HackTheBox Fortress: AWS — Cloud Security Writeup
Full walkthrough of the HackTheBox AWS Fortress. Covers S3 public bucket credential leakage, IAM privilege escalation via AssumeRo…
Hard Machines
Walkthroughs → Hard Machines
HackTheBox Fortress: Faraday — Web → Flask SSTI → Reverse Engineering → LKM Rootkit
Complete Faraday Fortress writeup. 8 flags: SMTP debug catcher → exposed /.git → git-dumper → Flask render_template_string SSTI → …
HackTheBox Fortress: Synacktiv — Full Writeup (v1 + v2)
Complete walkthrough of both Synacktiv HTB Fortress versions. v1 covers path traversal double-encoding, SSTI Jinja2 RCE, and PHP d…
HackTheBox Fortress: Akerva — Web Recon → LFI → Werkzeug PIN Bypass → PwnKit
Complete Akerva Fortress writeup translated from the xchg2pwn Spanish original. 8 flags: HTML comment leak → SNMP public v2c → HTT…
HackTheBox: BlockBlock — Hard (Linux)
Full security assessment walkthrough for BlockBlock on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a…
HackTheBox: Caption — Hard (Linux)
Full security assessment walkthrough for Caption on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a pr…
HackTheBox: Certificate — Hard (Windows)
Full security assessment walkthrough for Certificate on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and …
HackTheBox: Checker — Hard (Linux)
Full security assessment walkthrough for Checker on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a pr…
HackTheBox: Eureka — Hard (Linux)
Full security assessment walkthrough for Eureka on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a pro…
HackTheBox: FormulaX — Hard (Linux)
Full security assessment walkthrough for FormulaX on HackTheBox. Includes reconnaissance, enumeration, exploitation steps, and a p…