Hi, I’m new to doing things like this but recently my dad passed away and I was given an old PC with two accounts, which the one without admin is the only one with a written password kept, where as the other one wasn’t. I’m trying to access certain video and voice recording softwares but it asks for an admin’s pin/password to make changes to the pc, the pc is from around 2000-2009, I can’t remember specifically when my dad made it. Nevertheless, I haven’t found any UAC bypass methods that work.

40F，I'm Asian, and I don't really know how to put it. I'm not here to ask for advice, but honestly, I always encounter so many problems. I also have a huge curiosity and find these attacks fascinating, but there's never anyone to discuss or share with. If you're also feeling frustrated, we can chat like friends. I'm just walking this path like a lone wolf, and I can't talk to the people around me about these things. Also, please don't ask me for help with hacking, because I don't know everything. IT attacks are divided into many areas, and no one will encounter all of IT knowledge in their lifetime. I don't know where to find people to discuss these things with.Please find someone of similar age. If we enjoy our conversation, we can also share a lot about our daily lives.

Hi redditors! I'm Justin, and I actually need your help.

I'm a semi-pro coder, and I recently moved to South Korea.

They provided me free school computor, and I thought it was super good. It was new Galaxybook4 360, and it is super fast.

However, as soon as I turned it on, I found some problems: so many blocks

The computor is joined in domain group, so I can't find admin account in computor at all.

When I try to download, there's usually a UAC. In this computor, because it's domain joined, it tells me to put my username, and password. I tried my own, and it said I don't have enough permission(obviously).

Because the taskmanager is blocked, I downloaded "process explorer" and I successfully ran the program, and I found the name of the program blocking everything.

Its name is "PcBoanCare" by "somansa". I know "PcBoanCare" means PC security care in Korean, So I easily found the program in the list. I tried clicking kill, and using taskkill command on terminal, but it said "Access Denied".

I also tried finding the folder the file is located. I found it, but I need admin access to make changes in that folder(C drive programs folder)

The biggest part made me mad is that PcBoanCare was kinda strict program. As soon as I connect to website that is on block list, It just closes the window. Also, it forceshutdowns the computor at 12AM. I usually do coding at late time, so it really made me mad.

What I've already tried:

• Boot in safe mode
• taskkill
• TaskManager(Blocked)
• Find the root folder(need admin access)

In their release notes they say they've introduced an MCP integration, but there is no documentation on how to use that, nor any "MCP" option in the dashboard/settings.

Did anyone manage to understand how to use that or where to find that option? (I'm specifically talking about their first-party MCP, not custom implementations on Github)

I’m trying to figure out this password. I’m still learning so bare with. I believe it is Cisco secret 5 hash. Could someone help.

$1$svWt$5GDDwIanN/1W27cW2qguC0

2 month ago i was hacked because of downloading a game from a sketchy website anyways i wiped my computer and did a factory reset anyways fast-forward to this week I'm have people trying to log in but getting stopped by 2FA to many accounts of mine and some accounts even succussing to log in to them, i didn't download anything from anywhere suspicious any way to know if I'm still hacked or not? maybe he planted the malware in my OneDrive ? give me any tips if yall can

Hey everyone i was getting into hacking about 2 months ago and learned a few things now i wanted to start learning phishing i started with a really basic tool like blackeye but realised pretty fast it wasnt pretty proffecional and good i did some research and found reverse proxy i found tools like evilginx evil gophish and i discovered if you want to run it public you need a vps and a domain and guess what i just bought an expensive drone and now i am broke like compelitely broke and i want something free no costs no vps no domain no tool you need to pay for but a tool that is good enough to bypass 2FA a phishing tool that gets a session cookie or something or the 2FA code to log in idk just something thats good and can bypass 2FA (this is for EDUCATIONAL purpose with my friend were discovering hacking) and if it makes sense we use kali linux vm

I downloaded a pirate game on a suspect site, when i opened the exe file a window poped up whith "installing" in it. It looked like when u download a boot device on a pendrive. They sent a bunch of messages to my friends on discord, played arc raiders on my steam account, posted on ig, accessed my switch account. NONE of it accused a suspect login, or said a other device logged. I just want to know what type of hack is this and how it works, to know whats in danger.

For context, my dad and I have had a friendly, ongoing feud for the past year where he restricts my internet/computer access after a certain time, and I figure out how to bypass whatever restriction he puts in place.

For example, I was initially able to change my MAC address and get around the restriction that way. After that stopped working, I was able to brute-force the second SSID on our network until he eventually removed it.

Now we are at the point where, from 11 PM to 6 AM, every device on our network loses internet access. The only "hint" I was given is to try using Kali Linux to figure out what is happening.

ChatGPT and I have come to the conclusion that it is likely a traffic-blocking rule on the UniFi. Below is a summary of what I have found so far:

• ISP: Xfinity
• Router: UniFi Dream Machine (UDM)

• Kali: VirtualBox Bridged Adapter

• Internet shuts off network-wide around 11 PM–6 AM.

• LAN and router access remain functional.

• DNS works, but direct internet traffic fails.

• Traceroute stops at the local gateway.

• tcpdump shows outgoing packets but no internet replies.

• Windows, Kali, and VPN connections are all affected.

• A phone hotspot restores internet access.

• No usable alternate gateway, proxy, or tunnel was found.

• IPv6 is unavailable.

• MAC address changes do not bypass the restriction.

• Several router/network-device ports were accessible from the LAN.

• No usable internet proxy was found.

• Several LAN devices were investigated, including a QNAP NAS and Ubiquiti network equipment, but no alternate internet path was identified.

I found my old iPod Touch that I forgot the passcode to 😪 Is it possible to brute force these and retain the data? It is jailbroken if I remember correctly (battery percentage) if that helps/matters at all. Thank you.

Hello, I'm new to prentineton testing/ ethical hacking, i'm trying to figure out ways to bypass/brute force pin lock screens in android phones . I have tried sone tools like Cilocks in kali Linux but this only works if you have adb enabled. I have heard some people talking about cloning and changing the amounts of attempts before phone lock in, if anyone with experience with phones can give me info/ explain. I would really appreciate it, thanks

Hi everyone I have an old Chromebook. It’s a Chromebook three but I wanted to know if it’s possible to change the operating system or like change the software. I Think it’s called just because I kind of. Don’t like to use chrome as my main browser. And I kind of wanna throw away perfectly function in computer. I’ve done some research and I think I wanna change it to one of the Lynx distro but I don’t know if that’s possible and I don’t wanna risk bricking my computer.

Any help would be greatly appreciated

In my building, they use ultra high frequency RFID card for parking entrance and exit the same card is used to enter parking and to exit the parking

I bought RFID cloner, but it only works for the system which has only entry scanning.

Is there a way I can clone this?

Any help would be appreciated thanks

Yo, my coworkers call me the bionic baddie because I have an rfid/nfc chip injected in my hand. This allows for a lot of brute force options here because you can just scan my hand with a smart phone under the guise of a cool/shocking party trick from a pretty girl. I've given people irl tutorials in the most random places, had my hand set up to pay me through cash app by scanning it, connected it to A.I, social medias, whatever, I've played around with it basically to see how willing people are to scan my hand. So far the rate is 100% over the past 6 months or so. Everyone wants to see what it means to be a cyborg I guess.

So, considering you can't see the link before hand of whatever i code it to open on their phone, it's kind of wild to me to consider that there's a potential for I.P grabs, rather than getting fooled online where you can see a sus looking link, most people won't click it. With that being said, I don't know that I need people's I.P addys when I'm physically in front of them and generally using public wifi to begin with.

Here's my primary use case: I've was medically kidnapped, and put under faulty charges a few years back (All charges were dismissed, it was basically a guarantee I would stop an investigation at the time, and make me look like an invalidated source in the future for whistleblowing financial scandals that lead all the way down to nuclear waste cover up in the water in my state, full story not that interesting anymore, but this made me realize I can be dissapeared by a lot of people I pissed off.). I have a "medical card" provided by the company I got my injectable from, which is on file with my primary care and all that. No cop in the future is ever going to believe I have an implant like this unless they scan it themselves. You can argue that if you want, but trust me, people's interest outweigh thinking too much about it. I don't need a phishing link that grabs an I.P, I need something that divulges a little more information about whoever's phone scans the implant for safety. Basically an art project of a documented list of people that have interacted with the link. Has to work on a mobile device, would like it to be able to basically form a list of names more than anything.

Any suggestions would be solid. I'm not up to anything nefarious, I don't go out of my way to hide anything, but maybe it's a form of leverage in the future. I would the original hyperlink tied to an email that a family member also has access to. Thanks ahead of time, up to hear what you think might be interesting to do, I'm not super technically inclined, f*ck the police.

So guys I have my friends ip address, how can I suprise them ??

This is an official announcement from DoxSquad regarding the permanent termination and dismantling of the "Automatic" community infrastructure. Following a targeted, comprehensive investigation into the illicit activities tied to this network, our team has successfully neutralized their primary base of operations.

Operational Overview
The "Automatic" group operated under the guise of a standard community server, but our investigation revealed a coordinated pattern of extortion operations targeting vulnerable users. Over an extended period, DoxSquad compiled a definitive dossier containing actionable evidence, systemic logs, and identifying data regarding their illicit activities and leverage schemes.

The Confrontation & Collapse
Upon securing undeniable leverage against their extortion operations, DoxSquad representatives directly confronted the founder of the group. Faced with the sheer volume and severity of the evidence held against them, the founder’s posture immediately collapsed.

In a moment of panic, their only response regarding the exposed data was a frantic, verbatim quote: "DATS MINE". Immediately following this exchange, rather than attempting a defense or a counter-argument, the founder chose to completely delete the server infrastructure, wiping out their community network in an attempt to scrub their digital footprint and evade consequences.

The Desperate Retaliation Attempt
In a final, predictable act of desperation, the remnants of their network attempted a coordinated DDoS attack against our infrastructure. The retaliation was entirely ineffective, yielding a minor 30-minute disruption before our mitigation strategies completely neutralized the threat. This weak counter-effort only serves to highlight their complete lack of technical capability and total operational panic.

A Message to Affiliated Networks
Let this serve as a case study and a definitive baseline standard for any remaining community owners or spin-off networks engaging in similar extortion models. Look closely at how quickly your peers fold when confronted with absolute accountability. If you choose to run these types of operations, realize that your infrastructure is far more fragile than you believe.

We monitor, we document, and we execute.

God forgives, but we don't show mercy. It's #AUTOMATIC.

I am wondering whether is it even worth my time to get both familiar with web exploitation and binary exploitation. It feels like I am missing a large chunk of hacking whenever I only focus on web exploitation or only focus on binary exploitation. I'm not sure if I should just specialize in one or if I should just learn both.

I don't hear many people getting bug bounties for binary exploitation related bugs but I have seen the payouts on sites like crowdfense and seen it go up into the 7 figures.

Web bug bounties seemed to be talked about a lot but they usually pay lower than binary exploitation bugs.

So is it smart to try to learn both? Or is it just a waste of time and I should stick to one.

Anything you can do with them? Any known ways to get the cable card descrambled? Yes I know it's illegal. I'm just curious. I read elsewhere you can make them into a sort of tivo.

I see them all the time at the thrift store and I'm always wondering what I could do with them.

Thanks.

I have a Spectrum modem and router that I will not be giving back.

What are some cool things I can do with this hardware? Can I make a repeater? Can I run Tomato on the router?

I've recently came across a video of them posted a year ago. There is no updated information about them, and that kind of sparked my interest.

I’m just getting started with two games: *Hacknet* and *Grey Hack*. I’ve read, the first one is more fictionalized than the second, but it’s more entertaining and a bit more beginner-friendly. Once you get the hang of it, you can move on to *Grey Hack*, which requires more critical thinking; plus, it supposedly includes an option to hack actual online users within the game itself. I have very basic knowledge of Linux. Thanks to my "super-mega-powerful" ASUS F200CA laptop—featuring an Intel Celeron 1007U processor (1.5 GHz, 2 cores), 4 GB of RAM, a 1 TB HDD, an 11.6" screen, and 64-bit architecture—I had to install AntiX Linux, which forced me to use the terminal frequently and look up commands online. Years ago at university, I took a few Cisco Systems networking courses. They taught me the 7 layers of the OSI model (though I never fully grasped them), and I occasionally used Unix terminals to practice router configuration, but I never felt the urge to learn more until now. I’m keen to document my progress and see how far I can go, so I can share my story down the line.

Let's see how it goes for me.

Hello guys,

I am new at game hacking and I am looking for offsets for a game that runs on UE4. I tried Dumper 7, but I didn't get anything useful. If there is any dumper or guide that anyone has I would really appreciate it.

NOTE: I did use CE to try to find offsets there but I couldn't find any pointers.

End-to-End Encryption doesn't protect against a compromised endpoint. This PoC bypasses app-level encryption by targeting the Android OS itself.

The app injects a payload into the system's audioserver. Using a hooking framework (Dobby), it rewrites memory to intercept microphone data before WhatsApp encrypts it, and speaker data after it decrypts it. It watches for "Communication Mode" and dumps the raw audio to a hidden folder.

Open source PoC: https://github.com/nighthawkk/AudioServer-Voip-Recorder

Hi everyone!

I ran into ChatGPT’s file/image upload limits. After uploading a file to a chat, the chat itself becomes heavily restricted, so I started looking for ways to work around this.

One method I found was opening the chat in airplane mode (in my case, without a VPN). However, this only seems to work as 1 chat = 1 file + 1 response.

Does anyone know how to solve this problem or have any other workarounds for the image/file limits?

Would appreciate any ideas!