Ctrl + /

CorvusDDosKRom

Writeups

Documentación detallada de máquinas y challenges resueltos.

Machine

Difficulty

OS

Tipo

Plataforma

Tags

Hack The Box: Takeoff

Linux

Hack The Box Linux Hard

Hack The Box: DutyBound

Linux

Hack The Box Linux Medium

Hack The Box: Autopilot

Windows

Hack The Box Windows Insane

Hack The Box: Stream

Linux

Hack The Box Linux Medium

Hack The Box: Touch

Windows

Hack The Box Windows Easy

Hack The Box: Layover

Linux

Hack The Box Linux Medium

Hack The Box: TwoMillion

Linux

Hack The Box Linux Easy

Hack The Box: BlockSynergy

Linux

Hack The Box Linux Insane

Hack The Box: Nexus

Linux

Hack The Box Linux Easy

Hack The Box: Orion

Linux

Hack The Box Linux Easy

Hack The Box: DanglingTree

Windows

Hack The Box Windows

Hack The Box: Cohort

Linux

Linux SSRF SSRF Bypass Marimo CVE-2026-39987 PackageKit CVE-2026-41651 D-Bus Escalada de Privilegios

Hack The Box Linux SSRF SSRF Bypass Marimo CVE-2026-39987 PackageKit CVE-2026-41651 D-Bus Escalada de Privilegios

Hack The Box: DarkZeroReturns

Windows

Windows Linux Active Directory Handlebars SSTI AST Injection Gitea Kerberos Forest Trust SID Filtering Golden Ticket DCSync Escalada de Privilegios

Hack The Box Windows Linux Active Directory Handlebars SSTI AST Injection Gitea Kerberos Forest Trust SID Filtering Golden Ticket DCSync Escalada de Privilegios

Hack The Box: Bedside

Linux

Linux pdfminer.six Pickle Deserialization CVE-2025-64512 Docker Path Traversal LFI PyTorch MONAI Privilege Escalation

Hack The Box Linux pdfminer.six Pickle Deserialization CVE-2025-64512 Docker Path Traversal LFI PyTorch MONAI Privilege Escalation

Hack The Box: Paperwork

Linux

Linux LPD RFC 1179 Command Injection PJL Path Traversal Unix Socket SCM_RIGHTS Privilege Escalation

Hack The Box Linux LPD RFC 1179 Command Injection PJL Path Traversal Unix Socket SCM_RIGHTS Privilege Escalation

Hack The Box: MakeSense

Linux

Linux WordPress XSS Whisper AI AES-GCM CVE-2026-26832 Tesseract OCR RCE

Hack The Box Linux WordPress XSS Whisper AI AES-GCM CVE-2026-26832 Tesseract OCR RCE

Hack The Box: Enigma

Linux

Linux NFS IMAP Roundcube OpenSTAManager CVE-2025-69212 OliveTin CVE-2026-27626 Command Injection

Hack The Box Linux NFS IMAP Roundcube OpenSTAManager CVE-2025-69212 OliveTin CVE-2026-27626 Command Injection

Hack The Box: Nimbus

Linux

Linux SSRF AWS LocalStack IMDSv1 SQS S3 Docker Cloud

Hack The Box Linux SSRF AWS LocalStack IMDSv1 SQS S3 Docker Cloud

Hack The Box: Checkpoint

Windows

Active Directory SMB VSCode Extension AD Recycle Bin dMSA BadSuccessor bloodyAD Pass the Hash Volatility Memory Forensics Windows Server 2025

Hack The Box Active Directory SMB VSCode Extension AD Recycle Bin dMSA BadSuccessor bloodyAD Pass the Hash Volatility Memory Forensics Windows Server 2025

Hack The Box: Connected

Linux

FreePBX SQL Injection RCE DAHDI incrontab Cron Abuse

Hack The Box FreePBX SQL Injection RCE DAHDI incrontab Cron Abuse

Bugthrive: BlackTop

Linux

Redis Redis RCE Redis Rogue Server SSH Python Library Hijacking Cron Misconfiguration

Bugthrive Redis Redis RCE Redis Rogue Server SSH Python Library Hijacking Cron Misconfiguration

Hack The Box: Blue

Windows

SMB EternalBlue MS17-010 Metasploit Windows 7

Hack The Box SMB EternalBlue MS17-010 Metasploit Windows 7

Hack The Box: DevHub

Linux

MCP CVE-2026-23744 Jupyter WebSocket SSH

Hack The Box MCP CVE-2026-23744 Jupyter WebSocket SSH

Hack The Box: Reactor

Linux

Web Next.js RCE CVE-2025-55182 React Server Components Prototype Pollution

Hack The Box Web Next.js RCE CVE-2025-55182 React Server Components Prototype Pollution

HackTheBox: SmartHire

Linux

MLflow Pickle Deserialization RCE Model Registry cloudpickle Subdomain Enumeration Python Library Hijacking .pth File sudo SUID

Hack The Box MLflow Pickle Deserialization RCE Model Registry cloudpickle Subdomain Enumeration Python Library Hijacking .pth File sudo SUID

HackTheBox: Helix

Linux

Apache NiFi CVE-2023-34468 RCE ExecuteScript Groovy Subdomain Enumeration SSH Key OPC UA Industrial Control Systems sudo

Hack The Box Apache NiFi CVE-2023-34468 RCE ExecuteScript Groovy Subdomain Enumeration SSH Key OPC UA Industrial Control Systems sudo

Hack The Box: PingPong

Windows

Active Directory Forest Trust ADCS ESC13 ESC4 ESC1 gMSA JEA RBCD S4U2Proxy MSSQL GodPotato Kerberos BloodHound ligolo-ng Evil-WinRM certipy

Hack The Box Active Directory Forest Trust ADCS ESC13 ESC4 ESC1 gMSA JEA RBCD S4U2Proxy MSSQL GodPotato Kerberos BloodHound ligolo-ng Evil-WinRM certipy

Hack The Box: Logging

Windows

Windows Active Directory IIS WSUS ESC17 ADCS Shadow Credentials DLL Hijacking Escalada de Privilegios

Hack The Box Windows Active Directory IIS WSUS ESC17 ADCS Shadow Credentials DLL Hijacking Escalada de Privilegios

HackTheBox: Silentium

Linux

Flowise CVE-2025-58434 CVE-2025-59528 CVE-2025-8110 Gogs RCE Subdomain Enumeration MailHog SSH Tunnel

Hack The Box Flowise CVE-2025-58434 CVE-2025-59528 CVE-2025-8110 Gogs RCE Subdomain Enumeration MailHog SSH Tunnel

HackTheBox: Garfield

Windows

Active Directory RODC RBCD Kerberos BloodHound ligolo-ng Rubeus scriptPath KERB-KEY-LIST Pass-the-Hash WinRM Evil-WinRM

Hack The Box Active Directory RODC RBCD Kerberos BloodHound ligolo-ng Rubeus scriptPath KERB-KEY-LIST Pass-the-Hash WinRM Evil-WinRM

HackTheBox: DevArea

Linux

SOAP CVE-2022-46364 SSRF MTOM Hoverfly Middleware RCE Java JADX

Hack The Box SOAP CVE-2022-46364 SSRF MTOM Hoverfly Middleware RCE Java JADX

HackTheBox: Postman

Linux

Redis SSH Key Write Webmin CVE-2019-12840 RCE

Hack The Box Redis SSH Key Write Webmin CVE-2019-12840 RCE

HackTheBox: Eighteen

Windows

MSSQL PBKDF2 Password Spray BadSuccessor dMSA Kerberos WinRM Windows Server 2025

Hack The Box MSSQL PBKDF2 Password Spray BadSuccessor dMSA Kerberos WinRM Windows Server 2025

HackTheBox: Kobold

Linux

RCE MCP Docker Docker Breakout SUID Virtual Host Enumeration GHSA-232v-j27c-5pp6

Hack The Box RCE MCP Docker Docker Breakout SUID Virtual Host Enumeration GHSA-232v-j27c-5pp6

Hack The Box: VariaType

Linux

Git Exposed Virtual Host Enumeration Path Traversal fontTools CVE-2025-66034 CVE-2024-25082 CVE-2025-47273 FontForge setuptools Arbitrary File Write Command Injection Linux

Hack The Box Git Exposed Virtual Host Enumeration Path Traversal fontTools CVE-2025-66034 CVE-2024-25082 CVE-2025-47273 FontForge setuptools Arbitrary File Write Command Injection Linux

HackTheBox: CCTV

Linux

Apache ZoneMinder CVE-2024-51482 SQL Injection SQLMap Bcrypt John motionEye CVE-2025-60787 Metasploit SSH Tunneling

Hack The Box Apache ZoneMinder CVE-2024-51482 SQL Injection SQLMap Bcrypt John motionEye CVE-2025-60787 Metasploit SSH Tunneling

Hack The Box: Pirate

Windows

Windows Active Directory Pre2k gMSA RBCD SPN Hijacking Kerberos

Hack The Box Windows Active Directory Pre2k gMSA RBCD SPN Hijacking Kerberos

DockerLabs: Internal

Linux

Apache Command Injection WAF Bypass Fuerza Bruta SUID

DockerLabs Apache Command Injection WAF Bypass Fuerza Bruta SUID

Hack The Box: Redeemer

Linux

Redis No Authentication Misconfiguration

Hack The Box Redis No Authentication Misconfiguration

Hack The Box: Interpreter

Linux

Mirth Connect CVE-2023-43208 SSTI RCE Jetty Flask

Hack The Box Mirth Connect CVE-2023-43208 SSTI RCE Jetty Flask

Hack The Box: Expressway

Linux

SSH IPsec IKEv1 PSK Cracking XAUTH

Hack The Box SSH IPsec IKEv1 PSK Cracking XAUTH

Hack The Box: Dancing

Windows

SMB Anonymous Login Misconfiguration

Hack The Box SMB Anonymous Login Misconfiguration

Hack The Box: Fawn

Linux

FTP Anonymous Login Misconfiguration

Hack The Box FTP Anonymous Login Misconfiguration

Hack The Box: Meow

Linux

Telnet Misconfiguration Default Credentials

Hack The Box Telnet Misconfiguration Default Credentials

Hack The Box: WingData

Linux

Web Apache SSH Wing FTP CVE-2025-47812 RCE Hash Cracking Vhost Fuzzing

Hack The Box Web Apache SSH Wing FTP CVE-2025-47812 RCE Hash Cracking Vhost Fuzzing

Hack The Box: Conversor

Linux

Apache Flask Path Traversal File Upload Cronjob Abuse Source Code Disclosure SQLite Hash Cracking CVE-2024-48990 Sudo

Hack The Box Apache Flask Path Traversal File Upload Cronjob Abuse Source Code Disclosure SQLite Hash Cracking CVE-2024-48990 Sudo

Hack The Box: Pterodactyl

Linux

nginx Subdomain Enumeration phpinfo CVE-2025-49132 Path Traversal PEARCMD RCE Webshell Hash Cracking CVE-2025-6018 CVE-2025-6019 Race Condition SUID

Hack The Box nginx Subdomain Enumeration phpinfo CVE-2025-49132 Path Traversal PEARCMD RCE Webshell Hash Cracking CVE-2025-6018 CVE-2025-6019 Race Condition SUID

Hack The Box: Facts

Linux

Web MinIO S3 Enumeración Escalada de Privilegios

Hack The Box Web MinIO S3 Enumeración Escalada de Privilegios

Hack The Box: Threat Index

Coding Python Scripting String Matching

Hack The Box Coding Python Scripting String Matching

Hack The Box: Cap

Linux

Web IDOR Capabilities Enumeración Escalada de Privilegios

Hack The Box Web IDOR Capabilities Enumeración Escalada de Privilegios

Hack The Box: Oddly Even

Coding Python Scripting

Hack The Box Coding Python Scripting

The Hackers Labs: THLPWN

Linux

The Hackers Labs

Virtual Hosting Binary Analysis strings sudo

The Hackers Labs Virtual Hosting Binary Analysis strings sudo

The Hackers Labs: Zapp

Linux

The Hackers Labs

FTP Anonymous FTP SSH

The Hackers Labs FTP Anonymous FTP SSH

DockerLabs: BreakMySSH

Linux

SSH Hydra Fuerza Bruta

DockerLabs SSH Hydra Fuerza Bruta

DockerLabs: BorazuwarahCTF

Linux

SSH Apache Hydra sudo Esteganografía Exiftool

DockerLabs SSH Apache Hydra sudo Esteganografía Exiftool

DockerLabs: HedgeHog

Linux

SSH Apache Hydra sudo

DockerLabs SSH Apache Hydra sudo

DockerLabs: Obsession

Linux

FTP SSH Hydra sudo vim Apache

DockerLabs FTP SSH Hydra sudo vim Apache

DockerLabs: Tproot

Linux

FTP vsftpd CVE-2011-2523 Backdoor

DockerLabs FTP vsftpd CVE-2011-2523 Backdoor

DockerLabs: Vacaciones

Linux

SSH Apache Hydra sudo

DockerLabs SSH Apache Hydra sudo

DockerLabs: FirstHacking

Linux

FTP vsftpd 2.3.4 Backdoor Metasploit CVE-2011-2523

DockerLabs FTP vsftpd 2.3.4 Backdoor Metasploit CVE-2011-2523

DockerLabs: Trust

Linux

Apache Gobuster Hydra SSH sudo vim

DockerLabs Apache Gobuster Hydra SSH sudo vim

The Hackers Labs: TickTackRoot

Linux

The Hackers Labs

FTP Anonymous FTP Hydra SSH sudo timeout

The Hackers Labs FTP Anonymous FTP Hydra SSH sudo timeout

The Hackers Labs: Microchoft

Windows

The Hackers Labs

SMB Exploit Eternalblue

The Hackers Labs SMB Exploit Eternalblue

The Hackers Labs: Grillo

Linux

The Hackers Labs

Fuerza Bruta SSH Puttygen Escalada de Privilegios

The Hackers Labs Fuerza Bruta SSH Puttygen Escalada de Privilegios

Hack The Box: Chemistry

Linux

Web RCE CVE-2024-23346 Path Traversal Flask

Hack The Box Web RCE CVE-2024-23346 Path Traversal Flask

Hack The Box: Sea

Linux

Web WonderCMS XSS CVE-2023-41425 Hash Cracking

Hack The Box Web WonderCMS XSS CVE-2023-41425 Hash Cracking

Hack The Box: Driver

Windows

SMB NTLM Responder Hash Cracking PrintNightmare CVE-2021-1675

Hack The Box SMB NTLM Responder Hash Cracking PrintNightmare CVE-2021-1675

Hack The Box: TraceBack

Linux

Web Webshell Lua MOTD Escalada de Privilegios

Hack The Box Web Webshell Lua MOTD Escalada de Privilegios