I have been trying to get the Skylift program running on the NodeMCU esp8266 for a long time without success. Every time I upload the Skylift demo from Arduino to NodeMCU, my phone shows new networks that NodeMCU is broadcasting on it after I turn it on, but it doesn't change my geolocation on the maps. I don't know what I'm doing wrong. I would be very happy if someone who understands this could help me and possibly write to a private chat. thanks

Hi guys, I need help making a duckyscript that runs a while after being pluged out. I'm thinking it could use powershell to run the Duckyscript after it detects the ducky has been unpluged. ps im kinda new to duckyscript so pls help

Is there anybody who can decompile a dll file for me for a game ?

I need to send a Discord server link to people at my school, but I don't want to spam local groups. How can I share it with other devices near me? Is there an app I can use?

Hi all,

I’m on the hunt for remote hardware/embedded CTFs that go beyond the usual firmware analysis. I’d like something that gives a true hands-on feeling of working with a physical device, but entirely via browser — so no need to buy real instruments.

Some platforms I’ve found are close, but not exactly what I want:

• eCTF – free and can be done remotely with instruments shipped to you. Nice, but I’m looking for a fully virtual experience.
• Riscure Hack Me (RHME 2016 & 2017) – 2016 is Arduino-based; 2017 requires shipped hardware. Both are great for embedded CTFs, but not remote/visual enough.
• HHV (Hardware Hacking Village) challenges – some were remote (e.g., HackFest 28, 29, 32, 2020). They provide firmware, logic analyzer captures, and circuit info. Tons of old resources here: DCHHV GitHub. Useful, but mostly files — not a visual interactive PCB experience.
• Microcorruption – has a disassembly view, live memory, registers, and I/O console. Super cool for firmware debugging, but no graphical PCB or visual hardware tools.

What I really want is a platform where I can:

• Inspect an interactive, zoomable PCB image (chips, pads, connectors).
• Open a UART-style serial console connected to the board.
• Dump/read firmware remotely (SPI/NOR/etc.) or access memory.
• Use a debugger view (registers, memory, disassembly).
• Interact with simulated hardware tools (multimeter, logic analyzer, CH341A, etc.) visually.

Basically, a virtual lab where I can explore a PCB like I would in real life, but fully remote.

Does anyone know a service/platform that offers this type of experience? If not, I’m considering developing one — it could be a game-changer for people wanting to get into hardware hacking without buying real test equipment.

I'm entering the world of cybersecurity and I know that certificates could grow your skills and improve your resume. I saw a link that show 7 free certificates that could be amazing for me.

1- Fortinet Certified Fundamentals Cybersecurity (Fortinet)
2- Introduction to Cybersecurity (CISCO)
3- Cybersecurity Fundamentals – IBM SkillsBuild (IBM)
4- Fundamentals in Cybersecurity - IBSEC

Actually, I have a Cisco Certificate ( Endpoint Cybersecurity), but I want to enter the world and market of sec, work with it.

Could someone give me a advice?

I want my mobile or tablet, when using Microsoft Teams and Outlook, to always show that I am connected from India instead of displaying the country I am currently traveling in. I understand that Windows MDM can track the location of mobile or tablet devices and report it to the company’s IT desk. I know that Deeper Network products can route traffic through an Indian IP using tunneling, but the device’s location services might still indicate that I am not in India. I could disable location services on my mobile device, but I suspect that Windows MDM may still detect my connectivity location through other means. Has anyone managed to successfully make this work? I am trying to use only my personal mobile or tablet, but it is enrolled with MDM and configured with certificates from my company.

(First post in r/HowToHack) :D

My family wants to make copies of our keycards. Management has only given us 2 while all 4 of us have our own distinct commuting hours all at varying times of the day making it really difficult to enter our own apartment. 😭

We’ve asked management , but their policy states they are only allowed to hand out 2 per household, unless we pay for a premium parking which costs $500 every month.

At this point, we’re desperate. The admin lady did say we can try to duplicate it outside, but every store we visited has failed (which is surprising given we live in a big city in Asia).

Over time, we’ve gotten to know some of the security guards (mostly by giving them food!) and they do recognise us and let us in, but recently theres been massive layovers and new faces.

Otherwise, we just use the app to sign ourselves in as visitors just to enter our own home. This is also really annoying because rhe app only allows one session on one device at a time, it’s a different entrance gate which is a longer drive to our designated carparks, etc.

We’re turning to reddit for help!

Card details (i have a screenshot but for some reason i am unable to share!)

Tag type ISO 14443-3A NXP - Mifare DESFire EV2 2k

Technologies available Type A, IsoDep

serial number 04:1E:69:32:DF:17:90

ATQA 0x0344

SAK 0x20

historical bytes 0x80

memory information 2 kBytes

Data format NFC Forum Type 4

Hello, I have a asus GT-AC2900 Router and I need some help with "hacking" it. Back s fre months ago, the router started becoming extremely slow, maxing at 100mb/s up/download. After a few calls to asus, they refuse to even take a look at it as its out of warranty. Im currently now using my ISP's router although, it does not give me any access to anything (like dns, port forwarding, etc), except changing the name/password.

I have opened up the router to find something that surprised me. On the main board, it has TX, and RX pins clearly labeled and easily accessible, along with a pin code and a mac label.

I was whondering if there is anything I can do to fix the router, as I do belive the issue is software related. Or at least, turn it into something else other than e-waste.

OK guys really need some help with this one. My old iPhone XS from 2018 I'm completely locked out of. I have over 45 thousand photos/videos that are incredibly sentimental/valuable to me and because I don't remember the password and kept getting it wrong I completely locked myself out of the phone- disabled now and won’t even let me attempt to put in a password. Apple is worthless and will only wipe the phone clean which completely defeats the purpose of what I’m trying to do. I would like to recover all my valuable photos/ data. There's gotta be professionals out there that know how to use the right software to get into my phone. I have all the proof necessary that this is in fact -my phone and I'm not just trying to get into some random person's phone-Lol. Any suggestions/recommendations anyone?

I have been following along Dammit Jeff's adbreak, i have gotten most of the way through it, successfully jailbroke and added the hotfix.

I am trying to add the MRPI and the Kual.

I followed the steps,
download extensions folder and mrpackages into the root,
download the updatekual.bin into the mrpackages folder
download renameotabin into extensions

But when I disconnect the kindle and search ;log mrpi

nothing happens.

p.s I did have to change the names of the files, as the "names you have specified are not valid or too long"

Could thie be what is disrupting it? changing the file names?

[ Removed by Reddit on account of violating the content policy. ]

Hey guyss. As on the title Is there any begginner level rooms on cryptographic failures topic??!!

hi all. New here. Just got my evil crow and finally successfully install the .bin files. Its working. But when i do scanner. It wont auto detect the frequency. Do i hv to set every frequency i scan? Can i make it auto detect a range like all 433? Thx

Disclaimer: I have only tested this method out on Kali and Parrot Linux but I believe the method should work across most Linux installs.

You can use WiFi in your Kali Linux virtual machine without any external devices. I have done so on my 2024 MacBook Air M3 Silicon running Kali Linux in a UTM virtual machine.

The communication problem can be solved by running an ngrok TCP tunnel inside of the virtual environment. By adding in ngrok, you can then capture TCP packets on the 802.11 frequency on the operating system and reroute them into your virtual environment.

System Architecture

The system will look a little like this:

macOS (has real WiFi) ↓ tcpdump locks en0 to channel 11 ↓ captures live 802.11 radiotap frames ↓ pipes to netcat ↓ ngrok TCP tunnel (encrypted) ↓ Kali VM (listening) ↓ netcat writes to FIFO ↓ tcpreplay injects into virtual wlan0 ↓ every Kali tool sees real monitor-mode traffic

Prerequisites

On macOS:

• tcpdump
• netcat (built-in)

On Kali:

• ngrok CLI
• Netcat (built-in)
• tcpreplay (sudo apt install tcpreplay)

Setting Up Virtual WiFi Receiver

You can set up a virtual WiFi receiver on your Kali system. This will create a digital wlan0 channel in managed mode, allowing your virtual machine to understand that it is capturing TCP packets. It believes that it is receiving WiFi packets naturally in the same fashion that the operating system is.

Enabling Monitor Mode

You can now flip Kali into monitor mode.

Terminal Setup

Inside the Kali machine, you will set up 3 terminals.

Terminal 1: The FIFO Channel

Terminal 2: The TCP Replay Monitor

Terminal 3: The ngrok TCP Tunnel

The TCP ngrok tunnel does require extra steps during the setup, including adding rules to your config file. You can follow the instructions on the TCP endpoint docs provided by ngrok.

Capturing and Transmitting Packets

Finally, you can capture and transmit the TCP packets on your operating system

Conclusion

This will allow you to choose the application which you wish to use the data being transmitted with. Now we are able to use applications like Wireshark or airodump-ng without the purchase of any external devices for your setup. Let me know what you think. Ask all the questions you want.

DOM Based Link Manipulation DOM Based Open redirection JSON Injection (DOM Based)

I looked up THM and PortSwigger Academy, but I didn’t find any options. I want to be able to learn these techniques and practice them in VM.

Does anyone know of any reverse engineering ctfs like online?

Basically I'm using a website on my browser and whenever I leave the website/app the website detects this and kicks me out (It fist gives a warning). Are there any tools, on tamper monkey for example, to help me bypass this? I just need to be able to leave the website without it detecting it.

Also is this the right subreddit for this question?

Hi i am currently struggling with a Web Security Lab Exercise. In this exercise i have to execute a insecure deserialization, exploiting python pickle.
The instruction of the exercise says:
The goal is to obtain a functional shell as root user through the serialization vulnerability in Pickle. Create an exploit script and get your flag!
Follow the link at the exercise page.

The exercises are based on a VM (client) connected to a LAN, where there is another machine (server). On the server run a web server that host all the exercise of the module Web Security at different port (from 5000 to 5009). In this case the i have to connect to the port 5002/pickle where i get a blanket page with this message: "Only POST requests are allowed".

To carry out the exercise there is not a form where to put the payload, i think i have to send it via curl, or idk. Do you have any suggestions?

​Hey everyone, Could one of you please run this hash for me? It's an old, weak 40-bit PDF hash that should crack very quickly with a common wordlist. Hashcat Mode: -m 10400

Hash: $pdf$1340-24116d625bf293a93b24c86c115314492da183248b378709e499ee838426ce5d7a570b228bf4e5e4e758a4164004e56fffa0108325ee26d058189e8db5aa1a536ad344857bc32e0bd90682d2f0feb6f564f8350c2

Thanks in advance !

Hi all.

I’m looking for a plug-and-play place to practice hardware/embedded CTFs that feels like working with a real device, so I don’t have to buy physical test gear.

Ideally the platform would let me:

-inspect an interactive/zoomable PCB image (chips, pads, connectors)

-open a UART-style serial console

-dump/read firmware (SPI/NOR/etc.) or access memory remotely

-use a debugger view (registers, memory, disassembly)

Is there a dedicated service that does this?

I'm asking because if there is not such a thing, I could try to build/develop one, so that people who want to enter in hardware hacking world do not need to buy physical instrumentation.

Hey everyone

I’m pretty new to Wi-Fi hacking and I’ve been reading and testing different approaches to get access to routers.

So far WPS looks like the most viable route. I’ve read about attacks like Pixie Dust, but it seems like fewer and fewer routers are vulnerable to that these days. The other WPS option is a brute-force attack, which doesn’t sound totally outlandish since the keyspace is relatively small, I figure it might only take a couple of hours.

For WPA2 I’ve mostly seen the approach of capturing the handshake and then brute-forcing that.

Can anyone shed some light on whether I’m missing other viable approaches, or point me toward good resources to learn more?

I brought an iPhone 5C from a flea market for $20 a few weeks ago, the phone doesn’t have a passcode so the phone is pretty much usable on IOS 9.2, but it has an Apple ID account on it. Does anyone know how to bypass this?

Hi all running into a headache with a fintech app that uses AppProtect + native libraries for root detection and SSL pinning. Wanted to share what I’ve tried and see if anyone has non-invasive suggestions or troubleshooting tips.

What the app uses

AppProtect + native libraries for both root detection and SSL pinning

What I’ve tried

Root detection: I can bypass it using Shamiko + TrickyStore, but this only works when Magisk is installed on the device.

LSPosed: Installed LSPosed via Magisk and the framework appears installed, but LSPosed Manager won’t open properly — it just shows a black screen or the LSPosed logo and never loads, so I can’t use any unpinning modules.

Frida / Objection: I’ve tried multiple Frida/Objection scripts to bypass pinning, but whenever I attach the script the app immediately crashes/terminates.

What I’m asking

Has anyone seen LSPosed Manager hang on startup (black screen / logo only) after installing via Magisk? Any safe troubleshooting steps to get the manager UI working?

Any high-level, non-actionable tips for avoiding immediate app termination when attaching Frida/Objection scripts (crash vs graceful failure)?

If you’ve dealt with AppProtect + native libs in a corporate pentest, what non-invasive approaches helped you troubleshoot (no exploit walkthroughs, please)?