New Job-Role Training Path: Active Directory Penetration Tester! Learn More

Your cybersecurity journey starts here.

Develop your skills with guided training and prove your expertise with industry certifications. Become a market-ready cybersecurity professional.

Get certified with HTB

Get certified with HTB

Skyrocket your resume. Land your dream job. Stand out from the competition.

View Job Role Paths
Master new skills

Master new skills

Learn popular offensive and defensive security techniques with skill paths.

View Skill Paths
0
Learners advancing in cybersecurity.
Lake Superior College
NVISO
Security Risk Advisors

Why HTB Academy

Prepare for your future in cybersecurity with interactive, guided training and industry certifications. Learn the skills needed to stand out from the competition.

Guided Courses

For every skill level, from beginner to advanced

  • Threat-informed training approach
  • Real-world examples
  • Skills assessment exercises
  • Discord-based guidance

In-browser Pentesting VM

Tackle all lab exercises from your browser

  • In-browser pentesting VM (Pwnbox) to practice everything you learn
  • No infrastructure or tool requirements

Highly Practical

Practice in a real-world environment

  • Interactive exercises against real-world applications and infrastructure
  • Gain valuable hands-on experience

Get Certified

Stand out in the job market, skyrocket your resume

  • Industry-recognized certifications
  • Realistic examinations mimicking real engagements
  • Commercial-grade report required to pass

Unlimited & Online

On-demand access from everywhere

  • Smaller, easier to digest courses available online
  • Lifetime access to completed courses

Job & Skill Paths

Achieve job proficiency or learn a new skill

  • Acquire job or skill proficiency
  • Develop an outside-the-box thinking mentality

Master a skill

Basic Toolset

Basic Toolset

In this path, modules cover the basic tools needed to be successful in network and web application penetration testing. This is not an exhaustive list...

Medium Path Modules 7 Modules Path Sections 93 Sections
Cracking into Hack the Box

Cracking into Hack the Box

To be successful in any technical information security role, we must have a broad understanding of specialized tools, tactics, and terminology. This p...

Easy Path Modules 3 Modules Path Sections 42 Sections
Local Privilege Escalation

Local Privilege Escalation

Privilege escalation is a vital phase of the penetration testing process, one we may revisit multiple times during an engagement. During our assessmen...

Medium Path Modules 2 Modules Path Sections 61 Sections
Intro to Binary Exploitation

Intro to Binary Exploitation

Binary exploitation is a core tenet of penetration testing, but learning it can be daunting. This is mainly due to the complexity of binary files and...

Hard Path Modules 4 Modules Path Sections 62 Sections
Operating System Fundamentals

Operating System Fundamentals

To succeed in information security, we must have a deep understanding of the Windows and Linux operating systems and be comfortable navigating the com...

Easy Path Modules 4 Modules Path Sections 75 Sections
CREST CPSA/CRT Preparation

CREST CPSA/CRT Preparation

This is a skill path to prepare you for CREST's CPSA and CRT exams. The following CPSA/CRT syllabus areas (IDs) are covered: A1, A2, A3, A4, A5, B1, B...

Medium Path Modules 52 Modules Path Sections 843 Sections
CREST CCT APP Preparation

CREST CCT APP Preparation

This is a skill path to prepare you for CREST's CCT APP exam. The following CCT APP syllabus areas (IDs) are covered: A1, A2, A3, A4, A5, B1, B4, B5,...

Medium Path Modules 44 Modules Path Sections 754 Sections
Information Security Foundations

Information Security Foundations

Information Security is a field with many specialized and highly technical disciplines. Job roles like Penetration Tester & Information Security Analy...

Easy Path Modules 12 Modules Path Sections 204 Sections
CREST CCT INF Preparation

CREST CCT INF Preparation

This is a skill path to prepare you for CREST's CCT INF exam. The following CCT INF syllabus areas (IDs) are covered: A1, A2, A3, A4, A5, A8, A9, A10,...

Hard Path Modules 58 Modules Path Sections 960 Sections
SOC Analyst Prerequisites

SOC Analyst Prerequisites

The SOC Analyst Prerequisites path is designed for those looking to become SOC/Security Analysts. It dives into fundamental IT and Information Securit...

Easy Path Modules 10 Modules Path Sections 173 Sections
Active Directory Enumeration

Active Directory Enumeration

Active Directory (AD) is widely used by companies across all verticals/sectors, non-profits, government agencies, and educational institutions of all...

Hard Path Modules 3 Modules Path Sections 35 Sections
MODULES
0

cybersecurity modules.

Module avatar

Learning Process

The learning process is one of the essential and most important components that is often overlooked. This module does not teach you techniques to lear...

Fundamental
Path Sections 20 Sections
Module avatar

Intro to Academy

Your first stop in Hack The Box Academy to become acquainted with the platform, its features, and its learning process.

Fundamental
Path Sections 8 Sections
Module avatar

Linux Fundamentals

This module covers the fundamentals required to work comfortably with the Linux operating system and shell.

Fundamental
Path Sections 30 Sections
Module avatar

Introduction to Bash Scripting

This module covers the basics needed for working with Bash scripts to automate tasks on Linux systems. A strong grasp of Bash is a fundamental skill...

Easy
Path Sections 10 Sections
Module avatar

DNS Enumeration Using Python

As a penetration tester or red teamer, it is imperative that we understand the tools that we use inside and out and also have the ability to write out...

Medium
Path Sections 11 Sections
Module avatar

Introduction to Networking

As an information security professional, a firm grasp of networking fundamentals and the required components is necessary. Without a strong foundation...

Fundamental
Path Sections 21 Sections
Module avatar

Web Requests

This module introduces the topic of HTTP web requests and how different web applications utilize them to communicate with their backends.

Fundamental
Path Sections 8 Sections
Module avatar

Windows Fundamentals

This module covers the fundamentals required to work comfortably with the Windows operating system.

Fundamental
Path Sections 14 Sections
Module avatar

Introduction to Active Directory

Active Directory (AD) is present in the majority of corporate environments. Due to its many features and complexity, it presents a vast attack surface...

Fundamental
Path Sections 16 Sections
Module avatar

Introduction to Web Applications

In the Introduction to Web Applications module, you will learn all of the basics of how web applications work and begin to look at them from an infor...

Fundamental
Path Sections 17 Sections
Module avatar

Intro to Network Traffic Analysis

Network traffic analysis is used by security teams to monitor network activity and look for anomalies that could indicate security and operational iss...

Medium
Path Sections 15 Sections
Module avatar

Intro to Assembly Language

This module builds the core foundation for Binary Exploitation by teaching Computer Architecture and Assembly language basics.

Medium
Path Sections 24 Sections
Module avatar

Setting Up

This module covers topics that will help us be better prepared before conducting penetration tests. Preparations before a penetration test can often t...

Fundamental
Path Sections 22 Sections
Module avatar

Introduction to Python 3

Automating tedious or otherwise impossible tasks is highly valued during both penetration testing engagements and everyday life. Introduction to Pytho...

Easy
Path Sections 14 Sections
Module avatar

Penetration Testing Process

This module teaches the penetration testing process broken down into each stage and discussed in detail. We will cover many aspects of the role of a p...

Fundamental
Path Sections 15 Sections
Module avatar

Incident Handling Process

Security Incident handling has become a vital part of each organization's defensive strategy, as attacks constantly evolve and successful compromises...

Fundamental
Path Sections 9 Sections
Module avatar

MacOS Fundamentals

This module covers the fundamentals required to work comfortably within the macOS operating system and shell.

Fundamental
Path Sections 11 Sections
Module avatar

Bug Bounty Hunting Process

Bug bounty programs encourage security researchers to identify bugs and submit vulnerability reports. Getting into the world of bug bounty hunting wit...

Easy
Path Sections 6 Sections
Module avatar

Documentation & Reporting

Proper documentation is paramount during any engagement. The end goal of a technical assessment is the report deliverable which will often be presente...

Easy
Path Sections 8 Sections
Module avatar

Introduction to Windows Command Line

As administrators and Pentesters, we may not always be able to utilize a graphical user interface for the actions we need to perform. Introduction to...

Easy
Path Sections 23 Sections
Module avatar

Android Fundamentals

This module introduces fundamental concepts of the Android environment, focusing on the operating system, its security features, and the structure of...

Fundamental
Path Sections 20 Sections
Module avatar

Introduction to C#

Introduction to C# aims to provide a solid foundation to understand and work with C# code. Covering the crucial foundations and more intricate concept...

Easy
Path Sections 21 Sections
Module avatar

Brief Intro to Hardware Attacks

This mini-module concisely introduces hardware attacks, covering Bluetooth risks and attacks, Cryptanalysis Side-Channel Attacks, and vulnerabilities...

Medium
Path Sections 8 Sections
Module avatar

Security Incident Reporting

Tailored to provide a holistic understanding, this Hack The Box Academy module ensures participants are adept at identifying, categorizing, and docume...

Easy
Path Sections 5 Sections
Module avatar

Network Foundations

This course introduces the basic concepts essential to understanding the world of networking. Students will learn about various network types such as...

Fundamental
Path Sections 12 Sections
Module avatar

Fundamentals of AI

This module provides a comprehensive guide to the theoretical foundations of Artificial Intelligence (AI). It covers various learning paradigms, inclu...

Medium
Path Sections 24 Sections
Module avatar

Applications of AI in InfoSec

This module is a practical introduction to building AI models that can be applied to various infosec domains. It covers setting up a controlled AI env...

Medium
Path Sections 25 Sections
Module avatar

Introduction to Information Security

This theoretical module provides a comprehensive introduction to the foundational components of information security, focusing on the structure and op...

Fundamental
Path Sections 24 Sections
Module avatar

Hacking WordPress

WordPress is an open-source Content Management System (CMS) that can be used for multiple purposes.

Easy
Path Sections 16 Sections
Module avatar

Network Enumeration with Nmap

Nmap is one of the most used networking mapping and discovery tools because of its accurate results and efficiency. The tool is widely used by both of...

Easy
Path Sections 12 Sections
Module avatar

Cracking Passwords with Hashcat

This module covers the fundamentals of password cracking using the Hashcat tool.

Medium
Path Sections 14 Sections
Module avatar

Active Directory LDAP

This module provides an overview of Active Directory (AD), introduces core AD enumeration concepts, and covers enumeration with built-in tools.

Medium
Path Sections 12 Sections
Module avatar

File Inclusion

File Inclusion is a common web application vulnerability, which can be easily overlooked as part of a web application's functionality.

Medium
Path Sections 11 Sections
Module avatar

File Transfers

During an assessment, it is very common for us to transfer files to and from a target system. This module covers file transfer techniques leveraging t...

Medium
Path Sections 10 Sections
Module avatar

Kerberos Attacks

Kerberos is an authentication protocol that allows users to authenticate and access services on a potentially insecure network. Due to its prevalence...

Hard
Path Sections 23 Sections
Module avatar

OSINT: Corporate Recon

OSINT (Open-source Intelligence) is a crucial stage of the penetration testing process. A thorough examination of publicly available information can i...

Hard
Path Sections 23 Sections
Module avatar

Stack-Based Buffer Overflows on Linux x86

Buffer overflows are common vulnerabilities in software applications that can be exploited to achieve remote code execution (RCE) or perform a Denial-...

Medium
Path Sections 13 Sections
Module avatar

SQL Injection Fundamentals

Databases are an important part of web application infrastructure and SQL (Structured Query Language) to store, retrieve, and manipulate information s...

Medium
Path Sections 17 Sections
Module avatar

Using the Metasploit Framework

The Metasploit Framework is an open-source set of tools used for network enumeration, attacks, testing security vulnerabilities, evading detection, pe...

Easy
Path Sections 15 Sections
Module avatar

Whitebox Pentesting 101: Command Injection

This module focuses on discovering Command Injection vulnerabilities in NodeJS servers and exploiting them to control the server.

Hard
Path Sections 19 Sections
Module avatar

Linux Privilege Escalation

Privilege escalation is a crucial phase during any security assessment. During this phase, we attempt to gain access to additional users, hosts, and r...

Easy
Path Sections 28 Sections
Module avatar

Attacking Web Applications with Ffuf

This module covers the fundamental enumeration skills of web fuzzing and directory brute forcing using the Ffuf tool. The techniques learned in this m...

Easy
Path Sections 13 Sections
Module avatar

Login Brute Forcing

The module contains an exploration of brute-forcing techniques, including the use of tools like Hydra and Medusa, and the importance of strong passwor...

Easy
Path Sections 13 Sections
Module avatar

SQLMap Essentials

The SQLMap Essentials module will teach you the basics of using SQLMap to discover various types of SQL Injection vulnerabilities, all the way to the...

Easy
Path Sections 11 Sections
Module avatar

Windows Privilege Escalation

After gaining a foothold, elevating our privileges will provide more options for persistence and may reveal information stored locally that can furthe...

Medium
Path Sections 33 Sections
Module avatar

Active Directory PowerView

This module covers AD enumeration focusing on the PowerView and SharpView tools. We will cover various techniques for enumerating key AD objects that...

Medium
Path Sections 9 Sections
Module avatar

Active Directory BloodHound

This module covers AD enumeration focusing on the BloodHound tool. We will cover various techniques for enumerating key AD objects that will inform ou...

Medium
Path Sections 14 Sections
Module avatar

Getting Started

This module covers the fundamentals of penetration testing and an introduction to Hack The Box.

Fundamental
Path Sections 23 Sections
Module avatar

Broken Authentication

Authentication is probably the most straightforward and prevalent measure used to secure access to resources, and it's the first line of defense again...

Medium
Path Sections 14 Sections
Module avatar

Using CrackMapExec

Active Directory presents a vast attack surface and often requires us to use many different tools during an assessment. The CrackMapExec tool, known a...

Medium
Path Sections 27 Sections
Module avatar

Stack-Based Buffer Overflows on Windows x86

This module is your first step into Windows Binary Exploitation, and it will teach you how to exploit local and remote buffer overflow vulnerabilities...

Medium
Path Sections 11 Sections
Module avatar

Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) vulnerabilities are among the most common web application vulnerabilities. An XSS vulnerability may allow an attacker to ex...

Easy
Path Sections 10 Sections
Module avatar

Vulnerability Assessment

This module introduces the concept of Vulnerability Assessments. We will review the differences between vulnerability assessments and penetration test...

Easy
Path Sections 17 Sections
Module avatar

Command Injections

Command injection vulnerabilities can be leveraged to compromise a hosting server and its entire network. This module will teach you how to identify a...

Medium
Path Sections 12 Sections
Module avatar

Using Web Proxies

Web application penetration testing frameworks are an essential part of any web penetration test. This module will teach you two of the best framework...

Easy
Path Sections 15 Sections
Module avatar

Footprinting

This module covers techniques for footprinting the most commonly used services in almost all enterprise and business IT infrastructures. Footprinting...

Medium
Path Sections 21 Sections
Module avatar

Attacking Common Applications

Penetration Testers can come across various applications, such as Content Management Systems, custom web applications, internal portals used by develo...

Medium
Path Sections 33 Sections
Module avatar

Shells & Payloads

Gain the knowledge and skills to identify and use shells & payloads to establish a foothold on vulnerable Windows & Linux systems. This module utilize...

Medium
Path Sections 17 Sections
Module avatar

Attacking Common Services

Organizations regularly use a standard set of services for different purposes. It is vital to conduct penetration testing activities on each service i...

Medium
Path Sections 19 Sections
Module avatar

Web Attacks

This module covers three common web vulnerabilities, HTTP Verb Tampering, IDOR, and XXE, each of which can have a significant impact on a company's sy...

Medium
Path Sections 18 Sections
Module avatar

File Upload Attacks

Arbitrary file uploads are among the most critical web vulnerabilities. These flaws enable attackers to upload malicious files, execute arbitrary comm...

Medium
Path Sections 11 Sections
Module avatar

Active Directory Enumeration & Attacks

Active Directory (AD) is the leading enterprise domain management suite, providing identity and access management, centralized domain administration,...

Medium
Path Sections 36 Sections
Module avatar

Information Gathering - Web Edition

This module equips learners with essential web reconnaissance skills, crucial for ethical hacking and penetration testing. It explores both active and...

Easy
Path Sections 19 Sections
Module avatar

Server-side Attacks

A backend that handles user-supplied input insecurely can lead to devastating security vulnerabilities such as sensitive information disclosure and re...

Medium
Path Sections 19 Sections
Module avatar

Password Attacks

Passwords are still the primary method of authentication in corporate networks. If strong password policies are not enforced, users often choose weak,...

Medium
Path Sections 26 Sections
Module avatar

Session Security

Maintaining and keeping track of a user's session is an integral part of web applications. It is an area that requires extensive testing to ensure it...

Medium
Path Sections 14 Sections
Module avatar

Pivoting, Tunneling, and Port Forwarding

Once a foothold is gained during an assessment, it may be in scope to move laterally and vertically within a target network. Using one compromised mac...

Medium
Path Sections 18 Sections
Module avatar

Web Service & API Attacks

Web services and APIs are frequently exposed to provide certain functionalities in a programmatic way between heterogeneous devices and software compo...

Medium
Path Sections 13 Sections
Module avatar

Attacking Enterprise Networks

We often encounter large and complex networks during our assessments. We must be comfortable approaching an internal or external network, regardless o...

Medium
Path Sections 14 Sections
Module avatar

Introduction to Deserialization Attacks

In this module, we will explore deserialization attacks with specific examples in Python and PHP.

Hard
Path Sections 15 Sections
Module avatar

Attacking Authentication Mechanisms

Authentication plays an essential role in almost every web application. If a vulnerability arises in the application's authentication mechanism, it co...

Medium
Path Sections 20 Sections
Module avatar

Introduction to NoSQL Injection

In this module, we will look at exploiting NoSQL injection vulnerabilities, specifically MongoDB, with examples in Python, PHP, and Node.JS.

Medium
Path Sections 12 Sections
Module avatar

Blind SQL Injection

In this module, we cover blind SQL injection attacks and MSSQL-specific attacks.

Hard
Path Sections 16 Sections
Module avatar

Game Hacking Fundamentals

This module serves as an introduction to fundamental Game Hacking concepts. You will learn how to find and change memory values in a running game as w...

Medium
Path Sections 12 Sections
Module avatar

HTTPs/TLS Attacks

This module covers details on Transport Layer Security (TLS) and how it helps to make HTTP secure with the widely used HTTPS. That includes how TLS wo...

Medium
Path Sections 15 Sections
Module avatar

Wired Equivalent Privacy (WEP) Attacks

In this module, we delve into Wired Equivalent Privacy (WEP) and the various attacks that can compromise it. We'll explore how to identify access poin...

Medium
Path Sections 13 Sections
Module avatar

Attacking Wi-Fi Protected Setup (WPS)

In this module, we delve into the intricacies of WPS, uncovering the common vulnerabilities that plague this technology. From brute-force attacks to m...

Medium
Path Sections 13 Sections
Module avatar

Advanced SQL Injections

This module covers advanced SQL injection techniques with a focus on white-box testing, Java/Spring and PostgreSQL.

Hard
Path Sections 12 Sections
Module avatar

Abusing HTTP Misconfigurations

This module covers three common HTTP vulnerabilities: Web Cache Poisoning, Host Header Vulnerabilities, and Session Puzzling or Session Variable Overl...

Hard
Path Sections 20 Sections
Module avatar

HTTP Attacks

This module covers three HTTP vulnerabilities: CRLF Injection, HTTP Request Smuggling, and HTTP/2 Downgrading. These vulnerabilities can arise on the...

Hard
Path Sections 18 Sections
Module avatar

Injection Attacks

This module covers three injection attacks: XPath injection, LDAP injection, and HTML injection in PDF generation libraries. While XPath and LDAP inje...

Medium
Path Sections 15 Sections
Module avatar

Whitebox Attacks

This module explores several web vulnerabilities from a whitebox approach: Prototype Pollution, Timing Attacks & Race Conditions, and those arising fr...

Hard
Path Sections 15 Sections
Module avatar

Game Reversing & Modding

This module serves as a follow-up to the Game Hacking Fundamentals module. You will learn how to persist Cheat Engine Scripts by scanning for byte arr...

Medium
Path Sections 20 Sections
Module avatar

DACL Attacks I

Discretionary Access Control Lists (DACLs), found within security descriptors, are a fundamental component of the security model of Windows and Active...

Hard
Path Sections 7 Sections
Module avatar

Android Application Static Analysis

This module provides a comprehensive introduction to the static analysis of Android applications—an essential skill for mobile security professionals,...

Medium
Path Sections 15 Sections
Module avatar

Wi-Fi Penetration Testing Basics

In today's digital age, wireless networks are ubiquitous, connecting countless devices in homes, businesses, and public spaces. With this widespread c...

Medium
Path Sections 16 Sections
Module avatar

Modern Web Exploitation Techniques

This module covers advanced web concepts and exploitation techniques, including performing DNS Rebinding to bypass faulty SSRF filters and the Same-Or...

Hard
Path Sections 18 Sections
Module avatar

NTLM Relay Attacks

The NTLM authentication protocol is commonly used within Windows-based networks to facilitate authentication between clients and servers. However, NTL...

Hard
Path Sections 10 Sections
Module avatar

Advanced XSS and CSRF Exploitation

Modern web browsers and applications utilize a variety of security measures to protect against CSRF and XSS vulnerabilities, rendering their exploitat...

Medium
Path Sections 17 Sections
Module avatar

ADCS Attacks

This module focuses on privilege escalation attacks by abusing misconfigurations in Active Directory Certificate Services.

Hard
Path Sections 19 Sections
Module avatar

Advanced Deserialization Attacks

This module focuses on developing custom exploits for .NET deserialization vulnerabilities from a whitebox perspective.

Hard
Path Sections 13 Sections
Module avatar

Intro to C2 Operations with Sliver

Active Directory is present in over 90% of corporate environments and it is the prime target for attacks. This module covers the attack chain from get...

Hard
Path Sections 19 Sections
Module avatar

Supply Chain Attacks

This module provides a detailed overview of Supply Chain Attacks, covering hardware and software aspects. It explores the impact of supply chains, the...

Hard
Path Sections 18 Sections
Module avatar

Intro to Whitebox Pentesting

Whitebox penetration testing enables thorough testing to identify various hard-to-find vulnerabilities. This module covers the process of whitebox pen...

Hard
Path Sections 18 Sections
Module avatar

Android Application Dynamic Analysis

This module focuses on the real-time analysis and manipulation of Android applications to uncover vulnerabilities that arise during execution. By exam...

Medium
Path Sections 16 Sections
Module avatar

Active Directory Trust Attacks

Active Directory (AD) is the leading solution for organizations to provide identity and access management, centralized domain administration, authenti...

Hard
Path Sections 21 Sections
Module avatar

Introduction to Windows Evasion Techniques

In this module we will cover the basics of evading antivirus solutions (Windows Defender specifically) from an attackers point-of-view.

Hard
Path Sections 14 Sections
Module avatar

DACL Attacks II

In this second module on Discretionary Access Control Lists (DACLs), we delve into sophisticated attack techniques and strategies within Windows Activ...

Hard
Path Sections 9 Sections
Module avatar

Introduction to Binary Fuzzing

Fuzzing is a powerful software testing technique that deliberately introduces chaos into your applications. By bombarding your code with unexpected or...

Hard
Path Sections 20 Sections
Module avatar

Windows Lateral Movement

Windows lateral movement involves techniques to navigate and control remote systems within a network, primarily after gaining initial access. It is cr...

Medium
Path Sections 14 Sections
Module avatar

MSSQL, Exchange, and SCCM Attacks

This module covers attacks targeting tightly incorporated technologies in Active Directory environments such as MSSQL, Exchange, and SCCM, and how to...

Hard
Path Sections 19 Sections
Module avatar

API Attacks

Web APIs serve as crucial connectors across diverse entities in the modern digital landscape. However, their extensive functionality also exposes them...

Medium
Path Sections 13 Sections
Module avatar

Attacking GraphQL

GraphQL is a query language for APIs as an alternative to REST APIs. Clients are able to request data through GraphQL queries. If improperly configure...

Medium
Path Sections 9 Sections
Module avatar

Android Application Malware Analysis

This module offers a hands-on introduction to the world of Android malware analysis. It covers common malware types, the ways they abuse system permis...

Hard
Path Sections 7 Sections
Module avatar

Web Fuzzing

In this module, we explore the essential techniques and tools for fuzzing web applications, an essential practice in cybersecurity for identifying hid...

Easy
Path Sections 12 Sections
Module avatar

Attacking WPA/WPA2 Wi-Fi Networks

This module explores the security challenges of WPA and WPA2 Wi-Fi networks, focusing on WPA/WPA2-Personal and WPA/WPA2-Enterprise. Although these pro...

Medium
Path Sections 15 Sections
Module avatar

Wi-Fi Evil Twin Attacks

This module explores the concept of evil twin attacks on Wi-Fi networks, focusing on WPA2, WPA3, and WPA-Enterprise. Despite these protocols being des...

Medium
Path Sections 16 Sections
Module avatar

Introduction to Red Teaming AI

This module provides a comprehensive introduction to the world of red teaming Artificial Intelligence (AI) and systems utilizing Machine Learning (ML)...

Medium
Path Sections 11 Sections
Module avatar

Introduction to Penetration Testing

In this module, we will get into the fundamentals of penetration testing, a critical aspect of cybersecurity theory that explains how professionals in...

Fundamental
Path Sections 21 Sections
Module avatar

Pentest in a Nutshell

This module focuses on providing a detailed, guided simulation of a real penetration test, emphasizing the fine details of the penetration testing pro...

Easy
Path Sections 24 Sections
Module avatar

Prompt Injection Attacks

This module comprehensively introduces one of the most prominent attacks on large language models (LLMs): Prompt Injection. It introduces prompt injec...

Medium
Path Sections 11 Sections
Module avatar

Bypassing Wi-Fi Captive Portals

In this module, we delve into a range of methods for identifying and bypassing captive portals, employing both indirect and direct exploitation techni...

Medium
Path Sections 17 Sections
Module avatar

AI Data Attacks

This module explores the intersection of Data and Artificial Intelligence, exposing how vulnerabilities within AI data pipelines can be exploited, ult...

Hard
Path Sections 25 Sections
Module avatar

LLM Output Attacks

In this module, we will explore different LLM output vulnerabilities resulting from improper handling of LLM outputs and insecure LLM applications. We...

Medium
Path Sections 14 Sections
Module avatar

Wi-Fi Password Cracking Techniques

Password cracking is a cornerstone of wireless penetration testing, as many real-world assessments hinge on the strength of the Wi-Fi password and our...

Medium
Path Sections 16 Sections
Module avatar

Secure Coding 101: JavaScript

Learn how to improve your JavaScript code's security through Code Review, Static/Dynamic Analysis, Vulnerability Identification, and Patching.

Hard
Path Sections 17 Sections
Module avatar

JavaScript Deobfuscation

This module will take you step-by-step through the fundamentals of JavaScript Deobfuscation until you can deobfuscate basic JavaScript code and unders...

Easy
Path Sections 11 Sections
Module avatar

Security Monitoring & SIEM Fundamentals

This module provides a concise yet comprehensive overview of Security Information and Event Management (SIEM) and the Elastic Stack. It demystifies th...

Easy
Path Sections 11 Sections
Module avatar

Introduction to Threat Hunting & Hunting With Elastic

This module initially lays the groundwork for understanding Threat Hunting, ranging from its basic definition, to the structure of a threat hunting te...

Medium
Path Sections 6 Sections
Module avatar

Windows Event Logs & Finding Evil

This module covers the exploration of Windows Event Logs and their significance in uncovering suspicious activities. Throughout the course, we delve i...

Medium
Path Sections 6 Sections
Module avatar

Understanding Log Sources & Investigating with Splunk

This module provides a comprehensive introduction to Splunk, focusing on its architecture and the creation of effective detection-related SPL (Search...

Medium
Path Sections 6 Sections
Module avatar

Working with IDS/IPS

This module offers an in-depth exploration of Suricata, Snort, and Zeek, covering both rule development and intrusion detection. We'll guide you throu...

Medium
Path Sections 11 Sections
Module avatar

Introduction to Malware Analysis

This module offers an exploration of malware analysis, specifically targeting Windows-based threats. The module covers Static Analysis utilizing Linux...

Hard
Path Sections 9 Sections
Module avatar

Intermediate Network Traffic Analysis

Through network traffic analysis, this module sharpens skills in detecting link layer attacks such as ARP anomalies and rogue access points, identifyi...

Easy
Path Sections 18 Sections
Module avatar

Detecting Windows Attacks with Splunk

This Hack The Box Academy module is focused on pinpointing attacks on Windows and Active Directory. Utilizing Splunk as the cornerstone for investigat...

Medium
Path Sections 23 Sections
Module avatar

YARA & Sigma for SOC Analysts

This Hack The Box Academy module covers how to create YARA rules both manually and automatically and apply them to hunt threats on disk, live processe...

Easy
Path Sections 11 Sections
Module avatar

Introduction to Digital Forensics

Dive into Windows digital forensics with Hack The Box Academy's "Introduction to Digital Forensics" module. Gain mastery over core forensic concepts a...

Medium
Path Sections 8 Sections
Module avatar

Parameter Logic Bugs

This 'secure coding' module teaches how to identify logic bugs through code review and analysis, and covers three types of logic bugs caused by user i...

Hard
Path Sections 21 Sections
Module avatar

User Behavior Forensics

This module covers the critical aspects of user behavior analysis by exploring Windows artifacts. It is specifically designed for digital forensic ana...

Medium
Path Sections 21 Sections
Module avatar

Detecting Access Token Manipulation Attacks

This module focuses on Windows privilege escalation techniques through access token manipulation. It covers various topics, including Windows processe...

Hard
Path Sections 17 Sections
Module avatar

Malicious Document Analysis

This module is focussed on understanding different document formats, and techniques for identifying and analyzing the threats posed by malicious docum...

Medium
Path Sections 22 Sections
Module avatar

Process Injection Attacks and Detection

This module focuses on understanding the process injection techniques attackers use to execute malicious code within the context of legitimate process...

Hard
Path Sections 31 Sections
Module avatar

Introduction to Dynamic Analysis with WinDbg

This module covers the fundamentals of using the debugger and examines various practical cases where dynamic analysis helps uncover malware TTPs on Wi...

Hard
Path Sections 15 Sections
Module avatar

Windows Kernel Telemetry & Detection Techniques

This module offers a deep dive into Windows kernel telemetry mechanisms from a defensive security perspective, covering a broad spectrum of telemetry...

Hard
Path Sections 25 Sections
Module avatar

Active Directory Hardening - Recon & Initial Access

Active Directory (AD) presents a vast attack surface and can be challenging to secure and control. Small changes can have a cascading effect, introduc...

Medium
Path Sections 8 Sections

50k+ 5 star reviews

15+ paths

To obtain skill or job proficiency

135+ modules

From a diverse pool of instructors

1135+ labs

To obtain hands-on experience

Hack The Box is where my infosec journey started. The main question people usually have is “Where do I begin?”. At NVISO, we provide new team members access to the HTB Academy, in which they complete modules and follow tracks focused on a specific topic (e.g. AD, Web Pentesting, Cryptography, etc.). This way, new NVISO-members build a strong knowledge base in these subjects.

Firat Acar - Cybersecurity Consultant/Red Teamer

We immediately started using HTB Academy after we signed up and found that the modules challenge the students to work hard to successfully reach an end goal. Now, we have students getting hired only a month after starting to use HTB! We're excited to see this trend continue the rest of the academic year.

Matthew McCullough - Lead Instructor

Thank you HTB family for all of the hard work and countless hours that have gone into developing the premier content in HTB Academy. I am grateful to have an affordable training resource that is helping to fill the gap between what we are taught in school and what will actually be required of us in the field.

@jhillman - Learner

Read more Academy testimonials

Learn cybersecurity,
invest in your
future career skills