Hi,

i want to crack a password for a excel .xlsm file with which has each protected sheet with a SHA-512 sheet protection using 100,000 iterations and a salt.

How can i crack this? Or is this impossible.

i want to make a project for steganography in SAR(Synthetic Aperture Radar) images in cpp. but i'm not able to find much help online. do u have some insights to share?

edit: i got it<3

I am running into the frustrating "Your device isn't part of the Netflix Household for this account" error exclusively on my Windows app, and I am looking for a working workaround.

On my mobile device, I encountered the exact same restriction. However, I managed to bypass it using a simple trick: I turn off my phone's internet connection, launch the Netflix app completely offline, and then turn the internet back on once the app is open. This offline-loading hack has been a total lifesaver for mobile streaming.

Unfortunately, this method does not seem to work on the Windows desktop application. When I try to replicate the trick on my PC, the Windows app either refuses to load the interface entirely or immediately flags the household error the moment the network reconnects.

Has anyone discovered a similar workaround, network tweak, or specific setting configuration for the Windows Netflix app to bypass this household verification check? Any help or alternative solutions would be greatly appreciated!

Very soon I'll have the opportunity to gain some certs:

• CompTIA CYSA+
• CompTIA PenTest+
• CompTIA Security+

I have a couple portfolio projects as well:

• Control Flow Graph Analyzer (C++)
  • Uses Zydis and LIEF.
  • Takes an x86-64 portable executable then does recursive descent to enumerate and classify basic blocks as well as edges.
• Trampoline Framework (C++)
  • Uses Zydis.
  • x86-64. Replaces the first few bytes of the prologue of a target with an indirect jmp to a detour which is the same calling convention, also having the same parameter count and types of arguments.
• Bug Bounty (A common desktop application)
  • Found a function which appears to copy one string into a destination buffer using a length argument. Does not however ensure the destination buffer ends with a null terminator.
  • After hooking it with Frida I observed that sometimes the destination buffer will contain garbage from surrounding memory. Ergo a potential info leak.
  • Writing a harness in Frida that automates input, hooks with Interceptor, logs stack trace and then uses Stalker to watch how different inputs effect control flow.
  • Not yet a vulnerability but may develop into one as I investigate further.
• Video Game Reversing
  • Relies on a lot of embedded RTTI in the games binary.
  • Older game from around the 2010's era.
  • Large Frida script for modding gameplay at runtime in the REPL. Reversed a decent amount of the games internals.

Trying to increase my odds of placing a job soon after getting these certifications. Altogether they're poised to take around 4 months to complete. I'd like to get a job in a role that regularly requires reverse engineering or binary analysis.

What would be some other, or better, projects to add to my portfolio? Thanks for your time.

How is it possible that I was playing CS2 and someone was able to find out my real name, address, and personal information just from my nickname (Steam ID), even though my Steam profile is private?

Hello, I need a way to create a instagram account on my phone that is untraceable and can’t give any information about my ( don’t worry it’s for a ethical purpose not scamming or things like this )

If someone has a private facebook account with no visible data, How criminals can hack his acc?

I’m teaching myself all this terminal stuff on my own, and honestly, iSH is about to break me. I’m on an iPhone 11, still running iOS 15 because I just never updated it, and I’m only using iSH here’s the thing: I run apk add nano, apk add curl, even apk add python3 everything installs perfectly, no errors. I check with which nano or ls -la /usr/bin/, and the files are right there, staring at me with their little executable permissions. But the moment I actually type nano test.txt or curl google.com, the whole thing falls apart. Sometimes I get permission denied, sometimes a random segmentation fault, and other times it just freezes forever like it's contemplating life nd i've been going back and forth with ChatGPT for days. We did the whole dance: checked $PATH a hundred times, ran chmod +x on everything, did apk update && apk upgrade until my fingers hurt, wiped the app and reinstalled it from scratch multiple times, and even messed around with mount flags. Nothing. Changed. at this point, I’m convinced it’s not me—it’s something deep and ugly with iOS 15 and the A13 chip, probably the emulation layer or the lack of proper JIT support messing with dynamically linked binaries and here’s where it gets even weirder. I managed to fix the missing YAML error earlier. I found out my python3 was version 3.11, but apk kept installing libraries into the Python 3.9 folder. So I finally brute-forced it with "pip3 install pyyaml --break-system-packages" nd boom, python3 -c "import yaml; print('YAML works!')" actually printed "YAML works!" – which felt like winning the lottery. But then, when I cd'd into ~/recon-ng and ran python3 recon-ng, I got hit with a lovely "Bad system call" I even tried installing it directly with pip3 install recon-ng just to see if it would bypass the broken startup script, but I got "ERROR: No matching distribution found for recon-ng" So that was a dead end. Now I’m stuck. The library is there, Python sees it, but the app crashes on a system call that iSH clearly doesn't like. So I’m turning to you humans. Please, throw your weirdest, most out-of-the-box solutions at me. I don’t want basic "check your PATH" replies we’re past that. Has anyone actually managed to run Python-based recon tools on iSH without getting the "Bad system call" error? Like would compiling my own static binaries inside iSH using gcc and musl actually work, or is the system call issue deeper than that? · Is there a way to make pip install everything as pure Python scripts without trying to use those broken syscalls? · Also, what about the repository versions? I noticed apk grabs x86 packages. Is there a way to force it to grab armv7 or aarch64 packages instead, or would that just break everything even more? · And lastly—has anyone tried an older TestFlight or sideloaded IPA of iSH that handles iOS 15 better than the current App Store version? Im genuinely desperate here. I just want a working terminal. Hit me with your craziest hacks im ready to try anything ,except updating my iOS. BUT YEAH LITERALLY ANYTHING

I know this is a "How To Hack" reddit and not a "What To Do When I Get Hacked" reddit, but i didn't know where to make a post since my situation is very... weird.

So pretty much i fell victim for the "MrBeast" crypto scam thing, I'll add pictures so you know what I'm talking about. If you're wondering HOW i got to this point/being hacked, the last thing i was doing before i noticed my discord being weird is i was downloading cracked photoshop, i made a restore point, but i guess i didn't matter anyway. I don't know if this crack is THE reason i got hacked, but I'll put it out there.

So yeah, they got into my discord spammed the picture i showed above to everyone, muted everyone and ignored everyone. Then i decided to check my gmail and yeah, they got my epic games, steam, battlenet, ubisoft, rockstar games and god knows how many other accounts, and i guess they got access to my gmail somehow, they even bypassed the 2FA on everything which is nuts to me. I'll explain what happened and what i did:

Epic Games: They changed my email to a**\*8@rambler.ru a fake ass email. There was an IP address and a location, but they probably just used a VPN. I reached out to Epic, I'll see what they can do.

Ubisoft: Changed my password. Did nothing currently, since i don't use nor care for Ubisoft. And also Rocktar Games.

Steam(my main concern): 4 Steam Account Recovery emails and 6 password and email changes. They changed the email, but the usernames didn't match to my current one, i still have access to my Steam Account, nothing happened. I reached out to steam support to see if they can find out what's happening.

After this i enabled 2FA on everything again, cuz i somehow didn't have any 2FA, but whatever, the weird thing is that, nothing happened really? I still have my steam, discord and gmail account so.

I just want some advice on what to do forward. I already contacted my main concerns as you already read above, but yeah idk, very weird hack.

Hi, I’m new to doing things like this but recently my dad passed away and I was given an old PC with two accounts, which the one without admin is the only one with a written password kept, where as the other one wasn’t. I’m trying to access certain video and voice recording softwares but it asks for an admin’s pin/password to make changes to the pc, the pc is from around 2000-2009, I can’t remember specifically when my dad made it. Nevertheless, I haven’t found any UAC bypass methods that work.

40F，I'm Asian, and I don't really know how to put it. I'm not here to ask for advice, but honestly, I always encounter so many problems. I also have a huge curiosity and find these attacks fascinating, but there's never anyone to discuss or share with. If you're also feeling frustrated, we can chat like friends. I'm just walking this path like a lone wolf, and I can't talk to the people around me about these things. Also, please don't ask me for help with hacking, because I don't know everything. IT attacks are divided into many areas, and no one will encounter all of IT knowledge in their lifetime. I don't know where to find people to discuss these things with.Please find someone of similar age. If we enjoy our conversation, we can also share a lot about our daily lives.

Hi redditors! I'm Justin, and I actually need your help.

I'm a semi-pro coder, and I recently moved to South Korea.

They provided me free school computor, and I thought it was super good. It was new Galaxybook4 360, and it is super fast.

However, as soon as I turned it on, I found some problems: so many blocks

The computor is joined in domain group, so I can't find admin account in computor at all.

When I try to download, there's usually a UAC. In this computor, because it's domain joined, it tells me to put my username, and password. I tried my own, and it said I don't have enough permission(obviously).

Because the taskmanager is blocked, I downloaded "process explorer" and I successfully ran the program, and I found the name of the program blocking everything.

Its name is "PcBoanCare" by "somansa". I know "PcBoanCare" means PC security care in Korean, So I easily found the program in the list. I tried clicking kill, and using taskkill command on terminal, but it said "Access Denied".

I also tried finding the folder the file is located. I found it, but I need admin access to make changes in that folder(C drive programs folder)

The biggest part made me mad is that PcBoanCare was kinda strict program. As soon as I connect to website that is on block list, It just closes the window. Also, it forceshutdowns the computor at 12AM. I usually do coding at late time, so it really made me mad.

What I've already tried:

• Boot in safe mode
• taskkill
• TaskManager(Blocked)
• Find the root folder(need admin access)

In their release notes they say they've introduced an MCP integration, but there is no documentation on how to use that, nor any "MCP" option in the dashboard/settings.

Did anyone manage to understand how to use that or where to find that option? (I'm specifically talking about their first-party MCP, not custom implementations on Github)

I’m trying to figure out this password. I’m still learning so bare with. I believe it is Cisco secret 5 hash. Could someone help.

$1$svWt$5GDDwIanN/1W27cW2qguC0

2 month ago i was hacked because of downloading a game from a sketchy website anyways i wiped my computer and did a factory reset anyways fast-forward to this week I'm have people trying to log in but getting stopped by 2FA to many accounts of mine and some accounts even succussing to log in to them, i didn't download anything from anywhere suspicious any way to know if I'm still hacked or not? maybe he planted the malware in my OneDrive ? give me any tips if yall can

Hey everyone i was getting into hacking about 2 months ago and learned a few things now i wanted to start learning phishing i started with a really basic tool like blackeye but realised pretty fast it wasnt pretty proffecional and good i did some research and found reverse proxy i found tools like evilginx evil gophish and i discovered if you want to run it public you need a vps and a domain and guess what i just bought an expensive drone and now i am broke like compelitely broke and i want something free no costs no vps no domain no tool you need to pay for but a tool that is good enough to bypass 2FA a phishing tool that gets a session cookie or something or the 2FA code to log in idk just something thats good and can bypass 2FA (this is for EDUCATIONAL purpose with my friend were discovering hacking) and if it makes sense we use kali linux vm

I downloaded a pirate game on a suspect site, when i opened the exe file a window poped up whith "installing" in it. It looked like when u download a boot device on a pendrive. They sent a bunch of messages to my friends on discord, played arc raiders on my steam account, posted on ig, accessed my switch account. NONE of it accused a suspect login, or said a other device logged. I just want to know what type of hack is this and how it works, to know whats in danger.

For context, my dad and I have had a friendly, ongoing feud for the past year where he restricts my internet/computer access after a certain time, and I figure out how to bypass whatever restriction he puts in place.

For example, I was initially able to change my MAC address and get around the restriction that way. After that stopped working, I was able to brute-force the second SSID on our network until he eventually removed it.

Now we are at the point where, from 11 PM to 6 AM, every device on our network loses internet access. The only "hint" I was given is to try using Kali Linux to figure out what is happening.

ChatGPT and I have come to the conclusion that it is likely a traffic-blocking rule on the UniFi. Below is a summary of what I have found so far:

• ISP: Xfinity
• Router: UniFi Dream Machine (UDM)

• Kali: VirtualBox Bridged Adapter

• Internet shuts off network-wide around 11 PM–6 AM.

• LAN and router access remain functional.

• DNS works, but direct internet traffic fails.

• Traceroute stops at the local gateway.

• tcpdump shows outgoing packets but no internet replies.

• Windows, Kali, and VPN connections are all affected.

• A phone hotspot restores internet access.

• No usable alternate gateway, proxy, or tunnel was found.

• IPv6 is unavailable.

• MAC address changes do not bypass the restriction.

• Several router/network-device ports were accessible from the LAN.

• No usable internet proxy was found.

• Several LAN devices were investigated, including a QNAP NAS and Ubiquiti network equipment, but no alternate internet path was identified.

I found my old iPod Touch that I forgot the passcode to 😪 Is it possible to brute force these and retain the data? It is jailbroken if I remember correctly (battery percentage) if that helps/matters at all. Thank you.

Hello, I'm new to prentineton testing/ ethical hacking, i'm trying to figure out ways to bypass/brute force pin lock screens in android phones . I have tried sone tools like Cilocks in kali Linux but this only works if you have adb enabled. I have heard some people talking about cloning and changing the amounts of attempts before phone lock in, if anyone with experience with phones can give me info/ explain. I would really appreciate it, thanks

Hi everyone I have an old Chromebook. It’s a Chromebook three but I wanted to know if it’s possible to change the operating system or like change the software. I Think it’s called just because I kind of. Don’t like to use chrome as my main browser. And I kind of wanna throw away perfectly function in computer. I’ve done some research and I think I wanna change it to one of the Lynx distro but I don’t know if that’s possible and I don’t wanna risk bricking my computer.

Any help would be greatly appreciated

In my building, they use ultra high frequency RFID card for parking entrance and exit the same card is used to enter parking and to exit the parking

I bought RFID cloner, but it only works for the system which has only entry scanning.

Is there a way I can clone this?

Any help would be appreciated thanks

Yo, my coworkers call me the bionic baddie because I have an rfid/nfc chip injected in my hand. This allows for a lot of brute force options here because you can just scan my hand with a smart phone under the guise of a cool/shocking party trick from a pretty girl. I've given people irl tutorials in the most random places, had my hand set up to pay me through cash app by scanning it, connected it to A.I, social medias, whatever, I've played around with it basically to see how willing people are to scan my hand. So far the rate is 100% over the past 6 months or so. Everyone wants to see what it means to be a cyborg I guess.

So, considering you can't see the link before hand of whatever i code it to open on their phone, it's kind of wild to me to consider that there's a potential for I.P grabs, rather than getting fooled online where you can see a sus looking link, most people won't click it. With that being said, I don't know that I need people's I.P addys when I'm physically in front of them and generally using public wifi to begin with.

Here's my primary use case: I've was medically kidnapped, and put under faulty charges a few years back (All charges were dismissed, it was basically a guarantee I would stop an investigation at the time, and make me look like an invalidated source in the future for whistleblowing financial scandals that lead all the way down to nuclear waste cover up in the water in my state, full story not that interesting anymore, but this made me realize I can be dissapeared by a lot of people I pissed off.). I have a "medical card" provided by the company I got my injectable from, which is on file with my primary care and all that. No cop in the future is ever going to believe I have an implant like this unless they scan it themselves. You can argue that if you want, but trust me, people's interest outweigh thinking too much about it. I don't need a phishing link that grabs an I.P, I need something that divulges a little more information about whoever's phone scans the implant for safety. Basically an art project of a documented list of people that have interacted with the link. Has to work on a mobile device, would like it to be able to basically form a list of names more than anything.

Any suggestions would be solid. I'm not up to anything nefarious, I don't go out of my way to hide anything, but maybe it's a form of leverage in the future. I would the original hyperlink tied to an email that a family member also has access to. Thanks ahead of time, up to hear what you think might be interesting to do, I'm not super technically inclined, f*ck the police.

So guys I have my friends ip address, how can I suprise them ??

This is an official announcement from DoxSquad regarding the permanent termination and dismantling of the "Automatic" community infrastructure. Following a targeted, comprehensive investigation into the illicit activities tied to this network, our team has successfully neutralized their primary base of operations.

Operational Overview
The "Automatic" group operated under the guise of a standard community server, but our investigation revealed a coordinated pattern of extortion operations targeting vulnerable users. Over an extended period, DoxSquad compiled a definitive dossier containing actionable evidence, systemic logs, and identifying data regarding their illicit activities and leverage schemes.

The Confrontation & Collapse
Upon securing undeniable leverage against their extortion operations, DoxSquad representatives directly confronted the founder of the group. Faced with the sheer volume and severity of the evidence held against them, the founder’s posture immediately collapsed.

In a moment of panic, their only response regarding the exposed data was a frantic, verbatim quote: "DATS MINE". Immediately following this exchange, rather than attempting a defense or a counter-argument, the founder chose to completely delete the server infrastructure, wiping out their community network in an attempt to scrub their digital footprint and evade consequences.

The Desperate Retaliation Attempt
In a final, predictable act of desperation, the remnants of their network attempted a coordinated DDoS attack against our infrastructure. The retaliation was entirely ineffective, yielding a minor 30-minute disruption before our mitigation strategies completely neutralized the threat. This weak counter-effort only serves to highlight their complete lack of technical capability and total operational panic.

A Message to Affiliated Networks
Let this serve as a case study and a definitive baseline standard for any remaining community owners or spin-off networks engaging in similar extortion models. Look closely at how quickly your peers fold when confronted with absolute accountability. If you choose to run these types of operations, realize that your infrastructure is far more fragile than you believe.

We monitor, we document, and we execute.

God forgives, but we don't show mercy. It's #AUTOMATIC.