hackthebox-writeups

Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

https://www.hackthebox.eu/

Important All Challenge Writeups are password protected with the corresponding flag.
Active machines writeups are protected with the corresponding root flag.

Disclaimer

It is totally forbidden to unprotect (remove the password) and distribute the pdf files of active machines, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of active machines in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.

Submissions

If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to: hackplayers_at_Ymail.com.

In this way, you will be added to our top contributors list (see below) and you will also receive an invitation link to an exclusive Telegram group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an active machine it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special" Telegram group is also to have a hacker level or higher (no script kiddies).

Star contributors (+5 writeups)

No	ctry	nick	avatar	team	machines	challenges
1		Fiti		L1k0rD3B3ll0t4	Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, Valentine, Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline, Ghoul, Bastion, Swagshop, Ellingson, Writeup, Chainsaw, Haystack, Jarvis, Player, Smasher2, Unattended, Kryptos	Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Loves Graphs, Sick Teacher, Weak RSA, Fuzzy, I Know Mag1k, Grammar
2		drx51		solitaire wolf	Celestial, Dev0ops, Nibbles, Shocker, Valentine, Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce
3		volken		SinHack	Poison, Jerry, Curling, Help, Irked, Popcorn	0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro
4		wilsonnkwan		CyberFrenzy	Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel, Ellingson, Luke, Kryptos, Smasher2, Ghoul, Unattended, Craft
5		SirBroccoli		Solitaire wolf	SwagShop, Jarvis, OneTwoSeven, Haystack, Heist, Bitlab, Wall, Bankrobber	Emdee five for life, Craft, FreeLancer, Bombs landed, Eat the cake, Headache, Find the secret flag, Debugme, Impossible password, DSYM, Snake, Find the easy pass, Obscure, Crooked crockford
6		pimmytrousers		BitsPlz	Bounty, Celestial, Jerry, Poison, Sunday, Valentine, Canape, Stratosphere, Dev0ops
7		mcruz		solitaire wolf	Valentine, Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier
8		1v4n		solitaire wolf	Olympus, Jerry, Curling, Netmon	Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake, Easy Phis
9		KaoRz		L1k0rD3B3ll0t4	Olympus, Secnotes, Ypuffy, Smasher	Find the easy pass, Impossible Password, ropme, Old Bridge, ropmev2, Dream diary 1, Dream diary 2
10		frosters		solitaire wolf	Aragog, Silo, Bounty, Rabbit, Dev0ps, Valentine, Secnotes, Oz
11		artikrh		Sushi	Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access
12		Sekisback		solitaire wolf	Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune
13		crysal0		SKPH4X	Bastion, Writeup, SwagShop	Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman, Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Widescreen, Digital Cube, Pusheen Loves Graphs, 0ld is g0ld, Eternal loop, Blackhole, misDIRection, fs0ciety, Longbottoms Locker, Inferno, Grammar, I know Mag1k
14		Magichk		Watch4Hack	Luke, Writeup	Please, don't share, Bank Heist, MarketDump, Emdee five for life, Fuzzy, August, Easy Phish, DSYM
15		icebreakcrypt		Solitaire wolf		Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Loves Graphs, Milkshake, Raining blood, The Future Bender, Decode me
16		d0n601		mystiko	Luke, SwagShop, Writeup, Jarvis, Haystack, Craft	snake , Emdee five for life, Fuzzy, Easy Phish
17		amber		solitaire wolf	Vault, Giddy, Frolic, Chaos	Infinite Descent, Call

Occasional contributors (2-5 writeups)

Ctry	nick	avatar	team	machines	challenges
	manulqwerty		L1k0rD3B3ll0t4	Stratosphere, Canape, Nibbles, Bounty, Jarvis,
	humurabbi		Solitaire wolf	Safe,Heist, Unattended, Networked, Craft
	mansoor		Solitaire wolf	Ellingson, Safe, Frolic, OneTwoSeven, Ghoul
	Leonishan		solitaire wolf	Helpline, Unattended	Blue Shadow, Reminiscent, Took the byte
	wilde		Solitaire wolf	Active, Waldo, Hawk, Zipper
	fibbot		solitaire wolf	Celestial, Poison, Canape, Sunday
	spenkk		Sentry	Bart, Dev0ops, Dropzone	snake
	ozunu		OzunuClan	Giddy, Irked, Teacher, Access
	n4xh4ck5		solitaire wolf	Jerry, PopCorn, Haircut, Curling
	3v4Si0N		FuckTheBox	Canape, TartarSauce, Bounty
	Pitenager		solitaire wolf	Blue, Mirai, Nibbles	Cartographer, Lernaean
	x4nt0n		AlphaPwner	Sunday, Olympus, Access	Marshal In The Middle
	FrankyTech		L1k0rD3B3ll0t4	Active, Dev0ops, Olympus
	TheLegend		solitaire wolf	Active, Dev0ops	I know Mag1k, Snake
	kabutor		solitaire wolf	Aragog, Access, LaCasaDePapel_alt
	Vis0r		L1k0rD3B3ll0t4	Blocky, Chatterbox	Matrioshka
	31337			Writeup, Haystack, Ellingson
	giru		solitaire wolf	Irked, Bounty
	morph3		solitaire wolf	Help, Friendzone
	Paint		solitaire wolf	Carrier, Ethereal
	Ghostpp7		L1k0rD3B3ll0t4	Valentine, TartarSauce
	o00o		solitarire wolf	Reel, Nightmare
	felli0t		solitaire wolf	DevOops, Chatterbox
	CyberVaca		L1k0rD3B3ll0t4	Chatterbox, Reddish
	b1gb1t		r00th4ck	Sunday, Active
	roskyfrosky		solitaire wolf	Jerry, Celestial
	Sephiroth		Bin4ryCh4os	Fortune, Vault
	OscarAkaElvis		FuckTheBox	Olympus	The Art of Reversing, I know Mag1k, Retro
	BinaryShadow		Watch4Hack	Safe	Call, Crack this!, Decode me
	tabacci		Solitaire wolf	HackBack, RE	Obscure
	thereallulz		solitaire wolf		Retro, Monstrosity, Senseless Behaviour
	luthorien		ARGSS		Not Art, Grammar, Hidden in Colors
	Pepelu		Solitaire wolf	Player, Craft
	w4tchw0lf		L1k0rD3B3ll0t4		BitsNBytes, Monstrosity
	SadFud		solitaire wolf		Impossible Password, Find the easy pass
	epi		Hackmethod	Ypuffy, SwagShop
	v3he		solitaire wolf		Old Bridge, ropmev2
	3l33t		solitaire wolf	Safe, Jarvis, Player

Fleeting contributors (1 writeup)

Ctry	nick	avatar	team	machines	challenges
	absolutezero		Sentry	Fighter
	xephrox		solitaire wolf	Mischief
	worldunruled		hackmethod	Active
	rtheory		FlavorTown	Reddish
	thereverend		solitaire wolf	Active
	Zaiuss		L1k0rD3B3ll0t4	Celestial
	attl4s		juankeres	Falafel
	kauffman		solitaire wolf	Poison
	revil		solitaire wolf	Sunday
	k4nj1d		solitaire wolf	nibbles
	giovii		criuz	Mischief
	3zculprit		solitaire wolf	Olympus
	FuxSocy		PhobosGroup	Dev0ops
	abselithat		Pratum	Chatterbox
	Killerloops		prosegur		Tear or dear
	Renero		criuz		Digital Cube
	Gibdeon		PKTeam		Old Bridge
	therearwindow		solitaire wolf		Beatles
	malwrecon		solitaire wolf	Ypuffy
	labyrinth		badwolf		Ebola Virus
	zdravich		TMHC	Carrier	Mission Impossible
	Wh04m1		YoRHa		Ropme
	coldBug		NeatMalwAreParty	Curling
	dionero		solitaire wolf	Jerry
	TheShahzada		solitaire wolf	Mischief
	SadClown		solitaire wolf	Redcross
	julianjm		solitaire wolf		Old Bridge
	snowman418		solitaire wolf	Reel
	jondow		Bailando	Help
	lolfireball		solitaire wolf	Lightweight
	solsanctum		solitaire wolf	Carrier
	fbbc		solitaire wolf	Conceal
	4lexag		EphorSec		Cryptohorrific_es, Cryptohorrific_en
	superhedgy		Solitaire wolf	Netmon
	blazz3		PwnD34L3rS	Sizzle
	Marduk		PwnD34L3rS	Helpline
	lduros		solitaire wolf	SwagShop
	explmuzz		N00b543V3R	Bastion
	AlhA		solitaire wolf		Emdee Five for Live
	liamm		PORTKNOCKWHOSTHERE	Jarvis
	cavla		Solitaire wolf		Crooked Crockford
	entropy		Solitaire wolf		Crooked Crockford
	MrP4p3r		Solitaire wolf		Fuzzy
	emmanuel		Solitaire wolf	Craft
	Cript0crc		Solitaire wolf		Eemedefive for live
	bWlrZQo		USCh4ck3r5	Craft
	ChrisTo		Solitaire wolf	Bastion
	naveen1729		Solitaire wolf	Player
	Jacker31		NightTrain	Heist
	AmbrotD		Solitaire wolf		USB Ripper
	egotisticalSW		Solitaire wolf	Heist
	danielcues		Ripp3rs		Mission Impossible
	arcc		Solitaire wolf	json bitlab
	CRYPT0HEX		Solitaire wolf	Writeup
	couchpotato		Solitaire wolf	Heist
	sneakypanda		Mystiko	Zetta
	hyperreality		Solitaire wolf		Optimus Prime

Special note

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of active machines, even knowing that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we have asked the HTB admins and they have given us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they have decided to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

Hackplayers community, HTB Hispano & Born2root groups.