HackTheBox Writeups

I am committed to start creating a structured collection of HackTheBox writeups every now and then.

Disclaimer

1. All writeups published in this repository strictly adheres to HackTheBox's Terms of Services
2. Only writeups of retired machines will be uploaded here.
3. Might contain errors in reasoning and ineffecient approaches, since I am still a rookie trying to learn aswell.
4. Apologies for the inconsistencies in formatting, I will try to make the writeups as standardized as possible.

Profile

Total Machines Pwned:

• Easy (5)
• Medium (0)
• Hard (0)

Total Challenges Solved:

• Easy (3)
• Medium (0)
• Hard (0)

General Methodology

1. Reconnaissance
2. Enumeration
3. Exploitation/Initial Access/Foothold
4. Privilege Escalation

Environment & Tools

Environment

OS: Kali Linux, ParrotOS

Tools

1. nmap - full port scan with OS and version detection.
2. gobuster - brute-force web directory enumeration.
3. ffuf - web directory enumeration + subdomain enumeration.
4. Burpsuite - intercepting and manipulating HTTP requests.
5. Wireshar - network pcap analysis.