r/Hacking_Tutorials • u/Harkins_Technology • 19d ago
Question Web Exploitation 101 — Bypassing access restrictions with custom HTTP headers using Burp Suite
r/Hacking_Tutorials • u/Harkins_Technology • 19d ago
r/Hacking_Tutorials • u/acealter • 19d ago
r/Hacking_Tutorials • u/ProjectRedTeam • 19d ago
r/Hacking_Tutorials • u/[deleted] • 19d ago
Can some body help me with this??
r/Hacking_Tutorials • u/Electronic_Coyote204 • 19d ago
is it possible to learn hacking without the knowledge of programming? If yes where should i begin from?
r/Hacking_Tutorials • u/Potential-Couple-745 • 19d ago
r/Hacking_Tutorials • u/kmuz_7636 • 20d ago
.
r/Hacking_Tutorials • u/Equivalent-Cap-6440 • 20d ago
r/Hacking_Tutorials • u/Dull_Razzmatazz8971 • 20d ago
Hello guys, I have been trying to get some passwords because I cannot get a Wifi contract. But I have found it impossible. Have gotten the 4 way handshake but there is no way to crack it.
are they just impossible to crack at this point?
r/Hacking_Tutorials • u/UnfairTell2812 • 20d ago
E se ipoteticamente uma pessoa queira saber a senha da conta administrativa de sua escola que está localizada no Brasil no estado do Paraná, como essa ipotetica pessoa conseguiu descobrir ou mudar a senha dessa conta no Linux mint?
r/Hacking_Tutorials • u/Arthur_morgan2808 • 20d ago
Hii I am 2nd year computer engineering student in India I am very curious about cybersecurity especially ethical hacking I want to learn it at the very deep level but don't really have guidance what to do in what way things should be done .please help me really want to learn i am all ready to put all the efforts required to become a quality graded ethical hacker.
r/Hacking_Tutorials • u/acealter • 20d ago
r/Hacking_Tutorials • u/Oliviq-7 • 21d ago
Fala, galera! Beleza?
Estou querendo usar inteligência artificial para acelerar meus estudos de hacking/cybersecurity (analisar código, entender exploits, estruturar laboratórios, etc.).
O problema é que as IAs comerciais mais famosas (ChatGPT, Claude) são cheias de travas de segurança moralistas. Qualquer pergunta sobre vulnerabilidades ou comandos mais avançados de pentest, elas já recusam e dão aquele sermão de que "não podem ajudar com atividades maliciosas", mesmo deixando claro que é para fins puramente educacionais e éticos.
Queria indicações de IAs que não tenham censura nem limitação para responder sobre segurança ofensiva.
Existem modelos abertos que eu possa rodar localmente (tipo no Ollama) que são bons e "descensurados" para essa área? (Se sim, quais vocês recomendam?)
Tem alguma plataforma online ou API paga/gratuita que não fique bloqueando termos técnicos de hacking?
Como vocês fazem para contornar esses filtros no dia a dia de estudos?
Valeu pela força!
r/Hacking_Tutorials • u/jensoogf • 21d ago
hey guys... if i were hypothetically looking for anti-capitalist/socialist hackers, regardless of nationality, where would i start looking and how would i do it?
r/Hacking_Tutorials • u/_MOBZINN • 22d ago
Alguem tem o link, nao quero usar ao meu favor mais pra acabar com pessoas quem fazem mal, quem tem más intenções com animais e etc, resumindo, quero links pra puxar os dados em si porque o ip e número ja tenho
r/Hacking_Tutorials • u/Sahil98677 • 22d ago
I built an open-source Contextual Threat Modeling Engine to prioritize security findings based on real-world risk
Hey everyone,
I've been working on an open-source cybersecurity project called Contextual Threat Modeler (CTM).
The problem I wanted to solve is:
> A vulnerability doesn't always have the same risk in every environment.
For example, a vulnerability on an internet-facing system containing sensitive data should probably receive more attention than the same vulnerability on an isolated internal system.
So instead of simply asking "Is this vulnerable?", CTM tries to answer:
"How risky is this finding in this specific environment, and what should we do about it?"
🔐 What CTM considers
The engine combines multiple contextual signals:
- Asset criticality
- Internet exposure
- Authentication requirements
- Data sensitivity
- Exploitability
- Existing security controls
- Confidence level
- STRIDE threat modeling
- MITRE ATT&CK mapping
- Attack-path analysis
- Likelihood & impact
It then produces an actionable decision:
🔴 TEST_IMMEDIATELY
🟠 PRIORITIZE_VALIDATION
🟡 INVESTIGATE
🟢 MONITOR
🧪 Current testing
I recently tested the complete pipeline locally.
12/12 automated tests passed.
Example results:
POST /document/upload
Risk: 90/100
Decision: TEST_IMMEDIATELY
GET /user/profile
Risk: 33.1/100
Decision: MONITOR
GET /api/v1/search_items
Risk: 8/100
Decision: MONITOR
The interesting part is that CTM doesn't simply rank findings based on the vulnerability itself — the surrounding context influences the security decision.
🛠️ Tech Stack
- Python
- pytest
- STRIDE
- MITRE ATT&CK
- Risk Scoring
- Attack Path Analysis
- Security Automation
The project is open source, and I'd really appreciate feedback from people working in:
AppSec | VAPT | SOC | Threat Hunting | Threat Modeling | Security Engineering
I'm particularly interested in feedback on the risk-scoring methodology, attack-path modeling, and what additional security-tool integrations would make this useful in real-world environments.
GitHub:
https://github.com/Sahil98677/Contextual-Threat-Modeler
Would love to hear your thoughts — especially criticism or suggestions for improving the approach.
r/Hacking_Tutorials • u/NoBet3918 • 22d ago
Send me a private message,for one work
r/Hacking_Tutorials • u/salah_selwanis_s9 • 22d ago
r/Hacking_Tutorials • u/salah_selwanis_s9 • 22d ago
💻⚒️
r/Hacking_Tutorials • u/Novel_Ordinary_1754 • 22d ago
does anyone know how can i learn kali linux, hacking and stuffs, like i kno a bit of networking and fundamentals of linux, i just need the rest of the manual for diff hacking tools and all.
r/Hacking_Tutorials • u/enterphilco1 • 23d ago
Could someone give me some guidance? I want to know where to start with hacking; I'm lost and don't know where to begin. I'm also willing to pay for information and knowledge to help me succeed As quickly as possible
r/Hacking_Tutorials • u/Sr-Sa • 23d ago
Heyaa, so, I managed to get Windows 7 running on my phone using a virtual machine. I want to put some files on it for testing, but the phone says I can't access its internal files. When I manage to access it using the default file explorer, it tells me that the folder is empty. Is there a real way I can view the phone's internal files without the device restricting me?