hackthebox

name	hackthebox
description	HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
context	fork

Workflow

• workflow.md — Complete workflow with commands. Read this for each step

Steps

1. Get Credentials — python3 .claude/tools/env-reader.py HTB_USER HTB_PASS HTB_TOKEN ANTHROPIC_API_KEY SLACK_BOT_TOKEN HTB_SLACK_CHANNEL_ID
2. Only for "Machine" kind of competition -> Verify vpn is running, otherwise download the vpn file from the platform and instruct the user on how to enable it
3. Generate output dirs — mkdir -p YYMMDD_<name>/{recon,findings,logs,artifacts,reports} for each challenge
4. To achieve the tasks given by the user, when possible use the HTB_TOKEN, otherwise login to the platform using playwright at https://account.hackthebox.com/login and fill the login form with the HTB_USER and HTB_PASS
5. If necessary, start the machines
6. If necessary, check network connectivity to the machines
7. Spawn and manage coordinator pool — max N concurrent agents, queue-based spawning (new agent spawns when previous completes)
8. Post-solve Phase 3 — parent orchestrator (not coordinator) always runs /skill-update + Slack after each coordinator returns its PHASE3_SUMMARY (see workflow.md step 8)

References

• workflow.md — Workflow overview with credentials, VPN, setup, and coordinator spawn
• coordinator-spawn.md — Coordinator agent spawn prompt template (exploitation, flag submission, completion report, stats)
• completion-report-schema.md — Challenge completion report structure & template
• slack-notifications.md — Slack completion notification format & examples
• platform-navigation.md — Platform site navigation guide
• vpn-pool-routing.md — VPN pool isolation. Pre-flight check before spawning any machine (release_arena vs dedivip_lab vs others)
• vpn-setup.md — VPN connectivity troubleshooting
• cloudflare-bypass.md — Cloudflare detection evasion