Apr 8, 2026
Garfield — HackTheBox Walkthrough (Hard, Active Directory)
Hard Windows AD box. Chains writable SYSVOL → Logon Script Hijack → ForceChangePassword pivot → AddSelf to RODC Administrators → R…
All Walkthroughs articles
Walkthroughs → All Walkthroughs articles
Mar 31, 2026
DevArea htb Walkthrough
A complete HackTheBox DevArea walkthrough covering FTP enumeration, Apache CXF SSRF (CVE-2022-46364), credential extraction, Hover…
Vulnlab: Baby — Medium (Linux)
Full security assessment walkthrough for Baby on Vulnlab. Includes reconnaissance, enumeration, exploitation steps, and a professi…
Vulnlab: Escape — Easy (Windows)
Full security assessment walkthrough for Escape on Vulnlab. Includes reconnaissance, enumeration, exploitation steps, and a profes…
Vulnlab: Sweep — Medium (Windows)
Full security assessment walkthrough for Sweep on Vulnlab. Includes reconnaissance, enumeration, exploitation steps, and a profess…
HackTheBox Fortress: AWS — Cloud Security Writeup
Full walkthrough of the HackTheBox AWS Fortress. Covers S3 public bucket credential leakage, IAM privilege escalation via AssumeRo…
HackTheBox Fortress: Faraday — Web → Flask SSTI → Reverse Engineering → LKM Rootkit
Complete Faraday Fortress writeup. 8 flags: SMTP debug catcher → exposed /.git → git-dumper → Flask render_template_string SSTI → …
HackTheBox Fortress: Synacktiv — Full Writeup (v1 + v2)
Complete walkthrough of both Synacktiv HTB Fortress versions. v1 covers path traversal double-encoding, SSTI Jinja2 RCE, and PHP d…
HackTheBox Fortress: Akerva — Web Recon → LFI → Werkzeug PIN Bypass → PwnKit
Complete Akerva Fortress writeup translated from the xchg2pwn Spanish original. 8 flags: HTML comment leak → SNMP public v2c → HTT…
HackTheBox: Academy — Easy (Linux)
Full security assessment walkthrough for Academy on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a pr…