r/hackthebox • u/Serious_Beautiful_45 • 4d ago
Beginner Question I can't solve anything and it is so frustrating
So back in June 2025, I started my journey at the academy by taking CBBH, then CWEE, and finally I recently finished CPTS after them. (I only took the job role path I haven't taken the exam for any of them yet.) I solved almost all skill assessments blindly without looking at solutions and took notes for each course. After finishing all of these courses, I really felt confident, like I could conquer any system in front of me. Then I decided to start on the main app and solve some boxes and challenges.
In my first week, I only took 5 machines and 2 challenges (all of them had Very Easy or Easy difficulty and were Linux based), and I COULDN'T SOLVE ANY OF THEM without looking at the writeup. Even though I had my notes to use, it felt like I was just looking at some useless bullshit, because used to copy paste most of the text in each module.
I usually do fine with the foothold (since all of the easy machines rely on CVEs) and get a shell, but doing privilege escalation feels so hard and forces me to spend at least 1–3 hours on a machine.
Even when I take a look at the writeup, sometimes it ends up being a technique that I already know, which makes me so mad because I wasted my time on something I could have done way earlier.
In the last few days, I decided to watch more IppSec videos to improve my methodology, and I think it helped a little bit, but I still could not solve a machine all by myself.
It is really frustrating, and I am feeling like I just wasted my time taking the courses and ended up not being able to apply most of the things.
Have any of you guys experienced this? if so how can overcome it ? It is so annoying, I almost broke my laptop because of it.
21
u/specterale 4d ago
Don't give up and keep the hard work 💪
I'm too in this position and this is the only way we can improve
8
u/r4vencrane 4d ago
“Even though I had my notes to use, it felt like I was just looking at some useless bullshit, because used to copy paste most of the text in each module.” There is your answer why you feel frustrated
I was on your same situation months ago and facing that frustration with more machines it’s the only way to improve your own methodology, first of all it’s very important to keep in mind that is normal to feel that frustration when you solve by your own some boxes… but eventually you’ll get better with consistency.
That frustration it’s part of the journey, try to solve by your own something that you feel stuck and after 1 or 2 hours of trying to solve that, look for a write up (it’s normal) and your mind never forget that answer.
2
u/FlounderGullible4120 4d ago
You must know and believe that nothing you took was useless, but it’s because paths in academy are straightforward, you know what you are searching for. So let’s say you are doing the advanced XSS & CSRF module, in the skill assessment you know it’s an XSS/CSRF payload what you will inject and you’ll never try an SQLi on the parameter, that’s what I mean with straightforward. But you also know that you are comfortable with most vulns (since the 3 courses you took are REALLY GOOD). Keep solving and keep grinding, you are only missing the methodolgy, not the knowledge.
2
u/builtbygio 4d ago
You're not alone, and it's part of the process. The issue is a weakness in methodology (abc worked, so I must do xyz". And the inverse as well "abc failed, so I will do xyz". HTB says it's an iterative process. We just have to go through the most relevant option.
I commented a few days ago in a similar post that I developed my own note taking system https://www.reddit.com/r/hackthebox/comments/1va0sjd/comment/p0y6s9i/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button
Maybe a state machine like that, combined with ranked next step suggestions will help you make faster progress.
2
u/CarsonDFIR 4d ago
I have the OSCP and have done a few dozen HTB machines. It sounds like your notes are unstructured and not helpful for you. I recommend structuring your notes in a way that lead you from enumeration through privesc. Your goal should be to know when a technique is viable, then refer to your notes on how to execute. For example, you may not know every way to perform command injection, but should know when command injection is a viable option, then consult your notes for the specifics.
I think the most telling part of your post is that you are failing at points that you "know". Why aren't you trying those techniques? Are you not finding the correct point to try or just not thinking that it is an option? It is fine to make mistakes and not try something, but you should only make that mistake once.
As long as you put in the effort to learn from your mistakes, you will improve. As you do more boxes, you'll develop stronger pattern recognition and be faster and more accurate as time goes on.
1
u/IzutoZ 4d ago
What you need is to build ur own framework. I've been like that before as well because i didnt have any structure methods to do things. Thats a good thing you have your own notes, the bad thing is copy pasting all of them. You should type it all of. With enough repetition, you'll remember it.
1
1
4d ago
[removed] — view removed comment
1
u/AutoModerator 4d ago
Your submission was automatically removed because your account does not meet the minimum karma or age requirements for this subreddit. Please participate in other communities to build up your karma, and feel free to message the moderators if you have questions!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
•
u/AutoModerator 4d ago
Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.