• Resets
• Flag Submissions
• 'Claiming'

• Machine reviews/star ratings
• Challenge like/dislike
• Prolab testimonial

• Invalid ID (user, team etc.)
• Failure to retrieve all data
• Invalid flag? Might be worth returning True or False

Get the activity of a challenge

Retrieve author(s) for a challenge, similarly to Machines.

The tests are going to run a lot and I'd really like to avoid spam.

Make sure docstring appears before any statements (HoF functions).

• Mock JWT creation so we can deal with expiry
• Either remove this, or mock a case which would cause a failure
• Add a test that triggers this

Add the ability to submit flags for all content types.

• Challenges
• Endgames
• Fortresses
• Machines
• Pro Labs

There is an issue with the API not being able to pull the users avatar, this can be fixed by going to hackthebox/user.py, on line 145 adding self.avatar = f'https://www.hackthebox.com{data["avatar"]}'

• Hostnames
• IP addresses
• Passwords

I was working on a small project using this api, and I needed to get the total ownership of my user. However, the User class doesn't seem to have this as a class attribute, and I think it would be a useful addition. I can obviously calculate total ownership given what I have, but it would be a nice QoL change.

Thanks!

(I would try and contribute this myself but I don't know if I have the time to :) )

I see that currently, for authenticating it is required to add username and password (hardcoded).

Is it possible to add also authentication by providing the API key of the user?

Will we see async support in the future, or is this not planned?

Ideally the examples should demonstrate most of the features - the tests aren't perfect for this purpose.

avg_difficulty -> difficulty_number etc.

Getting machines doesnt seem to be working, I think HTB made some changes?

  File "/usr/local/lib/python3.10/site-packages/hackthebox/htb.py", line 313, in get_machines
    data = cast(dict, self.do_request("machine/list"))['info'][:limit]
  File "/usr/local/lib/python3.10/site-packages/hackthebox/htb.py", line 126, in do_request
    raise NotFoundException
hackthebox.errors.NotFoundException

implement writeup download for retired machine

Avoid the need for casting by splitting this into multiple functions. request_json_data, download, etc. to make static type checking easier

• Pro Lab Leaderboards
• University Leaderboards (Will require some testing of the API)

Currently flag submission is not tested. Since I'd like to avoid mass submitting fake flags, I'd like to use mock to perform testing of these endpoints.

Retrieve the top N:

• Users (/rankings/users)
• VIP users (/rankings/users?vip=1)
• Users per country (/rankings/countries)
• Teams (/rankings/teams)
• Universities (/rankings/universities)

The client authentication process should be refactored to allow for usage like client = HTBClient(), with the user being automatically prompted for details. Failure to provide an OTP should result in a prompt, rather than an exception. Handle the exception with a prompt from __init__?

Add more user-friendly aliases to properties (#41)