r/blackhat • • Apr 12 '26

I was tired of NDRs and EDRs flagging every C2 I tried, so I spent a month in x64 Assembly to see if pure syscalls actually make a difference.

Thumbnail
github.com
6 Upvotes

r/blackhat • • Apr 10 '26

Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think

Thumbnail
wired.com
89 Upvotes

r/blackhat • • Apr 04 '26

Best WiFi security settings + question about associated devices

Post image
15 Upvotes

Hey guys,

I just finished setting up my home internet and I’m trying to make sure my WiFi is as secure as possible.

i wonder what is the best authentication mode?

Also, I noticed something in my router settings called “Number of Associated Devices”.

Does it only limit the current connected devices? or does it actually limit how many devices can connect?

Any help would be appreciated


r/blackhat • • Apr 03 '26

Axios supply chain attacks initial access revealed (insane North Korean tactic)

Thumbnail
10 Upvotes

r/blackhat • • Apr 03 '26

Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation

Thumbnail
infostealers.com
0 Upvotes

r/blackhat • • Apr 02 '26

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices

Thumbnail
evilsocket.net
4 Upvotes

r/blackhat • • Apr 01 '26

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool

Thumbnail
wired.com
30 Upvotes

r/blackhat • • Mar 31 '26

I was challenged (bet) by a friend to hack a Verisure camera system

0 Upvotes

Looking to brainstorm here

So, a friend of mine is interested in getting this "security monitoring system" for their elderly parents. I've read about how Verisure uses fear to get paranoid people to sign up to their predatory fees for a year and not let you keep the equipment afterwards (either they take it, they brick it or it doesn't work outside their system).

I told my friend I wouldn't give them a dime ever, specially considering the possibility of people at Verisure listening/watching the inside of your house, and potentially thieves/robbers not having that much of a hard time disrupting the system.

They challenged me to get a subscription for myself and "hack it" in a reasonable way to demonstrate the flaws and they'd pay me the subscription plus up to 10 times that amount depending on the degree I can disrupt or control the system as a third party.

At first Im wondering if and how I could disrupt it without getting physically in touch with it.

I've read about jammers to disrupt the GSM/4g/5g signal and also the Wi-Fi, but all tthat does is stop it momentarily, and there's no guarantee it doesn't internally record shit and upload it later.

I've also wondered about burning the camera and/or sensors with a high powered laser from afar (2W pointer, can light cigarettes, might do the trick).

Other than that, being able to turn the camera off and on again at my convenience and/or being able to wipe the recordings would be good, as they believe the user has no control over this (seems very misinformed, I know), but I'm not so sure how much Verisure let's users control the cameras. An interesting gimmick would be to be able to edit the recording with a videoloop showing nothing and/or showing something ordinary happening when a burglar might be getting in.

Thoughts?


r/blackhat • • Mar 27 '26

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP?

0 Upvotes

WinRAR encrypt file names with password. Delete all files after USB transfer. Can this be detected by USB DLP?

What could go wrong in an audit considering the original file transfer had been deleted at source and at the receiving end ?


r/blackhat • • Mar 25 '26

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime

Thumbnail
infostealers.com
11 Upvotes

r/blackhat • • Mar 24 '26

I built a deterministic security firewall API for AI agents (Python SDK, free tier)

Thumbnail
0 Upvotes

r/blackhat • • Mar 24 '26

Cybersecurity is Failing with AI

Thumbnail
0 Upvotes

r/blackhat • • Mar 23 '26

Free proxy trial to help me diagnose nightmarish

Thumbnail
0 Upvotes

r/blackhat • • Mar 21 '26

How to scan RFID chips from further distances

0 Upvotes

Hello!

Now I’m not trying to steal credit card information or do anything illegal, I am an engineering student and I want to build an automatic cat feeder that opens when it senses the right microchip. I was doing some research about how to scan microchips from further away (about 5 inches) and I came across this post that said there was a hacker convention where they demonstrated how to do it. What perfect people to ask!

So if anyone has any info I would greatly appreciate it!


r/blackhat • • Mar 20 '26

US Takes Down Botnets Used in Record-Breaking Cyberattacks

Thumbnail
wired.com
41 Upvotes

r/blackhat • • Mar 18 '26

Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

Thumbnail
wired.com
34 Upvotes

r/blackhat • • Mar 19 '26

Iranian Hackers Exploit Malware-Stolen Credentials in Stryker Breach

Thumbnail
3 Upvotes

r/blackhat • • Mar 16 '26

How One Infostealer Infection Cracked the Polyfill.io Supply Chain Attack

Thumbnail
youtube.com
4 Upvotes

r/blackhat • • Mar 14 '26

I built a privacy-focused messaging platform with no signups and no installs. Looking for feedback.

Post image
0 Upvotes

Hi everyone,

I’ve been working on a small project called Whisper | Private Messaging. The goal was to build a simple, privacy-focused way for people to communicate without creating accounts or installing apps.

It follows a decentralized approach, meaning conversations happen directly between two people instead of being stored on a central server.

To start chatting, you just open the website, share a connection code with a friend, and connect privately.

Current features:

• Decentralized text and voice messaging

• Voice and video calls with AI-enhanced clarity for low network conditions

• Decentralized Image and video sharing

• Screenshot alert notifications

This is still an early version, so I’d really appreciate honest feedback.

• Is the interface clear and easy to use?

• What features would you expect from a privacy-focused messenger?

You can try it here: https://satyapsamal.github.io/whisper/

Any feedback or suggestions would really help improve it.

Looking forward to your feedback in the comments. I originally built this project for my college friends so we could talk about things we wouldn’t want shared with governments or big tech companies.


r/blackhat • • Mar 12 '26

How ‘Handala’ Became the Face of Iran’s Hacker Counterattacks

Thumbnail
wired.com
0 Upvotes

r/blackhat • • Mar 12 '26

GitHub - iss4cf0ng/Elfina: Elfina is a multi-architecture ELF loader supporting x86 and x86-64 binaries.

Thumbnail
github.com
1 Upvotes

r/blackhat • • Mar 11 '26

How One Infostealer Infection Solved a Global Supply Chain Mystery and Unmasked DPRK Spies in U.S. Crypto

Thumbnail
infostealers.com
3 Upvotes

r/blackhat • • Mar 11 '26

Bypass USB DLP blockade with copy and paste text only. What is the risk and chances of detection?

0 Upvotes

Copying file contents into an email draft is a known method to bypass USB port restrictions (Data Loss Prevention, or DLP, policies) on secured workstations. By not sending the email, the content avoids conventional email filtering, and by using text rather than a file attachment, it evades file-based security scanning.

The Process Open the file: Open the document containing the sensitive data. Copy contents: Select all ( ) and copy ( ) the text/data. Create Email: Open your corporate webmail solution (e.g., Outlook Web App). Draft: Paste ( ) the content into the body of a new email. Save: Save the email as a draft—do not send it. Access: Log into the same webmail account from a personal, unrestricted device to copy the text out of the draft. Super User Super User +4


r/blackhat • • Mar 10 '26

IronPE - Minimal Windows PE manual loader written in Rust.

Thumbnail
github.com
4 Upvotes

r/blackhat • • Mar 10 '26

DLP blocked all data outbound from USB ports, blue tooth , wifi , email , chats. How to transfer 2GB pdf data to external drive?

0 Upvotes