This repo contains selected write-ups from retired Hack The Box machines and completed CTF challenges.
The collection right now is small, as a lot of notes have to be converted to reports, and will be populated accordingly.
The reports here demonstrate a distinct part of the security testing process: building an attack path, validating the result, understanding the root cause, and explaining the defensive.
The write-ups focus on:
- The initial security question
- The reasoning behind each test
- The evidence that confiremd the resut
- The resulting impact
- The underlying weakness
- Practical defensive lessons