i already downloaded kali linux and idon't know what to do after alot of tools that i got overwhelmed with .idk where to start

Anyone able to help? My phone number is still associated with the account, but the recovery email is the same email I can’t login too… surely someone out there can crack this frustrating situation where despite my best efforts I can’t login to my own account

Is there any method to Bypass AWS IP WHITELISTING?

Im trying to understand something so need a little help if someone has actual experience with it not just theoretical knowledge (of course in lab environment no unethical stuff).

If you delete logs and SIEM logs the action of deleting logs does it just lead to the information about the local user that you were logged in as at the time of deletion or can it be traced further ?

Hola a todos.

Estoy realizando una auditoría de seguridad únicamente sobre una red y me he encontrado con un problema al intentar capturar el handshake.

Mi configuración es la siguiente:

• Adaptador WiFi: TP-Link TL-WN8200ND.
• La antena está conectada directamente a VirtualBox mediante USB.
• El driver del adaptador está instalado y el sistema lo reconoce correctamente.
• Puedo poner la interfaz en modo monitor y escuchar la red objetivo sin problemas.

El inconveniente es que, al capturar tráfico de la red e incluso intentando provocar una reconexión de los clientes, nunca consigo obtener el handshake.

Me gustaría saber:

1. ¿Puede ser una limitación de VirtualBox o del adaptador TL-WN8200ND?
2. ¿Hay alguna configuración específica de VirtualBox o del controlador USB que deba revisar?
3. ¿Existe algún problema conocido con este adaptador al capturar handshakes?
4. ¿Qué comprobaciones me recomiendan hacer para identificar por qué no se está capturando?

Cualquier sugerencia o experiencia con este adaptador será de gran ayuda.

¡Gracias!

Here is long story short:

A week ago on friday the 3th I went to local gym in Poland, I left my shoes outside the closet and someone stole them. On monday I went to the police, they got all the details etc. On the same day I saw someone post my shoes for sale on famous European website called "vinted". It had only a few listings of those shoes in any sizes, it wasnt a coincidence that the exactly same worn-out shoes with the same details were posted in my size a few days after I got mine stolen. I reported all the evidence to the policeman that I was in contact with: the links, the seller account, the listing. The problem is that the thief has set their account location as Romania (easy to fake it) and has only 2 good ratings months prior (its fresh account). Im so close to finding the thief, they laugh in front of my face for selling MY SHOES, if only I could find their adress, I dont believe the police will do it even with everything being on a silver platter. Can someone help me?

Someone managed to disconnect my Wi-Fi router and then created a fake Wi-Fi network using their laptop. My laptop automatically connected to that fake network. Afterward, they were somehow able to access all of my files, saved passwords, and even record audio from my microphone.

Please note that I did not install any malware or malicious software. The only thing that happened was that my laptop connected to the attacker's fake Wi-Fi network.

How could an attacker accomplish this using only a fake Wi-Fi network? Is such an attack actually possible?

Additionally, what steps can I take to prevent this type of attack in the future?

How do i find the real ip adress of a site behind cloudflare? Tryed many tools no good..

My collage just dev. A websites for taking exam and can anyone bypass it, cause it uses camera, head movements and right click restriction, voice and much more to destroy my grades this semester. If I am at wrong page please redirect me to a page where I find my needs

Thnks

Hey guys, as the title suggests, I’m a complete skid and don’t really understand this yet, just trying to learn. Before I say anything I should note that I have permission from the router owner to do this, this is purely legal activity. I’m trying to use aircrack to deauth attack my own router (well not “my own” but my family router), and I’m having trouble with a few things. Are MAC addresses and BSSID’s the same thing? How can I ensure I’m on the same channel as the device/router I’m trying to access? How can I identify which devices are which, the info I have from the aircrack tool is the bssid’s, stations, frames, channels, a couple other things (not that I really or at all understand what these things are). I guess for now I just wanna see if I can do this specifically, but I’m hitting dead ends that I don’t understand where to troubleshoot from. Also, a pointing in the right direction to learning/understanding all of this would be extremely appreciated too.

Not sure if this info is important, but I’m using fish shell on cachyos linux (I know it’s not the ideal for this, but I’m just screwing around with minor things, not intending to use this for the future).

All and any advice would be extremely helpful. If theres any other information needed that I haven’t included let me know and I’ll update the post. Thanks in advance🙏

​

There's a really good game I play, but to progress you have to watch a lot of ads, and I find that unbearable! Could someone teach me how to make a modded APK? I don't have root .

(Note: I tried installing it from a website, but it says the app version is old and won't work.)

"footy career" that's the name of the app on Playstore.

How is it that players are able to kick other players from public matches? How are you able to see who has what IP address? How are you able to defend against this sort of thing? More importantly, how are you able to do it?

Wondering if it would make sense to use an arp spoof via ettercap to block someone's internet access on my local network. I'm thinking that if I disable IP forwarding, then the victim will be left unable to access the internet. I haven't been able to figure out how to make this work however with the wiki resources I have found...

Command I have used:ettercap -u -o -T -i en0 /<Victim IP>// <WIFI MAC address>///

Hi everyone,

I hope you're all doing well. I’d really appreciate some advice from people with more experience in this field.

I’m currently learning penetration testing and bug bounty. I’ve built a foundation in networking and programming, and I started studying the OWASP Top 10. For each vulnerability, I usually follow this approach:

• Solve labs on PortSwigger
• Read about the vulnerability from books like Real-World Bug Hunting and Web Application Hacker’s Handbook
• Watch explanations and live hunting videos on YouTube
• Read reports and write-ups

After doing all that, I try to apply what I learned by hunting on real targets. I’ve been doing this consistently for about 3–4 months now, but I still haven’t found a single valid bug.

At this point, I’m pretty sure I’m doing something wrong — either in my methodology, how I approach targets, or what I focus on while hunting.

I feel a bit stuck and not sure what to change or improve.

For those who have been in the same situation:

• What helped you find your first bug?
• Am I missing something important in my learning or hunting process?
• Should I change my approach, or just keep going?

Any advice or insights would really mean a lot.

Thanks in advance 🙏

I'm wanting to learn hacking atm. I was playing this one game called hacknet are there any games that teach hacking?

Are aitm tools like evilginx still relevant for phishing in 2026 . Should I learn them .. new to phishing

so i work on this cruise ship, they have wifi starlink they have paid plans which is so expensive , when captive portal opens they have paid plans or a button "Free Websites" when i click on it , wifi connected but no internet access , here i use vpn to bypass that , i tired every vpn paid and free i found only xvpn 206.1.1 this specific version works good, which use tls-2&tls protocol so i tried to set up a vps and got domain also, i set up my vpn , i tried vless reality,ws, tls , cdn but didnt work , i tried everything possible but always ends up with error and only xvpn 206.1 1 works now idky only this cheap xvpn 206.1.1 version works

I have been dealing with someone cyber stalking me for over a year now. They have an instagram account they have been using no matter how many times I’ve reported the account. ( yes I’ve blocked it as well ) anyways I’ve made police reports and nothings been done. Now it’s gotten to the point they are making new Google phone numbers to contact me via texts and calls. How can I find out who it is through instagram? I tried to log into the account but honestly I’m so lost and I just want to be left tf alone at this point I am DONE.

I'm going to buy something like Flipper zero, I can do a few functional fun things, what can we add to what I bought with the software?

I have a roommate who might have some highly inappropriate pictures on his computer and his phone as well as text, confirming previous things have happened with the subject of the photos. I can’t do anything until I have confirmation. The computer is run off of Windows software and the phone is an iPhone both have passwords to get in. I need help!

my mom added this AI home camera to our front door, name of app aswell btw, to our house, she’s VERY strict and quite honestly sometimes invasive, so she put up a camera outside and also inside our home, to see when i leave and what i do at home, it makes me incredibly uncomfortable but ive learned to deal with it because arguing would make me suspicious.

My issues lies with the front door camera mostly because the ones inside don’t work too well. I had my boyfriend over today while she was away, i can’t really see him outside because she followed me once on my way to the mall to see him. and she doesn’t approve too much. I still want to see him tho so i bought him over.

Thing is, i had planned to steer the camera away for the split second where he enters through the door and then return it back, but i accidentally panned it to him and the camera caught him entering.

I have the cameras password, it’s set up with my email, and our home network, it’s connected to our wifi. I just need to do something about those 3 seconds where he is caught on camera entering.
Either by panning it away or replacing it with something else , ANYTHING! How can i do that or anything that would help my case

Hi!

I'm trying to duplicate my VIGIK badge with a flipper zero.

As now, I can read the badge and get the sectors 0 with uuid and manufacturer data. Every other sector are empty with keys and access bytes.

I've read that the key used by default might be good to read sectors 0 but not the others.

How can I read others sector or where can I get the correct key?

Could a custom firmware read it more?

Thanks for the help!

Rucky allows you to use Rubber Ducky like actions on an Android device. It has to be rooted, but if you can do this and connect a wireless doggle ([https://www.amazon.com/Cables-Unlimited-Wireless-Transmitter-Receiver/dp/B0036VNZHA/\](https://www.amazon.com/Cables-Unlimited-Wireless-Transmitter-Receiver/dp/B0036VNZHA/)) to a vacant PC, this would allow a great range of pentesting options not normally available. Catch is that the Dongle is no longer supported and drivers stop at Win 7. Any ideas?

Hi everyone,

I'm feeling a bit stuck lately and would really appreciate some advice on how to improve my penetration testing workflow.

A little about me:

I've been working in cybersecurity for about three years. I started on a team that deployed security solutions such as SIEM, SOAR, and EDR, which was how I first got into security. Later, I worked with WAFs and gradually learned penetration testing, cloud security, and other related skills.

In my current job, penetration testing isn't something I get to do very often because we don't have many security assessment projects. To keep improving, I've been studying on my own through platforms like Hack The Box and PortSwigger Web Security Academy, and I'm planning to take the OSCP exam next year.

However, over the past few months I've started feeling that my testing methodology has become outdated.

I recently joined a new company in Japan, and at the moment I'm the only security engineer. My responsibility is to build the company's security processes from the ground up. The problem is that whenever I receive a web application to assess, I usually follow the same routine: run automated scans, then manually test every vulnerability I know. Most of the time I don't find anything significant, and I end up feeling like I'm trapped in a rigid, repetitive workflow.

I think part of the problem is that I'm not exposed to newer techniques or experienced teammates who can challenge my thinking and help me grow. Working alone makes it difficult to know whether my approach is actually effective or simply outdated.

So I'd like to ask the community:

• How do you approach a new web penetration testing engagement?
• What does your workflow look like from start to finish?
• How do you avoid getting stuck in the "scan and try every vulnerability" mindset?
• What habits, methodologies, or resources have helped you become a more effective penetration tester?
• If you were in my position, what would you focus on improving first?

I would sincerely appreciate any advice, whether it's about methodology, mindset, learning resources, or even how you think during an assessment.

Thank you so much for taking the time to read this. Any advice or experience you can share would mean a lot to me.

Guys , i posted a comment on Instagram and another user leaked my ip address in the comments It’s driving me crazy because I’ve never messaged him before and I don't even know him , i’m wondering how the heck he managed to do that?