514 posts · CTF writeups, security research, and technical articles.
Charting the constellation…
Category
Tags
Timeline
Showing 514 posts
Caption is a Hard-difficulty Linux machine on HackTheBox.
Intentions is a Hard-difficulty Linux machine on HackTheBox.
AdmirerToo is a Hard-difficulty Linux machine on HackTheBox.
Altered is a Hard-difficulty Linux machine on HackTheBox.
Craft is a Medium-difficulty Linux machine on HackTheBox.
Developer is a Hard-difficulty Linux machine on HackTheBox.
Dynstr is a Medium-difficulty Linux machine on HackTheBox.
EarlyAccess is a Hard-difficulty Linux machine on HackTheBox.
Fireflow is a Medium-difficulty Linux machine on HackTheBox.
Monitors is a Hard-difficulty Linux machine on HackTheBox.
Ophiuchi is a Medium-difficulty Linux machine on HackTheBox.
Overflow is a Hard-difficulty Linux machine on HackTheBox.
Pikaboo is a Hard-difficulty Linux machine on HackTheBox.
Pressed is a Hard-difficulty Linux machine on HackTheBox.
RainyDay is a Hard-difficulty Linux machine on HackTheBox.
Proper is a Hard-difficulty Windows machine on HackTheBox.
Seventeen is a Hard-difficulty Linux machine on HackTheBox.
Snoopy is a Hard-difficulty Linux machine on HackTheBox.
Spider is a Hard-difficulty Linux machine on HackTheBox.
Spooktrol is a Hard-difficulty Linux machine on HackTheBox.
Talkative is a Hard-difficulty Linux machine on HackTheBox.
Tentacle is a Hard-difficulty Linux machine on HackTheBox.
Unobtainium is a Hard-difficulty Linux machine on HackTheBox.
Writer is a Medium-difficulty Linux machine on HackTheBox.
Agile is a Medium-difficulty Linux machine on HackTheBox.
Awkward is a Medium-difficulty Linux machine on HackTheBox.
Backend is a Medium-difficulty Linux machine on HackTheBox.
BackendTwo is a Medium-difficulty Linux machine on HackTheBox.
Bagel is a Medium-difficulty Linux machine on HackTheBox.
Bolt is a Medium-difficulty Linux machine on HackTheBox.
BroScience is a Medium-difficulty Linux machine on HackTheBox.
Builder is a Medium-difficulty Linux machine on HackTheBox.
Calamity is a Hard-difficulty Linux machine on HackTheBox.
Catch is a Medium-difficulty Linux machine on HackTheBox.
Chainsaw is a Hard-difficulty Linux machine on HackTheBox.
Charon is a Hard-difficulty Linux machine on HackTheBox.
Clicker is a Medium-difficulty Linux machine on HackTheBox.
Compromised is a Hard-difficulty Linux machine on HackTheBox.
CrimeStoppers is a Hard-difficulty Linux machine on HackTheBox.
Dab is a Hard-difficulty Linux machine on HackTheBox.
Devzat is a Medium-difficulty Linux machine on HackTheBox.
Encoding is a Medium-difficulty Linux machine on HackTheBox.
Ellingson is a Hard-difficulty Linux machine on HackTheBox.
Epsilon is a Medium-difficulty Linux machine on HackTheBox.
Faculty is a Medium-difficulty Linux machine on HackTheBox.
EvilCUPS is a Medium-difficulty Linux machine on HackTheBox.
Falafel is a Hard-difficulty Linux machine on HackTheBox.
Feline is a Hard-difficulty Linux machine on HackTheBox.
FluJab is a Hard-difficulty Linux machine on HackTheBox.
Flustered is a Medium-difficulty Linux machine on HackTheBox.
Forgot is a Medium-difficulty Linux machine on HackTheBox.
Format is a Medium-difficulty Linux machine on HackTheBox.
ForwardSlash is a Hard-difficulty Linux machine on HackTheBox.
Gobox is a Medium-difficulty Linux machine on HackTheBox.
Health is a Medium-difficulty Linux machine on HackTheBox.
Instant is a Medium-difficulty Linux machine on HackTheBox.
Intense is a Hard-difficulty Linux machine on HackTheBox.
Investigation is a Medium-difficulty Linux machine on HackTheBox.
Joker is a Hard-difficulty Linux machine on HackTheBox.
Jupiter is a Medium-difficulty Linux machine on HackTheBox.
LogForge is a Medium-difficulty Linux machine on HackTheBox.
Mentor is a Medium-difficulty Linux machine on HackTheBox.
Meta is a Medium-difficulty Linux machine on HackTheBox.
MonitorsThree is a Medium-difficulty Linux machine on HackTheBox.
Noter is a Medium-difficulty Linux machine on HackTheBox.
OneTwoSeven is a Hard-difficulty Linux machine on HackTheBox.
OnlyForYou is a Medium-difficulty Linux machine on HackTheBox.
Oouch is a Hard-difficulty Linux machine on HackTheBox.
Oz is a Hard-difficulty Linux machine on HackTheBox.
Pit is a Medium-difficulty Linux machine on HackTheBox.
Player is a Hard-difficulty Linux machine on HackTheBox.
Patents is a Hard-difficulty Linux machine on HackTheBox.
Ransom is a Medium-difficulty Linux machine on HackTheBox.
Registry is a Hard-difficulty Linux machine on HackTheBox.
Retired is a Medium-difficulty Linux machine on HackTheBox.
Scavenger is a Hard-difficulty Linux machine on HackTheBox.
Sandworm is a Medium-difficulty Linux machine on HackTheBox.
Seal is a Medium-difficulty Linux machine on HackTheBox.
Shared is a Medium-difficulty Linux machine on HackTheBox.
Socket is a Medium-difficulty Linux machine on HackTheBox.
StreamIO is a Medium-difficulty Windows machine on HackTheBox.
Timing is a Medium-difficulty Linux machine on HackTheBox.
Trickster is a Medium-difficulty Linux machine on HackTheBox.
Unbalanced is a Hard-difficulty Linux machine on HackTheBox.
Travel is a Hard-difficulty Linux machine on HackTheBox.
Undetected is a Medium-difficulty Linux machine on HackTheBox.
Unicode is a Medium-difficulty Linux machine on HackTheBox.
Union is a Medium-difficulty Linux machine on HackTheBox.
UpDown is a Medium-difficulty Linux machine on HackTheBox.
Zipper is a Hard-difficulty Linux machine on HackTheBox.
Paperwork is a Easy-difficulty Linux machine on HackTheBox.
AI is a Medium-difficulty Linux machine on HackTheBox.
Aragog is a Medium-difficulty Linux machine on HackTheBox.
Bitlab is a Medium-difficulty Linux machine on HackTheBox.
Bucket is a Medium-difficulty Linux machine on HackTheBox.
Canape is a Medium-difficulty Linux machine on HackTheBox.
Carrier is a Medium-difficulty Linux machine on HackTheBox.
Celestial is a Medium-difficulty Linux machine on HackTheBox.
Chaos is a Medium-difficulty Linux machine on HackTheBox.
DevOops is a Medium-difficulty Linux machine on HackTheBox.
FluxCapacitor is a Medium-difficulty Linux machine on HackTheBox.
Hawk is a Medium-difficulty Linux machine on HackTheBox.
Inception is a Medium-difficulty Linux machine on HackTheBox.
Jarvis is a Medium-difficulty Linux machine on HackTheBox.
Lightweight is a Medium-difficulty Linux machine on HackTheBox.
Luanne is a Easy-difficulty Other machine on HackTheBox.
Mango is a Medium-difficulty Linux machine on HackTheBox.
Olympus is a Medium-difficulty Linux machine on HackTheBox.
Poison is a Medium-difficulty Freebsd machine on HackTheBox.
RedCross is a Medium-difficulty Linux machine on HackTheBox.
Ready is a Medium-difficulty Linux machine on HackTheBox.
Schooled is a Medium-difficulty Freebsd machine on HackTheBox.
Sense is a Easy-difficulty Openbsd machine on HackTheBox.
Spectra is a Easy-difficulty Linux machine on HackTheBox.
Stratosphere is a Medium-difficulty Linux machine on HackTheBox.
Sunday is a Easy-difficulty Solaris machine on HackTheBox.
TartarSauce is a Medium-difficulty Linux machine on HackTheBox.
Tenet is a Medium-difficulty Linux machine on HackTheBox.
Time is a Medium-difficulty Linux machine on HackTheBox.
TheNotebook is a Medium-difficulty Linux machine on HackTheBox.
Unattended is a Medium-difficulty Linux machine on HackTheBox.
University is a Insane-difficulty Windows machine on HackTheBox.
Vault is a Medium-difficulty Linux machine on HackTheBox.
Waldo is a Medium-difficulty Linux machine on HackTheBox.
Wall is a Medium-difficulty Linux machine on HackTheBox.
Absolute is a Insane-difficulty Windows machine on HackTheBox.
Anubis is a Insane-difficulty Windows machine on HackTheBox.
Appsanity is a Hard-difficulty Windows machine on HackTheBox.
Atlas is a Hard-difficulty Windows machine on HackTheBox.
Breadcrumbs is a Hard-difficulty Windows machine on HackTheBox.
Coder is a Insane-difficulty Windows machine on HackTheBox.
Fighter is a Insane-difficulty Windows machine on HackTheBox.
Flight is a Hard-difficulty Windows machine on HackTheBox.
Hackback is a Insane-difficulty Windows machine on HackTheBox.
Hancliffe is a Hard-difficulty Windows machine on HackTheBox.
Hathor is a Insane-difficulty Windows machine on HackTheBox.
LustrousTwo is a Hard-difficulty Windows machine on HackTheBox.
Mirage is a Hard-difficulty Windows machine on HackTheBox.
Multimaster is a Insane-difficulty Windows machine on HackTheBox.
NanoCorp is a Hard-difficulty Windows machine on HackTheBox.
Object is a Hard-difficulty Windows machine on HackTheBox.
PivotAPI is a Insane-difficulty Windows machine on HackTheBox.
Perspective is a Insane-difficulty Windows machine on HackTheBox.
RainbowTwo is a Hard-difficulty Windows machine on HackTheBox.
Rebound is a Insane-difficulty Windows machine on HackTheBox.
Search is a Hard-difficulty Windows machine on HackTheBox.
Shibuya is a Hard-difficulty Windows machine on HackTheBox.
Vintage is a Hard-difficulty Windows machine on HackTheBox.
Fries is a Hard-difficulty Windows machine on HackTheBox.
Arkham is a Medium-difficulty Windows machine on HackTheBox.
Cereal is a Hard-difficulty Windows machine on HackTheBox.
Conceal is a Hard-difficulty Windows machine on HackTheBox.
Ghostlink is a Hard-difficulty Windows machine on HackTheBox.
Helpline is a Hard-difficulty Windows machine on HackTheBox.
Tally is a Hard-difficulty Windows machine on HackTheBox.
Cap is a Easy-difficulty Linux machine on HackTheBox.
Nexus is a Easy-difficulty Linux machine on HackTheBox.
Orion is a Easy-difficulty Linux machine on HackTheBox.
Atom is a Medium-difficulty Windows machine on HackTheBox.
Control is a Medium-difficulty Windows machine on HackTheBox.
Dropzone is a Medium-difficulty Windows machine on HackTheBox.
Json is a Medium-difficulty Windows machine on HackTheBox.
Mantis is a Medium-difficulty Windows machine on HackTheBox.
Reel is a Medium-difficulty Windows machine on HackTheBox.
Reel2 is a Medium-difficulty Windows machine on HackTheBox.
Sniper is a Medium-difficulty Windows machine on HackTheBox.
Sweep is a Medium-difficulty Windows machine on HackTheBox.
Canvas is a Easy-difficulty Misc challenge on HackTheBox.
Art is a Easy-difficulty Misc challenge on HackTheBox.
Da Vinci is a Easy-difficulty Misc challenge on HackTheBox.
Hissss is a Easy-difficulty Reversing challenge on HackTheBox.
Maze is a Medium-difficulty Reversing challenge on HackTheBox.
Milkshake is a Easy-difficulty Misc challenge on HackTheBox.
Pusheen Loves Graphs is a Easy-difficulty Misc challenge on HackTheBox.
Query is a Medium-difficulty Misc challenge on HackTheBox.
The secret of a Queen is a Easy-difficulty Misc challenge on HackTheBox.
The Art of Reversing is a Easy-difficulty Reversing challenge on HackTheBox.
Cicada is a Medium-difficulty Windows machine on HackTheBox.
Giddy is a Medium-difficulty Windows machine on HackTheBox.
DevHub is a Medium-difficulty Linux machine on HackTheBox.
SmartHire is a Medium-difficulty Linux machine on HackTheBox.
Checkpoint is a Medium-difficulty Windows machine on HackTheBox.
Artifact Of Dangerous Sighting is a Easy-difficulty Forensics challenge on HackTheBox.
Binary Badresources is a Medium-difficulty Forensics challenge on HackTheBox.
Data Siege is a Medium-difficulty Forensics challenge on HackTheBox.
Game Invitation is a Hard-difficulty Forensics challenge on HackTheBox.
Deadly Arthropod is a Medium-difficulty Forensics challenge on HackTheBox.
Getting Closer is a Easy-difficulty Forensics challenge on HackTheBox.
Hypercraft is a Medium-difficulty Forensics challenge on HackTheBox.
Intergalactic Recovery is a Easy-difficulty Forensics challenge on HackTheBox.
Interstellar C2 is a Medium-difficulty Forensics challenge on HackTheBox.
Keep Tryin' is a Medium-difficulty Forensics challenge on HackTheBox.
MBCoin is a Medium-difficulty Forensics challenge on HackTheBox.
No Start Where is a Medium-difficulty Forensics challenge on HackTheBox.
One Of Us is a Medium-difficulty Forensics challenge on HackTheBox.
Phreaky is a Medium-difficulty Forensics challenge on HackTheBox.
Precious Guidance is a Medium-difficulty Forensics challenge on HackTheBox.
Reflection is a Medium-difficulty Forensics challenge on HackTheBox.
Rogue is a Medium-difficulty Forensics challenge on HackTheBox.
Seized is a Medium-difficulty Forensics challenge on HackTheBox.
SquatBot is a Hard-difficulty Forensics challenge on HackTheBox.
TrueSecrets is a Easy-difficulty Forensics challenge on HackTheBox.
Window's Infinity Edge is a Hard-difficulty Forensics challenge on HackTheBox.
Wanted Alive is a Easy-difficulty Forensics challenge on HackTheBox.
ZombieNet is a Medium-difficulty Forensics challenge on HackTheBox.
Abducted is a Medium-difficulty Linux machine on HackTheBox.
Academy is a Easy-difficulty Linux machine on HackTheBox.
Antique is a Easy-difficulty Linux machine on HackTheBox.
Alert is a Easy-difficulty Linux machine on HackTheBox.
AirTouch is a Medium-difficulty Linux machine on HackTheBox.
Apocalyst is a Medium-difficulty Linux machine on HackTheBox.
Armageddon is a Easy-difficulty Linux machine on HackTheBox.
Artificial is a Easy-difficulty Linux machine on HackTheBox.
Backdoor is a Easy-difficulty Linux machine on HackTheBox.
Backfire is a Medium-difficulty Linux machine on HackTheBox.
Bank is a Easy-difficulty Linux machine on HackTheBox.
Barrier is a Medium-difficulty Linux machine on HackTheBox.
Bamboo is a Hard-difficulty Linux machine on HackTheBox.
Bashed is a Easy-difficulty Linux machine on HackTheBox.
BigBang is a Hard-difficulty Linux machine on HackTheBox.
Blocky is a Easy-difficulty Linux machine on HackTheBox.
Book is a Medium-difficulty Linux machine on HackTheBox.
Broker is a Easy-difficulty Linux machine on HackTheBox.
Browsed is a Medium-difficulty Linux machine on HackTheBox.
Build is a Medium-difficulty Linux machine on HackTheBox.
Cat is a Medium-difficulty Linux machine on HackTheBox.
Checker is a Hard-difficulty Linux machine on HackTheBox.
Chemistry is a Easy-difficulty Linux machine on HackTheBox.
CodePartTwo is a Easy-difficulty Linux machine on HackTheBox.
Conversor is a Easy-difficulty Linux machine on HackTheBox.
Curling is a Easy-difficulty Linux machine on HackTheBox.
Cronos is a Medium-difficulty Linux machine on HackTheBox.
Cypher is a Medium-difficulty Linux machine on HackTheBox.
Data is a Easy-difficulty Linux machine on HackTheBox.
Delivery is a Easy-difficulty Linux machine on HackTheBox.
Doctor is a Easy-difficulty Linux machine on HackTheBox.
Down is a Easy-difficulty Linux machine on HackTheBox.
Dog is a Easy-difficulty Linux machine on HackTheBox.
Dump is a Hard-difficulty Linux machine on HackTheBox.
Editor is a Easy-difficulty Linux machine on HackTheBox.
Enterprise is a Medium-difficulty Linux machine on HackTheBox.
Environment is a Medium-difficulty Linux machine on HackTheBox.
Era is a Medium-difficulty Linux machine on HackTheBox.
Eureka is a Hard-difficulty Linux machine on HackTheBox.
Europa is a Medium-difficulty Linux machine on HackTheBox.
Forge is a Medium-difficulty Linux machine on HackTheBox.
Forgotten is a Easy-difficulty Linux machine on HackTheBox.
Frolic is a Easy-difficulty Linux machine on HackTheBox.
FriendZone is a Easy-difficulty Linux machine on HackTheBox.
Gavel is a Medium-difficulty Linux machine on HackTheBox.
Giveback is a Medium-difficulty Linux machine on HackTheBox.
GoodGames is a Easy-difficulty Linux machine on HackTheBox.
Guardian is a Hard-difficulty Linux machine on HackTheBox.
GreenHorn is a Easy-difficulty Linux machine on HackTheBox.
Haircut is a Medium-difficulty Linux machine on HackTheBox.
HackNet is a Medium-difficulty Linux machine on HackTheBox.
Haystack is a Easy-difficulty Linux machine on HackTheBox.
Heal is a Medium-difficulty Linux machine on HackTheBox.
Horizontall is a Easy-difficulty Linux machine on HackTheBox.
Help is a Easy-difficulty Linux machine on HackTheBox.
Imagery is a Medium-difficulty Linux machine on HackTheBox.
Irked is a Easy-difficulty Linux machine on HackTheBox.
Jewel is a Medium-difficulty Linux machine on HackTheBox.
Knife is a Easy-difficulty Linux machine on HackTheBox.
Lazy is a Medium-difficulty Linux machine on HackTheBox.
Late is a Easy-difficulty Linux machine on HackTheBox.
LaCasaDePapel is a Easy-difficulty Linux machine on HackTheBox.
Laboratory is a Easy-difficulty Linux machine on HackTheBox.
LinkVortex is a Easy-difficulty Linux machine on HackTheBox.
Manage is a Easy-difficulty Linux machine on HackTheBox.
MetaTwo is a Easy-difficulty Linux machine on HackTheBox.
Mirai is a Easy-difficulty Linux machine on HackTheBox.
MonitorsTwo is a Easy-difficulty Linux machine on HackTheBox.
Networked is a Easy-difficulty Linux machine on HackTheBox.
Nineveh is a Medium-difficulty Linux machine on HackTheBox.
Nimbus is a Hard-difficulty Linux machine on HackTheBox.
Nocturnal is a Easy-difficulty Linux machine on HackTheBox.
Node is a Medium-difficulty Linux machine on HackTheBox.
NodeBlog is a Easy-difficulty Linux machine on HackTheBox.
Nunchucks is a Easy-difficulty Linux machine on HackTheBox.
Obscurity is a Medium-difficulty Linux machine on HackTheBox.
October is a Medium-difficulty Linux machine on HackTheBox.
Outbound is a Easy-difficulty Linux machine on HackTheBox.
Paper is a Easy-difficulty Linux machine on HackTheBox.
OpenSource is a Easy-difficulty Linux machine on HackTheBox.
Pandora is a Easy-difficulty Linux machine on HackTheBox.
Passage is a Medium-difficulty Linux machine on HackTheBox.
Planning is a Easy-difficulty Linux machine on HackTheBox.
Postman is a Easy-difficulty Linux machine on HackTheBox.
Precious is a Easy-difficulty Linux machine on HackTheBox.
Previous is a Medium-difficulty Linux machine on HackTheBox.
Previse is a Easy-difficulty Linux machine on HackTheBox.
Reset is a Easy-difficulty Linux machine on HackTheBox.
Safe is a Easy-difficulty Linux machine on HackTheBox.
RouterSpace is a Easy-difficulty Linux machine on HackTheBox.
RedPanda is a Easy-difficulty Linux machine on HackTheBox.
Sea is a Easy-difficulty Linux machine on HackTheBox.
Secret is a Easy-difficulty Linux machine on HackTheBox.
ScriptKiddie is a Easy-difficulty Linux machine on HackTheBox.
Shibboleth is a Medium-difficulty Linux machine on HackTheBox.
Shocker is a Easy-difficulty Linux machine on HackTheBox.
Shoppy is a Easy-difficulty Linux machine on HackTheBox.
Sightless is a Easy-difficulty Linux machine on HackTheBox.
Slonik is a Medium-difficulty Linux machine on HackTheBox.
Snapped is a Hard-difficulty Linux machine on HackTheBox.
SneakyMailer is a Medium-difficulty Linux machine on HackTheBox.
Sneaky is a Medium-difficulty Linux machine on HackTheBox.
SolidState is a Medium-difficulty Linux machine on HackTheBox.
Soulmate is a Easy-difficulty Linux machine on HackTheBox.
Squashed is a Easy-difficulty Linux machine on HackTheBox.
SteamCloud is a Easy-difficulty Linux machine on HackTheBox.
Store is a Hard-difficulty Linux machine on HackTheBox.
Strutted is a Medium-difficulty Linux machine on HackTheBox.
Ten is a Hard-difficulty Linux machine on HackTheBox.
Teacher is a Easy-difficulty Linux machine on HackTheBox.
Topology is a Easy-difficulty Linux machine on HackTheBox.
Traverxec is a Easy-difficulty Linux machine on HackTheBox.
Trick is a Easy-difficulty Linux machine on HackTheBox.
UnderPass is a Easy-difficulty Linux machine on HackTheBox.
Valentine is a Easy-difficulty Linux machine on HackTheBox.
Unrested is a Easy-difficulty Linux machine on HackTheBox.
Validation is a Easy-difficulty Linux machine on HackTheBox.
Watcher is a Medium-difficulty Linux machine on HackTheBox.
Wifinetic is a Easy-difficulty Linux machine on HackTheBox.
Writeup is a Easy-difficulty Linux machine on HackTheBox.
Recover the flag from a degree-30 polynomial product by factoring over ℚ with sympy, then handling the content absorption of two monic factors manually
Escape a 6-char Python eval jail by calling help() to enter pydoc's interactive REPL, then importing jail.py as a module to leak ALPACA_FLAG from the DATA section
Exploit a signed-integer out-of-bounds stack write to hijack the saved return address and call win(), bypassing a stack canary via precise negative-index arithmetic
Exploit a Common Modulus Attack on RSA with gcd(e1,e2)=2 and recover the flag via integer square root when m² < n
Exploit Python's list.pop(-1) silent fallback: drain an item's stock so find() returns -1, then pop(-1) retrieves the flag character appended at the end of the stock string
DevArea is a Medium-difficulty Linux machine released as part of HTB season 10.
Kobold is a Easy-difficulty Linux machine released as part of HTB season 10.
CCTV is a Easy-difficulty Linux machine released as part of HTB season 10.
Pirate is a Hard-difficulty Windows machine released as part of HTB Season 10. Exploit Pre-Windows 2000 machine accounts, dump gMSA hashes, pivot through internal networks, and chain RBCD relay with SPN injection to achieve full Domain Admin.
Use GitHub Actions to provision an ephemeral amd64 DigitalOcean droplet, build Docker images natively, push to registry, and tear everything down automatically.
Build a custom Docker image for Kasm Workspaces, push it to a registry, and register it so it appears as a selectable workspace.
Interpreter is a Medium-difficulty Linux machine released as part of HTB season 10.
Deploy Kasm Workspaces on a DigitalOcean droplet, attach a domain, enable HTTPS with Let's Encrypt, and harden the server for secure remote browser access.
Pterodactyl is a Medium-difficulty Linux machine released as part of HTB season 10.
WingData is a Easy-difficulty Linux machine released as part of HTB season 10.
Download files from a remote server, compare them safely in a local branch, and decide whether to discard, merge, or push changes to a remote repository.
First post on the blog — what to expect from this site and what I'll be writing about.
Build a fast, cloud-based Ubuntu workstation using Xfce and xRDP, then connect it securely to corporate networks using OpenConnect (GlobalProtect-compatible).
Facts is a Easy-difficulty Linux machine released as part of HTB season 10.
<Name> is a <Difficulty>-difficulty <Category> challenge on HackTheBox.
<Name> is a <Difficulty>-difficulty <OS> machine on HackTheBox.
Exploit AES-CTR mode vulnerability in a custom IRC-like server with reused counter initialization
Analyze compromised system through network traffic and memory forensics to uncover malware deployment and credential theft
Identify and exploit secure coding vulnerabilities in a web application
Exploit path traversal vulnerability in a PHP web application to extract the flag
Analyze memory dump of compromised Linux system to uncover malicious Chrome extension and credential theft
Code is a Easy-difficulty Linux machine from HackTheBox.
EscapeTwo is an Easy-difficulty Windows Active Directory machine from HackTheBox featuring SMB enumeration, credential extraction from Excel files, SQL Server exploitation, and Kerberos abuse.
Analyze Windows event logs to uncover two-part flag hidden in PowerShell command execution and log artifacts
Reverse engineer encoded strings from JavaScript code to extract hidden data
Reverse engineer a binary that uses Fisher-Yates shuffling to find the original input string
Exploit JWT authentication bypass and token manipulation in a Node.js web application
Exploit stale cache policy vulnerabilities in a web application with Content Security Policy analysis
Inflitrator is a Hard-difficulty Windows machine from HackTheBox.
PermX is an Easy-difficulty Linux machine from HackTheBox.
Blazorized is a Hard-difficulty Windows domain controller machine from HackTheBox.
Axlle is a Hard-difficulty Windows machine from HackTheBox.
Editorial is an Easy-difficulty Linux machine from HackTheBox featuring SSRF vulnerability and GitPython RCE.
Blurry is a Medium-difficulty Linux machine from HackTheBox.
Freelancer is a Hard-difficulty Windows machine from HackTheBox.
BoardLight is an Easy-difficulty Linux machine from HackTheBox featuring Dolibarr ERP/CRM exploitation.
Smart contract challenge requiring multi-step validation including hacking skills, stealth, engineering, and demolition expertise
AWS IAM and cloud security challenge involving credential enumeration and permission analysis
AWS IAM role ARN extraction challenge using role ID to construct proper ARN format
Windows forensics challenge analyzing PowerShell logs and obfuscated scripts to detect intrusion attempts
Cryptography challenge using known plaintext attack to break XOR-based encryption with SHA-256 key derivation
Full penetration test of web server with SPIP CMS exploitation, leading to initial access and system compromise
Full penetration test of Ubuntu web server with SSH and HTTP services
ICS/SCADA challenge involving Modbus protocol communication with industrial control systems
Full penetration test with multi-service enumeration including SSH and HTTP on multiple ports
Binary reverse engineering challenge involving libc random number prediction and brute-force seed discovery
MagicGarden is a Insane-difficulty Linux machine from HackTheBox.
SolarLab is a Medium-difficulty Windows machine featuring SMB enumeration, credential extraction from Excel files, ReportHub web application exploitation, and CVE-2023-33733 (ReportLab RCE).
Mailing is a Easy-difficulty Windows machine from HackTheBox.
Intuition is a Hard-difficulty Linux machine from HackTheBox.
Usage is a Easy-difficulty Linux machine from HackTheBox.
iClean (Capiclean) is a Medium-difficulty Linux machine featuring Flask SSTI exploitation and JWT-based authentication bypass.
Mist is a Insane-difficulty Windows machine from HackTheBox.
WifineticTwo is a Medium-difficulty Linux machine featuring OpenPLC Runtime exploitation and WiFi security attacks.
Exploit a weak Diffie-Hellman key exchange with small prime modulus
Exploit weak Diffie-Hellman with small parameters to recover shared secret and decrypt AES-CBC ciphertext
Identify TEA cipher from DELTA constant and decrypt ECB-mode ciphertext with known key
Reverse a custom Caesar cipher variant with position-dependent shift
Break Diffie-Hellman over permutation groups using DLP algorithm on permutation cycles
Reverse a trivial string transformation: reverse flag then rearrange groups of three
Extract flag from HTML content hidden in email file
Exploit RSA implementation using prime modulus instead of semiprime
Exploit ActiveMQ vulnerability, extract .NET malware, decrypt C2 communications, and recover multi-part flag
Analyze disk image to extract and decrypt ransomware, then decrypt encrypted files
Extract obfuscated PowerShell from PCAP, deobfuscate, decrypt AES payload, and recover flag parts
Analyze PCAP to detect SMTP exfiltration and reconstruct PDF from parts
Bypass blacklist filters in Python eval() to read the flag
Decode base64 email attachments and URL-decode payloads to uncover phishing attack details
Script game responses to survive The Fray video game challenge
Exploit format string vulnerability to overwrite target variable
Analyze malicious DOCM file, extract XOR-encrypted payload, decrypt JavaScript layers, and recover C2 beacon
Interface with W25Q128 flash memory via SPI to read flag from device
Automate character-by-character flag extraction from server using socket programming
Construct Python bytecode to find min/max values and answer the cube's riddle
Analyze memory dump with Volatility and extract artifacts from system state
Analyze MFT records to answer forensic questions about file activity
Answer integer overflow questions to retrieve the flag
Use strace to identify file access attempts and retrieve the flag
Exploit off-by-one vulnerability and strcmp null byte behavior
Reverse engineer a compression algorithm and decode serialized data
Unpack UPX-compressed executable to reveal hidden strings and flag
Exploit command injection in time-based functionality
Exploit SQL injection to retrieve credentials and login
Exploit Apache Velocity Server-Side Template Injection (SSTI)
Exploit gRPC path traversal to overwrite application files
Exploit JWT vulnerabilities in python-jwt version 3.3.3
Exploit serialization vulnerabilities to achieve RCE through pickle deserialization
Exploit memcached injection and Python pickle deserialization for RCE
FormulaX is a Hard-difficulty Linux machine from HackTheBox.
Perfection is an Easy-difficulty Linux machine from HackTheBox featuring Server-Side Template Injection (SSTI) in a Ruby web application.
Crafty is a Easy-difficulty Windows machine from HackTheBox.
Skyfall is an Insane-difficulty Linux machine from HackTheBox featuring CVE-2023-28432 (Minio info disclosure), HashiCorp Vault integration, and advanced privilege escalation techniques.
POV is a Medium-difficulty Windows machine from HackTheBox.
Analysis is a Hard-difficulty Windows machine from HackTheBox.
Monitored is a Medium-difficulty Linux machine from HackTheBox.
Bizness is a Easy-difficulty Linux machine from HackTheBox.
Corporate is a Insane-difficulty Linux machine from HackTheBox.
Surveillance is a Medium-difficulty Linux machine from HackTheBox featuring Craft CMS and ZoneMinder exploitation.
DevVortex is an Easy-difficulty Linux machine from HackTheBox. Exploitation involves Joomla vulnerability discovery, credential extraction, and privilege escalation via apport-cli pager escape.
Hospital is a Medium-difficulty Windows machine from HackTheBox.
Decode a flag split between hex and base64 encoding
Reverse engineer a password generator to decrypt an encrypted flag
Exploit AES-CTR mode with predictable counter and key recovery
NoSQL injection in authentication bypass with MongoDB
NoSQL injection in login form to bypass authentication
Command injection vulnerability in localhost-restricted endpoint
Pickle deserialization exploitation for remote code execution
XSS via filter bypass using noembed tag
Napper is a Hard-difficulty Windows machine from HackTheBox.
.NET binary reverse engineering challenge
SSRF vulnerability leading to admin account creation
Manager is a Medium-difficulty Windows machine from HackTheBox.
Drive is a Hard-difficulty Linux machine from HackTheBox featuring a Django-based file management application with SQLite databases.
Analytics is an Easy-difficulty Linux machine from HackTheBox featuring Metabase RCE exploitation and overlayFS privilege escalation.
Visual is a Medium-difficulty Windows machine from HackTheBox.
CozyHosting is an Easy-difficulty Linux machine from HackTheBox featuring Spring Boot Actuator exposure, session hijacking, command injection, and SSH privilege escalation.
Zipping is a Medium-difficulty Linux machine from HackTheBox featuring file upload bypass via null byte injection and privilege escalation through shared object hijacking.
CyberMonday is a Hard-difficulty Linux machine from HackTheBox.
Keeper is an Easy-difficulty Linux machine from HackTheBox featuring Request Tracker enumeration, default credential exploitation, and KeePass memory dump vulnerability exploitation.
Download is a Hard-difficulty Linux machine from HackTheBox. Partial writeup with reconnaissance findings documented.
Gofer is a Hard-difficulty Linux machine from HackTheBox.
RegistryTwo is a Hard-difficulty Linux machine from HackTheBox.
Exploit a backdoored e-voting smart contract to manipulate election results
Forge NFT signatures to gain access to confidential Board of Arodor documents
Exploit a multi-signature wallet to steal crowdfunding campaign funds
Enumerate and exploit misconfigured AWS S3 buckets to access confidential information
Sign a contract with a simple condition to complete military enrollment paperwork
Forge Merkle tree signatures to detect a blockchain backdoor
Break AES-CTR encryption with nonce reuse vulnerability
Forge DSA signatures to access vitalium resource coordinates
Exploit weak PRNG in RSA system to decrypt enemy communications
Full system compromise requiring exploitation chain through multiple vulnerabilities
Full exploitation of a web application with file upload vulnerability, command injection, and privilege escalation.
Exploit WordPress plugin vulnerabilities and LLM prompt injection for RCE
Exploit a device control server to manipulate devices or gain system access.
Reverse engineer an ancient COBOL punch card program representing a facility update.
Exploit a Modbus-based SCADA door control system by manipulating sensors and coils.
Exploit a Command and Control (C2) service by exploiting vulnerabilities in its bot management system.
Exploit a surveillance system tracking application by bypassing file restrictions and causing heap corruption.
Bypass a bitmap scanning application by crafting a malicious BMP file to trigger code execution.
Analyze captured Modbus network traffic to extract sensitive data from industrial control registers.
Analyze network captures to identify intruder reconnaissance and data tampering on industrial systems.
Exploit a Java deserialization vulnerability in a water level monitoring application.
Authority is a Medium-difficulty Windows machine from HackTheBox.
Sau is an Easy-difficulty Linux machine from HackTheBox involving SSRF, command injection, and privilege escalation.
Pilgrimage is an Easy-difficulty Linux machine featuring an image shrinking service with exposed git repository, ImageMagick LFI, and Binwalk RCE vulnerabilities.
twomillion is an Easy-difficulty Linux machine from HackTheBox. This writeup is a skeleton with limited documentation.
PC is a Easy-difficulty Linux machine from HackTheBox.
Busquedas is a Easy-difficulty Linux machine from HackTheBox.
Reverse engineer a multi-layer encoding scheme involving hex conversion and base64
Exploit custom AES ECB implementation with block recycling vulnerability
Exploit AES ECB mode encryption with known plaintext and partial key recovery
Analyze and decode malicious script with systemd persistence mechanism
Exploit Python exec() filter bypass using character encoding
Exploit Python deserialization vulnerabilities in YAML and Pickle
Hardware debugging and analysis of timing/electrical signals
Win 100 rounds of Janken by exploiting logic in string matching
Automate repeated HTTP requests to extract flag from endpoint
Exploit RSA with small public exponent e=3 using Coppersmith's attack
Automate mathematical expression evaluation over TCP socket
Escape restricted SSH environment using bash profile bypass
Solve bridge crossing puzzle using optimal algorithm
Buffer overflow exploitation using controlled payload delivery
Buffer overflow via fgets() vulnerability in vulnerable C binary
Solve complex multi-condition logic puzzle in binary
Reverse engineer custom shell binary and crack XOR-encrypted password
Crack three-stage password validation in binary using string reversal and XOR
Exploit SQL injection vulnerability and use path traversal to extract flag
Exploit IDOR and JWT vulnerabilities in shopping application
Reconstruct input string by analyzing multi-byte field access patterns
Exploit IDOR vulnerability in GraphQL API to access admin data
Inject is a Easy-difficulty Linux machine from HackTheBox.
Interface is a Medium-difficulty Linux machine from HackTheBox.
Stocker is an Easy-difficulty Linux machine from HackTheBox.
Soccer is an Easy-difficulty Linux machine from HackTheBox featuring web file manager exploitation, SQL injection via WebSocket, and privilege escalation through doas.
AES encryption challenge with multiple block cipher modes - exploit ECB mode weakness
Discrete log problem with extremely small prime - trivial brute force attack
JWT authentication bypass through XSS to steal admin session and access flag
Code injection via unsafe use of Python compile() and exec() in arithmetic evaluation
IP spoofing via X-Forwarded-For header to bypass localhost-only admin access
SQL injection in user registration leading to authentication bypass and flag theft
Server-Side Template Injection (SSTI) in Mako template engine leading to RCE
Photoshop is a Medium-difficulty Windows machine from HackTheBox.
Ambassador is a Medium-difficulty Linux machine from HackTheBox.