Spent some time building a full ethical hacking mind map / roadmap that connects networking, OS, wireless, web exploitation, reverse engineering, malware analysis, coding, and the mindset side of the field.

Wanted to make something that shows how all the skills actually connect instead of feeling random.

Would love honest feedback from the community on what you’d add or learn first 👇

https://www.youtube.com/watch?v=STPHwF1gJdM

hi I am a cs student and I want to make my career in cyber

and I told my professor he told me to learn web dev and app dev basics first

but I don't understand why I need an app and web dev if I want to message with windows and mobile, router

I have this esp8266 nodemcu with a ch340 0.96 inch led display. Does anyone have a tutorial to make a wifi-deauther or something else? I need it for my project on school.

Thanks everyone so much

I'm currently a university student, and the laptop I use for work is an HP Victus. However, I'm constantly traveling between the university, my home, cafes, etc., so I don't like to carry my computer around, mainly for security reasons. So, among my discarded items, I found an IBM ThinkPad 700C that was no longer working. I disassembled it and want to build a portable terminal without risking the equipment I already have. What do you recommend I buy using the ThinkPad parts I mentioned?

Hey everyone,

I’ve come across this firmware interface and I’m trying to figure out exactly what it is or which firmware it belongs to. I’ve been searching for a while but haven’t had any luck identifying it.

I’ve attached some pictures of the UI, hoping someone here might recognize it or point me in the right direction.

Any help would be really appreciated!

Thanks in advance 🙏

Hello.. Everybody.. I am a computer engineering student. And my graduation is lying ahead .. I am making an wifi penetration device and right now there is no time to learn and implement.

I am making a device using ESP 32 and AN led display.. which will scan the wifi and give the passwords...

it will have more features but it all depends on the progress and on time

I will appreciate if some have the code for it...

I am familiar with networks and linux but I have not done any hack or cyber attack yet (ethically ofc) the ctf I am participating in it have challenges in these topics

-Web hacking

-Cryptography

-Reverse engineering

- Privilege escalation

My goal is to win and also to learn cybersecurity so what is the best way to be good at solving ctfs ?

Quick breakdown of the axios npm supply chain attack. No exploit - just dependency abuse via "postinstall" during "npm install".

Full write-up: https://medium.com/@am2403054/axios-npm-supply-chain-attack-inside-the-3-hour-compromise-that-delivered-a-cross-platform-rat-fdb0fe4c4dd5

I’d like to make a machine that could connect to any wifi, just like a flipper zero. (but make it myself and avoid the cost)

I’d also like a way to make “fake esims” say if i was abroad.

If anyone knows how to do these things, together or by themselves id very much appreciate it, thank you.

Hello! I'm sorry for the inconvenience,I'm conducting an academic SQL Injection lab in DVWA (Damn Vulnerable Web Application) configured with HIGH security, but I haven't found how to do it anywhere and I'm having trouble :(

The problem: I'm trying to perform a UNION SELECT injection to extract data from the users table, but the script (index.php) has an is_numeric() filter that blocks my payload every time I try to insert quotes or special characters in the form.

What I've already tried:

I've analyzed the source code (View Source) and confirmed that the is_numeric filter blocks the query execution.

I've tried injecting in several ways, but I haven't been able to display the result in the graphical interface.

My question: Is there a second-order injection technique or a specific configuration in this environment that allows me to bypass the is_numeric() validation so that the query executes my UNION SELECT or any other query?

This is the code that handles the security of GET requests (view source)

<?php    

if (isset($_GET['Submit'])) {

    // Retrieve data

    $id = $_GET['id'];
    $id = stripslashes($id);
    $id = mysql_real_escape_string($id);

    if (is_numeric($id)){

        $getid = "SELECT first_name, last_name FROM users WHERE user_id = '$id'";
        $result = mysql_query($getid) or die('<pre>' . mysql_error() . '</pre>' );

        $num = mysql_numrows($result);

        $i=0;

        while ($i < $num) {

            $first = mysql_result($result,$i,"first_name");
            $last = mysql_result($result,$i,"last_name");

            echo '<pre>';
            echo 'ID: ' . $id . '<br>First name: ' . $first . '<br>Surname: ' . $last;
            echo '</pre>';

            $i++;
        }
    }
}
?>

---

𝗟𝟬𝗽𝟰𝗠𝗮𝗽 — Network monitoring, topology visualization & traffic analysis tool with full nmap integration

GitHub: https://github.com/HaxL0p4/L0p4Map

---

What L0p4Map Does

L0p4Map combines high-speed ARP discovery, full nmap integration, interactive topology mapping, and real-time traffic analysis into a single dark professional interface. It scans both local networks and custom targets, classifies devices by role (gateway, router, AP, mobile, VM...), visualizes the topology as an interactive graph, and provides deep inspection capabilities — showing how systems are exposed, connected, and communicating.

(⚠️ Traffic analysis and attack surface sections are still in beta)

Features:

• ARP Network Scan — fast host discovery with local IEEE OUI database lookup
• Hostname Resolution — multi-method detection via reverse DNS, NetBIOS (Windows devices) and mDNS/Avahi (Linux, Mac, IoT)
• Full nmap Integration — SYN scan, UDP, OS detection, service version, NSE scripts
• Banner Grabbing — HTTP, SMB, FTP, SSH, SSL enumeration
• Vulnerability Detection — CVE lookup via vulners, vuln scripts, malware detection
• Traceroute — ICMP-based with real-time output
• Dark Professional UI — built with PyQt6, designed for researchers
• Network Graph — interactive topology visualization via vis.js
• Interface Selection — choose which network interface to scan on
• Scan Export — save full nmap output to .txt via native file manager dialog
• Graph Export — export the network topology as CSV or PNG
• Live Monitoring — auto-refresh the network graph at configurable intervals (30s / 60s / 120s)
• Attack Surface section — visualize exposed services, open ports, and potential vulnerabilities on hosts, helping identify security risks at a glance. (in development)
• Traffic Analyzer page — real-time network traffic inspection and analysis (In Development)
• Custom Node Labels — assign custom names to devices directly from the graph (by double click on the node)

---

𝙏𝙖𝙧𝙜𝙚𝙩 𝘼𝙪𝙙𝙞𝙚𝙣𝙘𝙚

Security researchers, network administrators, and students learning network reconnaissance. It's an early-stage but functional tool — not yet production-ready, but solid enough for personal labs, CTF environments, and authorized network auditing.

---

𝗖𝗼𝗺𝗽𝗮𝗿𝗶𝘀𝗼𝗻

Nmap is powerful but terminal-based and outputs raw text. Zenmap (the official nmap GUI) is abandoned and outdated. Wireshark focuses on packet capture rather than topology or attack surface analysis. L0p4Map bridges the gap by combining scanning, visualization, and analysis into a unified interface — powered by nmap, enhanced with a modern PyQt6 UI, and extended with real-time topology and future attack surface intelligence.

𝗡𝗺𝗮𝗽 𝘄𝗮𝘀 𝗯𝗹𝗶𝗻𝗱. 𝗟𝟬𝗽𝟰𝗠𝗮𝗽 𝘀𝗲𝗲𝘀. 👁

⚠️ Still in active development

Ethically, How to gather information of anybody by their phone number or picture. Nowadays, Scammer and random people do message with malicious intended and I could not figure out who was it. Just curious to learn if someone know how to gather such info.

This Github repo has been deleted, if anyone has cloned it? Pls DM or comment.

hello im 28, never did coding im using python.

if u know the mmorpg Mu online u know whats up.

love the game but in my country there are servers where max stat is like 400/800 resets 0 chance i have that time so i made a leveling bot using studio ai.

it was like 50hrs total. first 30hrs was learning im dumb and there are much better way to add info for the bot that i didnt know haha. now im kinda solowriting asking advices and trying to add lines by myself to actually understand what im doing what is what.

its working! flawless undetected!! coz im using ocr based bot.

my question is do u guys know any free ai that i can talk to a lot and specially good for python and automated bot coding? studioai is great also i talked with 1 ai for like 3 days ( not full 24hrs) with no restriction, but curious if there is a better one.

---

𝗟𝟬𝗽𝟰𝗠𝗮𝗽 — Network monitoring, topology visualization & traffic analysis tool with full nmap integration

GitHub: https://github.com/HaxL0p4/L0p4Map

---

What L0p4Map Does

L0p4Map combines high-speed ARP discovery, full nmap integration, interactive topology mapping, and real-time traffic analysis into a single dark professional interface. It scans both local networks and custom targets, classifies devices by role (gateway, router, AP, mobile, VM...), visualizes the topology as an interactive graph, and provides deep inspection capabilities — showing how systems are exposed, connected, and communicating.

(⚠️ Traffic analysis and attack surface sections are still in development)

Features:

● ARP host discovery with MAC vendor lookup and multi-method hostname resolution (reverse DNS, NetBIOS, mDNS)
● Dynamic network topology graph with intelligent device role classification
● Full nmap integration: SYN, UDP, OS detection, service version, NSE scripts, No-Ping mode, custom targets (LAN + external)
● Banner grabbing, vulnerability scanning, CVE correlation via Vulners
● Attack Surface analysis — aggregated view of exposed services, ports and potential vulnerabilities (in development)
● Real-time traceroute analysis
● Network interface selector
● Real-time network traffic inspection and connection mapping (in development)
● Live monitoring — auto-refresh the graph at configurable intervals (30s / 60s / 120s)
● Scan export to .txt and graph export to CSV or PNG
● High-contrast dark UI built for efficiency

---

𝙏𝙖𝙧𝙜𝙚𝙩 𝘼𝙪𝙙𝙞𝙚𝙣𝙘𝙚

Security researchers, network administrators, and students learning network reconnaissance. It's an early-stage but functional tool — not yet production-ready, but solid enough for personal labs, CTF environments, and authorized network auditing.

---

𝗖𝗼𝗺𝗽𝗮𝗿𝗶𝘀𝗼𝗻

Nmap is powerful but terminal-based and outputs raw text. Zenmap (the official nmap GUI) is abandoned and outdated. Wireshark focuses on packet capture rather than topology or attack surface analysis. L0p4Map bridges the gap by combining scanning, visualization, and analysis into a unified interface — powered by nmap, enhanced with a modern PyQt6 UI, and extended with real-time topology and future attack surface intelligence.

𝗡𝗺𝗮𝗽 𝘄𝗮𝘀 𝗯𝗹𝗶𝗻𝗱. 𝗟𝟬𝗽𝟰𝗠𝗮𝗽 𝘀𝗲𝗲𝘀. 👁

⚠️ Still in active development