HTB Academy — badges

Updated as I go

One spot for every Hack The Box Academy module I finish, instead of a new occasion page per badge. Newest first.

Web Requests

03 Sep 2026

HTTP from the ground up — methods, headers, status codes, cookies, and enough of the request/response cycle to stop treating curl output as a black box.

Linux Fundamentals

01 Sep 2026

26/26 exercises. Filesystem layout, permissions, users and groups, processes, package management — the stuff everything else on the security side leans on.

Intro To Web Apps

06 Sep 2026

Web applications use front-end code (HTML/CSS/JS) to show users an interface and back-end components (servers, databases, APIs) to process data behind the scenes. Hackers target both sides through flaws like XSS, CSRF, and the OWASP Top 10, which developers block using input sanitization, secure coding frameworks, and proper access controls.

Javascript Obfuscation

06 Sep 2026

This module teaches you to deobfuscate and analyze JavaScript code that developers or attackers have deliberately scrambled — string encoding, variable mangling, and packer-style eval() wrapping — until you can read it, extract hidden logic, and reconstruct its real behavior. You'll practice this against realistic scenarios (obscured API keys, phishing payloads) using techniques like code analysis, HTTP request replication, and multi-layer decoding to recover the original functionality and any sensitive data it conceals.