HTB Stories #3 - 0xdf - Creating HTB Machines

This AMA session features David (oxdf), Senior Training Lab Architect at Hack The Box, discussing the platform's machine creation process 1:33. The conversation covers how Hack The Box selects and develops vulnerable machines for their cybersecurity training platform, with insights into the submission and review process 9:37.

Key Takeaways:
• David creates machines to give back to the community and showcase interesting vulnerabilities from his 15-year security career 6:05
• Machines are evaluated based on educational value, fun factor, and realism - ensuring they feel like actual penetration testing scenarios 14:00
• The submission process includes a release committee review, testing, and difficulty assessment, with wait times varying based on platform needs 9:37
• Rejected submissions aren't wasted time, as creators learn valuable skills through the development process 18:16
• Creating boxes involves identifying vulnerabilities, developing a thematic storyline, and building custom applications 20:04

The session emphasizes Hack The Box's commitment to quality educational content that teaches cybersecurity skills through realistic, engaging scenarios 2:21.

Sources:

• 1:33 Introduction of David as Senior Training Lab Architect
• 6:05 David's motivation for creating content
• 9:37 Machine submission process explanation