general

[ornate ibex]

I didn't so far

[scenic maple]

🔥

i think there is a difficulty increase after 60%

but i dunno could be skill issue

[ornate ibex]

||pay me||

[scenic maple]

just do continue on every page and do the assesments/labs

[lofty warren]

https://tenor.com/view/elmo-dance-wow-mars-planet-gif-10362075724662813594

[undone fossil]

Still cba

Mostly because the labs force you to use pwnbox sometimes and I’ve had wonderful interactions

[ornate ibex]

It could be cuz I started with easy ones.

[scenic maple]

i am like 85% finished

[molten bobcat]

I currently have 3 rdp sessions open and one of them is a nested session

[scenic maple]

i never had to use pwnbox

[ornate ibex]

It is not mandatory to use Pwnbox

[scenic maple]

oh boy you are in for a wild ride ahead

[ornate ibex]

Yes tomow, I think SQL, API and Graph

[scenic maple]

you will give up atleast 4 times before you reach the end

[ornate ibex]

or SQL, Command Injection and File Inclusion

[ornate ibex]

this sounds hard for a day

[scenic maple]

do you know php?

[ornate ibex]

I can ready any lang, not write in most.

[scenic maple]

i see

you will need it for file inclusion

[balmy basalt]

Heh. Three hop proxychain to VNC to SSH is even more fun.

I kind of wish that lab had been published in some form. :/

[undone fossil]

3 rdp sessions?

Lightest pentest access

[molten bobcat]

i love the lag on typing so much

[ornate ibex]

It gets on my nerves

[zealous charm]

Serial community moderator

[undone fossil]

Can’t wait to spin up a vm to vpn -> rdp into box -> vpn & rdp into jumpbox-> ssh into under-spec’d pentester box

[stable tiger]

use remmina

[molten bobcat]

his ass is NOT helping

[fiery copper]

Be careful, dont let the cat close to parrots

[stable tiger]

i dont think the cat is beefing the kali dragon

[molten bobcat]

I'm rdp'd into a kali linux host, don't mess with me

[fiery copper]

https://tenor.com/view/garfield-fat-obese-carry-litter-gif-17472166

[muted olive]

✅

[stable tiger]

youre rdpd into kali from kali?

[molten bobcat]

yes

lmao

[stable tiger]

why

is that kali bare metal

[molten bobcat]

no

[stable tiger]

so youre inside a kali vm
and then inside a kali rdp

[molten bobcat]

htbs copy of kali has the wordlist I need to complete the module.

so i have no choice

[stable tiger]

oh what

whats the wordlist lmao

[zealous charm]

Or the POC that overlays a dancing cat onto the page 😆

[molten bobcat]

some thing called "passwords.txt" that was designed for this module

lmao

[stable tiger]

g free you

what module is it

[muted olive]

lul, I gotta get me those POCs

[near ice]

OneNote - it combines flexible note-taking, OCR of images, and since everyting is indexed, a perfect searching tool. You can 'tag' things you think are important (I have a gotcha tag for example), and can filter on them. All this in wysiwyg without having to learn a markup language.

Retention is aided by writing things down - but that's impractical to be honest, I thought that doing a Gitbook type of exercise alongside OneNote would help, but I just spent too much time on it.

[molten bobcat]

bro.. move..

[stable tiger]

nice ass keyboard

yo cloud actually got a keyboard cat

https://tenor.com/view/cat-crazy-cat-keyboard-cat-fast-gif-5753018

[molten bobcat]

just sitting in front of my screen licking his paws lmao

[stable tiger]

im rdping into your kali box and deleting the passwords.txt file

[molten bobcat]

i have already cracked the user hash

im sorry

[stable tiger]

you've ruined my fun.

[molten bobcat]

welcome to blue teaming

[zealous charm]

I’m on mobile now but I’ll send em in a bit

[molten bobcat]

i ruin fun

[stable tiger]

cloud are you soc analyst 1 or 2

[molten bobcat]

Tier 2

[muted olive]

Why does your keyboard look like a nintendo switch

[stable tiger]

so why are you doing an entry soc cert

and im finna send you a payload with a packer ive written next week and ur gonna have to reverse it.

[muted olive]

wait

you're doing AS-REP roasting for blue teaming stuff?

[molten bobcat]

yes

[molten bobcat]

I enjoy having ironclad fundamentals

[stable tiger]

did you just call the NES keyboard a switch

[alpine pumice]

It's important to know attacker techniques as a blue teamer

[muted olive]

fair enough

[molten bobcat]

lets see if the module bypass for this section still works

[alpine pumice]

This module has you do the red team side, then you look it up in the event logs to correlate and find evil etc

[muted olive]

I have no idea how blue teamers defend against AD attacks though

[molten bobcat]

I do 😄

[muted olive]

Like technically dont know

[muted olive]

Oooh I see

like no idea

how would a blue teamer detect a sapphire ticket?

unless they are superman

[alpine pumice]

blue team tools

[vague grail]

yea i spent most of yesterday organizing everything and it took up the whole day, it'll take some time for everything to stick but revisiting the concepts has been helping. ty

[lofty warren]

luv ur keyboard

[muted olive]

like which ones?

[lofty warren]

this is my keyboard

[stable tiger]

kerberos abuse traffic

vbs to prevent lsass dump

[alpine pumice]

I'm sure there are a lot of tools out there, just like for red teaming side. But all they really need to do is monitor for PACs obtained through s4u2self+u2u tricks, etc

plus like, where is this request coming from

[muted olive]

But in those cases, wouldn't it look like a legitimate request? 🤔

[alpine pumice]

some random pc that just connected to the network that has the hostname kali?

[muted olive]

the diamond/sapphire variants I mean

I think golden/silver would be way easier

[alpine pumice]

i'm not a blue teamer so i don't know, but i imagine it can't be too hard to put the pieces together

ask c1oud

[muted olive]

iirc you check if KRB_TGS_REQ doesnt get a KRB_AS_REP response or something

[molten bobcat]

womp womp the bypass still works

oh well

[stable tiger]

yall got fancy keyboards and i just got some logitech tkl

💔

[muted olive]

this one is fire

[molten bobcat]

I got the answer easier anyhow

[muted olive]

@molten bobcat how would ya detect it?

[molten bobcat]

detect wot

[muted olive]

diamond or sapphire tickets

[alpine pumice]

https://www.realforce.co.jp/en/products/discontinued/realforce_rgb/ my keyboard. i wish they still made it.

[stable tiger]

not if the malware uses BYOVD to disable EDR, obtains persistence and then just turns off vbs and reboots

then ur in the same place

[muted olive]

wouldnt the EDR detect a random driver?

[molten bobcat]

easy, you track when a ticket is asked for

[stable tiger]

no

[muted olive]

ive never used that technique before so idk

[muted olive]

but it looks like a legit ticket

[molten bobcat]

yep

are you familiar with the concept of data correlation?

[muted olive]

kiiiind of

[stable tiger]

microsoft has a vulnerable driver blocklist but they cant stop 0days

[molten bobcat]

to put in in easier terms

[alpine pumice]

weird events happening at the same time

[stable tiger]

i have like 4 drivers i know of that are unpatched

[molten bobcat]

complex attacks do not have a single step

they have many

[muted olive]

I think I get it... somewhat

[molten bobcat]

so we're not gonna be able to piece together what happened by examining a single thing

[stable tiger]

cloud explaining IoCs

[molten bobcat]

not only are we reviewing the ticket request, we're reviewing the machine that made the request

what time the request was made

what the machine was doing

at the time the request was made

other pieces of information get tacked on to the incident that help build a clearer picture of "what happened here"

[stable tiger]

the easiest thing to do is piggyback off legitimate domain traffic and send your ticket then

[stable tiger]

but that takes time

[molten bobcat]

as you'd have to know what baseline traffic looks like first.

as every environment is different

[stable tiger]

yup

[heady sage]

Yes it would, any decent EDR would flag it

[stable tiger]

as with all things most of the time youd need to sit and listen before you get to lateral movement

[stable tiger]

such as

[heady sage]

Crowdstrike, Sentinel One.

[stable tiger]

counter argument

https://github.com/zero2504/Fairy-Law

[molten bobcat]

these tools typically get picked up as well

[stable tiger]

thats new

[molten bobcat]

tamper protection

[stable tiger]

it was ud a month ago

not sure about today

as with all things edr related its about finding a relevant bypass

[molten bobcat]

ye

not all edr products are perfect

they can't be

as they were made by human hands

[stable tiger]

https://www.edr-telemetry.com/windows
this is very useful

if oyu know the edr of your environment

crowdstrike for eg doesnt log key/value registry deletion

thats abusable

[molten bobcat]

hey azo

doin some studyin

[signal mica]

in the middle of cali workout

[muted olive]

As I understand it, a diamond ticket is almost exactly identical to a real TGT request, in terms of timestamps, validity, time of expiration, etc. Any differences would not be caught by Kerberos at all.
So if you were to detect that variant, I think you'd need to conduct extra careful checks on group membership and what actions are performed by which account after the attacker gains privileges?
Unless you have a different way of detecting it earlier on in the kill chain?

[signal mica]

read earlier

[molten bobcat]

well this is a priv escalation

[stable tiger]

diamond tickets my beloved

[molten bobcat]

so yes

we'd have to identify how they're in the network in the first place

[stable tiger]

0days my beloved

[molten bobcat]

its less 0days and more

"jesus christ people this vuln has been known about for a year now"

[alpine pumice]

only 1 year? lol

[molten bobcat]

im being generous

[signal mica]

wow thats super nuts

[alpine pumice]

my works' environment was vuln to esc1 when i joined.. lmao.

[stable tiger]

💀

[muted olive]

I think its harder because, ANY request you see regardless of how perfect it looks on Kerberos auth could be a diamond ticket. I would maaybe make a tool which runs elevated on the DC, which auto checks after each auth request by decrypting the PAC and verifying whether or not group memberships actually match

Or something like that

[stable tiger]

impractical

[alpine pumice]

ok but which computer on the network is requesting this ticket

[molten bobcat]

thats a lot of decryption

asking a lot out of a domain controller already

[stable tiger]

it would also generate a lot of false positives

[muted olive]

You can track that

[muted olive]

and yes

[molten bobcat]

which means it can't be trusted for fidelity off a single data point.

[stable tiger]

sapphire tickets my beloved

[molten bobcat]

it needs correlation

[muted olive]

it would stop diamond tickets, but with a ton of FPs

[molten bobcat]

thats not good enough

[stable tiger]

sapphire tickets my beloved

[molten bobcat]

you can't have a product that only works less than half the time

[muted olive]

Isnt detecting s4u2self+proxy easier

[stable tiger]

nah

[signal mica]

turbogeeked about windows

[stable tiger]

the lion says no arbitrarily

[alpine pumice]

which fast food place has the best breakfast chat

[muted olive]

maybe ✨ AI ✨

[severe falcon]

This server is worse then what I left it to.

[molten bobcat]

How on earth am I supposed to work like this

[stable tiger]

breaking news microslop copilot now using ai traffic analysis to detect kerberos abuse

[muted olive]

Lmao

[severe falcon]

Send him 2 3 year Dagestan and forget

[stable tiger]

yk

i genuinely though binex was cooked when rust was becoming more widespread

then people started vibecoding rust and not checking their unsafe usage

[muted olive]

windows rust rewrite loading

[stable tiger]

i love how they forced the engineer who said that bullshit to apologise publically

rust will replace C eventually, just not in our lifetimes

[muted olive]

they did? 👀

[stable tiger]

they did

check his linkedin

he had to apologise and say that it was an 'ambitious personal goal'

[alpine pumice]

that was fake news

[muted olive]

yassss 💅

[stable tiger]

im paraphrasing cos i dont remember his exact words

but it was great

[muted olive]

wb the 1 million lines of code, 1 engineer, 1 month thing?

[muted olive]

[molten bobcat]

this rdp session is

[muted olive]

I dont want windows to get rewritten in my lifetime

[molten bobcat]

screwing up my keyboard inputs

[stable tiger]

theyre using copilot for security patches now btw

bindiff anything new!

[molten bobcat]

i actually can't write a backslash what the fuck lmao

[alpine pumice]

\

ez

[stable tiger]

\ mogged

[muted olive]

\

[alpine pumice]

do it twice to escape it

[molten bobcat]

hey dicks \

[stable tiger]

fuck you

\

[muted olive]

thank you for 10x upgrading my career as a security engineer

[molten bobcat]

i said my rdp session was doing it

i know my inputs are fine

\you dolts\

[stable tiger]

check the new driver filter patch

[alpine pumice]

win + r -> osk

[stable tiger]

from last months patch tuesday

its still privesc vulnerable

they patched one instance of the UAF and not the other functions using it 😭

[muted olive]

I found a 2025 CVE that was patched in the first half of 2025, that is still working on my patched system

• with my variant

[stable tiger]

privesc or rce?

[muted olive]

privesc

[stable tiger]

you should dm me that

i wanna see if it works

[muted olive]

cant yet

already reported

[stable tiger]

ah

dm me it when it gets patched

[muted olive]

doesnt work on win11

[stable tiger]

what its for win10?

[muted olive]

yeah

[stable tiger]

why wouldnt it work on 11?

[muted olive]

I dont know

[stable tiger]

if its kernel they changed how some of win11 kernel works but u can just slightly rewrite the exploit

[alpine pumice]

could be because win 10 stopped receiving security patches last year

and it was patched?

[stable tiger]

LTSC

[muted olive]

Patch was rolled out way before, and my win10 system is updated as of Jan 1 2026 12:00:00 am

[muted olive]

I mean I have their ESU patch

[muted olive]

not kernel

[stable tiger]

bindiff with the windows 11 version of whatever it is

[muted olive]

I have one of their cumulative hotfixes rolled out in November 2025 that is apparently supposed to supersede all the security patches of 2025

and it still works

I checked the NVD page of that CVE and Microsoft's own page listed for the hotfix

And I can see that hotfix in my update history lol

Clear as day

[stable tiger]

thats fucked

i need to update my box

im vulnerable to the new lsass rce but i cba restarting

and my ass is not using VBS

[muted olive]

tested on win11 canary build

[stable tiger]

see whats diff tho

[heady sage]

I need to be more active all I’ve done as far as security is check the CVE feed

But I’m on break

So I’m not in any rush to come back

[muted olive]

I mean since its 10 --> 11 I bet they changed lots of things

[stable tiger]

im mostly just windows cve active

[stable tiger]

true but you know the vulnerable function

you can see whats different

[random grove]

Where can i ask a little question for machine submission?

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[stable tiger]

i need to buy ida pro again

cos i need pro 7

[muted olive]

not really a function in a driver, its more like a behavior. I never reversed anything lol

[stable tiger]

for bindiff

[stable tiger]

ah

[zealous charm]

@muted olive

Confetti: <script src=//0-a.nl/conf.js>

Cats: <script src="//meowww.lol/cat.js"></script>

[muted olive]

its like I found it, then saw its already a CVE, then went oh wait why is this still working

[stable tiger]

💀

[muted olive]

💯

gonna be using this now

[stable tiger]

bro

[heady sage]

Personally did the cats one

[stable tiger]

microsoft man

please bro

[muted olive]

I have most unfortunately "rediscovered" a lot of CVEs lol
Its very disappointing when you find something very juicy and see that there's already a CVE for it

worst feeling in the world

[stable tiger]

i feel you bruh

[molten bobcat]

cat actually fell asleep on keyboard

[stable tiger]

i love discussing advanced exploitation topics with the noob role

[molten bobcat]

this is ridiculous

[stable tiger]

i should probably do labs

[zealous charm]

XSS -> RCE in a desktop app triaged as P2 what does it take to get a P1 in a desktop app lol

[muted olive]

iugggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggvb4

NOOOooooooooOo

do NOT remind me of that

I am still recovering

[zealous charm]

Mine was import file -> view options -> XSS -> ActiveX exploit for code exec

[muted olive]

also, that is wild

was it an electron app?

[zealous charm]

Nope, but the embedded browser was outdated IE11, so XSS could leaverage ActiveX for code exec via the javascript or vbscript protocol

[muted olive]

That is interesting

[stable tiger]

im so stingy bro

[muted olive]

I used the js protocol for XSS is NASA a few times

[meager kernel]

ah well

[stable tiger]

im sitting here using ghidra just to export a bindiff and then analysing it in binja

the lion does not pay for software

[meager kernel]

idk why im just feeling tired by sitting in front of a PC

[muted olive]

you dont use ida?

yuck

[stable tiger]

ida 9 doesnt support bindiff

i need to buy 7

well

buy a license

for 7

[muted olive]

use yo $$$

[flint copper]

you guys buy IDA?

[muted olive]

idk ida free > ghidra for most cases

[stable tiger]

im a college student you overestimate me

[molten bobcat]

god i hate event viewer when its a remote host

[stable tiger]

no im literally just using it to export the bindiff

[zealous charm]

i yell at claude to decompile with ghidra

[stable tiger]

😭

just for the free scripting

i dotn use it anyways

[meager kernel]

imagine VMing into Linux just to RDP back into windows

[stable tiger]

CLAUDECODE FIND ME A 0DAY NOW

[zealous charm]

make no mistakes

[muted olive]

I have no idea what a bindiff is, also, ghidra has NSA backdoors in it source trust me bro

[ornate wren]

this works

[molten bobcat]

real

[stable tiger]

bro what?

[muted olive]

thats basically my chat history with it

[zealous charm]

actually tho, claude has scored me a few thousand in bounties at this point

[muted olive]

I use claude a lot

[stable tiger]

have you written N day vulns before

[muted olive]

THOUSAND?

[stable tiger]

exploits

[muted olive]

bro I got 0

[muted olive]

yeah

[stable tiger]

and you analysed the patch manually?

[muted olive]

Yeah

I even tested patches locally

[ornate wren]

claude helped me with a bounty the other day (it couldn't work out how to exploit but gave me a lead amongst many) but it was a dupe 🫠

[muted olive]

For unreleased 0days

[stable tiger]

why didnt you just diff the old patch with the new patch to find what they patched 20x faster

[muted olive]

misunderstanding, sec

I found a 0 day and locally patched it

is what I meant

[stable tiger]

deephat literally writes your exploits for you if you wanna use that over claude

[stable tiger]

ah

[zealous charm]

$2500 paid out, a lot more triaged and pending acceptance

[muted olive]

@zealous charm you wanna collab with me on one of my chains? I got a critical sink but cant get the source lol. Should be XSS.

[zealous charm]

Good job anthropic -> get bounty -> I use bounty to buy claude max for a year. win win

[muted olive]

I was doing VDPs so far and just got started with bug bounty

Got two P2/P1 pending acceptance

[undone fossil]

id do bb but black box web 😭

[muted olive]

Possibly a third one if Microslop wants to cooperate

[zealous charm]

it works best with source code, so worth running a tool like bbscope to extract private program scope with souruce code in scope

[eternal mango]

IoT is hella fun

[ornate wren]

h1 seems like the biggest pain in the ass to get signal with starting out, as all the public programs are super picked over and getting flooded with ai

[muted olive]

wdys?

[ornate wren]

i have one i've been wroking on a bit but they triage so slowly that i might just only get dupes

well they triage fine but actually deploying fixes is months long

[muted olive]

they have an AI reporting assistant

[zealous charm]

not sure how much help I will be but we can chat about it

[eternal mango]

"smart" thermostat I played with recently is just.. so broken, but company doesn't even exist any more

[muted olive]

Sure. I can't get anything more out of it without a fresh mind looking at it

will dm tomorrow too tired

Anyway, funny story in the meantime

I found a vuln in Microsoft's website once

[muted olive]

For reasons unknown, there was only one person who could apply the patch because only he had control over the domain

And they were reaching out to him

Dude didn't reply for almost a year

THEN finally they patch, but the patch is broken and bypassable, so they have to reach out again

[molten bobcat]

workin through

[muted olive]

and more waiting

[stable tiger]

lol what

[muted olive]

its more funny because

that guy is popular

top 20 in researchers in the united states

top 30 or something globally

so it kind of makes sense why he never replied

funnier how he was the only one who could fix it 😆

[eternal mango]

Must've been frustrating, just a tad

[muted olive]

I mean they gave me 0 bounty anyway

so I was doing it for the lulz as they say

[eternal mango]

Had same with a UK bank once. Over a year for first response, then 6 months back and forth with broken fixes

[muted olive]

over a year is wild

[eternal mango]

Only got a response due to being lucky meeting someone at a conference with a contact

[muted olive]

"Hey you guys are vulnerable to react2shell"
replies a year later

[stable tiger]

swear banks are required to investigate vuln reports no?

[stable tiger]

💀

[muted olive]

I found a vuln in a country's national bank

they have no VDP so I didn't report

womp womp

I hadn't even heard of that country until then lol

[stable tiger]

not even suprised

[eternal mango]

Maybe, was probably nearly 15 or 20 years ago

No not 20

15 perhaps

[stable tiger]

fiures

[eternal mango]

Fail, 10 not 15. Thanks brain

[stable tiger]

bindiff is shitting itself

[muted olive]

https://tenor.com/b0CbE.gif

[eternal mango]

Even went to branch managers for help, they didn't care 🤣

[muted olive]

I was on the verge of total compromise of a uni one time

found admin's email password in an env file

which was on gitea

which was in the second page of their search results

[eternal mango]

Oof

[muted olive]

at least they responded in a few days and fixed it though

anyway, question for the general public

(apparently cant create polls here)

lynn-nux or lie-nux?

[stable tiger]

yo

[molten bobcat]

lynn nux

always

[stable tiger]

the rce patch isnt even a patch

[ornate wren]

lynn, no contest

[muted olive]

damn

[alpine pumice]

it's pronounced linux

[muted olive]

lynn crowd here

[molten bobcat]

im about to use my most based bypass a 3rd time

[muted olive]

thanks that clears it up

[molten bobcat]

yeehaw

[austere sigil]

How?

[ornate wren]

gifnux

[molten bobcat]

I'm getting by most of the intended methods of this module

by being a better sysadmin

[muted olive]

Personally I say lie-nux

[alpine pumice]

this proves it's lynn

[molten bobcat]

wrong

[muted olive]

oo-bun-two or you-bun-tu?

dee-bien or de-bayan

[ornate wren]

you can't just make up your own pronunciations

[muted olive]

idk, ive always called it lie-nux

[austere sigil]

https://youtu.be/c39QPDTDdXU

That’s how you pronounce Linux

[zealous charm]

[stable tiger]

yo

[molten bobcat]

thats right, come and get me

[austere sigil]

🦐

[zealous charm]

[muted olive]

most unambiguous: ell-eye-en-you-ex

[austere sigil]

Kuli Lincox

[ornate wren]

forking the linux kernel to create a new one that is exactly the same except pronounced differently

[zealous charm]

the louder u r, the less u hear

[molten bobcat]

we're dc-syncing now

yeehaw

I'm fairly confident i'm gonna destroy this exam

[zealous charm]

look at me, I am the DC now

[alpine pumice]

famous last words

[molten bobcat]

i have yet to fail a cert exam

[alpine pumice]

i'm sure you got it

[austere sigil]

You can assign DC permissions to any user

[alpine pumice]

PB says in his opinion cdsa was the easiest one

[meager kernel]

[exotic pendant]

😄

[molten bobcat]

heya frost

[exotic pendant]

sup sup

[molten bobcat]

working on modules

[exotic pendant]

[molten bobcat]

figured out why my keyboard was wonked up

[exotic pendant]

Eating and then about to clean the house

[exotic pendant]

stroke?

[molten bobcat]

the remote rdp client is set to fuckin

danish

[exotic pendant]

oof

[molten bobcat]

so it changed my keyboard translation to be the danish

swapped it back to english and now my keys work normally lmao

[exotic pendant]

Latest Fallout episode was good

[silver forge]

I played a bit more of that Infinite Area Breakout I'm learning maps

[eternal mango]

I thought everyone GNU that

[molten bobcat]

so

I have a couple questions

[alpine pumice]

so sus dirs at all

[molten bobcat]

im sure that's supposed to be in the root

[silver forge]

Sure sure

Nothing to see here

I mean there's one EVIL directory

Windows

Delete it fast

[stable tiger]

bruh

[zealous charm]

junior pentesters first pentest vibes

[exotic pendant]

😄

[molten bobcat]

anyway i now have the administrator users ntlm hash

so thats nice

[subtle plover]

there is cats hidden in that directory

[molten bobcat]

my one beast is enough for me thanks

[subtle plover]

I typed the payload, heart beating fast,
Netcat listening, port open at last.
/bin/bash called, the prompt said “#”,
Root on the box, yeah I whispered “bet”.
Whoami sings back… it’s root, no cap 😬💻🎤

[molten bobcat]

christ

[stable tiger]

anything but a pe loader 🥀

[stable tiger]

bingbong9 bars

[molten bobcat]

not his bars

[stable tiger]

bigbongbars yo

they are now

so its not even properly patched

[subtle plover]

https://tenor.com/view/ayyo-bingbong-gif-7263062288817435982

[silver forge]

binggo bonggo

https://tenor.com/view/bongo-cat-waiting-impatient-gif-13690433

[molten bobcat]

I do believe I just abused a golden ticket

indeed i have

I have stolen every hash of every user in the domain now

[rich radish]

hey, whats up grain eaters

[fiery copper]

Im pretty sadge bro

[rich radish]

rip

[rapid swallow]

im doing a box but im unable to ping it

im doing delgate from vul lab

VPN good,

redownloaded it too

nothing working

[alpine pumice]

#boxes

[severe falcon]

Hi.

[alpine pumice]

simon says hi

[novel oriole]

guys i finished the theory part of introduction to infosec 24/24 sections
is it enough for the day or should i dwell into networking as well?
JUNIOR PATH

[severe falcon]

Hi D🥜D

Ibrah33m habibi.

[novel oriole]

even in this theory sections some of my misconceptions have been cleared and alot of new stuff was discovered by me lol

[novel oriole]

heyy

[severe falcon]

kaifak?

[novel oriole]

ig im fine.. not too fluent w arabic

wbu?

[severe falcon]

Alive.

[novel oriole]

woaah

an elite hacker afterall

i just started today

🫠

[severe falcon]

By no means, the light bulb holds the same worth of as the lamp does.

[severe falcon]

Welcome to the world where you would never go out and see the world.

[novel oriole]

[novel oriole]

have u done any cert?

[severe falcon]

No.

REDACTED>

[novel oriole]

daaayyymmmnnn

[severe falcon]

Nothing to be amazed by, dear. This is just life; some moments turn you either a poet or a man with no sanity.

[novel oriole]

well...

[rapid badger]

[molten bobcat]

weirdchamp

[white briar]

Is there anyone that can help me out here...I'm a free user and was doing a retired box (White Rabbit) and already had the user flag and was working on the root flag and for some reason I can't enter the flag (after days worth of work) because now I have to be a VIP+ member in order to put it in...it's fine if you want to charge people...I get that but for a retired box that I spent days on to finish...can I at least enter the flag and then be done with it?

[alpine pumice]

Support isn't provided over Discord you'd have to ask through support on the site

[white briar]

aiight...thanks dude

[lofty warren]

mornin' fellas

[molten fog]

Ehlo :)

[lofty warren]

[molten fog]

Morning is a good time for coffe. Sir do you had cofe today?

[azure remnant]

Im out a lot of times a day

[gray wraith]

Wtf

[gray wraith]

Fr

[azure remnant]

Jake, i told you to not mix up sugar and salt, we cant drink the tea now

[fiery copper]

Im out a lot of times a day too

out a lot of my mind

[exotic pendant]

😄

[azure remnant]

to stand, is to sit

[azure remnant]

We dont have to wear a hoodie everytime we do something right

Mine is tight too

Its not comfortable

And im the type of guy to take a break from the computer every 10 minutes

So its

Yeah

[wanton dock]

what's up gigachad

chadlite

[molten bobcat]

about to knock this out

[wanton dock]

nice nice

[azure remnant]

Ayy

[wanton dock]

i will finish that module one day

[azure remnant]

Never done any academy in a week

Wait a sec

Did i say

Week

NO

MY STR

[wanton dock]

im only an ltn

[azure remnant]

🥀

[wanton dock]

i think i have htn potential

[low briar]

hello i have a question , im new to the field :d , i juste DDL the Empire LupinOne from vulnhub and i want to escalate the privilege with pip i run those lines

TF=$(mktemp -d)
echo " import os; os.execl('/bin/sh','sh','-c','sh <$(tty) >$(tty) 2>$(tty)')" >$TF/setup.py
sudo pip install $TF

but dosn't work

[alpine pumice]

best to ask for box help in #boxes

[low briar]

okay bro thanks

[eternal mango]

Also define "doesn't work" when you do. Any errors or whatever?

[azure remnant]

He said dosnt work tho

[terse dirge]

Morning/afternoon chat

[azure remnant]

Its evening already

[fiery copper]

I may sound like a goof but more cybersecurity certs should have implemented as purchase options, payment with multiple purchases

[molten bobcat]

https://academy.hackthebox.com/achievement/928271/176

[fiery copper]

congratulations!

[molten bobcat]

ty ty

[lime trout]

Wdym?

Like, BNPL?

[signal mica]

I would pay them over 50 years

[cloud osprey]

"buy now poodle licker"

[lime trout]

Plz don’t go into debt over htb 😭

[rich radish]

Haha noob rank @lime trout

Oh wait

💀

[half comet]

I'm taking the OSCP+ in the next few days, anyone have some last minue tips?

[gray wraith]

Great job bro

[rich radish]

Brazilian phonk instagram meme moment

[molten bobcat]

ty ty

[gray wraith]

Im doing the AD enum & attack module

Bht its so complicated

Took a break today for portswigger xss Labs

[cloud osprey]

just hack into all the machines they set up and grab the flags, completely bypass the test

[molten bobcat]

make sure your work area is completely spotless and free of anything that could remotely look like a smart speaker

[alpine pumice]

I liked this module because it felt really straightforward and easy to understand

[half comet]

oh damn really? fuck i gotta clean my room lol

[molten bobcat]

yes

the OSCP is fully proctored

they have to watch you through a webcam

[rich radish]

I feel like mr robot would be more accurate if elliot had an indian accent

[gray wraith]

Though im a noob, from what I read about certs exams was take good notes, be very thorough about enumeration and dont get stuck with rabbit holes

[rich radish]

Mr rajesh

[half comet]

i heard of some people using a bluetooth speaker to listen to music while testing

[molten bobcat]

1000000% not allowed

[half comet]

Since they dont allow you to wear a headset (which is really annoying to me imo)

[cloud osprey]

the trick is to just finish it really fast and submit it, then they cant watch you through your camera for very long

[half comet]

damn, that sucks

[molten bobcat]

i was forbidden from even speaking

[low briar]

haha eror but i just solve it thanks bro

[neat cipher]

Why would a guy growing up in Upstate NY have an Indian accent?

[half comet]

BRUH

[eternal mango]

Take breaks, if you get stuck on something for too long move on to something else, take notes, stay hydrated.

[molten bobcat]

your mic has to be open and your camera has to be on

[rich radish]

Cus indians are really good at computer code

[molten bobcat]

24 hours.

[cloud osprey]

just need some preworkout white monster

[half comet]

I have done the OSCP-A through C practice exams. And on each lab there were around 2-3 times that i had to look something up to move forward.

[molten bobcat]

looking things up is totally fine

[neat cipher]

There are good coders and hackers all over the world

[molten bobcat]

the exam is "open book"

[half comet]

Like, asking for a hint i mean.

[lime trout]

Skill is just a representation of time invested into learning

[molten bobcat]

not really any hints gonna be available for what you're working with unless you 1:1 find the technology

[lime trout]

and a country with alot of people , will have alot of talented people lol

[molten bobcat]

which is, yknow

[gray wraith]

I dont think there would be any point of a closd cybersec exam

[rich radish]

Yeah but indias gdp

[molten bobcat]

the intended way to solve the exam lmao

[half comet]

They have been added to my methodology now though. But its usually some weird technical issue.

[rich radish]

💀

Brazilian phonk moment

[neat cipher]

GDP is not a good measure of how good of a hacker someone is. That's just a measure of the amount of money earned in the country divided by the number of people in the country

[molten bobcat]

ignore, obvious troll

[rich radish]

Well it is technically, more money means more equipment

And resources to train

[molten bobcat]

I was talking to myself for problem solving and they told me they'd terminate my exam if I kept speaking

I just talk to myself when figuring something out 😭

[eternal mango]

Helps sometimes

Do it in public though and you get weird looks

😅

Not fair

It's like solo mode rubber ducky method

[cloud osprey]

https://tenor.com/view/rubber-duck-ernie-sesame-street-squeak-gif-13435813928750240518

[gray wraith]

Gdp is a bad measurement overall

[gray wraith]

This dude does nothing but troll

[severe falcon]

Hi, what's up gigachad8520, it's been long time. hru?

[severe falcon]

None of your business Bossman. Stop messni' around.

[molten bobcat]

lame

[severe falcon]

Why?

[molten bobcat]

i dont interact with people who type with a schema

[severe falcon]

did I ask for that? No.

It's "General" chat.

[rich radish]

Ur just jealous of indias gdp

Only reason why u would say that

[gray wraith]

You have to admit the way you wrote was weird to say the least

[gray wraith]

The only person im jealous of is fr0st and its due to his mind and k owledge

[rich radish]

And ok yeah accuse me of trolling when im making logical arguments but whatever

[gray wraith]

I remember your carnivore diet fiesta

[rich radish]

Like u think im lying but i did do carnivore diet

It does work

Smh

[molten bobcat]

im just doin actual work

[terse dirge]

Yo Emma, our kubernetes cluster at the cyber range has 1.4 terabytes of ram (it's DDR 2 ram)

[supple plume]

it's saturday

[rich radish]

By talking on htb?

[signal mica]

Excuse me?

[molten bobcat]

im studying

[vivid flower]

Epoch is my spirit animal

[signal mica]

1.4 tb of ram

[terse dirge]

It's not much our servers are like 5+ years old

And we're locked at a gig for internet speeds

[signal mica]

That is ram in its raw form, no swapping and optimization?

"Just space" ?

[gray wraith]

Nice, i did few portswigger Labs tday, might do few more

[severe falcon]

Tyc, in here?

[supple plume]

great

[vivid flower]

Im doing crto just glancing at chat

[severe falcon]

Ceald still works on K8s?

nice.

[latent hearth]

Wanna start doing bbh:)?

[gray wraith]

Yeah, i find it exciting

[severe falcon]

Rich!

[latent hearth]

Yeah did the same

[terse dirge]

Yeah I made the poor decision to try and set up a k8s cluster

[latent hearth]

Changed from htb to bbh

[severe falcon]

LOL.

so what you doing.

[gray wraith]

I still want to pass CPTS but seeing yall get CVEs and bbh is motivating and I wanna give it a try myself

[latent hearth]

Currently top 32 on intigriti

[gray wraith]

Getting my own CVE is one of my goals

Meanwhile Frost has like 50

[vivid flower]

Hell yeah

Frost has decades on all of us

[gray wraith]

+diff genetics. My spectrum only Goes so far, maybe it will work like a superpower later on, I dont have much experience and i still have a lot to learn

[latent hearth]

Most awesome things are live hacking events

Should be your main goal to attend at one

[gray wraith]

Idk if therr are any ones in poland

Though id like to go to a conference

Once im a bit more knowledgable and confident

[latent hearth]

If you get invited they pay for everything

Travel / stay whatever

[gray wraith]

Gotta make a name for myself first

[latent hearth]

I know a few polish people from lhes

[eternal mango]

https://www.meetup.com/pl-pl/hack-the-box-meetup-warsaw-pl/

Not exactly a conf..

But you still get to meet like minded people

[latent hearth]

Yeah we have sth equal near my location

[gray wraith]

Yo thats crazy

[eternal mango]

https://bsideskrakow.pl/?srsltid=AfmBOoo50J1YoVcmnjBkK-Al1NVlw5FjkxoziyZyrGTswpxqOpy9efWt

[gray wraith]

Gotta check it out

[eternal mango]

BSides are awesome events, at least the ones I've been to

[gray wraith]

First i need to get into my company SOT

Technically i have a guaranteed slot

Big boss needs to put more budget into it

[fiery copper]

Im top 5% in TryHackMe which honestly doesnt mean anything

[latent hearth]

https://app.intigriti.com/profile/c1phy 👀

[fiery copper]

Oh you were rank 1 in 2023

[alpine pumice]

washed

[latent hearth]

Yeah

[alpine pumice]

/rank

[gray wraith]

now do a miblak and 100% it

[alpine pumice]

!rank

[alpine pumice]

damn lost my #69

[eternal mango]

Haha

[gray wraith]

jesus, crazy!

[eternal mango]

Just shut up for a bit

/s

[fiery copper]

So how much did you make from bug hunting

[eternal mango]

!rank

[fiery copper]

!rank

[fiery copper]

Lame

[eternal mango]

Fallen behind

Need to yap more

(no, I don't)

[gray wraith]

!rank

[manic anvil]

does ranking in the season give cubes?

[gray wraith]

im 18!

[alpine pumice]

yes i believe so, if you get high rank

[manic anvil]

i see , thanks

[eternal mango]

e.g.https://app.hackthebox.com/seasonal?tab=rewards&season_id=9

[molten bobcat]

https://tenor.com/view/jjk-jujutsu-kaisen-jjk-fight-jujutsu-kaisen-fight-sukuna-gif-9526078671029098228

[manic anvil]

also i guess the machines are advanced stuff right?

[molten bobcat]

!rank

[molten bobcat]

No they have ranks from very easy to brainfuck

[manic anvil]

oh cool

[gray wraith]

busy today, eh?

[molten bobcat]

I have promises to keep

[vivid flower]

Dont say genetics you can understand it if you put your mind to it

Bruce lee said the only limits that exist are those that you let yourself believe in

Itll never be to your incentive to believe that you are incapable of doing something unless its something physically impossible

[manic anvil]

!rank

[rich radish]

yknow funny thing is

bruce lee also ate raw meat

[vivid flower]

I believe it

[molten bobcat]

Bruce Lee is dead.

[unkempt ice]

How can I make a HTB support ticket?

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[vivid flower]

You dont like bruce lee?

[rich radish]

https://www.youtube.com/watch?v=QUbZWynIo10

[unkempt ice]

I can't find the message thing

[vivid flower]

Germans eat raw meat

I wish america could actually make filet americain without making millions sick

I miss that

I miss the continental diet in general

Americans cant make bread

[wanton dock]

if farmers killed chickens via carbon monoxide would that make the meat toxic or no

[rich radish]

epic

[rich radish]

chickens are fed soy

so the meat is tampered

contaminated

and lots of other hormones

[latent hearth]

U mean mett? Raw meat on bread ?

[vivid flower]

I dont know but my gut says that is a bad idea

[rich radish]

i dont think carbon monoxide but if they inject them with hormones yes

specifically anything estrogenic

[undone fossil]

hello chatters

[rich radish]

but they feed them estrogenic stuff like grains

[vivid flower]

Mett is usually pork i refer to raw beef

[rich radish]

so kinda

[rich radish]

why are cats so good looking

[vivid flower]

Cheeto is very aesthetic

[rich radish]

ive yet to see an ugly cat

[molten bobcat]

This was my boy today

[vivid flower]

I should take more bunny pictures

[rich radish]

its probably cus of their raw milk and raw meat diet

pottinger study on cats proves this

https://www.youtube.com/watch?v=5tOc2ELXB6Q

[manic anvil]

hecker is real

[wanton dock]

this is actually apparently a more humane way to end the life of a chicken

i just looked it up

such a cruel practice it currently is

[rich radish]

meanwhile wagyu cows get massages

and listen to relaxing music

its the most expensive meat in the world

[wanton dock]

listening to relaxing music before they get sent to the funny zone

[rich radish]

or one of the most expensive cow meats

[wanton dock]

as much as i dont want to eat meat anymore my dad is making cheesesteaks

[molten bobcat]

I've been studying for about 4 hours

Lite work

[wanton dock]

nice nice

i should have been studying but i've been messing around with zathura trying to get my notes into pdfs and in dark mode

figured it out though

always doing anything but studying

[molten bobcat]

I'm just taking a break to have food

[nimble tundra]

i enslaved someone -

react with if you wanna see that guy rest

or react with 🥞 if you guys wanna make him overwork

[stable tiger]

raw milk is not healthy lmao

[stable tiger]

im writing a shellcode generator

life is good chat

[rich radish]

Fake news

[stable tiger]

have you tried boiling your raw milk

[rich radish]

Why would i denature the nutrients in it

Do women boil their breast milk before giving it to babies

[stable tiger]

😭

[stable tiger]

healthy humans dont have lethal pathogens in their breast milk

[rich radish]

Neither do cows

[stable tiger]

COWS do because COWS are immune! therefore, the pathogens don't effect them

[stable tiger]

😭

i guess:
E. coli
Salmonella
Listeria monocytogenes
Campylobacter
Brucella

are all healthy

they dpn't lead to kidney failure, blood infections or death at all

[rich radish]

Already naturally found in the body

[stable tiger]

LMAOOOOOOOO

the only thing pasturization does is kill pathogens, it doesn't subtract nutritional value whatsoever

[rich radish]

Bruh it dies

Does

Your denaturing the enzymes

[stable tiger]

breaking news: vitamins and minerals can die

[stable tiger]

oh what enzymes?

this is like comparing iv fluid to storange tanks lmao

ur literally comparing milk straight from a breast to raw milk that is already dangeorus, yet stored in shitty conditions and then sold to you after aging

ecoli, salmonella and listeria are also NOT found naturally in the body at all

the enzymes that get destroyed through pasturization are destroyed by your stomach acid anyway

you aren't increasing nutritional value whatsoever and that's been proven through hundreds of years of science, you are literally just risking death for the sake of it

even IF raw milk had +1% benefit (which it doesn't) you'd be risking various diseases and death for an extra 1%

[rich radish]

Lipase – Breaks down fats, important for flavor in cheese and milk.

Proteases (e.g., plasmin) – Breaks down proteins, influencing texture and aging in dairy products.

Lactase – Breaks down lactose (though it's present in small amounts in milk, not enough to help with lactose digestion in most people).

[stable tiger]

LACTASE LMAOOOOOOOO

enzymes are proteins, enzymes in raw milk dont survive ur stomach acid 😭

your PANCREAS PRODUCES LIPASE

PROTEASES ARENT NUTRIENTS

they make milk DEGRADE

[rich radish]

Keep consuming boiled milk

[stable tiger]

lactase activity in raw milk is next to none 😭

[rich radish]

I will keep consuming it raw

Because i am a chad

[stable tiger]

😭

u cant be real bro

"i am drinking unboiled milk, i am chad thundercock"

petri dish with confidence atp

[sturdy thistle]

Eeelllllllooooowwwwww

[stable tiger]

hello mick

[fiery copper]

the only thing that is raw and will consume will be

I dunno I dont eat stuff raw, not even the ass

[rich radish]

Yeah but it makes it easier to digest the proteins in the milk

Meaning its more bioavailable then

[stable tiger]

stomach acid denatures proteins

pepsin digests them

[fiery copper]

silence nerd

[stable tiger]

your panreas adds trypsin/chymotrypsin

[rich radish]

But theres other nutrients which arent being digested

Lil bro

[stable tiger]

oh yeah what are they?

[rich radish]

So many

[stable tiger]

like what

?

go on

[signal mica]

[rich radish]

Lactoferrin

[stable tiger]

pastureised milk has lactoferrin

[rich radish]

Blocks iron

[stable tiger]

💀

lactoferrin is a protein

[normal ferry]

https://tenor.com/view/airi-momoi-momoi-airi-this-is-me-face-reveal-cutie-pookie-gif-15766275011733843678

[rich radish]

Exactly

And it isnt digested in pasteurized milk

Cus no enzyme

[stable tiger]

remind me again what happens to proteins when they come into contact with stomach acid

💀

[west lynx]

https://help.hackthebox.com/en/articles/5987511-contacting-academy-support

[rich radish]

Not all proteins

[stable tiger]

lactoferrin is very much broken down then consumed by stomach enzymes

you have no education on this topic and are using chatgpt to cope

[rich radish]

Nah u just beleive in the government

I am libertarian

[stable tiger]

im not even american 💀

[rich radish]

And monero is better than bitcoin

So keep cooing

Coping

[stable tiger]

that's not a new take

[lapis apex]

6 7

[alpine pumice]

it's 2026 now, 7 8

[stable tiger]

https://pubmed.ncbi.nlm.nih.gov/11481401/
https://pubmed.ncbi.nlm.nih.gov/1787185/
https://pubmed.ncbi.nlm.nih.gov/23141828/
https://journals.plos.org/plosone/article?id=10.1371%2Fjournal.pone.0090011
https://onlinelibrary.wiley.com/doi/10.1111/j.1442-200X.1994.tb03250.x

[alpine pumice]

what the hell

[stable tiger]

dw

i nuked the embeds

[rich radish]

Yeah i aint readin all that lil bro

[stable tiger]

that's okay, enjoy the ecoli!

[rich radish]

Enjoy not being fully developed

[lapis apex]

You read these typa shit for fun?

[stable tiger]

what do you bench press mate

strong boy

[stable tiger]

autism

[rich radish]

120

Kg

[stable tiger]

i bench 165kg

please stop talking

💀

[lapis apex]

Ah yes, milk should be boiled

[rich radish]

Haha ok lil bro

[stable tiger]

that's why im educated on nutrition

please do your research before you take yourself out of training

[lapis apex]

So much potential

[rich radish]

Carnivore diet is superior

[stable tiger]

ts gotta be ragebaiting

😭

[rich radish]

Carbs completely uneeded in diet

Keep taking steroids

And eating grains

[lapis apex]

Hahahahahhahaha the fck

[stable tiger]

epoch what happens to proteins when you don't consume carbohydrates

[eternal mango]

Who triggered Liver King again

[stable tiger]

me

he said he drank raw milk

[stable tiger]

https://en.wikipedia.org/wiki/Gluconeogenesis

[eternal mango]

Hope you're in for the long haul 😅

Enjoy

[rich radish]

Yeah and?

[stable tiger]

so... you're still consuming carbs

[rich radish]

So?

Your still in ketosis

[stable tiger]

LOL

[rich radish]

Which is the whole point of carnivore

[stable tiger]

HAHAHAHAHAHAHHA

[lapis apex]

Cybersec server btw

[stable tiger]

we're in general

[lapis apex]

Im not mini modding, its just ironical discussing diets in a cybersec server

[rich radish]

Enjoy hyper glycolisis

And looking 80 years old when your 30

[stable tiger]

when you aren't a caloric deifict entering ketosis doesn't do anything for weight loss

ur just losing muscle glycogen 😭

and then muscle

[rich radish]

Calories arent even a real metric lil bro