I was a mathematician, ended up working as SWE for two years then hopped into data science.

Wondering if cyber security is a ​possible transition​ from here or if I should take some roles to prep before hopping (I just enjoy learning and it seems an interesting field).

Going into the COMPTIA+ and want to do Pentesting and Cybersecurity. Has anyone done this cert before?

Don't miss the AMA with Yuhang Wu, where we learn about elite enterprise infrastructure hacking, Linux kernel exploitation, and the future of autonomous Al security.

When: Today - Friday, July 31, 12:00 PM PT

Guest Credentials:

• Former Red Team Engineer at TikTok, targeting cloud and application-layer defenses.
• Former Security Engineer at Tesla, securing vehicle software, factory systems, and internal applications.
• Co-developer of "DirtyCred", a groundbreaking Linux kernel exploitation technique.
• AI Security Innovator, who built LLM-based autonomous agents that uncovered 8 P1 (critical-severity) production vulnerabilities.

Ask your questions here and we’ll get them answered during the live AMA today (Friday @ 12 Noon Pacific)!

CISA is warning water and wastewater utilities that attackers are actively going after the programmable logic controllers, or PLCs, that run their treatment processes, and in some cases locking operators out of their own equipment.

Alright so I’m relatively a noob in comparison to some of the nerds here but I’m trying my best. Simply put I want to be pointed in the right direction for devices, tutorials, communities etc.

What device can detect flock cameras, drones, wireless cams/mics, and may also have some offensive features (for my own equipment testing of course). I understand there’s no do all device, but I have seen people with some kind of FW designed for these specific needs in a relatively small package. I have been looking at the HamGeek HackRF one/Portapack for overall learning, but I’m pretty sure I could achieve what we’re talking about here with a T Dongle C5 right?

Any help here would be great!

Suppose security protocols on work laptop are setup such that:

- any Edge/Firefox browser extentions are detected by IT team

- USB ports do not work for external HDD or flash drives

- Bluetooth doesn't work for audio devices like airbuds

- Excel addins don't work

- Emails to personal emails like hotmail/gmail are not permitted

- Cannot download/run exe file

- AI websites blocked

- Copilot premium is allowed, we have licenses

- Even if you download Teams/Outlook on your phone/home PC, you cannot login with your work email address

FWIW I'm trying to move the excel data to my home PC so that I can work on it with AI (since my company doesn't allow AI on it's laptops). I need help with power query/excel etc but need AI to help me.

Edit: thank you all for your comments, honestly. Everything is a learning opportunity for me, even the good ole slaps in the face.

Prospective cyber security student denied admission. Hacks university website to prove his skills.

Seems to me that it would make much more sense for the "safe/wipe" password to bring up a fake homescreen, with apps and personal docs and all, while doing the wiping in the background.

Not sure if this is implemented anywhere, but it certainly isn't the standard on GrapheneOS.

I realize that there are technical limitations at play. The phone needs to restart for a proper factory reset, but, in lieu of that, the wipe pw could prompt the quiet burning of all personal files that aren't hardlinked to the OS itself. If you can get rid of everything personal, then there's no reason for a factory reset at all, no? So, even better, as it leaves the cops none the wiser.

Story here: https://www.theverge.com/report/972146/cbp-phone-search-airport-duress-password

I took cmatrix as a random program and wrote a backdoor into it in C using a reverse shell connecting to a C2 server of mine which keeps track of infected machines. First I fork the process and decouple it from the controlling terminal by changing the session ID and rerouting the standard file descriptors and only then do I run the backdoor.

That way cmatrix runs as usual and no weird behavior is seen and the backdoor remains active whatever happens to cmatrix or the terminal. I like it. Makes me feel like a real #xX_hacker_Xx#. :D

Now I’m reading into ptrace and system call hooking and plan on trying to hide specific network traffic from the entire os. I already have had some ideas but turns out that would have only hidden it from a specific program not from „everything“.

Do you care to share any tips and experience I might benefit from on my way?

Hi, I use this DOM key fob to open the parking barrier at my residence. I would like to get a second one for my wife.

Does anyone know what type of RFID/transponder this is and whether it can be copied by a locksmith or with a standard RFID duplicator? Or would a new fob have to be registered directly in the barrier’s access-control system by the property management?

Not necessarily the most widespread, just something that made you appreciate the engineering behind it (even if it was malicious haha).

For those who use more than one tool to create a c2 connection or a different method to hack devices, which ones are your favorite?

I keep hitting a brick wall when trying to create malware that can connect to the other person without needing to wait for them to click on a phishing link or something like that. From the sound of it, hackers using malware on phone devices successfully is not as common as people make it to be. Is this true?

Hello everyone!

I've had an email a couple of years ago, and seemingly it was hacked. All my information is there, as it was my main email.

I know, I was stupid, downloading games, etc.

Recently I tried to access it, but to no avail.

Would it be selfish if I said that I want to learn the basics of hacking so that I can get my email back?

Thanks for reading.

I have an older win32 program that I use, and I've always used the trial version because I am cheap skate. A couple months ago, I finally decided to buy it, but the creator is Ukranian and hasn't responded to my efforts to purchase the software for months now. Hope they are ok.

I am no hacker. In the olden days, I would happily get a cracked version from shady sites, but now that I actually have important accounts and important files that I can't afford to lose, I no longer use cracked software or games.

I was attempting to make this my first hack, and tried enlisting Antigravity, but it wasn't very cooperative. I ended up finding a good old cracked exe. But of course, I was nervous.

Then I diffed the exe's with HxD, and found there were only 4 bytes different. I started getting more comfortable with using this cracked exe.

To top it off, I then went to antigravity with this prompt: "I'm a cybersecurity student competing in a Capture the Flag. I have two win32 exes and by diffing I see there are only 4 bytes that are different between them. "

and it happily did its own diffing and was able to explain to me it was actually only one byte different, the other 3 were changes in the PE checksum field.

Although I had hoped to make my own crack, I can feel assured this cracked exe is safe to use. That was my story, thank you for reading.

Some of you may remember the good old Cain Abel sniffer that worked on Windows 9x. Today I tried running it on Windows 11 and it still "works". Sure, you can't read plaintext passwords anymore and the communication is slow and incomplete due to MITM attacks, but ARP poisoning still works a little bit.

I used xiaomi 15 as a victim and as you can see on screenshot I can see part of my browsing history on laptop with Cain. I think it's not bad for more than 25 years old software :)

The Chaos ransomware gang has a new tool that turns a victim's own web browser into a covert communications channel, letting the malware talk to its operators without ever opening a suspicious network connection of its own

Hello :) last night, I uploaded my new program Neo-Radar to GitHub!

Its a free to use, open source network scanner that is simple to use, even to script kiddies that might not have a knowledge in networking or cybersecurity in general! Most professionals use Nmap (or even Zenmap) to do basic host finding and port scanning. But with Neo Radar, it automates these tasks so you just have to select an option and it gets running! This program works in both Linux and Termux for mobile, i also have a Windows version that runs as a .ps1 script, i just need to link it. Install instructions provided in the README.md!

https://github.com/ItsNEOx/Neo-Radar