HTB Cohort Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
Hi, I'm Surajit — known online as blackXploit.
I'm a BCA student passionate about cybersecurity, Linux, and web application security.
This is where I document what I learn while solving Hack The Box and TryHackMe machines, competing in CTFs, experimenting with web technologies, and building practical projects — mostly on the backend side of things.
Well, everyone's a developer until a script kiddie gets a remote shell on their machine. So instead of chasing pixel-perfect UIs, I focus on secure development — rate limiting, manual auth systems, business logic, secure file upload systems — because design really isn't my thing.
btw what you'll find here
- Hack The Box & CTF Writeups
- Linux & Windows Privilege Escalation
- Web Exploitation
- Enumeration Techniques
- Security Research
- OSINT & Digital Forensics — what I love the most
- Linux Notes & Networking
- Security Tools
I'm currently learning:
- AWS Penetration Testing
- Advanced Enumeration
- Active Directory
Thanks for visiting!
Latest Writeups & Articles
HTB Enigma Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
HTB Devhub Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
HackSmarter AWS Privilege Escalation Lab | wp2shell RCE to Secrets Manager
AWS privilege escalation lab writeup: Pacu enumeration, Lambda credential leakage, wp2shell WordPress SQLi RCE (CVE-2026-63030, CVE-2026-60137), EC2 IMDS credential theft, and AWS Secrets Manager compromise.
HTB BedSide Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
Why You Should Never Blindly `sudo dpkg -i` Unknown .deb Files
A hands-on look at how easy it is to backdoor a Linux package, and how to stop it happening to you.
HTB Paperwork Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
HTB Reactor Writeup
Due to Hack The Box policies, this writeup is protected and is not publicly served while the Hack The Box machine is active.
HTB Helix Writeup
Complete Hack The Box Helix walkthrough covering Apache NiFi RCE, lateral movement to operator, and OPC UA-based privilege escalation.