Writeups / HackTheBox

HackTheBox

Per-machine writeups in the recon -> enumeration -> foothold -> privesc -> root structure. Writeups publish only after a box retires.

MachineOSDifficultyThemeRetiredWriteup
CohortLinuxMediumssrf, rce, cve, privesc09 Aug 2026Read ->
DownLinuxEasyweb, argument-injection, privesc20 Jun 2025Read ->
RedeemerLinuxVery Easyredis, unauthenticated11 May 2022Read ->
AppointmentLinuxVery Easyweb, sql-injection, auth-bypass06 Oct 2021Read ->
SequelLinuxVery Easymariadb, misconfiguration, information-schema06 Oct 2021Read ->
DancingWindowsVery Easysmb, anonymous-access, null-session30 Sept 2021Read ->
FawnLinuxVery Easyftp, anonymous-access, vsftpd30 Sept 2021Read ->
MeowLinuxVery Easytelnet, default-credentials, pam30 Sept 2021Read ->