Writeups & field notes

Hack The Box - HTB Autopilot Writeup - Insane - Weekly - october 17th, 2026

Target: <TARGET_IP> ( mail.autopilot.htb, Grommunio Linux edge) &#xb7; Attacker: <KALI_IP> (tun0) Domain: autopilot.htb &#xb7; Internal: MAIL MAIL, DC01 DC01, WS02 WS02 OS: Linux (Grommunio) edge in front of a Windows Se

October 17, 2026

Windows

Hack The Box - HTB Touch Writeup - Easy - Weekly - october 3th, 2026

October 3, 2026

Hack The Box - HTB Layover Writeup - Medium- Weekly - September 26th, 2026

September 26, 2026

HTB · Linux

Hack The Box - HTB BlockSynergy Writeup - Insane - Weekly - August 29th, 2026

August 29, 2026

active directory · HTB

Hack The Box - HTB danglingTree Writeup - Meduim - Weekly - August 08th, 2026

August 8, 2026

Hack The Box - HTB Cohort Writeup - Easy - Weekly - August 1st, 2026

Box: Cohort &#xb7; OS: Linux (Ubuntu 24.04) &#xb7; Difficulty: Easy Step 1 &#x2014; Recon Goal: find the attack surface. sudo ip link set dev tun0 mtu 1300 # do this first, see note echo &apos;<TARGET> cohort.htb&apos; |

August 1, 2026

active directory · HTB

Hack The Box - HTB DarkZero Returns Writeup - Hard - Weekly - July 25th, 2026

Difficulty: Hard &#xb7; OS: Windows two-forest Active Directory, reached through a Linux edge host Chain: Handlebars AST type-confusion RCE &#x2192; credential reuse &#x2192; Gitea CI pipeline poisoning &#x2192; service-

July 25, 2026

Hack The Box - HTB BedSide Writeup - Medium - Weekly - July 19th, 2026

Add the vhosts to your hosts file before starting: echo "<TARGET> bedside.htb research.bedside.htb" | sudo tee -a /etc/hosts # HTB VPN frequently black-holes large outbound requests; lower the tunnel MTU to be safe sudo

July 18, 2026

Hack The Box - HTB Paperwork Writeup - Easy - Weekly - July 11th, 2026

1. Enumeration 1.1 Port scan nmap -p- --min-rate 5000 -T4 <TARGET> -oN nmap_allports.txt nmap -sC -sV -p22,80,1515 <TARGET> -oN nmap_services.txt 22/tcp open ssh OpenSSH 10.0p2 Ubuntu 5ubuntu5.4 80/tcp open http nginx 1.

July 11, 2026

Hack The Box - HTB Enigma Writeup - Easy - Weekly - June 27th, 2026

Placeholders used Token Meaning &#x24;TARGET the target machine&apos;s IP &#x24;ATTACKER your VPN (tun0) IP &#x24;LPORT your reverse-shell listener port (e.g. 9001) [REDACTED] value intentionally removed 0. Setup & a net

June 28, 2026

Hack The Box - HTB Nimbus Writeup - Hard - Weekly - June 21th, 2026

OS: Linux &#xb7; Difficulty: Hard &#xb7; Theme: Cloud / AWS (LocalStack) misconfiguration Target <TARGET_IP> Attacker (tun0) <LHOST> /etc/hosts <TARGET_IP> nimbus.htb aws.nimbus.htb 0. Setup & the MTU black-hole (do this

June 20, 2026

Hack The Box - HTB Checkpoint Writeup - Medium - Weekly - June 13th, 2026

HTB: Checkpoint &#x2014; Detailed Writeup (redacted, command-by-command) Target: <target-ip> (DC01) &#xb7; Attacker: <attacker-ip> (tun0) 0. Environment setup &#x2014; two gotchas that will waste hours if missed Before a

June 13, 2026

Hack The Box - HTB Connected Writeup - Easy - Weekly - June 06th, 2026

Difficulty: Easy OS: Linux (CentOS 7) Reconnaissance Port Scan nmap -sV -sC -p- --min-rate 5000 <TARGET_IP> PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.4 (protocol 2.0) 80/tcp open http Apache httpd 2.4.6 ((Cent

June 7, 2026

Hack The Box - HTB DevHub Writeup - Medium - Weekly - May 31th, 2026

HTB Machine: DevHub IP: <TARGET_IP> Attacker IP: <ATTACKER_IP> OS: Ubuntu 22.04.5 LTS Difficulty: Medium Category: Web / MCP Ecosystem / Lateral Movement Reconnaissance Port Scan nmap -Pn -T4 -sV -p- --min-rate 2000 <TAR

May 31, 2026

Hack The Box - HTB Reactor Writeup - Easy - Weekly - May 23th, 2026

Box: Reactor OS: Linux Difficulty: Easy Target IP: <TARGET_IP> Attacker IP: <ATTACKER_IP> ( tun0 ) 1. Reconnaissance 1.1 Port Scan A full TCP port sweep followed by a targeted service/version scan: nmap -Pn -p- --min-rat

May 23, 2026