general

[meager kernel]

JeSUS

[hoary nebula]

NOT A LEMON

[muted olive]

je sus (I sus) in french

[burnt mauve]

This is just ADHD and forgetting you grabbed the lemon

[hoary nebula]

je suis*

[brazen crown]

i got that

[meager kernel]

JeSUS

[hoary nebula]

hesus

[muted olive]

no, je sus

I sus

[hoary nebula]

i sus , you sus

we all suss

[burnt mauve]

I'm not sus

I'm Luna

[hoary nebula]

Yeah u are

bro said she is the moon

[green kite]

still no Fluvius

[muted olive]

Luna Lovegood

[supple plume]

https://www.lunarvim.org/

best nvim rig

[burnt mauve]

Oh no vim

[hoary nebula]

wdym no

[burnt mauve]

I don't have the intelligence to escape vim lmao

[muted olive]

https://tenor.com/PyBH.gif

[muted olive]

:q

[hoary nebula]

are you a nano girl

[wary pumice]

Morning everyone

[muted olive]

two characters break the brain

[brazen crown]

lmfao

[muted olive]

and nano >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> vim

[meager kernel]

Luna Lovegood

From Harry Potter

[burnt mauve]

Yes I'm very tiny

[supple plume]

unless you accidentally started recording a macro before :q

[meager kernel]

https://tenor.com/view/luna-lovegood-looking-thinking-wait-a-minute-who-said-that-gif-22430642

[supple plume]

and then :q says you need to save changes

[hoary nebula]

:wq

[muted olive]

:P

[brazen crown]

vi, vim, nvim are really good if you learn the shortcuts; shit if you don't

[muted olive]

:O

[supple plume]

no permissions

[hoary nebula]

FUK

[supple plume]

xd

[burnt mauve]

Yeah but sometimes you need to press escape first 😭

[hoary nebula]

:q!

[muted olive]

how to exit vim (my own method):
shut down computer and restart

[supple plume]

still trapped

[burnt mauve]

and my brain gets confused

[meager kernel]

Whose Irish here?

[supple plume]

computer crashed before

[brazen crown]

or control c

[meager kernel]

Anyone Irish?

[burnt mauve]

I'm the typa women in cyber to never leave help desk 😂

[hoary nebula]

irish people dont hack

[meager kernel]

Probably cause they're busy drinking

[brazen crown]

lol

[hoary nebula]

where are you from

[brazen crown]

give like another hour or two for them to wake up

[burnt mauve]

born? living? both?

[hoary nebula]

both?

[supple plume]

Irish Gaelic terms for "hack"
Coscraím: To chop or cut.
Example: Rinne sé cusach dá smig (He hacked his chin).

[burnt mauve]

Copenhagen, Western Aus

[meager kernel]

I'm thinking of going on a cut
I've been bulking too long

Gonna have to change my diet

[hoary nebula]

oh nauurrr another aussie

[muted olive]

mate

kangaroo mate

[supple plume]

@half lantern

[brazen crown]

swahililand, southern norway

[burnt mauve]

I've only been here for a few years 😭

[muted olive]

🦘

[hoary nebula]

can you still speak Danish

[brazen crown]

am i close enough 🥝

[half lantern]

What

[brazen crown]

why is there no kiwi emoji

[hoary nebula]

another aussie

[meager kernel]

Oh you're online

[half lantern]

We exist you know

[burnt mauve]

I can understand but not speak, I never spoke it enough

[meager kernel]

Hello bashu

[muted olive]

lets toss some shrimp on the barbie mates

[half lantern]

Hi

[hoary nebula]

shrimpy on the barby

[meager kernel]

How are you

[burnt mauve]

for the longest time I thought this meant an actual barbie doll

[half lantern]

Stressed I have 3 interviews lined up

[meager kernel]

Isn't "mate" more related to the British accent

[meager kernel]

Deloitte?

[burnt mauve]

and not a bbq

[muted olive]

much more common to australia

[supple plume]

let me know if we can tell you what runs on port 5000

[burnt mauve]

i still don't know how to spell it

[muted olive]

barbecue

[burnt mauve]

where's the q

[half lantern]

Deloitte, Joe got me into this other company owned by his friend and maersk

[muted olive]

there is no q

its just pronounced bbq

[meager kernel]

Sheeesh good luck
Do your best

[meager kernel]

The "cue" is shortened to q

[burnt mauve]

why is it pronounced that way 😭

[half lantern]

Barbecue or barbeque

[muted olive]

just like how "ex" becomes just "X" for some spellings

[half lantern]

You'll never know

[burnt mauve]

English is the bane of dyslexia

[muted olive]

MURICA 🦅 🦅

[meager kernel]

Google's clanker says both are correct

[half lantern]

My dude has it and he needed me to help him spell heroin cuz his spell check didn't get it. Was super cute

Ngl

[supple plume]

BARBACOA

[muted olive]

bigger question was why he wanted to spell heroin

[burnt mauve]

the drug or the female hero?

[half lantern]

The drug.

[meager kernel]

English is 3 languages dressed up as one in a single coat

[burnt mauve]

I thought the drug ended with e

[half lantern]

He kept spelling herein

[meager kernel]

Female hero is heroine

[half lantern]

Which is also a word

[burnt mauve]

I normally spell herein as here-in

[meager kernel]

No one normally uses the word here-in

Or herein

[half lantern]

I do stfu

[meager kernel]

Ok aussie

[muted olive]

you know, if you add two acetyl groups on morphine, it'll turn into heroin

[burnt mauve]

I use here-in

[half lantern]

In essays

[supple plume]

essay deez nuts

[half lantern]

I dont know anything about drugs. Is it the worst one?

[meager kernel]

I'll remember that for the next time
How would you do acetylation in a school chemistry lab

[half lantern]

He said he will try anything on this planet but heroin

[burnt mauve]

I just know nothing about drugs completely lmao

[half lantern]

And I'm like is it that bad

[muted olive]

all drugs are bad but morphine is administered for pain in hospitals

heroin bad

abused frequently

hence, never carry acetyl groups around with you

[burnt mauve]

Fentanyl is administrated in hospitals for pain too iirc

[sturdy thistle]

Morning

[half lantern]

Wasn't Elliot from Mr robot addicted to morphine

[meager kernel]

@muted olive in your school chemistry lab
If you add concentrated sulphuric acid on Manganese permanganate
It explodes

I tried

[half lantern]

So it's lesser heroin?

[meager kernel]

My face almost burnt

[hoary nebula]

this font

[muted olive]

you need acetic anhydride

[muted olive]

lol ggs

[meager kernel]

Nah
You don't

[muted olive]

what happened?

[meager kernel]

Oh wait

[half lantern]

In india they throw sulphuric acid on women. It's greatest use

[sturdy thistle]

So u like it

[meager kernel]

Nvm

You do

[meager kernel]

I tried it for fun with a couple friends
Had to pay bill for all the glassware I broke

[muted olive]

that is decreasing more and more every year

and that is not the greatest use lol

[burnt mauve]

I thought your name was midhat at first 😭

[half lantern]

Have you done giveback I'm doing on weekend @meager kernel

[meager kernel]

Oh.......
I'm...
Okay

[meager kernel]

Almost

[muted olive]

we use a lot more h2so4 in labs

[meager kernel]

Today should be complete

[muted olive]

there are <200 cases of that per year but we use so much h2so4 just for experiments

[meager kernel]

CBSE right?

[muted olive]

and industrial usage

[muted olive]

now, yeah

[half lantern]

I was joking

[meager kernel]

Hmm, I could tell you some more explosive reactions but that would be wrong on my part

[muted olive]

Mb. Couldn't tell

[half lantern]

What restrictions has india placed to reduce acid attacks

[terse dirge]

https://tenor.com/view/typing-laptop-cat-busy-cute-gif-5822667

[muted olive]

but also, I did a case study on it once

[frigid mountain]

hi @terse dirge

[muted olive]

stopped randomly selling acid unless with extended background check

[half lantern]

Like you used to be able to buy it anywhere

[frigid mountain]

hey @muted olive

[muted olive]

I know because my teachers say its hard to get it because its a lengthy process

[frigid mountain]

hi @half lantern

[muted olive]

hi, how you doing?

[half lantern]

Hello

[frigid mountain]

😄

[meager kernel]

@muted olive wanna know some fun chemical reactions?

Deadly but fun

[muted olive]

add sodium in water

that's one of them

[frigid mountain]

I'm well. Up super early to catch a flight. Could've slept a couple hours more but I was awake and wanted to start getting ready

[meager kernel]

Yea that's very common

[burnt mauve]

Not deadly but Rubidium and water

[terse dirge]

https://tenor.com/view/bear-hello-hallo-hi-there-oh-well-gif-13727286

[burnt mauve]

pretty much any alkali

[muted olive]

what happens with that?

[meager kernel]

Any alkali metal plus water basically

[burnt mauve]

it explodes

[muted olive]

ah

oh wait its alkali

makes sense

[burnt mauve]

yea

that's my only chem knowledge

[meager kernel]

Vinegar with bleaching powder gives chlorine gas
A weapon used in world war

[burnt mauve]

that and hydrogen fuses to helium

but you need some deu something or other

[hoary nebula]

https://tenor.com/view/sam-sulek-sam-hi-there-sulek-zyzz-gif-11692285525298771980

[muted olive]

two hydrogen isotopes cannot fuse

unless under extremely high temp

[sturdy thistle]

no sorry 😄

[muted olive]

like a million kelvin

10^9 kelvin actually

[burnt mauve]

yea it needed some secondary initiator

[muted olive]

that can only be currently achieved through nuclear fission

[burnt mauve]

which was that one I don't remember

[muted olive]

and that, children, is how they invented the hydrogen bomb

the nuclear fission provides the temp for the H isotopes to fuse

[hoary nebula]

what is this chat

[burnt mauve]

Tsar bomb used lead or something

[meager kernel]

We probably shouldn't talk about deadly reactions here
Cause there might be some psycho (cough cough @hoary nebula ) who might try them irl

[burnt mauve]

idk how

[muted olive]

and fusion gives off even greater heat, energy

[meager kernel]

Deuterium?

[burnt mauve]

that

yea

[meager kernel]

Tritium is the radioactive one iirc

[muted olive]

deuterium is secondary hydrogen isotope

tritium is tertiary

[meager kernel]

Chemistry was my best subject in school

Easiest for me

Especially organic

[muted olive]

lol its my worst and hardest

[mystic harbor]

🤨

[burnt mauve]

I sucked at anything not math

[muted olive]

Teach me how organic works and I'll be forever indebted

[meager kernel]

I sucked at maths only 😂😂

[muted olive]

that shit is like black magic for me

[meager kernel]

Continuous practice tbh

[burnt mauve]

How does anything organic work 😂

I don't understand biology in the slightest

[muted olive]

I can't understand how the carbocations rearrange and form the resultant compound

[meager kernel]

I'll teach you in VC someday

[muted olive]

I got 99 in biology in my 10th boards lol

[meager kernel]

Crazy

[mystic harbor]

Same lol

[muted olive]

the one mark I lost was because of one of the questions

asking why is the symptom where you cant see stuff in the direct center caused by

[meager kernel]

I got 99.8%ile in chem in JEE

[muted olive]

answer was astigmatism

I wrote macular degenration

[muted olive]

tough task, congrats

thats a great score

[hoary nebula]

U235

[meager kernel]

This sounds like oonga boonga to me

[burnt mauve]

isn't it to do with the eye shape?

[muted olive]

it is yeah, the cornea is cylindrical in shape

thats what astigmatism is

[burnt mauve]

I only know cause that's what my optometrist said lmao

[meager kernel]

I hate physics chem maths and bio now

[burnt mauve]

I make the wife drive at night cause I can't lmao

[meager kernel]

Never studying that again

[muted olive]

I currently do hate them....

and still have to study them

for 3 more months at least

[burnt mauve]

physics is fun though D:

[meager kernel]

Yea you gotta study them
Good luck

[muted olive]

agreed its my least worst

[meager kernel]

I'm glad that phase of my life is over
Worst 2 years of my life

[burnt mauve]

I'm yet to study quantum but classical is fun

[muted olive]

I did get a good score on yesterday's test, so I'm happy for now lol

[meager kernel]

Studying for competitive exams lead me into depression

[muted olive]

I was thinking of going for IIIT so that I don't have to deal with science lmao

[burnt mauve]

I can't escape science rn 😭

[meager kernel]

Lasers

[burnt mauve]

yeah

[meager kernel]

Lasers are fun tbh

[burnt mauve]

they do be, until some idiot burns themselves

then you have to back with L2 LSO and vet every damned thing

[muted olive]

When you say lasers I'm thinking of the red dot that the cat chases

[burnt mauve]

or LSS, whatever you cant to call them

[burnt mauve]

That's Cat 1

anything lower than 5mW is generally safe for that kinda stuff

[meager kernel]

@burnt mauve what's the full form of LASER
Tell without googling

[burnt mauve]

no clue 😂

[meager kernel]

😭😭

You work with them

[burnt mauve]

Doesn't mean I remember everything 😭

[muted olive]

light amplification by stimulated emission of radiation

[meager kernel]

Yes

Good boy

[muted olive]

https://tenor.com/oDyF6wheWfX.gif

[meager kernel]

@burnt mauve see he remembers it

😭

[muted olive]

You know what VIRUS stands for?

[burnt mauve]

I mean, I only get asked what a laser is

not where LASER came from

[muted olive]

vital information resource under siege

[meager kernel]

Luna tell me how I can build a laser at home

[burnt mauve]

What classification?

[muted olive]

declassified

[meager kernel]

Any laser which can burn things

For educational purposes ofcourse

[muted olive]

chatgpt moment

[burnt mauve]

generally with two mirrors at certain angle, a battery, some wire (Don't use nichrome), and a switch
Generally you want a q-switch to create enough photon emission

[meager kernel]

My GPT no longer helps me even if I say "ethical purposes" 😔😔

[muted olive]

use gpt 4

[meager kernel]

Is that enough to burn paper

[burnt mauve]

you can emulate a laser using screws, nichrome, a battery, and a switch

[muted olive]

If your aim is to burn paper you can reflect sunlight off a glass

[burnt mauve]

^

[frigid mountain]

Luna is my daughter's name

[meager kernel]

No, I wish to do it in a controlled environment, preferably in a hallway filled with wooden furniture

[muted olive]

why not nichrome?

[supple plume]

CHAT!

[muted olive]

That sounds very specific 😂

[supple plume]

OWASP 10 new release 2025 10h ago

https://owasp.org/Top10/es/2025/0x00_2025-Introduction/

[burnt mauve]

Gets very hot very quickly and can cut straight through vital equipment

[muted olive]

LLM is in the list, I call it

[meager kernel]

@burnt mauve is it possible to build a laser in a college lab with not-that-expensive equipments

[burnt mauve]

yea

[muted olive]

what if you insulate the rest of the system?

[meager kernel]

Aight thnx

[muted olive]

gets featured in local newspaper 24 hours later

[meager kernel]

Definitely not me

[burnt mauve]

Depending on what you use, then sure, normally copper works just fine since you're wanting to force electrons to jump shells and force out a photon emission

[meager kernel]

I'm currently looking into IMSI catchers
They seem fascinating

[burnt mauve]

you can either force the electron back down a shell (this is done with a q-switch) or you can wait for the electron to drop down on its own (this can happen whenever it wants to)

[muted olive]

wait, is this similar to a semiconductor setup?

or is it a semiconductor in itself?

[meager kernel]

@burnt mauve is it possible to hook up a laser to a car battery for stronger laser

[frigid mountain]

https://tenor.com/view/real-genius-kent-torokvei-ohhh-screams-gif-14130409425317284010

[burnt mauve]

yes but that's dangerous

[supple plume]

sorry I sent it in spanish and it is release candidate but here is the right link

[meager kernel]

I see

[supple plume]

https://owasp.org/Top10/2025/0x00_2025-Introduction/

[scenic maple]

woohoooooooo

[meager kernel]

You are forgiven child

[hoary nebula]

what is the top 10 now

paste it here

[scenic maple]

A01:2025 - Broken Access Control
A02:2025 - Security Misconfiguration
A03:2025 - Software Supply Chain Failures
A04:2025 - Cryptographic Failures
A05:2025 - Injection
A06:2025 - Insecure Design
A07:2025 - Authentication Failures
A08:2025 - Software or Data Integrity Failures
A09:2025 - Logging & Alerting Failures
A10:2025 - Mishandling of Exceptional Conditions

[supple plume]

Injection went from top 3 to 5 😭

[burnt mauve]

more of a semiconductor setup in a sense
But realistically you're stimulating an electron field with more electrons then either powering it off (to drop the electron back down) or condense the field to hit the electron more reliably

[frigid mountain]

BOR SAID NERD SHIT

[hoary nebula]

what do you study?\

[frigid mountain]

I study The Blade.

[meager kernel]

She pokes lasers in people's eyes

[burnt mauve]

Studying cybersecurity, but I work as a laser technician

[hoary nebula]

wow

[frigid mountain]

https://tenor.com/view/finger-quotes-drevil-austin-powers-gif-6529102148968853119

[burnt mauve]

Lasers are just photon radiation

[frigid mountain]

That's crazy I'm a laser tech too

[supple plume]

why A01 is not part of A07

[frigid mountain]

https://tenor.com/view/lasers-concert-lights-gif-5102526

ok I'm not a tech but I am a laser enjoyer

[burnt mauve]

I haven't been in it for too long, just a little under a year 😅

[meager kernel]

@supple plume A01 is basically IDOR right?

[supple plume]

no

[frigid mountain]

big fan of the OTC green laser pointers with the different diffuser tips

[supple plume]

I mean I think IDOR is part of it

[meager kernel]

Broken access isn't connected to IDOR?

[supple plume]

you see SSRF is part of A01 too

[burnt mauve]

yea idor is a part of it

[supple plume]

it is

[meager kernel]

Hmm

[frigid mountain]

Talking through the woods using a green laser as a flashlight with the twinkle light tip is wild

*walking

[sturdy thistle]

i think i'll get the Ryzen9 9900x

[supple plume]

but my point is if you get admin creds (or session) yoiu basically have broken access right?

[sturdy thistle]

just wait for black friday

[burnt mauve]

does bruteforce or social engineering count then?

that's by definition gaining access to admin creds in that sense

[supple plume]

bruteforce counts if week passwords are in place https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/

[supple plume]

social engineering doesn't because we are talking about web apps

[burnt mauve]

I mean someone could SE creds for the web app

[supple plume]

but is not part of the application security

[burnt mauve]

yea I was just pointing out the vagueness of it lol

[obtuse fern]

generally speaking; if a web app relies on a user's credentials that's weak appsec

[warped plank]

Meanwhile every web app in existence 👁️👄👁️

[obtuse fern]

i.e. if it relies on a user on the system's password to connect to the database instead of a database user

[supple plume]

https://owasp.org/Top10/A01_2021-Broken_Access_Control/

[sturdy thistle]

i also think that IDOR or BAC in general are more common these days

[burnt mauve]

Ah i see, I'm assuming this the same category as password reuse

[supple plume]

I think IDOR is very common

[sturdy thistle]

yeah

i found 2 recently

[burnt mauve]

oh no

[warped plank]

ayo? any bounties?

[burnt mauve]

I have an english test

[sturdy thistle]

"duplicate"

[supple plume]

that is painful

[sturdy thistle]

or just not true

[warped plank]

To be fair, IDOR is considered to be low hanging fruit... so everyone looks for it or has automation for it

[sturdy thistle]

that's true

[supple plume]

I remember 4 years ago I wanted to start with cyber and I went to bbh found an Open Redirect and... duplicate

then I gave up on hacking

[sturdy thistle]

but i found host header injection some days ago

[warped plank]

open redirect is diabolical

[supple plume]

duplicate hurted me so bad

[sturdy thistle]

but i bet it's dupe

[warped plank]

like host header?

[sturdy thistle]

ye

[warped plank]

kewl

[supple plume]

what could you inject?

[sturdy thistle]

lemme dm 😄

or let me censor

[supple plume]

ok

[sturdy thistle]

and throw it in here

[warped plank]

probably a hostname in the HOST header to do some shennanigans

[mortal violet]

https://owasp.org/Top10/2025/0x00_2025-Introduction/

[supple plume]

vro

[warped plank]

Love how literally misconfigurations and broken access controls are the top now which indicate that due to all the frameworks common vulns back then aren't as common now but admins are still as lazy as ever

[supple plume]

EXACTLY

[warped plank]

where'd my SSRF go 😭

[supple plume]

injection from 5 to 3 is boring

[supple plume]

to BAC

[warped plank]

3-5 *

[supple plume]

yeah I ment that xd

[warped plank]

Crazzy, that a live host?

[sturdy thistle]

ye

[warped plank]

sick, hope ya get a bounty

[sturdy thistle]

hope so too

[supple plume]

mmm

[warped plank]

Lmao software supply chain failure is now A03

well hi there npm

[sturdy thistle]

fun fact i created a claude codew skill that's found it

[supple plume]

can you explain a bit what does it do?

bypass the redirect?

[sturdy thistle]

like MITM and redirect you to a different page that i control

[warped plank]

essentially directs users to attacker's site

[supple plume]

mmm

[scenic maple]

host headers can redirect 😩

[warped plank]

that's their entire purpose

[supple plume]

but it has to be stored somehow for the user to make that request right?

or MITM but I don't see how it copuld be MITM

[muted olive]

Nope

[sturdy thistle]

here you can see google is not vulnerable

[supple plume]

I guess it's skill issue I'll research on that today

[muted olive]

broken access is more typically auth failures due to the app design

not you social engineering creds

[warped plank]

you can abuse it in conjunction with some sort of request poisoning attack like http request smuggling

[muted olive]

which programs do you hunt on?

[scenic maple]

say no more https://portswigger.net/web-security/host-header

[sturdy thistle]

that was on intigriti

[scenic maple]

[sturdy thistle]

oh yeah i should do them

[muted olive]

is it free to take part in?

[sturdy thistle]

ye

[muted olive]

I'll look into it then

I have trouble finding good juicy targets

[sturdy thistle]

same

but just do

[warped plank]

there was also a funny iirc in Yummy box where it was Host header injection to get stored XSS or something

[muted olive]

my probably best achievement is that I got invited to Discord's private bug bounty

[sturdy thistle]

even if it's a dupe at the end, you still found something

[torn cedar]

Yo that sounds awesome. How'd it go?

[muted olive]

I found critical dupe in NASA :(

[muted olive]

I mean I haven't hunted yet or tried

discord is a massive target honestly

[torn cedar]

True. God everyone is an inspiration to keep grinding

Have a good night yah

[warped plank]

ok nvm I can't find the box with the host header injection

[sturdy thistle]

oh that gives me an idea

i let ya know when they say dupe or not applicable

[obtuse fern]

"Merged to production successfully"

[sturdy thistle]

https://www.youtube.com/watch?v=B-2-0QsMHpU

[frigid mountain]

https://tenor.com/view/hydrelated-hydrated-water-lannavo-tinnitus-gif-22888217

everybody take a sip!

https://tenor.com/view/cera-sip-sip-time-michael-cera-gif-22979769

[rose elk]

I think it’s an info, right?

[warped plank]

@supple plume found it, but it's an X-Forwarded-Host header, which is almost the same
https://0xw1ld.github.io/htb/2025/02/08/Caption.html

[warped plank]

No that's exploitable

[rose elk]

Yeah, but I think there’s no impact

[warped plank]

depends on the endpoints that are vulnerable

[hoary nebula]

Wild, put a shrimpy on the barby mate

[warped plank]

just ordered some Maccas

[hoary nebula]

fawkin right

@wet hull dont

[wet hull]

?

[supple plume]

Thanks

[hoary nebula]

Thanks

the audacity on a friday

[sturdy thistle]

ofc it depends on the endpoint but still vulnerable

[muted olive]

I did that on NASA

Bypassed a login page with X-Forwarded-For: 127.0.0.1

But there was nothing sensitive on the page lol

[hearty birch]

System:WARNING - The allocated use of this sticker is depleted, please refill at your nearest store

[scenic maple]

https://tenor.com/view/pepe-hmm-pepehmm-table-council-gif-16396395487368552941

[lofty warren]

https://tenor.com/view/1-gif-6286896614947460359

[tame gust]

@scenic maple hey hey hey dont raise your voice

[scenic maple]

when did i yell

[tame gust]

you didnt, but your cutness did 😉

[scenic maple]

[tame gust]

i got game

[mystic harbor]

Which game

[tame gust]

https://tenor.com/view/funny-man-hangover-skate-gif-733324316276760777

[mystic harbor]

Dont play games do work

[tame gust]

you walked straight into that one buddy

[scenic maple]

another 6 hours wasted

[tame gust]

what you doing

[hoary nebula]

golam, give me mod i wanna mute heathers for 123 minutes

[scenic maple]

file uploads

[tame gust]

thats the only numbers you learnt to count buddy

[scenic maple]

only admins can get u mod

[tame gust]

file uploads module ?

[scenic maple]

ye

[tame gust]

alright keep hustling golam

[scenic maple]

my issue with pentesting is that it takes so long and its frustrating

and it barely makes money for the average joe

[tame gust]

you should take it as a game golam

and not a job

or an other thing to do

[scenic maple]

unfun game

its like the climb game where a guy on a water pot clibs to the universe and then finds a toilet

[lofty warren]

wait what

[tame gust]

you wont survive long if you dont learn how to enjoy it

im just waiting to get paid to get more modules

and get a cert

[tame gust]

its the 7th nov and still no pay

[hoary nebula]

wth is that search

[tame gust]

maan i hate this mfs

[hoary nebula]

silly golam

[scenic maple]

how else do you find a game

[hoary nebula]

Steam

[scenic maple]

u have to know the name

[vague minnow]

hi

[tame gust]

someone keep talking but i cant see short people messages

[ashen panther]

hey can anyone help me with rustykey machine root ?

[neon zealot]

https://owasp.org/Top10/2025/0x00_2025-Introduction/

[rustic carbon]

guys it's over i feel rusty in pentesting again

MAN al this degree grinding fault

made me not do as much recently

prolabs is killing me

[lofty warren]

||small hint: do everything, get a road to RBCD for direct root||

[ashen panther]

i have some error i need help with that though 😢

[lofty warren]

dm

[tame gust]

spaghettii with tomattoo sauce and beef, and some garlic bread

damn

you need a gta6 dedicated computer now

lol

[torn cedar]

I have an extra room here in Florida <3 who needs GTA when you can have the real thing

[tame gust]

i call that lame

[tame gust]

he's more off an alabama guy

loves his cousins

[hoary nebula]

jezus

[lilac cipher]

de pen is van je zus

[tame gust]

i woke up a hater

[hoary nebula]

Heathers is lelijk

[tame gust]

i'am im handsome that your whole family

[torn cedar]

Well idk about statues, but yeah I know where the game is located

[lilac cipher]

absolutely based

[torn cedar]

You can have emotional support alligators here

[lilac cipher]

thats the most floridan thing you might've said

[muted olive]

🇺🇸

[torn cedar]

Just Google it

[muted olive]

Ever tried petting one?

[torn cedar]

Not specifically an emotional animal one, I've petted them in the zoo and almost fell into the water where one was 💀

[lilac cipher]

oh damn

[torn cedar]

They're chill though

Swamp puppies

[lilac cipher]

until it bites your hand off i guess

[muted olive]

My aunts who live in Florida say that alligators are seen randomly crossing the roads during their mating season

[torn cedar]

Oh yeah that's a fun time

[torn cedar]

Smack their snout

[muted olive]

I would be spooked

I don't want armoured overgrown lizards crawling around me 🤣

[torn cedar]

They love pools <3

[rose elk]

Can I redeem a gift card on app.hackthebox.com? I mean, can I add the gift card to my HTB credits instead of using it at checkout?

[ornate ibex]

Gift card works as u stated

gets stored in acc credits

[rose elk]

From here?

[ornate ibex]

Just to be sure that we are on same page, are you using a voucher or gc?
https://help.hackthebox.com/en/articles/7827702-redeem-a-gift-card-or-voucher-on-htb-labs

[rose elk]

A Gift Card

It looks like, as mentioned in the article, I can’t actually add it to my HTB credits, it can only be used during checkout

[ornate ibex]

Yes

It seems to be the case for Labs.

[scenic maple]

tejas you need to do some pentesting

[green kite]

which colour BIC he need to test?

[scenic maple]

blue

[lilac cipher]

https://tenor.com/view/wtf-pen-writing-ink-gif-25266620

I can only wish to have my handwriting look that good

[ornate ibex]

I did one this week. After I found my freaking government handled my information irresponsibly.

[scenic maple]

but when you get to work life you dont write anything tbh

[scenic maple]

let me guess they still handle it irresponsibly

[ornate ibex]

I didn't submit report yet

[scenic maple]

[ornate ibex]

You can name a vulnerability, and it might exist.

Even things you deem to find it as CTF

[exotic pendant]

Aye it's Friday

[scenic maple]

gems crushed under the pressure of overworked underpaid devs who have to support IE 7

[ornate ibex]

No

Some external contractor

[muted olive]

as always

[ornate ibex]

I wish this was EU

[scenic maple]

they were exploited more then no?

[ornate ibex]

I would wooped their freaking ass

[muted olive]

y'know I have a google dork that will fetch you hundreds of live aadhar cards @ornate ibex

[ornate ibex]

haven't heard so far

[green kite]

move to the EU 😉

[ornate ibex]

😭

[lilac cipher]

Tf is that

[scenic maple]

eu is legit one of the best places in the world

[muted olive]

india equivalent of SSN

[ornate ibex]

I've been considering it recently a lot especially after GR visit.

[lilac cipher]

Wrong

[scenic maple]

its like id card but for food

[ornate ibex]

no

that is ration card

[scenic maple]

then which places do you think is good

[scenic maple]

what does adhar mean

[lilac cipher]

Mars

[ornate ibex]

Identity

hindi lit mean is identity

[scenic maple]

dang

[ornate ibex]

or proof

[scenic maple]

i thought it meant darkness or food

[muted olive]

nah

its used for transactions and stuff too

[ornate ibex]

🙃 imagine showing up to govt official and I show them look this is my darkness card let me in now

lol

[scenic maple]

worth a try

[ornate ibex]

racist

[scenic maple]

well let me see your lightness card

[muted olive]

I'm darker than the fiftieth shade of gray

peak insult

[scenic maple]

skin color means nothing

you will still be ignored by govt officials

[ornate ibex]

money speaks

[muted olive]

real

[scenic maple]

u should move to greece

with fam

[ornate ibex]

Parent's didn't like the idea

[scenic maple]

😔

[green kite]

why greece?

[ornate ibex]

it like u are leaving behind your roots, and relatives

[scenic maple]

htb office + weather + food

[ornate ibex]

nor do I like the idea of leaving

but after all shit I have seen in India am close to done

[muted olive]

that can be hard

[ornate ibex]

can do the same in London office..

[scenic maple]

that is true but sometimes you make difficult choices

[sturdy thistle]

move to cyrus

[green kite]

UK weather isnt that nice as Greece

[ornate ibex]

I still have that tiny tiny tiny bit of hope that I being right can bring a change in my surroundings.

[scenic maple]

i think quality of life in uk has fallen over the years

[muted olive]

Greece > UK imo

[scenic maple]

uk pretty much has london and rest of places are like balakan

[sturdy thistle]

and now i'm thinking of getting an rtx 5070 too

[muted olive]

I don't really like UK

[ornate ibex]

I should ask company to open office in @wary gull 's hometown.

[muted olive]

rains all the time

[scenic maple]

pov harry potter weather 😩

[muted olive]

it depends on where in UK tbh

UK has 4 countries

england, wales, ireland, scotland

[scenic maple]

hmm

[muted olive]

england I don't like

ireland and scotland are amazing

[scenic maple]

ireland is expensive

[muted olive]

wales idk

[scenic maple]

altho legit

only think i know about wales is they love football and they barely speak english

[muted olive]

companies love ireland

[scenic maple]

they speak accent

[muted olive]

low corporate tax

[ornate ibex]

IDK shit

how do u all know so much

[scenic maple]

by yapping on discord

[rose onyx]

discovery channel

[muted olive]

I know because my father's company has main office in Ireland for that reason

[scenic maple]

you always have people complaining

[muted olive]

Although its US based

[scenic maple]

so are you rich?

[muted olive]

no

[scenic maple]

sadge

[ornate ibex]

In discovery only thing that I ever saw was man vs wild

[muted olive]

I've never been to ireland

[scenic maple]

why do i constantly find non rich people

[muted olive]

although I want to

[scenic maple]

where are all the rich people

[muted olive]

depends on what you define as rich tbh

[scenic maple]

i guess if a person says they are rich they probably are

[muted olive]

depends

if someone is rich in iran it doesn't mean they're rich in us

so it depends per country

[scenic maple]

yes but if they live in iran then they are rich where they live so they are rich

[rose onyx]

super legit...... how else do you learn to survie?

[muted olive]

also depends on how much they earn etc

[ornate ibex]

I'm not sure if I'd even remember all those shit

[scenic maple]

i was truly heartbroken when i learned man vs wild was staged and they ate actual food backstage

[muted olive]

if you could give a benchmark value for rich then it could be defined

[ornate ibex]

like how on earth can I gurantee to land with a knife and rubber boots

[muted olive]

[ornate ibex]

like what is the possiblity

[scenic maple]

if you are going on a place where you might get lost you take those stuff with you

[rose onyx]

main takeaway drink pp to survie

[scenic maple]

in a bag

[ornate ibex]

is it?

[scenic maple]

it is lmao

[ornate ibex]

Shit

[muted olive]

you can use knife to kill animals to eat

[scenic maple]

bear is a rich guy why would he suffer cause of broke people like us

[muted olive]

you can either eat your boots or wear them

therefore, survive

[scenic maple]

they ate all kinds of things and even sometimes the locations were staged too

like pizzas

[muted olive]

I mean, he ate rats 🫡

live

[scenic maple]

only for cinema

[muted olive]

man deserves a pizza for doing so

[ornate ibex]

bro let us say, I happen to travel by plane and this crashes in a jungle and I survived. What is the likelihood that i have a proper dress and knife to even survive?

[scenic maple]

if the plane crashes you are dead

[muted olive]

you would likely have a phone

[scenic maple]

there is no discussion

[muted olive]

But he ate it

[ornate ibex]

in a island where is the tower

[ornate ibex]

I got lucky, let us assume.

[muted olive]

you didn't specify that its an island

[scenic maple]

and if you get lucky there will be people looking for you

how nasty

[ornate ibex]

ok even in a forest there is no way there will be cell reception

[muted olive]

also if the plane doesn't arrive at destination they will retrace path and find you

ezpz

just have to survive for a few days

that's the hard part

[scenic maple]

place would have gps and when it would crash on a random island they would go there to check for survivors even if there are none they would go there to fetch the black box

[muted olive]

ok eat this swarm of flying cockroaches

and I'll give you a pizza

[scenic maple]

so you would stay close to the plane and scream when u see people

[rose onyx]

https://tenor.com/view/okay-were-good-armie-hammer-ascends-from-an-underground-cave-running-wild-with-bear-grylls-its-all-good-its-fine-gif-23183056

[muted olive]

ok

deal

[scenic maple]

cave divers when they find ||

[rose onyx]

no you have to eat all of them first without letting any get a way

[scenic maple]

but how do you count flying cockroaches

[rose onyx]

[scenic maple]

|| https://tenor.com/view/roach-bug-oh-no-run-flying-gif-17479599 ||

possibly graphic

[rose onyx]

very, i now have to leave

[scenic maple]

i feel sorry for the guy

he is barely hanging from his toes

bro left 😔

@mystic harbor

https://tenor.com/view/dexter-doakes-squint-stare-suspicious-gif-14432154109786838518

[mystic harbor]

Thanks love u

[ornate ibex]

How does he not fail to give this goofy expression constantly lol

[scenic maple]

because he is the bay harbour butcher

[ornate ibex]

wait what?

FR?

WHAAAT?

[scenic maple]

yes

[ornate ibex]

he gets killed mid season somewhere

that is it?

[scenic maple]

watch the show u will get the ref 😩

[ornate ibex]

then police thinks by mistake dexter as the bay harbor,,

[ornate ibex]

I watched couple of eps and then shorts in YT

too much gruesome

[scenic maple]

yes it has some gore

well i mean thats what butchering people is about

not that i support it

[mystic harbor]

[muted olive]

https://tenor.com/smMHsXDGUe.gif

[scenic maple]

the fact that he is not letting go of the human

☠️

[muted olive]

☠️ indeed

anyone watching IT: Welcome to Derry?

[scenic maple]

shit i am gonna die

[muted olive]

indeed google made a funny balloon

[wet hull]

Hello guys can I use pwnbox for challenges from other sites or its only for hack the box?

[muted olive]

I watched first 10 minutes of first episode so far

instant regret

[scenic maple]

pwnbox can be used in both

but labs one is paid

[muted olive]

glad I didn't watch it when anyone else was around

yuck factor 10x

[wet hull]

What you mean in both

[scenic maple]

as in both labs and academy

[wet hull]

Oh ok so if I have a silver subscription in academy I can use it and it in labs?

[scenic maple]

if u have academy sub u will only be able to use it in academy

same for labs

but academy free tier has 2 hours free

[wet hull]

Ok thanks

[scenic maple]

@zealous charm they made their own https://labs.cai.do/

[muted olive]

meh

it doesn't look great

[scenic maple]

true

[muted olive]

looks like some kiddie ctf site

[scenic maple]

some of them look ai

[sick gate]

looks like claude did it

[scenic maple]

[mystic harbor]

bing bong left the server

🥀

[oblique saddle]

I am open for security research roles (fulltime) so if any one of you from this server having an open position on your current company please DM me... Dms are always open from my side. Thanks in advance.

[sick gate]

you've got the job

be there at 8am monday

[oblique saddle]

already on work right now

[muted olive]

claude is infinitely smarter than chatgpt tbh

[hoary nebula]

We are looking for pentesters

but u gotta be on site sometimes

[scenic maple]

what requirements

[sick gate]

im not saying anything like that, thats just how web apps look when claude creates them

[oblique saddle]

nice Will DM you privately

[heady sage]

CWL Infinity is a fucking joke platform

[heady sage]

I don’t hold a bachelors degree

[muted olive]

Two things I don't have:

1. Bachelors and masters degree (yet)
2. Cannot speak Dutch

[sick gate]

fake language

doesnt matter

[muted olive]

I also don't have certs but those seem to be optional

[muted olive]

known

[heady sage]

I compromised an EC2 instance and half the time the instance wouldn’t load and I’d have to restart the lab

Plus they give you everything you need to compromise the lab

Which is stupid

I want to figure shit out on my own

[muted olive]

CWL aren't exactly known for quality anyway

[heady sage]

Hell the CRTA exam I took months ago as a joke was better

[quartz willow]

Will there be a dedicated channel for the upcoming neurogrid-ctf?
See: #📣-announcements message

[muted olive]

lol checks out

[heady sage]

What’s worse is that I’ve seen people be racist against the company using that as an excuse

[muted olive]

Well that is bad

But imho if you don't have the skills, investors, or the effort put into making the services and content good, don't make it at all

[scenic maple]

possibly yes

[snow wraith]

In a clg or a drop out?

[tame gust]

but you gotta start somewhere

[muted olive]

starting college next year

[quartz willow]

Would be great 👍🏻

[muted olive]

But the lack of effort is clearly seen tbh

[snow wraith]

Oh 18 rn? btw jee?

[muted olive]

If you've ever gone through their content or labs

[muted olive]

Yes and yes

[snow wraith]

PCM sucks FR in India

😭

[tame gust]

i haven't seen any of their content

[lofty warren]

https://tenor.com/view/yolandafister-alan-carr-traitors-celebrity-traitors-traitors-uk-gif-18010326075978157029

[muted olive]

In a word its bad

their labs are kind of good

[heady sage]

I know this isnt representative of the Indian cyber scene and there’s gonna be tons of people who create content that are from India

[muted olive]

the training material is bad

[tame gust]

so the training is bad and labs are good

[muted olive]

Yup, but personally CWL isn't great

[scenic maple]

well offsec and htb took all the good indians

like tejas

[heady sage]

To put it nicely it’s mediocre, to put it harshly it’s embarrassing

[muted olive]

labs are kind of good but not too good. In one of them, you've got to pivot to internal IPs but you can also reach internal IPs directly....

through the vpn

[tame gust]

well creating training content is extreamely hard imo, like explaining something to someone let alone technical is hard itself let alone explain it to a newbie

[muted olive]

this I agree with

but its even technically inaccurate in some parts

[tame gust]

maybe they doing it for the money for now

[muted olive]

like the part of their pdf that tells you the difference between pentesting and red teaming

its completely wrong

[muted olive]

Most possibly

Their certs are $10 each

and they've gotten tens of thousands of orders

[tame gust]

lol what

[sick gate]

oh those guys

yeah

[tame gust]

i mean anyone can just go and make their platform and offer training and certs now

[sick gate]

dont bother

[tame gust]

which is lame

[muted olive]

I know because I bought one of them and my order invoice was #56XXX, and that would mean they got at least 50,000 orders for a $10 cert, which means they got half a million dollars

insert mr krabs here

[tame gust]

would there be any regulations for this in the future ? might be

[muted olive]

its actually $100

but they have a permanent 90% discount

like right now

Costs $10

[scenic maple]

should i waste 10$

[muted olive]

and the funniest part is there is absolutely zero red teaming in it

[tame gust]

this cant be real

[muted olive]

in fact its negative

[muted olive]

I don't believe that

[muted olive]

dont bother

they have weird certs

they have "Certified K8S pentesting specialist"

"Certified purple teamer"

"Certified multi cloud hybrid pentester"

and yes that one is a real thing

idek what it means

"Certified red team infrastructure dev"

[scenic maple]

can they make a certified red role colored discord mod cert

[muted olive]

lol

[tame gust]

do i get a sword next to my name if i complete any of their certs ???

thats the real question

[muted olive]

I wouldn't be surprised if they do

[muted olive]

You get an L icon

wtf

im a certified credential infiltrator guys

fear me

[tame gust]

i hope they have a docker penteration testing extra profesional special

that one i'll buy

opefully it include @seadris

[lofty warren]

bro...don't make me laugh:)

[muted olive]

IM A PROCESS INJECTION ANALYST!!111!!1!

[lofty warren]

[tame gust]

@scenic maple wouldnt be soo fun to ping @seadris and say he bought their certs

wait wait wait wait

still better than CEH

[heady sage]

CRTA is a joke and so is the exam

[tame gust]

[muted olive]

we were JUST talking about hiring a process injection analyst yesterday

[lofty warren]

i think i should buy maldev acad course

[scenic maple]

[muted olive]

I am a lateral movement specialist

[snow wraith]

[rustic carbon]

AD is more important imo

[scenic maple]

😔

[tame gust]

for someone how did 0 maldev, or like all done so far with C was verryyy basic TCP scripts, can dive straight into the course ?

[snow wraith]

Go for OSEE

[tame gust]

that'll be 1M$ sir

[scenic maple]

heathers will you actually spend 700 on maldev?

[tame gust]

i actually thinking about it

[lofty warren]

that's it

[tame gust]

@lofty warren like i dont need hella soft eng background no ?

[tame gust]

but i gotta talk about it to kyand first

damn i dont have him in this acc

lame

and we both banned in THM

[green kite]

hello

[green kite]

breadtora?

[tame gust]

yess siiiirrrrrrrrrr

[heady sage]

Sent you a fr

[lofty warren]

It's all right, but you will have a hard time identifying yourself more than the things in the protocols

[tame gust]

yes siir

[green kite]

asked them to reach out 🙂

[muted olive]

@lilac cipher

:)

[lofty warren]

https://tenor.com/view/absolute-cinema-raccoon-absolute-cinema-gif-17862327649353748812

[scenic maple]

he lives in eu he is rich

its probably like one paycheck at worst

[tame gust]

he dont even have AC, and rent prolly eats all his money up

broo rent is extremlyyyyyyyyyyyyyyy high, how can one even live let alone have a family now

[scenic maple]

thats cause he hasnt learned the language yet

once he does he is gonna be mega rich

[tame gust]

french is not that hard

[tame gust]

imagine this; you're getting paid 1.6k a month, and rent is 2.4k

[scenic maple]

i would move cities

[next venture]

I would buy OSCP

Rather paying the rent 😼

[tame gust]

who need beds anyway

[scenic maple]

is oscp a bed

[next venture]

I wonder

[green kite]

tell me you're rich without telling me you're rich

[next venture]

Lol

[green kite]

I am not rich

I dont have an escalator

[scenic maple]

you are rich enough to get ceh man you dont get to say that

[tame gust]

you got Mellie & Max, and your own company, you're very rich

[green kite]

it came for a sleepover party

its gone now

[scenic maple]

bro lives in the first floor

[green kite]

it snored anyways

[tame gust]

he also have a rice cooker

and tajins

calmn down my girl is on this app

[scenic maple]

you are not the first rich guy who is trying to hide being rich

[scenic maple]

fr?

i get absolutely pissed when people call me on discord

[tame gust]

she got a discord

yes

[tame gust]

try someone calling you on TEAMS

Try hearing the MS team ringtone golam

[scenic maple]

bro called me

https://tenor.com/k8OKkVNuCos.gif

[next venture]

🙂

[tame gust]

join the video call golam

[scenic maple]

he video called me

twice

now you know why i get absolutely pissed when someone calls in discord

dont talk to me monkey

jkjk

[tame gust]

thats it imma google your full name @scenic maple

[scenic maple]

hey man its ur username

[next venture]

https://tenor.com/view/james-doakes-doakes-curious-suspicious-questioning-gif-14390669560130901665

[scenic maple]

arent you like white

like pale white

[tame gust]

@lilac cipher is white ?

[scenic maple]

yes

his skin colors begins with #FFF

[green kite]

that depends

[tame gust]

i believe in some ereas he's not

[green kite]

if you are colour blind, is he really?

[scenic maple]

well if you are blind everyone is black

how is that racist

[next venture]

Actually no

[tame gust]

but if i cant see color how do i know that black is actually black ???

explain yourself golam

[worthy narwhal]

https://tenor.com/view/dead-my-honest-reaction-damn-skull-skeleton-gif-15885937969029652188

[scenic maple]

cause all you see is black

[tame gust]

but i've never seen anything to know what black is

[green kite]

Max en Millie are in for a treat

[scenic maple]

i guess you could convince a blind person its blue or red

but its on you

[next venture]

https://tenor.com/view/racism-slider-diffuculty-online-gaming-gif-10131101

[tame gust]

are they wearing this or eating it

[green kite]

eating it