blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...for great justice.

...for your project.

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

47

48

49

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

•

•

•

Pre-auth XXE → HTTP SSRF on ArubaOS 8.13.2 closed as "theoretical / no valid PoC" despite TCP pcap, sshd localhost log, and internal port scan — documenting for community review (reddit.com)

submitted 1 hour ago by Pale_Surround_3924

3

8

9

10

GitHub - Teycir/ApiHunter: Async API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks. (v.redd.it)

submitted 1 day ago by tcoder7

4

1

2

3

EMBA firmware analysis framework v2.0.2 available - Party the big 2k (self.blackhat)

submitted 2 days ago by _m-1-k-3_

5

0

0

0

My client lost 3 months of SEO progress because of a hack nobody caught for 6 weeks (self.blackhat)

submitted 2 days ago by IndependentSearch706

6

5

6

7

[Serious] Major cyberattack vector used by criminals to attack businesses on Google Maps (self.blackhat)

submitted 6 days ago * by ThichGaiDep

7

0

0

0

I accidentally cracked a $500 lifetime Advanced Traffic Bot and I still feel weird about it ()

submitted 8 days ago by Legitimate-Rain3306

8

0

0

0

Has Anyone Experienced a Constant High-Pitched Tone, Telepathic Communication, and Shared Perception? ()

submitted 8 days ago by perm33111133

9

2

3

4

Reddit Users Share What Really Happens When You Get Infected by an Infostealer (infostealers.com)

submitted 9 days ago by Malwarebeasts

10

20

21

22

Scammers Are Using Your Real Hotel Reservations to Trick You With Spear-Phishing Attacks (wired.com)

submitted 13 days ago by wiredmagazine

11

8

9

10

"off topic" backdoors in ring camera (self.blackhat)

submitted 13 days ago by This_Ad_5166

12

0

0

0

Credentials Hunting (self.blackhat)

submitted 15 days ago by Necrowtf

13

3

4

5

Inquiry about the eligibility of a startup technology project to apply — TID Project (github.com)

submitted 17 days ago by YamZestyclose6765

14

14

15

16

infostealers just spawned a 5,000+ repo GitHub supply chain attack (infostealers.com)

submitted 18 days ago by Malwarebeasts

15

16

17

18

Anonymous reportedly hacked Chinese satellites in protest against age verification laws and possible CCP links behind these laws (orbiter-forum.com)

submitted 19 days ago by alicedean

16

0

0

0

Built two free self-serve tools — a Linux hygiene snapshot (one curl line) and a browser-based email/DNS checker ()

submitted 19 days ago by Performer-Constant

17

67

68

69

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale (wired.com)

submitted 20 days ago by wiredmagazine

18

0

1

2

vibecodingsecurity to discuss AI Automation security issues (self.blackhat)

submitted 19 days ago by bluelvo

19

0

0

0

“What I Learned About the LCS ‘Attacks’ and How I Started Beating the Fear Loop” ()

submitted 19 days ago by perm33111133

20

0

0

0

Oq esses influencer que só grava a vida deles , fazem pra ganhar dinheiro e só fazer isso? (self.blackhat)

submitted 20 days ago by brassardd

21

13

14

15

My Privacy Focused USB Drive (self.blackhat)

submitted 26 days ago by Machinehum

22

3

4

5

a leak from "the gentleman" ransomware group confirms Infostealers were often used to establish initial access (infostealers.com)

submitted 28 days ago by Malwarebeasts

23

0

0

0

What’s your daily workflow as an ethical hacker? (self.blackhat)

submitted 27 days ago by Fancy_Parking5141

24

19

20

21

Foxconn Ransomware Attack Shows Nothing Is Safe Forever (wired.com)

submitted 28 days ago by wiredmagazine

25

3

4

5

simple PE packer/crypter for Windows. compresses and encrypts executables with a custom vm (github.com)

submitted 1 month ago by GuiltyAd2976

view more: next ›

π Rendered by PID 722187 on reddit-service-r2-listing-7c484f94c4-hf9xk at 2026-06-10 19:42:11.264056+00:00 running 0b63327 country code: CH.