general

[scenic maple]

where are you primarily hunting now

[exotic pendant]

Bugcrowd

[scenic maple]

bc?

[exotic pendant]

is my main

[scenic maple]

ayy noice

[exotic pendant]

I'm already top % on BC

[west venture]

Have you ever tried criminal activity?

[scenic maple]

h1 needs to get their stuff togthere

[graceful pendant]

https://youtu.be/BGgaZ66-hPA?list=RD3LGdFKIXr9I

[feral jackal]

I did

[scenic maple]

every now and then i see people move away

[exotic pendant]

They outsource all their support

[scenic maple]

h1?

[exotic pendant]

yeah

[scenic maple]

💀 bro wtf

they make so much money

why cant they hire support

[exotic pendant]

Cheap comes with cheap support

[feral jackal]

I can be

[scenic maple]

😔

[mystic harbor]

alr get to work

[exotic pendant]

It's Friday

[feral jackal]

witch one

[open vigil]

https://tenor.com/view/wizard-cat-wizard-cat-by-demonwolf-mage-cat-magic-cat-gif-2835561615176791073

[sturdy thistle]

@austere sinew daily ping

[exotic pendant]

1 major bug today

i can do it

[feral jackal]

know your limits

[open vigil]

not very motivational

[mystic harbor]

are u wolo in disguise

[west venture]

Just fuzz until you find something

[sturdy thistle]

wolo answers more nicely 🙂

[feral jackal]

who is wolo

[exotic pendant]

🤮

[mystic harbor]

yea

[graceful pendant]

https://tenor.com/view/wololo-age-of-empires-empires-szaman-shaman-gif-21642499

[feral jackal]

this is not nice

[exotic pendant]

Maybe I'll work on a new VM Escape

[mystic harbor]

so you gotta do 2 jobs that dont pay and study for 2 exams while also completeing HTB labs so what u choose

[sturdy thistle]

nice

[west venture]

I been coding for the past 12 hours straight

[feral jackal]

yes I like that

[exotic pendant]

and I've been sleeping

[sturdy thistle]

@exotic pendant teach me finally

[mystic harbor]

The jobs are different btw one is tech other is art

[exotic pendant]

My blog will come soon

[west venture]

sleeping is for betas

[exotic pendant]

then call me the betaist

[sturdy thistle]

teach in dm man

[open vigil]

who is betas

why does he get sleeping

only him

[feral jackal]

what is the second job then

[sturdy thistle]

😂

[feral jackal]

no I don't like art

I am art

[open vigil]

you aren't

[west venture]

Who is ab7v?

[feral jackal]

did you know them or should I art them for you

[open vigil]

def not art

someone is evaporating

[mystic harbor]

💀

[west venture]

ovulating

[feral jackal]

ha

[open vigil]

where is echoes bro

[sturdy thistle]

i mean i blocked him

[open vigil]

chat is not chat without him

[sturdy thistle]

and i hope he will not try to push me 🙂

[green kite]

you blocked echoes?

[sturdy thistle]

ofc not

[feral jackal]

hi

[sturdy thistle]

@supple plume hello

[green kite]

hello

[west venture]

https://tenor.com/view/pool-prank-children-plash-push-gif-17659997

[feral jackal]

hhmmm who is that

[open vigil]

what did you do

[scenic maple]

https://tenor.com/view/cat-eating-watermelon-watermelon-cat-eating-cat-kitty-gif-2333377029565336946

[west venture]

When am I getting blocked mickhat

[feral jackal]

me?

[green kite]

thats bvecause youre a zatlap

[feral jackal]

agree

[green kite]

Idk

[graceful pendant]

https://youtu.be/xWlrOwLlQYY?list=RD0UI6Rt3Tl0A

[mystic harbor]

@feral jackal what do u do in russian forums?

oh damn

nvm

[sturdy thistle]

long weekend ahead

[eternal mango]

It was more than just a UI overhaul, and yes there may still be things to do. What the team has achieved will allow them to go back into feature development mode in the new year.

Feel free to /feedback

[open vigil]

chat who is good with pwn and rev

[graceful pendant]

Heyyyyy g0bbo

long time no chat

[eternal mango]

Hey, how're things?

[graceful pendant]

Doing well and yourself

[sturdy thistle]

but please provide good feedback and not just "It's Trash"

[eternal mango]

Not too shabby thanks

[graceful pendant]

A weekend project oneshot I did turned into quite a project

season 9 had to take a backseat unf.

[eternal mango]

Oh yeah? Cool! Anything you can share?

[graceful pendant]

yeah sec ill shoot you a dm

[sturdy thistle]

@austere sinew wakey wakey

[graceful pendant]

https://tenor.com/view/wololo-age-of-empires-aoe-wololo-party-gif-14308275

[eternal mango]

Might have to dash as daughter arriving soon

But will check in 🙂

Speak of the devil

[sturdy thistle]

https://tenor.com/view/problem-child-movie-problem-child-junior-healy-michael-oliver-devil-gif-24579798

[eternal mango]

😄

[exotic pendant]

😄

[eternal mango]

You should see her Halloween outfit from this year, it was great

[sturdy thistle]

i'm curious now 😄

[scenic maple]

@lilac cipher

[heady sage]

Jesus why does everyone in the bbh community think im a guy

[sturdy thistle]

hey miss

[heady sage]

Hey Micky

[sturdy thistle]

i thought it first too tbh

[scenic maple]

everyone in bbh community thinks i am a cat

https://tenor.com/view/kekuwu-kekw-anime-gif-10260786903607553889

[sturdy thistle]

but actually, it does not matter at all

[heady sage]

It really doesn’t

[sturdy thistle]

you have good and awesome knowledge

[green kite]

never crossed my mind

[green kite]

👋

[scenic maple]

so what did you think

giraffe?

[green kite]

red panda

[heady sage]

Oh hey! What’s up?

[sturdy thistle]

better pretend to be a guy or else your DMs will be flooded

[scenic maple]

thats close enough to be called a cat

[green kite]

the ceiling

you?

[scenic maple]

https://tenor.com/view/red-panda-roter-panda-cuddle-attack-fun-playing-gif-22074657

[sturdy thistle]

fight back golam

[heady sage]

Oh nothing much just going through CWEE

[green kite]

red pandas are cute

[sturdy thistle]

good to see normal users here

[green kite]

nice

[heady sage]

was able to find a zero day in a pdf generation library

So that was fun

[green kite]

nice

CVE soon then

[heady sage]

Hopefully

I’ve never felt this good in my life

[exotic pendant]

[heady sage]

I’m on my path to catch up to you lmao

[exotic pendant]

Almost there

My kid tried to catch the tooth fairy last night but the phone fell over during recording

[heady sage]

Lmao

[terse dirge]

go back to bed @exotic pendant

it too early vro

[exotic pendant]

I'm about to gym

[feral jackal]

how did you find me?

[native plume]

So that's when he pinged the 4 of us? 💀

Mobile notifications are so handy

Now it's gone

So am I

[scenic maple]

its not possible

and probably wont be

i liked the old one too

[supple plume]

Hi

[mystic harbor]

[feral jackal]

admit it now

[mystic harbor]

I was just curious

so I dig

[feral jackal]

dig into what

yes

I have to be ready

[mystic harbor]

YOU

[feral jackal]

like my computer?

[feral jackal]

ha

[marsh viper]

Hi everyone! My name is Gh0stIsR00t.
I’m learning cybersecurity and currently focusing on pentesting & web security.
I use THM/HTB for practice and I want to improve my skills and connect with the community.
Happy to be here!

[feral jackal]

I am happy too

[marsh viper]

Thank you all of you guys to appreciate me I am currently preparing for junior pentester career

[feral jackal]

that's amazing

[marsh viper]

Hi everyone, I need some guidance.
I’m currently learning penetration testing, but I cannot afford a paid tutor or mentorship right now.
Can anyone please suggest high-quality FREE resources, roadmaps, labs, or communities that can help me learn effectively without spending money?

I'm specifically looking for:
• Pentesting learning resources
• Web security learning resources
• Practice labs (free or affordable)
• Any beginner to intermediate roadmap
• Communities where I can ask doubts

Any help or recommendations will be truly appreciated.
Thanks in advance!

[muted olive]

hi

[meager kernel]

You're not active nowadays

[muted olive]

Yup have pre boards going on

[meager kernel]

Damn how's it going?
Studied well?

[muted olive]

yeah going good, 3/5 done

I have the weekend for physics

[meager kernel]

Good luck man

How's jee prep?

[muted olive]

Kind of on hold for now but it'll start again after the boards

pre boards I mean

[meager kernel]

I see
That's nice, do your best

[muted olive]

At least the NCERT stuff will be solid then

[muted olive]

ty

[meager kernel]

College life would be easy for you most probably

Since you already have alot of knowledge

[muted olive]

Doubt it. Not in the first year anyway, I suck at things like physics and chem lol

[meager kernel]

Yea 1st year might be hard

Cause of physics chem

[muted olive]

I'm debating joining a IIIT if I can

since they dont have those stuff there

[meager kernel]

Do you have any connections in cybersec industry?

Through family

Or any friend?

[meager kernel]

Nah, join a college with cybersec degree if you can

[muted olive]

mmm not much tbh. Just one

[meager kernel]

Can you apply for internship or job through them?

[muted olive]

Wont make much of a difference tbh, the syllabus is very shallow. Studying normal CS will be the same

[muted olive]

Might consider it in the future

[meager kernel]

Fair point

[muted olive]

Like I said I know just one person in the cybersec industry and that is a friend of a father's friend

[meager kernel]

I'll suggest that you take an internship in the first year itself

In cybersec

[muted olive]

Yeah, I've been thinking about this and will mostly do that

[meager kernel]

It'll help alot in the future
You might get placed in that company itself

[muted olive]

I did have a few people tell me that internships from first year raise a few red flags with recruiters but I think in security you need all the experience you can get lol

[meager kernel]

Why would it raise red flags though

You're a teenage prodigy in cyber and you're using those skills to get employed

So?

[muted olive]

I guess because they dont believe that one would have enough knowledge/skills to take on internship

[meager kernel]

Huh

You have the necessary skills

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[meager kernel]

Your work would be an evidence of that

[muted olive]

Yeah I know I might but thats the general sentiment is what I heard

Might be different though

[meager kernel]

Nah, go for first year internship

It'll be good

[muted olive]

Yup. I most likely will

Anyway the people who told me about the red flags work in different industries lol

So things would probably differ

[meager kernel]

In my opinion, if you can skip college altogether, you should, IF you're okay with missing the college experience

[muted olive]

nah, I want the college experience

besides degree never hurts

[meager kernel]

Alright good enough

[muted olive]

then there's also the societal expectation 😂

[meager kernel]

College is fun, but when exams come along, that's boring as hell

[meager kernel]

Oh yea that too

[muted olive]

oh yeah for sure

[meager kernel]

If I could've dropped college, I would, but ofcourse family

[muted olive]

just hope it isnt as hard as jee

[meager kernel]

My father even wants me to do Masters in cybersecurity

But I feel it's useless

[muted olive]

masters is good actually

[meager kernel]

I don't wanna study more and more

[muted olive]

masters is just 1 year program anyway

or 2

[meager kernel]

But what will they teach me that HTB or any internship won't

[muted olive]

they'll give you a shiny piece of paper

[meager kernel]

It's a waste of money
Plus I dislike the exam system

[meager kernel]

Gand marwaye degree

I genuinely hate giving exams for multiple days at end

[muted olive]

Other countries' entrance exams are easy tbh

[meager kernel]

Dude
They're way better than Indian ones

[muted olive]

some people I know are going to hong kong/singapore for bachelors

[ornate ibex]

u must be intelligent

[meager kernel]

India has this fuck ass JEE system which makes everyone study physics chemistry maths

[muted olive]

no they're actually very easy

[meager kernel]

If I wanna do CS, why do I need to do physics chemistry maths

Whyyyt

[muted olive]

Plus side is that it produces smarter people than other countries, minus side is that it sucks and is one of the reasons for migration

[muted olive]

I've been asking this for two years 😂

[ornate ibex]

The degree is called engineering, and you study the foundation of engineering in the first year.

[meager kernel]

The smart people that it produces are exceptions
Look at the number of people it fails

[muted olive]

I mean that even if people dont achieve what they want they come out of the experience smarter

[ornate ibex]

So, if you call it quits later, you are still able to join a different engineering dept.

[muted olive]

unlike America where 26% of the population believe the sun revolves around the earth

[meager kernel]

How is something I'm never going to use in my work, part of my engineering

I have no use of studying physics chem maths if I'm going in CS

In school I understand

But why for college entrance

[ornate ibex]

You are wrong, MATH is CS.

[muted olive]

CS is math yes

[meager kernel]

Alright fair maths

[muted olive]

its not physics or chem

[meager kernel]

Let maths be there

[muted olive]

those things are absolutely useless to me

[meager kernel]

But physics and chem

[scenic maple]

tbf everything is math so saying cs is math is kinda weird

[muted olive]

math is unavoidable everywhere

[scenic maple]

https://tenor.com/view/cat-kitty-feline-meme-funny-gif-7000720352064261872

[ornate ibex]

I changed it. Math is CS.

[muted olive]

well everything is math

ai is math

[ornate ibex]

I can explain it but you might call me boomer.

[scenic maple]

ai is stats

[muted olive]

Go ahead 👀

[meager kernel]

@muted olive in first year, fuck college, just don't fail, get decent GPA, then rest of years it's mostly computers, do internships, hopefully you'll get placed early cause of your already existing skills.

[muted olive]

interested in hearing opinions

[scenic maple]

boomer

[carmine pecan]

and linear algebra and multivariable and vector calculus

[meager kernel]

Also make friends enjoy College

[meager kernel]

Please do

[rose hull]

There’s definitely physics in CS

[meager kernel]

Physics how

[ornate ibex]

So, the computers, devices that you use hardware and technology derived from physics and chemistry.

[muted olive]

yeah. making friends etc, and fests. btw how are the fests in your college?

[muted olive]

well yes but you don't involve them on a daily basis

[meager kernel]

My college is trash, but other colleges have good enjoyable fest. I often go with friends to have fun

You should too atleast once

[scenic maple]

https://tenor.com/view/ohhh-duh-why-didnt-i-think-of-that-gif-21849807

[rose hull]

Look at the width of wireless bands and how some can carry more than others and not penetrate certain materials as great as others

[meager kernel]

Alright physics is there but only certain amount

[rose hull]

Not saying every single thing in physics is useful in CS, this is just one example in networking

[meager kernel]

@muted olive if going to clubs and concerts is your thing, you can do that too in college
I tried it once, but I personally didn't like that environment

[muted olive]

I guess I'll find out whether I like it or not

[ornate ibex]

True, you are studying to become an engineer. Engineer is a broad term, and sitting at the office and having to type some random ass code doesn't require an engineering degree. You are learning engineering to understand how the basic fundamental concepts work, how you can analyse a problem and devise a solution (not any random ass solution, but the best, efficient and effective one).

[muted olive]

@meager kernel how much do you pay for college?

[rose hull]

I do agree that a good portion of classes can be skipped. I remember my school had me take a class on how to study, which was required 💀

[scenic maple]

if you guys study hard and work hard you will have as much gold as tejas

[ornate ibex]

Yes, which is zero.

[meager kernel]

Yea, in your first year, you'll most probably have something called "Freshers party"
You'll pay like 500-700₹ for it, you'll go to a club, and check it out
If you feel the environment is not for you, leave

[scenic maple]

the point

[meager kernel]

If you enjoy, stay

[scenic maple]

https://tenor.com/view/gold-goldman-gold-man-india-gold-man-india-gold-gif-16276819709762019062

[meager kernel]

My college fees of 4 years is almost 3-4 times more than what HTB Labs + HTB Academy would cost for 4 years COMBINED

[scenic maple]

they must teach you about hacking satelites then

[meager kernel]

Also, I've never learnt anything useful in college

[meager kernel]

NOOOO

THEY HAVEN'T EVEN STARTED TEACHING USEFUL SHIT

[scenic maple]

they never will tbh

[heady sage]

https://www.hackthebox.com/blog/penetration-tester-fedramp

WOOOOO

[ornate ibex]

Exactly, this is something my physics professor said when I argued why I need physics when I came to learn cybersec in the university.

She explained with a similar example, and then it felt conflicted and rebel. Now, I don't.

[scenic maple]

i am going to college just for a checkmark and nothing else

[meager kernel]

same

Mostly all my knowledge is from HTB

And I'm genuinely very grateful to this platform

[scenic maple]

strongest uni enjoyer vs weakest htb player

[meager kernel]

After my exams end, I'm gonna start my intern job and grind HTB for 6 months straight

Idec if I fail in college

[cerulean bloom]

https://tenor.com/view/o9iw-lets-go-let’s-go-lets-goo-excited-gif-3252365941055374124

[scenic maple]

whats the intern job

[meager kernel]

Internship

[scenic maple]

ye but abt what

[heady sage]

Do yall realize the significance of this?

[meager kernel]

Jr Pentester

[cerulean bloom]

I think so

[scenic maple]

dang cool

make sure they pay you

or sue them

[meager kernel]

Oh they will

For sure

[heady sage]

Meanwhile I get rejected by my top pick of job

[meager kernel]

I ain't working my ass for free

[scenic maple]

i dont care what the job is abt if my work life balance is good and pay is good

would rather be a figma designer sipping coffee then working my ass of as pantester tho

[heady sage]

The only way I’m getting paid is though synack

And even then it’s rare

[exotic pendant]

[meager kernel]

That's actually good news

@exotic pendant did you ever go to a university?

[exotic pendant]

No college

[meager kernel]

None at all?

[heady sage]

HUH!

[exotic pendant]

0

[scenic maple]

he was navy

[heady sage]

Considering where we live that’s probably for the best

[meager kernel]

Dude, all top hackers I know didn't even go to college 😭😭

[exotic pendant]

A lot of us get jobs through experience and networking

[meager kernel]

Most companies in my country require a college degree

[scenic maple]

dont let them tell you otherwise
in this world nepotism is key

[meager kernel]

That's true

I got my internship through connections too

[orchid breach]

About time

[exotic pendant]

Which country

[meager kernel]

India

[heady sage]

I’m hoping CWES gets that same treatment

[cerulean bloom]

yep, makes sense

[exotic pendant]

There’s so many of you that it’s prob easier to separate by who has college

In India

[orchid breach]

All I care is HTB is getting the recognition it deserves

[meager kernel]

Cybersecurity is pretty rare though
Everyone in India is jumping on the AI bandwagon

[fierce vale]

you're supposed to network in university too

[ornate ibex]

ahem ahem not true, since 2020 several unis have started offering cyber sec programs

[cerulean bloom]

not the AI bandwagon

[exotic pendant]

I got a sr sysadmin job by just interviewing and no networking BUT I used that job to network to the parent company

[fierce vale]

I just studied math and didn't give a shit though

[exotic pendant]

And I already had cves and bugbounty

[scenic maple]

phd in nmap

[exotic pendant]

There’s experience you can do without college

Ie bug bounty

[muted olive]

yep

[heady sage]

I probably won’t have much when I graduate

[meager kernel]

And is their course material good?

[muted olive]

vader already has like 3 CVEs

[exotic pendant]

Pump those numbers up

Come to the local meet and then I’ll help get bugs

[heady sage]

2 are pending

[exotic pendant]

[muted olive]

I have 1 CVE

hopefully 2 soon

[exotic pendant]

Jk getting me out to a meet would be rare

[meager kernel]

1 CVE at the age of 17
Wow

You can get a decent job rn if you wanted

[muted olive]

well technically 18 but I was 17 when I first found it

[ornate ibex]

Well, even if it is good, most professors do not know anything.

[meager kernel]

Hack college website after admission (with permission ofc)
Report the vuln and ask for extra credit as reward

[heady sage]

Besides CVES don’t matter much

[ornate ibex]

They do not have industrial experience nor the hands on. They have experience in the core CS

that is it

[cerulean bloom]

hmmmmmm

[meager kernel]

True

[cerulean bloom]

good idea

[muted olive]

probably wont be too hard either given how school sites are

[meager kernel]

Thats what I did too

[cerulean bloom]

yeah, I should

[meager kernel]

My college had an outdated Joomla CMS dashboard

[cerulean bloom]

https://tenor.com/view/akai-haato-hololive-not-like-this-panic-shake-gif-17045844

[meager kernel]

I used an CVE to get admin creds

And got access to admin account and whole dashboard

Reported it next day

[heady sage]

I don’t really talk about my uni

[meager kernel]

I thought you were in a job and not a uni

[exotic pendant]

I’ll prob do college for fun

[cerulean bloom]

I thought it was both, no?

[heady sage]

Nope. I can’t get a job to save my life

[exotic pendant]

Maybe 2026

[cerulean bloom]

idk

[meager kernel]

It's not like pokemon
Collecting all certs and degrees for fun

[muted olive]

My CVE was CVSS 10. Only flexing point lol

[cerulean bloom]

[muted olive]

for him it is

[meager kernel]

Send CVE number

[exotic pendant]

Oh dang got me beat

I’ll have my first 10 soon

Hyperv and rdp escape

[meager kernel]

I'll hopefully find a vuln soon

Maybe some day

[muted olive]

CVE-2025-50567

[muted olive]

Tbf it was some niche software lol

[heady sage]

Eh it’s easier than you might think

[muted olive]

still

[exotic pendant]

I’m only hitting big things unless it’s for work

I got a bunch of lab stuff cves

Lab equipment

[meager kernel]

How so

[muted olive]

I actually found wordpress plugin CVE but forgot to report

I think it was CSRF

[cerulean bloom]

WHAT

[muted olive]

and those WP plugins are easy

[neon zealot]

https://tenor.com/view/hello-chat-gif-27198366

[exotic pendant]

There’s a site that takes some wp bugs

[meager kernel]

Saurus CMS?

[muted olive]

yep

[exotic pendant]

I forgot the name of it but they pay for plugin bugs

[neon zealot]

yea i heard its like easy money

[meager kernel]

How'd you find it though

[muted olive]

Yeah wordpress has their own CNA too

[muted olive]

👀

[green kite]

Wordfence @exotic pendant

[muted olive]

it was open source, I read the code on github

[neon zealot]

should i say it

[muted olive]

wordfence yes

thats the one

[neon zealot]

wordfence

[meager kernel]

😭
Wish I was that good

[neon zealot]

its wordfence

[heady sage]

I’ll probably get some more once I finish CWEE

[neon zealot]

easy money

[cerulean bloom]

oooo, gl, gl

[neon zealot]

good luck 💪

[exotic pendant]

[muted olive]

once you start you'll realize that its easier than how it seems to be

[exotic pendant]

Can always message me for help if you need to verify

[heady sage]

JFH

[cerulean bloom]

one of the schools that I'm applying to uses wordpress 🤣

[heady sage]

Or Just Fucking Hunt

[muted olive]

@exotic pendant did you get a chance to poke that driver yet?
I found the register interface so I know its accessible through user mode now

[neon zealot]

can i add u and verify it when i get it

[fierce vale]

get a math degree

[exotic pendant]

Not yet I didn’t find a device by the company

[exotic pendant]

I was going to just do the SANS college

[neon zealot]

@green kite i wanna know something Sparkling

[muted olive]

do you think I should submit the report without POC?

[green kite]

what do you wanna know

[exotic pendant]

Eh I would give it a few weeks

[muted olive]

I have a POC but the global symbolic link is wrong

[exotic pendant]

If nothing then sure

It’s over email so it won’t hurt your rep on anything

[muted olive]

isnt it ticket

[exotic pendant]

Get that working first

[muted olive]

for mobile

[neon zealot]

as mto said when u reach 30 or higher u dont need much sleep to recover. he told like hes 30 so for charging up my energy the sleep doesnt work and dont need much sleep than 2 3 hours

[muted olive]

it said email submissions are invalid

[exotic pendant]

Yeah but it’s on its own site and I think just jira tickets over email

[neon zealot]

is this true

[exotic pendant]

TLDR you won’t get points hurt from stuff like h1

so reporting never hurts

[green kite]

during summer I can agree , winter, no, I need sunlight lol

[fierce vale]

building a proof in mathematics is very much like hacking

[exotic pendant]

I was just going to phd in cyber for fun

[neon zealot]

ooh damn .okay sir can i know ur age

[green kite]

I got 3 bugs waiting for company to review

Im 35

[muted olive]

@exotic pendant

[neon zealot]

https://tenor.com/view/im-young-ryan-higa-higatv-im-freshman-full-of-energy-gif-19531039

[muted olive]

this was the thing I was referring to

[exotic pendant]

Yeah I’m just saying it’s a hira system

Jira

You submit on their form

[cerulean bloom]

oh, its samsung lol

[muted olive]

ah okay

[exotic pendant]

And it just has the coms over email

[muted olive]

yeah makes sense

[green kite]

man I need a jailbreaked ios device

[exotic pendant]

Theres no platform like h1

[heady sage]

Oooooohhh you wanna exploit the Jira instance….. @muted olive

[exotic pendant]

Corellium

[neon zealot]

hey guys what is the most easiest to find bugs is it like android , web , ios , windows

[neon zealot]

[green kite]

I applied for a trial but no feedback yet

[exotic pendant]

Only problem with corellium is the ipa needs to be compiled with debug

[green kite]

yeah

[exotic pendant]

So most apps you can’t hit unless they have it compiled as such

Corellium is a sick app

[green kite]

which is why I still need a jailbreaked one 😄

[exotic pendant]

Look at mobile hacking labs

[neon zealot]

hello anyone @exotic pendant @green kite

[green kite]

I got 2 exam vouchers 😄

[exotic pendant]

They use Corellium

[muted olive]

i struggle just to read c and asm code

[exotic pendant]

The free course gives you free Corellium

[green kite]

does it? I thought they said to apply for an account

[neon zealot]

can i learn app hacking from there

for free

[exotic pendant]

Yep just register for the free course

For mhl

[neon zealot]

platform name please

[heady sage]

Hmmm yes the floor here is made of floor

[exotic pendant]

Mobile hacking labs

[meager kernel]

Web in my opinion

[neon zealot]

@heady sage i know u hate me but can u reply this

[green kite]

let me check frosto

[exotic pendant]

The mobile hacking labs free course comes with Corelli free

[muted olive]

i've seen that one, their certs seem cool

[exotic pendant]

Corellium

[muted olive]

CAPT and CIPT

[exotic pendant]

Idc about the certs for it but the course gives you free corellium to use

[heady sage]

I’m sure you’ll find your answer with the more experienced people here

[neon zealot]

they aint replying

[cerulean bloom]

what is corellium if I may ask?

[neon zealot]

only kratos did

[meager kernel]

I think Web is the easiest to pentest and find bugs on

[exotic pendant]

Web usually

But it’s depended on you

Not the bugs

[neon zealot]

ooh

@exotic pendant what is the best way to start

bug b

from starting

a noob

[heady sage]

Just do it lmao

[muted olive]

are you in SRT? @exotic pendant

[neon zealot]

which resource

[neon zealot]

i mean idk how do i do it

[cerulean bloom]

there is not just a resource on bug bounty lol

[exotic pendant]

I haven’t tried the HTB bug bounty course (plz gib free voucher HTB so I can promote) but portswigger labs is good

[heady sage]

Frost used to tell me the same thing

[exotic pendant]

Learn to code web, write bad code and then fix it

[heady sage]

And I hated him for it

[cerulean bloom]

tell you wut lol

[neon zealot]

just do it < this?

[heady sage]

But now I realize he was right

[neon zealot]

@heady sage is this the best thing to do

[heady sage]

Yes

[neon zealot]

[exotic pendant]

Mobile hacking lab

[neon zealot]

i mean

[cerulean bloom]

ahhhhh, I see

[neon zealot]

which language

which web

[exotic pendant]

Unless you wanna be the person to just spam payloads at stuff not knowing how it works

[muted olive]

i mean frostb1te is the resident expert here

pentesterlab is good for code review btw

[neon zealot]

oh no

[muted olive]

its white box

[neon zealot]

mb

[heady sage]

CODE REVIEW

[acoustic pelican]

hey
i replaced my pc case , and after i click the power button
the cpu cooler makes a huge noise and then stops
but it takes a lot to boot the bios, also my windows is not being seen , like it can't boot u[p
any reason why ? and if so , what did I do wrong ?
can it be because I made a mistake when the cpu cooler is active

[neon zealot]

@muted olive which language sir?

[exotic pendant]

Can start with JavaScript since a lot of client side bugs from black box but you can also do java,php etc

[neon zealot]

@exotic pendant which web dev language

[muted olive]

idk can be anything

js is good for web

c/asm is good for low level stuff

[neon zealot]

i think i should do javascript with html and css ig?

[green kite]

@neon zealot not sure what you're exactly hoping for, but there's no golden ticket to earn easy money

[heady sage]

Don’t lead him down that path

[exotic pendant]

Once you can read code, it tends to be easier for other langs

[neon zealot]

yea im not asking for that . i will go the hard way

[heady sage]

Are you crazy @muted olive

[exotic pendant]

Everyone thinks bugbounty is ezpz until they don’t find bugs

[muted olive]

I am currently reading C everyday

[heady sage]

I used to think this

[neon zealot]

im young , im just 20 man

i have got time

i just 20

literally

[tepid plaza]

@exotic pendant what is that server tag you got? Is that server like publicly accesible? lol

[exotic pendant]

Just because Frosto finds bugs easy doesn’t mean it’s ezpz

[exotic pendant]

FBI server

[green kite]

frosto is expert

[heady sage]

I know a guy who’s gotten several bugs under his belt and he’s younger than any of us

[neon zealot]

click its its publicly accessible

[muted olive]

I am good in vdp but bad in bb 🤣
got bug on ChatGPT which they still haven't replied to, that might be my first one

[cerulean bloom]

even younger than me?!

[neon zealot]

whoo can i talk to him

[exotic pendant]

Did you sandbox escape

[cerulean bloom]

shheeeeeeeeeeeeeeeesshhh

[exotic pendant]

If not then it’s useless

[tepid plaza]

kinda funny that fbi has a discord server

[exotic pendant]

Not official

[muted olive]

nope its low-medium but interesting. want me to dm it?

[exotic pendant]

Sure

[neon zealot]

bug b

@exotic pendant im not even able to complete this do u think i can learn bug b

its context

fortress

[tepid plaza]

[cerulean bloom]

I don't think you understand what bug bounty is lol

[neon zealot]

i know man i understand it

[charred harbor]

I'm a bit confused what should I learn here

[neon zealot]

just searching for bugs

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[cerulean bloom]

like any normal pentest

[neon zealot]

@charred harbor

[neon zealot]

i feel its different than

pentest

[exotic pendant]

Just start off small

Pick 1 goal

Beat it

Then move to the next

[cerulean bloom]

well, its not gonna be exactly like pentest
there will be tons of people trying to find bugs, and its public
but there are restrictions to how far people can find bugs

[neon zealot]

one goal is to learn portswigger

[neon zealot]

yes i know that

its in scope

[neon zealot]

my one goal for now is portswiggy

[exotic pendant]

Ok and get it

[neon zealot]

i mean there are

many vulns

hard to pick one

i know sqli and some

but the

[exotic pendant]

Do them all

[neon zealot]

portswigger is different

[exotic pendant]

Down the line

[muted olive]

you cant just pick one vuln

you need to know all

[exotic pendant]

Or if you want the most common I find

XSS

[cerulean bloom]

you just keep learning

[neon zealot]

alright

i will do htb + portswigger

[exotic pendant]

I find pizza as reward helps

[green kite]

pays frosto pizza

[tepid plaza]

why do they have that look

[neon zealot]

if i get my first bounty , i will treat u with 5 pizza

[cerulean bloom]

[neon zealot]

same

[exotic pendant]

[neon zealot]

is this

okay frosto

[green kite]

imagine getting 10 for bounty

expensive pizzas

[neon zealot]

i will pay for it then also

[cerulean bloom]

what if the bounty is small and gets you like $50

[neon zealot]

[neon zealot]

i will pay the xtra

myself

from my pocket

[tepid plaza]

50€ = 5 pizzas no

[cerulean bloom]

but its 10 expensive pizzas

[neon zealot]

is this like

[cerulean bloom]

[neon zealot]

youtube one shot video learn andorid hacking

android

[tepid plaza]

well that would be hard

[cerulean bloom]

yep

[neon zealot]

jk

[tepid plaza]

but he said 5 didnt he

[scenic maple]

[neon zealot]

@exotic pendant can i add u and dm u sir?

[tepid plaza]

so its ok

[cerulean bloom]

thats true

[exotic pendant]

Worst part of bugbounty is waiting for the bugs to get approved

And paid

[cerulean bloom]

where is this from lol

[exotic pendant]

Sure itl take me time to approve tho

[scenic maple]

vercel

[exotic pendant]

[tepid plaza]

the rich get richer

[cerulean bloom]

lol

[exotic pendant]

I’m waiting for my $250k bug to be finalized

[neon zealot]

why sir

@unborn estuary hey

i think

i know u

[exotic pendant]

They at least approved them

[neon zealot]

[muted olive]

and tax

[exotic pendant]

It’s pending the pay atm

[neon zealot]

i think i know u from somewhere

[scenic maple]

write the blog asap man

[muted olive]

I only got one P1 so far, that was on NASA and it was a duplicate lol

[cerulean bloom]

https://tenor.com/view/lewissaunderson38-lewissaunderson-cry-crying-cry-meme-gif-11499408157122608476

[neon zealot]

CAN I TEXT U ON DMS?

damn ok

[exotic pendant]

This new method I found is insane also

It also helped me get a crucial electron bug

[neon zealot]

@exotic pendant sir why will it take time

[exotic pendant]

Even discord is vuln

[exotic pendant]

I’m at the gym

[neon zealot]

okay how are u chatting

[cerulean bloom]

https://tenor.com/view/curls-gym-work-out-stewie-griffin-weights-gif-8397545584577464568

[muted olive]

well discord runs on electron so yeah

known to be vuln iirc

[neon zealot]

are u on the treadmill

[exotic pendant]

Yep

And 1passwod is vuln

[neon zealot]

yes i recognize u now

🤣

[muted olive]

👀

[exotic pendant]

Unauth 1Password

[muted olive]

youre probably the only person on this planet who can do that 1password CTF lol

[neon zealot]

bros gaslighting me

[exotic pendant]

I got accepted but honestly haven’t poked yet

[neon zealot]

i know u man

[exotic pendant]

Been busy with other major bugs

[neon zealot]

stop it

hit me with a dm @unborn estuary

[muted olive]

I didn't know you have to apply for it

[neon zealot]

i let you who i am

[scenic maple]

write the blog man

[exotic pendant]

It’s just an email to get an account

[exotic pendant]

Soon

[muted olive]

ah

[neon zealot]

@unborn estuary al ....

bro trying to gaslight me

[scenic maple]

i told him so too man

[muted olive]

does it involve kernel fuzzing? I think thats how you got the electron one unless I'm misremembering
you said it crashed etc

[neon zealot]

i know him bro hes gaslighting me

[cerulean bloom]

you might know him, but does he know you?!

[exotic pendant]

Why hit the kernel for electron

[neon zealot]

he does

[exotic pendant]

It’s userland app

[muted olive]

oh

[cerulean bloom]

well, even if he knows you, doesn't mean he HAS to DM you

[neon zealot]

valid

i think ill leave the chat for now

who made this then

wait

one moment

give me a sec

[cerulean bloom]

that makes it even worse lol

[muted olive]

@exotic pendant my microsoft xss got finally got fully fixed
funny thing was that the xss wasn't even in any microsoft managed domain

[neon zealot]

ok dont tell me u didnt made this

[scenic maple]

lmaoooooooooooo

no way lol

[neon zealot]

@unborn estuary

[frigid mountain]

oi oi oi Jungle Bells Day innit, bruv?!

[meager kernel]

@exotic pendant what all did you study from HTB specifically which helped you in your job?

[neon zealot]

@scenic maple sir golam the github name and his name isnt it same or am i blind?

bros gaslighting me

[cerulean bloom]

just cuz the usernames are the same doesn't mean they are the same person........

[scenic maple]

if he is not fine with it then dont post it

stop stalking people

[neon zealot]

💀

[tepid plaza]

funny how everyone is a sir Lol like a knight in the uk

[cerulean bloom]

⬆️

[green kite]

I just found a login by email + OTP without rate limiting

thats fun

[neon zealot]

bro literally has same

nvm

mb

sorry

[muted olive]

also forgot to reply but that could be multiple plans

[neon zealot]

im going for now

[muted olive]

whats the overall amount?

for 4 years combined

[austere sinew]

IM TAKING A TRAIN

[cerulean bloom]

ah, speaking of which

[austere sinew]

@static pasture

[cerulean bloom]

@austere sinew DDDDDDDDAAAAAAAAAAIIIIIIIILLLLLLLYYYYY PPPPPIIIIIIIINNNNNNNNNGGGGGG

[austere sinew]

Yessir

[austere sinew]

NO

[cerulean bloom]

YES

my standardized testing is tomorrow

[neon zealot]

SAT?

[cerulean bloom]

SSAT

[neon zealot]

what is there ssat also?

[cerulean bloom]

yes

[neon zealot]

im living under the rocks man

i knew about sat

idk about ssat

[muted olive]

SAT is ezpz

[meager kernel]

I meant HTB Labs VIP+ for an year
Combined with HTB Silver plan for an year

[austere sinew]

You’ve got this

[cerulean bloom]

thx 🙂

but I'm stressing

https://tenor.com/view/sheldon-stressed-big-bang-theory-breathe-relax-gif-16802344

[neon zealot]

bro imm gonna kill you it isnot i got 1350

[scenic maple]

average asian

feeling

[cerulean bloom]

lol

[muted olive]

I got 1460

but also

[neon zealot]

its not easy.

[cerulean bloom]

I mean, I got 97% percentile on the exam last year among 8th graders

[muted olive]

I'm planning to retake

[neon zealot]

i hate geometry

[cerulean bloom]

but now, I'm a 9th grader

aaaaaaaaaaand, my skills haven't really gotten better

[scenic maple]

bro is going to be a corporate slave soon

[neon zealot]

those classes marks dont even count , 11,12 bachelors ,

[muted olive]

I mean if you have done JEE, SAT is like toddler stuff lol
regardless the last few questions are somewhat challenging

[neon zealot]

sybau

[cerulean bloom]

its for applications, not from school

14

[neon zealot]

ooh alright good

bros a good student

i feel like

[cerulean bloom]

but I HATE VOCABULARY

[neon zealot]

i feel the heat

of the topper

[cerulean bloom]

wut lol

[neon zealot]

is it relatable to you?

[scenic maple]

what do you think a job is like

[cerulean bloom]

better than ssat imo

[neon zealot]

its like daily slavery

[scenic maple]

only good part about it is money

the things we do for bread

[muted olive]

except the one your m

nvm

[neon zealot]

i used adpeek it was good

🔥

[heady sage]

HAHAHAH

[neon zealot]

who got muted rn

[scenic maple]

ay lets not

[neon zealot]

https://tenor.com/view/mods-mod-discord-discord-mods-discord-mod-gif-10572028757061889139

[meager kernel]

Peak joke delivery

[neon zealot]

Saari Duniya Jalaa Denge this song

i like it

will fire the whole world

[muted olive]

So around $3000

for all 4

[neon zealot]

@meager kernel @muted olive heard this?

[meager kernel]

Hmmm nah should be way less

[meager kernel]

Nah, I don't listen to Indian songs

[muted olive]

490x4 + 18x12x4 is what I did

[neon zealot]

ooh

[muted olive]

nah

[neon zealot]

then cinzo hasnt also heard it

yea

[muted olive]

I listen to indian songs but havent heard that one

[meager kernel]

Isn't VIP+ like 200$ rn?

[neon zealot]

@muted olive hear it then

[meager kernel]

I forgot

[neon zealot]

wait hold up

[muted olive]

18 monthly when billed annually

25 when billed monthly

[meager kernel]

Hmmm

[neon zealot]

this is annually

[muted olive]

silver is 490

so yeah

1380 for 4

around 3000$

[meager kernel]

No no the silver other one
18$ per month silver

[neon zealot]

what does the enterprise do

its looking

[muted olive]

ah well idk

[neon zealot]

expensive

[muted olive]

I have to pay $32,000 for my degree @meager kernel

[neon zealot]

$250

Per Month, per user seat

[austere sinew]

Enterprise is for companies not individuals

[neon zealot]

its not cheap

[meager kernel]

It's for an whole company

Access for all modules

[neon zealot]

like 250 per member

[meager kernel]

💀💀

[neon zealot]

ong

and if i get that free trail for 14 days

[muted olive]

i thought you knew

[meager kernel]

My college fees is like 8000-9000$ for all 4 years @muted olive
Still way more expensive than HTB

[neon zealot]

will i get access to all modules

[muted olive]

you cant, you're not a company

[neon zealot]

i have one tho

https://tenor.com/view/loading-wtf-ruocgiff-gif-25631449

[muted olive]

that is just for one year for me

[meager kernel]

Which degree you getting bruh?

[muted olive]

same, CS

[meager kernel]

Which college?

[austere sinew]

The uk is 14k a year….

[obtuse fern]

My college fees are $0 thanks federal student aid

[muted olive]

any nit, iiit

[muted olive]

must be nice

[meager kernel]

14k $ ??

[austere sinew]

Yep

[meager kernel]

THAT EXPENSIVE?

[muted olive]

yea

[meager kernel]

Oh that's even more 😭😭
Just study HTB for 4 years and get a job

So easy

[obtuse fern]

It helps i already had my associates (same uni) so transferred credits

[muted olive]

its fixed at 4000 dollars per semester

[neon zealot]

wait let me tell my fees , 2,60 lakh / 4" means
two lakh sixty thousand divided by four, which equals 65,000 in nepali rupees and
65k npr is 449.15 United States Dollar
which means my uni fees is almost 450 per year

[muted olive]

credits reduce fees?

okay wait nvm you said associates

[obtuse fern]

Yes, because less classes = less semesters

[neon zealot]

i tried international student visa for the states

i got rejected twice

my coa was 20k

[muted olive]

technically I have a choice to pay same fees as everyone else and take what I get, or pay that amount and get anything

[meager kernel]

I feel sorry for all cybersec students who pay for a college fees

HTB is way more affordable and better

But companies obviously want college degree

[muted olive]

only reason tbh

youre cooked if you rely on college to actually teach you stuff

[meager kernel]

Exactly

[obtuse fern]

Most job listings I've seen want a bachelor's. Im also getting hit up by Binghamton university for a Masters lmao

[neon zealot]

i joined a uk affilated college man ,8,983.04 United States Dollar

it was hons degree in cybersecurity for bachelors almost 9k usd for 3 years man i left in 6 months i paid around 1500 usd which they didnt return @muted olive

[obtuse fern]

Like dog I barely like online classes as it is

Leave me alone

[meager kernel]

I got an email from MIT (yes the actual MIT) for masters in cybersecurity
Pretty sure it was a scam

[muted olive]

why did you leave

[meager kernel]

I did give them my email though

So I'm not sure

[neon zealot]

bro its expensive .

https://tenor.com/view/long-tears-gif-11087877242190144149

[muted olive]

you were in UK or it was an online program?

[meager kernel]

Hell nahhhh

[neon zealot]

i would pay 20k per sem in the states rather than that trash hons degree @muted olive

[obtuse fern]

i got my associates with honors, so I can probably get more leeway ¯_(ツ)_/¯

[neon zealot]

man , it was in nepal its managed by the uk

its called affilated

[muted olive]

ah

[neon zealot]

yes

[neon zealot]

look

[meager kernel]

Marcie is it worth doing masters in cybersec?

[obtuse fern]

Literally joined the National Honors Society

[muted olive]

I want to do that exact program in MIT but its hard :(

[meager kernel]

I dislike college system

[muted olive]

hard to get in that is

MIT is a tough one

[neon zealot]

literally i would earn in the states but not here @muted olive

i can do little bit in campus job there

[obtuse fern]

I haven't taken the master's route. The uni im at only goes up to bachelor's in CyberSec

[neon zealot]

not here

[meager kernel]

Cause of the MIT tag or cause how good their course is?

[muted olive]

both

[austere sinew]

Man why would you do that those unis are scams

[meager kernel]

Are you sure their material isn't covered by HTB

[muted olive]

or harvard

both are nice

[muted olive]

eh no college material can cover HTB stuff lol

[neon zealot]

yea i heard after 6 months after the joining

[muted olive]

as for business related stuff im unsure

[neon zealot]

i didnt knew

[muted olive]

they might have more content

[neon zealot]

then i left

[obtuse fern]

¯_(ツ)_/¯

[meager kernel]

Is it worth the cost?

[muted olive]

maybe idk, if I can get a scholarship that would be kewl

[obtuse fern]

If you dont have an ivy degree any other university generally wont matter

[meager kernel]

MIT fees is 72000 $ (I think it's for one year)

[obtuse fern]

As in, most places arent gonna care about who gave you the degree

[muted olive]

yeah... if no scholarship, then probably no MIT

is what im thinkign

[ornate ibex]

This degree discussion isn't even over yet?

For over an hour?

[zealous charm]

🥱

[muted olive]

UC is a very viable option and 99% gonna be my choice though