r/hacking

I’m a physics student but I’ve been into cybersecurity as a hobby for a while, I’m definitely not an expert like many of you are I’m sure. However I do know the basics about things like car hacking tools, sniffing, spoofing, recon, etc.

I have Kali on a USB and wanted to do an experiment with an abliterated LLM in an agentic harness with tool use, so it could use all of Kali’s tools and infer which should be used based on judgement about what it’s told and whatnot.

It works pretty well, I had it in a sandbox and had it attacking docker containers on ye olde localhost, pretty fun to watch.

I had disabled my wifi and bluetooth from the BIOS while performing automated attacks against simulated systems, then I turned it back on and just low key forgot I did. RIP.

I then said to prepare for a network attack, forgetting before I went to bathroom that I was fully back online, I quickly noticed that it was retrieving actual information when doing NMAP, listing my dad’s corporate laptop as one of them. He specifically works in cybersecurity (kinda, but not really lol. He works at a company and has for a long time, so it’s more like they want people there who know what the company makes in detail more than people who are actually good with computers, which he is not).

I know they’re very strict about stuff though, so I was kinda panicking. My bigger concern was that it did more than just scan the network. Thankfully I stopped it in time. That’s all it ran, however NMAP is still very much something that you can see and track.

They haven’t reached out to him like “hey we think someone might’ve tried to hack you” so I think I’m in the clear. But definitely a close call.

It’s a fun combination having something that isn’t able to decline requests and can also execute much faster than me being able to automate attacks. Very neat how technology is coming along.

Wanted to share, hope you enjoyed!

I’m writing a novel where the main character is a hacker at a large state school. He’s approached by rich kids and athletes to change their grades.

Keep it legal, ofc, but is this possible? And how would it work, if so, in theory?

(Edit: by „keep it legal” I mean don’t explicitly say what to do I don’t want this to get taken down. I’m exploring what can actually be done. This is illegal in the novel.)

I’ve done some research but there’s nothing like convo and firsthand, especially when developing a novel.

Would love to hear from you all!

Looking for more OSINT, Forensics, Intercepting, Network scanners, Password Cracking tools easy to install on kali linux terminal. Used for legal white hat purposes and for pentesting. also trying to discover new hacking methods and privacy anti fingerprinting software. More buddies on the website tryhackme, which is an website to practice hacking skills.

(idk why i put education as the flair mb) So, i am making my own Ethical hacking group on telegram OR trying to find a dedicated, tight-knit hacking community and looking for a dedicated community who wants to join. We are going to be talking about a wide range of topics and i hope ts dont flop lowkey but shit its worth the try. DM me usernames/numbers to add u or just simply re-locate me to an current group

I revisited this malware variant that I came across in the wild to demonstrate to everyone how it works. Stay safe and I hope this helps someone learn something!

I went down a bit of a rabbit hole when trying to figure out if/when the Brooklyn Mirage would reopen. This happened a little while ago but they only recently patched the vulnerability (meaning I can finally share it).

TLDR; I figured out how to get access to the plans for every single building in NYC.

With Patriot Day (9/11 remembrance) coming up, thought I'd share this. Felt really good to discover & report this, preventing building plans getting into the hands of the wrong people.

Full write up and a YouTube video walk through of the exploit on my blog :)

I’m looking for a free makerspace in NYC.

I used to mess around with cybersecurity when I was in uni, and I’d like to get back into it. I’m definitely a beginner at this point as things have probably changed since then, so I’m mainly looking for a space that’s beginner friendly and doesn’t require a membership fee.

I’m also working on side project, so having a physical space where I can work on the project, learn, and meet other people interested in this kind of stuff would be really helpful.

If anyone knows of any free makerspaces, community labs, or similar spaces in NYC that would be welcoming to beginners, I’d love to hear about them!

“We're Lidor B./thisis0xczar and Elad Meged, founding-team vulnerability researchers at Novee Security.

At Black Hat this year we presented pre-auth remote code execution chains in enterprise Java platforms, reaching internal execution surfaces through routing logic, unsafe deserialization, and template evaluation. 

We also published research showing how a single untrusted GitHub issue could compromise the AI coding agents from Anthropic, Google, and OpenAI (Claude Code, Gemini CLI, and Codex), leading to remote code execution and credential theft.“

Need to practice my ethical hacking skills. im on kali linux with built in tools

I’m staying in a university hostel, and the Wi-Fi is extremely restrictive. A lot of websites and services don’t work at all, while other sites work normally.
The biggest problem is that cellular data is very weak where I live, so I can’t reliably use mobile data as an alternative. I’m also not able to call my family regularly because social media apps and video-calling services are blocked on the hostel Wi-Fi.
I’ve already tried quite a few things:
Proton VPN: doesn’t even load/connect properly.
Cloudflare DNS: 1.1.1.1 / 1.0.0.1 — no difference.
Google DNS: 8.8.8.8 / 8.8.4.4 — no difference.
System DNS-over-HTTPS (DoH): tried this as well — no difference.
GoodbyeDPI: doesn’t work.
DPI bypass for HTTPS: tried the different options.
Several other DPI-bypass applications: none worked.
Cloudflare WARP: doesn’t work/connect either.
I’m on Windows.
The hostel network appears to be a managed/private network. Windows originally showed an IP around 172.18.x.x, gateway around 172.18.0.100, and a local DNS server (192.168.5.51). I also tried changing DNS to Cloudflare and Google, but that didn’t help, and I’ve since restored the DNS settings to automatic.
At this point I’m guessing the filtering is happening at the gateway/firewall level rather than just DNS. It may also be blocking VPN protocols or VPN endpoints, or using some kind of DPI.
I’ve tried a lot of the usual solutions, so I’m wondering:
Has anyone dealt with a university/hostel network this restrictive? Is there a reliable way to get around this kind of filtering, or a way to diagnose exactly what they’re blocking?
I’m particularly interested in solutions that work on Windows when normal DNS changes, DoH, VPNs, WARP, GoodbyeDPI, and other DPI-bypass tools don’t work.
I’m not trying to do anything malicious — I mainly want normal internet access and, importantly, to be able to video/audio call my family, since mobile coverage/data isn’t a reliable alternative here.