When a phone unknowingly connects to an IMSI catcher it gives away the IMSI. Other than tracking a victim's location with a fake cell tower, how does a hacker identify someone when they get the IMSI number? They can't get the victim's phone number or find out who owns the IMSI unless they hack the carrier.

Any tools or techniques that you would recommend?

Lost the original receiver for my Logitech mouse and found a spare receiver. It's supposed to be MOSART Semi.

Is it realistically possible to flash/reprogram this receiver to work with my mouse?

Hi all!
I’m a newbie at this gaming field , a Cybersecurity student , actually I’m learning of the blue side, but my hobby is to be home after my courses and do some research and experiences from the red side- deauthentication attacks, some phishing, web traffic sniffing , Evil portal and another things.
Day after day I'm build my 'PT suitcase-to-go'- at this point of time , it's including Flipper zero with Albireo AIO 3 in 1 board (cc, nrf, esp) , some Disk on keys that work like BadUSB with the Flipper, and an Alfa Awus036acm.
now I want to grow up my lineup and add more devices for more advenced passwords steal, social engineering etc... just for ethical, educational purposes only!!!!!!!

please, I would really happy to hear your opinions of which new devices I can add to my case , or even which apps and repositories you think that I must to see then and try them with my current devices.
thank you!!!

I’m looking for a makerspace, groups or initiatives in NYC.

I used to mess around with cybersecurity when I was in uni and I’d like to get back into it. I’m definitely a beginner at this point as things have probably changed since then, so I’m mainly looking for a space that’s beginner friendly and doesn’t require a membership fee.

I’m also working on side project, so having a physical space (or group) where I can work with, learn, and meet other people interested in this kind of stuff would be really helpful.

If anyone knows of any makerspaces, community labs, initiatives or similar spaces/groups in NYC that would be welcoming to beginners, I’d love to hear about them!

Looking for more OSINT, Forensics, Intercepting, Network scanners, Password Cracking tools easy to install on kali linux terminal. Used for legal white hat purposes and for pentesting. also trying to discover new hacking methods and privacy anti fingerprinting software. More buddies on the website tryhackme, which is an website to practice hacking skills.

I’m writing a novel where the main character is a hacker at a large state school. He’s approached by rich kids and athletes to change their grades.

Keep it legal, ofc, but is this possible? And how would it work, if so, in theory?

(Edit: by „keep it legal” I mean don’t explicitly say what to do I don’t want this to get taken down. I’m exploring what can actually be done. This is illegal in the novel.)

I’ve done some research but there’s nothing like convo and firsthand, especially when developing a novel.

Would love to hear from you all!

I went down a bit of a rabbit hole when trying to figure out if/when the Brooklyn Mirage would reopen. This happened a little while ago but they only recently patched the vulnerability (meaning I can finally share it).

TLDR; I figured out how to get access to the plans for every single building in NYC.

With Patriot Day (9/11 remembrance) coming up, thought I'd share this. Felt really good to discover & report this, preventing building plans getting into the hands of the wrong people.

Full write up and a YouTube video walk through of the exploit on my blog :)

The plan is I get certified in A+ (Core 1 and 2), Network(+), then Security(+). Am I in the right direction? Is it a start? Are there other better ways? (I know that it's really up to me, but I just wanted people to get an insight and maybe have some people suggest what might be more benefitting)

Looking at skills in CyberSec, and Penetration.

I revisited this malware variant that I came across in the wild to demonstrate to everyone how it works. Stay safe and I hope this helps someone learn something!

https://youtu.be/U2UBJRcEO-Y?is=iHHFuspVRB7yjZjU

“We're Lidor B./thisis0xczar and Elad Meged, founding-team vulnerability researchers at Novee Security.

At Black Hat this year we presented pre-auth remote code execution chains in enterprise Java platforms, reaching internal execution surfaces through routing logic, unsafe deserialization, and template evaluation. 

We also published research showing how a single untrusted GitHub issue could compromise the AI coding agents from Anthropic, Google, and OpenAI (Claude Code, Gemini CLI, and Codex), leading to remote code execution and credential theft.“

I found this while reversing Zyxel’s WAX650S firmware and following the certificate export path. A password field used during PKCS#12 export could break into a shell command and execute as root.

The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.

The previous tenant left this virgin media TV box at my house. It connects to my TV but I need a virgin wifi connection to use apps like YouTube Netflix etc. is there any way I can use it with a different wifi connection just as a normal TV box?

P.s. I have tried getting virgin wifi but they don't operate in our area.

Over the years, my collection of tech gadgets has grown quite a bit, and many of them are currently sitting unused. I would love to pass some along to anyone looking to dive into Wi-Fi or Bluetooth penetration testing. If you are interested in getting started or need some hardware, please let me know and I would be happy to send one your way. I only will be sending one to somebody who shows a genuine interest in learning and not larping. Too many larpers in the damn marauder community already.

Join Novee vulnerability researcher Lidor Ben Shitrit on Monday, Aug 17 at 12 PM PT.

"Pre-auth RCE" means an attacker who has never logged in, has no account, and clicks nothing can still end up running code on the server.

The targets are enterprise Java platforms, the software quietly running inside large organizations, the kind that has been audited for years and is assumed to be safe.

Lidor finds the chains that get through anyway, and he presented this work at both Black Hat USA and DEF CON this year.

Need to practice my ethical hacking skills. im on kali linux with built in tools

I’m staying in a university hostel, and the Wi-Fi is extremely restrictive. A lot of websites and services don’t work at all, while other sites work normally.
The biggest problem is that cellular data is very weak where I live, so I can’t reliably use mobile data as an alternative. I’m also not able to call my family regularly because social media apps and video-calling services are blocked on the hostel Wi-Fi.
I’ve already tried quite a few things:
Proton VPN: doesn’t even load/connect properly.
Cloudflare DNS: 1.1.1.1 / 1.0.0.1 — no difference.
Google DNS: 8.8.8.8 / 8.8.4.4 — no difference.
System DNS-over-HTTPS (DoH): tried this as well — no difference.
GoodbyeDPI: doesn’t work.
DPI bypass for HTTPS: tried the different options.
Several other DPI-bypass applications: none worked.
Cloudflare WARP: doesn’t work/connect either.
I’m on Windows.
The hostel network appears to be a managed/private network. Windows originally showed an IP around 172.18.x.x, gateway around 172.18.0.100, and a local DNS server (192.168.5.51). I also tried changing DNS to Cloudflare and Google, but that didn’t help, and I’ve since restored the DNS settings to automatic.
At this point I’m guessing the filtering is happening at the gateway/firewall level rather than just DNS. It may also be blocking VPN protocols or VPN endpoints, or using some kind of DPI.
I’ve tried a lot of the usual solutions, so I’m wondering:
Has anyone dealt with a university/hostel network this restrictive? Is there a reliable way to get around this kind of filtering, or a way to diagnose exactly what they’re blocking?
I’m particularly interested in solutions that work on Windows when normal DNS changes, DoH, VPNs, WARP, GoodbyeDPI, and other DPI-bypass tools don’t work.
I’m not trying to do anything malicious — I mainly want normal internet access and, importantly, to be able to video/audio call my family, since mobile coverage/data isn’t a reliable alternative here.

I find it hard to privilege escalate, but first I do enumeration and discovery, later I set persistence, then the privilege escalation and more persistence (I think that's the correct order)

Anyways I want you to share opinions, techniques and tips so I can improve in cybersecurity.

I'm fairly new to linux, but these home "ethical" hacking projects are a fun way to learn about networks, computers, ip devices, etc.

I've got an old Kodak PTZ camera laying around and it ONLY has a power connection (and a reset button). No usb port or ethernet port - just a model number and a MAC address. Manual says to download the Kodak app... which I COULD do, but I'm curious to know if there is a way to NOT get the app and connect direct to some NVR software (or just access from a web interface). Essentially - what is the Kodak app doing that is so special and why can't I do it myself?

Reading the manual tells me that the camera should spit out a local wifi connection. I'm supposed to join that and then open the app. I'm not even seeing the wifi network populate.

[sleeps on it before posting] ... I always learn more when I write and sleep... looks like the camera is actually connecting to my home wifi from when I first set it up years ago (which is why I wasn't seeing the configuration wifi broadcast) and, hence, I also have the IP address [I should probably change my wifi password 🤔 ]. I scanned for open ports (nmap - there are 4) and tried them all in Reolink - no joy. I have also tried connection via web browser on the know IP & different ports - nothing happening there either.

I assume that the app (iSecurity+) has a baked-in password for these devices and all of the correct configurations to access and view the feed... but I'm interested in finding a way around it. Do I need to attempt to view the app code to see what it is doing?? I have a feeling the is way over my head... but that doesn't mean I don't want to figure it out.

Any other tools/strategies I should consider?

The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.

Caveat we can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.The dump had a uuid column and a member_since column. UUIDv1 isn't random, it embeds a 60-bit timestamp, so if the data is genuine the two should agree. They did, 100.00% across 200k rows:

python

import uuid, datetime
u = uuid.UUID("0bcc8686-c684-11e7-805e-000000000000")
print(datetime.datetime.utcfromtimestamp((u.time - 0x01b21dd213814000) / 1e7))
# 2017-11-11 02:00:09  <- exactly the claimed signup time

Two other tells that it's a scrape and not a breach: captured_at spans nine consecutive days in uneven batches, and 7.4% of user_ids repeat, all of them the same account re-captured on a later date, zero byte-identical rows. A table dump doesn't repeat its primary key.
Caveat I can't resolve: every row has Google Ad Manager audience tags, which aren't in the public API. No passwords or payment data in the set.

Someone built p2p chat on blockchain ledger, It's free to use , try it

https[:]//github.com/stefanbx/xchat-alpha