QWERTY

 

Current Exploits / Tutorials / Releases

(06-16-2025) -

(06-12-2025) - The end of AOSP? , well its gotten even harder for development to persist on custom roms for pixel devices like GrapheneOS , as off 6/10 google released android 16 aosp but without device trees or drivers, leaving developers in aw with this sudden and drastic change.

(06-11-2025) - PostmarketOS v25.06 released for testing.

smb

(06-07-2025) - Decentralizing from streaming services.... Time has come for us to own our media again and stop paying for stuff that would never be yours and are out of your control. Why pay for music subscriptions to a corporation , when you could support the artist by buying physical media and ripping the files from the CD into your personal mp3 player like a walkman or iPod , I personally have a ipod classic 5th gen with custom rockbox firmware that allows for drag and dropping without itunes. Do you want to stream your media on your phone you could do that as well. Read More

tux

The Nokia n900 - A innovation for its time. Mine is running Post Market OS like seen above with i3wm on the stable branch , I had on edge but it kept breaking and all my configs got destroyed. Here are my 3 most used bash scripts that help me run the device properly. first we have screenlock.sh this script helps us control the screen and dim the light to 0 when the lock toggle in the side is triggered. it won't sleep the device but will dim it. I haven't implemented the way its used on the edge version, when you the slide the screen back up it comes back to life. #2 we have audio.sh This script starts the audio drivers in the device , using pipewire instead of pulse as its light on resources which is a big plus with our limited specs on the device. pactl info shows if everything was loaded properly. #3 kb.sh This one activates the keyboards back light as by default the system dosent bring it up. (change the vaule to your liking). Keybindings are easy to look up and get used to (pmos wiki). Pro Tip add wifi using nmtui from the terminal.

rss

Newsboat - A RSS Feed Reader on the CLI - all you need is to add a urls file within the .newsboat directory to sync your favorite feeds. RSS never tracks you.

phosh

(06-04-2025) - My Favorite apps compatible with postmarket os. App List

bash

(06-03-2025) - (Bash Tutorial #1) - Bash is great when working with linux as it helps automate alot of processes , and create pretty cool scripts. After experimenting with sxmo i like using their youtube script that lets you search from their prompts , so i decided to make my own version using yt-dlp as well and playing what ever video i select from within the script with mpv. once you make it executable my script will prompt you for a search. its very intuitive through the cli . Choose your video and it'll play. or ctrl + c to exit mpv and load another video all this time the script will stay active until you tell it you're going to exit. Youtube Script

launcher

(Ulauncher) a cool tool tool ive been using lately for launching my applications with a ctrl+space keybind. here install it : git clone https://aur.archlinux.org/ulauncher.git && cd ulauncher && makepkg -is .

encrypt

(06-03-2025) - Quick Tutorial // Have you ever wanted to have a hidden partion for security/privacy reasons? , well heres how to set it up on linux using AES 512 encryption. For this example im using a sd card on my thinkpad /dev/sdb. here are the steps -->>> encrypt

(06-02-2025) -Today ill be showing all my configs i use in postmarket os throughout all my devices either phosh , sxmo or i3wm . now lets start with the Oneplus 6T , sxmo is easy to customize when you understand how it functions. The first thing that had me thinking when i first started using it was , how do I change the wallpaper? actually it was pretty simple the default pmos wallpaper is located in /usr/share/wallpapers named postmarketos.png, we need to overwrite that file . WGET any image you would like to use. now move it from your downloads folder sudo mv image.png /usr/share/wallpapers withing the wallpapers directory, input sudo mv image.png postmarketos.png, this will overwrite the stock postmarket os wallpaper and replace it with yours. pretty cool. Next lets configure a simple lock screen with a program call Peanut Butter. click here for the more indepth tutorial.

pmos

(05-28-2025) - How far are we advancing with Linux Mobile?

I've been using postmarket os since the beinging of the year testing it out on multiple devices like the oneplus 6t , google pixel 3a xl and the nokia n900.

pwn

Have you been wanting to create/build your own pwnagatchi to tackle down WiFi Networks around you? What does it do? ---->>>>> Pwnagotchi is an A2C-based AI powered by bettercap and running on a Raspberry Pi Zero W that learns from its surrounding WiFi environment in order to maximize the crackable WPA key material it captures (either through passive sniffing or by performing deauthentication and association attacks). This material is collected on disk as PCAP files containing any form of handshake supported by hashcat, including full and half WPA handshakes as well as PMKIDs.

(10-04-2024) - ITS NOW OCTOBER AND IVE BEEN MIA! Have you heard of HPING3 - It can create TCP UDP ICMP AND RAW IP Packets enabling us to create an almost infinite variety of packets that we can use to get past IDSs, Firewalls and scan systems behind them .

docker

(07-06-2024) - SUDO SYSTEMCTL START NGINX >>>>>>> ::: It has been a few months since my last post, i've been having a lot of fun experimenting with docker. Docker Hub

HTP

(03-04-2024) - A COLLECTION OF HACKER DOCUMENTARIES ON THE CLEARN3T!. HACK THE PLANET

cisco

(03-03-2024) - are you having a hard time memorizing Cisco CLI commands for configurations and managing your ports. Check out some port security commands listed in the TXT file. cli

pihole

Do you want to block ad trackers from tracking your web traffic? PiHole is the solution. Since i've initially set it up I haven't seen any sort of pop up and side banner ads like on speedtest.net PIHOLE

ai

(02-28-2024) - Have you ever wanted to run a LLM(LARGE LANGUAGE MODEL) locally from your system? Well here are are some simple instructions on how to make it work,I would suggest running it with NGROK to access from outside your localhost. SAY GOODBYE TO CHATGPT. llm

(12-23-2023) - HELLO FRIEND!, Messing around with the kali tool called WifiPhisher. Works similarly to a pineapple creating an evil twin using a wifi adapter.

map

WHAT IS NMAP? --- (Network Mapper)

is an open source tool for network exploration and security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. But how do we as Red Teamers use the tool to scan a targeted network without leaving as much trail as possible?

nyx tor

(11-9-2023) - Host A Onion Relay for the TOR network, help people stay anonymous online. When connecting through tor your connection makes 3 hops, first through the Entry Node(GUARD), then the MIDDLE node and 3rd the EXIT NODE. The goal is to become a middle node and work your way up to becoming a guard. CONSISTENCY IS KEY. There two ways to host it, One through your network using a Raspberry Pi and port forward. Or the best way , from a cloud Host. Here are the step by step intrucions on how to do it, as well as a link to the Tor Project explaining the relay life-cycle. The more amount of time has passed the bandwidth will increase allowing other users to use your relay.Instructions relay life-cycle

tag

A little late to the party with this intel but everyone should be informed if you haven't, During Def Con 21 Speaker (pukingmonkey) made a presentation of how hes been studying the methods government and law enforcement use to track private citizens vehicles on the road. As he stated on his keynote, One of the major tracking methods is E-Z Pass which is an electronic toll collection system used in several states around the country. While he roams around NYC in a modified Tag(that lights up when the tag is read) , driving between Times Square & Madison Square Garden the tag was read 6 times in a route with no tolls. The New York Department of Transportation has long stated that these reads are used only to track traffic congestion. Their suggestion is putting your tag away in an anti-static bag (Faraday cage) when not approaching a toll. DEF-CON-PRESENTATION-PDF

(11-7-2023) - Great day for old Google devices Pixel 4a Gets latest Android Security Updates.

bt

(11-5-2023) - Have you ever wanted to jam a Bluetooth Speakers Signal to prevent tethering? Well here's a simple python script that i've written to prevent a connection from any device. All you have to do is run hcitool scan on Kali copy the mac address of the device you want to jam because the script will ask you for it . Run the script, input MAC, PACKAGE SIZE/THREADS. This will fire off packets to prevent a connection which eventually will turn off the speaker.

PACKAGE SIZE :600

THREADS :500

Python Script

alien

AIRGEDDON ----- Airgeddon is a multi-use tool that can be used for a variety of tasks, such as:

~ Scanning for and exploiting wireless networks

~ Attacking wireless clients

~ Cracking WEP and WPA keys

~ Capturing packets

~ Spoofing MAC addresses

~ WPS ATTACKS

head over to github and get it setup and happy hacking !!!!

AIRGEDDON

free wifi

(11-4-2023) - Create A Rogue AP with a Captive Portal using an ESP8266. The WiFi captive portal for the NodeMCU (ESP8266 Module) with DNS spoofing. It asks the user for an email and a password for a fake sign in, in order to "get connected to the internet". The built-in LED will blink 5 times when some credentials are posted. Download the bin posted below:

STEPS

1. Open Google Chrome /

2. Head To https://esp.huhn.me/

3. Connect your ESP

4. Pick the right port its connected / upload the bin

5. AND FLASH!

Note: If you want to see the stored credetials go to "http://yourcurrentwebsite.com/creds" or "172.0.0.1/creds" BIN FILE

cli

WPS (Wi-Fi Protected Setup) gives you the ability of connecting to a network without the use of inputting credentials.WPS is susceptible to Push-Button Attacks, you might be aware of the Kali NetHunter attack performed on a mobile phone. It uses a script written on Python called OneShot. OneShot gives you the ability to use your wifi adapter to attack a nerby router with a WPS button within range. Once the script is EXE you press the button on the victim router, within a few seconds the script displays the AP as Well as the PSK. heres the link to the repo, clone it and all commands are on the README.md of the folder. ONESHOT

cli

Have you ever wanted to track Aircrafts around you? Its pretty simple with the use of a RTL-SDR. I've condensed all instrucions in the txt file linked at the end go over them and you'll be up and running in no time. INSTRUCTIONS

pi

Create a Deauth Detector using a ESP8266 to see when someone is attacking your network just flash your esp8266 with the bin file on this github repo from SpaceHuhn. DEAUTHREPO

pi

Ubuntu now available for Raspberry Pi 5 Full Support 22.04.3 LTS Download IMG

latest version of mayhem firmware for hackrf one 1.8.0 if you're new to this specific topic all you need to do is download the sd card file on the github repository listed here and copy all the extracted files into a sd cards root directory with a FAT32 format. tor mayhemfirmwaresdcard

New android BLE Spam App released making it easier to spoof pop up notifications / APK available on github. githubapk

hacker

(11-2-2023)- North Korean Hackers Targeting Crypto Experts with KANDYKORN macOS Malware

Look-up public information on people using fastpeoplesearch /addresses/relatives/phone-numbers/ click here ->> link

(11-1-2023) - curious on searching up someones carrier OSINT MAKES IT POSSIBLE. carrierlookup

qwerty

11-1-2023 - testing website on the dark web using Nginx and TOR hidden services. clearnet