hackthebox-writeups

Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

https://www.hackthebox.eu/

Important All Challenge Writeups are password protected with the corresponding flag.
Active machines writeups are protected with the corresponding root flag.

Disclaimer

It is totally forbidden to unprotect (remove the password) and distribute the pdf files of active machines, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of active machines in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.

Submissions

If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to: hackplayers_at_Ymail.com.

In this way, you will be added to our top contributors list (see below) and you will also receive an invitation link to an exclusive Telegram group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an active machine it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special" Telegram group is also to have a hacker level or higher (no script kiddies).

Contributors

No	ctry	nick	avatar	team	machines	challenges
1		Fiti		L1k0rD3B3ll0t4	Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, Valentine, Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline, Ghoul, Bastion, Swagshop, Ellingson, Writeup, Chainsaw, Haystack, Jarvis, Player, Smasher2, Unattended, Kryptos	Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Loves Graphs, Sick Teacher, Weak RSA, Fuzzy, I Know Mag1k, Grammar
2		drx51		solitaire wolf	Celestial, Dev0ops, Nibbles, Shocker, Valentine, Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce
3		volken		SinHack	Poison, Jerry, Curling, Help, Irked, Popcorn	0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro
4		wilsonnkwan		CyberFrenzy	Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel, Ellingson, Luke, Kryptos, Smasher2, Ghoul, Unattended, Craft
5		SirBroccoli		Solitaire wolf	SwagShop, Jarvis, OneTwoSeven, Haystack, Heist, Bitlab, Wall, Bankrobber	Emdee five for life, Craft, FreeLancer, Bombs landed, Eat the cake, Headache, Find the secret flag, Debugme, Impossible password, DSYM, Snake, Find the easy pass, Obscure, Crooked crockford
6		pimmytrousers		BitsPlz	Bounty, Celestial, Jerry, Poison, Sunday, Valentine, Canape, Stratosphere, Dev0ops
7		mcruz		solitaire wolf	Valentine, Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier
8		1v4n		solitaire wolf	Olympus, Jerry, Curling, Netmon	Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake, Easy Phis
9		KaoRz		L1k0rD3B3ll0t4	Olympus, Secnotes, Ypuffy, Smasher	Find the easy pass, Impossible Password, ropme, Old Bridge, ropmev2, Dream diary 1, Dream diary 2
10		frosters		solitaire wolf	Aragog, Silo, Bounty, Rabbit, Dev0ps, Valentine, Secnotes, Oz
11		artikrh		Sushi	Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access
12		Sekisback		solitaire wolf	Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune
13		crysal0		SKPH4X	Bastion, Writeup, SwagShop	Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman, Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Widescreen, Digital Cube, Pusheen Loves Graphs, 0ld is g0ld, Eternal loop, Blackhole, misDIRection, fs0ciety, Longbottoms Locker, Inferno, Grammar, I know Mag1k
14		Magichk		Watch4Hack	Luke, Writeup	Please, don't share, Bank Heist, MarketDump, Emdee five for life, Fuzzy, August, Easy Phish, DSYM
15		icebreakcrypt		Solitaire wolf		Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Loves Graphs, Milkshake, Raining blood, The Future Bender, Decode me
16		manulqwerty		L1k0rD3B3ll0t4	Stratosphere, Canape, Nibbles, Bounty, Jarvis,
17		amber		solitaire wolf	Vault, Giddy, Frolic, Chaos	Infinite Descent, Call
18		d0n601		mystiko	Luke, SwagShop, Writeup, Jarvis, Haystack, Craft	snake , Emdee five for life, Fuzzy, Easy Phish
19		Leonishan		solitaire wolf	Helpline, Unattended	Blue Shadow, Reminiscent, Took the byte
20		wilde		Solitaire wolf	Active, Waldo, Hawk, Zipper
21		fibbot		solitaire wolf	Celestial, Poison, Canape, Sunday
22		spenkk		Sentry	Bart, Dev0ops, Dropzone	snake
23		ozunu		OzunuClan	Giddy, Irked, Teacher, Access
24		n4xh4ck5		solitaire wolf	Jerry, PopCorn, Haircut, Curling
25		3v4Si0N		L1k0rD3B3ll0t4	Canape, TartarSauce, Bounty
26		Pitenager		solitaire wolf	Blue, Mirai, Nibbles	Cartographer, Lernaean
27		x4nt0n		AlphaPwner	Sunday, Olympus, Access	Marshal In The Middle
28		FrankyTech		L1k0rD3B3ll0t4	Active, Dev0ops, Olympus
29		TheLegend		solitaire wolf	Active, Dev0ops	I know Mag1k, Snake
30		kabutor		solitaire wolf	Aragog, Access, LaCasaDePapel_alt
31		Vis0r		L1k0rD3B3ll0t4	Blocky, Chatterbox	Matrioshka
32		giru		solitaire wolf	Irked, Bounty
33		morph3		solitaire wolf	Help, Friendzone
34		Paint		solitaire wolf	Carrier, Ethereal
35		Ghostpp7		L1k0rD3B3ll0t4	Valentine, TartarSauce
36		o00o		solitarire wolf	Reel, Nightmare
37		felli0t		solitaire wolf	DevOops, Chatterbox
38		CyberVaca		L1k0rD3B3ll0t4	Chatterbox, Reddish
39		b1gb1t		r00th4ck	Sunday, Active
40		roskyfrosky		solitaire wolf	Jerry, Celestial
41		Sephiroth		Bin4ryCh4os	Fortune, Vault
42		OscarAkaElvis		FuckTheBox	Olympus	The Art of Reversing, I know Mag1k, Retro
43		BinaryShadow		Watch4Hack	Safe	Call, Crack this!, Decode me
44		tabacci		Solitaire wolf	HackBack, RE	Obscure
45		thereallulz		solitaire wolf		Retro, Monstrosity, Senseless Behaviour
46		luthorien		ARGSS		Not Art, Grammar, Hidden in Colors
47		absolutezero		Sentry	Fighter
48		xephrox		solitaire wolf	Mischief
49		worldunruled		hackmethod	Active
50		rtheory		FlavorTown	Reddish
51		thereverend		solitaire wolf	Active
52		Zaiuss		L1k0rD3B3ll0t4	Celestial
53		attl4s		juankeres	Falafel
54		kauffman		solitaire wolf	Poison
55		revil		solitaire wolf	Sunday
56		k4nj1d		solitaire wolf	nibbles
57		giovii		criuz	Mischief
58		3zculprit		solitaire wolf	Olympus
59		w4tchw0lf		L1k0rD3B3ll0t4		BitsNBytes, Monstrosity
60		SadFud		solitaire wolf		Impossible Password, Find the easy pass
61		FuxSocy		PhobosGroup	Dev0ops
62		abselithat		Pratum	Chatterbox
63		Killerloops		prosegur		Tear or dear
64		Renero		criuz		Digital Cube
65		Gibdeon		PKTeam		Old Bridge
66		therearwindow		solitaire wolf		Beatles
67		malwrecon		solitaire wolf	Ypuffy
68		labyrinth		badwolf		Ebola Virus
69		zdravich		TMHC	Carrier	Mission Impossible
70		epi		Hackmethod	Ypuffy, SwagShop
71		Wh04m1		YoRHa		Ropme
72		coldBug		NeatMalwAreParty	Curling
73		dionero		solitaire wolf	Jerry
74		TheShahzada		solitaire wolf	Mischief
75		SadClown		solitaire wolf	Redcross
76		julianjm		solitaire wolf		Old Bridge
77		snowman418		solitaire wolf	Reel
78		jondow		Bailando	Help
79		lolfireball		solitaire wolf	Lightweight
80		solsanctum		solitaire wolf	Carrier
81		fbbc		solitaire wolf	Conceal
82		4lexag		EphorSec		Cryptohorrific_es, Cryptohorrific_en
83		superhedgy		Solitaire wolf	Netmon
84		blazz3		PwnD34L3rS	Sizzle
85		Marduk		PwnD34L3rS	Helpline
86		lduros		solitaire wolf	SwagShop
87		explmuzz		N00b543V3R	Bastion
88		AlhA		solitaire wolf		Emdee Five for Live
89		liamm		PORTKNOCKWHOSTHERE	Jarvis
90		cavla		Solitaire wolf		Crooked Crockford
91		entropy		Solitaire wolf		Crooked Crockford
92		MrP4p3r		Solitaire wolf		Fuzzy
93		Pepelu		Solitaire wolf	Player, Craft
93		emmanuel		Solitaire wolf	Craft
94		Cript0crc		Solitaire wolf		Eemedefive for live
95		bWlrZQo		USCh4ck3r5	Craft
96		ChrisTo		Solitaire wolf	Bastion
97		naveen1729		Solitaire wolf	Player
98		Jacker31		NightTrain	Heist
99		mansoor		Solitaire wolf	Ellingson, Safe, Frolic, OneTwoSeven, Ghoul
100		AmbrotD		Solitaire wolf		USB Ripper
101		humurabbi		Solitaire wolf	Safe,Heist, Unattended, Networked, Craft
102		egotisticalSW		Solitaire wolf	Heist
103		danielcues		Ripp3rs		Mission Impossible
104		v3he		solitaire wolf		Old Bridge, ropmev2
105		arcc			json bitlab

Special note

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of active machines, even knowing that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we have asked the HTB admins and they have given us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they have decided to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

Hackplayers community, HTB Hispano & Born2root groups.