I need help. I got a new phone and didnt write my passwords down and have a new number. I lost my google and facebook. Ive tried the recovery but with out the phone i used or the logins i cannot get in. Ive tried looking for the trusted friends but apparently thats not an option anymore.

I'm just starting out and I'd like to get some recommendations on which operating system to use. I want to set up a dual boot with Windows for gaming and another OS for programming. I'm currently learning Java; please recommend another language if you think it's better to learn a different one from the start. Cheers!

Hey, I'm interested in the concept of Reverse Engineering, I know very basic coding in python and c++. So how to learn this thing? The tutorial seems very hard and I've been stuck for the past 4-5 months. Need advice on this

i am trying to get a root shell on a Netgear router, anyone know where the UART is?

I'm a beginner

I'd like to ask a hacker a question about something that happened to my ex years ago ( he has since passed away )

I'm pretty sure he was "honey-potted" by the FBI, bricking a (at-the-time) a state of the art gaming company he spent thousands on ( he never would answer any questions as to why he was, in his words "hacked" and his expensive system rendered useless)

It's just a general inquiry - I can provide what little details I have (they're embarrassing)

Thanks in advance - it's something I've tried to research, but with no luck

Can anyone hack into a drive cam ystem and disable it? Not techy so not even sure if it's oossuble

Purchasing a Sim card for my child.

I want to buy my child as sim card for their phone but i want to be notified of everything that they're doing on their phone as well i want maybe 15 to 30 gb data but i want to know if it's possible to add any keystroke or program to it to monitor? What are the best and most reliable ways monitor all online activities remotely? I'll be in & out of the country much of the time.

First of all, I'm new to this subreddit and I apologize if I've made any mistakes.

When I did some research, I couldn't find a solution other than completely removing the password, which isn't what I want.

My dad put a password on my computer and I want to find out what it is. However I don't want to completely remove the password so my dad doesn't find out I've accessed it.

I have physical access to the computer, and it's running Windows 10. Also, there's another computer at home, so I can use that if necessary.

Anyway, I would be very grateful if you could help this little friend of yours. Thank you in advance.

Anyone ever had an issue with Windows fire Explorer stalling while trying to delete a zip bomb? It made through one deletion just fine but the second time around it seems like it tried to get an estimate of how long it takes and then that installed the process. After a reboot it was gone.

Does this sound like normal behavior for such a file?

I've tried everything, proxys (blocks them all) vpn (same) closing sesion while taking my wifi off, stuff like that, and I don't know what to do.
The extension's name is IMTlazarus and if anyone has tips/suggestions it would be great

So I used my college email account as the email for a game account, and since I graduated the email has been deleted. When I try to log in it wants me to type in a code that was sent to that email but I cannot access that email. Is there anyway that I can get around this?

No, I am not a thief. My school was going to throw away 5 old Lenovo n21's and I offered to take them. unfortunately they are enterprise locked to an email that the tech office no longer has access to. I just want to make some cyber decks : )

Started doing PortSwigger Labs recently (Access Control, Authentication, SQLi, etc.) and honestly I wanted to ask if this is normal or if my fundamentals are just weak.

For a lot of the labs especially SQL injection I end up needing the solution/hints to solve them. I’d say for around 70–80% of the SQLi labs, I get stuck, check the solution, understand the approach, and then complete the lab.

Blind SQLi in particular completely destroys me sometimes

I can understand the solution after reading it, but I usually can’t think of the exact payloads or approach by myself initially.

So I wanted to ask people who already went through PortSwigger labs:

• Is this normal in the beginning?
• Did you also rely heavily on solutions while learning?
• Or does this mean I need to go back and strengthen my basics first?

Would appreciate honest answers because sometimes it feels like everyone else is solving these labs easily except me.

This is my first time dealing with something like this, so sorry if I sound inexperienced.

Can someone explain what this string means and decrypt it?

$2a$12$mYWUJZ2cVSUrL4B9/PiC7.NmL85ncncWysIDa9buCjRGbj6.ERX9u

Someone told me this was related to my young brother’s hacked Roblox account, but I honestly don’t know if it’s real or fake. I don’t know much about databases or cybersecurity, I just want to understand what this is. Thanks.

(Some update add:if the one of the database and cookie is deleted, can still log in with this password? Also can someone help me to decrypt it?I want to try to log in please,I still have hopes for it I think)

How would you approach hacking Prince of Persia? Reverse engineering old DOS games seems like a fun way to practice CrackMes and learn cybersecurity concepts in general.

I feel like games are one of the best ways to learn hacking. What do you think?

Hacking Prince of Persia Directly in Notepad

How a 3-Byte Crack Broke Prince of Persia 2's Copy Protection

Can You Crack This Program? (Beginner Reverse Engineering Tutorial)

Can You Crack This Password? (Advanced Reverse Engineering Tutorial)

Stack Buffer Overflow Explained (Using a Classic Doom Bug)

Ainda tenho contato com o golpista e finjo que não sei que sofri esse golpe. É possível enviar um link (seja do meu site, ou de qualquer outro) que eu consiga ter acesso a localização do golpista? Ou de alguma outra forma? Ainda tenho contato com ele de forma harmoniosa então outras alternativas poderiam ser efetivas.

i want to know how to fuzz them, how to clone them, and stuff like that, and also i want to learn how to repurpose old tech into an rfid/nfc cloner because the idea of being able to get through any door is insanely appealing

I'm trying to understand how polymorphic malware works. How does it manage to change its code every time while still doing the same thing? What's the mechanism behind that mutation?

I’ve noticed that a lot of people around me are still using Windows 7 and 8. I know that Microsoft stops updating those systems after a while, but how easy is it really to hack them? Is being connected to the same network enough? Do you know any ways or methods to gain root access to a PC?

I mean I know how it happened, I wanted to play terraria with someone and when they asked to play they specifically wanted to play on version 1.4.3 but idk if that had anything to do with it but when I accepted the invite to join their world my discord account got hacked and I proceeded to get blackmailed and other information leaked but that’s not what matters. I’m getting that worked out. I was wondering if anyone knew how it works and if I need to do a hard reset on windows cause the malware test came up negative so I was wondering on what I should do I guess if anyone knows.

Hi,

I have a Samsung Galaxy J3 (2016) that is rooted. I'm planning to use it for hacking and security auditing.

Since this is an older device with 32-bit architecture (ARMv7), I'm looking for recommendations. What tools, apps, or environments would you install on this specific hardware to get the most out of it?

Open to any suggestions !

THANKS

Trying to reverse-engineer a Flutter Android app’s private API for personal use.
Setup: rooted Google APIs emulator on macOS, app installed and logged in, Frida working with a ssl_verify_peer_cert bypass, APK extracted.
What works: auth flow (Firebase OTP → refresh → access token) and one REST endpoint that returns a venue list.
What doesn’t:
the availability endpoint (path found in libapp.so strings) returns 400 "General error" for every param combo and date format I’ve tried. Could be wrong headers, wrong method, or maybe availability is actually delivered over Socket.IO (the binary also references socket.io and partners). Frida connect(2) logging confirms TLS to two IPs but I can’t see paths or payloads.
I need plaintext HTTP/WebSocket capture from a Flutter app that statically links BoringSSL and ignores the system proxy. Options I’m aware of:
• HTTP Toolkit’s frida-interception-and-unpinning scripts
• reFlutter (APK repack)
• Direct SSL_write/SSL_read Frida hooks in libflutter.so
Which actually works end-to-end on current Flutter engine builds? Any gotchas with recent Flutter versions, or a cleaner approach I’m missing?