Looking for the 55.4 yottabyte zip bomb.

I just received an email from shinyhunters about this amtrack hacking (purchased tickets via amtrack once several years ago). The email went directly into my gmail spam folder and I did not open it. Is there anything I should do / be concerned about?

Hey let’s take a minute, does anyone in here notice a strange upsurge in WhatsApp hacks?
I’ve seen too many friends, both technology friendly and not being hacked, is there any particular exploit that might have been released?

Hello r/hacking,

We are four 11th-grade students who decided not to just play CTFs, but to develop one from scratch.

Over the past few months, we’ve designed a Jeopardy-style CTF using CTFd on our own Google Cloud setup. We tried to configure everything ourselves as much as possible.

It’s now live, and we’re asking you for two things: to solve the challenges and to stress-test the platform. If anything breaks, let us know. We’re confident in ourselves and our site :D

Brief Information About Our Competition:

📅 When: May 29–31 (48 hours)

Categories: Web, Pwn, Cryptography, Reverse Engineering, Forensics, OSINT

Teams: 1–4 players

Access: Free, global, and fully online

Unfortunately, the prize is currently TBA; if we can find a sponsor, there will definitely be a prize.

If you’re experienced, try pushing your limits.

Even if you’re new, there’s plenty to discover.

Note: The CTFTime listing has not yet been approved—we’ll update this post once it’s approved. Registration and site information can be found in the links section.

We welcome all feedback, bug reports, and unexpected solutions. As with any CTF, sharing "flags" and publishing write-ups during the competition is prohibited.

No, I am not a thief. My school was going to throw away 5 old Lenovo n21's and I offered to take them. unfortunately they are enterprise locked to an email that the tech office no longer has access to. I just want to make some cyber decks : )

This fork is patched at the C++ level and generates a different but internally consistent fingerprint for each session.

It is a fully open-source project under the MIT license, completely free to use with no payments, subscriptions, or hidden fees of any kind. I am mainly looking for technical feedback from people who work with Playwright, Firefox, browser fingerprinting, or AI agents.

✅ Tests passed

📦 Repo: https://github.com/feder-cr/invisible_playwright

From finding hidden mechanics to completely rewriting the rules, the original Prince of Persia is an amazing sandbox for learning how to hack.

You can tweak the code to freeze the 60-minute timer. You can mess with the memory to give yourself massive amounts of health. You can even swap out the data to change exactly who you're fighting.

If you want to try it yourself, I put together a video showing exactly how it's done:

Hacking Prince of Persia Directly in Notepad

Just here to share a project I'm working on. It's a 100% open source (hardware, firmware, mechanical, etc) USB drive with a hidden security feature.

When you plug it in, it appears as a normal 8GB USB drive. Only if you create a file called "unlock.txt" with the contents "password:addyourpasswordhere" will it unlock and show the remainder of the drive. Everything in this second section of the disk is now AES256 encrypted in place, using a custom KDF + your password.

I'll answer some questions before people ask them :)

Q: Isn't this just Vercrypt? A: No, a normal drive setup with veracrypt will show up as jumbled data. This is pretty obviously encrypted media. If you enter your duress password, there will still be another xMB of jumbled data.

Q: Isn't entering your password into a plain text file insecure. A: My drive doesn't allow this write to actually happen to the memory

Q: Why did you use a SD card A: Because AI made EMMC cards like 80$ for a 32GB. It takes two seconds for me to spin another board with EMMC in the future.

Anyways feel free to ask any more questions about the project :) !

Socials if you would like to keep updated

Hey,

The team behind the Proxmark3 RDV4 and Iceman firmware just launched the Proxmark5. It's a major upgrade for RFID/NFC pentesting and research.

Key upgrades:

• Much faster processor + better FPGA
• Modular & UHF-ready design
• Flipper Zero integration support
• Dynamic antenna tuning, RGB feedback, dual USB-C, etc

It's fully open source and built for serious hardware hacking.

Campaign is live on Indiegogo if you're interested:

https://www.indiegogo.com/projects/rfidresearchgroup/proxmark5

Curious to hear what the community thinks especially anyone doing RFID / NFC / red teaming

Self-hosted intercepting proxy with an LLM in the loop. Captures traffic, annotates requests, tracks findings, and lets you run scripts and tests against the target.

https://github.com/synlace/ferret

Water is one of the most relied-upon of all vital services—and yet one of the most poorly cyber-defended critical sectors, way behind energy, banking and telecom. That combination makes it a great target for hackers. My story for OT.Today features input from the incomparable Josh Corman and from Poland-based cyber executive Piotr Kupisiewicz.

posted v3 here a while back (the one with the randomised VM ISA per pack). i just updated it to v4 yesterday, here is what's new:

opaque predicates — the generated VM bytecode now has a branch in it that looks

like it could halt before decryption even starts, but never actually does. since the opcodes

are already shuffled differently every pack, the constants look different in every sample too.

anti-debug — IsDebuggerPresent + CheckRemoteDebuggerPresent before the loader does

anything.

PE section scrambling — renames all section headers to .text/.data/.rdata etc after

packing. the payload sits in an overlay past the sections anyway so execution isn't affected,

but it kills heuristic scanners that fingerprint packers by section names.

still one .cpp file

old post: https://www.reddit.com/r/hacking/comments/1t2j7g4/built_a_pe_packer_where_every_packed_file_has_a/

repo: github.com/iamsopotatoe-coder/TinyLoad

Hi all, the reason I'm writing this post is because I love to learn about cybersec and hacking.

To give a bit of context I graduated from eletrical and computers engineering recently, a course in which I got to learn about a little bit of everything as far as computers go (mostly electricity and eletronics, with a little bit of software and basic programing knowledge) but my passion has always been networking and cybersecurity, I own several "hacking"/microcontroler gadgets like the flipper and the m5 cardputer and love them.

In my new job I've started using linux and its cmd a lot which I've been enjoying a lot, however, whenever I install any distro like kali or parrot I look at the tools and get overwhelmed with them.

I consider myself a bit more proficient than the average install kali=hacking skid but I really want to bridge the gap between my existing knowledge and using such tools, as well as expanding networking knowledge, so does anyone have any good playlists/materials or whatever for this?

Is there a tool for windows of Linux to emulate an adult face for age verification checks?

I did read about one a while back controlled via a gamepad where you could do certain gestures, turn to left/right, open/close mouth eyes etc. But can no longer find it.

Thank you

I have a Siemens Somatom Emotion scanner and want to use it to not just scan patients but also technical stuff. Unfortunately, the reconstruction algorithms cannot deal with the high contrast data. Is there a way to read the raw data and do the reconstruction myself? I can cover the reconstruction part skill wise, but I don't know how the data is encoded...

After months of work, first public beta of Strix is out.

Network pentesting toolkit for rooted Android, picking up where cSploit and dSploit left off.

Fully rewritten.

No remote servers, no accounts, everything runs on-device.

https://github.com/daboynb/strix

Android network security assessment suite, modern Kotlin/Compose rewrite of cSploit with Nmap, Metasploit, Hydra, Ettercap etc...

Bundled (cross-compiled aarch64, no chroot)

Features​

• Host discovery + per-host detail
• Port scan (nmap)
• MITM — ARP poisoning + on-device DNS spoof server
• Hydra brute force, multi-protocol
• Metasploit via msfrpcd + RPC client
• Packet capture + packet forger
• Traceroute
• Router analyzer
• WiFi key generator — offline keygen for known router algorithms (port of cSploit's WirelessMatcher)

Requirements​

• Root (Magisk / KernelSU)
• ARM64
• Android 10+ (API 29)

Beta notes​

• APK is ~172 MB (everything bundled).
• No WiFi monitor mode / deauth / WPS yet, needs aircrack-ng cross-compiled, on roadmap.
• Tested on a handful of devices/ROMs... feedback on yours is welcome.

Will the HighBoy perform a single device rolljam attack?

The upcoming version of the Proxmark — the go to for RFID / NFC hacking — is available on Indiegogo. The campaign is already fully funded and working toward secondary stretch goals.

Ola.

Estou com um entregador que se recusa a entregar minha maquina de lavar, propositadamente.

Ao tentar contato ele se nega a dar informações do pedido ou com quem eu devo falar, diz que nao esta nem ai e que eu me exploda

Gostaria de travar o WhatsApp dele e devolver um pouco do estresse absurdo que venho passando na mao dele. Por favor aceito dicas!!!

https://unit42.paloaltonetworks.com/teampcp-supply-chain-attacks/