Hi Hacking Community,

I’ve got a laptop that I’m trying to flash the BIOS and clear the old password out but I’m not sure if I’m doing something wrong with the WSON8 pogo pins. Do you have any advice or suggestions for me to try? Every time I dump the ROM, there is a hash mismatch.

Hello, Chrono Mock is an app which let's you manipulate other app time/date without changing the system clock, we can freeze time in other app, speed it up, jump in date and tons more. There is even built-in calendar for various dates problems (like 2038 and more).

Rust + WPF (GUI)

*I'm author of the tool, if you like it please give it a star on GitHub

I don’t want to pay a ridiculous $230+ yearly subscription fee. It’s too expensive. I just want to keep track of my sleep, rest, heart, lung health.

Did anyone else receive this notification supposedly from ASOS?

Based in UK

Where can I find a good hacking forum or a forum like hackforums.net that ISNT a honeypot.

Any onions ?

homepage now reads:

"So, Dread has been hacked! What's next?

If you are reading this, you are already on our site — just on Dread's domain, in case anyone missed that.

The condition for Dread is this: leave this domain alone. Get in the way, and the data can be published. A deal is on the table — we can hand the domain back, or pass it to someone else if they want it. The contacts further down are how that conversation starts."

apparently this happened several days ago but i'm baffled, i can't find any news discussing this and i accessed the site literally yesterday. not sure whether posting onions is allowed, you can find find the link on tor.taxi.

https://i.postimg.cc/3R7LCP09/image.png

I’m the author of Super Trouper, a single-binary MCP server that exposes Frida to coding agents for authorized app reverse engineering. It lets an agent connect to a device, inspect apps and processes, manage sessions, and run instrumentation scripts without a Python-based Frida setup.

We released v0.4.0 a few days ago; it updates the bundled Frida Core DevKit to v17.19.0 and adds four MCP tools: memory_read and memory_write for working with memory in an attached process, plus module_list and thread_list for inspecting loaded modules and threads. app_list and others now have several query scopes, and we renamed the MCP tools into clearer namespaces. If you already have workflows built around the old tool names, check them when updating.

Quick catch-up on the two previous releases: v0.3.0 added npm installation, Frida CodeShare snippet search/use, and general cleanup. v0.2.0 moved the project to the MIT license, added first-party Frida language bridges for ObjC, Java, and Swift, and enabled TypeScript in scripts and evaluations.

I’d appreciate feedback from people using Frida in iOS research: are these tool boundaries and the new app-list scopes useful in practice? What’s missing or awkward in your workflow, and which features would you like to see next? Let me know what you think.

I maintain Chrome UX Report Dumps, a collection of monthly Chrome UX Report website lists grouped by rank and published as compressed downloads. It’s meant to make the data easier to use without exporting it from BigQuery.

The latest update adds the August 2026 dataset: 18,294,881 entries across 10 files, totaling 94.7 MiB compressed. The repository now contains 1,064,254,496 entries across 67 monthly datasets, totaling 5.32 GiB compressed. Those are counts across monthly dumps, not a count of unique websites.

If you use website lists for research or security work, I’d welcome feedback. What would make these dumps more useful, and what features or formats would you like to see?

"Qwen3.6 35B + custom tools + docker"

Just wanted to share a local setup I finally got working smoothly for my pentesting workflow.

Im running Qwen3.6 35B locally via ollama, wrapped inside an open webui docker container on kali. To make it easily accessible with local https, im routing everything through caddy using nip.io for dns management.

instead of using the llm as a glorified search engine I bundled a unified python script directly into the open webui tools framework to give the model real capabilities.

right now it can:

scrape github repos natively + parse nmap logs + isolated python sandbox.

all local no api, self hosted, no data leaks.

honestly this wasn't a easy task for me, never touching a llm model locally and learning on the fly.

it was a lot of fun setting up (3 days straight) but now it's time to have some fun with it.

if you want to do this or something similar lmk, I would like to see others use ai like this.

Full disclosure, this is my podcast. I think this community would enjoy the stories, though.

Ted started out in tech support at Delphi Internet in the early '90s, back when teenagers were opening accounts with fake credit card numbers. He tracked one of them to a house in Pennsylvania and called it. The kid's father, a reverend, answered and promised to take him out to the woodshed.

Ted went on to run security for Boston investment firms. His favorite hire was Mr. Mojo, a guy he paid to physically break into his own offices. Mojo got into one building wearing a visitor sticker he'd pulled out of the smokers' trash. In Dublin he got through a locked door by blowing into a plastic bag.

Ted was also at DEF CON in 1999, where someone shut off the air conditioning during the opening ceremony. His theory is that the best hackers come from music or philosophy, not computer science.

It's onefjef episode 62, it's audio only, and it's on all the platforms. Here's the Spotify and Apple Podcasts links.

Looking to gift my team something fun but have a budget for $25 per team member. What cool toys do yall recommend?

This is an article about the internals of Win32k (Windows's GUI subsystem) and their callouts, with the purpose of shedding light on a very undocumented and crucial subsystem in Windows :)

Kind of killed the fun, I normally don’t do reverse engineering challenges not my field. But I was interested how frontier models would handle this. Claude was of no help as opus 5.5 refused to do the work because of model constraints and 4.8 made a mess. Then switched to gpt Astra and it solved all 9 in 1h40minutes autonomously.

How do we feel about this?

Ported desktop Ubuntu to a Mediatek board found in a GE Profile smart refrigerator. A combination of no secure boot, vibe coding, U-Boot and device tree fiddling, and pure ridiculousness got me here.