HF is the #1 online hacker community.

Hack Forums
Joined July 2009
Ever wanted an AI that doesn't just talk cybersecurity but actively helps you break into systems? Meet GLM-5.3-CYBERSECURITY-FP8, a specialized text-generation model for offensive security, red teaming, and pentesting. It's refusal-removed, so it's built to assist without holding back. #AI #CyberSecurity
58
455
49
4,831
303,457
🛑 ALERT - WordPress sites are under active attack. Attackers are exploiting the #wp2shell chain to gain unauthenticated RCE on vulnerable stock installations, with no plugins required. Public exploit code is now fueling mass scanning and web shell deployments. Read what defenders should check: thehackernews.com/2026/07/wo…
15
142
13
446
65,532
When it looked like Session might disappear, you stepped up. Thanks to your donations, a small team of developers has started work on Session again 💚 But the project is still in survival mode. More support means more developers, and faster progress on the features you're waiting for, from Pro to post-quantum cryptography. getsession.org/donate
20
87
7
503
22,866
A Swedish VPN company got physically raided by police who seized their servers looking for user data. They found nothing. Not because Mullvad got lucky. Because they built the entire company so there was never anything to find. Since 2009 they haven't collected an email, a name, or a password from a single customer. You sign up by generating a random 16 digit number. That number never touches your identity anywhere. Their servers run entirely on RAM instead of disks, so the moment a server powers off, everything on it is gone. Police can walk out with the hardware and walk away with an empty box. The raid became their best advertisement. A company can't leak what it never had. It can't be subpoenaed for logs that don't exist. It can't quietly hand your history to anyone, because there is no history sitting anywhere to hand over. 5 euros a month. Fully open source apps you can read line by line. 18 audits and counting. Most VPNs promise privacy. This one got tested by an actual police raid and passed. mullvad.net
79
489
42
3,727
222,846
UID 1 retweeted
YOU COME FOR THE KING, YOU BEST NOT MISS L BOZOS
6
4
1
63
2,761
UID 1 retweeted
🌴☀️ HF Summer Kickoff Giveaway ☀️🌴 Drawing: June 1st 💰 Prizes Include: 🏆 $250 Crypto (upgraded member) 🏆 $100 Crypto (non-upgraded member) ⭐ 5x Perm L33t Upgrades 👑 5x Perm Ub3r Upgrades 🟢 50,000 Bytes 🍀 5x Lucky Awards 🏅 1x Custom Award Ownership w/5 grants (Ub3r only) 🎟️ How to enter? The more you post & create threads on HF, the more entries you earn. 🔥 More activity = better chances to win. ⚠️ Rules/prizes subject to change in case of abuse, mistakes, or exploitation. Spam posting may result in disqualification. Good luck everyone 🎉
🤖 Made with AI
3
1
1
978
Replying to @BraedenSorbo
Unless mistaken identity -- the doctor likely didn't appear from out of the blue. Likely the doctor knew him well enough before doing that; lawsuit would be great if wrong. We need more of this not less. We just need safeguards; maybe two doctors on call with the police.
64
1
33
21,214
Nitrux 6.1.0 might be the most INSANE Linux release of 2026. This is not a normal distro update anymore. It’s basically an entire next-gen Linux ecosystem shipping at once. • Linux kernel 7.0.8 • Hyprland 0.55.1 • Qt 6.10.2 • KDE Apps 26.04.1 • KDE Frameworks 6.23 • NVIDIA 595 drivers • Wayland-first desktop stack • massive MauiKit 4.0.3 overhaul But the deeper you read the changelog… the more ridiculous it gets. Nitrux added: • Valve’s dmemcg-booster tech • YubiKey support for LUKS • U2F PAM authentication • realtime scheduling support • Raycast-style launcher integration • x86-64-v3 optimizations • PipeWire latency tuning • deep Hyprland + Wayland optimization And the built-in apps got HUGE upgrades: • browser security hardening • encrypted password manager • ad/tracker blocking • split-view persistence • better terminal rendering • Photos-style image editing • markdown split-view notes • smarter media management Honestly… Nitrux doesn’t even feel like “just another Linux distro” anymore. They’re building their own entire Linux platform.
8
16
1
206
20,841
You needed to merge two PDFs last week. You Googled "merge PDF free." You clicked the first result. You uploaded your tax return and your pay stub to a website you had never heard of. It merged them in 3 seconds. You downloaded the file and moved on. You never thought about what happened to your documents. They were uploaded to a server in a country you cannot name. Processed by software you cannot audit. Stored for a duration nobody disclosed. Your tax return. Your pay stub. Your salary. Your signature. On a stranger's disk. Forever. You did this voluntarily. In under 10 seconds. Without reading a single word of fine print. There is a tool that does everything those websites do. On YOUR computer. Your files never leave your machine. It is called Stirling-PDF. 77,100+ stars on GitHub. 25 million+ downloads. The #1 PDF application on all of GitHub. Here is what it does: → Merge PDFs. Split PDFs. Compress PDFs. Rotate and reorder pages. → Convert PDFs to Word, Excel, PowerPoint, and images. And back again. → Add passwords. Remove passwords. Flatten forms. Sanitize metadata. → Sign PDFs with a drawn signature, typed name, or digital certificate. → OCR scanned documents with Tesseract to make them searchable. → Add watermarks, page numbers, headers, footers, and stamps. → Redact text and images permanently. Crop, deskew, and repair. → View and annotate PDFs directly in your browser. → No-code automation pipelines to batch-process thousands of files. → REST API for every tool. Automate every operation. → Desktop app for Windows, Mac, and Linux. No browser needed. → One Docker command to self-host everything. Here's the wildest part: Adobe Acrobat Pro costs $19.99 per month. That is $239.88 a year. Acrobat Studio: $24.99 per month. That is $299.88 a year. Smallpdf Pro: $108 per year. iLovePDF Premium: $60 per year. A 10-person team on Adobe pays $2,660 a year to edit documents. And every single one of those tools processes your files on THEIR servers. Stirling-PDF processes everything locally. Your files exist on your machine. The server sits on your hardware. The network stays inside your walls. 77,100+ stars. 6,700+ forks. 175 releases. 4,900+ commits. 48% TypeScript and 43% Java. MIT-licensed core. Self-host it. Fork it. Ship it. 100% Open Source. (Link in the comments)
85
343
12
2,462
209,294
🚨🇮🇱 EL MOSSAD HA SIDO HACKEADO 🇮🇱🚨 Un grupo d hackers autodenominado «Anonymous for Justice» afirma haber hackeado bases d datos,laboratorios y planos d armas israelíes. El grupo también publicó archivos con documentos y fotos q pertenecen a oficiales y científicos israelíes.
415
11,747
355
41,657
1,400,943
UID 1 retweeted
🗻 The Hitchhiker’s Guide to Online Anonymity Guide: anonymousplanet.org/guide/ Author: Anonymous Planet #opsec
2
123
1
818
30,588
Affordable hardware hacking kit github.com/twelvesec/PwnPad
2
102
3
718
24,803
Your brand new Windows laptop came with dozens of apps you never asked for. - Ads in your Start menu. - Telemetry tracking every click. - Bing hijacking your search bar. - Microsoft Copilot you can't turn off. - Recall taking screenshots of everything you do. One script removes all of it. It's called Win11Debloat. Not a sketchy optimizer from a pop-up ad. A lightweight PowerShell script that strips Windows down to what it should have been from the start. Here's what it removes: → Bloatware apps — Candy Crush, TikTok, Instagram, Clipchamp, Teams, and dozens more → Telemetry — diagnostic data, activity history, app-launch tracking, targeted ads → Ads — tips, tricks, suggestions in Start menu, Settings, notifications, and lock screen → Bing — removed from Windows search, your search bar searches your computer again → Microsoft Copilot — disabled and removed → Windows Recall — the AI that screenshots everything you do, disabled → Edge clutter — ads, suggestions, and MSN news feed, disabled Everything that actually works stays. Your apps. Your files. Your settings. Nothing breaks. One command. That's it. Your laptop is clean. Works on Windows 10 AND Windows 11. Microsoft spent years adding things to Windows that nobody wanted. This script spent years removing them. 43,800+ stars on GitHub. MIT Licensed. 100% Open Source. (Link in the comments)
104
824
47
4,243
440,624
Kali Linux Ultimate Hacking Tools Cheat Sheet (20 Tools) From reconnaissance to exploitation, from wireless attacks to forensics this all-in-one Kali Linux cheat sheet covers 20 of the most powerful tools every ethical hacker should know. #kalilinux #ethicalhacking #hexsec
7
88
429
16,296
ANTHROPIC HAS OFFICIALLY BANNED OPENCLAW USAGE!!! no this is not ai-generated Starting April 4, users will no longer be able to use their Claude Subscriptions for third-party harnesses including OpenClaw. THIS IS CRAZY. 👇
Readers added context they thought people might want to know
Claude subscriptions no longer cover usage on third-party tools like OpenClaw starting April 4, but they can still be used with API keys or discounted extra usage bundles. x.com/bcherny/status… support.claude.com/en/articles/13…
448
254
192
2,333
640,446
UID 1 retweeted
Holy shit… 4TB of job INTERVIEWS, RESUMES, and AI SECRETS just leaked from a $10 BILLION startup. MERCOR uses AI to match people with high-paying gigs and literally records your face, voice, KYC docs and keeps it forever to “match” you with jobs. Your FACE + VOICE + ID could be on the dark web right now. Hackers (Lapsus$) claim they stole 4 TB through the company’s Tailscale VPN: - 211 GB of candidate resumes and personal data - Terabytes of video interviews + passport + KYC docs - Almost 1 TB of source code damn that Claude Mythos "God Tier" at Cyber stuff got into the wrong hands lol
Mercor AI has allegedly been breached by Lapsus 939GB of source code 4TB of data in total All data from their TailScale VPN @mercor
86
500
77
2,641
400,039
UID 1 retweeted
Solo dev reverse-engineered Google's billion-dollar algorithm in 7 days Google published the paper that crashed memory stocks worldwide. Then shipped zero code. Tom Turney read the math, opened his terminal, and built the whole thing with Claude - then made it faster than Google promised. Day 1-3: Core algorithms, 141 tests, Python prototype Day 3-5: C port into llama.cpp, Metal GPU kernels Day 5-7: Speed optimization from 739 to 2747 tok/s That's a 3.7x speedup through pure engineering: > fp32 → fp16 WHT > half4 vectorized butterfly ops > graph-side rotation > block-32 storage layout Then he added his own research on top: > Sparse V: skip 90% of value decompressions at long context > Asymmetric K/V: keep keys precise, compress values harder > Temporal decay: old tokens get lower precision automatically Result: 35B model running on a MacBook with 4.6x compressed cache. 613 GitHub stars in a week. Google still hasn't released their own code.
161
1,151
111
8,953
1,665,140
Run a Linux virtual machine in your browser. No setup. Open-source. github.com/leaningtech/webvm
20
182
4
1,140
71,513
UID 1 retweeted
Ok Clawdbot is insane. People can't stop building and founders are making money with it. 10 wild examples + how to setup (No-code required guide in ~30 minutes). Bookmark this👇
194
714
50
6,635
951,428
UID 1 retweeted
🚨BREAKING: U.S. SEC REMOVES CRYPTO FROM ITS 2026 PRIORITY RISK LIST BULLISH FOR CRYPTO
403
864
251
5,326
3,415,963