No VPS? No Problem - Catch Reverse Shells Without a VPS
No VPS no problem - catch reverse shells without a VPS using gsocket, pinggy, and other tunneling services for CTF and authorized penetration testing.
Hi, I'm Surajit — known online as blackXploit.
I'm a BCA student passionate about cybersecurity, Linux, and web application security.
This is where I document what I learn while solving Hack The Box and TryHackMe machines, competing in CTFs, experimenting with web technologies, and building practical projects — mostly on the backend side of things.
Well, everyone's a developer until a script kiddie gets a remote shell on their machine. So instead of chasing pixel-perfect UIs, I focus on secure development — rate limiting, manual auth systems, business logic, secure file upload systems — because design really isn't my thing.
btw what you'll find here
- Hack The Box & CTF Writeups
- Linux & Windows Privilege Escalation
- Web Exploitation
- Enumeration Techniques
- Security Research
- OSINT & Digital Forensics — what I love the most
- Linux Notes & Networking
- Security Tools
I'm currently learning:
- AWS Penetration Testing
- Advanced Enumeration
- Active Directory
Thanks for visiting!
Latest Writeups & Articles
Google Colab Hack
google colab gone wrong !
HTB – Snapped
Hack The Box snapped machine writeup
Hack The Box Devarea Writeup | Complete HTB Walkthrough & Privilege Escalation
Complete Hack The Box Devarea walkthrough covering enumeration, initial foothold, exploitation, privilege escalation, and step-by-step techniques to capture user and root flags.
HTB – CCTV
Hack The Box CCTV machine writeup covering ZoneMinder blind SQL injection and motionEye authenticated RCE to root shell.