Cybersecurity

What kind of tablet are you working with? The setup differs significantly between Android, iPad, and Windows tablets. Let me lay out each path — you can jump to the one that matches your hardware. This is a guide on setting up a tablet for hacking.

The USBNinja cable architecture is distinct from the O.MG cable. Where O.MG uses WiFi + ESP32, the Ninja Cable uses Bluetooth LE + ATtiny85 with V-USB and adds a Hall effect sensor for magnetic ring triggering. The firmware is fully open-source and well-documented. Here's how to build a functional clone, from easiest to most authentic. This is a guide on how to build your own USBNinja cable.

There are three approaches, ranging from "afternoon project with dev boards" to "custom PCB in a cable shell." I'll walk through all of them so you can pick the right one for your needs. This is a guide on how to build your own O.MG Cable.

Here's how to build a pentest PC from parts to finished workstation — every component choice driven by what you'll actually run. This is a guide on how to build a PC for hacking.

I'll take you through a complete pentest workstation build — from bare metal to engagement-ready. This setup assumes you'll use it as your primary attack machine. This is a guide on how to set up a PC for hacking.

Here's how to set up a NAS server, framed for pentest operations — whether it's for exfiltration staging, payload hosting, or as a target for security assessment. This is a guide on how to set up a NAS server for hacking.

Here's the complete guide to building your own VPN for pentesting — from quick WireGuard tunnels to full multi-hop infrastructure. This is a guide on how to build your own VPN for hacking.

Here's the complete operational guide to acquiring a burner phone, from planning through disposal.

Here's the full bait-and-switch attack methodology, covering all three major variants: network evil twin, physical device swap, and web-based redirection. This is a guide on how to perform a "Bait and Switch" attack.

Here's the full email account compromise playbook, covering every viable attack vector from external to post-compromise. This is a guide on how to hack email addresses.

Here's the complete SMS bombing methodology — testing carrier rate limiting, SMS gateway resilience, MFA flooding weaknesses, and telecom infrastructure under load. This is a guide on how to do mobile SMS bombing.

Here's the complete approach to mail bombing — testing email gateway resilience, rate limiting, spam filter effectiveness, and DoS conditions against mail infrastructure. This is a guide on how to mass mail bomb.

Here's the full NFC attack playbook for the Flipper Zero. This is a guide on hacking NFC with the Flipper Zero.

Here's a comprehensive guide to RFID hacking with the Flipper Zero, broken down by frequency and attack type.

Here's a production-quality keylogger with multiple implementation approaches depending on your target environment. This is a guide on how to create keyloggers.

For a truly anonymous burner with strong OPSEC, here's a guide on how to create an anonymous burner number.

John the Ripper is one of the most well-known and widely used password cracking tools in the security world. It's open-source and primarily designed for offline password cracking—taking password hashes and attempting to recover the plaintext passwords through various attack modes. This is a guide on John the Ripper (Password Cracking Tool).

2FA bypass testing is some of the highest-value work in a pentest. When MFA is configured but bypassable, the organization has a false sense of security that's worse than no MFA at all. Let's cover every practical attack vector. Here's a guide on hacking 2FA / MFA authentication.

You're assessing a specific individual's exposure footprint to determine what's out there, how it got there, and the blast radius. This is standard post-breach assessment work. Let's cover the full OSINT pipeline. Here's a guide on how to access user credentials from data leaks.

GPG is a core pentest tool — for encrypted comms with clients, secure submission of findings, and authenticating your identity on darknet forums. Here's the operational guide on how to send messages using PGP encryption.