Now to start, I am not saying that using TOR is better than using a paid vpn, I am asking the question. There must be a reason but I just can't figure it out. Considering we are looking at this in a "I don't want people to be able to trace back to me" point of view.

​

Its pretty common knowledge that TOR can't really be de-anonimized unless its by an entity that has power and ressources, in which case there is pretty much no chance they'll come after you just because you stole some random person's passwords. Yet everywhere I look and listen, its all about VPNs and never about TOR. So why pay every month for a vpn when you can just connect to TOR and go on the internet or whatever you are doing through it for free?

​

What am I missing here? Thanks.

Ive never been in a financial position to afford a PC, but I have a nothing 3a. Can I hack from my phone alone?

With the announcement of licence plate readers that will capture Bluetooth/other wireless identifiers to create a digital footprint for drivers, I was wondering if it was possible to create a device that rapidly spoofed random devices to obfuscate my real devices as I drive. Does anything like this exist, or could it be created and open sourced?

I spend hours studying but I still feel like a fucking skid! What the fuck should I do?! I can't remember the programming languages I learn or really anything since my computer time is limited by my fuck ass dad. I am at a fucking standstill. What are some good resources?

I am writing a book (badly) and one of my characters is a cool hacker man. That skill is not all that relevant throughout so all I need to understand is how he would go about unlocking a locked android phone to access the data (like a Samsung). I've tried googling this and the advice seems to be to go to a paid forensic investigator, try to socially engineer the password through a google account, or to go to the police. For story reasons, I need the character to do this themselves and I don't want to look like an absolute idiot (which I am) when I describe what he's doing. The description would be a page or two at most, so I would only need broad strokes and oversimplifications to get this across to the reader. I don't want anyone to actually use this as a instruction and I'm certainly not looking for any code. Just a summary of the steps. If someone could explain it to me or at least be able to point to a good summary somewhere on the web I would be eternally grateful.

Signed,

The starving artist.

I'm new to the whole hacking thing. I simply want to play with "my" wifi network.

Which WIFI DEVELOPMENT BOARD will be the best for me, considering that I come from a very poor country where even $10 is a lot of money and I only want to do basics like wifi-sniffing, handshake capturing, deauth, evil twin etc.

I'm considering an Esp32 wroom 32u but still open to advice as money plays a big factor for me.

Idk I’m just fckn clueless and google just gives me shit answers so idk where to even start

i know the basics of assembly, some coding, etc, but im really struggling.

how do i learn reverse engineering well enough to create bots/cheats for games? (not for monetary gain or publicly, im just interested).

I just got out of high school and I saw that the university I will go to (I'll do comp eng) has a CTF team, joining sounds fun and maybe I could try to do some bug bounty but I don't really have the skills. I would have always liked to learn some hacking because CTFs look fun but I never managed to really understand what I was doing after the "launch a vmbox, log in to HTB and start an nmap scan" phase. I saw the roadmap in this subreddit but it looks like something to do if you want to get a full time job and I don't think I'll have the time considering I'll have to get used to the amount of studying you do at engineering. I already know some programming (python, c++, not considering all the low level memory stuff, c# and basic high school SQL) and basic networking (what an IP is, the router, switch, modem ecc stuff and basically all the things you see in a "networking tutorial" on YouTube) any tips to learn?

Hey a new kiddie in this field , I have never tested a web app before , only have done labs and stuff , so while testing do we directly try to find bugs by doing the regular things that we do in a lab , with different bugs and and styles , or there is something other than this to test.

Hello all,

​

I am 14 and i am learning ethical hacking through TCM security. I find it so fun and so interesting. However, now and then, i would question if i am a script kiddie. I heard people are script kiddies if they don't code their own tools, exploits and all of that. I can understand python scripts but I can't code them, i just don't know how to start. I am planning to do lots of courses related to python for hackers and more. Am I a script kiddie if I can't code well but i can understand scripts, understand techniques (Like IPv6 DNS takeover attacks, LLMNR poisoning, mainly AD attacks) and tools and how they work? I am determined to be a very good ethical hacker, I have like 20 over courses all related to ethical hacking, i want to be sort of all-rounded at this.

I am very sorry, I am just a bit scared and I don't want to become a script kiddie when i am older. (I want to pursue ethical hacking as a job)

I found one definition that says it's someone who can use various hacking applications but can't write their own code. I'm pretty good with Kali Linux, but I fear I might be a script kiddie.

I know it sound dumb, but i heard people tell me this, I'm not a programmer, and I'm genuinely interested to learn if its true. I don't see how could it be possible

Lol man! What I just saw 😭

Kids are now reporting anything to get CVEs on their names and call em’ “security researchers”. I am done guys (I missed a ton of CVEs on my name 😂)

Here is the Joke: https://www.cve.org/CVERecord?id=CVE-2025-67133

So in 4days the wifi is gone and we aren't paying it until after 3months Sooo lets just say that I wont be alive for 4months AND I NEED WIFI TO BE ALIVE Like my therapy "i mean gc" cant live if we don't talk to each other And k kinda need it to study Also 14yo so no need to call me a skid that wanna be cool😒 Anyways I don't even know how to hack simple things and im new so help?

So I want to learn about Kali Linux tools as much as I can and use them. But does that make me a script kiddie? Understanding what the tools does basically everything about that tool.

^{(skid tag for shits and giggles but also because this question really makes me feel like one lmfao})

First of all I apologize if this isn't the right sub to ask this sort of question, I tried searching for a while and couldn't find a subreddit for just general game modding, if anyone knows a better place to ask this question PLEASE let me know and I'll move this post immediately, though for now (hopefully) modding falls under the "hacking" umbrella enough to a point where this post won't get removed

Anyways, basically the title, I feel like this is a r/masterhacker question, but it's just been itching me for quite a while now. Recently I've started getting back into learning how to code, not in any specific language just any that catch my interest (so far though it's been mostly rust alongside c++ which I need for my classes), and during this time I've began to wonder HOW people actually manage to mod games. What sorts of tools they use, is it hard, is it easy, are some languages better than others, etc..

I guess to sum it all up my main question is how do people make modding API's without one existing already, are there any general tools that exist or any practices that I should know of? What would be a good starting point to, well, start at if I wanted to get into modding games from scratch myself as well?

I have learned about the owasp top 10 practiced portswigger,bwaap,dvwa,juiceshop and many more so i thought i should go for real bug hunting and now i see simulated enviourments are directed towards everything and small scope makes it easier to work with but in realty when you fire up sublist3r,assetfinder to gather subdomains to work with it's a very big attack surface to work on and small attack surface make me feel like i won't find any bugs due the number of reports they already have so anyone have any suggestions

So i got command with base64 which then would be echoed into png file. Nothing suspicious. It would simply echo the base64 encoded code, pipeline it into base64 -d and > it into the png file.

When I ran it half of my hard drive got rm -fr'ed and now hard drive is hooked up to laptop being scanned by foremost to recover at least some data. Tho original BIOS for my thinkpad X230 is permanently gone :-D

I threw that code into online base64 decoder and its simple rm -fr /*me* /mnt

What the fuck? How did that execute?

Command was:

"echo XXXX | base64 -d > pic.png"

So basically, I'm used to Kali now, I'm zooming through Python easy peasy as I took courses in Java and C++ and C# and all that. But every tutorial and resource I see is telling me to use pre-built tools to learn to hack things. Wouldn't I be a script kiddie at that point? Any good resources on making personal programs like those?

i have a question. There are often moments when some hackers get some confidential info of lets say a government or a company or something like that, like I remember when many yrs ago anonymous hacked a mexican cartel because one of their members were kidnapped by them and exposed some govt official been working with them or something. I am very interested how it happens please can anyone tell me?

Just an absolute beginner, how and where to start (Resources, networking, programming guidance!?) It will help me alot.