hackthebox-challenge

My Writeups and Walkthroughs

This Repo consists writeups of HackTheBox machines that I've solved while preparing for OSCP.

My personal writeup on HackTheBox machines and challenges

HackTheBox Decode

HTB_Cap Security Assessment – Exploitation of Insecure Direct Object Reference (IDOR) leading to privilege escalation via Linux capabilities.

A curated and clean writeup of the "Lost in Hyperspace" Hack The Box AI/ML challenge

Store the scripts used for HTB challenges

HTB_Fawn Security Assessment – Exploitation of Anonymous FTP Login (vsftpd 3.0.3) leading to root flag extraction. Mapped to MITRE ATT&CK (T1078, T1213) and NSA D3FEND (D3-FUAC) with a complete remediation roadmap.

This repository contains the answers to the challenges from Holems CTF 2025.

Red team trainee sharing writeups, tools, and lab insights with a passion for exploring Active Directory, offensive security, and penetration testing. This site is a hub for writeups, tools, and insights I develop while sharpening my skills in real-world scenarios.

Solved Hack The Box Challenges.

HTB_Nexus Penetration Test Report – Comprehensive security assessment documenting credential leakage from Gitea, CVE-2026-38526 exploitation in Krayin CRM, and privilege escalation via Gitea template sync directory traversal. Mapped to MITRE ATT&CK and NSA D3FEND frameworks with actionable remediation roadmap and full evidence appendix.

Writeups

Exploit to Solve the HTB web Challenge Emdee Five forever

A writeup for the Hack The Box machine Alert.

HTB_Enigma Security Assessment – Full pentest completed, chaining NFS disclosure, IMAPS password reuse, and OS Command Injection in OpenSTAManager (CVE-2025-69212) through to root via a misconfigured OliveTin service. Full report and evidence appendix to be published once permitted by HTB's active-machine policy.

Practical walkthroughs and writeups of machines I’ve pwned on Hack The Box, focusing on real-world pentesting skills, enumeration tactics, exploitation steps, and post-exploitation insights. Intended to track progress and demonstrate hands-on red teaming capabilities.

A writeup for the Hack The Box machine Checker (Hard Competitive Challenge).