bksp_
enumerate. prove. document.
// FEATURED
// LATEST
claude-devkit: Repeatable Workflows for AI Coding Agents
AI coding agents are powerful but unstructured. claude-devkit gives them versioned, validated, multi-step workflows that turn ad hoc prompting into repeatable engineering.
SQL Injection by Default in Grafana (HTB — Jupiter)
A walkthrough of HackTheBox Jupiter, demonstrating how Grafana's raw SQL passthrough to PostgreSQL can be exploited for remote code execution and full system compromise.
Abusing Common Windows Misconfigurations (HackTheBox — Active)
A walkthrough of HackTheBox Active covering anonymous SMB access, Group Policy Preferences exploitation, and Kerberoasting to achieve domain admin on a Windows Server 2008 R2 domain controller.
HackTheBox WriteUp — Ghoul
A walkthrough of one of HackTheBox's hardest machines — Ghoul. Zip slip exploitation, multi-host pivoting across Docker containers, Gogs privilege escalation, git history mining, and SSH session hijacking to reach root.