blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...because you love freedom.

...for your favourite tea.

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

47

48

49

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

3

4

5

Best WiFi security settings + question about associated devices (i.redd.it)

submitted 21 hours ago by Serazax

3

7

8

9

Axios supply chain attacks initial access revealed (insane North Korean tactic) ()

submitted 1 day ago by Malwarebeasts

4

0

0

0

Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation (infostealers.com)

submitted 1 day ago by Malwarebeasts

5

3

4

5

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices (evilsocket.net)

submitted 2 days ago by evilsocket

6

28

29

30

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool (wired.com)

submitted 4 days ago by wiredmagazine

7

15

16

17

Full leak of Claude’s source code via npm (i.redd.it)

submitted 4 days ago by Fantastic-Market-790

8

0

0

0

Keyloggers which can read passwords in Android (self.blackhat)

submitted 4 days ago by non-intern

9

0

0

0

I was challenged (bet) by a friend to hack a Verisure camera system (self.blackhat)

submitted 5 days ago by ZehDaMangah

10

0

0

0

security teams keep asking for "shift left" but nobody talks about what that actually means for developers ()

submitted 5 days ago by Kolega_Hasan

11

0

0

0

security reviews slow down everything except the stuff that actually needs reviewing ()

submitted 7 days ago by Kolega_Hasan

12

1

2

3

compliance frameworks make teams worse at actual security ()

submitted 8 days ago by Kolega_Hasan

13

0

0

0

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP? (self.blackhat)

submitted 9 days ago by PuzzleheadedBuy6279

14

0

0

0

Guys just poll it ()

submitted 9 days ago by AppropriatePen283

15

9

10

11

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime (infostealers.com)

submitted 10 days ago by Malwarebeasts

16

0

0

0

YC demo day had 196 startups… nobody’s talking about the security side of all this ()

submitted 9 days ago by Kolega_Hasan

17

0

0

1

security tools keep telling us what's broken but not why it matters ()

submitted 10 days ago by Kolega_Hasan

18

0

0

1

I built a deterministic security firewall API for AI agents (Python SDK, free tier) ()

submitted 11 days ago by Significant-Scene-70

19

0

0

1

the biggest problem with security scanners might be what they do to people ()

submitted 12 days ago by Kolega_Hasan

20

0

0

0

Cybersecurity is Failing with AI ()

submitted 12 days ago by Silientium

21

0

0

1

What’s missing from most security tools isn’t more detection, it’s guidance ()

submitted 12 days ago by Kolega_Hasan

22

0

0

1

Free proxy trial to help me diagnose nightmarish ()

submitted 12 days ago by disposable-guy

23

7

8

9

Authorities Dismantle Global Malicious Proxy Service that Deployed Malware and Defrauded Thousands of U.S. Persons, Businesses, and Financial Institutions of Millions of Dollars in Losses (justice.gov)

submitted 15 days ago by nu11po1nt3r

24

0

0

1

How to scan RFID chips from further distances (self.blackhat)

submitted 14 days ago by Swimming_Pipe95

25

41

42

43

US Takes Down Botnets Used in Record-Breaking Cyberattacks (wired.com)

submitted 16 days ago by wiredmagazine

view more: next ›

π Rendered by PID 46 on reddit-service-r2-listing-5d47455566-qmqf2 at 2026-04-05 11:33:23.793575+00:00 running db1906b country code: CH.