The Hack The Box handbook

This document is written with my Cybersecurity students in mind. If you are trying to learn Hack The Box it will serve as a great starting point for your own methodology. It provides some explanation and commands to run at each step. The document is built during our Hack Friday sessions at NOVI Hogeschool and contains commands and software we use or exploit during those sessions.

Warning: This document is a work in progress and can not be seen as an all-encompassing guide but as a starting point. The repository for this handbook can be found on Github.

🐚 Reverse Shells

Automatically upgrade a shell By using the following listener any connecting shell will run python3 to get an interactive shell, and it will instantly run stty raw -echo to make sure arrows and control characters work. stty raw -echo; (echo 'python3 -c "import pty;pty.spawn(\"/bin/bash\")"';echo pty;echo "stty$(stty -a | awk -F ';' '{print $2 $3}' | head -n 1)";echo export PATH=\$PATH:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/tmp;echo export TERM=xterm-color;echo alias ll='ls -lsaht'; echo clear; echo id;cat) | nc -lvnp 1234 && reset Upgrade a non-interactive shell Using python python3 -c 'import pty; pty....

🐧 Basic HTB and Linux things

Everybody has to start somewhere, the basics is where it is at. From connecting to the lab to basic Linux commands.

📓 Custom Software

The Medium and over machines generally require a little coding to get done. Many of the scripts share a same root, such as brute forcers. Use the following code as a starting point for your own code.

🔍 Scanning

Scanning is an essential activity in a hacking session that involves actively seeking vulnerabilities or weaknesses in a system or network. It is carried out to identify open ports, services, and applications that can be manipulated to gain unauthorized access. Proper scanning can help a hacker to map out the target network or system, discover the necessary information needed for a successful attack, and identify potential entry points for further exploitation....