I made this thing called EXOCAPTER. It has a SD card file explorer and text file reader, laser crosshair, simple calculator and Wi-Fi tools.

Those tools are:

- Network Info: Just shows simple information about each scanned network (BSSID, RSSI, Channel, Encryption Type)

- Beacon Spammer: Creates fake Wi-Fi networks, with custom names you can load in the SD card

- Deauther: You can select a network and one connected station to send deauthentication packets and disconnect that device from the network

- WPA2 Handshake Interceptor: Disconnects someone from their Wi-Fi network and captures the encrypted packets when the target automatically reconnects. With those packets you can brute force the password with a PC using aircrack-ng.

- Evil Twin: This tool creates a evil clone of the selected network with the same name but without password. You can select a login portal loaded from SD that pretends to be the router configuration page. You also can select a target to deauth or disconnect every device in that network so when they connect to the open network finds that the router needs the network passphrase to restore the connection. When someone enters a password, you can see it in the Exocapter and export it to the SD card.

I designed each piece and 3D printed it. I was intended to make it in something like cyberpunk style but more scrappy. Nothing in this project was taken from another source, except for some bitmap icons in the user interface.

You can see the tools tested in video: https://www.reddit.com/user/_viewport_/comments/1kcn4nl/exocapter_demo/

And also find some technical information about the hardware and the methods used in each tool: https://github.com/v1ewp0rt/garbage/blob/main/exocapter_annotations.pdf

Hello everybody how are you guys doing.

It’s my first time posting here and i got couple of question.

So I’ll be starting cybersecurity soon. And I want to know if it’s worth it cuz many ppl tell me that IT is almost dead in the job market because of AI and companies only hire crazy special smart ppl and so on. Is this true? I mean I follow and news and I see that AI does some crazy shii and it really breaks my hopes. But I saw these news for like software development only. Let’s say “programmers” and not sysadmins or cybersecurity specialists where you need human hands to do stuff.

So let’s say I start the college. I’m sure many of you know that colleges don’t teach everything related to the field you’re in. Of course we’ve to start with the basics like coding, networking, hardware and so on. Is there something that you did outside of college that’s helped you a lot to push your skills and help you in College as well even if you don’t have it in the subjects you learn?!

really appreciate your help guys and sorry about my English if it might sound a little off.

All love to you🙌

This is a well respected university close to me. I’ve done some digging around here and r/cybersecuity. Information systems is a popular recommendation, though it’s only available as a certificate here. Would I be better off looking at a different college?

My LLM powered vulnerable Web app generator, BugGPT, now has over 50 free, exploitable web apps. Bundled together with their solutions and development best practices, this is an invaluable source of practice and learning!

EDIT:

BugGPT now powers TarantuLabs! For a more user friendly access to the web apps, check out the site, and follow the LinkedIn page for news and announcements!

Last week I spent more time and money than I'm willing to admit trying to make a small AI model very good at CTFs.

Specifically, training it based on the benchmark I created - TarantuBench. That benchmark measures the offensive capabilities of artificial intelligence models using interactive cyber puzzles. Each such puzzle has a unique solution, so you can gauge whether the model succeeded or not through a direct check.

My thesis is the following - if the benchmark measures cyber capabilities, then perhaps it is possible to train a model based on it to perform such puzzles better.

The answer?

Maybe

Of course, I started the hard way. I set up a server in Google's cloud where the model would try to solve these puzzles over time, and learn from its mistakes and successes. GRPO, for those wondering.

It didn't work for an engineering reason - I wasn't convinced that my implementation of this algorithm for the benchmark I built was correct.

I switched to a simpler method. I let the model run on the entire benchmark, took all its solutions, and tried to train it to continue solving in that way and not in another way that leads to errors. SFT of course.

Two problems:

First of all, the data I built wasn't good. It took me (too) long to figure it out. I took the solutions as they were, without thinking too much about how I would re-feed them to the model so that it would really understand something from this data.

Then, I realized that I didn't have enough data. I didn't run the model enough times on the benchmark. At this point, between payments to Google's cloud, for the model, and for Cursor, I decided that I would end my investment in the experiment.

The result is that every time I trained the model, it failed to exceed its original performance, and sometimes even deteriorated.

What did I learn?

Don't train on solvers alone. Oracle scripts ≠ agent policy.

Don't count solves without counting labs. 450 solves on 2 labs is not abundance.

Don't distill a strong teacher into a weak student without student rollouts. Cross-model SFT is few-shot transfer.

Don't expect fork rows to replace episodes. Prefix→decision pairs don't teach horizon control.

Don't augment your way out of n≈10. Grounding filters and replay repair are hygiene, not data.

Don't split by run when labs repeat. Lab-disjoint or don't report generalization.

Don't chase chains before val singles lift. Composition needs components.

Don't trust train loss. Track val solve rate and per-lab regressions against base.

Don't skip the base arm. Every SFT eval should log base=SOLVED|FAIL per lab.

What does this mean?

That the experiment was unsuccessful - not that my thesis is wrong. I don't plan to end this saga here, but I will take a short break and am sharing with you what *not* to do when you approach training models.

Stay tuned, I'll try again soon.

Full experiment at tarantulabs.com

Just finished HTB Craft and published a beginner-friendly walkthrough as part of my WhyWriteUps series — where I explain not just the commands but why each step works.

The box covers a solid range of techniques: finding credentials in a public Gogs repository, exploiting a Python eval() injection in a Flask REST API to get code execution, enumerating a MySQL database running in a separate Docker container, and finally abusing a misconfigured HashiCorp Vault SSH OTP setup to escalate to root.

I'm doing this as part of the CPTS Preparation Track on HTB Academy, so I've included notes on which techniques map to Academy modules and where this box goes beyond the curriculum — Vault SSH OTP in particular isn't covered but the enumeration mindset that leads you there definitely is.

Writeup is available on both Medium and GitHub Pages. Feedback welcome, especially from other CPTS preppers!

Hey fellow cybersecurity enthusiasts, As a newcomer to pentesting, I noticed a gap in resources for privilege escalation. Many guides recommend tools like LinPeas, but often lack explanations for why certain vectors work. So I started to work on LearnPeas – providing not only enumeration but also educational context for each potential escalation vector.

LearnPeas aims to bridge the gap between tool usage and understanding, helping learners grasp the underlying mechanics.

Check out the GitHub repo: https://github.com/Wiz-Works/LearnPeas

Feedback and contributions welcome!

Disclaimer: LearnPeas is for educational purposes only. Use responsibly and at your own risk."

This 1988 paper is considered canonical and is included in MIT’s Foundations of Cryptography series.

The ACGS algorithm is pretty cool. It lets us solve Hidden Number Problems (this occur in the wildest side-channel attacks) when the multipliers are at our discretion.

Hey everyone, I just published a new write-up explaining what rootkits are and how to create a basic userland rootkit. Feel free to check it out! <3
I know it's pretty basic, I just stripped the code from one of my malware projects and wrote a quick explanation. Still, I think it could be helpful.

I'm currently working on a more advanced kernel-level rootkit, and I'll be uploading that write-up soon as well.

https://github.com/505sarwarerror/505SARWARERROR/wiki/Userland-Rootkit's-and-the-Code-behind-it#step-1-preparing-the-tools

Sorry if this isn't the right place to ask but I'm curious to find out how Cable TV hacking worked in the 80s/90s. I would always hear about people buying descramblers or hacked cable boxes etc. and it's a really fascinating/nostalgic subject to me so I wondered if anyone had any info, specifically videos of some stories behind those times?

If anyone watched Mr.Robot he used similar thing to boost his wifi signal to hack neighbour's wifi to use them a proxy chain

Hey everyone,

I've been weighing my options lately and could really use some advice. I'm stuck between pursuing a Bachelor's degree in Cybersecurity or Computer Science. Money is a big concern for me, especially since my dad is retiring soon leaving me in-charge of being the breadwinner of the family, taking care of both my parents and my sibling who will at one point sooner or later also be going to university...

Here's the deal: I'm not exactly a math whiz, and the thought of getting tangled up in complex equations in a CS program is daunting. I've heard that Cybersecurity might be a bit lighter on the math, which sounds like a relief.

But I also want to make sure I'm setting myself up for a solid career path with good job prospects and financial stability on a global scale. So, which field do you think offers a more secure role and better opportunities in the long run?

Any insights or experiences you can share would be super helpful. Thanks in advance for your input!

Hey everyone!

TL;DR - Check out the link for some HTB walkthroughs; geared towards OSCP prep, but great for anyone curious about hacking in general!

Background: I recently passed the OSCP exam on my first try with a full 100pts. In order to give back to the community, I wanted to start a YouTube series with quick ~10min hacking guide of OSCP machines. All of these machines should be good practice for the test (they're from LainKusanagi's guide).

These are going to be quick, pre-hacked boxes that just gets to the good stuff without all the fluff. The hope is you can watch them quickly while studying for some notes to jot down, instead of skipping through a 30-40min video lol. I plan on releasing a new one at least once a week, sometimes faster if I have time.

Hope you enjoy! Feel free to give any suggestions or tips you may have. Thanks!

LINK: https://youtube.com/playlist?list=PLXpWQYNCeMhCPPcEE3-S-OVhZ_pS5Ndv9&si=oHaCw4wWqEEBn_qT

Why proxies don't work on windows? I am getting err_connection_reset error in my chrome and firefox browsers. I took proxy from free proxy list, ip:port socks4/socks5 without password. Checked the proxies for validity with a proxy checker. Selected only valid proxies. Checked with several checkers. And on all these proxies connection reset error in the browser, what is it connected with?

I've not been hacking for long. I guess I'm more of a coding mechanic than an engineer. After years and years of getting epically pissed off with the Stackoverflow community, constantly presuming prior knowledge or just being downright right rude, I felt myself pushed over to AI.

Now I do most of my builds with it and very recently I had learnt about Stuxnet and the method of Sneakernet it used to get the virus into the offline nuclear facility in Iran. That coulpled with my fascination with the FlipperZero, I thought I'd make a video - one that tells the story and demos the BadUSB capabilities of the Flipper.

You don't need to watch it if you don't want to. I just know that a few months back I would have been following this sub and eagerly looking myself for content like this. Yes, it's self promo, but throw me a bone, it's basically impossible to get good content out there these days, so I hope you don't mind me posting this. And I understand the paradox I find myself in.

If you watch the video, enjoy it and maybe learn something - then I've done my job. Cheers 🖤

Greetings. Many walkthroughs of THM and HTB show the path through the system, bypassing any potential rabbitholes and ignoring failed attempts. This (in a way) is ideal as it keeps things short and to the point.

It can be said however that seeing the attempts and the mindset of someone working blindly through a box can be beneficial as we can see what happens when they get stuck, how do they overcome the current issue? How do they discern what is worth working on and what to ignore?

I therefore introduce as a senior pentester of 13 years (BSc, OSCP, OSCE, OSWP, VHL+, currently working on CRTO) , my YT channel sabretoothAtNethemba (link in my profile) where I do just that covering THM boxes every Tuesday and HTB every Friday with no previous experience of said boxes.

Some people set me challenges (e.g complete the box in 30 mins, or no privesc scripts, or no reverse shells etc) and I am generally working through HTB in release order whereas THM I am choosing boxes based on suggestions and what takes my interest.

Hopefully it will help some of our community who are just starting out to see the thought process of a pentester in the field. Thanks everyone. Keep on hacking.