greyair / hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

hackthebox-writeups

Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

https://www.hackthebox.eu/

Important All Challenge Writeups are password protected with the corresponding flag.
Active machines writeups are protected with the corresponding root flag.

Disclaimer

It is totally forbidden to unprotect (remove the password) and distribute the pdf files of active machines, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of active machines in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.

Submissions

If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to: hackplayers_at_Ymail.com.

In this way, you will be added to our top contributors list (see below) and you will also receive an invitation link to an exclusive Telegram group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an active machine it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special" Telegram group is also to have a hacker level or higher (no script kiddies).

Contributors

No	ctry	nick	avatar	team	machines	challenges
1		Fiti		L1k0rD3B3ll0t4	Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, Valentine, Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline, Ghoul, Bastion, Swagshop, Ellingson, Writeup, Chainsaw, Haystack, Jarvis, Player, Smasher2, Unattended, Kryptos	Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Loves Graphs, Sick Teacher, Weak RSA, Fuzzy, I Know Mag1k, Grammar
2		drx51		solitaire wolf	Celestial, Dev0ops, Nibbles, Shocker, Valentine, Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce
3		volken		SinHack	Poison, Jerry, Curling, Help, Irked, Popcorn	0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro
4		wilsonnkwan		CyberFrenzy	Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel, Ellingson, Luke, Kryptos, Smasher2, Ghoul, Unattended, Craft
5		SirBroccoli		Solitaire wolf	SwagShop, Jarvis, OneTwoSeven, Haystack, Heist, Bitlab, Wall, Bankrobber	Emdee five for life, Craft, FreeLancer, Bombs landed, Eat the cake, Headache, Find the secret flag, Debugme, Impossible password, DSYM, Snake, Find the easy pass, Obscure, Crooked crockford
6		pimmytrousers		BitsPlz	Bounty, Celestial, Jerry, Poison, Sunday, Valentine, Canape, Stratosphere, Dev0ops
7		mcruz		solitaire wolf	Valentine, Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier
8		1v4n		solitaire wolf	Olympus, Jerry, Curling, Netmon	Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake, Easy Phis
9		KaoRz		L1k0rD3B3ll0t4	Olympus, Secnotes, Ypuffy, Smasher	Find the easy pass, Impossible Password, ropme, Old Bridge, ropmev2, Dream diary 1, Dream diary 2
10		frosters		solitaire wolf	Aragog, Silo, Bounty, Rabbit, Dev0ps, Valentine, Secnotes, Oz
11		artikrh		Sushi	Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access
12		Sekisback		solitaire wolf	Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune
13		crysal0		SKPH4X	Bastion, Writeup, SwagShop	Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman, Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Widescreen, Digital Cube, Pusheen Loves Graphs, 0ld is g0ld, Eternal loop, Blackhole, misDIRection, fs0ciety, Longbottoms Locker, Inferno, Grammar, I know Mag1k
14		Magichk		Watch4Hack	Luke, Writeup	Please, don't share, Bank Heist, MarketDump, Emdee five for life, Fuzzy, August, Easy Phish, DSYM
15		icebreakcrypt		Solitaire wolf		Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Loves Graphs, Milkshake, Raining blood, The Future Bender, Decode me
16		manulqwerty		L1k0rD3B3ll0t4	Stratosphere, Canape, Nibbles, Bounty, Jarvis,
17		amber		solitaire wolf	Vault, Giddy, Frolic, Chaos	Infinite Descent, Call
18		d0n601		mystiko	Luke, SwagShop, Writeup, Jarvis, Haystack, Craft	snake , Emdee five for life, Fuzzy, Easy Phish
19		Leonishan		solitaire wolf	Helpline, Unattended	Blue Shadow, Reminiscent, Took the byte
20		wilde		Solitaire wolf	Active, Waldo, Hawk, Zipper
21		fibbot		solitaire wolf	Celestial, Poison, Canape, Sunday
22		spenkk		Sentry	Bart, Dev0ops, Dropzone	snake
23		ozunu		OzunuClan	Giddy, Irked, Teacher, Access
24		n4xh4ck5		solitaire wolf	Jerry, PopCorn, Haircut, Curling
25		3v4Si0N		L1k0rD3B3ll0t4	Canape, TartarSauce, Bounty
26		Pitenager		solitaire wolf	Blue, Mirai, Nibbles	Cartographer, Lernaean
27		x4nt0n		AlphaPwner	Sunday, Olympus, Access	Marshal In The Middle
28		FrankyTech		L1k0rD3B3ll0t4	Active, Dev0ops, Olympus
29		TheLegend		solitaire wolf	Active, Dev0ops	I know Mag1k, Snake
30		kabutor		solitaire wolf	Aragog, Access, LaCasaDePapel_alt
31		Vis0r		L1k0rD3B3ll0t4	Blocky, Chatterbox	Matrioshka
32		31337			Writeup, Haystack, Ellingson
33		giru		solitaire wolf	Irked, Bounty
34		morph3		solitaire wolf	Help, Friendzone
35		Paint		solitaire wolf	Carrier, Ethereal
36		Ghostpp7		L1k0rD3B3ll0t4	Valentine, TartarSauce
37		o00o		solitarire wolf	Reel, Nightmare
38		felli0t		solitaire wolf	DevOops, Chatterbox
39		CyberVaca		L1k0rD3B3ll0t4	Chatterbox, Reddish
40		b1gb1t		r00th4ck	Sunday, Active
41		roskyfrosky		solitaire wolf	Jerry, Celestial
42		Sephiroth		Bin4ryCh4os	Fortune, Vault
43		OscarAkaElvis		FuckTheBox	Olympus	The Art of Reversing, I know Mag1k, Retro
44		BinaryShadow		Watch4Hack	Safe	Call, Crack this!, Decode me
45		tabacci		Solitaire wolf	HackBack, RE	Obscure
46		thereallulz		solitaire wolf		Retro, Monstrosity, Senseless Behaviour
47		luthorien		ARGSS		Not Art, Grammar, Hidden in Colors
48		absolutezero		Sentry	Fighter
49		xephrox		solitaire wolf	Mischief
50		worldunruled		hackmethod	Active
51		rtheory		FlavorTown	Reddish
52		thereverend		solitaire wolf	Active
53		Zaiuss		L1k0rD3B3ll0t4	Celestial
54		attl4s		juankeres	Falafel
55		kauffman		solitaire wolf	Poison
56		revil		solitaire wolf	Sunday
57		k4nj1d		solitaire wolf	nibbles
58		giovii		criuz	Mischief
59		3zculprit		solitaire wolf	Olympus
60		w4tchw0lf		L1k0rD3B3ll0t4		BitsNBytes, Monstrosity
61		SadFud		solitaire wolf		Impossible Password, Find the easy pass
62		FuxSocy		PhobosGroup	Dev0ops
63		abselithat		Pratum	Chatterbox
64		Killerloops		prosegur		Tear or dear
65		Renero		criuz		Digital Cube
66		Gibdeon		PKTeam		Old Bridge
67		therearwindow		solitaire wolf		Beatles
68		malwrecon		solitaire wolf	Ypuffy
69		labyrinth		badwolf		Ebola Virus
70		zdravich		TMHC	Carrier	Mission Impossible
71		epi		Hackmethod	Ypuffy, SwagShop
72		Wh04m1		YoRHa		Ropme
73		coldBug		NeatMalwAreParty	Curling
74		dionero		solitaire wolf	Jerry
75		TheShahzada		solitaire wolf	Mischief
76		SadClown		solitaire wolf	Redcross
77		julianjm		solitaire wolf		Old Bridge
78		snowman418		solitaire wolf	Reel
79		jondow		Bailando	Help
80		lolfireball		solitaire wolf	Lightweight
81		solsanctum		solitaire wolf	Carrier
82		fbbc		solitaire wolf	Conceal
83		4lexag		EphorSec		Cryptohorrific_es, Cryptohorrific_en
84		superhedgy		Solitaire wolf	Netmon
85		blazz3		PwnD34L3rS	Sizzle
86		Marduk		PwnD34L3rS	Helpline
87		lduros		solitaire wolf	SwagShop
88		explmuzz		N00b543V3R	Bastion
89		AlhA		solitaire wolf		Emdee Five for Live
90		liamm		PORTKNOCKWHOSTHERE	Jarvis
91		cavla		Solitaire wolf		Crooked Crockford
92		entropy		Solitaire wolf		Crooked Crockford
93		MrP4p3r		Solitaire wolf		Fuzzy
94		Pepelu		Solitaire wolf	Player, Craft
95		emmanuel		Solitaire wolf	Craft
96		Cript0crc		Solitaire wolf		Eemedefive for live
97		bWlrZQo		USCh4ck3r5	Craft
98		ChrisTo		Solitaire wolf	Bastion
99		naveen1729		Solitaire wolf	Player
100		Jacker31		NightTrain	Heist
101		mansoor		Solitaire wolf	Ellingson, Safe, Frolic, OneTwoSeven, Ghoul
102		AmbrotD		Solitaire wolf		USB Ripper
103		humurabbi		Solitaire wolf	Safe,Heist, Unattended, Networked, Craft
104		egotisticalSW		Solitaire wolf	Heist
105		danielcues		Ripp3rs		Mission Impossible
106		v3he		solitaire wolf		Old Bridge, ropmev2
107		arcc			json bitlab
108		CRYPT0HEX			Writeup
109		couchpotato			Heist

Special note

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of active machines, even knowing that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we have asked the HTB admins and they have given us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they have decided to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

Hackplayers community, HTB Hispano & Born2root groups.