HackTheBox Writeups

List of writeups published on HackTheBox

Posts found: 14

Outbound

A HackTheBox active easy Linux machine focused on web enumeration and privilege escalation, protected by Root's hash encryption to prevent spoilers and ensure only those who complete the machine can fully access its details.

Posted by: on

Category: HackTheBox
Outbound

Read the WriteUp →

Voleur

A HackTheBox active Medium Windows machine focused on Active Directory enumeration and privilege escalation, protected by NTLM hash encryption to prevent spoilers and ensure only those who complete the machine can fully access its details.

Posted by: on

Category: HackTheBox
Voleur

Read the WriteUp →

RustyKey

A HackTheBox active Hard Windows machine focused on Active Directory enumeration and privilege escalation, protected by NTLM hash encryption to prevent spoilers and ensure only those who complete the machine can fully access its details.

Posted by: on

Category: HackTheBox
RustyKey

Read the WriteUp →

EBS

The EBS platform is a web application hosted on AWS infrastructure, designed to broadcast emergency alerts. As part of a penetration test conducted on May 27, 2025, we aim to evaluate the security of the system by attempting to bypass authentication, explore backend services, and identify any exposed sensitive data.

Posted by: on

Category: HackTheBox
EBS

Read the WriteUp →

Volnaya Forums

This write up details the exploitation of a web application in a white-box CTF scenario, where we have access to the source code. The goal is to retrieve the flag stored in`/flag.txt, accessible via the /api/auth endpoint for the admin user.

Posted by: on

Category: HackTheBox
Volnaya Forums

Read the WriteUp →

Dashboarded

The goal is to infiltrate Volnaya's cloud-based Industrial Control System (ICS) monitoring network, locate sensitive data, and enable the Task Force to assume control of their core systems. The entry point is a web application hosted at `3.15.107.79`, which is vulnerable to Server-Side Request Forgery (SSRF). Ultimately, we aim to retrieve critical system information and capture the flag.

Posted by: on

Category: HackTheBox
Dashboarded

Read the WriteUp →

Chemistry

Chemistry is an easy difficulty machine on HackTheBox that takes you through a series of steps involving network enumeration, web application testing, and privilege escalation. The challenge provides an opportunity to practice various ethical hacking techniques in a controlled environment, ultimately leading to gaining root access.

Posted by: on

Category: HackTheBox
Chemistry

Read the WriteUp →

Blackfield

Backfield is a Windows machine that involves exploiting Active Directory misconfigurations, performing AS-REP roasting to crack user passwords, and leveraging Backup Operators privileges. The attack involves SMB enumeration, retrieving credentials from lsass, and dumping the Active Directory database to obtain the domain administrator's hash.

Posted by: on

Category: HackTheBox
Blackfield

Read the WriteUp →

Escape

Escape is a medium-difficulty Windows AD machine. It begins with an SMB share exposing a sensitive file containing credentials. Using these credentials, an attacker can gain access to the machine and escalate privileges. Further enumeration reveals a vulnerable certificate template that can be exploited to gain administrator access.

Posted by: on

Category: HackTheBox
Escape

Read the WriteUp →

Trickster

Trickster is a medium-difficulty machine on the HackTheBox platform. This machine primarily focuses on web exploitation, leveraging techniques such as SSTI (Server-Side Template Injection) and XSS (Cross-Site Scripting), among others. Additionally, we will need to perform pivoting to gain access to a Docker container and later exploit sudo privileges by analyzing the sudoers configuration.

Posted by: on

Category: HackTheBox
Trickster

Read the WriteUp →

Cascade

Cascade is a medium difficulty Windows machine acting as a Domain Controller. Through enumeration and exploiting certain Active Directory features, we discover a series of credentials leading to escalating privileges. The key to success lies in leveraging the AD Recycle Bin to retrieve valuable information and ultimately gain access to the domain administrator account.

Posted by: on

Category: HackTheBox
Cascade

Read the WriteUp →

Resolute

Resolute is a medium-difficulty machine on Hack The Box that focuses on enumeration, privilege escalation, and exploiting misconfigurations in services and group memberships. The machine provides a hands-on opportunity to practice techniques related to Active Directory, DNS misconfigurations, and privilege escalation, ultimately leading to system-level access.

Posted by: on

Category: HackTheBox
Resolute

Read the WriteUp →

Sauna

Sauna is an easy-level machine that challenges you to perform internal network penetration testing within an Active Directory environment. It involves techniques such as website OSINT for gathering potential usernames, BloodHound enumeration for mapping attack paths, and executing DCSync attacks to extract password hashes.

Posted by: on

Category: HackTheBox
Sauna

Read the WriteUp →

Active

Active is a relatively straightforward machine, perfect for getting started with Active Directory. In this machine, we'll explore techniques like Kerberoasting and GPP Passwords, two common methods for privilege escalation in AD environments. Great for practicing and understanding key concepts!

Posted by: on

Category: HackTheBox
Active

Read the WriteUp →