The Blog of Ethical Hacker
New on the site
Walktrhough: ShareThePainAD
November 12, 2026
Summary So we’re in. Well, “in” is a generous word — we’ve got a foothold on the internal network of hack.smarter, sitting at 10.1.126.160 (their DC, DC01). No creds, no history, just a network connection. The goal is simple on paper and brutal in practice: enumerate everything, exploit whatever’s exploitable, and walk out with full […]
Walktrhough: Sysco
November 12, 2026
Sysco, a Managed Service Provider, tasked us with an external penetration test against its Active Directory environment. I started without credentials and worked toward administrative access on the domain controller, following the evidence as it appeared. 1. Initial Recon — Finding Our Way In I started with RustScan against 10.0.25.216, then passed the results to […]
Walktrhough: BankSmarter
November 1, 2026
Scenario You are a senior operator on the Hack Smarter Red Team, tasked with a penetration test against a standalone Linux server. Your objective is to gain initial access and escalate privileges to root, emulating a worst-case scenario where a threat actor successfully compromises a critical asset. You have been given the IP address of […]
Walktrhough: DropFile
October 31, 2026
Objective Conduct an internal penetration test of a Linux server, identify vulnerabilities, obtain initial access, and escalate privileges to root. Assessment Summary The target exposed SSH (TCP/22) and an HTTP file-sharing application (TCP/80). Virtual-host enumeration identified a development site containing the application’s source code. Source review revealed an insecure SHA-256 secret-prefix signature construction and a […]
Protected: Walktrhough: Insecure FFmpeg configuration (LFD)
March 12, 2026
There is no excerpt because this is a protected post.
Protected: Stack Canary Bypass Using Out-of-Bounds Read and Format String Exploit
September 2, 2025
There is no excerpt because this is a protected post.
Stack Overflows for Beginners — Level 5
July 25, 2025
Welcome again to the Stack Overflows for Beginners series! In this post, we continue with the Level 5 binary and work on exploiting it to get the next flag — this time, with a twist: we’re going for a root shell! We’ll build on the skills developed in previous levels — identifying overflow points, calculating the EIP offset, controlling […]
Stack Overflows for Beginners — Level 4
July 24, 2025
Welcome again to the Stack Overflows for Beginners series! In this post, we continue with the Level 4 binary and work on exploiting it to get the next flag. We’ll continue exploiting buffer overflows, but this time, we’ll move toward achieving reliable reverse shell access by chaining key exploitation techniques. If you haven’t read the first part yet, I recommend […]
Linux Usermode Exploitation 101
July 24, 2025
Introduction The aim of this course is to train students in the fundamentals of Linux usermode exploitation. You will learn how stack memory works, how buffer overflows happen, and how attackers can take control of a vulnerable program. By the end of the series, you’ll be able to analyze simple C programs, identify memory corruption […]
Stack Overflows for Beginners — Level 3
July 24, 2025
Welcome again to the Stack Overflows for Beginners series! In this post, we continue with the Level 3 binary and work on exploiting it to get the next flag. This time, we’re dealing with a binary that uses the unsafe strcpy function, making it vulnerable to buffer overflows. We’ll exploit this vulnerability, carefully navigating through memory to gain control over execution […]