Hack The Box/SmartHireSmartHire — Hack The BoxRecon turns up a careers portal and a staging API behind the same cert.Miscmedium#linux#medium#hacktheboxMay 16, 2026
Hack The Box/HelixHelix — Hack The BoxAn exposed research site leaks version hints and a backup path.Miscmedium#linux#medium#hacktheboxMay 9, 2026
Hack The Box/PingPongPingPong — Hack The BoxInitial access starts from an oddly exposed management listener on Windows.Miscinsane#windows#insane#hacktheboxApr 25, 2026
Hack The Box/LoggingLogging — Hack The BoxThe box centers on centralized log ingestion with weak boundaries between collectors and readers.Miscmedium#windows#medium#hacktheboxApr 18, 2026
Hack The Box/SilentiumSilentium — Hack The BoxA quiet Linux host still exposes a few interesting HTTP routes and a forgotten dev vhost.Misceasy#linux#easy#hacktheboxApr 11, 2026
Hack The Box/GarfieldGarfield — Hack The BoxFootprint suggests a Windows app stack with legacy auth still enabled.Mischard#windows#hard#hacktheboxApr 4, 2026
Hack The Box/DevAreaDevArea — Hack The BoxDevelopers left a CI artifact and a sandbox API online longer than they should have.Miscmedium#linux#medium#hacktheboxMar 28, 2026
Hack The Box/KoboldKobold — Hack The BoxLight recon finds a small Flask surface and a curious static mount.Misceasy#linux#easy#hacktheboxMar 21, 2026
Hack The Box/VariaTypeVariaType — Hack The BoxTypography puns aside, the attack surface is a font preview service and an admin queue.Miscmedium#linux#medium#hacktheboxMar 14, 2026
Hack The Box/CCTVCCTV — Hack The BoxA surveillance-themed host exposes a stream dashboard and a brittle onboarding flow.Misceasy#linux#easy#hacktheboxMar 7, 2026
Hack The Box/PiratePirate — Hack The BoxMaritime branding hides a fairly classic Windows foothold: IIS, an upload nook, and a secondary listener on a high port.Mischard#windows#hard#hacktheboxFeb 28, 2026
Hack The Box/InterpreterInterpreter — Hack The BoxAn embedded scripting endpoint and a cron-fired interpreter binary set the tone.Miscmedium#linux#medium#hacktheboxFeb 21, 2026
Hack The Box/WingDataWingData — Hack The BoxTelemetry and a lightweight API share the same under-protected gateway.Misceasy#linux#easy#hacktheboxFeb 14, 2026
Hack The Box/FactsFacts — Hack The BoxA fact-checking microservice and an admin export feature create the entry lane.Misceasy#linux#easy#hacktheboxJan 31, 2026
Hack The Box/EloquiaEloquia — Hack The BoxWindows hardening is present but uneven: LDAP signs, yet a legacy exchange of tokens on an internal API.Miscinsane#windows#insane#hacktheboxDec 13, 2025
Hack The Box/MonitorsFourMonitorsFour — Hack The BoxA monitoring suite and an agent installer leave several soft seams.Misceasy#windows#easy#hacktheboxDec 6, 2025
Hack The Box/FriesFries — Hack The BoxFast-food theming wraps a Windows box with a quirky upload filter and a secondary management site.Mischard#windows#hard#hacktheboxNov 22, 2025
Hack The Box/NanoCorpNanoCorp — Hack The BoxCorporate nano-tech branding aside, the host exposes RDP hints and a brittle VPN portal artifact.Mischard#windows#hard#hacktheboxNov 8, 2025
Hack The Box/HerculesHercules — Hack The BoxMythology naming maps to a heavily layered Windows foothold with multiple tiers of services.Miscinsane#windows#insane#hacktheboxOct 18, 2025
Hack The Box/CobblestoneCobblestone — Hack The BoxBlocky aesthetics hint at a Minecraft-adjacent plugin host on Linux.Miscinsane#linux#insane#hacktheboxAug 9, 2025