general

[carmine pecan]

well ok, I guess people nowadays are only impressed by a Buddha.

[molten bobcat]

We didn't say it wasn't impressive lol

[carmine pecan]

I get it, lol.

[undone fossil]

I’m just a professional hater

[proper fractal]

I only trust the media they would never lie to me

[molten bobcat]

I can't do that

I can only speak like 1.5 languages

[proper fractal]

ich de spreken jaja? nein?

[carmine pecan]

I am fluent in tapioca

[carmine pecan]

Bro stop with this spanish-german lol

[proper fractal]

reeeeeeeeeee

[undone fossil]

think my colleague is about to end it

[sharp shuttle]

lol

[carmine pecan]

atleast it isn't Rust

[molten bobcat]

Usually my coworker just sends me "Dude..."

[undone fossil]

TRUE

[undone fossil]

need more based colleagues

[proper fractal]

Department of Dudes DoD

[molten bobcat]

That's how I know I'm about to be in a huddle for 45 minutes lmao

[undone fossil]

he responded with horse plinko

hes losing it

[proper fractal]

🐴

[molten bobcat]

A dangerous sign to be sure

[sharp shuttle]

sup n can u f'in review this f'y loader and stego some rce into this hen*** photo

[carmine pecan]

https://tenor.com/view/pou-pou-hanging-pou-suicide-hanging-noose-gif-9561747451850049061

[molten bobcat]

https://tenor.com/view/ohhh-gif-10765217

[silver sinew]

hi

[proper fractal]

😮

[undone fossil]

wys fam i gotchu

[molten bobcat]

https://tenor.com/view/surfs-up-young-at-heart-the-simpsons-cowabunga-dudes-gif-14066399

Me

[undone fossil]

wagwan big man

[austere sinew]

LMFAO

[sharp shuttle]

someones workplace philosopy really rubbed off on me, and i agree that based coworkers is the only way

[proper fractal]

not many people know that bart is voiced by a woman

[carmine pecan]

@sharp shuttle Global Warming is the perfect condition for human evolution, the normies will want to "socialize" and "hang out with friends" in a 110 fahrenheit summer, and they will all die.

[silver sinew]

is there someone arab guy here ??

[carmine pecan]

[undone fossil]

no not a single one

[sharp shuttle]

global warming is desirable because it unlocks the northern part of the game for farming

[molten bobcat]

Bro we've known this for years lmao..

[austere sinew]

Arab yes guy no 😔

[proper fractal]

heh

[carmine pecan]

That's what she said

yes Babe, let's unlock the northern part of the game

[molten bobcat]

The more shocking voice actor fact is that Goku's Japanese voice actor is a woman

[sharp shuttle]

think of it as conditional DLC

[silver sinew]

how you know ??

[molten bobcat]

Same with One Piece

[austere sinew]

HOW IS THAT SHOCKING

[proper fractal]

🤯

[carmine pecan]

for farming Babe, for farming

[sharp shuttle]

so is narutos

[undone fossil]

so is david goggins

[molten bobcat]

Because most kids in the US and elsewhere grew up with the dub, not the subs

[austere sinew]

PETALS LMFAO

[sharp shuttle]

im goin goggins!

[undone fossil]

i am the goggins of gambling

[carmine pecan]

what?

[sharp shuttle]

yeah whats your fanduel balance?

[molten bobcat]

So we only know the manly Goku voice

[proper fractal]

didn't dbz have like an entire half a season of goku learning how to drive

[undone fossil]

-500k but a minor blip

[austere sinew]

What is an arab

[undone fossil]

shit happens just rolling the dice we'll make it back

[sharp shuttle]

youll get it back, just need a loaner

[austere sinew]

Never heard of em

[sharp shuttle]

just need a juicer

[silver sinew]

how ??

[molten bobcat]

Estào digitando indeed

[carmine pecan]

Froj ever tried Poker?

[austere sinew]

How what

[molten bobcat]

ITS A GIRL YOU JACKASS

[austere sinew]

You see

When you’re in the womb

[proper fractal]

he was a girl!

[undone fossil]

no wolo dont its too powerful

[carmine pecan]

I love being in the womb

[silver sinew]

guy

[austere sinew]

You have a chance of not being a guy

Crazy thought to imagine

[undone fossil]

its very rare

[sharp shuttle]

i thought he was a rab?

[undone fossil]

kind of like a shiny pokemon

[carmine pecan]

about 50% chances give or take

[proper fractal]

bro ima use the action replay it's ok

[sharp shuttle]

higher chance to be born female as you start as one

[molten bobcat]

Live mole reaction

[sharp shuttle]

all males are female

[carmine pecan]

Yes that's why I am married to two women

[sharp shuttle]

so you are arab?

[proper fractal]

in minecraft

[carmine pecan]

Brazil

[sharp shuttle]

that makes sense

[carmine pecan]

yes

[silver sinew]

there is not jackass but you

[molten bobcat]

While that may be true

[undone fossil]

that's a kiven

[sharp shuttle]

i heard that in an arab accent

i love it

[molten bobcat]

You didn't know what a girl was

[undone fossil]

(im so funny)

[austere sinew]

Have you seen yourself

[carmine pecan]

He knows the theory

[undone fossil]

i love watching chat get ragebaited in unison

its glorious

[molten bobcat]

Not the practice

[sharp shuttle]

you cannot blame him, watch any video from sharia law land, they have 0 females around at all times

[proper fractal]

Women are scary tho I hear

[undone fossil]

good job kiven

[austere sinew]

I do enjoy striking fear into the hearts of men

[molten bobcat]

I'm just goofing around because I have to

[austere sinew]

So this not necessarily untrue

[carmine pecan]

True, if I ever see a woman sprinting at my direction I am running man like... think about this.

[sharp shuttle]

thats hot wolo too spicy for this chat ffs

[molten bobcat]

Do.. social things

[proper fractal]

Brooooo thanks for the food later homie damn it not again

[silver sinew]

i see myself what about you ?

[molten bobcat]

Did you wet the chicken again

[austere sinew]

In my situation that would just be your survival instincts kicking in

[proper fractal]

lmao

[carmine pecan]

lmao

[austere sinew]

I have allegedly delivered two separate males decent threats I would hypothetically never carry out

[carmine pecan]

wait what?

[molten bobcat]

I have a sword you can borrow

[sharp shuttle]

egypt is kinda like minecraft, so you can get away with it there

[austere sinew]

So down for that

[carmine pecan]

I have pepper spray and a nuclear bomb

you can borrow

[proper fractal]

splits atom

[molten bobcat]

Both ends of the lethality spectrum nice

[sharp shuttle]

i watched the gorge last night

[molten bobcat]

Who needs anything in between

[sharp shuttle]

was a pretty fun movie

[molten bobcat]

the First Answer and The Last Answer

[carmine pecan]

right? Plan A and Plan B

[austere sinew]

I have learned pepper spray against american white guys is essentially useless because their spice levels scare me @frosty thistle @torn cedar @untold fiber

[sharp shuttle]

i need to be included here

[carmine pecan]

well, plan B then

https://tenor.com/view/rds-37-hydrogen-bomb-soviet-union-ussr-russia-gif-11391562786635486182

[austere sinew]

All three men here have eaten something that scared the shit out of me

[molten bobcat]

No he doesn't brath has been micro dosing getting pepper sprayed in public to build an immunity

[upbeat tangle]

@austere sinew Teargas always works

[sharp shuttle]

eaten? pfft, i have been trained on pepper spray

[molten bobcat]

And I know you're STALLING

[sharp shuttle]

https://tenor.com/view/patrick-patrick-star-patrick-stare-patrick-eyes-red-eyes-gif-14781443

[austere sinew]

Zumi had hot sauce on a chilli, cupid.. he’s floridian, ryan ate a ghost pepper for fun

[carmine pecan]

he's floridian?

no way

[austere sinew]

I know

[sharp shuttle]

okay but did any of them put ghost peppers in their eyes balls

[austere sinew]

Terrifying

[austere sinew]

WHAT

[molten bobcat]

https://tenor.com/view/princess-bride-zorro-dizzy-intellect-gif-13421770

[sharp shuttle]

have any of them been pepper sprayed?

im just saying i have

[austere sinew]

I could find out

[sharp shuttle]

and tazed

[austere sinew]

By

Practical means

[molten bobcat]

Bruh

[austere sinew]

Petals is wild

[sharp shuttle]

Petals is just horny

[molten bobcat]

https://tenor.com/view/princess-bride-laugh-princess-bride-reactions-gif-4559258

[sharp shuttle]

average brazilian

[carmine pecan]

https://tenor.com/view/flower-petals-rubbing-flower-gif-1548298039480674200

Petals

[austere sinew]

WHAT

NAH

😭 😭 😭 😭 😭

[molten bobcat]

Provocative

[carmine pecan]

It's just a flower chill

don't you guys overthink about a flower

[sharp shuttle]

its just a prank bro lol

[carmine pecan]

The prank in question:

https://tenor.com/view/explosion-explode-nuclear-bomb-mushroom-cloud-gif-7885327

[austere sinew]

🚪 🚶‍♀️

[sharp shuttle]

wolo has orange hair confirmed?

[molten bobcat]

Oh brath our grocery store situation came up today

[austere sinew]

HOW

[supple plume]

Hi

[sharp shuttle]

what does that mean

[austere sinew]

NO TO THE FLOWER THING

[austere sinew]

hoi echoes

[sharp shuttle]

welcoem back

[dusky jacinth]

Good afternoon

[molten bobcat]

An old lady approached me without provocation in the store today and I successfully did not immediately snap her neck, as you've purported you do when shopping lmao

[supple plume]

[carmine pecan]

https://tenor.com/view/lmao-lmao-meme-lmao-gif-lol-lol-cat-gif-4552813418803199403

[molten bobcat]

She was asking me if I liked the flavor of tea I was picking up lmao

[dusky jacinth]

Lol

[carmine pecan]

"No ma'am, I pick up tea flavors I hate so I can microdose suffering and build an immunity to it"

[molten bobcat]

Reasonable

[sharp shuttle]

if a girl asks me anything in the store i simp for her, i dont care the age

i love helping women

[austere sinew]

That’s just wine

[austere sinew]

Brath that

Did not sound

How you intended

For it to sound

[molten bobcat]

No it did

[sharp shuttle]

i said what i said though

[carmine pecan]

if a girl asks me anything first I need her to do a backflip, if she fails ...

[austere sinew]

😭

[molten bobcat]

No no he means it

[austere sinew]

😭

[sharp shuttle]

if i want the world to be a certain way i need to be the change

you feel?

[austere sinew]

[carmine pecan]

Brath (and me) are strong believers in a Goth Mommycracy

[sharp shuttle]

but if a guy asks me anything in the store

[carmine pecan]

he's dead

he's so dead

[sharp shuttle]

https://tenor.com/view/neck-snap-line-break-funny-gif-20165616

[molten bobcat]

https://tenor.com/view/with-this-treasure-i-summon-megumi-mahoraga-gif-17411827983770801229

[gray wraith]

[molten bobcat]

Brath when someone talks to him in the grocery store

[sharp shuttle]

yeah basically

what am i summoning?

[carmine pecan]

https://tenor.com/view/goth-girl-goth-girl-green-hair-goth-girl-kiss-its-deitsel-carlo-malis-gif-25978600

[sharp shuttle]

oooo

got me at the end

[gray wraith]

Big raga the opp stompa

[carmine pecan]

Psyops

it's all a psyops

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

[molten bobcat]

https://tenor.com/view/mahoraga-the-opp-stoppa-big-raga-the-opp-stoppa-gif-5754347561636376129

Opp stoppa

[proper fractal]

yes

[molten bobcat]

https://tenor.com/view/mahoraga-jjk-jjks2-jujutsu-kaisen-sukuna-gif-16426072969937482542

[proper fractal]

Government has great se tatics you have not passed mwuahaha

[carmine pecan]

ok

[proper fractal]

Mission failed

[sharp shuttle]

just so we are on the same page: this is me

[carmine pecan]

Can you run doom?

[proper fractal]

on a microwave??

[carmine pecan]

On a pregnancy test

[proper fractal]

perhaps

[sharp shuttle]

i run doom on your moms pacemaker

[dusky jacinth]

Ong

[carmine pecan]

good good

[proper fractal]

can u run doom inside of fl studio

[dusky jacinth]

You talk to me in a store?

[carmine pecan]

I run doom too

[dusky jacinth]

I’m opening my domain on you

[proper fractal]

LOL

[sharp shuttle]

spread em

[dusky jacinth]

I hate that

[sharp shuttle]

lol

[proper fractal]

you don't run doom doom runs you

[carmine pecan]

https://tenor.com/view/wide-jair-bolsonaro-bonoro-president-gif-18291672

[sharp shuttle]

who is that

isnt he in jail

[proper fractal]

https://www.google.com/search?q=how+to+run+doom+on+command+prompt

[carmine pecan]

Yes but his home is the jail

he's like... centi-millionarie so laws don't apply

[pine ferry]

Hello, I want to hide my profile activity. Is there a way to do that?

[carmine pecan]

No

If you do skid things we will all know

[sharp shuttle]

looks up profile activity wowwww

[carmine pecan]

jokes on you

🫵 🤣

🫵 🤣

🫵 🤣

I am glad to help

[sharp shuttle]

know my place?

[pine ferry]

I'm not your friend, you can't talk to me like that.

[carmine pecan]

I answered, chill out Mr Reactivity

[errant quartz]

What kali distribution yall use? ( which has no problems in clipboard settings?)

[sharp shuttle]

im not your friend, you cant talk to me like that, either

[pine ferry]

I'm just warning you.

[errant quartz]

Oh we have a fight here dont we?

[sharp shuttle]

imagine stating your conviction then immediately contradicting it

[rose laurel]

Heckers its christmas no fights on christmas.

[pine ferry]

No, this is not the place for fighting.

[supple plume]

Hola bestia

[errant quartz]

Bruh Perfect timing for me to spectate

[supple plume]

The beast

[next cobalt]

Just courious, what profile activity?

[sharp shuttle]

you are some dumb ass kid, dont make threats you cant uphold, and also, imagine being so ragebaited by a simple taunt that you mald hard enough to harm someone you just met

you are deranged

[errant quartz]

Oo

[next cobalt]

Damn

[untold fiber]

FFS chat

[errant quartz]

Ryan is here 🥲

[untold fiber]

https://app.hackthebox.com/account-settings Go here and uncheck "Public Profile Page"

[rose laurel]

Saludos

[sharp shuttle]

let the flag dumping commence

[untold fiber]

Not like it hides it from staff lol

[errant quartz]

I have a problem in my new parrot OS , I cant copy things to my host but i can copy stuff from my host, any guaranteed fix?i use vmware pro

[terse dirge]

Braths place is on the throne

[untold fiber]

make sure the vmware-user process isn't failing to start

I think it's something like /usr/bin/vmware-user-suid-wrapper but I do not remember exactly

[errant quartz]

Kk imma check

Thx

Why does it also feel laggy ? All tho its not my PC or anything .. all settings are fine..
Kali Linux felt more smooth for some reason it felt like 240hz lol

[errant quartz]

Also its running and totally working ..

[untold fiber]

which version of parrot

parrot 7 uses wayland IIRC but if its parrot 6 its just normal x11 and xfce so it's unlikely to be parrot itself causing issues

[errant quartz]

7.0

[untold fiber]

idk maybe a wayland thing then

[undone fossil]

inb4 hyper-v is enabled or something weird

but doubt if kali was fine

vm cores setup in a sane manner? ¯_(ツ)_/¯

[eternal mango]

dafuq... ok it's over, that's enough for now. Just managed to get the root password for that telescope 🤣

[undone fossil]

pog?

[eternal mango]

Vendor responded nicely to the initial report at least

..but want a 180 day disclosure timeline

[undone fossil]

ewww

see you in june

[eternal mango]

mm.. agreed, but requested they speed up releasing the new API docs

requested, not demanded

[undone fossil]

Cant remember how legality goes but isn't 90 days the standard

[eternal mango]

That's what I usually do yeah

..or did, first bounty worth a CVE or responsible disclosure in some time

[undone fossil]

tbh if you get a cve and some internet points out of it

i guess the extra 3 months isnt toooooooo bad?

[eternal mango]

They seemed open to it, and it'll make a fun blog post

[undone fossil]

still bit of a piss take though but yeah

oh nice :)

[eternal mango]

Kinda surprised being a Chinese company, but happy enough.

Working on the the firmware for their upcoming new product now 🤣 It's a bit different

..but shares a lot

[lime trout]

90 days is just “best practice” not a legal standard

The legal standard is however long the statue of limitations is in your area lol

[undone fossil]

there's regulations depending on industry and compliance etc. also

[eternal mango]

They responded nicely, and offered swag

I'd say that's a win

[undone fossil]

yup

[lime trout]

Civil damages always exists too

[upbeat tangle]

Can random people from the outside hack into the HTB lab pwnboxes?

[lime trout]

Which even if the facts are on your side you can’t beat the ride

[eternal mango]

Not unless you make your Pwnbox vulnerable in some way

[meager kernel]

Helloo

Hey Goblin

How are you

[eternal mango]

I'm fine thanks, how're you?

[meager kernel]

I'm good too
Have my last exam today

[eternal mango]

🤞

[meager kernel]

Object oriented programming in C++

[rapid badger]

Is it possible to reset in-prog modules ? Cant seem to find anything

[meager kernel]

Hopefully I'll get decent grades

[eternal mango]

No

I mea, you can't reset progress

[rapid badger]

[meager kernel]

Not at the moment, no

[eternal mango]

You can reset the instances if that's what you meant though

[upbeat tangle]

im doing one of those starting zone labs on the last tier, and im in some SQL database trying to establish a reverse shell, and the wrong IP is connecting back to me

[meager kernel]

Wdym wrong IP

[eternal mango]

Be careful where you bind your listener to

If on VIP+, Pwnbox has internet access

[meager kernel]

Like IP of the machine which is connecting to you, is different than the IP of the box?

[eternal mango]

Make sure to only bind your listener to your lab IP

[meager kernel]

💀yea maybe he's binding to someone on the public internet

[eternal mango]

Start up a VPS anywhere and you'll get connection attempts very soon after

[upbeat tangle]

No im not binding to anyone else then the machine lol

[eternal mango]

No what I mean is your listener

You are listening on a port

[meager kernel]

Netcat

[upbeat tangle]

yes

[eternal mango]

If you listen on 0.0.0.0, that will listen on your public IP on the Pwnbox too

VIP+ Pwnbox has internet access

That means binding on all interfaces will open that port to the internet

[carmine pecan]

Once I was listening on port 1337 on pwnbox, and instead of receiving a shell I receiving a lot of chinese characters instead

Fun day

[upbeat tangle]

im just doing the port in the walkthrough

[meager kernel]

You got hacked by the Chinese

[meager kernel]

Orrrrrrr
It was possibly a chinese spy contacting you

[carmine pecan]

it was @scenic maple I know it

[meager kernel]

Possibly

[carmine pecan]

LoL that's crazy because I've literally just did:
CTRL+C

then CTRL+L

[meager kernel]

L

[carmine pecan]

there goes all the secrets

[eternal mango]

Ok, but what I'm saying is true. How are you listening, nc?

[meager kernel]

I would turn it into a stable shell

And actually say something back

[upbeat tangle]

yes netcat

[meager kernel]

Just to see what happens

Can someone explain Standard Template Library in C++ pls

In easier words than the internet

[eternal mango]

So nc -l <port> ?

[upbeat tangle]

443

i shut down the lab because i piss myself xD

[meager kernel]

Why you're listening on 443?
That's standard port for HTTPS

[upbeat tangle]

Because the walkthrough said this

the official one

[meager kernel]

Which walkthrough you're doing

[upbeat tangle]

Archetype

[eternal mango]

Find the IP address of your VPN connection to the labs ip addr show dev tun0

Then listen via nc -l <VPN ip> <port>

That will bind to just that IP address, instead of to all available

No more internet traffic to your listener

[meager kernel]

Is it actually possible though that he binded with some random machine on the internet?

What are the chances of that

[eternal mango]

Not what binding means here

Binding as in, binding to an interface with a port

[meager kernel]

Ah

[eternal mango]

Or listening for an incoming connection on a port from an interface

..or by default, from all interfaces (0.0.0.0)

[upbeat tangle]

No i dont think i bound to any random on the internet. It just showed it listened to some random

and it shut down

[eternal mango]

Just read what I said

What you saw was someone scanning common ports

[sharp shuttle]

that looks like my dog...

[upbeat tangle]

ah ok

[sharp shuttle]

that looks like my house..

[carmine pecan]

becuase it is

[upbeat tangle]

that makes sense

[carmine pecan]

Xerox but for functions/algorithms

People still know what Xerox is right?

[meager kernel]

Yes

[upbeat tangle]

@eternal mango the command in the walkthrough is this "sudo nc -lvnp 443" im assuming its my IP missing in this equation here

[meager kernel]

Horror movie type scene

[eternal mango]

I mean it'd be nice if the IP was included

The main difference here is that you're on VIP+

So your Pwnbox has internet access, and ports you open are as such available to the internet

[upbeat tangle]

ok

[eternal mango]

(if opened on all interfaces)

[upbeat tangle]

at least thats spicy xD

[eternal mango]

I'll make a note of that.. a good distinction and possible improvement.

..dev team will love me

[upbeat tangle]

hehe

[carmine pecan]

hear me out, pwnbox but it's a pentest-ready NixOS instead

easier to replicate, and it comes with a easy to mess around and builtin firewall.

🤷‍♂️

[upbeat tangle]

next time i do go in to this lab i will just specify that it listens only from the one IP of the machine i attack

[eternal mango]

You set it to your openvpn address

not the IP of the target machine

(as in what you see from ip addr show dev tun0)

[upbeat tangle]

ah ok

So i accidently gave some chinese or russian the IP to some htb server now i guess

[eternal mango]

no

People are continuously scanning the internet for various reasons, 24/7, 365

You just saw one of those connecting to your Pwnbox on port 443. As it was through nc, no risk

What I mean is, all they saw an open port on a random IP

[upbeat tangle]

In previous boxes it has shown in netcat my pwnbox vpn ip being connected to the machine i attacks IP adress. in this instance it showed 2 completely new IPs

[eternal mango]

Because you listened on port 443 on a VIP+ Pwnbox that has internet access, so that port was open to the internet

It's not your fault, you did nothing wrong.

https://account.hackthebox.com/security-settings

[upbeat tangle]

ok. im learning something new every day here 🙂

[eternal mango]

Every day's a school day 🙂

[upbeat tangle]

thats pretty much the main reason i use the pwnbox tbh, either that or a virtual machine because if i screw something up, i can just close it

[eternal mango]

Aye that's the way

[upbeat tangle]

but i have been having a good time, lost track of time doing these labs

[eternal mango]

Glad to hear it

[carmine pecan]

A day where you have to track time is a bad day

[upbeat tangle]

one of my favorite channels on youtube is Scammer payback and kitboga

those guys are hilarious

[eternal mango]

https://tenor.com/view/do-not-redeem-don't-redeem-scammer-kitboga-do-not-redeem-the-card-gif-11900855712098613254

[vivid flower]

Funny stuff

Would redeem again

I really like this guy memecave who makes ai joe rogan and dagoth ur interviews

Theyre way higher quality than they have any right to be

https://youtu.be/RVKyru1Dcn0?si=6kb8ofGkMnUtn830 like damn this is 3 hours of OC

[upbeat tangle]

Scammer payback are inside the scammers computers and trolling them

[vivid flower]

Anyone who says ai isnt art needs to watch memecave https://youtu.be/YryOIOrYs90?si=QI0W0kNc0zcQOvaF

[eternal mango]

https://www.youtube.com/shorts/4fIDsqbkXco

[eternal mango]

Paranormal Activity doesn't hold a candle to this. Freaky

[errant quartz]

anyone had an issue of copying stuff from ParrotOS via vmware to Host? since its not working for me ive tried everything .. i can only copy from Host to ParrotOS , i cant even drag files/folders from Host.

[vivid flower]

I don't know what's real anymore

[warm dome]

you using workstation?

[untold fiber]

I just submitted a critical vulnerability to atlassian too for secret disclosure

[errant quartz]

Yes

[untold fiber]

but I got a reply today that its a duplicate it, someone just barely beat me to it 🙁

[warm dome]

tried reinstalling vmware tools?

[eternal mango]

booo 🙁

Well done anyway

[errant quartz]

yup

[warm dome]

not sure could always setup a shared folder and do it that way tho

[errant quartz]

yeah but its annoying

[warm dome]

yeah thats true, just suggesting it cause usually when that happens for me atleast its vm tools issues

[warm dome]

presume you've already checked preferences to ensure its enabled?

[errant quartz]

yes

[warm dome]

yeah not to sure then , i'd probably chuck the question in an llm and see if any other suggestions come up

[tidal yoke]

I'm 60% through the HTB penetration tester module, but I want to reset the progress and start from scratch. Does anyone know if there's a way to reset the module's progress?

[hearty hinge]

Can I get a mod to hit me up? I got a question

[nimble tundra]

https://tenor.com/view/cod-antigacha-sniper-quickscope-gif-25079900

[untold fiber]

what is the nature of the question

[hearty hinge]

Someone trying to sell writeups of the exam

[frigid mountain]

i got a big new lava lamp and I'm heating it up for the first time and time-lapsing the process

[untold fiber]

Yeah okay you need an actual mod or maybe @lime trout

[mighty pecan]

4

[molten bobcat]

Visit with family went well

[warm dome]

oh good stuff, nice break from the grind

[molten bobcat]

Yeh

I miss the grind tho

[warm dome]

im currently being humbled by the vvm challenge

[molten bobcat]

Always happens when I take a break I get the itch to work again lol

[warm dome]

yep same i had almost a month off, and spent alot of it doing study/htb

[molten bobcat]

I can only do so much nothing

[warm dome]

tbh i'd probably be doing these quicker if i wasnt trying to make a tool for everything

[carmine pecan]

Is HTB down for anyone or just my dog?

well I blame DNS

[civic lance]

is quantum computing here?

[carmine pecan]

what do you mean by here

[sharp shuttle]

no those are only in movies

[warm dome]

is it in the room with us

[carmine pecan]

we have quantum (concepts) challenges

Is this "quantum computer" in the room with us right now?

[warped plank]

Quantum computing has been a thing since the 90s

[civic lance]

Like mullvad added a quantum resistant tunnel to their VPN

[carmine pecan]

Yeah technically what he refers as quantum computers should be called the: next-wave of quantum computers.

[civic lance]

So I’m like is quantum being used?

[carmine pecan]

As modern transistors are quite quantum

[warped plank]

quantum resistant doesn't require quantum computing though

[civic lance]

Oh it doesn’t

[carmine pecan]

Older transistors could be poperly modeled without QFT

but not modern

So we are already in a quantum-wave of computers its been decades

And calling the next wave the canonical quantum is short sightness

🤓☝️

[frigid mountain]

for me the sad part of the holidays comes after I guess when people are hibernating or recovering or whatever. it feels so lonely to go from the high of togetherness and festivity to this lull between Christmas and New Years. And then after New Year's is the same thing. It's like everyday is a long Monday or something.

[carmine pecan]

Don't be sad eat a cookie

🥠

[frigid mountain]

i just had a disgusting cupcake that was made from a box mix with canned frosting. I took two bites. my stomach has been upset today. I had a few leftovers. I ate a good lunch.

I have candy and snacks from my stocking though

so I can have some of that

but I don't want anything except hugs and someone to cuddle with and watch movies

but I don't have that

[rapid badger]

Cool. Where is the unsub button ?

[carmine pecan]

https://tenor.com/view/hate-hacker-crap-gif-6136227

[dusky jacinth]

I presume I need to cancel my VIP+ sub in order to redeem my voucher correct?

[gaunt gale]

I applied to a bunch of jobs today, one being an MSP near my house. They offer on-the-job training to new candidates. Its a help desk position, but it comes with paid training and a ton of upward mobility into other positions and mentorship from senior engineers.

I don't want to pass up on this opportunity to screw it up.

In January, I will follow up. My only question is what can I do to stand out from other candidates?

[sharp shuttle]

How many other people applied?

[gaunt gale]

let me check ziprecruiter

[sharp shuttle]

In terms of standing out, lying on your resume is probabilistically the best strategy to match the JD perfectly and only correct information if pressed.

Other than that, you know someone who works there to vouch for you.

[gaunt gale]

ok

I made my resume super long

I put A+, CCNA, and I listed the certificate of completion for the one KASE OSINT scenario I solved

but my CCNA expired but I listed as if it was not expired

[iron depot]

I have CCNA1

[gaunt gale]

I answered the one question about troubleshooting well

I put a cover letter in

a good one

[iron depot]

I'm doing cyberops instead of CCNA.

[gaunt gale]

I have a long resume

[sharp shuttle]

im proud of you queue mark but i want you to understand how bad you are going to feel after you get ghosted

[gaunt gale]

well, then what? I'm fucked? This is for a Junior Help Desk Position

[rose onyx]

9/10 msps are absolute ass to work for, the will promise the world and give nothing in return. They will make claims they do everything when in reality it's all checkbox. They will do nothing to improve the environments the techs deal with as there is never time.

But hey maybe you found the golden egg msp.

[sharp shuttle]

we all are brother, the job market is fraudulent

[gaunt gale]

shit ok

[iron depot]

Can you recommend me for a remote position? I'm from Brazil and I'm looking for jobs abroad.

[rose onyx]

No

[rapid badger]

Good luck, but yeah dont put all eggs in 1 basket. Seen people apply for 2 places and wait 2 years for response lol

[iron depot]

Wow

[dusky jacinth]

omg I am now the one struggling to contact support smb

[iron depot]

Why?

[dusky jacinth]

fuck I gotta figure out wth is up w my browser

[gaunt gale]

well, I have the three certs if you count CCNA. I have my volunteer experience. I have my bachelors. it says its an entry level help desk position and they train you. I talked about helping visually impaired students at the Braille Institute with their IT issues.

I have diverse interested in rock climbing, Hack the Box, OSINT, psychology, IT, boxing, and gaming.

I put like a three page resume including the cover letter

[rapid badger]

Okay ?

[gaunt gale]

am I really unlikely to get this job?

I have reliable transportation it does not say a driver's license is required

[rose onyx]

Because I don't know you, you live in a different country from me.

[gaunt gale]

I know I can get there and back

[sharp shuttle]

you are in california right?

[gaunt gale]

its literally right near my house

[eternal mango]

Someone has to, why not you

[gaunt gale]

yes

[sharp shuttle]

is the job remote?

[gaunt gale]

no

but its a five minute uber ride from my house

[dusky jacinth]

@lime trout I sent you a DM regarding the giveaway voucher, for whenver you get the chance to look at it. Thank you

[eternal mango]

Fingers crossed @gaunt gale

[gaunt gale]

thanks

if I get it I'll have to cancel my electronics classes but

[rose onyx]

Good, that helps

[gaunt gale]

I'll get on the job training

bitter sweet

I like IT it will actually be better than electronics

if I can get it

[eternal mango]

All you can do is hope for the best and keep an eye out for others

[gaunt gale]

if they can pay for me to do electronics even better

ya that's all I can do. it doesn't say how many have applied in zip recruiter

[sharp shuttle]

according to the websites i use for the probability your resume even gets looked at, 2-25%

this is why you have to lie on literally everything

[iron depot]

I hold the CCNA1 Cyberops and CJCA certifications, and yet I haven't been able to a job yet

[gaunt gale]

but don't employers know if you are lying about certs?

like they verify

but I did say I still have CCNA

because if they ask I can show expired cert

but at least they'll look at the resume

the other two certs listed I know I have

[dusky jacinth]

It's a toss up

[gaunt gale]

ok

[sharp shuttle]

nobody verifies certs or degrees, and by nobody i mean they really almost never check.

[dusky jacinth]

I only have my A+ and I got a job within 2 weeks of getting it

in IT that is

[rose onyx]

Hell, I knew someone recently, they personally handed it off to the hiring manager and they still didn't look at it.

[dusky jacinth]

but I could've gotten the job without it. Nobody else is certified so it just made me look better, but didn't make me more likely to get a job

[gaunt gale]

ok

[iron depot]

you have ctpts arigth? Do you already work?

[sharp shuttle]

look guys heres the harsh reality:

1. lie to get the interview
2. dont fuck up the technical
3. you are smooth sailing

this is how the world works.

[gaunt gale]

if I get this job they will train me but I'm assuming they want a certain kind of person

[rose onyx]

My work is unrelated

[sharp shuttle]

its called failing to the top

[gaunt gale]

ok

right

I'm a terrible liar

that's the issue

[eternal mango]

Never lied to get an interview

[iron depot]

What do you mean? You no longer have a chance of getting a job with a CPTS?

[eternal mango]

Demonstrated actual skills

Built up my career

[rose onyx]

Nor have I, never will

[sharp shuttle]

you also didnt have to battle 9000 applicants, HR who use AI, and HR who is also paid to lead you on in the job process then ghost you

[gaunt gale]

its a small to medium sized MSP

but I don't know if I will get it I am really unsure.

[iron depot]

Google Translate is killing my English, sorry.

[dusky jacinth]

Hey huge tip

[gaunt gale]

ok

[dusky jacinth]

don't tell us where you work or live

[sharp shuttle]

i wish you the best, but please, do not take it personally

[gaunt gale]

ok thanks

[gaunt gale]

ok

[sharp shuttle]

its hard for us all

[rose onyx]

I'm not in Brazil. What I do for a living and side projects is unrelated. Yes I have passion in this field, I'm just casually applying to places when they meet my fancy.

[dusky jacinth]

And yeah the job market is funky brosky

[iron depot]

I highly doubt anyone could get a first cybersecurity job without experience.

[rugged ravine]

i second this

[sharp shuttle]

its more likely you just need someone who will vouch for you, experience means nothing for juniors

[iron depot]

I misspelled it, sorry.

[dusky jacinth]

networking baby, networking

king of all

[gaunt gale]

ya this job would get me help desk experience, but may get me training to move up into a sysadmin or network admin role

[sharp shuttle]

queuemark i mean this with love, but you may want to simply volunteer for your first job, if you can

[gaunt gale]

I need to research the company and plan a follow up for January. lots of people are probably applying.

[sharp shuttle]

you seem young

its the best way to get a real job

[rose onyx]

I have over 15 years in tech. I'm not actually looking for jobs. Fffffffffff

[iron depot]

I'm doing an internship with the Purple Team; I'm an unpaid intern. I've already found several vulnerabilities in the company where I work. Actually, I was hired because I was already doing penetration testing beforehand, but even so, I'm unpaid.

[gaunt gale]

I'm fresh out of college. I volunteered already. I listed the volunteer experience on my resume. I described it in detail

I wrote an entire page on it

[sharp shuttle]

shit dude.

[gaunt gale]

two volunteer jobs

I gave a real world example of the troubleshooting experience for the question they asked on the application

it was a good example

I had help refining it with gemini

[iron depot]

To be perfectly honest, when I took the CJCA exam, I thought it was kind of difficult, but after thinking about it, I realized it wasn't all that hard and passed on my second try. But that only proves my level of knowledge, and certifications like CJCA are good for getting a job in banking.

I still use GPT quite a bit to build exploits, but I'm learning how to do it without it, lol.

[gaunt gale]

I don't know I am scared this job will pass me up. I mean I would think I am doing everything right with my applications.

I'm not young I mean I kind of am but not that young. I was in college for a while.

[rugged ravine]

you can't do anything about that, best way to proceed is to keep honing your craft

[gaunt gale]

like I was in college for several years.

[iron depot]

I think the same.

[warm dome]

so seeing this makes me not even want to look at this box

[rugged ravine]

try to show them that you are not to be passed up on

[sharp shuttle]

ive been on both sides many times, recenty when i posted for a subcontract i needed to fill for my own business, i had over 2000 applicants, how the fuck am i supposed to filter all of it?

[rose onyx]

Which one?

[sharp shuttle]

all i ask is you consider that

[warm dome]

hercules

[gaunt gale]

ya I plan on writing a follow up in January maybe mid January. the job was posted five days ago on ziprecruiter

[sharp shuttle]

and thats why i suggest you use ai to get a perfect hit on the JD, because HR is only going to pick whos on the top of the stack.

[warm dome]

was going through most recent ones to try to get rank up again, but might come back to this one

[gaunt gale]

ok but I put three certs. I could put network+ because I passed that and that expired too

but I didn't. that's the one thing I did wrong

[rose onyx]

It's fine
-# I don't remember it off the top of my head

[gaunt gale]

if I put that too it would be four certs

[sharp shuttle]

look man literally just let AI make your resume, fix the AI shit and make it sound more like you, submit it. who cares whats on it.

[gaunt gale]

ok cool

but its an MSP

[sharp shuttle]

that means nothing

[gaunt gale]

won't they know if I'm bullshitting?

ok

[sharp shuttle]

no.

MSP's might be the dumbest people on earth

[gaunt gale]

Brathadair, can I DM you? I want to talk to you sometime about planning a follow up in a couple of weeks

you might be able to help me

[sharp shuttle]

yeah you can, but understand my advice is HIGHLY controversial.

[gaunt gale]

ok

well, I will think about the advice

[terse dirge]

Why network or sysadmin role? Your skill set seems to be more in red teaming or pentesting.

[gaunt gale]

network or sysadmin role or cyber security role. network or sysadmin gets you prerequisite experience to do red teaming or pentesting.

red teaming or pentesting is not for people without experience

I learned that the hard way

[dusky jacinth]

I mean you don't have to do that anymore

that's why pentesting certs exist

you still can

it's not bad

but you don't HAVE to

[sharp shuttle]

TE1M let me ask you this

do pentesting certs matter if the average pentester just uses chatgpt?

[molten bobcat]

Finally home

Hello friends 🙂

[dusky jacinth]

let me ask you a question in return. Does any cert matter if the average cert taker just uses chatgpt?

[iron depot]

Yes

[molten bobcat]

My dad's new girlfriend runs a bakery and brought fancy cookies :U

[gaunt gale]

ya but I don't have enough pentesting experience to get a cert even. I took years to try and do CPTS. YEARS. I didn't get through it in time. I was working on CDSA but its going slowly.

[sharp shuttle]

make your case, im open to having my perspective changed

[dusky jacinth]

I think it's the person not the cert imo, the cert can just help get you infront of someone in some contexts

but not all

and maybe not even many of them

[rugged ravine]

i don't think this is the right channel for that, but i think it is both path traversal and security misconfig.

[iron depot]

Please help me here.

[warm dome]

hardest part about red teaming/ pen testing is getting passed hr tbh

[sharp shuttle]

i just want to say that if i see someone with an OSCP i automatically assume its cheated based on all the frauds ive waste dtime interviewing with that cert

many people see it this way too

[gaunt gale]

ok sure

[dusky jacinth]

personally it's why I believe building relationships and pursuing things at a highly technical level will be far more valuable for me than getting any certs

[rugged ravine]

networking is king

[terse dirge]

I mean simply knowing how to build systems doesn't mean you know how to break them. It's 2 completely different skill sets it's nice to know how to do both but one doesn't inherently make you know the other.

[molten bobcat]

Well that's an awful outlook

[iron depot]

I think the same, how serious is the flaw knowing that it's exposing the admin page?

[molten bobcat]

Do you think I cheated then?

[warm dome]

could say the same thing about any cert these days tho

[sharp shuttle]

ever had 2000 applications sitting in front of you?

[dusky jacinth]

No

I'm an L1 LOL

[gaunt gale]

no but its objectively easier to exploit powershell if you actually know powershell

[dusky jacinth]

so at the eotd

[iron depot]

Wow

[gaunt gale]

its easier to exploit AD if you know AD

[dusky jacinth]

no one should listen to me

im just a kid lol

[molten bobcat]

Assuming some of your applicants cheated to get their certs is an insane assumption to make lmao

[gaunt gale]

that's advice I got from 2600 people

[molten bobcat]

Judging a book by it's cover

For sure

[undone fossil]

It’s a statistical one

[eternal mango]

I'd probably remove that screenshot tbh

[gaunt gale]

some of them probably did

not all but some

[sharp shuttle]

why the fuck are you guys always saying im wrong lolol

[undone fossil]

Assuming all is cringe but that they could have is valid

[sharp shuttle]

its like where do you think i get my opinions

[undone fossil]

Walmart

[iron depot]

I use GPT and I don't see a problem with that; the problem lies in you not knowing how to do things.

[terse dirge]

I can certainly tell you that you're not going to be running powershell commands to exploit generic all permissions lol

[dusky jacinth]

I'm not saying shit

[rugged ravine]

It would be a high severity vulnerability, it's like showing your source code leaving in certain commits from the git repository for attackers to probe around. I think?

[iron depot]

Excuse me for asking, but why?

[gaunt gale]

I think if I can get a job as a sysadmin or a network admin, or a network engineer, or whatever, then Hack the Box will be much easier

[eternal mango]

Because you state where you work

[gaunt gale]

plus, this place also has upward mobility into cyber security

[eternal mango]

That doesn't take much for someone to put 2 and 2 together

[iron depot]

Whats problem?

[terse dirge]

It's not as simple as "I can use Microsoft helpers in powershell to make object" it's more of "I can use python to create objects in active directory"

[iron depot]

I highly doubt anyone could reach this point, especially since I have direct contact with developers; in fact, my entire professional life is documented in my portfolio.

[terse dirge]

A little more work goes into tooling than just using powershell yk

[iron depot]

It's written there where I work. lol

[eternal mango]

Ok well.. it took a few Googles

[gaunt gale]

I know but once you know how a system works, then you can learn to attack or defend it./

[eternal mango]

Just giving advice

[gaunt gale]

university and 2600 both gave the same advice

[iron depot]

for?

[gaunt gale]

I didn't take it

I should have

[iron depot]

cesarbtakeda.xyz my portfolio

[iron depot]

Ok no problems

[molten bobcat]

God-PowerShellAnnoys --the "Fuck" | Out-Of "Me"

[eternal mango]

I don't think you're getting what I'm saying

[warm dome]

not to mention your linked in and many other things linked to you

few cross references all you need

[terse dirge]

Not always. Being able to create a complex soc workflow doesn't make you a soc analyst inherently or make it any easier to become one tbh.

[dusky jacinth]

Powershells a goofy lil language

[iron depot]

I'm not being unethical, my friend. I simply showed the result and was unsure what the problem would be in this case. Showing the POC instead of the result would be problematic.

[terse dirge]

You're still missing the important pieces and skills to actually do the work well.

[eternal mango]

I know. I'm saying others may be unethical

[gaunt gale]

I mean you still have to learn how to hack but for some people it makes it a lot easier.

and it probably would be easier in my case.

[iron depot]

Ok rigth

[gaunt gale]

it would get my brain going

and frankly, they have SOC Analyst or other cyber security jobs I might be able to move into.

so I don't know they may have training for those

I mean this MSP does it all

[iron depot]

My linkedin this in my portfolio, my insta, and my whatsapp

[rugged ravine]

They probably have

[warm dome]

as well as where you work and study

[gaunt gale]

ya exactly. I don't get how this can be a bad idea if I can get hired.

[iron depot]

This Discord server is also professional.

[iron depot]

Yes

[sharp shuttle]

this conversation can be boiled down to two/three strategems:

1. Use AI to 100% match the JD -> Get the interview -> dont fuck the technical up and vibe with the team -> win (nobody is checking shit, if they do explain it away. Do a good job in good faith and it shouldnt matter)
2. Get your buddy who works at company to vouch for you, instantly bypass HR, certs dont even matter now. Referral programs are huge.
3. Engineer serendipity with boomers who work in the c-suite and make them think you are their long lost grandchild and give you a job.

[warm dome]

was just expanding on what goblin was saying, when you put something like that in here

[eternal mango]

What I'm trying to say is if someone can find similar open listings like at your place of work that with two Googles, I'd suggest being a bit more overt when sharing information regarding a vulnerability you are working on.

[iron depot]

What's the problem with that? Don't you specify where you work, study, or worked when you send your resume?

[gaunt gale]

I did more lying or stretching the truth on my resume than I'd like to admit tho

[molten bobcat]

I still had to go through a technical interview despite being referred

[warm dome]

yah but i dont say heres an exploit for where i worked btw i worked here

[gaunt gale]

because I listed my experience with all these cyber security tools

like SIEM and wireshark

[meager kernel]

Final exam today guys
Wish me luck

[gaunt gale]

I do'nt know

[eternal mango]

Good luck!

[gaunt gale]

thanks

[sharp shuttle]

yes but you bypass HR

[rugged ravine]

gl bro!

[meager kernel]

C++ really breaking me apart

[terse dirge]

What SIEM tools?

[gaunt gale]

ya I would show my resume but it has personal identifying info on it and I'm too lazy to edit stuff out

ya

[terse dirge]

Just list them here then.

[iron depot]

There are no open positions, I'm in the cybersecurity department, alias, anyway, I already deleted it. But I don't see a problem in showing a part of what I do.

[warm dome]

https://tenor.com/view/hang-first-time-smiles-gif-14991372

[eternal mango]

Okiedokie

I'll shut up then

[molten bobcat]

Because loose lips sink ships

[meager kernel]

I'll also give CompTIA sec+ exam today
Or tomorrow

[molten bobcat]

It's opsec dude

[warm dome]

your exposing things which people may have overlooked...usually leads to more stuff

[iron depot]

yes

[molten bobcat]

Yeah so don't take screenshots of infrastructure you're pentesting

[eternal mango]

I wasn't trying to be combative

[molten bobcat]

And then share them in public

Teehee

[eternal mango]

I was trying to help

[meager kernel]

What's the discussion

[eternal mango]

Scroll up

Time to hibernate, nn ❤️

[molten bobcat]

It's important to not needlessly give out information on yourself in public forums because you never know if bad actors are reading

[warm dome]

anyway i could "aquire" htb legacy merch

😉 😉

[sharp shuttle]

you and literally every applicant ever, the corporations lie to you, you have every right to do it back.

the entire process is transactional unless you are doing groundbreaking work

[iron depot]

Yes, but as I said, I didn't play through how I got to that point in the exploration; I only took screenshots, hid the URL, and hid the path to the vulnerability. Showing the path to get there would be a problem.

[warm dome]

you didnt hide the path...

[rugged ravine]

this, i have read so many stories where they got in with no adequate skills for the job and had to learn it on the go

[sharp shuttle]

this is how ITS SUPPOSED TO BE

[iron depot]

No?

[iron depot]

So what path did I take to arrive at failure?

[warm dome]

it was shown outside the url but correct me if im wrong i only looked over it quickly

[iron depot]

yes

[gaunt gale]

I'm gonna put a few sections of my resume on here but not the whole thing:

PROFESSIONAL SUMMARY
    Service-oriented IT professional with a B.S. in Computer Information Technology and a CompTIA A+ certification. Proven track record in providing technical support for Windows, macOS, and network infrastructure. Experienced in troubleshooting hardware, software, and connectivity issues while delivering excellent customer service. Adept at translating complex technical problems into clear solutions, fostering a positive and approachable environment for end-users.

<SNIP>

CERTIFICATIONS & TRAINING
    • Cisco Certified Network Associate (CCNA)
    • CompTIA A+ Certified IT Technician
    • KASE Scenarios Orkla: Dragon Con Detective – Certificate of Completion

<SNIP>

TECHNICAL SKILLS
Security & SOC Fundamentals
    • SIEM fundamentals, log analysis, event triage
    • IDS/IPS concepts, endpoint protection, threat detection workflows
    • Vulnerability management, incident response basics
Operating Systems
    • Windows (Strong)
    • macOS (Strong)
    • Linux (Ubuntu – Intermediate)
    • Kali Linux (Basic familiarity)
Networking
    • TCP/IP, DNS, DHCP, NAT, VPNs, VLANs
    • Network troubleshooting
    • Packet capture & analysis (Wireshark)
Cybersecurity Tools & Platforms
    • Wireshark
    • Nmap
    • Splunk (Beginner)
    • Snort (Beginner)
    • Hack The Box Academy labs and defensive platforms

<SNIP>

IT Volunteer at <REDACTED> Crypto Podcast
    • Supported live podcast production, ensuring stable systems and reliable network conditions.
    • Set up, tested, and troubleshot audio, video, and recording equipment to prevent downtime.
    • Assisted with resolving technical issues in a fast-paced environment requiring quick problem-solving.

IT Volunteer Support Specialist at <REDACTED>

    • Helped students troubleshoot macOS, iPadOS, and iOS devices, focusing on accessibility features for visually impaired users.
    • Guided users through device configuration to improve usability, privacy, and security.
    • Provided clear and patient technical support to users with varying levels of experience.

Cybersecurity Capstone Project <REDACTED>
    • Built and secured a simulated network with firewalls and logging; performed system hardening and vulnerability assessments.
    • Maintained accurate documentation of network configurations and inventory of virtual assets.
Analytical Problem Solving (KASE Scenarios)
    • Completed the Orkla: Dragon Con Detective scenario, utilizing analytical thinking and investigative tools to solve complex technical challenges.
    • Developed skills in data extraction and critical thinking to identify and resolve underlying system or user-reported issues.

<SNIP>

That was just some of it.

I put a few things on there

I just put A PORTION of my resume

[iron depot]

I haven't exposed any information that would allow one to identify the flaw.

[molten bobcat]

This isn't true you didn't cover everything

[meager kernel]

Ah so some guy posted screenshot of a pentesting engagement
Post it again! I wanna see too

[molten bobcat]

This isn't correct

[warm dome]

reads like a fresh outta school resume and im not in hr, also gives vibes of ai generated summary

[meager kernel]

@iron depot post again, I wanna see!!

[rugged ravine]

kinda did tho

[iron depot]

no

lol

[gaunt gale]

then what am I supposed to do? its an entry level position. I mean is there AI that works better for resume building than chatgpt?

[meager kernel]

So why'd you post the first time?

[molten bobcat]

Two googles and youve already revealed too much, which is what goblin was trying to tell you bro

[meager kernel]

And then argue that it didn't do any harm

[iron depot]

Okay, so tell me how I arrived at the failure, tell me step by step.

[sharp shuttle]

lets do a mock interview, off the cuff my first question would be: I see in your capstone project you talk about data extraction, can you tell me more about that?

[meager kernel]

Post it again, I'll tell you

[molten bobcat]

You posted a screenshot of infrastructure you were actively pentesting

That is by definition

An opsec failure

[iron depot]

Yes, and how did I arrive at the failure?

[molten bobcat]

YOU POSTED IT

WE KNEW NOTHING ABOUT THE ENVIRONMENT PRIOR TO YOU SHARING

NOW WE KNOW SOMETHING

DO YOU GET IT NOW

You sharing anything is sharing too much!!

Do your work/school a favor and SHHH

[meager kernel]

You posted it once
Said it didn't do any harm
Asking people how you reached that point
Refuse to post again cause you don't wanna be doxed

Why'd you post it in the first place?

The math ain't mathing

[iron depot]

But that doesn't change anything, as I said, you only know that you are vulnerable to a medium vulnerability, you don't know what you can do with this vulnerability even if you reach it, you don't know how to reach the vulnerability, and so on.

[dusky smelt]

meow

[meager kernel]

Bad kitty

[molten bobcat]

Actually we've already found it

Which is why we're WARNING YOU

[dusky smelt]

😾

[molten bobcat]

HOMIE

[rugged ravine]

i think this is why the beard wizard went to bed

[iron depot]

I refuse, are you sure?

[warm dome]

this is a little bit of a rabbit hole, and it took me over 1.2k applications before i picked up work here again with experience and degrees so im probably not the person to be asking, i've had ssome recruiters tell me i should easilly get things while others told me im to spread out from the stack they use, you basically need to somehow end up with exactly what they want through magic because half the time it wont even get scene because of sheer number of applicants atm

[dusky jacinth]

There's no way

[warm dome]

you removed the app/template part?

[dusky jacinth]

dude

[rugged ravine]

too frustrating to keep up

[rugged ravine]

he did

[iron depot]

No

[molten bobcat]

This needs moderator intervention or he's gonna release information about an environment he has no rights to

Lmaooo

[meager kernel]

@molten bobcat was this the same screenshot?

[iron depot]

Actually, yes, it was removed in the first post as well.

[molten bobcat]

Yes lmao

[warm dome]

it was in the first post thats how i knew the path...

[rugged ravine]

still had some hints about it on the first post

[meager kernel]

I see

[dusky jacinth]

can we get a mod please

homeboy doesn't understand opsec

[rugged ravine]

man this is getting to frustrating

[gaunt gale]

yes, we were in a group project at university in my cyber security class my senior year. I knew a good amount about IT but my groupmates didn't know anything. we were assigned to set up a station of six computers with windows and linux boxes on them and then try to pentest other groups' stations. I didn't know pentesting, but I was the only one who knew how to setup kali linux or any linux distro on a workstation. I helped the rest of the group learn what they needed to learn because they were completely clueless. I helped them set up and configure networking settings on windows and linux devices and helped at parrot OS setup on one of the stations.

[rugged ravine]

im just gonna do some labs

[iron depot]

Which way?

[meager kernel]

@dusky jacinth btw congrats on winning 5 year VIP

[gaunt gale]

basically, I had to figure out how to do my group's work for them

[molten bobcat]

Alright I need you to understand the CTO of the entire freakin company found your open directory from your screenshot alone and is trying to WARN YOU.

[dusky jacinth]

it's just the 1 year LOL 💀

[molten bobcat]

HELLO?

[warm dome]

dont recall the start of it but you did take stuff out which is why i mentioned it

[iron depot]

Which path? Which domain?

[gaunt gale]

even tho no one else in the group knew jack shit and I knew a little

[meager kernel]

Oh
Still, lucky bastard 😂

[gaunt gale]

but much more than the rest of the group

[molten bobcat]

From one security guy to another for the love of God shut up

[gaunt gale]

and that's how I aced the class

[dusky jacinth]

but what about the data extraction though?

[sharp shuttle]

thats great! however, my question was on data extraction. Can you elaborate?

[dusky jacinth]

Sorry actually that's on me

I don't need to be involved in that

[iron depot]

Yes, I removed the beginning and the end, but it didn't reveal anything at all.

[dusky jacinth]

that was the ego, my fault

[iron depot]

I only left the middle section, which had "admin" written on it.

[dusky jacinth]

thank ya thank ya

[dusky smelt]

hey sorry can I DM you for a little explanation about setting up linux?

[molten bobcat]

Did you read my message dude

Hello?

[undone fossil]

I forgot who queuemark was

[iron depot]

Yes

[undone fossil]

Instantly remembered

[meager kernel]

Anyway I got a C++ exam to revise for
Cya guys

[molten bobcat]

Okay did it have any effect at all?

[undone fossil]

Enjoy

[warm dome]

enjoy!!

[gaunt gale]

data extraction because we had to hack other workstations. I actually wasn't able to get into the other workstations because other groups had people with years of experience and our group was a bunch of noobs except for me. I did my best and went through the process but at least I was able to configure devices to be a little more secure. I was the only guy in my group who got a good grade.

I'm serious

[iron depot]

I read it, but as I said before, it doesn't reveal anything, because there's no way I could have reached that point, meaning it won't affect the institution where I work.

[sharp shuttle]

and now you know why i called that out specifically, it didnt make sense to me, and you couldnt back up the claim. i would remove that from your resume.

[iron depot]

I'm not stupid enough to expose a flaw, but I'll take my time and everything else, calm down.

[dusky jacinth]

how ya doin froj

[undone fossil]

Tired

Very tired

[gaunt gale]

https://letmegooglethat.com/?q=how+to+get+up+ubuntu+linux

[molten bobcat]

Brotha

[undone fossil]

Flu kicking my ass

[dusky jacinth]

busy holiday?

[dusky jacinth]

yeah my family is just getting over that rn

[molten bobcat]

I'm just blocking and moving on I desire peace in my life

[sharp shuttle]

damn jord what a shit time to catch the flu, sorry man

[dusky jacinth]

frfr

hopefully it passes soon dude

[molten bobcat]

I hope you feel better sir

[iron depot]

You lost the argument, man. If you saw the path beyond the admin, tell me what it is, how I got there, tell me the domain, tell me everything since you have it all.

[undone fossil]

Is all good I don’t do anything for Christmas so imo it’s the perfect time

I can sit home playing games like a neet

[rugged ravine]

actually i have one question regarding my capstone project. We are going to be developing a system for a critical infrastructure, and one of the ways I'm going to implement security is by it being locally hosted within the premises, but since a panel brought up that the existing sec stack is not pointing to anything and is just standard within the industry we decided to implement an AI powered IDS. Is this the right direction?

[dusky smelt]

thanks, I had one then lost it but I set up 1 already and it came a little newer so I was wondering could I downgrade it somehow with some command

I appreciate the help

[dusky jacinth]

what game tho?

[undone fossil]

Why AI

[rugged ravine]

to be blunt, a buzz word

[sharp shuttle]

its significant

[gaunt gale]

bro

https://linuxvox.com/blog/downgrade-ubuntu/

seriously?

[undone fossil]

Fair enough

So to be blunt back

[iron depot]

But ultimately it could be both. path + security miss config?

[elder inlet]

Who the fuck uses Ubuntu?

[iron depot]

I use kali

[dusky smelt]

I use kali linux

[undone fossil]

Do a threat modelling exercise

[dusky smelt]

ty

[terse dirge]

I use void btw

[dusky smelt]

I use arch btw

[undone fossil]

And from that draw what security controls will be in place

[elder inlet]

I do too, on one of my laptops. But I daily Fedora 43 Workstation with KDE Plasma

[undone fossil]

Look where data will be stored at rest, and data flow

Work from that

[elder inlet]

I use Fedora BTW

[terse dirge]

just install manjaro

[iron depot]

Somethings time i using parrot, god os

[terse dirge]

https://tenor.com/view/belt-fedora-reaction-meme-funny-taeilbarbie-gif-14869617614129692474

[elder inlet]

Nah, fuck all that noise. It's all about the Pentoo!

[elder inlet]

[iron depot]

god, god, fedora this a very good system

[dusky jacinth]

me 😭

[elder inlet]

https://pentoo.org/

[iron depot]

Lammers? Scriptskiddies?

[elder inlet]

[warm dome]

debian/parrot is king tho

[dusky jacinth]

why am I catching strays for Ubuntu rn 💀

[iron depot]

Or communs people

[elder inlet]

Damn those script kiddies!

[rugged ravine]

mhmm, will do it before i proceed with writing the papaer and planning its development

[undone fossil]

Distro debates

[elder inlet]

Satan!

[warm dome]

ubuntu is good but its very bloat imo

[molten bobcat]

Operating systems are just a matter of preference or what is needed at the time lol

[dusky smelt]

idk man it's like I got used to kali linux but last time I set it up was a year ago so now everything is kinda newer and harder to use 💀

[rugged ravine]

thank you froj!

[iron depot]

Debian 12 the better system

[elder inlet]

I am loving Fedora, always kept updated, easily run windows programs, easily run all programs honestly. I've ran into some hiccups, but honestly, she's been super smooth

[undone fossil]

Anon learns that over- customisation is a thing

[undone fossil]

No worries :) best of luck!