← All writeups

HTB writeup · Hack The Box

Takeoff

By Anmol Chaudhary (BustaYaga)

System
Linux
Difficulty
Hard
Solved
2 November 2026

About this machine

An airline flight-booking app with boarding passes and an automation server. Covers web application logic flaws, token handling and privilege escalation.

This writeup is locked

The lab is still active on Hack The Box, and their rules do not allow walkthroughs of active labs to be public. The full writeup is on this page, encrypted. Enter the passphrase to read it, or contact me to ask for hints or nudges. Each locked writeup has its own passphrase.