Hackthebox Boxes

Here is a list of boxes based on web vulnerabilities. If you are stuck on PortSwigger or find those labs boring, give these a try.

All Credits goes to Tushar Verma

Twitter

SQL Injection

Local File Inclusion

File Upload Vulnerabilities

OS command Injection

Server-Side Request Forgery

XXE Injection

Server-side template Injection

Remote File Inclusion

IDOR

Soccer

Poison

Popcorn

TwoMillion

Kotarak

Fulcrum

Doctor

Ariekei

Derailed

MetaTwo

Pikatwoo

October

Precious

Minion

Aragog

TheNotebook

Poison

Moderators

Vessel

Bagel

Bank

BroScience

Dab

DevOops

Gobox

Tartarsauce

Perspective

Shoppy

Encoding

Devel

Extension

Kryptos

Spider

Sniper

Backend

Health

BroScience

Granny and Grandpa

Mentor

Mango

Patents

Anubis

ForwardSlash

Previse

Carpediem

UpDown

Inception

Holiday

ForwardSlash

Pressed

Proper

NodeBlog

Shared

Popcorn

Olympus

Node

Laser

Quick

Bolt

Fingerprint

Cap

Moderators

Beep

Sunday

Ethereal

Ready

BountyHunter

Hancliffe

Sink

Trick

Pinkys Palace v2

DevOops

Redcross

Cereal

Snoopy

Busqueda

TheNotebook

Faculty

Bart

Bounty

Netmon

Love

Pollution

RedPanda

Seventeen

Fighter

Inject

Fortune

Jarmis

MetaTwo

Derailed

StreamIO

DevOops

Pollution

Chainsaw

Seal

RedPanda

Catch

Noter

Curling

Escape

Player

Writer

NodeBlog

Phoneix

Bighead

Interface

Multimaster

Forge

Overflow

FriendZone

Investigation

Doctor

AdmirerToo

Altered

LaCasaDePapel

Carpediem

Crossfit

Faculty

Early Access

Unattended

Hathor

Writer

Health

NodeBlog

Kryptos

Moderators

Devzat

Awkward

Writer

Ghoul

Perspective

Secret

Encoding

Spider

Jarvis

OpenSource

Pandora

Validation

Player

Seventeen

Catch

CrossFIt 2

Sniper

Phoenix

Perspective

Breadcrumbs

DC-9