Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.


  • Version 2.0.19

    Updated the donation history page to show all years instead of this year and last year.
    Added caching to the donation history page for the previous years data.
    Removed the broken donations component from the HBH landing page.
    Updated our PHP dependencies.
    Updated the OS on all our servers to Ubuntu 24.04 LTS (Noble Numbat).
    Setup our new Percona database cluster in LON1 & FRA1.
    Updated HBH to use our new Percona cluster along side our current database cluster for testing.
    Setup a new mointoring system for our Percona cluster and our new infrastructure.
    Decommissioned our MySQL cluster in FRA1, NYC2 & SFO1
    Decommissioned our Redis node in NYC2 & SFO1.
    Decommissioned our iSCSI node in NYC2 & SFO1.
    Decommissioned our Veeam setup in NYC2 & SFO1.
    Decommissioned our Phabricator install in NYC2 & AMS2.
    Decommissioned our warm DR MySQL cluster in AMS2.
    Decommission and sell all our infrastructure in Flexential's Tampa locations.
    Setup and testing of Phorge in LON1 with our current GitHub setup being used as a mirror.
    Recreated our infrastructure from Tampa in LON1, FRA1 & FSN1.
    Setup our infrastructure tools from Flexential's Tampa locations in LON1, FRA1 & FSN1.
    Setup our Labs testing system in LON1, FRA1 & FSN1.

  • Version 2.0.18

    Added notice to the profile page to show if a user is banned.
    Fixed an issue with basic 7 which was stopping the challenge be marked as complete
    Fixed an issue with basic 3 which was not setting cookies correctly
    Fixed an issue with basic 15 which was not setting cookies correctly
    Fixed social enginerring 2 not making as completed correctly
    Updated the HBH core config and core code to allow cookies for the challenges to work correctly
    Added a notice to basic 7 if completed that your cache needs to be cleared to attempt the challenge agin
    Update the flash messages in basic 3
    Fixed basic 15
    Fixed a session error on prerequisite 2
    Allow staff to assign a reported issue to a different staff member
    Updated the z-index on our adverts
    Fixed an issue with the delete user command
    Added the reputation system to the artiles system
    Make sure the forum views id is a number
    Changed about us page to calaucate the current year so it not hard coded
    Released Timed 1
    Released Timed 2
    Released Timed 3
    Fixed a number of Typographical errors across the site.Fixes HBH Issue 78.
    Fixed an issue with basic 9 stopping the challenge being marked as complete
    Make sure when sending a conversation that the subjet and message has required content
    Changes to the donation history UI
    Updated the view count command so if a deadlock is found the command will run again automatically
    Update dependencies across the site to resolve known CVEs

  • Version 2.0.17

    Allow feature requests to be private
    Only show the feature request system to logged in users
    Remove a href on search box. Fixes HBH Issue 57.
    Update forum titles for the challenges to match the new names. Fixes HBH Issue 52.
    Added the option to download the patch challenges content. Fixes HBH Issue 54.
    Fixed an issuse with the flash messages on Basic 15
    Fixed an issue with news submissions
    Fixed an issue steganography 20
    Fixed an issue with the create notes forms
    Fixed an issue with the search form
    Added some new validation to the lost email verification system in the sign up system
    Added some new validation and changed the logic in the login system for deleted user accounts
    Added a new command to check for deleted user accounts
    Don't show deleted users in the staff dashboard
    Don't show deleted users profile to staff on the profile page
    Updated the view count command to truncate tables when the command completed successfully
    Fixed a number of different issues across the site caused by the deleted user system
    Fixed an issue were the description was not being saved on the feature request system
    Added a new command to recount users reputation
    Run the recount of reputation in production.Fixes HBH HBH Issue 59.
    Added reputation system to issues and HOF
    Ensure a deleted user shows the ghost system user
    Update dependencies across the site to resolve known CVEs

  • Version 2.0.16

    Added a system to log empty threads so they can be removed to clean up the forum.
    Added auto cache clearing system for blogs and news post.
    Released Reverse Engineering 1.
    Released Reverse Engineering 2.
    Released Reverse Engineering 3.
    Fixed an issue with editing thread posts Issue #41.
    Moved to self host Font Awesome.
    Change the count of blog & news item shown on the home page.
    Fixed an issue with challenge page titles being incorrect.
    Update contact form to meet GDPR rules for contact forms.
    Made sure all challenges show the hint button.

  • Version 2.0.15

    Fixed an issue with announcement which stopped some announcement being shown.
    Updated the database for announcement system.
    Added a cache ttl of 6 hours to the announcement system.
    Added custom style for markdown's table of contents.
    Change the scheduled time that some backend commands run.
    Fixed an issue with the issue system which removed the Markdown formatting from the issues. Issue #20.
    Fixed an issue with the forum that caused some forums and thread to return a 500 error when pagination was used.
    Fixed an issue where missing older threads would returning a 500 error, the threads now return a 404 error.
    Added the n00b filter to the about me section in a user profile to prevent spam.
    Updated our frontend and backend dependencies.
    Added Markdown support to the news system.
    Added command to clear the home page cache when a blog or news item has being posted.
    Changed all Slack links to Discord based on community feedback and requests.
    All issues have been updated to the new Markdown format.

  • Version 2.0.14

    Added challenge part system to Basic Web Hacking 1 as a test for the new part system.
    Added a command to recount users challenge points to ensure they are correct.
    Added Steganography Challenge 18.
    Fixed an issue with the login system for 2FA & U2F which stopped last login time being logged
    Fixed backend command to consolidate views across the site.
    Fixed border colour on the challenges Issue #27.
    Fixed an issue which stopped users being able to view closed issues.
    Fixed an issue with basic 18 where the challenge would incorrectly accept some answers and not others. Issue #27.
    Fixed basic 20 and set the challenge to online.

  • Version 2.0.13

    Fixed an issue which stopped forum post edits being saved.
    Fixed an issue with the reputation system that caused a 500 error when down voting
    Fixed an issue with the report system that stopped reports being processed
    Fixed an issue with PHP types which stopped 404 pages being and instead shown a 500 error
    Fixed an issue with the admin panel for logical challenge submissions

  • Version 2.0.12

    Added and link to go back to the challenge index on basic 17 when you submit an incorrect command.
    Fixed an issue which stopped member being able to update their bio.
    Fixed an issue which stopped comments being checked by the n00b filter.
    Fixed an issue which stopped members reporting issues with the issue system
    Fixed Javascript 3 to accept the correct URL
    Fixed the security settings page for 2FA & U2F
    Fixed some backend code for 2FA & U2F

  • Version 2.0.11

    Added blog posts to the home page.
    Added a new profile UI.
    Added the option to sort users by points.
    Updated the database in the last round of major database changes.
    Updated the polls UI.
    Private issues can now been viewed by the author.
    Updated the announcement system so we can show different announcement to logged in and non logged in users.
    Updated the UI for the Meet the Staff page.
    Updated our ad code to help with funding the site.
    Removed legacy code for the polls.
    Fixed SPAG issue on the conversation system tool tips.
    Fixed an issue with the conversation page which showed an ! incorrectly on all messages.
    Fixed an issue with basic 13 which cause a 500 error .
    Fixed a recurring 500 error with the forum where the system was unable to get the parent name of the forum.
    Fixed an issue with forum thread titles missing causing 500 errors

  • Version 2.0.10

    Removed custom time for the articles database and updated the code to match the new time system.
    Removed custom time for the blog database and updated the code to match the new time system.
    Removed custom time for the code bank database and updated the code to match the new time system.
    Removed custom time for the FAQ database and updated the code to match the new time system.
    Removed custom time for the news database and updated the code to match the new time system.
    Removed custom time for the shoutbox database and updated the code to match the new time system.
    Started work on timezone support site wide.

  • Version 2.0.9

    Added a new issue reporting system.
    Updated the comment databases to remove columns and make preparations for threaded comments.
    Upated most of the comments code due to the major database changes.
    Updated the comment admin dashboard due to the major database changes.
    Made sure all hardcoded images have alt text.
    Fixed the reputation UI on the latest code bank page.

  • Version 2.0.8

    Update the forum database to remove extra columns that are no lonnger needed.
    Moved most of the forum to use Laravel relationships.
    Upated most of the forum code due to the major database changes.
    Updated the forum UI.
    Fixed basic 17.
    Moved annoucements from the forum to the blog.
    Added staff applications. Applications will open soon
    Updated advertisements code.
    Updates to the front-end and its dependencies
    Add rules pages
    Moved a number of pages around to different locations
    Made changes to all pages to resolve SEO issues with H1 tags
    Change the error pages to use hosted versions of its assets
    Fixed an issue with the terminate account system which stopped it removing users account that we set to delete by users.
    Updated Basic 6 to simply the code
    Updated Javascript 5 to simply the code
    Added Javascript 9 to have flash messages when the password is wrong
    Removed incorrect HTML comment in Basic 11
    Added link to the user profile on comments
    Added option to send PM to user on the profile page
    Fixed Javascript 6
    Fixed Javascript 7
    Fixed an issue with Application Cracking 18 which stopped anwsers being submitted for admin review
    Updated the reputation system to use Ajax
    Fixed an issue with the comment system which stopped comments being posted for feature request
    Fixed a type issue with the article system which cause a 500 error instead of a 404 error.

  • Version 2.0.6

    Update n00b protection to remove the 100 point limit.
    Updated the article database and remove some code from the article system now we have migrated.
    Updated the codebank database and remove some code from the article system now we have migrated.
    Fixed an issue with the wrong error exception being used.

  • Version 2.0.5

    Fixed an issue with the forum which stopped users creating or reply to threads.
    Fixed an issue with Steganography 16 which stopped the image being shown or downloaded.
    Fixed an issue with Steganography 17 which stopped the image being shown or downloaded.
    Fixed an issue with Steganography 19 which stopped the image being shown or downloaded.
    Fixed an issue with Basic 4 which stopped the challenge being completed.
    Fixed an issue with Basic 17 which stopped the challenge being completed.
    Fixed an issue with Basic 12 which stopped the challenge being completed.
    Fixed an issue with Basic 22 which stopped the challenge being completed.
    Fixed an issue with Basic 8 which stopped the challenge being completed.
    Fixed an issue with Basic 10 which stopped the challenge being completed.

  • Version 2.0.4

    Added n00b protection system back to the core to combat spam posts and general spam from accounts.
    Updated our advertisement code.
    Corrected a typo in tracking 1.
    Fixed basic 7.

  • Version 2.0.3

    Fixed an issue with Prerequisite 2 that was stopping users being able to complete the challenge.
    Fixed an issue with the count of challenges completed in each category being counted incorrectly for users on the challenge index page.
    Fixed an issue with basic 9
    Fixed an issue with basic 5.
    Fixed an issue with basic 10.
    Fixed an issue with Markdown image check causing timeout errors.
    Fixed an issue with Select2 on the conversation page
    Fixed an issue with admin page which stopped some admin functions from working correctly.
    Fixed a number of issues with the submission systems.

  • Version 2.0.2

    Fixed an issue with 2FA which was causing the image to be corrupt and stop people from enabling 2FA.
    Fixed an issue with the frontend Javascript for the avatar upload.
    Fixed a validation issue with the bug report system.
    Fixed an issue with the site search system.
    Fixed an issue with the code bank categories.
    Fixed an issue which stopped the challenge hints showing.

  • Version 2.0.0

    Complete rewrite of HBH
    New HBH logo
    Added new social media accounts
    Updated adverts to new advert code from our provider
    Added infrastructure mointoring tools for servers and network
    New public status page for HBH's infrastructure
    Complete rebuild of HBH's server infrastructure
    Complete rebuild of HBH's network infrastructure.

  • Version 1.4.3

    Added Cloudflare
    Added Adverts to help with costs of running the site
    Move HBH to a new server to help reduce costs

  • Version 1.4.1

    Fixed real 7
    Fixed various encryption challenges
    Updated Status Page
    Remove URL Shortener

  • Version 1.4.0

    Fixed various challenges
    Fixed broken Timed links on the Profile
    Removed broken links
    Prep for override of HBH

  • Version 1.3.4

    Changed the news to be database driven
    ACP Updates
    Added del html tag
    Added staff page
    Fixed Real 18 FPD
    Removed old xml files
    Removed news_publication folder
    Removed themes folder
    Added assets folder for all images, js and css
    Update to the login system

  • Version 1.3.3

    Fixed FPD in Real 12

  • Version 1.3.2

    Updated the login system
    Changed the default hashing system
    Fixed RSS problems
    ACP fixes
    Fixed Real 13 broken image
    Resolved shoutbox problems
    Broken PM link
    Added VERSION
    Confirm delete added to EM notes
    Added HoV to affiliates

  • Version 1.3.1

    Javascript 8 fix and updated

  • Version 1.3.0

    New CAPTCHA System
    Removed old database table
    Fix an issue with the news not updating
    Updated developers
    New layout in testing
    New Issue system

  • Version 1.2.9

    New Article submission system
    Refactored ACP
    Database optimization
    Database changes
    Updated MDR rules

  • Version 1.2.8

    Refactored the Private Message system
    Refactored the Article system
    Refactored the main theme
    Removed some old Adverts
    Added a system to ban a user from using the Private Message System
    Added a report system for spam PM's
    Fix a server error which stoped developers from working
    Updated Developers

  • Version 1.2.7

    Implemented Forward Secrecy.
    Updated server software
    PHP Update
    Mysql Update
    Refactored the user profile page
    Change folder layout of user
    Updated Development page

  • Version 1.2.6

    Styx added
    Updated the main theme
    Updated some challenges
    Updated Jquery
    Updated Server software
    Updated Dev system
    HBH URL Shortener added (EM)
    Few minor fixes to the challenges
    Database updated, old querys removed
    Added Jquery UI

  • Version 1.2.5

    Core updated (Staff Only)

  • Version 1.1.6 - 1.2.0

    Server Updates and Core system changes (Staff Only)

  • Version 1.1.4

    XSS vulnerabilitys patched
    Forum layout updated

  • Version 1.1.3

    XSS vulnerability patched

  • Version 1.1.2

    Removed hardcoded Mod's from the forum
    Removed DEPRECATED functions from multiple files
    Patched a forum vulnerability
    Real 17 back online
    More forum fixes

  • Version 1.1.1

    Removed article adverts
    Removed the mentors and HBH Con forums and posts
    Removed old code and files

  • Version 1.1.0

    Fixed some broken links in the theme
    Changed the folder layout
    Moved some code to a class
    Removed some legacy code
    Fixed some problems with the user panel
    Removed some old DB querys that weren't need anymore
    Removed old HTML & CSS

  • Version 1.0.9

    Updated GeSHi to latest version

  • Version 1.0.8

    Patched theme layout
    Patched CSRF in images
    More changes to the Layout system

  • Version 1.0.7

    Added an SSL and now forcing all users to use it
    Added three new stegano challenges (Steg 25, Steg 26, Steg 27)
    Changes to the Layout sysytem
    New Real themes added for testing
    Added link to our Twitter account

  • Version 1.0.6

    Updates to the server
    Changes to layout class
    CSRF Patching
    Upgraded various parts of the code base

  • Version 1.0.5

    Changes to the theme
    Fixed bugs with the shoutbox
    Fixed Mod_Rewrite errors