After 10 years of hacking for fun and profit and about 2 years of grindiing HTB certs I finally have them all. Ask me ANYTHING!!

Hi everyone,

We're looking for about 3 more people for our Cyber Apocalypse 2026 team.

You don't need a high HTB rank. Honestly, I don't care about ranks that much. One of our best players is still Noob rank and solves harder challenges than many people with much higher ranks.

What matters is that you're not completely new. If you've solved CTF challenges or HTB machines before and know your way around at least one category, you're welcome.

We're looking for people interested in things like web, pwn, reverse, crypto, forensics, osint, hardware, AD, AI or misc. Any specialization is fine.

The only thing we ask is that you're active during the event and willing to work with the team.

If you're interested, send me a DM or leave a comment. Tell me what categories you enjoy and what kind of CTF experience you have. HTB or CTFtime profile is welcome, but it's optional.

So I just completed CWES path, and I am planning on taking my first attempt for the exam in 15 days.
Any recommendations on challenges, tips or tricks would be of great help.

Hi everyone,

I'm hoping someone here has experienced this before or can point me in the right direction.

Today I tried logging into my Hack The Box account and was greeted with this message:

The confusing part is that I already completed the parental consent process.

Earlier this month, HTB support sent the consent form to my parent's email, we submitted it, and support replied:

I've already emailed support with the previous email thread attached, since it seems like the ban may have been applied by mistake.

Has anyone else had something similar happen? If so, how long did it take for support to resolve it?

Thanks!

Certifications like CPTS are much harder than the normal daily work of a penetration tester and way harder than the OSCP. So if someone can pass the CPTS, it means they can definitely do the job as a penetration tester. So why is it still hard to get a job even after being certified?

I think there is some errors regarding the locale flags though🤔🤔
zh-CN / zh-HK / zh-TW all show the same flag, so the dev might not have been familiar with all the regions/locales listed. (Also curious — is using the UK flag for "English" intentional? Not trying to single anything out here, just seems like flags in general don't map cleanly to languages/locales XD)
To avoid any ambiguity/confusion, I think not showing any locale flags at all would be cleaner than the current setup.

Edit: Beyond that, a few other language options use a single country's flag to represent a language that's spoken across many countries — English (UK flag), Arabic, and Spanish are the more obvious ones. None of these have one "correct" flag since the language itself isn't tied to a single nation.

(Already submitted this through the official feedback form a while back —almost a month ago— just hasn't gotten a response yet, so posting here too in case anyone sees it.)

Hi guys! I'm currently preparing for the CJCA exam. I would probably take it in a week. I would like to build a methodology but kind of confused on how to do it. And before starting the exam I would try and solve all of the boxes for the CJCA track ( https://app.hackthebox.com/tracks/93 ). If there are any other boxes I should try please tell me :)

Thank you for your time!

Hi fellow HTB Redditors!

It’s been an incredible journey so far, and I’ve learned so much from Hack The Box right from the ground up. I’m currently transitioning into cybersecurity from a completely unrelated career field.

Right now, I'm working through the CJCA path. Once I finish, I plan to tackle the Penetration Tester and then the Web PenTest paths. (then maybe WIFI Pentest -> AI Red Team?)

Or after CJCA, should I go right for SOC Analyst (CDSA)?

Since I have absolutely no prior tech experience, my main question is: How can I build a solid portfolio during my learning journey? When I'm finally ready to apply for jobs, I want to have practical projects to show alongside my certifications (What are other certs that I could take besides those from HTB?).

I’ve also read advice suggesting I should apply for entry-level cyber roles first and work my way up to becoming a PenTester. Does this usually mean aiming for a Tier 1 SOC Analyst position, or should I be looking elsewhere? And with no tech background, how should I structure my resume?

I really appreciate any advice or insights you all can share. I’ve loved my time with HTB and this awesome community so far. Thank you so much! Cheers! Happy Hacking!

Will I learn more from CWES or BSCP?

Hi everyone,

We're looking for about 9 more people for our Cyber Apocalypse 2026 team.

You don't need a high HTB rank. Honestly, I don't care about ranks that much. One of our best players is still Noob rank and solves harder challenges than many people with much higher ranks.

What matters is that you're not completely new. If you've solved CTF challenges or HTB machines before and know your way around at least one category, you're welcome.

We're looking for people interested in things like web, pwn, reverse, crypto, forensics, osint, hardware, AD, AI or misc. Any specialization is fine.

The only thing we ask is that you're active during the event and willing to work with the team.

If you're interested, send me a DM or leave a comment. Tell me what categories you enjoy and what kind of CTF experience you have. HTB or CTFtime profile is welcome, but it's optional.

Hi everyone, I'm a first-year master's student in France. I just earned my CPTS certification, and I want to become a penetration tester. Which certification would you recommend ? CWES or CAPE on Hackthebox? Thanks, everyone!

Looking for comrads to team up! https://ctf.hackthebox.com/event/details/cyber-apocalypse-ctf-2026-the-salt-crown-3432 #hackthebox #htb #ctf

I need to train for the CRTP exam
I want to be overpowered and i need

machines on HTB

I'm thinking of GOAD on HTB PROLABS and then ZEPHYR because these 2 are very similar to CRTP exam according to AI

But before them i think i need retired machines the problem is all the retired machines i know required linux enumeration and using linux commands and i want to train for the exam that's fully Windows environment

Is doing CWES enough or you need CWEE too?

So I failed my second attempt at CPTS, but… compared to my first attempt I made improvements. First time I got 1 flag but the second I had 5. I am not going to lie Flag 6 really screwed me up. If you know you know what I mean. I guess I need to figure out a way to better hunt for credentials in order to move laterally.

Come along for this free virtual event and learn about step by step walkthroughs of current boxes and methodology steps to break them and some giveaways at the end as always.

--==Hack The Box Meetup 4 Main Track Virtual==-- https://www.meetup.com/hack-the-box-meetup-sydney-au/events/315611694/?utm_medium=referral&utm_campaign=share-btn_savedevents_share_modal&utm_source=link&utm_version=v2&member_id=479268114

I'm a new HackTheBox user. I'm going through the introductory model. I'm trying to spawn a PWNBox, and I'm getting server error 500. However, the only outage right now is a partial outage for HTB Enterprise Platform. I don't know if there's an issue.

Hi everyone,

I recently started a cybersecurity company offering services such as penetration testing, vulnerability assessments, and security consulting.

I'm technical, but sales isn't my strength. I'm thinking about finding someone who can bring in clients and get paid on commission for every deal they close.

Has anyone here done this successfully?

• Where do you find commission-only cybersecurity salespeople?
• Is this a realistic model, or do experienced salespeople usually expect a base salary?
• What commission percentages are considered fair?
• Are there any platforms, communities, or agencies you'd recommend?

I'd really appreciate hearing from anyone who has built a cybersecurity business or hired salespeople in this space. Any advice or lessons learned would be helpful.

Thanks!

PWNED

This was one of the most practical and challenging certifications I’ve taken. It tested not only technical skills but also methodology, reporting, and persistence throughout the engagement.

I also received some great feedback from the HTB review team.

A few key takeaways from their feedback:

• Use Markdown command output instead of screenshots where possible.

• Add brief captions to explain commands and results.

• Mention alternative tools when appropriate.

•Document testing even on systems with no findings.

Overall, the CPTS was an excellent learning experience that reinforced not only technical penetration testing skills but also the importance of delivering clear, professional reports.

If you have any questions about the CPTS experience, preparation, or reportin, feel free to ask in the comments or send me a message.

Will it be easy for me to pass OSCP+ if I passed CPTS?

Perfect lab to learn about Sliver C2..