The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
☆232Jul 18, 2026Updated last month
Alternatives and similar repositories for htb-writeups
Users that are interested in htb-writeups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My methodology for pentest engagements based on learning from HTB labs, HTB CPTS course and HTB CWES course.☆37May 20, 2026Updated 3 months ago
- My WriteUps for HackTheBox CTFs, Machines, and Sherlocks.☆200Feb 10, 2026Updated 6 months ago
- A Proof of Concept for chaining CVE-2025-6018 (PAM/Polkit Active Session Bypass) and CVE-2025-6019 (libblockdev SUID Mount Flaw) to achie…☆16Feb 9, 2026Updated 6 months ago
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- CI/CD supply chain security scanner for GitHub Actions — source-to-sink injection, AI agent config poisoning, steganography, compromised …☆18Apr 23, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Analyze binaries and generate structured reports for AI agents and security research.☆21May 13, 2026Updated 3 months ago
- Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vuln…☆19Mar 14, 2026Updated 5 months ago
- HackTheBox Certified Penetration Tester Specialist Cheatsheet☆801Jul 10, 2024Updated 2 years ago
- Platforms and resources for practicing cybersecurity and penetration testing skills in legal environments.☆32Aug 4, 2026Updated 3 weeks ago
- A powerful single-file offline OSCP+/OSEP Penetration Testing Cheatsheet Terminal with 580+ commands, variable substitution, favorites, n…☆54Jul 17, 2026Updated last month
- Hack The Box CPTS, CWES, CDSA, CWEE, CAPE, CJCA Exam and Lab Reporting / Note-Taking Tool☆429Apr 2, 2026Updated 4 months ago
- The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.☆19Jan 20, 2023Updated 3 years ago
- HTB Jail Remote Exploit By Cneeliz - 2017☆15Jan 9, 2018Updated 8 years ago
- Notes for OSCP & CPTS.☆135Aug 5, 2026Updated 3 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Simple CLI program that will fetch and convert a HackTheBox Academy module into a local file in Markdown format.☆89Mar 16, 2026Updated 5 months ago
- Golang script to bypass the client-side health checks when logging into DUO protected accounts☆11Aug 26, 2023Updated 3 years ago
- Automated Cloud Misconfiguration Testing☆26Jun 20, 2025Updated last year
- Linux and Windows Hardening Points☆12Mar 6, 2018Updated 8 years ago
- All key information of each module and more of Hackthebox Academy CPTS job role path. Solutions and walkthroughs for each question and ea…☆26Aug 17, 2024Updated 2 years ago
- All key information of each module and more of Hackthebox Academy CPTS job role path. Solutions and walkthroughs for each question and ea…☆74Apr 22, 2026Updated 4 months ago
- My Notes For OSCP☆38Mar 12, 2022Updated 4 years ago
- Pentest and manual code review templates -- web/API, cloud (AWS/GCP/Azure), mobile (iOS/Android), thick client, hardware/IoT, plus 11 lan…☆31Apr 12, 2026Updated 4 months ago
- HTB academy notes☆16Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A respository of information and links to promote support and continued development of the DEFCON 32 badge. This repository is not associ…☆27Sep 10, 2024Updated last year
- pentestscripts☆16Sep 16, 2019Updated 6 years ago
- JS Enumeration & SAST☆22Updated this week
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆44Mar 24, 2026Updated 5 months ago
- eJPT is a hands-on, entry-level Red Team certification that simulates skills utilized during real-world engagements.☆52Apr 29, 2024Updated 2 years ago
- ☆23Jul 5, 2020Updated 6 years ago
- OSCP prep checklist - study plan, exam structure, tools, and methodology☆77Feb 4, 2026Updated 6 months ago
- ☆29Sep 8, 2025Updated 11 months ago
- HackTheBox Academy Modules writeups and notes☆28Feb 10, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Command-Line tool for accessing HTB☆72Jul 17, 2026Updated last month
- 📊 Source code for 'Query a Digital Music Store Database' project☆12Aug 29, 2018Updated 8 years ago
- Proof of concept for Kerberos Armoring abuse.☆87Dec 12, 2025Updated 8 months ago
- 🔐 Offensive security knowledge base — 50+ docs covering web exploitation, bug bounty, privilege escalation, CTF writeups, APT emulation,…☆242Apr 22, 2026Updated 4 months ago
- Nuclei Templates☆26Oct 17, 2024Updated last year
- Python command line tool used for generating GIAC Certification indexes.☆31Jul 17, 2023Updated 3 years ago
- This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all cleartext passwords and hashes to…☆213Oct 17, 2024Updated last year