:linux: | Editorial HackTheBox Linux Easy | Editorial HackTheBox Easy Linux machine writeup covering SSRF, Git Log, Git Python, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Editorial HackTheBox Writeup |
:linux: | PermX HackTheBox Linux Easy | PermX HackTheBox Easy Linux machine writeup covering Subdomain Enumeration, Chamilo Exploitation, LINpeas enumeration system, Sudoers escalation privilege (permissions changed /etc/sudoers file), with practical enumeration, exploitation, foothold, and privilege escalation notes. | PermX HackTheBox Writeup |
:linux: | Greenhorn HackTheBox Linux Easy | Greenhorn HackTheBox Easy Linux machine writeup covering Discovering embedded passwords in Git repositories, Unhashed SHA-512 passwords, Pluck Exploitation, Decrypting pixelated passwords (using DEPIX), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Greenhorn HackTheBox Writeup |
:linux: | Sea HackTheBox Linux Easy | Sea HackTheBox Easy Linux machine writeup covering Wonder CMS Exploitation, CSRF Vulnerability, (XSS to RCE), Port Forwarding, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Sea HackTheBox Writeup |
:linux: | Sightless HackTheBox Linux Easy | Sightless HackTheBox Easy Linux machine writeup covering SQLPad Exploitation, LINpeas enumeration system, Cracking Hashes (John), Port Forwarding (chisel), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Sightless HackTheBox Writeup |
:linux: | GoodGames HackTheBox Linux Easy | GoodGames HackTheBox Easy Linux machine writeup covering Exploiting Union-Based SQL Injections, Hash Cracking Weak Algorithms, Password Reuse, Exploiting SSTI, with practical enumeration, exploitation, foothold, and privilege escalation notes. | GoodGames HackTheBox Writeup |
:linux: | Secret HackTheBox Linux Easy | Secret HackTheBox Easy Linux machine writeup covering Code Analysis, Abusing an API, Json Web Tokens (JWT), Abusing/Leveraging Core Dump (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Secret HackTheBox Writeup |
:linux: | Haystack HackTheBox Linux Easy | Haystack HackTheBox Easy Linux machine writeup covering ElasticSearch Enumeration, Information Leakage, Kibana Enumeration, Kibana Exploitation (CVE-2018-17246), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Haystack HackTheBox Writeup |
:linux: | Tabby HackTheBox Linux Easy | Tabby HackTheBox Easy Linux machine writeup covering Local File Inclusion (LFI), Abusing Tomcat Virtual Host Manager, Abusing Tomcat Text-Based Manager - Deploy Malicious War (Curl Method), LXD Exploitation (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Tabby HackTheBox Writeup |
:linux: | Traverxec HackTheBox Linux Easy | Traverxec HackTheBox Easy Linux machine writeup covering Nostromo Exploitation, Abusing Nostromo HomeDirs Configuration, Exploiting Journalctl (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Traverxec HackTheBox Writeup |
:linux: | Usage HackTheBox Linux Easy | Usage HackTheBox Easy Linux machine writeup covering Subdomain Enumeration, SQLI - Boolean-Based Blind Injection (MANUAL) + BurpSuite Tips, Python Scripting in order to exploit SQLI, Cracking Hashes, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Usage HackTheBox Writeup |
:linux: | Blunder HackTheBox Linux Easy | Blunder HackTheBox Easy Linux machine writeup covering Bludit CMS Exploitation, Bypassing IP Blocking (X-Forwarded-For Header), Directory Traversal Image File Upload (Playing with .htaccess), Abusing sudo privilege (CVE-2019-14287), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Blunder HackTheBox Writeup |
:linux: | Antique HackTheBox Linux Easy | Antique HackTheBox Easy Linux machine writeup covering SNMP Enumeration, Network Printer Abuse, CUPS Administration Exploitation (ErrorLog), EXTRA -> (DirtyPipe) (CVE-2022-0847], with practical enumeration, exploitation, foothold, and privilege escalation notes. | Antique HackTheBox Writeup |
:linux: | Mirai HackTheBox Linux Easy | Mirai HackTheBox Easy Linux machine writeup covering Identifying an IoT device, Forensic file recovery, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Mirai HackTheBox Writeup |
:linux: | Pandora HackTheBox Linux Easy | Pandora HackTheBox Easy Linux machine writeup covering SNMP Fast Enumeration, Information Leakage, Local Port Forwarding, SQL Injection - Admin Session Hijacking, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Pandora HackTheBox Writeup |
:linux: | Knife HackTheBox Linux Easy | Knife HackTheBox Easy Linux machine writeup covering PHP 8.1.0-dev - 'User-Agent' Remote Code Execution (RCE), Abusing Sudoers Privilege (Knife Binary) (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Knife HackTheBox Writeup |
:linux: | Blocky HackTheBox Linux Easy | Blocky HackTheBox Easy Linux machine writeup covering WordPress Enumeration, Information Leakage, Analyzing a jar file - JD-Gui + SSH Access, Abusing Sudoers Privilege (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Blocky HackTheBox Writeup |
:linux: | Backdoor HackTheBox Linux Easy | Backdoor HackTheBox Easy Linux machine writeup covering WordPress Local File Inclusion Vulnerability (LFI), LFI to RCE (Abusing /proc/PID/cmdline), Gdbserver RCE Vulnerability, Abusing Screen (Privilege Escalation) (Session synchronization), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Backdoor HackTheBox Writeup |
:linux: | Nibbles HackTheBox Linux Easy | Nibbles HackTheBox Easy Linux machine writeup covering Abusing Nibbleblog - Remote Code Execution via File Upload, Abusing Sudoers Privilege (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Nibbles HackTheBox Writeup |
:linux: | Shocker HackTheBox Linux Easy | Shocker HackTheBox Easy Linux machine writeup covering ShellShock Attack (User-Agent), Abusing Sudoers Privilege (Perl), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Shocker HackTheBox Writeup |
:linux: | LinkVortex HackTheBox Linux Easy | LinkVortex HackTheBox Easy Linux machine writeup covering Subdomain Enumeration, Extracting Information from .git Directory (Git-Dumper), Information Leakage, LFI Exploitation (Ghost), with practical enumeration, exploitation, foothold, and privilege escalation notes. | LinkVortex HackTheBox Writeup |
:linux: | Cap HackTheBox Linux Easy | Cap HackTheBox Easy Linux machine writeup covering Insecure Directory Object Reference (IDOR), Information Leakage, Abusing Capabilities (Python3.8) (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Cap HackTheBox Writeup |
:linux: | Lame HackTheBox Linux Easy | Lame HackTheBox Easy Linux machine writeup covering Exploitation Port 3632 - distcc (CVE-2004-2687), Abusing SUID Nmap (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Lame HackTheBox Writeup |
:linux: | Underpass HackTheBox Linux Easy | Underpass HackTheBox Easy Linux machine writeup covering UDP Enumeration, Default Credentials (DaloRADIUS), Password Cracking, Privilege Escalation via SUDO (mosh-server), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Underpass HackTheBox Writeup |
:linux: | BoardLight HackTheBox Linux Easy | BoardLight HackTheBox Easy Linux machine writeup covering Subdomain Enumeration, Dolibarr 17.0.0 Exploitation - CVE-2023-30253, Information Leakage (User Pivoting), Enlightenment SUID Binary Exploitation (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | BoardLight HackTheBox Writeup |
:linux: | Delivery HackTheBox Linux Easy | Delivery HackTheBox Easy Linux machine writeup covering Virtual Hosting Enumeration, Abusing Support Ticket System, Access to MatterMost, Information Leakage, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Delivery HackTheBox Writeup |
:linux: | Keeper HackTheBox Linux Easy | Keeper HackTheBox Easy Linux machine writeup covering Abusing Request Tracker, Information Leakage, Obtaining KeePass password through memory dump (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Keeper HackTheBox Writeup |
:linux: | Nunchucks HackTheBox Linux Easy | Nunchucks HackTheBox Easy Linux machine writeup covering NodeJS SSTI (Server Side Template Injection), AppArmor Profile Bypass (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Nunchucks HackTheBox Writeup |
:linux: | NodeBlog HackTheBox Linux Easy | NodeBlog HackTheBox Easy Linux machine writeup covering NoSQL Injection (Authentication Bypass), XXE File Read, NodeJS Deserialization Attack (IIFE Abusing), Mongo Database Enumeration, with practical enumeration, exploitation, foothold, and privilege escalation notes. | NodeBlog HackTheBox Writeup |
:linux: | Horizontall HackTheBox Linux Easy | Horizontall HackTheBox Easy Linux machine writeup covering Information Leakage, Port Forwarding, Strapi CMS Exploitation, Laravel Exploitation, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Horizontall HackTheBox Writeup |
:linux: | Scriptkiddie HackTheBox Linux Easy | Scriptkiddie HackTheBox Easy Linux machine writeup covering Msfvenom Exploitation (CVE-2020-7384) (RCE), Abusing Logs + Cron Job (Command Injection and User Pivoting), Abusing Sudoers Privilege (Msfconsole Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Scriptkiddie HackTheBox Writeup |
:linux: | Previse HackTheBox Linux Easy | Previse HackTheBox Easy Linux machine writeup covering Web Enumeration, Execution After Redirect (EAR) Vulnerability - Skipping Redirects, PHP Source Code Analysis, Command Injection (RCE), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Previse HackTheBox Writeup |
:linux: | Dog HackTheBox Linux Easy | Dog HackTheBox Easy Linux machine writeup covering Extracting information from .git folder (Information Leakage), Authenticated Remote Code Execution (CMS Backdrop), Pivoting (Password Reuse), Sudo bee binary (Executing PHP Code) (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Dog HackTheBox Writeup |
:linux: | Titanic HackTheBox Linux Easy | Titanic HackTheBox Easy Linux machine writeup covering Local File Inclusion (LFI), Gitea Database Extraction, ImageMagick Exploit (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes. | Titanic HackTheBox Writeup |
:linux: | Code HackTheBox Linux Easy | Code HackTheBox Easy Linux machine writeup covering SSTI Exploit – Python Code Editor, SQLite Database Extraction & Hash Cracking, backy.sh Bypass via Path Manipulation (Privilege Escalation), Tar Archive Extraction from Root Directory, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Code HackTheBox Writeup |
:linux: | TwoMillion HackTheBox Linux Easy | TwoMillion HackTheBox Easy Linux machine writeup covering Abusing the API to generate a valid invite code, Abusing the API to elevate our privilege to administrator, Command injection via poorly designed API functionality, Information Leakage, with practical enumeration, exploitation, foothold, and privilege escalation notes. | TwoMillion HackTheBox Writeup |
:linux: | Expressway HackTheBox Linux Easy | Expressway HackTheBox Easy Linux machine writeup covering Knowledge about enumerating and exploiting the IKE service, Linux system enumeration, Exploiting CVE-2025-32462, with practical enumeration, exploitation, foothold, and privilege escalation notes. | Expressway HackTheBox Writeup |
:linux: | Networked HackTheBox Linux Easy | Networked HackTheBox Easy Linux machine writeup covering web enumeration, file-upload validation bypass, cron job command injection, and sudo misconfiguration abuse. | Networked HackTheBox Writeup |
:linux: | Help HackTheBox Linux Easy | Help HackTheBox Linux writeup covering HelpDeskZ file upload, web shell access, and local kernel privilege escalation. | Help HackTheBox Writeup |
:linux: | Sau HackTheBox Linux Easy | Sau HackTheBox Easy Linux machine writeup covering Request-Baskets SSRF, Maltrail command injection, and systemctl pager escape for root access. | Sau HackTheBox Writeup |