networking

[tame carbon]

[static knoll]

Was funny to watch, but heck I don't even do PDP anymore

He's just too crude

[tame carbon]

pdp was cool when he did amnesia gameplay

after that it got boring

[static knoll]

he used to be cool, but now he's just sad

Sometimes I feel bad for Marzia but then again she got that money money

[tame carbon]

my problem with youtube

when I open it

it only suggest shit I've already seen before

and if I go explore new videos, all is trash

[static knoll]

yeah

especially nowadays

[supple hare]

@tame carbon it was removed. I think I'll give the router back this afternoon

[tame carbon]

@supple hare after you removed the CPL and all the other stuff

run that winmtr again

see if there's a difference

might want to restart the router as well

[supple hare]

Winmtr is the app I downloaded yesterday ?

[tame carbon]

yeah

[supple hare]

Ok

[tame carbon]

@supple hare it should be 0%

https://i.imgur.com/An970JE.png

100% just means, that that specific router ignores all your pings

[supple hare]

Host was 1.1.1.1 right ?

[tame carbon]

yeh

that's cloudflare DNS xD

[supple hare]

What's that x) ?

90% lost on bbox.lan

[tame carbon]

wtf

[supple hare]

Can't even send a message on disc

[tame carbon]

ok that modem is trash.

get a new one.

[supple hare]

Ok xD

[tame carbon]

@supple hare it makes no sense though

[supple hare]

Tysm for your help anyway

[tame carbon]

it reports address conflicts internally

which would be correct, the symptoms match

though I don't understand where this conflict is coming from

usually, its just some device with poorly configured IP settings

if you have two devices with the same IP on the same network

it doesnt know where to send the data to

and most of it will get lost

[supple hare]

Oh yeah makes sense. Let's just hope the 3rd router doesn't have the same problem

[tame carbon]

@supple hare are you 100% sure there isnt anything else connected to it?

[supple hare]

Yeah

[tame carbon]

including wireless?

[supple hare]

Yeah, 2 cables, one coming from the fiber box and one to my pc

[tame carbon]

@supple hare can you take a picture of the network rig?

Might not need that crappy bbox

[supple hare]

On the website it doesn't look like anything is connected to it except sometimes my PC turns on

[tame carbon]

If its a common interface from the fiber box

might be able to get your own router

@peak cloak I am so confuzzled by his problems lol

[peak cloak]

@tame carbon sometimes even if it's an sfp doesn't mean you can

[tame carbon]

his router reports an IP conflict

the conflicted MAC address, has a vendor ID, of the very router that is reporting the issue

[peak cloak]

Before someone had an sfp going it to his router but it was gpon so it wouldn't work on another sfp device

Huh

[tame carbon]

Yeah.

huh.

[supple hare]

That's the box which receives the fiber. Sorry for the terrible pic btw. Already packed the router to change it, the shop closes soon

[tame carbon]

AHH

CHINESE

jk

[supple hare]

xDD

[tame carbon]

@supple hare can you show the back please?

@supple hare and then, I'm interested, in what your router reports on the WAN

I want to see what authentication it uses

if its PPP

you can just get your own router instead of the bbox

hook that up to the fiber box, and go :D

@peak cloak Its PON btw

@peak cloak any hints on common implementation details with that? is it just DHCP ?

[peak cloak]

Yeah

[tame carbon]

PON

[peak cloak]

At least with fios, it's just dhcp

[tame carbon]

@supple hare alright, cool, now log into the bbox, and go to WAN or Internet settings

I want to see how it negotiates the address with the fiber box

@supple hare

@peak cloak lol, we should make a directory. Keep information on how every ISP implement their handover

[supple hare]

Sorry, I'm already on my way to the store... They were only open till 3:00pm and I won't have the time to go there next week

[tame carbon]

@supple hare fair.

@supple hare though if its really a problem with the bbox, you'll probably have the issue after you swap the device

come back if you still have issues, we might be able to set you up with an alternative

[static knoll]

What is this?

Oh its a little fiber box

[tame carbon]

@static knoll that's his ONT

Fiber in, ethernet out

[static knoll]

Seems very small

[tame carbon]

@static knoll they can be even smaller ;D

[static knoll]

so cuteeeeeee

I think the FIOS one is gigantic

Not sure tho

[tame carbon]

Fiber -> SFP+

[static knoll]

Dang that's small

I assume for rack use

[supple hare]

Yeah I planned on doing this

[tame carbon]

@static knoll https://i.imgur.com/IKAPj8o.jpg

@static knoll they plug directly into your equipment

[static knoll]

Ah so yes for rack/switch use

[supple hare]

A box which receives the fiber optic and then "gives" the internet to my modem

[static knoll]

Not for the typicaluser

[tame carbon]

@supple hare just call it a fiber modem

that's really what it does

[supple hare]

Yeah, more convenient, didn't know the term

[static knoll]

aren't modems mainly for converting phone lines to internet or something

I forget sometimes

[tame carbon]

modems modulate and demodulate a digital signal from one medium to another

A modem – a portmanteau of "modulator-demodulator" – is a hardware device that converts data from a digital format, intended for communication directly between devices with specialized wiring, into one suitable for a transmission medium such as telephone lines or radio

Its an umbrella term for this technique

https://www.youtube.com/watch?v=o0WzD0oaoBg

@static knoll main difference with active and passive fiber networks is the layer 2 implementation

[static knoll]

Ah yes

[tame carbon]

on PON, your fiber connection is shared, each 'box' has its own MAC

[static knoll]

I assume PON is not as good as the alternative

[tame carbon]

active optical, is a seperate fiber for every subscriber

@static knoll well, PON is a bit like coaxial

[static knoll]

Better but more expensive I think?

[tame carbon]

where you have 1 fiber for the entire neighborhood

PON is less reliable, lower throughput

though if deployed properly, can be just as good as active

active optical networks have some other benefits

@static knoll datacenters and long-haul is all active

[static knoll]

ah

I only hate coax because of two things

One, the cable sucks

[tame carbon]

its a shared medium

[static knoll]

Two, the connector is one of the most annoying I have ever dealt with

[tame carbon]

@static knoll biggest problem with coaxial is improper filtering/faulty gear

if one person has a faulty modem or adapter

it can create interference/noise

which can go over the coaxial

knock down service for everyone

[static knoll]

Yeah, I will probably get the coax at home switched over this summer

[tame carbon]

Coax is faster than DSL

but not as reliable

DSL funny enough, will work over the shittiest of copper cables

[static knoll]

DSL is still in my Uncle's house, and LTE is faster than it

[static knoll]

slow af tho

[tame carbon]

maybe not with a high speed, but reliable nontheless

fiber is... super reliable

[static knoll]

fiber is nice

[tame carbon]

@static knoll https://i.imgur.com/x6SFUOC.png

0 link downs :D

[static knoll]

You have 10Gbps?

[tame carbon]

@static knoll ok thats cheating

[static knoll]

Or is that local cabling

[tame carbon]

I have 10G locally

1G external fiber (250M speed for internet)

[static knoll]

yeah i thought so

[static knoll]

I mean, 250 ain't bad

[tame carbon]

fiber optic converter is on other side https://i.imgur.com/klBwQN0.png

Since its only a 1G fiber, I don't have a need for SFP+, so I use a cheapo media converter

https://www.tp-link.com/us/business-networking/accessory/mc220l/

this one ^

like 20 bucks

@static knoll When I signed up for fiber internet here

[static knoll]

?

Ah

[tame carbon]

they just ran a plastic tube to the front door outside

[static knoll]

bruh

[tame carbon]

they were planning on installing it like half a year later

[static knoll]

Why didn't they do it properly

[tame carbon]

but we were renovating at that time (and in the middle of moving between houses)

[peak cloak]

Yes

[tame carbon]

@static knoll we took a drill to the wall

[static knoll]

That's an old one is it not

[tame carbon]

and then on the inside, used a wallchaser to cut a groove to the attic

[static knoll]

👀

[tame carbon]

the fiber tube ended up in the attic

and when the technician arrived, to install the patch box

[static knoll]

I mean, I have cabling stapled to the doorframes in my house lol

[tame carbon]

he was all confused, since it was the first time he had to go to the attic

[static knoll]

Then?

[tame carbon]

lol, I got a package in the mail

with just an SFP module & 3 meters of fiber patch cable

best. ISP. ever.

[static knoll]

LOL NICE

What ISP?

[tame carbon]

https://www.weserve.nl/nl/fiberfttx/

[peak cloak]

No

I just got fios like in November

[static knoll]

Seems nice, website is pretty cool

[static knoll]

tbh idk where my ONT is lol

probably inside the tv cabinet or in the crawlspace

[tame carbon]

@static knoll they only recently started doing FttH, they have been in the datacenter and hosting business for about 15 years

[peak cloak]

Probably on the side of your house

[tame carbon]

@static knoll and the network they are on, is corporate

[peak cloak]

Gray box

[static knoll]

No wonder they're so nice

[tame carbon]

so peering is amazing :D

[static knoll]

😄

[static knoll]

Don't think there's one outside it, but I'll check eventually

[tame carbon]

@static knoll handover is just DHCP over a VLAN

[static knoll]

lucky you

[tame carbon]

IPTV is on a 2nd vlan, with IGMP multicast

even the settop boxes

[static knoll]

IPTV is honestly the future of cable, cable tv sucks

[tame carbon]

are just generic brand

[static knoll]

so no monthly fees

damn you have it lucky

[tame carbon]

@static knoll oh no

this shit is expensive as hell

xD

[static knoll]

LMAO

[tame carbon]

13,50 euros/month for just the fiber itself

(physical infrastructure)

since that is a different company

[static knoll]

Wait, if the settop boxes are generic why do you pay for them?

monthly at least

[tame carbon]

oh those boxes?

you get those for free

[tame carbon]

but you need a subscription

[static knoll]

so not free

Total per month?

FIOS is $80 a month for gigabit (940/880)

[tame carbon]

then ontop, 79/month, for 250mbit data, 23 bucks for premium tv ( I dont watch TV, but others do)

[peak cloak]

I could care less about tv

[tame carbon]

ontop of that comes an additional 16bucks, because I have an additional /29 IP block

[static knoll]

Don't think this is outside my house

[peak cloak]

Yeah sometimes they just have a desktop ont like in my pic

[tame carbon]

so effectively

[static knoll]

So the total per month comes down to?

[tame carbon]

2 euros/month/ip

@static knoll just under 130 bucks

excluding taxes

[static knoll]

I mean, you do live in NL

[peak cloak]

It's 20 bucks for a static ip here

Per month

[tame carbon]

@static knoll I have my own business

[static knoll]

On top of your residential package?

[peak cloak]

On top of a business one

I don't have a static

[tame carbon]

@static knoll and the fiber line is shared with two other companies

[static knoll]

Ah, no wonder

[tame carbon]

I just invoice them for 50/50mbit like, 50 euros a month

[static knoll]

So essentially free internet huh

[tame carbon]

ye

[static knoll]

nice

See, in the US of A with FIOS a business connection using static IP is $240 per month for 940/880

Residential, on the other hand, is only $80 in a contract

Surely a static IP doesn't cost an extra $160 a month

[peak cloak]

Residential is heavily throttled I think

Shared bandwidth

[static knoll]

No we get 940/880 consistently

• neighbors have like 100Mbps at max lol

[peak cloak]

If you constantly had gigabit traffic, then fios would throttle you

[tame carbon]

@static knoll yeah but not to every bit of the internet

some routes are still slow

and thats why some people pay double for less bandwidth

because they get better peering

[static knoll]

ah

yeah I'm not running servers to every part of the world 24/7 so

should be fine lol

[tame carbon]

@static knoll your ISP pays other entities for peering agreements

bandwidth is not free

big ISPs have it easier

because they have their own network

[peak cloak]

Technically it's against TOS to host servers on fios but I doubt they care about small ones

[tame carbon]

and there, peering is essentially free

@peak cloak thats such bull

F

[peak cloak]

Yeah

[tame carbon]

took me months to learn how to write around the filter lol

[peak cloak]

https://bgp.he.net/

[static knoll]

its only 1 small server

[peak cloak]

To check peering

[static knoll]

Agreed

[tame carbon]

my ISP gives me 8 public IPs

specifically for hosting

[peak cloak]

https://www.verizon.com/about/terms-conditions/verizon-online

[tame carbon]

my public facing VMs on my server, just get their IP address from DHCP on a vlan lol

@peak cloak yeah thats what happens if you dont have net neutrality

. You also may not exceed the bandwidth usage limitations that Verizon may establish from time to time for the Service, or use the Service to host any type of server. Violation of this Section may result in bandwidth restrictions on your Service or suspension or termination of your Service.

[peak cloak]

It was always like that

[tame carbon]

Yeah

but this is not net neutrality

[peak cloak]

Yeah

[tame carbon]

they shouldnt be allowed to discriminate between types of data/traffic/services

I agree that c-pornography is illegal

[static knoll]

I just got shocked by my TV's display

Out of nowhere

[tame carbon]

but that is illegal by law, and not by ToS

you may write into the ToS that the use of the service, should be within the limits of the law

which is kinda... obvious and common sense

@peak cloak selling the service on, as in, running your own ISP

that is debateable

[peak cloak]

Yeah

Reselling

[tame carbon]

but that's different from hosting your own services

that's just, using the internet.

Verizon thinks they are only a gatekeeper to the big platforms, and all else is to be crushed

@peak cloak I guess you can always try https://ec.europa.eu/immigration/node_en

[peak cloak]

Nah

[tame carbon]

@peak cloak lol I remember in 2016 after inauguration, that the canadian immigration portal went offline due to heavy load

[peak cloak]

Otber state

Nj kinda sucks

[tame carbon]

isnt NJ a trap?

for people who want to move out of NY

cus NY is kinda crap rn, but NJ is even worse

or something like that

I overheard this somewhere

[static knoll]

Oh NJ as in the state

[tame carbon]

^

[peak cloak]

Louis rossman?

[tame carbon]

probably

[static knoll]

I lived in NY

[tame carbon]

@peak cloak his bike ramblings I sometimes watch

I've been to NY once in my life

for like a weekend

slept on 21st story overlooking broadway

[static knoll]

Very nice

[peak cloak]

I haven't even been to like most ny tourist attractions

Haven't been in times square

[tame carbon]

Times square was too crowded

with my hypersensitivity that comes with aspergers

I couldnt really stay there for more than 20 mins

And the first time I got confronted with actual racism was also in NY

[static knoll]

I was born in NYC, never been to the top of liberty

[tame carbon]

My gf and I came out of the AMC

and we were walking back to the hotel

and some guy started talking me up

trying to sell his mixtape

I just didnt catch on what he was doing, until like a minute

and then he got mad when I politely turned him turn

[peak cloak]

Me neither, was on the middle part as part of a boy scout trip

[tame carbon]

and he started going off about how, we white tourists dont give

we only take, and dont care about the people that live here

some ramblings

and then I asked: what does me being white have to do with that?

and he went off on like: we blacks are better stronger have bigger dicks and such

told him good day and started walking

really weird

[static knoll]

bigger d argument

[tame carbon]

yeah idk

didnt feel safe though

@static knoll I thought racism went only one way, but I guess it goes both

[lean pebble]

I fixed the fortiwifi he acts as wireless client (bridge) and lan ports works to

No more moca 😆

[tame carbon]

@static knoll other states I've been to

Florida

I forget, orlando, that's a county right?

Went to epcot and magic kingdom

and then also been to Maine and Masschussets

[static knoll]

It does, and sadly that's the issue

[tame carbon]

I still like Massachussets the most

[static knoll]

Never been

[tame carbon]

New England has beautiful countryside

[static knoll]

The farthest south I've been is Virginia

[peak cloak]

I've been to louisiana

[tame carbon]

I grew up with divorced parents, my dad was kinda loaded when I was a kid, and took us on holidays to US twice

[peak cloak]

Walmart culture is real there

[tame carbon]

Those major cities in the US, are so insanely big

Scale compared to my country ,is completely different

And US infrastructure is kinda terrible

train is awful

Amtrak

[static knoll]

Never taken it

[peak cloak]

Trains yeah

[tame carbon]

I remember in maine during christmas

[peak cloak]

I've been on nj transit, it works

[tame carbon]

everyone driving pickups with snowplowers

[lean pebble]

You should check the train in israel if you think the train in US is awful

[tame carbon]

The emergency brake is automatic self destruct?

[peak cloak]

NY NJ probably has the best public transport

Out of the us

[tame carbon]

@peak cloak here in netherlands, trains go in every direction, every 30 minutes

its been synchronized like that

so that your 'route' with 2 stops

is always the same

busses are twice the rate

for city centers, every 15 minutes

some stations have multiple busses, so you may only need to wait 2-3 mins

sundays, all is halved

busses quartered

and rush hour, it is doubled for trains

like Arnhem Nijmegen -> every 10 mins train

Two major cities

I can understand that the US can't ever achieve this

[peak cloak]

Netherlands is dense

[tame carbon]

yeah

you can travel north to south in under 2.5 hours

maybe 3 hours now

since max speed on highway has been reduced

from 130 down to 100

@peak cloak if you ever in germany and drive a fast rental

go on the autobahnn 7am on a sunday

[static knoll]

Autobahn go deja vu time

[tame carbon]

you can do 250 without anyone on the road

[peak cloak]

Aunt and Cousins live in germany

Was supposed to go this year but covid happened

[tame carbon]

Germany has truck ban on sunday

so its basically, a deserted road

@static knoll I've driven someone's BMW7 to Dusseldorf airport to pick up someone

[peak cloak]

@tame carbon when you went to the us you probably saw all the crooked electrical poles lol

[tame carbon]

from my home in the netherlands, was like 45 minute ride

normally takes 1:20

@peak cloak yeah all the coaxial uglyness

[static knoll]

Was it fun?

[tame carbon]

@static knoll never driven that fast

[static knoll]

Ah

[tame carbon]

so kinda neverracking

[static knoll]

lol

[tame carbon]

also didnt want to overheat the tires

so didnt go that fast for that long

but cruising at 180km/h

is nice

that's 111mph

@peak cloak this is what city infra looks like in Arnhem: https://i.imgur.com/LjqQCaI.jpeg

those cables are for trolley's

[static knoll]

Just goes so fast that the tires burn

[static knoll]

Yeah, seems really invigorating to do

[tame carbon]

https://i.imgur.com/eygHcCC.jpg

this is Korenmarkt, most crowded place in the city

this is where all the nightclubs and pubs are located

https://i.imgur.com/pPixcqB.jpg

typical old dutch houses

@static knoll grid system like the US, we don't have here

its all twisted, organicly grown some planned

[static knoll]

in the US only big cities are in grids

[tame carbon]

https://i.imgur.com/l6YxFdj.jpg

[static knoll]

in the suburbs and other areas everything is turns and twists

[peak cloak]

Col-de-sacs

[tame carbon]

@static knoll https://i.imgur.com/AV9jWtd.jpg

Do you know what these blocked areas are? :D

[static knoll]

Hmmmmmmm

Farms?

Residential Areas?

[tame carbon]

close

[static knoll]

Server farms?

[tame carbon]

they are all greenhouses

They produce 80% of our aggricultural exports

on tiny plot of land

[static knoll]

Ohhhhh that's why they're all so white

Very cool

[tame carbon]

@static knoll and craziest is

https://i.imgur.com/xxqiu6z.png

Thats agricultural exports per country ^

[static knoll]

Hoo boy indeed

[tame carbon]

dutch greenhouses are incredibly modern

computerized, automated

everything

[static knoll]

very fancy

[tame carbon]

https://upload.wikimedia.org/wikipedia/commons/thumb/c/cf/Lichtvervuiling_kassengebied_Luttelgeest.JPG/1280px-Lichtvervuiling_kassengebied_Luttelgeest.JPG

In some areas, it never gets fully dark at night

you always have this orange glow

[static knoll]

sunsets here are like this

[static knoll]

From?

[tame carbon]

@static knoll that picture is in the middle of the night

that's from the greenhouses

[static knoll]

Wow, that's amazing

All of the light creates a mega nightlight

[tame carbon]

@static knoll yeah.. opinions on this are divided

local residents are not fans

[static knoll]

yeah its not exactly the best for actually sleeping

creates a ton of light pollution

[static knoll]

but then again, think of the money

[static knoll]

ah, no wonder people are not fans

[tame carbon]

I've stayed with someone for a weekend once, who lived in this area

yeah, it was quite strange at night

foggy weather makes it even worse

since it scatters the light even more

[static knoll]

That's not good

I guess sometimes you have to prioritize survival over comfort

Bad things would happen if those greenhouses shut down

[tame carbon]

Lol, I am from the east of the country

not my problem xD

here, there are still undeveloped areas

or just farms

[static knoll]

better than all of the light pollution lol

[tame carbon]

yeah

[peak cloak]

When it snows it's pretty light outside because of the light pollution from ny

[tame carbon]

major cities also have a lot of light scattering ye

@peak cloak When I came back from france after 2 week holiday

and came back to dense populated areas in netherlands, the first thing i noticed

was the smell of trash

like, typical garbage dump smell

you dont notice it if you are always in it

NY had the same thing for me, when I got out of the plane

air pollution

snow and rain is nice, it wipes all of that from the sky

[peak cloak]

Yeah

NY during the summer smells

Only reason I go to ny is because friends and family live there

In queens

[static knoll]

yo queens gangggg

Where in queens?

[lean pebble]

Finally the vod from my tv provider working perfect

[static knoll]

@peak cloak where in queens? I'm a queens boy

[peak cloak]

maspeth

[static knoll]

Ah maspeth, more west

I live on the far east of queens, Little Neck

pretty lit senior community, safe too

good schools and all

[peak cloak]

my parents used to live in Greenpoint

used to be a big polish community

[tame carbon]

my area has bunch of polish ppl

[static knoll]

Ah, out in LI?

[peak cloak]

Brooklyn

[static knoll]

Oh

There's a green something in LI

Forgot what

[tame carbon]

starter base is so insane when you use mods

https://i.imgur.com/nFE6Msg.png

instead of 4 ore types, there's like 12

[static knoll]

What game is this

[tame carbon]

@static knoll factorio https://i.imgur.com/RxFjoSD.jpg

factory building game

[static knoll]

Oh factorio

I heard about it, but the actual ads didn't attract me into it

Looks cool tbh

[tame carbon]

its very steam-punky

[static knoll]

i enjoy steampunk lol

but not too over the top

needs some futuristicness

[tame carbon]

I'm working on my new copper processing plant

https://i.imgur.com/e6cb0J4.jpg

there's this 2nd process you can do to get cobalt

@static knoll with mods its a lot more complicated

https://i.imgur.com/pXNzUNQ.png

but thankfully, there are ingame calculator mods

[static knoll]

Ah ok

Is it multiplayer?

[tame carbon]

yeah

you can run a standalone server

its cross platform

[oblique marlin]

i went to my router's setting but the problem is that i dont know what to write in source IP

https://cdn.discordapp.com/attachments/724361581156237333/807554984086208532/help.png

[static knoll]

ooh that's cool, imma look into it

[tame carbon]

@oblique marlin you can leave source IP blank

[oblique marlin]

i watched a video on youtube it told me to put my static ip there

[tame carbon]

@oblique marlin nah

just leave it blank, enter the internal host and ports, as well as the external ports

[oblique marlin]

but my udemy course guy didnt mention anything about static ip

[tame carbon]

you can fill out that source IP to port forward for one specific IP address

if you leave it bank, it will translate any incoming

[oblique marlin]

w8

lemme explain you what i am trying to do

[tame carbon]

You're port forwarding?

[oblique marlin]

i am practicing ethical hacking

[peak cloak]

hmmm

[oblique marlin]

and i have created a payload

i want to listen for connections which are coming outside of my LAN

[peak cloak]

hmmm

[oblique marlin]

the udemy guy showed how to configure router

[tame carbon]

@oblique marlin you're behind a NAT right now, aren't you/

[oblique marlin]

but his router is different than mine

[peak cloak]

so you want to port forward

[oblique marlin]

yes

[peak cloak]

If you really want to learn hacking, learning networking is critical

[tame carbon]

bleep bleep

[oblique marlin]

@tame carbon tthanks

[static knoll]

i want to one day be able to bypass any public internet locks

[tame carbon]

@oblique marlin if you fill in say: 123.120.10.1 in that source ip

[oblique marlin]

lemme try by without putting source IP

[static knoll]

screw "open" networks with a password

[tame carbon]

@oblique marlin it would only port forward, for connections originating from that specific source ip

if you leave it blank

[oblique marlin]

then

[tame carbon]

anyone can access a service on your public IP that you have forwarded

[oblique marlin]

ohhh

[tame carbon]

like a webserver on port 80

[oblique marlin]

i get it

i need one more help

[tame carbon]

your public IP points to your router

with NAT, you can designate a port, or range of ports, to an internal host

behind the NAT

[oblique marlin]

do you know what a payload means?????

[tame carbon]

yes

its a crafted message with a specific intention

payloads are a term used all over computing

not just in hacking

[oblique marlin]

my payload is reverse http

i am using port 80 for listening

[tame carbon]

spawning a backdoor webserver

yeah, that's not unheard off

as long as you stay out of my network, I'm cool

;)

[peak cloak]

honestly don't learn on the internet

go to like something like hackthebox

[oblique marlin]

i paid

[peak cloak]

learn on their machines

[tame carbon]

dobbleoof

[peak cloak]

on their own vpn

[peak cloak]

why........

for what

[oblique marlin]

their openvpn has a problem

it gets stuck at loading

[tame carbon]

@peak cloak you don't really learn from CTFs

[peak cloak]

kinda do

[oblique marlin]

i checked their forums

[peak cloak]

I learned a bit tbh

[tame carbon]

by completing CTFs, you get good at completing CTFs

[oblique marlin]

yes

[tame carbon]

not at actual hacking

[oblique marlin]

i am begginer

[peak cloak]

well you learn basics, and what tools to use

[desert briar]

do I hear CTFs

[tame carbon]

@oblique marlin learning the tools is far more valuable

[peak cloak]

I enjoy it

[tame carbon]

which is what CTFs aim to do

[oblique marlin]

i am currently doing that only

[desert briar]

Thats a nono from me tbh

[oblique marlin]

fortunately i am not a script kiddie

[desert briar]

learning the actual skillset you need to achieve xyz, not the tooling.

not skillet

https://tenor.com/view/gordon-ramsay-what-are-you-an-idiot-sandwich-pissed-mad-gif-4781186

[oblique marlin]

all tools are same in one or other way

[peak cloak]

well the tech behind it and how it works?

[tame carbon]

@desert briar idunno, I've never really done pesting seriously.
I've written enough php and java to know how to write bad code

[oblique marlin]

@desert briar mitmf/bettercap/ettercap

[tame carbon]

I've sqli injected some shitty sites before

just for the sake of seeing if I could do it

[oblique marlin]

lol

[desert briar]

Yeah well, you wont use any of those if you are testing a real network. Man in the middle attacks are too noisy and invasive.

[tame carbon]

@oblique marlin I found a website from some asian accupuncture salon

[desert briar]

• they have a pretty big chance of screwing up networks 😄

[tame carbon]

defaced it with a bunch of china memes

[oblique marlin]

but you cant just skip a whole topic

[oblique marlin]

it happened once

[desert briar]

ouch, dont do that. Kind of illegal.

[tame carbon]

@desert briar I was 15.

[desert briar]

Ah yeah well, childhood. lol

Still, be smart about what you do 😛

[tame carbon]

exactly xD

[oblique marlin]

i remember once i was trying a mitm attack with port forwarding off

[tame carbon]

I'm white hat now

[oblique marlin]

SMORT

[tame carbon]

@oblique marlin here's a fun hacking project:

[oblique marlin]

IMAGINE BEING THIS SMORT

[tame carbon]

write a browser XSS payload, that attempts to login to a users' router with default password

and then overwrites DNS settings

[desert briar]

port forwarding has nothing to do with man in the middle

[oblique marlin]

lemme turn port forwarding ON first

[oblique marlin]

it does

[desert briar]

Well, you do you then, lol

Im all ears

[peak cloak]

@desert briar works in cybersecurity right? I think he knows what he's talking about

[tame carbon]

@oblique marlin most routers give away their name and model in the login screen.
So you can just have a list of passwords, to try and get in

[desert briar]

Yeah 😄

Crystal, that wont work either

[oblique marlin]

except mine

[tame carbon]

@desert briar how come

[oblique marlin]

if you havent enabled port forwarding in your pc then the traffic wont pass through your PC @desert briar

[desert briar]

You can try to log into the router, but usually changing settings is done via a POST request. You'd need to know the specific endpoint, specific parameters to send and hope the page doesnt have something like an anti-csrf token

[oblique marlin]

btw i lied, i didnt paid for udemy course

😆

[desert briar]

Its not called port forwarding though

[tame carbon]

@desert briar you think asus routers are protected against this?

[oblique marlin]

i downloaded the whole courde from a website

[oblique marlin]

i trust the UDEMY GUY

[tame carbon]

@desert briar I've demonstrated this before

[desert briar]

which one is it, zaid sabih or heath adams (tcm) ?

[oblique marlin]

which router is the best???

company

zaid

[tame carbon]

@oblique marlin depends

what do you need xD

[peak cloak]

depends

[desert briar]

Yeah, that guy is an entrepreneur and a fraud, lol

[oblique marlin]

what

his tutorials are good

[desert briar]

He only tries to sell you more of his courses, his content is dated at this point.

[oblique marlin]

but he replies when you need help

in 15 hrs as per udemy policy

i see no fraud

[peak cloak]

idk, I like hackthebox tbh. Not that hard so far, most boxes are free and their discord is full of help

of course so far I haven't done any real world scenarios

but they have some boxes that simulate that

[desert briar]

no csrf tokens on my asus

[tame carbon]

@desert briar ❤️

[desert briar]

Im just saying that he is more worried about selling you the product than helping you 😉

[tame carbon]

@desert briar so I was right?

they still havent fixed it lol, this was 3 years ago

[desert briar]

Meh, I still dont think it would be achievable. Because you'd need a way to save a cookie in the users browser

[tame carbon]

@desert briar I know the browser somewhat limits this

[desert briar]

and since ur just making an XHR request, theres no way for you to "receive" that cookie and send it in the next request where you change the DNS

[tame carbon]

but its not the first time that chrome anti XSS doesnt work

[desert briar]

there are a lot of protections like this, lookup same origin policy. A bit offtopic, but applies nontheless

[tame carbon]

Sure

[desert briar]

It dictates what can and cant access cookies

[tame carbon]

@desert briar but I still think there can be a generic suite that is built around this concept

there's lists and lists of default passwords

so you can just throw bait in the water

and see what sticks

[desert briar]

HackTheBox is cool for learning. I have over 30 boxes on that platform, but you eventually hit a point where it stops being fun. It becomes very grindy, the boxes get repetetive

[tame carbon]

this is why I am so sketched out by advertising lol

because they are great driveby vectors

[desert briar]

and you say the community is useful, Id say the contrary. Imo its very toxic

[tame carbon]

@desert briar everyone and their opinions

:3

https://xkcd.com/386/

xkcd: Duty Calls

What do you want me to do? LEAVE? Then they'll keep being wrong!

[desert briar]

ha!

anyways @oblique marlin , dont get hung up on concepts like man in the middle. You wont get to do that sort of a hacking for a long time anyways, focus on what matters. That being web applications mostly, unfortunately

[tame carbon]

https://xkcd.com/2414/

xkcd: Solar System Compression Artifacts

Most of our universe consists of dark matter rendered completely undetectable by our spacetime codec's dynamic range issues.

[desert briar]

Learn about web vulnerabilities. SQL injections, cross site scripting, broken access controls, serialization issues, xml entities, list continues

Look at OWASP Top 10, and try to learn about those things 1 by 1

[tame carbon]

Injection is a general big topic

you can do a weeks worth of seminars

on just injection

[desert briar]

I whole hearthedly (or whatever its spelled) recommend this book - https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470

[tame carbon]

user input -> system, you always have to be 100% what you are doing

[oblique marlin]

which country are you guys from???

[desert briar]

doing an SQL injection on customer's records be like

[tame carbon]

@desert briar this one company I worked for, had this batch processing system that would generate all kinds of document format in output, and one of the exploits I found

was that they allowed the user to supply a filename

which was not properly escaped to shell when written to disk

I write this kind of stuff completely different. I generate a random name for the file, and keep a metadata database

[oblique marlin]

anyone indian???

[desert briar]

Not me

[tame carbon]

and then just change the filename in the http header when the user goes to retrieve it

[oblique marlin]

india has the worst net

[desert briar]

brb 3 mins

[oblique marlin]

i pay for 50 mbps

i get 25

or 20

[tame carbon]

are you on DSL?

[oblique marlin]

idk about other countries

[oblique marlin]

whats DSL

???

[tame carbon]

twisted pair, copper. old telephone wires used for broadband internet

4 wires

https://en.wikipedia.org/wiki/Digital_subscriber_line

[oblique marlin]

@tame carbon what should i write in mapping name

?>???

[tame carbon]

@oblique marlin thats not part of the networking standard

so whatever

[oblique marlin]

should i write my pc name???

[tame carbon]

if its 25565, I'd put 'minecraft' in there

its just a nickname

[oblique marlin]

ohh

[tame carbon]

for you, the human

[oblique marlin]

i wrote Old HP as mapping name then i got error(invalid mapping name)

[tame carbon]

@oblique marlin are you just forwarding for a webserver?

because then you don't need UDP

[oblique marlin]

no

custom

[desert briar]

That works. User input should always be treated like its evil

[tame carbon]

@desert briar I always use metadata

[desert briar]

nowadays you dont get a lot of security aware programmers

[tame carbon]

Never pass user input to any software logic

[desert briar]

and even if, even the best ones tend to slip

[oblique marlin]

i wrote 0001 as mapping name

[desert briar]

thats why its so important to pro-actively test

[oblique marlin]

worked great

can i ask you guys something???

[tame carbon]

@desert briar I hacked my work's own kanban board (touchscreen tv) we use for standups, build status and PR's

[desert briar]

shoot

[tame carbon]

@desert briar one of the co-workers wrote a little gitlab hook

but didnt escape the html, so I just put <script> into one of my commit messages

[oblique marlin]

i have seen people tracking people on omegle, how tf is it possible. IP address just tell rough location

[tame carbon]

and made the background pink

[oblique marlin]

?

[peak cloak]

Omegle is p2p

[desert briar]

thats all they get, a rough location

[peak cloak]

Yeah

[tame carbon]

@desert briar this is plain injection, right?

[oblique marlin]

but people on youtube tell the street name

[desert briar]

more or less XSS at that point, an HTML injection

[oblique marlin]

how is that possible

[desert briar]

yeah well, youtube isnt always the source of accurate things

lol

[tame carbon]

@desert briar well, when I pushed the commit, the board updates, and sees that string as commit message

and doesnt escape it

runs it

[oblique marlin]

no i am not saying that
i am saying that they get NEARLY exact address

[tame carbon]

practical joke

my coworkers didnt think it was funny

[desert briar]

a lot of html tags can execute js, some even have dedicated attributes like onload= , thats why you need to be careful

[tame carbon]

I just emailed him a git oneliner that would rebase the repository to remove the commit xD

[oblique marlin]

i tried tracking my own IP
all i got was my state name

i am sure they make the other guy click links

[peak cloak]

Omegle is p2p

[oblique marlin]

huh???

[desert briar]

expalin what p2p means, guy has no idea

[peak cloak]

Yeah true

Basically

[desert briar]

im eating a fish, trying to not choke on bones

[tame carbon]

@desert briar framework I use to do web stuff with java, I wrote myself. The template engine is using handlebars, which automatically escapes everything

[oblique marlin]

yes i am noob

@peak cloak explain please

[tame carbon]

@desert briar the actual implementation of such escaping, I rather leave to professionals

[oblique marlin]

me = noobie

[tame carbon]

@oblique marlin does OSI say anything to you?

[oblique marlin]

ik bout OSI

[tame carbon]

ok, phew.

[desert briar]

A lot of languages have dedicated escape functions. In php you for example have htmlspecialchars() which will filter the "malicious" chars before outputting them

[oblique marlin]

open system

[desert briar]

not phew

[oblique marlin]

ingterconnectiong

interconnection

[desert briar]

ah

phew

[tame carbon]

@desert briar I expect anyone who does any sort of hacking, to know at least about OSI

the fundamental system we hack on

[oblique marlin]

presentmonkey is bout to drop a big para

[peak cloak]

Instead of there being a central server for video and packets first going to the server then the next person, the packets go directly from one person to the other. The effect of this is much lower server costs but you can get the other ip through something like wireshark to capture and inspect the packet headers such as destination ip address

[tame carbon]

POSIX and OSI

are two most important things to really read up on, and understand

Its most common system interface you'll find on devices

[desert briar]

there should be a cyber-security channel

[tame carbon]

@desert briar shh

#networking is the place where all software and networking experts end up

[desert briar]

😄

[tame carbon]

this is the only place where windows is frowned on

[oblique marlin]

bruhhh
i used wireshark to get source IP of the UDP packet coming
i am saying that how do they get EXACT ADDRESS EXACT EXACT FROM Ip address, its not possible

[peak cloak]

They don't

[oblique marlin]

they do

[peak cloak]

You sure about that

[tame carbon]

@oblique marlin you know what you should look into? network taps

[static knoll]

Agreed, windows networking SUCKS BUTT

[tame carbon]

you can put PC <--> Tap <--> Router

[peak cloak]

Plus residential IPS are dynamic

[tame carbon]

and then read all the traffic between those devices

but

really, understanding how ethernet networks operate

and what can be used ontop

idk, like, finding exploits is a bit like solving a puzzle

[desert briar]

look at https://www.professormesser.com/network-plus/n10-007/n10-007-training-course/, worry about hacking later

[tame carbon]

@desert briar do you think learning basic programming is a must for any pentester?

like, I am a developer by education, but I picked up some of this stuff on the side

[desert briar]

In all honesty, it kind of depends. Scripting is definitely an advantage. But you usually have people from many backgrounds, be it dev or networks. Devs usually lack on the networking side of things, network people lack in the programming side

[tame carbon]

I've dabbled with wpa2 cracking

using a GPRS connection

xD

tiny device

using a raspberry pi

all you need is money

like, 5 bucks

and you can crack any wpa2 network

[desert briar]

You seem to pick up either as you go deeper into the field. In all honesty though, you cant avoid it. If you get deeper into "serious" penetration testing, aka red-teaming you will often have to write your own toolkits. Stagers, C2s, process injectors etc. etc. You kind of need to know how to code for that 😄

[tame carbon]

the script, would send a deauth, grab the handshake

and then connect to your aws account xD

spin up the biggest gpu instance you can, loading a prepared image, which basically has cudacat

and just bruteforces the password

~15 minutes

[desert briar]

Cracking wifi is kind of impractical imo, at least they way they teach it nowadays. Nowadays most enterprises use stuff like radius, eap and what not. Standard procedures of "deauth->capture hash" dont work anymore

[tame carbon]

@desert briar I used this on my travels with a bike

before they removed roaming costs in EU

[desert briar]

what you did has a term. Its called "wardriving"

[tame carbon]

oh, really?

xD

WEP was even easier

[desert briar]

Yeah, but you used a bike instead of a car 😄

[tame carbon]

you could do that with a laptop

[desert briar]

with WEP you dont even need AWS

[tame carbon]

and you'd be surprised how many people dont protect their wifi xD

[desert briar]

Yeah well, again. Surprised or not, shouldnt be your concern 😛

[tame carbon]

@desert briar ofcourse, I used a VPN to dialout

not going to run my traffic through a honeypot by accident

[desert briar]

you should have boundaries which you dont step over. Stay ethical and what not

not joking, just telling you to not be a d. Cant finish the word or id get my second warning

[tame carbon]

I spoof macs

neighbors

[static knoll]

only reason I would really break into a network is for free internet access

[tame carbon]

@desert briar I've built these tools all on a pi before, during my youth

[static knoll]

otherwise, i don't necessarily want other people's data

[desert briar]

Ethics dont mean a thing to you guys, do they

[tame carbon]

lol, but you need realworld targets

thats where the fun lies

I'm not going to anything illegal on their network

just lifting off their bandwidth

[desert briar]

thats where the jail lies too

[tame carbon]

lol prove it was me

[static knoll]

exactly

better than paying for cellular lol

[tame carbon]

@static knoll broadband is flatrate

I paid like 1 euro/MB

[desert briar]

Yeah well. It shouldnt be the "prove it" argument. It should simply be about ethics. You do not utilize your skills to cause harm

[static knoll]

no, like i would rather mooch off of other people than pay for my own cellular data

[tame carbon]

@desert briar what harm has been done

[desert briar]

Im pretty sure gaining access to networks without authorization is harmful, lol

[static knoll]

How so

[tame carbon]

@desert briar you know what a greyhat is right?

[static knoll]

If you're not accessing their data, surely using the internet access is alright?

[tame carbon]

If people run poor wireless security, I lift when I want.

[static knoll]

Especially if it's locked behind a stupid rewards program or something

[tame carbon]

I don't create botnets or DDoS. that shit is disgusting

but I do small time hacking, as practical utility

like, my neighbors who play justin bieber in the garden at 2am

[peak cloak]

Router is l3 switch is l2

[tame carbon]

I got so fed up

I just set a deauth script running and went back to bed

[peak cloak]

Router does ips switch does mac's

[tame carbon]

no more docking station. xD

[desert briar]

greyhat is still very much illegal, lol

[tame carbon]

I know

@desert briar but like I said, prove it was me.

[desert briar]

whatever, im not here to correct ethics. Just dont do stupid stuff

and if you do

dont brag about it on the internet, is all

[static knoll]

Yes, that is something I'd say is ethical

Considering that it's 2 am and you're trying to sleep

[peak cloak]

@desert briar found an open wifi network today, it was a chromecast

[tame carbon]

@static knoll the last time this happened, I went out at night with a bathrobe and a maglite

they were so drunk, that the dad and son started cussing me out

[peak cloak]

I think I know who it is, I should tell them

[static knoll]

Lol

[tame carbon]

like monday morning 2am, fuck sake xD

[static knoll]

Oh goodness

[tame carbon]

@static knoll I say: i Have to work in the morning

and the dad says: me too! so quit whining

[desert briar]

🤷‍♂️ , you can bring it up in a conversation. Sure thing. Depends on the relationship you have with your neighbors

[tame carbon]

they put like 9 cameras all around their house

[peak cloak]

Good older neighbors

[tame carbon]

including our garden

[static knoll]

Wow

Such an idiot

[tame carbon]

and flooring sportscars at like 3am in the morning lol

after they go home from the party

[static knoll]

Even worse

[tame carbon]

Like, I don't mind a party

you can go late on saturday

but please, dont do this on sunday

[peak cloak]

We shoveled snow for them, his wife gave us a whole big crumb cake.

[tame carbon]

@static knoll lol, so they got word we are seriously pissed

they bring a cake

as a sorry statement

and then 2 weeks later

again

xD

[static knoll]

yeah at that point I'd just shut off their internet and force them to call the ISP over and over again

[tame carbon]

@static knoll I just left a script running for like 1h

[static knoll]

Calling your ISP and getting them on site is a pain in the butt

[tame carbon]

that would just boot devices off their wifi network

[static knoll]

I mean, I'm thinking long term here lol

[tame carbon]

aircrack-ng is ❤️

https://www.aircrack-ng.org/

[static knoll]

question, can you do that on android?

[tame carbon]

Yea

[static knoll]

Ooh

I might do that for my school (if covid ever ends)

[tame carbon]

https://www.aircrack-ng.org/doku.php?id=cracking_wpa

there's a tutorial on wpa hacking

or rather

cracking

its not hacking.

[desert briar]

Then sure, bring it up. Like hey guys, do you have a chromecast by any chance? I noticed it pop up on my phone, maybe you should ask ur son or whatevr to do something about it

[static knoll]

But does that mean i can gain access to the network?

[tame carbon]

@static knoll not all phones can do this though

[static knoll]

At this point I probably am going to load linux onto this thing

Android has outlived it's usefulness

[tame carbon]

@static knoll https://github.com/kriswebdev/android_aircrack/blob/master/README.md

@static knoll you can do this on a pi

as long as your wifi interface supports monitor mode

you do need a rooted phone

[static knoll]

Don't have a pi rn, it's in the US

[tame carbon]

https://i.imgur.com/zI3kTwN.png

I did this on my old Nexus 5

[static knoll]

I have a razer phone 2

[peak cloak]

My dad just got a new phone, he has used his s5 active for like 6 years

I'll try to root the s5

[static knoll]

Dunno what chipset i have

[peak cloak]

Don't understand why people buy new phones every year

[static knoll]

845 SoC

[tame carbon]

but a pi is far more versatile in this case

[static knoll]

I don't have a pi rn so....

[tame carbon]

@peak cloak planned obsolescence

[peak cloak]

Yeah it sucks

[tame carbon]

because people need a new iphone every year says apple

[peak cloak]

My mom also got a new one, used the iphone 5, got the iphone se 2020 now

[tame carbon]

and smartphones also die

because its an object that is used

all the time

you have no idea how many people drop theirs in the toilet

when they sit and read the phone

it falls out

and splash

iPhone 4, Nexus 5, Nexus 5X, and just recently I switched to a Galaxy A50

[static knoll]

A series isn't too bad

Ain't the fastest thing on the market tho

[tame carbon]

if I would buy a new phone rn

I'd buy the pixel 4a

[peak cloak]

My old j3 died suddenly once. Screen just stopped working. Checked the connections, but nothing. Already replaced the screen once, and decided it just wasnt worth it to buy a new screen. Now I got the a10e

My parents are anti google, don't want a Google phone

But android is basically google

[tame carbon]

You can just flash LineageOS on it

[static knoll]

People in my country are trying to use J2 Primes to play Genshin Impact

Their phones are blowing up and it's hilarious

[tropic gyro]

hello everyone, i own a DELL PowerEdge T110 II with an iDRAC, he's connected to my network with ip 192.168.1.33 but when I try to access to the interface with my web browser
It gives : 192.168.1.33 refused connection

[tame carbon]

can you ping that IP ?

[tropic gyro]

yes

[desert briar]

try https?

[tropic gyro]

not working

[desert briar]

http?

[tropic gyro]

not working

[desert briar]

🤔

[tame carbon]

don't you need a client for this?