r/learnhacking Dec 04 '18

Welcome to r/learnhacking!

14 Upvotes

Welcome to our subreddit.

We have a discord!:

https://discord.gg/2urzmYu


r/learnhacking Dec 22 '18

Resources

31 Upvotes

This is a copy of the resources listed and brought together by the community on discord.

----- Useful Links -----

Awesome-Hacking Lists: https://github.com/Hack-with-Github/Awesome-Hacking/blob/master/README.md

Citadel Database: https://citadel.pw/

Crack Station: http://crackstation.net/

Exploit Database: http://www.exploit-db.com/

Hackavision: http://www.hackavision.com/

Hash Generator: http://www.insidepro.com/hashes.php?lang=eng

Hackmethod: https://www.hackmethod.com/

Hell Bound Hackers: http://www.hellboundhackers.org/

Packet Storm Security: http://packetstormsecurity.org/

Phrack Ezine: http://phrack.org/

SecLists: http://seclists.org/

SecTools: http://sectools.org/

PentestAcademy: https://www.pentesteracademy.com/

Skull Security: http://www.skullsecurity.org/

Smash the Stack: http://smashthestack.org/

Sploit Me: http://www.sploit.me.uk/

Null Byte: https://null-byte.wonderhowto.com/

Vulners Vulnerability Database: https://vulners.com/

----- Reading Materials -----

Kali Linux Revealed: https://kali.training/downloads/Kali-Linux-Revealed-1st-edition.pdf

The Bash Guide: https://guide.bash.academy/

----- Challenges -----

https://www.vulnhub.com/ - Has a lot of VMs to play with. some are beginner friendly, some aren't.

http://www.itsecgames.com/ - buggy web app

http://www.dvwa.co.uk/ - Damn Vulnerable Web Application

https://www.hackthissite.org/

https://www.hackthis.co.uk/

https://www.root-me.org/

http://overthewire.org/wargames/

https://ctftime.org/

https://ctf365.com/

https://www.hackthebox.eu/invite

----- Security Advisories -----

CVE: http://cve.mitre.org/

CWE: http://cwe.mitre.org/

NVD: http://web.nvd.nist.gov/

WVE: http://www.wve.org


r/learnhacking 3d ago

Lost email

0 Upvotes

Yo, I recently lost acess to my account on a game.

basically i need to get acess to my first email of the account (creation email) but i lost it.

it has no extra protections, only the password which i can’t remember.

if anyone can help, please dm me, i mean no harm, im just desperate


r/learnhacking 7d ago

Lime bike hacking

1 Upvotes

Can somebody please explain to me if there is a way to hack a Lime bike so it is off the grid so l can use it as my personal bike?


r/learnhacking 7d ago

networking for cybersecurity

Thumbnail
1 Upvotes

r/learnhacking 14d ago

Excessive attacks on website

8 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.

PS. Sorry for my mistake in editing.


r/learnhacking 14d ago

Excessive attacks on website

3 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.

PS. Sorry for my mistake in editing.


r/learnhacking 15d ago

Excessive attacks on website

3 Upvotes

I hope this is the right place to ask: I maintain a website for a small business. When I look at the weblogs, I see an inordinate number of attacks: non-existing url's, all sorts of extensions, what looks like shell scripts, and on and on.

Sometimes they start and go on for about 4-5 hours, making multiple such requests every second.

What do they wish to accomplish? If they have done it once, why try again using a different fake IP address?

Any ideas? Or is this common so I should not feel targeted exclusively.


r/learnhacking 18d ago

How to unlock pin of deceased person's phone

7 Upvotes

Hi, My dad died and I have his phone. A Redmi 15C. I went to his operator to check he pin code and they managed to give me the puk code, so I managed to unlock it... Well that's what I thought, now it asked for another pin code.. I guess the password of the phone ? Even after restarting the phone it asks for that "pin code" and when I try.. I enter wrong ones it says to wait some seconds because phone is locked and to retry again. Please tell me there is some kind of hack crack or wathever that I can do to restore the phone, I do NOT want to wipe all the data, there are precious informations about my dad.. God, why is it so difficult to unlock a phone ? There should be some kind of procedure for this no ??


r/learnhacking 20d ago

Ideas for friendship system bypass (hash + token)

4 Upvotes

Hi, i'm not really into this domain, so i don't want to ask stupid questions. i ve always been attracted to it, but i kept thinking it s too complicated for me and it might actually be

I've been struggling for about a week trying to gain access to private content on a site that relies on friendship connections. i tried bypass methods, but every time the server checks the hash and tokens separately. The only interesting behavior i've found in the friendship request flow is that the endpoint responds as if the action was accepted, but the actual friendship relationship doesn't change on the site.

I've tested quite a few beginner-level things without any luck. Maybe its simply not possible. Even if i don't find anything i m still drawn to the field.

i'd like to ask the more experienced people here for some general ideas on what to try next. i don't want anything spoon-fed, i enjoy testing and understanding things myself but some pointers or directions would really help


r/learnhacking 27d ago

Trying to access an old Twitter/X account

2 Upvotes

I lost access to my Twitter/X account and I’ve done all of the steps to attempt to recover it from the them, none of which has worked. I‘ve also lost access to the email account which I used to register the account so no luck there. I don’t need access to the account, I just want it deleted. I was wondering if anyone has any alternative ideas on how to retrieve old accounts/get them deleted. Maybe a hacker?


r/learnhacking Jun 22 '26

Free way to learn/ groups willing to teach

9 Upvotes

I don't really want to spend any of my parents money but I am still very passionate about learning hacking, does anyone know about a way to learn for free or groups that are interested in teaching. I tried tryhackme but I hit the paywall after like 5 lessons can someone help me


r/learnhacking 29d ago

[ Removed by Reddit ]

0 Upvotes

[ Removed by Reddit on account of violating the content policy. ]


r/learnhacking Jun 22 '26

Unable to access email

0 Upvotes

I forgot my password and I'm unable to login to my email due to 2 step verification. Can someone do a good deed by H@cking my own email for me. I have had that email for years and its very important that I hold on to it


r/learnhacking Jun 20 '26

can you learn hacking late

16 Upvotes

like can you start learning this art latter in life and also does it involve like a lot of maths also is it boring carrer choice will ai eat it up thoughts amigos ?


r/learnhacking Jun 20 '26

Hola hermanos me acaban de robar el teléfono necesito ayuda si conocen a alguien o saben cómo rastrearlo me dejan un comentario los estaré leyendo

1 Upvotes

r/learnhacking Jun 16 '26

are most sites easy to hack for the seasoned hacker, and they just don't do it because it's a crime...or is hacking a site these days genuinely difficult

12 Upvotes

r/learnhacking Jun 02 '26

how to work with ping

3 Upvotes

i am a beginner, so when i tried to ping a website's ip address i could not though it accepts http request, in this case what would one do


r/learnhacking May 08 '26

Beginners guide to Google Dorks by Heisenberg

Thumbnail
heisenberg-dork-lab.base44.app
1 Upvotes

A friend wanted to get into the basics of hacking/cyber security/be 1337. He is a huge Breaking Bad fan so I one shot prompted this little webapp guide and tool for him using base44 for Android. I primarily use Claude code or Kimi lately but I was very impressed by the output with no other prompting just one run on sentence and incomplete thought dictated verbally to the app. Anyway https://heisenberg-dork-lab.base44.app/


r/learnhacking May 03 '26

Looking for Programming buddies

8 Upvotes

Hey everyone I have made a group for programming folks to learn, grow and connect with each other

From beginners to advanced

We help each other and provide guidance to everyone in our community, you can also network with each other

Those who are interested are free to dm me anytime

I will also drop the link in comments


r/learnhacking Apr 16 '26

How to start?

16 Upvotes

I’m really interesting about this, but the ones who already know about hacking how they started?


r/learnhacking Apr 11 '26

Looking for assistance bypassing app restrictions

1 Upvotes

Hey, I'm looking for some guidance on modifying an app to gain access to premium features without paying. Specifically, I'm trying to bypass the filteronme (the app). I'm not looking to distribute or profit from this, purely personal reasons. If anyone has experience with this kind of thing or knows someone who does, hit me up. Would prefer PMs rather than posting here


r/learnhacking Apr 08 '26

Stuck on YAML Deserialization payload syntax (ToxicEnv)

2 Upvotes

Hey everyone, I'm working on the ToxicEnv box (SuperiorCTF) and hit a wall on the final step.

I've already bypassed the LFI, got the Flask secret, and forged a director cookie. Now I'm at the final panel which is vulnerable via yaml.unsafe_load().

I know I need to trigger RCE using !!python/object/apply:subprocess.getoutput to read flag.txt, but I just can't get the syntax right and the server keeps throwing errors.

Any hints or good resources on how to properly format this specific Python YAML payload? I want to learn the mechanics, so just a nudge in the right direction would be awesome. Thanks!


r/learnhacking Apr 01 '26

Help with Removing Admin Password / Bitlocker password

1 Upvotes

Hey everyone, hoping for some advice and guidance in how to essentially restore a laptop to factory settings so that an Admin password and Bitlocker password aren't making it unusable.

For context;

I have been recently clearing out some clutter from my spare room and came across an old work laptop from a previous housemate that used to lodge with me around two years ago. They have since left their old job, moved out and we lost contact a while back.

Since this laptop is better than my current one, I was hoping I could start using it, so I tried to restore it to factory settings so that it would essentially be new. Unfortunately it was locked by my friend's previous employer by an Admin password and bit locker code.

Whilst I have a standard and pretty basic knowledge of tech, I wasn't particularly well versed with anything too advanced, so I did a bit of research and googling and essentially found out how to boot up the laptop in 'BIOS' mode, and thought I was going to be successful, but when I tried to click restore to factory settings, it asked me for the Admin password!

Upon some further research I came upon three potential solutions; the first required me to uninstall and reinstall Windows, the second was to disconnect the battery- allowing the power to drain fully before reconnecting it and forcing a hard reset, the third was to completely replace the harddrive.

Since the last two options required practical and technical expertise, and I didn't want to take apart the laptop without being familiar with how to put it back together, I opted to try and teach myself the necessary steps in order to use an external hard drive to uninstall and reinstall the operating system.

After a lot of trial and error, I managed to format a hard drive and using this, boot up the BIOS and essentially reinstall the operating system. And for about ten minutes it worked! It booted up normally and was fully reset as though new, but then for some reason I was once again locked out and it stated I needed an 'Admin Password' to unlock it.

Essentially feeling defeated I decided to just take it to a computer repair store for them to manually replace the hard drive, however, the guy at the store encountered the same issue- the laptop would reset normally before being locked out again, requiring an admin password. I was advised that nothing short of hacking would make it usable again.

Does anyone know how I can go about doing this? Is it even possible and is it something I am able to teach myself to do? Any advice or guidance would be appreciated.

I'm not sure what other information you would require but please let me know and I can provide it! For reference it is a Dell Laptop with a Windows Operating System.

TLDR; I am locked out of a laptop that is requiring an Admin password and all attempts at reinstalling the OS and restoring it to factory settings has failed. Am I able to hack into it to get it to function as normal?


r/learnhacking Mar 17 '26

Inside OpenClaw: Deploying, Sniffing, and Hijacking the Agent.

Thumbnail
1 Upvotes