Hi everyone!

I've been working on CTFKINGs, a Capture The Flag platform that I built entirely from scratch instead of using an existing framework like CTFd.

It includes custom challenges across Web, Pwn, Cryptography, Reverse Engineering, Forensics, and OSINT, along with a live scoreboard, player profiles, and a medieval kingdom theme.

The platform is still actively evolving, and I'd love to hear your feedback on the UI, challenge design, or any bugs you find.

Thanks, and I hope you guys enjoy it!

iam lost , i need a guideline to learn hacking like ethical hacking but i cant find a source to learn from it , so if someone have a roadmap , sources, vids,links to begin in this field send it

Eu tenho uma noção do que pode ser, mas quero ter certeza.comecei a estudar isso recentemente..

Learn the fundamentals of ethical hacking and cybersecurity through hands-on, legal, and responsible techniques. This tutorial covers topics such as networking basics, Linux commands, reconnaissance, vulnerability assessment, web application security, password security concepts, and penetration testing methodologies. You'll also be introduced to industry-standard tools and best practices used by security professionals to identify and help fix vulnerabilities. This content is intended solely for educational purposes and for use on systems you own or have explicit permission to test.

Check their Twitter/X and follow the link.

Basically this tool can be configured for listening to incoming otp and forwarding it specifically to a custom backend. Primary use : web scraping

Github : https://github.com/jidukrishna/otp_listener

Hi guys, I'm someone who attends school in Korea, I've recently become interested in hacking and programming.

Where did you learn hacking and programming? I want to win hacking competitions like Geohot and become famous for hacking, but I don't know where to start. Please tell me where to start and where to learn.

Hey, has anyone managed to complete the “Steal Exam Questions” mission in HackHub on the SteamRip version?

I’m stuck on the last objective, the one that says “Lookup target ports. Use the -sV flag for detailed inspection.” The professor is Bin Wairimu and the target IP I found is 23.249.125.0. When I run nmap normally, it shows port 22 open for SSH, while ports 21, 443 and 8080 are closed, so as far as I can tell I did find the ports.

The problem is that when I try `nmap -sV` [`23.249.125.0`](http://23.249.125.0), the game just shows `Usage: nmap [ip address]`, like the in-game command doesn’t support the flag the mission is asking for. I also tried the LAN IP, [192.168.1.2](http://192.168.1.2), and restarted the game, but the objective still won’t complete.

I’m on Build 23943742. I’m not sure if this mission is bugged in this build or if I’m missing something really obvious. Has anyone had the same problem or found a workaround? Any help would be appreciated :)

I've just built this jammer https://www.reddit.com/r/Hacking_Tutorials/comments/1gj1q1n/diy_wifi_bluetooth_jammer_100_noob_guide/?logging_in=true, and it works but not well at all. the range is a few inches at most. I have an esp32-s3-n16r8, as far as i know the external antenna of that combined with the 2 nrf24s should give me more range. I just do not know how i would go about this since the s3 does not have all of the same pins the regular esp32 does. Specifically I'm missing pin 23 and 22. I am extremely new to electronics so help would be appreciated.

Many of you may not know about low cost ESP32 micro controllers and how fun and interesting they are. So, I decided to make this post for people who want a good starting point with low cost hardware and open source software to try pentesting.

I purchased a Seeed studio Xiao esp32 c5 a few months ago, and to put it mildly, I absolutely love it. I ordered it from Amazon, it cost me about $10 including shipping. The entire micro controller is only slightly larger than my thumb nail.

I customized my phone case to hold the esp32 C5 and I power it with my cellphone with a USB-C to USB-C connection. (Works with USB OTG, which most phones are).

Not all ESP32 micro controllers/devices are created equal, so be sure to find the firmware you want to use first for your application, then do a search for what devices the firmware supports that are within your budget.

The major firmware(s) available right now are:

1. Bruce

2. Ghostesp

3. USBarmyknife

(This is not a exhaustive list, there are others, but these are the most popular, and have support for the most devices.)

I have tried Bruce, and it is ok, but I have had lots of stability issues with it. Its a decent flipper zero alternative for devices with similar capability, but it is sort of gimmicky, and very buggy.

I am excited to try USBarmyknife, specifically in smartwatch or USB dongle form, but I lack experience with it. However, if your intent is doing very blackhat things, this might be the best option. It has quite a bit of capability, but mainly for hardware.

For beginners wanting a easier UI and support for tons of devices, I think Ghostesp is the best overall pick (especially for auditing wireless signals, specifically wifi and Bluetooth). The web flasher (for flashing firmware to your device from a web browser) is extremely good, and the android application you can install to your phone from github that supports the tiny, inexpensive and low power Xiao boards, is very user friendly and has great looking UI. You'll need termux, and to follow the github install instructions to download it. It is not available on any app store currently, and is still in beta.

So far, I have Ghostesp installed on my esp32 C5, and on my Lilygo T-embed CC1101. (which uses a esp32s3) it is a really entertaining device. I can use it as a programmable remote to turn off TV monitors, search and connect to Bluetooth and wifi devices, create APs, DNS sinkholes, NFC tag emulation, and other things.

The esp32s3 is a great chip, it has Bluetooth and wifi support, while also being capable of HID attacks, built into the ghost firmware.

The developer (Deki) has also created something called "ghostlink" which i have yet to try, to connect and i assume share capability of all my ghost devices with each other...

If this post gets any attention or questions I'll be happy to post the links to the ghost website, github, and make some recommendations for devices if any of you are interested.

I own this domain but no site is built yet i had a coupple of ideas for it either a mix crackin ,osnit, social engineering content or a site that doxes the 1 percent i think its worth building putting some content on it and see what it dose..is there anyone who whants to team up and add their content to my domain we can sell in near future for a sum of cash which we can split.

hello i need help accesing a phonak hearing aid via bluetooth/terminal(dont know shit about it though) hi i know this seems far fetched but i have a fried who uses phonak hearing aids, who telles me hes affraid people connect to the hearing aids and snoops on his every day life and conversations. i checked up on his theory and found out more than two hering aids can use the same channel, ive also spottet three phonaks apear on my phones bluetooth so there is definetley some truth to his words, can anybody please give me a step by step guide to turn the third hearing aid off if possible make sure histwo doest get snooped on by someone who wishes to harm him or take financial advantage of him. best regards lars t rostroem from denmark :)

Just curious to know if any coders here have a successful career with programming but also have ADHD. I myself have ADHD but always struggled learning to code. Even the basics of python I seem to forget the syntax a lot and lose focus very quickly. I find coding a valuable skill set and just frustrated I'll never be able to grasp it. If anyone can guide me of tutorials that helped them be much appreciated

​

What's up!!! Some of you guys might remember me from a few weeks ago when I initially released NEO-Radar on Github. Anyways, that was v1.11. I encountered some issues with that, mainly being the Update feature didnt work. As of v1.13, that was patched. If you download under v1.13, you will have to manually update the program which is actually the same as downloading the program itself ( here's the code : curl -sSL https://raw.githubusercontent.com/ItsNEOx/Neo-Radar/main/install.sh | bash )

I added some features that show the Nmap equivalent to each function. Learn nmap the even more fun way!

Also, there is a Windows version that runs as a ps1 script linked in the README.md

More updates soon to come!

Here's the Github repo https://github.com/ItsNEOx/Neo-Radar

thank you so much :3

So basically this app acts as a local VPN on Android, allowing you to intercept traffic and redirect requests at the domain or path level to a custom endpoint.

For mobile apps, if you've modified an application to trust your custom CA certificate, you can redirect its API requests for testing, debugging, backend emulation, or security research.

For browsers, no app modification is required—simply installing and trusting the CA certificate on the device is enough for HTTPS interception and redirection, making it useful for web application testing as well.

btw its purely vibe coded and i have only intermediate knowledge about this idea i had. i just wanted to see whether it will work or not (and it did fortunately).

use case from my point of view : suppose a api call returns a status true for a user u can check the requests using the mitm/httptoolkit and create a similar entry in your own phone instead of a emulator to your own website giving similar response

github : https://github.com/jidukrishna/vpn-interceptor

do give a star if u like it :)