning
Vulnerability Scanning
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
Execution
Command and Scripting Interpreter
Python
Unix Shell
Native API
Persistence
Account Manipulation
Additional Cloud Credentials
Create Account
Cloud Account
Local Account
Valid Accounts
Cloud Accounts
Local Accounts
Progression
Flags
Completion
ch4p
4/15 Flags (+0)
26.67% (+0)
j1nxt
3/15 Flags (+0)
20% (+0)
d3xt3r
15/15 Flags (+0)
100% (+0)
BlackSky: Cyclone
Cloud Security Specialist: Azure Offensive
EXPAND
BlackSky: Blizzard
Cloud Security Specialist: GCP Offensive
EXPAND

Skill Progression
Engagement
Completion
From all completed content
All
41
Academy
Section owns
41
Machines
Machines completed
0
Sherlocks
Sherlocks completed
0
Challenges
Challenges completed
0
Professional Labs
Scenarios completed
0
Cloud Labs
Scenarios completed
0
Academy
NIST NICE
MITRE ATT&CK
MITRE ATT&CK
All-time coverage of tactics, techniques and sub-techniques progression from all completed modules.
Initial Access
50.0%
Phishing
14.5%
Phishing: Spearphishing Attachment
Phishing: Spearphishing Link
Phishing: Spearphishing via Service
Phishing: Spearphishing Voice
Supply Chain Compromise
0%
Supply Chain Compromise: Compromise Hardware Supply Chain
Supply Chain Compromise: Compromise Software Dependencies and Development Tools
Supply Chain Compromise: Compromise Software Supply Chain
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Lateral Movement
59.3%
Remote Service Session Hijacking
50%
Remote Service Session Hijacking: RDP Hijacking
Remote Service Session Hijacking: SSH Hijacking
Remote Services
32.1%
Remote Services: Distributed Component Object Model
Remote Services: Remote Desktop Protocol
Remote Services: SMB/Windows Admin Shares
Remote Services: SSH
Remote Services: VNC
Remote Services: Windows Remote Management
Remote Services: Cloud Services
Remote Services: Direct Cloud VM Connections
Use Alternate Authentication Material
23.8%
Use Alternate Authentication Material: Application Access Token
Use Alternate Authentication Material: Pass the Hash
Use Alternate Authentication Material: Pass the Ticket
Use Alternate Authentication Material: Web Session Cookie
Persistence
73.3%
Account Manipulation
28%
Account Manipulation: Additional Cloud Roles
Account Manipulation: Additional Cloud Credentials
Account Manipulation: Additional Email Delegate Permissions
Account Manipulation: SSH Authorized Keys
Account Manipulation: Device Registration
Account Manipulation: Additional Container Cluster Roles
Boot or Logon Autostart Execution
20%
Boot or Logon Autostart Execution: Active Setup
Boot or Logon Autostart Execution: Authentication Package
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: Login Items
Boot or Logon Autostart Execution: Plist Modification
Boot or Logon Autostart Execution: Port Monitors
Boot or Logon Autostart Execution: Print Processors
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Shortcut Modification
Boot or Logon Autostart Execution: Time Providers
Boot or Logon Autostart Execution: Winlogon Helper DLL
Boot or Logon Autostart Execution: XDG Autostart Entries
Boot or Logon Initialization Scripts
20%
Boot or Logon Initialization Scripts: Login Hook
Boot or Logon Initialization Scripts: Logon Script (Windows)
Boot or Logon Initialization Scripts: Network Logon Script
Boot or Logon Initialization Scripts: RC Scripts
Boot or Logon Initialization Scripts: Startup Items
Create Account
30%
Create Account: Cloud Account
Create Account: Domain Account
Create Account: Local Account
Create or Modify System Process
20%
Create or Modify System Process: Launch Agent
Create or Modify System Process: Launch Daemon
Create or Modify System Process: Systemd Service
Create or Modify System Process: Windows Service
Event Triggered Execution
20%
Event Triggered Execution: Accessibility Features
Event Triggered Execution: AppCert DLLs
Event Triggered Execution: AppInit DLLs
Event Triggered Execution: Application Shimming
Event Triggered Execution: Change Default File Association
Event Triggered Execution: Component Object Model Hijacking
Event Triggered Execution: Emond
Event Triggered Execution: Image File Execution Options Injection
Event Triggered Execution: LC_LOAD_DYLIB Addition
Event Triggered Execution: Netsh Helper DLL
Event Triggered Execution: PowerShell Profile
Event Triggered Execution: Screensaver
Event Triggered Execution: Trap
Event Triggered Execution: Unix Shell Configuration Modification
Event Triggered Execution: Windows Management Instrumentation Event Subscription
Event Triggered Execution: Installer Packages
Hijack Execution Flow
31.3%
Hijack Execution Flow: COR_PROFILER
Hijack Execution Flow: DLL Search Order Hijacking
Hijack Execution Flow: DLL Side-Loading
Hijack Execution Flow: Dylib Hijacking
Hijack Execution Flow: Dynamic Linker Hijacking
Hijack Execution Flow: Executable Installer File Permissions Weakness
Hijack Execution Flow: Path Interception by PATH Environment Variable
Hijack Execution Flow: Path Interception by Search Order Hijacking
Hijack Execution Flow: Path Interception by Unquoted Path
Hijack Execution Flow: Services File Permissions Weakness
Hijack Execution Flow: Services Registry Permissions Weakness
Hijack Execution Flow: KernelCallbackTable
Modify Authentication Process
0%
Modify Authentication Process: Domain Controller Authentication
Modify Authentication Process: Network Device Authentication
Modify Authentication Process: Password Filter DLL
Modify Authentication Process: Pluggable Authentication Modules
Modify Authentication Process: Reversible Encryption
Modify Authentication Process: Hybrid Identity
Modify Authentication Process: Multi-Factor Authentication
Modify Authentication Process: Network Provider DLL
Office Application Startup
0%
Office Application Startup: Add-ins
Office Application Startup: Office Template Macros
Office Application Startup: Office Test
Office Application Startup: Outlook Forms
Office Application Startup: Outlook Home Page
Office Application Startup: Outlook Rules
Pre-OS Boot
0%
Pre-OS Boot: Bootkit
Pre-OS Boot: Component Firmware
Pre-OS Boot: ROMMONkit
Pre-OS Boot: System Firmware
Pre-OS Boot: TFTP Boot
Scheduled Task/Job
33.3%
Scheduled Task/Job: At (Linux)
Scheduled Task/Job: At
Scheduled Task/Job: Container Orchestration Job
Scheduled Task/Job: Cron
Scheduled Task/Job: Scheduled Task
Scheduled Task/Job: Systemd Timers
Server Software Component
30.8%
Server Software Component: IIS Components
Server Software Component: SQL Stored Procedures
Server Software Component: Transport Agent
Server Software Component: Web Shell
Server Software Component: Terminal Services DLL
Traffic Signaling
0%
Traffic Signaling: Port Knocking
Traffic Signaling: Socket Filters
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Privilege Escalation
72.2%
Abuse Elevation Control Mechanism
40%
Abuse Elevation Control Mechanism: Bypass User Account Control
Abuse Elevation Control Mechanism: Elevated Execution with Prompt
Abuse Elevation Control Mechanism: Setuid and Setgid
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse Elevation Control Mechanism: Temporary Elevated Cloud Access
Access Token Manipulation
35%
Access Token Manipulation: Create Process with Token
Access Token Manipulation: Make and Impersonate Token
Access Token Manipulation: Parent PID Spoofing
Access Token Manipulation: SID-History Injection
Access Token Manipulation: Token Impersonation/Theft
Account Manipulation
28%
Account Manipulation: Additional Cloud Roles
Account Manipulation: Additional Cloud Credentials
Account Manipulation: Additional Email Delegate Permissions
Account Manipulation: SSH Authorized Keys
Account Manipulation: Device Registration
Account Manipulation: Additional Container Cluster Roles
Boot or Logon Autostart Execution
20%
Boot or Logon Autostart Execution: Active Setup
Boot or Logon Autostart Execution: Authentication Package
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: Login Items
Boot or Logon Autostart Execution: Plist Modification
Boot or Logon Autostart Execution: Port Monitors
Boot or Logon Autostart Execution: Print Processors
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Shortcut Modification
Boot or Logon Autostart Execution: Time Providers
Boot or Logon Autostart Execution: Winlogon Helper DLL
Boot or Logon Autostart Execution: XDG Autostart Entries
Boot or Logon Initialization Scripts
20%
Boot or Logon Initialization Scripts: Login Hook
Boot or Logon Initialization Scripts: Logon Script (Windows)
Boot or Logon Initialization Scripts: Network Logon Script
Boot or Logon Initialization Scripts: RC Scripts
Boot or Logon Initialization Scripts: Startup Items
Create or Modify System Process
20%
Create or Modify System Process: Launch Agent
Create or Modify System Process: Launch Daemon
Create or Modify System Process: Systemd Service
Create or Modify System Process: Windows Service
Domain Policy Modification
25%
Domain Policy Modification: Domain Trust Modification
Domain Policy Modification: Group Policy Modification
Event Triggered Execution
20%
Event Triggered Execution: Accessibility Features
Event Triggered Execution: AppCert DLLs
Event Triggered Execution: AppInit DLLs
Event Triggered Execution: Application Shimming
Event Triggered Execution: Change Default File Association
Event Triggered Execution: Component Object Model Hijacking
Event Triggered Execution: Emond
Event Triggered Execution: Image File Execution Options Injection
Event Triggered Execution: LC_LOAD_DYLIB Addition
Event Triggered Execution: Netsh Helper DLL
Event Triggered Execution: PowerShell Profile
Event Triggered Execution: Screensaver
Event Triggered Execution: Trap
Event Triggered Execution: Unix Shell Configuration Modification
Event Triggered Execution: Windows Management Instrumentation Event Subscription
Event Triggered Execution: Installer Packages
Hijack Execution Flow
31.3%
Hijack Execution Flow: COR_PROFILER
Hijack Execution Flow: DLL Search Order Hijacking
Hijack Execution Flow: DLL Side-Loading
Hijack Execution Flow: Dylib Hijacking
Hijack Execution Flow: Dynamic Linker Hijacking
Hijack Execution Flow: Executable Installer File Permissions Weakness
Hijack Execution Flow: Path Interception by PATH Environment Variable
Hijack Execution Flow: Path Interception by Search Order Hijacking
Hijack Execution Flow: Path Interception by Unquoted Path
Hijack Execution Flow: Services File Permissions Weakness
Hijack Execution Flow: Services Registry Permissions Weakness
Hijack Execution Flow: KernelCallbackTable
Process Injection
25%
Process Injection: Asynchronous Procedure Call
Process Injection: Dynamic-link Library Injection
Process Injection: Extra Window Memory Injection
Process Injection: Portable Executable Injection
Process Injection: Proc Memory
Process Injection: Process Doppelgänging
Process Injection: Process Hollowing
Process Injection: Ptrace System Calls
Process Injection: Thread Execution Hijacking
Process Injection: Thread Local Storage
Process Injection: VDSO Hijacking
Process Injection: ListPlanting
Scheduled Task/Job
33.3%
Scheduled Task/Job: At (Linux)
Scheduled Task/Job: At
Scheduled Task/Job: Container Orchestration Job
Scheduled Task/Job: Cron
Scheduled Task/Job: Scheduled Task
Scheduled Task/Job: Systemd Timers
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Previous
Next
Machines
Areas and skills from completed Machines
Area of Interest
An overview of all assigned machines areas
FORENSICS
NICHE TECHNOLOGIES
ENTERPRISE NETWORK
WEB​APPLICATION
CLOUD
INCIDENT RESPONSE
MOBILE
VULNERABILITY ASSESSMENT
PERSON
SECURITY​OPERATIONS
THREAT​INTELLIGENCE
All Areas
Forensics
Progress
0%
Niche Technologies
Progress
16.67%
Enterprise Network
Progress
10.5%
Web Application
Progress
2.54%
Cloud
Progress
0%
Incident Response
Progress
0%
Mobile
Progress
0%
Vulnerability Assessment
Progress
2.07%
Person
Progress
3.61%
Security Operations
Progress
0%
Threat Intelligence
Progress
0%
Skill Progression

Skills that are included in the assigned machines

Skills •
Technology
Name
	
Machines completed in date range
	
Growth rate in date range
	
All time Ownership

Atlassian Confluence	0	0	
3.17%

Repetier-Server	0	0	
1.59%

Jetbrains	0	0	
1.59%

Atril	0	0	
1.59%

Apache Spark	0	0	
1.59%

Enlightenment	0	0	
1.59%

Apache Superset	0	0	
1.59%

Linux	0	0	
0.79%

Cacti	0	0	
0.79%

Microsoft Office	0	0	
0.79%

Polkit	0	0	
0.79%

Telnet	0	0	
0.79%

GitLab	0	0	
0.63%

TeamCity	0	0	
0.53%

Rails	0	0	
0.53%
Items per page:
15
1-15 of 360
By Difficulty
EASY - 0%
INSANE - 0%
VERY EASY - 0%
Show More
By OS
LINUX - 0%
WINDOWS - 0%
SOLARIS - 0%
Show More
Sherlocks
Areas and skills from completed Sherlocks
Skill Progression

Skills that are included in the assigned Sherlocks

Name
	
Sherlocks completed in date range
	
Growth rate in date range
	
All time Ownership

Threat-Intelligence	0	0	
1.27%

Operator	0	0	
0.79%

SOC	0	0	
0.72%

DFIR	0	0	
0.26%

Malware-Analysis	0	0	
0.12%

GamePwn	0	-	
0%

Reversing	0	-	
0%

Threat-Hunting	0	-	
0%

AI/ML	0	-	
0%

Seasonal	0	-	
0%

Cloud	0	-	
0%

OSINT	0	-	
0%

Web	0	-	
0%

Hardware	0	-	
0%

ICS/OT	0	-	
0%

Crypto	0	-	
0%

Blockchain	0	-	
0%

Misc	0	-	
0%

Forensics	0	-	
0%

Pwn	0	-	
0%

Mobile	0	-	
0%

Harden	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Challenges
Areas and skills from completed Challenges
Skill Progression

Skills that are included in the assigned Challenges

Name
	
Challenges completed in date range
	
Growth rate in date range
	
All time Ownership

OSINT	0	0	
0.68%

Web	0	0	
0.05%

Forensics	0	0	
0.02%

ICS/OT	0	-	
0%

Hardware	0	-	
0%

Pwn	0	-	
0%

Malware-Analysis	0	-	
0%

SOC	0	-	
0%

DFIR	0	-	
0%

Blockchain	0	-	
0%

Mobile	0	-	
0%

AI/ML	0	-	
0%

Misc	0	-	
0%

Crypto	0	-	
0%

Threat-Intelligence	0	-	
0%

Threat-Hunting	0	-	
0%

Cloud	0	-	
0%

Seasonal	0	-	
0%

Operator	0	-	
0%

Harden	0	-	
0%

GamePwn	0	-	
0%

Reversing	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Pro Labs
Areas and skills from completed Pro Labs
Genesis
Penetration Tester Level 1
COLLAPSE
MITRE ATT&CK Coverage on Genesis
Reconnaissance
Active Scanning
Vulnerability Scanning
Gather Victim Host Information
Client Configurations
Software
Gather Victim Identity Information
Credentials
Employee Names
Gather Victim Network Information
DNS
Domain Properties
IP Addresses
Network Topology
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
External Remote Services
Valid Accounts
Default Accounts
Local Accounts
Execution
Command and Scripting Interpreter
PowerShell
Python
Unix Shell
Windows Command Shell
Scheduled Task/Job
Cron
Persistence
Account Manipulation
SSH Authorized Keys
Create or Modify System Process
Windows Service
Hijack Execution Flow
Scheduled Task/Job
Cron
Server Software Component
Web Shell
Valid Accounts
Local Accounts
Progression
Flags
Completion
beaker1
1/31 Flags (+0)
3.23% (+0)
d3xt3r
21/31 Flags (+0)
67.74% (+0)
dimimelehtb
2/31 Flags (+0)
6.45% (+0)
cyb3rvet
2/31 Flags (+0)
6.45% (+0)
Dante
Penetration Tester Level 1
EXPAND
Offshore
Penetration Tester Level 2
EXPAND
RastaLabs
Red Team Operator Level 2
EXPAND
Cybernetics
Red Team Operator Level 2
EXPAND
APTLabs
Red Team Operator Level 3
EXPAND
Breakpoint
Red Team Operator Level 1
EXPAND
Zephyr
Red Team Operator Level 1
EXPAND
FullHouse
Red Team Operator Level 2
EXPAND
Orion
Penetration Tester Level 2
EXPAND
Alchemy
Red Team Operator Level 2
EXPAND
XEN
Red Team Operator Level 1
EXPAND
P.O.O
Red Team Operator Level 1
EXPAND
Hades
Red Team Operator Level 1
EXPAND
RPG
Red Team Operator Level 1
EXPAND
Solar
Red Team Operator Level 1
EXPAND
Eldritch
Red Team Operator Level 1
EXPAND
Ascension
Red Team Operator Level 1
EXPAND
Odyssey
Red Team Operator Level 1
EXPAND
Wanderer
Red Team Operator Level 2
EXPAND
Cloud Labs
Areas and skills from completed Cloud Labs
BlackSky: Hailstorm
Cloud Security Specialist: AWS Offensive
COLLAPSE
MITRE ATT&CK Coverage on BlackSky: Hailstorm
Reconnaissance
Active Scanning
Vulnerability Scanning
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
Execution
Command and Scripting Interpreter
Python
Unix Shell
Native API
Persistence
Account Manipulation
Additional Cloud Credentials
Create Account
Cloud Account
Local Account
Valid Accounts
Cloud Accounts
Local Accounts
Progression
Flags
Completion
ch4p
4/15 Flags (+0)
26.67% (+0)
j1nxt
3/15 Flags (+0)
20% (+0)
d3xt3r
15/15 Flags (+0)
100% (+0)
BlackSky: Cyclone
Cloud Security Specialist: Azure Offensive
EXPAND
BlackSky: Blizzard
Cloud Security Specialist: GCP Offensive
EXPAND

Skill Progression
Engagement
Completion
From all completed content
All
41
Academy
Section owns
41
Machines
Machines completed
0
Sherlocks
Sherlocks completed
0
Challenges
Challenges completed
0
Professional Labs
Scenarios completed
0
Cloud Labs
Scenarios completed
0
Academy
NIST NICE
MITRE ATT&CK
MITRE ATT&CK
All-time coverage of tactics, techniques and sub-techniques progression from all completed modules.
Initial Access
50.0%
Phishing
14.5%
Phishing: Spearphishing Attachment
Phishing: Spearphishing Link
Phishing: Spearphishing via Service
Phishing: Spearphishing Voice
Supply Chain Compromise
0%
Supply Chain Compromise: Compromise Hardware Supply Chain
Supply Chain Compromise: Compromise Software Dependencies and Development Tools
Supply Chain Compromise: Compromise Software Supply Chain
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Lateral Movement
59.3%
Remote Service Session Hijacking
50%
Remote Service Session Hijacking: RDP Hijacking
Remote Service Session Hijacking: SSH Hijacking
Remote Services
32.1%
Remote Services: Distributed Component Object Model
Remote Services: Remote Desktop Protocol
Remote Services: SMB/Windows Admin Shares
Remote Services: SSH
Remote Services: VNC
Remote Services: Windows Remote Management
Remote Services: Cloud Services
Remote Services: Direct Cloud VM Connections
Use Alternate Authentication Material
23.8%
Use Alternate Authentication Material: Application Access Token
Use Alternate Authentication Material: Pass the Hash
Use Alternate Authentication Material: Pass the Ticket
Use Alternate Authentication Material: Web Session Cookie
Persistence
73.3%
Account Manipulation
28%
Account Manipulation: Additional Cloud Roles
Account Manipulation: Additional Cloud Credentials
Account Manipulation: Additional Email Delegate Permissions
Account Manipulation: SSH Authorized Keys
Account Manipulation: Device Registration
Account Manipulation: Additional Container Cluster Roles
Boot or Logon Autostart Execution
20%
Boot or Logon Autostart Execution: Active Setup
Boot or Logon Autostart Execution: Authentication Package
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: Login Items
Boot or Logon Autostart Execution: Plist Modification
Boot or Logon Autostart Execution: Port Monitors
Boot or Logon Autostart Execution: Print Processors
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Shortcut Modification
Boot or Logon Autostart Execution: Time Providers
Boot or Logon Autostart Execution: Winlogon Helper DLL
Boot or Logon Autostart Execution: XDG Autostart Entries
Boot or Logon Initialization Scripts
20%
Boot or Logon Initialization Scripts: Login Hook
Boot or Logon Initialization Scripts: Logon Script (Windows)
Boot or Logon Initialization Scripts: Network Logon Script
Boot or Logon Initialization Scripts: RC Scripts
Boot or Logon Initialization Scripts: Startup Items
Create Account
30%
Create Account: Cloud Account
Create Account: Domain Account
Create Account: Local Account
Create or Modify System Process
20%
Create or Modify System Process: Launch Agent
Create or Modify System Process: Launch Daemon
Create or Modify System Process: Systemd Service
Create or Modify System Process: Windows Service
Event Triggered Execution
20%
Event Triggered Execution: Accessibility Features
Event Triggered Execution: AppCert DLLs
Event Triggered Execution: AppInit DLLs
Event Triggered Execution: Application Shimming
Event Triggered Execution: Change Default File Association
Event Triggered Execution: Component Object Model Hijacking
Event Triggered Execution: Emond
Event Triggered Execution: Image File Execution Options Injection
Event Triggered Execution: LC_LOAD_DYLIB Addition
Event Triggered Execution: Netsh Helper DLL
Event Triggered Execution: PowerShell Profile
Event Triggered Execution: Screensaver
Event Triggered Execution: Trap
Event Triggered Execution: Unix Shell Configuration Modification
Event Triggered Execution: Windows Management Instrumentation Event Subscription
Event Triggered Execution: Installer Packages
Hijack Execution Flow
31.3%
Hijack Execution Flow: COR_PROFILER
Hijack Execution Flow: DLL Search Order Hijacking
Hijack Execution Flow: DLL Side-Loading
Hijack Execution Flow: Dylib Hijacking
Hijack Execution Flow: Dynamic Linker Hijacking
Hijack Execution Flow: Executable Installer File Permissions Weakness
Hijack Execution Flow: Path Interception by PATH Environment Variable
Hijack Execution Flow: Path Interception by Search Order Hijacking
Hijack Execution Flow: Path Interception by Unquoted Path
Hijack Execution Flow: Services File Permissions Weakness
Hijack Execution Flow: Services Registry Permissions Weakness
Hijack Execution Flow: KernelCallbackTable
Modify Authentication Process
0%
Modify Authentication Process: Domain Controller Authentication
Modify Authentication Process: Network Device Authentication
Modify Authentication Process: Password Filter DLL
Modify Authentication Process: Pluggable Authentication Modules
Modify Authentication Process: Reversible Encryption
Modify Authentication Process: Hybrid Identity
Modify Authentication Process: Multi-Factor Authentication
Modify Authentication Process: Network Provider DLL
Office Application Startup
0%
Office Application Startup: Add-ins
Office Application Startup: Office Template Macros
Office Application Startup: Office Test
Office Application Startup: Outlook Forms
Office Application Startup: Outlook Home Page
Office Application Startup: Outlook Rules
Pre-OS Boot
0%
Pre-OS Boot: Bootkit
Pre-OS Boot: Component Firmware
Pre-OS Boot: ROMMONkit
Pre-OS Boot: System Firmware
Pre-OS Boot: TFTP Boot
Scheduled Task/Job
33.3%
Scheduled Task/Job: At (Linux)
Scheduled Task/Job: At
Scheduled Task/Job: Container Orchestration Job
Scheduled Task/Job: Cron
Scheduled Task/Job: Scheduled Task
Scheduled Task/Job: Systemd Timers
Server Software Component
30.8%
Server Software Component: IIS Components
Server Software Component: SQL Stored Procedures
Server Software Component: Transport Agent
Server Software Component: Web Shell
Server Software Component: Terminal Services DLL
Traffic Signaling
0%
Traffic Signaling: Port Knocking
Traffic Signaling: Socket Filters
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Privilege Escalation
72.2%
Abuse Elevation Control Mechanism
40%
Abuse Elevation Control Mechanism: Bypass User Account Control
Abuse Elevation Control Mechanism: Elevated Execution with Prompt
Abuse Elevation Control Mechanism: Setuid and Setgid
Abuse Elevation Control Mechanism: Sudo and Sudo Caching
Abuse Elevation Control Mechanism: Temporary Elevated Cloud Access
Access Token Manipulation
35%
Access Token Manipulation: Create Process with Token
Access Token Manipulation: Make and Impersonate Token
Access Token Manipulation: Parent PID Spoofing
Access Token Manipulation: SID-History Injection
Access Token Manipulation: Token Impersonation/Theft
Account Manipulation
28%
Account Manipulation: Additional Cloud Roles
Account Manipulation: Additional Cloud Credentials
Account Manipulation: Additional Email Delegate Permissions
Account Manipulation: SSH Authorized Keys
Account Manipulation: Device Registration
Account Manipulation: Additional Container Cluster Roles
Boot or Logon Autostart Execution
20%
Boot or Logon Autostart Execution: Active Setup
Boot or Logon Autostart Execution: Authentication Package
Boot or Logon Autostart Execution: Kernel Modules and Extensions
Boot or Logon Autostart Execution: LSASS Driver
Boot or Logon Autostart Execution: Login Items
Boot or Logon Autostart Execution: Plist Modification
Boot or Logon Autostart Execution: Port Monitors
Boot or Logon Autostart Execution: Print Processors
Boot or Logon Autostart Execution: Re-opened Applications
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Security Support Provider
Boot or Logon Autostart Execution: Shortcut Modification
Boot or Logon Autostart Execution: Time Providers
Boot or Logon Autostart Execution: Winlogon Helper DLL
Boot or Logon Autostart Execution: XDG Autostart Entries
Boot or Logon Initialization Scripts
20%
Boot or Logon Initialization Scripts: Login Hook
Boot or Logon Initialization Scripts: Logon Script (Windows)
Boot or Logon Initialization Scripts: Network Logon Script
Boot or Logon Initialization Scripts: RC Scripts
Boot or Logon Initialization Scripts: Startup Items
Create or Modify System Process
20%
Create or Modify System Process: Launch Agent
Create or Modify System Process: Launch Daemon
Create or Modify System Process: Systemd Service
Create or Modify System Process: Windows Service
Domain Policy Modification
25%
Domain Policy Modification: Domain Trust Modification
Domain Policy Modification: Group Policy Modification
Event Triggered Execution
20%
Event Triggered Execution: Accessibility Features
Event Triggered Execution: AppCert DLLs
Event Triggered Execution: AppInit DLLs
Event Triggered Execution: Application Shimming
Event Triggered Execution: Change Default File Association
Event Triggered Execution: Component Object Model Hijacking
Event Triggered Execution: Emond
Event Triggered Execution: Image File Execution Options Injection
Event Triggered Execution: LC_LOAD_DYLIB Addition
Event Triggered Execution: Netsh Helper DLL
Event Triggered Execution: PowerShell Profile
Event Triggered Execution: Screensaver
Event Triggered Execution: Trap
Event Triggered Execution: Unix Shell Configuration Modification
Event Triggered Execution: Windows Management Instrumentation Event Subscription
Event Triggered Execution: Installer Packages
Hijack Execution Flow
31.3%
Hijack Execution Flow: COR_PROFILER
Hijack Execution Flow: DLL Search Order Hijacking
Hijack Execution Flow: DLL Side-Loading
Hijack Execution Flow: Dylib Hijacking
Hijack Execution Flow: Dynamic Linker Hijacking
Hijack Execution Flow: Executable Installer File Permissions Weakness
Hijack Execution Flow: Path Interception by PATH Environment Variable
Hijack Execution Flow: Path Interception by Search Order Hijacking
Hijack Execution Flow: Path Interception by Unquoted Path
Hijack Execution Flow: Services File Permissions Weakness
Hijack Execution Flow: Services Registry Permissions Weakness
Hijack Execution Flow: KernelCallbackTable
Process Injection
25%
Process Injection: Asynchronous Procedure Call
Process Injection: Dynamic-link Library Injection
Process Injection: Extra Window Memory Injection
Process Injection: Portable Executable Injection
Process Injection: Proc Memory
Process Injection: Process Doppelgänging
Process Injection: Process Hollowing
Process Injection: Ptrace System Calls
Process Injection: Thread Execution Hijacking
Process Injection: Thread Local Storage
Process Injection: VDSO Hijacking
Process Injection: ListPlanting
Scheduled Task/Job
33.3%
Scheduled Task/Job: At (Linux)
Scheduled Task/Job: At
Scheduled Task/Job: Container Orchestration Job
Scheduled Task/Job: Cron
Scheduled Task/Job: Scheduled Task
Scheduled Task/Job: Systemd Timers
Valid Accounts
36.4%
Valid Accounts: Cloud Accounts
Valid Accounts: Default Accounts
Valid Accounts: Domain Accounts
Valid Accounts: Local Accounts
Previous
Next
Machines
Areas and skills from completed Machines
Area of Interest
An overview of all assigned machines areas
ACTIVE DIRECTORY
PROTOCOLS
COMMON SERVICES
VIRTUALIZATION
WIRELESS
Enterprise Network
Active Directory
Progress
2.04%
Protocols
Progress
1.68%
Common Services
Progress
1.21%
Virtualization
Progress
1.13%
Wireless
Progress
1.06%
Skill Progression

Skills that are included in the assigned machines

Skills •
Vulnerabilities
Name
	
Machines completed in date range
	
Growth rate in date range
	
All time Ownership

Improper Input Validation	0	0	
1.06%

Path Normalization	0	0	
0.68%

Insecure Design	0	0	
0.37%

Zone Transfer	0	0	
0.26%

Command Execution	0	0	
0.24%

Directory Traversal	0	0	
0.18%

Buffer Overflow	0	0	
0.16%

Remote Code Execution	0	0	
0.13%

Weak Permissions	0	0	
0.12%

Weak Authentication	0	0	
0.12%

Sensitive Data Exposure	0	0	
0.11%

Arbitrary File Read	0	0	
0.1%

Path Hijacking	0	0	
0.09%

Code Execution	0	0	
0.09%

OS Command Injection	0	0	
0.08%
Items per page:
15
1-15 of 70
By Difficulty
EASY - 0%
INSANE - 0%
VERY EASY - 0%
Show More
By OS
LINUX - 0%
WINDOWS - 0%
SOLARIS - 0%
Show More
Sherlocks
Areas and skills from completed Sherlocks
Skill Progression

Skills that are included in the assigned Sherlocks

Name
	
Sherlocks completed in date range
	
Growth rate in date range
	
All time Ownership

Threat-Intelligence	0	0	
1.27%

Operator	0	0	
0.79%

SOC	0	0	
0.72%

DFIR	0	0	
0.26%

Malware-Analysis	0	0	
0.12%

GamePwn	0	-	
0%

Reversing	0	-	
0%

Threat-Hunting	0	-	
0%

AI/ML	0	-	
0%

Seasonal	0	-	
0%

Cloud	0	-	
0%

OSINT	0	-	
0%

Web	0	-	
0%

Hardware	0	-	
0%

ICS/OT	0	-	
0%

Crypto	0	-	
0%

Blockchain	0	-	
0%

Misc	0	-	
0%

Forensics	0	-	
0%

Pwn	0	-	
0%

Mobile	0	-	
0%

Harden	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Challenges
Areas and skills from completed Challenges
Skill Progression

Skills that are included in the assigned Challenges

Name
	
Challenges completed in date range
	
Growth rate in date range
	
All time Ownership

OSINT	0	0	
0.68%

Web	0	0	
0.05%

Forensics	0	0	
0.02%

ICS/OT	0	-	
0%

Hardware	0	-	
0%

Pwn	0	-	
0%

Malware-Analysis	0	-	
0%

SOC	0	-	
0%

DFIR	0	-	
0%

Blockchain	0	-	
0%

Mobile	0	-	
0%

AI/ML	0	-	
0%

Misc	0	-	
0%

Crypto	0	-	
0%

Threat-Intelligence	0	-	
0%

Threat-Hunting	0	-	
0%

Cloud	0	-	
0%

Seasonal	0	-	
0%

Operator	0	-	
0%

Harden	0	-	
0%

GamePwn	0	-	
0%

Reversing	0	-	
0%
By Difficulty
VERY EASY - 0%
EASY - 0%
INSANE - 0%
Show More
Pro Labs
Areas and skills from completed Pro Labs
Genesis
Penetration Tester Level 1
COLLAPSE
MITRE ATT&CK Coverage on Genesis
Reconnaissance
Active Scanning
Vulnerability Scanning
Gather Victim Host Information
Client Configurations
Software
Gather Victim Identity Information
Credentials
Employee Names
Gather Victim Network Information
DNS
Domain Properties
IP Addresses
Network Topology
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
External Remote Services
Valid Accounts
Default Accounts
Local Accounts
Execution
Command and Scripting Interpreter
PowerShell
Python
Unix Shell
Windows Command Shell
Scheduled Task/Job
Cron
Persistence
Account Manipulation
SSH Authorized Keys
Create or Modify System Process
Windows Service
Hijack Execution Flow
Scheduled Task/Job
Cron
Server Software Component
Web Shell
Valid Accounts
Local Accounts
Progression
Flags
Completion
beaker1
1/31 Flags (+0)
3.23% (+0)
d3xt3r
21/31 Flags (+0)
67.74% (+0)
dimimelehtb
2/31 Flags (+0)
6.45% (+0)
cyb3rvet
2/31 Flags (+0)
6.45% (+0)
Dante
Penetration Tester Level 1
EXPAND
Offshore
Penetration Tester Level 2
EXPAND
RastaLabs
Red Team Operator Level 2
EXPAND
Cybernetics
Red Team Operator Level 2
EXPAND
APTLabs
Red Team Operator Level 3
EXPAND
Breakpoint
Red Team Operator Level 1
EXPAND
Zephyr
Red Team Operator Level 1
EXPAND
FullHouse
Red Team Operator Level 2
EXPAND
Orion
Penetration Tester Level 2
EXPAND
Alchemy
Red Team Operator Level 2
EXPAND
XEN
Red Team Operator Level 1
EXPAND
P.O.O
Red Team Operator Level 1
EXPAND
Hades
Red Team Operator Level 1
EXPAND
RPG
Red Team Operator Level 1
EXPAND
Solar
Red Team Operator Level 1
EXPAND
Eldritch
Red Team Operator Level 1
EXPAND
Ascension
Red Team Operator Level 1
EXPAND
Odyssey
Red Team Operator Level 1
EXPAND
Wanderer
Red Team Operator Level 2
EXPAND
Cloud Labs
Areas and skills from completed Cloud Labs
BlackSky: Hailstorm
Cloud Security Specialist: AWS Offensive
COLLAPSE
MITRE ATT&CK Coverage on BlackSky: Hailstorm
Reconnaissance
Active Scanning
Vulnerability Scanning
Search Victim-Owned Websites
Initial Access
Exploit Public-Facing Application
Execution
Command and Scripting Interpreter
Python
Unix Shell
Native API
Persistence
Account Manipulation
Additional Cloud Credentials
Create Account
Cloud Account
Local Account
Valid Accounts
Cloud Accounts
Local Accounts
Progression
Flags
Completion
ch4p
4/15 Flags (+0)
26.67% (+0)
j1nxt
3/15 Flags (+0)
20% (+0)
d3xt3r
15/15 Flags (+0)
100% (+0)
BlackSky: Cyclone
Cloud Security Specialist: Azure Offensive
EXPAND
BlackSky: Blizzard
Cloud Security Specialist: GCP Offensive
EXPAND