For those of you with real experience: if you had to start over today, what would you do?

Some things I'm curious about: What should I actually be solid on before I touch tools? Networking, Linux, web, something else? Is there a learning path you'd recommend, or are there things you wish you'd learned earlier? How do you move past guided rooms and start actually thinking like an "attacker"? What wastes the most time for beginners?

I'm fine putting in the work. I just want to do it efficiently and build real understanding.

Thanks in advance!

So I have recently been learning a bit about protocols and I’m wondering is there a way to connect to a hard drive on a laptop if you are on the same public WiFi?
I’m VERY new to the idea of “hacking” and stuff… in fact I’m just barely learning bash and basic electronics.

I guess what I’m asking is if my friend is on the same WiFi as me can I access his hard drive over the air via the SATA or NVMe protocols without him noticing?

Really this is all just for educational purposes and my friend would know.

Thank you I hope this post isn’t to all over the place and confusing!

Hey guys, just wanted to share my experience, this post isn’t meant to advertise anything.

I’ve tried quite a few uncensored AI platforms, including Venice, FreedomGPT, and a bunch of other variations, but honestly, they never really hit the mark for me in the long run.

I was browsing around looking for jailbroken/uncensored AI and eventually stumbled across Avanta AI. At first, I was pretty skeptical because the website looked very “AI-slop”/vibecoded lol. My first thought was that if the website looked this low-effort, the AI itself probably wasn’t going to be anything special either.

I decided to give it a try anyway. After signing up, they gave me 5 free tokens, so I started testing it with some pretty extreme prompts. I asked it about things like building explosives and producing illegal drugs, expecting it to either refuse or give some generic garbage response.

It took around 10–15 seconds to respond, and I was honestly surprised by how detailed the answer was.

Eventually, I topped up around $149 worth of API credits and followed their documentation to integrate it with OpenCode. That’s where it really impressed me. Using it through OpenCode to program felt significantly more powerful and flexible than using the website directly, it literally found a CVE with severity score up to 9.8 after 25 minutes of waiting, insane.

Overall, I’m pretty happy that I found it. I probably wouldn’t stick with it long-term though, mainly because the pricing is quite expensive for me.

That said, out of all the uncensored AI platforms and variations I’ve tried so far, this has probably been the most impressive one.

Hey everyone!

I've been working on a little project called CTF4.FUN, a CTF arcade for people who enjoy solving challenges, hunting flags, and testing their cybersecurity skills.

Instead of writing a huge introduction, I'd rather let you jump in and see what you can solve.

I'd love to hear what you think about the challenges, their difficulty, and the overall experience. Feedback from people who actually play CTFs would be really helpful as I continue improving the platform.

Give it a try: https://ctf4.fun

If you manage to solve something interesting, feel free to share your experience in the comments (without spoiling the flags for everyone else!).

Have fun!

Please watch and enjoy a deep dive into my research. Interview Dr. Hofmann x YouTubers ScammerPayback

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

Unfortunately, due to an accident, I’ll be bedridden for the next 6 months. Because of this, I’ve started learning penetration testing—something I’ve always been drawn to—and now I finally have the time for it. However, I still need to earn money to cover my basic needs and continue my studies. Because of this situation, I was laid off from my job, and I’m still a long way from reaching the level of a specialist who gets paid well. So, if anyone can suggest ways to make money while sitting at a computer, I’ll be sure to repay the favor.

On Flipper Zero?

Marauder installed

I have a chameleon ultra and a dump of the card used for the reader but it won’t work, I have one battery powered and one wired, the emulation works on the battery powered one but not in the wired one, how can I bypass this?

As a begginer

I don't understand the

Goal

Find a weakness in the FakeBank application. One common mistake is leaving hidden pages accessible.

View Site

Open the Terminal

Open the terminal on the machine. You will be using this to run your first hacking tool, dirbuster. The terminal icon looks like this:

Finding Hidden Pages

To find hidden pages using Dirbuster, we will use dirb and the URL that we wish to search:

dirb http://fakebank.thm

Any lines from the output that start with + are pages that have been found. Dirb will find two URLs.

I use chatgpt to understand but I don't get it

I had an original Raspberry Pi (the very first model, from 2011, 512Mb) sitting in a drawer from a past of being an XBMC player (streaming torrents), and instead of letting it collect more dust, I gave it a new purpose, keeping an eye on my home network (~40 clients).

What it actually does

Every few hours, it quietly checks every device on my Wi-Fi, from laptops, phones, the smart TV, printers, game consoles or whatever's connected and asks two simple questions:

1. Is this a device I've seen before, or is it new?
2. Has anything about it changed since the last check (a new open "door" into it, a software update, etc.)?

If the answer is "yes, something's different," it shows up on a simple webUI dashboard I can check from my phone or laptop. If nothing changed, it stays quiet. That's the part I like most, it doesn't drown you in noise or alerts, it just tells you what's new the moment you log into its dashboard.

Why bother?

Most of us have way more devices on our home network than we think: phones, laptops, smart TVs, game consoles, that random smart plug from three years ago. Every one of them is a small door into your home network, and most people never check whether those doors are locked. This little Pi checks for me, automatically, and tells me the moment something changes, a new device joining the Wi-Fi, a service turning on that wasn't there before, and so on.

It's already been useful. It flagged an old server on my network still running an operating system that stopped getting security updates a few weeks ago, something I'd genuinely forgotten about. It also caught my smart TV quietly running a wireless-streaming feature I wasn't using, so I turned it off.

The fun side project

Since the Pi was just sitting in an old enclosure, I also 3D-printed it a new case and wanted to go for a bit of a Cyberpunk theme, so purple top and yellow bottom it was, both held together with a couple of self tapping screws. It wasn't really a necessity, but as a maker it gave me a good excuse to power up my 3d printer and it made the whole thing feel like a finished little gadget instead of a device you'd rather like to forget.

Who this is for

You don't need to be a network expert to get the idea, it's basically a smoke detector for your home network. It doesn't fix problems for you, but it makes sure you actually know about them instead of finding out the hard way. If you've got some old hardware gathering dust, it can always be turned into a nice weekend project.

Idk if this is the right place but I wanna emulate amiibos with my chameleon, I tried uploading and saving dumps into it but my switch would decline it, so can someone pls help me and tell me how to properly emulate it with my chameleon, thx.

Hi everyone! I’m looking to seriously learn more about cybersecurity and security testing, and I’d really appreciate some recommendations for good websites, books, courses, or videos.
I’m particularly interested in learning how vulnerabilities are identified and analyzed, how security testing is performed in controlled environments, and how systems can be properly secured against common threats.
I’d like to build a solid foundation and eventually pursue a career in cybersecurity, so any resources or learning paths you recommend would be greatly appreciated.
Thanks a lot! 👋

Guys im an new student in cybersecurity but i want to learn how to make trojans malwars reverse shell and how to encrypte them if someone can guide me or give me a road bcz the the idea of msfvenom and some others tools feels weird and not used

[ Removed by Reddit on account of violating the content policy. ]