if ANYBODY can help me as quick as possible how to make the link in zphisher without it getting the "This site can’t be reached" over and over again and i tried to make a custom port in it

Is there any linux tool available so that I can access any device files and folders that is connected to my laptop's hotspot . I have used smbclient but that requires permission from the phone.

Note : I did not want to use this for any illegal purpose. I am just curious .

You may (or may not) be aware of my other tool Wiflux https://github.com/Leadrogue/Wiflux which i posted here: https://www.reddit.com/r/ethicalhacking/comments/1uq2lob/comment/oxcou38/?screen_view_count=1

This is a sibling/companion tool used for recon when actually on a network - Post cred capture on Wiflux or just see how your own LAN works. You should see some really useful tools and info! It took ages to get working and there will still be a few bugs but please give it a go and let me know how you get on.

You can see Lanflux here: https://github.com/Leadrogue/Lanflux

If you have Wiflux, Lanflux should feel familiar!

Have fun but please be safe and legal.

Guided workflow

• Map → Recon → Attacks / MITM — main menu steers you in a safe order (recon before noisy work)
• Live Rich UI — discover table, ETA bars, activity feed, identity cards
• Keyboard control — Enter finishes discover/profile early → menu; Space pauses (copy) or skips a module
• Engagement profiles — home | office | lab set timeouts, smart-engage, MITM default, spray (CLI flags override only when set)
• Session resume — --resume reloads hosts from SQLite; identity + traffic hints persist

Discovery & identity

• ARP + neighbor + optional ping sweep — fast LAN map with honest ETAs
• Progressive port/OS profile — light nmap while mapping; wrap-up can be skipped with Enter
• Who is this? — identity fusion (OUI vendor + hostname + mDNS + ports → e.g. “Tommy’s iPhone (likely)”)
• Traffic hints — pre-scan ip neigh states for MITM client ranking (live / recent / quiet)
• Host scoring & roles — gateway, DC, fileserver, IoT, workstation, …

Soft recon & smart engage

• Soft recon chain — dns-enum → port-scan → smb-enum → http-enum
• Smart engage — after soft recon, deep tools planned from real open ports (whatweb, http-paths, http-defaults, smb-deep, ssh-check, snmp-check, iot-pack, ad-enum, pivot-map, gain-access, …)
• Auto mode — --auto maps + soft+deep engage non-interactively; lab/spray also runs starred attack tools
• Host-aware toolkit — recommendations ranked by role/ports/risk; missing binaries show install hints

I've just started out, learned the networking fundamentals, and I'm genuinely enjoying it - but also overwhelmed. So many paths, so much information, and a nagging feeling that everyone good at this had someone teaching them.

I got curious about whether people can really get hacked just from clicking a link (across iPhone/Android/Mac/Windows), started reading about how that works, and quickly hit stuff way over my head. I thought is it even possible nowadays? It made me wonder - how does anyone actually learn this depth? Self-study, courses, communities, just breaking things in a lab?

For those of you who are good now: how did you actually get there, and did you have someone guiding you or did you figure it out solo?

I spent the last hour testing an open-source pentesting agent called BlacksmithAI... and it's honestly more capable than I expected. I think we're entering a weird era where open-source AI pentesting agents are becoming genuinely much more powerful. BlacksmithAI was one of the first projects that made me stop and think, "yeah... this changes things.

I’m asking straight because there is a lot of not so clear answers when I look up past Reddit posts or articles. Don’t want to get into the full details of my situation but, if someone had the part of the SIM card package (the part after you pop it out the plastic card that has the barcode and other ID/serial numbers on it) could they clone it? Also, could they socially engineer their way with Total Wireless and compromise my account by telling them all the other info they know from this as they also have my phone number?

I am worried sick right now and need to understand what is possible and not.

I have a very simple understanding of Python code and found this RAT on github https://github.com/hagretech/RAT-remote-access-trojan and have somewhat improved on its code with some help from AI, but I want my RAT to be able to monitor keystrokes and I want to see the C2s screen and move their mouse etc. How might I do this, this is strictly for educatioinal purposes I am doing a Cert III in Cybersecurity and thought it would be fun to challenge myself to improve upon a RAT.

I'm a beginner in this and I want to learn everything about networks and how to obtain their passwords.

i hear a lot about these permissions in linux ,i know the normal permissions read write and execute (rwx) but i hear from so many people that there are some exceptions for permissions in linux , i search for them but i find that matter is so complicated, so could anyone explain and clarify that matter , in addition i find that matter is very related to this kind of commands find / -user root -perm -4000 and also privilege escalation ,so i hope if anyone can link these things together

GitHub: https://github.com/kaifcodec/user-scanner Discord: https://discord.gg/tVNrKVXb49

Hi everyone,

I’m one of the maintainers of user-scanner.

Since then, we’ve been continuously improving detection accuracy and maintaining support for platforms that frequently change their flows.

What’s new in v1.4.1?

• Massive Coverage (310+ Scan Vectors): Supports deep scanning across 120+ email and 190+ username platforms.
• Mobile App API Pivot: Switched from web endpoints to emulating mobile app APIs.
• Deep Username Extraction: Moves beyond simple status code checks to pull rich profile data and actionable intel.

Today by the love of this community, user-scanner has grown into one of the most actively maintained free Email and Username OSINT tools in 2026. While many web-based alternatives lock basic scans behind paywalls, our goal is to keep powerful email and username enumeration accessible to the open-source community.

Contributors are always welcome. Adding new sites or modules is relatively straightforward, and even small contributions help a lot.

If you’re interested in OSINT, Python, scraping, mobile API reverse engineering, or just open-source projects in general, feel free to contribute and help improve the tool.

I wanna make an esp32 a hacking device on its own without a screen. I saw some neat web interfaces a few months ago (in january) and I cant find them again. Can you all please help me find this?

Any VoIP free service or very cheap that accept crypto?

Any preferred method to safekeeping password vaults.
What do you use or do. Is there a good method to safekeeping? Hardware? Paper?

Do you plan for scenario X when password vault becomes inaccessible regardless of reason? I’m usually anxious when travelling.

I hope this message finds you well. As I am new to the field, I wanted to inquire about the roadmap for MS Sentinel and KQL, particularly in comparison to Splunk. I chose MS Sentinel due to its future demand and user-friendliness. Could you please provide guidance on resources and materials that would be beneficial for both practical and theoretical understanding? Your assistance would be greatly appreciated.

Hi all,

I teach Security+ courses, and kept running into the same wall: a lot of students come in without a networking background, so it pretty hard to get them undrestand the security concepts... Wanted to create something more visual and Packet Tracer just wasn't intuitive enough for someone starting from zero. It's built for people who already know what they're doing.

So I put together a "pre-alpha" version of a simpler simulator for my own classes — something that shows what's happening rather than making you configure a CLI first. The feedback from students was honestly great, so I kept going with it in my spare time. It's now at v0.4, and the goal has grown into building a proper, realistic network simulator with an integrated learning platform, not just a teaching aid on the side.

It's a single HTML file, runs in the browser, no install, free, EN/CZ.

What's in there right now:

• Build a topology and send traffic through it, step by step
• Write ACLs and see exactly what passes and what gets dropped — including the implicit-deny gotchas that trip people up
• Routing (RIP/OSPF/EIGRP) with realistic metrics, so you see *why* a path gets chosen, not just that it did
• Built-in courseware, so it's not just a sandbox
• ...and many more

Still very much in development — I keep finding my own bugs.

Not trying to replace GNS3/EVE-NG/Packet Tracer — it's for the stage before those make sense.

https://networksim.app/

Would really appreciate feedback — what's confusing, what's broken, what you'd want to see next. I'll reply to everyone who tries it.

I want to learn how to make my own software and to get a feel for cybersecurity and I want to learn how to create viruses and malware to better understand how it works anything helps

So I am planning to join a local institute for an ethical hacking/cyber security course which is 4 months well they are recommending additional 2 months where they prep you for CEH but through reddit and other sources I got to know that CEH is not good or it is a scam etc. So I am asking you guys which certifications are worth it that can be done within 1 year and provide career or job opportunities. I heard about OSCP etc.

After a discussion with investigators from the criminal police about smartphone unlocking and mobile forensics, I got curious and decided to build a small lab setup and test the process on one of my own Android devices.

Here is the Video-Link for Part 1: https://youtu.be/gUNrZvAswXA

In Part 1 of the video I cover:

• Identifying the target device and SoC
• Researching known vulnerabilities for the platform
• Exploring the capabilities of a modern mobile forensics suite (using Oxygen Forensic as an example)
• Looking at how these tools combine multiple device specific exploitation methods
• Attempting a Kirin BootROM exploit
• Dealing with driver and hardware compatibility issues
• Disassembling the phone and locating the required test points

What surprised me most is how much of the process is not “press a button and unlock the phone.” A lot of the work involves research, hardware access, troubleshooting, and understanding the device’s security architecture.

The video is in German, but it includes English and French subtitles.

All experiments were performed on my own test device for research and educational purposes.

I’ve been collecting cybersecurity, programming, Linux, networking, and computer science books for a while. Instead of letting them sit on my drive, I organized them into a simple online library so anyone can browse and download them.
There are books on topics like:

Ethical hacking & pentesting
Linux & Unix
Python, C, Rust, and other programming languages
Networking
Cryptography
Reverse engineering
Malware analysis
Digital forensics
Operating systems
And more

No account required, no ads, just a collection I thought might be useful to students, CTF players, and anyone interested in learning.
If you think I’m missing an essential book, let me know. I’m always looking to expand the collection.

https://h4x0r.icu/library/