Scripts,shell used for solving box

Store my 'Useful Commands' for HTB/OSCP and additional notes from my Obisidan. Merge into Obsidian for direct formatting. Also check out my build/scripts - https://github.com/islanddog/kali-clean-pwnbox/

SquidClient. HTB Unbalanced edition.

A fast HackTheBox CLI tool to search machines, spawn targets, and submit flags via the HTB API v4.

Collection of scripts for fixes and QoL changes for kali linux. Some files for ParrotOS are also included

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

Python tool that locates Google account activity.

Self-Hosted HTTP drop server for HTB / THM / OffSec / HS labs. Auto-fetches ~90 pentest tools (linpeas, winPEAS, Sharp*, mimikatz, chisel, etc.) and serves them on tun0 with flat-URL routing.

Proof-of-concept exploit for CVE-2025-66034 in the fontTools variable font generation pipeline. A crafted .designspace file allows control of the output path, enabling arbitrary file writes. The script automates payload creation, font generation, and upload to demonstrate the issue.

HTB Emdee five for life web challenge script

This repo contains RCE exploit for Pterodactyl htb machine

Scripts desarrollados para descubrir usuarios a través del login en la máquina NOTER de HTB.

Script-only privilege escalation chain using CVE-2025-6019 and UDisks2 (no filesystem image included).

This is a password generator which helps to achieve the root flag on HTB WhiteRabbit Box.

This is a proxy server script which helps to achieve SQL injection on HTB WhiteRabbit Box

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-41817) to gain root access via a malicious shared library.

This repo contains RCE exploit for Era htb machine