NTLM / Lesson 01
NTLM authentication explained

Every lab deploys as an isolated AWS network for you alone. Some begin on a real public IP; others are reached through your permanent VPN profile. Work the full attack path across machines and subnets.

What sets Pebble apart
| A single-box challenge | A Pebble lab |
|---|---|
| Limited attack surface and realism. | Internet-facing machines with real public IPs. |
| Artificial difficulty. | Attack scenarios from real engagements. |
| Reachability is rarely in question. | Per-subnet inbound rules. |
| Isolated puzzles with nothing tying them together. | Story and interesting attack chains. |
| Shared boxes, reset on somebody else's schedule. | Your own private labs. Hosted in the cloud. Reset them whenever you like. |
Single box
Limited attack surface and realism.
Pebble network
Internet-facing machines with real public IPs.
Single box
Artificial difficulty.
Pebble network
Attack scenarios from real engagements.
Single box
Reachability is rarely in question.
Pebble network
Per-subnet inbound rules.
Single box
Isolated puzzles with nothing tying them together.
Pebble network
Story and interesting attack chains.
Single box
Shared boxes, reset on somebody else's schedule.
Pebble network
Your own private labs. Hosted in the cloud. Reset them whenever you like.
A lab, as you actually get it
A complete external-to-internal engagement assembled from attack chains encountered during real pentest consulting.
10.0.0.0/24
10.0.4.0/24
10.0.5.0/24
Courses
Courses cover the technical work and the client-facing side of an engagement. The material includes video lessons, written instruction, and hands-on labs.
NTLM / Lesson 01

Feedback
“I've never done a lab/range that keeps getting better the farther you get”
“Thank you for the amazing range by the way. Way more difficult than any cert or challenge I've done before. Really great and detailed work. Can't wait to redo it”
“tremendous range and have learned plus identified so many areas for improvement”
“This was by far the coolest experience I've had in a lab environment.”
“that was freaking awesome. probably be at least one new tool out of this”
From red team operators, security analysts, penetration testers, and students
Your own permanent VPN profile and isolated network, deployed to your account in minutes. Access is invite only while we finish building.
See the labs see pricing →