h4cking-l4bs - 🛡️ Hands-on hacking labs, CTF writeups & platform

项目说明

🛡️ Hacking Labs — by

> A curated collection of hands-on hacking labs, writeups, and platform guides for beginners and intermediate security enthusiasts.

![Website]()
![GitHub]()
![YouTube]()
![Instagram]()

---

👋 Welcome

Hey! I'm th3hash — a cybersecurity enthusiast sharing practical, beginner-friendly hacking labs, platform walkthroughs, and CTF writeups to help you build real skills in ethical hacking and penetration testing.

This repo covers e from structured platforms like TryHackMe and HackTheBox to live CTF competitions — all in one place.

🌐 Visit my website for articles, writeups & more: hackproofhacks.com
📺 Watch video walkthroughs on YouTube

---

⚠️ Legal Disclaimer

> All labs and techniques in this repository are strictly for educational purposes.
> Only practice on systems you own or have explicit written permission to test.
> Unauthorized hacking is illegal and can result in criminal charges.
> The author takes no responsibility for misuse of any content in this repo.

---

📚 Table of Contents

Getting Started

Prerequisites

Platform Guides & Writeups

- TryHackMe
- HackTheBox
- CTF Competitions
- PortSwigger Web Academy
- O
- PicoCTF
-
- DVWA & Local Labs
- Root-Me
- Blue Team Labs Online

Custom Hacking Labs

Recommended Tools

Setting Up Your Lab En

Learning Roadmap

Useful Resources

Contributing

Connect With Me

---

🚀 Getting Started

If you're brand new to ethical hacking, here's where to start:

1. Set up a safe lab en → see Setting Up Your Lab En
2. Start with TryHackMe → structured paths, browser-based, zero setup
3. Try a beginner CTF → PicoCTF or O Bandit
4. Move to HackTheBox → once you're comfortable with the basics
5. Watch walkthroughs on YouTube when you're stuck
6. Read writeups & articles at hackproofhacks.com

---

🧰 Prerequisites

You don't need to be an expert, but these basics will help a lot:

| Topic | Why It Matters |
|---|---|
| Basic Linux commands | Most tools & targets run on Linux |
| Networking fundamentals | Understanding IPs, ports, protocols, DNS |
| How the web works | HTTP, requests, responses, cookies, headers |
| Basic scripting (Python/Bash) | Automating tasks, modifying exploits |

New to Linux? → Start with O: Bandit — it's free and perfect for absolute beginners.

---

🧩 Platform Guides & Writeups

This repo contains notes, hints, and full writeups organized by platform. Each platform folder has its own README.md explaining how to get started there.

---

🟩 TryHackMe

> Best for: Absolute beginners — guided, structured, browser-based

TryHackMe is the most beginner-friendly platform. You get guided "rooms" with tasks, hints, and a browser-based AttackBox so you don't even need to install anything.

📁 Folder: tryhackme/

| Room | Difficulty | Category | Writeup |
|---|---|---|---|
| Pre-Security Path | ⭐ Beginner | Networking, Linux, Web basics | View |
| Introduction to Cybersecurity | ⭐ Beginner | Concepts & careers | View |
| Jr Penetration Tester Path | ⭐⭐ Intermediate | Full pentesting methodology | View |
| Blue | ⭐ Beginner | EternalBlue, MS17-010 | View |
| Ice | ⭐ Beginner | Windows exploitation, Icecast | View |
| Pickle Rick | ⭐ Beginner | Web + Linux basics | View |
| Mr Robot CTF | ⭐⭐ Intermediate | Web, Brute force, Privesc | View |
| Advent of Cyber | ⭐ Beginner | Annual beginner event (December) | View |
| RootMe | ⭐ Beginner | Web exploitation, Privesc | View |
| Brooklyn Nine Nine | ⭐ Beginner | FTP, SSH, Privesc | View |

How to get started on TryHackMe:
1. Sign up free at tryhackme.com
2. Start with the Pre-Security learning path
3. Use the browser-based AttackBox (no install needed) or connect via VPN
4. Follow my video guides on YouTube

---

🟥 HackTheBox

> Best for: Intermediate to ad — realistic, less guided, more rewarding

HackTheBox has realistic machines that mimic real-world pentesting. Less hand-holding than TryHackMe — you'll need to think for yourself.

📁 Folder: hackthebox/

| Machine | OS | Difficulty | Category | Writeup |
|---|---|---|---|---|
| Lame | Linux | ⭐ Easy | SMB exploitation | View |
| Legacy | Windows | ⭐ Easy | MS08-067, MS17-010 | View |
| Blue | Windows | ⭐ Easy | EternalBlue | View |
| Jerry | Windows | ⭐ Easy | Tomcat default creds | View |
| Bashed | Linux | ⭐ Easy | Web shell, Privesc | View |
| Nibbles | Linux | ⭐ Easy | Web exploitation | View |
| Beep | Linux | ⭐ Easy | Elastix, LFI | View |
| Shocker | Linux | ⭐ Easy | Shellshock | View |
| | Linux | ⭐ Easy | Heartbleed | View |
| Grandpa | Windows | ⭐ Easy | WebDAV, IIS exploitation | View |

How to get started on HackTheBox:
1. Sign up at hackthebox.com (free tier a)
2. Download the VPN pack and connect: sudo openvpn your.ovpn
3. Start with Easy rated retired machines (free with account)
4. Check HackTheBox Academy for guided learning modules

> 💡 Important: Writeups for acti) machines are against HackTheBox rules. All writeups in this repo are for retired machines only.

---

🏁 CTF Competitions

> Best for: Applying skills, competing, learning fast under pressure

CTF (Capture The Flag) competitions are timed hacking events where you sol to capture "flags" — secret strings that prove you pwned the target. They're one of the fastest ways to level up.

📁 Folder: ctf/

#### What is a CTF?

CTFs usually ha categories like:

| Category | What You Do |
|---|---|
| Web | XSS, SQLi, SSRF, deserialization exploits |
| Pwn | Binary exploitation, buffer o |
| Crypto | Breaking weak cryptography |
| Forensics | Analyzing files, network captures, memory dumps |
| Reverse Engineering | Disassembling and understanding binaries |
| OSINT | Finding information from public sources |
| Misc | Steganography, programming, trivia |

#### CTF Writeups in This Repo

| CTF Event | Year | My Writeups | Difficulty |
|---|---|---|---|
| PicoCTF | 2024 | View | ⭐ Beginner |
| CTFLearn Challenges | Ongoing | View | ⭐ Beginner |
| HackTheBox CTF | 2024 | View | ⭐⭐ Intermediate |
| TryHackMe CTF Events | Ongoing | View | ⭐ Beginner |
| NahamCon CTF | 2024 | View | ⭐⭐ Intermediate |
| CyberApocalypse CTF | 2024 | View | ⭐⭐ Intermediate |

#### Where to Find Live CTFs

CTFtime.org — The definiti calendar of upcoming CTF events

PicoCTF — Always-on beginner CTF by Carnegie Mellon Uni

CTFLearn — Beginner-friendly indi challenges, no time pressure

---

🕷️ PortSwigger Web Academy

> Best for: Web application hacking — completely free, world-class content

PortSwigger Web Security Academy is arguably the best free web hacking resource ever made. Created by the makers of Burp Suite — it covers every major web with interactive labs.

📁 Folder: portswigger/

| Topic | Labs | Writeup |
|---|---|---|
| SQL Injection | 18 labs | View |
| Cross-Site Scripting (XSS) | 30 labs | View |
| CSRF | 12 labs | View |
| SSRF | 7 labs | View |
| XXE Injection | 9 labs | View |
| Insecure Deserialization | 10 labs | View |
| Authentication | 14 labs | View |
| Access Control | 13 labs | View |
| File Upload | 7 labs | View |
| JWT Attacks | 8 labs | View |
| Business Logic | 12 labs | View |
| HTTP Request Smuggling | 20 labs | View |

How to get started:
1. Go to portswigger.net/web-security — 100% free, no credit card
2. Download Burp Suite Community Edition
3. Start with SQL Injection → XSS → Authentication

---

🐚 O

> Best for: Linux skills and command line mastery — free, no account needed

O wargames teach Linux, networking, and exploitation through progressively harder SSH-based challenges. Perfect for total beginners to Linux.

📁 Folder: o/

| Wargame | Levels | What You Learn | Writeup |
|---|---|---|---|
| Bandit | 34 levels | Linux basics, file permissions, networking | View |
| Natas | 34 levels | Web security basics (PHP, SQLi, LFI) | View |
| Le | 8 levels | Linux pri escalation basics | View |
| Krypton | 7 levels | Cryptography & classical ciphers | View |
| Narnia | 9 levels | Binary exploitation introduction | View |
| Behemoth | 8 levels | Intermediate binary exploitation | View |

How to play — no setup needed:

---

🟦 PicoCTF

> Best for: Students and beginners — free, always a, well-explained

PicoCTF is run by Carnegie Mellon Uni. Challenges stay li and are perfect for complete beginners with no prior experience.

📁 Folder: picoctf/

| Category | What You Practice | Writeup |
|---|---|---|
| General Skills | Terminal basics, encoding, file tools | View |
| Web Exploitation | SQLi, XSS, cookies, path tra | View |
| Cryptography | Caesar, Vigenère, RSA basics | View |
| Forensics | File analysis, steganography, PCAP | View |
| Reverse Engineering | Basic disassembly, Ghidra intro | View |
| Binary Exploitation | Buffer o basics | View |

---

📦

> Best for: Offline practice — download VMs and hack them locally

provides free downloadable machines you can hack completely offline, with no internet connection required after download.

📁 Folder: /

| Machine | Difficulty | Topics | Writeup |
|---|---|---|---|
| Mr-Robot: 1 | ⭐⭐ Intermediate | Web, WordPress, Privesc | View |
| DC: 1 | ⭐ Beginner | Drupal, SUID exploitation | View |
| Kioptrix Level 1 | ⭐ Beginner | Samba, Apache exploitation | View |
| Basic Pentesting: 1 | ⭐ Beginner | FTP, SSH, Pri escalation | View |
| SickOs 1.1 | ⭐⭐ Intermediate | Proxy abuse, Shellshock | View |
| FristiLeaks 1.3 | ⭐⭐ Intermediate | Web, Python-based Privesc | View |

How to use :
1. Download a VM from .com
2. Import into or
3. Set both your Kali VM and the target to Host-Only networking
4. Scan for the target: sudo netdiscover or nmap -sn 192.168.56.0/24

---

💀 DVWA & Local Labs

> Best for: Safe, repeatable, offline web practice on your own machine

These are intentionally applications you run locally — great for learning specific techniques without worrying about rules or timeouts.

📁 Folder: local-labs/

| App | What You Practice | Setup Guide |
|---|---|---|
| DVWA (Damn Web App) | SQLi, XSS, CSRF, File Upload, Command Injection | View |
| bWAPP | 100+ web types | View |
| OWASP WebGoat | Interacti web lessons | View |
| Metasploitable 2 | Network & service exploitation | View |
| | Docker-based real-world CVE labs | View |
| HackMe Bank | Banking application attacks | View |

Quick D with Docker:

---

🌐 Root-Me

> Best for: Huge of challenges — 500+ across all categories

Root-Me has over 500 challenges across web, network, cryptography, forensics, reverse engineering, and more. Great for steady, ongoing skill-building.

📁 Folder: root-me/

| Category | Topics | Writeup |
|---|---|---|
| Web - Client Side | XSS, CSRF, CORS exploitation | View |
| Web - Server Side | SQLi, LFI, RFI, SSTI | View |
| Network | Packet capture analysis, protocols | View |
| Cryptography | Classical ciphers, RSA, hashing | View |
| Forensics | File carving, steganography | View |
| App - Script | Python, PHP, JS code analysis | View |

---

🔵 Blue Team Labs Online

> Best for: Defensi — detection, analysis, incident response

Not all security is about attacking. Blue Team Labs Online teaches the defensive side: log analysis, threat hunting, malware analysis, and incident response. Essential if you want to understand the full picture.

📁 Folder: blueteam/

| Lab | Skill | Writeup |
|---|---|---|
| The Report | Log analysis & SIEM | View |
| Phishing Analysis | Email forensics | View |
| Network Analysis - Ransomware | Wireshark & PCAP analysis | View |
| Malware Analysis - Strings | Static malware analysis | View |
| Disgruntled | Insider threat hunting | View |

---

🔬 Custom Hacking Labs

Self-contained labs built and hosted in this repo. Each includes a Docker setup, clear objecti, and a solution folder.

📁 Folder: custom-labs/

🌐 Web Application Labs

| Lab | Difficulty | Topics Covered |
|---|---|---|
| web/01-sql-injection | ⭐ Beginner | SQLi basics, UNION attacks |
| web/02-xss | ⭐ Beginner | Reflected & Stored XSS |
| web/03-file-upload | ⭐⭐ Intermediate | Unrestricted upload, MIME bypass |
| web/04-idor | ⭐ Beginner | Insecure Direct Object Reference |
| web/05-command-injection | ⭐⭐ Intermediate | OS command injection, filter bypass |
| web/06-ssrf | ⭐⭐ Intermediate | Ser Request Forgery |

🖥️ Network Labs

| Lab | Difficulty | Topics Covered |
|---|---|---|
| network/01-nmap-basics | ⭐ Beginner | Port scanning, service detection |
| network/02-ftp-smb | ⭐ Beginner | Anonymous FTP, SMB enumeration |
| network/03-metasploit-intro | ⭐⭐ Intermediate | Metasploit framework basics |
| network/04-pi | ⭐⭐⭐ Ad | Tunneling, internal network access |

🐚 Linux Pri Escalation

| Lab | Difficulty | Topics Covered |
|---|---|---|
| privesc/01-suid-binaries | ⭐⭐ Intermediate | SUID abuse, GTFOBins |
| privesc/02-cron-jobs | ⭐⭐ Intermediate | Writable cron scripts |
| privesc/03-kernel-exploits | ⭐⭐⭐ Ad | Dirty COW, kernel CVEs |
| privesc/04-sudo-misconfig | ⭐ Beginner | Sudo -l, LD_PRELOAD |

🪟 Windows Pri Escalation

| Lab | Difficulty | Topics Covered |
|---|---|---|
| windows/01-ser | ⭐⭐ Intermediate | Unquoted service paths |
| windows/02-registry-abuse | ⭐⭐ Intermediate | Writable registry keys |
| windows/03-mimikatz-basics | ⭐⭐ Intermediate | Credential dumping |

🔐 Password & Authentication

| Lab | Difficulty | Topics Covered |
|---|---|---|
| auth/01-hydra-brute | ⭐ Beginner | Brute force with Hydra |
| auth/02-hash-cracking | ⭐ Beginner | Hashcat, John the Ripper |
| auth/03-jwt-attacks | ⭐⭐ Intermediate | JWT manipulation, algorithm confusion |

Run any custom lab instantly:

---

🛠️ Recommended Tools

Reconnaissance

| Tool | Use |
|---|---|
| Nmap | Port scanning, service/ detection |
| Gobuster / Feroxbuster | Directory and file brute forcing |
| Subfinder / Amass | Subdomain enumeration |
| Shodan | Internet-connected device search engine |
| theHar | Email, domain, IP OSINT gathering |

Web Testing

| Tool | Use |
|---|---|
| Burp Suite Community | Intercept, modify, replay HTTP requests |
| SQLMap | Automated SQL injection |
| ffuf | Fast web fuzzer for directories & parameters |
| Nikto | Web ser scanner |
| WhatWeb | Web technology fingerprinting |

Exploitation

| Tool | Use |
|---|---|
| Metasploit Framework | Exploit modules, payloads, post-exploitation |
| Searchsploit | Offline ExploitDB search |
| Hydra / Medusa | Brute force login portals |
| CrackMapExec | Network pentesting (SMB, WinRM, LDAP) |

Post-Exploitation

| Tool | Use |
|---|---|
| LinPEAS / WinPEAS | Automated pri escalation enumeration |
| GTFOBins | Unix binary abuse for privesc |
| Mimikatz | Windows credential dumping |
| BloodHound | Acti attack path |

Utility

| Tool | Use |
|---|---|
| Netcat / Ncat | Catching reverse shells |
| Python3 | Scripting, quick HTTP servers, exploit mods |
| tmux | Terminal multiplexer — run multiple sessions |
| Wireshark | Packet capture and network analysis |

---

🖥️ Setting Up Your Lab En

> ⚠️ Ne on live/real systems without permission. Always use a controlled en.

Option 1: Kali Linux (Recommended for Beginners)

The industry-standard pentesting distro with 600+ tools pre-installed.

Download at kali.org/get-kali → import into or → set network to Host-Only or NAT

Option 2: Parrot OS

Lighter and pri. Great for older hardware.
Download at parrotsec.org

Option 3: Docker Labs (Fastest Setup)

Option 4: Online Platforms (Zero Setup)

| Platform | Free? | Best For |
|---|---|---|
| TryHackMe | ✅ Free tier | Absolute beginners, guided paths |
| HackTheBox | ✅ Free tier | Intermediate, realistic machines |
| PicoCTF | ✅ Free | CTF challenges, students |
| O | ✅ Free | Linux skills, no account needed |
| PortSwigger Academy | ✅ Free | Web hacking, best in class |
| Root-Me | ✅ Free | 500+ challenges, all categories |
| Blue Team Labs Online | ✅ Free tier | Defensive/blue team skills |
| CTFtime | ✅ Free | Live CTF competition calendar |
| | ✅ Free | Offline practice |
| CTFLearn | ✅ Free | Beginner CTF challenges |

---

🗺️ Learning Roadmap

---

📖 Useful Resources

My Content

🌐 hackproofhacks.com — Writeups, tutorials & articles

📺 YouTube — Video walkthroughs

📸 Instagram — Tips & quick content

🐙 GitHub — All my code & writeups

Cheat Sheets & References

GTFOBins — Unix binary abuse for pri escalation

LOLBAS — Windows li binaries

PayloadsAllTheThings — Comprehensi reference

HackTricks — Pentesting notes for e

Re — Reverse shell one-liner generator

CyberChef — Encoding, decoding, decryption tool

Must-Read

OWASP Top 10 — The 10 most critical web

ExploitDB — Public exploit archive

C.com — C database

Mitre ATT&CK — Ad tactics and techniques framework

Books

*The Web Application Hacker's Handbook* — Stuttard & Pinto

*Hacking: The Art of Exploitation* — Jon Erickson

*Penetration Testing* — Georgia Weidman

*The Hacker Playbook 3* — Peter Kim

YouTube Channels

📺 — That's me! Walkthroughs & labs 😄

IppSec — HackTheBox machine walkthroughs (legendary)

John Hammond — CTF & malware analysis

NetworkChuck — Beginner-friendly networking & hacking

Li — Deep-di exploitation & CTF

---

🤝 Contributing

Want to add a writeup, fix something, or contribute a lab? You're welcome!

1. Fork this repository
2. Create a branch: git checkout -b writeup/platform-machine-name
3. Add your content with a proper README.md
4. Submit a Pull Request with a clear description

Writeup folder structure:

Contribution rules:

✅ Writeups for retired HackTheBox machines only

✅ CTF writeups allowed after the event ends

✅ Educational content only

❌ No writeups for currently acti machines

❌ No malware, li, or illegal content

---

🌟 Star This Repo

If this helped you learn something new, drop a ⭐ star — it helps others discover the repo!

---

📲 Connect With Me

| Platform | Link |
|---|---|
| 🌐 Website | hackproofhacks.com |
| 🐙 GitHub | |
| 📺 YouTube | |
| 📸 Instagram | |

> *"The best way to learn hacking is to hack (legally)."* — th3hash

---

<di="center">
Made with ❤️ by <a href=" &nbsp;·&nbsp;
<a href=" &nbsp;·&nbsp;
<a href="
</div>

项目信息

开发语言：未知

Star 数：59

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🛡️ Hands-on hacking labs, CTF writeups & platform guides for beginners — covering TryHackMe, HackTheBox, PortSwigger, PicoCTF, VulnHub & more. | hackproofhacks.com展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。