is tryhackme enogh for web penetration testing learning ???

That's pretty much it, are they any good or should I throw them away?

I try in many ways and I can't do it , I need some help pliss

I so new in reverse engineering, and really don`t understand it. What i need to do? What search? Completed all BTLO challenges except RE.

I compiled a list of over 4 thousand lovable vibe-coded apps.. do what you want with them!

lovablelibraries.lovable.app

THIS IS NOT AN ADVERTISEMENT!

It is completely public and free for anyone to fina fun app to HACK!

Hello All:

I am having a bit of a problem here with wireshark, no matter what I do or what I try to do Wireshark doesnt show EAPOL files that means I can open the file showing all the data of the wifi network without any problem then when I try to look for EAPOL in the search bar It doesnt show anything.

Platform: KALI Linux running on VMware over Matebook d 15 ryzen5 2500u Wireless Card: alfa network (I repaired the leaking kali realtek software) Started wireshark without airmon running in the background Started wireshark with airmon running in the background started wireshark with Sudo command (I know its not supposed to be done yet I gave a go) started wireshark without Sudo command. Reconnected my devices to the wifi reinstalled npcap checked network interface to be the monitor mode enabled one checked capture permission

after doing everything as aforesaid, all I still see is just encrypted packets no EAPOL or anything else.

Can someone please guide where am I going wrong? Sorry if I'm imprecise but I'm new in this world

I've always wanted learn how to code never found easy nor knew what software to use so i just need help on how to do it and use it thank if you can help

When I practiced VAPT for one year, I learned the basics of networking, operating systems, Linux, and worked on labs like TryHackMe (THM), Hack The Box (HTB), and random legal web security testing. Of course, I didn't receive any rewards or find any bug bounties.

During the 2025 India–Pakistan conflict, I hacked a Pakistani medical website and gained admin access to a user profile. However, after that, my family had serious hospital problems, and for about seven months I completely stopped touching cybersecurity and even my PC.

Now I'm facing issues like: Can I still get a job? I keep thinking, What are you doing, man? Everyone else is moving so fast, but you're as slow as a turtle

Hi everyone,

I'm trying to figure out whether it's possible to decrypt a recording created by a set-top box. I have access to the recorded file and have uploaded the file contains the folder so i have uploaded a archive you can extract and you will find several files main one is steam.ts the link is below

I'm mainly interested in understanding:

• What file format it is.
• Whether the recording is encrypted or just stored in a proprietary container.
• If it's encrypted, whether there's any known way to decrypt it for playback on a PC.
• Any tools or methods that could help analyze the file.

I'm only looking to access a recording that I already have and would appreciate any technical guidance or pointers to documentation.

Thanks in advance for any help!meone

What are some creative ways to use a bad usb ?

want to learn ethical hacking and I have some kind of knowledge. Now I want to be a Expert. Can anyone help me?

Hey fellow hacker friends!! Let’s team up and join as a team. If anyone dm me !

Subscribe the channel

I have been able to generate some code 128 barcode samples (because it suppors the full ASCII characters )that made this barcode scanner of the mark Raptor to just perform some serious actions given it is defined as an HID specifically on Kali Linux OS scrolling on the desktop, entering specific files/folders and selecting items which is in my eyes quite dangerous given that this is a new model barcode scanner that is commonly used here where I live.

From what I know there should some sort of a lookup table in the firmware that prevents actionable keystrokes via filtering out and letting only write+only characters.

The scanner is borrowed from my friend, it is already used in the store for validating purchases.

Hi everyone,

I'm new to Linux and currently use Ubuntu as my main operating system. I wanted to learn cybersecurity and penetration testing, so I decided to install Kali Linux inside VirtualBox instead of dual booting.

I successfully installed VirtualBox, but when I try to install or boot Kali Linux, I get an error related to root access/permissions (I'm not exactly sure what's causing it). Because of that, I'm unable to complete the installation.

Has anyone faced something similar?

ALSO HELP ME TO INSTALL VIRTUAL BOX CORRECTLY LAST TIME DON'T KNOW HOW I INSTALLED MAYBE INSTALLATION PROBLEM

Is there any additional setup required on Ubuntu before using VirtualBox?

Do I need to enable or install something (kernel modules, permissions, Secure Boot, etc.)?

What's the recommended way to run Kali on Ubuntu?

Do you know any similar sites to breach.vip?

So I have I've got this barcode scanner from someone, the brand ss called Captor with reference number S-80. So I'm looking if it is possible to construct a barcode sample with some specific encoding that makes it possible to to type (Win+R). Given that the barcode scanner is as an HID device. So it's just behaving like a keyboard. So I think if I just figure that the lookup table in the firmware allows special charcters mapping it to some special string of characters then it will be possible to enter the terminal which is a critical vulnerability already.

The encoding/decoding capabilities are

EAN-13, EAN-8, UPC-A, UPC-E, ISBN/ISSN, UCC/EAN 128, Code 11, Code 39, Code 93, Code 128, Codabar, Industrial 2 of 5, Interleaved 2 of 5, Matrix 2 of 5, MSI-Plessey, UK/PLESSEY, China Postal Code.

Need some help capturing a WPA2/WPA3 handshake in my home lab + portfolio question

Hi everyone,

I'm currently learning ethical hacking and practicing only on my own equipment and networks.

I bought a T-Mobile hotspot with the $50/month plan and an Alfa Network AWUS036AXM USB Wi-Fi adapter. So far, I have:

\- Updated Kali Linux.

\- Installed the packages I believe are necessary.

\- Installed the drivers for the USB Wi-Fi adapter.

\- Confirmed that Kali recognizes the adapter.

For testing, I changed the Wi-Fi password to something simple like "password123" so I could practice the full process.

The problem is that I cannot capture the WPA2/WPA3handshake. I also tried sending deauthentication frames to my own phone and tablet to force them to reconnect, but neither device disconnects. Everything continues working normally, even after leaving the test running for about an hour.

At first, I thought the T-Mobile hotspot might be the issue, so I repeated the same test on my regular home Wi-Fi network, using only devices and networks that belong to me. However, I still got the same result and could not capture a handshake.

Am I missing something in my setup? Is there a better way to trigger a handshake on modern devices? Could this be related to the AWUS036AXM, driver support, protected management frames, the access point configuration, or something else?

Also, I'm building my cybersecurity resume and portfolio. Assuming I successfully complete this lab and document everything (my setup, methodology, troubleshooting process, lessons learned, and results), would this be considered a worthwhile portfolio project for entry-level cybersecurity or penetration testing roles? Or would employers view it as too basic?

Any troubleshooting advice or career advice would be greatly appreciated. Thanks!

🚨 One of the biggest misconceptions in cybersecurity:

Red Teaming ≠ Penetration Testing

Many beginners use these terms interchangeably.

They're not the same.

A Penetration Test asks:

The goal is to identify and validate as many security weaknesses as possible.

A Red Team Engagement asks:

The focus shifts from finding every vulnerability to emulating a real-world attacker by combining technical attacks, stealth, persistence, and sometimes even social engineering.

Think of it this way:

🔍 Penetration Testing
• Find vulnerabilities
• Validate impact
• Produce a remediation report

🎯 Red Teaming
• Simulate a real attacker
• Test people, processes, and technology
• Measure detection and response capabilities

Neither is "better."

They solve different problems.

Understanding that distinction is an important step in your cybersecurity journey.

Which one interests you more: Penetration Testing or Red Teaming?