#general

1 messages ยท Page 54 of 1

scenic maple
#

epic mistake

graceful pendant
#

he was like "oml im so hungry someone buy me a bigmac"

devout sail
#

That's just scam

mystic harbor
#

Can I have ......

thin peak
#

oml im so hungry someone buy me a bigmac

devout sail
#

We got alot of cafe here who would feed you if you really need

terse dirge
terse dirge
#

It's cheaper and wayyy better

graceful pendant
devout sail
#

Someone once mistook me for a girl
And i was shitposting in that server by saying it's my birthday

Dude sent me nitro and said let's meet for ice cream ๐Ÿ’€

devout sail
#

Ice cream funnykardia

graceful pendant
#

someone check his harddrive

scenic maple
#

ceald is it true that in merica you can live without cooking like only buying processed foods even if you make average wage

worthy cargo
#

@terse dirge Hey I got suricata logs ingestion in wazuh. I also installed wazuh agent on my domain controller with sysmon and sending symon logs too. I noticed something odd. My wazuh instance (wazah manager) is taking up a lot of disk space. 26G by df -h, but 16gb by ncdu. I don't understand the size difference.

Do you know anything about this?

devout sail
graceful pendant
#

(jk)

#

but if you work in a morgue, also check harddrive

#

mfs out here actually signing up to work in morgues

devout sail
#

It will be quiet and nice

graceful pendant
devout sail
#

Occasional body sitting up tho

#

From what ive seen in movies

devout sail
#

I see Balck

#

Piscord isn't discording

scenic maple
#

what happened then

graceful pendant
#

yeah no comment

worthy cargo
#

Nevermind I got it.

#

file deleted by wazuh but still held open by procesesses

#

I rebooted and now dh -h also shows 16GB used

#

Which is fine

terse dirge
rustic carbon
terse dirge
#

I wouldn't be surprised if it was a log file causing all of that disk usage

worthy cargo
#

I'll try to figure it out..

#

I have a lot of sst files created on todays' date, no old files

terse dirge
worthy cargo
#

I did

rose onyx
#

Doesn't by default have a retention of 30 days?

rustic carbon
#

Whatโ€™s everyone up to ๐Ÿ˜Œ

terse dirge
rose onyx
#

Or suricata different for this case?

worthy cargo
#

Wazuh has been running for like a year collecting agent logs for like 10 agents

terse dirge
#

It's using openshit for storage

#

But eggzy said he has different VMs for each component

worthy cargo
#

default should be 30 days

graceful pendant
#

doing "voleur" and hating AD as usual

mystic harbor
meager kernel
#

Alright chat I got a question

worthy cargo
meager kernel
#

Is it illegal to be a grey hat hacker

graceful pendant
#

i hate settingup bloodhound on the pwnbox

worthy cargo
#

indexer/server/and dashboard all run on diff instances

graceful pendant
#

lying to urself

#

web>>>>>>>>>>>>>>>>>>

turbid steeple
#

web sux

#

gimme AD

devout sail
#

Ok take

#

But the initial credentials will be in web

mystic harbor
devout sail
#

That's why I sent you there

#

Or I'd've said it

devout sail
mystic harbor
devout sail
#

They must be drinking water

#

Drink now

#

You'll get response in next 5h

mystic harbor
#

Screw it I will just buy it then

frail turtle
#

Without my morning liver consumption im a body with no coffee

supple plume
#

SILVER

#

heck yeah

opal smelt
#

gg

supple plume
#

imagery wasn't hard

#

took me 1.5 hours

green kite
supple plume
#

yeah but sometimes medium are harder

opal smelt
#

like, medium-well?

supple plume
#

hacknet was harder

#

like medium rare

graceful pendant
#

but im new to the game

graceful pendant
green kite
green kite
#

Well, to my office that is kek

scenic maple
#

reasons why doors have locks ๐Ÿ˜ฉ

green kite
supple plume
raven rain
supple plume
#

I have my ass beaten by Sorcery still

frail lake
#

how much do you chat in here bro

#

jjjjjOOOOOOOOOOOOBBBBB

mystic harbor
supple plume
#

Hi

frail lake
#

so hard my brain has deleted everything related to it

supple plume
#

I am still halfway

#

Impetor ๐Ÿ’ช

silver forge
frail lake
supple plume
#

Yeah

frail lake
#

amazing learning curve

supple plume
#

Yep

crystal basalt
#

Hi there, I don't know if this is the right place. But I watched this video from Nahmsec's tutorial When I run shuffledns and I fed the results to dnsx, each time I get a new list of subdomains. I don't know why? Also I tried to use httpx on my target and it can't fecth the string "login" as of matter of fact It doesn't render the html

supple plume
#

Wth are you doin

supple plume
#

Bro I ordered a burger and the deliveryman is called Usama

#

Seriously

supple plume
#

@pure kayak is it you

crystal basalt
#

It is a recon tool

supple plume
#

Idk maybe a waf

devout sail
#

Crawl deez

frail lake
#

hey what can i do so that htb doesn't automatically take money from my credit card

supple plume
#

Bro

hoary nebula
#

bro

frail lake
#

am i stupid

supple plume
#

How are you allowed to have a credit card xd

devout sail
#

Keep no mooney in bank

rapid badger
#

lmao

supple plume
#

Unsuscribe

hoary nebula
#

unsussy

frail lake
#

i mean the vip expired but i see a notification that it's trying to renew the subscription automatically i dont want that

supple plume
#

Un subs cribe

#

Is a subscription based payment

frail lake
#

18 euros vip+

supple plume
#

It's going to be 18 euros every month

#

For the rest of your life

hoary nebula
#

better start working boi

supple plume
#

Hahah

crystal basalt
#

Is there a channel for the hack the box accademy?

supple plume
frail lake
crystal basalt
hardy frigate
#

Hey guys

#

Idk if this is against the rules

thorny shuttle
hardy frigate
#

But anyone can share opinion on HackTricks Expert certs?

#

its like 1100 euros which is almost offsec price level

thorny shuttle
#

also the box database is searchable and you can get a box for a vulnerability on the internet in no time

crude wasp
#

๐Ÿ‘€

young glen
#

Cool

crude wasp
frail lake
frail lake
# crude wasp yayy

hey so um haha youre not gonna believe this aham ughhh can you um perhaps pay for mine lol um yeah

hoary nebula
#

i dont understand the "6 7 " meme

crystal basalt
boreal pike
#

Hey guys, I just found a nice tutorial video. Kappa

https://www.youtube.com/watch?v=0c4f4NJSB_4

On the black market in Bulgaria enough money can buy anything from women and drugs to fully functioning nuclear warheads.

Shane Smith and Eddy Moretti shop for dirty bombs in the Bulgarian black market. After you see the relative ease with which they were able to meet a real, in the flesh, black market arms dealer, you'll be stocking up on gas ...

โ–ถ Play video
hoary nebula
#

thanks, bought 2

boreal pike
supple plume
hoary nebula
#

ddo it

crystal basalt
supple plume
#

No

#

Is it a bbp?

crystal basalt
supple plume
#

What are you trying to do

boreal pike
#

Don't even bother, I will send a nuke your way.

silver forge
#

while the principle is very simple, the amount of engineering that went into even the 1st generation is insane. I have books that detail every single step.

crystal basalt
supple plume
#

Ah

#

Why don't you try that in a htb machine

#

It's a simpler environment

#

To learn the same tools

supple plume
#

๐Ÿ„ ๐Ÿฆก

terse dirge
supple plume
#

He is probably already being scaned for using that tools

terse dirge
#

Doing stuff like web crawling will get your IP blocked super fast.

#

Not cause websites are scared of you but because they'll think you're an annoying bot

supple plume
#

The autorities are already aware of his ip

#

It is 192.168.1.* isn't it?

near summit
green kite
supple plume
#

Bro is cooked

green kite
#

Cmon man. Not cool

silver forge
#

snaaaake

green kite
subtle plover
#

I need STAFF

#

WHO CAN I PING

hoary nebula
#

ippsec

subtle plover
#

@scenic maple

#

@small pond

green kite
#

Golam isnt staff

#

@subtle plover why you need staff?

subtle plover
#

Its confidential

hoary nebula
#

leak it

silver forge
supple plume
#

You can ping zqa

green kite
#

You can always contact support or wait for Emma to arrive

subtle plover
#

@lilac cipher

hoary nebula
#

ping ryan

subtle plover
#

@ryan

#

He got banned

supple plume
#

What is your problem

#

Are you subsuscribed forever to htb like the other guy?

hoary nebula
#

tag em all

green kite
#

Donโ€™t ping staff without reason lol

subtle plover
green kite
#

Support usually can help

green kite
#

I would strongly advise against

supple plume
#

If you ping the supernuts

supple plume
#

He is ๐Ÿƒโ€โ™‚๏ธ โšก

#

Fast

lime trout
#

How may I be of assistance?

subtle plover
hoary nebula
#

lmao

lime trout
supple plume
#

Bold movement

#

0.99 cubes

subtle plover
lime trout
supple plume
#

But can you divide by 0?

green kite
#

Ill donate 1 cube to Bing because heโ€™s my neighbour

subtle plover
night mica
#

hey guys, i have the option to take CISCO CJSA and google cybersec professional cert(both are paid for), i already have the ISC2 CC, and im just looking for some cert to add to my profile before i move towards CPTS, which oe should i choose or should i do both

hoary nebula
#

got your house

green kite
near summit
subtle plover
#

I live on mars

hoary nebula
#

I live on Twix

supple plume
green kite
#

Snickers all the way baby

hoary nebula
#

actually yes

#

snickers better

green kite
#

I love my chocolate with some nuts

#

I love nuts

subtle plover
night mica
#

i was actually testing it on hackthissite, but then just kept the username when i moved to HTB

supple plume
#

Hmmm

green kite
#

@subtle plover

#

Poffertje or stroopwafel?

supple plume
#

My name is also the byproduct of my testing but more elaborated tipsfedora

subtle plover
#

Both

green kite
#

Brb gotta change cold packs

supple plume
night mica
supple plume
#

Oh wow

#

Then you should do both if you can ๐Ÿ’ช

night mica
#

well, i guess i will try

supple plume
#

Do you know a programming language?

green kite
supple plume
supple plume
green kite
supple plume
#

Php

night mica
#

did CS50x, CS50P

#

and made projects

#

used to do scripting in python too

#

like, yk, spending 15hrs writing a script coz a task was going to take 3hrs if i do it manually

#

๐Ÿ˜‚

green kite
#

<html>
<head/>
<body>
<svg onload=alert(1)/>
</body>
</html>

supple plume
subtle plover
#

Guys hes sending dangerpus commands

green kite
supple plume
green kite
#

It makes a program behave certain way

supple plume
#

No

subtle plover
#

Html is for skids

green kite
#

Thus itโ€™s a programming language

supple plume
#

That is javascript

lilac cipher
green kite
supple plume
#

Nop

green kite
#

Okay @lilac cipher

supple plume
#

Html is not a programming language

lilac cipher
supple plume
#

It is a markup language the browser renders the tags

supple plume
#

But can you have a variable in html?

#

Can you loop

#

If else

#

Without js

subtle plover
#

No one cares about html

#

Its all about css these days

supple plume
lost lintel
#

are there usually sales for academy subs and certs vouchers? Maybe soon with black friday?

subtle plover
green kite
green kite
supple plume
subtle plover
#

Ofc

green kite
supple plume
#

I would like to have one

green kite
#

Itโ€™s like pancakes

supple plume
#

Do I send you my address?

green kite
#

But mini cutie

green kite
subtle plover
lost lintel
lilac cipher
#

First message btw

#

Insane

green kite
lilac cipher
#

Ping @subtle plover

supple plume
green kite
#

Just donโ€™t count on there being one

lost lintel
#

damn alright

subtle plover
lilac cipher
#

Illegal

green kite
silent plinth
#

did a staff delete my message sending 6 emojis 3 of them being arch linux ๐Ÿ˜ญ

supple plume
#

The zqa/bong ping pong has began

silent plinth
supple plume
green kite
lilac cipher
green kite
silent plinth
#

but ok ๐Ÿ‘

crystal basalt
green kite
#

Howโ€™re you @silent plinth ?

supple plume
crystal basalt
silent plinth
green kite
supple plume
#

Hey Sparkling

green kite
#

๐Ÿ‘‹

supple plume
#

What is spherical master

subtle plover
#

@lilac cipher

supple plume
#

In your profile

lilac cipher
#

Im not good spark took all my poffertjes

green kite
#

Itโ€™s from April fools

subtle plover
lilac cipher
supple plume
#

Idk what that was I just joined on agust

green kite
#

There was a ctf and a site for April fools

supple plume
#

Aha

green kite
#

And if you got the flag youโ€™d get a role

supple plume
#

Cool

hoary nebula
#

i have the role too

subtle plover
#

No one asked

supple plume
#

Oh yeah

supple plume
#

Shut up pong get silver

subtle plover
supple plume
#

Yeah he is cooked

subtle plover
#

@supple plume wanna fight it in a clash royale match

hoary nebula
#

stream it

supple plume
#

I only play chess

#

We can stream it

supple plume
subtle plover
#

Noo in chess ill take L

supple plume
#

Let's find family friendly waifus gifs

frail turtle
#

God this guy

#

persistent guy

#

wants to make hostile negotiations with my parents about selling our house

supple plume
#

Tf

frail turtle
#

I know it's crazy

supple plume
#

Wdym hostile

frail turtle
#

as if there aren't hundreds if not thousands of other houses out there

#

basically my parents wanted to sell our house for $1.05 million, but because they felt buddy buddy with the guy trying to buy it, they reduced the price to $995k

supple plume
#

That is kinda normal really

opal smelt
#

rich people problems

frail turtle
#

'then out of the blue the guy said that he wants to charge them $4k for each month that we stay in the house after the sale, when my parents misunderstood that they had not actually agreed on $1500 and not $4k

supple plume
#

Hmmm

#

Well that is not normal

frail turtle
#

So then my parents took that as a betrayal from the guy, and said "We don't want to sell the house".

hollow bone
#

I need help with reverse shell

#

any help?

supple plume
supple plume
frail turtle
#

Now the guy is making veiled threats about wanting to sue for emotional damage, and etc.

supple plume
#

Sure

#

Tell the guy he can sue

opal smelt
#

emotional damage?

green kite
frail turtle
#

he signed a lot of paperwork to get the mortgage and everything

#

I'm like bro nobody sealed any deal on paper yet

supple plume
#

Tell him to sue

hollow bone
#

DMed

supple plume
#

He will waste time and money

supple plume
frail turtle
#

No my family cannot afford lawyers and legal money

opal smelt
#

"i screwed myself out of a deal and now i've got to make it someone else's problem" ugh people these days

supple plume
frail turtle
#

whatchu mean no need

#

ultimately their decision to not sell was multifaceted

supple plume
#

No need to hire lawyers

#

He won't get anything

hoary nebula
#

WAKANDA FOREVER

fathom sundial
#

Are there any coupons available for premium at the moment?

naive turtle
#

yall uhh basically my monthly renewed, but i js bought HTB Annual

#

So like i paid for 13mo

#

How do it get the money back

hardy frigate
#

Guys

#

I just dimmed the lights

#

It's time to hack

hoary nebula
#

wow bro

hardy frigate
#

Did u ever dim the lights? It puts u in the hacker mood

frail turtle
#

I told them I'll pay for the rest of the mortgage when I get a better job, and then the guy started mocking me when I told him that I will later,

#

it's like $165k

opal smelt
#

my lights are always dim orange so it's like i've got candles going everywhere

#

some of my led strips even flicker like candles

naive turtle
hardy frigate
naive turtle
#

yk what to do

naive turtle
#

i cant hack w/out max lights everywhere

frail turtle
opal smelt
hoary nebula
#

I never hack

green kite
west lynxBOT
naive turtle
#

that is seem

green kite
hardy frigate
naive turtle
#

see what i mean about lights

#

no wrong text

opal smelt
#

cant red team before marriage

naive turtle
#

agh no images

frail turtle
#

The thing about business is I dont know what it is with religious people, they involve religion into business

hardy frigate
frail turtle
#

and then get mixed up in bad blood deals

green kite
#

๐Ÿ’ช

naive turtle
frail turtle
#

I mean I let him have his fun you know I didn't argue or try to mock him back.

sturdy thistle
#

same here

naive turtle
green kite
sturdy thistle
#

or work at HTB

hardy frigate
naive turtle
#

๐Ÿ˜ญ all i do are retired boxes

#

nvmr

frail turtle
#

The bulk of the argument he wasn't getting that I kept telling him is that even if I convinced my parents to sell the house, which I'm really good at doing, they wouldn't sell it to him

naive turtle
#

๐Ÿค‘

hardy frigate
#

Actually if u do a Pro Lab u can also get hacker rank I think

naive turtle
#

wanna do that

frail turtle
opal smelt
#

h-hack the pwanet, senpai ๐Ÿ‘‰๐Ÿ‘ˆ

green kite
#

Itโ€™s not pay to win

naive turtle
#

i sold my soul for annual

#

$0.63 in the account rn ๐Ÿ˜ญ

#

student life is easy they said

green kite
naive turtle
#

insha Allah ๐Ÿคž

#

๐Ÿ˜ญ

hoary nebula
#

Messi is better than Ronaldo

naive turtle
supple plume
naive turtle
#

yall i will come back with hacker rank

#

i should prolly revise for my exam tmr as well

#

meh bye

supple plume
#

Git gud

#

git alias gut=rm -rf /

supple plume
#

They won't hire me

opal smelt
#

they don't hire you; you hack them and hire yourself

supple plume
terse dirge
#

Fml our DHCP server isn't pointing to our network imaging tool

naive turtle
opal smelt
#

i had to google that, seems to be a reference to a game

supple plume
#

You came back for a r6 dokabei ref without a hacker badge

supple plume
opal smelt
#

r6 = rainbow 6 siege; dokkabei is a character in the game; ref = reference. i am guessing this character has some kind of hacking ability, perhaps they can hack enemy turrets and use them against them

supple plume
#

None of that seems to be helpful to get a hacker badge

opal smelt
#

i dont play games like that tbh. i mean i get down in battlefield, but that's way more freeflowing than these tight knit team games

supple plume
#

@green kite please hire me in htb

green kite
#

Iโ€™m not staff nor HR

supple plume
#

Would you hire me if you could

green kite
#

I donโ€™t know you ๐Ÿ˜…

supple plume
#

Ghe guy was right

green kite
#

Tbh I was thinking of getting staff a few years ago

supple plume
#

R6 dokabei...

green kite
#

But I honestly hate the idea atm

#

It does matter a lot yes

supple plume
green kite
#

I have this saying. You can have 200 certs and be a dick, but at the end of the day, youโ€™re still a dick and I wonโ€™t like working with you

visual hollow
#

@green kite Sparkling water do be nice though

green kite
green kite
#

(Not saying echoes is a dick haha)

#

But if I have to work with someone, personalities must match too

supple plume
#

Agree

#

I guess I already fucked it in the chat

green kite
#

Yeah

green kite
visual hollow
#

I wouldnโ€™t be able for that

supple plume
green kite
#

I once worked with a guy

#

Very knowledgeable. Heโ€™d be my go to if I had issues. But he was so full of himself

supple plume
#

Yep

green kite
#

Yes

supple plume
#

You can become a dick some day

visual hollow
#

Congratulations, I guess?

supple plume
visual hollow
green kite
#

Itโ€™s 22:05 here

supple plume
green kite
#

Belgium

supple plume
#

Oh we have the same timezone

#

Spain

#

Aright

#

Good night ppl

#

Git gud

green kite
#

Night night

supple plume
#

R6 dokabei ๐Ÿ’ช ๐Ÿ’ช ๐Ÿ’ช ๐Ÿ’ช ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ”ฅ ๐Ÿ’ช ๐Ÿ’ช

undone pawn
#

Anyone experiencing issues with connection?
My connection starts normal, then it drops out of nowhere

#

I might pass your advice, then!

#

Tried it already. I'm using the Pwnbox.

eternal mango
#

How long between connecting and it dropping?

#

What do you get in the openvpn log file?

graceful pendant
terse dirge
graceful pendant
#

a wild gobbo appears

eternal mango
#

If it did, it'd mean pay to win for rank increase

undone pawn
eternal mango
#

The reason I ask is because if it's a matter of minutes or less, it's likely due to processes running for openvpn in multiple locations (e.g. on your machine, and on pwnbox)

#

It can cause issues with clients fighting for the connection.

hardy frigate
#

Space cows really bro ??

#

Cows have nothing to do with space

#

Watch interstellar

eternal mango
#

What?

subtle plover
#

Hi

hardy frigate
#

Interstellar says if u go into a black hole u can change the past

graceful pendant
#

I think heโ€™s talking about mooโ€™s discord tag @eternal mango

eternal mango
#

I know what he's saying

#

I just don't understand why

graceful pendant
#

Took me a minute

eternal mango
#

And I know that film

#

Was just checking to see if they had a point or not, but I guess not

graceful pendant
#

Yeah I donโ€™t get the reference either tbh

#

Fun fact: cows can only walk up stairs not down

#

(Donโ€™t know if this is true)

hardy frigate
#

Even a military cow ?

eternal mango
#

Google it

graceful pendant
#

They also navigate some pretty rugged terrain

opal smelt
#

just put em on a mattress n slide em down, like in bobs burgers

graceful pendant
#

TIL

eternal mango
undone pawn
graceful pendant
#

pwnbox is great until you need to use bloodhound

eternal mango
#

Log entries? Multiple locations of openvpn being run with the key? Check for zombie openvpn processes

#

For Windows issues, adjust the MTU in the config

#

There should not be.

#

There are troubleshooting steps detailed on the help site

graceful pendant
#

I โค๏ธ sublime text

opal smelt
#

is it sublime?

eternal mango
#

There are some limitations to what we can do in the web viewer yeah.. but it has been a while since the viewer has been looked at (I don't think I've ever worked on it past a few fixes / updates).. possible it can be improved, certainly

opal smelt
#

or sublime text, based on the band.. โ™ช i dont practice santeria, i aint got no crystal ball, but i joined a million ctfs and i, i passed them all โ™ซ

graceful pendant
#

If i could find that hyna

#

and that sancho that she found

#

well then Ill pop a shell in sanchos ass

opal smelt
#
sancho```
graceful pendant
#

how i feel sometimes when I dont get enough sleep and the coffee isnt working

worthy cargo
#

does it make any sense to ingest nginx error logs in wazuh/kibana?

eternal mango
#

Depends on the config.. but likely answer is yes

#

If you have any upstreams like PHP or whatever, can be useful in diagnosing issues.. for nginx itself it can help with monitoring for configuration issues for workers etc to handle high throughput / volume

#

TLDR; yes

#

If you're doing things right then the error logs will be tiny.. if you're not, then the error logs are imperative to help diagnose without pulling the logs from the host

#

Correlating an increase in errors against other events such as builds / deployments is easier when you have a historic record of logs to visualise against such events ๐Ÿ˜…

frail turtle
#

kek i thought i was gonna get a thousand dollars for what facebook did to me

#

15 dollars kek

#

Its okay free money is free money ill take it

lilac cipher
glacial crane
#

hey people

hoary nebula
#

I wanna do a horror esacpe room

glacial crane
#

or any other

frail turtle
#

An easier language to use

#

Nim

#

Or Go

glacial crane
#

where

frail turtle
#

No Go the programming language

eternal mango
#

Haha

frail turtle
#

Its better than java or c++

frail turtle
#

Because with C++ you have to spend a long time learning it. And you can easily mess up with all the <::>

#

Java makes everything an object so thats no good either.

eternal mango
#

Yeah, whereas in Go you just have to spend time adding exception handling to ignore exceptions to every single block instead

frail turtle
#

Yeahhhhhhhhh BUT hes doing competitive programming

elder inlet
#

Y'all are supposed to roll out the red carpet for me!

Assholes

frail turtle
#

So he doesnt have to do that

eternal mango
#

Language is a preference, I wouldn't say go is inherently better than Java or C++, it depends upon what you are most proficient in

frail turtle
#

Yeah but why be them when you can be you!

eternal mango
#

Hah, hey brath

#

Bread*

elder inlet
glacial crane
eternal mango
#

I misread your name, then went outside and replied

elder inlet
#

I shall now be refered to as "Brath!"

eternal mango
#

Lol

elder inlet
eternal mango
#

If only I could still edit usernames..

tiny canyon
#

@glacial crane i'm listening to dj ๐Ÿฅท snook

worthy cargo
#

https://www.youtube.com/watch?v=nSOqU1iX5oQ I followed this video, added a rule, did everything, fire cipher.exe and the event doesn't show up. Sigh. More troublehsooting.

https://jh.live/wazuh || Try Wazuh completely for free, and start detection engineering with an open-source SIEM and XDR platform! https://jh.live/wazuh

Sysmon: https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon
Wazuh Documentation: https://documentation.wazuh.com/
Wazuh Custom Rules: https://documentation.wazuh.com/current/user-ma...

โ–ถ Play video
elder inlet
#

Brath has cold pizza, and white monster energy!

worthy cargo
#
<group name="windows,sysmon,cipher">
    <rule id="998900" level="13">
        <if_sid>61603</if_sid>
        <field name="win.eventdata.image" type="pcre2">cipher.exe</field>
        <description>Possible cipher.exe execution detected</description>
    </rule>
</group>

That's my rule. Very simple.

glacial crane
frail turtle
worthy cargo
#

I asked on the wazuh slack community

#

They are very helpful. Let's see what happens

elder inlet
eternal mango
#

So many metal 3D printing and CNC services on Google that are just whitelabels of the same service

#

So frustrating.. they have ad keywords for capabilities they do not actually offer too

#

About ready to say sod it and buy a laser engraver instead lol

#

Bit of a waste of time spent on this script for model generation, but I guess at least I learned stuff

lapis apex
exotic pendant
#

๐Ÿ˜„

lapis apex
#

actually that statement makes me so mad

#

But I will contain myself ๐Ÿ™‚

glacial crane
#

What's the point of being a hacker when AI does it better than anyone else?

eternal mango
#

ooo.. just had a thought.. gonna 3D print and play with electroplating tomorrow - won't have the nice weight of a solid metal part, but it'll be pretty

slim topaz
#

hackthebox does not offer student discount for Labs right ?

eternal mango
#

Not for the labs no, sorry

#

We have some institutions that have Enterprise accounts for their students, but we do not offer discounts on the labs AFAIK

slim topaz
glacial crane
slim topaz
eternal mango
#

We release new content every weeks, and there are Sherlocks, Starting Point, Endgame etc etc

slim topaz
eternal mango
slim topaz
#

i'd be happy to pay the 20$ if i had a job

#

as a student it's difficult

eternal mango
slim topaz
#

8$ in Academy is very reasonable i already pay that every month

slim topaz
eternal mango
#

I can't promise anything at all

#

As I said, it's not a simple decision

glacial crane
slim topaz
#

i understand ofc , this is a whole process to discuss and implement

slim topaz
#

so both subscriptions will take 80% of my monthly allowance

eternal mango
#

We do release new content every month, and with the student sub on Academy you get a massive amount of content, what is it on the Labs you are looking to take advantage of out of interest, that the free account does not provide access to?

slim topaz
#

to build a solid foundation

eternal mango
#

You could grab some VMs from somewhere like https://vulnhub.com if you want additional challenges

eternal mango
#

BOOM, beat you to it

#

๐Ÿคฃ

eternal mango
#

But what in specific do you feel you're missing out on mbz1? Student sub on Academy provides access to a huge range of content, and on Labs you have access to loads of free content, and new content every week

#

It's an honest question

slim topaz
frail turtle
slim topaz
lapis apex
#

someone who worked with enterprises would know C++, C# and java rule that world

slim topaz
#

so that's what bothers me that i'm missing out on labs that are suitable for my level

lapis apex
#

and all programming

eternal mango
#

....

deft bay
#

hi

#

how's it hanging

glacial crane
lapis apex
eternal mango
#

Ok cheers woodenk, how're you? ๐Ÿ™‚

deft bay
#

Doing alright, desperate to reset my sleeping schedule

#

making music

#

you?

deft bay
lapis apex
#

hey there, I can recall you but from the very earlyyyy days, like way too early

slim topaz
deft bay
#

I don't recall you :( sorry

#

username change?

lapis apex
deft bay
#

what was it before

lapis apex
#

no hard questions please lol

#

but good to see you still active and around

deft bay
#

Not really that active here ahaha

#

just pop in every now and then

lapis apex
#

yeah same, lost interest

#

anyway I will be back again when someone decides to have a bad take

#

issa joke

lapis apex
#

@patent elbow hello

patent elbow
#

my mouse is broken im NOT okay i cant scroll anymore this is a SERIOUS PROBLEM

#

i use my mouse to move the cursor and the touchpad to scroll THIS IS HELL someone get me out of herePELEASE

#

@lilac cipher where are you when we need you ๐Ÿ˜ก

turbid goblet
#

Yo anyone have a drone and can recommend me a beginner budget friendly one to play with

worthy cargo
#

Learn to use a mouseless window manager

#

keyboard shortcuts

patent elbow
mystic harbor
#

@lilac cipher respond

worthy cargo
#

I used xmonad

#

๐Ÿ™‚

turbid goblet
patent elbow
#

i was on i3 for a pretty long time, now im on kde and life's way better

patent elbow
eternal mango
#

I do love my mini

patent elbow
#

same

eternal mango
#

Nice that it's under the 250g limit too

#

(UK)

#

I've an older heavier one from DJI too, but if I want to be a good boy it's much more of a pain to shoot in specific places with it

patent elbow
#

mine's not even mine but i'd never flown a drone before and i tried the dji mini 4 and it's insane, super easy to control and everything the camera quality is crazy honestly it's just so cool, i used to think drones were super hard to handle but you actually get the hang of it pretty quick

patent elbow
eternal mango
#

Yeah, the other is the Air I think

eternal mango
#

You need a license regardless of size also

patent elbow
#

ahh

eternal mango
#

(in the UK)

patent elbow
#

i see

turbid goblet
#

Oh wait

#

Oh im US

#

I wonder if i need one tho, didnt even think about that

eternal mango
#

Technically yes

#

if it's above 250g I think

turbid goblet
#

Under 250g i dont Pog

#

Ye

eternal mango
#

๐Ÿ™‚

lilac cipher
turbid goblet
#

Guess ima check out that mini then

lilac cipher
glacial crane
lilac cipher
eternal mango
glacial crane
#

im trying hack g0blin i already have hiS IP

lilac cipher
#

127.1

eternal mango
glacial crane
#

thats the actual highest level on HTB when you have to hack the cofounders

lilac cipher
#

It was me whispering 'your firmware needs to be updated'

eternal mango
#

"also, you are out of eggs"

deft bay
#

give me all your pizza ๐Ÿ”ซ

eternal mango
#

NOOO, I was looking forward to that pizza tomorrow

deft bay
#

too late

#

should've thought about the woodenk pizza tax

eternal mango
#

Arrrgh ok giving up the dream of CNC milled coins of pure metal, HTB plastic poker chips instead ๐Ÿคฃ

#

Now I need to decide which machines to use for each value..

deft bay
#

HTB poker

eternal mango
#

Figuring out best settings for layer generation now to give good contrast

#

Wonder if I can get HTB green RGB matched filament..

terse dirge
eternal mango
#

Hehe ๐Ÿ˜„ We've the company-wide meetup coming up

#

Maybe I'll hide the first 20 machine coins around the hotel or something

warm dome
#

rdp client seems to be crashing alot today

eternal mango
#

On Academy?

#

..nvm, impacts Labs too.. have you tweaked your MTU in the ovpn config?

#

Some find that helps

rustic carbon
#

Do HTB do meets ๐Ÿ‘€

eternal mango
#

This is a company-wide meetup, where the whole company get together somewhere ๐Ÿ™‚

#

Last one we had was a couple of years ago

graceful pendant
#

im tryna get my badges for getting drunk with the founders

#

ciiabatti, ciabatti, ciabatti basmati

graceful pendant
#

gonna have to OSINT you where you drink usually and just show up with a pint

wooden arrow
#

Wasn't secure coding alr a category

eternal mango
#

Heh, jokes on you, I've not been out to a pub for months

#

Wait... ๐Ÿ˜ญ

graceful pendant
#

shows up at your doorstep with a sixer of belgian ale

terse dirge
eternal mango
#

I did almost totally dox my new address the other day.. thankfully realised and fixed it

#

..but I'm sure some saw my mistake

#

Oh well ๐Ÿคฃ

rustic carbon
graceful pendant
#

I regularly self dox for shiggles

rustic carbon
#

Iโ€™m so unaware

#

Itโ€™s pretty impressive how oblivious I am

eternal mango
#

You shouldn't dox people

rustic carbon
#

How Iโ€™m alive kek

rustic carbon
eternal mango
#

Ok, well..

#

You shouldn't dox yourself either

#

๐Ÿคฃ

rustic carbon
#

It wasnโ€™t on purpose ๐Ÿ˜… everyone come over for tea ?

graceful pendant
#

Ive alerted local authorities that I might be swatted

eternal mango
#

I've had people drop off beer before, and one old guy on a mobility scooter ask me to hack back in to his facebook account

#

But that was years ago, when my home address used to be the HTB registered address

graceful pendant
#

so, im not really worried about pizzas showing up

eternal mango
#

That is no longer the case

#

(and I have moved since then)

rustic carbon
#

On THM we had a bingo card

#

THM bingo was funny

#

I leaked the address through an image of a package. That one always gets me ๐Ÿ˜…

eternal mango
#

All I'll say is.. be careful with certain TLDs... not all support privacy, and not all registrars warn you about that

#

Was lucky I saw it at all to be honest

#

Was just because I was checking DNS propagation before I moved on to other things

wooden arrow
#

127.0.0.1

graceful pendant
#

I was apart of a relatively large ecommerce launch recently

#

and the nerve of pushing to main and then changing dns

#

felt like a nuclear launch code

eternal mango
#

๐Ÿ˜…

graceful pendant
#

dns propagation and cacheing was messing things up for people and it was terrifying

#

then the backend bricked even though they 15xd their regular infrastructure

rustic carbon
eternal mango
eternal mango
#

Only privacy I really have is my new address tbh

#

Most everything else is public record

rustic carbon
#

Iโ€™m not very good at privacy considering ๐Ÿ˜†

#

I think a lot of people know everything there is to know

graceful pendant
#

the poor british guy on the line was very tired

#

and things kept breaking so he was quite upset

eternal mango
rustic carbon
eternal mango
#

Every day is a school day

rustic carbon
#

Thatโ€™s why we are 90% tea

eternal mango
#

Regardless of how smart you are

rustic carbon
eternal mango
#

If you don't have that mentality you are doing it wrong

#

Ohh

rustic carbon
#

Because Iโ€™m so bad at security

eternal mango
#

Fair enough

rustic carbon
#

๐Ÿ˜…

#

#Notsostealthy

#

I remember when I went to an event. I was introducing myself to people with my name. I had a moment of silence, am I supposed to do that.

graceful pendant
#

some of the smartest people I know are simultaneously some of the "dumbest" in certain aspects

#

and vice versa

eternal mango
#

We're all stupid meatbags in some way

#

..in all the ways

rustic carbon
#

Meat bags ๐Ÿค–

#

Hahaha

graceful pendant
#

im a big dum

#

i got super stuck on "voleur" today

#

active directory is my archnemesis

iron maple
#

Hello, i am looking for a CAD file online DM me if you can Help me "Find" this cad file! TIA

graceful pendant
#

anything windows i just find to be disagreeable

rustic carbon
graceful pendant
#

๐Ÿšช

rustic carbon
#

๐Ÿšถโ€โ™€๏ธ

#

I took a nap in the evening. Now Iโ€™m awake at 1am. I have a feeling I wonโ€™t be sleeping.

iron maple
#

im looking for a cad file.

eternal mango
#

I got that bit

#

What CAD file?

#

Why on earth are you asking here for it lol

compact wave
#

Hi @eternal mango pika_sip

eternal mango
#

Hey @compact wave, ruin any lives recently with OSINT challenges? ๐Ÿคฃ

#

How're things?

iron maple
#

i figured there was some smart people in here with the interwebs..

turbid goblet
#

sorry i am not smart

compact wave
eternal mango
#

Just ask about it.. but we're not here to Google for you

iron maple
#

i did not say everyone here was smart ๐Ÿ˜„

eternal mango
#

No need to DM, unless it's something you shouldn't be asking about in public right

compact wave
eternal mango
#

..and if that's the case, don't ask here.. we're not here to break the law for you either

eternal mango
iron maple
#

Fair enough, i don't need google already tried that. Thanks though.

#

suppose i will keep looking then ๐Ÿ˜„ thanks!

eternal mango
#

So you can't say what it is publicly? What size tentacle contraption are you looking for?

turbid goblet
#

๐Ÿ˜‰

eternal mango
#

๐Ÿ˜„

iron maple
#

small!

#

tiny

glacial crane
#

how you know

rustic carbon
#

I just found out people are often bathing their cats.

#

Do people know cats bath themselves

turbid goblet
#

my cat takes showers

graceful pendant
#

is your fridge running?

eternal mango
#

Nah, I chopped its legs off

terse dirge
vivid flower
eternal mango
#

She has a great eye for detail, especially for frogbutts

quartz willow
turbid goblet
quartz willow
brazen rock
#

Guys, does price increase apply to annual subscriptions as well?

eternal mango
turbid goblet
#

i want caviar

eternal mango
#

9hr 3D print kicked off before bed.. what you want to bed I wake up to spaghetti failure? ๐Ÿ˜…

alpine pumice
#

1,000 cubes

eternal mango
#

I have 0, I can't cover that bet ๐Ÿ™

tender seal
#

Normal person: "dir" or "ls"
Madman: "Get-ChildItem"

alpine pumice
#

gci ez

eternal mango
#

hah

tender seal
eternal mango
#

Powershell is amazing for automation tbh

tender seal
#

powershell cmdlets are still a foreign concept to me

#

after all the naming conventions in cmd and bash we're back to semi english

quartz willow
brazen rock
alpine pumice
eternal mango
#

Damn it.. one chip out of 20 delaminated and the print aborted NotLikeThis Guess I'll add some rafting

eternal mango
eternal mango
#

I said I couldn't cover that bet

#

I have 0!

#

Also I didn't wake up to spaghetti

alpine pumice
#

lol

eternal mango
#

๐Ÿ˜„

alpine pumice
#

yeah i was betting it wouldn't!

eternal mango
#

Why is that ONE coin so damn fugly

alpine pumice
#

just put a big red beard on it to cover it up

#

lol.. too mean? sorry jk

eternal mango
#

Could do

dusky jacinth
#

I want the fugly coin

hollow bone
#

Why is htb swag so expensive?

maiden anvil
#

im jk idk

hollow bone
ornate ibex
#

Morning

gaunt gale
#

hi guys

#

I am gonna redo the entire section I've been working on tomorrow

#

since I will be stuck on the last question but I want to redo it and if I still can't do it tomorrow I'll ask for help

#

I did first four questions on my own so we'll see if I can do question 5 on my own

#

how are you guys?

eternal mango
#

~50 hours build time for the remainder.. I think I need to buy some more filament lol

#

Will mess about with electroplating tomorrow on this batch first to see how it turns out

rustic carbon
#

Is there a lot of phone security on HTB ?

glacial crane
eternal mango
eternal mango
# glacial crane i dont got how that imprimes metal

A conductive coating allows you to use the method of running electricity through an annode / cathode through a conductive medium (electrolyte), which will result in deposition of metal ions to the part in the electrolyte (the cathode)

#

..at least, that's my meager understanding from watching much on the subject ove rthe years and reading, but have never actually done it

rustic carbon
eternal mango
#

I am not Google

rustic carbon
eternal mango
#

(but no, I do not believe so.. virtualisation for iOS devices is quite limited due to legal limitations and viable hypervisor availability powered by iOS)

glacial crane
eternal mango
#

Oh, maybe I misunderstood

#

I thought you meant is there any content for mobiles

rustic carbon
#

Looking for more knowledge on back door patching / apts

eternal mango
#

If you meant are mobiles secure or is security a concern for mobile OS developers.. then yes, security is a concern, and mobile OS's have progressed a hell of a lot over the years in the aspect of security and sandboxing

rustic carbon
#

Reading phone logs eg

#

Not a lot of in-depth courses on it.

#

Okay thanks

terse dirge
#

Eeeew Java

#

You can build mobile apps with JavaScript

eternal mango
#

Worth checking Academy though @rustic carbon - there's some higher tier content around Android security and exploitation

#

..but it's quite niche content wise, and definitely not got the same coverage as other subjects in the field on HTB

#

If you don't know Frida, definitely read up on it

#

Not just for mobile mind.. it's an awesome framework in general

terse dirge
#

Eeeew, no wonder mobile apps are slow pepe_giggle_laugh

eternal mango
#

It is

terse dirge
#

Go can be used for mobile apps

eternal mango
#

At least it's not Objective C

terse dirge
#

It's bad and insanely outdated

raven rain
#

should be ArnoldC

eternal mango
#

But I enjoy working with Java when I need to

#

If the result is shit, it's likely a skill issue

#

..but as with any language, it has its limitations and quirks

terse dirge
#

Poor scaling, resource intensive, needs the jvm, nested classes, slow compile times.