hackthebox-writeups - Writeups for HacktheBox 'boot2root' machines

项目说明

hackthebox-writeups

Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

Important notes about password protection

Machines writeups until 2020 March are protected with the corresponding root flag. But since this date, HTB flags are dynamic and different for every user, so is not possible for us to maintain this kind of system. So from now we will accept only password protected challenges, endgames, fortresses and retired machines (that machine write-ups don't need password). For endgames or fortresses, the password should be all the flags concatenated.

Since June 2023, to flag challenges first contact us ().

!hpys_htb_writeups logo

Disclaimer

It is totally forbidden to unprotect (remove the password) and distribute the pdf files of acti, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of acti in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.

Submissions

If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to: hackplayers_at_Ymail.com.

In this way, you will be added to our top contributors list (see below) and you will also receive an in link to an exclusi group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an acti it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special"

Star contributors (+5 writeups)

No | ctry | nick | avatar | team | machines | challenges | total writeups
--- | --- | --- | --- | --- | --- | --- | ---
1 | <img src="./images/countries/world.png" height="24" width="24"> | Fiti | <img src="./images/fiti.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, , Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline, Ghoul, Bastion, Swagshop, Ellingson, Writeup, Chainsaw, Haystack, Jarvis, Player, Smasher2, Unattended, Kryptos | Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Lo, Sick Teacher, Weak RSA, Fuzzy, I Know Mag1k, Grammar | 74 |
2 | <img src="./images/countries/spain.png" height="24" width="24"> | SirBroccoli | <img src="./images/SirBroccoli.png" height="42" width="42"> | Watch4Hack | SwagShop, Jarvis, OneTwoSeven, Haystack, Heist, Bitlab, Wall, Bankrobber, Postman, Mango, AI, Control, Obscurity, Registry, Resolute, Sniper, JSON, OpenAdmin, Monteverde, Nest, Sauna, Book | Emdee five for life, Craft, FreeLancer, Bombs landed, Eat the cake, Headache, Find the secret flag, Debugme, Impossible password, DSYM, Snake, Find the easy pass, Obscure, Crooked crockford, ExploitedStream, Ropme, Old Bridge, Little Tommy, Ropmev2, Baby RE, headache2, Breach, Easy Phish, Infiltration, We Have a Leak, Cryptohorrific, Da Vinci, Digital Cube, Forest, Pusheen Lo, Senseless Behaviour, Templed, M0rsarchive, Interdimensional Internet, ezpz, Under Construction, | 58 |
3 | <img src="./images/countries/france.png" height="24" width="24"> | apehex | <img src="./images/apehex.png" height="42" width="42"> | Solitaire Wolf | | [Query][apehex-misc-query], [Exatlon][apehex-re], [quick maffs][apehex-crypto-quick-maffs], [signup][apehex-crypto-signup], [Protein Cookies][apehex-crypto-protein-cookies], [Broken Decryptor][apehex-crypto-broken-decryptor], [Baby Encryption][apehex-crypto-baby-encryption], [Composition][apehex-crypto-composition], [Flippin Bank][apehex-crypto-flippin-bank], [Lost Modulus][apehex-crypto-lost-modulus], [Lost Modulus Again][apehex-crypto-lost-modulus-again], [Luna Crypt][apehex-crypto-luna-crypt], [mysterybox][apehex-crypto-mysterybox], [Nuclear Sale][apehex-crypto-nuclear-sale], [Optimus Prime][apehex-crypto-optimus-prime], [baby quick maffs][apehex-crypto-baby-quick-maffs], [Baby Time Capsule][apehex-crypto-baby-time-capsule], [BBGun06][apehex-crypto-bbgun06], [Embryonic Plant][apehex-crypto-embryonic-plant], [Quantum-Safe][apehex-crypto-quantum-safe], [RLotto][apehex-crypto-rlotto], [Rookie Mistake][apehex-crypto-rookie-mistake], [RsaCtfTool][apehex-crypto-rsa-ctf-tool], [RSAisEasy][apehex-crypto-rsa-is-easy], [The Last Dance][apehex-crypto-the-last-dance], [TwoForOne][apehex-crypto-two-for-one], [xorxorxor][apehex-crypto-xorxorxor], [Diagnostic][apehex-forensics-diagnostic], [emo][apehex-forensics-emo], [MarketDump][apehex-forensics-market-dump], [oBfsC4t10n][apehex-forensics-obfsc4t10n], [oBfsC4t10n2][apehex-forensics-obfsc4t10n2], [Obscure][apehex-forensics-obscure], [Perse][apehex-forensics-perse], [PersistenceIsFutile][apehex-forensics-persistence-is-futile], [Red Failure][apehex-forensics-red-failure], [USB Ripper][apehex-forensics-usb-ripper], [Window's Infinity Edge][apehex-forensics-windows-infinity-edge] | 38 |
4 | <img src="./images/countries/france.png" height="24" width="24"> | noraj | <img src="./images/noraj.png" height="42" width="42"> | Rawsec | [Academy][noraj-Academy], [Admirer][noraj-Admirer], [Blackfield][noraj-Blackfield], [Blunder][noraj-Blunder], [Book][noraj-Book], [Buff][noraj-Buff], [Cache][noraj-Cache], [Cascade][noraj-Cascade], [Control][noraj-Control], [Doctor][noraj-Doctor], [Dyplesher][noraj-Dyplesher], [Fatty][noraj-Fatty], [ForwardSlash][noraj-ForwardSlash], [Jewel][noraj-Jewel], [Laboratory][noraj-Laboratory], [Magic][noraj-Magic], [Mango][noraj-Mango], [Monteverde][noraj-Monteverde], [Nest][noraj-Nest], [Obscurity][noraj-Obscurity], [Omni][noraj-Omni], [Oouch][noraj-Oouch], [OpenAdmin][noraj-OpenAdmin], [Passage][noraj-Passage], [Remote][noraj-Remote], [Resolute][noraj-Resolute], [ServMon][noraj-ServMon], [SneakyMailer][noraj-SneakyMailer], [Tabby][noraj-Tabby], [Traceback][noraj-Traceback], [Tra][noraj-Tra], [Worker][noraj-Worker] | | 32
5 | <img src="./images/countries/denmark.png" height="24" width="24"> | crysal | <img src="./images/crysal.png" height="42" width="42"> | SKPH4X | Bastion, Writeup, SwagShop | Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman, Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Widescreen, Digital Cube, Pusheen Lo, 0ld is g0ld, Eternal loop, Blackhole, misDIRection, fs0ciety, Longbottoms Locker, Inferno, Grammar, I know Mag1k, M0rsarchive, Money Flowz, cat | 30 |
6 | <img src="./images/countries/switzerland.png" height="24" width="24"> | | <img src="./images/.png" height="42" width="42"> | SinHack | Poison, Jerry, Curling, Help, Irked, Popcorn | 0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro| 26 |
7 | <img src="./images/countries/belgium.png" height="24" width="24"> | FlatMarsSociet | <img src="./images/FlatMarsSociet.png" height="42" width="42"> | Solitaire wolf | Bastion, Networked, Writeup, Tra, Sauna, OpenAdmin, Nest | Easy Phish, Infiltration, 0ld is g0ld, Art, Blackhole, Croocked Crockford, Eternal_Loop, Inferno, Longbottom's Locker, M0sarchive, fs0ciety, misDIRection, Emdee five for life, Fuzzy, Cartographer, iknowmag1k, Lernaean, Freelancer | 25
8 | <img src="./images/countries/italy.png" height="24" width="24"> | kaosam | <img src="./images/kaosam.png" height="42" width="42"> | CameLUG | Obscurity, Postman, Openadmin, Sauna, Resolute, Book, Forest, Registry, Nest, Control, Sniper, Traceback, Tra, Mango, Servmon, Cascade, Magic, Remote, Blunder, Buff, Doctor, APT, Laboratory | | 23 |
9 | <img src="./images/countries/russia.png" height="24" width="24"> | icebreakcrypt | <img src="./images/icebreakcrypt.png" height="42" width="42"> | Solitaire wolf | | Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Lo, Milkshake, Raining blood, The Future Bender, Decode me, Baby RE, Illumination, Walzer, Window's Infinity Edge | 19 |
10 | <img src="./images/countries/france.png" height="24" width="24"> | drx51 | <img src="./images/drx51.png" height="42" width="42"> | solitaire wolf | Celestial, Dev0ops, Nibbles, Shocker, , Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce ||18|
11 | <img src="./images/countries/usa.png" height="24" width="24"> | d0n601 | <img src="./images/d0n601.png" height="42" width="42"> | mystiko | Luke, SwagShop, Writeup, Jarvis, Haystack, Craft, Tra, Traceback, Ophiuchi, Armageddon| snake , Emdee five for life, Fuzzy, Easy Phish, Illumination | 15 |
12 | <img src="./images/countries/singapore.png" height="24" width="24"> | wilsonnkwan | <img src="./images/wilsonnkwan.png" height="42" width="42"> | CyberFrenzy | Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel, Ellingson, Luke, Kryptos, Smasher2, Ghoul, Unattended, Craft| | 13 |
13 | <img src="./images/countries/spain.png" height="24" width="24"> | 1v4n | <img src="./images/1v4n.png" height="42" width="42"> | solitaire wolf | Olympus, Jerry, Curling, Netmon | Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake, Easy Phis | 13 |
14 | <img src="./images/countries/Netherlands.png" height="24" width="24"> | IceL0rd | <img src="./images/IceL0rd.png" height="42" width="42"> | BirdsArentReal | Arkham, Fordwardslash, Tenten, , Blackfield, Fuse, Cache, Apocalyst, Cronos, Bank, Poison, Blunder | | 13 |
15 | <img src="./images/countries/Netherlands.png" height="24" width="24"> | Qarnix | <img src="./images/Qarnix.png" height="42" width="42"> | Hacky | Craft, Sniper, Tra, Worker, Doctor | Easy Phish, Infiltration, We Have a Leak, Breach, Bank Heist, USB-Ripper, ID Exposed, Money Flowz | 13 |
16 | <img src="./images/countries/spain.png" height="24" width="24"> | KaoRz | <img src="./images/kaoRz.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Olympus, Secnotes, Ypuffy, Smasher| Find the easy pass, Impossible Password, ropme, Old Bridge, ropmev2, Dream diary 1, Dream diary 2| 11 |
17 | <img src="./images/countries/spain.png" height="24" width="24"> | Magichk | <img src="./images/Magichk.png" height="42" width="42"> | Watch4Hack | Luke, Writeup | Please, don't share, Bank Heist, MarketDump, Emdee five for life, Fuzzy, August, Easy Phish, DSYM | 10 |
18 | <img src="./images/countries/usa.png" height="24" width="24"> | pimmytrousers | <img src="./images/pimmytrousers.png" height="42" width="42"> | BitsPlz | Bounty, Celestial, Jerry, Poison, Sunday, , Canape, Stratosphere, Dev0ops | | 9 |
19 | <img src="./images/countries/dominican.png" height="24" width="24"> | mcruz | <img src="./images/mcruz.png" height="42" width="42"> | solitaire wolf | , Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier| | 9 |
20 | <img src="./images/countries/switzerland.png" height="24" width="24"> | frosters | <img src="./images/frosters.png" height="42" width="42"> | solitaire wolf | Aragog, Silo, Bounty, Rabbit, Dev0ps, , Secnotes, Oz | | 8 |
21 | <img src="./images/countries/spain.png" height="24" width="24"> | mgp25 | <img src="./images/MemoryLeaks.png" height="42" width="42"> | MemoryLeaks || Blue Shadow, Deadly Arthropod, MarketDump, Marshall In The Middle, Obscure, Reminiscent, Took The Byte, USB Ripper| 8 |
22 | <img src="./images/countries/spain.png" height="24" width="24"> | 7Rocky | <img src="./images/7Rocky.jpg" height="42" width="42"> | CocoTeam | | Lost Modulus, Lost Modulus Again, LunaCrypt, mysterybox, RLotto, racecar, Restaurant, baby CachedView | 8 |
23 | <img src="./images/countries/kosovo.png" height="24" width="24"> | artikrh | <img src="./images/artikrh.png" height="42" width="42"> | Sushi | Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access | | 7 |
24 | <img src="./images/countries/germany.png" height="24" width="24"> | Sekisback | <img src="./images/Sekisback.png" height="42" width="42"> | solitaire wolf | Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune| | 7 |
25 | <img src="./images/countries/spain.png" height="24" width="24"> | un1k0n | <img src="./images/MemoryLeaks.png" height="42" width="42"> | MemoryLeaks || Keys, Decode me, lernaean, cartographer, grammar, Emdee five for life, ezpz| 7 |
26 | <img src="./images/countries/Albania.png" height="24" width="24"> | amber | <img src="./images/amber.png" height="42" width="42"> | solitaire wolf | Vault, Giddy, Frolic, Chaos | Infinite Descent, Call, blacksquare | 7 |
27 | <img src="./images/countries/canada.png" height="24" width="24"> | Hilbert | <img src="./images/Hilbert.png" height="42" width="42"> | Solitaire wolf | Mango, Blocky, Postman, Networked, Tra, Obscurity| BabyEncryption| 7 |
28 | <img src="./images/countries/uk.png" height="24" width="24"> | | <img src="./images/.png" height="42" width="42"> | Solitaire wolf | Bastion, Resolute, Monteverde, Forest, JSON, Sniper| | 6 |
29 | <img src="./images/countries/mexico.png" height="24" width="24"> | Str0ng3erG3ek | <img src="./images/stronger2.png" height="42" width="42"> | | Control, Monteverde, Registry, Sniper, Tra, Sauna| | 6 |
30 | <img src="./images/countries/spain.png" height="24" width="24"> | OscarAkaElvis | <img src="./images/oscarakaelvis.png" height="42" width="42"> | CommandlineKings | Olympus | The Art of Re, I know Mag1k, Retro, Nostalgia | 6 |

Occasional contributors (2-5 writeups)

Ctry | nick | avatar | team | machines | challenges
--- | --- | --- | --- | --- | ---
<img src="./images/countries/spain.png" height="24" width="24"> | manulqwerty | <img src="./images/manulqwerty.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Stratosphere, Canape, Nibbles, Bounty, Jarvis, |
<img src="./images/countries/india.png" height="24" width="24"> | humurabbi | <img src="./images/humurabbi.png" height="42" width="42"> | Solitaire wolf | Safe,Heist, Unattended, Networked, Craft | |
<img src="./images/countries/india.png" height="24" width="24"> | mansoor | <img src="./images/mansoor.png" height="42" width="42"> | Solitaire wolf | Ellingson, Safe, Frolic, OneTwoSeven, Ghoul | |
<img src="./images/countries/spain.png" height="24" width="24"> | Leonishan | <img src="./images/leonishan.png" height="42" width="42"> | solitaire wolf | Helpline, Unattended | Blue Shadow, Reminiscent, Took the byte |
<img src="./images/countries/holland.png" height="24" width="24"> | wilde | <img src="./images/wilde.png" height="42" width="42"> | Solitaire wolf | Active, Waldo, Hawk, Zipper | |
<img src="./images/countries/usa.png" height="24" width="24"> | fibbot | <img src="./images/fibbot.png" height="42" width="42"> | solitaire wolf | Celestial, Poison, Canape, Sunday | |
<img src="./images/countries/kosovo.png" height="24" width="24"> | spenkk | <img src="./images/spenkk.png" height="42" width="42"> | Sentry | Bart, Dev0ops, Dropzone | snake |
<img src="./images/countries/uk.png" height="24" width="24"> | ozunu | <img src="./images/ozunu.png" height="42" width="42"> | OzunuClan | Giddy, Irked, Teacher, Access| |
<img src="./images/countries/spain.png" height="24" width="24"> | n4xh4ck5 | <img src="./images/n4xh4ck5.png" height="42" width="42"> | solitaire wolf | Jerry, PopCorn, Haircut, Curling| |
<img src="./images/countries/spain.png" height="24" width="24"> | 3 | <img src="./images/3.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Canape, TartarSauce, Bounty |
<img src="./images/countries/world.png" height="24" width="24"> | Pitenager | <img src="./images/pitenager.png" height="42" width="42"> | solitaire wolf | Blue, Mirai, Nibbles | Cartographer, Lernaean
<img src="./images/countries/poland.png" height="24" width="24"> | x4nt0n | <img src="./images/x4nt0n.png" height="42" width="42"> | AlphaPwner | Sunday, Olympus, Access | Marshal In The Middle |
<img src="./images/countries/spain.png" height="24" width="24"> | FrankyTech | <img src="./images/frankytech.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Active, Dev0ops, Olympus | |
<img src="./images/countries/india.png" height="24" width="24"> | TheLegend | <img src="./images/TheLegend.png" height="42" width="42"> | solitaire wolf | Active, Dev0ops| I know Mag1k, Snake |
<img src="./images/countries/spain.png" height="24" width="24"> | kabutor | <img src="./images/kabutor.png" height="42" width="42"> | solitaire wolf | Aragog, Access, LaCasaDePapel_alt | |
<img src="./images/countries/spain.png" height="24" width="24"> | Vis0r | <img src="./images/vis0r.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Blocky, Chatterbox | Matrioshka |
<img src="./images/countries/india.png" height="24" width="24"> | 31337 | <img src="./images/31377.png" height="42" width="42"> | | Writeup, Haystack, Ellingson | |
<img src="./images/countries/spain.png" height="24" width="24"> | giru | <img src="./images/giru.png" height="42" width="42"> | solitaire wolf | Irked, Bounty | |
<img src="./images/countries/turkey.png" height="24" width="24"> | morph3 | <img src="./images/morph3.png" height="42" width="42"> | solitaire wolf | Help, Friendzone| |
<img src="./images/countries/usa.png" height="24" width="24"> | Paint | <img src="./images/paint.png" height="42" width="42"> | solitaire wolf | Carrier, Ethereal | |
<img src="./images/countries/spain.png" height="24" width="24"> | Ghostpp7 | <img src="./images/Ghostpp7.png" height="42" width="42"> | L1k0rD3B3ll0t4 | , TartarSauce |
<img src="./images/countries/italy.png" height="24" width="24"> | o00o | <img src="./images/o00o.png" height="42" width="42"> | solitarire wolf | Reel, Nightmare | |
<img src="./images/countries/india.png" height="24" width="24"> | felli0t | <img src="./images/felli0t.png" height="42" width="42"> | solitaire wolf | DevOops, Chatterbox | |
<img src="./images/countries/spain.png" height="24" width="24"> | CyberVaca | <img src="./images/cybervaca.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Chatterbox, Reddish|
<img src="./images/countries/spain.png" height="24" width="24"> | b1gb1t | <img src="./images/b1gb1t.png" height="42" width="42"> | r00th4ck | Sunday, Active |
<img src="./images/countries/spain.png" height="24" width="24"> | roskyfrosky | <img src="./images/roskyfrosky.png" height="42" width="42"> | solitaire wolf | Jerry, Celestial| |
<img src="./images/countries/colombia.png" height="24" width="24"> | Sephiroth | <img src="./images/sephiroth.png" height="42" width="42"> | Bin4ryCh4os | Fortune, Vault | |
<img src="./images/countries/spain.png" height="24" width="24"> | BinaryShadow | <img src="./images/BinaryShadow.png" height="42" width="42"> | Watch4Hack | Safe | Call, Crack this!, Decode me |)
<img src="./images/countries/russia.png" height="24" width="24"> | tabacci | <img src="./images/tabacci.png" height="42" width="42"> | Solitaire wolf | HackBack, RE | Obscure, Nostalgia, LostKey, Masks Off, Partial Encryption |
<img src="./images/countries/japan.png" height="24" width="24"> | thereallulz | <img src="./images/thereallulz.png" height="42" width="42"> | solitaire wolf | | Retro, Monstrosity, Senseless Behaviour |
<img src="./images/countries/italy.png" height="24" width="24"> | luthorien | <img src="./images/luthorien.png" height="42" width="42"> | ARGSS | | Not Art, Grammar, Hidden in Colors |
<img src="./images/countries/spain.png" height="24" width="24"> | Pepelu | <img src="./images/pepelu.png" height="42" width="42"> | Solitaire wolf | Player, Craft| |
<img src="./images/countries/spain.png" height="24" width="24"> | w4tchw0lf | <img src="./images/w4tchw0lf.png" height="42" width="42"> | L1k0rD3B3ll0t4 | | BitsNBytes, Monstrosity |
<img src="./images/countries/spain.png" height="24" width="24"> | SadFud | <img src="./images/sadfud.png" height="42" width="42"> | solitaire wolf | | Impossible Password, Find the easy pass |
<img src="./images/countries/usa.png" height="24" width="24"> | epi | <img src="./images/epi.png" height="42" width="42"> | Hackmethod | Ypuffy, SwagShop | |
<img src="./images/countries/spain.png" height="24" width="24"> | v3he | <img src="./images/v3he.png" height="42" width="42"> | solitaire wolf | | Old Bridge, ropmev2|
<img src="./images/countries/india.png" height="24" width="24"> | 3l33t | <img src="./images/3l33t.png" height="42" width="42"> | solitaire wolf | Safe, Jarvis, Player, Craft | |
<img src="./images/countries/canada.png" height="24" width="24"> | thecapo | <img src="./images/thecapo.png" height="42" width="42"> | Solitaire wolf | Forest, Heist | |
<img src="./images/countries/holland.png" height="24" width="24"> | wezzlaren | <img src="./images/wezzlaren.png" height="42" width="42"> | Hacky | Mango, Postman | |
<img src="./images/countries/uk.png" height="24" width="24"> | egotisticalSW | <img src="./images/egotisticalSW.png" height="42" width="42"> | Solitaire wolf | Heist, Tra, Obscurity | |
<img src="./images/countries/canada.png" height="24" width="24"> | DarkNight2019 | <img src="./images/Darknight2019.png" height="42" width="42"> | T0pt33m | Forest, Registry | |
<img src="./images/countries/canada.png" height="24" width="24"> | retrocraft | <img src="./images/retrocraft.png" height="42" width="42"> | Solitaire wolf | Obscurity, Tra | |
<img src="./images/countries/Romania.png" height="24" width="24"> | BananaPr1nc3 | <img src="./images/bananapr1nc3.webp" height="42" width="42"> | Solitaire wolf | Tra | DSYM|
<img src="./images/countries/poland.png" height="24" width="24"> | offk0rs | <img src="./images/MemoryLeaks.png" height="42" width="42"> | MemoryLeaks | Safe, Ellingson, Jarvis | |
<img src="./images/countries/malaysia.png" height="24" width="24"> | Jacker31 | <img src="./images/Jacker31.png" height="42" width="42"> | NightTrain | Heist, OpenAdmin, Arkham, Book| |
<img src="./images/countries/egypt.png" height="24" width="24"> | Mrx-Exploit | <img src="./images/mrx-Exploit.png" height="42" width="42"> | TCLRED | Tra-protected.pdf) | Ezpz.pdf) |
<img src="./images/countries/world.png" height="24" width="24"> | ypl | <img src="./images/ypl.png" height="42" width="42"> | Solitaire wolf | | Ropme, ropmev2 |
<img src="./images/countries/world.png" height="24" width="24"> | xiaobye | <img src="./images/xiaobye.png" height="42" width="42"> | Solitaire Wolf | OpenAdmin, Mango, Obscurity |
<img src="./images/countries/israel.png" height="24" width="24"> | ghsi10 | <img src="./images/ghsi10.png" height="42" width="42"> | solitaire wolf || You know 0xDiablos, Console, bad_grades| |
<img src="./images/countries/austria.png" height="24" width="24"> | h4ckd0tm3 | <img src=" height="42" width="42"> | SickaLoot | | Unprintable, QuickR
<img src="./images/countries/india.png" height="24" width="24"> | Segf4ul7 | <img src="./images/Segf4ul7.png" height="42" width="42"> | Solitaire Wolf | | You know 0xDiablos, ropme, ropmev2, Little Tommy
<img src="./images/countries/uk.png" height="24" width="24"> | hyperreality | <img src="./images/hyperreality.png" height="42" width="42"> | Solitaire wolf | | Optimus Prime, RsaCtfTool |
<img src="./images/countries/world.png" height="24" width="24"> | DaWoschbar | <img src="./images/DaWoschbar.jpg" height="42" width="42"> | SickaLoot | Sauna, Traceback|
<img src="./images/countries/brazil.png" height="24" width="24"> | ebaitello | <img src="./images/ebaitello.webp" height="42" width="42"> | Solitaire wolf | | Cat, Missing in Action |
<img src="./images/countries/malaysia.png" height="24" width="24"> | Ap0k4L1p5 | <img src="./images/prof.png" height="42" width="42"> | ALTr34lity | Admirer | Cryptohorrific |
<img src="./images/countries/india.png" height="24" width="24"> | blankdash | <img src="./images/blankdash.png" height="42" width="42"> | | obscurity | Reminiscent, MarketDump |
<img src="./images/countries/russia.png" height="24" width="24"> | sno | <img src="./images/sno.jpg" height="42" width="42"> | Solitaire Wolf | Hades, RPG, Ascension, Odyssey |
<img src = "./images/countries/germany.png" height="24" width="24"> | d4rkc0nd0r | <img src = "./images/lulzsec.png" height="42" width="42"> | AlphaPwners | | TwoForOne, Emo, Bare Metal |
<img src="./images/countries/turkey.png" height="24" width="24"> | islamukheef | <img src="./images/islamukheef.png" height="42" width="42"> | Solitaire Wolf | | Baby RE, HackyBird |
<img src="./images/countries/india.png" height="24" width="24"> | sp00fexpl01t | <img src="./images/sp00fexpl01t.png" height="42" width="42"> | Solitaire Wolf | Sharp | Phonebook, LoveTok, petpet rcbee |
<img src="./images/countries/spain.png" height="24" width="24"> | hacefresko | <img src="./images/hacefresko.png" height="42" width="42"> | Solitaire Wolf | | Weather App, baby ninja jinja, Breaking Grad, BoneChewerCon |
<img src="./images/countries/canada.png" height="24" width="24"> | ejedev | <img src="./images/ejedev.png" height="42" width="42"> | Solitaire Wolf | | Toxic, APKey, SeeTheSharpFlag, PersistenceIsFutile |
<img src="./images/countries/chile.png" height="24" width="24"> | D-Cryp7 | <img src="./images/D-Cryp7.png" height="42" width="42"> | Solitaire Wolf | | RSAisEasy, xorxorxor, Birds of randomness
<img src="./images/countries/ukraine.png" height="24" width="24"> | danylokos | <img src="./images/danylokos.png" height="42" width="42"> | Solitaire Wolf | | SAW, Joker, Waiting

Fleeting contributors (1 writeup)

Ctry | nick | avatar | team | machines | challenges
--- | --- | --- | --- | --- | ---
<img src="./images/countries/kosovo.png" height="24" width="24"> | absolutezero | <img src="./images/absolutezero.png" height="42" width="42"> | Sentry | Fighter | |
<img src="./images/countries/world.png" height="24" width="24"> | xephrox | <img src="./images/xephrox.png" height="42" width="42"> | solitaire wolf | Mischief |
<img src="./images/countries/usa.png" height="24" width="24"> | worldunruled | <img src="./images/worldunruled.png" height="42" width="42"> | hackmethod | Active |
<img src="./images/countries/usa.png" height="24" width="24"> | rtheory | <img src="./images/rtheory.png" height="42" width="42"> | Fla | Reddish |
<img src="./images/countries/uk.png" height="24" width="24"> | there | <img src="./images/there.png" height="42" width="42"> | solitaire wolf | Active |
<img src="./images/countries/spain.png" height="24" width="24"> | Zaiuss | <img src="./images/zaiuss.png" height="42" width="42"> | L1k0rD3B3ll0t4 | Celestial |
<img src="./images/countries/spain.png" height="24" width="24"> | attl4s | <img src="./images/attl4s.png" height="42" width="42"> | juankeres | Falafel |
<img src="./images/countries/world.png" height="24" width="24"> | kauffman | <img src="./images/kauffman.png" height="42" width="42"> | solitaire wolf | Poison |
<img src="./images/countries/spain.png" height="24" width="24"> | revil | <img src="./images/revil.png" height="42" width="42"> | solitaire wolf | Sunday |
<img src="./images/countries/spain.png" height="24" width="24"> | k4nj1d | <img src="./images/k4nj1d.png" height="42" width="42"> | solitaire wolf | nibbles |
<img src="./images/countries/italy.png" height="24" width="24"> | giovii | <img src="./images/giovii.png" height="42" width="42"> | criuz | Mischief |
<img src="./images/countries/world.png" height="24" width="24"> | 3zculprit | <img src="./images/3zculprit.png" height="42" width="42"> | solitaire wolf | Olympus |
<img src="./images/countries/greece.png" height="24" width="24"> | FuxSocy | <img src="./images/fuxsocy.png" height="42" width="42"> | PhobosGroup | Dev0ops | |
<img src="./images/countries/usa.png" height="24" width="24"> | abselithat | <img src="./images/abselithat.png" height="42" width="42"> | Pratum | Chatterbox | |
<img src="./images/countries/spain.png" height="24" width="24"> | Killerloops | <img src="./images/killerloops.png" height="42" width="42"> | prosegur | | Tear or dear |
<img src="./images/countries/italy.png" height="24" width="24"> | Renero | <img src="./images/renero.png" height="42" width="42"> | criuz | | Digital Cube |
<img src="./images/countries/spain.png" height="24" width="24"> | Gibdeon | <img src="./images/gibdeon.png" height="42" width="42"> | PKTeam | | Old Bridge |
<img src="./images/countries/spain.png" height="24" width="24"> | therearwindow | <img src="./images/therearwindow.png" height="42" width="42"> | solitaire wolf | | Beatles |
<img src="./images/countries/russia.png" height="24" width="24"> | malwrecon | <img src="./images/malwrecon.png" height="42" width="42"> | solitaire wolf | Ypuffy | |
<img src="./images/countries/world.png" height="24" width="24"> | labyrinth | <img src="./images/labyrinth.png" height="42" width="42"> | badwolf | | Ebola Virus | |
<img src="./images/countries/world.png" height="24" width="24"> | zdravich | <img src="./images/zdravich.png" height="42" width="42"> | TMHC | Carrier | Mission Impossible |
<img src="./images/countries/montenegro.png" height="24" width="24"> | Wh04m1 | <img src="./images/Wh04m1.png" height="42" width="42"> | YoRHa | | Ropme | |
<img src="./images/countries/germany.png" height="24" width="24"> | coldBug | <img src="./images/coldbug.png" height="42" width="42"> | NeatMalwAreParty | Curling | |
<img src="./images/countries/turkey.png" height="24" width="24"> | dionero | <img src="./images/dionero.png" height="42" width="42"> | solitaire wolf | Jerry | |
<img src="./images/countries/bangladesh.png" height="24" width="24"> | TheShahzada | <img src="./images/TheShahzada.png" height="42" width="42"> | solitaire wolf | Mischief | |
<img src="./images/countries/bangladesh.png" height="24" width="24"> | SadClown | <img src="./images/sadclown.png" height="42" width="42"> | solitaire wolf | Redcross | |
<img src="./images/countries/spain.png" height="24" width="24"> | julianjm | <img src="./images/julianjm.png" height="42" width="42"> | solitaire wolf | | Old Bridge |
<img src="./images/countries/world.png" height="24" width="24"> | snowman418 | <img src="./images/snowman418.png" height="42" width="42"> | solitaire wolf | Reel | |
<img src="./images/countries/Romania.png" height="24" width="24"> | jondow | <img src="./images/jondow.png" height="42" width="42"> | Bailando | Help | |
<img src="./images/countries/ukraine.png" height="24" width="24"> | lolfireball | <img src="./images/Lolfireball.png" height="42" width="42"> | solitaire wolf | Lightweight | |
<img src="./images/countries/canada.png" height="24" width="24"> | solsanctum | <img src="./images/solsanctum.png" height="42" width="42"> | solitaire wolf | Carrier | |
<img src="./images/countries/usa.png" height="24" width="24"> | fbbc | <img src="./images/fbbc.png" height="42" width="42"> | solitaire wolf | Conceal | |
<img src="./images/countries/colombia.png" height="24" width="24"> | 4lexag | <img src="./images/4lexag.png" height="42" width="42"> | EphorSec | | Cryptohorrific_es, Cryptohorrific_en |
<img src="./images/countries/cyprus.png" height="24" width="24"> | superhedgy | <img src="./images/superhedgy.png" height="42" width="42"> | Solitaire wolf | Netmon | |
<img src="./images/countries/mexico.png" height="24" width="24"> | blazz3 | <img src="./images/blazz3.png" height="42" width="42"> | PwnD34L3rS | Sizzle | |
<img src="./images/countries/spain.png" height="24" width="24"> | Marduk | <img src="./images/Marduk.png" height="42" width="42"> | PwnD34L3rS | Helpline | |
<img src="./images/countries/france.png" height="24" width="24"> | lduros | <img src="./images/lduros.png" height="42" width="42"> | solitaire wolf | SwagShop | |
<img src="./images/countries/uk.png" height="24" width="24"> | explmuzz | <img src="./images/explmuzz.png" height="42" width="42"> | N00b543V3R | Bastion | |
<img src="./images/countries/world.png" height="24" width="24"> | AlhA | <img src="./images/AlhA.png" height="42" width="42"> | solitaire wolf | | Emdee Five for Live |
<img src="./images/countries/uk.png" height="24" width="24"> | liamm | <img src="./images/liamm.png" height="42" width="42"> | PORTKNOCKWHOSTHERE | Jarvis | |
<img src="./images/countries/greece.png" height="24" width="24"> | cavla | <img src="./images/cavla.png" height="42" width="42"> | Solitaire wolf | | Crooked Crockford |
<img src="./images/countries/sweden.png" height="24" width="24"> | entropy | <img src="./images/entropy.png" height="42" width="42"> | Solitaire wolf | | Crooked Crockford |
<img src="./images/countries/brazil.png" height="24" width="24"> | MrP4p3r | <img src="./images/MrP4p3r.png" height="42" width="42"> | Solitaire wolf | | Fuzzy |
<img src="./images/countries/world.png" height="24" width="24"> | emmanuel | <img src="./images/emmanuel.png" height="42" width="42"> | Solitaire wolf | Craft| |
<img src="./images/countries/world.png" height="24" width="24"> | Cript0crc | <img src="./images/crypt0crc.png" height="42" width="42"> | Solitaire wolf | | Eemedefive for live|
<img src="./images/countries/world.png" height="24" width="24"> | bWlrZQo | <img src="./images/bWlrZQo.png" height="42" width="42"> | USCh4ck3r5 | Craft | |
<img src="./images/countries/world.png" height="24" width="24"> | na | <img src="./images/na.png" height="42" width="42"> | Solitaire wolf | Player | |
<img src="./images/countries/spain.png" height="24" width="24"> | AmbrotD | <img src="./images/pepelu.png" height="42" width="42"> | Solitaire wolf || USB Ripper | |
<img src="./images/countries/spain.png" height="24" width="24"> | danielcues | <img src="./images/danielcues.png" height="42" width="42"> | Ripp3rs | | Mission Impossible |
<img src="./images/countries/germany.png" height="24" width="24"> | arcc | <img src="./images/arcc.png" height="42" width="42"> | Solitaire wolf| json bitlab|
<img src="./images/countries/india.png" height="24" width="24"> | CRYPT0HEX | <img src="./images/CRYPT0HEX.png" height="42" width="42"> |Solitaire wolf | Writeup | |
<img src="./images/countries/pakistan.png" height="24" width="24"> | couchpotato | <img src="./images/couchpotato.png" height="42" width="42"> | Solitaire wolf | Heist | |
<img src="./images/countries/australia.png" height="24" width="24"> | sneakypanda | <img src="./images/sneakypanda.png" height="42" width="42"> | Mystiko | Zetta | |
<img src="./images/countries/switzerland.png" height="24" width="24"> | nitrow | <img src="./images/GDK.png" height="42" width="42"> | Solitaire wolf | | Image Processing 101 |
<img src="./images/countries/colombia.png" height="24" width="24"> | Cyb3rb0b | <img src="./images/Cyb3rb0b.png" height="42" width="42"> | Solitaire wolf | Json |
<img src="./images/countries/uk.png" height="24" width="24"> | N7E | <img src="./images/N7E.png" height="42" width="42"> | iamroot | Mango |
<img src="./images/countries/india.png" height="24" width="24"> | Parteek Singh | <img src="./images/parteeksingh.png" height="42" width="42"> | D3v1L5 | Sniper | |
<img src="./images/countries/canada.png" height="24" width="24"> | c1cada | <img src="./images/c1cada.png" height="42" width="42"> | CommandlineKings | Obscurity | |
<img src="./images/countries/india.png" height="24" width="24"> | Mrigendra Soni | <img src="./images/mrigendra.png" height="42" width="42"> | Solitaire Wolf | Postman | |
<img src="./images/countries/usa.png" height="24" width="24">| mikeywayne |<img src=" height="42" width="42"> | Solitaire Wolf | tra| |
<img src="./images/countries/spain.png" height="24" width="24">| Milo |<img src=" height="42" width="42"> | p0t4t03s | | ezpz | |
<img src="./images/countries/india.png" height="24" width="24"> | N1Z4M | <img src="./images/nizam.png" height="42" width="42"> | 7eam4dholokam | OpenAdmin |
<img src="./images/countries/indonesia.png" height="24" width="24"> | corshine | <img src="./images/corshine.png" height="42" width="42"> | Solitaire Wolf | OpenAdmin |
<img src="./images/countries/usa.png" height="24" width="24"> | Se | <img src="./images/Se.png" height="42" width="42"> | Solitaire Wolf | Nest |
<img src="./images/countries/singapore.png" height="24" width="24"> | IamKsNoob | <img src="./images/iamksnoob.png" height="42" width="42"> | Solitaire Wolf | Postman |
<img src="./images/countries/tunisia.png" height="24" width="24"> | Bayrem | <img src="./images/bayrem.jpg" height="42" width="42"> | | | Cartographer |
<img src="./images/countries/tunisia.png" height="24" width="24"> | Bayrem | <img src="./images/bayrem.jpg" height="42" width="42"> | Solitaire Wolf | | Cartographer |
<img src="./images/countries/saudiarabia.png" height="24" width="24"> | 3gbCyber | <img src="./images/3gbCyber.png" height="42" width="42"> | KAU | OpenAdmin |
<img src="./images/countries/usa.png" height="24" width="24"> | FlapJack | <img src="./images/FlapJack.png" height="42" width="42"> | Nash | OpenAdmin |
<img src="./images/countries/usa.png" height="24" width="24"> | wazKoo | <img src="./images/wazKoo.png" height="42" width="42"> | ScripTease | Traceback |
<img src="./images/countries/world.png" height="24" width="24"> | Shkk | <img src="./images/Shkk.png" height="42" width="42"> | Solitaire wolf | Monteverde |
<img src="./images/countries/poland.png" height="24" width="24"> | elklepo | <img src=" height="42" width="42"> | notSoBad | Fatty |
<img src="./images/countries/austria.png" height="24" width="24"> | Chr0x6eOs | <img src=" height="42" width="42"> | SickaLoot | | QuickR
<img src="./images/countries/russia.png" height="24" width="24"> | dayld | <img src="./images/dayld.png" height="42" width="42"> | Solitaire wolf | | breaking grad
<img src="./images/countries/canada.png" height="24" width="24"> | 7riple7hrea7 | <img src="./images/7riple7hrea7.png" height="42" width="42"> | p0tat0z | | Interdimensional Internet
<img src="./images/countries/france.png" height="24" width="24"> | caracal | <img src="./images/caracal.png" height="42" width="42"> | HideAndSec | | Mr. Burns
<img src="./images/countries/france.png" height="24" width="24"> | aminegr | <img src="./images/aminegr.png" height="42" width="42"> | Solitaire Wolf | | Emdee five for life
<img src="./images/countries/philippines.png" height="24" width="24"> | run3 | <img src="./images/run3.jpg" height="42" width="42"> | hack2tan | | Mission Pinpossible
<img src="./images/countries/singapore.png" height="24" width="24"> | Isopach | <img src="./images/isopach.jpg" height="42" width="42"> | Solitaire Wolf | | Baby RE
<img src="./images/countries/world.png" height="24" width="24"> | YoavD | <img src="./images/YoavD.png" height="42" width="42"> | Solitaire Wolf | | HackyBird
<img src="./images/countries/indonesia.png" height="24" width="24"> | adhkr | <img src="./images/adhkr.png" height="42" width="42"> | Solitaire Wolf | Stocker |
<img src="./images/countries/italy.png" height="24" width="24"> | R1D3R | <img src="./images/R1D3R.png" height="42" width="42"> | KernelChaos | Derailed |

Special note

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of acti, e that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we ha the HTB admins and they ha us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they ha to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

*Hackplayers community, HTB Hispano & Born2root groups*.

[adhkr-Stocker]:

[noraj-Academy]:
[noraj-Admirer]:
[noraj-Blackfield]:
[noraj-Blunder]:
[noraj-Book]:
[noraj-Buff]:
[noraj-Cache]:
[noraj-Cascade]:
[noraj-Control]:
[noraj-Doctor]:
[noraj-Dyplesher]:
[noraj-Fatty]:
[noraj-ForwardSlash]:
[noraj-Jewel]:
[noraj-Laboratory]:
[noraj-Magic]:
[noraj-Mango]:
[noraj-Monteverde]:
[noraj-Nest]:
[noraj-Obscurity]:
[noraj-Omni]:
[noraj-Oouch]:
[noraj-OpenAdmin]:
[noraj-Passage]:
[noraj-Remote]:
[noraj-Resolute]:
[noraj-ServMon]:
[noraj-SneakyMailer]:
[noraj-Tabby]:
[noraj-Traceback]:
[noraj-Tra]:
[noraj-Worker]:

[apehex-crypto-baby-encryption]:
[apehex-crypto-baby-quick-maffs]:
[apehex-crypto-baby-time-capsule]:
[apehex-crypto-bbgun06]:
[apehex-crypto-broken-decryptor]:
[apehex-crypto-composition]:
[apehex-crypto-embryonic-plant]:
[apehex-crypto-flippin-bank]:
[apehex-crypto-lost-modulus]:
[apehex-crypto-lost-modulus-again]:
[apehex-crypto-luna-crypt]:
[apehex-crypto-mysterybox]:
[apehex-crypto-nuclear-sale]:
[apehex-crypto-optimus-prime]:
[apehex-crypto-protein-cookies]:
[apehex-crypto-quick-maffs]:
[apehex-crypto-quantum-safe]:
[apehex-crypto-rlotto]:
[apehex-crypto-rookie-mistake]:
[apehex-crypto-rsa-ctf-tool]:
[apehex-crypto-rsa-is-easy]:
[apehex-crypto-signup]:
[apehex-crypto-the-last-dance]:
[apehex-crypto-two-for-one]:
[apehex-crypto-xorxorxor]:
[apehex-forensics-diagnostic]:
[apehex-forensics-emo]:
[apehex-forensics-market-dump]:
[apehex-forensics-obfsc4t10n]:
[apehex-forensics-obfsc4t10n2]:
[apehex-forensics-obscure]:
[apehex-forensics-perse]:
[apehex-forensics-persistence-is-futile]:
[apehex-forensics-red-failure]:
[apehex-forensics-usb-ripper]:
[apehex-forensics-windows-infinity-edge]:
[apehex-misc-query]:
[apehex-re]:

项目信息

开发语言：未知

Star 数：2052

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Writeups for HacktheBox 'boot2root' machines展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。