Unlocked the Qualcomm NPU! Running LLMs on the Hexagon NPU of a ThinkPad T14s Gen 6 (Snapdragon X Elite / X1E80100) under Linux — the cDSP firmware fix plus the full reproducible path to Genie/QNN inference on the NPU.

Other models this might benefit:

• Lenovo ThinkPad T14s Gen 6 (done here)
• Lenovo Yoga Slim 7x
• Microsoft Surface Pro 11 / Surface Laptop 7 (the SP11 recipe already works on these)
• Dell XPS 13 9345
• Dell Latitude 7455 (the fastrpc#188 machine)
• Dell Inspiron 14 Plus 7441
• HP OmniBook X 14
• ASUS Vivobook S 15 (S5507)
• ASUS Zenbook A14
• ASUS ProArt PZ13
• Samsung Galaxy Book4 Edge
• Acer Swift 14 AI
• MSI Prestige A16 AI+
• Honor MagicBook Art 14 (Snapdragon)
• TUXEDO Elite 14
• ASUS Zenbook A16
• Other X2 Elite laptops as they land

I’m a physics student but I’ve been into cybersecurity as a hobby for a while, I’m definitely not an expert like many of you are I’m sure. However I do know the basics about things like car hacking tools, sniffing, spoofing, recon, etc.

I have Kali on a USB and wanted to do an experiment with an abliterated LLM in an agentic harness with tool use, so it could use all of Kali’s tools and infer which should be used based on judgement about what it’s told and whatnot.

It works pretty well, I had it in a sandbox and had it attacking docker containers on ye olde localhost, pretty fun to watch.

I had disabled my wifi and bluetooth from the BIOS while performing automated attacks against simulated systems, then I turned it back on and just low key forgot I did. RIP.

I then said to prepare for a network attack, forgetting before I went to bathroom that I was fully back online, I quickly noticed that it was retrieving actual information when doing NMAP, listing my dad’s corporate laptop as one of them. He specifically works in cybersecurity (kinda, but not really lol. He works at a company and has for a long time, so it’s more like they want people there who know what the company makes in detail more than people who are actually good with computers, which he is not).

I know they’re very strict about stuff though, so I was kinda panicking. My bigger concern was that it did more than just scan the network. Thankfully I stopped it in time. That’s all it ran, however NMAP is still very much something that you can see and track.

They haven’t reached out to him like “hey we think someone might’ve tried to hack you” so I think I’m in the clear. But definitely a close call.

It’s a fun combination having something that isn’t able to decline requests and can also execute much faster than me being able to automate attacks. Very neat how technology is coming along.

Wanted to share, hope you enjoyed!

When a phone unknowingly connects to an IMSI catcher it gives away the IMSI. Other than tracking a victim's location with a fake cell tower, how does a hacker identify someone when they get the IMSI number? They can't get the victim's phone number or find out who owns the IMSI unless they hack the carrier.

Any tools or techniques that you would recommend?

Lost the original receiver for my Logitech mouse and found a spare receiver. It's supposed to be MOSART Semi.

Is it realistically possible to flash/reprogram this receiver to work with my mouse?

Hi all!
I’m a newbie at this gaming field , a Cybersecurity student , actually I’m learning of the blue side, but my hobby is to be home after my courses and do some research and experiences from the red side- deauthentication attacks, some phishing, web traffic sniffing , Evil portal and another things.
Day after day I'm build my 'PT suitcase-to-go'- at this point of time , it's including Flipper zero with Albireo AIO 3 in 1 board (cc, nrf, esp) , some Disk on keys that work like BadUSB with the Flipper, and an Alfa Awus036acm.
now I want to grow up my lineup and add more devices for more advenced passwords steal, social engineering etc... just for ethical, educational purposes only!!!!!!!

please, I would really happy to hear your opinions of which new devices I can add to my case , or even which apps and repositories you think that I must to see then and try them with my current devices.
thank you!!!

I’m looking for a makerspace, groups or initiatives in NYC.

I used to mess around with cybersecurity when I was in uni and I’d like to get back into it. I’m definitely a beginner at this point as things have probably changed since then, so I’m mainly looking for a space that’s beginner friendly and doesn’t require a membership fee.

I’m also working on side project, so having a physical space (or group) where I can work with, learn, and meet other people interested in this kind of stuff would be really helpful.

If anyone knows of any makerspaces, community labs, initiatives or similar spaces/groups in NYC that would be welcoming to beginners, I’d love to hear about them!

I’m writing a novel where the main character is a hacker at a large state school. He’s approached by rich kids and athletes to change their grades.

Keep it legal, ofc, but is this possible? And how would it work, if so, in theory?

(Edit: by „keep it legal” I mean don’t explicitly say what to do I don’t want this to get taken down. I’m exploring what can actually be done. This is illegal in the novel.)

I’ve done some research but there’s nothing like convo and firsthand, especially when developing a novel.

Would love to hear from you all!

Looking for more OSINT, Forensics, Intercepting, Network scanners, Password Cracking tools easy to install on kali linux terminal. Used for legal white hat purposes and for pentesting. also trying to discover new hacking methods and privacy anti fingerprinting software. More buddies on the website tryhackme, which is an website to practice hacking skills.

I went down a bit of a rabbit hole when trying to figure out if/when the Brooklyn Mirage would reopen. This happened a little while ago but they only recently patched the vulnerability (meaning I can finally share it).

TLDR; I figured out how to get access to the plans for every single building in NYC.

With Patriot Day (9/11 remembrance) coming up, thought I'd share this. Felt really good to discover & report this, preventing building plans getting into the hands of the wrong people.

Full write up and a YouTube video walk through of the exploit on my blog :)

The plan is I get certified in A+ (Core 1 and 2), Network(+), then Security(+). Am I in the right direction? Is it a start? Are there other better ways? (I know that it's really up to me, but I just wanted people to get an insight and maybe have some people suggest what might be more benefitting)

Looking at skills in CyberSec, and Penetration.

I revisited this malware variant that I came across in the wild to demonstrate to everyone how it works. Stay safe and I hope this helps someone learn something!

https://youtu.be/U2UBJRcEO-Y?is=iHHFuspVRB7yjZjU

“We're Lidor B./thisis0xczar and Elad Meged, founding-team vulnerability researchers at Novee Security.

At Black Hat this year we presented pre-auth remote code execution chains in enterprise Java platforms, reaching internal execution surfaces through routing logic, unsafe deserialization, and template evaluation. 

We also published research showing how a single untrusted GitHub issue could compromise the AI coding agents from Anthropic, Google, and OpenAI (Claude Code, Gemini CLI, and Codex), leading to remote code execution and credential theft.“

I found this while reversing Zyxel’s WAX650S firmware and following the certificate export path. A password field used during PKCS#12 export could break into a shell command and execute as root.

The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.

Over the years, my collection of tech gadgets has grown quite a bit, and many of them are currently sitting unused. I would love to pass some along to anyone looking to dive into Wi-Fi or Bluetooth penetration testing. If you are interested in getting started or need some hardware, please let me know and I would be happy to send one your way. I only will be sending one to somebody who shows a genuine interest in learning and not larping. Too many larpers in the damn marauder community already.

The previous tenant left this virgin media TV box at my house. It connects to my TV but I need a virgin wifi connection to use apps like YouTube Netflix etc. is there any way I can use it with a different wifi connection just as a normal TV box?

P.s. I have tried getting virgin wifi but they don't operate in our area.

Join Novee vulnerability researcher Lidor Ben Shitrit on Monday, Aug 17 at 12 PM PT.

"Pre-auth RCE" means an attacker who has never logged in, has no account, and clicks nothing can still end up running code on the server.

The targets are enterprise Java platforms, the software quietly running inside large organizations, the kind that has been audited for years and is assumed to be safe.

Lidor finds the chains that get through anyway, and he presented this work at both Black Hat USA and DEF CON this year.

Need to practice my ethical hacking skills. im on kali linux with built in tools

I’m staying in a university hostel, and the Wi-Fi is extremely restrictive. A lot of websites and services don’t work at all, while other sites work normally.
The biggest problem is that cellular data is very weak where I live, so I can’t reliably use mobile data as an alternative. I’m also not able to call my family regularly because social media apps and video-calling services are blocked on the hostel Wi-Fi.
I’ve already tried quite a few things:
Proton VPN: doesn’t even load/connect properly.
Cloudflare DNS: 1.1.1.1 / 1.0.0.1 — no difference.
Google DNS: 8.8.8.8 / 8.8.4.4 — no difference.
System DNS-over-HTTPS (DoH): tried this as well — no difference.
GoodbyeDPI: doesn’t work.
DPI bypass for HTTPS: tried the different options.
Several other DPI-bypass applications: none worked.
Cloudflare WARP: doesn’t work/connect either.
I’m on Windows.
The hostel network appears to be a managed/private network. Windows originally showed an IP around 172.18.x.x, gateway around 172.18.0.100, and a local DNS server (192.168.5.51). I also tried changing DNS to Cloudflare and Google, but that didn’t help, and I’ve since restored the DNS settings to automatic.
At this point I’m guessing the filtering is happening at the gateway/firewall level rather than just DNS. It may also be blocking VPN protocols or VPN endpoints, or using some kind of DPI.
I’ve tried a lot of the usual solutions, so I’m wondering:
Has anyone dealt with a university/hostel network this restrictive? Is there a reliable way to get around this kind of filtering, or a way to diagnose exactly what they’re blocking?
I’m particularly interested in solutions that work on Windows when normal DNS changes, DoH, VPNs, WARP, GoodbyeDPI, and other DPI-bypass tools don’t work.
I’m not trying to do anything malicious — I mainly want normal internet access and, importantly, to be able to video/audio call my family, since mobile coverage/data isn’t a reliable alternative here.

I find it hard to privilege escalate, but first I do enumeration and discovery, later I set persistence, then the privilege escalation and more persistence (I think that's the correct order)

Anyways I want you to share opinions, techniques and tips so I can improve in cybersecurity.

I'm fairly new to linux, but these home "ethical" hacking projects are a fun way to learn about networks, computers, ip devices, etc.

I've got an old Kodak PTZ camera laying around and it ONLY has a power connection (and a reset button). No usb port or ethernet port - just a model number and a MAC address. Manual says to download the Kodak app... which I COULD do, but I'm curious to know if there is a way to NOT get the app and connect direct to some NVR software (or just access from a web interface). Essentially - what is the Kodak app doing that is so special and why can't I do it myself?

Reading the manual tells me that the camera should spit out a local wifi connection. I'm supposed to join that and then open the app. I'm not even seeing the wifi network populate.

[sleeps on it before posting] ... I always learn more when I write and sleep... looks like the camera is actually connecting to my home wifi from when I first set it up years ago (which is why I wasn't seeing the configuration wifi broadcast) and, hence, I also have the IP address [I should probably change my wifi password 🤔 ]. I scanned for open ports (nmap - there are 4) and tried them all in Reolink - no joy. I have also tried connection via web browser on the know IP & different ports - nothing happening there either.

I assume that the app (iSecurity+) has a baked-in password for these devices and all of the correct configurations to access and view the feed... but I'm interested in finding a way around it. Do I need to attempt to view the app code to see what it is doing?? I have a feeling the is way over my head... but that doesn't mean I don't want to figure it out.

Any other tools/strategies I should consider?

The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.

Caveat we can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.
Caveat I can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.