general

[scenic maple]

who even uses outlook these days

[hard cedar]

People who buy sports goods appearantly

[scenic maple]

show a warning on the website saying we dont support outlook emails

if you use outlook pleasse make a gmail account

[frail turtle]

fortune 500s

[scenic maple]

and they regret it everyday

[steep glacier]

so will there be just one subscription that will provide access to both htb labs and letsdefend?

[hoary nebula]

Htb x letsdefend, what does this mean

WHAT DOES IT MEAN

[warped plank]

Even we don't know

[hoary nebula]

[scenic maple]

htb has letsdefend now

just liek vulnlab

[hoary nebula]

Okay, and

[scenic maple]

and htb is goat

[quasi ridge]

woo letsdefend

it's free or what?

[torn cedar]

They bought the competition, there yah go

[quasi ridge]

https://tenor.com/view/the-simpsons-bill-gates-buy-him-out-hostile-takeover-acquired-gif-9327086

[proud moth]

Offshore OST

[trim atlas]

what is letsdefend

[quasi ridge]

Post-Punk is doomer?

since when?

[proud moth]

dunno, ask KalashRM on youtube

[trim atlas]

open your EYES people, the only reason that HTB can afford to buy all these companies
is because they raised the HTB+ subscription price.

Wake up sheeple

[quasi ridge]

at least it wasn't for inflation reasons

Getting more for money is on target

[opaque sedge]

m0.0m

[buoyant wyvern]

Is there any HTB staff that can answer my question?
Is it permissible to use demonstration pictures from the academy for my write-ups?

[eternal mango]

Writeups for Academy content are only allowed for Tier 0 modules. As for reproducing the assets from the Academy, I'd say likely not.

Read the terms of service 🙂

https://academy.hackthebox.com/tos

[buoyant wyvern]

I would not say it is not write up for academy content, but like teaching the attack in my own environment but using some pictures like this for demonstration

[trim atlas]

looks illegal to me

[eternal mango]

It is a writeup. Read the tos

It states quite clearly the rules on IP from Academy.

If you are developing your own environment, then develop your own content.

[buoyant wyvern]

fair enough, thank you for your answer

[proud moth]

how is that a writeup lmaoooo

a writeup of what? a kerberos exchange?

[buoyant wyvern]

that is what I thought.

[proud moth]

you can generate the same in 2 seconds on deekseek lmao

how is that a writeup it's just a picture lmao

[eternal mango]

I advise reading over what I said again @proud moth, if you have trouble grasping it

[proud moth]

look, Hacknet writeup guys:

[silver forge]

but why are you sharing something actually useful and cool here

[buoyant wyvern]

yeah that sounds much more better, thank you

[proud moth]

"trouble grasping" lmaooo holy hell

[dusky jacinth]

Yall feeling spicy this morning huh?

Everybody got get some coffee and a bagel and chill tf out

@terse dirge Im talking to you

Absolute menace

Now who up hacking they box

[warped plank]

It's based on HTB content that isn't meant to be put in writeups, it's not allowed,even the color palette is a blatant copy

[torn cedar]

Ngl it looked like a THM palette

[warped plank]

Yeah... look at old THM/white mode

[buoyant wyvern]

I justed wanted to explain how kerberos authentication works, with some HTB pictures, this module does not even contain lab

[silver forge]

The day palettes can be copyrighted, I will copyright black text on white background and sue you all

[dusky jacinth]

It’s not about what you want

[proud moth]

the color palette lmaoo

[dusky jacinth]

Jokes on you I use windows white on blue

No I don’t

I lied

That’s evil

[buoyant wyvern]

then what

[eternal mango]

You got your answer already

Let's move on?

[dusky jacinth]

Anything but what you want

That’s life baby

[torn cedar]

Hack the box?
Nah
Defend the box

[dusky jacinth]

Up hacking my box rn

Up hacking my defenders box rn

Wait

That might be too far

[silver forge]

lick the box

[dusky jacinth]

Tbh guys I wanna be hacker rank to post gifs so bad

I gotta lock in

[hard cedar]

Spent waaaaaaaaaaaayyy too long to root editor for my likings >_>

[torn cedar]

Don't do it for the gifs

[hard cedar]

should've linpeased it

[dusky jacinth]

You don’t understand the depths of my pettiness

[proud moth]

if not for the gifs, what else?

[dusky jacinth]

The desire I have to no longer be an embed failure

Goth women

And to get good at what I love

The usual

[torn cedar]

Time to grind season 9

[dusky jacinth]

🫡

[hard cedar]

Oooohh in 8 boxes I have 100 user pwns.
I should throw a discord party 👀

[frigid palm]

Ah so that's why the price went up

[swift scaffold]

When are we gonna see letsdefend labs in htb

?

[quasi ridge]

https://tenor.com/view/dance-crazy-party-man-bald-gif-17362387

[buoyant wyvern]

probably can find here #1318239802931286066

didn't know that

[opal lark]

Welp. Soon I shall be going to my interview. Hopefully it goes well

[devout sail]

Yesss

Who gave u redbull

[opal lark]

Yeah, this is my second one following my internship. Believe it or not, the place I’m interviewing at is actually very close to where I had my internship.

[wet thistle]

@devout sail heyy

[devout sail]

Heyy drog

Wait

Night

White

[wet thistle]

Hows life

[opal lark]

Yeah, I’m currently applying to a hardware computer technician role.

[devout sail]

Tiring af, just came home after 1hr drive

[opal lark]

I honestly don’t really know a lot, but I did take some time to review things like soldering and basic computer parts.

[devout sail]

Too much traffic

[wet thistle]

@wet thistle isee

[devout sail]

Hehe

How' areu

Ready for season 9

Pop another can

[dusky jacinth]

Audio is my preferred way

[devout sail]

Audio is useless for me
Unless I'm focusing all on it. Like need to immerse or its waste

I use it on my windows host
It was straight forward setup

Just get the data from vm. To host and import
Idk if. I'm missing anything by doing that way

Hey 11

I'm 21A

How does it feel to be 10 versions and 1 patch behind

At least get the version 19
It patches the stupid emotions

[split patio]

@devout sail what are you talking about right now?

[opal lark]

Well regardless of whatever happens, I plan on playing borderlands 4 when I get home.

[devout sail]

Oh Shadow versions

[split patio]

sorry my english is bad, i am from Asia

[devout sail]

And what ma7asn3h said

I too

[stone marsh]

I just turned down a job offer today, hopefully the right choice

[split patio]

what version is it currently on?

[devout sail]

21A

[split patio]

haha yeah, it's okay bro, as long as there is an intention to discuss 😅

[devout sail]

V22 failed

[split patio]

Is there a trigger for a vulnerability? bro?

[devout sail]

[stone marsh]

Disagreement on contracted entitlements. Basically I had compromised on the pay a fair amount because I thought the environment was going to be better and have more opportunities, but there was going to be like a 18 day difference in holiday entitlement, longer work hours and a shorter contracted lunch...I would have actually been making less money long run

[severe stream]

good on you for paying attention. These employers just suck us dry honestly

[devout sail]

We were joking cuz me and @severe stream have similar name

[split patio]

I'm still doing a reset on my work tonight, but I guess that's not really important right now.

[split patio]

Oh my gosh broooo 😂

🤣

[devout sail]

Do not the cat

[stone marsh]

Yeah, it sucks because I was really looking forward to it, but if the pay isn't going to make up for it, then the other entitlements need to at least be a bit closer to each other.

[devout sail]

https://http.cat/409

[stone marsh]

Love remote. I barely leave my house for work now adays, it's awesome

[proud moth]

i'm gonna go remote next month but i live in a basement

[exotic pendant]

[stone marsh]

https://tenor.com/view/nosferatu-cellar-gif-12230325

[proud moth]

me leaving the house to go buy exclusively redbull and cigarettes

no food allowed

[static pasture]

those are both bad for you mkkay

[devout sail]

Stop eating and drinking

And breathing too

[proud moth]

Dies

[exotic pendant]

I got a gambling problem

[proud moth]

Splonk

[devout sail]

[exotic pendant]

I keep buying lottery tickets

[proud moth]

poker?

i love poker

[devout sail]

99% of gamblers stops right before their big win

[exotic pendant]

You can only lose 100% but gain 2000%

185m would be sick

[silver forge]

[devout sail]

.8 to me?

[proud moth]

it would be indeed sir

[exotic pendant]

Thankfully I can afford this problem

[proud moth]

once a week i do 100 bucks poker tournament, i sort of can afford it

Sort of.

[exotic pendant]

but dang even 2m would be life changing

Buy a nice home

[proud moth]

dang

2m is life changing

[exotic pendant]

Get a really nice pizza oven

[proud moth]

my man got priorities straight

[devout sail]

It's loss meme 😢

Did that guy got yeeted after saying that

Hey pissboy

Lurking

[exotic pendant]

10-methoxy-5,6-dipropylundecane-2,3,4,7,8,9-hexaone

[dusky jacinth]

You know me

The dream

[devout sail]

[devout sail]

.:|:;

5 and 6 got lost

[proud moth]

woot woot

[devout sail]

fake root

[gray wraith]

Just PayPal em to me man

Better investment

[neon ridge]

good morning fellow hat wearers of diffrent colours and box the hackers and such 😇

[supple plume]

What is endgames in htb

[supple plume]

4pm here

[neon ridge]

thats valid XDDD

[supple plume]

Hahah

[neon ridge]

yes i totally have gif perms and can tell you 😭

were manifesting today

[supple plume]

How is it going chat

[white echo]

So y’all be using ChatGPT or what

All I see is a bunch of prompt engineers

[supple plume]

*Prompt principal engineer please

[vivid flower]

Its this one

[supple plume]

I'm so stubborn on using Arch that I dockerized kali to have the tools

Pain is my bread and butter

[pure moth]

terrorist ass country soundtrack

[lime trout]

hi chat

[supple plume]

I'm higher rank than you

[vivid flower]

Gm Emma

[static pasture]

Hi emma

[supple plume]

Hi spy crow

[lime trout]

gm tyc

[lime trout]

Hi Falcon

[static pasture]

Hi amiwho

[frail turtle]

https://youtube.com/shorts/juZEosbUl3o?si=3563BLVyjza3D6w0

[wanton hedge]

(Sorry if you see grammatical errors, I'm not a native speaker)

[silver forge]

grammatical errors are unforgivable around here, cowboy

[maiden anvil]

we are being invaded by aliens from a parallel shadow dimension

[proud moth]

what peak error handling looks like

lmao

[heady sage]

Ah yes delete the long message asking for help

A cunning strategy

[cosmic violet]

What other pages do you guys know that perform a similar function to Webhook?

[silver forge]

pages?

[proud moth]

net_sz=$((2**$((32 - $(echo $1 | awk -F"/" '{print $2}')))))

sorry wrong chat

[maiden anvil]

they tried shooting a missile at a ufo

but the missile didnt explode

and the ufo kept flying

but the weirdest part was 3 lil pieces broke off

and kept following it

[limber arch]

Did this turn out to be true? My friend who is low-key a conspiracy theorist told me abt it so I doubted it lol

[hard cedar]

The hoax around 3I/Atlas is just a comprehensive reading skill issue gone wrong

[maiden anvil]

yes there was a gov hearing about it last week

[limber arch]

Damn

That’s a bit concerning

[hoary nebula]

Mods, ban the guy below me

[soft fern]

Man, I really love HTB for what it is

[raven rain]

sorry nexion

https://tenor.com/view/freza-mata-vegeta-dragon-ball-z-gif-9312306410487027583

[sturdy thistle]

My wife and me are probably moving to cypress within the next 6-7 years

[agile thunder]

Good afternoon from great brittania hack the box chat

[silver forge]

who plans literally anything that far though, seriously

[agile thunder]

I know that I'm moving to the netherlands in 2 years

6-7 is quite far though lol

[sturdy thistle]

Yeah we have to gather some money ofc

And my parents have a house so they’re quite old

I know it sounds weird but we have to check several things before moving

[devout sail]

What does tyc mean
UD isn't helping 💀

[lime trout]

@vivid flower

[devout sail]

Ao i thought it was some abbreviation

[rich radish]

hello sars

i am indian

[agile thunder]

@lime trout explain yourself

[maiden anvil]

what got you inspired to move?

[green kite]

#general message

[austere sigil]

Hi

[meager kernel]

doesnt that require a plugin?

[agile thunder]

uhhhh

[green kite]

Hello sir

[foggy veldt]

Hello, both entrypoints for Hades (EU & US servers) seems to be down.
I already request a reset.
Do you have an idea of the delay ?

[meager kernel]

its alright
ik it does

ive used vencord too

[austere sigil]

How is you?

[lime trout]

contact support

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[green kite]

Good

You?

[austere sigil]

Never better

[green kite]

Nice. That your ride?

[supple plume]

Are you the camel?

[austere sigil]

Yup

[limber arch]

What’s the MPG like on that

[austere sigil]

Just decoration

[stray whale]

does this server really not have a #memes channel

[unkempt olive]

hi

[silver forge]

when did linkedin become a spam platform where talent agencies offer you specific employees by cold calling you.. wtf

https://tenor.com/view/andrew-klavan-dw-dailywire-gross-nasty-gif-5438369578862270519

[foggy veldt]

The agent never responds in the chat
Waiting after "Connect to an agent"

[meager kernel]

people just spam weird ahh post whenever i open linkedin

[lime trout]

poked someone

[meager kernel]

"motivating" post

and its so annoying

[lime trout]

Today i saw someone drop their coffee, this is how it helped B2B sales

[meager kernel]

LMAO

ive seen a guy talk about how his house burning and his wife trapped inside helped him get a sales idea 😭

[sturdy thistle]

Weather for example

[maiden anvil]

thats fair its been raining nonstop all year by me basically

and its really fkin annoying

[soft fern]

You guys get cold calling? I keep getting DMs about Finance opportunities.
It always starts something along the lines of "You look like a great match for Finance."

[frail turtle]

WHAT?

[proud moth]

HOW TO BYPASS EVERY DEFENSE EVERY AV EVERY DEFENCE MECHANISM ON WINDAS PLZ PLZ?

[green kite]

You say PLEASE SESAME OPEN UP

[proud moth]

OK THANK YOU SIR I TRY NOW IT WORKS WITH POWERSHELL ALSO PLZ?

[neon ridge]

Why are we yelling hehe jk

[proud moth]

It's against the TOS 🤡

virtual yelling

[warped plank]

https://tenor.com/view/put-the-gun-down-arch-genvieve-archambault-saint-pierre-disarm-yourself-gif-14045215126452637460

[opal lark]

So I finished my interview, though it was much quicker than expected.

[west venture]

cat

[thick wigeon]

Lf a mentor

[hoary nebula]

Yes

[buoyant wyvern]

is there anyone who knows kerberos very well
The Ticket-Granting Service is a component of the Key Distribution Center (KDC) that is responsible for issuing service tickets.

Typically hosted on a domain controller in the Active Directory domain. When a user or computer requests a service ticket, the request is sent to the TGS component of the KDC, which verifies the user's or computer's identity and checks their authorization to access the requested resource before issuing a service ticket that can be used to gain access to the resource.
this is content from HTB academy, and i think this is wrong, Just before this text, i read the the kerberos is only authentication protocol not authorization. and the service will decide whatever the TGS is for the user who can access the service, am i right? can someone clarify this please

[zealous charm]

@maiden anvil any hacking today?

[proud moth]

Aight let's say i request a TGS for CIFS/fileserver.domain.com, kerberos will first authenticate you by verifying the TGT, decrypts it and verifies your session key and identity and allat, the authorization is done on the service part, namely it's fileserver.domain.com job to authorize your request for a certain SPN by doing this:

• Decrypts the TGS using its own long-term secret key (known only to it and the KDC).
• Extracts the user's identity and group memberships from the authorization data inside the ticket.
• The service now makes its own authorization decision: "Based on my access control lists (ACLs), is this user allowed to read this folder?" for example

kerberos gives you the TGS without question once you authenticate with TGT, it's not authorization protocol as you mentioned

[maiden anvil]

no bcuz im a noob hbu?

[zealous charm]

no bcuz im stuck in calls all day

[buoyant wyvern]

exactly, so this makes the text from HTB academy wrong

[fluid gate]

anyone knows if the billing for letsdefend is going to merge with HTB

[buoyant wyvern]

because it's saying TGS component from KDC will authorizate you

[proud moth]

yes it's not the KDC that authorizes access to the resource, it's the service principal hosted on the SPN host

[buoyant wyvern]

should i report this

[proud moth]

no because half of academy content is wrong anyway and will fail in 99% of the realistic cases anyway

so don't worry

[thin peak]

lies

[proud moth]

(nah joking, if you want you can report it but honestly, it doesn't matter that much and can be interpreted in another way, maybe the wording was misleading)

[buoyant wyvern]

i would understand that if it is because it's outdated but here it is just wrong

[proud moth]

there is a caveat though

[buoyant wyvern]

what is that

[proud moth]

the KDC can be configured in such a way that it doesn't even give you a TGS in the first place

so there is a layer of authorization as well

it's just not only in the KDC

the TGT contains your identity and session key, so one could configure the KDC to avoid giving your identity a TGS for some stuff, like CIFS/dc.corp.local

however, if you fail to get this TGS, it's really an authentication failure in my eyes

anyway, theory confuses me so i don't know, it doesn't really matter that much honestly imo

[buoyant wyvern]

yeah but this is not even close to what the content is saying, I am try to report this, and will see what happens

how can i do that actually

[proud moth]

@heady sage probably could tell us better

[proud moth]

/feedback i think or something like that

[buoyant wyvern]

is there any thing like this in academy itself

or is it problem with technical support

[heady sage]

Not quite

[boreal pike]

https://tenor.com/view/leaked-character-ai-chats-character-ai-chats-character-ai-leak-character-ai-cai-gif-8362996510716869401

[proud moth]

yeah i also agree

[heady sage]

The TGS is not indicative of an authentication

[boreal pike]

Oh, @scenic maple You there?

[heady sage]

It just says that hey such and such user is given permission to access this service

[proud moth]

ah wait, that's true, the academy text is correct, it's only saying that the KDC can deny the issuing of a TGS which is true

[heady sage]

Yeah that’s what I said

[proud moth]

ok ok, then yea it's fine, the wording can be a bit confusing

[silver forge]

think of an amusement park. you get a ring on your wrist. then you go around, but you can't get straight into any of the machines. you have to show your ring to get a new ring that actually lets you into the machines.

and then you slip on a banana peel

[buoyant wyvern]

i think it is not just a bit

[heady sage]

Very good explanation

[silver forge]

source: read the specifications, implemented several low level kerberos client & server components

[buoyant wyvern]

I really can not see the part where it says if configured like that honestly

[heady sage]

The TGT allows you to get service tickets.

[buoyant wyvern]

I know this

[silver forge]

yeah and you may get service tickets even the service itself will say access denied later on... there's no harm in having a ticket

except there is, but yeah

but that's just microsoft, not kerberos itself

[buoyant wyvern]

yep, and the text is saying the opposite saying the component of KDC will check the permissions before you get TGS

[proud moth]

consider what happens when you have Account is sensitive and cannot be delegated, then not every TGS will get issued to you, i guess this can be thought of some authorization check?

[silver forge]

don't blame kerberos for any goof made by ms

[heady sage]

There appears to be a disconnect between your understanding of the material and the material that is presented to you.

Fortunately there is a solution

[buoyant wyvern]

I think i am understanding everything pretty well in the content

have you done Kerberos attacks module

[silver forge]

tbh kerberos a complex thing that takes a long time to start understanding, and then the AD implementation is another beast too

[heady sage]

Very true

[buoyant wyvern]

I understand Kerberos not very good but enough to understand the process you guys are trying to teach me

have any of y'all made Kerberos attacks module

[silver forge]

no, Kerberos is one of the best technologies ever developed. it's definitely "good". it's just complex.

[buoyant wyvern]

yep it is

[proud moth]

in my opinion the KDC definitely does a kind of "authorization" check as well, as it can deny the issuing of a TGS depending on who you are

whenever different identities can access different resources, that's authorization

[silver forge]

true, it's just somewhat coarse at that stage

[proud moth]

it's just different from the service account authorization, for example requesting MSSQL/db.corp.local but you have no privilege to do xp_cmdshell

these fine-grained service authorizations are checked by a service account, not the KDC

but the KDC still does an authorization check on who you are before giving you the TGS

[silver forge]

based on couple really broad users groups and settings, yes

[proud moth]

or simpler for CIFS/dc.corp.local it would decide which shares you can read/write for example

[tiny canyon]

@proud moth still can't believe i lost my job to an immigrant

[buoyant wyvern]

yeah you are right, what you are saying is right, but the text does not contain any if statement, it justs sits between AS-REP and TGS-REQ

[proud moth]

yeah it's a bit not specified enough

maybe you can propose a feedback to add this little info in there, dunno

i use HTB academy as a jump start to do more research, so i don't trust a single word I read never

[proud moth]

RIP, was the immigrant an HTB player?

[ornate ibex]

Hello

[buoyant wyvern]

I think i am getting there too, i just don't want to know how many people are confused at this when reading the module

I have paid for this

[silver forge]

maybe put on some music and jam the module instead of reading it, sing it aloud

[proud moth]

it's ok, nobody really understands any of this anyway

as long as you do your own research you're gonna be fine

[placid scroll]

Is it allowed to stream old boxes on twitch like live? Or is there anything i should be aware of? I was thinking of it

[rustic carbon]

I just don't use discord as much..

[warped plank]

Only retired boxes that AREN'T Vulnlab

[scenic maple]

yes dear

[placid scroll]

What about fortresses and challanges? Only retired/ old ones?

[buoyant wyvern]

yeah you are right, thank you for help man

[scenic maple]

u cant do fortress

https://help.hackthebox.com/en/articles/5188925-streaming-writeups-walkthrough-guidelines

[proud moth]

no prob i hope it kinda helped i dunno

[rustic carbon]

Also @crude lynx not to be rude but please try not @ me next time overall pls thank you

[proud moth]

i am confused by kerberos too sometimes

[rustic carbon]

Btw hey guys what's up

[placid scroll]

Thanks i'll read through it 😄

[buoyant wyvern]

it did

[proud moth]

nice 😄

[boreal pike]

https://tenor.com/view/trade-offer-rickroll-gif-23326359

[scenic maple]

https://tenor.com/view/british-cop-screaming-screaming-sad-gif-1879411192175791821

[boreal pike]

MUWHAHAHAHA!

[scenic maple]

its finally joever

[boreal pike]

Also, I just hacked my own Kali Linux account because I didn't know my username and password.

[frail turtle]

Im finally gonna see a psychologist after climbing two mountains and scaling the himalayas, i finally found one that will do a simple evaluation for me!

[scenic maple]

epic haxor shit

[clear dagger]

https://www.tiktok.com/t/ZP8SyV2WK/

No saving these containers

[lime trout]

not enough chaos

[proud moth]

BAHAHAHAHAH

[rustic carbon]

How do I rank up? 🥲

[vivid night]

DefendtheBox let's goo

[scenic maple]

https://tenor.com/view/cat-gif-27161863

[scenic maple]

by doing active boxes and challenges

[rustic carbon]

On lab? Not academy?

[scenic maple]

lab

[rustic carbon]

Good grief..

Thank you for the info

[silver forge]

the labs are not designated as griefing

[boreal pike]

Time to dust off my hacking skillz.

((There isn't a lot to begin with.))

[maiden anvil]

im worried

about what info claude knows

and who he is selling it to

[rustic carbon]

You think? 👀

I'm still at Setting Up I may not rank up at all for 2 weeks (until I finish all the fundamentals)

Btw is pika backup important?

[muted olive]

.......?

oh

ragebait

never mind

have a nice day 🙂

[boreal pike]

"Guys please don't hack me, I can't log into my pc... My credits are as follows:

Username: Partyanimalguy1998
Password: PartyDonutsAreTheBestz!!!"

"Update: Guys, a bunch of people just purchased a bunch of stuff from my bank account... Plz help!"

[hardy frigate]

Rewrite english in Go otherwise im not talk here

[green kite]

:?:

[hardy frigate]

What bank today does not force MFA

[mystic harbor]

me fr

[hardy frigate]

Which reminds is why im gonna do the Android hacking path once its out

[rustic carbon]

? 🥲

[muted olive]

$ Partyanimalguy1998@donutparty~ sudo su
Password: 
# root@donutparty~ whoami
root```

too late

mwahahahahha

[hardy frigate]

Jokes in #general ?

[sturdy thistle]

yay!

[muted olive]

Nice! Was it a private bounty?

[sturdy thistle]

No but i dont wanna share the name to find more bugs 😛

[rustic carbon]

Haha fair

[muted olive]

Good job on finding it, whatever it was

Some companies on H1 really really suck

[rustic carbon]

Alright I'm peacing out to go back to studying

Have a good one guys!

[boreal pike]

NOOOOOOOO!

[sturdy thistle]

it was intigriti

[muted olive]

Ohhh. Yeah I've never tried that platform. How is it?

[sturdy thistle]

I found Broken Function-Level Authorization

[zealous charm]

💸

[maiden anvil]

@zealous charm check this meme out

[zealous charm]

I rise to the top

[maiden anvil]

SKY'S THE LIMIT

[scenic maple]

when you just crossed a limit it means you still had one but when you have none there is just void cold emptiness

[hardy frigate]

Hey Dan

[buoyant wyvern]

@proud moth just released the explanation article, you can check it our here, would really appreciate a feedback
https://medium.com/@SeverSerenity/kerberos-authentication-process-b9c7db481c56

[frail turtle]

AS-REP

AS-REQ

[buoyant wyvern]

TGS-REQ

TGS-REP

[frail turtle]

Ive got a golden ticket

[scenic maple]

but why medium

[mystic harbor]

looks familiar

[buoyant wyvern]

because i don't know anywhere else

[scenic maple]

[frail turtle]

No

[buoyant wyvern]

do you know elsewhere

[heady sage]

@scenic maple

Scam over here

[orchid breach]

They been posting it in modules too lol

[mystic harbor]

it's everywhere

[orchid breach]

[scenic maple]

bro i they post it in every channel

it gets so fricking annoying

[mystic harbor]

most probably bots

[scenic maple]

ofc lmao

no one would do it by hand

[mystic harbor]

Someone who is on the grind

[orchid breach]

Locked in

[warped plank]

Meanwhile mods

[scenic maple]

[buoyant wyvern]

I don't really care about views so, it is mostly because i wanted to improve.

[warped plank]

I mainly do my blog as a project to put on my resume

[buoyant wyvern]

yeah i realised this too after starting doing it

[scenic maple]

if i oneday start a blog it will be to flex on recruiters

[raven rain]

my blog is a PoC

[warped plank]

Do everything only using XoRs

or binary operations

[boreal pike]

When I hack you, there won't be much traces but there will be signs.

[raven rain]

i found several IoCs

you're going to cyberjail

[boreal pike]

NOOOOOO!!!!

RUUUUUUNN!!!!

https://tenor.com/view/dutch-car-gif-20315789

[warped plank]

The IoC:

# .bash_history
cat /root/root.txt

[boreal pike]

((It says: "There went the f***ng car.))

[rustic carbon]

Damn I don't get points by doing the starting point labs?

[boreal pike]

Nope.

[scenic maple]

https://tenor.com/lc4ORMoYipl.gif

[rustic carbon]

Sad..

[warped plank]

Anything with an official writeup doesn't get points

[raven rain]

indicator of pwnage

[warped plank]

(technically only active boxes and challenges get you rank btw)

[boreal pike]

https://tenor.com/view/weird-al-weird-al-yankovic-fat-weird-al-fat-are-you-fat-gif-795084738544474844

[opal smelt]

good afternoon, and happy rush to my fellow overcaffeinated peeps

[rustic carbon]

Got it

Thank you

[warped plank]

Unofficial are not allowed until there are official ones

[buoyant wyvern]

it is like module 0 if you work on academy more

[rustic carbon]

Well that's what I'm doing now.. 🥲

[buoyant wyvern]

does this rules also work for chinese guys

[rustic carbon]

I'm trying to finish all the fundamentals in order to go to labs and even pentesting

[warped plank]

For everyone... but you can't stop everyone as a company

[rustic carbon]

What u think 0xW1LD?

You approve?

[warped plank]

tbf noone can compete with ippsec and 0xdf writeups, they're the most consistent and well made ones

[warped plank]

CJCA

[buoyant wyvern]

nah, just saying what i saw

[boreal pike]

https://tenor.com/view/ongezellig-coco-computer-gif-18670825

[rustic carbon]

I don't understand.. like go to cybersecurity analyst and do cjca afterwards?

What preparation should I do?

Yes

That's where I am

[buoyant wyvern]

i am about to break this concept

[warped plank]

https://tenor.com/view/im-pretty-sure-its-the-same-jeremy-assisted-living-s3e2-theres-no-difference-gif-25257443

[boreal pike]

Side note guys, I read an urban legend that says: "If you can't find the right way to hack something... ping @scenic maple and he'll appear in your room at 3 AM to help you hack.)

Okay, I should take my medicine.

[scenic maple]

cant leave a homie helpless

[maiden anvil]

hey @scenic maple I have a question

[rustic carbon]

My list is for now

Linux Fundamentals

Windows Fundamentals

Introduction to Windows Command Line

Introduction to Bash Scripting

Introduction to Networking

Intro to Network Traffic Analysis

Introduction to Active Directory

Introduction to Web Applications

Web Requests

[scenic maple]

sure ask away

[supple plume]

Hello gorgeous people

[boreal pike]

My man! ❤️

[maiden anvil]

can we all ping u rn?

[boreal pike]

But it ain't 3 am yet! >:c

[scenic maple]

sure

[boreal pike]

Cool!

[maiden anvil]

get @'d @scenic maple!

[boreal pike]

@scenic maple

[rustic carbon]

No 😂 I mean on academy to go to the cybersecurity analyst job path and then do the cjca..

[scenic maple]

a friend in need is a friend indeed

[rustic carbon]

Thank you man I appreciate the help

[boreal pike]

Man, I need a million dollars, please help me h-

[warped plank]

The Junior Cybersecurity Analyst Job Path IS CJCA

[boreal pike]

[supple plume]

I have a question related to htb: can I write scripts that can solve a retired machine and post them in github?

[scenic maple]

i am broke too 😩

[scenic maple]

yes

[boreal pike]

[scenic maple]

those are called autopwn scripts

[boreal pike]

We should've replied to that free money guy back in the day...

[scenic maple]

there are already some out there

but retired only

[supple plume]

Thanks fellow cat

Yes only retired

[rustic carbon]

So to be in the same page...

I do the jr cybersecurity analyst on academy and finish it

Then do the cjca exam

Or did I misunderstand? 😅

[warped plank]

well, you don't have to do the exam, but I'd still recommend to do it

[rustic carbon]

For me personally if you ask me it's a must..

More shit dumped into your biography u know what I'm saying 😂

[maiden anvil]

how do I build an mcp server? just stuff a tool into docker and point my config at it?

maybe a better question for google

[rustic carbon]

Nah bro that was the best part of the movie

[scenic maple]

https://huggingface.co/learn/mcp-course/unit0/introduction

[rustic carbon]

Wait 💀.. you weren't talking about the exam the whole time and about the job role path?

[frail turtle]

Whats that

[warped plank]

they're technically the same thing, idk why they name the job role path differently

you can't get the exam without doing the path

[raven rain]

because you may not want to take the exam

[rustic carbon]

How much did you pay for it?

-# well actually that's non of your business chrissie

[rustic carbon]

Ahhhh

To be honest I thought the same

But to do the jr cybersecurity analyst first and afterwards go to pentesting

[scenic maple]

stack?

[maiden anvil]

thanks for this 🙏

[raven rain]

the CJCA path is not CJCA, CJCA is the certification

[lilac cipher]

No ping very busy

[scenic maple]

normie or elitist?

[warped plank]

so by CJCA do you mean CJCA or CJCA?

[rustic carbon]

Well yes but that's how 0xW1LD says it so I go along 😂

[raven rain]

it is confusing though

[scenic maple]

i mean certified secure computer user ~ ec council

[rustic carbon]

You guys approve?

[scenic maple]

but can you be better at hacking than ai in the next 10 years?

[warped plank]

Obviously just extrapolate what the person is talking about based off of context and tailor your responses based on each and every person and remember exactly how they like to talk about things... duh
-# satire

[raven rain]

you can do CJCA first yes

CJCA path

[warped plank]

*meanwhile most of us doing CJCA after doing CPTS*

[scenic maple]

[rustic carbon]

I didn't understand..

[frail turtle]

WHAT IS THIS CJCA YOU SPEAK OF

I dont know what it is but I want it.

[rustic carbon]

An exam

[frail turtle]

Gimme

[rustic carbon]

You finish it after finishing the jr cybersecurity analyst job role

[frail turtle]

Ahh

Okay

[raven rain]

certified junior croc addiction

[frail turtle]

I havent visted HTB site in like 2 months. But i promised to go back after i learn webdev.

And thats what im gonna do

[rustic carbon]

But is jr cybersec analyst a must before jumping into pentesting?

[raven rain]

no

[rustic carbon]

Is it helpful? In terms of.. mixing it with pentesting

[raven rain]

unless you mean career wise

[frail turtle]

Pentesting, hahahaha i would do so many ctf before taking the CPTS before taking the test.

Just do every easy machine as much as you can because the cpts is pretty hard

[warped plank]

Requirement, not really
Recommended, HIGHLY
Did I do it? next question

[rustic carbon]

I approve

[warped plank]

mate, they said it's just easy and medium machines

Hell naww they have stuff they mention in modules ONCE

[opal smelt]

i have a cybersec bachelors and 0 work experience, im using this to kinda keep stuff fresh in mind and to practice

[rustic carbon]

Even the very easy matchines at starting point are hard for me..

I'm not a noob I'm a fucking bot

Dog water

[raven rain]

something you should know is that CJCA doesn't prep you for any of the easy machines besides old retired ones

[scenic maple]

but you didnt answer how do i get started in cybersecurity

[frail turtle]

Yeah thats pretty accurate...ehh medium i wouldnt say medium but definitely easy machines. The cpts is like 14 easy machines, each with unique thought processes you should have

[warped plank]

turn around, work in a cafe, much less stress

[raven rain]

w1ld u dont even have any certs

where is your CPTS

[warped plank]

Bro sped-run the cert

[frail turtle]

Maybe the last few machines would be medium. I guess. But adaptability is a must for CPTS you have to be in a situation but have an idea of what to do via occams razor

[opal smelt]

i have like 6 comptia certs and a couple others

[warped plank]

In 200 business days

[scenic maple]

i actually used to think free certs are cool until i realised they are horse shit

and no one cares

thats why i think htb certs are cool

[raven rain]

200 business days

[rustic carbon]

I mean if it's not then I shouldn't put my time on it and jump straight into pentesting

But I trust your judgement

[warped plank]

Yes

that is correct

[raven rain]

i will be dead by then

[opal smelt]

is the legal preperation + paperwork side of pentesting covered on htb or is it just the activity itself

[warped plank]

Depends on how new you are to the field and good you are with picking up fundamentals while learning the processes

[raven rain]

not covered but mentioned

[opal smelt]

pentest+ was like 80% "here's the buttload of paperwork you need to do to make this legal" and the rest was the fun stuff

[warped plank]

It's talked about a little... but this is not a law platform

[frail turtle]

If you dont know any hacking just follow the job role path, once you complete it test your skills with easy machines on HTB. If you can get flags on the season or on your own without the walkthrough you are ready for the CPTS

[rustic carbon]

2 months ago I started with THM and I finished the whole pre-security which was the basic of the basics (networks, web, Linux windows fundamentals, AD etc etc) and that's about it... I haven't touched any tools whatsoever

I put the work for only a month and I took a month break due to severe burnout 💀

[scenic maple]

some mistakes go long way

[rustic carbon]

Yes but which one?

[silver forge]

unresponsive is better.

[opal smelt]

bring back static sites! web 1.0 fo lyf!

[warped plank]

Sounds about right, you shouldn't really touch tools while learning the fundamentals (except networking, go touch networking labs RIGHT NOW)

You're mostly supposed to learn the processes, principles, concepts, and a bunch of theory as a foundation

[zealous charm]

300 hours to center a div

[scenic maple]

thats what C developers make

[scenic maple]

considering i know atleast 4 ways to do it

actually 5

[rustic carbon]

Alright I will 🫡

But then what?

[opal smelt]

you'll learn the answer to that along the way of answering the first

[warped plank]

Then choose what you wanna do, think for yourself, stop asking questions, start answering questions with theoretical knowledge

[scenic maple]

cpts is 344 hours

[frail turtle]

There isnt a specific set of boxes. If you want on the CPTS channel theres a link on the pins that ippsec pointed to as recommended for the cpts but you can do any machines easy/medium. Once you can do them on your own you're good.

[silver forge]

well, c developers are most usually competent

[rustic carbon]

No I mean for the job role paths..

[warped plank]

more like 3000 hours

[rustic carbon]

You're right..

[frail turtle]

Oh you cant do the cpts without doing the path for cpts lol

[scenic maple]

html 1 compliant website

[rustic carbon]

Oh now I understand sorry I'm not thinking clearly today 💀

So you're saying finish fundamentals even the most basic and then start pentesting

And I'll learn about the tools in the long run

[frail turtle]

You will learn about 80-90% of the tools available in pentesting distros

And various techniques

[crude lynx]

i totally skipped cjca lol

[frail turtle]

If you do both cpts and cbbh

[opal smelt]

im doing the 'information security foundations' to begin. it has a lot of useful basics in there

[rustic carbon]

Dopeee...

What's up Wendy

[crude lynx]

sup

can't really focus today...

[rustic carbon]

You wanted something and you @ me yesterday?

[crude lynx]

just wondering if you're still keeping up

[rustic carbon]

Ahh I'm keeping up haha don't you worry about it 😂🫡

[frail turtle]

Imho its better to go throigh courses for stuff as some stuff like windows might be hard to memorize. I mean you can always go back to the modules, but can you like for example leverage icacls and so on.those things take practice to memorize. Net commands and stuff well actually those are covered in the modules but still its nice to know active directory well

[rustic carbon]

But pls without trying to be rude I wanna ask you to try not to @ me as much as possible (except if you're replying to me obviously 💀)😂

[ornate ibex]

https://tenor.com/view/the-weeknd-abel-super-bowl-gif-20285769

[crude lynx]

k

[frail turtle]

One of the things i wished is understanding how to use Bloodhound better but in order to do so you need $$$$

[rustic carbon]

Cuz I'm mostly gonna be offline and use DC for the cube talks

[rustic carbon]

Sorry 🥲

[frail turtle]

Knowledge for bloodhound is probably the most expensive thing ive seen

2000 dollars for a whole training session

Im not made of money

[rustic carbon]

Alright I'm going back to studying guys

Have fun

[vivid flower]

Its not really that hard

[rustic carbon]

Nice talking to you

[vivid flower]

Just use a cheatsheet for more complex bloodhound queries

[frail turtle]

No its more like recognizing valid routes for exploitation.

From the graphs

Because sometimes things are like triangular and you can really tell how to make a vector

[vivid flower]

Isnt a lot of that automated? Or is it discussing ones that cant be identified by bloodhound itself

[frail turtle]

I had that problem with one of the HTB boxes

[rustic carbon]

Jk I have something last 💀

Is there digital forensic (dfir) anywhere on HTB?

[vivid flower]

Sherlocks

[rustic carbon]

I mean to learn not in machine

Academy for example

[vivid flower]

Cdsa path

[frail turtle]

No its manual, well at least in the version of BH available in the hacking distros by default(its outdated) idk what the new versions are like

[rustic carbon]

That teaches DFIR?

[scenic maple]

https://tenor.com/view/cat-gif-27161863

[frail turtle]

Chonkus maximusthe third of the legatus sonoris household.

[meager kernel]

Hello

[frail turtle]

He can barely stand 😭 someone fed that cat too much love

[scenic maple]

https://tenor.com/view/cat-cat-jumping-jumping-cat-jumping-cat-gym-cat-jumping-gym-gif-3870098694296539016

[frail turtle]

Nawww he a big floofy

[scenic maple]

i think he is sick

like a disease

he will be fine

[frail turtle]

Heart disease

Looks like lol

But just reducing the amount of food will help the kitty

[meager kernel]

Man I should start doing cardio

[scenic maple]

its time

[meager kernel]

My cardio has become very poor

[frail turtle]

No dont do self torture.

[meager kernel]

Ok

I'm not able to sleep rn

And I have to wake up early

[crude lynx]

do u drink coffee?

[maiden anvil]

guys

look

[frail turtle]

Make friends with a boxer and have them knock you out

[crude lynx]

is that an obsidian plugin?

[maiden anvil]

mcp bridging a local LLM with my obsidian vault

and I got all of these features now

[frail turtle]

Whats a taxonomy

[frail turtle]

Oh and youre not the first to mention MCP today m0rph

[maiden anvil]

you can ask the chatbot to do stuff

[rustic carbon]

Which one?

[maiden anvil]

im using qwen3-14b but you can use any model with stuff like ollama and lm studio

[scenic maple]

all i can see is morphs pc is a good choice for mining crypto

[rustic carbon]

No I mean which chat bot?

[maiden anvil]

in the first pic is lm studio

[rustic carbon]

Ahh nice

[maiden anvil]

so I can also bridge it to vs code

and have it generate ransomwaare

then write documentation on it

and automate the whole process through a chatbot

[scenic maple]

gpt is weak

[maiden anvil]

https://tenor.com/view/star-wars-sheev-palpatine-unlimited-power-power-force-gif-5073064

and when i figure out how to make mcp servers

im gonna bridge it to a VM

so then i can have a chatbot launch db_autopwn

and create notes in obsidian in xml

[ornate pike]

is tls decoding is legal? https

just asking

[whole owl]

gm

[maiden anvil]

can confirm it can create notes ✅

[worldly moss]

it seems there's a lot to learn

[ornate pike]

?

[silver prawn]

it depends on who owns the traffic your trying to decode

if your working on your own homelab ya sure

no one will tell you anything

[ornate pike]

i m working on owasp juice shop

[silver prawn]

oh int hat case yeah

that case*

[opal smelt]

i dont think theres a specific law that says 'you cannot decode tls communications' but if you are going to do it you could probably get in trouble if a company decides that doing it on their network constitutes an attack

[silver prawn]

you can just use wireshark

[silver prawn]

yeah just basic morality

like not somethingt that sensitive

its fine if ur working on your own enviroment

[ornate pike]

yeah i knw cyber laws also

[maiden anvil]

only if you make a physical devices that does it, but it's complicated because it only matters if you're selling such a devices overseas with crypto export regulations

[ornate pike]

with burp

[silver prawn]

that works too

[ornate pike]

how thats wht i m asking

[silver prawn]

oh you can use the intercept in burp

[ornate pike]

i hve used but its in encrypted form

[silver prawn]

yeah cuz its TLS

it has to be encrypted

[ornate pike]

so how can we read this ?

[silver prawn]

you cant thats the point of encryption, so first u have to decrypt it, which you need session keys

its basically like a long tall wall

find another attack vector

[ornate pike]

except session keys

[silver prawn]

if possible

[silver prawn]

idk but i think its literally

the only way

to decrypt it

again its the same as you owning the traffic

[opal smelt]

gonna have to plant something on the device creating the communication to intercept it before it gets encrypted

[ornate pike]

are u working ?

[silver prawn]

as in?

like a job?

no im a student

[ornate pike]

is it possible?

[ornate pike]

oh cool whats ur age ( just asking )

[opal smelt]

all things are possible; they just may not be probable

[silver prawn]

18 going to 19

[ornate pike]

i think with burp is it is not possible coz i didnt send req to server but still its encrypted

[ornate pike]

cool

[zealous charm]

how can AI be real if our eyes arent?

[opal smelt]

https://tenor.com/view/morfeo-matrix-the-matrix-real-the-construct-gif-21089246

[maiden anvil]

it has potential but it has a lot of problems

[zealous charm]

Nice! Looks neat

I've only done some browser mcp and burp mcp stuff

[maiden anvil]

yeah but the silly robot hallucinated and made up a bunch of stuff for the dates

[maiden anvil]

interesting

[zealous charm]

Browser MCP then let it loose on some portswiggle labs is pretty fun

[sturdy thistle]

I use Claude code too

Started it again yesterday

[devout sail]

Open it

[frail turtle]

No too scary

[unique thicket]

Where can I do labs?

[ornate pike]

anyone who has solved juice shop ?

[pearl zodiac]

do prolabs and fortresses progress ur rank?

[vivid flower]

No

[ornate pike]

wdym?

[pearl zodiac]

as in Noob, Script kiddie, hacker etc.

[pearl zodiac]

but the guy said no

[ornate pike]

owasp labs is for script kiddies?

[devout sail]

Waa checking this random API that generates quotes
https://generated.inspirobot.me/a/Ra6VjKxz6z.jpg

Good bye y'all 😢

[devout sail]

I've seen a few, never bothered to solve

[pearl zodiac]

u probably dont have access to them cuz i think it opens from Hacker rank and above but im talkin about these https://app.hackthebox.com/prolabs

and the fortresses

[opal smelt]

hack hr and rehire yourself

[devout sail]

Oh i didn't know about this 💀

[pearl zodiac]

im not 100% sure but i remember getting more VPNs when i got hacker rank

so it probably is where u unlock prolabs and forts

[ornate pike]

do u know csrf poc?

[devout sail]

Do you know what you are talking about

If it's for the juice shop
Make one yourself, or google
There are many writeup for it

[ornate pike]

i know i waslil bit confused

basically i am creating csrf html file and i dont know hw to deliver this to victim if u have any ttp so share.

[supple plume]

It's difficult without context

[lilac cipher]

Lol

[supple plume]

Basically get yourself a fetch with js and put the cookies in a get param

Open a python server, send the payload, let the bot execute it

Oh sorry you ment csrf

Then similar but point the fetch to the endpoint instead and craft a body request that the server accepts

[zealous charm]

Email and ask them to kindly open it

[supple plume]

Ah that is faster

[zealous charm]

The idea method for CSRF delivery is via XSS (that also helps bypass certain protections). Second to that is self hosting and having them open both your URL and the target site at the same time (but there are more protections to circumvent this way)

[supple plume]

Yeah watch out for csrf tokens if needed

[agile thunder]

omg its deloitte person

[limpid spear]

guys did anyone did soulmate? i am new and i kinda want a bit explaination on how you did it

[agile thunder]

i have a really bad writeup if you want it

[limpid spear]

anything will work atm

[agile thunder]

check dee emz

[crude lynx]

i also want it

[agile thunder]

dms

[frail lake]

whats the hardest machine you can think of

[agile thunder]

lupus

[zealous charm]

@lilac cipher

[frail turtle]

[frail lake]

i bet you wont be laughing in a couple years

[frail turtle]

It's literally a solution nobody asked for

[frail lake]

thats true

but thats how ts goes. its gonna get a lot better with time

[lilac cipher]

Don't act like i don't know what you did

[frail turtle]

I am the anti-rust

I will never lose

[frail lake]

i kind of support it to be fair. i know its a weird thing how everyone just reprograms the same shit in rust for no reason, but it's going to be a big thing thats my take

[zealous charm]

i know nothing

[lilac cipher]

Suuuure

[zealous charm]

no wrinkles on this brain

[frail turtle]

I dont see the point in rewriting something other than making things easier to work with. But Rust is perhaps the hardest thing I've had to work with because there's so many features that are just things that people who drink pomegrapple flavored coffee use.

[sharp shuttle]

rust fundamentaly cannot get better with time, it's part of it's design philosophy that cripples it, you know that right?

[crude lynx]

i don't get it, things just work, why rewrite?

why is rust a big deal?

[sharp shuttle]

rust is a cope for bad programmers who can't garbage collect in C, Zig is an actual improvement on C

[worthy cargo]

Ahahahahaha

[limpid spear]

wndy what what ports are open in ur scan?

[maiden anvil]

@zealous charm I keep moving back and forth between my desks today

because I dont have access to unrestricted AI at work

it's maddening

but I'm getting good exercise 💪

next I will hookup shodan to whatever im experimenting on today

[limpid spear]

what really is shodan my friend was saying about it too

[zealous charm]

Gotta get an L-shaped desk so you can just rotate between work and personal

[maiden anvil]

it's like nmap on crystal meth

[crude lynx]

you have other ports open in your scan. for me, there's just 2 ports 😢

[maiden anvil]

agreed

[sharp shuttle]

shodan just exposes scraped headers from different ip's, its generally a collection of IoT devices

[limpid spear]

yeah same boxs glitched

[limpid spear]

oh

[maiden anvil]

this will be interesting

[zealous charm]

Buckle up mfer

[maiden anvil]

what should I try doing?

Im thinking of asking the chatbot to do a scan

then create a note in obsidian with the results

[sharp shuttle]

map out traffic cameras in your area and design an interface for people to connect and watch

that was my first shodan project

[wintry flume]

i’ve been trynna work on that fr

[sharp shuttle]

well if you are unlucky enough to have the scourge known as Flock Security in your area, it's pretty easy

they dont give a fuck

[vivid flower]

The majority of programmers are bad programmers

Thats why react and nodejs exist

Rust mostly exists to allow the takeover of existing projects by people on the outside seeking an in with little regard for the welfare of the project itself

It sounds like a good enough idea that your average fool thinks its a good idea and will benefit him somehow

[maiden anvil]

alright this shit is pretty banging

[vivid flower]

It's just another wealth transfer scheme

[maiden anvil]

I'm about to do something awesome with obsidian and shodan

[vivid flower]

Gemmy

💎

[sharp shuttle]

hope this helps

[quartz willow]

Hello 👋

[maiden anvil]

apparently google's load balancers use lets encrypt @zealous charm

[sharp shuttle]

everything does

[maiden anvil]

@zealous charm check this out

👀

[zealous charm]

[maiden anvil]

im hacking @zealous charm

we need to make a fuck ton of mcp servers

we need to make so many mcp servers

[zealous charm]

Make an mcp to make mcps???

[maiden anvil]

that nobody can ever keep up

[maiden anvil]

imagine we can ask a chatbot

hey buddy test all parameters in burp suite

so now I need that mcp server you were talking about

[zealous charm]

Yea burp has an mcp extension

It only exposed a few tools tho

[maiden anvil]

we need to expose ALL of them

the WHOLE arsenal

https://tenor.com/view/more-power-home-improvement-tim-gif-22738460

we need mcp servers for nuclei

for cobalt strike

for bloodhound

we need hella mcp servers dawg

[zealous charm]

For this you could just have Gemini-cli run the tool

Since it can execute shell commands

[maiden anvil]

fk a cli

we need a beautiful gui

with widgets and shit

[silver prawn]

hey guys I wanted to ask is the Maldev Academy course worth it or is it just jack shit, planning on taking it after solidfying myself in C and C#

[maiden anvil]

worth it IMO

and so are Sektor7 course but IMO MalDev academy is a bit more tailored

[silver prawn]

id go for it instantly if the price wasn't a bit absurd

[maiden anvil]

you could find all of the info for free

but you gotta go diving into code and reading white papers

[silver prawn]

that goes for all the things

but you wont structure it

well

basically torturing yourself slowly

until u get used to it

sure if i had the energy to do that, but im doing CPTS with it in parallel

sooo yeah

[maiden anvil]

this is genius

I have a new idea now

to flood my obsidian vault with malware source code

then I can have it generate new code based off of the repo of old code!

[silver prawn]

like training your model with malware code?

[maiden anvil]

exactly, but without actually training!

[silver prawn]

thats good but be very careful with its configs so it doesn't fuck up

and like publishes something sensitive out of the blue

[maiden anvil]

my PC definitely has space AIDS at this point

[zealous charm]

At this point just use Amazon bedrock with RAG

[maiden anvil]

this might be the move

[zealous charm]

They’ve got some decent foundational models

Plus who doesn’t love aws

[tiny canyon]

network card? how about network apple pay

[knotty grail]

remember when they made the price of htb higher

i remember someone was saying theyd find a small company to merge

i havent heard of letsdefend but it sounds cool

[static pasture]

I have one of those

tis pretty nice

[zealous charm]

Captain Falcon deserves a big desk 💪

[frail turtle]

The PC doctor has arrived

[static pasture]

https://tenor.com/boAJE.gif

[zealous charm]

FALCOOOOON