Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

https://www.hackthebox.eu/

Important All Challenge Writeups are password protected with the corresponding flag.
Active machines writeups are protected with the corresponding root flag.

It is totally forbidden to unprotect (remove the password) and distribute the pdf files of active machines, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of active machines in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.

If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to: hackplayers_at_Ymail.com.

In this way, you will be added to our top contributors list (see below) and you will also receive an invitation link to an exclusive Telegram group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an active machine it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special" Telegram group is also to have a hacker level or higher (no script kiddies).

No	ctry	nick	avatar	team	machines	challenges
1		Fiti		L1k0rD3B3ll0t4	Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, Valentine, Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline	Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Loves Graphs, Sick Teacher, Weak RSA
2		drx51		solitaire wolf	Celestial, Dev0ops, Nibbles, Shocker, Valentine, Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce
3		volken		SinHack	Poison, Jerry, Curling, Help, Irked, Popcorn	0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro
4		pimmytrousers		BitsPlz	Bounty, Celestial, Jerry, Poison, Sunday, Valentine, Canape, Stratosphere, Dev0ops
5		mcruz		solitaire wolf	Valentine, Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier
6		frosters		solitaire wolf	Aragog, Silo, Bounty, Rabbit, Dev0ps, Valentine, Secnotes, Oz
7		1v4n		solitaire wolf	Olympus, Jerry, Curling	Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake
8		artikrh		Sushi	Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access
9		KaoRz		L1k0rD3B3ll0t4	Olympus, Secnotes, Ypuffy, Smasher	Find the easy pass, Impossible Password, ropme, Old Bridge
10		Sekisback		solitaire wolf	Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune
11		wilsonnkwan		AutismGO	Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel
12		crysal0		SKPH4X		Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Sensless Behaviour, Widescreen, Digital Cube, Pusheen Loves Graphs
13		wilde		Solitaire wolf	Active, Waldo, Hawk, Zipper
14		manulqwerty		L1k0rD3B3ll0t4	Stratosphere, Canape, Nibbles, Bounty
15		fibbot		solitaire wolf	Celestial, Poison, Canape, Sunday
16		spenkk		Sentry	Bart, Dev0ops, Dropzone	snake
17		amber		solitaire wolf	Vault, Giddy, Frolic, Chaos
18		ozunu		OzunuClan	Giddy, Irked, Teacher, Access
19		n4xh4ck5		solitaire wolf	Jerry, PopCorn, Haircut, Curling
20		icebreakcrypt		Solitaire wolf		Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Loves Graphs, Milkshake, Raining blood
21		3v4Si0N		L1k0rD3B3ll0t4	Canape, TartarSauce, Bounty
22		Pitenager		solitaire wolf	Blue, Mirai, Nibbles	Cartographer, Lernaean
23		x4nt0n		AlphaPwner	Sunday, Olympus, Access	Marshal In The Middle
24		FrankyTech		L1k0rD3B3ll0t4	Active, Dev0ops, Olympus
25		TheLegend		solitaire wolf	Active, Dev0ops	I know Mag1k, Snake
26		morph3		solitaire wolf	Help, Friendzone
27		Paint		solitaire wolf	Carrier, Ethereal
28		Ghostpp7		L1k0rD3B3ll0t4	Valentine, TartarSauce
29		kabutor		solitaire wolf	Aragog, Access
30		o00o		solitarire wolf	Reel, Nightmare
31		felli0t		solitaire wolf	DevOops, Chatterbox
32		CyberVaca		L1k0rD3B3ll0t4	Chatterbox, Reddish
33		b1gb1t		r00th4ck	Sunday, Active
34		roskyfrosky		solitaire wolf	Jerry, Celestial
35		Vis0r		L1k0rD3B3ll0t4	Blocky, Chatterbox
36		giru		solitaire wolf	Irked, Bounty
37		Sephiroth		Bin4ryCh4os	Fortune, Vault
38		OscarAkaElvis		L1k0rD3B3ll0t4	Olympus	The Art of Reversing, I know Mag1k, Retro
39		thereallulz		solitaire wolf		Retro, Monstrosity, Senseless Behaviour
40		luthorien		ARGSS		Not Art, Grammar, Hidden in Colors
41		Magichk		Watch4Hack		Please, don't share, Bank Heist, MarketDump
42		absolutezero		Sentry	Fighter
43		xephrox		solitaire wolf	Mischief
44		worldunruled		hackmethod	Active
45		rtheory		FlavorTown	Reddish
46		thereverend		solitaire wolf	Active
47		Zaiuss		L1k0rD3B3ll0t4	Celestial
48		attl4s		juankeres	Falafel
49		kauffman		solitaire wolf	Poison
50		revil		solitaire wolf	Sunday
51		k4nj1d		solitaire wolf	nibbles
52		giovii		criuz	Mischief
53		3zculprit		solitaire wolf	Olympus
54		w4tchw0lf		L1k0rD3B3ll0t4		BitsNBytes, Monstrosity
55		SadFud		solitaire wolf		Impossible Password, Find the easy pass
56		FuxSocy		PhobosGroup	Dev0ops
57		abselithat		Pratum	Chatterbox
58		Killerloops		prosegur		Tear or dear
59		Renero		criuz		Digital Cube
60		Gibdeon		PKTeam		Old Bridge
61		therearwindow		solitaire wolf		Beatles
62		malwrecon		solitaire wolf	Ypuffy
63		labyrinth		badwolf		Ebola Virus
64		zdravich		TMHC	Carrier
65		epi		Hackmethod	Ypuffy
66		Wh04m1		YoRHa		Ropme
67		coldBug		NeatMalwAreParty	Curling
68		dionero		solitaire wolf	Jerry
69		TheShahzada		solitaire wolf	Mischief
70		SadClown		solitaire wolf	Redcross
71		julianjm		solitaire wolf		Old Bridge
72		snowman418		solitaire wolf	Reel
73		jondow		Bailando	Help
74		lolfireball		solitaire wolf	Lightweight
75		solsanctum		solitaire wolf	Carrier
76		fbbc		solitaire wolf	Conceal
77		4lexag		EphorSec		Cryptohorrific_es, Cryptohorrific_en
78		superhedgy		Solitaire wolf	Netmon
79		blazz3		PwnD34L3rS	Sizzle
80		Marduk		PwnD34L3rS	Helpline
81		Leonishan		solitaire wolf	Helpline
82		lduros		solitaire wolf	SwagShop
83		explmuzz		N00b543V3R	Bastion

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of active machines, even knowing that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we have asked the HTB admins and they have given us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they have decided to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

Hackplayers community, HTB Hispano & Born2root groups.