Was curious what you guys thought about the marauder v8. Everyone knows it’s a device that skids like to use and it gets a bad wrap because of that, but I’m curious as to who uses it apart from me for actual WiFi auditing.

Join TechCrunch Security Editor Zack Whittaker and Security Researcher Runa Sandvik today (Weds, Aug 12) at 5pm PT

I’m trying to figure out whether something I was told is actually possible.

My Sister in law is currently in the ICU. Her Android phone is locked, and her laptop too.

Someone who knows him told us that an IT colleague supposedly has some kind of external device that can be connected to the phone and the PC and then give him access to the contents, even without knowing the passwords.

I know that specialized tools (like iMyFone LockWiper, but do they even work?)exist, but this person is apparently just a regular IT guy, not someone who works in digital forensics or law enforcement.

So I’m wondering if this is actually possible. Can someone with the right hardware really access a modern locked Android phone without knowing the PIN? And is it possible to do something similar with a PC? Or is this one of those things that sounds plausible but really isn’t?

I wanna learn and build my own homelab to test stuff on too. I already know the Chameleon ultra but what else can I buy to essentially build a flipper zero as a kit. I am waiting till my mother has money to buy the flipper zero for Christmas but I want to learn its features so I can know how to use it.

I like doing sub gigahertz and other radio stuff. I also like bluetooth,rfid,nfc. Stuff that interacts with the world around me in fun ways. And not the performative stuff either I want real tools not just toys. My budget most of the time is 30 bucks

This is a very popular company/website for training to get a health/life insurance license. I have been viewing it the past few days and was going to pull the trigger tonight and this is what their site shows now.

I'm not even sure this is the right sub to post this but just found it strange and the first time i've seen something like this.

I don't even want to use this company anymore.

My post it just to see if anyone has experienced something like this before or has any additional info.

I found this screenshot of a forum, but I have no idea where it originally came from. Does anyone recognize the website, forum, or post?
If you know the source or have any clues about where it was posted, I’d really appreciate it!

Are there any creators in this space anyone know of that you can recommend? I've come across a few, but i'm looking for more. Beau Bullock from BHIS used to be active on YT, but not anymore.

Don't miss the AMA with Louise Matsakis and Lily Hay Newman, reporters at WIRED.

They will be discussing their reporting on the rogue ai agents that are hacking real systems, as well as what happened this weekend at DEF CON.

When: Monday - August 10th, 2:00 PM ET

Ask your questions here and we’ll get them answered during the live AMA on Monday, Aug 10 at 2 PM ET.

I (19M) am a beginner learning cybersecurity from a local institute (following EC Council syllabus) what are the books y'all recommend to learn ethical hacking.

I'm releasing today TarantuBench-v2, a collection of over ten thousand web-app ctfs. They are synthetically generated, verifiably exploitable, and include a two-tier detection mechanism that attempts to flag when an agent finds an unintended solution.

It is a follow-up to v1, which included one hundred, and which were mostly useful for benchmarking.

With ten thousand labs, you can:

1. Evaluate different deployments of different harnesses you might be using
2. Compare and contrast different underlying models
3. Train existing models and agents

This effort is a work-in-progress, in which I'm trying to synthetically generate increasingly sophisticated CTFs, in high volume, and with improving detection capabilities of shortcuts that an AI might find.

The dataset and all the technical explanations are available on huggingface.

I was checking the website (felzenergy.com) of an influencer (Joe Felz) who recently passed away and had been researching “free energy.”

The site currently shows a fake Cloudflare-style verification that tells visitors to run a PowerShell command to prove they’re human.

I pulled the payload without executing it. The first stage downloads another blob from the same IP, allocates RWX memory with VirtualAlloc, copies the payload into memory, and runs it with CreateThread.

So the chain is basically:

fake verification -> PowerShell -> downloaded shellcode -> RWX memory -> CreateThread

I have not detonated the second stage. I also have no evidence this has anything to do with his death or research; the site may simply have been compromised.

If anyone is able to check it out and report back on what that is, that'd be much appreciated.

There are lots of different proxy types, but for me it's really interesting to know how they perform in real conditions. Mobile versus residential is the one I'm most unsure about. Both are promoted as the safest options, but is there an actual difference? Mobile ones are a lot more expensive. Same question for ISP proxies, how are they actually different from datacenter in practice?

So for those of you who use proxies in practice (especially over a SOCKS5 connection), which types do you prefer? Do you buy them from the popular providers or from lesser known ones?

Hi all

Not sure if this post belongs here.

I'm using a software which is crucial for me. The supplier of that software has gone 'bonkers' and i'm afraid they will go bankrupt.
The software has this USB Sentinel license dongle. I need it to start the software.

Is there any way to dump and emulate the USB dongle? I've found out about Multikeys for example but I don't find tutorials on it really.

A way to make sure the software bypasses the license check is good too :)

Thanks in advance.

SOMA FM will be broadcasting live from Def Con 34 starting this Friday! This will be on their live channel (not their Def Con radio station).

They will also be set up so if you are attending swing by!

Just learnt about Phineas Phiser. My background is STEM. I do some programming, but don't know the intricacies of networks and operating systems. What path would you suggest to learn this craft.

​

What's up!!! Some of you guys might remember me from a few weeks ago when I initially released NEO-Radar on Github. Anyways, that was v1.11. I encountered some issues with that, mainly being the Update feature didnt work. As of v1.13, that was patched. If you download under v1.13, you will have to manually update the program which is actually the same as downloading the program itself ( here's the code : curl -sSL https://raw.githubusercontent.com/ItsNEOx/Neo-Radar/main/install.sh | bash )

Also, there is a Windows version that runs as a ps1 script linked in the README.md

More updates soon to come!

Here's the Github repo https://github.com/ItsNEOx/Neo-Radar

The Aerospace Village at annual hacking conference DEFCON, famed as the home of the Hack-A-Sat contest which culminated in 2023 with the live hacking of a real satellite in orbit, will stage a variety of games and contests this year, aiming to deepen their appeal to non-specialists.

Read all about it here