HTB: Beyond this Module

Ryan Yager
9 min readDec 26, 2023

--

Throughout HTB Academy Penetration Tester Job Role Path, each module shows a beyond this module boxes. To put all of the boxes in one place here you go:

INFORMATION GATHERING WEB EDITION:

Prolabs
Cybernetics A
APTLabs A

FOOTPRINTING:

MACHINES

Legacy E
Sneaky M
Jail I
SolidState M
Tally H
Aragog M
Olympus M
Reel H
Mischief I
Active E
Carrier M
Ethereal I
RedCross M
Conceal H
Sizzle I
FriendZone E
Querier M
Fortune I
Arkham M
Bastion E
Luke M
Chainsaw H
Scavenger H
Zetta H
Nest E
Oouch H
Remote E
Intense H
Sharp H
Attended I
Tentacle H
Atom M
pivotapi I
Pit M
Antique E
Return E
Shibboleth M
Pandora E
Flustered M

Prolabs
RastaLabs I
Dante I
APTLabs A

FILE TRANSFERS

Machines
Rabbit I
Dropzone H
Hackback I
Sniper M
Feline H
Reel2 H
Cereal H
Sharp H
Proper H
Hancliffe H

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A

SHELLS AND PAYLOADS

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

USING THE METASPLOIT FRAMEWORK

Machines
Lame E
Legacy E
Optimum E
Arctic E
Holiday H
Bank E
Blue E
Nineveh M
Apocalyst M
Kotarak H
Shocker E
Sense E
Jeeves M
Nibbles E
Chatterbox M
Rabbit I
Fighter I
Dropzone H
Bounty E
Irked E
Traverxec E
Control H
Resolute M
Remote E
ServMon E
Blunder E
Fuse M
ScriptKiddie E
Atom M
Static H
Explore E
Driver E
Jarmis H
Acute H
OpenSource E

Prolabs
RastaLabs I
Dante I
Zephyr I

PASSWORD ATTACKS:

Machines
Joker H
Blocky E
Nineveh M
Mirai E
SolidState M
Kotarak H
Minion I
Node M
Tally H
Jeeves M
Ariekei I
Fulcrum I
Inception M
CrimeStoppers H
Nibbles E
Nightmare I
Chatterbox M
Falafel H
Aragog M
Bart M
Stratosphere M
Silo M
Poison M
Rabbit I
Olympus M
Sunday E
Dropzone H
Jerry E
Hawk M
Dab H
SecNotes M
Giddy M
Ypuffy M
Access E
Ethereal I
Frolic E
Zipper H
Curling E
BigHead I
Teacher E
Lightweight M
Chaos M
Conceal H
Sizzle I
Help E
FluJab H
FriendZone E
Querier M
Hackback I
Netmon E
Fortune I
Helpline H
Kryptos I
OneTwoSeven H
Bastion E
Ghoul H
Ellingson H
Luke M
Haystack E
Scavenger H
Zetta H
Wall M
Json M
Sniper M
Registry H
Mango M
Postman E
AI M
Traverxec E
Control H
Obscurity M
PlayerTwo I
OpenAdmin E
Monteverde M
Patents H
Sauna E
Multimaster I
Cascade M
ForwardSlash H
Magic M
Quick H
Blunder E
SneakyMailer M
Unbalanced H
Worker M
Omni E
Passage M
CrossFit I
Doctor E
Reel2 H
Jewel M
Bucket M
APT I
Academy E
Luanne E
Ready M
Delivery E
Tenet M
Sink I
Breadcrumbs H
Proper H
Armageddon E
Schooled M
Atom M
pivotapi I
Pit M
Explore E
Intelligence M
Pikaboo H
Writer M
Developer H
EarlyAccess H
Bolt M
Driver E
Hancliffe H
Devzat M
Overflow H
Toby I
Shibboleth M
Unicode M
Fingerprint I
Timing M
Search H
Scanned I
Acute H
Undetected M
GoodGames E
Object H
Catch M
Timelapse E
Talkative H
Hathor I
Noter M
Response I
OpenSource E
Seventeen H
StreamIO M
Trick E
Faculty M
Extension H
Moderators H
Shoppy E
Awkward M

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

ATTACKING COMMON SERVICES

Machines
Legacy E
SolidState M
Tally H
Aragog M
Olympus M
Reel H
Active E
Ethereal I
RedCross M
Conceal H
Sizzle I
FriendZone E
Querier M
Arkham M
Bastion E
Luke M
Chainsaw H
Heist E
Scavenger H
Zetta H
Resolute M
Monteverde M
Nest E
Oouch H
Multimaster I
ServMon E
Fuse M
Worker M
Reel2 H
APT I
Sharp H
Attended I
Tentacle H
Atom M
pivotapi I
Intelligence M
Bolt M
Return E
Search H
Flustered M
StreamIO M

Tracks
Beginner Track E

Prolabs
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

Pivoting, Tunneling, and Port Forwarding

Machines
Fulcrum I
Poison M
Reddish I
Vault M
BigHead I
Hackback I
Helpline H
Kryptos I
OneTwoSeven H
Ghoul H
PlayerTwo I
OpenAdmin E
Oouch H
ForwardSlash H
ServMon E
Bucket M
Static H
Horizontall E
Antique E
Fingerprint I
Pandora E
AdmirerToo H
Flustered M
Perspective I
Talkative H
OpenSource E
Carpediem H
Toby I

Tracks
Containers and Pivoting H

Endgames
Ascension

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

Active Directory Enumeration & Attacks

Machines
Mantis H
Fulcrum I
Rabbit I
Reel H
Active E
Sizzle I
Luke M
Heist E
Forest E
Resolute M
Monteverde M
Sauna E
Multimaster I
Cascade M
ServMon E
Blackfield H
Fuse M
Worker M
Reel2 H
APT I
Tentacle H
pivotapi I
Intelligence M
Bolt M
Return E
Search H
Acute H
Object H
Timelapse E
Hathor I
StreamIO M
Scrambled M

Tracks
Active Directory 101 M

Endgames
P.O.O.
Xen
RPG

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

Attacking Web Applications with Ffuf

MACHINES

Beep E
Blocky E
Nineveh M
Shrek H
Mirai E
Mantis H
Kotarak H
Minion I
Sense E
Enterprise M
Jeeves M
FluxCapacitor M
CrimeStoppers H
Nibbles E
Nightmare I
Falafel H
Valentine E
Bart M
Stratosphere M
Rabbit I
Canape M
Fighter I
TartarSauce M
DevOops M
Bounty E
Dab H
Giddy M
Carrier M
Frolic E
Vault M
RedCross M
BigHead I
Chaos M
Conceal H
Help E
FriendZone E
Hackback I
Kryptos I
Scavenger H
Bitlab M
Wall M
Registry H
Obscurity M
PlayerTwo I
OpenAdmin E
Patents H
Sauna E
Compromised H
CrossFit I
Reel2 H
Cereal H
Luanne E
Proper H
CrossFitTwo I
Monitors H
Writer M
Horizontall E
EarlyAccess H
Gobox M
Bolt M
Hancliffe H
Jarmis H
Devzat M
Toby I
Fingerprint I
AdmirerToo H
Meta M
Flustered M
Undetected M
Epsilon M
Retired M
Noter M
Carpediem H
Extension H
Moderators H
Shoppy E
Awkward M

Prolabs
Offshore I
Dante I
APTLabs A

Login Brute Forcing

Machines
Joker H
Nineveh M
Mirai E
SolidState M
Minion I
Node M
Tally H
Jeeves M
Ariekei I
Inception M
Nibbles E
Nightmare I
Falafel H
Bart M
Stratosphere M
Silo M
Rabbit I
Olympus M
Sunday E
Jerry E
Hawk M
Dab H
Giddy M
Ethereal I
Frolic E
Zipper H
BigHead I
Teacher E
Lightweight M
Chaos M
Conceal H
Sizzle I
Help E
FluJab H
Querier M
Hackback I
Netmon E
Helpline H
Kryptos I
OneTwoSeven H
Bastion E
Ghoul H
Ellingson H
Luke M
Zetta H
Wall M
Json M
Sniper M
Registry H
Postman E
Traverxec E
Control H
Obscurity M
PlayerTwo I
OpenAdmin E
Monteverde M
Sauna E
Multimaster I
Quick H
Blunder E
Worker M
Omni E
Passage M
Doctor E
Reel2 H
Jewel M
Bucket M
APT I
Luanne E
Delivery E
Proper H
Armageddon E
Intelligence M
Writer M
EarlyAccess H
Bolt M
Driver E
Overflow H
Toby I
Search H
Acute H
Undetected M
GoodGames E
Timelapse E
Noter M
StreamIO M
Trick E
Extension H
Moderators H
Awkward M

Prolabs
RastaLabs I
Cybernetics A
Dante I
APTLabs A

SQL INJECTION FUNDAMENTALS

Machines
Sneaky M
Holiday H
Europa M
Charon H
Enterprise M
Nightmare I
Falafel H
Rabbit I
Fighter I
SecNotes M
Oz H
Giddy M
RedCross M
Help E
FluJab H
Unattended M
Writeup E
Jarvis M
Scavenger H
Zetta H
Bankrobber I
AI M
Control H
Fatty I
Multimaster I
Magic M
Cache M
Intense H
Unbalanced H
Breadcrumbs H
Proper H
CrossFitTwo I
Toolbox E
Monitors H
Spider H
Writer M
EarlyAccess H
Validation E
Overflow H
Union M
Pandora E
GoodGames E
Seventeen H
StreamIO M
Trick E
Faculty M
Shoppy E

Challenges
Cartographer E

Prolabs
Offshore I

Cross-Site Scripting (XSS)

Machines
Holiday H
RedCross M
Bankrobber I
Book M
RopeTwo I
CrossFit I
Cereal H
Schooled M
EarlyAccess H
Stacked I
Fingerprint I
OverGraph H
Extension H

File Inclusion

Machines
Beep E
Nineveh M
CrimeStoppers H
Poison M
TartarSauce M
Smasher I
Waldo M
BigHead I
FriendZone E
LaCasaDePapel E
Unattended M
Ghoul H
Haystack E
Player H
RE H
Sniper M
OpenAdmin E
Patents H
Fatty I
ForwardSlash H
ServMon E
Blunder E
Tabby E
Reel2 H
Breadcrumbs H
Proper H
Monitors H
Pikaboo H
Writer M
EarlyAccess H
Devzat M
Spooktrol H
Unicode M
Backdoor E
Fingerprint I
Timing M
Paper E
OverGraph H
Response I
OpenSource E
Seventeen H
StreamIO M
Trick E
Faculty M
Moderators H
Ambassador M
Awkward M

Prolabs
Dante I

File Upload Attacks

Machines
Devel E
Popcorn M
Arctic E
Grandpa E
Granny E
October M
Bank E
Charon H
CrimeStoppers H
Jerry E
SecNotes M
Vault M
Help E
OneTwoSeven H
Networked E
Bitlab M
Magic M
Cache M
Blunder E
Compromised H
Bucket M
Breadcrumbs H
TheNotebook M
Love E
Pit M
Spooktrol H
Timing M
Perspective I
Hathor I
OpenSource E
Carpediem H
Moderators H

Prolabs
Dante I

Command Injections

Machines
Optimum E
Bastard M
Cronos M
Haircut M
Holiday H
Europa M
Charon H
Ariekei I
Bashed E
FluxCapacitor M
Mischief I
Reddish I
Carrier M
RedCross M
Hackback I
Fortune I
Helpline H
Smasher2 I
Jarvis M
Haystack E
Craft M
Networked E
Bankrobber I
AI M
OpenAdmin E
Oouch H
Multimaster I
CrossFit I
ScriptKiddie E
Spectra E
Monitors H
dynstr M
Previse E
EarlyAccess H
Stacked I
Secret E
Spooktrol H
Fingerprint I
Union M
AdmirerToo H
Meta M
RouterSpace E
Catch M
Perspective I
Extension H
Photobomb E
Awkward M

Prolabs
Offshore I

Web Attacks

Machines
Tenten M
Fulcrum I
Aragog M
DevOops M
Helpline H
RE H
Wall M
Patents H
ForwardSlash H
Magic M
Spider H
Cap E
BountyHunter E
RedPanda E
Moderators H

Attacking Common Applications

Machines
Bastard M
Kotarak H
Enterprise M
Jeeves M
Jerry E
Hawk M
Curling E
Ghoul H
Bitlab M
AI M
Tabby E
RopeTwo I
Feline H
Doctor E
Laboratory E
Ready M
Ophiuchi M
Armageddon E
Seal M
LogForge M
Object H

Prolabs
Offshore I
Cybernetics A
Dante I
Zephyr I

Linux Privilege Escalation

Machines
Popcorn M
Beep E
Tenten M
Cronos M
October M
Brainfuck I
Lazy M
Sneaky M
Joker H
Haircut M
Holiday H
Bank E
Europa M
Calamity H
Charon H
Jail I
Blocky E
Nineveh M
Apocalyst M
Shrek H
Mirai E
SolidState M
Kotarak H
Shocker E
Node M
Enterprise M
Ariekei I
Fulcrum I
Inception M
Bashed E
FluxCapacitor M
CrimeStoppers H
Nibbles E
Nightmare I
Falafel H
Aragog M
Valentine E
Stratosphere M
Celestial M
Rabbit I
Canape M
Olympus M
TartarSauce M
DevOops M
Smasher I
Mischief I
Hawk M
Reddish I
Waldo M
Dab H
Oz H
Carrier M
Frolic E
Zipper H
Curling E
Vault M
RedCross M
Irked E
Teacher E
Lightweight M
Chaos M
Help E
FluJab H
CTF I
FriendZone E
LaCasaDePapel E
Kryptos I
Unattended M
OneTwoSeven H
Ghoul H
SwagShop E
Ellingson H
Luke M
Smasher2 I
Writeup E
Chainsaw H
Jarvis M
Haystack E
Player H
Craft M
Safe E
Rope I
Scavenger H
Networked E
Zetta H
Bitlab M
Wall M
Registry H
Mango M
Postman E
AI M
Traverxec E
Obscurity M
PlayerTwo I
OpenAdmin E
Patents H
Fatty I
Book M
Oouch H
Traceback E
ForwardSlash H
Magic M
Quick H
Admirer E
Cache M
Travel H
Dyplesher I
Blunder E
Tabby E
RopeTwo I
Intense H
SneakyMailer M
Unbalanced H
Laser I
Feline H
Passage M
Compromised H
Doctor E
Jewel M
Bucket M
Time M
Academy E
Laboratory E
Ready M
Delivery E
Tenet M
Tentacle H
Sink I
ScriptKiddie E
Ophiuchi M
Spectra E
Armageddon E
Unobtainium H
Monitors H
pivotapi I
Spider H
Cap E
dynstr M
Static H
Seal M
BountyHunter E
Pikaboo H
Developer H
Previse E
Horizontall E
EarlyAccess H
Forge M
Gobox M
Stacked I
Validation E
Bolt M
Jarmis H
Devzat M
Overflow H
Toby I
Shibboleth M
Spooktrol H
Nunchucks E
Unicode M
Backdoor E
Fingerprint I
Union M
Timing M
Pandora E
AdmirerToo H
LogForge M
Meta M
Scanned I
Paper E
Flustered M
Undetected M
Pressed H
Epsilon M
SteamCloud E
RouterSpace E
GoodGames E
Catch M
Retired M
Ransom M
Talkative H
Late E
OverGraph H
Noter M
Response I
OpenSource E
Seventeen H
Carpediem H
Faculty M
RedPanda E
Extension H
Moderators H
Shoppy E
Ambassador M
Photobomb E
Awkward M

Prolabs
Offshore I
Cybernetics A
Dante I
Zephyr I

Windows Privilege Escalation

Machines
Legacy E
Devel E
Optimum E
Bastard M
Arctic E
Grandpa E
Granny E
Blue E
Mantis H
Minion I
Tally H
Jeeves M
Chatterbox M
Bart M
Silo M
Fighter I
Dropzone H
Bounty E
Reel H
Jerry E
Active E
SecNotes M
Giddy M
Access E
Ethereal I
BigHead I
Conceal H
Sizzle I
Querier M
Hackback I
Netmon E
Arkham M
Helpline H
Bastion E
RE H
Heist E
Bankrobber I
Json M
Sniper M
Forest E
Control H
Resolute M
Monteverde M
Nest E
Sauna E
Multimaster I
Remote E
Cascade M
ServMon E
Blackfield H
Fuse M
Buff E
Worker M
Omni E
Reel2 H
APT I
Cereal H
Sharp H
Breadcrumbs H
Proper H
Toolbox E
Atom M
Love E
Intelligence M
Driver E
Hancliffe H
Return E
Search H
Acute H
Object H
Perspective I
Timelapse E
Hathor I
StreamIO M
Scrambled M
Support E

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

Attacking Enterprise Networks

Prolabs
RastaLabs I
Offshore I
Cybernetics A
Dante I
APTLabs A
Zephyr I

--

--

Ryan Yager

Known on Twitch and YouTube as OvergrownCarrot1 or OGC