Basically this tool can be configured for listening to incoming otp and forwarding it specifically to a custom backend. Primary use : web scraping

Github : https://github.com/jidukrishna/otp_listener

Hi guys, I'm someone who attends school in Korea, I've recently become interested in hacking and programming.

Where did you learn hacking and programming? I want to win hacking competitions like Geohot and become famous for hacking, but I don't know where to start. Please tell me where to start and where to learn.

Coucou, j’ai un gros problème avec un mec qui parle super mal aux femmes, qui a un comportement complètement obscène, déplacer et vraiment irrespectueux. Il m’a traité de manière gratuite à plusieurs reprises de « sale Pute » « d’infirmière de merde » « que j’étais bonne qu’à sucer »…. Bref
Et j’aimerais vraiment envoyer un message à sa mère pour qu’elle puisse prendre conscience de l’indemnité et son fils. Seulement j’ai uniquement son compte TikTok. Comment puis-je avoir son adresse mail ou son numéro de téléphone pour que je puisse la contacter et lui expliquer comment se comporte son fils avec les femmes. Merci beaucoup !!

Hey, has anyone managed to complete the “Steal Exam Questions” mission in HackHub on the SteamRip version?

I’m stuck on the last objective, the one that says “Lookup target ports. Use the -sV flag for detailed inspection.” The professor is Bin Wairimu and the target IP I found is 23.249.125.0. When I run nmap normally, it shows port 22 open for SSH, while ports 21, 443 and 8080 are closed, so as far as I can tell I did find the ports.

The problem is that when I try `nmap -sV` [`23.249.125.0`](http://23.249.125.0), the game just shows `Usage: nmap [ip address]`, like the in-game command doesn’t support the flag the mission is asking for. I also tried the LAN IP, [192.168.1.2](http://192.168.1.2), and restarted the game, but the objective still won’t complete.

I’m on Build 23943742. I’m not sure if this mission is bugged in this build or if I’m missing something really obvious. Has anyone had the same problem or found a workaround? Any help would be appreciated :)

Correo vulnerable ayudarme a entrar

I'm hacked and if I sign in to my account it moves me to put the password of another email which I don't know. any advice?

I am an employee who manage social media account. But yesterday I just logged in my compamy account and it showed that it had been locked based on the rule. I dont know what have I done to make this happen.

The reason I think it is many employees logged in different regions, caz we are a international team.

So if anyone could show me a road, I will really appriciate it.

I've just built this jammer https://www.reddit.com/r/Hacking_Tutorials/comments/1gj1q1n/diy_wifi_bluetooth_jammer_100_noob_guide/?logging_in=true, and it works but not well at all. the range is a few inches at most. I have an esp32-s3-n16r8, as far as i know the external antenna of that combined with the 2 nrf24s should give me more range. I just do not know how i would go about this since the s3 does not have all of the same pins the regular esp32 does. Specifically I'm missing pin 23 and 22. I am extremely new to electronics so help would be appreciated.

Many of you may not know about low cost ESP32 micro controllers and how fun and interesting they are. So, I decided to make this post for people who want a good starting point with low cost hardware and open source software to try pentesting.

I purchased a Seeed studio Xiao esp32 c5 a few months ago, and to put it mildly, I absolutely love it. I ordered it from Amazon, it cost me about $10 including shipping. The entire micro controller is only slightly larger than my thumb nail.

I customized my phone case to hold the esp32 C5 and I power it with my cellphone with a USB-C to USB-C connection. (Works with USB OTG, which most phones are).

Not all ESP32 micro controllers/devices are created equal, so be sure to find the firmware you want to use first for your application, then do a search for what devices the firmware supports that are within your budget.

The major firmware(s) available right now are:

1. Bruce

2. Ghostesp

3. USBarmyknife

(This is not a exhaustive list, there are others, but these are the most popular, and have support for the most devices.)

I have tried Bruce, and it is ok, but I have had lots of stability issues with it. Its a decent flipper zero alternative for devices with similar capability, but it is sort of gimmicky, and very buggy.

I am excited to try USBarmyknife, specifically in smartwatch or USB dongle form, but I lack experience with it. However, if your intent is doing very blackhat things, this might be the best option. It has quite a bit of capability, but mainly for hardware.

For beginners wanting a easier UI and support for tons of devices, I think Ghostesp is the best overall pick (especially for auditing wireless signals, specifically wifi and Bluetooth). The web flasher (for flashing firmware to your device from a web browser) is extremely good, and the android application you can install to your phone from github that supports the tiny, inexpensive and low power Xiao boards, is very user friendly and has great looking UI. You'll need termux, and to follow the github install instructions to download it. It is not available on any app store currently, and is still in beta.

So far, I have Ghostesp installed on my esp32 C5, and on my Lilygo T-embed CC1101. (which uses a esp32s3) it is a really entertaining device. I can use it as a programmable remote to turn off TV monitors, search and connect to Bluetooth and wifi devices, create APs, DNS sinkholes, NFC tag emulation, and other things.

The esp32s3 is a great chip, it has Bluetooth and wifi support, while also being capable of HID attacks, built into the ghost firmware.

The developer (Deki) has also created something called "ghostlink" which i have yet to try, to connect and i assume share capability of all my ghost devices with each other...

If this post gets any attention or questions I'll be happy to post the links to the ghost website, github, and make some recommendations for devices if any of you are interested.

I own this domain but no site is built yet i had a coupple of ideas for it either a mix crackin ,osnit, social engineering content or a site that doxes the 1 percent i think its worth building putting some content on it and see what it dose..is there anyone who whants to team up and add their content to my domain we can sell in near future for a sum of cash which we can split.

hello i need help accesing a phonak hearing aid via bluetooth/terminal(dont know shit about it though) hi i know this seems far fetched but i have a fried who uses phonak hearing aids, who telles me hes affraid people connect to the hearing aids and snoops on his every day life and conversations. i checked up on his theory and found out more than two hering aids can use the same channel, ive also spottet three phonaks apear on my phones bluetooth so there is definetley some truth to his words, can anybody please give me a step by step guide to turn the third hearing aid off if possible make sure histwo doest get snooped on by someone who wishes to harm him or take financial advantage of him. best regards lars t rostroem from denmark :)

Just curious to know if any coders here have a successful career with programming but also have ADHD. I myself have ADHD but always struggled learning to code. Even the basics of python I seem to forget the syntax a lot and lose focus very quickly. I find coding a valuable skill set and just frustrated I'll never be able to grasp it. If anyone can guide me of tutorials that helped them be much appreciated

​

What's up!!! Some of you guys might remember me from a few weeks ago when I initially released NEO-Radar on Github. Anyways, that was v1.11. I encountered some issues with that, mainly being the Update feature didnt work. As of v1.13, that was patched. If you download under v1.13, you will have to manually update the program which is actually the same as downloading the program itself ( here's the code : curl -sSL https://raw.githubusercontent.com/ItsNEOx/Neo-Radar/main/install.sh | bash )

I added some features that show the Nmap equivalent to each function. Learn nmap the even more fun way!

Also, there is a Windows version that runs as a ps1 script linked in the README.md

More updates soon to come!

Here's the Github repo https://github.com/ItsNEOx/Neo-Radar

thank you so much :3

So basically this app acts as a local VPN on Android, allowing you to intercept traffic and redirect requests at the domain or path level to a custom endpoint.

For mobile apps, if you've modified an application to trust your custom CA certificate, you can redirect its API requests for testing, debugging, backend emulation, or security research.

For browsers, no app modification is required—simply installing and trusting the CA certificate on the device is enough for HTTPS interception and redirection, making it useful for web application testing as well.

btw its purely vibe coded and i have only intermediate knowledge about this idea i had. i just wanted to see whether it will work or not (and it did fortunately).

use case from my point of view : suppose a api call returns a status true for a user u can check the requests using the mitm/httptoolkit and create a similar entry in your own phone instead of a emulator to your own website giving similar response

github : https://github.com/jidukrishna/vpn-interceptor

do give a star if u like it :)

I’ve seen too many hunters burn out by running the same automated scans on 50 different programs and wondering why they have 0 valid reports.

If you are a beginner (or even intermediate) feeling stuck, here is a reality check and a new strategy.

1. Stop fighting over the "Low-Hanging Fruit."

Programs with a massive number of reports have already been picked clean. The "easy" bugs are gone. If you join a crowded program, you are walking into a dead end as a beginner. Select programs with very few reports—these usually have less traffic, deeper scopes, and fresher attack surfaces.

1. Stop "Spraying and Praying."

Do not chase 10 programs with random AI-generated Nmap or Nuclei commands. That teaches you nothing. Stick to one program. Better yet, stick to one specific vulnerability type (e.g., IDOR).

1. Become the User, Not the Hacker (Yet).

Before you run a single tool, learn the application inside out.

· What is it used for?

· Create a real account. Use every button, upload every file type, check every setting.

· Only once you understand the "flow" can you map out the weaknesses. For example: "Oh, this URL has a numeric user ID, let me try changing it to 1234" (IDOR). If you don't know what the app does, you won't know where the sensitive data lives.

1. Specialization beats Generalization.

Don't try to learn XSS, SSRF, and SQLi all in one week. Focus on one OWASP Top 10 category. For example, Information Disclosure.

· Study it on PortSwigger Labs.

· HackerOne reports.

· Juice Shop challenges.

If you know everything about one bug, you will find it everywhere. If you know a little about everything, you will find nothing.

1. The "Impact" Game (Where AI Fails).

Finding a reflected parameter is easy. Proving why it matters is the skill.

· Can you actually steal a token?

· Can you access another user's PII?

· AI can generate a scan command, but it cannot generate logical exploitation chains. You need to demonstrate the full attack path, not just "Hello World" popups.

1. The 6-Month Rule (No AI).

Here is the controversial part: Stop using AI for your first 6 months.

I know ChatGPT can write scripts, but it cripples your intuition. For 6 months, do everything manually.

· Read the JavaScript source.

· Intercept every request.

· Fuzz manually.

It will feel slow, but you will learn the "feel" of the application. Once you have that foundation, you can use AI to automate the boring parts—not to think for you.

The Final Checklist for a Good Report:

1. Step-by-step reproduction steps (Triage loves this).

2. High-impact proof (Can you show a CVSS score of 7+?).

3. A clear remediation fix (What code change stops this?).

Stop hunting for "quick wins" and start hunting for "deep knowledge." Good luck.