~ / writeups

hack the box_

Attack-chain writeups and tracking for Hack The Box machines and challenges — from initial recon to root.

25 Active Targets 10 Retired Writeups 12 Machines + 22 Challenges + 1 Sherlock User + Root

Active machine, challenge, and Sherlock writeups are withheld in accordance with Hack The Box rules until retirement. Retired writeups contain full unredacted chains from recon to root. ↳ view my HTB profile

Active Active Challenges

18 Challenges · Writeups Release at Retirement
Active
Baby Time Capsule
Easy · Cryptography · Håstad broadcast RSA (small e=5, message reuse)
↳
Active
BabyEncryption
Very Easy · Cryptography · Modular affine cipher brute-force
↳
Active
CubeMadness1
Very Easy · GamePwn · Cheat Engine memory manipulation
↳
Active
CubeMadness2
Easy · GamePwn · Cheat Engine memory manipulation
↳
Active
Espresso
Very Easy · Hardware · ESP32 firmware analysis & Tensilica Xtensa emulation
↳
Active
Ether Tag
Easy · Hardware/ICS · CIP Symbol Object enumeration
↳
Active
First Contact
Easy · Satellite · Skyfield SGP4 pass prediction
↳
Active
Global Hyperlink Zone
Easy · Crypto / Quantum · GHZ entanglement circuit
↳
Active
Low Logic
Very Easy · Hardware · circuit logic → bit string → ASCII flag
↳
Active
Lucky Dice
Very Easy · Misc · Socket protocol & automation
↳
Active
Restaurant
Easy · Pwn · 64-bit ELF buffer overflow & ret2libc execution
↳
Active
Scalped Platform
Very Easy · Hardware / Forensics · U-Boot I2C EEPROM + AES-CBC
↳
Active
Social Media Investigation Hub
Very Easy · OSINT · social media identity correlation
↳
Active
Space Explorer
Easy · Web · JSON deserialization differential
↳
Active
The Last Dance
Very Easy · Crypto · ChaCha20 keystream reuse (XOR)
↳
Active
The Puppet Master
Very Easy · OSINT · reverse image search → vehicle ID
↳
Active
The Suspicious Domain
Very Easy · OSINT · WHOIS / DNS domain investigation
↳
Active
TreaPortal
Easy · Web · HPP + SQL injection auth bypass
↳

Active Active Sherlocks

1 Sherlock · Writeups Release at Retirement