htb-ctf-walkthroughs

HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting files Methodolog...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

CVE-2023-40028

CVE-2023-40028 Exploit for CVE-2023-40028 for educational purposes Built for HTB machine LinkVortex Usage python3 exploit.py Then enter the file path you want to read e.g., /etc/passwd. Type exit to quit...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

htb-sau-automated

This repository does not have a README...

PwnBox-Kali

PwnBox-Kali Bash-script to automate the process of setting up a new Kali Linux virtual machine to look a like HTB PwnBox Just a script to automate all the process of twiking and installing tools on new kali linux VM It was done mostly for me but maybe someone will find it useful Some of the code...

traveller-htb

This repository does not have a README...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — CVE-2026-29000 Writeup Disclaimer: This exploit was developed solely for the retired HackTheBox machine "Principal". For educational purposes only. Do not use against systems you do not own or have explicit permission to test. Machine Info Field| Details ---|--- Name| Principal...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents 1. Executive Summary 2. Challenge Description 3. Vulnerability Analysis 4...

Trickster-HTB

Trickster Exploitation Report About Trickster Trickster is a medium-difficulty Linux machine featuring multiple vulnerabilities across different services. This report outlines the process of exploiting these vulnerabilities to achieve full system compromise. Exploitation Steps 1. Exploiting...

userenum-CVE-2018-15473

Userenum CVE-2018-15473 User enumeration for CVE-2018-15473 This script is a method to use a user dictionary with the CVE-2018-15473 SSH User Enumeration by Leap Security @LeapSecurity https://leapsecurity.io. Script developed to solve Valentine HTB machine. How to use it 1st. Download the main...

Dompdf-Exploit-RCE

Dompdf-Exploit-RCE An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine Made to make the exploit less tedious and annoying...

CVE-2023-32784-password-combinator-fixer

🔒 CVE-2023-32784 Password Combinator Fixer USEFUL FOR KEEPER HTB MACHINE After using the KeePass password dumper, some characters might be parsed as ● incorrectly. This script helps you identify the real characters and fix the issue efficiently. 🚀 🛠️ How to Use 1. Run the Script Execute the script...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htblookupleaf encounters an empty rbtree htblookupleaf contains a BUGON that can be triggered by the following commands: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc cla...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cakeenqueue return NETXMITCN when past bufferlimit The following setup can trigger a WARNING in htbactivate due to the condition: !cl-leaf.q-q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb...

CVE-2026-90053

A flaw was found in the Linux kernel's Hierarchical Token Bucket HTB scheduler. An unprivileged local user, by sending a specially crafted network packet, can trigger an infinite loop in the packet classification path. This can cause the system to soft lockup or panic, resulting in a Denial of...

SUSE CVE-2026-97966

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: reset HTB scheduler topology before freeing queues HTB offload programs NIXAFTLxXTOPOLOGY on QoS-allocated scheduler queues via otx2qostxschqsetparenttopology, but teardown freed those queues without clearing...

UBUNTU-CVE-2026-97966

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: reset HTB scheduler topology before freeing queues HTB offload programs NIXAFTLxXTOPOLOGY on QoS-allocated scheduler queues via otx2qostxschqsetparenttopology, but teardown freed those queues without clearing...