StartingPoint

Included demonstrates a sophisticated LFI-to-RCE chain. A Local File Inclusion vulnerability in a PH...

Unified provides hands-on experience with Log4Shell (CVE-2021-44228) — arguably the most impactful v...

Vaccine is a multi-stage machine that starts with an FTP server containing a password-protected ZIP ...

Oopsie chains several web vulnerabilities into a full system compromise. The attack path starts with...

Tactics escalates the SMB knowledge from Dancing into a full Windows compromise. Here the Administra...

Funnel teaches one of the most practical real-world skills in penetration testing: SSH local port fo...

Server-Side Template Injection (SSTI) occurs when user input is embedded into a server-side template...

Three introduces cloud security fundamentals through an attack chain that combines subdomain enumera...

Ignition presents a Magento e-commerce installation — one of the most widely deployed CMS platforms ...

Responder combines two powerful techniques: Local File Inclusion (LFI) to force a Windows web applic...

Sequel targets a MariaDB instance — a fully open-source MySQL fork — exposed on the network with a r...

Appointment introduces SQL Injection (SQLi) the #3 vulnerability in the OWASP Top 10 and one of the ...

Synced introduces rsync — a fast, incremental file transfer utility widely used for backups and depl...

Mongod targets MongoDB the world's most popular NoSQL document database. Like Redis, MongoDB was des...

Preignition introduces web directory enumeration the process of discovering hidden paths, admin pan...

Explosion introduces RDP (Remote Desktop Protocol) Microsoft's graphical remote access protocol. In ...

Redeemer introduces Redis a high-speed in-memory key-value store widely used for caching, session st...

Dancing focuses on SMB (Server Message Block) — the protocol Windows uses for file sharing, printer ...

Fawn introduces FTP anonymous access — one of the most frequently encountered misconfigurations in i...

Meow is the very first machine in HackTheBox's Starting Point series. It introduces the most fundame...