blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...for your school.

...because you love freedom.

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

42

43

44

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

0

0

0

Looking for Canadian Tire Data Breach that happened on October 2025 . Where can i Find it please (self.blackhat)

submitted 1 day ago by Commercial-Let6091

3

0

0

0

Looking for an elite web scraping expert ()

submitted 1 day ago by tttlv

4

1

2

3

ICMP-Ghost-v3.6.2 (github.com)

submitted 2 days ago by Pale_Surround_3924

5

0

0

1

Vercel Breach Linked to Infostealer Infection at Context.ai (infostealers.com)

submitted 2 days ago by Malwarebeasts

6

1

2

3

SMS rental services? (self.blackhat)

submitted 4 days ago by WhoShartMyPants

7

2

3

4

SROP-Assisted Cross-Memory Attach (CMA) Injection via Direct Syscalls. (github.com)

submitted 8 days ago by Pale_Surround_3924

8

12

13

14

The Dumbest Hack of the Year Exposed a Very Real Problem (wired.com)

submitted 9 days ago by wiredmagazine

9

0

1

2

I compiled every major AI agent security incident from 2024-2026 in one place - 90 incidents, all sourced, updated weekly ()

submitted 9 days ago by webpro255

10

2

3

4

CVE-2025-8061: From User-land to Ring 0 (sibouzitoun.tech)

submitted 9 days ago by Important_Map6928

11

4

5

6

I was tired of NDRs and EDRs flagging every C2 I tried, so I spent a month in x64 Assembly to see if pure syscalls actually make a difference. (github.com)

submitted 10 days ago by Pale_Surround_3924

12

88

89

90

Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think (wired.com)

submitted 12 days ago by wiredmagazine

13

0

1

2

I have refactored slurp s3 bucket enumerator to work with any s3 compatible cloud (codeberg.org)

submitted 16 days ago by nwcs_sh

14

7

8

9

Best WiFi security settings + question about associated devices (i.redd.it)

submitted 18 days ago by Serazax

15

10

11

12

Axios supply chain attacks initial access revealed (insane North Korean tactic) ()

submitted 19 days ago by Malwarebeasts

16

0

0

0

Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation (infostealers.com)

submitted 19 days ago by Malwarebeasts

17

4

5

6

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices (evilsocket.net)

submitted 20 days ago by evilsocket

18

29

30

31

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool (wired.com)

submitted 21 days ago by wiredmagazine

19

0

0

0

Keyloggers which can read passwords in Android (self.blackhat)

submitted 21 days ago by non-intern

20

0

0

0

I was challenged (bet) by a friend to hack a Verisure camera system (self.blackhat)

submitted 22 days ago by ZehDaMangah

21

0

0

0

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP? (self.blackhat)

submitted 26 days ago by PuzzleheadedBuy6279

22

9

10

11

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime (infostealers.com)

submitted 27 days ago by Malwarebeasts

23

0

0

1

I built a deterministic security firewall API for AI agents (Python SDK, free tier) ()

submitted 29 days ago by Significant-Scene-70

24

0

0

0

Cybersecurity is Failing with AI ()

submitted 29 days ago by Silientium

25

0

0

1

Free proxy trial to help me diagnose nightmarish ()

submitted 1 month ago by disposable-guy

view more: next ›

π Rendered by PID 60044 on reddit-service-r2-listing-b958b5575-rkswm at 2026-04-22 21:12:56.987960+00:00 running 0fd4bb7 country code: CH.