Hack Theory // A community for people who break and defend things
Hack Theory is a Discord community of hackers, defenders, and developers—professional and hobbyist. Nobody minds a beginner question here. Bring a broken config, a log you cannot read, or a CTF you are stuck on, and someone will work through it with you.
You get a practice Linux box that resets when you break it, per-member CTF challenges, randomized quizzes, real IT tasks reviewed by staff, and a toolkit of passive security tools that run straight from chat.
$ quiz-engine --status schedule randomized / ~4 daily topics security, code, AI, ops answers private until close companion reads #general only challenge: Blue Team / Advanced signal: WINWORD → PowerShell -enc [A] isolate + revoke sessions [B] delete logs [C] wait seven days [D] restart collector answer locked ✓
Runs from chat
Every reconnaissance tool below reads public third-party records — certificate transparency logs, RDAP registries, DNS. None of them connect to, scan, or probe a host you name. Use them on infrastructure you own or are authorized to assess.
/subnet gives the full IPv4 breakdown and gets /31 and /32 right. /encode converts base64, hex, and URL both ways. /hash produces SHA-256/384/512 for checking a download against its published checksum. Pure computation, so an upstream outage cannot break them.
/cert-search finds subdomains in certificate transparency logs. /domain-info returns registrar and expiry via RDAP — a very new registration is a phishing signal. Plus /dns-lookup, /ip-lookup, and /url-check against malware filtering.
/terminal gives you a simulated machine with a real command interpreter — ls, grep, find, pipes, redirection. It is a simulation, so there is no host to escape to and nothing to damage. The starting image hides a set-uid binary, a world-writable directory, and a committed credential. Find all three.
/email-security grades SPF, DMARC, and MTA-STS. /attack-surface combines CT, RDAP, mail posture, DNS, and reputation into one review. /bulk-url-check takes eight URLs at once. Everything above stays free for every member, permanently.
How the server works
Members answer with Discord buttons. The bot never uses the Server Members or Presence privileged intents. Its conversational companion does read the general channel — that is written down in the Privacy Policy rather than buried, it stores none of that text, and server staff can switch it off.
Each launch waits a randomized five-and-a-half to six-and-a-half hour interval, with an initial deployment jitter to avoid predictable posting patterns.
Generated values, shuffled choices, short windows, one-shot answers, and evidence-based scenarios make simple answer-key lookup less useful.
The companion reads the general channel and stores none of it. No other channel, no DMs, no presence, no voice, no email, no connections. The Privacy Policy spells out exactly what is read and how to opt out.
Security, networking, backend, frontend, programming, AI, operating systems, Bash, blue team, red team, and mitigation.
Every answer earns XP. Correct answers can unlock occasional named bonus drops, while profiles and a community leaderboard recognize consistent learning.
Topic-routed daily bytes, CISA exploited-vulnerability alerts, respectful AI fact checks, and a private suspicious-contact review queue support the whole community.
RDAP IP registration, encrypted DNS lookups, malware-filter URL checks, and disclosed aggregate links run directly from Discord.
Two deployed evidence-based challenges randomize each session and sign flags to the member so copied flags do not validate as another person's solve.
Cybersecurity, networking, Linux, secure software engineering, and team-operations tracks include labs, assessments, and safe-use boundaries.
/teach opens an upload portal that publishes a structured course straight into the academy channels, so the catalog grows without a site deploy.
Staff assign a randomized task with /task-assign. You submit it and answer five follow-up questions, and a human reads the result — not an autograder.
Warning and information notices, member moderation views, staff polls that escalate on a majority vote, and one place to see every half-finished review.
Community platform
Question lifecycle
A member's first selection is locked. The bot acknowledges it privately but does not reveal correctness until the shared quiz closes. It then publishes the answer and explanation, updates statistics, and writes the staff result.
Slash commands
A sample across each system. The bot registers 60 commands in total — the complete reference lists every one of them with the permission it needs.
| Command | Who | Purpose |
|---|---|---|
/quiz-status | Everyone | Show the active quiz and next randomized launch. |
/leaderboard | Everyone | Show the top ten competitors. |
/profile | Member | Privately show personal accuracy and streaks. |
/rewards | Member | Show XP and random bonus-drop details. |
/study-tip | Everyone | Post a practical technical learning prompt. |
/ask | Member | Ask the opt-in security tutor; private by default. |
/fact-check | Member | Respectfully evaluate a technical claim. |
/report-security | Member | Privately queue suspicious invites or mass contacts for staff review. |
/checkin | Member | Check in for the day and build your streak. |
/perks | Member | Show what your roles entitle you to, and what stays free for everyone. |
/terminal | Everyone | Open or reset your simulated Linux practice shell. |
/sh | Everyone | Run a command in that shell. Simulated, and output is public. |
/ctf-start | Everyone | Start a private, per-member randomized CTF session. |
/ctf-stats | Everyone | Show the live CTF solve leaderboard. |
/ip-lookup | Everyone | Passively retrieve public IP registration data through RDAP. |
/dns-lookup | Everyone | Resolve common record types over Cloudflare DNS over HTTPS. |
/url-check | Everyone | Check a hostname against malware/phishing DNS filtering without opening it. |
/subnet | Everyone | IPv4 subnet calculator, correct on /31 and /32. |
/verify | Everyone | Start or resume server verification. |
/roles | Member | Pick your languages, systems, interests, and region. |
/task-mine | Member | Show your active assigned IT task and how to submit it. |
/help | Everyone | Explain participation, privacy, and commands. |
/delete-my-data | Member | Confirm and permanently remove retained answers and stats. |
/teach | Manage Server | Open the course upload portal and publish a course. |
/warn | Manage Server | Post a warning notice, optionally pinging someone. |
/poll | Manage Server | Create a yes/no poll and alert staff if the majority votes yes. |
/security-audit | Manage Server | Write a read-only high-impact role audit to staff logs. |
Join the community, verify in a few minutes, and start with the challenges, CTFs, and daily briefings.
NullPointer Exception Handler is built for and maintained by Hack Theory. It can be installed elsewhere, but each server is enabled individually by the bot owner — until yours is approved the commands stay inactive and point back here.
Install it, then request approval in Hack Theory with the server ID the bot reports to you.