Hi everyone,

We're looking for about 3 more people for our Cyber Apocalypse 2026 team.

You don't need a high HTB rank. Honestly, I don't care about ranks that much. One of our best players is still Noob rank and solves harder challenges than many people with much higher ranks.

What matters is that you're not completely new. If you've solved CTF challenges or HTB machines before and know your way around at least one category, you're welcome.

We're looking for people interested in things like web, pwn, reverse, crypto, forensics, osint, hardware, AD, AI or misc. Any specialization is fine.

The only thing we ask is that you're active during the event and willing to work with the team.

If you're interested, send me a DM or leave a comment. Tell me what categories you enjoy and what kind of CTF experience you have. HTB or CTFtime profile is welcome, but it's optional.

Hi everyone,

I'm hoping someone here has experienced this before or can point me in the right direction.

Today I tried logging into my Hack The Box account and was greeted with this message:

The confusing part is that I already completed the parental consent process.

Earlier this month, HTB support sent the consent form to my parent's email, we submitted it, and support replied:

I've already emailed support with the previous email thread attached, since it seems like the ban may have been applied by mistake.

Has anyone else had something similar happen? If so, how long did it take for support to resolve it?

Thanks!

I think there is some errors regarding the locale flags though🤔🤔
zh-CN / zh-HK / zh-TW all show the same flag, so the dev might not have been familiar with all the regions/locales listed. (Also curious — is using the UK flag for "English" intentional? Not trying to single anything out here, just seems like flags in general don't map cleanly to languages/locales XD)
To avoid any ambiguity/confusion, I think not showing any locale flags at all would be cleaner than the current setup.

Edit: Beyond that, a few other language options use a single country's flag to represent a language that's spoken across many countries — English (UK flag), Arabic, and Spanish are the more obvious ones. None of these have one "correct" flag since the language itself isn't tied to a single nation.

(Already submitted this through the official feedback form a while back —almost a month ago— just hasn't gotten a response yet, so posting here too in case anyone sees it.)

After 10 years of hacking for fun and profit and about 2 years of grindiing HTB certs I finally have them all. Ask me ANYTHING!!

So I just completed CWES path, and I am planning on taking my first attempt for the exam in 15 days.
Any recommendations on challenges, tips or tricks would be of great help.

Hi guys! I'm currently preparing for the CJCA exam. I would probably take it in a week. I would like to build a methodology but kind of confused on how to do it. And before starting the exam I would try and solve all of the boxes for the CJCA track ( https://app.hackthebox.com/tracks/93 ). If there are any other boxes I should try please tell me :)

Thank you for your time!

Hi fellow HTB Redditors!

It’s been an incredible journey so far, and I’ve learned so much from Hack The Box right from the ground up. I’m currently transitioning into cybersecurity from a completely unrelated career field.

Right now, I'm working through the CJCA path. Once I finish, I plan to tackle the Penetration Tester and then the Web PenTest paths. (then maybe WIFI Pentest -> AI Red Team?)

Or after CJCA, should I go right for SOC Analyst (CDSA)?

Since I have absolutely no prior tech experience, my main question is: How can I build a solid portfolio during my learning journey? When I'm finally ready to apply for jobs, I want to have practical projects to show alongside my certifications (What are other certs that I could take besides those from HTB?).

I’ve also read advice suggesting I should apply for entry-level cyber roles first and work my way up to becoming a PenTester. Does this usually mean aiming for a Tier 1 SOC Analyst position, or should I be looking elsewhere? And with no tech background, how should I structure my resume?

I really appreciate any advice or insights you all can share. I’ve loved my time with HTB and this awesome community so far. Thank you so much! Cheers! Happy Hacking!

Certifications like CPTS are much harder than the normal daily work of a penetration tester and way harder than the OSCP. So if someone can pass the CPTS, it means they can definitely do the job as a penetration tester. So why is it still hard to get a job even after being certified?

Will I learn more from CWES or BSCP?

Hi everyone,

We're looking for about 9 more people for our Cyber Apocalypse 2026 team.

You don't need a high HTB rank. Honestly, I don't care about ranks that much. One of our best players is still Noob rank and solves harder challenges than many people with much higher ranks.

What matters is that you're not completely new. If you've solved CTF challenges or HTB machines before and know your way around at least one category, you're welcome.

We're looking for people interested in things like web, pwn, reverse, crypto, forensics, osint, hardware, AD, AI or misc. Any specialization is fine.

The only thing we ask is that you're active during the event and willing to work with the team.

If you're interested, send me a DM or leave a comment. Tell me what categories you enjoy and what kind of CTF experience you have. HTB or CTFtime profile is welcome, but it's optional.

Looking for comrads to team up! https://ctf.hackthebox.com/event/details/cyber-apocalypse-ctf-2026-the-salt-crown-3432 #hackthebox #htb #ctf

Hi everyone, I'm a first-year master's student in France. I just earned my CPTS certification, and I want to become a penetration tester. Which certification would you recommend ? CWES or CAPE on Hackthebox? Thanks, everyone!

Is doing CWES enough or you need CWEE too?

I need to train for the CRTP exam
I want to be overpowered and i need

machines on HTB

I'm thinking of GOAD on HTB PROLABS and then ZEPHYR because these 2 are very similar to CRTP exam according to AI

But before them i think i need retired machines the problem is all the retired machines i know required linux enumeration and using linux commands and i want to train for the exam that's fully Windows environment

I'm a new HackTheBox user. I'm going through the introductory model. I'm trying to spawn a PWNBox, and I'm getting server error 500. However, the only outage right now is a partial outage for HTB Enterprise Platform. I don't know if there's an issue.

Come along for this free virtual event and learn about step by step walkthroughs of current boxes and methodology steps to break them and some giveaways at the end as always.

--==Hack The Box Meetup 4 Main Track Virtual==-- https://www.meetup.com/hack-the-box-meetup-sydney-au/events/315611694/?utm_medium=referral&utm_campaign=share-btn_savedevents_share_modal&utm_source=link&utm_version=v2&member_id=479268114

So I failed my second attempt at CPTS, but… compared to my first attempt I made improvements. First time I got 1 flag but the second I had 5. I am not going to lie Flag 6 really screwed me up. If you know you know what I mean. I guess I need to figure out a way to better hunt for credentials in order to move laterally.

Hi everyone,

I recently started a cybersecurity company offering services such as penetration testing, vulnerability assessments, and security consulting.

I'm technical, but sales isn't my strength. I'm thinking about finding someone who can bring in clients and get paid on commission for every deal they close.

Has anyone here done this successfully?

• Where do you find commission-only cybersecurity salespeople?
• Is this a realistic model, or do experienced salespeople usually expect a base salary?
• What commission percentages are considered fair?
• Are there any platforms, communities, or agencies you'd recommend?

I'd really appreciate hearing from anyone who has built a cybersecurity business or hired salespeople in this space. Any advice or lessons learned would be helpful.

Thanks!

PWNED

Will it be easy for me to pass OSCP+ if I passed CPTS?

So I scanned the target and discovered snmp running over port 161. The version scan reported snmpv3
With this being said, my understanding was that community strings don’t work for this version so I completely skipped past it to later find out that I was supposed to run onesixtyone & snmpwalk on it as it still supported v2c…….

So going forward should I run all possible tools/enumerations against a service regardless of what nmap tells me the version it’s using? If so then what’s the point of even running version scans if it’s not reliable - or what method of thinking should I be using when enumerating information from these services? For example if I see smbv3 is running do stilll attempt techniques that should only apply to smbv1 ?

I feel like using every tool just to see if I get a hit is akin to just brute forcing techniques (and very noisy). My thinking was that I would need to methodologically gather hints that would eventually lead me to the tool I need. Is this thinking wrong? Because I feel like this lab is changing my perspective to favor blindly running techniques as the solution?