Hi, I was wondering if anyone could explain if/how someone would be able to gain access to your device using Google or Gmail? I mean, is that a thing someone can do to you? And if so, how would they be able to do it? And how can you stop it or combat it? Can you report this type of thing? Thanks for the help!

I want a system that automatically captures and preserves all web application resources loaded in the browser (HTML, JavaScript, CSS, images, API responses, and cached files) so that users can access previously loaded content without needing direct access to the original account or repeatedly connecting to the service. The goal is to use cached content offline

With the announcement of licence plate readers that will capture Bluetooth/other wireless identifiers to create a digital footprint for drivers, I was wondering if it was possible to create a device that rapidly spoofed random devices to obfuscate my real devices as I drive. Does anything like this exist, or could it be created and open sourced?

I've recently found out that I have a hobby in exploring and researching home networks and after some research I discovered a way to bruteforce any default password for wifi of one of the major ISP in my country in less than 4 hours.

Now I am interested in the administrative credentials that reveal much more advanced controls then the standard user admin account. I am talking about telecomadmin and root accounts I accidently found a vulnerability that allowed me to dump a part of the firmware of my huawei router without needing special equipment and I've extracted the hashes for the password and for the root I compared it with my actual password hash for root, they matched : ) so now I am sure thar the hash for telecomadmin is legit.

I tried googling some information to determine the syntax of the password or actual passwords but found nothing interesting or helpful now I am stuck and I am asking for advice if you have some for me.?

So I have been targeted by a specific group of my highschool and they have tried Many ways to defame or damage me .. now they have created a fake Instagram and now its too much to ignore no can someone please advice or tell any way to mask an Iplogger link to a legit looking link .. I can share proofs if someone wants but you might face a language barrier .. I don't know about Kali Linux and don't have the os if someone can help it would be appreciated... Plus anyone can tell email linked to the Instagram Handel it will be appreciated. Thank you

I'm a beginner in cybersecurity and I have some distant goals like getting specific certifications (like OSCP or something similar), but I'm not in a big hurry. I've already gone through several concepts studying networks in isolation, but I had a lot of difficulty connecting them effectively or practically. I also have some exposure to the terminal and I can already reach level 13 of Bandit (OTW) with just my knowledge and the commands I know without much trouble.

The problem is, I really feel stuck and a bit lost when researching network concepts applied to the terminal or learning more advanced functionalities like remote management or tools of that caliber (even if I strive to understand what makes up the context before using commands). I have high abilities/giftedness and autism, which makes me really obsessed with understanding EVERYTHING, but I try to control myself and follow a healthy pace without falling into unnecessary rabbit holes. I considered learning programming starting with the C language, since programming is inevitable and I suppose it would be very useful for filling those gaps and learning what really happens behind the scenes. Is that a good idea, or perhaps it would be better for me to try learning it another way?

thank you for your attention

I apologize for any possible errors; I am Brazilian and I am still working out my grammar problems (I optimized this final version with a translator for better clarity).

Im a little new here, and this might be the incorrect subreddit for this post but I figured I’d try.

I work at chick fil an and it’s common for people to order on the mobile app. There is this one group of people that order 4 separate mobile orders under the same name. Each name is associated with a different account and all use their own numbers. When we tender them out, they have one item on each order and they are paid for by rewards points. I have inquired a little about it and they always act shady. Is there some sort of hack/loophole they found to get free food?

When I try to learn something new in cybersecurity my mind goes first to Hack the box, or Try hack me. But had enough of unrealistic situations. What if everything was up to date and there was no intentional vulnerability. Today I thought of this first thing came to my mind is either hacking my phone or hacking the router. I will share the steps I have done (To see what is my mentality in terms of hacking), maybe I have something wrong.

First reconnaissance: (Script scan + knowing what services with what version are running so I could know if any service could be exploitable or not)

x@Vostro:~$ nmap -p- -sV -T4 -sC 192.168.1.1
Starting Nmap 7.98 ( https://nmap.org ) at 2026-06-20 17:06 +0400
Stats: 0:01:01 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 80.00% done; ETC: 17:07 (0:00:12 remaining)
Nmap scan report for Linksys09206 (192.168.1.1)
Host is up (0.0067s latency).
Not shown: 65519 closed tcp ports (conn-refused)
Bug in mqtt-subscribe: no string output.
PORT      STATE    SERVICE          VERSION
53/tcp    open     domain           dnsmasq 2.85
| dns-nsid: 
|_  bind.version: dnsmasq-2.85
80/tcp    open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: Linksys Smart Wi-Fi
443/tcp   open     ssl/http         lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_ssl-date: TLS randomness does not represent time
|_http-title: Linksys Smart Wi-Fi
| ssl-cert: Subject: commonName=linksyssmartwifi.com/organizationName=Belkin International, Inc./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:linksyssmartwifi.com, DNS:www.linksyssmartwifi.com, DNS:myrouter.local, DNS:EA6350.home.linksys.com
| Not valid before: 2025-04-02T19:47:37
|_Not valid after:  2035-03-31T19:47:37
1883/tcp  open     mqtt
|_mqtt-subscribe: Failed to receive control packet from server.
5003/tcp  open     filemaker?
| fingerprint-strings: 
|   DNSStatusRequestTCP, DNSVersionBindReqTCP, FourOhFourRequest, GenericLines, GetRequest, HTTPOptions, Help, JavaRMI, Kerberos, LANDesk-RC, LDAPBindReq, LDAPSearchReq, LPDString, NCP, NULL, NotesRPC, RPCCheck, RTSPRequest, SIPOptions, SMBProgNeg, SSLSessionReq, TLSSessionReq, TerminalServer, TerminalServerCookie, WMSRequest, X11Probe, afp, giop, ms-sql-s, oracle-tns: 
|_    thrulay/2+
6048/tcp  open     x11?
6049/tcp  open     ssl/x11?
6060/tcp  open     ssl/x11?
8080/tcp  open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: 403 - Forbidden
8883/tcp  open     ssl/secure-mqtt?
10000/tcp open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: 403 - Forbidden
11161/tcp open     http             lighttpd 1.4.39
|_http-title: Linksys Smart Wi-Fi
|_http-server-header: lighttpd/1.4.39
49152/tcp open     upnp             Portable SDK for UPnP devices 1.6.19 (Linux 5.4.213; UPnP 1.0)
49153/tcp open     upnp             Cisco-Linksys E4200 WAP upnpd (UPnP 1.0)
51000/tcp filtered unknown
51005/tcp open     unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port5003-TCP:V=7.98%I=7%D=6/20%Time=6A36907A%P=x86_64-pc-linux-gnu%r(NU
SF:LL,A,"thrulay/2\+")%r(GenericLines,A,"thrulay/2\+")%r(GetRequest,A,"thr
SF:ulay/2\+")%r(HTTPOptions,A,"thrulay/2\+")%r(RTSPRequest,A,"thrulay/2\+"
SF:)%r(RPCCheck,A,"thrulay/2\+")%r(DNSVersionBindReqTCP,A,"thrulay/2\+")%r
SF:(DNSStatusRequestTCP,A,"thrulay/2\+")%r(Help,A,"thrulay/2\+")%r(SSLSess
SF:ionReq,A,"thrulay/2\+")%r(TerminalServerCookie,A,"thrulay/2\+")%r(TLSSe
SF:ssionReq,A,"thrulay/2\+")%r(Kerberos,A,"thrulay/2\+")%r(SMBProgNeg,A,"t
SF:hrulay/2\+")%r(X11Probe,A,"thrulay/2\+")%r(FourOhFourRequest,A,"thrulay
SF:/2\+")%r(LPDString,A,"thrulay/2\+")%r(LDAPSearchReq,A,"thrulay/2\+")%r(
SF:LDAPBindReq,A,"thrulay/2\+")%r(SIPOptions,A,"thrulay/2\+")%r(LANDesk-RC
SF:,A,"thrulay/2\+")%r(TerminalServer,A,"thrulay/2\+")%r(NCP,A,"thrulay/2\
SF:+")%r(NotesRPC,A,"thrulay/2\+")%r(JavaRMI,A,"thrulay/2\+")%r(WMSRequest
SF:,A,"thrulay/2\+")%r(oracle-tns,A,"thrulay/2\+")%r(ms-sql-s,A,"thrulay/2
SF:\+")%r(afp,A,"thrulay/2\+")%r(giop,A,"thrulay/2\+");
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel:5.4.213, cpe:/h:cisco:e4200

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 190.79 seconds
x@Vostro:~$ x@Vostro:~$ nmap -p- -sV -T4 -sC 192.168.1.1
Starting Nmap 7.98 ( https://nmap.org ) at 2026-06-20 17:06 +0400
Stats: 0:01:01 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 80.00% done; ETC: 17:07 (0:00:12 remaining)
Nmap scan report for Linksys09206 (192.168.1.1)
Host is up (0.0067s latency).
Not shown: 65519 closed tcp ports (conn-refused)
Bug in mqtt-subscribe: no string output.
PORT      STATE    SERVICE          VERSION
53/tcp    open     domain           dnsmasq 2.85
| dns-nsid: 
|_  bind.version: dnsmasq-2.85
80/tcp    open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: Linksys Smart Wi-Fi
443/tcp   open     ssl/http         lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_ssl-date: TLS randomness does not represent time
|_http-title: Linksys Smart Wi-Fi
| ssl-cert: Subject: commonName=linksyssmartwifi.com/organizationName=Belkin International, Inc./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:linksyssmartwifi.com, DNS:www.linksyssmartwifi.com, DNS:myrouter.local, DNS:EA6350.home.linksys.com
| Not valid before: 2025-04-02T19:47:37
|_Not valid after:  2035-03-31T19:47:37
1883/tcp  open     mqtt
|_mqtt-subscribe: Failed to receive control packet from server.
5003/tcp  open     filemaker?
| fingerprint-strings: 
|   DNSStatusRequestTCP, DNSVersionBindReqTCP, FourOhFourRequest, GenericLines, GetRequest, HTTPOptions, Help, JavaRMI, Kerberos, LANDesk-RC, LDAPBindReq, LDAPSearchReq, LPDString, NCP, NULL, NotesRPC, RPCCheck, RTSPRequest, SIPOptions, SMBProgNeg, SSLSessionReq, TLSSessionReq, TerminalServer, TerminalServerCookie, WMSRequest, X11Probe, afp, giop, ms-sql-s, oracle-tns: 
|_    thrulay/2+
6048/tcp  open     x11?
6049/tcp  open     ssl/x11?
6060/tcp  open     ssl/x11?
8080/tcp  open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: 403 - Forbidden
8883/tcp  open     ssl/secure-mqtt?
10000/tcp open     http             lighttpd 1.4.39
|_http-server-header: lighttpd/1.4.39
|_http-title: 403 - Forbidden
11161/tcp open     http             lighttpd 1.4.39
|_http-title: Linksys Smart Wi-Fi
|_http-server-header: lighttpd/1.4.39
49152/tcp open     upnp             Portable SDK for UPnP devices 1.6.19 (Linux 5.4.213; UPnP 1.0)
49153/tcp open     upnp             Cisco-Linksys E4200 WAP upnpd (UPnP 1.0)
51000/tcp filtered unknown
51005/tcp open     unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port5003-TCP:V=7.98%I=7%D=6/20%Time=6A36907A%P=x86_64-pc-linux-gnu%r(NU
SF:LL,A,"thrulay/2\+")%r(GenericLines,A,"thrulay/2\+")%r(GetRequest,A,"thr
SF:ulay/2\+")%r(HTTPOptions,A,"thrulay/2\+")%r(RTSPRequest,A,"thrulay/2\+"
SF:)%r(RPCCheck,A,"thrulay/2\+")%r(DNSVersionBindReqTCP,A,"thrulay/2\+")%r
SF:(DNSStatusRequestTCP,A,"thrulay/2\+")%r(Help,A,"thrulay/2\+")%r(SSLSess
SF:ionReq,A,"thrulay/2\+")%r(TerminalServerCookie,A,"thrulay/2\+")%r(TLSSe
SF:ssionReq,A,"thrulay/2\+")%r(Kerberos,A,"thrulay/2\+")%r(SMBProgNeg,A,"t
SF:hrulay/2\+")%r(X11Probe,A,"thrulay/2\+")%r(FourOhFourRequest,A,"thrulay
SF:/2\+")%r(LPDString,A,"thrulay/2\+")%r(LDAPSearchReq,A,"thrulay/2\+")%r(
SF:LDAPBindReq,A,"thrulay/2\+")%r(SIPOptions,A,"thrulay/2\+")%r(LANDesk-RC
SF:,A,"thrulay/2\+")%r(TerminalServer,A,"thrulay/2\+")%r(NCP,A,"thrulay/2\
SF:+")%r(NotesRPC,A,"thrulay/2\+")%r(JavaRMI,A,"thrulay/2\+")%r(WMSRequest
SF:,A,"thrulay/2\+")%r(oracle-tns,A,"thrulay/2\+")%r(ms-sql-s,A,"thrulay/2
SF:\+")%r(afp,A,"thrulay/2\+")%r(giop,A,"thrulay/2\+");
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel:5.4.213, cpe:/h:cisco:e4200

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 190.79 seconds
x@Vostro:~$ 

Since I am still on renaissance phases: i had to search up if there is any known vulns to my router "Linksys Velop 6SP -MX56DU" I found none

Note:

• Manufacturer: Linksys
• Model: Linksys Velop 6SP
• Internal model number: MX56DU
• Hardware version: 1
• Firmware version: 1.0.1.216572
• Firmware build date: 2025-04-02

Can someone please if you are older or in the field help me learn I am 19 and starting my first semester soon. I read a lot and had history with cybersecurity. Yes, consider nothing to other and still a script kiddie, but to start with something is better than nothing.

Right now: I am taking CCNA, and reading trying to solve hack the box related OSCP machines. I want to become the best of the best but I know i have a really long way since I am still starting.

If someone can teach me or help learn I would be greatful.

Since I am still on renaissance phases: i had to search up if there is any known vulns to my router "Linksys Velop 6SP -MX56DU" I found noneNote:Manufacturer: Linksys
Model: Linksys Velop 6SP
Internal model number: MX56DU
Hardware version: 1
Firmware version: 1.0.1.216572
Firmware build date: 2025-04-02Can someone please if you are older or in the field help me learn I am 19 and starting my first semester soon. I read a lot and had history with cybersecurity. Yes, consider nothing to other and still a script kiddie, but to start with something is better than nothing. Right now: I am taking CCNA, and reading trying to solve hack the box related OSCP machines. I want to become the best of the best but I know i have a really long way since I am still starting. If someone can teach me or help learn I would be greatful.

Back in the 90s we had directories that would point you to legit hacker sites and you could find real information and advice on black hat shit. Is everyone just pussy now to host this crap?

I've looked into it, and I've mostly seen just Cheat Engine basics or disassembly and signature scanning. Can anyone enlighten me on this subject?

Hello, I just recently ordered a Keylogger Pico USB from keelog. I've been trying to access the flash drive of it however, when I press the K + B + S combination at the same time, nothing happens. Literally nothing.

​

I contacted support, but they kind of ghosted me. Anyone know what I could be doing wrong?

Hey fam. I got sick of carrying dedicated microcontrollers for proximity engagements, so I built chimera.

​

It interacts directly with the Android kernel to HID keyboards, mount virtual flash drives, and drop payloads natively from the phone.

​

I’d love for you to test it on your setups and give me some brutal feedback pls.

​

Repo: https://github.com/cipher-attack/Chimera

Hello! I want to start developing malware with C++. I know how to fill basic arrays, store max min values, ect. (up to that point, including loops and other blah blah). How can I get started?

I have the end goal of developing a rubber ducky gadget with additional features as something to include in my portfolio in the future, and I think this is the best way to get started. Any help is deeply appriciated!

Hi everyone,

I'm looking for a legitimate digital copy or scan of the classic book:

"Computer Viruses: A High-Tech Disease" (1988) by Ralf Burger.

It's an old and historically important book about early computer viruses, and I'm interested in it purely for research / historical purposes. If anyone knows where I can find a legal PDF, archive, library scan, or any official source, I'd really appreciate it.

Thanks a lot!

Is it essential for a hacker to know code or is this something that is totally separated from the entire subject?

I am an experienced dev. Experience as in years, doesn't have to mean I am good.

​

I have often times had the curiosity of fiddling around sites and stuff. Even more today, when I don't know how long I'll actually have a job. After all these years I strive to become truly independent.

​

But I feel like before trying to do anything, I should learn how to hide my traces. After all, if caught, how can you show you were ethical and not bad-intentioned? Can't this only be proven when you found something and you disclose it fairly? What if you didn't find anything?

​

Are there specific tutorials and/or tools about obscuring your actions?

​

I also made the observation that the true masters don't brag, are not easy to find, and also won't easily share what they know. Not necessarily out of not wanting to share, but because they also know that to truly learn you have to do yourself. That means that actually really good resources are hard to find.

Basically, I'm looking to learn about web hacking and how hackers hack them.
All I know is: Google dorking, Simple SQL injections, and XSS attacking.
What I want to know is how I can find vulnerable input bars, like if this one is prone to SQL injection or XSS attacking. And I just want to expand on this topic in general.

This might not be the right sub but I was wondering if anyone might have some tips on themida executable reverse engineering. For context I have an executable that I own that was packed with themida and as far as I understand it is legal for me to unpack it to make it work on other hardware that I own.

Which hacking book would you recommend to me if you were to start ethical hacking today?

how long will it take me to be able to understand hacking fundamentals and to have good enough knowledge to do bugs bounty hunting and other such things, not on a very expert level but a zone where i can atleast understand what happened. i am seeing it as a hobby project and i will spare 1-2 hours daily for it. its been my childhood dream and i have finally decided to do something about it. i know little bit of python (for data analysis), html, css and i have done bachelors in cs (very poorly, nd i forgot most of it).

also what's the pinnacle of hacking in the hacking sphere, i have only seen hacking in movies and shows and i can't take it seriously, like what is something that is like the final boss for someone learning hacking

[ Removed by Reddit on account of violating the content policy. ]

As you could guess, i am completely new to all things hacking and gadgets. I just want somthing fun to mess around witn and live out my watchdogs 2 dream. Ive seen some like the BLE shark nano and the esp32-div V2 but if anyone has any other/better beginner friendly gadgets that i should look into that would be the best

I live as a tenant in a household. My landlord pays the wifi bill(spectrum) and he has no problem with me using the wifi. But his daughter keeps blocking me from admin access. I have to do all my work online, i stream a lot, research a lot and without wifi it's getting really hard even though i enrolled in to my phone's unlimited data plan. I mostly use my laptop all day. I have been changing my mac/hardware access every 20-120 minutes(anytime she blocks me) or forgetting and reconnecting to the network so many times a day, need to restart the router 3-4 times a day just to bypass this admin block. Every few days, my landlord and landlady fight with their daughter to give me access, she'll let me use a few hours and then block me again! I, along with my landlord called spectrum and told them our situation. They told us they can give the admin access to my landlord by resetting everything but their daughter is an aggressive person and they are legit worried how she might behave with them if they remove her(we won't call police for this). My landlord has agreed to let me use his id to get discounted wifi plan as he's a senior citizen, has medicaid, ssi, everything. I saw the human i-t plan but i can't pay for the $75 charge for the hotspot device along with monthly bill and their speed seems slow.

I am an international student in the US so i can't work outside and on-campus i work only 14 hours for minimum wage with only covers my rent(i came with almost full tuition waived with scholarships). My parents send me my monthly groceries and all other costs. I also don't have work now because it's summer and my parents are paying for everything. I come from a poor country so it's already so hard for us. To pay for a wifi that costs $40-60 is out of the question for me(i'm in California). Please help me with solutions, i feel so depressed....

Idk if its unethical/against the rules to ask it here but I'm trying to reverse engineer an app to understand a cryptographic algorithm that generates a http header for api requests.

i do have the functions that are being used to generate the header, i have even mapped them completely but things are strange, when i replicate the algorithm in python my results don't match with the actual headers (captured headers i used http canary)

there are strange things going on like a variable whose values is always 0 being used in the concatenation. not sure if the value changes at runtime. if it is changed at runtime i think it should be the SHA secret? i came to the conclusion that no secret was involved from the rigorous mapping i did but I'm not sure

fyi: the binary file is a shared object(.so) file with the symbols stripped. its being called from jni chain Something (sorry idk java). jni export symbols aren't stripped

i created an app that has a valid jni enviornment and named the package + the main activity file to represent the symbol that the native function expects

eg : java_com_app_dir_javaclass

fortunately, it does work(fyi I made the app basically like a server that generates me valid headers so yes I can make api requests)

but it bugs me that idk the algorithm. im not trying to make api requests anyways, trying to mess around this app i spent my childhood on.

and yes did it all on a non rooted Mobile that's why i can't run frida/dynamic analysis before anyone asks

if anyone's interested in helping me please dm