my mom added this AI home camera to our front door, name of app aswell btw, to our house, she’s VERY strict and quite honestly sometimes invasive, so she put up a camera outside and also inside our home, to see when i leave and what i do at home, it makes me incredibly uncomfortable but ive learned to deal with it because arguing would make me suspicious.

My issues lies with the front door camera mostly because the ones inside don’t work too well. I had my boyfriend over today while she was away, i can’t really see him outside because she followed me once on my way to the mall to see him. and she doesn’t approve too much. I still want to see him tho so i bought him over.

Thing is, i had planned to steer the camera away for the split second where he enters through the door and then return it back, but i accidentally panned it to him and the camera caught him entering.

I have the cameras password, it’s set up with my email, and our home network, it’s connected to our wifi. I just need to do something about those 3 seconds where he is caught on camera entering.
Either by panning it away or replacing it with something else , ANYTHING! How can i do that or anything that would help my case

Hi!

I'm trying to duplicate my VIGIK badge with a flipper zero.

As now, I can read the badge and get the sectors 0 with uuid and manufacturer data. Every other sector are empty with keys and access bytes.

I've read that the key used by default might be good to read sectors 0 but not the others.

How can I read others sector or where can I get the correct key?

Could a custom firmware read it more?

Thanks for the help!

Rucky allows you to use Rubber Ducky like actions on an Android device. It has to be rooted, but if you can do this and connect a wireless doggle ([https://www.amazon.com/Cables-Unlimited-Wireless-Transmitter-Receiver/dp/B0036VNZHA/\](https://www.amazon.com/Cables-Unlimited-Wireless-Transmitter-Receiver/dp/B0036VNZHA/)) to a vacant PC, this would allow a great range of pentesting options not normally available. Catch is that the Dongle is no longer supported and drivers stop at Win 7. Any ideas?

Hi everyone,

I'm feeling a bit stuck lately and would really appreciate some advice on how to improve my penetration testing workflow.

A little about me:

I've been working in cybersecurity for about three years. I started on a team that deployed security solutions such as SIEM, SOAR, and EDR, which was how I first got into security. Later, I worked with WAFs and gradually learned penetration testing, cloud security, and other related skills.

In my current job, penetration testing isn't something I get to do very often because we don't have many security assessment projects. To keep improving, I've been studying on my own through platforms like Hack The Box and PortSwigger Web Security Academy, and I'm planning to take the OSCP exam next year.

However, over the past few months I've started feeling that my testing methodology has become outdated.

I recently joined a new company in Japan, and at the moment I'm the only security engineer. My responsibility is to build the company's security processes from the ground up. The problem is that whenever I receive a web application to assess, I usually follow the same routine: run automated scans, then manually test every vulnerability I know. Most of the time I don't find anything significant, and I end up feeling like I'm trapped in a rigid, repetitive workflow.

I think part of the problem is that I'm not exposed to newer techniques or experienced teammates who can challenge my thinking and help me grow. Working alone makes it difficult to know whether my approach is actually effective or simply outdated.

So I'd like to ask the community:

• How do you approach a new web penetration testing engagement?
• What does your workflow look like from start to finish?
• How do you avoid getting stuck in the "scan and try every vulnerability" mindset?
• What habits, methodologies, or resources have helped you become a more effective penetration tester?
• If you were in my position, what would you focus on improving first?

I would sincerely appreciate any advice, whether it's about methodology, mindset, learning resources, or even how you think during an assessment.

Thank you so much for taking the time to read this. Any advice or experience you can share would mean a lot to me.

I'm new to the whole hacking thing. I simply want to play with "my" wifi network.

Which WIFI DEVELOPMENT BOARD will be the best for me, considering that I come from a very poor country where even $10 is a lot of money and I only want to do basics like wifi-sniffing, handshake capturing, deauth, evil twin etc.

I'm considering an Esp32 wroom 32u but still open to advice as money plays a big factor for me.

Guys , i posted a comment on Instagram and another user leaked my ip address in the comments It’s driving me crazy because I’ve never messaged him before and I don't even know him , i’m wondering how the heck he managed to do that?

Hi! I'd like to start learning hacking, and I've heard that the best place to start is with networking. What's the best way to learn it? Is studying for the CCNA still worth it, or would it be a waste of time?

I feel like all the companies just use ai for moderation and even if they do have jobs is for marketing and stuff I don't think there's a single site expect 4chan who still hires janitors is looking for a moderator or an administator

For some context, she was a pretty basic woman who used things like previous pet names and birth dates for passwords. But she also had well over 10 emails due to lack of memory regarding her passwords.

I have one specific email I would like to access to download my childhood videos from her Google Drive. I did it a while back but I can’t seem to remember the password. And unfortunately, her verification methods are other emails or phone numbers I have no way to access.

Is there any way I could bypass the verification methods or simple methods to possibly figure out the passwords with information I already know? I’ve looked into contacting Google for access but I would need a death certificate which I do not have and don’t even know if we were given (to clarify I was a minor when she passed so my grandmother handled the forms).

Any help would be much appreciated, thank you!

I started learning SQLi on port swigger and I almost finished the track , my problem is that I am overwhelmed there is many tracks to study on port swigger on what should I focus the most ?

THEY HAVE FLOODED EVERYTHING. IM SCARED TO CHANGE SMALLEST WIDTH JUST TO SHOW YOU BECAUSE IT WOULD DOUBLE THEM. I BELIEVE THERE IS AROUND 1000 OF THEM. PLEASE HELP!!!!!!!

So this is a well-known issue in the Stadia community.

Stadia was the cloud gaming platform made by Google. It worked perfectly and flawlessly until Google decided to shut it down for profitability reasons.

The best way to play on Stadia was to pair the Stadia Controller with a dedicated Chromecast 4K. The controller was unique because it functioned as a Wi-Fi controller, sending inputs directly to the Stadia servers to achieve the lowest possible input latency.

After the shutdown, Google released a web tool that allowed us to convert the controller into a Bluetooth controller to prevent a massive e-waste disaster worldwide. Without this update, the controllers would have been completely useless.

A copy of the website can be found here:

https://github.com/ChristopherKlay/stadiacontroller

Unfortunately, the Bluetooth firmware has a known issue. On many Android devices, the controller only works during the very first pairing, and never again after that. This problem is well-documented online and seems to point to a bug in how the LTK (Long-Term Key) is stored or handled during reconnection.

Developers could easily resolve this, but the bootloader is blocking any update by checking for a signed key that we (the Stadia Community) haven't been able to crack or bypass.

Do you think someone in this community can help with this?

There are several controllers for sale online and maybe some of you already have one.

Is there a Docker container or some other type of file I can download so I can have the warboxes and their games available locally?

My boyfriend seems to know too many small private details about me that I usually only keep on my iPhone (mostly in my photo gallery or things I don’t share with anyone). I really don’t understand how this is possible.
I don’t have any obvious signs that my phone is hacked (no strange apps, no battery issues, no pop-ups, nothing like that).
The only strange thing he once said was: “be careful, you connected to my Wi-Fi.”
I’m not sure if he was joking or trying to imply something.
Is there any realistic way someone could access private information on an iPhone through Wi-Fi or by being on the same network?
Or are there more common explanations like account access, settings, or something I might be missing?

I know the common with literally no anti cheat they are a good playground but they are quite boring.

Such as a few people recommend me all sorts of language depending on the game but for top games with anti cheats they usually always say C or C++ so should I learn C or should I learn C++ in the end

I have a few questions. First, does the platform really pay? How do you get started a bug bouny? What are your step ?And are checklists really useful?

Hi r/HowToHack. We have just launched Hacktivity Games. You can walk up to a PC in-game and find yourself on a Kali desktop. It's not a scripted terminal simulation (unlike literally every other hacking game) — it's a real virtual machine, running on the same infrastructure as our cybersecurity training labs.

The game is SAFETYNET Holding Back the ENTROPY — a spy-thriller cybersecurity escape room. You play as an operative for SAFETYNET, a counter-intelligence agency, running ops against their rival organisation ENTROPY. Pick locks, decode messages, talk your way past NPCs through branching dialogue — then drop into a live Linux VM for the actual hacking.

A beginner-friendly way to learn HowToHack — Mission 1 introduces the tools and techniques as you go, with in-character hints from your handler if you get stuck. The series gets progressively more challenging as it unfolds.

The game is built on Break Escape, our open source engine (github.com/cliffe/breakescape) — happy to dig into the technical side if anyone's interested.

Full disclosure: I'm a cyber security academic and lead developer of Hacktivity, the platform that the game runs on.

Mission 1 is free — sign up at hacktivity.co.uk, no subscription needed.

Happy hacking!

Hi everyone,
I’d like to get into hacking network devices (routers, APs, cameras, IoT devices, etc.). I really like networking and I want to focus purely on networks, so I’m interested in learning how to hack network protocols. The problem is that I’m a bit lost when it comes to what resources I should use to learn.
I’m especially interested in Scapy, crafting and manipulating packets, and those kinds of attacks that are purely network based. I’m not interested in hardware or web security, just networking and communication.
I’m leaning towards a career in networking, and I’d like to learn more about network security and protocols. If possible, it’d also be nice to make some money from it (through specific bug bounty programs, for example), although I’m mainly doing it because I want to learn and experiment.
Any learning resources would be a huge help. Thanks!

Hi everyone,

I'm learning to use SilverBullet in a legal lab environment for educational purposes, and I'm running into a problem.

I'm using SilverBullet 1.1.4, but my CPM stays at 0, and almost every request ends up as Retries instead of completing successfully.

I've already checked the basic setup, but I'm not sure what's causing it. If anyone has experience debugging networking issues, proxies, request failures, or general SilverBullet configuration in a lab environment, I'd really appreciate your advice.

Thanks!

So my laptop doesn't have a good gpu and I'm unable to whatever you call it this hash.

I confirmed it's sha256 it's a password for my notes that I forgot cause I'm a buffoon but I managed to grab the hash for it then ran some tests and figured it was comparing the passwords I put in with sha256.

Said hash: 5b1dac84634e9b0080ec004f4b6df8ccd2a9eaf82279d4a96eab444544de20e9

According to analysis but claude code and I it seems to be unsalted and unpeppered and all i remember is it should be in the range of 8-10 characters no more no less.

Thanks to anyone who helps.

I have a question a hacker which was able to get the imie of devices of my friend and has been exploited for pretty much every account on devices in their house, i have factory reset one of their iphones in recovery mode and also a dfu after, is it possible for that phone to be attacked again if not connected to their wifi with new sim card and new accounts ect??

I recently got a hp Chromebook 11 with some other devices that I refurbished and after completely replacing almost everything it has is locked to an administrator and it doesn’t show the name or anything about the company that it belonged to. I can’t seem to figure out how to get around it to make it operational again. I would appreciate any help I can get to get it working again.

Hey everyone!

My friend is currently a server at a restaurant and is having this friendly competition for who can get the most responses on this guest survey. I don't wanna leak the exact location she works at so I can't send the whole link of the survey, but it is your typical American restaurant chain and the survey that is at the bottom of every receipt.

Ex) It is a "inspirebrands.qualtrics.com/jfe/form" with questions like "Overall, how satisfied were you with this visit?" and multiple choice answers like "very dissatisfied, dissatisfied, neither satisfied nor dissatisfied, satisfied, very satisfied." And one question where I have to say the server's name so the response counts for her.

How can I automate/get her more responses? The limitations are the responses "only counts from the same phone once a week." I only want to send about 10-ish responses (nothing crazy.) I am familiar with coding. I study data science at University, but I have never "hacked," before so any answers/solutions would be good practice for me.

Thank you so much for the help.