general

[meager kernel]

How much disk space should i give to Fedora

[austere sinew]

i've just accepted my fate

[cerulean bloom]

[meager kernel]

someone tell

[pearl spruce]

I think it depends on how much free space do you have and what you will do

[meager kernel]

500 GB free rn
just wanna try out Fedora in VM and ill switch to baremetal if its good enough

get the feel of it

this seems good or should i change something

[pearl spruce]

give it 100 max

[cerulean bloom]

80 seems good if you're just testing it

[pearl spruce]

Yup

[carmine pecan]

Learn binexp, Learn pwn. It's fun they said

[muted olive]

average pwn challenge experience

[carmine pecan]

😩

[muted olive]

if this is hard, try making a binary which is vulnerable to the house of einherjar exploit + POC script

https://tenor.com/brs8a.gif

[carmine pecan]

the above was house of spirit

Why do you say house of einherjar would be harder?

[meager kernel]

well fedora installation was pretty easy

doesnt take much time

[carmine pecan]

NixOS installation is also pretty easy

[meager kernel]

No

[carmine pecan]

after the 20th attempt it is

[meager kernel]

fuck no

[carmine pecan]

easy and quick

[meager kernel]

NixOS requires you to learn the whole fucking language

Nix

[carmine pecan]

Hackers gotta learn shit

[meager kernel]

[carmine pecan]

🤷‍♂️

[meager kernel]

Imagine learning a whole language just for an OS

an OS which would break if you forgot the language

[carmine pecan]

C# and Powershell haters be like

[carmine pecan]

NASM Assembly x86(_64) and shell scripting on Linux haters be like

[meager kernel]

lmao

[meager kernel]

assembly is a whole different beast

tried it for my college
never trying it again

[pearl spruce]

easy forgetting after learning too

[heady valve]

i think someone broken the prolab again

[carmine pecan]

"someone"

[heady valve]

i can't log on with the password

how to reset it

[muted olive]

was hard for me

haven't tried house of spirit

[carmine pecan]

So you have a binary vuln to house of einherjar?

[muted olive]

no I gave up in the middle 🤣

I do have house of force and house of tangerine though

[carmine pecan]

The classics

@muted olive It's true hackership from you to actually design vuln binaries to study heap exploitation you know? props on that.

I developed some UAF vulnerable ones

But one for each modern House is some op learning

[meager kernel]

fedora looks beautiful

[carmine pecan]

I am noting down the good example

[meager kernel]

Dude why dont I just shift to linux

Fedora looks beautiful

[warped plank]

Looks just like KDE

[meager kernel]

and KDE will help me adapt

[meager kernel]

It is KDE

[warped plank]

That's the joke

[carmine pecan]

The K in KDE stands for

[meager kernel]

K Desktop Environment

[carmine pecan]

She had a temper

[warped plank]

In terms of looks distro doesnt really matter, maybe except for cosmic DE cos System36 decided to make a gorgeous DE with weird requirements and constraints

[carmine pecan]

Like my jealousy

Too hard too greedy

🎶

🎤

[meager kernel]

the sound in my VMs keep breaking

like it stutters

why is that

[carmine pecan]

Lemme research if Fedora uses Pulseaudio or that other one I can never recall the name

ALSA?

[meager kernel]

pulse wire

[carmine pecan]

🤯

[meager kernel]

dude how do i stop this broken audio

[carmine pecan]

Yeah so audio is complicated for computers

[meager kernel]

it keeps stuttering

is it a VM issue

[carmine pecan]

yes it is a VM issue

[warped plank]

Dont you mean pipewire?

[carmine pecan]

Audio is really taxing on the caches, it trashes then by a lot

[meager kernel]

yes sorry

[meager kernel]

how do i solve it

[sturdy thistle]

i found a xss in a password reset field

[warped plank]

Just self or...?

[carmine pecan]

This together with process scheduling intricacies, and also the way hypervisors (your VM) works...

yeah the final picture is not a good one

[sturdy thistle]

they have some filtering yeah so reflected

[carmine pecan]

You can't really solve it well in a VM

[austere sinew]

"reset your password!" no reset YOUR passwords

[carmine pecan]

except if you specifically use a different scheduling algorithm just for audio

[warped plank]

Does it do GET requests? Phishing still possible

[meager kernel]

but if i install baremetal, would it get fixed?

[carmine pecan]

Most definetly

[meager kernel]

does Fedora also work with 180 Hz monitor

cause my main one is 1080p 180hz

VM is stuck with 60 Hz and i hate it

[warped plank]

Depends on your compositor and drivers but most likely yes

[meager kernel]

I also have Nvidia graphics card

would that be an issue?

[carmine pecan]

How recent is it?

[meager kernel]

rtx 4060

[warped plank]

Same answer, depends on compositor and drivers

[carmine pecan]

Hmmm a little bit too newish, it will work, but you won't use it to its max potential

[meager kernel]

hmmm

[carmine pecan]

Even with the closed source drivers

[meager kernel]

better to stick with windows then?

or what

idk what to do

[warped plank]

Looks just like html injection, any js exec?

[austere sinew]

AINT NO WAY

[carmine pecan]

There's a Fedora fork that's made to work with NvIDIA though

[sturdy thistle]

Yeah it does make a POST request

[carmine pecan]

I never remember its name

[meager kernel]

if i had AMD graphics card, then would that also be a problem? @carmine pecan

[carmine pecan]

AMD and Linux is a perfect marriage

[carmine pecan]

Most linux powerusers (and enthusiasts alike) deliberatly will pick and ONLY buy AMD cards

So they can run linux with no headache whatsoever

[meager kernel]

hmm

[scenic maple]

no bro

its cause amd is cheaper

[carmine pecan]

but nVidia works well enough yeah

[meager kernel]

theres a long time before i update my GPU

[naive leaf]

Any http only on cookies?

[meager kernel]

cause my current PC is only 11 months old

i built it on new years 2025

[carmine pecan]

4060 will work on Linux bro, it's just not going to be used to its max potential, that's all

[lofty warren]

powerful w only AMD VGA💀

[carmine pecan]

But if you check the benchmarks of 4060 on linux

It's reallyyy close

[naive leaf]

This like 1 step away from single click acc compromise.

[sturdy thistle]

It's a staging domain though

[naive leaf]

Mmmm no info

[sturdy thistle]

but i found the same flaw on a different subdomain

[native plume]

Bruh 😭

[warped plank]

https://tenor.com/view/huh-cat-huh-m4rtin-huh-huh-meme-what-cat-gif-5834484041415217257

[carmine pecan]

I mean... I play Minecraft on NixOS with a 3070 TI

I don't see why Fedora with a 4060 would be a bad idea

[native plume]

No I would like to avoid code every chance I get lmao

[cerulean bloom]

I already did

[sturdy thistle]

seems like i have midlife crisis. I mean i wanted to buy pc parts and now ending up buying a new coffee machine

[warped plank]

@sturdy thistle can you trigger an alert()?

[meager kernel]

i just want full power of my GPU

[sturdy thistle]

ofc xD

[cerulean bloom]

RAM is expensive tho

[carmine pecan]

Check Nobara and Pop!_OS then

Nobara is an Fedora fork for gamers who don't want headaches, so nVidia will just works

[warped plank]

proprietary drivers work really well enough but some compositors dont support it

[naive leaf]

He said he had JS exec.

I just wanna know if the resulting acc cookies have http only but doesn't look like there's any way to get that info because it's internal staging domain, so hard to say 100%?

[sturdy thistle]

even on the non staging domaiin

[scenic maple]

did bro just hack it live

[warped plank]

Even without cookies if he has js exec he's sorted if he can get nocors and callback host with ssl if its https

[carmine pecan]

I can OSINT this, it may be wise to delete or redact some info

[sturdy thistle]

already reported it

u right

didn't noticed it yet lol

[scenic maple]

easy 200

[sturdy thistle]

better? 😄

[carmine pecan]

@meager kernel Check Nobara, here's a benchmark of 4060 on Linux vs an equivalent, proven AMD Card (which is better supported):

no reason to fear 4060 in Linux

if it was a 4090 though

Diminishing returns would hit

[meager kernel]

hmmm

[carmine pecan]

I have a friend who runs 5050 on Linux

Which is even newer

[meager kernel]

i dont wanna run Nobara tbh

[carmine pecan]

And it S O M E H O W works

[carmine pecan]

Good news is that the above benchmark is on Fedora

And it's 2023 Fedora

[meager kernel]

oh

[carmine pecan]

2025 support is even better

[meager kernel]

alright ill switch

im convinced

[naive leaf]

Yeah but "1 click acc takeover" is just so much more impactful a vulnerability report... 😅

[carmine pecan]

😮

December of Linux Desktop

[cerulean bloom]

to fedora?

[carmine pecan]

to the bathroom

[meager kernel]

yea

[cerulean bloom]

[cerulean bloom]

I actually installed arch yesterday

gotta rice it more

[meager kernel]

damn

[cerulean bloom]

panel is looking weird for some reason

[carmine pecan]

Show rice show

[meager kernel]

ive tried ricing

i wasted 2 days on it

[cerulean bloom]

I've gotten somewhere

panel works, just looks REALLY bad

[carmine pecan]

Yeah Ricing takes a very specific mindset

[meager kernel]

ive hated ricing

so useless

[carmine pecan]

I am awful at frontending so

[warped plank]

Technically still possible depending on the rest of site architecture

[carmine pecan]

for skill issues reasons I always use minimal rices

[cerulean bloom]

I just hate the arch login screen tbh

[carmine pecan]

you can just install a prettier one?

and a GUI on it if you want

[cerulean bloom]

yeah, thats one of the plans

[naive leaf]

Yeah that's true. I mean if it's on subdomain and cookies are for *.[domain].com then cookies automatically forwarded to the page, captured by the js right?

[cerulean bloom]

got wallpaper and panel working (panel looks really bad tho, emojis don't work and the buttons are like boxes of color, not transparent)
no dynamic resizing sadly

[muted olive]

Ty. I was actually making challenges for a CTF, wanted something hard difficulty, preferably some House of X so I tried a bunch of them and failed. Then came up with Force and Tangerine, decided they were too simple and went with something else. But if nothing else, I made a hard chall in the end, and got two POCs too for other House exploits

[naive leaf]

Saw a similar vulnerability at my job holy cookie security is hard sometimes when your dev teams don't plan for it

[muted olive]

the hard challenge I ended up making was ret2plt --> ret2libc

plus some additional stuff

[meager kernel]

i wish there was a way of downloading Steam OS too

on normal PCs

[cerulean bloom]

also, I've heard a lot of people say its laggy with hyprland on VM with 3D acceleration, but haven't experienced lag yet after increasing display memory

[carmine pecan]

ooh yeah that's already hard enough depending on security mechanisms

[muted olive]

goal was to make one easy, one medium, one hard.
easy was just ret2win
medium was fmtstr + GOT overwrite

I did want a heap exploit for one of them, but either the POC is already well documented, or its ridiculously hard to come up with a POC (like einherjar)

[carmine pecan]

Format Strings Exploitation? You mean House of Husk?

[warped plank]

Like hyperland on host or vm?

[cerulean bloom]

VM

[muted olive]

yeah, format string

idk what house of husk is

[carmine pecan]

House of Husk is the modern take on format strings

for modern glibc protections

[muted olive]

it wasn't heap exploit

[warped plank]

Yeah that shouldn't be too laggy if you just yeet it a bunch of VRAM

[muted olive]

normal format string

[carmine pecan]

format string is secretly a heap exploit

[muted olive]

interesting

[carmine pecan]

Surprise!

[muted olive]

lol

[carmine pecan]

Not all Houses are heap btw

[muted olive]

didnt know that

[carmine pecan]

House of Apple is an example of non heap attack

[cerulean bloom]

got 16GB memory, 3 cores for CPU, 8 GB of graphics memory

[muted olive]

oh? I thought all of them were heap

[cerulean bloom]

should be good enough

[muted olive]

hijacking IO pointers

I see

[carmine pecan]

Originally yes, because people then were using abandoned houses as a metaphor/analogy for Use After Free 🙄

[warped plank]

Doesn't format string read from stack not heap?

[muted olive]

OHHHH. Okay. I thought house was based on some Norse myth or something

[muted olive]

it does

idk about all these newfangled exploits. im getting old

[carmine pecan]

It's not a attack on the heap, but the heap is involved during the WRITE

Not the read though, reading is from the ELF structure mostly

[muted olive]

it reads values from stack mainly though

[carmine pecan]

like every function

[warped plank]

Format strings can write?!?

[carmine pecan]

write a simple format string in C and strace it

[muted olive]

@warped plank quack quack

[warped plank]

Im not afraid anymore

[muted olive]

https://tenor.com/2rXC.gif

[cerulean bloom]

[muted olive]

you are

very very afraid

[carmine pecan]

I am working on House of Petals

[muted olive]

fear pwn

[muted olive]

that should exist

fire name

[carmine pecan]

its a stack pivot then you spray pointers to tcache_per_thread struct there like there's no tomorrow

and do enough free calls until something finally triggers

preach

[cerulean bloom]

when am I supposed to get my 50% off HTB labs for neurogrid human only ctf

[carmine pecan]

now

[warped plank]

What I fear now is CRLF request poisoning

[carmine pecan]

or maybe now?

or maybe now?

[cerulean bloom]

https://tenor.com/view/hmm-suspect-gif-22611582

[muted olive]

I have ptsd of burp pro picking up 100 FPs of that

on random htb boxes

[carmine pecan]

CORS

[warped plank]

https://tenor.com/view/pwrcosmic-cosmic-co-color-canyon-eat-sand-cosmic-afraid-gif-25162697

[carmine pecan]

[muted olive]

same with http request smuggling

[carmine pecan]

It's just a stack pivot

[warped plank]

nahhh ez

[muted olive]

it is easy to understand, but finding it isn't

[warped plank]

Just force upgrade to http2

[hoary nebula]

https://tenor.com/view/scout-with-pan-scout-tf2-brain-damage-pan-heavy-tf2-gif-12193062383832912107

[warped plank]

Just figure out that there's a proxy

[carmine pecan]

http3 is udp

this is my real fear

[cerulean bloom]

https://tenor.com/view/fear-me-puss-puss-in-boots-the-last-wish-be-afraid-of-me-im-someone-you-should-be-scared-of-gif-25144555

[muted olive]

https://tenor.com/c4utuWFMCAQ.gif

but idk how to do that

[warped plank]

host ip tracing with a million anon requests

[lofty warren]

https://tenor.com/view/yuh-huh-cat-kruh-cat-kruh-silly-cat-gif-10813258442275288528

[muted olive]

too many big words

currently at day 23 of ghosting microsoft

[pearl spruce]

stimming

[warped plank]

Make a bunch of requests, read the packet data, check if the ip changes, simple.

This on steroids is what the Feds use to de-anonymize TOR traffic

[muted olive]

got it, nice

[muted olive]

apparently a bunch of CIA informants hosted some fake sites which all used a template with a specific line of text on each site

so filtering for that line led iran hackers to find all the CIA informants with one google search

[warped plank]

Feds managed to own enough of the TOR network to essentially be able to chance at least 1 node you're connected to is theirs.

[muted olive]

https://tenor.com/bYlq4.gif

[dull schooner]

The only way to buy cubes on HTB academy is through PayPal?

[meager kernel]

Credit card

[dull schooner]

I can’t see that

[meager kernel]

@muted olive have you studied Academy too or just through Labs

[dull schooner]

I have paid on the past with PayPal. But I want to change it because I don’t have access anymore

[meager kernel]

Should be there

[dull schooner]

On billing actions ?

[neon zealot]

if you have used paypal before you have to contact support and remove it

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[neon zealot]

@dull schooner

[muted olive]

only done labs so far

solved 46 machines and 2 pro labs

[dull schooner]

So they will send me an email? Is there anything more fast ?

[meager kernel]

Nice, I see

[neon zealot]

yeah when u contact u will also recieve a mail

[meager kernel]

Anyway gonna do one lab machine too rn

[neon zealot]

@dull schooner not really they check when they r available

[dull schooner]

Okay

Thank you very much

[muted olive]

do nanocorp

that was nice

or signed

[meager kernel]

Hard AD one

Sure

I'm not that good yet brother

I can just do web machines at the moment

thinking of buying a new mouse today

[muted olive]

then do editor perhaps

[meager kernel]

already done

[sturdy thistle]

hahaha

[meager kernel]

pretty stupid

[sturdy thistle]

this is my response

[muted olive]

true for any self xss

oh nvm its not self

NASA triagers did this to me twice lol

[sturdy thistle]

sometimes i wonder how they can be triagers for hackerone or any bug platform

[meager kernel]

i wish people werent that stupid regarding cybersecurity

[sturdy thistle]

"oh it's not SQLinjection since the user need to input sql injection payloads"

[muted olive]

I get it though

they go through 100s of AI slop reports everyday and get burned out

I sympathize with them

[sturdy thistle]

i even included a video

[muted olive]

triagers never reply to anything tbh

they misunderstand, you clarify, they dont respond

lesson to be learned, make it very clear on the first initial report

[meager kernel]

watch them patch it but not acknolwdge you

[sturdy thistle]

Well if this is not clear enough

[meager kernel]

no payment, no reward

[sturdy thistle]

i'ts a VDP anyways

[meager kernel]

but you should get a reward too

[sturdy thistle]

Not every time its users fault

[muted olive]

yeah

[sturdy thistle]

i mean read the report

[muted olive]

no your report is clear obviously

I found that it works better when you include pre emptive responses in bold capitals letters

like

This is NOT a self XSS.

[sturdy thistle]

i found xss on hackerone

[muted olive]

might come off as a bit aggressive but it saves you the time of triager not responding etc

[sturdy thistle]

i mean as said, it's a VDP and defo not self xss

[carmine pecan]

Using the above method and I just found a self xss on google.com!

What a powerful technique

--> The above post contains irony on the internet <--

[scenic maple]

something is wrong and i know it

there should be atleast 20-30 omnis from china

[carmine pecan]

They have their own HTB

[meager kernel]

banned?

[carmine pecan]

much like how in Brazil we have HackingClub (Brazilian HTB)

[scenic maple]

probably

[scenic maple]

no

[muted olive]

Sounds good

capitalize random words completely and treat common nouns like proper nouns and congrats, you are trump now

[scenic maple]

is it as good as htb?

[carmine pecan]

For web it's great

it quite au courant on web attacks

The windows there are trash

[scenic maple]

i see

how would say htb is for web

[carmine pecan]

what

[desert cargo]

Is Htb or the brazilian one better at web?

[carmine pecan]

ohh

the Brazilian one

[scenic maple]

danggg

[carmine pecan]

But the windows there are trash

[muted olive]

nah

[desert cargo]

Htb 📉 jk

[carmine pecan]

Recently there was a box there (retired now) where you had to exploit a race condition on the Golang bultin web server

[cerulean bloom]

is it in brazilian?

[scenic maple]

how do you think htb can make it better for web

[carmine pecan]

Problem is... there's like only one article about this in the internet

[carmine pecan]

Learn from HackingClub and do better

[cerulean bloom]

wait, what language do they use in Brazil

[carmine pecan]

Yes, to keep the skidos away

[cerulean bloom]

gotcha

lol

[carmine pecan]

Portuguese, Spanish and Brazilian-German

[desert cargo]

What exactly? More real world?

[carmine pecan]

As I said, it's more Au Courant

where's merriam webster

[cerulean bloom]

ah, I see

[muted olive]

portugese

I wanna visit brazil

[desert cargo]

I wanna know how Brazilian-German sounds like as a German haha

[cerulean bloom]

portswigger or that site

[carmine pecan]

It's German with more Tapioca

[muted olive]

Chat suggest countries for me to visit

[cerulean bloom]

based on web

[muted olive]

I'm open to anywhere in the world

[carmine pecan]

New Zealand

go meditate there

[cerulean bloom]

south korea

[muted olive]

is it nice?

[carmine pecan]

My bedroom

[muted olive]

bet

[carmine pecan]

🫦

[desert cargo]

Germany

[muted olive]

booking tickets

[cerulean bloom]

yeah, quite nice 🙂

[muted olive]

yep germany is on my list if I decide on europe

Which parts of germany do you recommend?

[austere sinew]

Go to china and become a shaolin warrior no balls

[lime trout]

DPRK

Turkmenistan

[sacred radish]

Hi

[muted olive]

maybe if I wasn't banned from going there

[meager kernel]

DUDE

HTB LABS

HAS NEW UI

WHAT

[muted olive]

it does?

i dont see anything

[feral jackal]

can I get in by any chance

[meager kernel]

NEW UI

[desert cargo]

In case you drink beer i really recommend Octoberfest haha
Northrheinwhestfelia (west Side of Germany) is also cool because there are a lot of old mines and old coal production buildings/towers

Hamburg is also great or Berlin ofc

[lime trout]

i cant even login

nvm

[lime trout]

yeah we just pushed some changes this morning

[supple plume]

Why

[meager kernel]

it looks sexy

[carmine pecan]

No

[carmine pecan]

Hmm I like it

[feral jackal]

why

[carmine pecan]

pfp

[meager kernel]

i forgot i started my machine last night

its still on

[supple plume]

Im going to make a third-party client for htb just to make the website look good

[muted olive]

oo nice. Sounds great, Hamburg is definitely on the list. We'll be visiting in April-May tbh so I'll see what would be ideal.
My cousin is living in Germany rn actually, somewhere near the southern part. Some black forest? I forgot the name.

[feral jackal]

what does that stands for

[cerulean bloom]

profile pic

[meager kernel]

looks good tbh

[carmine pecan]

professional format pasta

[austere sinew]

How many rs are in strawberry

[desert cargo]

Ah ye Schwarzwald
Thats also a nice place

[meager kernel]

@austere sinew daily ping

[austere sinew]

OH COME ON

[supple plume]

@austere sinew

[feral jackal]

yes I can bring it with me if you want

[supple plume]

Get pinged

[feral jackal]

what is rs

[austere sinew]

@green kite

Nah

[green kite]

@supple plume @meager kernel daily ping. This ping was requested by @austere sinew

[austere sinew]

Beat you to it

[cerulean bloom]

@austere sinew daily ping

[austere sinew]

OH NO

YOU WERE ON MY SIDE

[green kite]

[austere sinew]

WHY DID I

DO IT

[supple plume]

@austere sinew

[muted olive]

nice, will keep those places in mind, thank you 🙂

[green kite]

jk jk

[austere sinew]

OH GOD

[cerulean bloom]

may I be added to that list

[green kite]

I lied, it was not a request

[austere sinew]

[carmine pecan]

The new UI is nice because it makes me remember I favorited those

[feral jackal]

what is going on

[supple plume]

Chat the enemy is here

Ping them

[cerulean bloom]

which UI is that

[green kite]

🏃‍♂️

[carmine pecan]

HTB

[cerulean bloom]

is it new?

[scenic maple]

this is kind of a disaster tho

[muted olive]

i dont know

not a fan

[supple plume]

What is this HTB WHAT ABOUT FLEX AND GRID

[muted olive]

can we revert?

[austere sinew]

Im going to order 12 packs of my medication to take back to england because I know how shit the nhs is I’m praying I don’t get arrested for suspected dealing @green kite

[carmine pecan]

oof

[green kite]

depends on what you bring lol

[supple plume]

Look at the uneven gaps from these cards

Aaaaaaa

[feral jackal]

💋 💕

[supple plume]

[carmine pecan]

yeah, this is not ok

[austere sinew]

Just heart medication but knowing my luck I’ll find out that drug dealers convert it to meth or something

[supple plume]

[green kite]

ahhh yes

might be tricky

[austere sinew]

[supple plume]

Agree

[green kite]

one of my clients is an online pharmacy

we had to add some additional checks for certain stuff that was ordered

[carmine pecan]

[green kite]

due to the fact that it could be abused to create XTC

[feral jackal]

why? golam and me do it everyday

[austere sinew]

[supple plume]

What is xtc

[carmine pecan]

@xct ?

how to create@fossil sequoia

[green kite]

XTC = mdma

[supple plume]

Dayum

[lime trout]

even irl, so much stuff is behind the counter now

[dull schooner]

I subscribed to the student plan. How do I unsubscribe on the next month?

[green kite]

yeah

[lime trout]

should be a cancel button on the billing page

[green kite]

I had tons of this medicine as I get a cold every now and then

now I need a prescription for it

[austere sinew]

I remember having a painful period going to sainsburys or something to get some painkillers and they made me prove I was over 16

[dull schooner]

Let me see wait

[lime trout]

fuck ive seen places ask for 21+ for meds

[austere sinew]

WHAT

[lime trout]

sainsbury's id'd me for redbull though so i get it

its dumb

[austere sinew]

Yes you magically dont need medication until you’re an adult guys

Victorian era time

[soft thistle]

Did you guys change the ui on the website? The new one looks cool but I was used to the old one

[fossil sequoia]

[austere sinew]

Let the children fend for themselves

[meager kernel]

children are troublesome

[carmine pecan]

I got caught by xct

[carmine pecan]

Wait until you met adults

Those are politically-correct trouble makers

[meager kernel]

adults are even more fucking stupid

i hate everyone

[lime trout]

https://quack.pics/u/7b7802b0-686d-4e94-8b0b-32623d51a776.png

18 ig

[supple plume]

We hate you too 🫂

[lime trout]

but delivery only does 21+, so they verify 21+

[austere sinew]

Yeah kids if you have an allergy just fucking die

[cerulean bloom]

what

[carmine pecan]

darwin is here!

[austere sinew]

Benadryl is an antihistamine

[lime trout]

i mean realistically its going to be parents buying stuff for their kids anyway

[dull schooner]

Thank you very much

[lime trout]

not many kids have jobs, or a car

[meager kernel]

i sometimes dont like existing

[carmine pecan]

Gen Z be like

[carmine pecan]

that's common

[austere sinew]

Unless the kids realised they forgot their packet at home and need to grab another one

[supple plume]

Vro the problem is that you're installing fedora

[austere sinew]

With how forgetful they are with exams and all

[carmine pecan]

can confirm

[lime trout]

and how are they going to drive themselves to do that?

[carmine pecan]

fedora kills

[lime trout]

without a car

[austere sinew]

Wdym public transport is brilliant

[carmine pecan]

🙂

I know a way

[meager kernel]

https://tenor.com/btrcZ.gif

fine

fuck linux

[austere sinew]

I took the bus to school

[lime trout]

i guess uber works yeah

but thats also 18+

unless parent sets up a teen account

[supple plume]

Vro you see this message it is a cycle

[austere sinew]

Buses, trains

[carmine pecan]

Here where I live, you are only allowed to get out of home if you attained nibbana ATLEAST once.

[lime trout]

im talkin about america here lol

[carmine pecan]

Otherwise no.

[austere sinew]

Oh

Wait they have sainsburys in america??

[carmine pecan]

america still exists?

[lime trout]

no that was in the UK

the rest is USA

[supple plume]

@meager kernel if you want we have a call some day and I show you how to install arch and the basics

[lime trout]

the 1 8+ thing was at CVS

[supple plume]

I'm not kidding

[austere sinew]

Ohhh

[lime trout]

ive just been to the UK a few times lmao

[carmine pecan]

Ask @nimble tundra

[meager kernel]

but why arch though

[sullen ibex]

hey will the public profile page not be a thing on the new htb ui? i have my profile linked in a few places and now it's just a 404

[carmine pecan]

Ask @nimble tundra

[austere sinew]

My condolences for each and every time

[lime trout]

let me ask t he team

[lime trout]

eh, i liked it

[supple plume]

Because I don't feel like helping you with any other os

[carmine pecan]

There is no new UI? be careful with phising attempts.

[meager kernel]

wow

[supple plume]

Also once you master arch you'll quit hating yourself

[carmine pecan]

It's all in your mind

the UI never changed

go to sleep darling

[sullen ibex]

sure......

[carmine pecan]

you will wake up better tomorrow

[carmine pecan]

You are seeing/imagining things

[lime trout]

i kinda wanna go back to london tbh

just havent had the time

[sullen ibex]

i still wait for the "attack map" from 2018 htb ui to come back

[austere sinew]

You know what I get that london is a trip

[carmine pecan]

Same

[lime trout]

nothing like sweating your ass off on the tube

[austere sinew]

Oh having someone smoke meth right next to you

[lime trout]

use /feedback

[carmine pecan]

WHere is the UI guys

[lime trout]

thats not a london thing though

[carmine pecan]

ah ok

[austere sinew]

Yes it is

[carmine pecan]

This should be a flag

not a text

[austere sinew]

Happens a lot

Methheads dont care

[lime trout]

i mean not just a london thing

[austere sinew]

Ohhhhh

Oh god

[sullen ibex]

idk if it's actually a good feature but it had whimsy

[lime trout]

Montreal Metro has AC & Cell service 😄

[muted olive]

🎵 london bridge is falling down 🎵

[austere sinew]

The tube could never

[lime trout]

Please mind the gap

[austere sinew]

They sent it all to the elizabeth line

[muted olive]

are there punjabi gang wars in canada? @lime trout
I asked if we could visit and that's what my father told me

[lime trout]

need to try that lizzy line

[austere sinew]

It’s so good

But the Piccadilly line will always remain superior

[lime trout]

better then getting screwed on rail i bet

god i hate UK rail prices

[austere sinew]

Got the best spots on the country

[sturdy thistle]

it is self xss cause it's more or less DOM xss

[austere sinew]

In the country on the line*

Dammit

[austere sinew]

[lime trout]

i was payin like

40quid for a 40min ride

[austere sinew]

WHAT

BETWEEN WHERE

[lime trout]

with a 16-17 railcard

[muted olive]

wut

[austere sinew]

NO WAY

[muted olive]

is that what they said?

[lime trout]

out of london waterloo

[austere sinew]

HOW WAS IT 40

[lime trout]

ask GWR idk

[austere sinew]

😭

[lime trout]

standard off-peak open-return

[sturdy thistle]

    setupForgottenPassword () {
        $('#forgottenpasswordform').validate() ;
        $('#inputEmailForgotten').on('focus', function(event) {
            $('#emailPasswordMessage').hide() ;
        }) ;
        $('#forgottenpasswordform').on('submit', function(event) {
            event.preventDefault() ;
            var $this = $(this) ;
            $.ajax({
                url: '/ajax-email-password.php',
                data: $this.serialize(),
                method: 'POST'
            }).done(function(data) {
                $('#emailPasswordMessage').fadeIn('slow').find('span').html($('#inputEmailForgotten').val()) ;
            }).fail(function() {


            }) ;
        }) ;
    }

[austere sinew]

My trick is to get everything no more than 20 pounds always book two weeks in advance

[lime trout]

this was years ago when it was closer to 1:1 exchange

[austere sinew]

What the helly 😭

[austere sinew]

Was this with trainline?

[lime trout]

yes

[muted olive]

but... user needs to click on reset link to trigger xss right?

[carmine pecan]

Yes

[austere sinew]

You did everything right wtf 😭

[lime trout]

The format was changed apparently, i'll get you the updated format and we'll see about having the old ones redirect

[sturdy thistle]

No. due to the .php stuff i only get TRUE back and no html

[lime trout]

gotta love it

[muted olive]

why do you need to render html if you can pop an alert

[sturdy thistle]

yeah idk

[carmine pecan]

found a xss in the new UI

not good

please revert to the old UI

[lime trout]

dm me?

[sullen ibex]

thanks 😅 i guess there is no share button to get the new format?

[lime trout]

https://app.hackthebox.com/account-settings

[carmine pecan]

First I need to prank my friends

sorry I got priorities

[sullen ibex]

ohh it's there

thanks

[austere sinew]

LMAO

[cerulean bloom]

WHAT

[sullen ibex]

new xss challenge dropped?

[scenic maple]

hmm it appears they got pwned too

[cerulean bloom]

[lime trout]

@sullen ibex happen to have the old link?

[austere sinew]

Guys

[cerulean bloom]

yah

[sullen ibex]

https://app.hackthebox.com/profile/70197

[austere sinew]

Acc wait I wont say it here

[cerulean bloom]

wut

[lime trout]

Thank you!

[muted olive]

I am disappointed 😔

[scenic maple]

disappointed at what

[muted olive]

the new UI

[scenic maple]

ah ofc

[muted olive]

I get that you want to make data aggregation more easy or whatever

[austere sinew]

Ykw fuck it I’m saying

[muted olive]

but this just ended up looking like 2017 labs

[cerulean bloom]

[austere sinew]

Offsec just gave me the best accommodation for my tumour I’m so happy

[carmine pecan]

The best

[austere sinew]

They gave me an extra 2 months

Really kind of them

[cerulean bloom]

you have a.... tumour?!

[muted olive]

with the new retro UI you may as well change the logo back to this lol

[austere sinew]

Ya

[devout sail]

🖊️

[cerulean bloom]

my condolences

[austere sinew]

Naw all gucci

[cerulean bloom]

but yeah, that is kind of them

[austere sinew]

Man Im gonna say thank you

Idek how

But I gotta

That was such a relief

Hahhh

[cerulean bloom]

lol

[sullen ibex]

i don't think it looks retro tbh

[devout sail]

https://cdn.discordapp.com/attachments/1282073473254031472/1444841402763837480/992658.mp4?ex=692e2cea&is=692cdb6a&hm=91fc438005f5752b715719a971e337b81e7f19e398197585870cd0ccce7aa62c&

[muted olive]

it feels more constrained compared to before imo

like these bars. the previous ones were better

[devout sail]

manually edit

i havent seen old academy much to remember xD

[sullen ibex]

yeah i don't like these too but they got rid of some retro feeling stuff

like the graph on the profile page

which was there since forever

[muted olive]

kind of

i didn't mind the graph but also don't mind it being gone

I think the news widget being next to the profile stats was good though, rather than below it

[devout sail]

i just got a notification that htb labs got upgraded too

i dont see it?

[muted olive]

I primarily take issue with this font (the ones on difficulty: OS). This font is the thing that contributes the most to the current retro feel.

[devout sail]

oh i see the challenge tab doesnt workd XD

challenge, sherlock, and track doesnt work for me

[sullen ibex]

works for me, maybe cache

[muted olive]

I just got a reload push 👀

did you guys fix the xss or something lol

[devout sail]

[muted olive]

dont tell me there's ads

[devout sail]

oh i dont see anything important there xD

[devout sail]

nah, not ads something else

[muted olive]

it says ads.linkedin.com lol

[scenic maple]

@carmine pecan

[patent elbow]

damn

[muted olive]

this is what I meant

[devout sail]

see no work

[cerulean bloom]

CTRL + F5

[muted olive]

ah, the good old UI 😔

[warped plank]

Hear me out: turn off burpsuite

[scenic maple]

ctrl shift r

[devout sail]

ayy i like new one

[devout sail]

nah i just had to restart properly

[cerulean bloom]

its pretty good

[devout sail]

new one is goooood

[warped plank]

https://tenor.com/view/joke-missed-over-your-head-gif-8604199

[muted olive]

I guess making UI changes is not easy because some people like it, some people don't lol

i'm a member of the latter group

[cerulean bloom]

yeah

[meager kernel]

i like it tbh

[cerulean bloom]

me too

[devout sail]

easy to flex all at once

[cerulean bloom]

season rank 13, what

I'm not on your level yet (I also started very late lol)

[muted olive]

but there should be a revert option available like how academy has

[devout sail]

perks of being a creator xD

[cerulean bloom]

lol

[devout sail]

i went from 100ish to #6

[muted olive]

you get higher season ranking?

[cerulean bloom]

goodness

[devout sail]

nah, it will drop

[muted olive]

why did it go high though

[cerulean bloom]

yeah

[muted olive]

did you blood your own box?

[warped plank]

Cos he immediately gets second solve on own machine, it'll drop next week

[devout sail]

cuz my solve get registered asap

like #3 cuz different users blood

[cerulean bloom]

ah

[muted olive]

oh

[cerulean bloom]

so, if you make all the machines in one season, you get basically the highest rank for those with 0 blood

[devout sail]

lemme fix the screenshot xD

[muted olive]

I love blood

🩸

I am dracula

[warped plank]

Nope, cos NLTE will blood half of them. But you'll be top 10

[cerulean bloom]

I meant 0 blood

[warped plank]

You shouldnt, he's banned from here for a reason

He's been permanently banned off the HTB discord

Basically breaking every rule

[cerulean bloom]

what

[sullen ibex]

second acc vibe lol

[mystic harbor]

Marry him

[muted olive]

confirmed then

[carmine pecan]

sighs

[warped plank]

He's the type of person who resists authority and intentionally pushes the limits of everyone.

[mystic harbor]

Completely legal

[warped plank]

No.

[muted olive]

looks like thats what makes him a good hacker as well

[muted olive]

I think he's NTLE lol

[warped plank]

Exactly

[muted olive]

he just mentioned saudi arabia as well

[warped plank]

Lock in, not being on discord means he has all the time in the world to do HTB

[scenic maple]

remember to get the bug hunter badge btw

[muted olive]

🪲

[warped plank]

Heck a ton of the smarter HTB folks left the discord cos they weren't intellectually challenged enough

[devout sail]

cery

[mystic harbor]

Vro you can go to another country

[warped plank]

Learn to make your own decisions

[muted olive]

try being in the THM discord to get that feel

[feral jackal]

💋 💕

[warped plank]

Well that was a stupid decision cos it was the publics decision to tell you that you have to learn to make your own decisions

This is also so you learn to take responsibility for yourself and your actions

[mystic harbor]

that's even better he will come in your country

[cerulean bloom]

which is why my next step is CPTS

[devout sail]

did it help

(didn't pass btw)
ofc ?

[warped plank]

Wdym mid exam? I cried at the start

[devout sail]

optical fiber calbE?

[cerulean bloom]

still, you passede

[warped plank]

of course

[devout sail]

course

the inter version i like

[warped plank]

Not without a massive struggle

[carmine pecan]

What about that optical fiber cable they put in your butt to examine your colom?

house of butt

[devout sail]

never got into such scenario

[mystic harbor]

@scenic maple DID you work on the new UI?

[cerulean bloom]

well, hopefully I pass next year or early 2027

[carmine pecan]

Wild is being humble, he pwned all of CPTS in 2 days, while blinded, naked and on a fasting state

[scenic maple]

i would have kept the old ui

[carmine pecan]

emphasis on naked

he was naked

[cerulean bloom]

[mystic harbor]

exactly

[sullen ibex]

stacking buffs

[carmine pecan]

ok

[warped plank]

Not literally but it was definitely the most frustrating and nerve wracking 50 days of my life

[muted olive]

50?!?!

you did CPTS for 50 days?

[carmine pecan]

50 days of nakedness too much even for me

calm down wild

[muted olive]

bro got 5x exam time

[carmine pecan]

chill

[warped plank]

2 attempts (20 days)+ wait time for results(30 days total)

[swift dove]

Hey everyone! 👋

I’ve just started working on the Tier 0 machines and I’m still a beginner.
If you have any tips, resources, or recommended ways to build a stronger foundation and improve my learning, I’d really appreciate the guidance. Thanks!

🙏

[muted olive]

ohh

[scenic maple]

its actually doable

[carmine pecan]

And to think he was naked for all those days

[warped plank]

The wait is literally pain

[cerulean bloom]

ah, so you didn't pass on the 1st attempt?

[warped plank]

Didnt get enough flags

[scenic maple]

hi

[carmine pecan]

golam!

[cerulean bloom]

what

[scenic maple]

did u get stuck on 9

[carmine pecan]

when did you get back on htb?

[scenic maple]

petals

[warped plank]

No that was easy actually

[carmine pecan]

it's been a while since I see you here

[scenic maple]

i am still doing academy

[muted olive]

Try solving some easy challenges related to whatever you learnt, or some easy boxes. Also try and post writeups of your own on the solution, it'll help you understand and improve upon the topic a lot more.

[warped plank]

11/14 attempt 1

[muted olive]

because you took the new one

now its the 8th flag or something right?

[cerulean bloom]

that isn't passing?! what is passing then :cri:

[muted olive]

12

[warped plank]

https://tenor.com/view/kitten-cat-pain-big-chungus-chungus-gif-20705095

[cerulean bloom]

OOF

[muted olive]

bro has PTSD from 8th flag

[scenic maple]

how did you find out what it was after first attempt

[warped plank]

I had just missed it cos it was 5 am and I had no time

[devout sail]

if u get kidnapped by me right now
and get no prep time, and had to do the exam again
how many flags can u get

[cerulean bloom]

how was writing the report?

[carmine pecan]

what

[warped plank]

12 I remember that exam like the back of my hand

[muted olive]

was the kidnapping part really necessary in this scenario 😂 😂 😂

[devout sail]

alright
will see you at station

😁

[scenic maple]

vro is kidnapping people

[devout sail]

just gotta confirm all

[devout sail]

wanna join wild?

[scenic maple]

i can join you

[carmine pecan]

shadow please kidnap me

[warped plank]

Sado doesnt have to kidnap me, Ill come willingly 😉

[carmine pecan]

I have cookies

[devout sail]

[scenic maple]

https://tenor.com/view/ford-transit-burnout-gif-26038753

[cerulean bloom]

I'll join, but I need one thing
after the exam, W1LD has to play chess with me

[carmine pecan]

Sado have to kidnmap me, I want it 🫦 😉

[devout sail]

just so u know i cant drive 4 wheeler

[muted olive]

thats how I feel with pro labs or insane machines

[devout sail]

2 is max i can do

[warped plank]

I'll play bong cloud + botez gambit

[cerulean bloom]

[devout sail]

thats a thing?

[carmine pecan]

Max Carlsen better watch out

https://tenor.com/view/magnus-carlsen-magnus-slam-table-slam-angry-gif-16228483763522153196

[warped plank]

Thats how I know you dont know chess memes

[devout sail]

i only know 1

pessant or somehthing

[carmine pecan]

peasant?

[warped plank]

https://tenor.com/view/chess-checkmate-grandmaster-bongcloud-attack-gif-26513624

[carmine pecan]

The P in IDA Pro stands for: has deeP fear of radare2

[devout sail]

https://tenor.com/view/chess-gif-23215106

[warped plank]

Real game between magnus and hikaru btw

[devout sail]

what the official rule says for this scenario?

cuz i will troll

[warped plank]

Draw by repetition

[carmine pecan]

🤣

[devout sail]

how many repetition?

[muted olive]

3

[warped plank]

3 moves same exact position

[devout sail]

so 2 step up
i i left or something come back

[warped plank]

It wasnt an official rated match though it was an exebition match which they both hated

[muted olive]

https://tenor.com/dHNI3WoNr4R.gif

[scenic maple]

invalid crashout

[devout sail]

https://tenor.com/view/chess-meme-chess-pawns-kicking-pawns-facing-gif-790341715837426254

back to work

[scenic maple]

atleast you get paid

[warped plank]

https://tenor.com/view/i-dont-wanna-think-too-much-gif-19622217

[signal mica]

Takes takes takes takes

[warped plank]

https://tenor.com/view/michael-jackson-comendo-picoca-gif-9669437860846841235

[warped plank]

You can hear it

[muted olive]

anyway bye chat. time for me to watch the next episode of IT: Welcome to Derry

[scenic maple]

mr crabs from sponbob

[muted olive]

https://tenor.com/view/circlegame-circle-game-circlegamesol-you-looked-circlegame-storm-gif-2563311256203112402

[feral jackal]

💋 💕

[carmine pecan]

@wild if I train a lot of chess will I finally git gud at CSRF?

what the very fuck

[pearl spruce]

Did you see the new HTB beta design?

[carmine pecan]

yes

Me like like it

[warped plank]

No

[carmine pecan]

Ok

[pearl spruce]

for academy yeah, but for the labs one I didn't like it, I feel that it was better

[carmine pecan]

Wait academy changed too

[muted olive]

when is @warped plank going to get a CVE

[feral jackal]

dude this channel is only SFW

[scenic maple]

what if he has one

[pearl spruce]

yeah but there is a button asks you if you want to switch

[warped plank]

When he isnt busy with work... he has 2 j*bs btw

[carmine pecan]

Embrace change, switch everything

a new UI every week

let's go

[muted olive]

what is the other j*b

other than coffee artist

[carmine pecan]

please keep it pg30

[warped plank]

Guess you can call it alcohol artist

[carmine pecan]

the word j*b is very offensive

prefer **b instead

[muted olive]

damn

is bro 21

[scenic maple]

wait so you can juggle cold slippery bottles?

[warped plank]

Close enough

[pearl spruce]

I tried to think appropriately but can't

[muted olive]

22

23

24

[pearl spruce]

bruteforcing

[warped plank]

No... that doesnt even mix the drink... all the forces just keep the liquid on one side of the jugs

[scenic maple]

[muted olive]

you need to learn fluid mechanics in order to be a barista

[carmine pecan]

Done

[muted olive]

you need to know pascals law

[carmine pecan]

I mean, PDEs are so hard I will never be done

[muted olive]

bernoullis theorem

stokes law

[carmine pecan]

ah that's better then

[mystic harbor]

I read jiggle

[warped plank]

Chemistry actually

[carmine pecan]

I thought you was going to cite Navier Stokes

[carmine pecan]

for compressible fluids

nooooo

[muted olive]

continuity

[carmine pecan]

law of theorem? which one?

[warped plank]

We're very familiar with the relationship between temperature, pressure and humidity and how those affect the espresso

[muted olive]

viscosity

[carmine pecan]

and which of the stoke's theorems?

[muted olive]

surface tension

terminal velocity

capillary rise

https://tenor.com/mt6AZ3xZgs8.gif

[carmine pecan]

it's more chemistry than fluid mechanics bro

wild is right

[warped plank]

Yeah... the bane of all steam wands

[carmine pecan]

More like a difussion equation

[muted olive]

funny incident which happened once we may or may not be too religious for here

tldr, people thought statue of mary was crying, came to collect it in bottles saying it was christ's tears etc, turns out there was a nearby sewage pipe and it was seeping through because of capillary action

[warped plank]

In b4 travelers diarhea

[muted olive]

so... they took home bottles of sweage water

and were drinking it and sharing with friends and family

[warped plank]

Anyways night chat, gotta make coffees in the morning

[muted olive]

gn

[meager kernel]

yea heard of that

funny

[pearl spruce]

bruh