// hackthebox
HackTheBox Writeups
All retired HTB machine writeups — sorted newest first.
All HTB boxes
Shocker
Linux
"Wrong gobuster wordlist wasted 30mins — and missing a semicolon in the payload caused a 500 for longer than I'd like to admit"
Nibbles
Linux
"Webshell broke because of bash variable interpolation — double quotes stripped $_REQUEST. Single quotes fixed it instantly"
Lame
Linux
"Shell looked completely blank after the exploit fired — it was actually live, just needed a command typed to confirm"
HTB Starting Point - Tier 0
Linux
"Tier 0 exists to teach one concept per box — if you're stuck, the answer is almost always the simplest thing you haven't tried yet"