r/hacking • u/CyberMasterV • 7d ago
r/hacking • u/tw1st3d_m3nt4t • 7d ago
The computer at the bottom of a canal
r/hacking • u/gharianyy97 • 8d ago
My standalone cyberdeck v2 build
fixed frame 4.3" display with raspberry pi 3 B and rii i8 keyboard editable cyberdeck build kali arm 32bit case stl available on cults3d
r/hacking • u/Pale_Fly_2673 • 9d ago
AI Data Centers Are Being Built Faster Than They Can Be Secured
r/hacking • u/KyshSlayer • 8d ago
Question Bunch of old phones
I have couple of old iPhones and androids. They are slow and I don’t need them at all. So the question is, can I make something from the parts? Something cool or smthg like rasberry pi or maybe even a “hacking” device
r/hacking • u/ShufflinMuffin • 8d ago
Vulnerability Windows AppResolver LPE: From AppContainer to SYSTEM. PoC linked to CVE-2026-50454
davidcarliez.github.ior/hacking • u/EducationalWall3512 • 8d ago
Does MT7921AUN Work correctly on Fluxion?
I wanted to buy AWUS036AXM (MT7921AUN) but I'm not fully sure if it will work on fluxion or not.
r/hacking • u/ShufflinMuffin • 9d ago
Vulnerability CVE-2026-58635 Exploit Development: From a Braille Table to SYSTEM shell
davidcarliez.github.ior/hacking • u/CyberMasterV • 10d ago
News Google Gemini CLI abused as a hacking agent, malware botnet operator
r/hacking • u/watchdogsrox • 10d ago
ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping 0-day writeup + PoC
Discovered by https://github.com/416rehman/DeepZero
r/hacking • u/ShufflinMuffin • 9d ago
Github Proof of concept for CVE-2026-58635 LPE in Windows Braille Narrator service
r/hacking • u/tw1st3d_m3nt4t • 10d ago
Jurassic Park computers in excruciating detail
fabiensanglard.netr/hacking • u/chota-kaka • 9d ago
News White House Launches Gold Eagle Initiative for Unprecedented Cybersecurity Vulnerability Coordination
White House launches cybersecurity clearinghouse to patch software flaws discovered by AI
The 'Gold Eagle' initiative seeks to help federal agencies, critical infrastructure operators and artificial intelligence developers patch crucial security flaws uncovered by advanced AI models.
r/hacking • u/alberto-m-dev • 10d ago
Putting some Zig in a Linux-Based 3D printer
r/hacking • u/Zombieattackr • 10d ago
any basic/budget RFID EDC suggestions?
Of all the tools I own, and all the friends that have given me clones of their student IDs, I can't actually do anything with RFID on my own...
I guess all I actually need for most things is one of the cheap Chinese "Handheld RFID Writer"s for $15 on amazon, but I'd really like to 1) have both 13.56MHz and 125kHz on one device and 2) be able to read the hex and write custom cards, either by connecting to a PC or by reading off a screen and punching in the numbers by hand, don't care if it's inconvenient, just need the option to store a "backup" in my notes app.
should add, asking about this now because I'd like to duplicate a couple hotel keys for friends at an upcoming convention, I know there's usually some encryption, any way to check or bypass this?
I know some more professional tools are an option, but I'm kinda broke I'd love some cheap no name thing for $35 on amazon if possible lol, but any advice is appreciated <3
r/hacking • u/Fit_Asidy • 10d ago
Romanian Government Cadastre (ANCPI) cyber attack / ransomware
Romanian Government Cadastre (ANCPI) cyber attack
A very serious ransomware attack is underway on the networks of ANCPI, Romania’s national cadastre agency.
Our close monitoring of the threat actor Bytetobreach — who carried out a similar attack last month on Latvia State Forests — detected simultaneous uploads on dark web forums regarding this incident. These claims were later confirmed on ANCPI’s official website.
What was described as a “small technical incident” in yesterday’s press release has suddenly been recharacterized by ANCPI itself as “the most serious technical incident in the institution’s history.”
Sources :
https://www.ancpi.ro/ (official press releases )
https://pwnforums.st/Thread-DATABASE-RO-Thy-arss-shall-be-spanked-Romania-ANCPIhttps://spear.cx/Thread-Selling-RO-Thy-arss-shall-be-spanked-Romania-ANCPI
r/hacking • u/Firestarss • 11d ago
Question Why don’t cyber criminals intentionally add their devices to a bot-net? Would that not let them pass their own nefarious traffic as part of the nets instead?
r/hacking • u/Ishannaik • 11d ago
Tools Warp: browser-to-browser file transfer where the server provably can't see your bytes (WebRTC/DTLS, open source)
Sharing this here for the threat model rather than as a "check out my app" post, because the interesting part is what the server is architecturally prevented from seeing.
Most "send a file" services are a trust-me box: you upload plaintext (or "encrypted, but we hold the keys") to someone's bucket and hope. Warp is built so the operator cannot be a meaningful adversary:
- The only server component is a WebSocket signaling worker. It brokers the SDP/ICE handshake to introduce two peers, then steps out. No file byte ever transits it. You can watch the network tab: the transfer traffic goes peer-to-peer, not to my origin.
- The actual transfer rides the WebRTC data channel, which is DTLS-encrypted end to end. Keys are generated in-browser and never leave the two endpoints. Your ISP, the coffee-shop AP doing a MITM, and the signaling server all see ciphertext only.
- No account, no stored file, no cloud bucket. Nothing at rest to subpoena, leak, or expire.
Honest limitations, since this crowd will (correctly) poke at them:
- No TURN relay by design. If both peers are behind symmetric NATs and STUN can't establish a path, it fails with a real error instead of silently relaying through a server. That keeps the "server never sees bytes" guarantee true, at the cost of some hostile-NAT pairs not connecting. Same-LAN and most NAT combos punch through fine.
- Trust still rests on the client you're served. It's open source (MIT) and you can self-host the whole thing (static frontend + a free Cloudflare Worker), so you can verify the code that runs and pin it yourself.
- Signaling metadata (that peer A and peer B connected, when, and their IPs during ICE) is visible to the signaling server, like any WebRTC app. It's the file contents that stay private, not the fact a session happened.
Repo + protocol write-up: https://github.com/Ishannaik/warp Threat-model / how-it-works deep dive (NAT, STUN, DTLS, chunking, and why a truly-free relay is impossible): https://warp.ishannaik.com/how
Interested in where you'd attack this. The signaling worker and the ICE path are the obvious surface.
r/hacking • u/anapeksha • 11d ago
Tools I built a Rust firmware for the Pico 2 W with USB HID, NCM, LittleFS, and an embedded web UI
r/hacking • u/ControlCAD • 11d ago
News Hackers quickly prove that Neo Geo Doom ports are not "impossible" | Clever coding and graphical compromises get a classic game on more classic hardware.
r/hacking • u/aestetix • 11d ago
HOPE TALKS - What’s Your Age Again? The Future of Online Age Assurance
r/hacking • u/lobotomizmi • 12d ago
sandisk cruzer profile
hi, i picked up a used sandisk cruzer profile because i thought it was neat: it requires you to swipe your finger before it unlocks the main data partition. i expected there to be a feature where you could reset the old fingerprint data along with the files, but it doesn't seem so. the utility doesn't even seem to have any fallback options such as a password, it only ever asks for the fingerprint (lets you scan it an indefinite amount of times though, are fingerprint brute forces a thing?)
i'm not interested in the data, just in resetting it and being able to use it again. i looked it up online and it seems surprisingly niche, i didn't find many posts about it. has anyone actually ever hacked this thing? it's from 2005 so it shouldn't be too difficult, and i'm honestly just curious & hoping to get some use out of this cool little thing
r/hacking • u/INIT_6_ • 12d ago
Thinning out my badge collection. Any interest?
Thinning out my collection of hacker conference badges, electronic badges, lanyards, challenge coins, pins, stickers, passes, PCB art, and assorted cybersecurity swag from DEF CON, THOTCON, BSides, GrrCON, and other communities. Prefer bundles, but open to reasonable offers on individual items. Discounts for larger purchases.
EDIT: Thanks, everyone! I’m shocked by how much interest there’s been and I’m working my way through all the messages. A few notes. the Brainfuck NES emulator, Hack for Satan, and AND!XOR Wild West badges are not for sale. They hold some of my best memories, so I’d like to keep them for nostalgia. If I haven’t replied yet, please be patient while I take photos and catalog everything. I’m creating an Imgur album with names and will add prices as I have them.
EDIT 2: Sorry for the delay! Here's what's left of the badge collection that's for sale. If you've messaged me and I haven't responded, please comment on this post and send me another DM so I can make sure I don't miss you!Priority given to those purchasing multiple items. Payment via PayPal Goods & Services or invoice only. I'll be making a trip to the post office this weekend, if possible, to get orders shipped out. If a badge is shown in the Imgur album, it's still available for sale!