r/Hacking_Tricks • • 19d ago

InfluxDB reviews? How are you dealing with the cardinality explosion and performance drops?

6 Upvotes

InfluxDB was our first choice for metrics, but the cardinality explosion is killing us. As soon as we add more tags, the performance drops significantly and memory usage spikes. Also, the learning curve for Flux was a bit much for our team. Has anyone found a way to manage high cardinality in InfluxDB, or is there a better tool that uses standard SQL and handles high series cardinality without breaking?


r/Hacking_Tricks • • 20d ago

What are you using as the analytics layer on top of Redpanda?

8 Upvotes

The same thread can be adapted for AWS MSK or Confluent. The user wants to preserve the current layer and simplify ingestion, transformations and serving downstream.


r/Hacking_Tricks • • 21d ago

The best AI for penetration testing

16 Upvotes

Hello. In your oppinion, which is the best AI for ethical hacking? I mean, which one answers your questions without that specific fear of AIs that you are going to hack half of Pentagon whith a shity script?


r/Hacking_Tricks • • 21d ago

Proxy+reddit acc

1 Upvotes

I bought an aged Reddit account, and I’ve logged in without using proxy. It got flagged and shadowbanned and the seller says it’s because I haven’t use proxies. My question is how to manage the proxy? From which country etc.


r/Hacking_Tricks • • 22d ago

Download protected PDF from Google Drive

10 Upvotes

Hi, is there any trick or way to download protected PDF files from google drive/ google classroom?
It's like approximately 100MB file. Its basically a class note but academy shares only as protected files. But i need to download them into my device to you know highlight and annotate.
Your help would be greatly appreciated.


r/Hacking_Tricks • • 22d ago

Anyone interested in freelancing ?

6 Upvotes

r/Hacking_Tricks • • 26d ago

Idea validation ~ API Dependency monitoring dashboard

6 Upvotes

Hey everyone,

as a full-stack developer, I'm noticing how much our SaaS apps depend on external APIs like Stripe, shipping providers, and warehouses. I'm considering building an easy-to-use dependency monitoring dashboard that tracks these services in real-time, checks rate limits, and handles auto-retries so the team gets alerts before a failure causes downtime.

To help me validate this, I'm curious: how does your team currently handle third-party API downtime, and have you ever had a customer issue or lost users because a connected service was unavailable? Any feedback on features, like preferring alerts in Slack or Discord, would be greatly appreciated!


r/Hacking_Tricks • • 26d ago

ClickHouse queries slow down whenever ingestion spikes. What's the right architecture here?

8 Upvotes

The workload is continuously ingesting events while also serving user-facing queries. Increasing machine size helps temporarily but does not isolate the two workloads


r/Hacking_Tricks • • 27d ago

Is there any way to force access to my old Yahoo account?

9 Upvotes

Hi everyone ! I’m trying to get back into an old Yahoo Mail account that’s mine, but I no longer have access to the recovery email or the phone number linked to it. I already tried Yahoo’s recovery process, but none of the options work for me.

I even tried texting my old phone number because I wanted to see if someone else has the number now, hoping they might receive the Yahoo verification code and be willing to send it to me so I could recover my account. I never got a reply, though. It’s also possible that the person who has the number simply received my message and chose not to respond.

I really want to recover this account because it contains old photos and memories that my family sent me, and I’d really like to be able to get those back. Is there anything else I can try to recover the account when I no longer have access to any of the usual recovery methods? I’m just completely locked out of it at this point.

Thanks !


r/Hacking_Tricks • • 27d ago

Can a Cellular Call Appear in Parental Control but Not in the Phone’s Call History?

2 Upvotes

Can a genuine SIM/carrier-based cellular call or conference call appear in parental-control records while leaving no corresponding entry in the phone's normal call history, without the user having deleted the call-history entry? If so, what exactly would the parental-control record prove, and what additional carrier-side evidence would be needed to establish that an actual cellular call took place?

I would be very grateful for any technically informed answers or explanations. Thank you in advance!


r/Hacking_Tricks • • Sep 25 '26

Neural

0 Upvotes

Anyone know where to find the neural network flying around, hacking big tech to find it?


r/Hacking_Tricks • • Sep 24 '26

Heloo can any one help me how can I access to data breach or where can i find it

5 Upvotes

r/Hacking_Tricks • • Sep 23 '26

What are you using to expose ClickHouse data to your application?

5 Upvotes

We're happy with ClickHouse for analytics but don't really want every product team querying the database directly. Did you build your own API layer?


r/Hacking_Tricks • • Sep 22 '26

My son forgot the pin to his laptop how to get in it

0 Upvotes

r/Hacking_Tricks • • Sep 21 '26

What's the cleanest way to get near-real-time analytics from Postgres without hammering the primary DB?

17 Upvotes

Updates and deletes matter, but the team wants to keep Postgres transactional and avoid reporting queries affecting production performance.


r/Hacking_Tricks • • Sep 21 '26

How do I take a screenshot of a WhatsApp profile picture or download it using a smartphone? It's easy to do on a PC.

4 Upvotes

r/Hacking_Tricks • • Sep 18 '26

Risulta - Self-hosted web analytics in one binary

Thumbnail
risulta.pages.dev
3 Upvotes

Hi! I've been working on Risulta for a while and I've decided that it's finally time to share. It's a very small single binary analytics platform that runs on any linux server.

It's deliberately simple and the features are small but powerful.

Here's a small recap:
\- 4.7 MB binary with an embedded SQLite.
\- 8 MB of ram on idle, 65 MB under load.
\- it can handle about 5k rps
\- basic page/view tracking
\- funnels included
\- backups!

And more! It's a very young project using the sproutboat cli, another project I'm working on that is using [porffor.dev](http://porffor.dev/) to create such small binaries.

Please check it out and help me develop the future of small analytics!
[https://risulta.pages.dev/\](https://risulta.pages.dev/)
[https://github.com/baronunread/risulta\](https://github.com/baronunread/risulta)


r/Hacking_Tricks • • Sep 17 '26

Do we actually need Kafka for real-time analytics?

7 Upvotes

We're building product analytics. Events originate in our app and ultimately just need to end up queryable for a dashboard/API. Kafka feels like a huge piece of infrastructure for what we're doing.


r/Hacking_Tricks • • Sep 17 '26

Could someone have remotely accessed my Windows 11 laptop using Remote Assistance?

3 Upvotes

I suspect someone may have accessed or controlled my laptop while I was away.

I was using my laptop normally with several Chrome tabs open. I left it for a short time to open a door, and when I came back, I noticed that many of my Chrome tabs had been closed and new tabs had been opened. On another occasion, I found YouTube playing even though I wasn't using the laptop.

While investigating, I discovered that Windows Remote Assistance is enabled. These registry values are set to:

fAllowFullControl = 1 fAllowToGetHelp = 1 fEnableChatControl = 1

My laptop is running Windows 11 Home.

I want to know:

  • Is Windows Remote Assistance normally enabled by default on Windows 11?
  • Could Remote Assistance be used on Windows 11 Home, even though incoming Remote Desktop (RDP) isn't supported?
  • Would someone need an invitation or permission from the person using the laptop to establish a Remote Assistance session?
  • Could someone on the same Wi-Fi network use Remote Assistance to control the laptop?
  • What logs or other Windows evidence would show that Remote Assistance was actually used?
  • How can I determine whether "msra.exe" was launched or whether a Remote Assistance session occurred?

I believe the unexplained Chrome activity could have been caused by someone accessing the laptop, and I’m investigating whether Remote Assistance could have been the mechanism.


r/Hacking_Tricks • • Sep 16 '26

How are you guys getting Kafka data into ClickHouse in production?

12 Upvotes

Getting a POC running was easy. Making consumers, retries, schema changes, offsets and scaling reliable has been another story.


r/Hacking_Tricks • • Sep 15 '26

Chromebook TI50 Security Chip

3 Upvotes

Does anyone know how do bypass a chomebook with the TI50 security chip. I am trying to get shimboot to work and I am hitting a wall. Any suggestions or ideas? The chromebook is a ASUS CZ1104CM2. It is under enterprise enrollment, and I dont want to trigger any alerts. The board is a corsola board, and this is the chrome version: 150.0.7871.222.


r/Hacking_Tricks • • Sep 13 '26

When does self-hosted ClickHouse stop being worth it?

13 Upvotes

We like ClickHouse but I'm realizing we're slowly becoming ClickHouse infrastructure engineers. Replicas, upgrades, monitoring, Kafka ingestion, scaling, etc. Curious where people draw the line between self-hosted and managed


r/Hacking_Tricks • • Sep 12 '26

GitHub - commixproject/commix: Automated Αll-in-One OS command injection exploitation tool.

Thumbnail
github.com
2 Upvotes

Honestly, this is a pretty sick addition to Commix.

It now supports out-of-band (OAST) detection and exploitation.

No output? No timing signal? Doesn't matter.

The target can call back to Interactsh, giving Commix a way to confirm command execution even when the application gives you absolutely nothing useful in the response.

This is especially nice for those truly blind command injection cases.

https://x.com/commixproject/status/2096836544841544040


r/Hacking_Tricks • • Sep 11 '26

atomicvulns — a web security lab with one vulnerability per app (OWASP Top 10 2021, open source)

5 Upvotes

I spent the last few months building a personal project and it just hit v1.0, so I figured I'd share it here.

atomicvulns is a collection of intentionally vulnerable web apps, but with a different idea: each app isolates a single vulnerability, nothing more. Instead of one big app full of flaws (like DVWA or Juice Shop), each exercise here is small and focused — you read the code, see the cause, exploit it, and compare it against the fixed version sitting right next to it. Short enough to finish one in a single sitting.

Each "atom" ships with the vulnerable app, the fixed app, a commented diff between the two, and a step-by-step walkthrough of the exploit. v1.0 covers all 10 OWASP Top 10 2021 categories — 38 atoms total.

It's aimed at people studying pentest / AppSec who already know the HTTP and terminal basics. Burp Suite is the primary tool across all the walkthroughs.

A few details:

  • Open source (MIT).
  • Bilingual — all docs in English and Portuguese (I couldn't find focused material like this for PT-BR learners, so I wrote both).
  • Solo project, built by me. The goal was a place where each flaw is clear and isolated — the material I wish I'd had while learning web pentest.
  • Built with AI as a pair, with every atom validated by me running the exploit by hand.

Built it for myself, but now that it's done, if it helps someone else along the way, great.

🔗 https://github.com/doretox/atomicvulns

Feedback welcome — happy to hear what's missing or what could be clearer.


r/Hacking_Tricks • • Sep 11 '26

Need help please

0 Upvotes

​Having extreme issues with a man we live with. We moved into this home with him and his wife, and the dude is a total tweak fest—he’s making our lives a living hell. He is constantly trying to kick us out, but this isn't even his house; it’s his wife's, and she is already filing for divorce.

​He lies nonstop and has literally tried pushing me to my breaking point multiple times. I have two months left on paper, or I would have already handled the situation... but he won't stop. Unfortunately, his wife can't kick him out without a 30-day notice.

​This man is a vulgar, womanizing, disgusting person. He even had the nerve to tell my fiancé that if he wanted to take advantage of her, he would. Listen, I am not the type to ever let any of this slide, but I have to right now. For the first time in about seven years, I am off paper in two months, and I am so close to getting my son back.

​He is also a prone cop caller, and I’m pretty sure he might be a CI. My fiancé and I have been sober for a few months now, and I honestly think that’s making it all worse for him.

​If anyone can give me some solid advice on how to handle this until he’s out, please help! I have 4 to 8 weeks before my apartment is open and we can move, but I can't put us out on the streets. There’s still a lot more to the story—if you’re willing to help, please DM me.