Blog Post

Maze
1 MIN READ

Modern Maze

KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
6 months ago

Can you escape?

The Maze Challenge consists of a series of eight “mazes” of increasing complexity based on real-world-inspired cyber attack scenarios, testing a variety of offensive skills, such as web, infrastructure, Active Directory, scripting, and binary exploitation.

The Maze is an Active Directory Environment

This intricate lab places you within a maze designed as a simulated Active Directory environment, requiring you to utilize your knowledge of AD concepts and potential vulnerabilities.

🏅 Exclusive Community Challenge Coins are available to any community member who escapes this maze.

Need a hint to help you escape this maze? SabrinaKayaci​ and StefanApostol​ will be on hand in this webinar to answer your questions and point you in the right direction.

To locate the Maze Challenge navigate to Exercise > Challenges & Scenarios > Maze

 

Good Luck!

Updated 6 months ago
Version 3.0

3 Comments

  • Anyone managed to solve this one? I've got RCE but can't figure out the lateral movement 😭

      • ScreamoHolics's avatar
        ScreamoHolics
        Bronze I

        Any tips?

        Manage to pwn the m.user but doesn't show plaintext password but since i have NTLM hash tried using the hash via PTH and tried changing m.keeper since "The user M.USER@MAZE.CORP has the capability to change the user M.KEEPER@MAZE.CORP's password without knowing that user's current password."
        
        C:\>net user m.keeper newP@ssword2022 /domain
        The request will be processed at a domain controller for domain maze.corp.
        
        System error 5 has occurred.
        
        Access is denied.
        
        
        C:\>whoami 
        wmaze\m.user