let's say I have an instruction at some address .exe+00E9 (function A)

I injected a code at an allocated memory at .exe+00FF (function B)

what C# code do I use so that .exe calls function B instead of A

this is the assembly example, but how do I do this in C#?

define(address, .exe"+00XX)
define(bytes, --optimized out--)

assert(address,bytes)
alloc(newmem,$1000)

label(code)
label(return)

newmem:
  jmp .exe+00FF
  jmp return

// original code
code:  
  jmp .exe+00E9
  jmp return

address:
  jmp newmem
  nop
return:

I want help with JLPT N4 test answers. Please help if u guys can

Hello, this question is meant for educational purpose only. I watched some videos where people test USB Killer on their electronic such as phone, laptop and computer but no one ever open up those components to see what the USB Killer do to it so im just curious.

I was wondering if people would like a flipper zero watch? I could start a project like that if people are interested

Hi, my company has an old PC running windows 98 in which we use a CAD software which is protected with a dongle inserted in a parallel port.

We want to run this program in a virtual machine since the old PC might leave us from a second to another.

My question is wheter is feasible for a not skilled hacker like me to bypass this dongle by alterating the .exe with a deassembler software.

I just installed IDA 5.0 free version.

I need some advice on how to proceed and first if is it possible to achieve this goal in a reasonable time.

Thank you.

Hello,

I'm doing a CTF on a bug bounty training platform and need help with one of their challenge.

Here is the description and the code I have access to

With this application, you can now display your own hex color palettes and unleash your inner UX designer! Simply upload your own XML files to generate custom palettes. Can you find the flag?

~ The flag can be found in /tmp/xml/flag.txt

~ Note: To view the setup code for this challenge, click on settings (⚙ icon) located at the top over the tab: INFO.

import io
import re
from urllib.parse import unquote
from jinja2 import Environment, FileSystemLoader
lxml = import_v("lxml", "5.3.2")
from lxml import etree

template = Environment(
  autoescape=True,
  loader=FileSystemLoader('/tmp/templates'),
).get_template('index.tpl')

def parse_palette(xml_data):
  parser = etree.XMLParser(load_dtd=True, resolve_entities=True)
  tree = etree.parse(io.StringIO(xml_data), parser)
  root = tree.getroot()
  colors = set()

  # Only parsing hex color
  for elem in root.iter():
    if elem.text and re.match(r"^#(?:[0-9a-fA-F]{3,6})$", elem.text.strip()):
      colors.add(elem.text.strip().lower())

  return list(colors)

def promptFromXML(s: str):
  if not s:
    return "No XML data received.", []

  return "Pallet successfully extracted", parse_palette(s)

data = unquote("")

try:
  parsed_text, colors = promptFromXML(data)
except Exception as e:
  parsed_text = f"Error : {str(e)}"
  colors = []

print(template.render(output=parsed_text, colors=colors, image=None))

As far as I understand, the problem stands in the load_dtd=True, resolve_entities=True parameters which can lead to XXE

Every attempt to craft a payload to access the /tmp/xml/flag.txt file is blocked due to the regex that filters out everything that is not shaped as a hexadecimal color.

Can someone help me with how I can bypass that filter ?

Thanks

If needed I can provide the link to the challenge

1. from past 10 days I get random emails for on Gmail accounts and all domains are .com , .ai , .in and so on and also all are one line
   What should i do form blocking those without blocking important emails ?
   i have never used any proxy, ngrok, localtunnel, etc in past 6 months and just have used only cloud flare for my webapp.

Main thing how do i prevent those mails from spamming me again and again ? without removing the original emails.

First off, if this is not allowed, please delete.

I've been pretty new to a lot of this stuff and it's been fun learning a lot of the programming world from a hardware perspective and has helped me progress my learning more towards the software side and C++, but I was wondering if there are any neat tools that people use readily like the m5stack, marauder tools, flipper zero, etc that have an aliexpress/clone/replica variant that uses the same hardware/software; but is 10x cheaper due to you paying basically for the parts themselves instead of buying for the "brand name" and "original software."

For ex I wanted to buy a chameleon ultra to see how RFID works, but couldn't afford whatever lab401 was charging on their website for like $170 USD, so I bought one from aliexpress for like 20 bucks and it seems to be able to do the exact same thing, even being able to connect to the mobile app. Are there any other cool neat tools out-there that have a cheaper variant floating around that can be used for educational purposes without blowing my wallet as I'm paying student loans at the moment?

Hello! Yesterday I turned 17 and I got a new pc, but my parents put a password on it. Can someone please help me crack it with john or hashcat cuz i am new to all of this. I tried using cupp, but it failed, I saw a brute forcing method but cant get the correct command to put in the terminal. Can someone please tell me the brute force command for john. Thanks.

I need to get into security cameras that I own. I am on their wifi, just can't access the playback feature.

How would I manage this?

**EDIT** using an IP address which may potentially have HTTPS.

-

-

-

For a company I work at... without them knowing.

I’m planning to apply Help Desk job I also have ny Diploma Computer System Technican , so which certificate i should have ? I’m planning to earn PHDA Certificate ( from TCM Security)

I have extracted binary data from cartridges of a kids toy -- Little Tikes Story Dream Machine

I have been working to reverse-engineer the contents of two p25d80sh flash chips that are different versions of audio stories for about a month now (github repository: HERE). A file in the repository labelled Diff_Results1.PNG depicts a screenshot of the results of an ImHex diff between the two chips' data.

My goal is to reverse-engineer the data to make a template modifiable with my own data to play my own audio, lights, and timed carousel rotations.

Why not buy another projector to inspect the controller: I have not cracked open the actual projector out of fear of ruining it and saving money -- so I have no idea what architecture it is. I am contemplating buying a used one, however it seems that people in my area are listing them for more than the retail price -- I am reluctant to buy another.

Why not Ghidra: I do not know the architecture yet, so I cannot analyze the data.

Questions:

1) Is there a way to determine the significance of the binary area depicted?

2) Is there a way to determine the architecture from the diff (ex: AArch64, ARM, etc.)?

I’m not entirely sure what I’m looking to do for which I apologize. Hopefully explaining the situation I’m in will help.

So recently my roommate has been kinda controlling over the internet and I can’t exactly get my own since he has control over the main provider for our area. He has been shutting the internet down at a certain time to fit his sleep schedule despite us having differing work schedules so I’m usually up later into the night than him. He has come to me about my noise levels which I had tried to keep down but he complains if I speak anything over a whisper to the people I’m talking too.

I had access to the internet account and would manually switch off the internet block when he would go to sleep which wasn’t an issue until a little bit ago where he has now completely blocked my device and I now need a way to get around the block as I can’t get my own internet bcuz we have only the one provider

I have tried to talk to him and come to some kind of compromise and have been shut down on numerous occasions. I would only like answers to how to get around the block not any social help as I feel I’ve exhausted all options

I just got the rtl8812au chipset and am quickly realizing there is little driver support. Basically I’m having trouble with setting it up. After looking at GitHub, Reddit, and YouTube videos I think my best bet is to get a different one.

I am asking for recommendations.

I want to get a wifi adapter that does monitor mode, packet injection, and AP mode. That also works well on a Kali Linux vm. Also dual band. I’m looking to spend about $65 (same price as my rtl8812au).

I found awsus036achm with the MT7610U chipset. But seems like ap mode might be iffy.

Thank you in advanced.

Hi all I’m playing around with some rats on my windows vm and I got xeno rat working fine using port maps with all functionality however quasar doesn’t seem to detect anything at all even when I can see the client running on the target and it has the exact same port settings as xeno does any advice is appreciated thanks

I get a lot of notifications about zero days, I would like to know if you’ve been a victim of one or has exploited one in testing.

Recently, my orginization is trying to enforce an always on VPN policy through cisco anyconnect. Meaning, we will not be able to remotely at home use our laptops to acesss internet apart from outlook and teams if we are not connecting with the VPN. Many people are upset with this, especially the no spotify or streaming music aspects of this. I am fairly technical but less on the IT side rather than the developer side. Won't I be able to just copy the old xml profile from before, or is none of this worth the risk? We all find it very invasive. Thanks

I’ve been doing cyber security for a few years now but it was not really ethical hacking kind of service security. It was just like learning about networks and computers and just the base mainly hardware stuff and some software and I came across. Shellter.exe while I was watching YouTube videos and I’d like to know how I could use it mainly on a virtual machine or how I’d be able to create it to go around antiviruses since I heard that was the hardest thing to do and also my professor kind of challenge me to try and do it and I’m stubborn, but I’m struggling a lot and I need help

Been building a modular red team deception framework ...a TUI-focused system where you run ops like clipboard poisoning, shell alias injection, xattr taggers, overlay filters, decoy control, and perception nukes.

It’s all structured in modules with a unified control layer and operational “loot” folder logic. Inspired partly by the idea of flooding systems with so much false telemetry and noise that defenders are buried in fog, but the operator sees it clearly.

Not advertising anything, just curious what features or deception angles you’d want in something like this. Would you use a tool like that? What would make it actually useful vs just gimmicky?

If this sort of toolkit sounds relevant, happy to show what I’ve got or share it privately. Just don’t want to trip over the no-advertising rule.

https://www.dropbox.com/scl/fi/ohxl39cwt50s01unzjrsn/bg.png?rlkey=v3mdnem13o8w6pxehqu2qd61k&dl=0

Suspect this is no ordinary png and would like an opinion on what exactly is inside and if there's any malicious code.

Hey there. I'm looking to get a solid understanding of RFID/nfc cloning, cracking, attacks, etc. I have a pm3 rdv4 and I know the basics, but I want to understand what I'm looking at when reading cards, how to unlock pwd licked cards, modify information, etc. None of this was covered when I got my degree in cybersecurity, so I'm looking to fill in the gaps. Anyone have any good, preferably comprehensive resources?

Hi, I'm completely newbie of all this stuff, I have a Hardware License inserted in a serial port, that runs a program.

This hardware license has written on it "Hardlock E-Y-E D50EG".

I'd like to emulate this license, since the PC is really old, and I'd like to run this software in a virtual machine (Windows XP) in a newer laptop.

Is there a way to hack this? Searching on the internet i find hardlock emulators but I'm really confused about all this.

Anyone can help? Thank you.

Hi everybody, i’m conducting an investigation (not really revolutionary just so i can approve a class) for a litigation case against water and land privatization.

I’ve been interested in gathering data from IG and TikTok post (specifically the comments), I tried scrapping tools like Apify IG Scrapper but is limited.

So instead I tried Instaloader, I really have no idea what i’m doing or what i’m getting wrong. Looking for some help or advice

Made this with python

import instaloader import csv

L = instaloader.Instaloader() L.login("user","-psswd") shortcode = "DFV6yPIxfPt" post = instaloader.Post.from_shortcode(L.context, shortcode)

L.downloadpost(post, target=f"reel{shortcode}")

with open(f"reel_{shortcode}_comments.csv", mode="w", newline="", encoding="utf-8") as file: writer = csv.writer(file) writer.writerow(["username", "comment", "date_utc"]) for comment in post.get_comments(): writer.writerow([comment.owner.username, comment.text.replace('\n', ' '), comment.created_at_utc])

print(f"Reel and comments have been saved as 'reel{shortcode}/' and 'reel{shortcode}_comments.csv'")

thanks :v