HackTheBox

Retired machines, owned and documented.

Penetration TestingReal-World Scenarios

HackTheBox is where I spend most of my time. These are full walkthroughs of retired machines: every step from initial reconnaissance to the root flag, including the enumeration that mattered and the rabbit holes that didn’t.

Each writeup follows my standard loop: recon → foothold → privilege escalation → reflection. I document the actual process, not a sanitized highlight reel.

Browse the machines by difficulty in the sidebar. 👈