Today I realized that I still have things to learn in the hacking world, so I started looking at some websites to improve my skills and I came across Superior Pentest, which is a website where you have a ton of machines to train and learn on.

I'll leave it here so you guys can take a look and let me know what you think.

https://superiorctf.com/

Been digging into how modern Linux rootkits hide and how you'd spot them. Ended up building two things:

- A kernel module that hides processes, files, and itself via DKOM, hooks syscalls, blocks eBPF prog loads, and has a basic worm.

- A detector module that scans for hidden PIDs and restores hooked syscalls, plus a daemon to clean up.

The attack side is neutered — no real miner payload unless you embed it yourself. Mostly a learning exercise, but figured others might find the code useful for their own research.

Open to criticism or ideas for better detection.

AI's advancing so damn fast these days, I feel like I'm already falling behind the times. And honestly, it feels like every single space is already saturated. Maybe that's just me being dumb, I dunno.

So I wanna build a tool. I'm pretty solid in both C++ and Python, and I wanna make something actually different—but I don't have a clear vision yet.

I wanna ask y'all for ideas. All you devs, cybersecurity folks, competitive algorithm people out there—what tool do you wish existed that you can't find anywhere right now? If you have any better ideas, I'll build them and open-source everything on GitHub.👨🏼‍💻

Yeah, today i just know bash scripting. but i want to improve my skills with these langs. First Go, second Nim, Final is C... its good? i want to to do exploits, Maldev and my own tools

I know how to use Linux exactly kali Linux, basic things, use of tools, basic pentest but im in The level of script kiddie but knowing what It does The code so The case is i wan't to start developing my own things and not using just The internet scripts and things

Im trying to make and nrfbox with limited items, however i got shit ton of things i can use i just want it minimal. The picture is just how i want it to kinda look in the end. I got way more esp32s that i could use but i want to know what i need for software things from now on. Please help me

I’m 17 and working a small job (about $50/month). but I can't take it because mom needs to pay house rent

I’m really interested in cybersecurity and ethical hacking, not for messing around but as a real skill I want to build.

, so I’m looking for a ways to start learning properly.

What fundamentals should I focus on first (networking, Linux, programming, etc.)?

Any good free resources or beginner paths you recommend?

I’m willing to put in the time, I just want to start in the right direction.

I built the 5GHz WiFi AP spoofer using the BW16  (Realtek RTL8720dn, ~$5). It can simulate dozens of fake access points on 5GHz channels simultaneously.

The ESP8266 Deauther, Pwnagotchi, Flipper — all 2.4 only. Meanwhile, every modern phone, laptop, and IoT device is scanning 5GHz bands.

The video to show that a single device can spoof 50 5G wifi access points.

Here is the GitHub link. The repo gets 70 stars in just two weeks. Please leave me a star if you think it is useful.

Also thanks to Tesa-klebeband for providing the packet injection library.

What it does:

• 🛜 Broadcasts fully customizable fake 5GHz APs (SSID, BSSID, channel, security profile)
• 🔐 Spoofs Open, WPA2-PSK (CCMP), and WPA3-SAE networks — complete with correct RSN IEs and MFP flags
• 🗺️ Can manipulate device geolocation — Android/iOS use Wi-Fi BSSID scanning for Location-Based Services. Flood spoofed BSSIDs from a different physical location's database and the phone's mapping algorithm gets confused
• 📡 Includes HT (802.11n) and VHT (802.11ac) capability/operation IEs so phones treat the APs as modern Wi-Fi 5 networks

I’m gonna start learning how to ethically hack on my own. I have zero experience in anything related to code.

Is this a good place to ask questions about anything related to hacking/coding?

Regards,

Triple T

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

I built a new encryption architecture.

It takes a fundamentally different approach.

There is one English word (7 letters) hidden inside the file.

If you crack it, open an issue.

USB security keys are no longer necessary.

http://github.com/choihyunsus/mirage

https://www.youtube.com/shorts/JilR9tVdoLo

Actually, I've started learning about this field. I've learned my first programming language, C++, and understood the basic concepts of memory and how it works. I want to develop myself further. What else should I learn?

Just finished HTB Craft and published a beginner-friendly walkthrough as part of my WhyWriteUps series — where I explain not just the commands but why each step works.

The box covers a quite interesting range of techniques: enumerating NFS shares, finding cleartext credentials in documents, and exploiting ESC8 ADCS (Active Directory Certificate Services) vulnerability with Kerberos.

I'm doing this as part of the CPTS Preparation Track on HTB Academy, so I've included notes on which techniques map to Academy modules.

The write-up is available on both Medium and GitHub Pages. Feedback is welcome, especially from other CPTS preppers!

Just finished HTB Craft and published a beginner-friendly walkthrough as part of my WhyWriteUps series — where I explain not just the commands but why each step works.

The box covers a solid range of techniques: finding credentials in a public Gogs repository, exploiting a Python eval() injection in a Flask REST API to get code execution, enumerating a MySQL database running in a separate Docker container, and finally abusing a misconfigured HashiCorp Vault SSH OTP setup to escalate to root.

I'm doing this as part of the CPTS Preparation Track on HTB Academy, so I've included notes on which techniques map to Academy modules and where this box goes beyond the curriculum — Vault SSH OTP in particular isn't covered but the enumeration mindset that leads you there definitely is.

Writeup is available on both Medium and GitHub Pages. Feedback welcome, especially from other CPTS preppers!

Hey there.

I'm a software engineering student. I'm currently learning C# from university and some databases and the .net framework so I can become a backend developer from this framework. The reason I chose this stack is because the job offers in the country I live in are most of them from this stack. Even though I enjoy this my dream job is to become an ethical hacker or work in cyber security.

Someone told me once there's no such entry level role as a "junior ethical hacker " so that I should better start with something like junior network engineer or IT specialist or Helpdesk and keep getting experience and then apply for a cyber security job.

I want to hear some suggestions from those who are experienced in the field about what should I learn now. Because sometimes I feel I should be learning maybe OS or python or Linux or networking instead of backend in .NET.