IDLE

Adversary Emulation

Name: Adversary Emulation
Brand: Hacker Labs

INSTANCE: hl-attackadversar · IP: 10.10.26.36 · us-east-1

TIME03:00:00

Kali Linux

Lab not running

Click Launch above to provision a fresh Kali Linux VM. Takes ~30s.

Submit flag

0/5 objectives

Scenario

Safely emulate the APT chain: initial access → PowerShell → credential dumping → lateral movement → persistence → exfil.

Objectives — click to toggle

Step-by-step walkthrough

1
Plan
Pick the ShadowFox emulation plan. Confirm RoE: only target /lab segment.
2
T1190 — Initial access
Exploit the staged Apache Struts target to land a reverse shell on web01.
3
T1059.001 — PowerShell
Drop and execute a benign PoshC2 stager via Invoke-Expression.
4
T1003.001 — LSASS dump
Use Atomic Red Team T1003.001 test #1 to dump LSASS to disk.
5
T1021.002 — Lateral
PsExec to file01 with the recovered hash; install a scheduled task for persistence.
6
T1041 — Exfil
Stage and exfil 50MB over the C2 channel to validate detection thresholds.

Submission requirements

Upload deliverables via the Files tab before claiming points.