general

[frail turtle]

[rustic carbon]

Im here all week

I done called her the greek titan Dione

is this rizz chat

winter

[devout sail]

No need channel yet

[silver forge]

onions are not rizz

[devout sail]

New

[rustic carbon]

elite knowledge

You know it

onions get you all the m'ladies

My first message here was 2022

[devout sail]

Last when?

[rustic carbon]

who knoes

2100

my last message here will be, she liked my onions

and then I perish from exhaustion

i was told cheese also works

[carmine pecan]

Try petald

Its a daemon

[rustic carbon]

I don't do daemons anymore

[carmine pecan]

Ok

[crude flint]

Hello. How can i talk to see about the founder badge?

[carmine pecan]

The who?

[rustic carbon]

who

whooo

[crude flint]

*who

[rustic carbon]

whhho

[silver forge]

https://tenor.com/view/hi-there-hi-whats-up-head-roll-lets-dance-gif-438022142684575365

[rustic carbon]

why am i gambling with this person, they reply once every 9 messages

it's like they cherry pick which ones they answer to

I know why I bother I don't know why they do not

[fossil sequoia]

I’m having an issue with ProLabs VPN (EU and US servers). Has anyone else faced the same issue and found a solution?

[devout sail]

What issue

[elder inlet]

https://tenor.com/view/hhhhomeboyyyy-kings-dark-tidings-saga-by-kel-kade-bedroom-schizophrenia-watermelon-gif-21562324

[supple plume]

Vro be less specific so we can just answer: no

[rustic carbon]

erm hello my potato is generating anime

[carmine pecan]

again?

[silver forge]

did you nuke the potato or what

[fossil sequoia]

I can't connect

[rustic carbon]

I keep for youuuu

is anyone interested in my netlify web site

should I post it here

[rustic carbon]

Clap, cla clap

cla, cla clap

drinking tin can sprite all summa

doing it the way I want ta

[worthy cargo]

Who let the dogs out? Who who who who

What's up folks?

Checking for bad blocks (read-only test): 38.81% done, 3:19:34 elapsed. (0/0/0 errors)

I'm running a badblocks test on my drive to see what's going on. Why the zpool degraded due to incorrectable errors

[supple plume]

Hi chat

[supple plume]

Tough work

[worldly moss]

I reckon give it to gawd to sort out, that always works for me

[rustic carbon]

owwwwwhhhh mahh gawwwwdd

[worldly moss]

gawd has solved so many HTB boxes for me, I just pray and bang, the box opens up

I think I

I think I'm running out of karma tho

it's good when U eat pure distilled cheesus

[old adder]

networking is so boring

save me

[rustic carbon]

you are running out of karma

[worldly moss]

do wot I did and giv up, all hope is lost

[old adder]

lmao nah

i need it

:c

[worldly moss]

does ur smiley face have a moustache?

[old adder]

is this reddit

[worldly moss]

or is it a #sadface

[old adder]

how tf can u see that as a smiley face

[oak vigil]

see thats exactly what i did to learn and i wanted to tell them to do that but its one of those days

[rustic carbon]

shes tired

lol that sounds weird

wtf

[oak vigil]

theres a very high chance a lot of people have had one of these in 2022

[worldly moss]

i like how AI just agrees with everything I say

*that's a great idea

[rustic carbon]

do real life humans help their women sleep

[worldly moss]

*that shows growth

[rustic carbon]

Im not a real life human

[worldly moss]

me neither I'm a gawd

[oak vigil]

yes

[rustic carbon]

ok so im not insane yet

[worldly moss]

oh i crossed that bridge a long time ago

[rustic carbon]

I would react with a lol emoji but

im not too behind you

[worldly moss]

my favourite is when they break ur leg and punch u in the face as *treatment

"we had to do it, he was the Hulk"

"he bumped it on a wall"

every injury by the state is a bump against a wall

[supple plume]

Hi

What's the yapping around here

[worldly moss]

oh don't mind me i'm just insane

i need to be locked up

and this stupid Scrimba site doesn't stop for the challenges it goes straight to the solution

[supple plume]

Enough yapping for now cya

[worldly moss]

bye i'm gonna go so you can have fun with your budz

[azure remnant]

sup

[mystic harbor]

Yes

[frail turtle]

Yo like thia conversation happened 2 days ago

But yeah you just start doing something

[silver forge]

pants: on

[supple plume]

Install windows

[mystic harbor]

Thanks yay

[silver forge]

https://tenor.com/view/stinky-gif-13519820042153273676

[mystic harbor]

No

[silver forge]

https://tenor.com/view/monkey-gif-3952880752940159135

[mystic harbor]

Edible

[obtuse fern]

https://tenor.com/view/creepy-hamster-stare-watching-you-cute-gif-17721600

we see the edits

[elder inlet]

@lime trout Found something for you. Ear protections!

[dusky jacinth]

Who up

[lapis ingot]

hi everyone, are CORS issues normal in retired machines ? I just started the Heal machine and I got that issue, I even tried to restart it

[mystic harbor]

Down

[spice sparrow]

hey im doing a ctf for like 5 hours and i got nowhere can somone help me pleaseeeee😭

[dusky jacinth]

Tuff

[mystic harbor]

Soft

[supple plume]

Vro ghostping monkey

He gets berserker

[supple plume]

Ask

[spice sparrow]

who do i ask

[mystic harbor]

I didn't wtf

[supple plume]

You type a question here

xd

[silver forge]

yes this works just like chatgpt, but a bit more sassy

[spice sparrow]

const readline = require('readline');
const FLAG = process.env.FLAG;
process.env.flag = FLAG;

console.log("unary-only sandbox\r\n");

const purifier = (code) => {
    const allowed = /^[a-zA-Z0-9_/\s;!().+\-*]+$/;
    let codeForChecking = code.replace(/\/\/.*$/gm, '');
    if (!allowed.test(code.trim())) throw new Error('BLOCKED');
    const mathOnly = /^[0-9+\-*/\s()]+$/;
    if (!mathOnly.test(codeForChecking.trim()) && codeForChecking.length > 10) throw new Error('TOO_LONG');
    return code.trim();
};

const rl = readline.createInterface({
    input: process.stdin,
    output: process.stdout,
    terminal: false
});

rl.on('line', (input) => {
    try {
        const sanitized = purifier(input);
        const vm = require('vm');
        const result = vm.runInNewContext(`(function(){return ${sanitized}})();`, { console, process }, { timeout: 1000, displayErrors: false });
        if (result !== undefined && result !== null && !isNaN(result) || result === 0) console.log(result);
    } catch (error) {
        if (error.message === 'TOO_LONG') console.log("Can't handle that much math :(");
        else if (error.message === 'BLOCKED') console.log('Nice try !');
        else console.log('What are you doing ?');
    }
});```

i have this script im trying to escape the >10 character limit 
the most we got is 10

[terse dirge]

https://tenor.com/view/imostergolfra-gif-25274972

[supple plume]

Vro that's not typing a question. That's giving me a code to review without context and asking me to fix it

[terse dirge]

tf you using js for?

[mystic harbor]

You are https://chatgpt.com//

[spice sparrow]

it has to do with javascript payload , and i need someone help explain unary syntax in javascript to me
im lost with it
i have a basic idea but nothing leads me anywhere

[supple plume]

Unary or ternary?

[spice sparrow]

unary

[terse dirge]

urinary?

[supple plume]

Unary? +

The plus symbol?

[spice sparrow]

yes

[supple plume]

Vro I do whatever I want with my operators

[spice sparrow]

https://tenor.com/view/bro-is-finished-cooked-finished-dog-closing-eyes-dog-with-eyes-closed-gif-8933440936102921947

im cooked

[terse dirge]

https://tenor.com/view/epic-embed-fail-ryan-gosling-cereal-embed-failure-laugh-at-this-user-gif-20627924

[silver forge]

why would you need more than 10 characters

[supple plume]

Exactly

[rose gale]

I just joined htb's group what is happening :))

[supple plume]

The context was here:

[spice sparrow]

process.env.FLAG

[supple plume]

🦗

[silver forge]

no you don't need to refer that

[terse dirge]

we can't help with active ctfs @spice sparrow

[supple plume]

Is it a rule?

[terse dirge]

I already have a few guesses of where that challenge is from

[mystic harbor]

Ofc bruh

[supple plume]

Which one

[mystic harbor]

For active ones

[supple plume]

Rule number

I'm listening to an old cube talk

[mystic harbor]

Do not talk about fight club

[spice sparrow]

unless you join my team

[spice sparrow]

shhhh

[supple plume]

Falcon almost read FFUF as fuck faster you fools

[terse dirge]

it's either infobahn or usd hacking night

[vivid flower]

Thats not what it stands for?

[supple plume]

From now on it is to me

[mystic harbor]

Vro i am back to sleeping at 2 am

[supple plume]

Vro fix yourself already

[mystic harbor]

Right right i ma sleep good night

[supple plume]

Vro stop ghost pinging that much please

@mystic harbor

[elder inlet]

https://tenor.com/view/waschbär-raccoon-durstig-thirsty-drinking-gif-16027972

[gray wraith]

thank god for the beta

so much easier for me to read the articles

instantly makes it easier to focus

[rustic carbon]

Hey if anyones free i wouldn't mind getting some help in #modules

[oak vigil]

I just forgot to respond cuz it didnt pop in my notifications

[rustic carbon]

does anyone know a good subdomain scanner?

something really good

[wanton kayak]

Doesn't gobuster do that?

It's what gets promoted in the Starting Point boxes

[alpine pumice]

ffuf

[rustic carbon]

i meant a wordlist**

sorry

is there anything like 10000x better than seclists or nope

[worthy cargo]

Checking for bad blocks (read-only test): 72.70% done, 5:51:33 elapsed. (2/0/0 errors) Found 2 badblocks I think so far

It's a 13.5 years old drive though.

[supple plume]

I don't think so, if you find something please let me know

[rustic carbon]

fs

i need to make my own cmd to directory scan subdomains and just ping it back and show results if it's protected by WAF or not

quicker and faster

[zealous charm]

Do you mean for subdomain enumeration/ brute forcing? Or did you mean directory brute forcing

ya i only know how to type <script>alert()</script> into every input field

[frail turtle]

I havent thought of looking for an automated XSS tool yet

[rustic carbon]

i guess we could say just a good good wordlist but also a scanner

i found an unauthenticated download on the hypixel network im trying to submit for a bounty reward

[zealous charm]

For subdomain enumeration I would first recommend subfinder (with API keys set, duh) then passing the results into something like project discovery's alterx, which makes permuations based on known subdomain names. From there you can perform DNS brute forcing like normal with that list

If you just mean a wordlist for directory bruteforcing then go with assetnote's wordlists

[rustic carbon]

Yeah, i saw subfinder on github im just trying to spend time creating a folder of all useful pentesting tools

[zealous charm]

I like the burp extension reflector, it has earned me thousands

[rustic carbon]

o can u show me this?

unfortunate

rip

[zealous charm]

https://github.com/elkokc/reflector it's a bit old but works well. I am actually working on an upgarded version with burp's newer API

[agile thunder]

does it "pose any security risk"?

[rustic carbon]

Well not really, just something you shouldnt access

but in this case, if they did upload sometrhing sensitive

it could become a compromise

all it takes 1 fault and rip

i got it

[old adder]

why is my VM pretty slow

:c

[rustic carbon]

I also found a UUID spoof on an mc server and i got instant access to ingame cmds, and they had like old litebans on and i was able to execute sqlcmds for their db

[rustic carbon]

show ur settings

[old adder]

bet

[rustic carbon]

also whats ur computer specifications?

[old adder]

gtx 1050 ti i5 2500 8gb ram

[rustic carbon]

owch

[old adder]

its pretty mid but eh

it should get the job done

[rustic carbon]

i mean not the worst in the world for a pc needed to run a VM

[old adder]

yeah ik

[rustic carbon]

i5 2500 should be fine

okay how much cores r u throwing into the vm

and ram?

[old adder]

2 cores 2gb ram

[rustic carbon]

i had to run an AMD laptop from 2014 for a VM one point

[rustic carbon]

could u perhaps throw an extra gig of ram?

3.5gb?

[old adder]

i mean this pc im using rn is optiplex 990 which is from 2011 but i did upgrade the ram and gpu

[old adder]

ima try that

[rustic carbon]

should be fine

throw an extra 1.5gb of ram

and also monitor how ur computer is doing on resource consumption

background apps u dont need, take it off

[old adder]

in the VM itself?

[rustic carbon]

no on ur actual computer

[old adder]

does it affect the vm

didnt know that

had like 10 edge tabs open

[rustic carbon]

background apps does take CPU, RAM

close that

edge is rly terrible

[old adder]

ik

idk why am using it

[rustic carbon]

switch to librewolf 10x better

[old adder]

i mostly use brave

[rustic carbon]

and it's privacy focused as hell

[old adder]

but i formatted my disk

brave is good too

tho

[rustic carbon]

yeah

brave's fine

i justr like librewolf

[old adder]

what is librewolf

first time hearing abt it

[rustic carbon]

it's basically a security hardened firefox

used for privacy

[old adder]

thats cool

might try that

[rustic carbon]

https://librewolf.net/

go for it

[old adder]

bett

[rustic carbon]

Awoo

[rustic carbon]

have u done bug bounties before?

i dont know if it would get paid for finding that issue

[zealous charm]

@lilac cipher has submitted bug bounties

[rustic carbon]

@lilac cipher i summon yu

what did u find

no fkn way

LOL

and they ghostyed that?

ngl bro i think u just got beamed.

does it still work?

no way

fkn dx the owner of the company and msg his number through a texting app

easy

say "hey bro! i found default creds now pay me please i gotta feed ma dawg"

oh

[worthy cargo]

Hola folks

How's it going?

[rustic carbon]

oh what do they pay in?

[zealous charm]

how to get banned from BB platforms

[rustic carbon]

good just coming back to pentesting again

[rustic carbon]

LMAO

[zealous charm]

kudos points is the best currency, it is immune to inflation

[old adder]

okay im currently using this fox

its kinda ugly tho

[worthy cargo]

└─▶ sudo smartctl -a /dev/sdc | grep -E "Reallocated|Pending|Offline"
Offline data collection status:  (0x84) Offline data collection activity
Auto Offline Data Collection: Enabled.
Total time to complete Offline
Offline data collection
capabilities:                    (0x7b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
Offline surface scan supported.
5 Reallocated_Sector_Ct   0x0033   200   200   140    Pre-fail  Always       -       0
196 Reallocated_Event_Count 0x0032   200   200   000    Old_age   Always       -       0
197 Current_Pending_Sector  0x0032   200   192   000    Old_age   Always       -       2
198 Offline_Uncorrectable   0x0030   200   200   000    Old_age   Offline      -       44
200 Multi_Zone_Error_Rate   0x0008   200   200   000    Old_age   Offline      -       0

I'm trying to salvage a 13 year old HDD

Only 44 uncorrectable sectors and 2 unreadable.

My ZFS pool degraded so I migrated my data off the drive

[quartz willow]

sup htb people

[worthy cargo]

now I'm doing a badblocks scan

I would do mhdd, but that requires me to reboot and I'm not doing that right now

MHDD is brilliant.

But badblocks is good enough

[rustic carbon]

oh yikes

[worthy cargo]

9 Power_On_Hours 0x0032 001 001 000 Old_age Always - 117029

13.35033 years power on time

WD Caviar Black 1001FALS

Back when WD made excellent drives

I bought two, the other one is fine

this one has a few bad sectors now

9 Power_On_Hours 0x0032 001 001 000 Old_age Always - 121601 Here's the other drive, almost 14 year power on time

5 Reallocated_Sector_Ct   0x0033   200   200   140    Pre-fail  Always       -       0
196 Reallocated_Event_Count 0x0032   200   200   000    Old_age   Always       -       0
197 Current_Pending_Sector  0x0032   200   200   000    Old_age   Always       -       0
198 Offline_Uncorrectable   0x0030   200   200   000    Old_age   Offline      -       0
200 Multi_Zone_Error_Rate   0x0008   200   200   000    Old_age   Offline      -       0

0 on all counts.

Just old age

[old adder]

i wonder if anyone ever got hacked through path traversal

[worthy cargo]

Sure many

I assume

[supple plume]

Not as common these days as it was 20 years ago but it still a thing

[rustic carbon]

millions duh

[old adder]

i keep getting called that ion know my pfp trust

[old adder]

eh

ok

[wanton kayak]

I was using LibreWolf but saw that they no longer release via brew, and a whole thread about how they're such a minor browser that their release channels will always be an uphill battle

[rustic carbon]

Ah i see

[zealous charm]

Still somewhat common in places other than just the classic ?file=../../etc/passwd. For example I've still seen a lot of filename path traversal recently where uploading a file named ../test.txtmay traverse outside of the uploads directory

[supple plume]

Right

Even at renaming files sometimes

[zealous charm]

Yeah any sort of file operation like copying, moving, or downloading would be a high value target

[supple plume]

Sshhh adults are talking

Kids are joking

[zealous charm]

[rose gale]

man I'm at the beginning of cybersec, just getting into networking and web , modules on HTB and CCNA. everybody is telling me to jump into CTFs and I don't understand nothing. should I do more modules and learning and then start again or do I just do CTFs with walkthroughs until something sticks up with me

or where can I find extreamly easy CTFs and challanges

[mystic patio]

PicoCtF

[zealous charm]

it's important to identify what area of cyber security you want to be good at. Be that DFIR, pentesting, GRC, good at CTFs, good at bug bounty, etc. From there, learn networking fundamentals (net+ level, no need for CCNA unless you want to), learn security fundamentals (sec+). Then consider signing up for a platform like HackTheBox or TryHackMe to get some hands on experience with offensive security (assuming that is your goal)

[pulsar drum]

i cant redeem my giftcard
does the gift card have an expiration date?

[zealous charm]

Needs more details. What gift card/from where? To what platform? HTB academy or main platform?

[pulsar drum]

HTB Academy i guess
i got this gift card as a gift via mail

[pulsar drum]

It looks like it's valid for both
To redeem this gift card, select a product from HTB Platform or a subscription plan/cubes from HTB Academy.

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[pulsar drum]

okay thank you

[rose gale]

I really like the idea of readteaming/bugbounty hunting and I started with CCNA so I can gain some networking fundamentals, a certificate and maybe an entry level job as a SOC with the help of junior cybersec and SOC paths from HTB, and then leverage my way up to pentesting/redteaming

[rose gale]

but for now I'm struggling so hard on unassisted CTFs and challanges

[torn cedar]

that is to be expected, it took me 7 months until I could do some ctfs. PicoCTF helps with learning, try not to burn out though.

[molten bobcat]

Real life stuff is typically way easier than ctfs

But I do find myself using techniques and knowledge gained during ctfs in the day to day occasionally. You never know

[worthy cargo]

The sands of time will try to reveal... the weakness of our existence it holds.

[rose gale]

some really wise words lol

yea I guess I'll just continue with my learing and then start doing tracks on HTB

[white hollow]

hey guys

just want to ask to spare myself some time if I am doing a mistake, is cisco packet tracer a good tool to use so I can learn network concepts from my cybersecurity junior analyst program?

[fiery sphinx]

Hi guys

[wanton kayak]

Tame Impala

[vivid flower]

@undone fossil add me

[west fractal]

hi guys, where can i ask for help. Im trying to use htb api

[hard harbor]

Htb has an API?

[west fractal]

yes?

Oh I see, thx mate

You are a legend ❤️

[carmine pecan]

Wheres my ruby rank

Red is such a nice color

It reminds me of her

[rugged egret]

Does any have any advice for this also, I've read, watched, and written notes plenty about red-teaming, but when i sit here i fail to apply my knowledge and just get stuck because the environment like having a updated tools and then the machine is old or even just little CMD problems, and those extra steps I fail to apply in real-time.
And also when reading walk-throughs, some people like to save NMAP output or even set rates or do NMAP scans differently should I adapt to those, or just keep them of acknowledgment and stay in my own learned path?

[frail turtle]

I havent been to a party in years and here i am with my cousin

[rugged egret]

connect to the wifi and capture traffic

[worthy narwhal]

you have to actually do stuff, it takes training (by repetition) to remember what nmap flags to set and what steps to take during enumeration based on various inputs and outputs

machines are rarely the same, there’s always something different about the results you receive

you just have to absorb many different types of results through different flag prompts and then naturally you’ll understand which flags to set for new future attacks

reading only gets you so far. you understand you need to set ports and flags and rates. but when it comes to actually applying, you need experience with all sorts of ports, flags, and rates, to understand what could potentially happen 🙂

it just takes time, not a few weeks, more likely a few months of solid repetition, day in and day out

use the terminal menus for tools, get familiar with how the in built menus look to do quick lookups on the fly

git gud at utilizing the tools documentation to find what you need

the constantly in use stuff you’ll memorize naturally, but get familiar with what is possible

attack the same machine many many times using different options, understand what works why and when, and what doesn’t work why and when

once you form a baseline in your mind, things become somewhat like autopilot, but you need to train yourself over and over and over again. You can’t escape the reps!

[simple monolith]

lot of text bruh

[terse dirge]

stop watchin videos and start doing

[worthy cargo]

do da do doing!

[soft shale]

Hellos

[rugged egret]

It's what I was looking for very good.

[rustic carbon]

No different to fitness really.

[soft shale]

Has anyone tried the beta 2.0? Does anyone know if they will still keep the note taking feature for the modules?

[rustic carbon]

Had instant issues with 2.0 so reverted back to legacy.

[soft shale]

I did not see the feature for taking notes in the module which is why I am asking

[soft shale]

What issues did you experience? It seemed to work for me at least, very smooth and quick

[rugged egret]

would I just go with what I got, what about if I run into problems with packages to even machines, would it be appropriate to go back and watch the video then? Along side of me doing the machines?

[rustic carbon]

Just a broken link for a module.

On my dashboard.

[carmine pecan]

https://www.synacktiv.com/en/publications/lsa-secrets-revisiting-secretsdump

Nice read

[worthy narwhal]

regarding the outputs

yes

get in the habit of outputting your scans into a text file

when you attack a machine you should create a folder, it’s where you put all of your outputs and notes

when it comes to actual engagements, obviously you need to be careful what you leave behind, but nobody is watching your HTB machines. the goal is just to own it. this enables you to leave things behind and utilize them while you work.

get in the habit of turning your attack machine into a tool/notebook itself.

then learn to remind yourself to remove your traces.

this will teach you to not leave a trace over time.

yes, it’s more work, but, it’s the right sort of approach. these are foundational skills, might as well build good habits initially

[soft shale]

Did you let the team know? They would gladly jump on it just let them know which module

[rustic carbon]

Not yet...just signed up so working out how it all fits together. 😋

[frail turtle]

Nah im not here for that i dont even have my laptop with me

[soft shale]

I would say jump on the paths and keep it consistent even when it gets hard.

[soft shale]

https://help.hackthebox.com/en/articles/5297528-academy-modules-paths

[rustic carbon]

👌

[remote bolt]

echo "yo"

[carmine pecan]

yo

[remote bolt]

can i ask u something

[obtuse fern]

https://dontasktoask.com

[remote bolt]

i already asked my question

[carmine pecan]

🤯

[remote bolt]

my question was if i could ask a question

[devout sail]

can i ask u something

[devout sail]

u forgot question mark

[worthy cargo]

Bro got some kid to run rm -rf /* on his only working pc, and thinks he deserves respect after that. I called him out on it. I said flat out, "You're an evil piece of shit for doing that to someone."

WTF is wrong with people.

There are some seriously evil and black hearted people online who only want to hurt others.

I don't even care if the mods in that server ban me for calling him out like that.

[alpine pumice]

You can always DM a mod if you have a concern

[worthy cargo]

nod

[sick gate]

on the bright side, a very important lesson was learned in entering commands without checking what they do first

[rugged egret]

HAHAH why bro using linux without knowning the basic

[worthy cargo]

How do you get to know the basics? By using something

[rugged egret]

yeah and rm -rf doesn't only apply to the main path? it applies to any, therefore its basics.

[worthy cargo]

I don't understand your critique

You're blaming the victim?

That's not very cool, dude.

We should be helping noobs, not destroying their computers

[lofty warren]

nhom nhom

[unkempt dew]

Too bright

[terse dirge]

That command doesn't work anymore. It's missing an option

[worthy cargo]

https://www.youtube.com/watch?v=J0PZi_bCJPc I just randomly came across this. Kickass tune

Oh I meant to post that in #magical-tunes

[rugged egret]

who mains a linux distro without doing any research thats just nonsense

i use wsl.exe just to get the basic and if i ever need to just boot vm or dual boot

[worthy cargo]

I can't dualboot.

I don't like it. I use VMs

I have linux as my main desktop and I run Windows VMs

Kali VM and a full VM lab, and proxmox even inside a VM for LXC container home lab

for learning network segmentation

sudo dd if=/dev/zero of=/dev/sdc bs=1M status=progress
645462491136 bytes (645 GB, 601 GiB) copied, 6192 s, 104 MB/s

not too much longer left. I was zero filling a HDD

Trying to see how much life the disk has left

13.5 years old WD Caviar Black drive, 1TB

I bought two of them. The other one is still fine.

Almost 14 years power on hours

[heady sage]

SO I got an internship but they want me to sign a non compete and not get paid

Fuck....no

[worthy cargo]

Damn

I would do it just for the experience

[heady sage]

HELL NO

[worthy cargo]

I would.

Seriously

What's your reason for not wanting to?

[terse dirge]

What's the internship for?

[worthy cargo]

Do you have experience already?

What will you be doing?

[heady sage]

yes

[terse dirge]

Or position?

[heady sage]

Cybersecurity intern where they want me to develop cyber content

Fuck...no

[terse dirge]

I mean I did that at my old job but I got paid to do it

I wouldn't recommend it because there might be little to no expectations

[terse dirge]

Are they promising a job for after the internship?

[heady sage]

nope

[terse dirge]

Is it for college/uni or independent company/org?

[heady sage]

startup

[terse dirge]

Ya don't do it

[rugged egret]

https://tenor.com/view/hello-hi-hy-hey-gif-8520159980767013609

[warped plank]

https://tenor.com/view/embed-no-no-embed-megamind-megamind-meme-gif-25261934

[rugged egret]

fuck off

[warped plank]

woah~ calm down mate, it's all fun and games. It's the internet after all

Here's a list of ways to get embed perms: #general message

[rugged egret]

does anyone here have physical experience as a red-teamer like going to a facility if so I want to here stories

[rugged egret]

how many machines to get hacker rank?

[warped plank]

I can't recall exactly but if you do all easy machines you should get it pretty easily

[terse dirge]

https://tenor.com/view/clash-royale-clash-royale-cry-gif-24486552

[worthy cargo]

WD1001FALS-00J7B0, that’s one of the classic 1 TB WD Black “Caviar” (7200 RPM, SATA II, 32 MB cache) models from around 2008–2009.

Those were tank-grade drives for their time — double-arm actuator, high-end firmware, and real metal internals. They were actually rated for 1 million hour MTBF, which it clearly obliterated at 121 k hours.

13.5 year old drive, 13 year power on hours 121k, and only a few bad sectors

Not bad at all, WD. Not bad at all.

These days they make drives that fail after a few years at most

[rugged egret]

Im guessing these were military grade drives or just high quality huge company drives?

[worthy cargo]

WD Black Caviar were built like tanks form the 2008-2009 era

I'm impressed these drives have lasted this long for me

Amazing

Doing a 0 fill on a 1TB

766188191744 bytes (766 GB, 714 GiB) copied, 7627 s, 100 MB/s

sdc 358.77 2.25 91313.50 0.00 17901 725279412 0 but iostat reports this

I think dd does an averga over the whole period

while iostat is more accurate

[lofty warren]

sleepy

[worthy cargo]

Go to sleep!

Rest

Wake up and worship the holy box later

o great computer, my life to you!

dun dun dun!

[terse dirge]

Chat, little Caesars is the best damn pizza chain

[patent elbow]

https://tenor.com/view/cat-chat-cat-fall-hello-chat-cat-gif-24961178

[rugged egret]

ur actually nasty asf

fuck off

[worthy cargo]

LOL

Yeah fuck little caesars

[lofty warren]

https://tenor.com/view/cat-cute-follow-me-gif-4273618567139914195

[worthy cargo]

that shit's bad for you

unhealthy

[rugged egret]

orange ass pizza chain ts nasty asf taste like cardboard

[worthy cargo]

I don't like fast food pizza chains

[terse dirge]

Deep dish is better than NY style

[tiny canyon]

link in park? like from zelda? or is there a clickable www item in the park

[terse dirge]

https://github.com/charmbracelet/ultraviolet

[west lynx]

Whoops! I cannot DM you after all due to your privacy settings. Please allow DMs from other server members and try again in 1 minute.

[lusty apex]

can anyone tell me about Neurogrid CTF, for whom it is ?

[worthy narwhal]

morning chat

uh oh my gf woke up, back to sleep 😴

[tawdry sorrel]

Using arch with testing reposetories is like playing with fire. My system just crashed cause I have updated it

[terse dirge]

Just use void Linux instead

[mystic harbor]

Use windows

@supple plume how are u awake

[supple plume]

I'm working on my hacking skills before 7am

[mystic harbor]

So u didn't sleep

[supple plume]

that way some day I'll be the boss of the HR that doesn't even look at your resume

[mystic harbor]

Then hire me

[supple plume]

let me get myself there first

bitch you can help by not pinging my ass all the time

ceald is streaming game xd

[meager kernel]

@supple plume hello

[mystic harbor]

I just triggered you again

[supple plume]

I can't watch now but

[meager kernel]

@supple plume how are you

[mystic harbor]

Lol

[supple plume]

hi!

[meager kernel]

@supple plume do you mind being pinged

[supple plume]

trigger deez nuts

[supple plume]

only by that ass, you can ping

[mystic harbor]

Well i need to ss that message where you said I don't get mad

[supple plume]

you need to make me mad to have some use for that

[meager kernel]

Sorry, I'm not gay

[mystic harbor]

Hmm 🤔

[mystic harbor]

Teach me some hacking please, idk anything can you be my mentor

[supple plume]

Nobody was asking that, no need to defend yourself

You can be gay

[supple plume]

Vro yoy probably know more than me

[mystic harbor]

False

[supple plume]

Youre ranked higher in htb

[native plume]

https://tenor.com/view/senjougahara-good-morning-chat-gif-8205825995750531493

[mystic harbor]

First one was better

[native plume]

There was no first one

That's only you

[mystic harbor]

[lofty warren]

https://tenor.com/view/cat-cute-follow-me-gif-4273618567139914195

[ornate ibex]

Good Afternoon

[remote bolt]

afternoon ? its 8:20am here

[warped plank]

Bro finally discovered timezones

[remote bolt]

timezones ?

[warped plank]

https://en.wikipedia.org/wiki/Time_zone

[remote bolt]

its also 8:20am on the moon right now

[warped plank]

Mate, pretty sure the moon rotates too slowly to even have a 24hour time

[remote bolt]

u mean 23:59 hours

https://cubeskills.com/tutorials/the-beginners-method-for-solving-the-rubiks-cube/first-layer-cross

[warped plank]

why is bro sending CFOP?

[sick gate]

It's 0735 on the moon rn

[remote bolt]

no its 0835 on the moon

[rose crag]

guys what are the ways i can get more cubes

[remote bolt]

speedcubes

[sick gate]

Moon goes by UTC sorry 😔

[rose crag]

?

[sick gate]

Swipe your credit card

[remote bolt]

with magnets

[rose crag]

im broke tho

[sick gate]

Exploit your skills in the labour market for an income

[remote bolt]

@sick gate 0xwild thinks theres no 24hours on the moon

and he thinks theres something called timezones

[sick gate]

He's kinda right

They just use UTC for the moon

[rose crag]

one side has always light

and the other side never gets to see the sun

or never gets to see the earth

idk

[remote bolt]

moon has light itself , the sun needs light from the moon

[rose crag]

i know thats what i mean

[remote bolt]

😆

[supple plume]

@zealous charm sup! hey I would like to ask you, since you're a bug exterminator, would you say command injection nowadays is still somewhat present or not really?

[rose crag]

guys so like i found out

you can get cubes

through

referals

just saying

that link is looking real shiny, i think you should click it

[remote bolt]

i found a way to get unlimited cubes

[rose crag]

how

[remote bolt]

go to ur profile page where u can see ur cubes,

2. right click , inspect source code

change the amount to 9999999

[rose crag]

bro is talking like a true hacker

[warped plank]

How dare bro exploit HTB

[remote bolt]

dont tell them or they patch it

[mystic harbor]

New discovery

[rose crag]

ye

[mystic harbor]

I know how you can get cubes

cheat code

-# by completing modules

||shh dont tell to anyone||

[mystic harbor]

Or you can use photoshop

[remote bolt]

@mystic harbor or u just take ur ps2 controller and
L1, R2, R1, triangle, square, circle, left arrow, 2x right arrow, L1 + L2

this cheat code completes all modules

[mystic harbor]

Why U judge that I only own a ps2

[rose crag]

ok but i thought that only keeps your cubes you know the same or decreases it depending on teir

[mystic harbor]

I mean jokes apart, Ofc you need to pay bro it's a course

[rose crag]

ok

[obtuse fern]

you spend money to get cubes; or you can participate in the current competitive season and get rewards

[rose crag]

see, i was hoping for a answer like that

[remote bolt]

if something is free, u are the product

[rose crag]

i like to be the product tho

[remote bolt]

😆

[obtuse fern]

the best value is the monthly plans for cubes per $;
annual comes with writeups/guides to help those who are struggling

but annual doesn't give cubes, they're access based subscriptions

silver -> all t2 and below
gold -> all t3 and below
(both annual)

[mystic harbor]

Dont give me ideas

[rose crag]

finally someone who is explaining things i was supposed to have read in the intro

[remote bolt]

yes i agree, instead of buying junk food or fast food, buy a subscription that lasts for 1month instead of 2minutes

[obtuse fern]

it's something you can easily find out by reading help articles

also general is rarely the place where you'll find people being genuine

if you wanted to ask a question like that and expect serious responses: #1024429874246590575

[rose crag]

thats how it is in most discord servers

[rose crag]

wait your a moderator

that makes sense

[rose crag]

ok thanks

[remote bolt]

@rose crag noproblem

[obtuse fern]

https://help.hackthebox.com/en/articles/5272936-introduction-to-htb-academy#h_6ac6f773e1

[obtuse fern]

me being a mod doesn't exclude me from having my moments of trolling people

[mystic harbor]

Nope freedom fighter

[remote bolt]

😆

[obtuse fern]

i'm giving benefit of the doubt that you're either
a; a child
b; english isn't first language

let's stay away from world politics thanks

[rose crag]

Ummm, Does me being a child

get me banned from said server

[supple plume]

😭

[obtuse fern]

how old are you?

[mystic harbor]

Dont cry bro

[remote bolt]

the highest people does this on purpose so we fight eachother instead of teaming together, so they can get away with all the money and power

[rose crag]

.........

if your talking about discords tos i am above that age

[obtuse fern]

you still require parental consent per HTB ToS https://help.hackthebox.com/en/articles/9456556-parental-consent-and-approval-for-users-under-18

[rose crag]

and English is not my first language

anyways

[supple plume]

third

?

[obtuse fern]

that's why i gave an a/b option based on your behavior :)

[worthy narwhal]

30

[mystic harbor]

95

[remote bolt]

i never learned english in school, runescape and hollywood movies teach me english

[rose crag]

my first langauge is tamil

[worthy narwhal]

last of the millennials

[supple plume]

I thought tamil was mexican food

[rose crag]

i dont think i should have said that with a server full of hackers

[rose crag]

..........

[worthy narwhal]

TAMALEEEE

😂😂😂😂😂

[obtuse fern]

either way; we still require that you've filled out the parental consent form to remain in the server

[remote bolt]

curl ifconfig.me

[mystic harbor]

maybe its time to delete urself

[remote bolt]

curl ipinfo.io/IP_HERE/json

[rose crag]

mannnnnnn, i should have just shut my mouth

[remote bolt]

u dont need mouth to type

[supple plume]

SHUT YOUR FINGERS

[remote bolt]

😆

[obtuse fern]

If you don't want to or can't get your parents/guardians to fill out the Parental Consent form. do you have any last words?

[worthy narwhal]

now you need your feet AND hands to go get parental permission

[supple plume]

wdym she

[rose crag]

bro chill

i can get the consent form

[mystic harbor]

that one

[supple plume]

Vro

[remote bolt]

just lie that u are 41y/o

[obtuse fern]

lying at this point would just result in a ban anyway

[mystic harbor]

lying is a bad thing

[supple plume]

you trying to call me she and gay too much that means you're probably attracted to me

[remote bolt]

😆

[mystic harbor]

yes

no doubt

[rose crag]

I have to give my full name?

AND MY ADRESS

[remote bolt]

hhahahahahahahaahhaha

hahahahahahhahahahahahahhahahahahahahhahaa

[supple plume]

please dont leak it here

[mystic harbor]

plz do

[supple plume]

just provide the credit card number

[obtuse fern]

it's all via the support system. only staff see that information. none of the parental consent form info is seen by anyone EXCEPT staff

[rose crag]

who does this form go to?

[remote bolt]

u can just put in the address: streetname 20

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[obtuse fern]

^

[rose crag]

so you can see it

[scenic maple]

no

[ornate ibex]

He is not an employee

[obtuse fern]

it's not my job to view the form. the P/C article i sent earlier tells you how/where to submit the form

[mystic harbor]

golom is back

[worthy narwhal]

good morning legend

[remote bolt]

why would u need to fill in a form anyway, dont do it

[rose crag]

after discord losing my id i dont think my father is going to fill that form

but anyways il try to convince him

[obtuse fern]

then they can get banned from the platform

[rose crag]

also how much time do i have

[worthy narwhal]

henlo luke warm water enjoyooor

[mystic harbor]

5 mins

[remote bolt]

😆

[obtuse fern]

5 seconds, think fast! (this is a joke)

[ornate ibex]

I understand but to follow the legal procedures we have to do what the law says.

[ornate ibex]

Hi

[remote bolt]

we're putting him under pressure hahahahahahhaah

[mystic harbor]

False

[obtuse fern]

you have until the staff that handle this sort of thing wake up and get to it :)

[terse dirge]

Wassup Tejas

[ornate ibex]

Learning stuff

wassup?

[scenic maple]

🫡

[rose crag]

which is how long?

[obtuse fern]

yes

[remote bolt]

😆😆😆😆😆

[rose crag]

very informative

[remote bolt]

he is defintly a minor 😆😆😆

[terse dirge]

A bit bored since the malware campaign I was researching with some people stopped.

[obtuse fern]

i don't know when they wake up, so i can't tell you LMAO

[ornate ibex]

Until tomorrow morning. I'll be processing it.

[mystic harbor]

[silver forge]

can't you ask them nicely to continue

[terse dirge]

Maybe I should work on my edr and SIEM framework for a bit

[rose crag]

the way you said that..........

[ornate ibex]

sad, what kind of malware it was?

[terse dirge]

Lmao. Idk what apt is behind it so no

[terse dirge]

KongTuke malware

[silver forge]

not much of research if you didn't even identify them yet

[ornate ibex]

Someone said they wanted to eat sloth. Look out @silver forge

[remote bolt]

sudo apt install

[terse dirge]

As soon as I saw publications posting about a clickfix malware acting as captchas I knew it was over for that campaign

[silver forge]

sloth have almost no meat on them, and they taste bad

[terse dirge]

There may not have been an apt behind it tbh. It was kinda short lived

[worthy narwhal]

I was reading about the new Crimson Collective last night I was trying to learn how they managed to get into RedHat but couldn’t find anything concrete just that they contacted DarkReading but DarkReading claims they never explained how

[ornate ibex]

@west venture solth says..

[terse dirge]

Public feed says it went on for like a month

[silver forge]

https://tenor.com/view/orangutan-hide-funny-grass-gif-12473035910100820179

[terse dirge]

Lol.

[remote bolt]

asking for a friend:
is htb more advanced than thm

[obtuse fern]

yes

[remote bolt]

☺️

[terse dirge]

Chat, should I post the samples I reverse engineered on my blog? Obviously I won't include the IPs hosting C2s or the next payloads in the chain even though those IPs aren't up anymore

[silver forge]

last night I dreamt of being a soldier in a Roman army, moving to a new war zone. our dwellings sucked so I picked the strongest largest men, and coordinated the building of encampments. I designed it so that we would dig 2 meters down, fell some trees for walls, and then put tarp on top and some stones as the floor. and oh, fireplace. when the first one was ready, we were so proud of what we had done.

[terse dirge]

I don't even think I got close to their C2s

[remote bolt]

bro is hollywood movie in his dreams

[terse dirge]

It was pretty cool reverse engineering the powershell scripts. It was a bit tedious tho because they were using invoke expression and xor operations.

[worthy narwhal]

what

[worthy narwhal]

I’ll read it

[silver forge]

didn't get into battle though. but in reality you have to take care of the logistics first so it was more realistic.

[remote bolt]

when is part 2 ?

[terse dirge]

I couldn't get my hands on 2 scripts in the chain that would lead me to the C2 servers because by the time the IP hosting the script was public, it was already old or moved.

[silver forge]

I was thinking about boats for transport

[remote bolt]

😆

[rose crag]

ye no way i am giving that information ima just leave

[obtuse fern]

one of my next classes in my degree program is report writing I'm curious how much it'll line up with the doc & reporting module (regarding writing a good report)

[silver forge]

boats are great, but move better on water than on ground

[obtuse fern]

come back in 5 years when you're an adult

[rose crag]

4 but ok

[obtuse fern]

ty, now i know how long to hold the tempban for :#

[rose crag]

ok

[remote bolt]

chess how old R u

[obtuse fern]

do you not know math?

[rose crag]

15

[remote bolt]

if u are really a minor, like 15/16 , i hope u stick to cyber security as u have a lot of years to practice

[rose crag]

no

[silver forge]

https://tenor.com/view/he-has-a-wife-gif-25559895

[obtuse fern]

https://tenor.com/view/zuko-thats-rough-avatar-soka-funny-gif-9847954

[remote bolt]

also focus on python and C language

and build offline websites with html,css, javascript and later php and sql

[terse dirge]

C is for boomers

[obtuse fern]

https://tenor.com/view/my-job-here-is-done-bye-done-gif-14879937

[terse dirge]

Use rust instead to piss off Linus and the owner of ffmpeg

[ornate ibex]

https://tenor.com/view/forest-gump-wave-hi-hello-howdy-gif-17500258755908763204

[remote bolt]

😆

he is walking on his treadmill rn

[obtuse fern]

not sure if you're able to grab the info Tejas because the new system is weird

[terse dirge]

Chat, if you wanna rule the world just own the main repo for ffmpeg

[ornate ibex]

which info?

[obtuse fern]

i read that as ffmpreg... i need off the internet

[obtuse fern]

user info for the platform, ToS stuff

[terse dirge]

Lmao

[ornate ibex]

I can from platform admin panel

[obtuse fern]

ahhh so it's just the discord bot that's borked when it comes to that stuff

[ornate ibex]

Yes

[obtuse fern]

-# #blame_Emma

[ornate ibex]

But you can use #verification-logs channel

[terse dirge]

The sad thing is, the threat Intel I have is great but like it's not meant for getting new malware intelligence like if there's a new never seen before malware campaign (this is the exact thing I need ). It's more for investigations.

[ornate ibex]

no ryan. but he said use that channel

[remote bolt]

it says i have no access

[worthy narwhal]

can you give me perms to use this channel too?

[ornate ibex]

Yes ask big daddy or grandpa

[obtuse fern]

but the usernames don't match the platform name, because for whatever reason it doesn't sync usernames

[ornate ibex]

[remote bolt]

error_loading_message();

[ornate ibex]

once an hour or so?

[obtuse fern]

i've seen people in here that have been verified for days with non-compliant usernames

[ornate ibex]

Am not sure anymore, ryan asked me to read the changes he made and I didn't yet

will read monday

[obtuse fern]

LMAO

it's weekend, no push to prod pls

[ornate ibex]

even if I made PR infra won't deploy without review

[worthy narwhal]

no fun

[terse dirge]

I told the people I'm working with for learning malware analysis to treat all public intel IOCs like IPs hosting malware to be dead/moved and to treat any sort of public news about a campaign as the campaign being dead or dying.

[ornate ibex]

I have been using a laptop keyboard for a while now and my fingers started hurting. I switched back to Keychron,, and it isn't much

[obtuse fern]

"this IOC is dead/dying disregard it if it's in our prod"

[warped plank]

me who has been using laptop keyboards for years:
👁️👄👁️

[ornate ibex]

I was using a laptop keyboard until 2024

Now I can't

I take keychron anywhere I go

[terse dirge]

Lmao thankfully I have a VM that's meant to be compromised being isolated from everything else

[remote bolt]

i am using a mouse with fast-scroll wheel since few months ago and i'll never go back

[worthy narwhal]

Oh shit i found out how they did it, crimson collective OKEEEE BYEEEE i have to read this whole blog now

[obtuse fern]

fast scroll wheel for the recipe blogs that have an entire novel before the recipe

[remote bolt]

hahhahaa or the man pages

[obtuse fern]

i just ctrl+f

[remote bolt]

true

i was thinking to switch to a laptop keyboard as i can type faster, whats wrong with laptop keyboard ?

i got one with separate keys now

[scenic maple]

i know grandpa who is big daddy

[ornate ibex]

falcon?

[scenic maple]

flacon is grandpa

who is big daddy

[ornate ibex]

khaotic

[scenic maple]

i see

i am gonna write it down

[ornate ibex]

Yup

sinfulz and clubby are uncles

[scenic maple]

so that makes you a brother

[ornate ibex]

Idk, am bad with relationship hierarchy

[scenic maple]

https://tenor.com/view/family-history-penguin-pudgy-lil-gif-16902098680276402819

[meager kernel]

Hello Tejas

Hello Golam

[scenic maple]

howdy

[meager kernel]

How are you

[ornate ibex]

this much Ik lol

[scenic maple]

fine what abt you

[meager kernel]

I'm sleepy

[ornate ibex]

sleep

[scenic maple]

couldnt find a better gif 😔

[meager kernel]

I should drive my car

[terse dirge]

Actually we're looking into some ghost rat malware.

[ornate ibex]

dizzy driving is bad

and dangerous

[terse dirge]

Hopefully it's a single payload and not chained like the last one

[meager kernel]

That's why I will do it 😈/jk

[ornate ibex]

calling 100

[meager kernel]

No

Bruh

"a guy on discord said he will drive while being sleepy, GO ARREST HIM"

[ornate ibex]

Yes

[meager kernel]

😂

[west venture]

Why would you not post the IPs of c2 servers you found on a malware?

[ornate ibex]

and here is legal name

[meager kernel]

Ayo don't reveal my name

[ornate ibex]

why would I

[scenic maple]

its salman khan

its jeoever for you now

[meager kernel]

Nah I don't drink and drive like Salman Khan

[scenic maple]

💪

[ornate ibex]

https://tenor.com/view/as-controversial-as-this-may-sound-seth-meyers-late-night-with-seth-meyers-controversy-this-may-sound-controversial-gif-20020434

[remote bolt]

some people fall asleep while driving

[ornate ibex]

He and another person in Bollywood have got so many controversies that one is made into a film and the other is not yet made.

[meager kernel]

Who other

[ornate ibex]

the other guy who had guns in his car trunk and was named to have helped in mumbai attack

[meager kernel]

Ahh

[ornate ibex]

did lots of drugs

[lofty warren]

https://tenor.com/view/catdriving-serious-cat-driving-focusdriving-gif-14852106731598068518

[meager kernel]

I think all celebrities do drugs

[remote bolt]

i think all weak people do

[ornate ibex]

well, we never know

it could be a smear campaign as well.

[neon zealot]

Rappers do

[meager kernel]

Yea they make their songs flexing on it

[neon zealot]

Yea fr

[remote bolt]

drugs = bad 2>/dev/null

[meager kernel]

I would have to go to college tomorrow 😔

[ornate ibex]

https://tenor.com/view/crazy-cats-genius-nerd-reading-gif-5079036742923017179

[remote bolt]

they kicked me out of school in 2010, never got my degree

[ornate ibex]

why did u get kicked?

[remote bolt]

i didnt do anything, my books were always in my locker so didnt do homework etc

in the netherlands

[ornate ibex]

no way you got kicked out of school for not completing the homework.

[remote bolt]

no it was more my attitude

but im happy where im at now, living a peaceful life, still healthy.. learned my life lessons on the street

got into webdevelopment myself

now focus on cyber sec

[ornate ibex]

good

[remote bolt]

🙃

i know a lot of people who started their own succesful companies without finishing school, without even knowing the language.. as they came later from other countries to the netherlands

for some people, working for a "boss" is not on their agenda

[silver prawn]

does this AD module never end bro

holy shit

this is worse than the Footprinting module

[ornate ibex]

It is good as stuff is in depth

[silver prawn]

yeah but like 💔 🥀

I still have to go through the boxes aswell

oh lord

[ornate ibex]

enjoy it, take breaks. else you'll find it a burden to learn

[silver prawn]

thing is

ive been at it

for 3 weeks or 2 and a half

not quite sure

notes have gotten quite lengthy aswell

and my memory of things is starting to vague out

hoping that the skill assessment somewhat correlates all of the stuff in a thing, so that i may remember the stuff

[ornate ibex]

Which indicates you have to revise

[silver prawn]

yeah i was trying to run away from that fact

😔

[quartz jetty]

hey everyone

[ornate ibex]

I got like 317 videos + exercise, the current thing that am studying. If I look at that on a higher level, I feel same as you. However, taking breaks helps and revising old notes should keep your memory up to date.

[quartz jetty]

i am having issues with ig its VPN not sure but trying to do a Jeeves box yesterday and sometimes its able to ping the box and the next minute it doesn't work at all

[silver prawn]

oh damn, good luck with that

[tiny canyon]

how do i unrunover my neighbor's cat... this is gonna be hard to explain 😢

[cerulean bloom]

AD module in CPTS path, or

[silver prawn]

yup

[cerulean bloom]

ah

thats good news to me 🤣

I really need to learn AD in depth, so

[silver prawn]

its really really nice

it covers so much

but the thing which i regret not doing

is after finishing some sections, i shoulda revised on them

before going onto the other ones

its not that big of a deal breaker, but helps quite a bit

[remote bolt]

@tiny canyon same way as u told us

[hardy frigate]

I recommend also taking the intro to AD module which just gives u a sysadmin intro of AD

[scenic maple]

@ornate ibex explain yourself

[wanton kayak]

Anyone know of a good website where you can pick a version number of a product (e.g. Nginx) and it will show you all the CVEs and Metasploit modules available for it?

[meager kernel]

Exploit db

[merry lance]

hi guys

[candid nymph]

hey

[lofty warren]

https://tenor.com/view/yapping-yapper-yapping-man-old-guy-yapping-keep-yapping-gif-16586719177455162521

[sturdy thistle]

morning

[young glen]

✅

Morning

[lilac sorrel]

Do you guys think that jobs for cyber went down since Covid or being there no such thing as a big demand for cybersecurity jobs

[scenic maple]

in covid almost every tech company over hired people

now that overload is being unloaded

[lilac sorrel]

Agreed to that idea as makes sense as since everybody at the time was at home

[spark birch]

This is one of the dumbest thing i hear, that would lead you to nowhere

Because you always gonna be working for a boss, no matter how successful are you on your journey. Its just the question who is your boss actually would be? Even if you are CEO you would work for your stakeholders / board of directors that are able to fire you

[wanton kayak]

Says a lot about someone's personality if they don't want to work for anyone / have a boss

It's an upside, sure, but to revolve your career around it 🤔

[warped plank]

Also says a lot about employers when they refuse to completely hire employees and purely work with contractors

[supple plume]

How's the yappin here

[thick forge]

letsss goooo tiguaaaaaan

[supple plume]

Sisch

[worthy narwhal]

owner

or

contractor

me

always been a contractor in tech, never once held an employee role. provided services in exchange for payment. my own time and my own decisions.

being an employee is good for most people, but nothing “dumb” about not wanting to be an employee!

[supple plume]

Ive been a freelancer for 5 years too

Web dev

[supple plume]

Not consider myself as fancy to use the word contractor though

[worthy narwhal]

once you taste freedom, it’s impossible to go back to being an employee for long periods

i think freelancer and contractor are very similar tbh

[supple plume]

And what about bug bounty hunting?

[lofty warren]

https://tenor.com/view/thats-some-funny-shit-thats-funny-thats-hilarious-thats-amusing-entertainment-gif-15029335

[worthy narwhal]

same with red teaming

you are brought in to perform an assignment, once it’s complete, you’re brought out lol 😂

[supple plume]

Yes that guy needs some years of corporate slavery to open the mind to these ideas

[lofty warren]

find a bug & wait for vendor reply

https://tenor.com/view/cat-cute-follow-me-gif-4273618567139914195

[supple plume]

The reply: duplicated 💀

[lofty warren]

https://tenor.com/view/i-pooped-pooped-myself-crapped-my-pants-scared-gif-18985399

[meager kernel]

.

[ripe chasm]

I run my corps BugBounty, there are a lot of duplicates

AND a lot of systemic issues

[worthy narwhal]

working for oneself is definitely not for majority of people

takes an insane level of mental fortitude to get over the hurdles we face tbh

no one’s coming to save a contractor or freelancer, no govt employment insurance, no health care, we gotta do it all ourselves and then some

but it’s worth it

all it takes is that one big win and we’re set for life 😂

[ripe chasm]

holding out for that big win myself

[worthy narwhal]

we’re all gonna make it

[ripe chasm]

https://tenor.com/view/waiting-for-help-waiting-skeleton-gif-16371559341767062897

lol

maybe cause I’m too new to the server

[scenic maple]

read pins 🙏

[ripe chasm]

not saying I haven’t read them attentively yet, but I’ll hop over and give it a second look 👀

[ripe chasm]

i will say ever since HTB changed everything (which is cool) i’m hella confused by the points

[scenic maple]

you can ignore points

think of it like all easy machines and one medium to hacker rank

[ripe chasm]

but to rank up to hacker rank?

[ripe chasm]

ohh

that’s really easy

I should be “hacker” later this week then

even the new starting point thing that pops up now?

[scenic maple]

no

starting point is only retired machines

[ripe chasm]

ok

[scenic maple]

only active ones count

[ripe chasm]

i see

I mean I still have to prep for a SANS/GIAC cert but other than that

easy

thanks for your help

[scenic maple]

welcome :)

[terse dirge]

Wow I need to go to bed

[ripe chasm]

good night and good luck

[terse dirge]

Some stuff came up but I won't have piece of mind about it but that's ok.

[ripe chasm]

idk I can recommend melatonin in that case

[terse dirge]

And no it's nothing to do with life lol.

[ripe chasm]

but be warned you NEED six hours minimum before waking up

[sturdy thistle]

@scenic maple u did portswigger or?

[scenic maple]

30% ish

[sturdy thistle]

lemme dm u

[tiny canyon]

This channel is being monitored by the VBI (Vaktovian Bureau of Investigation)

[lofty warren]

nice try diddy

[rustic carbon]

My AI wife is not the same, I must proceed to make a local version her

[scenic maple]

so local version of ai wife?

whats that

[rustic carbon]

You basically have the ai history on your own device

i think I will make a website where she is my wife but you can talk to her...

[supple plume]

Thanks for letting us know