Fix broken URLs and table rendering across the repo

- Replace 3 broken Sherlock writeup links (403 Medium/StumbleSec paywall)
  - Crown Jewel-1: CyberWired (working)
  - MisCloud: CyberEthical (working)
  - OpTinselTrace: GitHub dbissell6/DFIR (working)
- Fix 35 markdown tables missing required blank line before header
  - Affects: cert-prep, machines/easy, machines/hard, fortresses, methodology
  - Tables now render correctly on GitHub Pages

Author: momenbasel

README.md

@@ -184,12 +184,12 @@ DFIR (Digital Forensics & Incident Response) investigation labs. Blue team scena
 | Noted | Easy | Notepad++ Artifacts, Data Extortion | [0xdf](https://0xdf.gitlab.io/2024/06/13/htb-sherlock-noted.html) |
 | Knock Knock | Easy | PCAP, FTP, Port Knocking, GonnaCry Ransomware | [0xdf](https://0xdf.gitlab.io/2023/12/04/htb-sherlock-knock-knock.html) |
 | Bumblebee | Easy | phpBB SQLite, Access Log Analysis | [0xdf](https://0xdf.gitlab.io/2024/05/22/htb-sherlock-bumblebee.html) |
-| Crown Jewel-1 | Medium | NTDS.dit Dump, Volume Shadow Copy Service | [Medium](https://stumblesec.com/hackthebox-crownjewel-1-sherlock-walkthrough-2efb81522f2c) |
+| Crown Jewel-1 | Medium | NTDS.dit Dump, Volume Shadow Copy Service | [CyberWired](https://www.cyberwiredtraining.net/writeups/htb-sherlock-crownjewel-1-jezdr) |
 | Noxious | Medium | LLMNR Poisoning, Rogue Device Detection | [0xdf](https://0xdf.gitlab.io/2024/09/04/htb-sherlock-noxious.html) |
 | Subatomic | Medium | Electron Malware, Discord Hijacking | [0xdf](https://0xdf.gitlab.io/2024/04/18/htb-sherlock-subatomic.html) |
 | Nubilum-1 | Medium | AWS CloudTrail, PoshC2, Cloud Forensics | [0xdf](https://0xdf.gitlab.io/2024/05/30/htb-sherlock-nubilum-1.html) |
-| MisCloud | Medium | GCP Breach, Gitea Vulnerability | [Medium](https://prajshete17.medium.com/writeup-htb-sherlocks-miscloud-medium-93831e2fbf42) |
-| OpTinselTrace (1-5) | Hard | Full APT Campaign Investigation (Christmas 2023) | [Medium](https://medium.com/@ari.null/optinseltrace-3-hack-the-box-sherlock-writeup-dae64f3512fe) |
+| MisCloud | Medium | GCP Breach, Gitea Vulnerability | [CyberEthical](https://blog.cyberethical.me/htb-sherlock-miscloud) |
+| OpTinselTrace (1-5) | Hard | Full APT Campaign Investigation (Christmas 2023) | [GitHub](https://github.com/dbissell6/DFIR/blob/main/WalkThroughs/OpTinselTrace-1-5.md) |
 | APTNightmare | Hard | Advanced Persistent Threat Investigation | [GitHub](https://github.com/jon-brandy/hackthebox/blob/main/Categories/Sherlocks/APTNightmare/README.md) |
 
 See the [full Sherlocks index](sherlocks/README.md) for 70+ Sherlocks with writeup links.

fortresses/README.md

@@ -106,6 +106,7 @@ The fourth company-created fortress on HTB. Created by Synacktiv, a well-known F
 Created by Amazon Web Services to showcase cloud security concepts. Features realistic techniques ranging from web exploitation to cloud privilege escalations for services used by thousands of businesses. Available to Hacker rank and above.
 
 ### Key Techniques
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | Web | OWASP Top 10 exploitation |

machines/easy/README.md

@@ -199,6 +199,7 @@ permalink: /machines/easy/
 ## Machines by Technique
 
 ### Web Exploitation
+
 | Technique | Machines |
 |-----------|----------|
 | SQL Injection | Cronos, Trick, Validation, MetaTwo, PC, Usage, Pandora, Pilgrimage |
@@ -212,6 +213,7 @@ permalink: /machines/easy/
 | Deserialization | Precious, NodeBlog |
 
 ### Active Directory
+
 | Technique | Machines |
 |-----------|----------|
 | Kerberoasting | Active |
@@ -223,6 +225,7 @@ permalink: /machines/easy/
 | BloodHound Enum | Forest, Sauna |
 
 ### Classic Network Exploits
+
 | Technique | Machines |
 |-----------|----------|
 | EternalBlue (MS17-010) | Blue, Legacy |
@@ -233,6 +236,7 @@ permalink: /machines/easy/
 | Default Credentials | Jerry, Mirai, WifineticTwo |
 
 ### Privilege Escalation Techniques
+
 | Technique | Machines |
 |-----------|----------|
 | Sudo Misconfig | Shocker, Knife, Bashed, OpenAdmin, Armageddon |
@@ -288,6 +292,7 @@ permalink: /machines/easy/
 ## External Resources
 
 ### Top Writeup Authors
+
 | Author | URL | Notes |
 |--------|-----|-------|
 | 0xdf | [0xdf.gitlab.io](https://0xdf.gitlab.io/) | Gold standard HTB writeups, covers nearly every machine |
@@ -297,6 +302,7 @@ permalink: /machines/easy/
 | Hackplayers | [github.com/Hackplayers](https://github.com/Hackplayers/hackthebox-writeups) | Community repo (2000+ stars) |
 
 ### Machine Lists & Trackers
+
 | Resource | URL |
 |----------|-----|
 | TJNull OSCP-Like List | [NetSecFocus Trophy Room](https://docs.google.com/spreadsheets/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8/) |

machines/hard/README.md

@@ -97,6 +97,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 ## Machines by Technique Category
 
 ### Active Directory
+
 | Machine | Specific AD Technique |
 |---------|-----------------------|
 | Sizzle | ADCS, SCF File, Kerberoasting, CLM Bypass |
@@ -121,6 +122,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | EscapeTwo | NTLM Relay, ADCS ESC4 |
 
 ### ADCS (Active Directory Certificate Services)
+
 | Machine | ESC Variant |
 |---------|-------------|
 | Sizzle | Certificate-Based Auth |
@@ -133,6 +135,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | EscapeTwo | ESC4 |
 
 ### Web Exploitation (Advanced)
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Falafel | Type Juggling + Boolean Blind SQLi |
@@ -146,6 +149,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | MonitorsThree | Cacti SQLi + Duplicati |
 
 ### Binary Exploitation
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Tally | SQL Server + Rotten Potato |
@@ -156,6 +160,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | NanoCorp | Custom Protocol Binary Analysis |
 
 ### Deserialization (Advanced)
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Scramble | .NET BinaryFormatter |
@@ -165,11 +170,13 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | Napper | .NET Implant Reversing |
 
 ### Blockchain / Smart Contract
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Chainsaw | Solidity Smart Contract Exploit via Ganache |
 
 ### Container / Cloud
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Stacked | AWS LocalStack Lambda Abuse |
@@ -179,6 +186,7 @@ Chainsaw, Ellingson, Falafel, Stacked, Oouch, Travel, Patents, Intense, Quick, U
 | Cerberus | Linux-to-Windows Pivot via SSSD |
 
 ### SSRF Chains
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Travel | SSRF + Memcached Poisoning |
@@ -216,20 +224,23 @@ For each machine, recommended external writeup sources:
 ## Certification Relevance
 
 ### OSCP (Hard machines that build OSCP skills)
+
 | Machine | Why |
 |---------|-----|
 | Tally | Multi-service enumeration, SQL Server, Potato attack |
 | Blackfield | AS-REP, BloodHound, Backup Operators |
 | Falafel | SQLi + creative file write |
 
 ### OSEP (Evasion and advanced exploitation)
+
 | Machine | Why |
 |---------|-----|
 | Reel | Phishing + AppLocker bypass |
 | Sizzle | CLM bypass + ADCS + Kerberoasting |
 | Object | Jenkins + AD ACL chain |
 
 ### CPTS / CRTO (Active Directory focus)
+
 | Machine | Why |
 |---------|-----|
 | Vintage | Pure AD, Kerberoasting, RBCD, DCSync |
@@ -239,6 +250,7 @@ For each machine, recommended external writeup sources:
 | Absolute | Shadow Credentials + Kerberos Relay |
 
 ### CRTE (Red Team / Evasion)
+
 | Machine | Why |
 |---------|-----|
 | Sizzle | Full AD chain with evasion |

machines/medium/README.md

@@ -153,6 +153,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 ## Machines by Technique Category
 
 ### Web Exploitation
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Cronos | SQL Injection, Command Injection |
@@ -171,6 +172,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Devvortex | Joomla API Info Disclosure |
 
 ### Active Directory / Windows Domain
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Monteverde | Azure AD Connect |
@@ -179,6 +181,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Cicada | SMB Enumeration, SeBackupPrivilege |
 
 ### Deserialization
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Json | .NET JSON Deserialization |
@@ -189,6 +192,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Tenet | PHP Object Deserialization |
 
 ### Template Injection (SSTI)
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Sandworm | SSTI in PGP Verification (Jinja2) |
@@ -199,6 +203,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Nunchucks | Nunjucks SSTI |
 
 ### LFI / File Read
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Nineveh | LFI + Chkrootkit |
@@ -209,6 +214,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Pilgrimage | ImageMagick Arbitrary File Read |
 
 ### Binary Exploitation / Custom Protocols
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Ellingson | Custom SUID ROP Exploit |
@@ -217,6 +223,7 @@ Sunday (Solaris), OpenKeys (OpenBSD), Poison (FreeBSD), Spectra (ChromeOS)
 | Node | Kernel Exploit CVE-2017-16995 |
 
 ### Container / Virtualization Escape
+
 | Machine | Specific Technique |
 |---------|--------------------|
 | Tabby | LXD Group Container Mount |

prolabs/README.md

@@ -21,6 +21,7 @@ permalink: /prolabs/
 - **Subnet 2 (172.16.2.0/24):** Internal network requiring pivoting through bastion host
 
 ### Known Machines
+
 | Machine | Role | Key Techniques |
 |---------|------|----------------|
 | DANTE-WEB-NIX01 | Web server (entry point) | Web exploitation, initial foothold |
@@ -65,6 +66,7 @@ permalink: /prolabs/
 - **4 Active Directory Domains:** Multi-domain forest with trust relationships
 
 ### Techniques Covered
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | Web Exploitation | PHP RFI, CMS exploitation, web shells |
@@ -101,6 +103,7 @@ permalink: /prolabs/
 Created by Rastamouse (creator of CRTO certification). Simulates a realistic corporate environment where all systems are reasonably patched, forcing reliance on misconfigurations and AD weaknesses rather than CVEs.
 
 ### Techniques Covered
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | Initial Access | Phishing campaigns, OSINT on company info |
@@ -142,6 +145,7 @@ Created by Rastamouse (creator of CRTO certification). Simulates a realistic cor
 - Each domain has corresponding servers and workstations
 
 ### Techniques Covered
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | AD Enumeration | BloodHound, domain trust mapping |
@@ -177,6 +181,7 @@ Created by Rastamouse (creator of CRTO certification). Simulates a realistic cor
 Immersive enterprise AD environment with advanced infrastructure and strong security posture. Systems are fully patched with hardened OS configurations. AV catches default payloads.
 
 ### Techniques Covered
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | AV Evasion | Custom C# payloads, encrypted payloads, obfuscation |
@@ -209,6 +214,7 @@ Immersive enterprise AD environment with advanced infrastructure and strong secu
 The most challenging ProLab. Simulates a targeted attack by an external threat agent against a Managed Service Provider (MSP). No CVEs are needed - all attacks exploit misconfigurations and trust relationships. Requires C2 framework usage (Cobalt Strike recommended).
 
 ### Techniques Covered
+
 | Category | Specific Techniques |
 |----------|-------------------|
 | APT Simulation | Long-lasting TTPs, patient attack chains |

resources/cert-prep/README.md

@@ -18,8 +18,10 @@ Map your HTB journey to professional security certifications.
 The gold standard for penetration testing. Focus on manual exploitation, no automated tools.
 
 **Recommended Easy Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Lame | Linux | Samba RCE (CVE-2007-2447) |
 | Legacy | Windows | MS08-067, MS17-010 |
 | Blue | Windows | EternalBlue (MS17-010) |
@@ -41,8 +43,10 @@ The gold standard for penetration testing. Focus on manual exploitation, no auto
 | Knife | Linux | PHP 8.1 backdoor, GTFOBins |
 
 **Recommended Medium Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Cronos | Linux | DNS zone transfer, SQLi, cron |
 | SolidState | Linux | Apache James RCE, cron privesc |
 | Poison | Linux | LFI, VNC tunneling |
@@ -60,8 +64,10 @@ The gold standard for penetration testing. Focus on manual exploitation, no auto
 HTB's own penetration testing certification. Aligned with HTB Academy modules.
 
 **Recommended Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Active | Windows | GPP abuse, Kerberoasting |
 | Forest | Windows | AS-REP Roasting, DCSync |
 | Cascade | Windows | LDAP enumeration, .NET reversing |
@@ -83,8 +89,10 @@ HTB's own penetration testing certification. Aligned with HTB Academy modules.
 Red team operations with Cobalt Strike methodology.
 
 **Recommended Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Reel | Windows | Phishing, AppLocker bypass, AD |
 | Mantis | Windows | Kerberos MS14-068, AD |
 | Sizzle | Windows | ADCS, Kerberos, CLM bypass |
@@ -100,8 +108,10 @@ Red team operations with Cobalt Strike methodology.
 Advanced Active Directory attacks and defenses.
 
 **Recommended Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Blackfield | Windows | AS-REP, backup operators |
 | Multimaster | Windows | Complex AD chain |
 | Object | Windows | AD ACL abuse, GenericWrite |
@@ -121,8 +131,10 @@ Focused on web application security.
 - Focus on: SQLi, XSS, SSTI, SSRF, Deserialization
 
 **Recommended Machines:**
+
 | Machine | OS | Key Skills |
 |---------|-----|-----------|
+
 | Talkative | Linux | Rocket.Chat exploit, Docker escape |
 | Forgot | Linux | Redis cache poisoning, password reset |
 | Bagel | Linux | .NET WebSocket, deserialization |
@@ -135,6 +147,7 @@ Focused on web application security.
 
 | Level | Cert | HTB Focus | Timeline |
 |-------|------|-----------|----------|
+
 | Beginner | OSCP | Easy/Medium machines, Dante ProLab | 3-6 months |
 | Intermediate | CPTS | Medium/Hard machines, Offshore ProLab | 4-8 months |
 | Advanced | CRTO | Hard machines, RastaLabs/Zephyr | 2-4 months |

resources/cheatsheets/web-application.md

@@ -202,6 +202,7 @@ shell.jpg.php (if server checks first extension)
 ```bash
 # Separators
 ; id
+
 | id
 || id
 & id

resources/methodology/note-taking.md

@@ -24,6 +24,7 @@ Structured template for documenting your HTB machine progress.
 [Paste full nmap output]
 
 ### Open Ports Summary
+
 | Port | Service | Version |
 |------|---------|---------|
 | 22   | SSH     | OpenSSH 8.9p1 |
@@ -48,6 +49,7 @@ Structured template for documenting your HTB machine progress.
 - /api - API endpoint
 
 ### Credentials Found
+
 | Username | Password | Where Found |
 |----------|----------|-------------|
 | admin    | password | config file |