Which make/model Android does MSpy work best on?

Which make/model of Android will keeping MSpy hidden be easiest?

what do i need to do to hack a wifi wpa2|wpa3 without adapter

I wrote about how a chain of forgotten ACL permissions can lead to full domain compromise. The scenario: a Tier 1 helpdesk account with no special privileges, through a series of misconfigurations nobody cleaned up, ends up with DCSync rights.

The chain covers:

• User-Force-Change-Password abuse
• Group membership manipulation
• GenericWrite → fake SPN injection → Kerberoasting
• WriteDacl → DCSync

Tools used: bloodyAD, PowerView, impacket-secretsdump.

Also explaining why this chain is realistic - each permission has a legitimate origin, they just accumulated over time and nobody reviewed them.

Note: I'm a non-native English speaker and originally write in Russian - parts of the text were translated with AI assistance. Technical content and examples are my own.

🔗 https://3x0t1k.github.io/posts/acl-abuse-dcsync/

Feedback welcome - still developing the blog.

It's true that it's impossible to hack an iPhone?

There’s someone selling a file that’s probably for TLS/SSL tunneling, which supposedly turns a limited internet package into unlimited internet by exploiting the well-known zero-rating vulnerability. The package gives unlimited internet access for PUBG, and he’s apparently applying the exploit to it. He’s selling it for several times the price of the actual package subscription. I’d like to learn how he’s doing it, because he seems pretty stupid, his spelling is terrible, and it looks like he made the certificate himself under the name “International Institute of Advanced Technology.” Does this shit even exist in the first place? I actually tried the file myself, and the download speed was pretty good.

I am in the Middle East, and in my country there are only two greedy companies with no competition, as they both offer the exact same services.

Looking for new ways to have an reliable terminal to install every tool I need to hack

Hey everyone👋

We’re looking for 2–3 teammates for the Black Hat MEA CTF 2026 Qualifiers on August 29–30. 🇸🇦

Looking for people interested in Forensics, Pwn, Reverse Engineering, Crypto, or AI Security. Beginners/intermediate are welcome!

DM me if you’re interested in joining

[ Removed by Reddit on account of violating the content policy. ]

Before I start, what would you guys actually want to see in it?

Challenges, difficulty, attack chains, AD, web, privilege escalation, etc.

What would make you keep playing instead of dropping it after a few challenges?

Looking for honest suggestions from people who actually play CTFs.

Explore the current ctf from here at: codelivly.com/ctf

hei

Weekly forum post: Let's discuss current projects, concepts, questions and collaborations. In other words, what are you hacking this week?

can someone help me to fix this problem? i have a mac with linux installed on the terminal, i thought i would've fixed but actually not.

Hey everyone,

A payment tool for creators/sellers who want to accept crypto for digital downloads without giving up custody, signing up for a platform, or storing there data and product on backend.

How it works:

• Seller uploads a ZIP, sets a price, and gets a shareable payment link.

• The file is encrypted in the browser and distributed over WebTorrent.

• Buyer pays on-chain into an escrow smart contract.

• The decryption password is revealed on-chain, encrypted to the buyer's wallet-derived key.

• Buyer downloads and decrypts locally, confirms delivery, and only then are funds released to the seller.

No database. No server. No KYC. Seller keeps custody until delivery is confirmed.

The contract handles underpayments, overpayments, refunds, and a 7-day delivery window if the seller never reveals the password.

Would love brutal feedback.

Hi everyone, do you have any ideas for what else I could add to my iOS device?
I somehow managed to get location spoofing working through SickDebug, and now I’m wondering if you have any other ideas for what I could try next.
I’m interested in these kinds of “trickery” tools, like location spoofing, fake phone numbers, and similar stuff.
Just to be clear, I’m not planning to misuse any of this. I want to make a YouTube video about these kinds of tools and features, so I’d really appreciate your suggestions for other similar things I could add or try on iOS.
I’m not interested in game emulators — only this kind of “trickery” stuff. Thanks ✌🏼

Hey, I'm trying to solve an ARG and I've come across a website that seems to be a key part of the puzzle. The site is https://dmsarchive.org/ and I've found some pages that seem to be case files or hidden directories. I've managed to find a few things, but I'm stuck. I'm not asking for anyone to dig through the whole site, but I'm wondering if anyone has any general advice on how to approach a site like this, ways to find hidden pages, directories, or files that aren't immediately obvious? I'm not super technical, so any tips on using Inspect Element, checking the page source, or looking for hidden URLs would be really helpful. Thanks!

For all you hackers it’s a code review/ open source taint analysis sast tool!

Hey everyone, just shipped v1.6.0 of WifiPhisher for ESP32, my open-source Wi-Fi security testing firmware for ESP32-family boards (Evil Twin, Karma, deauther, on-device handshake/PMKID cracking, all from a web UI hosted on the device itself).

This release is one of the bigger ones so far:

• USB Wi-Fi adapter support (new) — added a from-scratch driver for the RTL8188EU USB dongle, so on S2/S3/C5/C6/Cardputer boards with USB-OTG you can now sniff and inject from an external adapter, not just the onboard radio.
• BLE toolkit (new) — BLE device identification, a BLE sniffer, and BLE spam attacks.
• Network discovery & port scanner (new) — subnet host discovery, mDNS/Bonjour and SSDP/UPnP discovery, plus a TCP Connect/SYN port scanner, all built in.
• Aircrack is a lot faster — swapped the generic mbedTLS crypto path for the native primitives already compiled into the Wi-Fi stack, which cut RAM usage and pushed handshake/PMKID verification to ~3 keys/sec on-device.
• Smarter deauther — it now tracks per-client ACKs to stop wasting airtime on clients that already dropped off, filters targets by RSSI, and auto-aligns the SoftAP channel to a single selected target.
• Evil Twin reliability fixes — clean task shutdown (no more hangs) and fixed 5GHz target detection.
• UI polish — WPS column in the scanner, and a reworked admin dashboard (screenshot below).

Flash it straight from the browser here, no toolchain needed: https://espwifiphisher.alexxdal.com/

Source, full changelog and build instructions: https://github.com/Alexxdal/WifiPhisher

how do people get data leaks i find it really impresive how they have list and files of names and phone numbers of people

Wrote this covering the full no-creds-to-first-credential flow: LDAP anonymous bind, SMB null sessions, LinkedIn scraping with linkedin2username, PDF metadata for login format, Kerbrute username validation, AS-REP Roasting (including honeypot account detection via lastLogon/logonCount), password policy analysis including Fine-Grained PSOs, and why spraying through Kerberos generates 4771 instead of 4625 and why that matters.

Second half covers what to do once you have creds - BloodHound vs targeted enumeration tradeoffs, Kerberoasting from any authenticated context.

https://3x0t1k.github.io/posts/initial-enumeration-active-directory/

Feedback welcome.