Skip to content
Branch: master
Find file Copy path
Find file Copy path
9 contributors

Users who have contributed to this file

@vmotos @cybervaca @F1t1 @KaoRz @crysal0 @b1gb1t @invalid-email-address @OscarAkaElvis @coldBug
executable file 128 lines (107 sloc) 61.1 KB


Writeups for HacktheBox machines (boot2root) and challenges written in Spanish or English.

Important All Challenge Writeups are password protected with the corresponding flag.
Active machines writeups are protected with the corresponding root flag.

hpys_htb_writeups logo


It is totally forbidden to unprotect (remove the password) and distribute the pdf files of active machines, if we detect any misuse will be reported immediately to the HTB admins.
Anyway, all the authors of the writeups of active machines in this repository are not responsible for the misuse that can be given to the corresponding documents. Please think that this is done to share techniques not for spoilers.


If you want to incorporate your own writeup, notes, scripts or other material to solve the boot2root machines and challenges you can do it through a 'pull request' or by sending us an email to:

In this way, you will be added to our top contributors list (see below) and you will also receive an invitation link to an exclusive Telegram group where several hints (not spoilers) are discussed for the HacktheBox machines.

Please consider protecting the text of your writeup (e.g. not allowing to be copied) so that it can not be easily shared on platforms such as Pastebin. Of course, if someone leaks a writeup of an active machine it is not the responsibility of the author. If we detect someone who does it, they will immediately report to the HTB Staff so they can take the appropriate measures.

Note: the minimum requirement to enter the "special" Telegram group is also to have a hacker level or higher (no script kiddies).


No ctry nick avatar team machines challenges
1 Fiti L1k0rD3B3ll0t4 Bashed, Arctic, Tenten, Celestial, Mirai, Nibbles, Sunday, Valentine, Dev0ops, Aragog, Canape, Mischief, Jerry, Olympus, Bounty, Access, Carrier, Curling, Dab, Ypuffy, Waldo, Secnotes, Irked, Frolic, Chaos, Fortune, Friendzone, Lightweight, Querier, Help Conceal, CTF, Netmon, Sizzle, Arkham, OneTwoSeven, LaCasaDePapel, Helpline, Ghoul, Bastion, Swagshop, Ellingson, Writeup Impossible password, Widescreen, Unified, Milkshake, It's raining blood, Hackerman, Forest, Cartographer, 0ld is g0ld, HDC, Beatles, Brainy's Cipher, Classic Yet Complicated, Da Vinci, Deceitful Batman, Digital Cube, Keys, Lernaean, Pusheen Loves Graphs, Sick Teacher, Weak RSA
2 drx51 solitaire wolf Celestial, Dev0ops, Nibbles, Shocker, Valentine, Bashed, Chatterbox, Jerry, Canape, Sense, Silo, Active, Waldo, Mischief, Stratosphere, Poison, Olympus, Tartarsauce
3 volken SinHack Poison, Jerry, Curling, Help, Irked, Popcorn 0ld is g0ld, Blackhole, fs0ciety, Art, Inferno, misDIRection, Eternal Loop, Longbottom's Locker, Hackerman, Raining Blood, Unified, Brainy's cipher, Da Vinci, Deceiful Batman, Forest, HDC, Marshal in the Middle, Weak RSA, Keys, Retro
4 pimmytrousers BitsPlz Bounty, Celestial, Jerry, Poison, Sunday, Valentine, Canape, Stratosphere, Dev0ops
5 mcruz solitaire wolf Valentine, Jerry, Legacy, Poison, Sunday, Silo, Active, Hawk, Querier
6 1v4n solitaire wolf Olympus, Jerry, Curling, Netmon Da Vinci, Hackerman, Forest, fs0ciety, Weak RSA, Unified, SickTeacher, Milkshake
7 frosters solitaire wolf Aragog, Silo, Bounty, Rabbit, Dev0ps, Valentine, Secnotes, Oz
8 artikrh Sushi Hawk, Stratosphere, Reddish, Waldo, Dab, Secnotes, Access
9 KaoRz L1k0rD3B3ll0t4 Olympus, Secnotes, Ypuffy, Smasher Find the easy pass, Impossible Password, ropme, Old Bridge
10 wilsonnkwan AutismGO Ethereal, Arkham (coauthor mmb), OneTwoSeven, Bastion, SwagShop, Lacasadepapel, Ellingson, Luke
11 Sekisback solitaire wolf Carrier, Teacher, Ypuffy, Redcross, Lightweight, Conceal, Fortune
12 crysal0 SKPH4X Find the easy pass, snake, Da Vinci, Beatles, BitsNBytes, Forest, hackerman Hidden in Colors, Milkshake, Monstrosity, Raining Blood, Retro, Sensless Behaviour, Widescreen, Digital Cube, Pusheen Loves Graphs
13 wilde Solitaire wolf Active, Waldo, Hawk, Zipper
14 manulqwerty L1k0rD3B3ll0t4 Stratosphere, Canape, Nibbles, Bounty
15 fibbot solitaire wolf Celestial, Poison, Canape, Sunday
16 spenkk Sentry Bart, Dev0ops, Dropzone snake
17 amber solitaire wolf Vault, Giddy, Frolic, Chaos
18 ozunu OzunuClan Giddy, Irked, Teacher, Access
19 n4xh4ck5 solitaire wolf Jerry, PopCorn, Haircut, Curling
20 icebreakcrypt Solitaire wolf Massacre, Brainy's Cipher, Widescreen, Blackhole, Pusheen Loves Graphs, Milkshake, Raining blood, The Future Bender
21 3v4Si0N L1k0rD3B3ll0t4 Canape, TartarSauce, Bounty
22 Pitenager solitaire wolf Blue, Mirai, Nibbles Cartographer, Lernaean
23 x4nt0n AlphaPwner Sunday, Olympus, Access Marshal In The Middle
24 FrankyTech L1k0rD3B3ll0t4 Active, Dev0ops, Olympus
25 Magichk Watch4Hack Luke, Writeup Please, don't share, Bank Heist, MarketDump, Emdee five for life
26 TheLegend solitaire wolf Active, Dev0ops I know Mag1k, Snake
27 morph3 solitaire wolf Help, Friendzone
28 Paint solitaire wolf Carrier, Ethereal
29 Ghostpp7 L1k0rD3B3ll0t4 Valentine, TartarSauce
30 kabutor solitaire wolf Aragog, Access
31 o00o solitarire wolf Reel, Nightmare
32 felli0t solitaire wolf DevOops, Chatterbox
33 CyberVaca L1k0rD3B3ll0t4 Chatterbox, Reddish
34 b1gb1t r00th4ck Sunday, Active
35 roskyfrosky solitaire wolf Jerry, Celestial
36 Vis0r L1k0rD3B3ll0t4 Blocky, Chatterbox
37 giru solitaire wolf Irked, Bounty
38 Sephiroth Bin4ryCh4os Fortune, Vault
39 OscarAkaElvis L1k0rD3B3ll0t4 Olympus The Art of Reversing, I know Mag1k, Retro
40 Leonishan solitaire wolf Helpline Blue Shadow, Reminiscent
41 thereallulz solitaire wolf Retro, Monstrosity, Senseless Behaviour
42 luthorien ARGSS Not Art, Grammar, Hidden in Colors
43 absolutezero Sentry Fighter
44 xephrox solitaire wolf Mischief
45 worldunruled hackmethod Active
46 rtheory FlavorTown Reddish
47 thereverend solitaire wolf Active
48 Zaiuss L1k0rD3B3ll0t4 Celestial
49 attl4s juankeres Falafel
50 kauffman solitaire wolf Poison
51 revil solitaire wolf Sunday
52 k4nj1d solitaire wolf nibbles
53 giovii criuz Mischief
54 3zculprit solitaire wolf Olympus
55 w4tchw0lf L1k0rD3B3ll0t4 BitsNBytes, Monstrosity
56 SadFud solitaire wolf Impossible Password, Find the easy pass
57 FuxSocy PhobosGroup Dev0ops
58 abselithat Pratum Chatterbox
59 Killerloops prosegur Tear or dear
60 Renero criuz Digital Cube
61 Gibdeon PKTeam Old Bridge
62 therearwindow solitaire wolf Beatles
63 malwrecon solitaire wolf Ypuffy
64 labyrinth badwolf Ebola Virus
65 zdravich TMHC Carrier
66 epi Hackmethod Ypuffy
67 Wh04m1 YoRHa Ropme
68 coldBug NeatMalwAreParty Curling
69 dionero solitaire wolf Jerry
70 TheShahzada solitaire wolf Mischief
71 SadClown solitaire wolf Redcross
72 julianjm solitaire wolf Old Bridge
73 snowman418 solitaire wolf Reel
74 jondow Bailando Help
75 lolfireball solitaire wolf Lightweight
76 solsanctum solitaire wolf Carrier
77 fbbc solitaire wolf Conceal
78 4lexag EphorSec Cryptohorrific_es, Cryptohorrific_en
79 superhedgy Solitaire wolf Netmon
80 blazz3 PwnD34L3rS Sizzle
81 Marduk PwnD34L3rS Helpline
82 lduros solitaire wolf SwagShop
83 explmuzz N00b543V3R Bastion
84 AlhA solitaire wolf Emdee Five for Live

Special note

Hack the Box is a superb platform to learn pentesting, there are many challenges and machines of different levels and with each one you manage to pass you learn a new thing. But talking among ourselves we realized that many times there are several ways to get rooting a machine, get a flag ... That's why we created this repository, as a site to share different unofficial writeups to see different techniques and acquire even more knowledge. That is our goal and our passion, to share to learn together.

Some people have been distrustful because in this repository there are writeups of active machines, even knowing that absolutely each one of them is protected with the corresponding password (root flag or challenge). But We did not want to give up this because we think the most interesting thing for a HTB player is to check other users' walkthroughs right after they get it, that is, not wait for weeks or months afterwards. For this reason, we have asked the HTB admins and they have given us a pleasant surprise: in the future, they are going to add the ability for users to submit writeups directly to HTB which can automatically be unlocked after owning a machine. And also, they merge in all of the writeups from this github page. Simply great!

Therefore it is a real pride that they have decided to include the functionality of this repo directly on their platform. When this is done, this Github will be migrated and will be inactive but with a pleasantly fulfilled mission. Until then, Keep pushing!

Hackplayers community, HTB Hispano & Born2root groups.

You can’t perform that action at this time.