HTB Enigma Writeup

Machine profile

Platform

Hack The Box

Machine

Enigma

Difficulty

Easy

Published

2026-07-27

Status

active

Enigma is an easy-difficulty Linux machine from Hack The Box whose reconnaissance starts with a file share rather than a web server, which makes it a useful change of pace from the web-heavy boxes.

The skill areas are network file share enumeration, credential management services, remote code execution in a third-party application, credential and secret recovery, password cracking, and Linux privilege escalation through a self-hosted administration tool. Much of the useful information on this box arrives in files rather than in a browser, which is a good habit to build.

It suits readers who want a clean introduction to share-based enumeration, service default credentials, and password recovery, and it rewards careful reading of configuration output rather than aggressive exploitation. The final escalation is a configuration mistake in a third-party control panel rather than a kernel or service exploit, which keeps it realistic and repeatable.

What this machine covers

What the finished writeup contains

When Enigma retires, the complete walkthrough publishes here unchanged — every command, output and screenshot from the actual box, in the order it was solved.

1. Reconnaissance Port scanning, service fingerprinting and attack-surface mapping
2. Initial foothold The first authenticated or unauthenticated execution path
3. Enumeration Deeper inspection of the exposed services and their configuration
4. Exploitation Chaining the weaknesses found into a working exploit
5. Credential recovery Secrets, keys and hashes, and how they were obtained
6. Privilege escalation The route from the foothold account to a root shell
7. Flags User and root flag capture