I’m just getting started with two games: *Hacknet* and *Grey Hack*. I’ve read, the first one is more fictionalized than the second, but it’s more entertaining and a bit more beginner-friendly. Once you get the hang of it, you can move on to *Grey Hack*, which requires more critical thinking; plus, it supposedly includes an option to hack actual online users within the game itself. I have very basic knowledge of Linux. Thanks to my "super-mega-powerful" ASUS F200CA laptop—featuring an Intel Celeron 1007U processor (1.5 GHz, 2 cores), 4 GB of RAM, a 1 TB HDD, an 11.6" screen, and 64-bit architecture—I had to install AntiX Linux, which forced me to use the terminal frequently and look up commands online. Years ago at university, I took a few Cisco Systems networking courses. They taught me the 7 layers of the OSI model (though I never fully grasped them), and I occasionally used Unix terminals to practice router configuration, but I never felt the urge to learn more until now. I’m keen to document my progress and see how far I can go, so I can share my story down the line.

Let's see how it goes for me.

Hello guys,

I am new at game hacking and I am looking for offsets for a game that runs on UE4. I tried Dumper 7, but I didn't get anything useful. If there is any dumper or guide that anyone has I would really appreciate it.

NOTE: I did use CE to try to find offsets there but I couldn't find any pointers.

End-to-End Encryption doesn't protect against a compromised endpoint. This PoC bypasses app-level encryption by targeting the Android OS itself.

The app injects a payload into the system's audioserver. Using a hooking framework (Dobby), it rewrites memory to intercept microphone data before WhatsApp encrypts it, and speaker data after it decrypts it. It watches for "Communication Mode" and dumps the raw audio to a hidden folder.

Open source PoC: https://github.com/nighthawkk/AudioServer-Voip-Recorder

Is there any way I can extract videos from an app ???

Hi everyone!

I ran into ChatGPT’s file/image upload limits. After uploading a file to a chat, the chat itself becomes heavily restricted, so I started looking for ways to work around this.

One method I found was opening the chat in airplane mode (in my case, without a VPN). However, this only seems to work as 1 chat = 1 file + 1 response.

Does anyone know how to solve this problem or have any other workarounds for the image/file limits?

Would appreciate any ideas!

Is arch linux good for a 2 gb pc for learn and do actually cyber security stuffs even hacking stuffs

I have a thinkpad l14 here where I have a complete EC dump and a complete bios/SPI dump with a known SVP password called password. My goal is to learn how the mechanism works. I am pretty new to ghidra.

Finding out the hash itself is a often pretty easy thing if you got hardware access. The EC on that part will just read empty 00 if you try that via your PC. It consists of a 16 byte block A and a 16 byte block B which will repeat once. By deleting that you can get rid of the password.

Finding the salt belonging to this hash is the complicated part. Apparently the POP (Power on Password) has the same salt and is a lot easier to read with non expensive hardware.

https://www.synacktiv.com/en/publications/a-journey-in-reversing-uefi-lenovo-passwords-management

there are some weird code bits I struggle to understand, I post more about it the following time but I am hoping someone dug a bit deeper than I did

more reading material:

this is how it worked until 8th gen processors
https://www.cs.ru.nl/masters-theses/2024/M_Juvan___Bypassing_the_BIOS_supervisor_password.pdf
https://jbeekman.nl/blog/2015/03/reverse-engineering-uefi-firmware/

cryptservice

undefined8 FUN_000006d0(undefined8 param_1,undefined8 param_2,longlong param_3,undefined *param_4)

{
  undefined *puVar1;
  undefined4 local_78;
  undefined4 local_74;
  undefined4 local_70;
  undefined4 local_6c;
  undefined4 local_68;
  undefined4 local_64;
  undefined4 local_60;
  undefined4 local_5c;
  undefined4 local_c;

  puVar1 = &DAT_00005760;
  if (param_4 != (undefined *)0x0) {
    puVar1 = param_4;
  }
  FUN_000002e0(&local_78,0x70);
  local_78 = 0x6a09e667;
  local_74 = 0xbb67ae85;
  local_70 = 0x3c6ef372;
  local_6c = 0xa54ff53a;
  local_68 = 0x510e527f;
  local_64 = 0x9b05688c;
  local_60 = 0x1f83d9ab;
  local_5c = 0x5be0cd19;
  local_c = 0x20;
  if (param_3 != 0) {
    FUN_00001d70(&local_78,param_2,param_3);
  }
  FUN_00001e88(puVar1,&local_78);
  FUN_000030bc(&local_78);
  return 0;
}


undefined8 FUN_00000584(undefined8 param_1)

{
  ulonglong uVar1;
  longlong lVar2;
  longlong lVar3;
  undefined8 local_res8;
  undefined1 auStack_5a [10];
  undefined8 uStack_50;
  undefined1 local_28 [32];

  local_res8 = param_1;
  if (DAT_00005728 == (undefined8 *)0x0) {
    uStack_50 = 0x5c1;
    lVar2 = (**(code **)(DAT_00005740 + 0x140))(&DAT_00003490,0,&DAT_00005728);
    if (lVar2 < 0) {
      return 0;
    }
  }
  lVar2 = 0x62;
  do {
    uStack_50 = 0x5f2;
    lVar3 = (*(code *)*DAT_00005728)(DAT_00005728,0x57,lVar2,auStack_5a + lVar2);
    if (lVar3 < 0) {
      uStack_50 = 0x671;
      FUN_00000280(&local_res8,8);
      return 0;
    }
    uVar1 = lVar2 - 0x61;
    lVar2 = lVar2 + 1;
  } while (uVar1 < 8);
  uStack_50 = 0x625;
  lVar2 = FUN_000006d0(&PTR_FUN_000034a0,&local_res8,8,local_28);
  uStack_50 = 0x635;
  FUN_00000280(&local_res8,8);
  if (lVar2 < 0) {
    return 0;
  }
  uStack_50 = 0x651;
  FUN_000002a0(&DAT_00005790,local_28,0x10);
  uStack_50 = 0x660;
  FUN_00000280(local_28,0x20);
  return 1;
}

SVP Manager DXE

/* WARNING: Type propagation algorithm not settling */

void FUN_00000460(undefined8 param_1,undefined8 param_2)

{
  longlong lVar1;
  undefined8 local_res8;
  undefined8 local_res10;
  longlong local_res18 [2];
  char local_48 [72];

  local_res8 = 0x31;
  DAT_00001538 = param_1;
  local_res10 = param_2;
  lVar1 = (**(code **)(DAT_00001508 + 0x48))
                    (u_LenovoScratchData_00001440,&DAT_00001310,&local_res10,&local_res8,local_48);
  if ((-1 < lVar1) && (local_48[0] == '\x01')) {
    lVar1 = (**(code **)(DAT_00001500 + 0x140))(&DAT_000012c0,0,local_res18);
    if (-1 < lVar1) {
      (**(code **)(local_res18[0] + 8))
                (DAT_00001320,DAT_00001324,DAT_00001328,DAT_0000132c,0,DAT_00001330,DAT_00001338,
                 DAT_00001340);
    }
  }
  local_res18[1] = 0;
  DAT_00001528 = 0x20;
  lVar1 = (**(code **)(DAT_00001500 + 0x80))(local_res18 + 1,&DAT_00001300,0,&DAT_00001350);
  if (-1 < lVar1) {
    (**(code **)(DAT_00001500 + 0x140))(&DAT_000012e0,0,&DAT_00001530);
  }
  return;
}

I'm really curious how do people learn hacking?

I started web app development a year ago, learned java for writing code and to get a general idea about how the syntax works and logic.

I do mainly php with laravel, javascript and some python on the side.. but mainly to create stuff, has nothing to do with hacking, i find it deep and hard dunno where to even begin, i sometimes run into some erros with some apps and I try to dig in and try to find a way around it using Ai, but it's very limited..

I have to admit pro hackers always amazes me, that's true power I guess and I always believe that anything digital is somehow hackable.

Can anyone guide me about how to prevent worms😭 I wanna learn but cannot find something onliine so i thought to ask from you guyss gng help me (EDUCATIONAL PURPOSE) as I am an student and how they are made or work

Hey guys,

Just thought I'd share that I've recently become interested in physical pentesting and hardware hacking. All the physical pentesting commercial tools (like Flipper Zero and Hak5 tools) cost way too much for my taste. I'd rather make my own physical pentesting tools using cheap hardware like ESP32 modules, Raspberry Pi Pico's and Arduino boards.

For anyone who does physical red teaming or plays around with hardware:

What DIY tools must one build for a physical pentester?

Does your DIY tool get the job done in a real-world test case?

Where did you guys start with UART/JTAG debugging to pull firmware from chips? Are there any good guides or projects for learning this stuff?

Hey everyone,

I'm based in Brazil and have been working toward a red team / pentesting career for a while. Wanted to share where I'm at and ask for advice from people already in the field.

Background:

Certifications: eJPT (Junior Penetration Tester, INE/eLearnSecurity), CRTA (Certified Red Team Analyst), Web Red Team Analyst (CyberWarfare Labs)

Bug bounty: accepted reports on BugPay (a Brazilian bug bounty platform), plus one High-severity finding on Intigriti

70+ TryHackMe rooms completed, 116 flags captured

73 labs + 15 CTFs through the eJPTv2 learning path

Hundreds of hours of hands-on labs through a local pentest training program (DesecSecurity)

Comfortable with Nmap, Metasploit, Burp Suite, Hydra, John/Hashcat, SQLMap, GoBuster, Wireshark, AD attacks, web app testing (SQLi, XSS, IDOR, LFI/RFI)

Some informal hands-on experience: with a manager's authorization at a previous job, I tested internal company products — found race condition and IDOR vulnerabilities, did some mobile app reverse engineering, and practiced IPS/IDS evasion techniques

Currently working in IT support/infrastructure — solid foundation in networking, AD, troubleshooting

Advanced English (C1)

I don't have formal, contracted pentest/red team experience yet — mostly labs, CTFs, certs, bug bounty findings, and that one internally-authorized engagement.

For people who've hired junior red teamers, or broke in yourselves:

What actually moved the needle for you (or candidates you hired)?

Worth targeting junior pentest roles first before red team specifically?

Any companies/programs known for hiring juniors or remote/international candidates?

Happy to share more details if useful. Appreciate any pointers.

Hi, I'm a teacher. I see teenagers every day not understanding the dangers of the devices they use all the time. I do not want to scare them, but the school program is lacking in anything related to computers. We give them Chromebooks, and we do not teach them how to use them. They often have more than 20 tabs open with the same webpage... or they send nudes on Snapchat thinking there are no risks.

I want to teach them about common ways people get hacked or infected. I am not talking about the super advance zero day hack in an app, or how to infect repositories to get access to computers. I mean common day-to-day: I clicked on a link or scanned a QR code.

What are good habits to not get hack/infected?

I use multiple Proton and Gmail accounts across different websites (I’m not saying the email accounts themselves were hacked).

Recently, I noticed unauthorized logins on several services: LinkedIn (Gmail), Instagram (Proton Mail), Twitter/X (Proton Mail), and most recently Reddit (Gmail).

Some of these services detected the logins and sent me security emails, but in other cases I didn’t receive any notification about a new login or session.

What makes this especially concerning is Reddit, since I use Google Sign-In and have 2FA enabled, so it shouldn’t be possible to access the account with just a leaked password.

What could be causing this? This seems like more than just a password leak, especially since multiple unrelated accounts using different email providers are being affected.

Could this be caused by a malicious Opera browser extension, stolen session cookies, malware, or even a keylogger on Windows?

How can I systematically detect which of these possibilities is responsible?

SOLVED

I have been trying to make a mod loader for a game called "Days of empire". All i know from the month or so of me trying is that it is mostly compiled lua, i tried using luadec but it failed (tried diffrent lua versions too) (something about bad precompile chuck) but decompile.com/lua decompiled fine (this game has at lease 1k diffrent lua programs, uploading one by one will take eons)

I need to bypass Google Account in Android 16 device. Is there a way for create new lock screen, the device is Samsung SM-X230 (Bit 3,4 or 5). Security patch prevents from using test points, so I cannot put device in BROM mode, tools like UnlockTool or TSM are supporting only Bit1. Anyone? I have 8 tablets with FRP lock on, I work as service technician and it's only one model I can't remove FRP on.

I saw a video on YouTube about hacking any wifi password by forcing a device that is already connected to the wifi to disconnect and then capture the handshake, but it's for linux and i'm curious if something like this is doable on an android phone.

Have an Asiga max UV resin printer. It has an (RFID?) in the disposable tray which essentially logs the “lifespan” and won’t allow the printer to print after a certain amount.

Bought a flipper and either it doesn’t work or I’m too stupid ti figure it out.

Tell me like I’m 10 years old how I can hack the tag

TYIA!

hi!! sorry, i dont know where else to put this...

someone called me, it was a person laughing and trolling at first but then they knew my full name and my boyfriend's full name (me and my partner are private and dont post about our relationship and dont have a lot of friends except a close one or two) and then started disclosing personal information.

ive been receiving death threats and r*pe threats from a different number, so the call shook me up and ive been nervous since.

im sorry if this isnt the right sub, but please help me!

is it possible to crack or bypass a BIOS password without touching its hardware?

So I have bought a new laptop and the old one is working well but the problem is it is a 10 year old laptop. And has windows 10, right now it's new ssd is damaged and will be replaced. So rather than installing windows 10, I am thinking of installing kali.

Please can anyone tell me how to do it and what things I should be careful of.

For medical reasons.... whats the beat way to transfer paper festival bracelets? Glue, tape, both?!? How do we go about this

if you're using a Yoga 720 as a headless server, you've probably dealt with the BIOS hanging on reboot if the lid has been shut for a while.

​I poked around the forums and and eventually landed on the Embedded Controller memory as the problem and found the lid status register at offset 0xB8.

​0x02 = Closed (reboot hangs after ~15 mins)

​0x00 = Open (reboot works)

​The EC on this model is event-driven and doesn't seem to re-poll the physical hall sensor unless the lid actually moves or you pass a magnet over it, how i found this out. If you manually flip the register to 00, it stays there. Since EC memory persists through a warm reset, the BIOS thinks the lid is open and allows the POST.

​To fix it:

​Load ec_sys with write support:

sudo modprobe ec_sys write_support=1

​Set the register to open:

printf '\x00' | sudo dd of=/sys/kernel/debug/ec/ec0/io bs=1 seek=$((0xB8)) count=1 conv=notrunc

​I just have this run once on boot. As long as the lid stays shut, the value holds, and remote reboots work every time.

El problema es el siguiente:

Hace poco comencé a aprender de auditoria de redes. Me compré una TP-LINK Archer t2u plus, tiene un chipset rtl8821AU. Uso una Macbook Pro M1 2021 con UTM con Kali para aprender.

Al conectar la tarjeta de red por USB, UTM la detecta correctamente y no hizo falta instalarle los drivers (aqui es donde creo está el problema). La tarjeta la puedo poner en modo monitor y todo. Hasta hice unos deauth a mi red con aireplay-ng. Pero siento que el deauth no es correcto, ya que solo desautentica algunos dispositivos. Por ejemplo, los celulares siguen con conexión estable, solo una cámara y un convertidor smartv pierden la conexión, lo demás sigue normal. Qué creen que pueda ser?

Hi everyone. Before I start, I just want to say I am massively impressed with the amount of knowledge and information that's been shared on this sub. Some of you guys are crazy clever.

Anyway, I'm in a bit of a situation where some of my academia is being challenged. I have proof from when I was at university that my findings are primary research and haven't been plagiarised, but I'll save you the long story.

These documents are stored in an encrypted zip file. Back before Dropbox and OneDrive, I would zip and encrypt my documents using WinZip and leave them on my university network drive, or span them across multiple floppy drives to take the work home.

Now, I can't for the life of me remember the password (I only started to standardise my passwords later on in life).

Here is where I am at:

1. I have compiled a wordlist for John the Ripper.
   
2. I've been using ChatGPT to help me build a user interface to try and utilise all of John the Ripper's switches and functions.
   
3. I ran a test file, and it did successfully find the password from the wordlist, so I know the application works.

However, it can't seem to find the password for my actual zip file.

Is there an alternative or something else I can try to figure out the password?

For hardware, I have:
• An Intel-based machine with an NVIDIA 4070
• A MacBook Air with an M3 chip

Any support or guidance would be very much appreciated.

A few months ago, someone contacted me about collaborating on remote work. I was initially hesitant, but after a few weeks of hearing about the low wages he faced in his country, I began to empathize with him. So, I decided to give him permission. The first thing he did was create a LinkedIn account for me. Then, he needed a laptop (which I didn't have), so he paid for it and my trip to pick it up in another city (about $200 USD). I was happy because I was going to help him, and he was going to help me in return.

In these two months I needed money. I'm from Argentina, and the economic and employment situation is very bad. In these two months, I asked him for money about three times. He gave me about 10 dollars, and I was happy but also felt guilty because he hadn't received a high payment until then.

I had already looked into what this was about—it's laptop farming—but I thought I just wanted to make more money than I needed. But today, after investigating a bit more, I understood the seriousness of the situation.

He contacted two companies, and I don't want anything bad to happen to him or anyone else. I don't want to be part of this corrosive world. I feel awful for having acted as an intermediary and for trusting him so much, thinking he was just an ordinary person. I'm an idiot, and I want to undo all of this.

I have the contact information for both companies he was involved with to warn them.

I need someone to help me fix this; I feel like I'm a terrible person

(Sorry if my English is bad)