my fkin dawg
#general
maiden anvil
hardy frigate
Are u taking care of him 
or u mean taking care of a kid 👶
sharp shuttle
in 2 weeks
static pasture
when will letsdefend stuff will be merged into htb?
Their content will mostly remain on their platform. We will add some their content to enterprise starting in 2026
sharp shuttle
enterprise seems like the place to be
swift scaffold
Their content will mostly remain on their platform. We will add some their conte...
So htb sub wont work with them?
static pasture
So htb sub wont work with them?
For now, no.
stone marsh
enterprise seems like the place to be
It's pretty dope, I always ask to see if other orgs use it during interviews
sharp shuttle
I trialed it with my last company, i liked how you could assign boxes to people as technicals
zealous charm
Their content will mostly remain on their platform. We will add some their conte...
Merger & acquisition module when
stone marsh
You can also now just request to get a box or module assigned to you, so if something just came out you don't need to wait for an admin to get to it manually
sharp shuttle
ah thats neat
vivid night
Merger & acquisition module when
I work in murders and executions.
sharp shuttle
I work in murders and executions.
Tough job market, everybody is taking themselves out
frail turtle
silksong being 20 dollars is absolutely based god bless those people
lavish hull
Falcon when will the sun explode?
Its too small to explode =/
vivid night
I work in murders and executions.
In all seriousness you can learn about Mergers & Acquisitions at https://www.theforage.com/
In real-life emulating scenarios lol
sharp shuttle
In all seriousness you can learn about Mergers & Acquisitions at https://www.the...
What is there to learn? You show up with 18 lawyers and put your balls on the table.
vivid night
What is there to learn? You show up with 18 lawyers and put your balls on the ta...
I did an Investment Banking course on it I had to write a sales pitch word document with a bunch of details about sales and shit
weird banking lingo
sharp shuttle
its not real, I hope you are pivotting out of that world and thats why you are here
an MBA is not a real or respectable title
vivid flower
Master of Buying Accolades
zealous charm
What is there to learn? You show up with 18 lawyers and put your balls on the ta...
Plenty of cyber security companies are getting bought up by private equity firms. Their playbook is to lump a few small companies together, do layoffs to boost the stats, then resell for profit
naive leaf
an MBA is not a real or respectable title
Get personal MBA
All the value of MBA in a $9 book on amazon
Good read
sharp shuttle
Plenty of cyber security companies are getting bought up by private equity firms...
yes i am aware of this, but it's not exclusive to cyber security, it is everything.
I run my own buisness for that reason, I got burned twice by this practice
sharp shuttle
Get personal MBA
nice, this is what I mean, you are not learning anything different from some harvard guy or university teacher who has never done a deal in his life
naive leaf
nice, this is what I mean, you are not learning anything different from some har...
The first few pages of this book is just a scathing takedown of every mba program ever
sharp shuttle
the business industry is no different from the corn industry
and by corn, i am using zoomer speak
getting an MBA is like saying you are a certified casting couch practitioner
naive leaf
Only reason to get an mba is like
If you get it from a top university and because
You truly believe that the connections that that program is going to get you
Will end up paying your MBA off
So it's like a glorified 2 year long business networking program.
For $200k
sharp shuttle
Right, but we again you can simply say "connections is all that matters"
and if you are a good faith hacker, you can social engineer the serendipity required to make those big connections
naive leaf
If you're a good hacker with actual industry experience
And you can talk and walk
You'll have work for life idk
Why do you need an mba at that point
naive leaf
At place I'm doing an internship at my boss was like
"Yeah as long as you can do the job I don't care"
sharp shuttle
that what i say too
and thats how everyone feels
your performance reflects your boss
they dont want schmucks working under them
naive leaf
I mean hey I've saved like idk 12 weeks a year out of my boss's time at this point automating a bunch of infrasec processes
He's happy
sharp shuttle
amazing, and he will get promoted and bring you with him
thats the dirty secret
its all nepotistic
just go with the flow
naive leaf
He already answers to the ciso, very flat program.
sharp shuttle
shit, that makes you look stellar
naive leaf
The appsec guy on my team was also like "yeah you've done a lot in a very short time here".
So there's a real chance that they just give me appsec/internal pentest role
sharp shuttle
well they will stick you on externals first
if they have a somewhat matured program
i would never stick a newb on internals
naive leaf
if they have a somewhat matured program
That's the neat part they don't.
sharp shuttle
well, you win
thats possibly the best position to be in
it allows you to become a senior much faster than a traditional path
naive leaf
Yeah they just onboarded the new ciso. We had an onsite last week.
My internship required 3 rounds of 1 on 1 interviews.
And they only weren't bringing on full time people because of the lack of a ciso or any decision maker
But they still needed headcount so internship program it was
No fulltime position yet but here's hoping.
sharp shuttle
if i have any wisdom to share to you its
Make damn well sure you make your boss look like a hero to that ciso
people dont get promoted from hard work
someone has to say "we are going to promote this guy, by name"
performance means jack shit
naive leaf
Rn they don't even have a career ladder designed for security people at the company lol
carmine pecan
That's common
sharp shuttle
right, so you make your boss look good, he gets budget, and he shares the wealth
you are in a unique position where you control the company
and i know it sounds funny but im serious
be very methodical with how you present problems
sometimes just make them up.
do what you can to create value in security, because truth me, nobody sees it as anything but cost
naive leaf
3 billion dollar company, security team of like 9-10 people atm.
There's infinity problems.
carmine pecan
lmao
sharp shuttle
thats a recipe for disaster
naive leaf
Yeah they didn't have ciso until recently
naive leaf
It's one of those companies that's very likely to end up being a big name brand
sharp shuttle
is it a startup?
naive leaf
Like escape velocity reached kinda companies
Headcount of like 1.1k employees
And expanding
They haven't had a quarter where the revenue hasn't gone up in like a couple years.
So it's like post startup
thin peak
OSINT time
sharp shuttle
well, position yourself like a red teamer, and your career takes off from there
sounds like you are in the nest with a golden goose
naive leaf
Tyty
Really hoping we can work something out
Having them on my resume is already really really good
fluid gate
does anyone have been able to disable win11 sec features permantly
naive leaf
I mean team will need to hire eventually but I'm really picky.
limber arch
I mean team will need to hire eventually but I'm really picky.
Mhmm
What position are you?
naive leaf
What position are you?
Rn doing internship for appsec/infrasec/pentesting.
fluid gate
does it work creating the OEM Folder
naive leaf
Wide range haha
Small team infinite problems
limber arch
Yeppp
naive leaf
It's a lot of white box testing
limber arch
R u in college?
naive leaf
Yeah senior year, got ~3 ish semesters left.
limber arch
Nice
naive leaf
I accidentally worked for 11h yesterday because I was having too much fun.
Then I accidentally threw an alert and woke up one of the engineering teams at 2 am lol
naive leaf
Woke up to my boss telling me to keep testing to working hours
limber arch
Ah
naive leaf
It was chill tho.
Like we had no internal pentesting process before I showed up anyway there's bound to be random stuff that'll happen.
limber arch
Yeah true
carmine pecan
I ate a Zebra once
naive leaf
I ate a Zebra once
Omnomnom
limber arch
I ate a Zebra once
Huuuuuhh
carmine pecan
sharp shuttle
ive been having a really hard time breaking bad habits lately
luckily i found a solution
carmine pecan
https://tenor.com/view/motoko-motoko-ghost-motoko-ghosts-dfinity-motoko-dao-gif-12175423341725420899
dusky jacinth
luckily i found a solution
Give in?
naive leaf
dusky jacinth
FOR WHY
sharp shuttle
Give in?
FUM! FUM is a vaping alternative using flavored AIR! FUM helps millions break bad habits, get FUM today
sharp shuttle
its so easy
naive leaf
This is like the opposite of a breaking bad joke
Idk
Brain addled
Don't do sleeplessness
dusky jacinth
Get some sleep
dusky jacinth
Then like go to bed Brodie
dusky jacinth
Boooo
What hw
I just woke up
Tryna eat so I don’t pass out before my HIIT workout
carmine pecan
I have homework :(.
pure torture
meager kernel
Tryna eat so I don’t pass out before my HIIT workout
Good luck
balmy basalt
Some days you pursue the rush yknow
IDK. The rush for me is a PR not passing out from lack of food. 🤣
uneven flicker
is it confirmed there will be an AI RT cert from HTB?
dusky jacinth
IDK. The rush for me is a PR not passing out from lack of food. 🤣
Today the PR was that I didn’t throw up LMAO
static pasture
2 nights in a row 5h of sleep
rookie numbers
celest bolt
Does HTB plan to release any modules related to phishing infrastructure?
naive leaf
Don't forget to email your ec2 instance.
carmine pecan
Does HTB plan to release any modules related to phishing infrastructure?
ProLabs counts right?
celest bolt
prolabs have a phishing exercise?
sharp shuttle
prolabs have a phishing exercise?
i think all of them but dante has some form of phishing
and by all im not talking about "mini-pro labs"
restive flicker
Lets Defend is a great addition... will it remain a separate subscription for it like HTB vs HTB Academy?
dusky jacinth
That’s what I’ve been saying man
hybrid temple
im tired boss. why is cybersecurity so hard... its so deep...the learning curve is steep as
🫡
I salute those that stick with it
terse dirge
<@733485715505152040> where seadris
Not sure. I was expecting him to come back to HTB by now tbh
terse dirge
im tired boss. why is cybersecurity so hard... its so deep...the learning curve ...
It keeps getting steeper bro. I don't wanna discourage just being fr
naive leaf
im tired boss. why is cybersecurity so hard... its so deep...the learning curve ...
Learning curve is a cliff but eventually you get used to the constant information intake
Like the thing that makes it easier is you eventually start to see patterns that you can use to fill in specifics.
Like the first web app you learn about is going to be overwhelming
But eventually you find out that the same patterns exist across the majority of web apps
And then you can take that and abstract it to like, here's how this is like everything else I already know and here's what's different
Cybersec tbh is like the black magic of knowledge work
The only people who have any idea how or why it works is the people who do it, and the people who don't do it have no idea about anything but they're perpetually scared of the $50m ransomware check that has the possibility of hitting them.
Like the results of a (hypothetical) witch summoning a demon to destroy a business and a hacker doing a properly executed ransomware attack pretty much end the same: terrified CEOs make some existentially terrifying decisions that will haunt them for the rest of their lives.
It's entertaining
And interesting
Makes me happy I'm not an executive
Idk if I ever want to own that
west venture
Ever heard of this story?
https://youtu.be/EMM7buzmIxw
meager kernel
Ever heard of this story?
https://youtu.be/EMM7buzmIxw
Good story, watched this video last month
raven rain
neuro
sharp shuttle
sama
raven rain
finished drawing both neuro and evil
terse dirge
devout sail
Learning curve is a cliff but eventually you get used to the constant informatio...
I like curves
naive leaf
I like curves
You have clearly learned your curves sir
tawdry spear
Just saw someone post on linkedin disclose soulmate hint
terse dirge
Just saw someone post on linkedin disclose soulmate hint
Report them with /spoiler if it's a spoiler
dusky jacinth
I like curves
He likes my arc
tawdry spear
can i just reference the linkedin post
devout sail
He likes my arc
sharp shuttle
You take issue with a hint on linkedin when the entire writeup is a google search away?
dusky jacinth
I found a whole CodeTwo write up today
tawdry spear
well in that case i'm better forgot about that
sharp shuttle
Just leave it be, it's not even worth it
devout sail
I can post the writeup here
dusky jacinth
Yes!
devout sail
[Message hidden]
-# Discord now requires ID Verification in order to view certain messages.
dusky jacinth
Womp womp
sharp shuttle
https://tenor.com/view/ryuko-gif-27394387
tawdry spear
just a little annoying when people try to get attention by disclose thing they not suppose to
sharp shuttle
first time here? everybody cheats, the people talking here now, maybe even you, have used a writeup
lets not pretend
dusky jacinth
That’s life ~ $frank sinatra$
sharp shuttle
accept it part of the industry at this point, nobody really cares
dusky jacinth
Damn I though md worked in discord
tawdry spear
i'm sure not bruh, i find it challenge and interesting to solve thing on my own
sharp shuttle
they only harm themselves
dusky jacinth
i'm sure not bruh, i find it challenge and interesting to solve thing on my own
Hell yeah
tawdry spear
if i can't solve it i just leave it be so it retired and read write up
devout sail
No?
devout sail
Suffer whole week and find out the way
I remember the rustykey or. Something machine
My only goal that week was to get user before release arena ends
dusky jacinth
How long it take you
devout sail
Maybe 5 days
dusky jacinth
Radical
devout sail
Im not really sure, but one of the machine took that time
limber arch
Maybe 5 days
Was that on initial or key enum?
flint copper
**[Message hidden]**
-# Discord now requires ID Verification in order to view ce...
i'm stealing this
devout sail
The exploit wasn't good for shared machine
devout sail
i'm stealing this
I have better version but markdown is disabled
tawdry spear
5 days, you are really something =)), i just let a machine timespan about 2 days if i can't solve it it must be some thing i don't even know =))
dusky jacinth
Papa wants hacker rank
sharp shuttle
Yall october is almost here, time for funny october names like TikTokober
dusky jacinth
Fuck tiktok
devout sail
5 days, you are really something =)), i just let a machine timespan about 2 days...
I am a free user,. I get only 1 machine per week
So can't really move on to the next machine anyways
sharp shuttle
Fuck tiktok
I used to be addicted to tiktok, it was bad dude
dusky jacinth
Same
sharp shuttle
yeah
dusky jacinth
I pretty much just use twitter now
devout sail
I'm addicted to YouTube rn
sharp shuttle
luckily for me i found a better option to waste my time on
dusky jacinth
YouTube is different though
sharp shuttle
much better
dusky jacinth
I feel like I’m learning on YouTube
devout sail
I've deleted instagram and reddit but addiction finds it way 💀
dusky jacinth
much better
Don’t you fucking say it
sharp shuttle
you guys should check out FUM
devout sail
I feel like I’m learning on YouTube
Yeah atleast i learn random shit
sharp shuttle
AHAHAHA
dusky jacinth
you guys should check out FUM
FUCK YOU
flint copper
what's FUM
sharp shuttle
Im glad you asked
flint copper
🥸
devout sail
He probably meant CU..
dusky jacinth
Yeah atleast i learn random shit
It’s easier to fall down rabbit holes on YT
No hes about to explain it now
Fucking hate this fude
flint copper
It’s easier to fall down rabbit holes on YT
instagram reels is much better
dusky jacinth
instagram reels is much better
Ew
sharp shuttle
FUM IS A FLAVORED AIR VAPE THAT PRODUCES NO SMOKE AND NO HARMFUL CHEMICALS, FUM HELPS YOU BREAK BAD HABITS! TRY FUM TODAY
devout sail
instagram reels is much better
I sent dm
dusky jacinth
FUM IS A FLAVORED AIR VAPE THAT PRODUCES NO SMOKE AND NO HARMFUL CHEMICALS, FUM ...
FUCK YOU FUCK YOU FUCK YOU
flint copper
FUM IS A FLAVORED AIR VAPE THAT PRODUCES NO SMOKE AND NO HARMFUL CHEMICALS, FUM ...
😩
devout sail
FUM IS A FLAVORED AIR VAPE THAT PRODUCES NO SMOKE AND NO HARMFUL CHEMICALS, FUM ...
It's friggin expensive
35$ or something?
Wait. No 89
devout sail
Yeah i recently had the space mint vape
dusky jacinth
He’s been trying to get me to buy it for weeks
devout sail
It's the best one I've ever had
dusky jacinth
He’s there greatest sales man
devout sail
No fruity flavors
vivid flower
That doesnt sound safe
devout sail
Oh vape?
dusky jacinth
But it makes me feel good
devout sail
It isn't safe obviously
vivid flower
The essential oils thing
devout sail
idk i think its possibly the greatest scam ive ever seen
Actually it works
But there's way cheaper alternatives
vivid flower
Idk vaping isnt really good for your lungs either
sharp shuttle
i dont smoke so i wouldnt know
dusky jacinth
Oh dude I drink theives out of the bottle I’ll be fine
devout sail
You can put one toothpick in your mouth and it reduces cravings
sharp shuttle
im an edible kinda guy, only time ive ever had a cigarette is when one was put out on my tongue
dusky jacinth
Or gum
sharp shuttle
😉
devout sail
Idk vaping isnt really good for your lungs either
Yep yesterday someone was saying vape is bad for lungs to me when I was lighting my cigarette
dusky jacinth
Radical
sharp shuttle
Why you sharing that like that
because, FUM
dusky jacinth
because, FUM
You’re so right
vivid flower
Not a good habit to have, diminishing returns
sharp shuttle
this was a FUM ad, i had to hook you in
devout sail
Get one fum te1m
dusky jacinth
Not a good habit to have, diminishing returns
All of life is a diminishing return
devout sail
Not a good habit to have, diminishing returns
Yep very shitty habit
And it might feel good for like a month or two? Then it sucks
dusky jacinth
I’ll just smoke Marlboro blacks
sharp shuttle
Dawg I had a fling with a girl who vaped every 4 seconds i swear to god it was like the only way she could breathe
dusky jacinth
My ex was like that
vivid flower
I just want to be clean and have an ascetic lifestyle
devout sail
I’m not a bitch
dusky jacinth
I just want to be clean and have an ascetic lifestyle
I just want to hack the box
devout sail
I just want to be clean and have an ascetic lifestyle
What's ascetic
tawdry spear
i wonder is it feeling good as cigarette ?
sharp shuttle
We almost got married
Dude, I'd rather marry a pot head than someone on various pharma mental stabilizers
vivid flower
What's ascetic
It means i control what i expose myself to
Generally a lot of me time
devout sail
i wonder is it feeling good as cigarette ?
It does in the beginning
But now i just hate every time I do it yet I do it cuz can't stop
Hard to even explain lmao, it just shit inside out
My ex even gave me this book lmao
dusky jacinth
Dude, I'd rather marry a pot head than someone on various pharma mental stabiliz...
She did both, and pit head is an understatement
sharp shuttle
She did both, and pit head is an understatement
shit man, bullet dodged
devout sail
The third one
sharp shuttle
The third one
you had me cracking up with this assortment of literature
dusky jacinth
She needed to accept some truths and so did I
devout sail
That book said don't stop smokimg until you finish this book
I haven't finished it
vivid flower
Why do i keep hearing about people on ssris having breakdowns
devout sail
I dropped it on page 5 or so
dusky jacinth
The third one
This is a true man’s library
sharp shuttle
I dropped it on page 5 or so
basically a loop hole
vivid flower
Its messed up lol everyone i know who takes them just becomes more mentally ill
dusky jacinth
That’s how they get you
tawdry spear
That book said don't stop smokimg until you finish this book
I haven't finished ...
make it slowly bro, need time to think about what written in there
dusky jacinth
I became more mentally stable
sharp shuttle
reliance on chemicals your brain should be making, massive dependance -> dissociative criminality
vivid flower
Just use the easy peasy method it applies to a lot of stuff
devout sail
make it slowly bro, need time to think about what written in there
Yep i got the plan, december or so I'll just go to doctor
sharp shuttle
right on time paint
devout sail
https://tenor.com/view/hump-day-wednesday-camel-office-wednesday-hump-gif-552247...
Weekend??
dusky jacinth
It’s Tuesday
sharp shuttle
its chewsday in the UK
sharp shuttle
oi m8 its chewsday innit
dusky jacinth
I’m not British
vivid flower
It is Tyrs day
sharp shuttle
catch the fc game didcha
dusky jacinth
Don’t you dare disrespect me like that
sharp shuttle
where are you from?
dusky jacinth
States
vivid flower
Albion
dusky jacinth
Online?
dusky jacinth
I don’t tell people
dusky jacinth
I will fucking drop you if you hand me a FUM tube
Anything else is kinky
But if you add hands me a FUM tube I will end your bloodline
sharp shuttle
Sounds like all of it is kinky
dusky jacinth
You know what it might be
dusky jacinth
Fuck you
sharp shuttle
my goal this year is to get a FUM partnership just to make this full circle
dusky jacinth
I hope after, you promptly walk the plank
dusky jacinth
Ofc lol
sharp shuttle
okay hang on
dusky jacinth
She just broke up with her BF and hooked upwith a new man right infront of his eyes
devout sail
If you noticed FUM looks bigger
vivid flower
Flavored oral fixations are dumb. I feel the same about those cirkel water bottles
sharp shuttle
She just broke up with her BF and hooked upwith a new man right infront of his e...
who is in your pfp?
hurry
dusky jacinth
Jinsung Ha from Tower Of God
devout sail
I see what brath trying to do 💀
devout sail
Jinsung Ha from Tower Of God
Oh that guy bam's teacher?
dusky jacinth
Yuh
devout sail
Last i read he was captured
dusky jacinth
Read more
devout sail
And hanged in some prison
dusky jacinth
Keep reading
devout sail
Yeah, I'll do when it finishes
dusky jacinth
Valid
devout sail
I have way too many on the waiting list
So i just wait for them to finish
Spoilers don't work for me so it's nice 😁
dusky jacinth
I love the wait
devout sail
Is it weekly?
dusky jacinth
I was following JJK a majority of the time and that was so much fun
sharp shuttle
@dusky jacinth
dusky jacinth
Is it weekly?
Usually, but SUI is working on a spin off series so the main is on hiatus
sharp shuttle
no reaction?
dusky jacinth
The fum as the plank is a nice touch
devout sail
I lost my reading status and all
So its kinda hard for me to pick up where I left each manga.
Fortunately i had a junky backup of names so I got those atleast
Idk if I'll ever finish even 10% of these 💀
devout sail
The fum as the plank is a nice touch
Not The gril ?
dusky jacinth
A charcoal or electric grill
devout sail
The one at bottom
sharp shuttle
devout sail
Revi
sharp shuttle
i knew youd come around
terse dirge
Lmfao, is that "fume"?
sharp shuttle
yeah
vivid flower
dusky jacinth
Not capitalizing the M is crazy work
sharp shuttle
i knew it would mess with you
and thats what i live for
subtle annoyances are so lit
dusky jacinth
Not only did he make fun of me for being British (which I’m not) but now he’s making fan art of me projected onto my favorite fictional mentor and misspelling my name
frail lake
I wasn’t saying Rust will improve as a language I meant that people will get better at using it more precisely, so future projects will be sharper without unnecessary rewrites.
dusky jacinth
Truly a devastating day
sharp shuttle
flashback, and rootrose im not trying to shit on rust, but your statement here also ignores that all code will be written by AI in like 5 years
which means you are right
devout sail
I wasn’t saying Rust will improve as a language I meant that people will get bet...
All i know was it was meme then suddenly the best language according to people
frail lake
What's so attractive in it?
sharp shuttle
in ASM?
frail lake
I mean in rust
dusky jacinth
Fast
frail lake
It has its ups and downs like safe and fast as teim said but the syntax is ew
sharp shuttle
oh, the community is the reason rust exists. dont forget your stockings, cage, and skirt
frail lake
i guess it comes with it
vivid flower
frail lake
It's so impractical
dusky jacinth
I could see how the built in security features could be annoying to get a first
But I bet it becomes pretty fluid with time
silver forge
pfft
sharp shuttle
ASM is impractical? wait what are we arguing about
dusky jacinth
Rust
sharp shuttle
Zig was written by actual chads
dusky jacinth
For real
I like watching his streams
Last time I watched an update was over the async solutions he was working on
sharp shuttle
Zig has surpassed C at this point for bare metal
dusky jacinth
I’ve just done some tutorial stuff with it
sharp shuttle
ziglings?
dusky jacinth
Haven’t built anything to validate my opinion
sharp shuttle
i encourage everyone to od ziglings, its really good
dusky jacinth
Looks nice is all I have to say
sturdy thistle
Morning
vivid flower
A lot of projects be they governments, ideologies, or whatever other form they take are really just decided by the quality of the people involved
vivid flower
Your intuition doesnt have to even reach beyond that to intuit that rust sucks
sharp shuttle
well said
vivid flower
Its good at what it does
naive leaf
Enterprise applications make my brain hurt holy frick 😔
naive leaf
I didn't know I could stuff this much code in my brain
Application successfully broken.
dusky jacinth
Whoo hoo!
sturdy thistle
How are y’all
dusky jacinth
Rocking and Rolling
dusky jacinth
Same one you’ve been tracing?
dusky jacinth
Yikes…
naive leaf
The SSRF downloads data from an arbitrary endpoint
And stores it in an amazon S3 bucket
Normally this is just used in order to do like previewing for when you give a URL
But a bad actor can supply like
Any url that's hosting a literal terabyte file
And can incur cloud costs of $100 per download.
And that's just 1 request
So attacker sends 1000 requests to attacker controlled endpoint and like
Incurs a $100k cloud bill
From amazon S3
And then they also get all the internal service access they want as well.
Fortunately there's no LFI via file:// protocol as the http handler they use only supports http
olive marten
naive leaf
And so I'm just trying to process just how freaking bad this vuln is it's actually unbelievable.
I think this is genuinely worse than RCE.
green kite
https://tenor.com/view/pokemon-pikachu-cheer-dance-gif-8732523799552658898
Hello son
dusky jacinth
I think this is genuinely worse than RCE.
Yeah considering the consequence could be monumental
dusky jacinth
Like not only are you 100s of thousands of dollars in debt, but now all your client data has been breached
naive leaf
Like not only are you 100s of thousands of dollars in debt, but now all your cli...
Yeah it exposes cloud keys
As well
green kite
Niiiice
dusky jacinth
Yeah it exposes cloud keys
Fuck.
compact wave
OMF YOU SAID FUCK
dusky jacinth
NOOOOO
compact wave
WHY DID YOU SAY FUCK
dusky jacinth
NO IM SORRY
dusky jacinth
PLEASE
dusky jacinth
FUCK MO
compact wave
compact wave
u told more times than them
green kite
u told more times than them
Agreed 👀
naive leaf
I just don't really have words
compact wave
ornate ibex
https://tenor.com/view/diplomatic-immunity-diplomat-lethal-weapon-two-south-afri...
nope, nobody is spared.
dusky jacinth
I just don't really have words
Yeah this is not good. And you’ve been tracking this for the past two days right?
With no red team?
naive leaf
Yeah this is not good. And you’ve been tracking this for the past two days right...
From vuln discovery/enumeration to jira ticket.
dusky jacinth
Imagine even just 5 threat actors
naive leaf
I mean at this point I am the red team lol.
naive leaf
Looool
naive leaf
Yeah this is not good. And you’ve been tracking this for the past two days right...
Who would win 3 billion dollar company or a 1 terabyte file and a cellphone
compact wave
And I’ll poke holes in everything
dusky jacinth
Who would win 3 billion dollar company or a 1 terabyte file and a cellphone
My moneys on the steam deck c2 winning this
naive leaf
Like the exploit would only require idk
A 10 line script
To do 7 figures in damage.
dusky jacinth
Maybe more
naive leaf
Yeah that's only 10000 things.
Add another 0
Get yourself to 8 figures idk.
I'd imagine that eventually someone would notice and it might just straight up DOS the system.
And then all your systems are down and then it's even more expensive
naive leaf
are we talking about making croissaints and not hacking..right?
Talking about a vuln I found at my job.
compact wave
Owwww
naive leaf
Appsec internship
compact wave
niceee. and how is it going?
terse dirge
Talking about a vuln I found at my job.
free CVE 😛
compact wave
you having fun?
naive leaf
you having fun?
Oh yeah I've found like 3 criticals, one of which is like critical+++++++
compact wave
Hello hellooo
naive leaf
That's the above one
compact wave
Oh yeah I've found like 3 criticals, one of which is like critical+++++++
awesomee
compact wave
https://tenor.com/view/cheem1-gif-20472638
dusky jacinth
Interesting
naive leaf
Everything is either useless or stupidly important so far
ornate ibex
https://tenor.com/view/the-dark-knight-joker-2008joker-gif-17668454406569996494
@green kite he isn't right
glacial crane
hey
glacial crane
yo tejas whats up
compact wave
helloooo
green kite
Sup Tom
terse dirge
network engineers are nerds bro (I have a major skill issue)
glacial crane
yoo everyday whats up
ornate ibex
yo tejas whats up
I really wanna say ceiling fan and roof 
but, nothing much. wbu
naive leaf
free CVE 😛
I wish was CVE instead I'll just have to say "prevented $10m in damage"
On resume
terse dirge
I wish was CVE instead I'll just have to say "prevented $10m in damage"
10 million dollars??? That's a lot of beer money
cloud osprey
I really wanna say ceiling fan and roof <:troll:824339247959113728> but, nothing...
its me im too tall, pls help me
ornate ibex
its me im too tall, pls help me
How tall? 7ft? This ceiling is over that
cloud osprey
How tall? 7ft? This ceiling is over that
i been rounding to 6ft
terse dirge
its me im too tall, pls help me
can confirm bros literally 7ft
compact wave
10 million dollars??? That's a lot of beer money
who cares about beer....you can buy 10 million socks!!!!!!!!!!!!!!!
ornate ibex
who cares about beer....you can buy 10 million socks!!!!!!!!!!!!!!!
wat u gonna do with so many?
terse dirge
who cares about beer....you can buy 10 million socks!!!!!!!!!!!!!!!
programmer socks????!! 👀
compact wave
wat u gonna do with so many?
terse dirge
eeew java
ornate ibex
https://tenor.com/view/bickerton-daddy-smirk-smooth-you-already-know-gif-1539242...
No, I don't.
ornate ibex
i been rounding to 6ft
Still, you ain't gonna hit the roof.
glacial crane
yes is like python but typing the types lol
ornate ibex
like python? hell na
naive leaf
10 million dollars??? That's a lot of beer money
Vuln I found can cost company $100 per request sooooo just run a for loop 100000 times and incur 10 million dollars in cloud costs.
terse dirge
you should learn go instead @glacial crane
ornate ibex
or rust 
compact wave
No, I don't.
I would sell them...obviously
terse dirge
it's like java but easier to understand and doesn't have stack errors longer than books
naive leaf
I mean that's a mood guess why I'm doing cybersecurity as a major
ornate ibex
I would sell them...obviously
liar
ornate ibex
suss
glacial crane
but im little familiar with c# and is really similar
terse dirge
ornate ibex
https://tenor.com/view/legendary-reverse-card-gif-4104015671756580678
this is something u cannot escape
highest tier
naive leaf
My cybersec program is good so
cloud osprey
Still, you ain't gonna hit the roof.
not with that attitude
terse dirge
I don't really understand why java is still used tbh. I get all kinds of performance problems with it when running it in a docker container
naive leaf
That helps
ornate ibex
https://tenor.com/view/fozzy-fuck-bar-i-fucked-up-facepalm-gif-4950549
Where is the white flag
naive leaf
I mean if you look at it funny CyberSecurity is just CS anyway
That makes a difference
compact wave
Where is the white flag
ornate ibex
I don't really understand why java is still used tbh. I get all kinds of perform...
I'm not sure if it is intended to be run on docker?
glacial crane
I don't really understand why java is still used tbh. I get all kinds of perform...
Do you recommend any website to learn Go interactively?
terse dirge
Do you recommend any website to learn Go interactively?
no. Just make shit with it. That's like the easiest way to learn it
ornate ibex
Started my mac update... Hmm it said 20 mins let's see
compact wave
no. Just make shit with it. That's like the easiest way to learn it
ohhh you said shit!!!!!!! you said the word shit!!!!
compact wave
Started my mac update... Hmm it said 20 mins let's see
ohhh I need to do that
ornate ibex
ohhh I need to do that
Taho?
terse dirge
I'm not sure if it is intended to be run on docker?
stuff like elasticsearch or opensearch are definitely meant to be ran in containers or kubernetes or should be ran in them
ornate ibex
stuff like elasticsearch or opensearch are definitely meant to be ran in contain...
But I see they are resource intensive.. not like what it would deliver on bare metal for the less
compact wave
https://tenor.com/view/crying-emoji-dies-gif-21956120
terse dirge
initially I wanted to run our Wazuh in docker but couldn't because it had awful performance
hoary nebula
Docker
compact wave
initially I wanted to run our Wazuh in docker but couldn't because it had awful ...
Ohhhh wazuh is awesome but a Bch sometimes
specially on the config and install part
terse dirge
specially on the config and install part
we use an LXC container for it
compact wave
we use an LXC container for it
Ohh okok. I had nightmares..specially witht eh admin pannel and updates last year
terse dirge
I really wish we had elastic security licenses tho 
terse dirge
But I see they are resource intensive.. not like what it would deliver on bare m...
the difference is very noticeable I would say when running on baremetal vs in a container
only with java crap
like everything else (excluding shuffle) works great in containers which is always awesome sauce
I switched our soar from shuffle to n8n today and it's soooo much better
I just really dislike when I'm trying to get network sessions from arkime and it doesn't resolve the host or times out but this was an issue on shuffle too
I doubt there's much I can do to fix sadly
My idea of "fixing" it is to just have a pipeline module in DFIR IRIS that fetches the pcap session data once a case is made
but I'd have to modify the assets to add the IP or do some other way so I can get the session data properly
terse dirge
the pains of SOC engineering or whatever it's called
terse dirge
My idea of "fixing" it is to just have a pipeline module in DFIR IRIS that fetch...
I've also thought about having a custom API for all of this pipeline stuff and tracking IOCs by interacting with misp and graphing it in memgraph
breaking this stuff into parts like this adds complications/makes it more complicated but it should also improve performance and help everything work easier together I would think
torn cedar
@terse dirge you should make a blog talking about your experiences
alpine pumice
what do you think general is
ornate inlet
how to learn hacking from the very basics?
taken in note that ik nothing
west lynxBOT
Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible
subtle plover
Gn
hoary nebula
Good night
subtle plover
subtle plover
@lilac cipher the clapper
subtle plover
terse dirge
<@733485715505152040> the yapper
cloud osprey
terse dirge
cheeto hopped on my bed and wants attention
I got most of my classwork done and I'm tired now
terse dirge
good night baby
Nuh uh, I'm hungry and wanna watch YouTube or play video games
cloud osprey
glacial crane
here are 2 am i have to wake up in 3 hours lol
glacial crane
wait i still having 20 minutes for fun
terse dirge
here are 2 am i have to wake up in 3 hours lol
Have some caffeine
cloud osprey
Have some caffeine
ornate inlet
I am no good with tech, iand am now going to install ubuntu with dual booting on my pc
any tips?
cloud osprey
lmao what do you mean any tips
terse dirge
Cheeto wants some of my Pringles
ornate inlet
I mean guide abt wht not to do
cloud osprey
for installing linux...
ornate inlet
yes
cloud osprey
if you cant figure out installing linux, you are going to have a LOT more trouble with the rest of the stuff
stone marsh
Make a backup of your windows drive and be prepared to make massive mistakes.
cloud osprey
or just install it in a VM until you feel more comfortable
stone marsh
Nah, just use WSL 
ornate inlet
Make a backup of your windows drive and be prepared to make massive mistakes.
ih a single storage druve and ih created volumes for that (done with shrinking up a volume (ig itd be considered drive only) for like 200 gb)
backup for windows drive?
VM is virtual machine ig, how to do it in that??
and WSL idk ;[
and lol my wifi sucks for some reason it says 4 hours to download 💀
(lower limit is 25 minutes upper is like 16 hours)
cloud osprey
if you plan on doing cyber security, the best thing you can learn is a sense of curiosity
meaning go try things, figure out how to look up answers, dont just ask people do walk you through things step by step holding your hand
if you can be curious enough to explore things and figure out what options you have, you will be infinitely better off than just asking "installing linux what do now"
lilac cipher
How to paint
torn cedar
Yup
cloud osprey
literally just go do things, fail as much as you can, and through failing you will learn
but again, I cant stress this enough: if you cant figure out how to google "installing linux" and follow a simple guide, the rest is going to be very unpleasant
terse dirge
Nevermind chat, I'm going to bed soon. This week and last week has been too eventful
cloud osprey
it might sound like i am being mean or aggressive, but that is truly the best "tip" i can give you
torn cedar
You can even go watch YouTube videos on it
proud moth
lmaooooo
ornate inlet
if you plan on doing cyber security, the best thing you can learn is a sense of ...
I dont plan to do anything in cybersec on a proffesional basis,
I just wanna learn more about computers and fun ig
cloud osprey
this is literally a cyber security discord
torn cedar
I dont plan to do anything in cybersec on a proffesional basis,
I just wanna lea...
Watch professor Messer on A+ and or any of the certs in general and you'll learn more about computers
terse dirge
It's only 11:52pm bruh
ornate inlet
Watch professor Messer on A+ and or any of the certs in general and you'll learn...
and some basic ethical hacking stuff from where?
proud moth
if you plan on doing cyber security, the best thing you can learn is a sense of ...
spot on this is true 100%
cloud osprey
It's only 11:52pm bruh
i know but i was scrolling and the timing of the meme showing up just felt right
proud moth
most people are afraid to search and experiment
soft fern
Just realized it's almost 3 AM for me.
ornate inlet
I didnt ask anything. 😶
cloud osprey
most people are afraid to search and experiment
all the best hackers i know dont have degrees and got where they are because one thing led to another when they were messing with something
stone marsh
Paint is the "Just do it" gym bro of Cyber
patent elbow
@lilac cipher give me 80 bitcoins or i will erase all your data
proud moth
james kettle went from "when does a request end?" to a breakthrough in hacking research
ornate inlet
Paint is the "Just do it" gym bro of Cyber
am just kinda scared to lose all the data ih* ntg else ;[
stone marsh
am just kinda scared to lose all the data ih* ntg else ;[
Yeah so make a back up and if the main drive gets deleted, you still have a copy
proud moth
most IT degree bros would have answered "Duuh?? the content-length header tells you that, lmao"
this is the main difference
stone marsh
Tbh I find most people don't actually have much important stuff on their personal computers.
When they do it will be things that they emailed or sent to some cloud service and it becomes super easy to find it again.
azure remnant
hoary nebula
Gonna boop your snoot
glacial crane
ZUMIII WHATS UPPP P
ornate inlet
ih google accounts stuff and minecraft screenshots as important 💀
ye done with the backing up stuff
rigid lance
lilac cipher
<@665125555166904320> give me 80 bitcoins or i will erase all your data
Ok where do i send it to
Does gmail work?
dusky jacinth
all the best hackers i know dont have degrees and got where they are because one...
Literally my dad
patent elbow
Ok where do i send it to
i will give u the adress sir
dusky jacinth
Literally my dad
I realize this could be interpreted weird. I mean that my Dad is a phenomenal red teamer and has been up to some crazy AI stuff. He went to Berklee college of music but never got a degree
patent elbow
dusky jacinth
Ya momma
patent elbow
hi ZumiYumi
naive leaf
and some basic ethical hacking stuff from where?
Can watch ippsec on yt if you wanna watch someone hack
ornate inlet
Can watch ippsec on yt if you wanna watch someone hack
Thank you,
ig the installation got kinda fed up idk why it says turn off bitlocner when it was already not turned on, hence I chose the erase disk and and option called LVM in it, what's LVM????
floral patio
hi everyone im new into the community
im realy into offensive stuff , bounty hunting , red team , ect
torn cedar
Welcome to the community
floral patio
?
what the heck is that?
.....
btw do u know what enrolling is?
like when u enroll a path
what does it do?
ya
torn cedar
what does it do?
It allows you to view that course, you can opt in and out of them without any penalty
floral patio
so whats the difference between enrolling a path and purchase it ?
dusky jacinth
You can enroll to it but doesn’t mean you bought the modules
It’s like signing up for a class and paying for one
torn cedar
It’s like signing up for a class and paying for one
This ^
floral patio
oh
torn cedar
so whats the difference between enrolling a path and purchase it ?
Just click buttons and figure it out, you won't magically get charged for clicking stuff
dusky jacinth
Buy them
floral patio
lol
dusky jacinth
With money
floral patio
i mean free way
dusky jacinth
I’m being serious
stone marsh
There are no free ways to get an acceptable amount of cubes
dusky jacinth
There are no free ways to get an acceptable amount of cubes
^
stone marsh
You can get them as rewards for seasons I believe, but it's a very small amount
dusky jacinth
Unless you got top ten in the next upcoming season
floral patio
bruh
dusky jacinth
Good luck
torn cedar
Or be a student and pay $8 a month. You'll accumulate free cubes from doing the 3 basic pathways and you can use those for some of the advanced paths
dusky jacinth
You can earn cubes from some module sections once you’ve completed them
floral patio
Unless you got top ten in the next upcoming season
i know nothing about what they gona ask
floral patio
bruh
stone marsh
Money is the hackthebox game
floral patio
dang
torn cedar
There are some free modules at tier 0 I believe or just super basic ones
floral patio
ig ima just take a basic ones and change to another platform to find a free platform 'does not exist '
idk tbh like this sucks
how much cubes u guys got?
stone marsh
0
dusky jacinth
how much cubes u guys got?
1700
floral patio
i got only 70
dusky jacinth
ig ima just take a basic ones and change to another platform to find a free plat...
You pay for what you get homie
floral patio
fr\
floral patio
hacking is such closed learning sources
torn cedar
200ish but I pay for the student plan so I don't need cubes for a while.
Honestly if you want free information, finding it yourself would be the best. You could learn somethings from CVE's or OWASP etc. Shit even YouTube to help you learn some stuff
stone marsh
No such thing as free
You can get it for free if you work at HackTheBox or a company that has enterprise
dusky jacinth
You can get it for free if you work at HackTheBox or a company that has enterpri...
The company is the product
You are a cog
Cog boy
floral patio
Ippsec is great
what are those
stone marsh
I am a big ole skinny cog in a very small machine
dusky jacinth
I am a big ole skinny cog in a very small machine
Kinda hot
dusky jacinth
what are those
You tube channels
dusky jacinth
Is HTB is too expensive you could try THM too they are cheaper
dusky jacinth
are they good for basics and imtemidate?
Yes
As long as you go through Ippsecs easy tutorials
TCM has a ethical hacking course, but some of it is kinda outdated
Principals still apply tho
I’m pretty sure all challenges on THM are free, so you could try those too and look up write ups
floral patio
ok ima take basics from HTB and look for something else to learn from
dusky jacinth
Why
torn cedar
You can try to get your school to pay for your academy fees
floral patio
frist time talking to hackers tho
torn cedar
frist time talking to hackers tho
The majority of everyone here are script kiddies.
floral patio
i hate script kiddies
stone marsh
There are a lot of script kiddies about this morning
floral patio
such a illness
torn cedar
Ofc but certain schools will pay for some students depending on how good you're at begging lol
warped plank
The majority of everyone here are script kiddies.
Even people higher ranked are skiddies, I'm a skiddie 
floral patio
im still at high school .....
dusky jacinth
Leave
warped plank
im still at high school .....
What year?
dusky jacinth
Jkjkjk
floral patio
im 16 bro
stone marsh
Do we not have a script kiddie emote?
dusky jacinth
Then get out there and stretch that brain
torn cedar
Doesn't the guy who makes some of the boxes is under the age of 18?
stone marsh
Oooh, time for the parental consent form
dusky jacinth
Oooh, time for the parental consent form <:Kappa:895274655978487878>
Equivalent to the ban hammer
stone marsh
Doesn't the guy who makes some of the boxes is under the age of 18?
Yeah, he makes a bunch of them. Kinda nuts he has the time to do so but his CV is going to be fire
dusky jacinth
Yeah, he makes a bunch of them. Kinda nuts he has the time to do so but his CV i...
Dude when I was 18 I would’ve had nothing better to do than this
stone marsh
Dude when I was 18 I would’ve had nothing better to do than this
I was too busy playing video games tbh
floral patio
so what now?
dusky jacinth
I was too busy playing video games tbh <:kek:889992816296595456>
Same
dusky jacinth
so what now?
Start with TOS
warped plank
so what now?
A staff member will likely ban you until you submit a consent form
floral patio
where is that form?
warped plank
floral patio
ima fill it bruh
stone marsh
Good thing wild ain't staff
warped plank
Good thing wild ain't staff <:Kappa:895274655978487878>
Tejas banned a similar situation earlier earlier
dusky jacinth
Womp womp
stone marsh
Tejas doing the Lords work
sharp shuttle
Have fun going through the age ban shit
floral patio
.....
torn cedar
Have fun going through the age ban shit
You never sleep brath I swear
warped plank
Well, it's technically not a social networking platform
sharp shuttle
You never sleep brath I swear
i have too much to get done to sleep
floral patio
the fuck bro
dusky jacinth
16*
hexed oyster
yo guys i am looking for active player for my htb team
floral patio
im not sending my parent ID to acadamy
stone marsh
Plus I don't think Greece of all places will care too much about it
sharp shuttle
the fuck bro
such a potty mouth on this one
dusky jacinth
the fuck bro
Dude it’s the rules fuck you mean “the fuck bro”
stone marsh
Iiwii
floral patio
crab
thin peak
UwU
dusky jacinth
JUST GET THE FORM SIGNED
torn cedar
Good luck on ur journey
dusky jacinth
I need to chill
warped plank
JUST GET THE FORM SIGNED
Legit just this ngl, there are even people who are under 18 that contribute content to the platform such as boxes. They(HTB) just need parental consent cos it's the law where they are
torn cedar
Man is going to quit before even getting started
dusky jacinth
Because he refuses to accept the rules
That’s why I’m 22 and a three time drop out
stone marsh
"Stupid hackers wanting me to abide by EU regulations"
warped plank
Be like me instead: quit after getting started, so you can start again but with more knowledge
sharp shuttle
there have only been 2 16 year olds that have stuck around and I know them both (now 18/19)
low chance of anybody else doing it
torn cedar
Be like me instead: quit after getting started, so you can start again but with ...
Ngl that's what I did and now I'm back to learning
thin peak
Imagine you are 16 years old 
sharp shuttle
Imagine you are 16 years old <:NotLikeThis:479394696473477150>
16 sucked man, and I had bitches too
dusky jacinth
So I don’t think I would go back
sharp shuttle
I feel bad for people who never experienced young love
warped plank
there have only been 2 16 year olds that have stuck around and I know them both ...
ngl I wish I started that young, would've been nice to have this as an addiction as opposed to video games back then
willow storm
ngl I wish I started that young, would've been nice to have this as an addiction...
when did u start
warped plank
when did u start
last year
dusky jacinth
I feel bad for people who never experienced young love
My ex from my senior year sent me AN EMAIL a couple weeks back
sharp shuttle
wild you have to understand that the video games were a vice, people who do this shit so young and not having wasted time, end up burned out to the point they cant do it ever again\
dusky jacinth
A fucking email
dusky jacinth
I responded