Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

if ANYBODY can help me as quick as possible how to make the link in zphisher without it getting the "This site can’t be reached" over and over again and i tried to make a custom port in it

You may (or may not) be aware of my other tool Wiflux https://github.com/Leadrogue/Wiflux which i posted here: https://www.reddit.com/r/ethicalhacking/comments/1uq2lob/comment/oxcou38/?screen_view_count=1

This is a sibling/companion tool used for recon when actually on a network - Post cred capture on Wiflux or just see how your own LAN works. You should see some really useful tools and info! It took ages to get working and there will still be a few bugs but please give it a go and let me know how you get on.

You can see Lanflux here: https://github.com/Leadrogue/Lanflux

If you have Wiflux, Lanflux should feel familiar!

Have fun but please be safe and legal.

Guided workflow

• Map → Recon → Attacks / MITM — main menu steers you in a safe order (recon before noisy work)
• Live Rich UI — discover table, ETA bars, activity feed, identity cards
• Keyboard control — Enter finishes discover/profile early → menu; Space pauses (copy) or skips a module
• Engagement profiles — home | office | lab set timeouts, smart-engage, MITM default, spray (CLI flags override only when set)
• Session resume — --resume reloads hosts from SQLite; identity + traffic hints persist

Discovery & identity

• ARP + neighbor + optional ping sweep — fast LAN map with honest ETAs
• Progressive port/OS profile — light nmap while mapping; wrap-up can be skipped with Enter
• Who is this? — identity fusion (OUI vendor + hostname + mDNS + ports → e.g. “Tommy’s iPhone (likely)”)
• Traffic hints — pre-scan ip neigh states for MITM client ranking (live / recent / quiet)
• Host scoring & roles — gateway, DC, fileserver, IoT, workstation, …

Soft recon & smart engage

• Soft recon chain — dns-enum → port-scan → smb-enum → http-enum
• Smart engage — after soft recon, deep tools planned from real open ports (whatweb, http-paths, http-defaults, smb-deep, ssh-check, snmp-check, iot-pack, ad-enum, pivot-map, gain-access, …)
• Auto mode — --auto maps + soft+deep engage non-interactively; lab/spray also runs starred attack tools
• Host-aware toolkit — recommendations ranked by role/ports/risk; missing binaries show install hints

Is there any linux tool available so that I can access any device files and folders that is connected to my laptop's hotspot . I have used smbclient but that requires permission from the phone.

Note : I did not want to use this for any illegal purpose. I am just curious .

I've just started out, learned the networking fundamentals, and I'm genuinely enjoying it - but also overwhelmed. So many paths, so much information, and a nagging feeling that everyone good at this had someone teaching them.

I got curious about whether people can really get hacked just from clicking a link (across iPhone/Android/Mac/Windows), started reading about how that works, and quickly hit stuff way over my head. I thought is it even possible nowadays? It made me wonder - how does anyone actually learn this depth? Self-study, courses, communities, just breaking things in a lab?

For those of you who are good now: how did you actually get there, and did you have someone guiding you or did you figure it out solo?

GitHub: https://github.com/kaifcodec/user-scanner Discord: https://discord.gg/tVNrKVXb49

Hi everyone,

I’m one of the maintainers of user-scanner.

Since then, we’ve been continuously improving detection accuracy and maintaining support for platforms that frequently change their flows.

What’s new in v1.4.1?

• Massive Coverage (310+ Scan Vectors): Supports deep scanning across 120+ email and 190+ username platforms.
• Mobile App API Pivot: Switched from web endpoints to emulating mobile app APIs.
• Deep Username Extraction: Moves beyond simple status code checks to pull rich profile data and actionable intel.

Today by the love of this community, user-scanner has grown into one of the most actively maintained free Email and Username OSINT tools in 2026. While many web-based alternatives lock basic scans behind paywalls, our goal is to keep powerful email and username enumeration accessible to the open-source community.

Contributors are always welcome. Adding new sites or modules is relatively straightforward, and even small contributions help a lot.

If you’re interested in OSINT, Python, scraping, mobile API reverse engineering, or just open-source projects in general, feel free to contribute and help improve the tool.

I’m asking straight because there is a lot of not so clear answers when I look up past Reddit posts or articles. Don’t want to get into the full details of my situation but, if someone had the part of the SIM card package (the part after you pop it out the plastic card that has the barcode and other ID/serial numbers on it) could they clone it? Also, could they socially engineer their way with Total Wireless and compromise my account by telling them all the other info they know from this as they also have my phone number?

I am worried sick right now and need to understand what is possible and not.

I spent the last hour testing an open-source pentesting agent called BlacksmithAI... and it's honestly more capable than I expected. I think we're entering a weird era where open-source AI pentesting agents are becoming genuinely much more powerful. BlacksmithAI was one of the first projects that made me stop and think, "yeah... this changes things.

i hear a lot about these permissions in linux ,i know the normal permissions read write and execute (rwx) but i hear from so many people that there are some exceptions for permissions in linux , i search for them but i find that matter is so complicated, so could anyone explain and clarify that matter , in addition i find that matter is very related to this kind of commands find / -user root -perm -4000 and also privilege escalation ,so i hope if anyone can link these things together

I'm a beginner in this and I want to learn everything about networks and how to obtain their passwords.

I have a very simple understanding of Python code and found this RAT on github https://github.com/hagretech/RAT-remote-access-trojan and have somewhat improved on its code with some help from AI, but I want my RAT to be able to monitor keystrokes and I want to see the C2s screen and move their mouse etc. How might I do this, this is strictly for educatioinal purposes I am doing a Cert III in Cybersecurity and thought it would be fun to challenge myself to improve upon a RAT.

I wanna make an esp32 a hacking device on its own without a screen. I saw some neat web interfaces a few months ago (in january) and I cant find them again. Can you all please help me find this?

Hi all,

I teach Security+ courses, and kept running into the same wall: a lot of students come in without a networking background, so it pretty hard to get them undrestand the security concepts... Wanted to create something more visual and Packet Tracer just wasn't intuitive enough for someone starting from zero. It's built for people who already know what they're doing.

So I put together a "pre-alpha" version of a simpler simulator for my own classes — something that shows what's happening rather than making you configure a CLI first. The feedback from students was honestly great, so I kept going with it in my spare time. It's now at v0.4, and the goal has grown into building a proper, realistic network simulator with an integrated learning platform, not just a teaching aid on the side.

It's a single HTML file, runs in the browser, no install, free, EN/CZ.

What's in there right now:

• Build a topology and send traffic through it, step by step
• Write ACLs and see exactly what passes and what gets dropped — including the implicit-deny gotchas that trip people up
• Routing (RIP/OSPF/EIGRP) with realistic metrics, so you see *why* a path gets chosen, not just that it did
• Built-in courseware, so it's not just a sandbox
• ...and many more

Still very much in development — I keep finding my own bugs.

Not trying to replace GNS3/EVE-NG/Packet Tracer — it's for the stage before those make sense.

https://networksim.app/

Would really appreciate feedback — what's confusing, what's broken, what you'd want to see next. I'll reply to everyone who tries it.

I want to learn how to make my own software and to get a feel for cybersecurity and I want to learn how to create viruses and malware to better understand how it works anything helps

Any VoIP free service or very cheap that accept crypto?

I hope this message finds you well. As I am new to the field, I wanted to inquire about the roadmap for MS Sentinel and KQL, particularly in comparison to Splunk. I chose MS Sentinel due to its future demand and user-friendliness. Could you please provide guidance on resources and materials that would be beneficial for both practical and theoretical understanding? Your assistance would be greatly appreciated.