A growing collection of write-ups from my offensive security practice on Hack The Box.
Approach
Every write-up follows the same template and focuses on method rather than on the flag:
- Enumeration — what I looked at and what it revealed
- Attack path — why I chose each step, including the dead ends
- Defender's view — how the issue could have been detected or prevented
The goal is to train both sides of the job: thinking like an attacker, and turning each finding into something a blue team can act on.
Scope and rules
Only content that HTB allows to be published: retired machines, Starting Point machines and Tier 0 Academy modules. Nothing about active machines, challenges or Sherlocks. Flags, hashes and credentials are always redacted.
Structure
starting-point/— Starting Point machinesmachines/— retired machinesacademy-tier0/— notes from Tier 0 Academy modules
Status
Ongoing: new write-ups are added as I complete machines. See the repository for the up-to-date index.
Disclaimer
For educational purposes only. All techniques were used exclusively against HTB lab environments.