How I Hacked a Cybersecurity Training Academy and Company !
A detailed blog about How I Hacked a Cybersecurity Training Academy & Company ! Real btw
Hi, I'm Surajit — known online as blackXploit.
I'm a BCA student passionate about cybersecurity, Linux, and web application security.
This is where I document what I learn while solving Hack The Box and TryHackMe machines, competing in CTFs, experimenting with web technologies, and building practical projects — mostly on the backend side of things.
Well, everyone's a developer until a script kiddie gets a remote shell on their machine. So instead of chasing pixel-perfect UIs, I focus on secure development — rate limiting, manual auth systems, business logic, secure file upload systems — because design really isn't my thing.
btw what you'll find here
- Hack The Box & CTF Writeups
- Linux & Windows Privilege Escalation
- Web Exploitation
- Enumeration Techniques
- Security Research
- OSINT & Digital Forensics — what I love the most
- Linux Notes & Networking
- Security Tools
I'm currently learning:
- AWS Penetration Testing
- Advanced Enumeration
- Active Directory
Thanks for visiting!
Latest Writeups & Articles
HTB Management Writeup | Hack The Box Management Walkthrough
HTB Management walkthrough: Hack The Box Linux box solved with OpenAM 16.0.5 pre-auth RCE (CVE-2026-33439), GLPI encrypted secret decryption, and rdiff-backup sudo privesc (CVE-2022-40093). Full writeup publishes when the box retires.
HackSmarter Aftermath Writeup | SMTP VRFY Enum to Roundcube Password Spray to apt-get Root
Complete HackSmarter Aftermath walkthrough covering Rustscan enumeration, SMTP VRFY user enumeration with smtp-user-enum, Roundcube Webmail password spraying with cubeSpraying, mailbox flag recovery, and root privilege escalation via passwordless apt-get APT::Update::Pre-Invoke.
HTB Abducted Writeup | Samba Printer RCE (CVE-2026-4480) to Root via systemd Drop-In
Complete Hack The Box Abducted walkthrough covering Samba printer share RCE via CVE-2026-4480, rclone obscure password decryption, credential reuse to scott, SMB force-user plus wide-links pivot to marcus, and root via systemd drop-in.
How I Got a .arpa Domain | Abusing IPv6 Reverse DNS to Host a Free Website
A step-by-step walkthrough on how to get a free working website on a .arpa domain by abusing IPv6 reverse DNS delegation through Hurricane Electric, configuring DNS with deSEC, and hosting a live site on Surge.
HTB BlockSynergy Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
HackSmarter: Casino Writeup | Complete Walkthrough (Flask SSTI to RCE to Docker PrivEsc)
Complete HackSmarter: Casino walkthrough covering full port scan, directory enumeration, source map discovery, IDOR-style room status exposure, Flask/Jinja2 SSTI leading to RCE, reverse shell as www-data, credential discovery via .bash_history, user pivot to david, and root escalation via provisioning.log credential.
HTB Support Writeup | SMB Share Loot → Hardcoded LDAP Creds → LDAP Password Leak → RBCD → DCSync Domain Compromise
HTB Support is a Windows Active Directory machine where anonymous SMB share access exposes an internal .NET tool with hardcoded LDAP credentials. Using the recovered account enables LDAP enumeration that leaks a plaintext user password via an attribute, leading to WinRM access. Post-exploitation ACL
HTB DanglingTree Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.