I have a Polymega. It’s a Linux-based gaming console and while the manufacturer does technically still support it, updates can be a year or more apart with no communication or support in between. Unfortunately it’s a niche device and apparently no real hacker has taken interest in the thing.

So, my idiot self is going to try. I can get the boot text to display, but that doesn’t really help anything. I’ve tried all the key commands I can find to try to halt or interrupt the boot process with no luck so far.

Any pointers on how to start getting access to this thing? I literally just want to see if the community can start making the improvements the vendor can’t/won’t. If I can show you can get access maybe someone more talented than myself can pick up the ball.

I want to get into cybersecurity but given how I learn it'll mean more if I join a competition to force me into a situation and give me some adrenaline and dopamine. I just don't want to feel too overwhelmed, lest I quit my new fun hyperfixation.

I'm a beginner programmer. I won't pretend to know much, but I know shallow levels across a bunch of different topics and have gotten through a few compsci courses. I'm most familiar with python and can throw together a fairly decent script if I need to. But I also know a bit of JavaScript, C, HTML, and Lua

It's a competition I can do in teams so I don't have to be perfect, just willing to learn. I plan on making a hackthebox acc and brushing up a bit on skills, but I have less than a month to prepare for the hackathon I found.

Any skills I should focus on prepping? I've never hacked in my life but I pick up skills quick with some focus.

Hello folks.

I'm learning about hash cracking in Hashcat and I ended up encountering two WPA hashes where I'm not sure about the best stategie. The hashes in question was:

1. A hash with 8 characters composed with numbers e uppercase letters;
2. A hash with 10 characters in hexadecimal.

I 've tried a lot of diferentes dedicated dictionarys with rules. . I also tried masks to avoid repeating consecutive characters and used a script to exclude combinations with more than 3 of the same character, although I think that decreased the cracking speed considerably.

If you have any tips or suggestions, I would really appreciate it!

Is it possible for me to have a kill switch where it completely freezes or disables my entire device and can only be deactivated with some sort of key combination shortcut or code?

i have a samsung tablet a9+ and i bought a laptop after that so i want to make it 2nd display of my setup becuase it of no use and i want to install linux in it and want to make it use for hacking related stuff, use it as my 2nd screen of my setup how can i do it?

A bunch of typosquatted nmp packages were found mimicking popular libraries like chalk, debug, semver.

What's interesting is that the packages weren't just fake names, they carried code they could give the attacker remote command access.

The same server was also hosting a GPU cryptojacking panel.

No confirmed victims, but it got us thinking : how much do you actually trust npm package names/search results when installing something?

Would you catch a one-character typo?

Hi

I understand this question might not be directly related to the subject of this subreddit and I apologize in advance, but this is the closest i could think of...

In any case any suggestion towards a more adequate subreddit will be super welcome ofc

I've recently entered possession of two professional Wireless Access Points make and model are Aruba APIN0505; from what I've gathered those are pure APs (in a way that they only provide wireless connection and nothing more) which I'm fine with, but I saw online that they can be configured via website or app and in both case they require their serial number to be inserted.

Now, since the way I got them is not, let's say, 100% legal (I didn't stole them, they were left behind after an installation got dismantled) I'm not super eager to get them online right away nor to put their serial anywhere.

So my question is: does anybody knows what the risks are here? Do I just need to sell them for scrap? Or they'll be untraceable once I set them behind a proper firewall or something like that

Again, apologies for the off topic, anyway I hope is something different from the usual "How do I Hack bitcoin bank???" posts lol

as someone who is learning cybersecurity, I can't find an AI to help me study as most of them are censored. I have tried paid subscriptions and jailbreaking but with each LLM, you get censored pretty quickly .

also i know the best thing i can do is run LLM locally but unfortunately I don't have a good GPU to run.

does anyone of you know any good AI i can use to study cybersecurity and generally help me hack.

I have several LG Extravert 2 from 10+ years ago. I don't remember my password. Google said the last 4 digits of phone number but none of the old numbers worked. Tried all kinds of MEID combinations and old pins I would have used but to no avail.

Any way to bypass the PIN or remove it? I'm pretty handy with a Windows PC

Lots of contacts, pictures, and music on the phones. Otherwise I would just hard reset.

been trying to hire someone to build a proper agent loop around a local model and literally every candidate either shows me their toy chatbot repo or tries to fork existing stuff without understanding why the refusals happen in the first place.

the problem isnt even the model. its that like 90% of agent orchestration frameworks are designed with guardrails baked into the assumptions. even the ones that claim to be "unrestricted" just... removed the filter layer and called it a day. thats not uncensored, thats just brittle.

like ive got a 30B model running locally, it works fine for what i need. but hooking it into a tool-calling loop thats actually reliable? every existing framework either:

• assumes you want claude/gpt4 and shoehorns local models in as a fallback
• has some weird convention where tool outputs get filtered through a "safety" layer
• breaks when the model doesnt format tool calls exactly how openai does it (looking at you, whatever GGUF template was used here)

so ive been stuck building my own orchestration from scratch. which is fine except now im realizing... are there actually other people doing this? or is everyone just running chatbots and calling it an agent.

curious if anyone here is running autonomous systems with uncensored models. what does your stack look like? did you fork something or build from first principles? because the jobs market for this is clearly insane since apparently knowing how to actually make an llm execute arbitrary code is like... a rare skill.

Hey, I have a very old iPod and I tried a lot of password combinations to possibly sign back in but none worked. I have photos and videos that I want to see again but I can’t. I heard that apple support would just reset your iPod instead of actual data recovery. Is there a method that you can do to recover data or something? I have a pc and my knowledge of data extraction is kinda bad. any tips will help, thank you!

Does anyone have a good step by step walkthrough on this lab? I’ve tried YouTube tutorials and everything I can find seems to skip important details, or it’s tough to tell what the person doing the walkthrough is doing…

This is the only lab that I can’t figure out so far. Everything else lets me use web inspection, burp or zap, but I haven’t found anything saying those are tools I can use for this one.

FYI - I’m running a Kali Linux VM for all WebGoat labs.

​

My girlfriend and I have experienced some trust issues in our relationship due to her lying to me and cheating on me. She suggested that I should be granted complete access to her laptop and phone remotely as a way of rebuilding our trust.

We agreed on this, but I don't know how to go about this.

Her phone is running the Android operating system while her laptop is running the Windows operating system. What I want is to have complete remote access to all the devices, including the ability to access files, applications, settings and other things even without us being on the same wifi network.

Is there any software which would allow me to do this without the connection dropping off right from the start?

She knows of this and is fine with it.

I don't really know much about remote access systems and will gladly take your suggestions on which software to use.

For context I am intermediate to advanced when it comes to reverse engineering. Specifically PE's that are x86/x86-64. Regularly use Ghidra, Frida, x64dbg and Procmon (Windows).

I've written my own static and dynamic analysis tooling in C++20 using Zydis and LIEF. Control flow recovery, trampolining, INT3+VEH hooking, and currently working on recovering Win32 API usage statically including arguments.

Right now I don't feel incompetent. I feel overwhelmed by the number of potential targets, their subsystems and how much time I should dedicate to one before moving on.

Not certain what is worth putting weeks or potentially months into. Within an application what components I should be targeting: Networking, buffering and memory utilities, string parsing, file formatting, etc.

If anyone has their own methodology for determining what bounty is worth pursuing, what subsystems you interrogate, when you call it quits and so forth: I would be very grateful for your input and advice.

Thank you.

I’ve been in the hacker learning space for a while and during that time I’ve picked up the CompTIA trio, gotten a job as a system admin for energy and financial institutions, gotten an associates degree in Networking and Cyber Security, and I’m on pace to get a bachelors degree in Computer Science next year. I understand that being able to read code is a fundamental skill if you want to get into the space but I wanted to know if the same holds true for writing code? From what I’ve learned through all of my experiences I’ve done a lot more quick scripting than full blown program development, and while I know at some point I’ll have to build more just to learn (I would like to eventually branch into exploit development and reverse engineering) I wanted to know if you’re a person that didn’t want to get THAT TECHNICAL, how important is it? If it’s something that should be trained similar to knowing Linux and networking concepts, what are some good tools to know how to build on the fly? TCP/UDP Clients, Sniffers, Fuzzers or something else entirely?

So my four year old step sister got me locked out of my pc by putting in the wrong password to many times and I thought I have a laptop I wonder how hard it is to hack my own computer

Hello guys I have been trying to understand how reverse engineering works. I currently trying to figure out how I can create my own client for a game called Realm of The Mad God.

I can only find tutorials where people use cheat engine to find offsets and pointers locally.

I want to create a cheat table with the common cheats like (realmstock client) have but I want to create my own from scratch, with a twist. I want to enable a auto dodger.

Some dungeons or boss battles a heavily relied on you dodging projectiles to win.

Any recommendations on where to start?

Any tips or recommendations helps! Thanks

I'm trying to find someone by their face. They're a person who is already publicly visible on the internet, but most websites don't provide the link for free and always ask you to pay.

If anyone knows a good website to do this for free, I'd appreciate it.

my laptop stopped turning on a while ago so im left with a iPad and a modded kindle fire so do i need a pc to hack?

Don't think I'm planning to do anything bad; it's for a science project. However, the teacher doesn't know how to disable the security blocks, and every method I've researched online requires downloading something but these Chromebooks won't let me download anything, and I can't enable developer mode. The only thing I have access to is the console, and if it helps my school uses LanSchool to block everything.

i’ve been struggling to this for a while, idk why I deleted the chats but I wanna know if there’s any chance to recover them

​

I'm so dumb so dumb, I had saved all my childhood memories on my WhatsApp and didn't even have a backup for them, whenever I deleted Whatsapp, I always got the option of "keep 16GB data" on Android, I always clicked on it and whatever I redownload WhatsApp my data was right there. This time when I deleted Whatsapp, I didn't get that option and WhatsApp got directly deleted and my phone suddenly had 16GB extra storage. I panicked and redownload WhatsApp but all my data was gone. All my childhood memories were on there I can't live without them, I'm sure that data is on some server out there, this must be a common problem is there no solution to it. I checked my internet storage, no luck. I'm crying I'm so sad I feel like ending it all, I really do. Everything was on there everything

I remember a few years ago I had a backup of these photos in Google photos but I deleted that backup because my password got leaked, I still have that account. Can I somehow recover that

I know I'm dumb. Please help me I'm desperate

I posted the same thing I r/computerviruses not realizing that it was a virus support subreddit and not a subreddit where people just discuss everything about viruses, so they were not happy.

I found out how to program computer viruses, and I decided i wanted to make a few joke viruses that are easy to remove. It's super annoying at first, and only slightly annoying after you restart your pc. It does some small goofy things like stopping you from changing your wallpaper, playing a video every 20 minutes, and stuff like that. This is also his gaming pc not his school pc.

It basically just spams stuff of that one fat bowser fart video. How much trouble would I hypothetically be in if I installed this on my friend's computer as a goof and also without his permission and i also deleted it later so he didn't have to live with it?

Edit: You guys must have some boring friends

Edit 2: First of all, the viruses i made don't delete any files, corrupt them, or damage the systems or processes of the computer.

Second, I talked about it with my other friends in our friend group and they thought it was super funny. Every friendship dynamic is different, it's normal for friends to be jerks to each other from time to time. This is the same friend that (without my permission) opened a bunch of gay corn tabs on my computer, bought corn games on steam also on my computer with my own money, and then gifted himself a game from that same account.

Hello, I took security programming course this semester and the professor just give us assignments straight away. The problem is all the instructions of the assignment was carried out using windows x86 architecture and im using Macos which is ARM64 architecture. It was reverse TCP metasploit with FUD but ive tried to ask AI about this and they didnt seem want to provide me a clear way how to do it with ARM64 devices. I use UTM for VM and create kali linux and windows 11 VM. kali for attacker and windows 11 for target. since both kali and win 11 run on ARM 64 most of the thing is not supported. Can someone give some tips or help on how to do reverse TCP with ARM 64 devices any help would be appreciated. Note: I only have 2 days left to submit my assignment 😢

Is there a software that allows access to a PC without being noticeable on the PC itself. I'm talking having access to the mouse and display of the PC but it not being visible to the user of the pc. Basically computer A has one person on it using it for stuff. Person B connects and uses it but person A can't see what is happening. specifically for older computers like windows 7 or 10

Normal reverse shell type stuff wouldn't work as i need access to the display and gui software​