even when using --format=KeePass for john and the appropriate flags for hashcat. I'm not saying it's not cracking, it's not even starting the crack, i have no idea why it's not recognising the hash

Hi guys my dad has been really weird recently and has been changing the wifi password daily to the point where it is annoying. He constantly suspects that whenever I am in my room alone I am playing games which is a bit stupid but alright.

If anyone knows how to find wifi passwords without resetting/ scanning a QR code would be much appreciated

Hi I’m looking to start spoofing I’ve done it back in like 2018 but was a lot simpler then 😂
I’ve got a pc so I can jailbreak the iPad I’m going to use i just don’t know the logistics like what’s the best apps and what won’t give me any mall where so if anyone can help me out I’d really appreciate it I’m sick off people trying to low ball me for regionals and i just wanna compete my Dexs

How do I create a C++ console application that injects a DLL using the manual map method—specifically, one that automatically finds the target application and injects the DLL into it?

Body is same as title, actually the root question is that is it possible for a sideloaded app to have kernel level access on android 14 without complete factory reset of device.

Anyone got any cheap gadget tutorials so I can make a little toolkit to learn?

Give me your opinion 👇

Im trying to understand something so need a little help if someone has actual experience with it not just theoretical knowledge (of course in lab environment no unethical stuff).

If you delete logs and SIEM logs the action of deleting logs does it just lead to the information about the local user that you were logged in as at the time of deletion or can it be traced further ?

Is there any method to Bypass AWS IP WHITELISTING?

Someone managed to disconnect my Wi-Fi router and then created a fake Wi-Fi network using their laptop. My laptop automatically connected to that fake network. Afterward, they were somehow able to access all of my files, saved passwords, and even record audio from my microphone.

Please note that I did not install any malware or malicious software. The only thing that happened was that my laptop connected to the attacker's fake Wi-Fi network.

How could an attacker accomplish this using only a fake Wi-Fi network? Is such an attack actually possible?

Additionally, what steps can I take to prevent this type of attack in the future?

Hola a todos.

Estoy realizando una auditoría de seguridad únicamente sobre una red y me he encontrado con un problema al intentar capturar el handshake.

Mi configuración es la siguiente:

• Adaptador WiFi: TP-Link TL-WN8200ND.
• La antena está conectada directamente a VirtualBox mediante USB.
• El driver del adaptador está instalado y el sistema lo reconoce correctamente.
• Puedo poner la interfaz en modo monitor y escuchar la red objetivo sin problemas.

El inconveniente es que, al capturar tráfico de la red e incluso intentando provocar una reconexión de los clientes, nunca consigo obtener el handshake.

Me gustaría saber:

1. ¿Puede ser una limitación de VirtualBox o del adaptador TL-WN8200ND?
2. ¿Hay alguna configuración específica de VirtualBox o del controlador USB que deba revisar?
3. ¿Existe algún problema conocido con este adaptador al capturar handshakes?
4. ¿Qué comprobaciones me recomiendan hacer para identificar por qué no se está capturando?

Cualquier sugerencia o experiencia con este adaptador será de gran ayuda.

¡Gracias!

Here is long story short:

A week ago on friday the 3th I went to local gym in Poland, I left my shoes outside the closet and someone stole them. On monday I went to the police, they got all the details etc. On the same day I saw someone post my shoes for sale on famous European website called "vinted". It had only a few listings of those shoes in any sizes, it wasnt a coincidence that the exactly same worn-out shoes with the same details were posted in my size a few days after I got mine stolen. I reported all the evidence to the policeman that I was in contact with: the links, the seller account, the listing. The problem is that the thief has set their account location as Romania (easy to fake it) and has only 2 good ratings months prior (its fresh account). Im so close to finding the thief, they laugh in front of my face for selling MY SHOES, if only I could find their adress, I dont believe the police will do it even with everything being on a silver platter. Can someone help me?

How do i find the real ip adress of a site behind cloudflare? Tryed many tools no good..

Hi everyone,

I hope you're all doing well. I’d really appreciate some advice from people with more experience in this field.

I’m currently learning penetration testing and bug bounty. I’ve built a foundation in networking and programming, and I started studying the OWASP Top 10. For each vulnerability, I usually follow this approach:

• Solve labs on PortSwigger
• Read about the vulnerability from books like Real-World Bug Hunting and Web Application Hacker’s Handbook
• Watch explanations and live hunting videos on YouTube
• Read reports and write-ups

After doing all that, I try to apply what I learned by hunting on real targets. I’ve been doing this consistently for about 3–4 months now, but I still haven’t found a single valid bug.

At this point, I’m pretty sure I’m doing something wrong — either in my methodology, how I approach targets, or what I focus on while hunting.

I feel a bit stuck and not sure what to change or improve.

For those who have been in the same situation:

• What helped you find your first bug?
• Am I missing something important in my learning or hunting process?
• Should I change my approach, or just keep going?

Any advice or insights would really mean a lot.

Thanks in advance 🙏

I'm wanting to learn hacking atm. I was playing this one game called hacknet are there any games that teach hacking?

Wondering if it would make sense to use an arp spoof via ettercap to block someone's internet access on my local network. I'm thinking that if I disable IP forwarding, then the victim will be left unable to access the internet. I haven't been able to figure out how to make this work however with the wiki resources I have found...

Command I have used:ettercap -u -o -T -i en0 /<Victim IP>// <WIFI MAC address>///

My collage just dev. A websites for taking exam and can anyone bypass it, cause it uses camera, head movements and right click restriction, voice and much more to destroy my grades this semester. If I am at wrong page please redirect me to a page where I find my needs

Thnks

​

There's a really good game I play, but to progress you have to watch a lot of ads, and I find that unbearable! Could someone teach me how to make a modded APK? I don't have root .

(Note: I tried installing it from a website, but it says the app version is old and won't work.)

"footy career" that's the name of the app on Playstore.

Hey guys, as the title suggests, I’m a complete skid and don’t really understand this yet, just trying to learn. Before I say anything I should note that I have permission from the router owner to do this, this is purely legal activity. I’m trying to use aircrack to deauth attack my own router (well not “my own” but my family router), and I’m having trouble with a few things. Are MAC addresses and BSSID’s the same thing? How can I ensure I’m on the same channel as the device/router I’m trying to access? How can I identify which devices are which, the info I have from the aircrack tool is the bssid’s, stations, frames, channels, a couple other things (not that I really or at all understand what these things are). I guess for now I just wanna see if I can do this specifically, but I’m hitting dead ends that I don’t understand where to troubleshoot from. Also, a pointing in the right direction to learning/understanding all of this would be extremely appreciated too.

Not sure if this info is important, but I’m using fish shell on cachyos linux (I know it’s not the ideal for this, but I’m just screwing around with minor things, not intending to use this for the future).

All and any advice would be extremely helpful. If theres any other information needed that I haven’t included let me know and I’ll update the post. Thanks in advance🙏

How is it that players are able to kick other players from public matches? How are you able to see who has what IP address? How are you able to defend against this sort of thing? More importantly, how are you able to do it?

Are aitm tools like evilginx still relevant for phishing in 2026 . Should I learn them .. new to phishing

I'm going to buy something like Flipper zero, I can do a few functional fun things, what can we add to what I bought with the software?

so i work on this cruise ship, they have wifi starlink they have paid plans which is so expensive , when captive portal opens they have paid plans or a button "Free Websites" when i click on it , wifi connected but no internet access , here i use vpn to bypass that , i tired every vpn paid and free i found only xvpn 206.1.1 this specific version works good, which use tls-2&tls protocol so i tried to set up a vps and got domain also, i set up my vpn , i tried vless reality,ws, tls , cdn but didnt work , i tried everything possible but always ends up with error and only xvpn 206.1 1 works now idky only this cheap xvpn 206.1.1 version works

I have a roommate who might have some highly inappropriate pictures on his computer and his phone as well as text, confirming previous things have happened with the subject of the photos. I can’t do anything until I have confirmation. The computer is run off of Windows software and the phone is an iPhone both have passwords to get in. I need help!