HTB Archives - nPm Hacks

Hack the Box Walkthrough – Knife

By nPm January 23, 2026Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Knife". It features the exploitation of PHP 8.1 using Wappalyzer and a python script RCE to get a shell, getting a better shell using busybox, and privesc by exploiting a binary due to dangerous sudo "no password" misconfiguration. I…

Hack the Box Walkthrough – Data

By nPm January 14, 2026Ethical Hacking, Hacking, HTB, Linux, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Data". It features the exploitation of grafana using directory traversal, password cracking, and privesc by exploiting docker due to dangerous sudo "no password" misconfiguration. I learned a lot tackling this one. ***SPOILERS*** I show you how to pwn the…

Hack the Box Walkthrough – PermX

By nPm January 2, 2026Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "PermX". It features the use of fuff, RCE exploits, manipulation of shell scripts and more. I learned a lot tackling this one. ***SPOILERS*** I show you how to pwn the box, so if you don't want help with it…

Hack the Box Walkthrough – Bashed

By nPm December 22, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Bashed". It involves PHP reverse shells, python scripts, sudo exploits, and more. ***SPOILERS*** I show you how to pwn the box, so if you don't want help with it do not watch this video. Hope this helps someone and…

Hack the Box Walkthrough – Nibbles

By nPm December 19, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Nibbles". It features the use of password guessing, python exploits, and sudo abuse to exploit a Nibbleblog machine . I learned a lot tackling this one, I don't agree with the easy rating (who am I to judge 🤣).…

Hack the Box Walkthrough – Paper

By nPm December 11, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Paper". It features the use of exploits to compromise Wordpress and RocketChat, reverse shells, and for the first time ever for me a polkit vulnerability that actually worked. I learned a lot tackling this one. They are obviously making…

Hack the Box Walkthrough – Reset

By nPm November 21, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Reset". It features the use of Burp Suite to analyze a website password reset, then deliver a payload by injecting it into the Apache2 access.log of the server, then we escalate our privileges by abusing rlogin and tmux .…

Hack the Box Walkthrough – Job

By nPm November 14, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Security, Tutorial, Walkthrough

🪄This is a walkthrough of the Hack The Box machine called "Job". It features the use of a phishing campaign utilizing malicious .odt LibreOffice files to gain initial access to the machine. We privesc by taking advantage of the impersonate privilege with printspoofer64! I learned a lot tackling this one.…

Hack the Box Walkthrough – Beep

By nPm November 7, 2025Ethical Hacking, Hacking, HTB, Linux, Networking, Python, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack The Box machine called "Beep". It features the use of exploits to compromise Elastix/FreePBX, reverse shells, abusing binaries with the SUID set, and much more. I learned a lot tackling this one. You will need to lower your browsers TLS version to be…

Hack the Box Walkthrough – Baby

By nPm October 20, 2025Ethical Hacking, Hacking, HTB, Networking, Security, Tutorial, Walkthrough

This is a walkthrough of the Hack the Box machine called "Baby". It features the use of ldapsearch, nxc, kerbrute, evil-winrm, secretsdump, robocopy and much more. I learned a lot tackling this one, especially around dumping the ntds.dit (which we do using diskshadow). ***SPOILERS*** I show you how to pwn…