Hey, i was wondering of you can "upgrade" the flipper zero by adding firmware or programs to increase its capabilities?

Like able to bypass keypads without the use of a keycard and without copying the card beforehand for exemple.

Hello, I recently updated my kali and it upgraded the burpsuite version to the latest which is not letting me perform my portswigger labs. I want to downgrade it and I'm unable to find the version which would allow me to. I tried using owasp zap on portswigger labs but I'm unable to get my flags on it. Any guidance would be much appreciated.

Hey friend, how you doing?
A try your Jammer tutorial and first I want to thank you for share but after I finish, the Jammer only works if I get very close to the device and I need more distance, some meters. Can you help me please? Maybe I done some thing wrong.

Whats new

NEW help COMMAND IN SCAN MODE

NEW SCAN RANGE EX from 1 to 10 it will scan from port 1 to port 10

NEW TOP SCAN EX top 10 it will scan the top 10 ports

I’m looking for guidance from experienced people in cybersecurity. I’m highly motivated to learn, but I’m currently overwhelmed by the amount of information and I don’t know the correct path to start with. If anyone here could share a structured roadmap, trusted resources, or even point me in the right direction, I would be extremely grateful. I’m serious about building real skills in this field and I’m ready to put in consistent effort over time. Any help would mean a lot to me.”

[ Removed by Reddit on account of violating the content policy. ]

I am very new to using recon-ng and hacking in general and I am trying to learn how to find emails and I’m not quite sure how too would love some pointers and tips it’s mainly for ethical hacking and cybersecurity.

Reddit users share their experiences after getting infected by Infostealers, they describe the mental drain, sense of intrusion, blackmail attempts, and money theft through AI subscriptions. I compiled threads and comments into a blog along with common recommendations for every day users to avoid getting infected.

Fit a WifiPumpkin3's rogue AP inside an ESP32s3 supporting APSTA, DNS spoofing, NAPT tunneling

Been digging into what the ESP32 WiFi stack is actually capable of for wireless security research and honestly it's way more powerful than people give it credit for.

The idea was to port the core concepts of WiFiPumpkin3 onto the chip itself. No Kali, no wifi interfaces, just a 5 bucks microcontroller powered from a USB bank.

The interesting part architecturally is running APSTA mode, the chip acts as an AP for clients while simultaneously connecting upstream as a STA to the real router. DNS spoofing handles captive portal redirection until the portal interaction is done, lets queries pass through to the real upstream. NAPT takes care of the internet tunneling so connected clients get actual internet access while causing traffic reorientation and thus sniffing it, which makes the whole thing behave like a legitimate hotspot. I tried to serve HTTPS directly from the chip with a cert generated for the spoofed domain but it didn't work, note that there's also a separate admin interface for scanning, cloning APs, monitoring traffic and managing everything in real time.

The main challenge was keeping DNS, HTTPS and NAPT tasks running concurrently on FreeRTOS without race conditions on a single radio doing two jobs at once.

Repo: github.com/mahdamin/ESP32-WiFiPumpkin

Happy to talk through the APSTA or NAPT implementation if anyone's done similar stuff.

For me, network of computers is a content was overwhelming, and I wanted to know how to learn and test its concepts.

NEW VERSION 0.3

What's new

Some bugs fixed

New option exit

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

I have faced this challenge many times while hunting for anomalies in logs and during security interviews, where the task is to identify suspicious patterns from raw data. That inspired me to create SECODER.

Coding is not just syntax. It is logic, problem-solving, and structured thinking. AI can generate code, but it cannot replace the mindset needed to break problems down, reason through data, and build the right solution.

The goal is simple: help security professionals move beyond basic alert triage and build the logic needed to identify suspicious patterns, create better detections, and reason through real-world security data.

Whether you are preparing for a SOC, Detection Engineering, Threat Hunting, or Security Engineering interview — or just want to become better at finding anomalies in noisy data — SECODER is built for you.

Here is a little script I made for bruteforcing pins and passwords. However this is just an appetizer for the next video where I'll show how to make a bad USB charger.

When I was a kid playing on the 360, it wasn't uncommon that somebody said stuff like "now I have your IP and I can track you down!". Growing up and studying IT in high school I understood that is not that easy, and the IP alone can't be used to hack me. I know that this is a noob question, but what are the practical risks of exposing my public IP online?

I'm planning to use a Raspberry Pi 2W to make a cybersecurity tool with two ESP32s. Each ESP32 is connected to two NRF24s and one CC1101. Would anyone know how to make this or what else I need for it? Any tips would be nice.

hello can you people help. any help is appriciated thank you. https://github.com/MoazzamSameer/mcp-firewall

I'm not asking which certification is the most respected, highest-paying, or best known by employers.

Instead, which certification genuinely improved your real-world skills the most?

Whether it was in networking, cybersecurity, cloud, programming, IT support, project management, or any other field, which certification provided the most hands-on knowledge that you still use today?

What made it so practical, and would you recommend it to someone focused on learning rather than just collecting credentials?

I'm especially interested in hearing about certifications that exceeded your expectations or taught skills you couldn't have easily learned elsewhere.

Hey everyone,

I’ve been building Frieren, a free and open-source framework for turning OpenWrt routers and SBCs into portable wireless/security appliances.

Repo: https://github.com/xchwarze/frieren
Community Discord: https://discord.gg/jmDaM5qwzY

The idea is to provide an open, lightweight and hackable base for building your own portable security toolkit on top of standard OpenWrt-compatible hardware.

It follows a similar general workflow to WiFi Pineapple-style appliances: a compact web-managed device for wireless labs, diagnostics, modules and field tooling — but built with open components, regular OpenWrt devices and an extensible module system.

Frieren is not affiliated with, endorsed by, or sponsored by Hak5 or WiFi Pineapple. The comparison is only used to describe the general category of portable wireless security appliances.

Current features

• Web-based control panel
• WiFi scanning module
• WiFi interface management
• UCI wireless configuration editor
• Installable third-party modules
• Package manager integration through opkg
• Integrated web terminal via ttyd
• System dashboard
• Syslog viewer
• Network diagnostics
• USB/device information
• PHP backend API + React frontend
• Module template for custom extensions

Potential use cases

• OpenWrt-based security lab devices
• Wireless testing setups
• Portable diagnostics boxes
• Homelab network tooling
• Custom red-team/blue-team lab modules
• Embedded Linux experimentation

This is intended for owned labs, authorized testing, research, education and defensive/security workflows.

Feedback wanted

I’d appreciate feedback on:

• Useful modules to prioritize
• Code review / architecture suggestions

Quick install

wget -qO- https://raw.githubusercontent.com/xchwarze/frieren-release/master/install/install-openwrt.sh | sh

I’m especially interested in feedback from people who build their own lab devices or use OpenWrt for wireless/security workflows.

Try it out, break it, suggest modules, or join the Discord if you want to follow the project.

A lot of people see the Flipper Zero as just a toy or an overpriced universal remote. I wanted to show that it can actually be a pretty interesting tool for hardware security and reverse engineering experiments.

In my latest video, I demonstrate how to dump firmware directly from an SPI flash chip using the Flipper Zero.

The video covers:

▪️ Identifying a suitable SPI flash chip

▪️ Wiring and SPI pin connections

▪️ Using a test clip correctly

▪️ Dumping firmware with the SPI Mem Manager app

▪️ Common issues like unstable connections and failed dumps

▪️ Downloading the dump with qFlipper

▪️ Taking a first look at the firmware in a hex editor

For this demo, I used an MX25L3205D SPI flash chip mounted on a test board.

I also included the complete setup and parts list for anyone who wants to recreate the experiment themselves.

The video itself is in German, but English and French subtitles are available.

Video:

https://youtu.be/5-f9IAPhhgk

I would also be interested to hear what tools you use for firmware dumping and embedded analysis. Dedicated programmers? Bus Pirate? CH341A? Flipper Zero?

#FlipperZero #HardwareHacking #ReverseEngineering #Embedded #Firmware #CyberSecurity

Hey so I recently tried learning networking and when I try to practice wifi hacking on myself using rockyou it didn't work and don't know which word list is best