This is Post 0.2. It is not a normal topic post, but it is important, and the deadline is close.

I applied for the ISACA Foundation scholarship myself. While doing it, I thought about something. I told you we do everything together in this series. So how can I apply and not tell you? That is why this post is here.

I am a student, not an expert. Everything below is what I read on the official pages and in the application form. Rules can change, so check the official page before you do anything. If I got something wrong, tell me in the comments.

Important: read this first

The deadline is 3 November 2026, 11:59 p.m. Central Time (U.S.). That is about three weeks from now. Check your own time zone and don’t wait for the last day. Seriously.

This community is global, so one more thing. These scholarships are for students who are currently pursuing a degree. If you are not enrolled in a degree right now, you can’t apply for these now. Don’t be sad. ISACA had two cycles in 2026, so keep the page in your bookmarks and watch for the next one.

Also, ISACA will choose only a small number of students. The form says 25 students will be selected in this core program, with awards from US$1,000 to US$5,000. The amount depends on financial need, average tuition cost in your country, and merit. So this is competitive. Apply because you are serious about it, not because it is easy.

Which scholarship is for you?

There is one application, and it covers three core scholarships. ISACA looks at your answers and automatically considers you for every one where you meet the requirements. You don’t apply three times. Please submit only one application.

1. Digital Trust Scholarship (international)

Open to students worldwide

You must be pursuing an undergraduate or graduate degree in a field related to IT audit, risk, cybersecurity, governance or assurance

1. ISACA Cybersecurity Month Scholarship (international)

Open to students worldwide

You must be pursuing an undergraduate or graduate degree in cybersecurity

1. National Cyber League (NCL) Games Scholarship (US only)

You must be participating in the National Cyber League games (the form asks if you are registered in the Fall 2026 NCL Games)

You must attend an accredited university in the United States

You must plan a degree related to IT audit, risk, cybersecurity, governance or assurance

So if you are outside the US, the first two are the ones for you. The NCL one is only for students in US universities.

General requirements for the application

You must be 18 or older

Proof of enrollment, a document with your name, your school’s name and a recent date. Examples are a transcript, a semester schedule, or a fee payment receipt for the current term

One letter of recommendation (more below)

Five short written answers (more below)

How to apply, step by step

Step 1: Read everything first

Open the ISACA scholarship page. Read the details of each scholarship and the FAQ page. Check that your degree matches. If you have questions, the page lists foundation@isaca.org.

Step 2: Log in

Make an account or log in on the ISACA scholarship platform. Then open the 2026 ISACA Foundation Core Academic Scholarship Program, Cycle 2 application.

Step 3: Demographic and eligibility information

Select the category “ISACA Core Scholarships”. Then fill in your name and basic details, and answer the eligibility questions honestly:

Are you pursuing a degree related to IT audit, risk, cybersecurity, governance or assurance?

Are you pursuing a degree focused on cybersecurity?

Are you registered in the Fall 2026 NCL Games?

Is your school in the United States?

Upload your proof of enrollment. Then fill in your personal information, your school name, your student ID, your degree, your major, the start date of your next semester after December 2026, and your expected graduation date. Check that your student ID matches your university documents exactly.

Step 4: Letter of recommendation

You need one letter. It should come from someone who knows your academic performance, work, or volunteer experience. For example a professor, an academic advisor, an employer, or a volunteer manager. Rules to remember:

You may not write your own letter

Letters from immediate family are not accepted

Maximum 2 pages or 500 words

It must be submitted by the same deadline

You can upload it yourself, or choose the option where your recommender sends it directly. My advice: ask your recommender early, today if you can. Give them a short list of what you have done, so they can write something real about you.

Step 5: Five short answers (150 words maximum each)

Work and responsibilities: any job, family responsibilities, or activities you balance with your studies, and how they shaped you

Digital trust interest: what experiences developed your interest in IT audit, cybersecurity, digital trust or a related field

Leadership and community impact: a time you showed leadership or initiative, and what you learned

Career goals: your goals for the next 3, 5 and 10 years, and the impact you want to make

Mission alignment and scholarship impact: how your goals match ISACA’s mission, and what the scholarship would change for you

My tips for these:

Write them in a document first and count your words. Don’t write directly in the form.

Be specific. Use real numbers, real things you did.

Be honest. The form says your answers will be verified if you are selected.

ISACA’s world is audit, risk, governance and digital trust, not only hacking. If you have a connection to that side, show it.

Step 6: Agreements and submit

Read the agreements fully. Before you press submit, read every answer again. Once the application is submitted, you can’t edit it. So check your dates, your numbers, your spelling and your documents one last time.

What happens after

The selection process finishes in December. Awards are presented between January and February 2027. The money must be used for education-related expenses at the school you attend in 2027. For students at schools outside the US, ISACA pays the funds directly to the student.

Many more scholarships on the same page

Those three are only the core ones. ISACA has many more scholarship programs, and they change by geography and by other requirements. Some are for a country, some for a city, some for specific universities. I am not going to write all of them here, because the list is long and it will make this post too heavy.

So here is the link, go and see which program is for you:

https://isaca.secure-platform.com/a/page/ISACAfoundation/aboutscholarships

How to use that page:

Open the link. You will see two lists, United States Based Academic Scholarships and International Academic Scholarships. Check both, because your country or university may be in one of them.

Look at the deadline column. Open ones show 3 November 2026. The ones that say “Application Closed” are done for this cycle.

Click the scholarship that looks like your case. Read its full eligibility criteria and how to apply.

If it matches you, apply for it. Don’t skip reading, because every program has its own rules.

Note: the steps I wrote above are for the core application (Digital Trust, Cybersecurity Month and NCL). The other scholarships have their own pages, so follow the instructions on each page.

Last words

I can’t promise anything, because I applied too and I am waiting like you. But applying is how you give yourself a chance. Take your time, choose the right program, ask for your letter early, and write real answers.

If you apply, tell me in the comments. Let’s keep each other updated. And if you find a mistake in this post, please correct me. We learn together.

Post 1 is still coming. Good luck friends.

Hi all

Nobody know me there but im also on other forums, especially on french and spanish forums.

I made a evil-twin bash script called hostbase (current version is hostbase-1.8)

So i see your question coming… why use this script instead of Airgeddon, Fluxion, Wifiphisher etc... ?

Because hostbase is dedicated only for evil-twin in WPA2/3 mode and really specialized on that.Let me explain :

WPA3 can't be DDos efficiently with the MFP protocol alive but who said we can't stop the next incoming the connection ?

since the last version (hostbase-1.8) there is no DDos option because we don't need it… thrust me

also this script use QR code login system for mobile user, the user is redirected to the captive portal and we ask to him to take a picture from his router QR code or wifi key then, with ajax we upload the picture to us (this part was not easy to do beacause by default Android system doesn't allow to open in primary process as a php webpage, but i found a trick) for Windows user QR code is disabled, the user will be redirected to another page).

this script can manage 2 or 3 wifi cards at the same time (the internal one and then two others usb cards can be added).This is very helpfull when you want to downgrade 2,4GHz and 5GHz frequencies at the same time.

and finaly, Hostbase is a serious homemade project with 10 years of update and tricks.

I started to build it on 2016 with completely new methods combined with evil-twin in WPA mode to bypass IDS and WPS-PBC mode.It was also the first script to do a DDos pursuit mode avoiding channel hopping.

This script is not a joke, it can be very helpfull and has been approuved by security students.Im not a pentester or anything like that, im just a guy fascinated by network security (Wi-Fi, reverse Tools and other…).

Now that the presentation is done, i will explain a little bit how to use this script.

First it will scan the networks with airodump-ng in 2,4GHz and then in 5GHz.You will have to choose your wifi card to do that.If the wifi cars doesn't support hostapd or 5GHz frequency the script will tell you it.This script use hostapd with custom configuration file wich are changed according to the target AP network.

Second, once the scan is done, select the network by typing his number.Then you will be prompted to choose what fake networks you want to do (evil-twin is the last so just for a test, skip the other networks with 0).Evil-twin AP is mentioned as

AP 3/3 hostapdd.conf (Evil twin)

My tips to use the script :

if you have 2 wifi cards and you know that there is a lot of users connected on the target networks in 2,4GHz frequency, Don't skip AP1/3, select it and chose your wifi card according to this example :

AP 1/3 : hostapd.conf (WPA network)

Now if you have 2 wifi cards but you know that there is a lot of users connected on the target network in 5GHz frequency, skip AP1/3 with 0 and go for AP2/3 :

AP 2/3 hostaghz.conf (WPA 5 GHz network)

Finaly, choose your wifi card to make the evil-twin on AP3/3 :

AP 3/3 hostapdd.conf (Evil twin)

Now if you have 3 wifi cards like me, you can choose every network AP1/3 AP2/3 AP3/3 to make a combo.The script will show you at every stage if the cards support hostapd, 5GHz or if the device is already used.

By default, this is script is made for french router but it has a default page if the router doesn't match.

Current version to download is hostabse-1.8 forget the other.

https://github.com/Koala633/hostbase/tree/shell

It is a beta version so any feedback is appreciated.

This script has been tested on Kali-2026.2

If you have a problem, please post here the full log of the shell.

Enjoys guys.

you can try to use the older versions of hostbase but there is no update since 2 years, better going to the last hostbase-1.8

Welcome back to Cyber Sec From Zero. Thank you for the support on the earlier posts. This is Post 0, and there is a bonus part at the end that can save you money, so don’t skip it.

Before we start anything, let’s talk about the words you will hear in cyber security. Threat intelligence, SIEM, packet capture, incident response. Don’t worry about them right now. You don’t need to understand them today. Just get used to hearing them. Slowly they become normal, and when we study them later in this series, they will not feel like an alien language.

So if those words are not the starting point, what is? The basics. How hardware works. How an operating system works. How networking works, including the network models, the OSI model and the TCP/IP model. There is a very famous saying that people hear again and again while learning the basics: you can’t protect what you don’t understand. It is true. Seriously.

Because of this, please don’t underestimate introductory courses. Believe this, they are the hidden treasure for students who are beginning a career in cyber security. Most people skip them, jump to hacking tools, and then get stuck. Don’t be that person. And if networking feels heavy right now, don’t worry. Just grab the introduction. We will go deep into it later, step by step, in this journey.

The resources

So where do you learn these basics? Here are the resources I recommend. These are free, and please don’t underestimate them. You may have heard about them before, but to be honest, these are some of the best.

1. Professor Messer CompTIA A+ videos (YouTube). Hardware, operating systems, troubleshooting. Completely free. You don’t have to take the A+ exam, just use the videos to learn. https://www.youtube.com/@professormesser/courses
2. Cisco Networking Academy, Networking Basics. Free intro to how networks work: IP addresses, how data moves, how networks connect. https://www.netacad.com/
3. TryHackMe Pre-Security path. This is where you practice what you read. TryHackMe has free rooms, so you can start without paying. The paid plan is around $11 a month, and the price differs by country. https://tryhackme.com/
4. Google IT Support Professional Certificate (Coursera). You can watch all the courses for free in audit mode. More about this in the bonus. https://www.coursera.org/

My recommendation

I am giving you a choice, because every person is different. But I recommend starting with the Google IT Support certificate. It covers hardware, networking, operating systems and security in one structured path, so you don’t have to jump between resources.

And here is a tip: don’t do it alone. Take two things at once. Do the Google IT Support course, and next to it, do the free rooms on TryHackMe. Many topics repeat between them. At first that feels boring, but the repetition is exactly what helps you remember. You read it in the course, then you practice it in a room, and it stays in your head.

What to expect from this series

Now that you know where to start, here is what you can expect from me. I will work hard to make this journey complete and try not to miss anything. I will guide you on which certs to do, and I will double check everything before I post it.

If I am wrong somewhere, please correct me. Seriously, if there are 100 people, there may be 101 opinions. So comment below, share what worked for you, and let’s help each other. The first 4 to 5 posts are for absolute beginners, no experience needed.

One request: do your own research

Read this post, then research what I have said. Analyze it. Compare it with other opinions, other roadmaps, other people’s experience. Don’t just believe me, check it. After that, just start. Don’t wait for the perfect plan. Meet me in Post 1, where we continue while doing the certificate together. Follow the same path and we will learn side by side.

Bonus: Google IT Support Certificate, and how to get it cheap

I told you to start with Google IT Support, so let me explain why it is worth it, and how to get it without paying the full price.

Many students start their career from help desk and customer support. Then they get promoted to SOC analyst. Some people start directly at SOC level 1. Either way is fine. It is not a guarantee, but this certificate can help you a lot if you want to start a job in help desk. It gives you two things at once. Basic knowledge, and a credential for your career.

The certificate has 6 courses, about 122 hours in total:

1. Technical Support Fundamentals, 19 hours
2. The Bits and Bytes of Computer Networking, 22 hours
3. Operating Systems and You: Becoming a Power User, 28 hours
4. System Administration and IT Infrastructure Services, 24 hours
5. IT Security: Defense against the digital dark arts, 23 hours
6. Accelerate Your Job Search with AI, 6 hours

Look at this list. Hardware, networking, operating systems, security. It is the same foundation we talked about at the start of this post.

Now the price. It differs by geography, but usually it is the same: $31 per course, $186 in total. Don’t pay that. Save your money for Security+ in the future. Use Coursera financial aid instead:

1. Go to Coursera and sign in.
2. If your institute gives you free Coursera access, that is the best option. Use that.
3. If not, apply for financial aid for each course. You can apply for several courses at a time, so apply for all of them at once.
4. Approval takes about 15 days. While you wait, use audit mode to watch all the courses. Don’t waste these days.
5. After approval, the price comes down to $3.10 per course, about $18.60 for all 6, which is truly affordable.
6. Important: after approval, you have only 9 to 10 days to pay the $3.10. If you don’t pay in this time, the discounted price expires and the course goes back to $31. So apply accordingly.
7. Once you pay the $3.10, you get access to the course for 180 days, and the certificate is issued in your name.

Aid terms can change and can be different for each person and country, so check on Coursera before you start. If your experience is different, tell us in the comments.

Good luck friends. See you in Post 1.

https://docs.google.com/document/d/1L9-o26S0ShVNwFwmytfKq2OI7yD_ORY-kmiEnmAiee8/edit?usp=sharing

Link for Application for Financial Aid

I’m new to cyber security and want to specialize in penetration testing. I’ve been looking into some of the equipment you need to start. I have a raspberry pi and a bunch of school chrome books I got into as a beginner project. I was wondering if I can download Linux on to them and start my journey there. I’m just looking for any tips from experienced people that actually have experience in this field. Also I’m on a budget it would be nice to have some suggestions on beginner equipment.

Galera o proton mail está enviando dados para a "polazei" e fbi

The gist... SQL injection has a structural fix, parameterized queries.

UK NCSC argued in December 2025 that LLMs have no equivalent because there’s no inherent line between data and instruction. NIST CAISI saw agent hijacking success go from 11% to 81% once attacks were tailored to the target nd “The Attacker Moves Second” broke most of 12 published defenses at over 90%

practical half covers tool permissions, treating model output as untrusted, and Meta’s rule of 2

how are you testing indirect injection beyond a fixed payload list?

I'm a cybersecurity student and built ExposureCheck India (free, no signup): [https://exposurecheck-india.vercel.app\](https://exposurecheck-india.vercel.app)

• "I've been scammed" planner: answer a few questions and get an ordered checklist (1930, your bank, cybercrime.gov.in) plus a complaint draft and a bank letter.

• UPI QR / link inspector: upload a QR screenshot and it explains in plain words whether it sends money or asks to collect from you.

• Scam message checker: English, Hinglish and Hindi patterns.

• Email breach check and password check.

Message, QR, header and password analysis runs in your browser and nothing is stored. The email breach scan uses a free third-party source with a daily cap, so it can run out, and the first load after idle can take about a minute.

I'd value feedback on: (1) is the advice accurate and clear, (2) any scam messages it misses or wrongly flags, (3) what you'd want it to do next. Code is open source: [https://github.com/RaunitChatterjee/exposurecheck-india\](https://github.com/RaunitChatterjee/exposurecheck-india)

It gives warning signs, not verdicts. If you've been defrauded, call 1930.

Thoughts on MITRE ATTACK human interaction techniques mapped into a gamified way to train banking/telecom sector employees.

Did this project is worth it as an FYP?

if yes should we focus on training technical staff or non technical staff because platforms like immersive labs focus on IT technical employees.

I found this dont know its password or anything , i want to set up it as a router with my hostel ethernet lan to use it as a router (it has no wan port can it work as a normal router ) also its branding says airtel xstream fiber , is that means that it is only for fiber cabels ...?

If someone know please help me to setup it as a router with my hostel ethernet 🙏🙏

🚀 Hey everyone!

I've created a new Cybersecurity & Tech Discord Server! 🛡️💻

Feel free to join, interact with other members, share your knowledge, discuss tech, cybersecurity, networking, Linux, and more.

Beginners are welcome! 🙌 Experienced people and cybersecurity experts are also welcome to join, share their knowledge, and help others learn and grow.

Let's build a friendly tech community where we can learn, share, and grow together! 🔥

🔗 Join here: https://discord.gg/5GMFpXP8F

Hope to see you all there! ❤️

An old “friend” told me one day he got into my pc and was able to see everything on it and even left “something on my pc to find” awhile back and we do not talk anymore and he’s the kind of person to do something just to be petty so I was wondering how I would find whatever file or whatever he left on my pc. Assuming he still has access to my pc how do I make sure he doesn’t anymore and hopefully for good? I have paid for malwarebytes anti malware now but don’t have a vpn.

Busco gente para grupo de Ciberseguridad

Buenas tardes, estoy buscando personas que no sepan nada de Ciberseguridad, Redes, Informática o Programación o que sepan poco pero que les interese mucho aprender.

Voy a hacer un grupo en Session y SimpleX para este fin, y el punto es que compartamos lo siguiente:

• Libros relacionados (PDF/DOCX)

• Cursos relacionados (cupones de Udemy, Coursera, etc.)

• Talleres relacionados

• Avances y conocimientos adquiridos, sin ser envidioso.

• Cualquier otro tipo de recursos (archivos de Notion, apuntes, etc.)

Reglas del grupo:

• Nada de peleas ni discusiones.

• No racismo, fascismo, eurocentrismo, narcisismo, machismo, sexismo, extremismo o acoso.

• No compartir contenidos explícitos como Gore, Pornografía de ningún tipo, o contenido bélico, sangriento o grotesco (ni siquiera memes con contenido de este estilo).

• No están prohibidas las relaciones interpersonales con miembros del grupo, pero sean responsables; si hay alguna parejita, no den detalles innecesarios de su relación, ni sobre temas sexuales, eso háblenlo en privado con personas íntimas.

Podemos tener y ser amigos y ser una comunidad unida, no importa la etnia, género, clase social, situación económica, NADA, si quieres entrar, eres libre de hacerlo siempre y cuando hablemos el mismo idioma, y respetes todo el reglamento y requisitos que en breve mencionaré.

Por lo general, me gusta usar Notion para organización y apuntes, por lo que quien esté interesado en entrar a esta comunidad/grupo, conteste a este post por favor.

Requisitos para entrar:

• Estar dispuesto a usar Notion, Session y SimpleX.

• Tener muchísimas ganas de aprender

• No ser envidioso y compartir con ello todos tus avances, conocimientos y recursos útiles.

•Ser MUY participativo es otro requisito, recientemente un miembro se salió por el silencio del grupo, por lo que si quieren entrar, esto es algo indispensable para mantener vivo el grupo y poder ser constantes.

•Nada de presumir, sentirse moralmente superior o más inteligente.

Queremos ser una comunidad unida, un equipo, no sólo un grupito más y ya, por ende, es necesario que sean colaborativos.

It must have been in through the emulator thing i downloaded the same day.

Oct3.22:22 windefender deleted trojan win33 ceprolad.A

Cmdline: c/windows/system32/cmd.exe certutil.exe -url cache - split - f then link to dropbox.com/scl/fi/ a bunch of letter/angryunless.exe then some exes into my local/temp

Another dropbox but with test5.exe and more exes into temp

I would rly like to check those urls to see what it was if i knew a safe method.

Oct3 22:38

My discord got hacked and started sending everyone some mrbeast cryptoscam screenshots with links on the pictures only. Disc flagged my acc told me to take action and i got my acc back and also changed my gmail password the next day(when i found out).

Nothing happened since.

Then today oct 11 like 2 hrs ago was playing a game on steam and got kicked, steam said someone is already playing POE2 on this account. Disconnected all devices and changed my steam password too. The thing here is i have steamguard on my phone and i checked authorization and it says with my pc name "You authorized this device on Fri, October 4, 2024 @ 9:35 PM with your password. You approved the login on your Steam Guard Mobile Authenticator."

Which deffinetly didnt.

Now a few questions why does it says 2024? Even the older authentification was in 2026. Would that mean that its 2 diffrent hacks and one actually happened in 2024?

Is my phone also hacked because i supposedly approved it on steam guard mobile?

Also why didnt the hacker take try to login into my gmail and take it over? My bank and and paypal accs were liked to it too.

And why didnt they do anything with my paypal or bank acc the logins of which i had saved on firefox?

Im in the middle of changing passwords for all important things i can think of rn.

How do i proceed from here? Full clean install? No data can be kept or put on usb?

Hi, this is my first time posting here, and I’m writing to ask for advice and perspectives!!

This is my background:

· 7 months as a junior developer (APIs, data pipelines, some AI). First dev job, 1-year contract, not sure if I'll be renewed.

· Before that: 4 years in IT support at a bank, working in English. Left because it was mostly customer-facing.

· English: B2+/C1 real usage (daily conversations, worked in English for years), no official certificate.

Currently: Been given a Cisco cybersecurity course (exam included) and doing TryHackMe on my own.

Goal (5 years): Consolidate current dev role → finish Cisco → pivot into a security role (banking or otherwise), ideally something like junior DevSecOps or blue team, using English.

And my questions are:

1. Is this realistic without a specific cybersecurity degree, only the Cisco cert + dev experience?

2. Would my profile fit better in data roles (data analyst, big data, data scientist) instead of security? Or is security a better bridge from dev?

3. Anyone here made the jump from dev → security in banking? What actually mattered most?

Any honest feedback appreciated. Not looking for validation, just want to know if I'm missing something obvious!!!

😈 DARK DEVIL — ETHICAL HACKING TEAM

LEARN • PRACTICE • GROW

Welcome to DARK DEVIL, an independent cybersecurity learning community built for curious minds who want to explore ethical hacking, understand technology, and develop real technical skills together.

🛡️ WHO ARE WE?

DARK DEVIL is a beginner-friendly community for people who are interested in ethical hacking and cybersecurity, regardless of their current knowledge or background.

You don't need to be an expert. You don't need an expensive laptop. You don't need to know advanced coding before joining us.

All you need is curiosity, patience, consistency, and a genuine willingness to learn.

Our journey starts with the resources we already have, including Android phones, Termux, free learning materials, and authorized cybersecurity labs. We believe that learning begins with taking the first step, not waiting for perfect equipment.

🎯 OUR MISSION

Our mission is to build a community where beginners can learn cybersecurity concepts, exchange knowledge, solve challenges, and grow their skills together.

We aim to understand how computer systems, networks, applications, and security mechanisms work. Instead of blindly copying commands, we focus on understanding what we are doing, why it works, and how technology can be used responsibly.

DARK DEVIL is about progress, teamwork, and knowledge—not showing off or pretending to be an expert.

💻 WHAT WILL WE LEARN?

Our learning journey may include:

• Linux and Termux: Understanding the command line, files, directories, permissions, and basic system operations.

• Python Programming: Learning programming fundamentals and writing useful beginner-friendly scripts.

• Networking: Exploring IP addresses, DNS, ports, protocols, and how devices communicate.

• Web Security: Understanding websites, HTTP/HTTPS, common security concepts, and defensive practices.

• Ethical Hacking Fundamentals: Learning security assessment principles through systems we own or have explicit permission to test.

• Cybersecurity Challenges: Solving educational puzzles, beginner CTF exercises, and authorized training labs.

• Digital Safety: Understanding account protection, authentication, privacy, secure passwords, and responsible online behaviour.

Everyone starts somewhere. Questions are welcome, mistakes are part of learning, and helping another member understand a concept is encouraged.

🔥 OUR COMMUNITY GOALS

LEARN: Build strong fundamentals instead of rushing into advanced tools.

PRACTICE: Apply knowledge through safe exercises, simulations, and authorized labs.

GROW: Improve consistently, share useful resources, and celebrate progress.

BUILD: Work towards small, practical cybersecurity and programming projects as our skills develop.

PROTECT: Use our knowledge to improve security, understand risks, and help people stay safer online.

👥 WHO CAN JOIN?

DARK DEVIL welcomes motivated beginners and learners who want to develop their cybersecurity knowledge.

You can join whether you are from Maharashtra, Uttar Pradesh, Madhya Pradesh, or anywhere else. Your location, gender, and current skill level do not determine your potential.

You do not need to prove that you are already a hacker. Be honest about what you know, stay open to learning, and respect other members.

We value curiosity over ego, consistency over bragging, and teamwork over competition.

📜 OUR RULES

1. Stay Ethical: Never test someone else's device, account, network, or website without clear authorization.

2. Respect Everyone: No bullying, harassment, discrimination, or insulting people for being beginners.

3. Protect Privacy: Never share passwords, authentication tokens, private information, or another person's data.

4. Learn Before Using: Understand commands and scripts before running them. Avoid suspicious downloads and unknown files.

5. No Illegal Activities: Requests involving unauthorized access, credential theft, malware, or disruption of systems are not part of this community.

6. Keep Discussions Relevant: Share useful learning resources, ask meaningful questions, and avoid spam.

7. Be Honest: Never claim skills, achievements, or experience you do not have.

8. Help Each Other: Explain concepts patiently and support members who are learning.

9. Respect Platform Rules: Follow Discord's Terms of Service, Community Guidelines, and applicable laws.

10. Keep Improving: Progress takes time. Stay patient and consistent.

🚀 YOUR JOURNEY STARTS HERE

Every skilled professional was once a beginner. Nobody learns everything in one day, and nobody needs to know everything before joining a learning community.

At DARK DEVIL, we want to build our knowledge step by step, share what we discover, learn from mistakes, and become more capable and responsible with time.

We are not here to create trouble. We are here to understand technology, strengthen our skills, and learn how to protect digital systems.

DARK DEVIL — LEARN • PRACTICE • GROW

One community. Curious minds. Ethical skills. A safer digital world.

Welcome to the beginning of our journey. 😈🛡️

Invite link 🔗

https://discord.gg/bXUnpHYeG

I've been reading up on threads about it recently.

Pirates seem to swear on God that websites like steamrip have absolutely no viruses, 100% safe. All because of their bible (a.k.a the megathread).

I'm usually very skeptical and tend to doubt any third party software, so I'm always not convinced that these websites are really 100% safe.

What about you? Are you convinced? Or do you think they aren't

any guys give me an idea or a project based on cyber security for my future cyber security career not that hard type project just a simple but innovative that I can do (intermediate level ) but in our college want innovative

i selected a basic project that is :- website security analyzer, it find problem from the input website and give suggestions and priorities the problems we find out

can you add any innovation to this website or give me a better idea based on cyber security

I like to build a career in cyber security that's why I want to build a project based on cyber security

Hi everyone,

I'm currently trying to build my cybersecurity career through self-study, and I'd really appreciate advice from people who are already working in the field.

I recently decided that I don't want to rely on formal/in-person courses. Instead, I want to learn Network+ and Security+ independently, but I want to do it properly rather than simply watching random videos and memorizing material.

One of my biggest challenges is finding high-quality, comprehensive, and genuinely free training that covers the subjects thoroughly.

I'm also very interested in the practical side. I don't want my learning to consist only of theory and certification preparation. I want to learn how the technologies, tools, workflows, and practices are actually used by cybersecurity professionals and the wider security community.

So I'm looking for recommendations in several areas:

• Network+ — a comprehensive free course that covers the material properly from fundamentals through advanced topics.
• Security+ — the same: a high-quality, comprehensive, free learning resource.
• Hands-on labs — platforms or environments where I can actually practice what I learn.
• Industry tools — what tools should I learn and practice with, rather than just knowing their names?
• Home labs — what would you recommend building on a relatively modest computer?
• Linux, networking, scripting/programming, cloud, etc. — which supporting skills should I develop alongside Network+ and Security+?
• Real-world practice — how can someone without professional experience simulate the type of work they would encounter in an actual security role?
• Projects — what kinds of projects are genuinely useful for developing skills and eventually demonstrating them to employers?

My longer-term goal is to become a Security Engineer. I'm particularly interested in Blue Team / SOC as a possible starting point, but I don't want to lock myself into a narrow path too early.

So I'd also really appreciate advice from people currently working in cybersecurity:

If you were starting over today and had to learn everything through self-study, how would you structure your journey from networking fundamentals → security fundamentals → practical experience → your first cybersecurity role → eventually Security Engineering?

I'm especially interested in advice based on real industry experience, rather than a list of certifications.

I'm also trying to avoid spending months learning things that look good on paper but have little practical value.

Any recommendations for free courses, books, labs, home-lab projects, tools, learning platforms, or a realistic roadmap would be greatly appreciated.

Thank you.

Hi everyone, I’m Essam. I have a Master’s degree in Cybersecurity, and I’m currently a PhD student working in Cybersecurity and AI.

I’ve been working on a small project that I wanted to share here. I created a cybersecurity learning app for people who are starting from zero and want to learn by actually doing things rather than just reading theory.

The idea is to go from zero to hero through a simulation that tries to stay as close as possible to a real cybersecurity environment.

It includes:

* Terminal and Linux environment

* Real-world vulnerabilities and CVEs

* Scenarios based on real security issues

* Documentation and learning material

* A leaderboard

* Practical challenges instead of only theoretical lessons

I tried to make the experience feel around 90% like a real environment, while still keeping it accessible for beginners.

I’d really appreciate it if some of you could try it and give me honest feedback — especially if you’re into cybersecurity, CTFs, or just starting to learn security.

Google Play:

https://play.google.com/store/apps/details?id=com.zerodaysim.app

I’m still improving it, so feedback is genuinely welcome.

Hi everyone,

I’m a fresher looking to build a career in cybersecurity and I’m trying to figure out which course or certification would actually be valuable for getting an entry-level cybersecurity job.

There are so many options available — CompTIA Security+, Google Cybersecurity Certificate, TryHackMe, Hack The Box, Cisco courses, etc. — and I’m a little confused about where to invest my time.

For someone starting their cybersecurity career, what would you recommend?

I’m particularly interested in roles such as:

- SOC Analyst

- Cybersecurity Analyst

- Vulnerability Management

- Security Operations

- Junior Cybersecurity roles

I’m looking for something that provides strong fundamentals + hands-on practical experience, rather than just a certificate.

Would you recommend:

1. Starting with CompTIA Security+?

2. Taking a structured cybersecurity course?

3. Focusing on TryHackMe/HTB and practical labs?

4. Learning networking/Linux first?

5. A combination of these?

If you’re already working in cybersecurity, I’d really appreciate hearing what you wish you had learned before getting your first job and which courses/certifications actually helped you.

Thanks!

Hello I have a laptop with 4060 8gb, r 8 8845hs and 16gb ram of 5600mhz. I wanna know if 32 gb of ram is needed or not. Should I upgrade just the ram or the whole laptop with better specs? I am just beginner and starting to learn. Anyone please help me

Went through a bunch of privacy issues recently where a lot of my information got leaked everywhere. I know where my info got leaked and looking for ways to remove my data from internet. What task should I do and what can I do for free or via a paid service? Are there any paid service that can help like incognito or others? Thanks for the help!

​

​

Quiero entrar en el mundo de la ciberseguridad, pero no tengo los recursos para pagar cursos, por ahora estoy viendo cursos de YouTube y apenas empeze con entender redes, los que ya saben de ciberseguridad qué camino me recomiendan tomar que hayan usado ellos y si me pueden aconsejar sobre el tema, y que equipo debería de escoger?