// htb academy

HTB Academy Writeups

Lab box walkthroughs from HTB Academy modules — sorted newest first.

All Academy boxes
HTB Academy Academy
Academy - File Inclusion Skills Assessment
Linux
"Spent ages trying to get a reverse shell before realising the container was network isolated — just read the flag directly via the webshell"
linuxlfifile-uploaddouble-url-encoding
HTB Academy Academy
HTB Academy - File Inclusions Techniques
Linux
"The GIF8 header shows up in every command output from the webshell — it's not an error, it's coming from your upload. Ignore it or strip it mentally"
linuxlfirfifile-upload