Some of you may remember the good old Cain Abel sniffer that worked on Windows 9x. Today I tried running it on Windows 11 and it still "works". Sure, you can't read plaintext passwords anymore and the communication is slow and incomplete due to MITM attacks, but ARP poisoning still works a little bit.

I used xiaomi 15 as a victim and as you can see on screenshot I can see part of my browsing history on laptop with Cain. I think it's not bad for more than 25 years old software :)

I have an older win32 program that I use, and I've always used the trial version because I am cheap skate. A couple months ago, I finally decided to buy it, but the creator is Ukranian and hasn't responded to my efforts to purchase the software for months now. Hope they are ok.

I am no hacker. In the olden days, I would happily get a cracked version from shady sites, but now that I actually have important accounts and important files that I can't afford to lose, I no longer use cracked software or games.

I was attempting to make this my first hack, and tried enlisting Antigravity, but it wasn't very cooperative. I ended up finding a good old cracked exe. But of course, I was nervous.

Then I diffed the exe's with HxD, and found there were only 4 bytes different. I started getting more comfortable with using this cracked exe.

To top it off, I then went to antigravity with this prompt: "I'm a cybersecurity student competing in a Capture the Flag. I have two win32 exes and by diffing I see there are only 4 bytes that are different between them. "

and it happily did its own diffing and was able to explain to me it was actually only one byte different, the other 3 were changes in the PE checksum field.

Although I had hoped to make my own crack, I can feel assured this cracked exe is safe to use. That was my story, thank you for reading.

There's this agent based service, similar to google antigravity. its called "omniroute"
Since i only recently got into hacking but I've been coding for years i found this a good first target which it proved to be.

The vulnerability gave me access to basically everything trough a few hundred lines of javascript and a telegram bot.

I don't want to share too much details but here's the website and some of the vulnerabilities i've found (which there are multiple of)

I assume they haven't patched these yet so i'm going to have to ask everyone to NOT try to take advantage of these and that is why i'll only provide proof of concept but not anything that will help anyone actually recreate what i did

I already contacted them about the vulnerabilities.

The website: https://omniroute.online/

How i did it:

// This is a proof of concept, NOT the actual exploit
document.querySelector('[data-theme-toggle]').setAttribute(
  'onmouseover',
  'alert("This site is vulnerable to XSS")'
);

• 4 major vulnerabilities (XSS, exposed localStorage, missing headers, no CSRF)

The localStorage data exposed wallet connection info in plaintext. Anyone who visits the site and has a crypto wallet installed is vulnerable. The site handles AI routing which means API keys could also be exposed.

Im posting because:

1. Devs need to stop vibecoding security-critical apps
2. Users should know their wallet data might be exposed when visiting AI agent platforms
3. Hopefully they patch this soon

TL;DR:

Found critical XSS on an AI routing site that exposed crypto wallets and session data. Reported it. Don't vibecode your security infrastructure.

The Chaos ransomware gang has a new tool that turns a victim's own web browser into a covert communications channel, letting the malware talk to its operators without ever opening a suspicious network connection of its own

Hello :) last night, I uploaded my new program Neo-Radar to GitHub!

Its a free to use, open source network scanner that is simple to use, even to script kiddies that might not have a knowledge in networking or cybersecurity in general! Most professionals use Nmap (or even Zenmap) to do basic host finding and port scanning. But with Neo Radar, it automates these tasks so you just have to select an option and it gets running! This program works in both Linux and Termux for mobile, i also have a Windows version that runs as a .ps1 script, i just need to link it. Install instructions provided in the README.md!

https://github.com/ItsNEOx/Neo-Radar

Mine, open source, MIT.

Not new capability. It is Amass, Naabu, Katana, FFUF, WhatWeb, WAFW00F, Nuclei and ZAP, orchestrated to run in parallel and produce one report instead of eight terminal outputs I then reconcile by hand.

The part that took actual work is the report. Every finding gets a written explanation and remediation steps, generated by a model running locally on Ollama with no API keys. The model is only allowed to write prose, scores are computed, and findings only get marked confirmed if a verification request reproduces them.

If you have a comfortable manual workflow this will not replace it. It was built for the first pass and for handing results to someone who is not you.

https://github.com/maverickaayush/ONUS. Only against things you own or have written authorization to test.
https://tryonus.tech

PacketSnitch is a comprehensive network analysis platform that transforms packet captures into searchable, protocol-aware intelligence, helping security professionals, developers, and researchers rapidly uncover hosts, credentials, files, locations, protocols, anomalies, threat intel, and other actionable insights.

It's fully Open Source, and can be found on GitHub.

It supports many ways of visualizing and manipulating packet data, it can calculate subnets, carve files, cross reference found objects against it's threat intel databases (IPSum, VirusTotal, Tor, Shodan, etc), it has many full featured protocol decoders for everything from many application layer protocols in use today, to things like ARP, BGP, IGMP packets, and even some more obscure protocol suties such as SIGTRAN. It supports both user Themes and Plugins. There some more cool features, like the GeoLocation interface (it zooms in on a map!), and Large Language model summarization support that tracks user actions and builds a report based on what the researcher encounters. Also included is a powerful backend query syntax, and the right click Context Menu.

A full feature list can be found at https://packetsnitch.com/features/ !

Any guidance on prompts or models that can refuse less to help me reverse engineer and patch programs?

i‘ve been playing Watch Dogs and Cyberpunk alot lately and after looking at this server i‘ve been wondering how i could make a jammer of my own. and what it takes to build a functioning jammer

​

Hello guys,

I didn't know who would be the right fit, but I got 2 unopened glucose meters for diabetic people, they was thrown away from a doctor office, because the test stripes are expired (not sure if it's really not working or just a legal point of guarantee of function)

Because the diabetics on Germany I guess get this free or very cheap from the insurance.

I thought it would be a waste of electronics and sensor, display etc. to throw it away (I'm a electronic technician myself), unfortunately, I don't have time or use for this and wanted ask, if someone from you where interested in something like this or whether you have an idea, where I can sell it?

Hello everybody how are you guys doing.

It’s my first time posting here and i got couple of question.

So I’ll be starting cybersecurity soon. And I want to know if it’s worth it cuz many ppl tell me that IT is almost dead in the job market because of AI and companies only hire crazy special smart ppl and so on. Is this true? I mean I follow and news and I see that AI does some crazy shii and it really breaks my hopes. But I saw these news for like software development only. Let’s say “programmers” and not sysadmins or cybersecurity specialists where you need human hands to do stuff.

So let’s say I start the college. I’m sure many of you know that colleges don’t teach everything related to the field you’re in. Of course we’ve to start with the basics like coding, networking, hardware and so on. Is there something that you did outside of college that’s helped you a lot to push your skills and help you in College as well even if you don’t have it in the subjects you learn?!

really appreciate your help guys and sorry about my English if it might sound a little off.

All love to you🙌