> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/writeups-ctf/hackthebox/windows-easy.md). # HTB Windows Easy HackTheBox Windows Easy machine writeups covering SMB, Active Directory enumeration, WinRM, file disclosure, service abuse, credential attacks, and Windows privilege escalation. Windows Easy HackTheBox machines focused on SMB, WinRM, Active Directory basics, service abuse, and privilege escalation.

:windows:

Active HackTheBox Windows Easy

Active HackTheBox Easy Windows machine writeup covering SMB Enumeration, Cracking ZIP Password Protected File (fcrackzip), Cracking and reading .PFX File (crackpkcs12), Gaining SSL access with Evil-WinRM, with practical enumeration, exploitation, foothold, and privilege escalation notes.Active HackTheBox Writeup

:windows:

TimeLapse HackTheBox Windows Easy

TimeLapse HackTheBox Easy Windows machine writeup covering SMB Enumeration, Cracking ZIP Password Protected File (fcrackzip), Cracking and reading .PFX File (crackpkcs12), Gaining SSL access with Evil-WinRM, with practical enumeration, exploitation, foothold, and privilege escalation notes.TimeLapse HackTheBox Writeup

:windows:

Sauna HackTheBox Windows Easy

Sauna HackTheBox Easy Windows machine writeup covering Information Leakage, LDAP Enumeration, Kerberos User Enumeration - Kerbrute, AS-REP Roasting Attack (GetNPUsers), with practical enumeration, exploitation, foothold, and privilege escalation notes.Sauna HackTheBox Writeup

:windows:

Forest HackTheBox Windows Easy

Forest HackTheBox Easy Windows machine writeup covering AXFR - Domain Zone Transfer Attack (Failed), RPC Enumeration - Getting valid domain users, Performing an AS-RepRoast attack with the obtained users, Cracking Hashes, with practical enumeration, exploitation, foothold, and privilege escalation notes.Forest HackTheBox Writeup

:windows:

Support HackTheBox Windows Easy

Support HackTheBox Easy Windows machine writeup covering SMB Enumeration, EXE Binary Analysis, Debugging with DNSpy, Setting breakpoints and getting an LDAP password in clear text (DNSpy), with practical enumeration, exploitation, foothold, and privilege escalation notes.Support HackTheBox Writeup

:windows:

Remote HackTheBox Windows Easy

Remote HackTheBox Easy Windows machine writeup covering Web Enumeration, NFS Enumeration - Showmount, Information Leakage, Abusing Umbraco Admin Panel, with practical enumeration, exploitation, foothold, and privilege escalation notes.Remote HackTheBox Writeup

:windows:

Love HackTheBox Windows Easy

Love HackTheBox Easy Windows machine writeup covering SQL injection (SQLI), Server Side Request Forgery (SSRF), File Upload Abuse, Exploiting Voting System, with practical enumeration, exploitation, foothold, and privilege escalation notes.Love HackTheBox Writeup

:windows:

Driver HackTheBox Windows Easy

Driver HackTheBox Easy Windows machine writeup covering Password Guessing, SCF Malicious File, Print Spooler Local Privilege Escalation (PrintNightmare) (CVE-2021-1675], with practical enumeration, exploitation, foothold, and privilege escalation notes.Driver HackTheBox Writeup

:windows:

Artic HackTheBox Windows Easy

Artic HackTheBox Easy Windows machine writeup covering Adobe ColdFusion 8 Exploitation, Directory Traversal Vulnerability, Cracking Hashes, Abusing Scheduled Tasks - Creating malicious JSP file, with practical enumeration, exploitation, foothold, and privilege escalation notes.Artic HackTheBox Writeup

:windows:

Return HackTheBox Windows Easy

Return HackTheBox Easy Windows machine writeup covering Network Printer Abuse, Abusing Server Operators Group, Service Configuration Handling, with practical enumeration, exploitation, foothold, and privilege escalation notes.Return HackTheBox Writeup

:windows:

Optium HackTheBox Windows Easy

Optium HackTheBox Easy Windows machine writeup covering HttpFileServer 2.3 Exploitation (RCE), System Enumeration - Windows Exploit Suggester, Windows Server 12 (MS16-032) (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Optimum HackTheBox Writeup

:windows:

Toolbox HackTheBox Windows Easy

Toolbox HackTheBox Easy Windows machine writeup covering PostgreSQL Injection (RCE), Pivoting, Abusing boot2docker (Docker-Toolbox), with practical enumeration, exploitation, foothold, and privilege escalation notes.Toolbox HackTheBox Writeup

:windows:

Jerry HackTheBox Windows Easy

Jerry HackTheBox Easy Windows machine writeup covering Information Leakage, Abusing Tomcat (Intrusion and Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Jerry HackTheBox Writeup

:windows:

Devel HackTheBox Windows Easy

Devel HackTheBox Easy Windows machine writeup covering aspnet_client, iisstart.htm, welcome.png, with practical enumeration, exploitation, foothold, and privilege escalation notes.Devel HackTheBox Writeup

:windows:

Netmon HackTheBox Windows Easy

Netmon HackTheBox Easy Windows machine writeup covering FTP enumeration, Information leakage, PRTG Network Monitor credential disclosure, PRTG notification command execution, with practical enumeration, exploitation, foothold, and privilege escalation notes.Netmon HackTheBox Writeup

:windows:

Granny HackTheBox Windows Easy

Granny HackTheBox Easy Windows machine writeup covering Abusing PUT & MOVE Methods - Uploading Aspx WebShell, Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow (RCE), Token Kidnapping - Churrasco (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Granny HackTheBox Writeup

:windows:

Cicada HackTheBox Windows Easy

Cicada HackTheBox Easy Windows machine writeup covering SMB Enumeration (RID-Brute), Information Leakage (User Description) (netexec), Privilege Escalation (SeBackupPrivilege), SAM Extraction (pypykatz), with practical enumeration, exploitation, foothold, and privilege escalation notes.Cicada HackTheBox Writeup

:windows:

EscapeTwo HackTheBox Windows Easy

EscapeTwo HackTheBox Easy Windows machine writeup covering SMB Enumeration, Information Password Leakage (zip, Excel file), MSSQL (Microsoft SQL) Exploitation RCE, BloodHund Enumeration, with practical enumeration, exploitation, foothold, and privilege escalation notes.EscapeTwo HackTheBox Writeup

:windows:

Grandpa HackTheBox Windows Easy

Grandpa HackTheBox Easy Windows machine writeup covering Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow (RCE), Token Kidnapping - Churrasco (Privilege Escalation), with practical enumeration, exploitation, foothold, and privilege escalation notes.Grandpa HackTheBox Writeup

:windows:

Legacy HackTheBox Windows Easy

Legacy HackTheBox Easy Windows machine writeup covering SMB Enumeration, Eternalblue Exploitation (MS17-010) (Triple Z Exploit), with practical enumeration, exploitation, foothold, and privilege escalation notes.Legacy HackTheBox Writeup

:windows:

ServMon HackTheBox Windows Easy

ServMon is a Windows machine that combines FTP enumeration, NVMS-1000 directory traversal, and NSClient++ misconfiguration. Gain initial access through exposed credentials, then escalate privileges by executing an external script as SYSTEM.ServMon HackTheBox Writeup

:windows:

Access HackTheBox Windows Easy

A beginner-friendly Hack The Box Windows machine covering FTP enumeration, database credential recovery, Outlook PST analysis, stored credentials, and DPAPI decryption.Access HackTheBox Writeup

:windows:

Bounty HackTheBox Windows Easy

A Hack The Box Windows machine covering IIS enumeration, web.config upload bypass, SMB-based reverse shells, and Juicy Potato privilege escalation.Bounty HackTheBox Writeup

:windows:

Heist HackTheBox Windows Easy

Heist HackTheBox Easy Windows machine writeup covering web enumeration, Cisco Type 5 and Type 7 password recovery, SMB credential validation, WinRM access, Firefox process memory analysis, and Administrator privilege escalation.Heist HackTheBox Writeup
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/writeups-ctf/hackthebox/windows-easy.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.