Skip to content
Docs
Hack The Box

Hack The Box

Writeups for retired Hack The Box machines. Each post covers the full attack path: initial recon, foothold, privilege escalation, and any post-exploitation worth noting. Machines are retired at time of writing. Difficulty is shown on each card.

6 machines

HTB - Trick
Linux box: zone transfer to SQLi file read, then writable fail2ban actions.
Easy
HTB - Conversor
Linux box: cron-dir path traversal, then needrestart PYTHONPATH poisoning.
Easy
HTB - Gavel
Linux box: PDO SQLi bypass sqlmap cannot find, then RULE_PATH injection.
Medium
HTB - Expressway
Linux box: IKE aggressive mode leaks a PSK hash, then a sudo bypass.
Easy
HTB - Remote
Windows box: NFS leaks Umbraco creds, then a TeamViewer registry password.
Easy
HTB - Editorial
Linux box: SSRF leaks internal API creds, then a GitPython ext:: RCE.
Easy