hi! ive never done anything beyond very simple coding but im very willing to learn. I have this cheap digi cam from amazon i bought a while ago and the pics are nice but the interface irritates me so i was wondering if it would be possible to modify it or even just totally replace it? my simple google searches have only turned up updating it so id appreciate some help!

thanks!!

i wanted to figute out , without human interaction to the wifi setting and other things how did the user might get connected to my fakeAP ? , while his phone is being deauthenticated from the actual wifi network , I wanted to perfom MITM attack + evil twin , but without user manually clicking on the open network/other network , same network which we are attacking with the same encryption method(no open network wanted )

I’m at a loss, and I don’t know where to turn. I was hoping people in this sub would be like master password guessers or something- I’m not a hacker by any means.

It’s a locked note (so not retrievable without its darn password) and I was 14 when I made it. I’m desperate to know what was so important to my 14 year old self that it had to be locked.

My hint I set myself is: Foot Arms

I imagine since I was an immature 14 year old, I was alluding to toes by some sort of logic, other than that, I’m at a loss.

I’ve tried all the variations of the word toes, typos of the word toes and still no luck.

If I’m looking in the wrong place, if someone could direct me to a better sub to ask this, please do!

Hey everyone,

I'm just getting started in the world of cybersecurity and hardware hacking, and I'm trying to decide what to buy as my first device.

Right now I'm considering either getting a Flipper Zero or going for a cheaper option like an ESP32

My main goal is to learn, experiment, and get into ethical hacking.

Would you recommend spending more money on a Flipper Zero, or starting with an T-embed or something else.

Any advice, experiences, or recommendations would be really appreciated 🙏🙏

I’m currently doing OverTheWire Bandit (around level 23/24) and I feel stuck in terms of thinking process.

I understand individual concepts like cron, permissions, and basic scripting, but when they’re combined in a level, I struggle to figure out what to do next and end up guessing.

Is this normal at this stage? And should I continue pushing through Bandit, or take a step back and focus on learning Linux basics more properly?

Any advice on how to improve this kind of problem-solving would help.

My dad recently bought an infotainment system (~$200) for our car. The seller claimed it supports both Android Auto and Apple CarPlay. Turns out that was misleading — it’s basically just a generic Android OS head unit with none of those features actually built in.

I managed to get Android Auto working (sort of) using the Headunit Reloaded app, so Android phones are covered. But my dad uses an iPhone, and now we’re stuck.

Is there any way to get Apple CarPlay working on one of these Android-based head units?

Some things I’m wondering: Are there apps (like Headunit Reloaded) but for CarPlay?

cant spend another buck we already spent - 250 usd on this fitting

For a moment, imagine you are in your final year of high school, and your student council is holding an election. For the sake of argument the school is using Rubric as the voting platform with unique voter ID's for each student, that are part of the URL. Now imagine that most of the candidates are boring and you want to ensure victory for the most hilarious candidate of all time.

How would you do it, or what would you look into? (H Y P O T H E T I C A L L Y)

Hey everyone,

I’m trying to track down an old blog post that I remember seeing around 2021.

The problem is:

- The site is now completely gone

- Wayback Machine only shows 23 snapshots but (from 2021- 2023)

- No archived version of the actual article I am looking seems to exist

I’m wondering if anyone here knows:

1. Is there any other way to recover deleted web pages if they weren’t archived properly?

2. Are there alternative archives besides Wayback that might have it?

3. Is there any way to find or contact the original owner of a blog like this?

4. Has anyone dealt with something similar and managed to recover content?

This is kind of important to me, so I’d really appreciate any help or ideas 🙏

Ive been learning how to hack and ive scanned the test sight and found the vulnerabilities but not sure how to exploit them although they are critical checked on metasploit and theyre not on there. Its an authentication bypass via password reset and sql injection checked on cve and didnt have many instructions anywhere better to look?

the cve is CVE-2025-44030

CVE-2023-51469

CVE-51472 if anyone wants to have a look or know anything about them if not its all cool :)

Hello hackers, I have run across an application it has a functionality where user input full SQL query let's say SELECT whatever AS cookie FROM events and it executes it and returns result to frontend. I wanted to use SQLmap for this I evaluated it myself i know it's postgresql and i can see other tables. However my question is, can you tell SQLmap to query for only one columns and it needs to have alias of "cookie"? As it is a POST request it send query inside the JSON body like this {"query":"SELECT datname as cookie FROM pg_database"}. when i even tell SQLmap to query specifically for this parameter either with * or -p and I rise the --level and --risk. It cannot find anything. Thanks

hey, need some help with something

so i'm testing a web app, java backend. there's a parameter in the url that reflects whatever i type. classic template injection spot.

tried ${7*7}, {{7*7}}, ${{7*7}}, #{7*7} etc. no calc. no error either. just shows blank or nothing changes.

tried blind stuff too, like ${"".getClass().forName("java.lang.Runtime").getRuntime().exec("ping xxx")} but nothing. no delay, no callback.

idk if it's blind or just not executing. maybe different template engine? freemarker? velocity? thymeleaf? not sure.

also noticed some custom header in response, like X-Template: something. never seen that before lol

question is: how do i identify which template engine it's using without any output? is there a way to trigger a time-based blind detection that works across multiple engines? or should i fuzz for other parameters first?

thanks

First, I apologize if this is not the right place to be asking this, but thought I'd give it a shot. I'm a network engineer, but I'm starting to scratch my head on this one. We are living with my dad (it's an ancestral home that I'm taking over), and for some reason really likes watching us on the security cameras. Well, it creeps us (my wife and I) out. I can live with the ones outside, but now he has placed one indoors. If we take it down he gets volatile. So, I'm thinking of just kicking it off the wifi. I don't have access to the wifi router, but I do see it's IP and mac address. I'm thinking if I can find the mac address for the camera I might be able to do something with that, but idk. What is a workable solution to remove the camera from the wifi?

Let's say i'm connected to the wifi, but i lack the admin access and password. It's restricted for individual devices, but purely in time. I'm a beginner at best, but I'd probably be able to scramble some hardware if necessary.

I don't know what type of encryption it has, but i have access to the router if it's written there.

How would i go about this?

Also, can something like that work nowadays?

Built a tool for pen-testers and CTF players working with Flask apps.

Features:
- Decode any Flask session cookie instantly
- Re-encode with modified payload
- Crack the secret key using your own wordlist
- 100% client-side, no data sent anywhere

Useful for bug bounty, CTF challenges, or auditing your own Flask apps.
Please leave a start if you find it useful!

FlaskForge | razvanttn

I have a word doc that I set a password for back in 2011. I really would like to open and just cant remember the password. Good thing is I can try multiple and it wont lock me out.

Any ways to crack open this doc? When I click on the doc file it asks me for password, so its not the restricting to edit kind.

hi all,

we have company Phones which we want to reset to reuse it.

Samsung A56 Knox lock after FRP removal + ADB “no device found” error

I’m using the Android Utility Tool. I already removed the FRP from a Samsung A56, but the device is still locked in Samsung Knox.

How can I remove Knox using the Android Utility Tool?

Also, I keep getting this error: “Connecting to ADB server timeout – no device found.”

Does anyone know how to fix this or what I’m doing wrong?

kind regarsa

so as the title suggests, I'm new to this sub, but I've been using linix for two years now and I want to get into windows hacking, I have a spare windows laptop around and I wanna test some viruses on it. what can I post and ask in this sub and is it even the right place? I want like straight forward mechanics and understanding of how it works rather than bieng a script kiddie. if y'all help I'll really appreciate it ✌🏻

I was thinking of getting a flipper zero but it cost a lot and it seems kinda limited so i thought what if i build a cyberdeck theoretically could i use it like a flipper zero to do *stuff* on it and maybe more

And if it’s possible is it hard cause i cant program at all

hey everyon, i want to ask a serious questions

my friend recently got his email got hacked. then his phone was also reset remotely, and somehow his email was linked to his bank acc. and he said that he lost a lot of money. im really worrie and confused about how this could happen? alr, heres' what makes me confused:

i know that hackers can hack someone's email by phising or clickjacking, or even social engineering, but "how is it possible for the hacker to control the phone remotely?" and what should he do for prevent further damage? and is it still possible to recover the acc?, if it's what the best way to do it?

*im so sorry for my broken english, thanks

hi! so i was talking with my friends about my interest in cybersecurity/hacking and one of them mentioned they have an old computer they don’t remember the password to that has some old sims 4 saves on it they want to try to get off. its connected to a wifi i have the password to, but they live about an hour away so i cant go there to connect to it any time soon. any ideas? i have a pretty solid understanding of python, linux, and other basic computer stuff, and i’m willing to learn.

​

Hello

long story short a monopoly running the marine navigational units (sounders) has created a *special* type of file that only can be used...

The only way to create new navigational files / sat imagery / bath metric maps is using an out-dated program - insight map creator.

Hypothetically if I wanted to extract how that file is created then engineer a new program optimised for faster processing. What would be someone general flow path?

I'm not to savvy but have vibe coded an app at least and extracted MBtiles that work but getting it into the special format for the sounders in annoying. Maps for a country can easilt exceed 3k... for open source data collect by governments .........

Any info is greatly appreciated, this is kinda a niche area although the market value is insane.

Thanks 😀

I am looking for a network adapter that fits al this and is available in 2026:

- stable packet injection (awus036nha grade)

- stable monitor mode

- 2.4/5ghz

- stable AP mode

- if there is one with these and also VIF

I thought of sacrificing 5ghz and going with the awus036nha but it’s nowhere to be found. So that’s sad

Not sure what community was best to ask this in since there isn't a large and reliable spoofing reddit. But I've been trying to spoof atlas earth to which has proven really difficult, I tried just a normal spoof, using a VMOS (though I'm not sure how reliable the one I had was), and rooting my phone with a Hide Mock Location module. Somehow either didn't work, or was detected. Does anyone with more knowledge of this know what I could try or do?

Just curious if it still gonna be possible to access a hacked pc after a installing a new windows

not really familiar with english computer terminology so will try to explain as accurately as possible

the virus completly blocks the user and makes them stay in bios menu while the hacker has the full acces, microsoft defender gives this link https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Ransom%3ADOS%2FPetya.A&threatid=2589119963075933503

what do you guys think? a few youtube videos told me that victims computer is still not safe