A curated repository of authorized Hack The Box walkthroughs documenting methodology, tooling, exploitation paths, and security lessons learned during lab-based penetration testing.
| Machine | OS | Difficulty | Core Themes | Status |
|---|---|---|---|---|
| Fireflow | Linux | Medium | Langflow RCE, credential reuse, JWT alg:none, MCP, Kubernetes RBAC, kubelet | Completed |
| Paperwork | Linux | — | Private walkthrough | Private until machine retirement |
Paperwork has been documented but is intentionally kept private while the machine remains active.
Its walkthrough files, screenshots, exploitation details, and Git history are not included in this public repository. The walkthrough may be published after the machine is retired.
machines/
└── <machine>/
├── README.md
├── assets/
├── scans/
├── scripts/
└── notes/
Each machine directory is self-contained.