Skip to content

HackTheBox.md

Latest commit

 

History

History
69 lines (62 loc) · 6.41 KB

HackTheBox.md

File metadata and controls

69 lines (62 loc) · 6.41 KB
Raw

OSCP-Like Machines - HTB

My Shop Medium Github Buy Me A Coffee My GitBook X

Beginner/Basic-Level Machines

  • Lame (Difficulty: Easy, Subject: SMB Exploitation)
  • Legacy (Difficulty: Easy, Subject: SMB Vulnerabilities)
  • Brainfuck (Difficulty: Easy, Subject: Web Enumeration, PHP Exploitation)
  • Blue (Difficulty: Easy, Subject: EternalBlue Exploit)
  • Shocker (Difficulty: Easy, Subject: Shellshock Exploitation)
  • Devel (Difficulty: Easy, Subject: FTP Enumeration, Windows Exploitation)
  • Bashed (Difficulty: Easy, Subject: PHP Reverse Shells)
  • Optimum (Difficulty: Easy, Subject: Windows Exploitation)
  • Nibbles (Difficulty: Easy, Subject: Web Exploitation, CMS Vulnerabilities)
  • Bastard (Difficulty: Easy, Subject: Windows Enumeration, Exploitation)

Intermediate Machines

  • Beep (Difficulty: Medium, Subject: Web and Service Enumeration)
  • Granny (Difficulty: Medium, Subject: Windows Exploitation)
  • Grandpa (Difficulty: Medium, Subject: Windows Exploitation)
  • Cronos (Difficulty: Medium, Subject: DNS and Web Enumeration)
  • Nineveh (Difficulty: Medium, Subject: Web Exploitation, Password Cracking)
  • Arctic (Difficulty: Medium, Subject: Windows Web Exploitation)
  • Solidstate (Difficulty: Medium, Subject: Mail Service Exploitation)
  • Node (Difficulty: Medium, Subject: Node.js Exploitation)
  • Jerry (Difficulty: Medium, Subject: Tomcat Exploitation)
  • Valentine (Difficulty: Medium, Subject: Heartbleed Exploit)
  • Poison (Difficulty: Medium, Subject: Web Enumeration)
  • Conceal (Difficulty: Medium, Subject: Steganography)
  • Sunday (Difficulty: Medium, Subject: SunOS Exploitation)
  • BankRobber (Difficulty: Medium, Subject: Web and Database Exploitation)
  • Irked (Difficulty: Medium, Subject: UnrealIRCd Exploitation)
  • SecNotes (Difficulty: Medium, Subject: Windows Service Exploitation)

Machines Covering Active Directory or Other Relevant Skills

  • Forest (Difficulty: Medium, Subject: Active Directory Exploitation)
  • SwagShop (Difficulty: Medium, Subject: Magento CMS Exploitation)
  • Bastion (Difficulty: Medium, Subject: Windows Enumeration, Backup Analysis)
  • Active (Difficulty: Medium, Subject: Active Directory, SMB Exploitation)
  • Nest (Difficulty: Medium, Subject: SMB Enumeration)
  • Remote (Difficulty: Medium, Subject: Web and RCE Exploitation)
  • Sauna (Difficulty: Medium, Subject: Active Directory Enumeration)

Machines Testing Enumeration Skills

  • Mirai (Difficulty: Easy, Subject: IoT Exploitation)
  • Popcorn (Difficulty: Medium, Subject: Torrent Exploitation)
  • Fuse (Difficulty: Medium, Subject: File Service Enumeration)
  • Querier (Difficulty: Medium, Subject: Database Exploitation)
  • Quick (Difficulty: Medium, Subject: Web and Enumeration)
  • Blocky (Difficulty: Medium, Subject: Minecraft Server Exploitation)

Web Exploitation Focus

  • Magic (Difficulty: Easy, Subject: File Upload Exploitation)
  • Tabby (Difficulty: Medium, Subject: LFI Exploitation)
  • OpenAdmin (Difficulty: Medium, Subject: Web Enumeration)
  • Admirer (Difficulty: Medium, Subject: Directory Enumeration)
  • Blunder (Difficulty: Medium, Subject: CMS Exploitation)
  • Doctor (Difficulty: Medium, Subject: Web Exploitation)

Resources For Walkthrough: