hackthebox

Document Skill original

Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.

Workflow

workflow.md — Complete workflow with commands. Read this for each step

Steps

Get Credentials — python3 .claude/tools/env-reader.py HTB_USER HTB_PASS HTB_TOKEN ANTHROPIC_API_KEY SLACK_BOT_TOKEN HTB_SLACK_CHANNEL_ID
Only for "Machine" kind of competition -> Verify vpn is running, otherwise download the vpn file from the platform and instruct the user on how to enable it
Generate output dirs — mkdir -p YYMMDD_<name>/{recon,findings,logs,artifacts,tools,reports} for each challenge. Do not seed `attack-chain.md` or `experiments.md` from the orchestrator — those are the coordinator subagent's first action (see skills/coordination/reference/spawning-recipes.md).
To achieve the tasks given by the user, when possible use the HTBTOKEN, otherwise login to the platform using playwright at https://account.hackthebox.com/login and fill the login form with the HTBUSER and HTB_PASS
If necessary, start the machines
If necessary, check network connectivity to the machines
Spawn coordinator subagent per target — Agent(name="coordinator-{tag}", run_in_background=True, ...) per spawning-recipes.md. Never run the P0-P6 coordinator workflow inline in the orchestrator session — the bookkeeping discipline (attack-chain.md, experiments.md, goal_attempts counting, mandatory skeptic at experiments 5/15/25) requires the subagent boundary. Max N concurrent agents, queue-based spawning.
Post-solve Phase 3 — parent orchestrator (not coordinator) always runs /skill-update + Slack after each coordinator returns its PHASE3_SUMMARY (see workflow.md step 8)

References

workflow.md — Workflow overview with credentials, VPN, setup, and coordinator spawn
spawning-recipes.md — Coordinator agent spawn prompt templates (exploitation, flag submission, completion report, stats)
completion-report-schema.md — Challenge completion report structure & template
slack-notifications.md — Slack completion notification format & examples
platform-navigation.md — Platform site navigation guide
vpn-pool-routing.md — VPN pool isolation. Pre-flight check before spawning any machine (releasearena vs dediviplab vs others)
vpn-setup.md — VPN connectivity troubleshooting
anti-bot-bypass.md — Cloudflare/Turnstile detection evasion

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the engagement.

installations

GitHub Stars

534

Mis à jour

29 juil.

MIT2 Fichiers

Voir les détails →

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.