{"id":25734289,"url":"https://github.com/purplestormctf/client-side-boxes","last_synced_at":"2026-03-02T03:34:21.518Z","repository":{"id":240380777,"uuid":"802475691","full_name":"purplestormctf/Client-Side-Boxes","owner":"purplestormctf","description":"To avoid pain and suffering, we are trying to collect all boxes mainly from HTB which have a Client-Side attack portion.","archived":false,"fork":false,"pushed_at":"2025-11-11T13:30:39.000Z","size":49,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-11-11T15:19:39.936Z","etag":null,"topics":["boxes","client-side","hackthebox","htb","rating"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/purplestormctf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-05-18T11:59:42.000Z","updated_at":"2025-11-11T13:30:43.000Z","dependencies_parsed_at":"2024-05-18T13:28:00.710Z","dependency_job_id":"ff5de336-f33c-4b5b-80a6-70aed519262d","html_url":"https://github.com/purplestormctf/Client-Side-Boxes","commit_stats":null,"previous_names":["purplestormctf/client-side-boxes"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/purplestormctf/Client-Side-Boxes","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/purplestormctf%2FClient-Side-Boxes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/purplestormctf%2FClient-Side-Boxes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/purplestormctf%2FClient-Side-Boxes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/purplestormctf%2FClient-Side-Boxes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/purplestormctf","download_url":"https://codeload.github.com/purplestormctf/Client-Side-Boxes/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/purplestormctf%2FClient-Side-Boxes/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29991836,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-02T01:47:34.672Z","status":"online","status_checked_at":"2026-03-02T02:00:07.342Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["boxes","client-side","hackthebox","htb","rating"],"created_at":"2025-02-26T04:37:26.664Z","updated_at":"2026-03-02T03:34:21.512Z","avatar_url":"https://github.com/purplestormctf.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Client-Side-Boxes\n\n\u003e [!NOTE]\n\u003e To avoid pain and suffering, we are trying to collect all boxes mainly from HTB which have a Client-Side attack portion.\n\u003e If you want to contribute, feel free to `PR` and add your emotional connection or remembrance with the box on the `Fuckup Level` section.\n\u003e Help to safe others and their sanity - thanks.\n\n| Name | Rating | OS | Fuckup Level 1-5 | Description | Listed as CS on HTB | Verified by a poor soul | URL |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| Alert | Easy | Linux | No puke here | Required for foothold but it actually works quite well! | no | yes | https://www.hackthebox.com/machines/alert |\n| Anubis | Insane | Windows | 🤮🤮🤮🤮🤮 | You will learn to hate on a new level. Broken scheduled task gave us hell. | no | yes | https://www.hackthebox.com/machines/anubis |\n| Axlle | Hard | Windows | 🤮🤮🤮🤮🤮 | Foothold is fun (not). | no | yes | https://www.hackthebox.com/machines/axlle |\n| BlockBlock | Hard | Linux | It was actually not that bad | Stealing stuff to get to the foothold but it worked fine. | no | yes | https://www.hackthebox.com/machines/blockblock |\n| Bookworm | Insane | Linux | 🤮🤮🤮 | n/a | no | yes | https://www.hackthebox.com/machines/bookworm |\n| Cat | Medium | Linux | 🤮🤮🤮 | Double client-side part. | no | yes | https://www.hackthebox.com/machines/cat |\n| Catch | Medium | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/catch |\n| DarkCorp | Insane | Windows | 🤮 | Required for foothold. It actually works. | no | yes | https://www.hackthebox.com/machines/darkcorp |\n| Derailed | Insane | Linux | RATE ME! | n/a | no | yes | https://www.hackthebox.com/machines/derailed |\n| Eureka | Hard | Linux | NONE! | It was okay. The cronjob worked. | no | yes | https://www.hackthebox.com/machines/eureka |\n| Explore | Easy | Android | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/explore |\n| Extension | Hard | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/extension |\n| Fluffy | Easy | Windows | It was working fine. | Needed for foothold. | no | yes | https://www.hackthebox.com/machines/fluffy | \n| FormulaX | Hard | Linux | 🤮 | Client-Side part was cookie stealing. | no | yes | https://www.hackthebox.com/machines/formulax |\n| Guardian | Hard | Linux | nah, meh, it worked. | Double client-side part on the foothold. | no | yes | https://www.hackthebox.com/machines/guardian |\n| Intfiltrator | Insane | Windows | 🤮 | Client-Side nearly at the end of the box. Just a little bit annoying to deal with. | no | yes | https://www.hackthebox.com/machines/infiltrator |\n| MagicGardens | Insane | Linux | 🤮🤮🤮🤮 | Foothold WTF.. | no | yes | https://www.hackthebox.com/machines/magicgardens |\n| Mailing | Easy | Linux | 🤮🤮 | Weird hint about the client-side attack but the attack itself is very stable. Prepare to deal with LO. | yes | no | https://www.hackthebox.com/machines/mailing |\n| Mailroom | Hard | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/mailroom |\n| Mirage | Hard | Windows | It was actually working very well. | Needed in the early stage of the box | no | yes | https://www.hackthebox.com/machines/mirage |\n| Mist | Insane | Windows | NONE! | Client-Side after foothold which actually works! | no | yes | https://www.hackthebox.com/machines/mist |\n| NanoCorp | Hard | Windows | 🤮 | Kind of unreliable foothold | no | yes | https://www.hackthebox.com/machines/nanocorp |\n| PikaTwoo | Insane | Linux | 🤮🤮 | n/a | yes | no | https://www.hackthebox.com/machines/pikatwoo |\n| RustyKey | Hard | Windows | 🤮 | It works but you have to wait for it. | no | yes | https://www.hackthebox.com/machines/rustykey |\n| Sandworm | Medium | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/sandworm |\n| Sea | Easy | Linux | 🤮 | Not that bad, it actually worked | no | yes | https://www.hackthebox.com/machines/sea |\n| Sightless | Easy | Linux | 🤮🤮🤮 | Very aggressive configuration! | no | yes | https://www.hackthebox.com/machines/sightless |\n| Sorcery | Insane | Linux | No puke here | It just worked. | no | yes | https://www.hackthebox.com/machines/sorcery |\n| Tally | Hard | Windows | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/tally |\n| University | Insane | Windows | 🤮 | Unfortunately too many unintended ways to solve this box! Client-side part comes later in the box into play | no | no |  https://www.hackthebox.com/machines/university |\n| Unrested | Medium | Linux | Nothing to puke about | Required for foothold but actually works | no | no |  https://www.hackthebox.com/machines/unrested |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpurplestormctf%2Fclient-side-boxes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpurplestormctf%2Fclient-side-boxes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpurplestormctf%2Fclient-side-boxes/lists"}