Facts HTB Writeup | HacktheBox | Season 10

The new HackTheBox season has officially kicked off, and with it comes the release of the first seasonal machine: Facts—an easy-rated Linux target that sets the tone for this year’s challenges. As always with season boxes, the excitement around the release is high, and Facts offers a fun warm-up that combines classic enumeration with a clean, beginner-friendly exploitation path.

• Name: Facts
• OS: Linux
• Difficulty: Easy
• Released: Start of HTB Season (Machine #10)
• Points: 20

🔍 Initial Thoughts & Recon

As with any new machine, the first step is mapping the attack surface. Facts immediately gives off a vibe of “simple on the outside, tricky once you dig deeper.” The exposed service hints at a web-centric entry point, and the challenge lies in spotting what’s unusual, what’s misconfigured, or what’s leaking more information than intended.

While keeping things spoiler-free, I can say this:

➡️ Understanding how the machine handles user input becomes key.

➡️ Paying attention to small informational clues will guide your exploitation path.

➡️ The escalation phase continues the same theme—facts matter, details matter.

Access is restricted by HackTheBox rules#

The solution to the problem can be published in the public domain after her retirement.

Look for a non-public solution to the problem in the telegram channel .