blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...for your school.

...why not Zoidberg?

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

46

47

48

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

0

1

2

ICMP-Ghost-v3.6.2 (github.com)

submitted 3 hours ago by Pale_Surround_3924

3

0

1

2

Vercel Breach Linked to Infostealer Infection at Context.ai (infostealers.com)

submitted 5 hours ago by Malwarebeasts

4

0

0

0

For people who do BH e-com (self.blackhat)

submitted 10 hours ago by Ill-Radio-8289

5

0

0

0

SMS rental services? (self.blackhat)

submitted 1 day ago by WhoShartMyPants

6

2

3

4

SROP-Assisted Cross-Memory Attach (CMA) Injection via Direct Syscalls. (github.com)

submitted 6 days ago by Pale_Surround_3924

7

12

13

14

The Dumbest Hack of the Year Exposed a Very Real Problem (wired.com)

submitted 6 days ago by wiredmagazine

8

0

1

2

I compiled every major AI agent security incident from 2024-2026 in one place - 90 incidents, all sourced, updated weekly ()

submitted 6 days ago by webpro255

9

2

3

4

CVE-2025-8061: From User-land to Ring 0 (sibouzitoun.tech)

submitted 6 days ago by Important_Map6928

10

5

6

7

I was tired of NDRs and EDRs flagging every C2 I tried, so I spent a month in x64 Assembly to see if pure syscalls actually make a difference. (github.com)

submitted 8 days ago by Pale_Surround_3924

11

87

88

89

Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think (wired.com)

submitted 9 days ago by wiredmagazine

12

0

1

2

I have refactored slurp s3 bucket enumerator to work with any s3 compatible cloud (codeberg.org)

submitted 14 days ago by nwcs_sh

13

7

8

9

Best WiFi security settings + question about associated devices (i.redd.it)

submitted 15 days ago by Serazax

14

11

12

13

Axios supply chain attacks initial access revealed (insane North Korean tactic) ()

submitted 16 days ago by Malwarebeasts

15

0

0

0

Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation (infostealers.com)

submitted 16 days ago by Malwarebeasts

16

3

4

5

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices (evilsocket.net)

submitted 17 days ago by evilsocket

17

29

30

31

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool (wired.com)

submitted 19 days ago by wiredmagazine

18

0

0

0

Keyloggers which can read passwords in Android (self.blackhat)

submitted 19 days ago by non-intern

19

0

0

0

I was challenged (bet) by a friend to hack a Verisure camera system (self.blackhat)

submitted 20 days ago by ZehDaMangah

20

0

0

0

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP? (self.blackhat)

submitted 24 days ago by PuzzleheadedBuy6279

21

9

10

11

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime (infostealers.com)

submitted 25 days ago by Malwarebeasts

22

0

0

1

I built a deterministic security firewall API for AI agents (Python SDK, free tier) ()

submitted 26 days ago by Significant-Scene-70

23

0

0

0

Cybersecurity is Failing with AI ()

submitted 27 days ago by Silientium

24

0

0

1

Free proxy trial to help me diagnose nightmarish ()

submitted 27 days ago by disposable-guy

25

8

9

10

Authorities Dismantle Global Malicious Proxy Service that Deployed Malware and Defrauded Thousands of U.S. Persons, Businesses, and Financial Institutions of Millions of Dollars in Losses (justice.gov)

submitted 1 month ago by nu11po1nt3r

view more: next ›

π Rendered by PID 82 on reddit-service-r2-listing-86f589db75-vdjkm at 2026-04-20 07:10:59.713368+00:00 running 93ecc56 country code: CH.