Nexora – Windows AD CTF Lab

Explore the infrastructure of Nexora Systems, an enterprise IT company, in this Windows Active Directory CTF lab. Discover hidden web pages, investigate internal documents, and uncover credentials in forgotten backups. Follow a chain of misconfigured AD permissions, access internal services, and exploit React2Shell to advance toward domain compromise. Put your enumeration and Windows privilege escalation skills to the test as you capture both the user and root flags!

Difficulty: Easy/Medium

The lab is provided as an .ova file for use with VirtualBox or VMware. An IP address is assigned automatically via DHCP.

Included with your purchase:

The Nexora lab virtual machine (.ova)

A complete walkthrough

A short HTML lab description with hints if you get stuck

A separate file containing login credentials for all users