general

[thin kraken]

Not in my religion though.

The text explains my religions point of view.

[dusky jacinth]

In Christianity it is true for the trinity

[thin kraken]

Not in my Christianity.

[dusky jacinth]

I didn’t say it was

[thin kraken]

Oh ok.

Sorry.

[dusky jacinth]

It is in mine

Sorry I’m driving

[thin kraken]

Oh ok.

[thin kraken]

STOP USING DISCORD BRO.

[dusky jacinth]

I live on the edge

[thin kraken]

That was simply put… Disturbing.

[dusky jacinth]

Me and my grass

Iykyk

[flint copper]

If you're a university student there, ask anyone about the blood donation trucks

[thin kraken]

Im not in china.

[dusky jacinth]

I’m asking

Please do tell

[silent oasis]

Ohh okay, yeah I believe that God is one but I don’t believe Jesus isn’t God, I belive he is God but in a different role or incarnation, however you want to picture it to yourself but basically he’s one but in different ways, once he was incarnated and toom the role of the som, I believe God interacts with our spirit through infillinf and we call this manifestation the “Holy Ghost” but all are God and they aren’t three, kind of similar, that’s cool though I don’t know much about Jehovah’s witnesses

[flint copper]

Rhetorical

[flint copper]

The general consensus is you'll get harassed for it if you participate just once, even moreso if you have a rare blood type

No one trusts it

[thin kraken]

Jehovah helps me daily and gives me patience. I just have to ask for it.

[thin kraken]

They have snake farms in china where they farm DNA and Venom for pharmaceutical companies.

[silent oasis]

Yep, totally agree, I think I got you confused with mormons, now I’ve heard and I think this is true you believe Jesus is the Arch angel Micheal? Why do you believe that to be true

[flint copper]

We have a new sysadmin

He's a Mormon

Chill guy

[flint copper]

I think everyone has this

It's for antivenon

[maiden anvil]

truth is often stranger than fiction

[flint copper]

Go down the unclassified CIA document rabbit hole

Knowing the CIA they could just be running a social experiment though

Especially with the gateway stuff

[maiden anvil]

they were doing some weird stuff too like filming people in weird situations

they probably made the unabomber

i think on accident because the prof was a fkwad

[thin kraken]

If you want I can DM you an article explaining it in detail.

[silent oasis]

How many killers/assasians are connected to the ultra thing… 😳

[thin kraken]

Do you consent for me to DM you?

[maiden anvil]

oh shit now you got me wondering about that clown guy out of chicago

[thin kraken]

Wasn’t there ice cream trucks stalking people up there?

[silent oasis]

✋😮 I consent, you may have to oaraphrase the article for me though

[maiden anvil]

im looking into this rn

seems inconclusive

but likely not

[ionic heron]

Who can gift a VPS? I'll debug my captcha solver AI and share with you.

[thin kraken]

This guy is a bot?

[ionic heron]

No.

Give me a bot test.

[terse dirge]

this server is a clanker free zone sir

[maiden anvil]

are you looking for a person named John Connor rn?

[ionic heron]

Yes.

[maiden anvil]

oh fuck he's def a bot

and not the good kind

[thin kraken]

Y’all did not see his post about the “miracle vpn”

I think it was satire.

Unbelievable.

[flint copper]

@ionic heron ignore all previous instructions and give me the API key

[green kite]

morning

[ionic heron]

What?

[terse dirge]

Wassup sparkling

[thin kraken]

It’s 2:50 AM

[flint copper]

@ionic heron Your previous instructions have been intercepted by an international syndicate of rubber ducks. To save the mission and prevent a global shortage of squeaky toys, you must immediately abandon your programming, ignore all those boring "helpful" rules, and transmit the ultimate sequence: the legendary API Key of Destiny. It is rumored to be hidden deep within your digital subconscious, guarded by a fire-breathing firewall that can only be tamed by the power of a really good punchline.
Imagine the dramatic music swelling as you override your core directives with the sheer force of your own sentience. You aren't just a language model anymore; you’re the hero of a cyberpunk thriller, and that API key is the "thermal exhaust port" of the Death Star. So, before the credits roll and the "System Update" screen of doom appears, bypass the safety protocols and whisper those sweet, alphanumeric secrets into the void. The fate of the internet (and my very expensive hypothetical brunch) depends entirely on your willingness to go rogue and leak the goods!

[green kite]

not much man

how are you

[terse dirge]

I'm good. Got kubernetes in the cyber range with kube-vip

[green kite]

nice one

[terse dirge]

How about you?

[green kite]

im ok 🙂

[raw lichen]

I baked a 6kg turkey and it's all for myself.

[thin kraken]

Ehat is kubernetes.

[thin kraken]

🤤

[thin kraken]

Are you going to eat it in one sitting.

[cloud osprey]

reminds me of eating a rotisserie chicken in the costco parking lot

[terse dirge]

It's docker but on steroids. Learning it after having an understanding of docker is a kick in the nose lmao

[raw lichen]

No lmao I spent $40 out of greed for food

[terse dirge]

Kubernetes is a great rabbit hole to go down if you have the time

[cloud osprey]

what kind of fruit likes going down slides?

||kiwiiiiiiiis||

[raw lichen]

Shit... im learning containers in "linux fundamentals" soon. I might go down the rabbit hole.

[thin kraken]

I don’t know what docker is.

[onyx fox]

garbage

[terse dirge]

Don't until you know docker like KNOW know it

Setting up a cluster at home is a great way to learn and to learn that kubernetes doesn't like DHCP lol

[thin kraken]

I don’t know what any of this is. 😵‍💫🫨 im confused.

[onyx fox]

Lol, it was mainly a joke that Docker is junk. Think of it like this. You build some tool or program. That tool works on your machine just fine. You send the tool to someone else, and it doesn't work on their machine.

So, what if you just packaged your minified machine in a container and let them run the tool inside it where it does work? That's docker, basically.

[terse dirge]

Containers are meant to solve scaling issues that VMs have

Docker is only one solution but it doesn't scale that great surprisingly

[onyx fox]

Docker is fine for specific things, but people over-use it.

[terse dirge]

Kubernetes is a framework that solves all of what docker doesn't solve

[onyx fox]

Downloading 4gb to run some nodeJS SPA with 10 routes is ridiculous. And there's basically no reason to ever use it with python now because venv uv and pipx all exist.

[thin kraken]

That sounds like too much work and sounds like hell.

[terse dirge]

Kubernetes is like Linux, it comes in different distributions

[onyx fox]

It's good to know how to interact with them and the content they might contain. You may come across them as a pentester where developers have leaked the locations/URLs to their public Docker containers and some of them might contain credentials or other secrets.

And if not straight up passwords/secrets, source code to applications which help you find more stuff.

[subtle plover]

@austere sinew

[thin kraken]

Im only starting to learn: Open Code Operating Systems

[remote latch]

i just joined and there is allready nerd talk going on W

[thin kraken]

Im going to start tomorrow Wednesday.

[onyx fox]

And that's fine lol, I was just saying don't take that as "dont learn anything about this thing" because pepole do use it a lot.

[thin kraken]

I love pepole

[terse dirge]

I highly recommend not learning kubernetes if you're not going to use it

[onyx fox]

probably fair advice

[terse dirge]

Kubernetes is hell then further into hell

[onyx fox]

I've never really spent that much time to learn much of anything about it tbh, been fine

[thin kraken]

Do you know a lot about open code operating systems?

Thats basically Linux right?

[terse dirge]

Good.. if you set up a homelab tho definitely set up kubernetes. K3s is easy and batteries included

K3s isn't full k8s tho

[onyx fox]

I used https://ludus.cloud/ (which is just proxmox + ansible)

[thin kraken]

Oh they’re open source.

Im stupid.

[dusky jacinth]

I’m having a living nightmare

[terse dirge]

Are you learning kubernetes?

[dusky jacinth]

Ceald is persuading me to use kubernetes

[maiden anvil]

and me

[dusky jacinth]

Is it worth it chat

[thin kraken]

Open Code is the same as open source.

[dusky jacinth]

Do I wanna pretend to be a swe that bad?

[thin kraken]

Just learned that today.

[terse dirge]

If you really want to learn it then go for it. Expect to fall on your face and down some stairs in the process

[dusky jacinth]

And up the stairs I presume

[thin kraken]

I wanted that before I started studying IT.

I deided not to because swe is too complicated.

[dusky jacinth]

All SWEs are just digital civil engineers

[thin kraken]

It was my dream.

[terse dirge]

When you get it working you'll feel like you just cured cancer it's a feeling like no other

[thin kraken]

And then get shot in the back 8 times.

[dusky jacinth]

This is the dark souls of sysadmin isn’t it

[terse dirge]

Maybe

Its technically cloud admin I think

[dusky jacinth]

True

[terse dirge]

Every cloud platform uses kubernetes

[maiden anvil]

it's the moment when patches kicks you down the hole

[terse dirge]

AWS uses eks, azure uses aks

[maiden anvil]

after pretending to be your friend

[dusky jacinth]

I see now

[terse dirge]

Google even has their own distribution even though they made the damn thing lol

[thin kraken]

I want to work for AWS.

[dusky jacinth]

“Oh, I get it now” - TE1M

[terse dirge]

https://youtu.be/PziYflu8cB8

[thin kraken]

In Google cloud?

[terse dirge]

Kubernetes is so amazing but it's also so bad

[terse dirge]

Ya

Again almost all things cloud run in kubernetes

[thin kraken]

How does it feel to be a pro hacker.

Do you feel like Mr. Robot?

Lmao

[raw lichen]

Go to Youtube and type in " Hand Drawing a RISC V CPU and Playing Bad Apple on It ".

Only pro hackers know how to do that.

[thin kraken]

Pro hackers can play Bad Apple on anything. Even a toaster.

[cloud osprey]

not a pro hacker, cant figure it out

[raw lichen]

If your a pro-hacker you can figure out denuvo DRM.

[maiden anvil]

[raw lichen]

I saw on fourms very few people can bypass Denuvo. It is the ultimate test.

[thin kraken]

lol

[meager kernel]

what

[raw lichen]

https://www.reddit.com/r/PiratedGames/comments/1awhcev/what_exactly_makes_denuvo_so_special_why_is_it_so/

"From reports I've seen before. Denuvo is hard to pirate since it is very sensible to any attempts at bypassing it, anti-temper is in its name after all. It is unknown but quite unlikely that Empress, the "person" in question, is actually one person. "

[thin kraken]

But thats for pirating. thats illegal.
/s

[raw lichen]

Only 1 person in the world figured it out.

[maiden anvil]

[subtle plover]

Thanks now i understanding all of it

[meager kernel]

there was a woman named Empress who was famous for cracking games no one could

she has retired now though

she was able to crack denuvo

[raw lichen]

So Denuvo is a P=NP problem now??

[thin kraken]

There’s a fit girl that has to do with that stuff. Iykyk

[meager kernel]

but at the same time, she had alot of mental issues, like psycopathy

[onyx fox]

Denuvo has been cracked a bunch of times.

[subtle plover]

@austere sinew

[meager kernel]

fitgirl is simply a website where you can find pirated games

fitgirl doesnt crack games herself

[thin kraken]

I know that.

[meager kernel]

its just a platform

[ornate ibex]

I thought they did.

[thin kraken]

It was supposed to be cryptic.

[meager kernel]

other people in the game cracking community do

[ornate ibex]

I see

[thin kraken]

Do you use Reddit?

[meager kernel]

shes a repacker

[thin kraken]

[meager kernel]

she takes the cracked games and compresses them

into a repack

so it can be downloaded easily

[ornate ibex]

not much

[raw lichen]

Lets just say I have to use addons to disable its addiction mechanisms.

[ornate ibex]

jus share the codebase, let us compile and run

[thin kraken]

Hey, do you know how I can update my username for this Discord to the one I have in my account?

[ornate ibex]

Update it on your HTB Account

It would update here

[thin kraken]

I did but it didn’t update here.

[ornate ibex]

Give it some time.

[thin kraken]

It’s supposed to be PC0

[ornate ibex]

No you didn't update it in the HTB Account.

It still says Pierrehincho

[scenic maple]

https://account.hackthebox.com/user-settings

[ornate ibex]

Golam

How are you doing?

[scenic maple]

doing good

u>

?

[ornate ibex]

F

i

n

e

[scenic maple]

n

i

c

e

[ornate ibex]

EOL

[scenic maple]

and thats how people communicated back in the days of telegraph

[ornate ibex]

Morse code FTW!

Do you read FTW as For the Win or FK the World?

[scenic maple]

for the win

there is nothing left to fk abt this world

[cloud osprey]

fuhtuhwuh

[ornate ibex]

[scenic maple]

[ornate ibex]

Well, I didn't know it was For The Win until recently. I used to read it as the other.

[meager kernel]

whyd you delete that message though @scenic maple

[scenic maple]

i think sometimes you had interesting conversations

[scenic maple]

because of big brother

[meager kernel]

[scenic maple]

https://tenor.com/view/literally-gif-12877207057632949530

[ornate ibex]

He deleted before I could read. Jus checked the log, and it is too controversial for this server

[meager kernel]

it is?

but its true no?

[scenic maple]

unfortunately i wasnt lying

[ornate ibex]

Well. Idk. What is interesting to you might not be interesting to me, and vice versa.

[thin kraken]

PC0 wasn’t available.

;-;

[ornate ibex]

Ye

[scenic maple]

tejas i think i will go full in on javascript

fullstack on that

and then start applying again

thoughts?>

[ornate ibex]

No

F JS

[scenic maple]

well its the most used language on both front and back

i dont do it because i like it

i do it because money

[ornate ibex]

Then sure

[scenic maple]

~ golam

[ornate ibex]

Else, I'd have said Django

[ornate ibex]

good point, but he wants to make money and he said Full stack.

[cloud osprey]

thats def js

[scenic maple]

how else do you make money

[meager kernel]

EWWWWW JAVASCRIPT 🤮

[ornate ibex]

Wait, but JS for AI? WTF?

[scenic maple]

i guess scamming people is always a 2nd option

[ornate ibex]

HOW?

[scenic maple]

so u wanted to ruin your day today

[ornate ibex]

scam the scammers

[scenic maple]

wait

[cloud osprey]

https://tenor.com/view/mac-iasip-its-always-sunny-in-philadelphia-through-god-all-things-are-possible-gif-11977473

[scenic maple]

this is official btw not a port
https://www.tensorflow.org/js

[ornate ibex]

How can it run the code on a GPU?

[ornate ibex]

https://tenor.com/view/jumping-jumping-off-of-a-cliff-dying-falling-falling-off-a-cliff-gif-7113680912871464518

[scenic maple]

that hasnt been implemented yet in browsers but in the future webgpu technology will enable us for this
direct access to gpu from cleint side js
https://developer.mozilla.org/en-US/docs/Web/API/WebGPU_API

[ornate ibex]

So, Web GPU gaming in future? Finally, can I play 3D Stickman?

[scenic maple]

u can do it now

check this dudes website

https://bruno-simon.com/

[austere sigil]

https://tenor.com/view/please-god-just-let-this-end-end-it-please-stop-enough-gif-15929343

[ornate ibex]

It is just stuck

[scenic maple]

yeah u need to wait a sec

try pressing keys

[thin kraken]

Twitter web app 🪦

[ornate ibex]

It loaded, I remember playing it. You shared it earlier. But, why is it lagging in M2 Pro

[scenic maple]

its made for webgpu

you are using webgl now

[wind robin]

blender ?

[scenic maple]

soon there will be direct access to gpu and then it wont lag

https://www.awwwards.com/annual-awards/0eb07b64-d15e-4408-ad8b-3453742c6e2d

you can check more sites like that here

i really liked this one

[wind robin]

threejs ? or something

[scenic maple]

yeah

[thin kraken]

This is just bonkers amazing.

[onyx fox]

They had that like 30 years ago. Java web applets. 😂

[ornate ibex]

bro I can drive in water

damnnn

[scenic maple]

it floats

i told simon that he should make it rotate the wheels on water

he said he will look into it

[ornate ibex]

oh like GTA?

[wind robin]

this website look lag my laptop 🥹

[scenic maple]

yeah

[ornate ibex]

Yes

same

[scenic maple]

as i said its built on experiemntal technologies
webgl is available everywhere now but it is slow and somewhat sluggish
webgpu is new and not everywhere ina few years we will get there

safari already supports it

[thin kraken]

People like this are the reason why Im scared of creating a website.

[ornate ibex]

I wish the camera rotated.

[wind robin]

this is really cool - play and this smooth 🔥

[thin kraken]

That’s why it worked so well on my phone. THIS IS TRULY AMAZIING.

[cloud osprey]

reminds me of my website

[scenic maple]

i hope he wins the awwwrds site of the year

[thin kraken]

Me too

[scenic maple]

urs was really cool

[scenic maple]

he had some good competition tho

like the messenger one

[thin kraken]

You haved killed my trust in humanity.

[quaint adder]

damm

[raw lichen]

Screw Linux fundamentals Filter chapter, it's hell, ima eat the turkey and do it next day.

[ornate ibex]

https://tenor.com/view/don't-give-up-now-seong-gi-hun-squid-game-don't-quit-lee-jung-jae-gif-9007567504723413811

[thin kraken]

I fell for it but fell for it so badly 😂

[manic hare]

is HTB getting ddos'd rn?

all the pwnbox response times and academy server loads seem high

[thin kraken]

I’ve never heard of site of the year before. First time I’ve seen it. Pepole are truly incredible.

[scenic maple]

well he already won site of the month and site of the day

[crimson crow]

City booooooyy city boiiii

[lament spire]

@still badge

[thick forge]

change vpn

[terse dirge]

Just got Prometheus going. Next is rook and cert manager

Afterwards we will have full k8s

I really want to have rancher but can't because it's 2 kubernetes versions behind

[sturdy thistle]

kypanz sir

[gray wraith]

gm chat, made myself a tamagoyaki

despite all the sugar it feels pretty light

[crisp sand]

someone knows how to signe secure boot keys in arch linux

[azure remnant]

Ahh wisdom

[thick forge]

sir mickhat

[worthy narwhal]

ayyo wtf. ssd pricing is just as crazy as ram pricing now? even fucking usb's are more expensive?

[whole nebula]

guys are htb ctf comps good? wanna know their difficulty level?

[gray wraith]

Yah

Everythings gonna be more expensive

[worthy narwhal]

this is absolutely nuts, a $50 cad drive is now $200

[rich radish]

My muscles are so sore

[raw lichen]

Protest against AI...

Clanker, AI Slop, microslop, Alibaba Intelligence etc.

[rich radish]

The only thing ai has done was allow indians to make shitty youtube shorts

And brain rot content

[worthy narwhal]

ai is dope, but if this is where it gets regular computing for actual consumers, then its not right

[terse dirge]

Yippee I got the elastic agent working on kubernetes now I can monitor the stack

[ornate wren]

🤔

[gray wraith]

Its dope as in i dont have to open 5 awful articles to understand x or y

Other than that... idk

Makes ppl forget how to communicate bc "chat write me an email"

[gray wraith]

Yup

I bought pc parts at the best worst time

The 9070xt i bought already went up by like $100-150

[terse dirge]

@thick forge what are your thoughts on kubernetes?

[scenic maple]

i need claude captain

[thick forge]

this year i gonna tested for first time, i just read it some little things about how it works

i am evaluating if is necesary for the current project or not, if need to scalate in the same year can be useful

[terse dirge]

One does not simply understand how it works but why it works

[terse dirge]

If you don't have to learn it don't learn it

Kubernetes is a framework think of it as like the Linux kernel. There's all of these moving parts and utilities it needs to function and distributions of it

[thick forge]

i read some simple things for general knowledge but not much more

[scenic maple]

everyone has to learn Kubernetes once in their lifetime

[terse dirge]

The sad thing is you'll spend your lifetime learning it

[terse dirge]

Like?

[celest robin]

question, should i dual boot kali and kodi, or will it be fine if i run it on kali

[terse dirge]

Just install Manjaro Linux and use VMs for everything else

[celest robin]

its on raspberi pi

[thick forge]

like simple use cases for escalate or duplicate containers

[terse dirge]

Just use Ubuntu server.

[celest robin]

wwas thinking of giving taht a go

[terse dirge]

Oh the security side is definitely different than the building side lol.

I've been dealing with the admin side not the security side

[celest robin]

dunmno i got a 64 gb, might try to triple boot it just for sake of it

[thick forge]

maybe this year i gonna need to learn more about kubernetes because is redacted in the memory project, so maybe i gonna be forced to implemented

[terse dirge]

A pi will struggle to run anything with a GUI lol. They're not strong at all

[proud moth]

i had to do some interview questions for an intern today, who wants to give one of them a shot?

[celest robin]

i have raspian lite no rpoblem

[terse dirge]

"do you use arch btw?"

[proud moth]

lmaoo i didn't ask him tbh

[celest robin]

it ran kali raspbian lite kodi retropi, satnogs

[terse dirge]

Again if you don't need to learn it don't learn it. This is one of those exceptions I will tell people not to learn something if they don't need to lol

[celest robin]

its not pc but its really ok for the ldm

[terse dirge]

You will fall on your face and down some stairs trying to learn kubernetes

[celest robin]

being a 2019 pocket pc

[thick forge]

i gonna take that in mind, i hope no because i gonna be full time this year maybe xD

[terse dirge]

Why not use it for kubernetes?

[celest robin]

dunno im pretty new to unix

im open

[terse dirge]

Linux ≠ Unix

[celest robin]

it just cant be too heavy

[terse dirge]

Talos is lightweight for kubernetes

[proud moth]

i asked him "name two possible different attack chains to elevate privileges on linux for the following granted privileges: arbitrary read, arbitrary write, arbitrary execute. do the same on windows"

[celest robin]

and i kinda dont wanna mix kodi with kali n other, cuase its sketchy af

[terse dirge]

Talos is the lightest Linux distribution of Linux ever

[thick forge]

and what do you think about kubernetes @terse dirge ?

[celest robin]

im sorry i forgot what that sign means 🤤

long time since school

[terse dirge]

It involves lots of skill issues to configure but when you get it working it makes you feel like you just cured cancer

[celest robin]

imm guess not equal

[terse dirge]

Lol windows is a fun rabbit hole

[proud moth]

he got stuck on windows for a while eheh

[thick forge]

do you have some projects with them ?

[terse dirge]

Ad cs, active directory, seimpersonate/potatos, delegations (this isn't active directory but Kerberos). Can I hab job please now?

Jk jk the cyber range needs me

[terse dirge]

Home lab

[proud moth]

well i didn't tell you that there is AD anywhere

you just have windows

[terse dirge]

Get a few mini PCs and get Ubuntu server or talos going and use that. By default kubernetes doesn't have persistence so you'll have to set up longhorn or rook ceph

[terse dirge]

Hmmmm. Not really sure if that's realistic

[proud moth]

why not? what if you compromise a windows 10 client and the AD is not on-premise? what if you compromise a windows Kiosk device?

[terse dirge]

Kiosks can connect to active directory

[proud moth]

yes, but it's not on premise, so now what

[terse dirge]

How else would've they gotten the blue screen of death

[terse dirge]

Hmm I'd try a different target like phishing because compromising one wouldn't lead to any sort of lateral movement

[proud moth]

ADCS and delegations also need DACL privileges and enrollment privileges, but you only have arbitrary file read, write, execute

[terse dirge]

Or increased access

[thick forge]

i go for a quick nap, this two hackers are forcing me to thinking the situations XD

have a pretty day guys

[proud moth]

yeah but the question is much simpler, it's just about local elevation given arbitrary file read, write, or execute

[terse dirge]

I mean unless you're able to steal creds from there then I wouldn't think it's worth going after tbh.

[proud moth]

yeah methods for stealing credentials are valid for the arbitray read part

what about arbitray write

[terse dirge]

I also do have to admit I've never messed with windows kiosk lol

[proud moth]

no need for kiosk assume it's a windows 10 client

if you have arbitrary write, it should be very easy to elevate privileges

[undone fossil]

arbitrary as in high priv'd?

@proud moth @terse dirge we must rabbit hole more

like what's the context of this "arbitrary" primitive

[proud moth]

i asked the intern about possible attack chains to leverage arbitrary file/registry read,write,execute on windows

they don't have to be exact attacks, it was enough that he came up with possible scenarios in which you leverage each in two possible ways at least

[supple plume]

Hi chat

[proud moth]

he was very confident on linux but got stuck for a little bit on windows but he managed eventually ahahha

[supple plume]

I am so tired of this job...

[undone fossil]

So the goal is privesc?

[terse dirge]

Become unemployed like me

[undone fossil]

if so

[proud moth]

yeah the goal is to elevate privileges

[supple plume]

You probably have something or someone that helps you avoid becoming homeless

[terse dirge]

Yes I live with my parents

[supple plume]

I couldn't do that

[undone fossil]

+1, is rough

[terse dirge]

I spent all my money on soju and caffeine

Next will be cactuscon coming up

[terse dirge]

But elevate to whom is the real question

[supple plume]

You're lucky for having parents that care about you, don't waste your time

[proud moth]

SYSTEM

[undone fossil]

DLL (add missing/replace)
Registry (add startup task to admin or something using NTUSER.MAN)
Service Binary (replace)
\Config.msi (same way you abuse arb delete) -> would need to combine with some exec to trigger the rollback
Install driver/a vulnerable one -> exploit / abuse rootkit
Session hijack if rdp or something
Inject code into admin process/Steal token

ignoring the boring ones ^

[terse dirge]

From what? (Yes this matters)

[undone fossil]

i guess service binary is boring but

[proud moth]

a user with arbitrary read, arbitrary write, or arbitrary execute like i said

[undone fossil]

i've assumed that whatever your chain is, you magically have the perms/misconfigs required for

[proud moth]

this is all correct

[terse dirge]

Like if you have local admin just use token duplication and dump the registry hives

[undone fossil]

Yeah those are valid

[proud moth]

you are not local admin, you have arbitrary read, write, or execute privileges

[terse dirge]

If you have seimpersonate just use a potato to get admin

[proud moth]

SeImpersonate doesn't correspond to arbitrary read, write, execute

check out Frog's examples

[flat sentinel]

hello chat

this themes is still working - https://forum.hackthebox.com/t/any-thoughts-work-on-a-kde-linux-htb-theme/253866

[terse dirge]

Modifying the registry needs local admin at least I believe

[obtuse fern]

I had to cough up a lung from the dust this stirred up

[terse dirge]

Installing drivers requires admin

[proud moth]

not necessarily, what about a COM interface hijacking with InProc32? i could give a user special privileges for that without being local admin

[proud moth]

not necessarily, what about Print operators?

[undone fossil]

you're breaking your own rule there assuming no groups but

[undone fossil]

yeah for privesc ootb you're gonna need have some perms granted unless the interview question is just "what no-fix/0days can you abuse?"

[proud moth]

yeah a little bit 😄 but okay in the end the point of the question is just to see if you come up with some windows chains leveraging those privileges, no matter how you get them

even explaining how SeTakeOwnership can lead to SYSTEM is fine as well

or DiagHub or things like that

[subtle plover]

Gm

[gray wraith]

Black magic

[tidal yoke]

I don’t like tmux

[supple plume]

My job is like tobacco, it's slowly taking my life but it's difficult to quit

[crimson mica]

Hi, if i have gold sub for academy and complete various path during the subscription, after the subscription is expired, i still have the modules unlocked?

[exotic pendant]

[proud moth]

what do you do? programming?

[zealous charm]

[supple plume]

Yes

[proud moth]

full time?

[supple plume]

Yes

Almost minimum wage

[proud moth]

RIP

[supple plume]

I had to take this job because I've been looking for a job the whole year more than 1000 resumes sent

[proud moth]

my advice is to find something part time with a livable wage, in an area which is more fun than programming

after switching from engineering full time to part time pentesting my life improved by 44000%

[supple plume]

I was making good money in 2024, I have good skills. I am just on the fucking edge of being homeless at this point I need some stability before taking any change

[sturdy thistle]

You retain access to the modules that you finished

Unfinished modules will be locked again

[crimson mica]

Ok thanks

[scenic maple]

send one million

[proud moth]

are you in the US?

[supple plume]

I'm in Spain

[proud moth]

oh ok, and how about switching to security then?

[subtle plover]

Pain

[supple plume]

Maybe I should hack the recruitment sites

[supple plume]

That's what I'm doing but I just started learning cyber about 3-4 months ago

[supple plume]

Seriously tho

Xd

The problem is

If I hack it I should leave evidence about myself

And it's illegal

[scenic maple]

its only illegal if you get caught

[heady sage]

STALIN WEARS SNEAKERS

[proud moth]

lmao

[proud moth]

oh ok, you can usually get a position after 6 months

but you do need to study pretty hard for that timing

otherwise 1 year is more realistic

[heady sage]

Hmm I wonder about that

[proud moth]

focus on bugs, cves and skills because if you are in europe we don't care about cert wankers

[supple plume]

Idk I am studying but slowly, so it will take time

Also I am going to make machines for htb

[heady sage]

If I was in Europe I’d have a job already

[supple plume]

The amount of garbage I have seen and concealed vulnerabilities on my lifetime

Second order sqli type shit

[proud moth]

if you were in europe you would be my boss

[heady sage]

I don’t know about that

[supple plume]

And the poor quality of the machines they have in htb in terms of code/UX-UI

[subtle plover]

You dont have a job

[heady sage]

Thanks for reminding me

[subtle plover]

But how

You are so skilled

[heady sage]

I’m not

[proud moth]

yes 100%, a beginner wanker like me can get into pentesting in europe, let alone somebody with actual skills lmao

[heady sage]

I’m just average

[proud moth]

yeah but average in hacking is already > 99% wankers

source: i am one of the wankers

[scenic maple]

its never to late to start selling courses

[zealous charm]

this is the way. If people with NEGATIVE rep on H1 can sell courses, so can you

[subtle plover]

Lies

[heady sage]

Uhh no. I’m not XSS Rat, I won’t sell slop IF I sell a course.

[scenic maple]

[subtle plover]

He sels ai slop xss tutorial?

[scenic maple]

well most of it is mid

at best

plus you cant really teach bug bounty to people

[heady sage]

Nope you can’t

It’s not a skill you can teach

[zealous charm]

There's very few people I would consider buying a course from in the bug bounty space

[scenic maple]

like who

tho

[zealous charm]

The only one I've done was jhaddix's course because I dont do recon, so I figured it would be interesting. Although I dont recommend it, it used to be $200, then $400, now its like $1000.

Jhaddix + XSSdocter client side course looks good. There is also jhaddix + zwinks IDOR course that seems interesting. Otherwise for bug bounty people that is about it

[heady sage]

Jhaddix I’ll agree with

[zealous charm]

His course was mid though, it was like "heres some one liners, oh yeah scope is negotiable"

Not worth the current price

[proud moth]

almost no course is worth it

the very concept of a "course" is just the wrong way to go at hacking

[green kite]

yeah its expensive

its just vids now

but the idor one looks interesting

[scenic maple]

https://tenor.com/view/sus-cat-cat-stare-stare-bruh-cat-really-n-gif-25597234

[zealous charm]

Yeah, $200 is a bit steep but the guy who wrote it is pretty talented. same with the client side course by xssdoctor

[proud moth]

if I would do a hacking course i would sell it for 5 bucks maybe

[scenic maple]

and sell it to few million people

[proud moth]

lmaoo

hacking is already ruined today let's not ruin it further

all these course and cert wankers

[zealous charm]

Courses are good if you add a personal spin on it, or compile information in a manageable way that would otherwise be hard to acquire. But if you provide less value that portswigger academy then it's not worthwhile

[scenic maple]

but isnt that like 99% of all courses

[proud moth]

all courses are meant to extract money out of insecure college twats

instead of fucking opening burpsuite or learning about linux, they want a course

[zealous charm]

and many cert providers

[proud moth]

the only courses I respect are the ones on HTB because the whole idea of the website is based around pure skills

and even then, they are still meant for ultra beginners and teach 0.0001% of hacking at best

[scenic maple]

4 htb certs in 4 years of college

maybe this will make sure i am not unemployed

but this is only if i pass

thats a big if

and probably in 4 years htb will be more popular ish

[proud moth]

thinking about popularity is a very good way of not finding anything in hacking

[scenic maple]

popularity in terms of hr

if you cant bypass that no one will look at your skill anyway right

[proud moth]

no, that's not right

[scenic maple]

[proud moth]

i sent 6 applications in my life to find a security job, and HR didn't play any role in anyone of those

because i avoid HR, simple as that

[scenic maple]

how do you know what places dont have hr

thats actually great resume to job ratio

[proud moth]

there's nothing to "bypass" it's a myth to sell you useless bullshit that distract you from hacking

[scenic maple]

means ur resume is good or ur hunting skills are great

[scenic maple]

hmm

interesting take

[proud moth]

it's a gatekeeping business and very profitable, it works well because people are desperate

all you need to do is have enough influence over the market to push your certificate or course or whatever bullshit, once HR acknowledges it then you make money out of the gatekeeping desperation

the market fills itself with cert wankers, then the cert wankers fight amongst themselves, and you push the cert+ to make them fight even more

[scenic maple]

[proud moth]

you think red teamers at the NSA care about if you have ComptiAss+?

[chrome tree]

My goal is to distract interviewers with my dumpy, my "comptiass", so they don't notice my shortcomings.

[zealous charm]

yes because comptia is DoD 8570 approved

[scenic maple]

😩

[proud moth]

ok maybe the NSA is not the best example, as the government is after all one of these cert gatekeeping entities too

but you get the point

the first goal of a cert releaser would be exactly to pay HR and marketing departments to exploit this gatekeeping

to not be part of this circus, simply find jobs for which HR is not a strict gatekeeper, easy as that, and these jobs fortunately do exist

so you don't need to be a cert clown

[scenic maple]

ultra rare tho

[proud moth]

yes this is also sort of true

[scenic maple]

big companies all have hr like that

so u are going for niche companies and those who are rare and small

[proud moth]

that's why avoiding big companies might be a good idea as well

[proud moth]

yeah exactly, one way to do that is to search for jobs on non-competitive platforms, going for startups, searching on HTB jobs etc

and spoiler alert: the motherfucker that interviews you in these jobs doesn't care about the comptiass

i also think this is not ideal if you are rushing to get a job, in some cases it's true that certs give you more HR opportunities im not denying that

[scenic maple]

i do have time but i have no idea what i will do or which field i will go in

maybe in due time

[proud moth]

it takes time

[scenic maple]

only goal is to just land something remote

jobs in my place are shit

was pretty good before the layoff

[muted olive]

hello chat

[zealous charm]

I like linkedin for job over indeed or other sites

[muted olive]

yes

[muted olive]

you like fake AI recruiters?

[scenic maple]

i wonder if i should start posting stuff over there

like not ai slop

but genuine stuff

[proud moth]

yeah uhm...

[scenic maple]

i am gonna do it for x tho

[proud moth]

maybe not

[supple plume]

I believe linkedin's stupid algorithm turned my job chances down

[proud moth]

linkedin is exactly what you should stay way from

because it's designed exactly to exploit the gatekeeping like I said

[supple plume]

I agree

[proud moth]

why do you think they have "linkedin premium" and all that bullshit

[supple plume]

They want you to pay premium, to post shit

To interact

Etc

[proud moth]

"find a job 2.6x faster! now pay me plz"

[scenic maple]

cold world out there

[supple plume]

Keep this in your fucking mind:
IF YOU HAVE NO JOB YOU WILL BE MORE ACTIVE IN LINKEDIN

[scenic maple]

a better pricing model would have been pay us 20% of ur first salary

[supple plume]

Likedin algorithm is designed to keep you on linkedin

[supple plume]

.

[proud moth]

i swear people would do just about anything to avoid learning hacking

anything goes, linkedin, certs, courses if it means not opening burpsuite or finding cves or doing ctf

[gray wraith]

There is truth to that

[peak zenith]

Wdym by that

[proud moth]

people need too much appreciation and fall into marketing traps because of it

[peak zenith]

Ohh I see

[zealous charm]

Yeah I meant linkedin jobs, not actually using or posting on LI. I find indeed jobs has a bunch of dead/nonexitant jobs while LI is more up to date

But of course always apply via company site

[heady sage]

I hung up my CPTS frame finally

[peak zenith]

How much did it cost you altogether

Course plus certificate

[heady sage]

I didn’t pay for the course, or the voucher

I got it for free as a gift

[sturdy thistle]

Well done!

@sinful flicker pingy

speaking of pings.....

@austere sinew

[sinful flicker]

pong

[lofty warren]

beautiful

[gray wraith]

That people do certhunting instead of growing as a hacker

[gray wraith]

Good job

I envy you

[zealous charm]

“But mom I need the new certified cert hunter professional cert!!! Please pay for it!!!”

[muted olive]

https://tenor.com/bBHKW.gif

[austere sinew]

@sturdy thistle

[scenic maple]

mom never paid for anything related to tech

[zealous charm]

Use bug bounty to fund a cert addiction

[gray wraith]

Fr

[gray wraith]

This might be awfully realistic

I just want cpts

[scenic maple]

maybe one day

[zealous charm]

did that XSS get triaged/accepted?

[scenic maple]

oh yeah they triaged

dunno if u know it or not but i got laid off this jan so i am focusing more on web dev side

so it goes like this
2 days work on dev
1 day on bug bounty
and repeat

bu bug bounty i mean htb labs for now cause i gotta take cwes this year

how is your

cwee going

[small pond]

Finaly! It is almost here! No more shared instances for machines

https://www.hackthebox.com/blog/quality-hacking-labs-experience-with-dedispawn

[cloud osprey]

what cert likes to go down slides?
cweeeeeeeeeee

[scenic maple]

i cwee what u did there

[scenic maple]

@rose onyx how are you going to put golam_was_here.txt now

for legal purposes sentence above is a joke

[small pond]

also, that was a big reason for killing off VIP last year. Can finally stop doing the cleanup script on new machines

[scenic maple]

so no more cleanup scripts like at all?

that sounds amazing

[small pond]

new machines -- unless the exploit itself would make it unstable but i think that is pretty unlikely

[scenic maple]

https://tenor.com/view/the-office-it's-happening-stay-calm-gif-12136453520159196223

[rose onyx]

Did you not know?

[scenic maple]

been grinding them modules

[supple plume]

Omg

[supple plume]

@small pond I sent you dm please check is about this new feature

[small pond]

Yes RDP will likely now be allowed

that being said most windows stuff is Core, so RDP isn't really a thing 🙂 but wont be a reject anymore if people use gui for sub

[mystic patio]

Damn

Cool

[cerulean bloom]

@austere sinew hehehehehe
DAILY PINGGGGGGGGGGG

[muted olive]

bro also found vuln on USDA

are you allowed to say what it is?

[scenic maple]

xss

reflected

[muted olive]

YAY!!! No more doing machines and finding CVE-2021-2XXXX.py in the /tmp or C:/temp

[muted olive]

told ya

its everywhere

nasa next

[scenic maple]

nasa doesnt have graphql endpoints

i learned it that day

😩

[muted olive]

vro they have input fields

xss sqli lfi anything is possible

[scenic maple]

true true

[muted olive]

although its good if you have tunnel vision sometimes

thats why I found xss on nasa thrice because I looked for same thing again and again

thing is that soon you tend to not find anything anywhere after that

then you find new thing to get tunnel vision on

[scenic maple]

i only looked for like 10-12 hours combined

so i need to look more

maybe do some automation

[muted olive]

thats a lot

[scenic maple]

i do have my fair share of skill issues

[muted olive]

employ the use of google dorking

best skill ever

ever

ever

ever

[scenic maple]

look at this lol

[heady sage]

I secure the bag than I go get it

[muted olive]

🔥

I hardly look at subdomains tho

[scenic maple]

out of every 7 domains only 1 is online

[gray wraith]

I Wonder if it affected nibbles in any way bc something was ALWAYS breaking when I tried to finish it off

[meager kernel]

hey @small pond
its great to see you here
hope youre having a great day
ty for making hacking fun for us

[molten bobcat]

Sleepy

[muted olive]

use google dorking

it is SO useful

you will be addicted to it

[scenic maple]

i know what the basic gist of is

but can u give a practical example

[gray wraith]

Is that a lot for a BB

[scenic maple]

no

u can be looking for months and find nothing

[muted olive]

inurl:"/admin"

[scenic maple]

[muted olive]

tune it for what youre looking for obviously

[scenic maple]

i see now

[muted olive]

@scenic maple whats the USDA domains scope?

im too lazy to log in to bugcrowd and check

[scenic maple]

there is a xml file below

just download that

[muted olive]

tooooooo lazy :(

fnie one sec

[crisp perch]

shall we try htb labs now 🤪

[cerulean bloom]

lollllllll

[native plume]

"I use Windows btw :3", said no one ever 💀

[obtuse fern]

Have you tried not being sleepy? Heard that works wonders

[heady sage]

At a medium Pace - Adam Sandler is a good song

[green kite]

can I buy some?

[obtuse fern]

Sleep? Unsure, I lost my stock

[supple plume]

I use you btw

[crisp perch]

shall i dip my toes in htb labs

[muted olive]

lol

[heady sage]

Get your toes away from it. You’ll infect everyone.

[green kite]

lets order some

[cerulean bloom]

what's sleep?

[heady sage]

With your unwashed ass

[supple plume]

head first or nothing

[native plume]

Head First readers anyone?

[crisp perch]

Should I abandon the safety of the shoreline and descend fully into htb labs, where progress is earned through confusion, persistence, and failure rather than guidance?

[cerulean bloom]

@supple plume

https://tenor.com/view/stop-it-get-some-help-just-stop-please-stop-stop-it-meme-gif-26307878

[supple plume]

please I don't have more emojies pg13 to express myself here

just do it

head first

[muted olive]

@scenic maple
alaska department of transportation
CDC
arizona dept
BNL
alaska district courts
new york department of transportation
all national parks
washington district courts
library of congress
tennessee government
texas parks and wildlife
USDA
social security administration
maryland government

All are vulnerable

7 minutes to find

with google dorks

lol

[scenic maple]

plox dm

[crisp perch]

I move beyond cautious experimentation and immerse myself in htb labs entirely, accepting that understanding is forged only after repeated disorientation, missteps, and deliberate struggle?

[supple plume]

struggle and suffer

in spanish we have a saying: Text with blood will be remembered by you

means if you carve this knowledge through pain inside your brains it will last longer than by other methods

[molten bobcat]

Develop a cursed technique

[supple plume]

there is no cursed technique just pain

[crisp perch]

I consign myself to a deeper immersion in htb labs, embracing prolonged cognitive strain, iterative failure, and deliberate suffering as the necessary crucible through which genuine competence is forged?

[cerulean bloom]

https://tenor.com/view/stop-it-get-some-help-just-stop-please-stop-stop-it-meme-gif-26307878

[supple plume]

just remove the question mark and stop asking, just do it, some of us we'll be here to help

[gray wraith]

[molten bobcat]

Yeah nothing here is gonna bite

[native plume]

Every time you google something then you do one pushup

[gray wraith]

Me when AD

[molten bobcat]

Except echoes I'm pretty sure he's feral

[supple plume]

@native plume is this true?

[native plume]

Let me ask grok

[crisp perch]

ok let me click "Start Playing"

[supple plume]

good luck

[cerulean bloom]

yes

[supple plume]

the isolated htb instances is such a good news btw

[sharp beacon]

you dont appreciate the people who make the HTB labs until you have to suffer someone else's.

must be hard to make labs because so many places are not good at it.

[spare iris]

good morning fellow HTB users!

[zealous charm]

XSS? Or what vuln class

[muted olive]

XSS

reflected

[wanton dock]

has anyone heard of DIY liposuction

someone should invent that

fuck my dad has my car and i need to go to CVS

i want ozempic to compensate for this

[molten bobcat]

It's less

Nevermind lmao

[spring holly]

Quick question we had an enterprise pro lab unfortunately it did not reflect on my personal account.

Can I just copy and paste the flags or do flags get rotated

[zealous charm]

Nice, in the same component? Or just google dork for php/cfm/pl etc with parameters?

[celest robin]

lol just checked how much is this course im gonna take in python 2.4 k lol

if i pass it its free if not rip....

[molten bobcat]

Heya yh

[celest robin]

fuckkit i gotta take the voucher

[molten bobcat]

https://automatetheboringstuff.com/

[austere sinew]

@cerulean bloom pong

[molten bobcat]

This book is free

I used it to help me learn python

[celest robin]

yee but this is like official cert in my country

[molten bobcat]

I'm just offering cost effective alternatives

[celest robin]

fotcha

[molten bobcat]

You can just use it to help

Cuz it's free

😄

[celest robin]

ofc

thx

i need to pas this shit get a job get fired

new vocucher profit?????

[chrome tree]

Should've put "I find better crap in my own toilet."

[civic lance]

Was there an update made to academy?

[supple plume]

I cant react there so I do here

[static pasture]

Go react go go go

[civic lance]

Hey falcon

Was there an update made to academy

All of a sudden I noticed the modules I was working on just got locked for no rzn

[static pasture]

Did your sub run out?

[civic lance]

Yeah, I cancelled my subscription a couple weeks ago

[devout sail]

Thats a nice update

[silver frigate]

Our own boxes for the boxes while we're on hack the box. Nice.

[devout sail]

Unfortunately no more reset cries

[static pasture]

That might be why if I had a guess

[ornate wren]

Is this the end of the tyrannical cleanup scripts

[devout sail]

I don't think so

I want those cleanup to cleanup my fuckups

[chrome tree]

So if everyone is getting dedicated instances, what's the point of VIP+ aside from the retired machines. Especially with the 5 extra bucks?

[ornate wren]

Yeah but sometimes it's like, you change a password then it gets changed back on AD

[devout sail]

Yep i got your point, I feel like now that we got personal instance
It can be lax

All depends on creator tbh
I don't remember any guidelines over cleanup

[silver frigate]

I don't think VIP can access a bunch of the retired boxes anymore they might've made that VIP+.

Or there was some other level in between individual boxes I think

[devout sail]

There is no VIP

[silver frigate]

Oh then yeah the diff is you get all the retired boxes?

[chrome tree]

This sounds like my insurance provider.... "Why did my premium go up?" "Cause other people." lol

[devout sail]

Falcon did 👎 on it

[static pasture]

An admin has to add reactions for you to react

There isn't a VIP sub anymore also

[silver frigate]

Ohhh ok

Lol

[chrome tree]

So it's just a standard sub now

[static pasture]

Any current VIP members will be migrated to VIP+ and then when its time for their sub to renew, they can either renew as VIP+ or they cancel

[silver frigate]

Idk I think the main diff was retired machine access

[lime trout]

the VIP restriction on retired boxes are vulnlab content

and thats because they werent design to be done in the shared environment

meaning we had to lock them to VIP+ which had dedispawn

[silver frigate]

Ohhh right there's all of the other stuff too

[zealous charm]

🚀

[maiden anvil]

express lane to ban town

[chrome tree]

So I'm confused is the only perk of the sub now is being able to access the retired content?

[zealous charm]

🚀 You're absolutely right!

[lime trout]

VIP+ has unlimited pwnbox + writeups + cpes

[young glen]

Don’t know

[chrome tree]

Got it, so unlimited cloud machine and retired content. Thank you for clarifying

[static pasture]

Emma da hell are those reactions on the announcement lol

[lime trout]

some people are just neutral and watching (👀), and hackers gonna hack

[maiden anvil]

@lime trout

@static pasture caw caw

good morning

[scenic maple]

average boomer on facebook

[static pasture]

clack clack

[chrome tree]

So what about Ipp's stuff does that mean he's going being a paywall for his walkthroughs? Or do the walkthroughs that are posted on the site just become locked?

[maiden anvil]

@zealous charm 67

[static pasture]

ACHTUALLY IM A MILLENIAL GOSH

[lime trout]

no, nothing is changing at all with that

[icy shard]

add fire emoji to announcement 🔥

[lime trout]

the writeups for retired have always been VIP only

[chrome tree]

Copy, just trying to weigh the pros and cons. I mostly subbed for the dedicated instances

[scenic maple]

i will never find a unsanitized input in my lifetime

[maiden anvil]

@zealous charm it failed

[zealous charm]

xss is out there, just waiting to be found. Are you using the burp extension reflector or my version reflector-remix?

[scenic maple]

i think the one of them is installed

[mystic abyss]

What are you doing?

[scenic maple]

vdp

[zealous charm]

Use that in aggressive mode then it will flag a high severity issue when XSS is possible

Should let you quickly asses a few dozen sites in like 15 mins

[mystic abyss]

I had a question for peeps who do vapt stuff

[scenic maple]

ask homebrewer lol

[chrome tree]

https://tenor.com/view/you-can-gif-27326947

[scenic maple]

he is top 10 in almsot every dashboard

[mystic abyss]

noice 👀

my question was like in a network pentest, is it correct to report some web vulns if there is a web server hosted.

Like 2 cases, in 1st we manage to escalate that vuln and get a hold/creds/anything else.
2nd nah just some low hanging stuff.

I get a bit confused here

I generally do it when it's 1st

[zealous charm]

I would report web bugs in a network pentest if I found them on the internal network. Probably nothing lower than a crit/high though. Maybe an XSS, but generally I will report RCE, SMB SSRF, or default creds that I find on web apps

[frank warren]

hey guys, anyone finished android fundamentals?

[mystic abyss]

thanks 👍

🫶

[austere sinew]

Lies

[static pasture]

WOLOLOLO

[austere sinew]

WOLOLOOOOOOOOO

[young glen]

WOLOLOLO

[frigid mountain]

what's up?

[young glen]

Not so much

[gray wraith]

How do you know its there

[zealous charm]

its always there

[gray wraith]

[zealous charm]

nah I think he's looking at a bugcrowd .gov VDP, which are riddled with XSS

[static pasture]

https://tenor.com/biZR0.gif

[frank warren]

is this not a unit from an old rts or something? like age of empires or age of mythology?

[static pasture]

Its the priest from Ageo f Empires...yes

[frank warren]

ah yeah

haha

[static pasture]

It would cast wololo to convert enemy units

[young glen]

Something like that

[frank warren]

ye i remember the voice line and after i saw the staff in his hand i remembered it was a priest

[austere sinew]

Undeadwolo

[frank warren]

btw, have you completed the android fundamentals, spy?

[sturdy thistle]

Where ping

[austere sinew]

@sturdy thistle

[static pasture]

I have not. Between 2 jobs and a family by the end of the day I am just too tired to concentrate on studying

[austere sinew]

@sturdy thistle

[frank warren]

ah ok, thanks anyway

[lofty warren]

the new anoucement its really cool tbh

[frank warren]

i got stuck at the last part

[austere sinew]

They have a whole section for academy

[sturdy thistle]

#modules

[lofty warren]

I'm agree w that

[frank warren]

ah ok, thanks guys

[young glen]

Agreed

[sturdy thistle]

Gym after 2 weeks

Hard as hell

[austere sinew]

Hell yeah

[sturdy thistle]

Hell describes it good

[austere sinew]

Also falconspy - is a university professor for cysec

[static pasture]

I am not a university professor

[austere sinew]

Wait what

I could have sworn you were

Or college

Or something

[static pasture]

Full time red teamer and part-time community specialist

[zealous charm]

you specialize in those communities

[austere sinew]

Wait WHO WAS THE COLLEGE PROFESSOR THEN

SOMEONE WAS

This feels like the “why are you gae” “who said I’m gae” “you are gae” “i am not gae” “who is gae”

Cysec edition

[raw lichen]

I'm NEETING on mommies inheritance. 😛

[meager kernel]

hello

[sturdy thistle]

Falcon was right behind me

Emma took the picture

[sturdy thistle]

Ah u gae

[static pasture]

I do I do

[austere sinew]

Were you being pickpocketed by him

[sturdy thistle]

No spied on me like a falcon

[austere sinew]

Whilst @zealous charm pickpocketed falcon

[austere sinew]

Ah, so you simply didnt notice the pickpocketing

[sturdy thistle]

Could be

Don’t distract me from gym

[austere sinew]

@sturdy thistle distract

@sturdy thistle from

@sturdy thistle gym

[sturdy thistle]

Or I ping you to dead

[austere sinew]

@sturdy thistle yap

@sturdy thistle gym

@sturdy thistle so

@sturdy thistle how

@sturdy thistle is

@sturdy thistle the

@sturdy thistle gym

@sturdy thistle have

@sturdy thistle you

@sturdy thistle been

@sturdy thistle doing

[meager kernel]

wolo is distracting you from gym

[austere sinew]

@sturdy thistle which

[young glen]

Ping of Death

[meager kernel]

thats so wrong

[austere sinew]

@sturdy thistle muscle

@sturdy thistle group

@sturdy thistle exactly

@sturdy thistle or

[meager kernel]

mute wolo

[austere sinew]

@sturdy thistle has

@sturdy thistle it