r/HowToHack • • 1h ago

cracking John the Ripper (Jumbo) on Termux — No Root Required [AArch64]

3 Upvotes

Compiled and ran John the Ripper on Android using Termux without root. Here's the full step-by-step guide:

github.com/Mireli5656/termux-john-guide


r/HowToHack • • 4h ago

Existe uma ai focada para o hacking?

2 Upvotes

Meu método de aprendizado sempre foram as inteligências artificiais, mas recentemente começando a explorar áreas como redes e conexões a ai vem cada vez mais recusando as minhas perguntas, coisas simples como achar a localização de alguém apartir do ip e etc. Por isso pergunto, existe alguma inteligência artificial focada pra isso, ou que não recuse? (Não estou afim de rodar um modelo localmente, mas se for a única opção...)


r/HowToHack • • 3h ago

Is there an AI focused on hacking?

0 Upvotes

I've always used artificial intelligence as my primary method for learning. However, as I’ve recently begun exploring areas like networking and connections, AI tools have increasingly been refusing to answer my questions—for instance, simple requests like finding someone’s location based on their IP address. So, I’m asking: is there an AI designed for this, or one that won’t issue such refusals? (I’d prefer not to run a model locally, but if that’s the only option...)


r/HowToHack • • 17h ago

AIC8800DC (2357:0147) on Kali Linux - Monitor mode works, packet injection fails. Any fix?

2 Upvotes

Hi,

​Using a USB Wi-Fi adapter with the AIC8800DC chipset (2357:0147) on Kali Linux 2026.2 with the patched DKMS driver.

​Monitor mode works fine, but packet injection fails (aireplay-ng -9 shows 0% / fails to inject).

​Is packet injection supported on this driver at all, or is there a specific patch/branch for it? Thanks!


r/HowToHack • • 11h ago

How to start as a newbie

0 Upvotes

I'm 16 and I wanna be a hardware hacker

From where should I start?

And also can i be a software hacker beside hardware hacker?

Where to learn everything from beginning


r/HowToHack • • 22h ago

Want to hack ev car ( i own mg's car )

2 Upvotes

I'm particularly interested in learning car hacking and automotive cybersecurity. I want to understand how to remotely access and explore the different systems and features of a car using my computer or phone, and learn what the vehicle is actually capable of from a cybersecurity perspective.

I'm completely new to hacking, though, and haven't been able to find any beginner-friendly video tutorials that explain the process step by step.

If anyone experienced in automotive hacking could guide me, recommend some YouTube channels, or share tutorials, I'd really appreciate it.


r/HowToHack • • 1d ago

hacking NEED YOUR HELP!

1 Upvotes

How can I set up an environment for ethical hacking (or maybe something else—who knows?) on an old, low-spec computer?

I have an HP ProBook 4440S with 8GB of RAM, a mechanical hard drive (HDD), and an i5 processor running Windows.
THANKS GROUP!


r/HowToHack • • 3d ago

How to downgrade Looki L1 firmware or app?

0 Upvotes

Does anyone know if it's possible to downgrade the Looki L1 wearable firmware or roll back to an older version of the Looki app?

The recent update introduced a bug on my device, and a factory reset didn't revert the firmware. Has anyone successfully flashed an older version or bypassed the Play Store update prompt on an older APK?


r/HowToHack • • 2d ago

Complete beginner here:

0 Upvotes

I scanned an exe file for viruses and it has them. It's definitely gonna hack into my stuff. But what if I really want to run it? Is there a safe way to do so? Please explain in layman terms


r/HowToHack • • 4d ago

how to understand networking from 0

5 Upvotes

hi everyone shortly i wanna understamd networking as a first step to cybersec i only have some python java and sql(only ldd and lmd) basics and i dont know how to stat is networkingchuck a good begening and if it is what shall i do next . thank you

edit: after i searched a little bit i ve another question whats the order ccna then network+ then what ?


r/HowToHack • • 3d ago

Deleted messages

0 Upvotes

Was wondering or don’t know how to see deleted messages on Facebook messenger from the other party.


r/HowToHack • • 4d ago

Is it truly impossible to identify a Proton account?

0 Upvotes

I am not a techie person and I don’t work in the technology industry. I’m just an average Jane who has been receiving Proton emails from someone claiming that my husband is having an affair. This person knows a lot of personal information about both my spouse and I. It’s very unnerving. The research I’ve done is that Proton is completely anonymous and unless this person threatens us I have no way of finding out who it is. And even then, law enforcement would struggle to identify the account owner. If it is truly anonymous, I think that’s terrible that someone can get away with that. I think technology is great, but the ability to insert yourself into someone’s life and not have a risk of being exposed is scary.


r/HowToHack • • 4d ago

software How do I find a 'Grey Hat' Hacker?

0 Upvotes

I have a friend, yes really. He made some poor choice in high school and has a big blemish that shows up every time some does a Google search on him. I figure that someone here will know how to solve that problem. Or, heck, I guess I could try and learn it. Either way - I would like to find someone that could help me get this thing done to help this friend of mine move on with his life.


r/HowToHack • • 4d ago

hacking labs Casio gshock emulate sp32

0 Upvotes

DW-H5600 (3516)

BLE service 26EB000D implemented on ESP32-S3.
184/184 setup pairs validated.
LifeLog: 41 fragments replayed.
Firmware container reconstructed; MD5 verified.
Official CASIO app connects successfully.
SoC identification and full protocol coverage ongoing.


r/HowToHack • • 4d ago

help, my ipad is locked!

0 Upvotes

It used to be my sister's 5 years ago (approximately from memory) but she forgot her password and user. It says "ipad locked by owner", I wish I could take it to an apple store but sadly we don't own a receipt anymore and apparently even if you own the original box it doesn't work so I'm really desperate and willing to hack or jailbreak it (i don't know the exact term, i'm totally lost when it comes to those things) . I don't want this ipad to go to waste so please help if you can!


r/HowToHack • • 5d ago

hacking Need help in sandbox auth escalation in a bug bounty program

0 Upvotes

I'm investigating an AI agent platform as part of an bug bounty and would like some input from people experienced with Firecracker, Linux isolation and cloud security.

Here are the observations so far:

  1. The agent terminal initially runs as an unprivileged `sandbox` user (UID 1002). `sudo` requests a password.

  2. However, `su - root` successfully provides a root shell.

  3. As root, `capsh --print` shows all capabilities in the bounding, permitted and effective sets, including `CAP_SYS_ADMIN` and `CAP_SYS_PTRACE`.

  4. The environment runs Linux 6.1.158 and `systemd-detect-virt` identifies it as KVM.

  5. I can reach `169.254.169.254` and obtain HTTP 200 responses from its metadata endpoints. The server identifies itself as Firecracker API.

  6. I noticed an `address` metadata entry pointing to `192.0.2.1/logs`. This IP is also reachable directly over HTTP.

  7. A GET request to `/logs` returns a method-not-allowed error, while a POST with an empty JSON payload returns `Invalid sandboxID in logs payload`.

I also compared two separate accounts:

* Both return the same `192.0.2.1/logs` address.

* Their `accessTokenHash` values are different.

* A metadata token obtained in Account A is rejected when used in Account B.

This makes me suspect that metadata authentication is isolated per account, but I'm not sure whether the internal logging service at `192.0.2.1` follows the same isolation model.

My questions:

* Is exposing MMDS to the guest VM expected in a Firecracker-based architecture?

* Is this level of root capability access normal for a Firecracker guest?

* Could `192.0.2.1` be a shared internal logging service or sandbox-management API?

* What is the best way to reason about tenant isolation for such an internal service?


r/HowToHack • • 6d ago

hacking I bought a car from china!

27 Upvotes

So a couple of weeks ago I bought a byd car from china. The problem is that the car has a huawei ads system (self driving). And sadly I can't use any of the cars self driving features: LCC, parking etc. My assumption and according to many others is that I can't activate these services unless Im in china. So one option is to ship the car back to china activate the services and ship it again which would cost me a fortune.

Now I have tried to use a vpn in the car but no use. Do any of you have any ideas to trial with.

To give you some info:

The car uses huawei operating system in the car's screen. So I can download any apk if needed.

Im offering 1000$ to whoever succeeds in finding a solution.


r/HowToHack • • 6d ago

Can a really good hacker actually hack almost any website, or does it mostly come down to luck?

16 Upvotes

I've been thinking about this lately.

We always hear about highly skilled hackers who can supposedly break into almost anything. But how true is that in the real world?

I mean, isn't most hacking about finding something someone screwed up? An outdated server, a misconfiguration, an unpatched vulnerability, or someone falling for social engineering?

Let's say you have a website with everything up to date, properly configured servers, and people who actually know what they're doing.

Could a really skilled hacker still find a way in? Or would they eventually hit a wall?

I'm not saying hacking doesn't require skill. Obviously it does. But I'm curious how much of that skill is actually finding a way into a secure system versus knowing how to take advantage of mistakes that are already there.

Would love to hear from people who've actually done pentesting or red teaming.

Is there really such a thing as an unhackable system, or is it always just a matter of time?


r/HowToHack • • 5d ago

Ho bisogno di aiuto

0 Upvotes

Una persona che è stata la più intima per dieci anni da poco mi ha voltato le spalle in modo brutale, mi sparla inventando cose assai gravi nei miei riguardi.
Lei conosce tutto di me, e la nostra chat whatsapp contiene tutta la mia vita privata e della mia famiglia.
C’è un modo per far sì che a questa persona sparisca la chat con me? Grazie a chiunque mi aiuterà.


r/HowToHack • • 8d ago

Is 40 Too Late to Start Learning Ethical Hacking as a Software Developer?

63 Upvotes

I'm 40 years old and an average software developer. I want to learn ethical hacking. Is it possible to start learning at my age?


r/HowToHack • • 6d ago

is there a way to access a locked pdf file

0 Upvotes

so theres a pdf file im trying to edit but its locked so thers no way to copy it nor donload it is there a way to bypass google drive sharing and get accses to them


r/HowToHack • • 7d ago

How can I do a test run on a whirlpool commercial dryer?

0 Upvotes

I'm trying to go into rapid/diagnostic mode on this card-operated dryer, but I believe there isn't a way to on this model. I've opened the latch, but there's no bullet connector like the one in the washer. Does anyone know any other way to do a test run? https://imgur.com/a/LSxcrHf


r/HowToHack • • 7d ago

SOMEONE HELPPPP

0 Upvotes

My bf was setting up his stream and was trying to fix his audio, I guess a website popped up and he clicked that or a link now a hacker is sending him screenshots of almost every account hes ever logged into create account. Everything all his emails is taken away his money and he got control of his PC. Everything is just gone. How can I help him fix this please! Give me solutions ASAP!


r/HowToHack • • 8d ago

Is there a free AI model that can help you in hacking without restrictions ?

0 Upvotes

I want to find a free AI that can help me hack something without telling that this is illegel


r/HowToHack • • 10d ago

How can I get internet access on a MikroTik public Wi-Fi network with this kind of captive portal configuration?

2 Upvotes

I'm using a public Wi-Fi network. It uses a MikroTik hotspot with a captive portal that requires users to enter a voucher PIN before getting internet access.

I've been studying how the network works from my Ubuntu laptop, mainly to understand its network architecture and authentication mechanisms.

Here is what I've discovered:

Network information:

Firewall behaviour before authentication:

  • DNS requests to external DNS servers appear to be allowed.

  • HTTP requests are intercepted and redirected to the captive portal.

  • HTTPS connections appear to be blocked.

  • ICMP traffic is blocked.

  • The billing website remains accessible.

Other observations:

  • IPv4 client isolation appears to be enabled.

  • Proxy ARP appears to be active.

  • IPv6 multicast discovery reveals other connected devices.

  • The captive portal uses client-side MD5 hashing with a static salt.

  • There appears to be a hidden admin login option in the portal.

My question:

Given these observations, are there any known weaknesses or configuration mistakes in MikroTik Hotspot deployments that could allow a client to obtain internet access without going through the normal voucher authentication process?

I'm particularly interested in understanding whether the IPv4/IPv6 configuration, captive portal implementation, or walled-garden configuration could introduce a bypass.

I'm not looking to disrupt other users or access their devices. I'd appreciate explanations of the underlying mechanisms , resources ortools and how such configurations can be assessed.

Has anyone encountered a similar MikroTik setup?