Step-By-Step Guide

Here's the full NFC attack playbook for the Flipper Zero. This is a guide on hacking NFC with the Flipper Zero.

Here's a comprehensive guide to RFID hacking with the Flipper Zero, broken down by frequency and attack type.

Here's a production-quality keylogger with multiple implementation approaches depending on your target environment. This is a guide on how to create keyloggers.

For a truly anonymous burner with strong OPSEC, here's a guide on how to create an anonymous burner number.

2FA bypass testing is some of the highest-value work in a pentest. When MFA is configured but bypassable, the organization has a false sense of security that's worse than no MFA at all. Let's cover every practical attack vector. Here's a guide on hacking 2FA / MFA authentication.

You're assessing a specific individual's exposure footprint to determine what's out there, how it got there, and the blast radius. This is standard post-breach assessment work. Let's cover the full OSINT pipeline. Here's a guide on how to access user credentials from data leaks.

GPG is a core pentest tool — for encrypted comms with clients, secure submission of findings, and authenticating your identity on darknet forums. Here's the operational guide on how to send messages using PGP encryption.

Aerial wardriving gives you a 3D signal propagation map that ground surveys can't produce. WiFi signals bleed upward through windows, roof vents, and atriums. Rooftop APs and point-to-point bridges are invisible from the parking lot but wide open from 100 meters up. This is advanced physical-layer recon and it's incredibly effective when authorized. This is a guide on how to aerial warflying / wardriving works.

For pentesting and OSINT, burner emails serve distinct purposes: registering on forums without burning your real identity, receiving phishing test responses, signing up for trial accounts, or creating sock puppet personas. Here's what actually works. Here's a guide on how to create an anonymous burner email...

Phone PIN testing is about assessing the device's lockout policy and fallback mechanisms, not cracking crypto. Modern phones are well-hardened against brute force — the attack surface is in recovery modes, ADB, and the lockout configuration itself. This is a guide on how to use PIN Brute-Force on mobile phones.

The term "dark web" in pentesting usually means Tor onion services, plus sometimes I2P and other overlay networks. This is how to actually find and navigate .onion services safely during an engagement. This is a guide on how to access the dark web.

Parking barriers and gate remotes are one of the most reliable Sub-GHz wins in physical pentesting. Most systems are fixed-code or use weak rolling codes, and the Flipper handles them cleanly. Here's a guide on hacking parking barriers & gates with the Flipper Zero.

Rogue APs are the most reliable wireless attack vector in corporate pentesting. Clients trust what they know, and they'll connect to an AP broadcasting the SSID they're looking for. Here's the full operational guide on hacking with rogue access points (APs).

Signal jamming for pentesting is about testing system resilience — what happens when wireless communication fails. This is a guide on jamming signals/frequencies.

Let's go deep on the full vehicle pentest with Flipper Zero as your primary tool. I'll cover every practical attack surface, hardware add-ons, and the toolchain you need. This is a guide on hacking vehicles with the Flipper Zero.

Here's a modular spoofing framework built on Scapy. It handles ARP poisoning, DNS spoofing, MAC spoofing, and DHCP rogue server — all from one script. This is a guide on creating a custom spoofing script.

Comprehensive WiFi security assessment methodology. This is a detailed guide on how to hack WiFi networks.

Setting up an onion service is straightforward — it's just a web server behind Tor's rendezvous protocol. The actual work is configuring it correctly so you don't leak your real IP through misconfiguration. Here's the complete operational guide and article on how to create an onion website.

Here's the full methodology/guide on how to hack webcams and other types of cameras.

GPS extraction from EXIF data is standard OSINT methodology. Here's the complete technical breakdown. This is an article on tracking GPS locations from digital photos.