This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-41817) to gain root access via a malicious shared library.

This script automates the exploitation process of the Administrator machine from Hack The Box. It is divided into three phases to simplify and control manual steps that require user interaction, such as password cracking.

This is a password generator which helps to achieve the root flag on HTB WhiteRabbit Box.

A tiny, single-process pyAesCrypt password bruteforcer for .aes files.

Website crawler created for pentest exercises like HTB.

This is an automated exploitation script for the Hack The Box machine *Heal*. It extracts LimeSurvey credentials via LFI and deploys a malicious LimeSurvey plugin to trigger a reverse shell.

scripts used for htb challanges

Apuntes de HackTheBox

This is an automated privilege escalation script for the Hack The Box machine LinkVortex, which exploits an insecure sudo configuration and symbolic link processing vulnerability.

This is a proxy server script which helps to achieve SQL injection on HTB WhiteRabbit Box

This repo contains RCE exploit for Era htb machine

This script fully automates the exploitation of the retired Hack The Box machine Alert, including both initial intrusion and privilege escalation to root

Scripts desarrollados para descubrir usuarios a través del login en la máquina NOTER de HTB.

HTB Emdee five for life web challenge script

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR