Hack The Box Unclaimed Stats (Medium Windows)
HTB Unclaimed: Season 12 week 7, a medium Windows box by amra13579. 3.2/5 from 88 reviews, 1,486 user owns in two days. Live stats and prep, spoiler-free.
Unclaimed is week 7 of Hack The Box Season 12, a medium Windows machine by amra13579, worth 30 points and 845 XP. It went live at 19:00 UTC on 2026-11-07 and has been up for two days, so the numbers are past release night but still moving. No chain, no flags.
HTB Unclaimed at a glance
| Machine ID | 1012 |
| Difficulty | Medium (30 pts / 845 XP) |
| OS | Windows |
| Released | 2026-11-07 (Season 12, week 7) |
| Status | active, two days live |
| Maker | amra13579 |
| Rating | 3.2 / 5 from 88 reviews |
| User owns | 1,486 |
| Root owns | 1,213 |
| User → root drop | 18.4% |
| User blood | 7m 46s by Wum0x404 |
| Root blood | 19m 51s by ahos6 |
Community difficulty votes:
| Bucket | Votes | Share |
|---|---|---|
| Medium | 276 | 33.7% |
| Too Easy | 133 | 16.2% |
| Bit Hard | 110 | 13.4% |
| Easy | 93 | 11.3% |
| Hard | 73 | 8.9% |
Total votes: 820.
Is HTB Unclaimed hard?
About as hard as the label says, with root as the part that holds people up.
The 820 votes split almost evenly around the label: 285 below Medium (34.8%), 276 on Medium itself (33.7%) and 259 above it (31.6%). Weighted across the ten buckets it scores 50.3 out of 100, second lowest of the six Mediums on the live board, just above DutyBound’s 48.2.
The drop is the number that stands out. 273 of the 1,486 players with user have no root yet, 18.4%, the widest of any Medium on the board by a distance: DanglingTree is next at 7.8%. Two days in, part of that gap is people still mid-box, and it usually narrows as root owns catch up.
It is also a pattern this season. Every Season 12 Windows machine has a wider drop than every Season 12 Linux one: Touch sits at 23.6%, Unclaimed at 18.4% and Autopilot at 11.8%, against 1.3% to 4.9% on Layover, Stream, DutyBound and Takeoff.
The bloods match. Wum0x404 took user in 7m46s and ahos6 took root in 19m51s, 12m05s later.
3.2 from 88 reviews is the second lowest rating on the board, above only Stream’s 2.5. Eighty-eight reviews in two days is an early read rather than a verdict, and it will move.
amra13579 has three machines on their profile: Builder, Fireflow and now Unclaimed. The first two were both Medium Linux, so Unclaimed is their first Windows box. There is no earlier Windows work of theirs to read for hints, which makes the generic Medium Windows checklist below the best preparation available.
Season 12 has two machines left after this one: RedEye, a Hard Windows box, on 2026-11-14, and Handler, an Insane Windows box, on 2026-11-21.
What to have ready for Unclaimed
- Full TCP sweep first. On Windows the port list tells you the shape of the box: 88, 389 and 445 together mean a domain controller, 5985 means WinRM is a way in once you hold a password.
- Try null and guest sessions on SMB and anonymous binds on LDAP before anything else. A Medium often opens on what it gives away for free.
- If it is a domain, enumerate it as soon as something authenticates: users, groups, shares, SPNs and certificate templates, then BloodHound. Kerberoasting and AS-REP roasting are cheap to try.
- Read every share you can open. Configuration files, scripts and old backups are where Windows boxes leave the next password.
- Privesc:
whoami /allbefore anything else. Token privileges, ACLs in the graph and stored credentials decide most Medium Windows roots. An 18.4% drop says this is where Unclaimed holds people.
When the Unclaimed writeup lands
We publish full chains after a box retires, never while it’s active, and we don’t hand them to anyone outside the team. Unclaimed is still live, so the writeup goes up the week it retires, in the same format as the HTB Authority one.
If you’d rather not wait, the team’s internal notes go out in our Discord first. That’s also where people work through active boxes together, which is the part you’re actually allowed to do while Unclaimed is still live.
Related writeups
Retired medium Windows boxes we’ve already published: