general

[eternal mango]

I mean, yeah.. but a cat attacking a human isn't cause to suspect rabies.. Cats are assholes

But I suppose better safe than sorry

[molten bobcat]

This be true

[thick forge]

i dont wanna castrate my cat but i read saying when the cat is castrated is less agresive, so maybe works, i just wanna stop my cat hurt my neighbors, and me 🤣

[molten bobcat]

It is very common and safe to castrate and neuter cats homie

[terse dirge]

but a cat trying to attack everyone and everything isn't normal I think

[west venture]

100% better safe than sorry have you seen how you die from rabies?

[eternal mango]

Did this literally all come from someone saying "cat attacked my leg"

[muted olive]

lol makes sense

[rapid badger]

My brother got a nice shiba inu dog and had to sign a contract that he will castrate it lmao wtf

[molten bobcat]

I don't have full context I assumed he was assaulted by a stray lol

[eternal mango]

Personally no, thankfully, but I'm aware of how horrible it is

[west venture]

It's awful

[molten bobcat]

Shiba Inu are aggressive

[eternal mango]

I agree

[rapid badger]

nothing to do with that. The breeders just dont want competition o w/e
And his dog is super sweet 🙂

[terse dirge]

he said his cat is fairly aggressive too

[thick forge]

wrong, agian, my other leg 🤣 ❤️

[molten bobcat]

Oh wow

It's cuz his doggie DNA is priceless lmao

[eternal mango]

How was I wrong? I said "my leg".. that includes both legs

[west venture]

Does it attack when you try to pet it?

[muted olive]

Someone I know had a labrador and it attacked them... and it wasn't vaccinated (yet)

[molten bobcat]

VACCINATE YA ANIMALS YA FREAKS

[muted olive]

they didn't die but had to take like 20 rabies shots and stuff

ouch

[terse dirge]

cheeseball is vaccinated

[molten bobcat]

It's better than the alternative trust

Tidus is also vaccinated 😄

[terse dirge]

bill gates controls his mind on weekends and Fridays because that's what we've arranged with him

[molten bobcat]

Lmaoo

Mine loves cheese

[muted olive]

your cat is microsoft founder every friday and weekend

[eternal mango]

Careful, that's a sign of Active Directory compromise

[molten bobcat]

He has cheese flavored cat treats and now anytime we have cheese on food he gets all fuckin frisky

[molten bobcat]

Good, they can have the DPAPI Backup Key what am I using it for

Let the forest burn goblin

[eternal mango]

Who needs it

[molten bobcat]

The domain actually

It's my favorite AD fact

That there's a self destruct button built in

[terse dirge]

https://tenor.com/view/robert-downey-jr-tony-stark-gif-26471287

he runs into windows so I take that as a sign

damn, elastic security might be kinda good. Maybe I misjudged it

[eternal mango]

It is worth a go, for sure

Their update and product release cycle has grown greatly these past years, and the telemetry their agents ship and dashboards are not bad at all

[faint sandal]

Hello everyone, I just want to ask a random question. I'm looking for a cybersecurity community, primarily made up of people living in Australia. I wanted to know if you know of any communities on Discord. My interest is in meeting people to talk about cybersecurity and do CTFS, since I used to do that in Argentina, but now I'm interested in integrating my hacking habits into my Australian experience.

[eternal mango]

And that's before you tweak them

[terse dirge]

altho it's kinda slow and has you configure crap weirdly

[eternal mango]

With their fleet feature it makes managing hosts so much easier than before too

[terse dirge]

the dashboards are nice

[terse dirge]

ya but if you get ssl issues then you need to manually specify options or manually configure the output to ignore certs

[eternal mango]

You found that community.. but there are htb meetups hosted around the world

I would imagine there are some in AUS too

Or Argentina even, maybe?

[terse dirge]

it'd be nice if elastic had an n8n integration or something for webhooks

[eternal mango]

https://www.meetup.com/pro/hack-the-box/

[eternal mango]

You mean for incoming, or firing off webhooks?

[sharp shuttle]

Each major Australian city absolutely has medium sized communities, use meetup or what g0b said to try and locate them

[terse dirge]

sending data to webhooks

[eternal mango]

IIRC you can use Elastic to emit webhook events when alerts are triggered, and have an agent that receives incoming hooks

[terse dirge]

wazuh had it I liked it but I always had to make manual changes because of ssl certs

[eternal mango]

Yeah https://www.elastic.co/docs/explore-analyze/alerts-cases/watcher/how-watcher-works

Unsure on the flexibility of it mind, I've used it a couple of times for simple alerts

but nothing too much farther than that, e.g. sending relevant datasets from the triggering event

[thick forge]

i start the first episodie of startrek section 31

[weary laurel]

Hello

[eternal mango]

Wait what, new Star Trek?

[thick forge]

today i open the tv series section and i see these serie

is about the emperor giorgio

[eternal mango]

Nice, wasn't aware of that one

[thick forge]

looks good, i am looking the first episodie right now

[eternal mango]

Will hit that up at the weekend for sure

[terse dirge]

we too broke for azure tho

I made a custom rule and it looks like you need at least a gold license to use them

[versed quiver]

Hello guys im a student looking to get into Cloud security can anyone help me study

[muted olive]

Anyone here set up USB forwarding for VirtualBox before?

[eternal mango]

Looking at the plan table, it's Platinum (so first tier above free) for alerting

But yeah..

It gets expensive fast with Elastic

https://www.elastic.co/subscriptions

We used the hosted setup through Elastic directly

I remember yeaaars ago playing with Graylog as an alternative to Elastic stack at a previous job

I wonder how they line up now

SumoLogic is something I used a lot previous, and they have recently changed their pricing model (ok, not THAT recently, past year or so)

IT used to be based in ingest, but now it's based on query volume

Unsure if they provide such monitoring / reaction features though, been a long time since I used them hands on

[sharp shuttle]

Make an aws free tier account. Go crazy.

[sharp shuttle]

you just install the expansion pack

[eternal mango]

Looks like Graylog does support some level of alerting and supports webhook as a target for the event Ceald.. but I can't vouch for how easy to work with it is. Haven't used that in probably over 10 years 🤣

That said, NFI what kind of SIEM capabilities Graylog has compared to the Elastic stack

[versed quiver]

thank you

[thick forge]

i think the startrek is a movie not a serie

bu is good

[terse dirge]

Lol

Or I can be cool and make my own edr and SIEM solution

[sharp shuttle]

amazing ragebait

[eternal mango]

or that

[terse dirge]

I was working on that but lost motivation on it and forgot what I was supposed to add to it lol

[sharp shuttle]

so you mean to tell me you have no appreciation for anything tolkien inspired?

[rustic carbon]

no dude, now lets talk about scarface, goodfellas, all that

[sharp shuttle]

gets BTFO by RICO act

you cant RICO a dragon

go ahead try to raid the dragons hoard

[eternal mango]

https://tenor.com/view/minion-hello-bello-kiss-gif-12923282

[sharp shuttle]

I need you to roll attack 30 times, penetrat0r

oooo sorry the dragon has 88 AC

[terse dirge]

Actually, I do remember! I was going to work more on the agent management side and user management

I think I was going to add like agent groups and have a way where you can manage and update agents in bulk

[eternal mango]

Not to bang on, but Elastic's Fleets feature does this very well

Just don't try to update hundreds of agents at the same time.. and saturate the uplink

I totally never did that by mistake

[terse dirge]

We only have one endpoint being monitored right now

[terse dirge]

Ya

But elasticsearch isn't FOSS anymore so it's not based anymore

[eternal mango]

Haha, fair enough

[terse dirge]

Wazuh does it too but it doesn't notify you when agents have been updated

[eternal mango]

Not yet, it's been shipped though

I ordered months ago

Like when pre-orders opened

Indeedy

US is first

We get the sloppy seconds

[terse dirge]

Idk I'm trying to mainly design it to be fast and simple rather than having 69420 features and overly complicated

Elastic with its integrations are nice but it's a bit confusing on which to install what integrations on

[eternal mango]

AFAIK US pre-orders are being fulfilled first

Then it goes across CA and EU

Unless I'm thinking of something completely different

[alpine pumice]

good to hear

i want it first

[eternal mango]

but I mean I made my order Aug 18th

[rustic carbon]

they need to get a better manufacturer this is super slow

[terse dirge]

And with things like elastic defender I had to upgrade everything in elk to get it to work properly

[eternal mango]

Say that when you've tried making a production run of anything

[terse dirge]

Another thing with elk stacks is that when you upgrade everything it's not seamless, you either back up and import your data or start fresh which is a serious issue

I think small updates should be seamless and shouldn't require you to nuke your old instance

[eternal mango]

Yup.. update path sometimes isn't just update the node, swap the volume

Sometimes it's painful af

[terse dirge]

Even wazuh has the same issue

[eternal mango]

I still love Elastic

[terse dirge]

When I was building my own edr and SIEM I was using this https://github.com/manticoresoftware/manticoresearch instead of elastic or opensearch

[eternal mango]

At scale though, it gets stupid expensive

[terse dirge]

It's a lot faster and doesn't have the jvm overhead so it can scale better

[eternal mango]

Interesting

[terse dirge]

Ya, I feel with both elastic and wazuh is they intentionally make their code shitty so you're encouraged more to just pay for the cloud platform

[eternal mango]

Ok I gonna have to read up on manticore properly next week

[terse dirge]

It's really really nice

It runs amazingly in docker

And it allows for SQL queries and json queries

[eternal mango]

I mean so does Elastic kinda

but that's not the point

jvm overhead has always been an issue

You can pad out memory as much as you like

If you're running multi-node cluster then it's no problem

But damn

This is reading as pretty impressive

[terse dirge]

Startup times with elastic are also significantly slower than manticore too. It's not like a couple second difference because manticore starts up in seconds

[eternal mango]

I can see me getting distracted from my current project again.

[ornate ibex]

Good Morning

[eternal mango]

Oh no

I always know I've been up too late when I see Tejas

Morning @ornate ibex 🙂

[rose onyx]

Ceald you know about go.work yes?

[supple rain]

Please give me a boost with JET

[rose onyx]

Always nice to see the shift change 😂

[ornate ibex]

Yes, and especially during daylight saving for you guys.

[terse dirge]

No

[rose onyx]

Now you do, go read up on it.

[terse dirge]

Oh it's for workspaces?

[terse dirge]

Why lmao? Did I break something in my pr?

[rose onyx]

¯_(ツ)_/¯

I just got home I'm eating and I'll take a look

[terse dirge]

Had me worried for a bit lol.

[rose onyx]

It's a way to use local directories that haven't been published yet.

[terse dirge]

I'll probably check it out, thanks

[terse dirge]

All the pr really is just adding functions for getting team info and stats

[meager kernel]

Good morning

[sharp shuttle]

i just woke up too

lots of honking already here in india

rise and grind!

[muted olive]

you're in india?

I thought you were in US

[meager kernel]

He is

Idk why he's saying he's in India 😂

[muted olive]

bro is vibing

[sharp shuttle]

because its funny

[civic lance]

Why when I switch my laptop to Linux, my battery life has been better.☠️

Wtf does windows battery life even do

“Conserve battery” 😭

[supple rain]

By the way, I was always wondering why the boxes are always released at the same time; this puts those who live on a different time in a nervous position)))

[civic lance]

Wasn’t conserving shit

[ornate ibex]

I have brought this up several times

[lofty warren]

[sharp shuttle]

because winblows is spyware

[civic lance]

Windows got all the games tho

🥲

[sharp shuttle]

what?

download steamos

:/

2025 people dont know about steamos

been out since 2013

[meager kernel]

Unfortunately it does not run alot of multiplayer games

[ornate ibex]

WAIT WHAT?

[sharp shuttle]

like what?

[meager kernel]

And even in normal single player games, it requires you to do tweaking alot

[ornate ibex]

I can play games that I purchased on Epic games as well?

[sharp shuttle]

that has NOT been my experience at all man

[meager kernel]

Not everything is out of the box

[sharp shuttle]

tell me what games dont work

[meager kernel]

Battlefield

GTA online

[civic lance]

What games are u able to run?!

[meager kernel]

Valorant (that's a trash game anyway)

[ornate ibex]

I wanna know if RDR2 works

if so I'll ditch windows now

[meager kernel]

Online wont work

[ornate ibex]

idc

nobody is online these days

[civic lance]

Ehhhhhh

[meager kernel]

Only if you've bought a legit copy on steam

[ornate ibex]

I purchased it on Epic games : \

[meager kernel]

Pirated games also require alot of tweaking

[ornate ibex]

300 INR lol

[meager kernel]

Ehhh there's a 50/50 chance then

[sharp shuttle]

well yeah, because riot wants to install a kernel level root kit on your machine

[meager kernel]

Epic is not the type of company to actively go out of their way to support linux

[meager kernel]

Yea but there are other games too as I mentioned before that

GTA Online is one game I play with my friends

[raven rain]

Space Marine 2

[meager kernel]

Minecraft bedrock too doesn't work on linux, and me and my friends play that

[civic lance]

That’s sad

Is it that difficult to support Linux?!

[raven rain]

why does bedrock even exist

[civic lance]

Or companies just lazy

[raven rain]

they already have java edition

[meager kernel]

I have few torrented games that work out-of-the-box on windows but would require alot of emulation on linux

[meager kernel]

Unfortunately setting up Java multiplayer is hard

[raven rain]

no?

[eternal mango]

It's not hard

[meager kernel]

Don't you require your own server?

[eternal mango]

Yes?

Is that the hard part?

[meager kernel]

Yes

[raven rain]

you can just download the server jar file

[eternal mango]

You could run it on your own mahcine

[raven rain]

and run it

in CLI

[civic lance]

Mahcine

[raven rain]

there are tutorials for this stuff

[meager kernel]

Not that strong enough PC to run a minecraft server

[eternal mango]

Skill issue

[meager kernel]

Okay

[muted olive]

minecraft server? 👀

I've never played that game but what's this about it requiring you to run a server on your PC

[eternal mango]

As for Windows games under Linux.. Wine was a thing.. now it's Proton, and that shiz is damn impressive on what it can run

[raven rain]

thats if you want to play multiplayer

[eternal mango]

Yes there are some things it doesn't play well with

But compared to old days of Wine, it's 10000% times better

[raven rain]

you run a server and people can join it

[civic lance]

Can I run battlefield on Linux?

[meager kernel]

No

[civic lance]

That sucks

[meager kernel]

If you're talking about the latest one, no

[muted olive]

you run GUI on wine??

[civic lance]

The latest one

[meager kernel]

They have Javellin anti cheat

[civic lance]

wtf is that

[eternal mango]

The GUI what?

[meager kernel]

Doesn't work on linux

[muted olive]

like windows games

[civic lance]

Javelin anti cheat

[eternal mango]

I run Windows games on the Steam Deck

That uses Proton

[raven rain]

i run linux on wine

[muted olive]

ah

[meager kernel]

Most games are made with windows in mind
Linux is usually a second thought

[civic lance]

Imagine the entire pc market just switched over to Linux

[meager kernel]

Kinda hard to happen

[sharp shuttle]

people dont understand architecture translation layers

man

guys

[muted olive]

https://tenor.com/b6iLspcwFGS.gif

[sharp shuttle]

goml

[eternal mango]

Yes, but you can still run Windows games on Linux with these compatibility layers

[raven rain]

that would be a glorious day

[alpine pumice]

i run windows games on windows

[meager kernel]

On twitter, I've seen a game dev ranting about how hard it is to support linux games native

[eternal mango]

Skill issue

[civic lance]

Is it really that hard to support Linux?

[sharp shuttle]

i bet they use AI to vibe code their games

[raven rain]

no brath i think spontaneously dumping every windows pc ever and switching to linux overnight will have amazing consequences

[civic lance]

Then they will make malware for Linux Os

[muted olive]

like what

[rose onyx]

i would cry

[raven rain]

like windows ceasing to exist

[civic lance]

Has someone ever gotten their Linux computer affected with malware?

[sharp shuttle]

sometimes we need to tear down the shitty-built tower and start from scratch

[meager kernel]

Since every person has their own distro with own customisations, each have their own set of problems

Linux users were less than 10% of the player base, but made up 90% of the tickets

Few 100s in sale but more than 1000s in tickets

That's loss for the developer

[raven rain]

no more .NET bullshit

[eternal mango]

Regardless if games are written with Linux support or not, the compatibility layers that exist today basically eliminate that bondary

[meager kernel]

You can assume anything in order to justify yourself

[sharp shuttle]

^^^

[sharp shuttle]

I have developed games on every platform, that guys a moron

[civic lance]

For Linux support, or make it difficult?

[meager kernel]

@civic lance to answer your question, yes sometimes

[muted olive]

windows in itself is essentially a broken product getting more and more duct taped with each new version

[raven rain]

i can't play FighterZ online on Linux

[eternal mango]

I did say there were exceptions

😄

[raven rain]

ok but why must the exceptions affect me

[eternal mango]

Obviously they don't like you

It's a shame

[civic lance]

Ooh Linux users complain more compared to windows

[eternal mango]

🙁

[meager kernel]

Ehh I'll still stick with windows

[raven rain]

[rose onyx]

you have shitty taste in games? 🤔

[meager kernel]

I'm comfortable with it

[raven rain]

WHAT

my taste in games isn't shit

[civic lance]

Can I run arch raiders on Linux?!!!!

[eternal mango]

lol

Shots fired

[rose onyx]

[meager kernel]

Unless and until I find something genuinely pushing me away from windows, don't have intentions to switch

[eternal mango]

Anyway, I'm Windows too 22Kratos

[muted olive]

tetris ahh gamer

[eternal mango]

I'm just saying

[meager kernel]

Arc raiders? From ik, no

[civic lance]

Cyber?

[meager kernel]

I use VM

[raven rain]

i like Space Marine 2

[eternal mango]

The support for games running on LInux from Windows bins is SO MUCH better than it used to be

[muted olive]

prove it by doing the secret windows handshake with us

[civic lance]

U seem like a person to full on switch to Linux?

[meager kernel]

I tried Dark Souls Remastered yesterday

[eternal mango]

https://tenor.com/view/asleep-steve-ballmer-yes-meme-microsoft-gif-18627126

[meager kernel]

That game is pure fucking ragebait

[raven rain]

developers developers developers

can developers support Linux???

[muted olive]

caught in 4k

[raven rain]

only for myself

[muted olive]

#windowsforlife

[meager kernel]

Their choice in the end

[meager kernel]

❤️❤️

[civic lance]

Microsoft will continue to shove its agentic AI down ur throats

😂

[meager kernel]

Yk I genuinely hate Linux elitist
Who always keep pushing linux down your throat

[raven rain]

they should be taxed if they don't support Linux

[eternal mango]

All the hate

Use what is best for you

Why fight

[muted olive]

which is good for hackers in general. more stuff to break 😆

especially if AI becomes a part of the OS

[civic lance]

More prompt injecting

[muted olive]

indeed

[rose onyx]

sorry you dont like freedom 😛

[muted olive]

why do direct kernel syscalls to bypass stuff if you can just ask it nicely instead

[raven rain]

got nothing else better to do than to scream at jpegs

[eternal mango]

Sweet ok

OS WARRRRS

https://tenor.com/view/cartman-race-war-south-park-cartoon-animated-gif-5412137

[civic lance]

Microsoft does seem like the type of company to bake its AI into the heart of windows OS

[rose onyx]

-# hides gallon of gasoline

[meager kernel]

I use linux for work
Windows for daily driver
Simple

[civic lance]

Notepad has AI

[hoary nebula]

You are ai

[civic lance]

Soon file explorer will have AI

Nice

[muted olive]

"please help me find this file"

[eternal mango]

There are 2 rs in the word strawberry

[muted olive]

cause I'm too lazy to find it myself

[meager kernel]

Maybe the real AI is the friends we made along the way

[eternal mango]

Waits 20 minutes for the search index to update

[muted olive]

You are absolutely right

[civic lance]

Wait until discord implement AI, I’m calling it

[hoary nebula]

Windows is only good for 1 thing

[civic lance]

Games

[eternal mango]

An argument, it seems

[muted olive]

nah they'll probably implement ADS into the chat bar. watch this ad to send your next 100 messages.

[raven rain]

i like windows

[civic lance]

I don’t think they will

[raven rain]

but i wish linux was a pleasant experience like windows

[rose onyx]

@scenic maple GPT how many d in scrumdiddlyumptious?

[raven rain]

e.g. streaming on discord

[civic lance]

Download arch and put urself thru the ringer

[scenic maple]

2 ofc

[raven rain]

because streaming on discord on linux is terrible

[civic lance]

I think there are workarounds

[rose onyx]

wut? i do it just fine

[scenic maple]

i think he is gatekeeping linux

mad respect

[eternal mango]

"i do it just fine"

The single response

I do everything just fine on Windows

People do things just fine on Linux

[meager kernel]

Lmao

[eternal mango]

Everyone does things just fine on Mac

Fucking who cares

[scenic maple]

https://tenor.com/view/kekuwu-kekw-anime-gif-10260786903607553889

[raven rain]

when i stream simple counter strike 2 gameplay

[rose onyx]

ur mom g0blin

[raven rain]

on windows it looks fine

[civic lance]

Can we have an OS war

[eternal mango]

You wanna try to convince people to use what you want to use, go start a cult

ur mom first @rose onyx

[raven rain]

on linux however it looks like a peanut butter sandwich deep dive

[rose onyx]

😭

[muted olive]

Thanks for watching and be sure to tune in Saturday night at 7 pm for the next episode of OS Wars

[rose onyx]

odd 🤔 you on canary build?

[meager kernel]

Don't you ever feel like tearing your hair out when playing CS2?

[raven rain]

no

[meager kernel]

I honestly feel like getting a brain stroke every time I play a competitive match or premier in counter strike

It just fucking sucks at times

[raven rain]

back when i was doing this stuff discord also couldn't stream audio with video

and i had to use a third party client to get it to work

[rose onyx]

every now and then they push a dumb update, but streaming from canary is good.

[raven rain]

hm

[scenic maple]

https://tenor.com/view/made-by-clown-gif-4428586269206149108

[civic lance]

Ahhhhhh

Calculus become a mod

Since when

[rose onyx]

at least a year 😂

[civic lance]

That’s crazy

[raven rain]

i wonder if switching to linux will remove all the dust in my pc

[meager kernel]

It'll increase it

[raven rain]

bruh

[rose onyx]

no, but i will say it will

[meager kernel]

You'll also gain atleast 200 pounds

[raven rain]

no way im switching then

[meager kernel]

And get a neckbeard

[raven rain]

WHAT

i want 200 pounds

[rose onyx]

lies! 😭

[raven rain]

thats free money

[meager kernel]

😂😂

200 pounds in weight

[civic lance]

You not really missing out on much switching to Linux

[raven rain]

oh

[civic lance]

Maybe you’ll get to enjoy storing things locally on your computer, without an invasive one drive

[rose onyx]

you'll be free of microsoft

[meager kernel]

I mean if you're using a really old laptop or PC which just cannot run windows anymore, then I guess it's better to switch to linux

[raven rain]

demicrosoft

[meager kernel]

You can debloat windows, and disable one drive too

[raven rain]

no more telepathy or whatever it's called

i own my OS

[civic lance]

How tf you do that

[meager kernel]

If you can install Linux, I'm sure you're smart enough to run a simple utility and debloat windows and disable telemetry

[civic lance]

I tried turning off onedrive

[meager kernel]

Search "CTT Utility"

CTT is a big youtuber

[civic lance]

I never looked into it

[meager kernel]

He made a powershell utility

[lofty warren]

https://tenor.com/view/beautiful-tree-gif-2023-christmas-tree-marry-christmas-gif-182709482597025330

[meager kernel]

It opens a GUI in your powershell itself

[muted olive]

I wish there was WFS
Windows from scratch

[meager kernel]

Allows you to debloat everything

Completely

[civic lance]

Ahhh imma look into it

Sounds nice

[raven rain]

Windows Fucking Sucks?

[muted olive]

bro is h8r

[raven rain]

what do you think LFS is an acronym for

[muted olive]

Tried that once and almost "debloated" my antivirus 🤣

[meager kernel]

Linux Fucking Sucks

[meager kernel]

What antivirus are you using?

[raven rain]

protogent

[rose onyx]

Linux Freaking Slays

[fierce vale]

the thing is, you shouldn't take the option to use linux and other open source software for granted.. one day that option might not be there anymore

[meager kernel]

I use Defender for normal everyday and I have Malware Bytes for special scanning

[muted olive]

law of financial studies

[raven rain]

praise the machine god (microsoft)

[civic lance]

U saying magically one day every distro disappears

[muted olive]

Same as you, Defender. Thing is it runs all the time as MsMpEng.exe and almost removed it because I thought it was telemetry lol

then googled

[meager kernel]

Oh lol

[muted olive]

also I tried malwarebytes and uninstalled because it kept showing me ads all the fucking time

to upgrade

[fierce vale]

one day you might not be able to run your own software on your computer

[muted olive]

tfw your antivirus turns into adware

[raven rain]

why not tho

[civic lance]

Oh don’t give Microsoft ideas

[raven rain]

i own a commodore 64?

[meager kernel]

Interesting fact I learnt today

[lofty warren]

windows defender

[raven rain]

it runs BASIC just fine

[alpine pumice]

g0blin got some work to do

[civic lance]

The only “good monopoly”

[meager kernel]

Valve is peak

Love valve ❤️‍🔥

[raven rain]

valve wont do anything about cs gambling though

[civic lance]

Why would they

[raven rain]

it makes them $$$$$

[civic lance]

It prints them money

[meager kernel]

gambling good

[alpine pumice]

https://tenor.com/view/jesus-loves-you-te-ama-gif-10025501

[civic lance]

When I was a little kid, I used to be scared of gambling. Cause I thought I’d magically get addicted to it

[meager kernel]

Now you're an adult, magically addicted to gambling

[civic lance]

I tried one day gambling and was like meh

[meager kernel]

Yk what I love, that steam has HUGE sales every few months
And almost all games go 90% off
And you can buy expensive AAA games for not that much money

[civic lance]

I did sports betting, a couple times.

[meager kernel]

Best thing about Valve

[civic lance]

How do they even pull that off

[meager kernel]

I'm saving up till new year sale

Then I'll buy games in bulk

[fierce vale]

just think about phone operating systems for example, you need to jailbreak them to get full access on your device that you own and paid for

[civic lance]

Ooh yeah Google tried to restrict what you can and cannot download recently

Then they revert because of ppl complaining

But they’ll slowly go back

Becuz they like control

“Don’t be evil”

[civic lance]

This was for android phones

[meager kernel]

Yk what sucks?
The fact that I can afford games now, but have no time to play them

[alpine pumice]

cuz you're in general all the time

[meager kernel]

[eternal mango]

Hahhhh found it, this is about as much cheer as you'll get from me over xmas.. I can't remember who I was trying to find it for, so I'll just dump it here instead. I AM XMAS TREE

[alpine pumice]

haha that's actually a great photo

[eternal mango]

It took soooo long in a studio for them to set everything up

I volunteered to be the model for it, god knows why

But it's a funny photo 😄

[lime trout]

it was a very bright idea

[alpine pumice]

i want one fr

[sick gate]

Could you look in #cert-holders

Pls

[rose elk]

It took me some time to assemble; it’s a very nice decoration for the desk 😄

[sick gate]

Or any mod

[alpine pumice]

On it

[sick gate]

Ty

[pearl spruce]

HTB bot got the blood in Xct machines for what? 🥀

[lime trout]

usually means it went straight to retired

[pearl spruce]

Ah interesting, then I have a question if you don't mind, why it went straight to retired if accepted?

[lime trout]

xct might mean it was from vulnlabs

[pearl spruce]

Ohh okay, thanks

[meager kernel]

Majestic beard

[cerulean bloom]

yooooooooooo

I want one lol

[pearl spruce]

looks super though.

[cerulean bloom]

I must have it

[pearl spruce]

Delivery fees are more expensive than the product 🥀

[cerulean bloom]

73 pieces for 40 dollars (without shipping costs)
hmmmmmmmmm

[terse dirge]

people be slaving away with college work, twin I don't do my college work I contribute to my own projects and others instead on github

[pearl spruce]

cheaper to create it from scratch.

[cerulean bloom]

true

[pearl spruce]

Actually, HTB is a brand like GUCCI, the price depends on it, not in the product itself.

[sly aurora]

Hmmm, I am now inspired to have a pic done like this, but just weave the lights in my beard tbh

[eternal mango]

Wonder if that's including import fees or something

No idea, but ouch

[sly aurora]

Its a very good inspirational pic lol

[eternal mango]

To the UK delivery is £20 even.. doesn't seem right

[sick gate]

The shipping is busted

[cerulean bloom]

the lego set?

[eternal mango]

I'm not involved in the swag store, so I don't know either way

but I'll mention it internally either way

[sick gate]

Comes quick though

[eternal mango]

https://tenor.com/view/archer-phrasing-gif-25791366

[green kite]

But the better question is, do you get free swag

[eternal mango]

Not from the store no lol

I'm sure they'd send it, but I have no god mode code

[green kite]

😄

[neon zealot]

#fortresses

[silver forge]

well, the UK is an insignificant remote island

[green kite]

Getting kids ready, be back in a bit

[neon zealot]

can i get get nudge on

context

[terse dirge]

#fortresses

[eternal mango]

https://tenor.com/view/what-wut-pepe-the-frog-shocked-surprised-gif-15389416553763135269

[neon zealot]

@terse dirge have u done it ceald

its been dead for a while

the channel

[muted olive]

Looking fire

[bleak helm]

What do you drink?

[rose onyx]

it says you have a bright future ahead of you.
that will be $40.

[cerulean bloom]

[subtle plover]

Cry

[hoary nebula]

you first

[subtle plover]

Already crying

[hoary nebula]

Friday-1

[bleak helm]

How can i make coffee

[rose onyx]

no cry vro

[subtle plover]

Sure

[rose onyx]

ty

[subtle plover]

https://tenor.com/view/of-course-i-am-i-cry-all-the-time-nowadays-gif-5077411642033249829

[muted olive]

It says you're a traitor

mac user

[green kite]

man lower back pain sucks

I put my kid in his chair and my back went "DFWDFEWTWERQWDQEQWRQWRQW enjoy this new experience"

[eternal mango]

Know that feeling, not had it for a long while, but fffff

You cannot compare it to anything

[green kite]

I then had to get back home in the car

that was an adventure

good thing its a 2 min drive

[eternal mango]

I'm pretty tall, and worked a repetitive job as a kid which didn't help. Once I got out of that things improved, but still needed to work on core strength to avoid those spasms

[green kite]

yeah :/ I need to get back to the gym

my knee's been keeping me from going a bit

[sturdy thistle]

morning

[green kite]

heya mick

[eternal mango]

Denied

[sturdy thistle]

ok back to bed

[green kite]

boss told you so

[eternal mango]

🤣

[sturdy thistle]

night

[eternal mango]

Wait wait, comedy retract, comedy retract

Anyway I'm not his boss

[sturdy thistle]

true

more a friend

[green kite]

then you ran out of luck

get out of bed

[eternal mango]

🫂

[sturdy thistle]

already in front of PC

[green kite]

make your friends a coffee 😄

[sturdy thistle]

i accidentally grinded the wrong beans yesterday lol

[eternal mango]

Man I'd love a coffee

Sucks for me

[green kite]

kidney beans are not to be ground

[eternal mango]

I actually dreamt about buying a coffee machine last night Mickhat

It's your fault

and that's fine

[green kite]

can't go wrong with coffee @eternal mango

[eternal mango]

I'd LOVE a stream of good coffee

[sturdy thistle]

i have 2 differnt coffee beans here and programmed the coffee machines timer

[green kite]

Hold on tight
This program is currently suspended

c;monnnn

[sturdy thistle]

dew it xD

[green kite]

I have a draft ready to submit

[sturdy thistle]

buy a lelit machine

[sturdy thistle]

maybe one day i can do a good video/short

[eternal mango]

No not like that

[sturdy thistle]

oh]hhhh

[eternal mango]

Wait

[sturdy thistle]

to drink

[eternal mango]

Nvm I'm not gonna say that

[eternal mango]

Yes

[sturdy thistle]

https://tenor.com/view/coffee-gif-14866884794849307214

[green kite]

that would be nice

[eternal mango]

Glarglblargl readyfortheday

[terse dirge]

https://tenor.com/view/cat-meme-silly-cats-mango-mango-juice-monster-energy-gif-9451278639858834322

[green kite]

heya ceald

[terse dirge]

wassup sparkling

[green kite]

nt much

[sturdy thistle]

time to preheat the machine

[green kite]

messed up my back this morning

hope the painkillers will help soon haha

as I gotta go swimming with kid in an hour

[terse dirge]

oof

yo Mick, are you able to access your n8n outside of your local network? I'm trying to set that up for my instance right now lol and was wondering if you've done it before

[green kite]

new macbook arrives today

gonna be fun to set up

[sturdy thistle]

yeah i used cloudflared

[terse dirge]

you should install void linux with niri on it

oh ok nice

I'm using nginx and docker lol. I have it working locally

[subtle plover]

Theres a stone in my coffe machene and i am not certified to get it out

[sturdy thistle]

lol

[muted olive]

can relate

dont have back pain but

[subtle plover]

Ohh nice mac is better then windOS btw

[muted olive]

imagine walking on a cold marble floor with the soles of your feet all cut up and bleeding

thats me

[green kite]

I already have a mac studio, but because I gotta go client a fww times a year and my old macbook 's battery died, I gotta order a new one

lol

but yeah mac is awesome

[subtle plover]

I can go with battery for 3 days

[green kite]

yeah how cool is that

[terse dirge]

nevermind I found the issue

[supple plume]

.

[lofty warren]

[hoary nebula]

Chat

a bowl is most useful when it's empty

[terse dirge]

[eternal mango]

What if I'm hungry?

...and now we go around in circles for 30 minutes

[cerulean bloom]

then you put stuff in the bowl

[eternal mango]

Too much effort

I'm a lazy hungry person

[sturdy thistle]

you can buy this one 😂

[eternal mango]

I was trying to be funny 🙁

Damn it stop tempting us with your coffee

[lofty warren]

[scenic maple]

mickhat is never to far away from a coffee party

[open vigil]

Thursday

thursday morning

[visual hollow]

Give me

Thanks

[sturdy thistle]

machine should be heated up now

[eternal mango]

What're you heating it with, a freakin candle?

[ornate ibex]

lol

[sturdy thistle]

i now have a dual boiler machine where i can control the temp of the coffee boiler

its nnot like put it on and get coffee

[eternal mango]

Uhoh, he's gone technical

I stepped over the line

[sturdy thistle]

so back to bed

[eternal mango]

[severe falcon]

what's up.

Nice banner, Sir g0blin.

[sturdy thistle]

how's the drone?

still alive?

[eternal mango]

Thanks, I don't think I've ever changed it 🤣 Photo of some spider webs on the grass in a graveyard of a church in the marshes in Kent somewhere. Lost the original photo unfortunately.. but I still like it. How're you?

[eternal mango]

Still alive 😄 Lots of fun flying around local parks and woodlands

Almost crashed it a few times, but somehow managed not to

[severe falcon]

Your welcome, the photo is very good looking. I hope you find the original one. 😄

I'm good and very busy.

😄

[eternal mango]

Busy can be good

[cerulean bloom]

@austere sinew daily ping! how's your new home?

[subtle plover]

@austere sinew do you really eat 30grams of cereal as breakfast

[cerulean bloom]

https://tenor.com/view/sml-jeffy-honey-nut-cheerios-pouring-cereal-cereal-gif-27085029

[proud moth]

no ping pong very busy bong

[brazen crown]

@austere sinew how did you like the 6 sieverts of radiation for breakfast

[proud moth]

there's nothing like a good stream of high energy gamma rays in the mornin'

[scenic maple]

https://tenor.com/view/cat-eat-mukbang-eating-food-gif-10622760897608986358

[muted olive]

Was typing out a bug report and it randomly logged me out

my 3 page report lost

https://tenor.com/nRDzFqELZV2.gif

:(

have to type it all again

[eternal mango]

That one time when that "are you sure you wish to navigate away?" prompt would be helpful

Had that before, you submit the form.. you see it redirect to the login route... "NooooOOOOO"

(yes those are two totally different scenarios)

[feral jackal]

https://tenor.com/view/twerk-cat-dae-cat-gif-24200690

[hoary nebula]

L

[woven plume]

Any pentesters in the chat

where are all the p1/criticals hiding in web apps these days

and don't say react2shell xD

[eternal mango]

What kind of question is that

Like, do you think someone knows a secret to gaining criticals left right and center, and they'll just tell you here?

[woven plume]

?

sheesh

harsh

[eternal mango]

Well, it was a silly question tbh

[woven plume]

let me rewrite the question

[warped plank]

RCE hidden in object deserialization php filter chain memory bucket shell code exploitations

[woven plume]

What are some common critical findings in modern web apps these days

[warped plank]

but even those are well patched

[woven plume]

I'm a new pentester and I've yet to hit a critical

it's been months of grindings for meds/highs

internals/externals/SE easy, but web apps?

nope

There are no silly questions btw, just silly answers 😉

[eternal mango]

Hey

that's my line

[woven plume]

😄

[eternal mango]

😄

[woven plume]

but seriously are criticals even real in web apps these days?

[warped plank]

and yet you still managed to find a silly question 😛
-# jk

[eternal mango]

I'd say they are still real yes

[woven plume]

hmm

[warped plank]

probably but they very rare

[eternal mango]

But very difficulty to find, given how many eyes and hands have gone over the programs

BUT, they do still exist

[woven plume]

I need trophies 😛

[eternal mango]

Hell I found an RCE in something over a decade old and public for that long

I just got lucky

But it's not all about luck

[woven plume]

So it's a skill issue 🙁

[warped plank]

All you gotta do is have no life and pick and prod at the tech like a tech researcher. HTTP 1.1 is still used for a majority of the web despite it being 4 versions behind. It's gotta be vulnerable to something.

[eternal mango]

You need to be thorough, and stubborn.. persistent..

[warped plank]

You laugh at that but I'm right

[woven plume]

You are right

[eternal mango]

If you have a target, don't approach it as a tester

Approach it as a user

Use it as it is supposed to be used

Capture your traffic

Then go back over that session, and look for interesting endpoints, test for idor, injection, xss

[warped plank]

there was a recent talk at defcon about http 1.1 desync

[eternal mango]

It's about building up your attack surface on your target

[woven plume]

i think idor and xss is mostly meds these days tbf

[woven plume]

where I work a 'high/crit' is like full pwn only

it seems

[warped plank]

*RCE

full pwn is technically illegal

[woven plume]

depends on scope I guess

[eternal mango]

I said injection too

[woven plume]

yeah injection is different but I've yet to hit something decent in a modern web app with injection

[eternal mango]

I meant that as covering not just sqli, but command etc

Well you've yet to hit it

but it's there

[woven plume]

hmm yah

[warped plank]

imagine finding command injection In 2025. That'd be like winning the lottery, now imagine finding one in apple, you literally win more than the lottery

[woven plume]

Do you think it's better to think "Okay i'm going to find sqli or idor today"

or just keep going until you find leads and try and chain from there

[eternal mango]

I literally did

[warped plank]

It's definitely better to focus on one type of vuln and testing a lot of targets

so you can get familiar with the vulnerability, target rarely matters cos majority of the internet use the same techstack give or take a couple frameworks

[eternal mango]

Never assume a mistake has not been made

[woven plume]

i insist they always have been made even before I look at the targ :p

[warped plank]

frameworks just make sure that the mistake isn't easy to spot though.

[woven plume]

I was a dev for years before cyber and I can assure you it's a habbit you can't escape xD

[eternal mango]

Yeah I'm not saying it's easy

[woven plume]

my fave are creds in //comments

[eternal mango]

But there will always be, and still are vulnerabilities out there

[warped plank]

if you find this... I highly doubt that that target has a bbh or vdp...

[woven plume]

Most pentesting targets I get do not to be fair

and we charge like 2k per day on engagements so it's surprising vdp isn't more common

[eternal mango]

Just because someone has gone over a target before, or hudreds have gone over a target before, it doesn't mean they found everything

[woven plume]

Definitely agree

most testers call it a day with a high/crit

[eternal mango]

That RCE 0xW1LD.. it was in a repo, where the source was public, and hosted on a .gov domain, for well over a decade

[woven plume]

damn

[eternal mango]

Sometimes you get lucky

Sometimes you strike out

[woven plume]

Sometimes you just try and pad the report xD

[eternal mango]

I'm no 1337 h4x0r

But persistence and curiosity is key

[subtle plover]

[warped plank]

I'm curious now, you allowed to disclose?

[eternal mango]

They don't publish unfortunately

[warped plank]

Sadge, but it was command injection?

[eternal mango]

Yes

[warped plank]

massive payout?

[muted olive]

USDA?

[eternal mango]

No payout, .gov target

[subtle plover]

Bro has many questions

[woven plume]

was it a bounty or pentesting?

[eternal mango]

and that target didn't even provide a letter of recognition

It was USGS

[muted olive]

only NASA does that 😛

[woven plume]

wait this is a thing

[muted olive]

admittedly so does harvard but they've paused their VDP

[eternal mango]

Yeah, I have one pending for resolution with them

[warped plank]

Ohhh, ok fair enough

[eternal mango]

Got a couple others

[eternal mango]

Yes

[muted olive]

yeah, NASA does it

[eternal mango]

The .gov top level domain is very permissive with testing

[woven plume]

Damn imagine a NASA letter of recognition, I'd put that on my wall and frame it :p

[warped plank]

Although ngl USGS probably has some sneaky info about underground explosive tests

[eternal mango]

Hahah

[muted olive]

I got tired of them after four or five reports 😆
Triagers don't read with their eyes open the first time and I have to explain everything over the second time

[eternal mango]

But no shot

[warped plank]

@muted olive how many you have of em now?

[eternal mango]

nasa.gov is a good target to practice on

[lofty warren]

[muted olive]

3

[eternal mango]

Just read their scope

Stick to it

[woven plume]

Wouldn't it be diluted af by now?

there are only so many doors

[muted olive]

not at all

[warped plank]

you'd think but no... massive target

[woven plume]

ok checking now

[muted olive]

if there are 7000 reports, surely there's room for one more

[woven plume]

is it vdp or bounty

[muted olive]

thats the mindset

[muted olive]

vdp

[eternal mango]

Massive surface, and my last ticket against them was a week or so ago

It's the practice that matters

Knowing how to stay in scope

[woven plume]

Do we get 'duplicates' with vdp like we do bounties?

[eternal mango]

Using your tools

[muted olive]

yep

[woven plume]

I see

[muted olive]

@eternal mango I found a P1 in NASA the other day but... duplicate 😬

[woven plume]

You'd think with vdp they'd have more resources to fix issues

[muted olive]

First duplicate too

[woven plume]

Can you disclose for time saving?

[eternal mango]

You underestimate the size of their surface

[muted olive]

Disclosure is allowed yeah

[eternal mango]

They honestly have done a very good job

There's just so much, they can't have fixed everything

[warped plank]

Mate, NASA runs on a tiny percentage of US citizen taxes... it's impressive they can even send tech into space.

[eternal mango]

..without enough persistence, I reckon there will be plenty more there for some time.

[woven plume]

Also what's their internal cyber team like? I thought they were engineer focuses and don't have time for infosec as much as we'd hope

[eternal mango]

I've no idea to be honest

Cybersecurity is not my profession

[woven plume]

Yeah my thoughts exactly, they're 100% effort on putting metal into space

but you have a cool little box

[eternal mango]

Software engineering is my background

Security is a hobby

[woven plume]

That's how we all start 😛

ah fair

[warped plank]

Probably not public information.

[woven plume]

Yeah I doubt it's more than much of an 'it team'

[warped plank]

Sir, I'll have you know I hate software engineering my background is in film and animation

[woven plume]

I've been a software eng for 10 years, I also hate software engineering 😄

[warped plank]

it's backed by gov so probably better than you think. I wouldn't be surprised if palantir is up there as a contractor

[eternal mango]

I think you'd be surprised how many people are there tbh

Even in a small enum on a target where I could hit their directory

The number was large

[woven plume]

Probably built on internships though

[eternal mango]

I don't think so

[woven plume]

not dissing or anything just I imagine there main focus is space space space

[eternal mango]

Yes

But space needs tech

and tech need pooters

and poters are a target

[warped plank]

all businesses have a goal but you can't generalize that they'll use up all their budget for that

[woven plume]

This is true

Actually doesn't US have some compliance for cyber, like they MUST invest x amount into security for any gov org

[warped plank]

willing to bet a massive part of NASA's budget is just for plumbing and ventilation maintenance

@severe falcon

[woven plume]

whois

[shy mulch]

blinded is hard af

[eternal mango]

My TLDR would be, find a target, acknowledge the scope, explore it as a user of it would while documenting the traffic, and prod

[warped plank]

he's lurking in chat

[woven plume]

we have a mutual ^^

[warped plank]

He's friends with everybody, everyone has a mutual with him, I have 14

[sturdy thistle]

@austere sinew

[neon zealot]

#fortresses i need help where is someone who has done it

[shy mulch]

:Wave:

oops

-aura

[woven plume]

So but like do you think the main focus is RCE still for crits in web apps? or is chaining the way to go?

[neon zealot]

https://tenor.com/view/epic-emoji-fail-failure-okina-gif-27143771

[woven plume]

in my opinion: user enumeration + zero rate limiting + weak pw policy == critical

but where I work that is 3 mediums xD

[eternal mango]

If you focus on one specific type of vulnerability, you will mis many more. Chaining vulns in many bounty programmes will get your submission disqualified

[neon zealot]

[warped plank]

How's the coffee journey going?

[neon zealot]

@warped plank have u done context

[sturdy thistle]

still figuring out 😄

grind size etc

[warped plank]

I don't touch fortresses

[woven plume]

I haven't heard of the dq thing, I thought if we chained a few we just report the highest sev and explain the chain?

[neon zealot]

😭

[woven plume]

atleast this is the case for most of integriti

[gray wraith]

oh? why is that?

[neon zealot]

who here has touched fortrress

[severe falcon]

[severe falcon]

.

[eternal mango]

It depends upon the program scope

But 95% state if you find a vuln, you're top report it, without attempting to use it to further another

[neon zealot]

i also have 11

[warped plank]

Yeah gotta perfect the grain size and weight to get the perfect timing and crema.

[eternal mango]

To escalate

[neon zealot]

[eternal mango]

Please someone correct me if I'm wrong

But that is a thing, right?

[woven plume]

idk i've not heard of that

[warped plank]

It's a thing

[woven plume]

interesting

[eternal mango]

How have you not heard of it

[woven plume]

I'll keep in mind

[eternal mango]

Have you read bounjty scopes?

[severe falcon]

Oh, nice to see.

[woven plume]

yeah i read the target section

😄

[neon zealot]

how is u simon long time no see

[severe falcon]

alive.

[warped plank]

But if you find another vuln independently and just so happen are able to chain it...

[neon zealot]

same here

[eternal mango]

🤷‍♂️

[neon zealot]

https://tenor.com/view/loading-wtf-ruocgiff-gif-25631449

[eternal mango]

It depends is the answer

I've seen people do that, and win big

[neon zealot]

the lord himself is in chat today

wow

[eternal mango]

But I would assume there are as many who have tried, and been shut down

[warped plank]

Btw @sturdy thistle made a coffee for my colleague yesterday, they wanted oat milk so I said it'll look like ass but it surprisingly looked good

[woven plume]

some programs I've done explicitly say "Do not submit multiple findings for chained vulnerabilities"

meaning they just want it explained in one

[eternal mango]

If it's against the scope, then you risk being slapped

[neon zealot]

dope i would drink it man

[eternal mango]

All depends on the scope and restrictions, maybe I've just seen more limited scopes

[neon zealot]

i havent drank milk since birth but i could drink it @warped plank

[woven plume]

Coffee in a glass cup is 1337

[sturdy thistle]

looks good

[warped plank]

latte's are usually served in glasses

[woven plume]

yeah to be fair I genuinely look for * scopes where possible

bigger the better

[warped plank]

except when they want a stupid version of a latte: magic

[eternal mango]

.gov.uk have a wildcard, but majority are now on Drupal and up to date

A few odd jobs about

But very few remaining

They have been moving many across from older setups to their unified drupal template

[woven plume]

To be fair the entire bounty game is getting harder every day

[warped plank]

drupalgeddon 4 when?

[woven plume]

they've done their job that's for sure

[eternal mango]

And that''s our job

[warped plank]

been several years and we haven't had a new version of drupalgeddon

[eternal mango]

To make sure they do their job

[warped plank]

which is to make our job harder

[eternal mango]

The eternal game of cat and mouse

[woven plume]

Best game 😄

But change of topic, if anyone is thinking of getting into pentesting and that curiosity is there? Please do... I've been pentesting/red teaming for about 3-4 months now and I've never been happier with work in my life

like it's no longer work to me

[warped plank]

man I really should go back to grinding cyber, but after work my feet and back will kill me if I don't stretch and lie in bed for a few hours

[woven plume]

I wake up early and get excited to get online ^^

Coolest job ever lol

[warped plank]

astronaut

[eternal mango]

Nothing like a good puzzle

[woven plume]

and btw I started here too with HTB and THM