







































Hey everyone, just shipped v1.6.0 of WifiPhisher for ESP32, my open-source Wi-Fi security testing firmware for ESP32-family boards (Evil Twin, Karma, deauther, on-device handshake/PMKID cracking, all from a web UI hosted on the device itself).
This release is one of the bigger ones so far:
Flash it straight from the browser here, no toolchain needed: https://espwifiphisher.alexxdal.com/
Source, full changelog and build instructions: https://github.com/Alexxdal/WifiPhisher
It's like a dream to me to actually crack a wifi from my young hood is there any tutorial?
If I had to start cybersecurity again, I wouldn't jump straight into pentesting or collect a bunch of certs.
I'd go:
Networking → Linux → Windows → Python → Security basics → Labs → Specialize
Learn networking properly first. Understand what actually happens when you open a website, how DNS works, what TCP does, how ports and services work.
Then get comfortable with Linux and Windows. Use the terminal. Break things. Read logs. Set up VMs.
After that, start doing actual security work: Nmap, Wireshark, Burp, SIEMs, basic vulnerability analysis, CTFs, home labs.
Then pick a path:
The mistake I see most often is trying to learn all of cybersecurity at once.
Pick one direction and go deep.
What would you change in this roadmap?
Is there a tool I can use on Windows to crack Wi-Fi passwords?
Put together a hands-on PDF for anyone trying to break into SOC/blue team work but stuck on theory with no practical lab experience.
Covers the whole build: isolated VM network, Windows and Linux endpoints, Sysmon telemetry, PowerShell logging, deploying Wazuh as the SIEM, connecting agents, and five safe attack simulation exercises (failed logins, encoded PowerShell, process creation, network connections, file drops).
Then it goes into the actual analyst work: a 10-step investigation workflow, a full practical investigation with an answer key, detection rule writing, an incident response playbook, and an incident report template.
Free download, no signup wall: from codelivly telegram channel
If you want to go further after this, I also put together a full SOC Analyst L1-L2-L3 bundle here: https://resources.codelivly.com/product/soc-analyst-the-complete-l1-l2-l3/
Happy to answer questions if anyone gets stuck on the Wazuh setup or Sysmon config.
First when I captured the handshakes I ssh into the PWNAGOTCHI handshake folder but it shows empty. But pwnagotchi says it captured my wifi so.im trying to find it on my cLI. Where do I look??? In the command line..
I was able to find it under the GUI under handshakes.dl. and downloads as pcap file. And from there I'm completely lost. And don't know how to crack it. How would I get it from my windows to kali. To use hashcat. Any good tutorials videos I could watch. I'm more of a visual learner.
I want to buy an laptop under 70k in offline market the price of asus tuf a 15 3050 is 1.27lahks or in flipkart around 90k nd in Amazon 73 but currently not ordered on this place so according to you guys which is better for me?
secondo voi se denuncio un profilo tiktok che posta gossip che mi ha tirato in mezzo scrivendo fatti miei personali, la polizia puo fare qualcosa?
Been testing a web app where the usual stuff hasn’t gone anywhere. No obvious injection, auth issues, or easy misconfigurations.
There’s one weird behavior I can’t quite explain though.
How do you guys usually approach a target when the obvious attack surface is basically dead? Looking for some real-world ideas from people who’ve been in this situation.
In your opinion, what are the best tool to access my Wi-Fi network without a password?
My laptop and phone are hacked and they are access to remotely. I need someone who can help fix the vulnerabilities and check devices for any issues. I’m willing to pay for it.
I was jumped by a group of three men who shouted homophobic slurs at me near their pickup truck outside of The Seal pub in Harwich. Message me if you witnessed the incident or if you have any information.
Hello! A long time lurker here.
I have just graduated School and I have to choose my field. Computer (specifically software) is my liking. So realistically, the options boiled down to AI, Software dev and Cybersec. Without Going in details, I decided Cybersecurity (Specifically, "Cyber security, Blockchain and IoT") and I have a few questions.
One, Where do I begin? Obviously, the classes don't start until late september to early october. I have time, But I love cybersecurity and tinkering stuff and I decided to look into it.
Two, Is Cybersecurity really stable? I mean, I didn't choose AI or Software Dev because both of them are unstable. Given the rise of AI, my hunch tells me that the AI would be used in attacks? that should mean that Cybersecurity must be booming? And the fact that we are talking about Security, I don't think that Security would be replaced with an AI, will it?
Three, The Course I took teaches Blockchain and IoT, Do we really use it in cybersecurity? are they related?
Four, are there any communities online that I can join? Perhaps a newsletter?
Thank you for your time.
So
Over the past week, a threat actor operating under the moniker “TheHatman” has flooded cybercrime forums with massive internal employee directories belonging to several Fortune 500 companies. The actor claims these dumps were extracted directly from the organizations’ Azure Tenants.
When I started learning cybersecurity, my notes were everywhere. Random Google Docs. Half-finished PDFs. Screenshots with no context. Bookmarks I never revisited. Nothing connected. Nothing made sense when I came back to it.
So I rebuilt everything as an Obsidian vault — structured as a proper learning path from absolute basics to advanced topics.
What's inside right now:
Networking fundamentals (OSI, TCP/IP, ports, protocols)
Operating systems & Linux basics
Security fundamentals (CIA triad, threats, risk)
Web application security (OWASP Top 10, common vulns)
Cryptography basics (symmetric/asymmetric, hashing, PKI)
SOC / Blue Team / Red Team concepts
Incident response fundamentals
Malware analysis basics
Cloud security intro
Cheat sheets and command references I actually use
The part I didn't expect: Everything is interlinked using Obsidian's graph view. So instead of flat notes, you get a proper knowledge map — click through related concepts as you're learning, and it actually connects.
It's now published as a live site too (built with Quartz), so you can browse it like a proper handbook instead of just a folder of markdown files.
I'm still actively adding to it — if you spot gaps or want a topic added, let me know. Hoping this saves someone the same scattered-notes chaos I went through.
Repo: https://github.com/priyanshu-rawa/Cybersecurity-Handbook
Live site: https://cybersecurity-handbook-lake.vercel.app
Would appreciate a star if this ends up being useful for your learning too 🙏