general

[scenic maple]

but you will probably need the pwnbox gtk theme

apply it

set the terminal

[vital lily]

Didnt like parrot nor kali, went with something else in the end

[scenic maple]

change the icons

and you should be good to go

probably a browser theme too

[past wigeon]

pentux or whatever? pentoo?

[molten bobcat]

A secret 3rd thing

[past wigeon]

yeah im just too lame i guess, im using kali.

[molten bobcat]

The vet just reminded me to have my cat checked up

In.. February..?

[past wigeon]

im not gonna have the damn thing break down on my have me scratching my head in the middle of an assessment

[molten bobcat]

Bro it's still December hello

[muted olive]

I think there is a vuln in Obsidian

[scenic maple]

dont leak it

[molten bobcat]

This is the part where you shhhh

And ask a close friend

Loose lips sink ships

[meager kernel]

did parrot OS remove the HTB version

i cant find it anymore

[untold fiber]

We don't have one for 7 yet

[meager kernel]

oh

[molten bobcat]

Good morning Ryan

[meager kernel]

will we have in the future?

[untold fiber]

Probably

[meager kernel]

if i wanna download the old HTB version? 🥺

[vital lily]

Man i used to have the old iso

If i still had it i would give

[supple plume]

Hey, are you back to windows?

[meager kernel]

yes

[supple plume]

Unfortunate

[lofty warren]

meow meow

[vital lily]

Why?

[untold fiber]

https://archive.org/details/parrot-htb-6.0-amd-64

[meager kernel]

tyyy
would there any problems though if i download the old version?

[molten bobcat]

Hello Ryan I have a very annoying project idea

[untold fiber]

youd be limited to compatibility with whatever debian version 6 was based off

i think 12

[untold fiber]

what is it

[meager kernel]

and what if i update it after downloading?

[molten bobcat]

What's been stumping me at work is obfuscation.

[untold fiber]

idk

[meager kernel]

lets see

[molten bobcat]

Specifically when theres 50 fucking layers

[untold fiber]

I don't think there is an upgrade path from 6 -> 7

[meager kernel]

why tf-

3 hours holyy

[untold fiber]

7 has a new version of glib, is based on a newer debian release, newer kernel, uses wayland instead of x11

[austere sinew]

why are you rate limited to 340KB/sec is the real question

[molten bobcat]

Because he's downloading it from archive.org

[meager kernel]

probably cause of the website im downloading from

[molten bobcat]

Correct

[austere sinew]

Skill issue

[muted olive]

lol, and there is

[molten bobcat]

The website sets the rate limit for downloads not the client

[austere sinew]

Okay hack the website

Sorted

[meager kernel]

ok i wont download it
sorry 😔

[untold fiber]

maybe try this https://linuxtracker.org/index.php?page=torrent-details&id=be366325e885a553cdd515fa9f27e222245ef04f

[scenic maple]

php still running the world

[untold fiber]

I could ask lorenzo to give me a link to the iso hosted on the parrot servers

[molten bobcat]

Anyway I'm gonna work on a "de-obfuscation" tool

[untold fiber]

but I doubt he would respond quickly

[austere sinew]

Ooh funzies

[scenic maple]

de obsfucation doesnt really work if obsfucation is done right

[untold fiber]

@oblique zenith I summon you

[meager kernel]

yk what ill download the normal parrot

thanks anyway Ryan

[molten bobcat]

The issue is

It's not done right in real life

Ever

[scenic maple]

😩

[meager kernel]

if theres any way of changing to HTB version later on, that'll be cool

[austere sinew]

I wanna see where cloud goes with this

[molten bobcat]

It's literally nesting 500 environment variables full of nonsense

[austere sinew]

Yeah I kinda hate this new version

[molten bobcat]

I hate it so much

[austere sinew]

Tbh

[meager kernel]

didnt know you used Parrot

[vital lily]

If it still takes long you can just download it on background, or like leave it on for the night

[meager kernel]

Im downloading from the official website rn

itll be fast

[scenic maple]

they should use my tool 😩

[molten bobcat]

But yeah I figured like.. okay the obfuscation is being handled programmatically

[meager kernel]

its probably gonna be a bit slow cause im also downloading a game in the background

[molten bobcat]

Surely this means it can be identified and reversed

[austere sinew]

That is horrific to look at well done

[molten bobcat]

It just has to use the same methods as the obfuscation

[scenic maple]

ty ty

[meager kernel]

theres an HTB theme for Vim too

damn

[molten bobcat]

So I'm gonna make a tool that will hopefully cut down on my

Floundering cyberchef attempts

[austere sinew]

Speaking of chef cloud

I got good knives

[molten bobcat]

I saw you got knives yes

[austere sinew]

You’ll be proud of

YES

[molten bobcat]

Learn proper knife handling

[austere sinew]

just slice em

[molten bobcat]

I cut my hand pretty early on learning lol

[meager kernel]

what a british thing to say

[austere sinew]

It’s

Just

Chopping

[meager kernel]

@scenic maple make a spotify HTB theme too 😂

[molten bobcat]

It's not

[austere sinew]

It so is

[molten bobcat]

How you cut makes a difference

[austere sinew]

Ya cut thin cut thick

Ezpz

[scenic maple]

this should be legal i think

[onyx dove]

Did the HTB themed parrot got discontinued?

[molten bobcat]

No just not updated yet

[onyx dove]

ah

[meager kernel]

yea theres something called spicetify
it allows access to custom theme for spotify

use that

[scenic maple]

i will look into it

[onyx dove]

and allows no ads

[meager kernel]

make one for vencord too

[meager kernel]

yea that too

[scenic maple]

no flexbox for us

[meager kernel]

whats RISC-V

[molten bobcat]

It's new apparently

[scenic maple]

google it

[untold fiber]

a cpu architecture

[meager kernel]

i see

[molten bobcat]

The little description there called "promising architecture"

[muted olive]

correction: its in a plugin. time to submit PR

[molten bobcat]

Nice work brotha

[meager kernel]

dude HOW

HOW do you find them

[muted olive]

https://tenor.com/jgfOLiCmC90.gif

[untold fiber]

we haven't made one for 7 yet

[austere sinew]

There’s arm there’s x86 then there’s risc-v

[meager kernel]

explain me your process pls

[untold fiber]

7 uses KDE plasma not xfce

[molten bobcat]

He was using discord and noticed something weird lol

[scenic maple]

NOOOOOOOOOOOOo

YOU CANT DROP XFCE

[molten bobcat]

Er, obsidian

[scenic maple]

AAAAAAAAAAAaa

[meager kernel]

that sucks

[muted olive]

I'll tell you in a while. The specific thing I'm doing, its very interesting
Or actually I'll just dm you

[meager kernel]

pls do
appreciate it

[onyx dove]

Oh I haven't been on the pentest scene for years, I just remember that last time when I checked I think it was outdated then, maybe I just checked it at the wrong time

[untold fiber]

submit your feedback to parrot lol

[scenic maple]

urs already as heavy as it is

[austere sinew]

Risc-v mainly is used for embedded stuff

[scenic maple]

its gonna be heavier than kali

[onyx dove]

It way funnier bothering you guys tho

[molten bobcat]

I like bothering Ryan

[untold fiber]

I made the last HTB theme, so I might end up doing this one too

we'll see

[austere sinew]

I approve of this

[austere sinew]

I approve of this heavy

[scenic maple]

why yall no reelase a design system

[supple plume]

Here is a minimalistic opinionated DS:
$primary-color: red;

[scenic maple]

i wonder if i should just make one

[molten bobcat]

But yeah if I see another powershell payload reaching out to a url with 50k lines of encoded garbage just to reach out to an additional url for 75k more lines of encoded garbage I'm gonna throw my laptop into the Sun

[supple plume]

You could fork one

[onyx dove]

yay free labor

[scenic maple]

true but then it would look like a forked one

[untold fiber]

its not really free

considering im paid a salary

[scenic maple]

i think i should get like 10-20 and then just add the stuff i like in each

then no one would accuse me of stealing

[supple plume]

For one that can be customized

[onyx dove]

we should fix that

[scenic maple]

hmmm

[untold fiber]

im not following the joke here

is the joke that I should be fired or

[molten bobcat]

Wha

No you should charge people kek

[onyx dove]

neither do I

[untold fiber]

this was in response to how I made the HTB theme

[molten bobcat]

Oh

[untold fiber]

and he was like free labor

[onyx dove]

I'm too tired to come up with something clever

[molten bobcat]

Nice

[onyx dove]

So I'm just throwing stuff at the wall atp

[molten bobcat]

I should get up

[dusky jacinth]

Yeah it’s clear out my entire ticket queue kinda day

We out here

Also a 1999 kinda day

But most days are a 1999 kinda day

[molten bobcat]

It's my last day of holiday break before it's back to the grind

[dusky jacinth]

Anything planned?

[molten bobcat]

Working on a project idea and cooking

[dusky jacinth]

Rad

[onyx dove]

I cooked pizza

it was

good

[molten bobcat]

I need to clean a bunch

Busy cloud today

[onyx dove]

I did that too

it was

not good

Why am I here again?

[molten bobcat]

This is a cybersecurity server

I enjoy it a lot, infosec that is

[onyx dove]

I did enjoy it too

[topaz scaffold]

Oh my baby😭😭

[onyx dove]

then realized I'm bad at it

[topaz scaffold]

My mcskidy😭

[onyx dove]

[meager kernel]

KDE on Parrot sucks

Parrot does look better than Kali though ngl

[topaz scaffold]

McSkidy looks even better

[cerulean bloom]

true, but I like kali better

[topaz scaffold]

Beep beep donut

[meager kernel]

im trying out parrot

[topaz scaffold]

Kratos

I have some lamb

Would you like some

[meager kernel]

no

[cerulean bloom]

nice

[topaz scaffold]

Why not

It's delicious

[cerulean bloom]

I've seen from others that parrot gives more errors while executing commands

[topaz scaffold]

Donut

@cerulean bloom

[onyx dove]

beep beep I'm a sheep

[molten bobcat]

🐑

[muted olive]

https://tenor.com/ba16p.gif

[proud moth]

RIPP

[undone fossil]

Hello chat

[meager kernel]

Hopefully not
If it does, I'll use Kali

Just a VM in the end, there's no risk

[native plume]

Parrot is totally fine

I only bricked it when I tried to do really really dumb stuff on it

[dusky jacinth]

Dude, you gotta try exegol

Just see if you like it

[meager kernel]

I bricked

Myself

[dusky jacinth]

It’s recommended it’s ran on Ubuntu, but I mean YOLO

I got it setup yesterday which is super quick

[native plume]

I was messing up with driver stuff that's why

[dusky jacinth]

And it’s so fucking nice

[native plume]

But other than that it works just good

It's even more light weight than kali at some point

[dusky jacinth]

I feel like using it doesn’t interrupt my workflow at all

[meager kernel]

I think I'm having a driver error
Cause I'm bricked

Jk

[west venture]

All hail 22Kratos, the king who never was

[undone fossil]

Kratos one day I believe you will manage to use a pc for longer than you spend swapping OSs

[molten bobcat]

Heya froj

[dusky jacinth]

This is crazy

[undone fossil]

Hello

[proud moth]

can you please for the love of God just install kali and do some boxes instead

[meager kernel]

That's....
What I am installing parrot for

[meager kernel]

Hopefully

[flint copper]

Bro is bricked

[proud moth]

why parrot

that makes no sense

[flint copper]

[proud moth]

why using a derivative when kali is just more stable and more documented?

[undone fossil]

Anyone for a vc

[molten bobcat]

I am sir

[undone fossil]

I shall be on soon

[molten bobcat]

Same I must

Eat breakfast

[warm dome]

finally got hercules

[heady sage]

Proud of you

That wasn’t easy but you did it!

[warm dome]

box is straight up torture ngl

[warm dome]

grinding hard for that rank before work starts again haha

[supple plume]

xd

[proud moth]

i got 7

[supple plume]

|| |||| |||| ||
|| |||| |||| ||
|| |||| |||| ||

sheeesh

[warm dome]

come to realise that academy is great but learn so much off some of these labs still

[supple plume]

landmine finder 2.0

[meager kernel]

VM is working
time to hack

[undone fossil]

noway

quick someone show him the grub menu

[dusky jacinth]

Mumfin and bagel

[proud moth]

great, now install TensorRT + CUDA and brick the OS

[meager kernel]

man stfu

[proud moth]

[supple plume]

Kratos try my bash config

[meager kernel]

in a moment

[plucky hare]

Any1 having issues with spawing a machine? Having this issue for 2 hours already and tried multiple possible solutions..

[meager kernel]

elaborate on the issue

is the machine just not spawing on the website?

[plucky hare]

Yep.. Deleted cache and cookies already, logged in/out and tried a other browser. but didnt work 🙁

[meager kernel]

you should message support

[plucky hare]

I will, thanks

[celest yarrow]

guys, does doing penetration tester module on htb and practicing rooms make me ready for OSCP?

i'm new here so excuse me if this is not the correct room

[frosty bane]

@scenic maple

[scenic maple]

https://tenor.com/view/cat-meme-gif-8306311747146329689

[plain pivot]

@scenic maple you may get another fish shell user hehe. i have a general question about using tools inside and outside of a dedicated hacking vm. is it not cumbersome changing from host os to the vm and viceversa for using tools installed on the host and the vm? dont see the benefit of it.

[scenic maple]

i dunno actually i have always used bare metal i am confident that i wont brick my system but also a vm would make it very slow for me
i guess i would run a few common tools like burp and nmap on host pc or like software that needs access to bare metal stuff like hashcat
and put all the other rarely used tools in a vm that usually break a lot

or u could go full on vm mode

i usually recommend going on full vm mode

that separates stuff which is good not just for bricking ur system accidentally but also when consulting with clients you want to make sure files dont get interchanged or you accidentally dont share something sensitive

[gray wraith]

There was a heated discussion few dsys ago about how shitty oscp is

[scenic maple]

it does tho

i think cpts makes well prepared for oscp

[gray wraith]

Thing is, is oscp worth it? Its pretty expensive last time I checked

[dusky jacinth]

It’s HR holy grail

[plain pivot]

yeah i know so i will stay true to the full vm mode. just wanted to ask for clarification. i am using macos with a parrot vm for now. kinda feels bloated and i hate that cause of my audhd.

[scenic maple]

if it can get you a job then its def worth it

better take oscp and get a job than do cpts and not be employed

always go for the job

[gray wraith]

Thats also true

[scenic maple]

cpts is good for skills but not there for hr

but soon

it will

[gray wraith]

I think so too

[granite field]

does anyone feel lost as hell when doing web bug bounty? I properly found my first CVE through code review and tracing fucntion calls. But I feel like I don't know anything about web pentest when doing bug bounty lol

[scenic maple]

have you tried hunting on platforms?

[supple plume]

golam

[scenic maple]

like bc or h1

[supple plume]

do you know how to enable DOM Invader on burp?

tried googling

[scenic maple]

it needs pro

afaik

[supple plume]

seriously

[scenic maple]

nvm

[supple plume]

ok great

[scenic maple]

https://portswigger.net/burp/documentation/desktop/tools/dom-invader/enabling

there

[supple plume]

I suck at googling

thanks

[scenic maple]

https://tenor.com/view/cat-leaf-vibes-vibing-sleeping-cat-gif-17297041570420202318

[muted olive]

too lazy to read

[granite field]

yeah i do, I look for targets on h1, maybe im overwhelmed when doing bigger targets

[muted olive]

gork summarize this for me

@gork

[scenic maple]

try govt vdp programs on bugcrowd

once you get a few bugs then move on

[scenic maple]

I came here to hack not read ~ cinzinga

[muted olive]

veni vidi vici

[muted olive]

got any nasa letters yet?

[scenic maple]

nop

focusing on job

[muted olive]

get soon

[scenic maple]

🙏

[proud moth]

i need to do this

nasa letter goes hard

[minor heart]

oh man my power went out once already in this crazy storm

kind of scared

[muted olive]

https://tenor.com/7eBwa1eE14.gif

[granite field]

thanks, I will try that

[minor heart]

wow after finishing that first mod and the next one is like doot da doot

[muted olive]

do you live in a storm prone area?

[minor heart]

for winter storms yea - state to be more exact lol

I can't afford a backup generator though

and I can tell there's some electrical that needs to be done, but I haven't like messed with that since I was way younger, so I don't really want to tbh

[muted olive]

Try to build one yourself, perhaps

I've seen guides for DIY backup generators by reusing things like old radio parts and solar panels

[minor heart]

I've considered that

I bet there's something on hackaday

[muted olive]

It's weird, I asked ChatGPT how to build one just now and it started with "Since you're a minor, I'll tell you safe ways to blah blah blah", and I'm not a minor lol. It was an incognito, logged out session

[upbeat tangle]

whats up

[minor heart]

https://hackaday.com/2023/09/22/thats-not-a-junker-thats-my-generator/

[minor heart]

literally easier to just check hackaday haha

[muted olive]

never heard of that one before

nice, car parts + arduino = pretty much anything, then 😆

that is cool

[minor heart]

I don't have a junker, but the theory checks

[green kite]

Hello chat

[vivid flower]

Gm

[green kite]

How’s it going

[minor heart]

heya

[upbeat tangle]

All good

[minor heart]

I think the only issue with even DIY'ing it is - even for a DIY - I'm spending $$ to some degree

b/c it technically has to have the power to backup a house @muted olive

[muted olive]

Still less than what you'd be spending for another generator, I guess

[minor heart]

a small radio wouldn't do, but I have 4 old servers in my garage

[upbeat tangle]

bought a laptop for my daughter today, and the sales guy started talking about booting up the computer to activate the windows key, i just told him that we wont need any windows key. We boot straight from the linux usb

[minor heart]

I can't get to them atm

I have a data array too

[green kite]

Glad to hear

[minor heart]

don't ask

I'm not even sure if they'll run bc they've just been sitting there forever

[vivid flower]

Cool to see parents starting their kids on linux

[muted olive]

To be honest, its completely doable if you just get the right parts. And they'll be there in items you already use everyday. You just need... idk, stuff like DC motors and basically transformer equipment

[minor heart]

I can probably get a multimeter to check

[upbeat tangle]

@vivid flower well, i have been extremely transparent about how corporations sell our data and stuff like this. they know all about it, maybe to the point they get annoyed listening to the tinfoil hat father xD

[minor heart]

I taught mine to solder and such by the time she was 12 hehe

[vivid flower]

Im trying to convince my gf about that stuff rn and i dont think she cares that much

[upbeat tangle]

Maybe try selling in linux on other points rather than this

People love convenince, and linux computers boots up SOOO Fast

[minor heart]

i've tried to get my bf into stuff for like ever

he's just not into it

[vivid flower]

She spends over 50 bucks a month on streaming services and i think i just need to build a plex server

[minor heart]

yes/no: depends on what she's streaming. if she's on 1 service for a particular show

you can always rotate subs though

I do that

[vivid flower]

True

[minor heart]

like if i know a show I really like is gonna be on X platform - i'll sub for the duration of the show, or wait till it's over + sub a mo + watch + cancel

[vivid flower]

But the data

[upbeat tangle]

My wife is a specialist on rotating subs for streaming services, if you unsub for a couple of months they will remail you with a deal of lower price for the first month and stuff like this

[vivid flower]

Palantir is gonna know i watched supernatural

[upbeat tangle]

So you get 1 month cheap and just unsub after the first day

[minor heart]

yep!

they charge you less

i like doing yearly subs when I can tbh

the fact that some services canceled that kind of gives me the ick

[vivid flower]

Thats a hot tip ig

If i move in with her tho i wish we could just have a huge media vault and id do private trackers

[upbeat tangle]

Theres so many of them now you cant sub to them all, you will go broke. so have to rotate tbh

[vivid flower]

And pay 0 dollars

[minor heart]

literally better to just get friggin cable again

lol

[upbeat tangle]

Or even better, raise your sails and get out on the seven seas

[vivid flower]

Thats what im sayin i taught her how to use tribler but shes not that tech savvy

[upbeat tangle]

First thing i showed my daughter is how to connect to VPN nodes in wireguard

xD

using the terminal baby

no spyware or bloat like recall and copilot

go to chat gpt in the browser instead

much better

[vivid flower]

Ive been showing her a lot of old movies so maybe she will realize a lot of netflix stuff isnt good

[upbeat tangle]

well i realized that myself 2 days ago lol

i watch back to the future 1 and 2

[vivid flower]

Great movies

[upbeat tangle]

and was like... BRO these movies are sick

my kids agree

they liked them too

[minor heart]

watch The Goonies

[vivid flower]

Watch starship troopers

O yeah your kids would love the goonies

[upbeat tangle]

gonna check what it is

imdb is my friend when it comes to that...

[minor heart]

Classic

[vivid flower]

Ive been to astoria didnt see any pirate ships but it looks like the movie

[hexed horizon]

Hey, where can I get a hint for "Fries" room?

[silver forge]

Apply ketchup

[subtle egret]

What's that? 😑

[hexed horizon]

Is not this an HTB channel?

[long forum]

#boxes

[proud moth]

This may take some time

[ornate ibex]

Helloooo

[silver forge]

https://tenor.com/view/grogu-star-wars-mandalorian-baby-yoda-gif-9168999412781595068

[ornate ibex]

wassup

[maiden anvil]

in one of my favorite games you can end the story by sacrificing yourself to save the world

or

you can sacrifice the world by plundering it into total darkness

[minor heart]

hi hi

[ornate ibex]

@maiden anvil what game is this?

[maiden anvil]

dark souls

[ornate ibex]

Looks like my VM needs more juice

[analog saddle]

are we completely unable to send messages to support right now?

[ornate ibex]

You can, on weekends the support staff is limited and additionally it is holiday season so that adds more wait time.

[silver forge]

https://tenor.com/view/tired-groggy-sleepy-what-dazed-gif-16582493918036962522

[austere sigil]

updating kali I see 👀

[ornate ibex]

If it is something urgent and not related to billing, I can assist.

[proud moth]

yeah i wanted a little kali VM somewhere just for fun

i am really bored today and worse than usual

meds don't work anymore, oh well

[analog saddle]

it is a billing thing. I can't figure out how to send a message

[austere sigil]

that doesn't sound good

[ornate ibex]

which platform?

[analog saddle]

academy

[ornate ibex]

Do you already have a subscription?

[analog saddle]

yes

[proud moth]

thiking of becoming an isolated monk in a church or something

i'm tired boss

[austere sigil]

not sure what to tell you

[upbeat tangle]

tired of what?

[proud moth]

living, primarily

[ornate ibex]

If you are using beta click on the question mark symbol and select contact HTB Support.

Else on bottom right there is support bubble

[upbeat tangle]

Is it a temporary bad day or worse?

[austere sigil]

I asked Excel what the purpose of life and it told me to create some Spreadsheets

great advice

[ornate ibex]

Else if either does not work, then you should check if the ad blockers on the website is disabled

If not use email [e-mail]

[proud moth]

yeah i dunno i've been stuck like this for a long time now, some years maybe

[ornate ibex]

Good nightz

[silver forge]

disabling ad-blockers is not going to happen

[ornate ibex]

https://tenor.com/view/white-monkey-funny-face-animal-lol-why-gif-19799376

[upbeat tangle]

Is it your general living situation or like work or something you can pinpoint is the root cause?

[analog saddle]

right ... unfortunately it seems the actual 'send a message' functionality is disabled currently

[ornate ibex]

hmm ok, then I know why but then use the email as I suggested.

[proud moth]

yeah who knows, it's probably a mix of things, i don't really have a good family or friends, not really happy about what I do either for work

i do have a couple of hobbies but that's about it

[upbeat tangle]

So, my best advice is to start making a list of things you are not satisfied with and then start thinking about which of those things you could start changing first. start with the smallest things first and go slowly

Somewhere a long the road you may feel already its feeling better so you dont need to change anymore

sometimes all you need is a direction

and not a goal

[silver forge]

to hell on a hand basket

[rapid badger]

Nah just take more meds

[upbeat tangle]

I was on meds for years for adhd but they really did nothing except mask the root problem

pharma wants to sell

Most important anyway is to make peace with ourselves, and accept who we are to begin with and work from there

[upbeat tangle]

whatever you think its the right course of action , i wish you all the best and good fortune

[proud moth]

thanks man

[terse dirge]

@molten bobcat is this fax?

[upbeat tangle]

Theres no profit in us getting off the meds xD

[molten bobcat]

Wha

[terse dirge]

my reaction too

[terse dirge]

what are your thoughts on vaccines?

[upbeat tangle]

What do you mean?

[hexed horizon]

Hi man, is there any clue on the box to guess the db-m**** vhost? I tried several wordlists and nothing worked.

[upbeat tangle]

I think vaccines are great, apart from a few of them which i think are redundant

Any vaccine that is related to the flu is something i personally avoid. Influensa viruses up here in sweden they mutate all the time, so then you have to go and vaccinate all the time and still get sick because now you got another version thats mutated. Its a waste

[rapid badger]

Swedes must blow western democrats minds. Both super liberal, but didnt enforce the jab on their citizens

[upbeat tangle]

Haha maybe

[terse dirge]

what's "the jab"?

[upbeat tangle]

It was indirectly enforced actually

Anyone that works for the state basically took the first shots, but they realized what i wrote and stopped

like chasing your own shadow

[maiden anvil]

tetanus is a complete and total scam

the chance for infection is so astronomically rare

[terse dirge]

it's a scam invented by big steel (joke btw)

[maiden anvil]

there is absolutely zero justification for it being pushed on patients with every office visit

other than to make money

[upbeat tangle]

in Sweden i think we get one of those tetanus when we are kids, they say it will last you for many many years

[rapid badger]

You know the one . Tested less than a car seatbelt and forced on millions.

[terse dirge]

I don't think I do

[upbeat tangle]

Im pretty sure there is no big conspiracy behind any of these things, usually its just monetary incentives

[rapid badger]

Ofc money makes the world go round

[proud moth]

scrape the git repo

[upbeat tangle]

specially with the covid jabs, they saw a massive opportunity to make money with vaccines and cut a few corners on production to get it out much faster than it should have been

And now its a wide known fact here that they caused heart problems

for some people

i dont know in your countries but in my country its like this

[terse dirge]

why call it a "jab" and not a vaccine? A jab is a punch not a vaccine.

[upbeat tangle]

its just a habbit lol, during the first year it was heavy censorship on anyone questioning the narrative

so we had to say these other words to be able to discuss it

on social medias

[terse dirge]

What if it wasn't censorship but dangerous misinformation they were trying to prevent spreading?

[upbeat tangle]

Even doctors that were fired for asking questions that first year

[hexed horizon]

Thanks. I'll do it.

[maiden anvil]

what's the bar for determining what is and is not misinformation?

always wondered that

[elder inlet]

https://tenor.com/view/white-cat-burrito-gif-8889135913780057940

[upbeat tangle]

How can someone spread misinformaton about a new virus that nobody knows nothing about ?

Asking questions is not misinformation

[maiden anvil]

@zealous charm @willow magnet any hacking this fine sunday?

[upbeat tangle]

You have to ask the hard questions to find the answers

[maiden anvil]

it's kind of a meme word these days to scapegoat any conversation one disagrees with

pretty meaningless tbh

[terse dirge]

if no one knew anything about it then how were they able to develop tests for it and recognize the symptoms of covid?

[upbeat tangle]

Im asking the same question

[terse dirge]

I'm not really educated on that, personally I think that misinformation is stuff like "raw milk better than pasteurized milk" or "vaccine bad because causes autism"

[upbeat tangle]

I tend to agree on that

[terse dirge]

no, you're saying that no one knew anything about it and I'm asking how were they able to make tests and develop a working vaccine. Maybe it's because they actually did testing and found what worked and what didn't very quickly 😄

[upbeat tangle]

Maybe

[terse dirge]

you're able to lookup the studies and such on the research they did I believe.

I'd imagine something like that is public info now

[upbeat tangle]

I was never really interested, because its a mutation of the flu virus so i took my chances and ignored the vaccine. If i die i die, didnt really care

However, i was never sick

[fair aspen]

👀

[upbeat tangle]

Never used a mask, never took a vaccine, never social distanced

[maiden anvil]

I saw a study recently that made the argument that giving people tick-borne alpha-gal, which can cause an extremely dangerous allergic reaction to red meat, in some bizarre justification to stop the killing of farm animals

[upbeat tangle]

i ignored all of it

[silver forge]

I would kill 1000x more farm animals just in spite if I was given that

[fair aspen]

is there a mod lurking chat? 😄

[lusty forum]

you do know the flu vaccine changes year to year to keep up with mutations right?

[upbeat tangle]

Yes, and why would i need it?

[terse dirge]

I always social distance, I like my personal space and respect other's personal space 😄

[lusty forum]

it helps prevent getting the flu which kills many people per year, though it mostly kills babies, elderly, and at risk people

[silver forge]

I just ate a piece of a pig, and it was tasty 😊

[terse dirge]

https://tenor.com/view/bacon-food-gif-12583283796040549115

[fair aspen]

I am chilling with my meat lover pizza

[lusty forum]

https://tenor.com/view/pete-davidson-bacon-gif-26968110

[terse dirge]

https://tenor.com/view/epic-embed-fail-ryan-gosling-cereal-embed-failure-laugh-at-this-user-gif-20627924

[upbeat tangle]

I understand your concern, but i dont need to vaccinate against something i never get

[lusty forum]

[terse dirge]

I am legally required to do it to everyone and can't discriminate

[willow magnet]

None from me. Going through wkl CI/CD course soon so I got up to speed on DevOps foundations last week. Gonna lab up the course tomorrow or the next day

[maiden anvil]

https://onlinelibrary.wiley.com/doi/abs/10.1111/bioe.70015 oh hey look there really is a study justifying forced meat allergies, I guess that's not misinformation

published this year as well

[terse dirge]

https://tenor.com/view/rage-bait-l-rage-bait-ragebait-l-ragebait-thanos-gif-1201177070319080685

[fair aspen]

lactose intolerance is basically just skill issue with your body

[maiden anvil]

people love assuming there's no conspiracies because society is morally ethical

but truth is stranger than fiction

[upbeat tangle]

Thats an epic line

[fair aspen]

no joke, if you just drink milk and eat cheese for a while, you'll not be lactose intolerant anymore

[maiden anvil]

that kinda sounds like misinformation but imma check brb

[upbeat tangle]

I think what he wants to achieve is that the body will become inhabited with the bacteria that digests lactose eventually

[fair aspen]

https://www.youtube.com/watch?v=h90rEkbx95w

[upbeat tangle]

If that works in reality im not sure

[maiden anvil]

AI says no, but a page on purdue.edu appears to insinuate otherwise

[minor heart]

@thorny pumice poke. take req.

[neat cipher]

It's unethical to force people to stop eating meat, unless there's not enough meat to go around. Cows eat snakes, dears eat rabbits, chimps eat monkeys. It's only natural

[lusty forum]

never trust AI

[minor heart]

cows eat grass 😐

[lusty forum]

trust sources

[maiden anvil]

we also just saw a source justifying forced meat allergies, so dunno that's the way to go

[minor heart]

no actually just bc someone said cow

doesn't mean i'm going to chat

back to my labs!

[upbeat tangle]

I know with other food types its possible to inject into your intestines bacteria strains that you will eliminate allergy because you can now properly digest

[maiden anvil]

I think I heard squirrels are becoming cannibals now

[lusty forum]

that’s not really…….

[maiden anvil]

it's a study, and people generally glorify studies as sources of truth these days for some reason

generalization that isn't universally applicable, but those are the times we live in

[lusty forum]

i mean when trying to get an answer to a question i’d generally trust reputable sources over ai

[neat cipher]

There's rare instances, but yeah it happens

[upbeat tangle]

i like your thought process

[fair aspen]

btw, Flukeyy, if you referred to me in this message, I use she/her pronouns please and thank you

[neat cipher]

A study is only a discussion of some idea, and maybe some tests that were done on the idea, with an explanation of why the test results show if the idea is confirmed. It takes a lot of tests, experiments, papers, etc., to make something appear like it might be legitimate

[upbeat tangle]

eh ok...

i had no idea that was super important to you

[maiden anvil]

my uninformed hot take on animals is that the self-aware ones dont belong in zoos

[fair aspen]

it is when you refer to me as the wrong gender, cause then you don't talk about me

[neat cipher]

Nothing belongs in zoos

[maiden anvil]

I tend to agree with this extreme on zoos specifically

[proud moth]

i am releasing some happy chemicals

these cocktails be expensive AF though

[upbeat tangle]

Ok. i understand. Then i can tell you, you can refer to me as whatever you want. as long as you quote me i understand who you are talking to. I dont need outside validation to know my own identity

[maiden anvil]

the middle one looks delicious, what's in it?

[neat cipher]

It's important to indulge, for science...

[proud moth]

it's unreal

it's a coconut variation of the pina colada

with banana and other mexican liquors

[lusty forum]

it’s not even noon and i need some of that

[proud moth]

fr fr cuh

[fair aspen]

well if you just say a pronouns, that isn't mine, with some context to a text in here without answering my message and/or saying my name then I wouldn't know if it's me you're referring to

[proud moth]

today was a long day i need like three cocktails minimum

[upbeat tangle]

I said i understand, i am not arguing with you

[tepid solstice]

You gotta drink more I drank more than u bro

[lusty forum]

any of them tequila 👀

[proud moth]

ayo cuh

i know u a drunk ass mf

[upbeat tangle]

i will try to remember i promise 😛

if i succeed all the time i cant promise

on the internet its not so easy you know

So, everyone having a good day today?

[raven rain]

https://tenor.com/view/outcome-memories-gif-17588520558985176608

[zealous charm]

Poked a little bit at a bug bounty program today. Found default creds that let me interact with an API. I could probably write it up as a P2 but want to hold onto it to try and escalate

Hbu big dawg?

[lofty warren]

mornin' fellas

[carmine pecan]

https://tenor.com/view/muppets-muppet-show-helen-reddy-camel-dance-gif-27122675

[past wigeon]

This UDP scan seems to be taking a bit longer than i'd "like" is this the ideal way to scan?

sudo nmap -sU -Pn -p- 10.10.11.80 --max-retries 2 --min-rate 800

i guess i could bump min rate up to 2000 ? its a box

[carmine pecan]

UDP is slow

and yes you could've bumped the min-rate

but UDP scan is way slower than TCP scan with the same min-rate

[past wigeon]

why would the TCP of the same cmd -sT instead of -sU take LONGer though when theres the handshake and setup/breakdown of the connection involved?

[carmine pecan]

also -p- will take forever lol

[charred escarp]

here are my 2 go-to commands I run for TCP and UDP when first popping a box:

sudo nmap -sU --disable-arp-ping --max-retries 0 -Pn 1.2.3.4

sudo nmap -sC -sV -O -p- --min-rate 1000 --min-parallelism 50 1.2.3.4

[past wigeon]

yeah i was prepapred for a longer than usual with -p- but didnt realisze udp would actually take loonger being connectionless? that has me scratching my head now

[maiden anvil]

Im vibe coding an extension for burp that will predict if the current day is good for fishing or not. gonna add in weather api's and barometric pressure and all sorts of stuff

[charred escarp]

UDP runs pretty quick too

[past wigeon]

unfamiliar with the parallelism im gonna use that

[charred escarp]

From HTB Academy nmap module:

| --min-parallelism <number> | Enforce a minimum number of parallel probe threads to increase concurrency.

Cant set too high tho it'll give inaccurate results or time out. I found 50 is perfect

[past wigeon]

very cool thx

ah , slick tip on the 50

[carmine pecan]

Ugh, I think this is some fundamental misunderstanding about UDP

Sure UDP for some use cases is... "faster" - whatever that effing means, are we talking latency or throughput? - but definelty not for a scan.

A scan requires both ends to be fast, but with UDP this is guaranteed to not be the case.

[zealous charm]

Hell yeah, burp extension really do have a nice and easy GUI

[carmine pecan]

If anything there will be rate-limiting by the side of the kernel itself

a -p- UDP scan will probably take like... the entire day

atleast

[sweet oak]

hey chat i saw there was a 30% off discount with a coupon just the other day

is it still available?

i don't see it anywhere

[past wigeon]

real world or scenario?

[carmine pecan]

both man

The nmap will send a packet for the port and just hang there waiting, and waiting, and waiting

And chances are too much UDP packets will just trigger rate limiting

[past wigeon]

oh, you mean a straightforward one without any "control flow" for lack of a better term here? where we tell it to move on after a connection failure or timeout etc

[carmine pecan]

there will always be a control flow

[past wigeon]

well i meant a basic scan without any user customized control flow... nmap -sU -p-

[carmine pecan]

Still slow, but faster than --max-retries 2 for sure

[carmine pecan]

Notice on r00tm3daddy is using --max-retries 0 instead

[past wigeon]

interesting i thought default, the basic scan there was 10

[carmine pecan]

I think the default changes when it's UDP

or atleast I sure hope so

[past wigeon]

no kidding?

[carmine pecan]

because my custom port scanner does that

and if nmap doesn't

it will be funny

[past wigeon]

right on 😛

[carmine pecan]

😄

[charred escarp]

Yea I set the retries to 0, in case the port is being filtered/blocked the scan completes quickly.

[past wigeon]

you wont "miss" any that way?

i guess maybe i misunderstand the reasons a retry would be necessary i thought it had everything to do with avoiding false reports for filtered/blocked ?

[carmine pecan]

Chances are high, but that's what UDP is all about you see?

[charred escarp]

It's possible you may miss some, esp. if you set then max packets high, but even setting max retries to >0 can still miss some

[lusty forum]

i’m supposed to work today

[charred escarp]

If you really can't afford to miss any UDP ports, you'll go super low and slow, and back off if there's even a hint of a stateful fw on the other end filteirng ports

[carmine pecan]

This is a correct reading, it's just that if you do that for UDP you are fighting UDP's own principles.

[charred escarp]

But for HTB boxes my command is perfectly fine and I haven't had any issues

[carmine pecan]

Yeah... r00tm3daddy put it better

[past wigeon]

ah ok, that puts into perspective

thank you both thats super helpful

[carmine pecan]

With UDP don't do -p-, and prefer --max-retries 0.
And know that if you do need to be sure of no losses.... Then start your scan at 4am and expect results by 4pm or something, lol.

[upbeat tangle]

Non hollywood hacking seems to long and tedious

[carmine pecan]

LoL, it's because you never watched a real good hacker doing it.

They are fast

think fast

[past wigeon]

so we need to know what ports wer'e targeting in advance sorta?

[carmine pecan]

nmap has a --top-ports option

that we prefer when doing UDP

[past wigeon]

oh right , sorry stuck on stupid for ammoent

moment*(

[carmine pecan]

https://cdn.discordapp.com/attachments/1288806853572296755/1445284780819091527/twitter_1995474928343072842.gif

[upbeat tangle]

i cant relate just yet, for me its long and tedious

[idle blaze]

does anyone know if the ranks expire?

its my first time getting a rank thats why

[carmine pecan]

Progress towards next rank: Expire.
Rank that is already achievied: Do NOT Expire.

[idle blaze]

@carmine pecan do points expire?

[carmine pecan]

Yes

If you don't play for like, a year or something.

You will have like... maybe 10 points when you back.

[idle blaze]

noo i dont mean it like that

[carmine pecan]

That's why some people prefer Challenges, they give less points but the points will last longer (on average)

[idle blaze]

i mean like end of the season

[carmine pecan]

Oh Seasonal points?

[idle blaze]

normal

like each season its new active boxes

if the get renewed or sth do these points disappear or not

[sharp shuttle]

you play call of duty?

[idle blaze]

nope

[sharp shuttle]

explain your pfp and name please

[carmine pecan]

yeah the points disappear until you pwn the new box that replaced the old box

[sweet oak]

any idea about this please

[carmine pecan]

https://tenor.com/view/game-club-fish-penguin-fishing-gif-18077765825755482847

[idle blaze]

its cool no?

[idle blaze]

okey thanks

[sharp shuttle]

reminds me of names from xbox live days on cod4 gamebattles, then i see the AR15

[upbeat tangle]

What time is it? Its Brathadair o'clock

[idle blaze]

i did play warzone

but i though it was a OG name back then

and kept it

[sharp shuttle]

So you did play call of duty...

alright then

[carmine pecan]

https://tenor.com/view/lupin-iii-mst-mountain-standard-time-zenigata-jigen-gif-21159732

[idle blaze]

yep BO2 and warzone

uears ago

[grand holly]

there's a mouth breathing homunculus DMing people and asking them to hack an instagram

[sharp shuttle]

you should learn to waste their time for lulz

[carmine pecan]

exactly

Either you have a bot to automatic troll then

[upbeat tangle]

Become a part of the scam baiter community, you waste their time so they cant focus on scamming real victims

[carmine pecan]

or you just engaging on caloric behaviours of complaining otherwise

[idle blaze]

your website is so cool

[sharp shuttle]

whenever i get the insta request i ask them who they need hacked

they send me the profile

i say "i gotchu fam"

in 5 minutes i log into my own insta, grab the home page and shop the pfp and name of the one they want

they start going crazy

[grand holly]

thanks dawg

[eternal mango]

F12 hacker spotted

(that's hilarious 🤣)

[topaz scaffold]

Hnxnxnxnxnxjdjdkddo

Hnxnxnxnxnxjdjdkddo

Mt screen is lagging

[grand holly]

I am pro butcher, don't try to challenge me.😡

wtf does that mean

[sharp shuttle]

you ever dress a deer?

[topaz scaffold]

You'll understand once you are in tryhackme server

[grand holly]

no im a good goy i buy my meat processed

[topaz scaffold]

I used to send lamb tongues. Pennywise. Lamb ctf rooms

[sharp shuttle]

Power level: revealed

[carmine pecan]

You mean a surgeon?

We don't really use the term "pro butcher" it's been some centuries now

It's bad for the business

[topaz scaffold]

Ask Donut or @vernal solstice . They'll explain

[carmine pecan]

@young hearth Is this true?

[sharp shuttle]

come on Eileen

[topaz scaffold]

Bratha

[sharp shuttle]

whats up kissy boy

[topaz scaffold]

Is staff member in this server ? The one that posted everytime we run into error 403

[eternal mango]

Well... that's the song my brain wasn't asking to have on loop

[sharp shuttle]

same

[topaz scaffold]

In tryhackme I'm known as wisepenny or lamb

[sharp shuttle]

still no idea what you are talking about

[eternal mango]

Sharing is caring I guess? 😄

[topaz scaffold]

Are you everytime we run into error 403 we kiss?

[eternal mango]

https://tenor.com/view/confused-no-nope-gif-5413974953753901704

[carmine pecan]

Frozen in a time 'nd space divide
But how?! Would the universe, surviiiiiiiiiveeeeee

https://tenor.com/view/looney-tunes-duck-dodgers-gif-26780442

[topaz scaffold]

Who posted the video😭😭 I want to know is the orange-haired girl in the server

[lime trout]

No

[topaz scaffold]

Am I allowed to send links?

[lime trout]

Yes

[topaz scaffold]

Are you the error 403 girl?

[lime trout]

No

[carmine pecan]

You are having some serious case of false memories here man

Go touch grass

or snow if you in the northern hemisphere

[sharp shuttle]

i could really go for a bangs rootbeer right now

[topaz scaffold]

https://www.instagram.com/reel/DSiQwHIjf5Q/?igsh=MXhzNmx6YjFzZXFqNw==

[carmine pecan]

Bang is common in Brazil Brath

[topaz scaffold]

I am looking for her

[sharp shuttle]

i bet, you guys wouldnt be able to play cops and robbers all day without that caffeine

[carmine pecan]

that's true of everything Brath

this is a sick society

Prohibit Caffeine and the goverment falls

[sharp shuttle]

shes not real

[carmine pecan]

Or people will just switch to something str...

nvm

bye gen chat

[topaz scaffold]

Nooo😭😭

[carmine pecan]

Go to sleep babe, it will be better when you wake up

it's all in your head babe

it's a false memory haha

[topaz scaffold]

Without her??

https://www.instagram.com/reel/DSiQwHIjf5Q/?igsh=MXhzNmx6YjFzZXFqNw==

[carmine pecan]

babe you've always been like this!

Just sleep babe it will pass

see you tomorrow k?

[topaz scaffold]

😭😭ok

[carmine pecan]

👍

😴

😉

[sharp shuttle]

alright back to cleaning

[carmine pecan]

"cleaning"

😈

[sharp shuttle]

you caught me red handed

[proud moth]

@molten bobcat i just realized that your voice is super similar to the ChatGPT male voice pack number 2 or something

it's a bit lower but it's sort of there

[sharp shuttle]

trained off months of him yapping in vc 😉

[past wigeon]

gpt is giving me some output like this when i give it a q like : how to search metasploit without opening it. is this the "best" way?

msfconsole -q -x "search xwiki; exit"

I'm looking for something quick and dirty like searchsploit xwiki that i can do to get a pulse check without actually opening the damn thing

[proud moth]

i am yapping black belt Dan 9

[undone fossil]

monster is 152mg

fact checked by a real monster addict

[austere sigil]

monner*

[sharp shuttle]

thats so absurdly high

[proud moth]

yo wtf for real? 152 mg?

[past wigeon]

zoomers gonna be suprised pikachu face when they find out to "yap" your lips actually have to move... and sounds have to come out... kinda like to touch grass you actually have to go outside.

[proud moth]

is this what Frog drinks to become so OP in hacking?

bro is 23 and could already hack the NSA blindfolded

[sharp shuttle]

can confirm

in the frog temple are columns of pillars

[undone fossil]

not really, its like 1 double espresso

[austere sigil]

https://tenor.com/view/hugh-jackman-password-swordfish-pc-gif-2805395175884207697

[undone fossil]

(it is but its ok we can ignore that)

[past wigeon]

guys you cant hack the nsa unless you drink clubmate, everyone knows that

er... guess not

[undone fossil]

clubmate is overrated imo

[proud moth]

Lore accurate Frog vs Lore accurate Frosto

[undone fossil]

not bad tho

[proud moth]

i want to see this top 10 anime power scaling battle

[sharp shuttle]

i drink ice caffeine, 75mg

[proud moth]

yo fr we could do power scaling in HTB easily

[sharp shuttle]

when i really need it

keeps me up til 7am

[past wigeon]

ice coffee?

[undone fossil]

yeah just double checked, 30mg/100ml

[past wigeon]

or ice caffeine?

[sharp shuttle]

its a brand

[proud moth]

ice coffee is peak

[past wigeon]

oh ok

i thought we were talking about caffeine power mixed with ice+water or something

[sharp shuttle]

pre-workout?

[past wigeon]

oh right, ok its just soda water with caffeine

[proud moth]

@undone fossil about to start this module, how cooked am I?

[sharp shuttle]

You should be hacking not leagueing

[undone fossil]

Are you familiar with rop chains ?

[proud moth]

yeah....not so much

[undone fossil]

gg

[sharp shuttle]

I miss the rop gif

[proud moth]

i am cooked

[sharp shuttle]

you are mega cooked

[carmine pecan]

sleep obfuscation

[proud moth]

RIPPP

[carmine pecan]

Yes you should control RIP, even if it's just one byte

[proud moth]

yeah you know what imma stick to the beginner modules and build some shitty XOR loader or something

[undone fossil]

sleep obfuscation is the current topic of a lot of research 😅 Zilean/Ekko were some earlier POCs

would highly recommend leaving those until later

[carmine pecan]

All those ROP gadgets

and you still can't find the G spot

[proud moth]

daaaaaaaaamn

[undone fossil]

Crazy for you to assume

[proud moth]

OOOOOOOOOOOOOO

[carmine pecan]

it was like... not directed at anyone in particular

just random comment threw into the air

like one does

[carmine pecan]

that's amazing

[proud moth]

nah no way this is just PEAK

[carmine pecan]

sig segv at the end

[proud moth]

the byte bruteforce LMAOOOO

[carmine pecan]

this is peak humanity

[undone fossil]

I only have baller memes

[carmine pecan]

https://tenor.com/view/baller-ballin-shoot-basketball-for-gif-4728986

[proud moth]

this is just Frog's office 10000% guaranteed

[eternal mango]

Maybe dated, but found it very useful when learning ROP

https://www.vulnhub.com/entry/rop-primer-02,114/
https://speakerdeck.com/barrebas/rop-primer

Certainly not up to date 😅

[carmine pecan]

vulnhub is peak nostalgia

[undone fossil]

meh the concept remains

[sharp shuttle]

why is this so well thought out

[undone fossil]

it was made by a trail of bits intern iirc

[sharp shuttle]

effortposting in htb general

[undone fossil]

real i apologise

[terse dirge]

https://tenor.com/view/absolute-cinema-raccoon-absolute-cinema-gif-17862327649353748812

[undone fossil]

have some low tier malware post instead

[sharp shuttle]

id argue this is greater effortposting

[proud moth]

that's just even more peak

[minor heart]

i have a whole page on this

[carmine pecan]

That's what she said

🤣

[undone fossil]

where rop

[eternal mango]

Cool 🙂

[minor heart]

it's in there

https://ropemporium.com/

[eternal mango]

I got a blog post on Primer back then like walkthrough style

[undone fossil]

i mean that's a third party resource, albeit a good one 😅

[minor heart]

https://pwnable.tw/challenge/

[sharp shuttle]

ganna make a htb challenge where you hack an iot pacemaker to assassinate the evil dictator, bitler

[minor heart]

Sam Bowne's classes are still up too, but ya those are a bit dated

[carmine pecan]

what happened to the second party?

will there be a fourth party?

[proud moth]

💀

[minor heart]

i should redo one

its been forever since i messed with any bin

i just don't these days

[undone fossil]

https://www.exploit-db.com/docs/english/28479-return-oriented-programming-(rop-ftw).pdf

[sharp shuttle]

why would you learn binex when JavaScript exists, i get it

[minor heart]

bofs used to be my fav

[carmine pecan]

you prefer v8 pwn?

😨

[eternal mango]

Yeah, not done any for some time, but was fun when I was in to it

[undone fossil]

rop is p simple though, "return instruction pops first value on stack into ip -> chain those lol"

[sharp shuttle]

i prefer v8 splash

[eternal mango]

but getting in to it drove me partially mad

🤣

[carmine pecan]

https://github.com/v8/v8/blob/0da6e850a16bcc0cceb707b921094dc99ff1919e/src/wasm/canonical-types.h#L330

Better buckle up then

[minor heart]

saf would know 🙁

but i'm kind of mad at him atm

[sharp shuttle]

the first rop chain i ever did was on iOS

[minor heart]

my first vuln was a bof

that router story

[austere sinew]

Guys do I make rigatoni with tomato porcini cream and garlic or do i make pappardelle with portobello garlic and rosemary

[minor heart]

you could telnet to it and basically dos it via char amt

was cute - super old old

[carmine pecan]

Yes babe, first option will do well

[sharp shuttle]

the first one

[austere sinew]

the people have spoken rigatoni it is

[sharp shuttle]

i miss the old days of getting premium cable with a blue box

[rose onyx]

3 for the first one

[minor heart]

you're actually old too haha

[sharp shuttle]

my dad showed me how it worked

[carmine pecan]

https://tenor.com/view/cats-gif-21336124

[minor heart]

@eternal mango i finished the first cape mod finally

[sharp shuttle]

im 30

[undone fossil]

This is a baller read for those interested in windows kernel: https://windows-internals.com/one-i-o-ring-to-rule-them-all-a-full-read-write-exploit-primitive-on-windows-11/

[eternal mango]

I wanna do some more IoT and reversing soon. Really enjoyed the last stint

[minor heart]

.41% of users have finished it rofl

[carmine pecan]

The "people" who have spoken

[undone fossil]

Yarden too goated

[eternal mango]

Nice well done 🙂

[minor heart]

you guys should split that up a bit though

it's like a text book in 1 module

[sharp shuttle]

go to your version of goodwill and pick up iot devices, the shit you find on them makes it worth the effort

[minor heart]

and 2 assessments?!

[rose onyx]

No, don't touch it, it's my favorite module.

[minor heart]

it's very hard to keep on track and stay motivated when it's soooo much

[sharp shuttle]

i love finding cached notes, account configs, and internal network artifacts from these devices people donate

[minor heart]

i'm saying to put it as 2 mods instead of one. 36 parts is a lot

[eternal mango]

Not so interested in left over information but research on the device itself

[minor heart]

not to change the material

[undone fossil]

out of interest, what module?

[molten bobcat]

So I'm free this weekend if you are. Feel free to clear your schedule for the day because I'm chucking you into the Sun

[undone fossil]

LMFAO

[molten bobcat]

https://tenor.com/view/jujutsu-kaisen-megumi-fushiguro-aoi-todo-german-suplex-gif-23759522

[rose onyx]

AD enum and attacks

[minor heart]

the module is great, I just fear it's soooo much in 1 module, that it can be demotivating

[eternal mango]

We're always open to /feedback, but couldn't say how often the team can adjust modules etc structurally

[sharp shuttle]

thats... crazy?

[undone fossil]

I think that "demotivation" depends on how you set your targets tbh

[minor heart]

the amt of info in it

[sharp shuttle]

i just think of them like books

[minor heart]

it's literally a book yea

[carmine pecan]

you made it worse for gen z

[sharp shuttle]

it even says like 3 weeks on that one

[minor heart]

oh does it?

[sharp shuttle]

yes

[minor heart]

that's around how long it took too

[undone fossil]

If you're new to it I can imagine it'll take a while but like

It's relatively surface level, just that AD has a very wide scope

[minor heart]

not new, but i definitely took my time to absorb it either way

since i'm studying for the cert

[undone fossil]

yeah that's fair

[eternal mango]

Ok pin it, accurate time estimation spotted

[undone fossil]

For stuff like this I prefer to use it as a reference guide, and I'll pick up things as I find them useful

[minor heart]

my boss asked for progress however

[undone fossil]

otherwise there's no way to retain and properly understand all of that

[minor heart]

and it does look bad saying oh yea, still on the first module

[sharp shuttle]

average AD hacker

[undone fossil]

Average AD hacker cant get past hacktricks

or their entire methodology is just this svg https://orange-cyberdefense.github.io/ocd-mindmaps/img/mindmap_ad_dark_classic_2025.03.excalidraw.svg

[minor heart]

you shouldn't mention that name in here haha