So im new to this community and i would like to ask help, can yall improve my code so it would work faster and correctly.

import itertools
import string

def guess_password(real):
chars = string.ascii_lowercase + string.digits
attempts = 0
for password_length in range(8, 9):
for guess in itertools.product(chars, repeat=password_length):
attempts += 1
guess = ''.join(guess)
if guess == real:
return 'password is {}. found in {} guesses.'.format(guess, attempts)
print(guess, attempts)

print(guess_password('abc'))

Okay so basically I need help getting into my mans facebook and snapchat and I dont wanna explain fully on here but if you message I wouldn't mind sharing Is this possible to do?

Last month I was demoing a client app on a staging project. Mid-demo, I see that my project was paused. Restoring it in front of people was not a great few minutes.

I already knew the inactivity timer watches Postgres activity, not API gateway traffic. The fix is a real database hit on a schedule — something that actually runs a query, not just a network request that bounces off auth or storage.

There are ways to set this up yourself. When you have several projects it got tedious, and the part that really bothered me was finding out late that something had broken for a different reason.

So I built SupAntiPause. It pings each project on a schedule — that's a real Postgres query so it counts toward the activity threshold. You give it the Project URL and the public anon key. It never asks for the service_role key.

If a project was healthy and a ping fails, you get one email listing what went wrong. It also shows ping history, status codes, and latency. You can see all your projects in one monitor.

1 project is free, no card. Paid plans start at $5/year

Stack: TanStack Start, React, Supabase (auth, database, RLS), Paddle for payments, Resend for email alerts, Vercel for hosting.

Honest feedback welcome — what would make this actually useful for your workflow? Thinking about adding Discord/Slack webhook notifications alongside email. Anything else you'd want before adding something like this to your stack?

www.supantipause.com

Estuary's managed CDC is impressive, but I am less sure about their analytics layer. It feels like the platform is great for moving data around, but not as mature for actually querying it in real-time for a user-facing app. Has anyone used Estuary for the full stack, from ingestion to user-facing API? Is the analytics performance there, or should we use it just for the data movement and find a better tool for the query layer?

basically i forgot my password and there is no other way to get in the email, because i made it years ago but i need the email, i dont remember my password, and is there i way i can hack it and get my password. any tools or any way to get the password would be helpfull

We were about to sign with Rockset, but the OpenAI acquisition has us very worried. The news about them shutting down their service for existing customers is a huge red flag. Even if they keep it running, it's clear their focus is now elsewhere. Has anyone else been burned by this? What are the best alternatives that offer that same 'real-time' feel without the risk of being acquired and shut down by a giant?

I received a message from one of my Hinge matches that he received a call on Google meet from an email address. That email address was extremely similar to my email address. Now the question is who the hell got to know my email address and made one that was almost identical and then got access to my contacts or my whatsapp?? And then tried to call one of my contacts? Has this happened to anyone before? Has my phone or laptop been hacked?

Is it possible for someone to find out your personal details if they can see your account on a dating app like Hinge or Bumble?

I’m willing to pay, there’s a app that’ll pay over 3k for me to play their game and get to a certain level, but it’s impossible, gotta play 8+ hours daily for 30 days. can someone create a bot for me or something?? I’ll pay, n can show you the app.

[ Removed by Reddit on account of violating the content policy. ]

Hey, i have a person who’s threatening to ruin my entire life, job, relationship using deepfakes and some dark technology. I have their full name, phone number, citizenship, date of birth. Is there anyone who could help me locate this person?

so basically my school has created a link where it shows the ranking of students using their roll no but there is a system called faculty view which can show the names of the students alongside their roll no i have the intel that its a 8 digit password and all numbers and its known to all faculty so it should be something easier to remember maybe i need help guys its a google app scipt btw if this helps

I want to announce a new pentest learning platform: Knossos

I’ve been working on this lab for a bit - I’ve always wanted a better server platform for people to learn pentesting on, besides simply spinning up VMs, and I finally had the opportunity to build it.

Based on the lessons in my books, I built Knossos to have over 2 dozen servers, three networks (DMZ, Internal, Private), and 33 pentest challenges. It emulates an enterprise environment, and the best part is it’s all wrapped up in a single docker deployment. A couple commands, and you have an entire, complex network to learn hacking against.

This is the lab I wish I had when I was trying to learn pentesting over two decades ago. For those that don’t know, I created one of the first exploitable virtual machines: De-ICE. I spoke on the De-ICE discs at DefCon 15, which later spawned the books - the most recent version of "Professional Penetration Testing" is the 3rd edition. This has been an incredible journey over the last couple decades, and I’m excited to bring you Knossos - the next generation of pentesting labs.

LMK if you give it a try and what you think. Thanks!

- Tom Wilhelm

VictoriaMetrics is fantastic for Prometheus-style metrics, but can it handle general-purpose, user-facing analytics? We need to build a dashboard that involves complex queries and non-metric data. It feels like VictoriaMetrics might be too specialized for this. Has anyone used it for more than just monitoring? Or is there a better tool that handles both metrics and general analytical data with the same level of performance?

Hey everyone!

I've been developing a project called CatSuite, a free Android application designed for web application security testing and HTTP traffic analysis.

The idea started with a simple question: how much of a web pentesting workflow could I bring to a smartphone without depending on a desktop environment?

CatSuite currently includes:

• HTTP/HTTPS Interception — Capture, inspect, and modify web traffic.
• Repeater — Edit and resend HTTP requests to analyze server responses.
• Intruder — Automate request variations using custom wordlists.
• Endpoint Discovery — Explore web paths and API endpoints.
• JWT Decoder — Inspect JSON Web Tokens.
• SSL/TLS Analysis — Examine certificates and connection security.
• Technical Browser — Inspect requests, cookies, storage, and User-Agent information.
• API Testing — Work with REST endpoints directly from Android.
• Export Tools — Export captured data in HAR, JSON, TXT, and cURL formats.
• JavaScript Extensions — Extend functionality through scripts.

The goal isn't to claim that a smartphone replaces a full desktop pentesting environment. It's to make common testing and inspection workflows more accessible when you're away from your computer.

The app is already available for free on Google Play.

Project: https://netcattest.com/catsuite

Google Play: https://play.google.com/store/apps/details?id=br.com.netcattest.catsuite.app

It's intended for security research, learning, and testing systems you own or are authorized to assess.

I'm especially interested in feedback from people who regularly work with Burp Suite, OWASP ZAP, or mobile security tools.

What functionality would make an Android pentesting toolkit genuinely useful in your workflow?

I'd appreciate technical feedback, feature suggestions, and criticism.

QuestDB is incredibly fast for simple time-series ingestion, but we are finding the SQL support to be a bit limited for our more complex OLAP queries. It seems to be missing some advanced window functions and join types that we need for our analytics dashboard. Has anyone used QuestDB for more than just simple monitoring? Is the feature set catching up, or should we look for a more mature OLAP database that is still fast?

Hello guys, is there a way to find out atleast the area of where a person called me? It was not a "no caller id" i have the number i just dont know from which area of my country. The caller tried to fuck up my relationship so it would be very helpfull if there was a way to help me.

Thank you all for your time! All love

I've trying to learn about hacking for 4 weeks watching tutorials doing tasks on tryhackme but but recently i scanned an ip of a website and i froze after that i noticed how less i know it was so different from tryhackme environment there were more ports but real websites don't those. I know its a skill which is not learn in a month or two but i want to know if i am learning the right way or not. If you have any suggestions please drop it below. I would really appreciate it.

Hello, I am facing a problem and need a solution.

​I downloaded the Kali Linux VirtualBox version as well as the Hyper-V version. I tried extracting the compressed Kali file, but all archive extraction tools failed. I also attempted to convert the Hyper-V version to a VirtualBox format, but that failed as well.

​What do you think is the solution?

Hello, I am facing a problem and need a solution.

​I downloaded the Kali Linux VirtualBox version as well as the Hyper-V version. I tried extracting the compressed Kali file, but all archive extraction tools failed. I also attempted to convert the Hyper-V version to a VirtualBox format, but that failed as well.

​What do you think is the solution?

Hy zusammen

Ich werde von den Kindern meiner Vermieter vom schlafen abgehalten die letzten 1. 1/2. Jahre nicht mehr als 3std am Stück sie nutzen irgendein Gerät das ein sehr hohes fiepen um die 120hz. Erzeugt. Ich bin ein absoluter noob in Technik Fragen und hab mich grob im Internet schlau gemacht und bin auf den. Flipper und die deauther watch gestoßen. Sie können das gerät steuern daher die frage sind die Geräte das richtige für mich um diese Geräte zu stören oder habt ihr andere Vorschläge die mir helfen können.

Danke im voraus

InfluxDB was our first choice for metrics, but the cardinality explosion is killing us. As soon as we add more tags, the performance drops significantly and memory usage spikes. Also, the learning curve for Flux was a bit much for our team. Has anyone found a way to manage high cardinality in InfluxDB, or is there a better tool that uses standard SQL and handles high series cardinality without breaking?

The same thread can be adapted for AWS MSK or Confluent. The user wants to preserve the current layer and simplify ingestion, transformations and serving downstream.

Hello. In your oppinion, which is the best AI for ethical hacking? I mean, which one answers your questions without that specific fear of AIs that you are going to hack half of Pentagon whith a shity script?