Intro to Academy

Por

Introduction

Hack The Box Academy is designed to make cybersecurity learning both engaging and efficient. Its mission is to deliver a dynamic, interactive experience where learners can enjoy the process while developing new skills. The platform follows a guided learning approach, ensuring that users can immediately apply their knowledge through hands-on practice.

Throughout the modules, you’ll encounter numerous practical exercises that reinforce the material covered. These activities not only help you replicate what you’ve just learned but also test your ability to adapt the concepts to new situations and challenges.

Most Academy modules conclude with a Skills Assessment, where you’ll be evaluated in a scenario that mirrors real-world conditions. This ensures that you can demonstrate both understanding and application of the entire module’s content.

Would you like me to make this version more formal/academic (e.g., for course documentation) or more casual/marketing-style (e.g., to attract learners on your blog)?

At the learning journey is divided into manageable pieces to make the content easier to follow. The largest unit is called a path, which is made up of several modules. Each module focuses on one specific topic and is completely self-contained. To make learning even smoother, modules are further divided into sections.

Some learning paths are directly connected to certifications. Once you complete all the modules in a path and pass the required exam, you can earn the corresponding certificate.

Example flow: Imagine a path with three modules.

  • Module 1 → Section 1 and Section 2
  • Module 2 → Section 1 and Section 2
  • Module 3 → Section 1, Section 2, an interactive activity, review questions, and Section 4

Even though a path may seem like a big challenge at first, splitting it into smaller modules and sections makes the material easier to absorb. You can start with just one section, progress step by step, and eventually achieve the bigger goal of certification.

Think of it like climbing stairs:

  • Sections → Modules → Exams → Paths → Certificates
    Each small step builds toward the larger accomplishment.

This approach not only helps you learn at your own pace but also ensures continuous practice. Along the way, you’ll test your understanding, apply your knowledge, and sharpen your skills—transforming what you’ve learned into real capabilities.

“Great things are not done by impulse, but by a series of small things brought together.” – Vincent Van Gogh

Modules

What is a Module?

A module is the fundamental learning unit. Each module functions as a stand-alone course that focuses on one specific topic. As explained earlier, modules are made up of several sections, and when grouped together, multiple modules form a path.

From the Modules page, you can click on any module to preview its summary. The summary outlines:

  • What the module covers
  • The expected learning outcomes
  • Any prerequisites needed before starting

Tip: You can click on the () icon to add a module to your Favorites / To-Do list, accessible anytime from your Dashboard.

Types of Modules

The Academy modules are divided into three main categories:

  • Offensive – focused on attack and exploitation techniques
  • Defensive – centered on defense, detection, and mitigation
  • General – covering broad or foundational concepts

Each module is also assigned a difficulty rating:

  • Fundamental
  • Easy
  • Medium
  • Hard

On the Modules page, you can filter by type, difficulty, tier, category, or even search by name to quickly locate the exact module you need.

Module Tiers

Modules are grouped into five tiers, which determine their cost in cubes and their completion reward:

TierCostReward
Tier 0 (Free)1010
Tier I5010
Tier II10020
Tier III500100
Tier IV1000200
  • Each module requires a specific number of cubes to unlock.
  • Upon 100% completion, you always get 20% of the cubes back.
  • Tier 0 modules are effectively free, since they cost 10 cubes and refund the full 10 once completed.
  • This system encourages learners to finish every module rather than just previewing content.

Important: The tier level of a module is based only on cube cost, not on difficulty.

If you have an annual subscription, modules included in your plan cost 0 cubes—but you still earn their rewards when completed.

Completing a Module

To successfully complete a module, you must:

  1. Work through all sections.
  2. Solve all exercises.
  3. Mark every section as “completed.”

Most modules finish with a Skills Assessment—a real-world style challenge that tests your grasp of all key concepts from the module. Passing it shows you have fully understood the content.

When you finish the final section (usually the Skills Assessment), you’ll see the Finish button. Clicking it redirects you to the Completion page, where you can:

  • Share your achievement on social media
  • Write a review for the module
  • Discover recommended modules to take next
  • Collect your module badge, viewable on the My Badges page

Sections

What is a Section?

A section is the smallest learning unit. Each section focuses on a specific aspect of the broader module topic and is designed to be completed in a single sitting.

For instance, within this Intro to Academy module, you are currently in the Sections part, which—quite fittingly—explains what sections are!

Types of Sections

There are two main kinds of sections:

  1. Theory Sections
    • These sections do not include practical exercises.
    • Their purpose is to build the theoretical foundation you need to understand upcoming interactive material.
    • They establish the baseline knowledge for the module.
  2. Interactive Sections 🔧
    • These make up the majority.
    • They involve hands-on practice, demonstrations, and practical examples.
    • Here, you are strongly encouraged to repeat and apply what you learn, so that knowledge is reinforced through experience.

Example checklist: Introduction ✔, Sections ✔, Exercises ✔

My Workstation

To support interactive practice, each module provides access to your own workstation (also called PwnBox). This is a Linux-based environment (Parrot OS) that comes preconfigured with the essential tools you’ll need.

With this workstation, you can:

  • Recreate the examples shown in the Academy lessons
  • Work through exercises
  • Tackle Skills Assessments

You can launch your workstation by clicking the Start Instance button at the end of any interactive section, or by selecting it in the My Workstation panel on the right side of the screen.

Completing a Section

To finish a section:

  • Click on the Mark Complete & Next button.
  • If the section contains questions, you’ll need to answer them correctly before it can be marked as complete.

If you prefer to skip a section or revisit it later, you can simply click Next, or jump directly to any other section via the Table of Contents.

Exercises

What is an Exercise?

Beyond the examples and demonstrations shown in interactive sections, most sections also conclude with exercises designed to test and reinforce your knowledge.

Each exercise is linked to a target system, which can be:

  • A Docker target
  • A Virtual Machine (VM) target

You can launch a target by clicking “Click here to spawn the target system!”. Once started, the system will display connection details in the format:

http://<IP>:<PORT>

If authentication is required, credentials (username/password) will also be provided.

Important: Only one target per user can be active at any given time. Targets run on a timer, which shows the remaining active time. You can extend or re-spawn the target using the available buttons.

Docker Targets

Most exercises—especially in web-related modules—use Docker targets. These:

  • Launch quickly (usually within seconds).
  • Require no VPN connection.
  • Can be accessed directly via browser or terminal.
  • Are instantly usable in most cases (though some may take up to a minute to fully initialize).

You can identify a Docker target because it does not display a VPN button.

VM Targets

More advanced exercises, such as those requiring Windows systems, Active Directory environments, or network-based labs, use VM targets.

  • VM targets take longer to spawn compared to Docker containers.
  • If you are using your Workstation (PwnBox), you can connect as soon as the IP address is displayed.
  • If you want to use your own machine, you’ll need to download and connect using the provided VPN connection file.

Completing an Exercise

Exercises often include questions or flags that must be solved to complete the section.

  • If you’re stuck, some questions have a Hint button to guide you.
  • Once you find the correct answer/flag, enter it in the field and click Submit.
  • Correct answers reward you with a certain number of cubes, which can later be used to unlock more modules.

Some questions are labeled Optional Exercises. These can be skipped by clicking Reveal Answer, and you can still complete the section without solving them.

Practice & Variance

While exercise targets are always based on the concepts shown in the section, they are not exact replicas of the demos. Instead, they introduce small variations to:

  • Ensure you truly understand the material
  • Gradually increase the difficulty
  • Build stronger real-world problem-solving skills
  • Beginner modules → minimal changes from the demo
  • Advanced modules → more complex and challenging variations

Paths and Certifications

What is a Path?

A Path is a curated collection of modules grouped under a broader subject. Paths are designed to give structure to your learning journey, guiding you step by step from foundational concepts to advanced skills.

  • Some paths are directly linked, awarded after you successfully pass the corresponding exam.
  • Since topics often overlap, a single module may appear in multiple paths.

Types of Paths

We offers two main types of paths:

  1. Skill Paths
    • Focus on developing a specific, in-demand skill.
    • Example: Operating System Fundamentals Path
      • Difficulty: Easy
      • 55 sections, 3 modules
      • Requires 30 cubes
      • Estimated duration: 2 days (based on full-time learning)
  2. Job-Role Paths
    • Tailored to prepare you for a specific career role in cybersecurity.
    • Example: Penetration Tester Path
      • Difficulty: Medium
      • 480 sections, 28 modules
      • Requires 1,970 cubes
      • Estimated duration: 43 days

Tip: You can estimate how long a path will take by checking the duration listed under its title. The estimate is calculated in 8-hour workdays and is the sum of all modules within the path.

Note: Enrolling in a path does not unlock its modules automatically. Enrollment costs no cubes—it simply allows you to track your progress and upcoming modules in your Dashboard.

Obtaining a Certification

An Certification represents one of the most important milestones within Academy. Certifications are tied to Job-Role Paths and are specifically designed to equip you with the skills necessary to succeed in real-world cybersecurity roles.

By the time you earn a certification, you will have:

  • Completed hundreds of sections and exercises
  • Worked through dozens of modules and Skills Assessments
  • Passed a multi-day, hands-on exam that simulates real-world challenges

This ensures that you are market-ready for the targeted job role.

Badges: Completing a path unlocks a new badge, and obtaining a certification earns you an additional badge to showcase your achievement.

Getting Help

Learning cybersecurity can be challenging, and it’s normal to get stuck along the way. Fortunately, the Academy offers multiple ways to support you whenever you face difficulties.

General Questions & Platform Support

If you need help with the features or functionality of the Academy itself, simply click on the Help button (chat bubble) in the bottom-right corner of your screen. From there, you can reach out directly to the support team.

Exercise & Skills Assessment Support

When exercises or skills assessments feel overwhelming, the Academy provides step-by-step solutions to guide you through the challenge.

  • Just click the Show Solution button located under the question.
  • This will display the complete explanation and answer.
  • Note: This feature is only available for annual subscribers and business customers.

Join the Community

One of the best ways to learn is by connecting with others who are on the same journey. We highly recommend joining the Hack The Box community, where you can:

  • Ask for help from fellow learners
  • Share tips and resources
  • Discuss your progress and challenges

You can engage with the community through:

  • Hack The Box Discord server (most active space for real-time discussions)
  • Hack The Box Forum
  • Hack The Box Subreddit

Being part of the community not only helps you overcome challenges faster but also makes your learning journey more fun and engaging.

Next Steps

You now understand the core foundations of the Academy—which means you’re ready to begin your hands-on learning journey!

Pick a Path

To make the most of your progress, we strongly recommend choosing a structured path instead of jumping between random modules. Paths guide you step by step, ensuring you build skills in the right order while staying motivated.

For absolute beginners in cybersecurity:
Start with the Junior Cybersecurity Analyst Path. This path requires no prior experience and is designed to prepare you for the the Certified Junior Cybersecurity Associate certification.

By completing it, you’ll gain the essential knowledge and confidence to move on to intermediate-level certifications and more specialized paths.