Solvere Labs

HackTheBox

HackTheBox walkthroughs for retired machines.

Difficulty
OS
Tags

VariaType Walkthrough

easy linux

The portal subdomain hosts a PHP Validation Dashboard. A .git directory was exposed at the root, allowing full source code recovery including deleted content from commit history.

Poison Walkthrough

easy bsd

On port 8000 the webserver running is serving the user.txt flag, maybe is another user who brought up the server to hack it????

Frolic Walkthrough

easy linux

Why this worked: The developer left credentials hardcoded in client-side JavaScript, validated entirely in the browser. No server-side auth — the JS just checks if input matches an

Sau Walkthrough

easy linux

The request-baskets project has been associated with a Server-Side Request Forgery (SSRF) vulnerability, specifically identified as CVE-2023-27163.

Late Walkthrough

easy linux

lsattr lists the file attributes on a second extended file system. See chattr below for a description of each attribute.

Acute Walkthrough

hard windows

Exiftool is highly useful for extracting metadata from documents extracted during enumeration. Leaking metadata can lead to compromise if it gets into the wrong hands, as it can ca

Sharp Walkthrough

hard windows

This hard-difficulty Windows machine from Hack the Box was both challenging and fun. As the name suggests, it focuses on a few user-made code projects that use the C Sharp programm

Bucket Walkthrough

intermediate linux

This medium difficulty Linux machine by MrR3boot on Hack the Box was very interesting and quite relevant in today's cloud-centric world. Many websites these days are hosted and run

Laboratory Walkthrough

easy linux

This easy-difficulty Linux machine had an interesting take on a common use of a docker container. Installing a GitLab instance and storing sensitive code in it are likely uses that

Time Walkthrough

easy linux

This machine was almost dissapointingly easy for a medium box. It definitely should have been classified 'Easy'. A simple test at the beginning revealed a verbose error message. So

Resolute Walkthrough

intermediate windows

A medium-difficulty Windows box that was fairly straightforward. Privilege escalation required going through two different users and taking advantage of Windows domain group permis

Multimaster Walkthrough

insane windows

Hold on to your seats, because this Insane Windows machine is a wild ride. TODO:Finish this writeup, there are more notes and stuff in the notes app if anything is missing...

Monteverde Walkthrough

intermediate windows

Short description to include any strange things to be dealt with...when there is a proper description here the website build will stop breaking. Hopefully this is enough text to fi

Apt Walkthrough

insane windows

This Windows insane-difficulty machine was quite challenging, but mostly due to its use of some unconventional settings. Breaking in involved many of the normal enumeration and pri

Luanne Walkthrough

easy linux

This easy difficulty BSD system...Short description to include any strange things to be dealt with.

Reel2 Walkthrough

hard windows

This machine was not as difficult in some respects as other Hard-difficulty machines, but the way that the machine was realistically hardened made it more challenging. The use of s

Crossfit Walkthrough

insane linux

This Insane-difficulty machine from Hack The Box took far longer to root than I would have liked, mostly due to getting hung up on the the final exploit. I took a break from it, af

Laser Walkthrough

insane linux

This Insane-difficulty machine from Hack The Box took me a lot longer to progress to the initial foothold than most boxes take to root! This machine had some very interesting avenu

Fuse Walkthrough

intermediate windows

This medium-difficulty Windows machine gave me a chance to exploit a vulnerable service that we hear of often in training as being an overlooked problem for many Enterprises: print

Dyplesher Walkthrough

insane linux

Dyplesher was an insane difficulty Linux machine that tested both web enumeration skills, and code review and writing skills. Multiple Git repositories containing source code, the

Blunder Walkthrough

easy linux

This easy difficulty Linux machine featured a content management system that was new to me, and a simple to use but interesting way to bypass a common configuration used by system

Admirer Walkthrough

easy linux

An easy difficulty Linux machine that has an interesting take on database manipulation to obtain a local file inclusion vulnerability. It also has an interesting new (to me) way to

Traceback Walkthrough

easy linux

Traceback is an easy difficulty Linux machine that gives a good introduction to web shells and tracing the steps of how an attacker compromised a server (then defaced it!).

Sauna Walkthrough

easy windows

A fairly easy Windows machine that requires a little 'outside the box' thinking in order to get the initial foothold. After that, simple enumeration will give everything else that

Playertwo Walkthrough

easy linux

An Insane difficulty Linux machine that tested my web skills quite a bit and also had me doing as much research on new protocols and services as three or four easy or medium boxes

Oouch Walkthrough

hard linux

This had difficulty Linux machine taught me a lot about the internal workings of a federated access control system, specifically an implementation of Oauth2. Persistence and the ab

Nest Walkthrough

easy windows

This was a fairly easy Windows box that required a bit of back-and-forth between locations and also a little bit of .NET-fu to proceed. Luckily there are tools and websites out the

Cascade Walkthrough

easy windows

This medium difficulty Windows machine was a good refresher on themes and techniques I had seen in other machines (such as Nest), but also introduced new things and gave enough of

Book Walkthrough

intermediate linux

A medium Linux box that was fairly straightforward, but still challenging enough to teach some interesting use cases for 'standard' attacks.