Linux

Hack The Box - HTB Takeoff Hard - Weekly - October 31th, 2026

October 31, 2026

From zero to root on a Go flight-booking app. Written so you can understand the theory behind every step and reproduce it. Difficulty: Medium · Linux · SSTI → LFI → HMAC key leak → signature forgery → RCE → n8n → container escape → root Flag Value user.txt root.txt Note. Flag values are intentionally omitted from this copy. This document gives you the full method and theory — the flags are yours to capture by following the steps on a live instance. Chain at a glance SSTI in the ticket notes → arbitrary file read (LFI) &#x…