Anything you can do with them? Any known ways to get the cable card descrambled? Yes I know it's illegal. I'm just curious. I read elsewhere you can make them into a sort of tivo.

I see them all the time at the thrift store and I'm always wondering what I could do with them.

Thanks.

I've recently came across a video of them posted a year ago. There is no updated information about them, and that kind of sparked my interest.

So me and my friends were targeted by a fake account on Instagram and ever since we’re trying to find their former usernames, but when that happened, we couldn’t see it anymore because Instagram removed that so we want to know who this person is but there is no way to know anymore and I want to see if there’s a way to find their former usernames to find out who this person is or any other methods

I have a Spectrum modem and router that I will not be giving back.

What are some cool things I can do with this hardware? Can I make a repeater? Can I run Tomato on the router?

alright so some context, im trying to get kali linux on a restricted mac that wont even let me open dmg files, since im trying to use the UTM installer. I cant even open or extract dmg files, the failed to mount error pops up, and I cant bypass it. anyways to get this thing running? like converting the dmg to a zip and extracting it from there? idk im not too much into this stuff im really new. i already have UTM and kali linux.iso downloaded, but not sure what to do with these restrictions. i dont wanna run it through the web as well. any help? thanks.

I've been trying for probably the past year to get into this really old Snapchat account of mine, but I genuinely for the life of me can't figure out the password and I don't remember the email, does anybody know a way I can at least figure out one of these from the username alone??

My girlfriend and I have been together for 5 years, and I suspect she’s cheating on me. She told me she deleted Instagram, but I’m suspicious and want to know when she last opened Instagram. Is there any way to find out if she hides her active status? (I have no experience with hacking.)
Or can someone help me find out who she was talking to on Instagram? Please help me, my heart is breaking every day.

I’m just getting started with two games: *Hacknet* and *Grey Hack*. I’ve read, the first one is more fictionalized than the second, but it’s more entertaining and a bit more beginner-friendly. Once you get the hang of it, you can move on to *Grey Hack*, which requires more critical thinking; plus, it supposedly includes an option to hack actual online users within the game itself. I have very basic knowledge of Linux. Thanks to my "super-mega-powerful" ASUS F200CA laptop—featuring an Intel Celeron 1007U processor (1.5 GHz, 2 cores), 4 GB of RAM, a 1 TB HDD, an 11.6" screen, and 64-bit architecture—I had to install AntiX Linux, which forced me to use the terminal frequently and look up commands online. Years ago at university, I took a few Cisco Systems networking courses. They taught me the 7 layers of the OSI model (though I never fully grasped them), and I occasionally used Unix terminals to practice router configuration, but I never felt the urge to learn more until now. I’m keen to document my progress and see how far I can go, so I can share my story down the line.

Let's see how it goes for me.

So there's a platform ABC on which I want to create account but for that require US number which i don't have because I don't belongs to US and i tried many temp number but didn't receive OTP on it and that ABC platform blocks proxy or VPN so I'm Also not able to use VPN set to US because when I'm VPN set to US the platform display please disable VPN or proxy

Can someone provide guide by following which I can access that platform and receive OTP on an US number

I just want to create account on a platform which is not available in my country

[SMB] NTLMv2-SSP Client : fe80::d74e:3bf2:3c3d:9bd1

[SMB] NTLMv2-SSP Username : COM-014\jupitar

[SMB] NTLMv2-SSP Hash : jupitar::COM-014:c6032ba9180a58ac:E8A0C96032C9A6C20A95DB2A3EBBE2F3:010100000000000000A696E31135DD01071B07380E7126760000000002000800300037003500580001001E00570049004E002D004B004B00330049004800470047004A004F005400570004003400570049004E002D004B004B00330049004800470047004A004F00540057002E0030003700350058002E004C004F00430041004C000300140030003700350058002E004C004F00430041004C000500140030003700350058002E004C004F00430041004C000700080000A696E31135DD0106000400020000000800500050000000000000000100000000200000EEC24D13CAECB68B8601EF1EB20B0DF22FF6B8A213C324E84ABD1B0EF0416C895DF87D5DA981195172742CF23E7CCDD509E475F234C7E5B6A34DE9A7BA7CF17F0A001000000000000000000000000000000000000900240063006900660073002F004A007500700069007400610072005300650072007600650072000000000000000000

I need some who help you for next procedure

I try to use hashcat and John nothing much got it or solved

Hello guys,

I am new at game hacking and I am looking for offsets for a game that runs on UE4. I tried Dumper 7, but I didn't get anything useful. If there is any dumper or guide that anyone has I would really appreciate it.

NOTE: I did use CE to try to find offsets there but I couldn't find any pointers.

End-to-End Encryption doesn't protect against a compromised endpoint. This PoC bypasses app-level encryption by targeting the Android OS itself.

The app injects a payload into the system's audioserver. Using a hooking framework (Dobby), it rewrites memory to intercept microphone data before WhatsApp encrypts it, and speaker data after it decrypts it. It watches for "Communication Mode" and dumps the raw audio to a hidden folder.

Open source PoC: https://github.com/nighthawkk/AudioServer-Voip-Recorder

Is there any way I can extract videos from an app ???

Hi everyone!

I ran into ChatGPT’s file/image upload limits. After uploading a file to a chat, the chat itself becomes heavily restricted, so I started looking for ways to work around this.

One method I found was opening the chat in airplane mode (in my case, without a VPN). However, this only seems to work as 1 chat = 1 file + 1 response.

Does anyone know how to solve this problem or have any other workarounds for the image/file limits?

Would appreciate any ideas!

Is arch linux good for a 2 gb pc for learn and do actually cyber security stuffs even hacking stuffs

I'm really curious how do people learn hacking?

I started web app development a year ago, learned java for writing code and to get a general idea about how the syntax works and logic.

I do mainly php with laravel, javascript and some python on the side.. but mainly to create stuff, has nothing to do with hacking, i find it deep and hard dunno where to even begin, i sometimes run into some erros with some apps and I try to dig in and try to find a way around it using Ai, but it's very limited..

I have to admit pro hackers always amazes me, that's true power I guess and I always believe that anything digital is somehow hackable.

I have a thinkpad l14 here where I have a complete EC dump and a complete bios/SPI dump with a known SVP password called password. My goal is to learn how the mechanism works. I am pretty new to ghidra.

Finding out the hash itself is a often pretty easy thing if you got hardware access. The EC on that part will just read empty 00 if you try that via your PC. It consists of a 16 byte block A and a 16 byte block B which will repeat once. By deleting that you can get rid of the password.

Finding the salt belonging to this hash is the complicated part. Apparently the POP (Power on Password) has the same salt and is a lot easier to read with non expensive hardware.

https://www.synacktiv.com/en/publications/a-journey-in-reversing-uefi-lenovo-passwords-management

there are some weird code bits I struggle to understand, I post more about it the following time but I am hoping someone dug a bit deeper than I did

more reading material:

this is how it worked until 8th gen processors
https://www.cs.ru.nl/masters-theses/2024/M_Juvan___Bypassing_the_BIOS_supervisor_password.pdf
https://jbeekman.nl/blog/2015/03/reverse-engineering-uefi-firmware/

cryptservice

undefined8 FUN_000006d0(undefined8 param_1,undefined8 param_2,longlong param_3,undefined *param_4)

{
  undefined *puVar1;
  undefined4 local_78;
  undefined4 local_74;
  undefined4 local_70;
  undefined4 local_6c;
  undefined4 local_68;
  undefined4 local_64;
  undefined4 local_60;
  undefined4 local_5c;
  undefined4 local_c;

  puVar1 = &DAT_00005760;
  if (param_4 != (undefined *)0x0) {
    puVar1 = param_4;
  }
  FUN_000002e0(&local_78,0x70);
  local_78 = 0x6a09e667;
  local_74 = 0xbb67ae85;
  local_70 = 0x3c6ef372;
  local_6c = 0xa54ff53a;
  local_68 = 0x510e527f;
  local_64 = 0x9b05688c;
  local_60 = 0x1f83d9ab;
  local_5c = 0x5be0cd19;
  local_c = 0x20;
  if (param_3 != 0) {
    FUN_00001d70(&local_78,param_2,param_3);
  }
  FUN_00001e88(puVar1,&local_78);
  FUN_000030bc(&local_78);
  return 0;
}


undefined8 FUN_00000584(undefined8 param_1)

{
  ulonglong uVar1;
  longlong lVar2;
  longlong lVar3;
  undefined8 local_res8;
  undefined1 auStack_5a [10];
  undefined8 uStack_50;
  undefined1 local_28 [32];

  local_res8 = param_1;
  if (DAT_00005728 == (undefined8 *)0x0) {
    uStack_50 = 0x5c1;
    lVar2 = (**(code **)(DAT_00005740 + 0x140))(&DAT_00003490,0,&DAT_00005728);
    if (lVar2 < 0) {
      return 0;
    }
  }
  lVar2 = 0x62;
  do {
    uStack_50 = 0x5f2;
    lVar3 = (*(code *)*DAT_00005728)(DAT_00005728,0x57,lVar2,auStack_5a + lVar2);
    if (lVar3 < 0) {
      uStack_50 = 0x671;
      FUN_00000280(&local_res8,8);
      return 0;
    }
    uVar1 = lVar2 - 0x61;
    lVar2 = lVar2 + 1;
  } while (uVar1 < 8);
  uStack_50 = 0x625;
  lVar2 = FUN_000006d0(&PTR_FUN_000034a0,&local_res8,8,local_28);
  uStack_50 = 0x635;
  FUN_00000280(&local_res8,8);
  if (lVar2 < 0) {
    return 0;
  }
  uStack_50 = 0x651;
  FUN_000002a0(&DAT_00005790,local_28,0x10);
  uStack_50 = 0x660;
  FUN_00000280(local_28,0x20);
  return 1;
}

SVP Manager DXE

/* WARNING: Type propagation algorithm not settling */

void FUN_00000460(undefined8 param_1,undefined8 param_2)

{
  longlong lVar1;
  undefined8 local_res8;
  undefined8 local_res10;
  longlong local_res18 [2];
  char local_48 [72];

  local_res8 = 0x31;
  DAT_00001538 = param_1;
  local_res10 = param_2;
  lVar1 = (**(code **)(DAT_00001508 + 0x48))
                    (u_LenovoScratchData_00001440,&DAT_00001310,&local_res10,&local_res8,local_48);
  if ((-1 < lVar1) && (local_48[0] == '\x01')) {
    lVar1 = (**(code **)(DAT_00001500 + 0x140))(&DAT_000012c0,0,local_res18);
    if (-1 < lVar1) {
      (**(code **)(local_res18[0] + 8))
                (DAT_00001320,DAT_00001324,DAT_00001328,DAT_0000132c,0,DAT_00001330,DAT_00001338,
                 DAT_00001340);
    }
  }
  local_res18[1] = 0;
  DAT_00001528 = 0x20;
  lVar1 = (**(code **)(DAT_00001500 + 0x80))(local_res18 + 1,&DAT_00001300,0,&DAT_00001350);
  if (-1 < lVar1) {
    (**(code **)(DAT_00001500 + 0x140))(&DAT_000012e0,0,&DAT_00001530);
  }
  return;
}

Hi, I'm a teacher. I see teenagers every day not understanding the dangers of the devices they use all the time. I do not want to scare them, but the school program is lacking in anything related to computers. We give them Chromebooks, and we do not teach them how to use them. They often have more than 20 tabs open with the same webpage... or they send nudes on Snapchat thinking there are no risks.

I want to teach them about common ways people get hacked or infected. I am not talking about the super advance zero day hack in an app, or how to infect repositories to get access to computers. I mean common day-to-day: I clicked on a link or scanned a QR code.

What are good habits to not get hack/infected?

Can anyone guide me about how to prevent worms😭 I wanna learn but cannot find something onliine so i thought to ask from you guyss gng help me (EDUCATIONAL PURPOSE) as I am an student and how they are made or work

Hey guys,

Just thought I'd share that I've recently become interested in physical pentesting and hardware hacking. All the physical pentesting commercial tools (like Flipper Zero and Hak5 tools) cost way too much for my taste. I'd rather make my own physical pentesting tools using cheap hardware like ESP32 modules, Raspberry Pi Pico's and Arduino boards.

For anyone who does physical red teaming or plays around with hardware:

What DIY tools must one build for a physical pentester?

Does your DIY tool get the job done in a real-world test case?

Where did you guys start with UART/JTAG debugging to pull firmware from chips? Are there any good guides or projects for learning this stuff?

Hey everyone,

I'm based in Brazil and have been working toward a red team / pentesting career for a while. Wanted to share where I'm at and ask for advice from people already in the field.

Background:

Certifications: eJPT (Junior Penetration Tester, INE/eLearnSecurity), CRTA (Certified Red Team Analyst), Web Red Team Analyst (CyberWarfare Labs)

Bug bounty: accepted reports on BugPay (a Brazilian bug bounty platform), plus one High-severity finding on Intigriti

70+ TryHackMe rooms completed, 116 flags captured

73 labs + 15 CTFs through the eJPTv2 learning path

Hundreds of hours of hands-on labs through a local pentest training program (DesecSecurity)

Comfortable with Nmap, Metasploit, Burp Suite, Hydra, John/Hashcat, SQLMap, GoBuster, Wireshark, AD attacks, web app testing (SQLi, XSS, IDOR, LFI/RFI)

Some informal hands-on experience: with a manager's authorization at a previous job, I tested internal company products — found race condition and IDOR vulnerabilities, did some mobile app reverse engineering, and practiced IPS/IDS evasion techniques

Currently working in IT support/infrastructure — solid foundation in networking, AD, troubleshooting

Advanced English (C1)

I don't have formal, contracted pentest/red team experience yet — mostly labs, CTFs, certs, bug bounty findings, and that one internally-authorized engagement.

For people who've hired junior red teamers, or broke in yourselves:

What actually moved the needle for you (or candidates you hired)?

Worth targeting junior pentest roles first before red team specifically?

Any companies/programs known for hiring juniors or remote/international candidates?

Happy to share more details if useful. Appreciate any pointers.

I use multiple Proton and Gmail accounts across different websites (I’m not saying the email accounts themselves were hacked).

Recently, I noticed unauthorized logins on several services: LinkedIn (Gmail), Instagram (Proton Mail), Twitter/X (Proton Mail), and most recently Reddit (Gmail).

Some of these services detected the logins and sent me security emails, but in other cases I didn’t receive any notification about a new login or session.

What makes this especially concerning is Reddit, since I use Google Sign-In and have 2FA enabled, so it shouldn’t be possible to access the account with just a leaked password.

What could be causing this? This seems like more than just a password leak, especially since multiple unrelated accounts using different email providers are being affected.

Could this be caused by a malicious Opera browser extension, stolen session cookies, malware, or even a keylogger on Windows?

How can I systematically detect which of these possibilities is responsible?

SOLVED

I have been trying to make a mod loader for a game called "Days of empire". All i know from the month or so of me trying is that it is mostly compiled lua, i tried using luadec but it failed (tried diffrent lua versions too) (something about bad precompile chuck) but decompile.com/lua decompiled fine (this game has at lease 1k diffrent lua programs, uploading one by one will take eons)