https://github.com/purplestormctf/client-side-boxes
To avoid pain and suffering, we are trying to collect all boxes mainly from HTB which have a Client-Side attack portion.
https://github.com/purplestormctf/client-side-boxes
boxes client-side hackthebox htb rating
Last synced: 3 months ago
JSON representation
To avoid pain and suffering, we are trying to collect all boxes mainly from HTB which have a Client-Side attack portion.
- Host: GitHub
- URL: https://github.com/purplestormctf/client-side-boxes
- Owner: purplestormctf
- Created: 2024-05-18T11:59:42.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-11-11T13:30:39.000Z (7 months ago)
- Last Synced: 2025-11-11T15:19:39.936Z (7 months ago)
- Topics: boxes, client-side, hackthebox, htb, rating
- Homepage:
- Size: 47.9 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Client-Side-Boxes
> [!NOTE]
> To avoid pain and suffering, we are trying to collect all boxes mainly from HTB which have a Client-Side attack portion.
> If you want to contribute, feel free to `PR` and add your emotional connection or remembrance with the box on the `Fuckup Level` section.
> Help to safe others and their sanity - thanks.
| Name | Rating | OS | Fuckup Level 1-5 | Description | Listed as CS on HTB | Verified by a poor soul | URL |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Alert | Easy | Linux | No puke here | Required for foothold but it actually works quite well! | no | yes | https://www.hackthebox.com/machines/alert |
| Anubis | Insane | Windows | 🤮🤮🤮🤮🤮 | You will learn to hate on a new level. Broken scheduled task gave us hell. | no | yes | https://www.hackthebox.com/machines/anubis |
| Axlle | Hard | Windows | 🤮🤮🤮🤮🤮 | Foothold is fun (not). | no | yes | https://www.hackthebox.com/machines/axlle |
| BlockBlock | Hard | Linux | It was actually not that bad | Stealing stuff to get to the foothold but it worked fine. | no | yes | https://www.hackthebox.com/machines/blockblock |
| Bookworm | Insane | Linux | 🤮🤮🤮 | n/a | no | yes | https://www.hackthebox.com/machines/bookworm |
| Cat | Medium | Linux | 🤮🤮🤮 | Double client-side part. | no | yes | https://www.hackthebox.com/machines/cat |
| Catch | Medium | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/catch |
| DarkCorp | Insane | Windows | 🤮 | Required for foothold. It actually works. | no | yes | https://www.hackthebox.com/machines/darkcorp |
| Derailed | Insane | Linux | RATE ME! | n/a | no | yes | https://www.hackthebox.com/machines/derailed |
| Eureka | Hard | Linux | NONE! | It was okay. The cronjob worked. | no | yes | https://www.hackthebox.com/machines/eureka |
| Explore | Easy | Android | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/explore |
| Extension | Hard | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/extension |
| Fluffy | Easy | Windows | It was working fine. | Needed for foothold. | no | yes | https://www.hackthebox.com/machines/fluffy |
| FormulaX | Hard | Linux | 🤮 | Client-Side part was cookie stealing. | no | yes | https://www.hackthebox.com/machines/formulax |
| Guardian | Hard | Linux | nah, meh, it worked. | Double client-side part on the foothold. | no | yes | https://www.hackthebox.com/machines/guardian |
| Intfiltrator | Insane | Windows | 🤮 | Client-Side nearly at the end of the box. Just a little bit annoying to deal with. | no | yes | https://www.hackthebox.com/machines/infiltrator |
| MagicGardens | Insane | Linux | 🤮🤮🤮🤮 | Foothold WTF.. | no | yes | https://www.hackthebox.com/machines/magicgardens |
| Mailing | Easy | Linux | 🤮🤮 | Weird hint about the client-side attack but the attack itself is very stable. Prepare to deal with LO. | yes | no | https://www.hackthebox.com/machines/mailing |
| Mailroom | Hard | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/mailroom |
| Mirage | Hard | Windows | It was actually working very well. | Needed in the early stage of the box | no | yes | https://www.hackthebox.com/machines/mirage |
| Mist | Insane | Windows | NONE! | Client-Side after foothold which actually works! | no | yes | https://www.hackthebox.com/machines/mist |
| NanoCorp | Hard | Windows | 🤮 | Kind of unreliable foothold | no | yes | https://www.hackthebox.com/machines/nanocorp |
| PikaTwoo | Insane | Linux | 🤮🤮 | n/a | yes | no | https://www.hackthebox.com/machines/pikatwoo |
| RustyKey | Hard | Windows | 🤮 | It works but you have to wait for it. | no | yes | https://www.hackthebox.com/machines/rustykey |
| Sandworm | Medium | Linux | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/sandworm |
| Sea | Easy | Linux | 🤮 | Not that bad, it actually worked | no | yes | https://www.hackthebox.com/machines/sea |
| Sightless | Easy | Linux | 🤮🤮🤮 | Very aggressive configuration! | no | yes | https://www.hackthebox.com/machines/sightless |
| Sorcery | Insane | Linux | No puke here | It just worked. | no | yes | https://www.hackthebox.com/machines/sorcery |
| Tally | Hard | Windows | RATE ME! | n/a | yes | no | https://www.hackthebox.com/machines/tally |
| University | Insane | Windows | 🤮 | Unfortunately too many unintended ways to solve this box! Client-side part comes later in the box into play | no | no | https://www.hackthebox.com/machines/university |
| Unrested | Medium | Linux | Nothing to puke about | Required for foothold but actually works | no | no | https://www.hackthebox.com/machines/unrested |