htb-scripts

A fast HackTheBox CLI tool to search machines, spawn targets, and submit flags via the HTB API v4.

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

Python tool that locates Google account activity.

Proof-of-concept exploit for CVE-2025-66034 in the fontTools variable font generation pipeline. A crafted .designspace file allows control of the output path, enabling arbitrary file writes. The script automates payload creation, font generation, and upload to demonstrate the issue.

HTB Emdee five for life web challenge script

This repo contains RCE exploit for Pterodactyl htb machine

MCP server giving AI agents live control of Hack The Box labs (machines, challenges, flags, VPN) via the bundled zero-dependency HTB Agent Toolkit CLI

This repo contains RCE exploit for Browsed htb machine

This repo contains RCE exploit for Imagery htb machine

This script automates the exploitation process of the Administrator machine from Hack The Box. It is divided into three phases to simplify and control manual steps that require user interaction, such as password cracking.

A tiny, single-process pyAesCrypt password bruteforcer for .aes files.

This is a proxy server script which helps to achieve SQL injection on HTB WhiteRabbit Box

Website crawler created for pentest exercises like HTB.

This repo contains an exploit for HTB Desires challenge

This is an automated exploitation script for the Hack The Box machine *Heal*. It extracts LimeSurvey credentials via LFI and deploys a malicious LimeSurvey plugin to trigger a reverse shell.

This repo contains RCE exploit for Era htb machine