HackTheBox Writeups

92 writeups 2× Very Easy 37× Easy 29× Medium 13× Hard 9× Insane

Join CTF Team

Difficulty

Tag

Access

Sort

Showing 1–2 of 2

Easy Linux Locked

Exploit WordPress on a subdomain to gain RCE, leverage DNS zone transfer for recon, and abuse sudoers misconfiguration for root escalation.

Joshua • Sep 8, 2026 • 3 min read

Easy Linux

SMB enumeration reveals credentials and DNS zones. Exploiting LFI with PHP injection leads to a shell, then Python library hijacking for root.

Mohammad Meraj • Aug 17, 2026

Other platforms

Proving Grounds 110 TryHackMe 10 All writeups