Writeups
Index of every Hack The Box machine writeup published on the blog. Filter by operating system, difficulty or status, search by technique and sort by any column.
| Machine | SO / OS | Difficulty | Tags | Date |
|---|---|---|---|---|
| SmartHire | 🐧 Linux | Medium | MLflow, CVE-2024-37054, PickleDeserialization, RCE, PythonPathHijacking, AI | 2026-09-26 |
| Hercules | 🪟 Windows | Insane | ActiveDirectory, LDAPinjection, ASPnet, ForceChangePassword, OUTakeover, ESC3 … | 2026-09-21 |
| Silentium | 🐧 Linux | Easy | CVE, WebExploitation, Flowise, Gogs, Docker, PrivilegeEscalation | 2026-09-12 |
| Pirate | 🪟 Windows | Hard | Active Directory, Kerberos, Pre-Windows 2000, RBCD, Constrained Delegation, MSSQL … | 2026-09-05 |
| Helix | 🐧 Linux | Medium | CVE-2023-34468, ApacheNiFi, ICS, OPCUA, H2Database | 2026-08-08 |
| Logging | 🪟 Windows | Medium | ActiveDirectory, ADCS, ESC1, gMSA, DLLHijacking, WSUS … | 2026-07-18 |
| CCTV | 🐧 Linux | Easy | CVE-2024-51482, CVE-2025-60787, ZoneMinder, motionEye, SQL Injection | 2026-07-11 |
| DevArea | 🐧 Linux | Medium | SOAP, Apache CXF, XOP, MTOM, Hoverfly, File Read … | 2026-07-04 |
| WingData | 🐧 Linux | Easy | CVE, WebExploitation, FTP, PrivilegeEscalation | 2026-06-27 |
| NanoCorp | 🪟 Windows | Hard | ActiveDirectory, CVE-2025-24071, CVE-2024-0670, NTLMRelay, BloodHound, DACL … | 2026-06-20 |
| VariaType | 🐧 Linux | Medium | CVE, WebExploitation, FontTools, FontForge, GitDumper, PrivilegeEscalation | 2026-06-13 |
| Facts | 🐧 Linux | Easy | MinIO, S3, CVE-2025-2304, CamaleonCMS | 2026-06-06 |
| Interpreter | 🐧 Linux | Medium | CVE, WebExploitation, Deserialization, PrivilegeEscalation, MariaDB, SSTI | 2026-05-30 |
| MonitorsFour | 🪟 Windows | Easy | CVE, WebExploitation, Docker, IDOR, PHPTypeJuggling, Cacti … | 2026-05-23 |
| Pterodactyl | 🐧 Linux | Medium | CVE-2025-49132, CVE-2025-6018, CVE-2025-6019, Pterodactyl Panel, PEAR, Path Traversal … | 2026-05-16 |
| Overwatch | 🪟 Windows | Medium | ActiveDirectory, MSSQL, ADIDNS, WCF, SOAP, NTLMRelay … | 2026-05-09 |
| DarkZero | 🪟 Windows | Hard | Active Directory, Kerberos, Certify, ADCS, Unconstrained Delegation, MSSQL … | 2026-04-04 |
| BountyHunter | 🐧 Linux | Medium | XXE, File Disclosure, PHP, Gobuster, Credential Reuse, SSH … | 2021-11-20 |
| Explore | 🤖 Android | Easy | ADB, ES File Explorer, CVE-2019-6447, File Disclosure, Port Forwarding, Privilege Escalation | 2021-10-30 |
| Chaos | 🐧 Linux | Easy | IMAP, LaTeX, RCE | 2019-05-25 |
No results.