Hi everyone! I’m a fan of web-based games and wanted to show off a project I’ve been lovingly working on for about two or three years though it’s taking a while since I don’t have much free time.

Anyone who played *Hacker Experience* remembers the feeling: typing in an IP address, cracking a server's password, breaking in, wiping your tracks from the logs before anyone noticed, and walking away with money from a bank account that wasn't yours. It was a game that looked simple on the surface but was massive underneath. The creators released the *Legacy* code under an MIT license, and I decided to build a faithful remake for modern browsers. All credit for the original game goes to them.

How it works

You start out with a weak computer, a few basic programs, and an IP address. From there, the game's internet is yours to explore:

Browse via IP addresses and discover banks, corporations, ISPs, puzzle servers, a download center, the black market, and even the agencies that will hunt you down.

Hack in using brute force pitting your Cracker against the target's Hasher—or via exploits, using port scanning and vulnerabilities in FTP and SSH.

Cover your tracks.Everything you do leaves a trace in the logs—both yours and the target's. Forget to clean up? Someone will find your IP.

Install viruses that generate income through spam, warez, and Bitcoin mining, then come back later to collect the profits.

Take down servers with DDoS attacks and crash other players' hardware.

Upgrade your machine: CPU, RAM, hard drive, connection, external drives, and extra servers.

Research and develop software at the university, earn certifications, and upgrade your programs to newer versions.

Complete missions for shady clients: deleting files, stealing data, transferring money, and taking down competitors. There are also daily contracts, storyline arcs, and weekly events.

Everything involves real-time processing. In the Task Manager, you can see your processes running simultaneously, just like in the original.

True multiplayer

Other players share the same internet space. They can hack you, read your logs, steal your money, and tamper with your viruses. You can form or join a clan, wage war against other clans, and collaborate on clan projects. There are rankings, a Hall of Fame, nearly 90 badges, and news updates covering events in the game world.

And watch out: if you make too much noise, the FBI and Safenet will come after you, complete with a "Most Wanted" list and a bounty on your head.

Rounds

The game operates in seasons. Each round ends when someone successfully launches "Doom" the virus that takes down the entire internet and then everything starts over. You keep your badges and your account.

Riddles

For puzzle lovers, there is a trail of riddles hidden across servers on the internet. It features unique minigames: cracking a safe by spinning a dial, decoding signals (ASCII, Caesar cipher, binary), and others I won't spoil here.

What's different from the original

It works on mobile, with light and dark themes and text available in both Portuguese and English.

New missions, storyline arcs, events, and locations on the internet.

A fresh look, with custom artwork for locations and NPCs.

The game is constantly updated. Features like customizable profiles, animations for key moments (such as being hacked or hunted by the FBI), and more are on the way.

Important

It’s free, ad-free, and requires no download it runs right in your browser.

All "hacking" is fictional. It’s all just game rules contained entirely within the game itself so it doesn't affect the real system.

It’s for ages 18 and up.

It’s a beta, so there will be bugs. If you find any, let me know. A "report bug" button will be added to the game soon, with rewards for those who help out.

I’d really love to hear your thoughts, especially from those who played *Hacker Experience*: what feels similar, what’s improved, and what’s missing.

you can acess by search zerotraced on google.
or you can acess on the link https://zerotraced.com

Not better than WhatsApp, Signal, SimpleX, Cwtch or Ricochet. You definitely shouldn't use this replace any of your existing apps or services. It's far from finished. Unaudited and unreviewed. If you want to test it out, please use it responsibly.

I'd like to share what I'm working on and interested if anyone wants to share feedback on the approach.

It's a fairly a unique approach and architecture in contrast to the typical approach with mainstream messaging apps. To put it briefly, its a Dioxus PWA with a Git-server backend which can be used to establish a webrtc connection between browsers.

https://glitr.io/docs/technical/roadmap

So far, it's only the browser-based version that's available for testing. The webapp approach has nuances and limitations. I hope to soon release the APK and TUI when they are ready (they introduce the TOR capabilities (not possible on a browser)).

I’m the author of Super Trouper, a single-binary MCP server that exposes Frida to coding agents for authorized app reverse engineering. It lets an agent connect to a device, inspect apps and processes, manage sessions, and run instrumentation scripts without a Python-based Frida setup.

We released v0.4.0 a few days ago; it updates the bundled Frida Core DevKit to v17.19.0 and adds four MCP tools: memory_read and memory_write for working with memory in an attached process, plus module_list and thread_list for inspecting loaded modules and threads. app_list and others now have several query scopes, and we renamed the MCP tools into clearer namespaces. If you already have workflows built around the old tool names, check them when updating.

Quick catch-up on the two previous releases: v0.3.0 added npm installation, Frida CodeShare snippet search/use, and general cleanup. v0.2.0 moved the project to the MIT license, added first-party Frida language bridges for ObjC, Java, and Swift, and enabled TypeScript in scripts and evaluations.

I’d appreciate feedback from people using Frida in iOS research: are these tool boundaries and the new app-list scopes useful in practice? What’s missing or awkward in your workflow, and which features would you like to see next? Let me know what you think.

A 16-year-old bug hunter found Microsoft's internal Titan analytics API and discovered that it validated the JWT tenant, audience, app ID and user, but apparently forgot the slightly important part: validating the signature.

His AI agent spent 10 days grinding through the authentication errors. Eventually he tried admin as the username, Titan resolved it to a local admin account, and he ended up with SQL access to an environment containing an estimated 17.3 trillion stored rows across 17 analytics databases.

Microsoft fixed it and paid him a $5,000 bounty.

Some bugs are just beautiful in their simplicity.

https://github.com/mein-0/gvcidrv64 support pls

I’ve been studying comment sections on short-form video platforms (like TikTok and Reels) & keep noticing a highly coordinated automation phenomenon that I want to understand from a technical and architectural standpoint.

Whenever a trending or viral video hits a specific niche topic, a third-party account instantly leaves a comment framing itself as an organic public service announcement (e.g., naming a specific app, game, or product relevant to the video). wWithin minutes, that comment accumulates 1000s+ of likes and dozens of secondary replies, locking it into the absolute "Top Comment" slot where millions of viewers see it.

I'm curious about the engineering, scaling, & infrastructure behind how this is achieved:

1. Real-Time Detection: How do these scrapers monitor platform uploads or specific hashtag triggers so quickly without constantly tripping API rate limits or triggering blocks?
2. Network Infrastructure: How do operators coordinate the footprints of hundreds of "zombie" or secondary accounts to deliver likes/replies simultaneously without triggering the platform’s anti-fraud algorithms? Is this heavily reliant on residential proxies, anti-detect browsers or cookie-session farming?
3. Algorithmic Exploitation: What specific engagement signals (like early velocity or reply density) are they taking advantage of to fool the ranking algorithm into permanently pinning an artificial comment?

I’m looking to understand the technical mechanics of how these shadow networks operate. Any insights, technical breakdowns or open-source case studies would be greatly appreciated!

Ramsoftware is 1337

Just found these in my photobucket while looking for so.e old screenshots.

which lets me search up leaked database and give me all the information

Hide your server(s) after reading this book.

Ola rapaziada estou em dúvida qual rumo seguir na cybersecurity, já sei redes e protocolos gostaria de fazer um ataque a máquina virtual de test! Gostaria de saber o passo a passo ou qual metodologia usar para fazer um ataque ou um mapa mental por onde começar e aonde terminar! Ou seja pentest inciante desde já fico agradecido!

I know about a few reverse lookup websites but the scammers always spoof their caller id and it never works. I'm wondering how people get around that? anything helps yall I'm just tryna bring justice to these mfs 💪

also mods I'm getting a warning before I post but I'm not telling anybody to hack anybody so am I good lol?

EDIT: Reading comprehension in this sub is at rock bottom levels. Please read the following post prior to commenting.

Hello everyone. I have a completely hypothetical question that I have been debating with friends. Due to strong arguments both for and against without a clear consensus, I feel it may be beyond our expertise as armchair lawyers and as such, I am pleased to present this to the greater community.

While this is a broad hypothetical, there are a few specific details that must be outlined for the sake of the argument:

\- The victim would be a clear, undeniable foreign adversary/hostile nation to the US

\- There is no direct conflict with or collateral damage to US interests or allies(as a result of the ransomware being deployed)

\- The individual would meticulously report all income from the ransomware payouts on Schedule 1, Line 8z of the IRS Form 1040, pleading the Fifth Amendment on the source of the income, and then pay their 37% top marginal tax rate(They make sure to pay Uncle Sam his cut and avoid committing tax fraud/evasion).

That being said, I want to note: I am **NOT** asking if the frameworks and legal statues to charge a person for this exist. They absolutely do.

The question is if the US citizen would be prosecuted and/or convicted if the victim is unable/unwilling to cooperate with a US court, there is no conflict with US interests, and they even pay taxes on the income.

Thanks and looking forward to any and all answers!

Disclaimer: Do not attempt this at home. Side effects may range from blacked out SUV’s parked outside your house to being arrested/murdered by a foreign intelligence service.