Ik it's the wrong forum but I really need help I don't know who to ask everyone asks for karma points. Please help.

Some days ago my brother installed a file for a pirated game that was fake and it was called setup.exe. Defender didn't flag it, and when it ran it did nothing. 1 or 2 days later they took my and my brother's Instagram, our steam accounts, epic accounts and some more. Our theory is that it read our edge's passwords saved, but idk I'm not an expert at all. Instagraam was full of fake elon musk posts on twitter sponsoring the site "sakonex..." (won't say it). We hardresetted the pc, formatted it, changed our passwords and out 2fa, and now the hacker is still trying to access things like reddit (got hacked some hours ago) (i did not change password since the breach) or epic games (tried access from RIYADH) (2fa blocked it). I would like to believe he's trying to do it thanks to "access cookies" and his virus isn't in this house anymore, but I don't know, I'm anxious. What would you do in this situation? What can I do to make myself sure it isn't here anymore? Funfact, he took one tiktok account despite the 2fa with sms, and posted french shi. Idk how he did that I hope it's just an old cookie taken from our pc. The dns should technically be safe, it's nextDNS with a 2fa account, and I've scanned our pcs and some of our smartphones with malwarebytes and defender. Please help me guys! You are the only people I can count on. I asked AI but ofc he'll give random bot answers. Only interesting thing he said is that my infos and logs could be in some russian market of some kind. In the end I need an explanation of what you think the virus is if you have an idea, and I ABSOLUTELY need suggestions on how to protect myself and how to delete every possible virus remaining.

Hello, I'm new to prentineton testing/ ethical hacking, i'm trying to figure out ways to bypass/brute force pin lock screens in android phones . I have tried sone tools like Cilocks in kali Linux but this only works if you have adb enabled. I have heard some people talking about cloning and changing the amounts of attempts before phone lock in, if anyone with experience with phones can give me info/ explain. I would really appreciate it, thanks

Hi everyone I have an old Chromebook. It’s a Chromebook three but I wanted to know if it’s possible to change the operating system or like change the software. I Think it’s called just because I kind of. Don’t like to use chrome as my main browser. And I kind of wanna throw away perfectly function in computer. I’ve done some research and I think I wanna change it to one of the Lynx distro but I don’t know if that’s possible and I don’t wanna risk bricking my computer.

Any help would be greatly appreciated

In my building, they use ultra high frequency RFID card for parking entrance and exit the same card is used to enter parking and to exit the parking

I bought RFID cloner, but it only works for the system which has only entry scanning.

Is there a way I can clone this?

Any help would be appreciated thanks

Yo, my coworkers call me the bionic baddie because I have an rfid/nfc chip injected in my hand. This allows for a lot of brute force options here because you can just scan my hand with a smart phone under the guise of a cool/shocking party trick from a pretty girl. I've given people irl tutorials in the most random places, had my hand set up to pay me through cash app by scanning it, connected it to A.I, social medias, whatever, I've played around with it basically to see how willing people are to scan my hand. So far the rate is 100% over the past 6 months or so. Everyone wants to see what it means to be a cyborg I guess.

So, considering you can't see the link before hand of whatever i code it to open on their phone, it's kind of wild to me to consider that there's a potential for I.P grabs, rather than getting fooled online where you can see a sus looking link, most people won't click it. With that being said, I don't know that I need people's I.P addys when I'm physically in front of them and generally using public wifi to begin with.

Here's my primary use case: I've was medically kidnapped, and put under faulty charges a few years back (All charges were dismissed, it was basically a guarantee I would stop an investigation at the time, and make me look like an invalidated source in the future for whistleblowing financial scandals that lead all the way down to nuclear waste cover up in the water in my state, full story not that interesting anymore, but this made me realize I can be dissapeared by a lot of people I pissed off.). I have a "medical card" provided by the company I got my injectable from, which is on file with my primary care and all that. No cop in the future is ever going to believe I have an implant like this unless they scan it themselves. You can argue that if you want, but trust me, people's interest outweigh thinking too much about it. I don't need a phishing link that grabs an I.P, I need something that divulges a little more information about whoever's phone scans the implant for safety. Basically an art project of a documented list of people that have interacted with the link. Has to work on a mobile device, would like it to be able to basically form a list of names more than anything.

Any suggestions would be solid. I'm not up to anything nefarious, I don't go out of my way to hide anything, but maybe it's a form of leverage in the future. I would the original hyperlink tied to an email that a family member also has access to. Thanks ahead of time, up to hear what you think might be interesting to do, I'm not super technically inclined, f*ck the police.

This is an official announcement from DoxSquad regarding the permanent termination and dismantling of the "Automatic" community infrastructure. Following a targeted, comprehensive investigation into the illicit activities tied to this network, our team has successfully neutralized their primary base of operations.

Operational Overview
The "Automatic" group operated under the guise of a standard community server, but our investigation revealed a coordinated pattern of extortion operations targeting vulnerable users. Over an extended period, DoxSquad compiled a definitive dossier containing actionable evidence, systemic logs, and identifying data regarding their illicit activities and leverage schemes.

The Confrontation & Collapse
Upon securing undeniable leverage against their extortion operations, DoxSquad representatives directly confronted the founder of the group. Faced with the sheer volume and severity of the evidence held against them, the founder’s posture immediately collapsed.

In a moment of panic, their only response regarding the exposed data was a frantic, verbatim quote: "DATS MINE". Immediately following this exchange, rather than attempting a defense or a counter-argument, the founder chose to completely delete the server infrastructure, wiping out their community network in an attempt to scrub their digital footprint and evade consequences.

The Desperate Retaliation Attempt
In a final, predictable act of desperation, the remnants of their network attempted a coordinated DDoS attack against our infrastructure. The retaliation was entirely ineffective, yielding a minor 30-minute disruption before our mitigation strategies completely neutralized the threat. This weak counter-effort only serves to highlight their complete lack of technical capability and total operational panic.

A Message to Affiliated Networks
Let this serve as a case study and a definitive baseline standard for any remaining community owners or spin-off networks engaging in similar extortion models. Look closely at how quickly your peers fold when confronted with absolute accountability. If you choose to run these types of operations, realize that your infrastructure is far more fragile than you believe.

We monitor, we document, and we execute.

God forgives, but we don't show mercy. It's #AUTOMATIC.

I am wondering whether is it even worth my time to get both familiar with web exploitation and binary exploitation. It feels like I am missing a large chunk of hacking whenever I only focus on web exploitation or only focus on binary exploitation. I'm not sure if I should just specialize in one or if I should just learn both.

I don't hear many people getting bug bounties for binary exploitation related bugs but I have seen the payouts on sites like crowdfense and seen it go up into the 7 figures.

Web bug bounties seemed to be talked about a lot but they usually pay lower than binary exploitation bugs.

So is it smart to try to learn both? Or is it just a waste of time and I should stick to one.

So guys I have my friends ip address, how can I suprise them ??

Anything you can do with them? Any known ways to get the cable card descrambled? Yes I know it's illegal. I'm just curious. I read elsewhere you can make them into a sort of tivo.

I see them all the time at the thrift store and I'm always wondering what I could do with them.

Thanks.

I've recently came across a video of them posted a year ago. There is no updated information about them, and that kind of sparked my interest.

my company has a iPhone 16s for employee use. however we are concerned with our employees using these phone for outside of work purposes. that being said we are curious if there is any software out there that either anonymously records whats happening on the screen, or takes a snapshot every period of time and uploads it for our tech department to monitor. can this community help educate us? thank you.

I have a Spectrum modem and router that I will not be giving back.

What are some cool things I can do with this hardware? Can I make a repeater? Can I run Tomato on the router?

alright so some context, im trying to get kali linux on a restricted mac that wont even let me open dmg files, since im trying to use the UTM installer. I cant even open or extract dmg files, the failed to mount error pops up, and I cant bypass it. anyways to get this thing running? like converting the dmg to a zip and extracting it from there? idk im not too much into this stuff im really new. i already have UTM and kali linux.iso downloaded, but not sure what to do with these restrictions. i dont wanna run it through the web as well. any help? thanks.

I've been trying for probably the past year to get into this really old Snapchat account of mine, but I genuinely for the life of me can't figure out the password and I don't remember the email, does anybody know a way I can at least figure out one of these from the username alone??

My girlfriend and I have been together for 5 years, and I suspect she’s cheating on me. She told me she deleted Instagram, but I’m suspicious and want to know when she last opened Instagram. Is there any way to find out if she hides her active status? (I have no experience with hacking.)
Or can someone help me find out who she was talking to on Instagram? Please help me, my heart is breaking every day.

I’m just getting started with two games: *Hacknet* and *Grey Hack*. I’ve read, the first one is more fictionalized than the second, but it’s more entertaining and a bit more beginner-friendly. Once you get the hang of it, you can move on to *Grey Hack*, which requires more critical thinking; plus, it supposedly includes an option to hack actual online users within the game itself. I have very basic knowledge of Linux. Thanks to my "super-mega-powerful" ASUS F200CA laptop—featuring an Intel Celeron 1007U processor (1.5 GHz, 2 cores), 4 GB of RAM, a 1 TB HDD, an 11.6" screen, and 64-bit architecture—I had to install AntiX Linux, which forced me to use the terminal frequently and look up commands online. Years ago at university, I took a few Cisco Systems networking courses. They taught me the 7 layers of the OSI model (though I never fully grasped them), and I occasionally used Unix terminals to practice router configuration, but I never felt the urge to learn more until now. I’m keen to document my progress and see how far I can go, so I can share my story down the line.

Let's see how it goes for me.

[SMB] NTLMv2-SSP Client : fe80::d74e:3bf2:3c3d:9bd1

[SMB] NTLMv2-SSP Username : COM-014\jupitar

[SMB] NTLMv2-SSP Hash : jupitar::COM-014:c6032ba9180a58ac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

I need some who help you for next procedure

I try to use hashcat and John nothing much got it or solved

Hello guys,

I am new at game hacking and I am looking for offsets for a game that runs on UE4. I tried Dumper 7, but I didn't get anything useful. If there is any dumper or guide that anyone has I would really appreciate it.

NOTE: I did use CE to try to find offsets there but I couldn't find any pointers.

End-to-End Encryption doesn't protect against a compromised endpoint. This PoC bypasses app-level encryption by targeting the Android OS itself.

The app injects a payload into the system's audioserver. Using a hooking framework (Dobby), it rewrites memory to intercept microphone data before WhatsApp encrypts it, and speaker data after it decrypts it. It watches for "Communication Mode" and dumps the raw audio to a hidden folder.

Open source PoC: https://github.com/nighthawkk/AudioServer-Voip-Recorder

Is there any way I can extract videos from an app ???

Hi everyone!

I ran into ChatGPT’s file/image upload limits. After uploading a file to a chat, the chat itself becomes heavily restricted, so I started looking for ways to work around this.

One method I found was opening the chat in airplane mode (in my case, without a VPN). However, this only seems to work as 1 chat = 1 file + 1 response.

Does anyone know how to solve this problem or have any other workarounds for the image/file limits?

Would appreciate any ideas!

Is arch linux good for a 2 gb pc for learn and do actually cyber security stuffs even hacking stuffs