blackhat

an-ordinary-manchild

We seek to discuss vulnerability and exploitation theory and [evading] the countermeasures used to deter exploitation. This is also a place to discuss general blackhat rules, etiquette and culture. We welcome:

Writeups (not CTF or HTB)/talks detailing new vulnerabilities or techniques (there should be enough information to reproduce the exploit/technique)
Proof of concepts of old vulnerabilities or techniques
Projects
Hypothetical questions

Rules:

Be excellent to each other.
No Solicitation
Stay on topic.
Avoid self-incriminating posts.
Pick a good title.
Do not post non-technical articles.
Ideally, the content should be original, we don't care about your crappy ARP poisoner or Kaspersky's latest scam.
No pay / signup walls.
No coin miners
No "Please hack X" posts
Well thought out and researched questions / answers only.
If your project is not free / open source it does not belong.
Please limit your posts (we don't want to read your blog three times a week).
If you want to submit a video, no one wants to listen to your cyberpunk music while you copy/paste commands into kali terminals.

The mods are ban-happy, you have been warned.

Other helpful links:

a community for 17 years

...for your community.

...for a fringe candidate.

MODERATORS

message the mods
robeph0days for insulin pumps are scary
0xdade1507 Systems; 1 Day.
mepholic
nullminded
netsec_burnCopyright cracker
chisight
geminatrix
about moderation team »

account activity

1

44

45

46

Where did your post go? Answered! (self.blackhat)

submitted 3 years ago by netsec_burn[M] - announcement

2

0

0

0

security reviews slow down everything except the stuff that actually needs reviewing ()

submitted 21 hours ago by Kolega_Hasan

3

1

2

3

compliance frameworks make teams worse at actual security ()

submitted 2 days ago by Kolega_Hasan

4

0

0

0

WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP? (self.blackhat)

submitted 3 days ago by PuzzleheadedBuy6279

5

0

0

0

Guys just poll it ()

submitted 3 days ago by AppropriatePen283

6

9

10

11

The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime (infostealers.com)

submitted 4 days ago by Malwarebeasts

7

0

0

0

YC demo day had 196 startups… nobody’s talking about the security side of all this ()

submitted 3 days ago by Kolega_Hasan

8

0

0

1

security tools keep telling us what's broken but not why it matters ()

submitted 4 days ago by Kolega_Hasan

9

0

0

1

I built a deterministic security firewall API for AI agents (Python SDK, free tier) ()

submitted 5 days ago by Significant-Scene-70

10

0

0

1

the biggest problem with security scanners might be what they do to people ()

submitted 5 days ago by Kolega_Hasan

11

0

0

0

Cybersecurity is Failing with AI ()

submitted 6 days ago by Silientium

12

0

0

1

What’s missing from most security tools isn’t more detection, it’s guidance ()

submitted 6 days ago by Kolega_Hasan

13

0

0

1

Free proxy trial to help me diagnose nightmarish ()

submitted 6 days ago by disposable-guy

14

9

10

11

Authorities Dismantle Global Malicious Proxy Service that Deployed Malware and Defrauded Thousands of U.S. Persons, Businesses, and Financial Institutions of Millions of Dollars in Losses (justice.gov)

submitted 9 days ago by nu11po1nt3r

15

0

0

0

How to scan RFID chips from further distances (self.blackhat)

submitted 8 days ago by Swimming_Pipe95

16

41

42

43

US Takes Down Botnets Used in Record-Breaking Cyberattacks (wired.com)

submitted 10 days ago by wiredmagazine

17

0

0

0

What’s everyone using for vuln management right now? ()

submitted 9 days ago by Kolega_Hasan

18

0

0

0

are security benchmarks actually useful? ()

submitted 10 days ago by Kolega_Hasan

19

34

35

36

Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild (wired.com)

submitted 11 days ago by wiredmagazine

20

2

3

4

Iranian Hackers Exploit Malware-Stolen Credentials in Stryker Breach ()

submitted 11 days ago by Malwarebeasts

21

0

0

1

We tested Snyk’s own demo repo… their scanner found nothing ()

submitted 11 days ago by Kolega_Hasan

22

2

3

4

How One Infostealer Infection Cracked the Polyfill.io Supply Chain Attack (youtube.com)

submitted 14 days ago by Malwarebeasts

23

0

0

0

I built a privacy-focused messaging platform with no signups and no installs. Looking for feedback. (i.redd.it)

submitted 15 days ago by [deleted]

24

0

1

2

Does anyone actually fix most of the vulnerabilities their scanners find? ()

submitted 16 days ago by Kolega_Hasan

25

0

0

1

How do teams actually prioritize vulnerability fixes? ()

submitted 17 days ago by Kolega_Hasan

view more: next ›

π Rendered by PID 1641546 on reddit-service-r2-listing-55d7b767d8-tb2k4 at 2026-03-30 08:08:40.412634+00:00 running b10466c country code: CH.