Dompdf-Exploit-RCE

Dompdf-Exploit-RCE Un script de explotación para CVE-2022-28368 diseñado para hacer la explotación menos molesta, hecho para una máquina de HTB Hecho para hacer el exploit menos tedioso y molesto...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

PwnBox-Kali

PwnBox-Kali Script Bash para automatizar el proceso de configurar una nueva máquina virtual Kali Linux para que se parezca a HTB PwnBox Solo un script para automatizar todo el proceso de ajustar e instalar herramientas en una nueva VM de Kali Linux Fue hecho principalmente para mí pero quizás...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

devarea

DevArea — HackTheBox Plataforma: HackTheBox SO: Linux Estado: Retirado — walkthrough completo publicado. Walkthrough completo: l3dsec.com/walkthroughs/devarea-htb Cadena de ataque root@kitploit: nmap → 21 FTP anon + 80 + 8080 Jetty + 8888 Hoverfly → FTP anon → employee-service.jar Apache CXF,...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Advertencia de spoiler. Esta es una guía completa que incluye las flags. Si quieres resolver la máquina por tu cuenta, cierra esto ahora y vuelve cuando estés atascado. Información de la máquina Campo| Detalles ---|--- Nombre| Reactor SO| Ubuntu 24.04 LTS Noble Dificultad|...

traveller-htb

This repository does not have a README...

CVE-2023-40028

CVE-2023-40028 Exploit for CVE-2023-40028 for educational purposes Built for HTB machine LinkVortex Usage root@kitploit: python3 exploit.py Then enter the file path you want to read e.g., /etc/passwd. Type exit to quit...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — Writeup de CVE-2026-29000 Aviso legal: Este exploit fue desarrollado únicamente para la máquina retirada "Principal" de HackTheBox. Solo con fines educativos. No lo utilices contra sistemas que no poseas o para los que no tengas permiso explícito de prueba. Información de la máqui...

htb-ctf-walkthroughs

HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure root@kitploit: htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

Trickster-HTB

Trickster Exploitation Report About Trickster Trickster is a medium-difficulty Linux machine featuring multiple vulnerabilities across different services. This report outlines the process of exploiting these vulnerabilities to achieve full system compromise. Exploitation Steps 1. Exploiting...

htb-sau-automated

Este repositorio no tiene un README...

CVE-2023-32784-password-combinator-fixer

🔒 Corrector de Combinador de Contraseñas CVE-2023-32784 ÚTIL PARA LA MÁQUINA KEEPER HTM Después de usar el volcador de contraseñas de KeePass, algunos caracteres podrían interpretarse incorrectamente como ●. Este script te ayuda a identificar los caracteres reales y corregir el problema de manera...

userenum-CVE-2018-15473

Userenum CVE-2018-15473 Enumeración de usuarios para CVE-2018-15473 Este script es un método para usar un diccionario de usuarios con la enumeración de usuarios SSH CVE-2018-15473 de Leap Security @LeapSecurity https://leapsecurity.io. Script desarrollado para resolver la máquina Valentine de HTB...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: Returns NULL when htblookupleaf encounters an empty rbtree. htblookupleaf has a BUG that can be triggered with the following commands: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when bufferlimit is set to bufferlimit. The following setup can trigger a warning in htbactivate due to the condition: !cl-leaf.q-q.qlen. Example command: bash tc qdisc del dev lo root...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: schhtb: Make htbqlennotify idempotent. htbqlennotify always disactivates the HTB class, and actually might trigger a warning if it is already disactivated. Therefore, it is not idempotent and is not friendly to its callers, like...

htb-labs-connected

HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...