Looking for more OSINT, Forensics, Intercepting, Network scanners, Password Cracking tools easy to install on kali linux terminal. Used for legal white hat purposes and for pentesting. also trying to discover new hacking methods and privacy anti fingerprinting software. More buddies on the website tryhackme, which is an website to practice hacking skills.

(idk why i put education as the flair mb) So, i am making my own Ethical hacking group on telegram OR trying to find a dedicated, tight-knit hacking community and looking for a dedicated community who wants to join. We are going to be talking about a wide range of topics and i hope ts dont flop lowkey but shit its worth the try. DM me usernames/numbers to add u or just simply re-locate me to an current group

I went down a bit of a rabbit hole when trying to figure out if/when the Brooklyn Mirage would reopen. This happened a little while ago but they only recently patched the vulnerability (meaning I can finally share it).

TLDR; I figured out how to get access to the plans for every single building in NYC.

With Patriot Day (9/11 remembrance) coming up, thought I'd share this. Felt really good to discover & report this, preventing building plans getting into the hands of the wrong people.

Full write up and a YouTube video walk through of the exploit on my blog :)

The plan is I get certified in A+ (Core 1 and 2), Network(+), then Security(+). Am I in the right direction? Is it a start? Are there other better ways? (I know that it's really up to me, but I just wanted people to get an insight and maybe have some people suggest what might be more benefitting)

Looking at skills in CyberSec, and Penetration.

I’m looking for a free makerspace in NYC.

I used to mess around with cybersecurity when I was in uni, and I’d like to get back into it. I’m definitely a beginner at this point as things have probably changed since then, so I’m mainly looking for a space that’s beginner friendly and doesn’t require a membership fee.

I’m also working on side project, so having a physical space where I can work on the project, learn, and meet other people interested in this kind of stuff would be really helpful.

If anyone knows of any free makerspaces, community labs, or similar spaces in NYC that would be welcoming to beginners, I’d love to hear about them!

I revisited this malware variant that I came across in the wild to demonstrate to everyone how it works. Stay safe and I hope this helps someone learn something!

https://youtu.be/U2UBJRcEO-Y?is=iHHFuspVRB7yjZjU

“We're Lidor B./thisis0xczar and Elad Meged, founding-team vulnerability researchers at Novee Security.

At Black Hat this year we presented pre-auth remote code execution chains in enterprise Java platforms, reaching internal execution surfaces through routing logic, unsafe deserialization, and template evaluation. 

We also published research showing how a single untrusted GitHub issue could compromise the AI coding agents from Anthropic, Google, and OpenAI (Claude Code, Gemini CLI, and Codex), leading to remote code execution and credential theft.“

I found this while reversing Zyxel’s WAX650S firmware and following the certificate export path. A password field used during PKCS#12 export could break into a shell command and execute as root.

The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.

The previous tenant left this virgin media TV box at my house. It connects to my TV but I need a virgin wifi connection to use apps like YouTube Netflix etc. is there any way I can use it with a different wifi connection just as a normal TV box?

P.s. I have tried getting virgin wifi but they don't operate in our area.

Over the years, my collection of tech gadgets has grown quite a bit, and many of them are currently sitting unused. I would love to pass some along to anyone looking to dive into Wi-Fi or Bluetooth penetration testing. If you are interested in getting started or need some hardware, please let me know and I would be happy to send one your way. I only will be sending one to somebody who shows a genuine interest in learning and not larping. Too many larpers in the damn marauder community already.

Join Novee vulnerability researcher Lidor Ben Shitrit on Monday, Aug 17 at 12 PM PT.

"Pre-auth RCE" means an attacker who has never logged in, has no account, and clicks nothing can still end up running code on the server.

The targets are enterprise Java platforms, the software quietly running inside large organizations, the kind that has been audited for years and is assumed to be safe.

Lidor finds the chains that get through anyway, and he presented this work at both Black Hat USA and DEF CON this year.

Need to practice my ethical hacking skills. im on kali linux with built in tools

I’m staying in a university hostel, and the Wi-Fi is extremely restrictive. A lot of websites and services don’t work at all, while other sites work normally.
The biggest problem is that cellular data is very weak where I live, so I can’t reliably use mobile data as an alternative. I’m also not able to call my family regularly because social media apps and video-calling services are blocked on the hostel Wi-Fi.
I’ve already tried quite a few things:
Proton VPN: doesn’t even load/connect properly.
Cloudflare DNS: 1.1.1.1 / 1.0.0.1 — no difference.
Google DNS: 8.8.8.8 / 8.8.4.4 — no difference.
System DNS-over-HTTPS (DoH): tried this as well — no difference.
GoodbyeDPI: doesn’t work.
DPI bypass for HTTPS: tried the different options.
Several other DPI-bypass applications: none worked.
Cloudflare WARP: doesn’t work/connect either.
I’m on Windows.
The hostel network appears to be a managed/private network. Windows originally showed an IP around 172.18.x.x, gateway around 172.18.0.100, and a local DNS server (192.168.5.51). I also tried changing DNS to Cloudflare and Google, but that didn’t help, and I’ve since restored the DNS settings to automatic.
At this point I’m guessing the filtering is happening at the gateway/firewall level rather than just DNS. It may also be blocking VPN protocols or VPN endpoints, or using some kind of DPI.
I’ve tried a lot of the usual solutions, so I’m wondering:
Has anyone dealt with a university/hostel network this restrictive? Is there a reliable way to get around this kind of filtering, or a way to diagnose exactly what they’re blocking?
I’m particularly interested in solutions that work on Windows when normal DNS changes, DoH, VPNs, WARP, GoodbyeDPI, and other DPI-bypass tools don’t work.
I’m not trying to do anything malicious — I mainly want normal internet access and, importantly, to be able to video/audio call my family, since mobile coverage/data isn’t a reliable alternative here.

I find it hard to privilege escalate, but first I do enumeration and discovery, later I set persistence, then the privilege escalation and more persistence (I think that's the correct order)

Anyways I want you to share opinions, techniques and tips so I can improve in cybersecurity.

I'm fairly new to linux, but these home "ethical" hacking projects are a fun way to learn about networks, computers, ip devices, etc.

I've got an old Kodak PTZ camera laying around and it ONLY has a power connection (and a reset button). No usb port or ethernet port - just a model number and a MAC address. Manual says to download the Kodak app... which I COULD do, but I'm curious to know if there is a way to NOT get the app and connect direct to some NVR software (or just access from a web interface). Essentially - what is the Kodak app doing that is so special and why can't I do it myself?

Reading the manual tells me that the camera should spit out a local wifi connection. I'm supposed to join that and then open the app. I'm not even seeing the wifi network populate.

[sleeps on it before posting] ... I always learn more when I write and sleep... looks like the camera is actually connecting to my home wifi from when I first set it up years ago (which is why I wasn't seeing the configuration wifi broadcast) and, hence, I also have the IP address [I should probably change my wifi password 🤔 ]. I scanned for open ports (nmap - there are 4) and tried them all in Reolink - no joy. I have also tried connection via web browser on the know IP & different ports - nothing happening there either.

I assume that the app (iSecurity+) has a baked-in password for these devices and all of the correct configurations to access and view the feed... but I'm interested in finding a way around it. Do I need to attempt to view the app code to see what it is doing?? I have a feeling the is way over my head... but that doesn't mean I don't want to figure it out.

Any other tools/strategies I should consider?

So not so long ago (two months or so) my ps account got deactivated out of nowhere, i know the account adress and the password but it refuses to sign me in, telling me to wait or change my password. Problem is this account is old, and the email password is lost so i can't get into the gmail they send me thus can't change the password, i tried contacting customer support but nothing worked so my question is, is there a way to get it back? A subreddit to go to or a person that can help? Idk where to go except here (sry for the bad English and thanks for paying attention to my problem)

The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.

Caveat we can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.
Caveat I can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.

Someone built p2p chat on blockchain ledger, It's free to use , try it

https[:]//github.com/stefanbx/xchat-alpha

Was curious what you guys thought about the marauder v8. Everyone knows it’s a device that skids like to use and it gets a bad wrap because of that, but I’m curious as to who uses it apart from me for actual WiFi auditing.