├── .gitignore ├── Academy ├── Modules │ └── Introduction_to_Academy │ │ └── 2020-12-22_cheatsheet-15.md └── Paths │ └── Cracking_into_Hack_the_Box │ └── Web_Requests │ └── 2020-12-22_cheatsheet-35.md └── README.md /.gitignore: -------------------------------------------------------------------------------- 1 | 2 | # Created by https://www.toptal.com/developers/gitignore/api/python,pycharm,eclipse,java,intellij+all,c++ 3 | # Edit at https://www.toptal.com/developers/gitignore?templates=python,pycharm,eclipse,java,intellij+all,c++ 4 | 5 | ### C++ ### 6 | # Prerequisites 7 | *.d 8 | 9 | # Compiled Object files 10 | *.slo 11 | *.lo 12 | *.o 13 | *.obj 14 | 15 | # Precompiled Headers 16 | *.gch 17 | *.pch 18 | 19 | # Compiled Dynamic libraries 20 | *.so 21 | *.dylib 22 | *.dll 23 | 24 | # Fortran module files 25 | *.mod 26 | *.smod 27 | 28 | # Compiled Static libraries 29 | *.lai 30 | *.la 31 | *.a 32 | *.lib 33 | 34 | # Executables 35 | *.exe 36 | *.out 37 | *.app 38 | 39 | ### Eclipse ### 40 | .metadata 41 | bin/ 42 | tmp/ 43 | *.tmp 44 | *.bak 45 | *.swp 46 | *~.nib 47 | local.properties 48 | .settings/ 49 | .loadpath 50 | .recommenders 51 | 52 | # External tool builders 53 | .externalToolBuilders/ 54 | 55 | # Locally stored "Eclipse launch configurations" 56 | *.launch 57 | 58 | # PyDev specific (Python IDE for Eclipse) 59 | *.pydevproject 60 | 61 | # CDT-specific (C/C++ Development Tooling) 62 | .cproject 63 | 64 | # CDT- autotools 65 | .autotools 66 | 67 | # Java annotation processor (APT) 68 | .factorypath 69 | 70 | # PDT-specific (PHP Development Tools) 71 | .buildpath 72 | 73 | # sbteclipse plugin 74 | .target 75 | 76 | # Tern plugin 77 | .tern-project 78 | 79 | # TeXlipse plugin 80 | .texlipse 81 | 82 | # STS (Spring Tool Suite) 83 | .springBeans 84 | 85 | # Code Recommenders 86 | .recommenders/ 87 | 88 | # Annotation Processing 89 | .apt_generated/ 90 | .apt_generated_test/ 91 | 92 | # Scala IDE specific (Scala & Java development for Eclipse) 93 | .cache-main 94 | .scala_dependencies 95 | .worksheet 96 | 97 | # Uncomment this line if you wish to ignore the project description file. 98 | # Typically, this file would be tracked if it contains build/dependency configurations: 99 | #.project 100 | 101 | ### Eclipse Patch ### 102 | # Spring Boot Tooling 103 | .sts4-cache/ 104 | 105 | ### Intellij+all ### 106 | # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider 107 | # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839 108 | 109 | # User-specific stuff 110 | .idea/**/workspace.xml 111 | .idea/**/tasks.xml 112 | .idea/**/usage.statistics.xml 113 | .idea/**/dictionaries 114 | .idea/**/shelf 115 | 116 | # AWS User-specific 117 | .idea/**/aws.xml 118 | 119 | # Generated files 120 | .idea/**/contentModel.xml 121 | 122 | # Sensitive or high-churn files 123 | .idea/**/dataSources/ 124 | .idea/**/dataSources.ids 125 | .idea/**/dataSources.local.xml 126 | .idea/**/sqlDataSources.xml 127 | .idea/**/dynamic.xml 128 | .idea/**/uiDesigner.xml 129 | .idea/**/dbnavigator.xml 130 | 131 | # Gradle 132 | .idea/**/gradle.xml 133 | .idea/**/libraries 134 | 135 | # Gradle and Maven with auto-import 136 | # When using Gradle or Maven with auto-import, you should exclude module files, 137 | # since they will be recreated, and may cause churn. Uncomment if using 138 | # auto-import. 139 | # .idea/artifacts 140 | # .idea/compiler.xml 141 | # .idea/jarRepositories.xml 142 | # .idea/modules.xml 143 | # .idea/*.iml 144 | # .idea/modules 145 | # *.iml 146 | # *.ipr 147 | 148 | # CMake 149 | cmake-build-*/ 150 | 151 | # Mongo Explorer plugin 152 | .idea/**/mongoSettings.xml 153 | 154 | # File-based project format 155 | *.iws 156 | 157 | # IntelliJ 158 | out/ 159 | 160 | # mpeltonen/sbt-idea plugin 161 | .idea_modules/ 162 | 163 | # JIRA plugin 164 | atlassian-ide-plugin.xml 165 | 166 | # Cursive Clojure plugin 167 | .idea/replstate.xml 168 | 169 | # Crashlytics plugin (for Android Studio and IntelliJ) 170 | com_crashlytics_export_strings.xml 171 | crashlytics.properties 172 | crashlytics-build.properties 173 | fabric.properties 174 | 175 | # Editor-based Rest Client 176 | .idea/httpRequests 177 | 178 | # Android studio 3.1+ serialized cache file 179 | .idea/caches/build_file_checksums.ser 180 | 181 | ### Intellij+all Patch ### 182 | # Ignores the whole .idea folder and all .iml files 183 | # See https://github.com/joeblau/gitignore.io/issues/186 and https://github.com/joeblau/gitignore.io/issues/360 184 | 185 | .idea/ 186 | 187 | # Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-249601023 188 | 189 | *.iml 190 | modules.xml 191 | .idea/misc.xml 192 | *.ipr 193 | 194 | # Sonarlint plugin 195 | .idea/sonarlint 196 | 197 | ### Java ### 198 | # Compiled class file 199 | *.class 200 | 201 | # Log file 202 | *.log 203 | 204 | # BlueJ files 205 | *.ctxt 206 | 207 | # Mobile Tools for Java (J2ME) 208 | .mtj.tmp/ 209 | 210 | # Package Files # 211 | *.jar 212 | *.war 213 | *.nar 214 | *.ear 215 | *.zip 216 | *.tar.gz 217 | *.rar 218 | 219 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml 220 | hs_err_pid* 221 | 222 | ### PyCharm ### 223 | # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider 224 | # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839 225 | 226 | # User-specific stuff 227 | 228 | # AWS User-specific 229 | 230 | # Generated files 231 | 232 | # Sensitive or high-churn files 233 | 234 | # Gradle 235 | 236 | # Gradle and Maven with auto-import 237 | # When using Gradle or Maven with auto-import, you should exclude module files, 238 | # since they will be recreated, and may cause churn. Uncomment if using 239 | # auto-import. 240 | # .idea/artifacts 241 | # .idea/compiler.xml 242 | # .idea/jarRepositories.xml 243 | # .idea/modules.xml 244 | # .idea/*.iml 245 | # .idea/modules 246 | # *.iml 247 | # *.ipr 248 | 249 | # CMake 250 | 251 | # Mongo Explorer plugin 252 | 253 | # File-based project format 254 | 255 | # IntelliJ 256 | 257 | # mpeltonen/sbt-idea plugin 258 | 259 | # JIRA plugin 260 | 261 | # Cursive Clojure plugin 262 | 263 | # Crashlytics plugin (for Android Studio and IntelliJ) 264 | 265 | # Editor-based Rest Client 266 | 267 | # Android studio 3.1+ serialized cache file 268 | 269 | ### PyCharm Patch ### 270 | # Comment Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-215987721 271 | 272 | # *.iml 273 | # modules.xml 274 | # .idea/misc.xml 275 | # *.ipr 276 | 277 | # Sonarlint plugin 278 | # https://plugins.jetbrains.com/plugin/7973-sonarlint 279 | .idea/**/sonarlint/ 280 | 281 | # SonarQube Plugin 282 | # https://plugins.jetbrains.com/plugin/7238-sonarqube-community-plugin 283 | .idea/**/sonarIssues.xml 284 | 285 | # Markdown Navigator plugin 286 | # https://plugins.jetbrains.com/plugin/7896-markdown-navigator-enhanced 287 | .idea/**/markdown-navigator.xml 288 | .idea/**/markdown-navigator-enh.xml 289 | .idea/**/markdown-navigator/ 290 | 291 | # Cache file creation bug 292 | # See https://youtrack.jetbrains.com/issue/JBR-2257 293 | .idea/$CACHE_FILE$ 294 | 295 | # CodeStream plugin 296 | # https://plugins.jetbrains.com/plugin/12206-codestream 297 | .idea/codestream.xml 298 | 299 | ### Python ### 300 | # Byte-compiled / optimized / DLL files 301 | __pycache__/ 302 | *.py[cod] 303 | *$py.class 304 | 305 | # C extensions 306 | 307 | # Distribution / packaging 308 | .Python 309 | build/ 310 | develop-eggs/ 311 | dist/ 312 | downloads/ 313 | eggs/ 314 | .eggs/ 315 | lib/ 316 | lib64/ 317 | parts/ 318 | sdist/ 319 | var/ 320 | wheels/ 321 | share/python-wheels/ 322 | *.egg-info/ 323 | .installed.cfg 324 | *.egg 325 | MANIFEST 326 | 327 | # PyInstaller 328 | # Usually these files are written by a python script from a template 329 | # before PyInstaller builds the exe, so as to inject date/other infos into it. 330 | *.manifest 331 | *.spec 332 | 333 | # Installer logs 334 | pip-log.txt 335 | pip-delete-this-directory.txt 336 | 337 | # Unit test / coverage reports 338 | htmlcov/ 339 | .tox/ 340 | .nox/ 341 | .coverage 342 | .coverage.* 343 | .cache 344 | nosetests.xml 345 | coverage.xml 346 | *.cover 347 | *.py,cover 348 | .hypothesis/ 349 | .pytest_cache/ 350 | cover/ 351 | 352 | # Translations 353 | *.mo 354 | *.pot 355 | 356 | # Django stuff: 357 | local_settings.py 358 | db.sqlite3 359 | db.sqlite3-journal 360 | 361 | # Flask stuff: 362 | instance/ 363 | .webassets-cache 364 | 365 | # Scrapy stuff: 366 | .scrapy 367 | 368 | # Sphinx documentation 369 | docs/_build/ 370 | 371 | # PyBuilder 372 | .pybuilder/ 373 | target/ 374 | 375 | # Jupyter Notebook 376 | .ipynb_checkpoints 377 | 378 | # IPython 379 | profile_default/ 380 | ipython_config.py 381 | 382 | # pyenv 383 | # For a library or package, you might want to ignore these files since the code is 384 | # intended to run in multiple environments; otherwise, check them in: 385 | # .python-version 386 | 387 | # pipenv 388 | # According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control. 389 | # However, in case of collaboration, if having platform-specific dependencies or dependencies 390 | # having no cross-platform support, pipenv may install dependencies that don't work, or not 391 | # install all needed dependencies. 392 | #Pipfile.lock 393 | 394 | # PEP 582; used by e.g. github.com/David-OConnor/pyflow 395 | __pypackages__/ 396 | 397 | # Celery stuff 398 | celerybeat-schedule 399 | celerybeat.pid 400 | 401 | # SageMath parsed files 402 | *.sage.py 403 | 404 | # Environments 405 | .env 406 | .venv 407 | env/ 408 | venv/ 409 | ENV/ 410 | env.bak/ 411 | venv.bak/ 412 | 413 | # Spyder project settings 414 | .spyderproject 415 | .spyproject 416 | 417 | # Rope project settings 418 | .ropeproject 419 | 420 | # mkdocs documentation 421 | /site 422 | 423 | # mypy 424 | .mypy_cache/ 425 | .dmypy.json 426 | dmypy.json 427 | 428 | # Pyre type checker 429 | .pyre/ 430 | 431 | # pytype static type analyzer 432 | .pytype/ 433 | 434 | # Cython debug symbols 435 | cython_debug/ 436 | 437 | # End of https://www.toptal.com/developers/gitignore/api/python,pycharm,eclipse,java,intellij+all,c++ 438 | -------------------------------------------------------------------------------- /Academy/Modules/Introduction_to_Academy/2020-12-22_cheatsheet-15.md: -------------------------------------------------------------------------------- 1 | | **Command** | **Description** | 2 | | --------------|-------------------| 3 | |`uname -a`| Shows the current kernel and OS information | 4 | |`sudo `| Executes the command as root (Administrator) | -------------------------------------------------------------------------------- /Academy/Paths/Cracking_into_Hack_the_Box/Web_Requests/2020-12-22_cheatsheet-35.md: -------------------------------------------------------------------------------- 1 | | **Command** | **Description** | 2 | | --------------|-------------------| 3 | | `curl http://inlanefreight.com` | GET request with `cURL` | 4 | | `curl http://inlanefreight.com -v` | Verbose GET request with `cURL` | 5 | | `curl http://admin:password@inlanefreight.com/ -vvv` | `cURL` Basic Auth login | 6 | | `curl -u admin:password http://inlanefreight.com/ -vvv` | Alternate `cURL` Basic Auth login | 7 | | `curl -u admin:password -L http://inlanefreight.com/` | `cURL` Basic Auth login, follow redirection | 8 | | `curl -u admin:password 'http://inlanefreight.com/search.php?port_code=us'` | `cURL` GET request with parameter | 9 | | `curl -d 'username=admin&password=password' -L http://inlanefreight.com/login.php` | POST request with `cURL` | 10 | | `curl -d 'username=admin&password=password' -L http://inlanefreight.com/login.php -v` | Debugging with `cURL` | 11 | | `curl -d 'username=admin&password=password' -L --cookie-jar /dev/null http://inlanefreight.com/login.php -v` | Cookie usage with `cURL` | 12 | | `curl -d 'username=admin&password=password' -L --cookie-jar cookies.txt http://inlanefreight.com/login.php` | `cURL` with cookie file | 13 | | `curl -H 'Content-Type: application/json' -d '{ "username" : "admin", "password" : "password" }'` | `cURL` specify content type | 14 | | `curl -X OPTIONS http://inlanefreight.com/ -vv` | `cURL` OPTIONS request | 15 | | `curl -X PUT -d @test.txt http://inlanefreight.com/test.txt -vv` | File upload with `cURL` | 16 | | `curl -X DELETE http://inlanefreight.com/test.txt -vv` | DELETE method with `cURL` | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # HackTheBox 2 | 3 | Code written during contests and challenges by HackTheBox. 4 | [https://www.hackthebox.com/](https://www.hackthebox.com/) 5 | 6 | Hack The Box is an online cybersecurity training platform to level up hacking skills. It has advanced training labs that simulate real-world scenarios, giving players a chance to assess and penetrate enterprise infrastructure environments and prove their offensive security skills. 7 | --------------------------------------------------------------------------------