Hack The Box

The signal is strong. Let’s not assume the rest is 📡 Meet the HTB Certified Wi-Fi Pentesting Expert! A hands-on certification designed to teach you how modern Wi-Fi networks really work, how they’re assessed, and where they tend to fall apart. From understanding wireless behavior to testing today’s protections in realistic scenarios, HTB CWPE is built for people who want real Wi-Fi pentesting skills, not surface-level knowledge. Learn more: okt.to/5xDXZm #HackTheBox #HTB #CWPE #WiFiPentester #Cybersecurity #WiFi

If AI handles the triage, how do juniors build the intuition to become seniors? Reviewing summaries isn't the same as digging through raw logs. What will have the biggest impact on the junior-to-senior path? 👇

Your weekend investigation backlog just got out of hand 🔎👀 Two new Sherlocks just dropped, and it's your last chance to play the final batch of migrated @LetsDefend challenges for free, until Nov 15😏 1️⃣ SShole (New Sherlock | Very Easy) Creator: cyberjunkie 2️⃣ Chameleon (New Sherlock | Medium)x Creator: M4shl3 3️⃣ LetsDefend Collection on HTB Labs (Free until Nov 15th) 🔗 Play on HTB Labs >>> okt.to/zYV5kJ #HackTheBox #LetsDefend #HTBSherlocks #DFIR #DigitalForensics #MalwareAnalysis #SOCAnalyst #CyberSecurity

Cabin crew, prepare for final approach. 🛬 The final machine of Special Season AERO has touched down at baggage claim, alongside a new coding challenge for the weekend. What's new on HTB Labs: 1️⃣ Unclaimed (Final Seasonal Machine) OS: Windows: Creator: Giannis17 2️⃣ Orrery Vault (Challenge | Hard) Category: Coding Creator: amra13579 🔗 Play now on HTB LABS >>> okt.to/5HmOPr #HackTheBox #HTB #WeeklyContentDrop #HTBAERO #CyberSecurity #RedTeaming #CodingChallenge #WindowsSecurity

What does it take to win a global CTF? 🏆 We spoke with team lead Michał Błaszczak about their win at the Global Cyber Skills Benchmark CTF 2026—the biggest global CTF for cyber business teams—and the habits behind it: covering each other’s skill gaps, knowing when to hand over a challenge, and using AI while keeping human judgment in charge. Read his insights on building a cybersecurity team that performs under pressure 👉 okt.to/F47iVI #Cybersecurity #CTF #CyberTeams #HackTheBox #gcsb #globalcyberskillsbenchmark okt.to/pZWRnC

Dale Hoak has a message for security practitioners: One tabletop a year is not enough. Run quarterly tabletops, plug into the community, and never settle for an annual checkbox. 🎙️ Listen to Operation Paper Shield now > okt.to/nQMds3 #HackTheBox #PressureZone #CyberSecurity #CyberResilience #Podcast

Adversaries rarely hack their way into Active Directory. They just use the doors left open by weak passwords and overlooked settings. Purple Knight, our newest Sherlock built with @Semperis, puts you in charge of securing Forela's domain. Run the tool, spot the misconfigurations, and patch the identity attack surface. Difficulty: Easy Focus: Active Directory vulnerability assessment and remediation 🔗 Read more >>> okt.to/Oos1pL #HackTheBox #Semperis #ActiveDirectory #CyberSecurity #InfoSec

🛡️ Not every blue teamer is ready for CDEP. Are you? Take your detection engineering skills beyond SIEM queries. Built for solo defenders and enterprise security teams alike, HTB CDEP challenges you to turn advanced adversary tradecraft into resilient detections. 🔓 Unlock the next level. Explore HTB CDEP on HTB Academy >>> #HackTheBox #HTBCDEP #DetectionEngineering #BlueTeam #Cybersecurity

What if you could prove a 330% ROI on your cybersecurity workforce? Between $150,000 turnover costs, months-long onboarding delays, and accelerating AI threat velocity, course completion badges don't show real readiness. We’re partnering with Forrester to break down the actual economics of continuous cyber readiness. Christine Bartlett (CMO, Hack The Box) and Jess Burn (Principal Analyst, Forrester) will unpack the Total Economic Impact™ study and share practical workforce steps for security leaders. 🔗 Reserve your seat >>> okt.to/9K42H5 #Cybersecurity #CyberResilience #WorkforceDevelopment #CISO #ROI

If AI handles the entry-level work, how do junior analysts become senior defenders? Automating tier-1 triage speeds up workflows today, but it risks gutting your future talent pipeline. Meanwhile, completion badges on training dashboards continue to hide real technical gaps. Together with Marinda Hamann from ISC2, Christine Bartlett and Dimitris Bougioukas from HTB are examining what agentic tools mean for cyber team readiness—and how security leaders can build and verify practical skills instead of tracking compliance checkboxes. 🔗 Reserve your seat >>> okt.to/6JrRzS #Cybersecurity #WorkforceDevelopment #CISO #SecurityLeadership #AIinCyber

Halloween weekend plans: cleared for takeoff. 🛫 New seasonal machine, new mobile challenge, zero candy. What's new on the HTB Labs this week: 1️⃣ Takeoff (Seasonal Machine) OS: Linux Creator: ctrlzero 2️⃣ Detour (Challenge | Hard) Category: Mobile Creator: ymuu 🔗 Play now on HTB Labs >>> okt.to/rfSsuy #HackTheBox #HTB #WeeklyContentDrop #HTBAERO #CyberSecurity #RedTeaming #MobileSecurity #Halloween

This one means a lot to us. Hack The Box has been named #1 in Best Workplaces™ in Tech Hellas 2026, in the 50–250 employees category. Roughly half of our company calls Greece home. What makes this team special isn’t just the technology (though building global cyber simulations and new ways to develop and measure readiness across people and AI agents from our Athens hub is pretty exciting). It’s the curiosity, the humor, and the way everyone jumps in to solve hard problems together. We couldn’t be prouder of the people behind HTB and the culture we’ve built together. Excited for everything ahead. Want to come build with us? We’re hiring across engineering, research, and product: okt.to/x6dZGD #HackTheBox #BestWorkplaces #GreekTech #TechCareers

The perimeter at Wrenford Bank just cracked wide open. The first drop of Operation Gilt Doctrine is live on HTB Enterprise with three new releases: 🔓 Grandfathered In | Challenge Reverse engineer an exposed legacy service to pull apart hidden validation logic. 💻 DIY | Machine Break out of a Linux kiosk, turn an application flaw into remote code execution, and escalate to root via CUPS. 🔎 Caffeine Rush | Sherlock Dig through Windows forensic artifacts and AnyDesk activity to reconstruct an active intrusion and map the damage. Ready to take on Wrenford Bank? 🔗 Explore Operation Gilt Doctrine >>> okt.to/2yUksQ #HackTheBox #HTBEnterprise #OperationGiltDoctrine #Cybersecurity #RedTeam #BlueTeam

Today, 4PM EEST⚔️ 🔗 Register for free >>> okt.to/t1zHZV

You’ve seen PHP2Shell from the attacker’s side. What does it leave behind in the logs? 🔎 Meet dOOMs Day, one of the first defensive challenges focused on PHP2Shell. This new Sherlock from Hack The Box is a hands-on investigation where you analyze a compromised PHP server and examine the web logs to understand how the attack unfolded. Built for SOC, digital forensics, and incident response practitioners. Investigate dOOMs Day 👉 okt.to/Xfd7mv #HackTheBox #PHP2Shell #SOC #DFIR #IncidentResponse

Get hands-on context for PHP2Shell in our upcoming live webinar. Join our session, Inside the PHP2Shell Exploit, for a technical overview of CVE-2026-109618 / CVE-2026-109619 and a walkthrough of Dark Embargo, our free, isolated training challenge with @Christine Bartlett, @Dimitrios Taketzis, and @Aristidis Angelopoulos. Bring your questions for the open Q&A. Register for free 👉 okt.to/DCSeJP 📅 October 30 🕒 2:15 PM UK / 10:15 AM US Eastern #HackTheBox #PHP2Shell #PHP #Cybersecurity #Pentesting

If your compliance is 100% automated, who takes the fall when a system fails? Even when dashboards show green across the board, leaders need to verify what the numbers actually represent and take ownership of the risks. Compliance tools can run on autopilot. Accountability cannot. 🎙️ Dale Hoak, CSO at RegScale, joins HTB Pressure Zone to discuss how he handles high-stakes security decisions. 🔗 Listen to the full episode >>> okt.to/BxlvHE #HackTheBox #PressureZone #CyberSecurity #GRC #ContinuousCompliance

A payment says it’s settled. The provider says otherwise. Which one do you trust? In financial systems, a status isn't proof that a transaction actually happened. Payment records, provider callbacks, and approval logs all need to tell the same story. Something is wrong at Wrenford Bank. And uncovering the truth will take more than one approach. HTB Enterprise Campaign: Operation Gilt Doctrine. Coming soon. 🔗 Discover the investigation >>> okt.to/W7cwEu #HackTheBox #HTBEnterprise #OperationGiltDoctrine #Cybersecurity #CyberReadiness #RedTeam #BlueTeam

AI can point out a dozen theoretical bugs in seconds. But can it confirm them without breaking the target or hallucinating an exploit? That’s the focus of our latest module: AI-Augmented Web Pentesting. Rather than treating AI as just another chatbot, learn how to integrate LLMs into active web assessments: • Build custom MCP server setups to connect LLMs to existing tools. • Deploy agents for web enumeration and vulnerability validation. • Generate targeted payloads and custom scripts, with safe and responsible execution in mind. Available exclusively on the Hack The Box Enterprise Platform. 🔗 Learn more >>> okt.to/Td214h #HackTheBox #HTBAcademy #AppSec #RedTeam #AI

A more capable cyber workforce. Less time. Lower costs. A commissioned Forrester Consulting Total Economic Impact™ study found that a composite organization using Hack The Box achieved a 330% ROI, with payback in under six months. What does that look like in practice? • 50% lower MTTA and 30% lower MTTR for SOC teams • 35% faster onboarding for new engineers • 50% less time spent on baseline threat discovery Over the coming weeks, we'll dig into these results and what they mean for security leaders looking to build, measure, and demonstrate their teams' capabilities. 📊 Explore the full study and test your own numbers with the ROI calculator: okt.to/GV46OU #Cybersecurity #CyberResilience #WorkforceDevelopment