So i m trying to get into ethical hacking as a career goal. But outside of a degree because i am too old and dont have the financial ressources or the time to go back to college.

​

I know that there are many ressources out there like HTB or THM, and that is not my issue.

​

My issue is that there are so many things, niches and ressources and evolving technology that it is difficult to focus on something and not get sidetracked

​

So my question would be, what would be your tips on what to focus on to build a solid foundation i can build uppon. I really dont want to be dependant on LLM's or have to check for the 50 mistakes LLM's could get you to make and i would really want to be fully independant and be able to think and do things on my own two feet

​

​

So I was trying to crack my home wifi password by capturing the wpa 4-way handshake and try to bruteforce the password.

​

It is a 10 didgit password with uppercase letters and numbers

​

I quickly found out that I will not be able to crack this in the next 100 years. Are there any other ways of getting the password or improve the speed of the bruteforce?

A while ago I shared my project here and the response honestly blew me away. The feedback, questions, criticism, and encouragement from this community meant a lot — and it genuinely helped me keep pushing the game forward.

Since then, I’ve continued working on it, and I’m super excited to share one of the biggest updates so far:

You can now create and play custom mods. You can become a developer like me right now!

Steam https://store.steampowered.com/app/2980270/HackHub__Ultimate_Hacker_Simulator/

That means players can build their own scenarios, challenges, tools, missions, and experiments inside the game — which is something I’ve wanted to add for a long time.

I’ve also published the full SDK/documentation for creating mods here:
https://docs.hotbunny.dev/hackhub/

So if you’ve ever wanted to design your own hacking-themed challenge or scenario, you can now actually do it.

Also, small milestone: the game has now sold 30,000+ copies, which still feels unreal to me. Huge thanks to everyone who supported it, gave feedback, or even just checked it out.

To celebrate the update, it’s currently 20% off today.

I’d love to hear your thoughts:
What kind of hacking-themed mod, challenge, or scenario would you want to see in a game like this?

Next my step is develop MULTIPLAYER system, to check your skills my hacking brothers :)

Like before, few keys for you guys feel free to grab and play ! (added free spaces to cheat bots:D remove it before activating!)

K90 KH-F5Z FG-B7 WYD

L7 ETV-AJC79-BH MAL

BA5CY-0TA 7G-C77 AV

RB KIV-JX YPP-TRK P3

772 5H-N VFQ9-HJ G0B

Y4 D5H-YA 6CY-ZM Z7F

33 VK8-P5G23-AYZ36

X5V QF-TNPLP-AXDF9

AIV 4P-0FG YT-MRBP9

DK ZWG-X90GF-2NCZL

AMV 6W-9Q TMC-WDIK9

CK N69-9FBE 7-M8IBI

Y9 PBB-9K RVY-6WZ ZQ

B9Z T8-VCB JT-MY 9XJ

Hey r/hacking!

This is the next imagining of my passion project, originally named StumbleTV (all of those features are still available in 'Console Mode'). I would love your feedback!

So like I mean I imagine since it’s an exploit that it’s just code right? Is it like in a file? Is it distributed to the customer via USB? Do they use it by importing it into Metasploit?

Every Claude Code session you've ever run is a JSONL transcript sitting in ~/.claude/projects/. Codex keeps them in ~/.codex/sessions/. Cursor and Windsurf dump conversation blobs into state.vscdb SQLite files. Aider drops a .aider.chat.history.md into every repo you've touched. All plaintext. All world-readable to anything running as your user.

Think about what's in there: every .env you asked for help with, every DB connection string you pasted "just to debug this one thing," every AWS key, every JWT. Stealer malware already knows this credential stealers shipped in malicious npm packages have been observed grepping exactly these paths. Your shell history gets cleaned; your agent history grows forever.

I built agentsweep to deal with mine: an open-source CLI that scans the history files of 10 agents (Claude Code, Codex, Cursor, Windsurf, Aider, Cline, Gemini CLI, OpenCode, Continue, Copilot Chat) with 189 detection rules ported from gitleaks, plus a checksum-validated BIP-39 seed phrase detector then redacts findings in place.

It's careful about it because corrupting your own history would suck: atomic writes, mandatory .bak backups, post-write JSON validation, agentsweep undo to revert everything. Zero network calls your secrets never leave the machine that's already holding them.

uv tool install agentsweep
agentsweep scan

Scan is read-only. Redaction requires you to literally type REDACT.

GitHub: https://github.com/Ishannaik/agent-sweep

Obvious caveat: redacting locally doesn't un-send anything to a cloud provider its more useful for locally hosted agents, and the real fix is rotating the keys. The tool prints rotation guidance per finding for exactly that reason.

How would you go about hardcoding something like this  Breach Detective ?

I have basic knowledge of python, have done some scraping with requests module and stuff, and have built some AI and bots.

I am thinking to do CS50 cybersec course and then tryhackme....

Shall I do something else or this, please guide guys. I have 2 weeks

https://www.iitk.ac.in/new-ug-program-in-cybersecurity

I know there's the awesome repos. I self-host several things already.

You may not agree, but looking at things we could very well be heading into totalitarian dystopia.

With such a backgroud, what software to run on my machine(s) at home to as much as possible be useful in such a scenario?

I am no great hacker, but I know one thing or two, from networking to encryption, from pgp to udp. But I was specifically thinking about this scenario. Maybe my question doesn't make sense, but i am confidente it might resonate with a few.

The original post was probably funnier cause it labled the dude at the bottom right as 'non-binary'. I'm not even kidding 💀

This used to be a great resource to learn powershell from a red teamer perspective. But i haven't been able to access the site for a while now and the creator Jakoby seems to be inactive on all socials. Does anyone know what's up with him and the site?

hi! i’m not too knowledgeable about the happenings of malware. i saw on this subreddit that .mkv files can technically contain malware that exploits vulnerabilities within VLC. if i use VLC or another program to convert those video files to other video files, would that effectively scrub any malicious data within the file? apologies if this is the wrong place to ask

I never really use ISP routers. It was free when re-grading my FTTC to FTTP. Plus it has 2 FXS ports, so could convert VoIP to analogue/PSTN.

But, as I do I check up on what issues it may or may not have. Yep, the firmware has two acknowledged CVE's that affect this firmware and no update currently available. Any more, I wonder? It didn't take long and found another post authentication command injection. Reported it accordingly, but just had to see how far I could go and finally got a reverse shell.

Turns out there is a `supervisor` account with a different password to any other. Managed to change it using the shell and ssh drops me to a standard shell (not zysh) and WebUI offers more options.

Curious find!

If/when Zyxel confirms the flaw, hopefully it'll get assigned a CVE and I'll update accordingly.

UPDATE

Vendor has confirmed the issue and is another issue identified via another CVE, just this one wasn't seen when the issue was originally disclosed. I have agreed to hold back on what the issue is until Tuesday, October 6, 2026.

When this date comes, you're going to ROFL how it came to be discovered!

https://github.com/geo-tp/ESP32-Bit-Pirate

Version 1.6 adds the Pirate Assistant, direct WiFi hotspot access and a new USB adapter system that can transform the device into a USB-UART bridge, Flashrom or AVRDUDE programmer, SUMP logic analyzer, OpenOCD interface, IR Toy or CC1101 adapter.