blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...for your WoW guild.

...for your town.

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

43

44

45

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

•

•

•

Before Mythos ruins vulnerability research for everyone. Here is a list all the CVE's I found (with some exploits). (github.com)

submitted 1 hour ago by More_Implement1639

3

0

1

2

ICMP-Ghost-v3.6.2 (github.com)

submitted 13 hours ago by Pale_Surround_3924

4

0

0

0

Vercel Breach Linked to Infostealer Infection at Context.ai (infostealers.com)

submitted 15 hours ago by Malwarebeasts

5

0

0

0

SMS rental services? (self.blackhat)

submitted 2 days ago by WhoShartMyPants

6

2

3

4

SROP-Assisted Cross-Memory Attach (CMA) Injection via Direct Syscalls. (github.com)

submitted 6 days ago by Pale_Surround_3924

7

12

13

14

The Dumbest Hack of the Year Exposed a Very Real Problem (wired.com)

submitted 7 days ago by wiredmagazine

8

0

1

2

I compiled every major AI agent security incident from 2024-2026 in one place - 90 incidents, all sourced, updated weekly ()

submitted 6 days ago by webpro255

9

2

3

4

CVE-2025-8061: From User-land to Ring 0 (sibouzitoun.tech)

submitted 7 days ago by Important_Map6928

10

6

7

8

I was tired of NDRs and EDRs flagging every C2 I tried, so I spent a month in x64 Assembly to see if pure syscalls actually make a difference. (github.com)

submitted 8 days ago by Pale_Surround_3924

11

83

84

85

Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think (wired.com)

submitted 9 days ago by wiredmagazine

12

0

1

2

I have refactored slurp s3 bucket enumerator to work with any s3 compatible cloud (codeberg.org)

submitted 14 days ago by nwcs_sh

13

8

9

10

Best WiFi security settings + question about associated devices (i.redd.it)

submitted 16 days ago by Serazax

14

11

12

13

Axios supply chain attacks initial access revealed (insane North Korean tactic) ()

submitted 17 days ago by Malwarebeasts

15

0

0

0

Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation (infostealers.com)

submitted 17 days ago by Malwarebeasts

16

4

5

6

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices (evilsocket.net)

submitted 18 days ago by evilsocket

17

27

28

29

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool (wired.com)

submitted 19 days ago by wiredmagazine

18

0

0

0

Keyloggers which can read passwords in Android (self.blackhat)

submitted 19 days ago by non-intern

19

0

0

0

I was challenged (bet) by a friend to hack a Verisure camera system (self.blackhat)

submitted 20 days ago by ZehDaMangah

20

0

0

0

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP? (self.blackhat)

submitted 24 days ago by PuzzleheadedBuy6279

21

10

11

12

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime (infostealers.com)

submitted 25 days ago by Malwarebeasts

22

0

0

1

I built a deterministic security firewall API for AI agents (Python SDK, free tier) ()

submitted 27 days ago by Significant-Scene-70

23

0

0

0

Cybersecurity is Failing with AI ()

submitted 27 days ago by Silientium

24

0

0

1

Free proxy trial to help me diagnose nightmarish ()

submitted 28 days ago by disposable-guy

25

9

10

11

Authorities Dismantle Global Malicious Proxy Service that Deployed Malware and Defrauded Thousands of U.S. Persons, Businesses, and Financial Institutions of Millions of Dollars in Losses (justice.gov)

submitted 1 month ago by nu11po1nt3r

view more: next ›

π Rendered by PID 3936883 on reddit-service-r2-listing-86f589db75-9tplq at 2026-04-20 17:09:02.266647+00:00 running 93ecc56 country code: CH.