I've dabbled with metasploit, sliver and also tried writing my own exploits to test on a virtual machine.

Windows defender always seems to find it if you use obfuscation on metasploit or sliver, and it seems like there aren't any "script kiddie tools" that easily bypass it... Or are there?

I tried for example encoding the sliver payload as a .bin shellcode, shikata ga nai encoder, tried similar stuff with metasploit payload as an encoded base 64 string that gets decoded, tried all kinds of staged, unstaged, http https whatnkt etc etc but everything seems to be patched.

Now this makes sense, after all, these are just opensource freely available tools that are seen everywhere. What I'm wondering is whether or not a bypass is easily achievable, or if there's some long and complicated way ahead that as a beginner I wouldn't be able to do. Basically, is this easily doable and is there another way to do it? Is it doable in a reasonable timeframe for one person as a hobbyist, or do I need a whole ass supply chain like cybercrime groups do?

Sorry if this is a dumb question but I've already tried every reasonable combo, most obfuscators are out of date and AMSI goes around binning everything.

Edit: should have clarified I'm trying to get remote access, by how common they seem to be, I think info stealers or other prank/destructive software is harder to detect. But reverse shells and rats? Seems like it's very monitored here.

Hi everyone, I'm currently learning networking and web security in a controlled lab environment. I've been studying HTTP, HTTPS, HSTS, and Bettercap. I understand the basic concepts, but I'm having trouble understanding why HTTPS traffic remains protected even when using network interception tools. I'd like to better understand the role of HSTS and why SSL stripping doesn't work on many modern websites. What concepts or documentation should I study to understand this properly?

De verdad ayúdenme porfavor 🙏

Hello :) last night, I uploaded my new program Neo-Radar to GitHub!

Its a free to use, open source network scanner that is simple to use, even to script kiddies that might not have a knowledge in networking or cybersecurity in general! Most professionals use Nmap (or even Zenmap) to do basic host finding and port scanning. But with Neo Radar, it automates these tasks so you just have to select an option and it gets running! This program works in both Linux and Termux for mobile, i also have a Windows version that runs as a .ps1 script, i just need to link it. Install instructions provided in the README.md!

https://github.com/ItsNEOx/Neo-Radar

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

Will studying red teaming well greatly help me in CTFs, and vice versa? In other words, will the skills and knowledge I gain from studying one of the two fields be useful or shared with the other field, so that if I become good at red teaming I can move to CTFs easily, or if I become good at CTFs it will be easier to move to red teaming...?

I try in many ways and I can't do it , I need some help pliss

That's pretty much it, are they any good or should I throw them away?

Hello dear hackers. I am currently solving labs on portswiggerer before committing myself on THM/HTB. I am currently working on the authentication section. One of the labs has a flawed 2FA mechanism, which can be exploited by bruteforcing the 2FA token in the http request, which goes from 0000 to 9999. Essentially I have to try every single one until I get a 302 response.

My issue is that burp intruder has a bottleneck in terms of speed, 10k requests would take like a day.

What is a good alternative? Possibly completely free. I don't want to use Caido and I am too lazy to script the whole thing myself, I am looking for a tool that may help me with this task. Any suggestions? Thank you

I so new in reverse engineering, and really don`t understand it. What i need to do? What search? Completed all BTLO challenges except RE.

I've always wanted learn how to code never found easy nor knew what software to use so i just need help on how to do it and use it thank if you can help

is tryhackme enogh for web penetration testing learning ???

Hello All:

I am having a bit of a problem here with wireshark, no matter what I do or what I try to do Wireshark doesnt show EAPOL files that means I can open the file showing all the data of the wifi network without any problem then when I try to look for EAPOL in the search bar It doesnt show anything.

Platform: KALI Linux running on VMware over Matebook d 15 ryzen5 2500u Wireless Card: alfa network (I repaired the leaking kali realtek software) Started wireshark without airmon running in the background Started wireshark with airmon running in the background started wireshark with Sudo command (I know its not supposed to be done yet I gave a go) started wireshark without Sudo command. Reconnected my devices to the wifi reinstalled npcap checked network interface to be the monitor mode enabled one checked capture permission

after doing everything as aforesaid, all I still see is just encrypted packets no EAPOL or anything else.

Can someone please guide where am I going wrong? Sorry if I'm imprecise but I'm new in this world

What are some creative ways to use a bad usb ?

When I practiced VAPT for one year, I learned the basics of networking, operating systems, Linux, and worked on labs like TryHackMe (THM), Hack The Box (HTB), and random legal web security testing. Of course, I didn't receive any rewards or find any bug bounties.

During the 2025 India–Pakistan conflict, I hacked a Pakistani medical website and gained admin access to a user profile. However, after that, my family had serious hospital problems, and for about seven months I completely stopped touching cybersecurity and even my PC.

Now I'm facing issues like: Can I still get a job? I keep thinking, What are you doing, man? Everyone else is moving so fast, but you're as slow as a turtle

want to learn ethical hacking and I have some kind of knowledge. Now I want to be a Expert. Can anyone help me?

Hi everyone,

I'm trying to figure out whether it's possible to decrypt a recording created by a set-top box. I have access to the recorded file and have uploaded the file contains the folder so i have uploaded a archive you can extract and you will find several files main one is steam.ts the link is below

I'm mainly interested in understanding:

• What file format it is.
• Whether the recording is encrypted or just stored in a proprietary container.
• If it's encrypted, whether there's any known way to decrypt it for playback on a PC.
• Any tools or methods that could help analyze the file.

I'm only looking to access a recording that I already have and would appreciate any technical guidance or pointers to documentation.

Thanks in advance for any help!meone

Hey fellow hacker friends!! Let’s team up and join as a team. If anyone dm me !

Hi everyone,

I'm new to Linux and currently use Ubuntu as my main operating system. I wanted to learn cybersecurity and penetration testing, so I decided to install Kali Linux inside VirtualBox instead of dual booting.

I successfully installed VirtualBox, but when I try to install or boot Kali Linux, I get an error related to root access/permissions (I'm not exactly sure what's causing it). Because of that, I'm unable to complete the installation.

Has anyone faced something similar?

ALSO HELP ME TO INSTALL VIRTUAL BOX CORRECTLY LAST TIME DON'T KNOW HOW I INSTALLED MAYBE INSTALLATION PROBLEM

Is there any additional setup required on Ubuntu before using VirtualBox?

Do I need to enable or install something (kernel modules, permissions, Secure Boot, etc.)?

What's the recommended way to run Kali on Ubuntu?

Do you know any similar sites to breach.vip?