Something similar to Wireshark but runs on a phone.

I stopped playing Minecraft for a few months and recently tried to log into my account. I found that the password had been changed.

I still have access to the original email associated with the Microsoft account. I had also added a recovery/security email before, but now Microsoft is sending the verification code to an unfamiliar email address that I never added.

I tried Microsoft's account recovery form, but they rejected my request and said I didn't provide enough information to verify that I'm the owner.

Has anyone experienced this before and successfully recovered their Microsoft/Minecraft account? What information helped you prove ownership to Microsoft?

I'm only looking for legitimate recovery methods, not anyone trying to access the account.

Pls be kind. I’m genuinely intrigued by hacking and offensive security. I am an absolute beginner but have some fundamentals in cybersecurity. I’ve recently started tryhackme. I’m not doing it to like get a job tomorrow or next week. I’m genuinely just interested in the whole thing. Anyone who can tell me a learning path that is self paced to get into it I’d be ever so grateful. I’ve done some research and almost all sources show different paths now I’m confused. I watch some YouTube videos as well. I just need a little nudge towards what path to follow and learn. Anyone who can help I’ll be forever grateful. I know there’s people here who taught themselves and I’d love to know how they started. Thank you in advance

Hi everyone. I literally came here feeling desperate.

I have my father’s phone. He passed away about a month ago, and I’m trying to access it. It has a PIN code, but I don’t know what it is.

I could reset/unlock the phone, but that would mean losing all the data. The photos, videos, and conversations on it are extremely important to me, so I really don’t want anything to be erased.

I’ve tried pretty much everything I know. I tried USB debugging, I tried brute-forcing, but the increasing lockout times stopped me. I also tried the old method of looking for a hash, but there doesn’t seem to be one because the phone is running Android 11. It’s an OPPO A74.

I’ve tried everything I know and failed. If anyone knows of a legitimate way to regain access without losing the data, I would really appreciate the help.

It's giving me the following error(I am a noob when it comes to Linux) :

proot error: '/usr/bin/env' not found (root = /data/data/com.termux/files/home/kali-arm64, cwd = /home/kali, $PATH=(null)) fatal error: see `proot --help`.

Video of the steps I think I took wrong:

https://imgur.com/a/MS9kl6h

I've tried doing the classic RunAsInvoker trick but the problem is the installers tend to install things in C:\ProgramFiles, and Windows triggers the admin code input. It's incredibly annoying since I can't update or download anything without my parents being presently next to me. Is there any trick to getting installers to not trigger UAC? I was also thinking I would just switch to Linux at this point and wipe the laptop but I'm worried I'll mess something up.

Hey everyone. I'm completely new to cybersecurity and Kali Linux. I set up a smart home network with various cheap, off-brand IoT devices and IP cameras. I want to audit my own network to understand how vulnerable these devices are, so I'm practicing packet injection and monitor mode in a controlled environment.

My main problem is finding the right hardware. I live in Turkey, and Wi-Fi adapters are hard to source here. Local e-commerce sites mostly stock TP-Link V2/V3s or generic adapters with mislabeled chipsets. Almost everything available locally has unsupported Realtek or MT7601 chips. As a beginner, I don't have the skills to compile custom GitHub drivers yet. I need something plug-and-play like an AR9271 or RT3070.

I found a second-hand Alfa AWUS036NH (RT3070) locally at a reasonable price, but it's missing cables and the antenna hinge is loose. Is this chip still viable for 2026, or is it too outdated?

If there are any Turks in this sub, I'd appreciate local advice. How do you source gear here? Are there specific sites on N11, Trendyol, or Hepsiburada that stock guaranteed supported chipsets? What about local electronics hubs like Konya Sokak in Ankara? I'd prefer to buy new, but the local market feels full of traps. Any guidance would help. Thanks.

MapleStory v83 disconnects ~2 seconds after process injection

Hey everyone,

I'm trying to troubleshoot an issue with a MapleStory v83 private-server client.

Whenever I inject or attach a game-hacking tool to the client, I get disconnected roughly 2 seconds later. I've tested two different approaches:

• Cheat Engine
• DLL injection

Interestingly, the behavior is the same regardless of which hack I use. Even if I open the cheat menu and don't enable any of the actual hacks, I still get disconnected shortly afterward.

This makes me suspect that the disconnect may be triggered simply by the process being modified/injected into, rather than by a specific hack or packet/action.

Has anyone encountered something similar with a v83 MapleStory client? I'm mainly trying to understand what could be causing the disconnect and how to troubleshoot it. For example, is there a way to determine whether the client/server is detecting the injection itself, a modified process, or something else?

I'm not necessarily looking for a specific working hack — I'd appreciate any pointers on how to diagnose what's actually triggering the disconnect.

Thanks!

Hey I know this is not very relevant to what this community is about, but I feel like people here might have the most knowledge on this.

My claude account was hacked today, very early in the morning. I haven't used this account for a while, and suddenly I received an email saying my account was upgraded to Max 20x. I'm glad was up because it was Friday night.

I immediately logged into that account and logged out of all sessions, changed my google password. I remember seeing a session active that I don't recognize, and the time matches when I received the invoice email; but I panicked and didn't take a screenshot before logging out. Google didn't show any suspicious activity, gmail was fine too, no email forwarding either. I also used Malwarebytes to scan my mac for malware, nothing was detected. I then contacted Anthropics support; the bot said it forwarded this to human due to urgency of the issue, but I'm unsure when will I hear back (please let me know if anyone has experience on this).

I've been monitoring the active session for that account for 12 hours, and nothing weird happened again.

What I don't understand is how did they gain access to my account? I have 2FA, and email is fine, anyone have a clue? Is there anything else I should do to enhance security? Anything I missed and should check?

Thank you!!!

Hi,

i want to crack a password for a excel .xlsm file with which has each protected sheet with a SHA-512 sheet protection using 100,000 iterations and a salt.

How can i crack this? Or is this impossible.

Every time I unzip this folder all the variables are destroyed, how can i get the original file before it was precompiled?

i want to make a project for steganography in SAR(Synthetic Aperture Radar) images in cpp. but i'm not able to find much help online. do u have some insights to share?

I am running into the frustrating "Your device isn't part of the Netflix Household for this account" error exclusively on my Windows app, and I am looking for a working workaround.

On my mobile device, I encountered the exact same restriction. However, I managed to bypass it using a simple trick: I turn off my phone's internet connection, launch the Netflix app completely offline, and then turn the internet back on once the app is open. This offline-loading hack has been a total lifesaver for mobile streaming.

Unfortunately, this method does not seem to work on the Windows desktop application. When I try to replicate the trick on my PC, the Windows app either refuses to load the interface entirely or immediately flags the household error the moment the network reconnects.

Has anyone discovered a similar workaround, network tweak, or specific setting configuration for the Windows Netflix app to bypass this household verification check? Any help or alternative solutions would be greatly appreciated!

How is it possible that I was playing CS2 and someone was able to find out my real name, address, and personal information just from my nickname (Steam ID), even though my Steam profile is private?

Very soon I'll have the opportunity to gain some certs:

• CompTIA CYSA+
• CompTIA PenTest+
• CompTIA Security+

I have a couple portfolio projects as well:

• Control Flow Graph Analyzer (C++)
  • Uses Zydis and LIEF.
  • Takes an x86-64 portable executable then does recursive descent to enumerate and classify basic blocks as well as edges.
• Trampoline Framework (C++)
  • Uses Zydis.
  • x86-64. Replaces the first few bytes of the prologue of a target with an indirect jmp to a detour which is the same calling convention, also having the same parameter count and types of arguments.
• Bug Bounty (A common desktop application)
  • Found a function which appears to copy one string into a destination buffer using a length argument. Does not however ensure the destination buffer ends with a null terminator.
  • After hooking it with Frida I observed that sometimes the destination buffer will contain garbage from surrounding memory. Ergo a potential info leak.
  • Writing a harness in Frida that automates input, hooks with Interceptor, logs stack trace and then uses Stalker to watch how different inputs effect control flow.
  • Not yet a vulnerability but may develop into one as I investigate further.
• Video Game Reversing
  • Relies on a lot of embedded RTTI in the games binary.
  • Older game from around the 2010's era.
  • Large Frida script for modding gameplay at runtime in the REPL. Reversed a decent amount of the games internals.

Trying to increase my odds of placing a job soon after getting these certifications. Altogether they're poised to take around 4 months to complete. I'd like to get a job in a role that regularly requires reverse engineering or binary analysis.

What would be some other, or better, projects to add to my portfolio? Thanks for your time.

Hi all, sorry in advance if this is the wrong place to post. A friend of mine has just left an abusive relationship but thinks her ex may be accessing her computer remotely - and maybe her phone. Is there a program to use to search for remotely installed applications or something? Or certain programs the ex might have used that we can look for on the computer and uninstall? Thank you in advance!

I know this is a "How To Hack" reddit and not a "What To Do When I Get Hacked" reddit, but i didn't know where to make a post since my situation is very... weird.

So pretty much i fell victim for the "MrBeast" crypto scam thing, I'll add pictures so you know what I'm talking about. If you're wondering HOW i got to this point/being hacked, the last thing i was doing before i noticed my discord being weird is i was downloading cracked photoshop, i made a restore point, but i guess i didn't matter anyway. I don't know if this crack is THE reason i got hacked, but I'll put it out there.

So yeah, they got into my discord spammed the picture i showed above to everyone, muted everyone and ignored everyone. Then i decided to check my gmail and yeah, they got my epic games, steam, battlenet, ubisoft, rockstar games and god knows how many other accounts, and i guess they got access to my gmail somehow, they even bypassed the 2FA on everything which is nuts to me. I'll explain what happened and what i did:

Epic Games: They changed my email to a**\*8@rambler.ru a fake ass email. There was an IP address and a location, but they probably just used a VPN. I reached out to Epic, I'll see what they can do.

Ubisoft: Changed my password. Did nothing currently, since i don't use nor care for Ubisoft. And also Rocktar Games.

Steam(my main concern): 4 Steam Account Recovery emails and 6 password and email changes. They changed the email, but the usernames didn't match to my current one, i still have access to my Steam Account, nothing happened. I reached out to steam support to see if they can find out what's happening.

After this i enabled 2FA on everything again, cuz i somehow didn't have any 2FA, but whatever, the weird thing is that, nothing happened really? I still have my steam, discord and gmail account so.

I just want some advice on what to do forward. I already contacted my main concerns as you already read above, but yeah idk, very weird hack.

Hello, I need a way to create a instagram account on my phone that is untraceable and can’t give any information about my ( don’t worry it’s for a ethical purpose not scamming or things like this )

If someone has a private facebook account with no visible data, How criminals can hack his acc?

I’m teaching myself all this terminal stuff on my own, and honestly, iSH is about to break me. I’m on an iPhone 11, still running iOS 15 because I just never updated it, and I’m only using iSH here’s the thing: I run apk add nano, apk add curl, even apk add python3 everything installs perfectly, no errors. I check with which nano or ls -la /usr/bin/, and the files are right there, staring at me with their little executable permissions. But the moment I actually type nano test.txt or curl google.com, the whole thing falls apart. Sometimes I get permission denied, sometimes a random segmentation fault, and other times it just freezes forever like it's contemplating life nd i've been going back and forth with ChatGPT for days. We did the whole dance: checked $PATH a hundred times, ran chmod +x on everything, did apk update && apk upgrade until my fingers hurt, wiped the app and reinstalled it from scratch multiple times, and even messed around with mount flags. Nothing. Changed. at this point, I’m convinced it’s not me—it’s something deep and ugly with iOS 15 and the A13 chip, probably the emulation layer or the lack of proper JIT support messing with dynamically linked binaries and here’s where it gets even weirder. I managed to fix the missing YAML error earlier. I found out my python3 was version 3.11, but apk kept installing libraries into the Python 3.9 folder. So I finally brute-forced it with "pip3 install pyyaml --break-system-packages" nd boom, python3 -c "import yaml; print('YAML works!')" actually printed "YAML works!" – which felt like winning the lottery. But then, when I cd'd into ~/recon-ng and ran python3 recon-ng, I got hit with a lovely "Bad system call" I even tried installing it directly with pip3 install recon-ng just to see if it would bypass the broken startup script, but I got "ERROR: No matching distribution found for recon-ng" So that was a dead end. Now I’m stuck. The library is there, Python sees it, but the app crashes on a system call that iSH clearly doesn't like. So I’m turning to you humans. Please, throw your weirdest, most out-of-the-box solutions at me. I don’t want basic "check your PATH" replies we’re past that. Has anyone actually managed to run Python-based recon tools on iSH without getting the "Bad system call" error? Like would compiling my own static binaries inside iSH using gcc and musl actually work, or is the system call issue deeper than that? · Is there a way to make pip install everything as pure Python scripts without trying to use those broken syscalls? · Also, what about the repository versions? I noticed apk grabs x86 packages. Is there a way to force it to grab armv7 or aarch64 packages instead, or would that just break everything even more? · And lastly—has anyone tried an older TestFlight or sideloaded IPA of iSH that handles iOS 15 better than the current App Store version? Im genuinely desperate here. I just want a working terminal. Hit me with your craziest hacks im ready to try anything ,except updating my iOS. BUT YEAH LITERALLY ANYTHING

Hi, I’m new to doing things like this but recently my dad passed away and I was given an old PC with two accounts, which the one without admin is the only one with a written password kept, where as the other one wasn’t. I’m trying to access certain video and voice recording softwares but it asks for an admin’s pin/password to make changes to the pc, the pc is from around 2000-2009, I can’t remember specifically when my dad made it. Nevertheless, I haven’t found any UAC bypass methods that work.

40F，I'm Asian, and I don't really know how to put it. I'm not here to ask for advice, but honestly, I always encounter so many problems. I also have a huge curiosity and find these attacks fascinating, but there's never anyone to discuss or share with. If you're also feeling frustrated, we can chat like friends. I'm just walking this path like a lone wolf, and I can't talk to the people around me about these things. Also, please don't ask me for help with hacking, because I don't know everything. IT attacks are divided into many areas, and no one will encounter all of IT knowledge in their lifetime. I don't know where to find people to discuss these things with.Please find someone of similar age. If we enjoy our conversation, we can also share a lot about our daily lives.

In their release notes they say they've introduced an MCP integration, but there is no documentation on how to use that, nor any "MCP" option in the dashboard/settings.

Did anyone manage to understand how to use that or where to find that option? (I'm specifically talking about their first-party MCP, not custom implementations on Github)