hackthebox - My WriteUps for HackTheBox CTFs, Machines, and She - 剑庭安 - 网站开发定制 SEO 优化蜘蛛池代做在线看手相算命

项目说明

<details>
<summary> Sherlocks</summary>

### NOTES: NO TIMELINE ACTI TABLE CREATION FOR EVERY CHALLS & ONLY BRIEF ANALYSIS FOR MALWARE CASES

| No. | Cases | Lessons Learned |
| :-- | ---------------------------------------------------------------------------------------------------------------------------------- | :-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: |
| 1. | Meerkat | Credential stuffing detection, Bonitasoft C, Packet filtering, Custom column value analysis |
| 2. | Bumblebee | SQLite3 file analysis, Epoch timestamp con, NGINX access.log parsing |
| 3. | Lockpick | Static malware analysis with Ghidra, Reverse engineering C-based malware, Python scripting for re encryption logic, JSON parsing automation |
| 4. | Constellation | Discord URL forensic analysis, URL unfurling techniques |
| 5. | OpTinselTrace-4 | Threat hunting and attacker IP identification, Port scanning detection, Printer hacking network forensics |
| 6. | Litter | PCAP network traffic analysis, DNS tunneling identification |
| 7. | Logjammer | Windows Event Log analysis using Event |
| 8. | Heartbreaker-Continuum | PEStudio and Ghidra for code size identification, for file metadata, Hex editor for obfuscated strings offsets, MITRE ATT&CK technique identification |
| 9. | Hyperfiletable | Parsing raw MFT data with analyzeMFT, Using MFTExplorer for ZoneID and file size analysis |
| 10. | Subatomic | File type identification with Detect It Easy (DIE), Unpacking Nullsoft Installer, Malware GUID identification, Debugging obfuscated JS in , Code review of Trojan Discord module |
| 11. | Tracer | Windows Event Log analysis, Prefetch file parsing with PECmd, $MFT analysis using MFTECmd, USN Journal ($J) analysis, Sysmon log in |
| 12. | Loggy | Using Ghidra, ANY.RUN, DIE for malware language identification, PEStudio and API Monitor for malicious function calls, FTP domain tracking, IDA graph analysis for disk writes |
| 13. | RogueOne | Memory forensics with , Detection of process spoofing |
| 14. | Recollection | Memory forensics with , Detection of alias IEX usage, Browser history dumping, Malicious filename identification |
| 15. | Brutus | Re UNIX auth.log, Hunting suspect IP addresses, WTMP log analysis |
| 16. | Campfire-1 | DC security logs analysis , Kerberoasting attack analysis, Prefetch file con and timeline exploration with PECmd and Timeline Explorer, Identifying common Kerberoasting tools |
| 17. | SmartyPants | Windows RDP event log analysis, Event log explorer usage, Smart screen debug log review |
| 18. | Unit42 | Sysmon E definitions, Sysmon log analysis, Ultra in |
| 19. | BFT | Parsing raw MFT files with MFT Explorer and MFTECmd, Malicious file download hunting |
| 20. | Jingle Bell | Forensic analysis of Slack application SQLite database |
| 21. | TickTock | Team log analysis for C2 agent and attacker sessions, Prefetch log review, Sysmon log review for network connections, Windows Defender and PowerShell log inspection, Dri and C2 hash identification, Raw MFT parsing and timeline exploration, Timestamp event extraction with Get-WinEvent |
| 22. | Jugglin | Forensic analysis of APMX64 files, API Monitor for function call interception, PowerShell module identification for data exfiltration |
| 23. | Ore | Re Grafana and catscale artifacts, XMRIG process analysis, Hunting threat actor IPs via UNIX logs, Shodan threat intelligence use, Cronjob timing analysis with crontab.guru |
| 24. | Ultimatum | Catscale data acquisition review, Ultimate-member plugin C, Backdoor user and persistence activity detection |
| 25. | Pikaptcha | Registry hi with Registry Explorer, Malicious PowerShell downloader analysis, Threat actor C2 ser, Reverse shell session timing, Phishing JS function identification, Lumma Stealer malware in |
| 26. | Operation Blackout 2025: Phantom Check| Hayabusa, Event , Identification of detection activity, Timeline explorer, Identification of current machine temperature value, WMI class abused to retrie and manufacturer information |
| 27. | Operation Blackout 2025: Smoke & Mirrors| Hayabusa, Timeline explorer, Identification of attempts to disable windef monitoring and LSA protection, Detect AMSI patch attempt, Detect system boot modification attempt|
| 27. | Zenith|Business e-mail compromise, Hayabusa, Timeline Explorer, Process Injection, Ghidra, PE-Studio, Flare-VM, Persistence mechanism, Pri escalation mechanism|
| 28. | Payload| PEStudio, DIE, Ghidra, CFF Explorer, PE Bear, and radare2 for static Windows binary analysis and triage, x64dbg for dynamic binary analysis, identifying binary compilation timestamp, image base address, entrypoint address|
| 29. | SalineBreeze-2|Demodex TTPs (associated with Salt Typhoon / Earth Estries & Ghost Emperor), PowerShell deobfuscation and reverse engineering, Dynamic malware analysis using FLARE-VM and Process Hacker, Using API Monitor to capture win32 API function usage ,Static malware analysis using PEStudio and Ghidra|
| 30. | Male Modmaker|Golang-Based Ransomware,Dynamic binary analysis using x64dbg, Static binary analysis using ghidra, Detect-it-Easy.|
| 31. | CrashDump| User-mode debugging with WinDbg, Cobalt Strike|
| 32. | Secret Pictures|Dynamic binary analysis using IDA, Static binary analysis using IDA, Detect-it-Easy, pestudio, Capturing netflow using wireshark|
| 33. | Lupin| Phorpiex, Clipboard hijacking, Region-based execution constraints|
| 34. | APTNightmare| Packet capture analysis with Wireshark, Nmap open port identification with Tshark, DNS zone transfer detection, Compromised subdomain and credential discovery, Memory analysis of web server with and Ubuntu profile, MITRE ATT&CK technique correlation, Debian package inspection with dpkg, Windows registry hi with Regripper, Program execution artifact analysis, .lnk file examination, Registry hi, Disk image review with FTK Imager, Email phishing forensic analysis, Prefetch file analysis, Raw $MFT parsing, PowerShell and event log export, Timeline review, Encoded PowerShell command decoding, IOC identification, Cobalt Strike beacon analysis, Persistence task detection |

</details>

<summary> Binary Exploitation (PWN) </summary>

| No. | Challenges | Lessons Learned |
| :-- | ------------------------------------------------------------------------------------------------------------------------------------------ | :-------------------------------------------------------------------------------------------------------------------------------------------------------: |
| 1. | racecar | Exploiting format string to leak stack |
| 2. | You know 0xDiablos | Buffer o exploitation, Return-to-win techniques |
| 3. | Jeeves | Local modification techniques |
| 4. | Space pirate: Entrypoint | Format string bugs, Local modification |
| 5. | Reg | Buffer o, Redirecting program execution |
| 6. | Space pirate: Going Deeper | Buffer o, Redirecting program execution |
| 7. | Bat Computer | Buffer o, Return-to-shellcode techniques |
| 8. | Blacksmith | Buffer o, Return-to-libc attacks |
| 9. | Shooting star | Buffer o, Return-to-libc attacks |
| 10. | HTB Console | Buffer o, Return-to-libc, Using .DATA section to write "/bin/sh\x00" strings |
| 11. | Optimistic | Buffer o, Integer o, Return-to-shellcode with alphanumeric payloads |
| 12. | Restaurant | Buffer o, Return-to-libc, Bypassing MOVAPS protection |
| 13. | Entity | Union structure manipulation, Type confusion |
| 14. | Getting Started | Buffer o basics |
| 15. | Questionnaire | Binary exploitation concepts and questions |
| 16. | Nightmare | Format string bug exploitation, Global Offset Table (GOT) o |
| 17. | Void | Buffer o, Return-to-dl-resol |
| 18. | Fleet Management | Bypassing seccomp sandbox, Crafting custom shellcode |
| 19. | | Abusing misconfigurations, XOR cipher decoding |
| 20. | Spooky Time | Format string bug exploitation, GOT o |
| 21. | Space pirate: Retribution | Buffer o, Return-to-libc, Bypassing PIE and ASLR |
| 22. | Space | Buffer o, Small offset after EIP, Custom shellcode crafting |
| 23. | Leet Test | Format string bug, O local and global |
| 24. | Trick or Deal | Heap exploitation, Use-After-Free (UAF) |
| 25. | PwnShop | Buffer o, Return-to-libc, Bypassing PIE and ASLR, Stack pi |
| 26. | Finale | Open-Read-Write (ORW) ROP chain exploitation |
| 27. | Hellhound | Heap exploitation, House of Spirit technique (glibc 2.23) |
| 28. | Sacred Scrolls: Revenge | Buffer o, Return-to-libc, Base64 encoded payload, Bypassing MOVAPS (stack alignment) |
| 29. | Sick ROP | Sigreturn Oriented Programming (SROP) |
| 30. | What does the f say? | Format string bug, Bypassing PIE, Canary, and ASLR, Return-to-libc, Bypassing MOVAPS protection |
| 31. | Bon-nie-appetit | Heap exploitation, maia_arena address leak, Off-by-one (OOB) exploit, Tcache poisoning |
| 32. | Great Old Talisman | Buffer o, GOT o |
| 33. | Spellbook | Heap exploitation, Leaking main_arena address, Fastbin dup attack, O __malloc_hook with one_gadget |
| 34. | Oxidized ROP | Rust buffer o, Local o using Unicode characters |
| 35. | Regularity | Buffer o, Return to register |
| 36. | Writing on the Wall | Out-of-bounds write, read() , Local o |
| 37. | Execute | Direct code execution bug, Return to shellcode, Crafting custom shellcode to bypass bad bytes, XOR encoding /bin/sh strings |
| 38. | Rocket Blaster XXX | Buffer o, Return-to-win with 3 parameters |
| 39. | Sound of Silence | Return address manipulation with gets(), Passing system() as argument, Using GDB to trace parent process |
| 40. | r0bob1rd | Libc leak index clobbering, Format string bug to o GOT entry for __stack_chk_fail(), OOB bug triggering __stack_chk_fail() call\| | 41. | Assemblers Avenge |Return to shellcode, Crafting custom shellcode, Using printed /bin/sh strings| | 42. | No Gadgets |Bypassing strlen() checks, Exploiting GLIBC 2.35 gadgets limitation, GOT o using controlled RBP, Forging fake RBP with PLT stub| | 43. | Kernel Ad: Part 1 |Exploiting race condition , Password hash cracking, Double fetch exploitation |

</details>

<details>

<summary> Machines </summary>

 

| No. | Machine Name | Lessons Learned | | :-: | ------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | 1 | Blue |Metasploit, smbclient, EternalBlue, Meterpreter| | 2 | Jerry |Tomcat exploitation, Msfvenom reverse shell, Metasploit usage| | 3 | Lame |FTP, C, Backdoor, SMB, Remote Code Execution (RCE)| | 4 | Netmon |FTP enumeration, Searchsploit usage| | 5 | Photobomb |Command injection, Pwncat usage, PATH hijacking| | 6 | Precious |Setting up simple Python server, PDFKit C, Pwncat, Ruby exploit, YAML exploit| | 7 | Shoppy |Gobuster usage, NoSQL injection, MongoDB exploitation, Password hash cracking, Ffuf usage, Docker privesc | | 8 | Cap |Exploiting Python 3.8 cap_setuid, Wireshark usage, IDOR | | 9 | Busqueda |Ser template injection (SSTI), Remote code execution (RCE), Gitea exploitation| | 10 | Knife |PHP C, Knife binary GTFOBins| | 11 | Bashed |Gobuster usage, Webshell deployment, Cronjob exploitation| | 12 | Shocker |Gobuster usage, Shellshock attack, Perl binary exploitation| | 13 | Beep |Dirbuster usage, Elastix webser, FreePBX service exploitation| | 14 | Blocky |Dirbuster usage, JADX-GUI for reverse engineering| | 15 | Bank |Gobuster usage, Identifying failed hash or encryption methods, Msfvenom reverse shell| | 16 | Nibbles |Gobuster usage, Nibble blog exploit, Techmint Linux monitoring script exploit| | 17 | SteamCloud |Kubernetes exploitation, Pod forging| | 18 | Keeper |WinDbg usage, KeePass key dumper (Keydumper), PuTTY key generation and usage (PuttyGen)| | 19 | Optimum |Rejetto HTTP File Ser, Metasploit usage| | 20 | Legacy |SMB C, Metasploit usage| | 21 | Granny |Microsoft IIS 6.0 exploit, Metasploit usage| | 22 | Grandpa |Microsoft IIS 6.0 exploit, Metasploit usage| | 23 | Devel |ASPX reverse shell, Microsoft IIS 7.5 exploit, Metasploit usage| | 24 | Horizontall |Generating SSH keygen, Port forwarding, Laravel 8.4.2 exploit| | 25 | |SQL injection (SQLi), PHP reverse shell| | 26 | Nunchucks |Gobuster usage, Nunjucks template engine exploit, Perl binary exploitation, AppArmor Perl bugs| | 27 | Late |Flask SSTI, SSH keygen, LinPEAS usage, Pspy64| | 28 | BountyHunter |Dirbuster usage, XXE exploitation, Abusing Python script misconfiguration| | 29 | Mirai |Raspberry Pi ser, Linux file recovery with dcfldd, mounting| | 30 | Armageddon |Drupal 7 service exploit, Dirty Sock exploit| | 31 | Paper |WordPress exploitation, Password reuse, LinPEAS usage, Sudo exploit| | 32 | MonitorsTwo |Cacti login page exploit, Hash cracking with John the Ripper, Listing SUID binaries, capsh GTFOBins| | 33 | Inject |Directory tra, Searchsploit usage, Spring Framework exploit, Pspy64, YAML forging| | 34 | Sau |Request Baskets v1.2.1 exploit, SSRF, Maltrail v0.53 exploit| | 35 | Pilgrimage |ImageMagick LFI, Git dumper usage, Binwalk CVE RCE| | 36 | CozyHosting |Dirsearch usage, Base64 encoded bash reverse shell, JD-GUI, PostgreSQL, Hash cracking with John and Hashcat, sudo GTFOBins| | 37 | Topology |LaTeX injection, Ffuf usage, Hash cracking with John, Pspy64, Forging PLT files to exploit Gnuplot binary cronjobs| | 38 | Explore |ADB, Metasploit usage, ES File Explorer exploit, oHostKeyAlgorithms, Port forwarding| | 39 | Previse |Dirbuster usage, Command injection, Hash cracking with John, Forging bash gzip, PATH hijacking| | 40 | Broker |Apache ActiveMQ exploitation, Remote code execution (RCE)| | 41 | Delivery |Email impersonation, Hash cracking using Best64 and John the Ripper| | 42 | Codify | Machine 2 (VM2) exploitation, Hash identification, Hash cracking with John, Python bruteforce script creation| | 43 | Analytics |Metabase login page exploit, Metasploit usage, LinPEAS usage, Local pri escalation on Ubuntu 22.10 / 22.04| | 44 | Soccer |Dirsearch usage, H3K Tiny File Manager exploitation, WebSocket exploitation, SQLmap for blind SQLi, Pri escalation using SUID doas, Forging dstat using Python| | 45 | Timelapse |Enumerating public SMB shares with smbclient, Cracking Personal Information Exchange (PFX) files, OpenSSL, pfx2john, e, Acti enumeration| | 46 | De |Ffuf usage, Dirsearch usage, Joomla v4.2 CMS exploitation, Password hash cracking with John, apport-cli binary exploitation| | 47 | Return |SMB service enumeration with smbclient and enum4linux, Abusing printer's network, e, Group membership enumeration for s account, Msfvenom, Acti security group abuse, Metasploit usage| | 48 | Irked |Unreal Engine 3.2.8.1 exploitation, Metasploit usage, LinPEAS usage| | 49 | Perfection |WEBrick 1.7.0 exploitation, ERB and Ruby RCE, LinPEAS usage, Time-based password hash cracking with John| | 50 | Headless |XSS, Cookie stealing, Command injection, Remote code execution (RCE), Abusing syscheck misconfiguration for root| | 51 | Wifinetic |FTP anonymous login, WiFi network interface enumeration, WiFi network configuration dumping, WPS PIN brute forcing using Reaver| | 52 | OpenAdmin |Dirsearch usage, OpenNetAdmin v18.1.1 exploit, Bash reverse shell, Abusing Apache2 internal misconfiguration, Password cracking with John, Port forwarding, Webshell deployment, SSH private key cracking, Pri escalation in nano by resetting stdin/stdout/stderr| | 53 | TraceBack |Gobuster usage, SSH key generation, Forging Lua scripts, SSH MOTD manipulation` |

</details>

<summary> GamePwn </summary>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |CubeMadness1|||

</details>

</details>

<summary> Forensics </summary>

</details>

<summary> Cryptography </summary>

</details>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Impossible Password|Bypass|Behind the Scenes|
|2. |WIDE|Baby RE|You Cant C Me|
|3. |Find The Easy Pass|Baby Crypt|Ransom|
|4. |Anti Flag|Ouija|Tear Or Dear|
|5. |Rebuilding|Teleport|Hunting License|
|6. |Shattered Tablet|||

</details>

<summary> OSINT </summary>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Easy Phish|Infiltration|Money Flowz|
|2. |Missing in Action|ID Exposed|0ld is g0ld|

</details>

<details>
 
<summary> Mobile </summary>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Cat|Don't O|APKey|
|2. |Pinned|APKrypt|Manager|
|3. |Anchored|[]()|[]()|

</details>

<summary> Hardware </summary>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Debugging Interface|Gawk|Photon Lockdown|

</details>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Canvas|fs0ciety|Milkshake|
|2. |Hackerman|Da Vinci|Art|
|3. |misDIRection|Emdee five for life|The secret of a Queen|
|4. |Eternal Loop||

</details>

<summary>Blockchain</summary>

|No.|Column 1|Column 2|Column 3|
|:-:|:-------:|:-------:|:-------:|
|1. |Survival of the Fittest|||

</details>

项目信息

开发语言：Python

Star 数：203

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕My WriteUps for HackTheBox CTFs, Machines, and Sherlocks.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

登录后才能参与讨论

下载链接

会员才能下载

登录后开通会员

同分类推荐

暂无同类资源

资源标题	hackthebox - My WriteUps for HackTheBox CTFs, Machines, and She
所属分类	CTF思路
发布作者	admin
发布时间	2026-10-05 23:46:49
下载权限	免费下载
附件数量	2 个下载链接
浏览次数	291
讨论数量	0
主题状态	正常讨论中

hackthebox - My WriteUps for HackTheBox CTFs, Machines, and She

项目说明

项目信息

技术要点

使用与学习建议

免责声明

怎么获取这个资源？

下载链接失效了怎么办？

可以转载或二次发布吗？

下载链接

同分类推荐