# HackTheBox | All You Need 🌀 **URL:** \ **Category:** Tools & Scripts\ **Tags:** tools, hacking\ **Created:** [October 18, 2020, 1:42pm UTC](https://onehack.st/t/hackthebox-all-you-need/159300 "2020-10-18T13:42:28Z")\ **Posts on this page:** 4\ **Page:** 1

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\ **Post date:** [October 18, 2020, 1:42pm UTC](https://onehack.st/t/hackthebox-all-you-need/159300/1 "2020-10-18T13:42:29Z")

![image](https://onehack.st/uploads/default/original/3X/e/9/e9f2b61680e895475a79a333d9ac0f2c2a7a8469.png) # hackthebox ### All you need \<3 [![License: MIT](https://camo.githubusercontent.com/3ccf4c50a1576b0dd30b286717451fa56b783512/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d79656c6c6f772e737667)](https://opensource.org/licenses/MIT) Notes Taken for HTB Machine Will be periodiclly updated, created with the intend of unwraping all possible ways and to prep for exams created & maintained by: **cyberwr3nch** # Contents ### Commands - [Commands](https://github.com/cyberwr3nch/hackthebox/blob/master/notes/commands/Commands.md) - has the commands to be carried out from starting the pentest to completing it - [File Transfer](https://github.com/cyberwr3nch/hackthebox/blob/master/notes/commands/File%20Transfer.md) - Commnads need to transfer files - [Port Poking](https://github.com/cyberwr3nch/hackthebox/blob/master/notes/commands/Port-Poking.md) - Pentesting notes on each ports - [Reverse Shells](https://github.com/cyberwr3nch/hackthebox/blob/master/notes/commands/Reverse-shells.md) - Reverse shell - [Windows](https://github.com/cyberwr3nch/hackthebox/blob/master/notes/commands/Windows.md) - Commands and things required to pentest windows machines ### Notes: This section has important notes and commands to be carried out while testing a box - [checklist](https://github.com/cyberwr3nch/hackthebox/tree/master/notes/checklist) - Checklist to pentest a box - [commands](https://github.com/cyberwr3nch/hackthebox/tree/master/notes/commands) - Commands to be used while pentesing a box - [resources](https://github.com/cyberwr3nch/hackthebox/tree/master/notes/resources.md) - CMS Exlpoits, Manual methods of doing a box, misc will be in here ### Tools - LinEnum; linPEAS; winPEAS; winBAT - Static Binaries ( plink, nc, whoami, etc..,) - Socat, Chisel - Exiftool - php reverse shell #### SAY NO TO MSF ! # Active Machines WriteUps | Box | hash | | --- | --- | | [Blunder](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/blunder-Protected.pdf) | GmdD\*\*\*\*\*ThC0 | | [Tabby](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/Tabby-Protected.pdf) | 86Nx\*\*\*\*\*O0H/ | | [OpenKeys](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/OpenKeys-Protected.pdf) | 4t4M\*\*\*\*\*jkBG | | [Unbalanced](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/Unbalanced-Protected.pdf) | 6HrN\*\*\*\*\*IYw1 | | [Buff](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/Buff-Protected.pdf) | 4c82\*\*\*\*\*f7f8 | | [Worker](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/worker-protected.pdf) | c699\*\*\*\*\*d84f | | Omni | 5dbd\*\*\*\*\*f11d | | [Feline](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/feline-Protected.pdf) | Xzlu\*\*\*\*\*vaU0 | | [Passage](https://github.com/cyberwr3nch/hackthebox/blob/master/pdf-writeups/Passage-Protected.pdf) | mjc8\*\*\*\*\*8TW0 | # Writeup Links: These are the urls that has the writeups for active and retired machines - [My Blog](https://cyberwr3nch.github.io/) - [nav1n](http://www.nav1n.com/) - [0xPrashanth](https://0xprashant.github.io/) - [BinaryBiceps](https://binarybiceps.com/) - [p0i5on8](https://p0i5on8.github.io/) - [Secwalk](https://www.secwalk.com/) - [lUc1f3r11’s Blog](https://fdlucifer.github.io/) - [subham399](https://shubhkumar.in/tags/hackthebox/) - [Jacob Riggs](https://jacobriggs.io/blog/) - [elbee infoSec](https://elbee.xyz/writeups) - [Kali-education](https://kali-education.info/) - [roman.de](https://romanh.de/home) - [0xdf’s Blog](https://0xdf.gitlab.io/) {retired machines - [xct’s Blog](https://vulndev.io/) ⭐ - [0xrick’s Blog](https://0xrick.github.io/){retired machines #### nvm this Constantly updating from _MAY 3rd 2020_ # Tools: - [wr3nch.py](https://github.com/cyberwr3nch/hackthebox/blob/master/wr3nch.py) - A python tool which automates the initial process of bash - [snapwr3nch.py](https://github.com/cyberwr3nch/hackthebox/blob/master/snapwr3nch.py) - Tool that grabs and gives the info of the boxes you have pwned - [xpath-inj.py](https://github.com/cyberwr3nch/hackthebox/blob/master/scripts/xpath-inj.py) - Blind XPATH Injection bf tool - [pdf-protect.sh](https://github.com/cyberwr3nch/hackthebox/blob/master/scripts/pdf-protect.sh) - My personal dumb tool to generate protected pdfs with _pdftk_ # Thanks for visiting A noob _cyberwr3nch🔧_ A member of **TCSC** Learn and Spread \<3 `xoxo💙` ## GitHub: > **[GitHub - dhaneshsivasamy07/hackthebox: Notes Taken for HTB Machines & InfoSec Community.](https://github.com/dhaneshsivasamy07/hackthebox)** > > Notes Taken for HTB Machines & InfoSec Community. ---

---

**Author:** ![Dave\_Sync](https://onehack.st/user_avatar/onehack.st/dave_sync/32/19497_2.png) [@Dave\_Sync](https://onehack.st/u/Dave_Sync)\ **Post date:** [October 19, 2020, 6:06am UTC](https://onehack.st/t/hackthebox-all-you-need/159300/3 "2020-10-19T06:06:35Z")

Any guidelines for starting with bug bounty? ---

**Author:** ![Sahil\_Biswas](https://onehack.st/user_avatar/onehack.st/sahil_biswas/32/75785_2.png) [@Sahil\_Biswas](https://onehack.st/u/Sahil_Biswas)\ **Post date:** [October 19, 2020, 11:15am UTC](https://onehack.st/t/hackthebox-all-you-need/159300/4 "2020-10-19T11:15:13Z")

Can you guide where to begin if I’m a noob?