general

[frozen zinc]

Can you act like man in the middle for an entire website?? Like when people register a new ad it goes before to you?? you were trolling him no?

[muted olive]

nah the third one is one of my fav movies in general

japan baby

hell yeah

[frozen zinc]

How is that possible?

[upbeat tangle]

If you can intercept traffic between a user and the server

[muted olive]

I can't tell if you're being sarcastic or not

[austere sinew]

Okay guys dont let me procrastinate pls if you see me pop in here in the next 8 hours execute me

Ciaoooooo

[frozen zinc]

No no but how will just capture a random user

do you know what i mean?

Imagine a random second hand car site... People go there and make ads, How is possible to intercept all request to that site when they register a new ad if you dont know the user

[muted olive]

Yeah, for that you need to be in a position to MITM

like attacker controlled wifi

[frozen zinc]

exactly

you cant just do that out of nowhere to users you dont know

[muted olive]

yes thats right

[frozen zinc]

Ok bcs @supple plume told the guy he could do it xD I guess he was trolling

[muted olive]

besides even if you are, you cant read or modify HTTPS requests

[frozen zinc]

yeah

[muted olive]

to do so you'll need to install your root CA on the victim device for which you need to have sent them malware previously etc

[supple plume]

I can do it

[frozen zinc]

you are trolling

[supple plume]

sure

[zealous charm]

plz add the burp cert before running my malware

[devout sail]

She can't 💀

It's called mitm not witm

[muted olive]

CiTM

child in the middle

[signal mica]

shadow21a is like a gazebo, you either die alone or water long enough to see yourself energy drink

[meager kernel]

[muted olive]

tfw your vm's bidirectional clipboard breaks so you have to type out the user flag manually

[supple plume]

vro

[frozen zinc]

Avocados are better

[scenic maple]

i am gonna read react docs now and then go back to TOP

[frozen zinc]

Your box is active

[heady sage]

Oh guess what? I patched a race condition insecure file upload, and session puzzling vuln yesterday.

Didn’t even use ChatGPT

[jaunty niche]

Hello

[green kite]

nice one

[signal mica]

ngl thats a valid flex

[naive leaf]

Guys

Respiratory illness

Is like a 3/10 experience

[heady sage]

I’m getting better at this code review thing

[naive leaf]

Wouldn't recommend

[naive leaf]

Wemb CTFs

Legit one of the best learning things I've used

[heady sage]

At this rate I’ll be ready for the CWEE path soon

[fiery copper]

Vader

eVader

[sturdy thistle]

@austere sinew i deploy later

[bold snow]

do u guys think taking cjca before cpts will increase my chances of passing significantly? I already have ejpt, and will take ewptx in a month, but I have not much experience with writing pentest reports

[sturdy thistle]

i have linked in too

[sturdy thistle]

it's on your choice, you can take both ofc

[storm coral]

?

[bold snow]

do we write a report in cjca like cpts?

I mean if we do is the structure similar

[static bloom]

i think you just fill it in

[gray wraith]

So smart!

[heady sage]

I’m okay I guess

[gray wraith]

Im not, yet gotta do more work this weekend

Felt overworked these past few days

Tops can do portswigger labs

[shy terrace]

Hi

[devout sail]

🫵 ragebait this guy

[sturdy thistle]

report ye

[rugged dune]

df u still alive

[signal mica]

ayo nice to see you still with us

[rugged dune]

am not

[signal mica]

huh?

[rugged dune]

i remember u in hacker

how tf are u in guru

[signal mica]

last time we interacted i was guru already

[rugged dune]

@scenic maple report this one .

[rugged dune]

nah ?

[signal mica]

yep last time we interacted you asked me for help with a challenge and i was guru already

[rugged dune]

https://tenor.com/view/hot-day-are-you-ready-for-some-football-gif-16278812894835706568

[devout sail]

[supple plume]

he is guru since I joined

[rugged dune]

dyum time passes fast

[supple plume]

fr

[rugged dune]

joined what though

[supple plume]

the army bitch

where tf we are

use both eyes

30 pushups

[rugged dune]

did 15 all i can

[exotic pendant]

😄

[signal mica]

wanna do insane binex together?

[rugged dune]

binex?

[exotic pendant]

Almost Friday

[supple plume]

vinex is how we call wine with your ex in spanish

[signal mica]

pwn

[supple plume]

[loud epoch]

[exotic pendant]

I gotta find something to keep me busy

Tempted to do the problabs or somethign

[supple plume]

become my mentor

[stiff pike]

i can do only 1 exercise a day?? my fkn pwnbox restarted again

[signal mica]

naštelaj si virtualko

[obtuse fern]

use your own vm

[stiff pike]

koga

[signal mica]

i wrote that already

[thick forge]

movee the best hacker wake up

[exotic pendant]

https://tenor.com/view/you-got-it-dude-thumbs-up-you-can-do-it-nice-good-job-gif-5612803759146315224

[obtuse fern]

i wrote it in english

[signal mica]

make your own kali vm and use vpn

[supple plume]

when do I quit my job

[exotic pendant]

After you get a better job

[stiff pike]

gng uciraj sm zacela niam pojma kako

[exotic pendant]

Had some fruity pebbles

hit the spot ngl

Frosto dieting for the beach this summer

[signal mica]

enjoy the process 😼

[stiff pike]

😐

[rugged dune]

naah, @vocal fog look at this guy telling me to do pwn

[vocal fog]

https://tenor.com/view/funny-hahaha-gif-22505124

[rugged dune]

bro have no idea what i was doing the last 24 hours

[devout sail]

engrish

kako means what?

[exotic pendant]

Was it pwn

[stiff pike]

how

i gave up

[devout sail]

whta language is it?

hr?

[exotic pendant]

croatian

[obtuse fern]

keep it english

[devout sail]

nop

[signal mica]

https://tenor.com/view/slovenia-navy-flag-slovenia-navy-gif-2807445939577584850

represent

[devout sail]

🇭🇷

the gif is incorrect

[rugged dune]

https://tenor.com/view/dog-crying-meme-doggo-crys-megan-soo-crying-dog-gif-5276199764143986284

[devout sail]

https://giphy.com/gifs/EHF-croatia-denmark-dane-0nDs2tcBfjzcwF4z8K

[stiff pike]

@signal mica installer images al virtual machines na kali

[supple plume]

na kali ✅

[stiff pike]

🍡

[devout sail]

motivate me to do htb machine in 3 sentence

[supple plume]

3 sentence why not 1?

[devout sail]

wont work

[signal mica]

haha i got suspended again

full month of pwning now

[supple plume]

-# Kraton is catching up

[devout sail]

[devout sail]

where

ok i go touch some air

#1462142770327191676

[signal mica]

https://tenor.com/view/fed-spotted-goku-son-goku-meme-gif-13306343723370401392

[supple plume]

https://tenor.com/view/jo-jos-bizarre-adventure-frog-fist-gif-11650164

[sharp beacon]

https://klipy.com/gifs/street-rafting-rainstorm

[upbeat tangle]

3 sentences? or 3 words?

[devout sail]

sentences

[frozen zinc]

12 months in county jail, 5 years in state prison, life imprisonment without the possibility of parole.

[devout sail]

life goals 🔥

[frozen zinc]

go for it tiger!

[devout sail]

[upbeat tangle]

They say that staying white(hat) feels right, but theres no way because the world is grey... But once you go black(hat) you never go back

3 sentences

[devout sail]

i just wanted motivation to do airtouch, not crime

alright i try

[upbeat tangle]

LUL

[devout sail]

https://giphy.com/gifs/derek-hough-wJKQCSeexuO5y

[frozen zinc]

Destiny

[sharp beacon]

it's fun. try it. the end.

[devout sail]

i tried to be serious

[devout sail]

💩 ~

[frozen zinc]

🙂

Arch life

[scenic maple]

for real?

[graceful pendant]

[rugged dune]

bro is always reeady to snitch even his own blood

[modest coral]

[scenic maple]

i am going to revoke ur visa and send u to somaliland

[rugged dune]

wait what about somalia

https://tenor.com/view/luigi-mario-n-word-offensive-thats-racist-you-cant-gif-16875916

[scenic maple]

its real place

[signal mica]

Ai generated country

[molten bobcat]

I have to go pick up cat food

[rugged dune]

do you have to do that in -6 C? i just did .

[molten bobcat]

Close enough to it

[rugged dune]

what we do for love ...

[molten bobcat]

-18 C here

[azure remnant]

Yall know if binary analysis is included in the CPTS exam ?

I literally dont have a windows computer to use soms tools on

[rugged dune]

i almost die on -10 idk how u survive on that

[rapid badger]

Clothes help

[molten bobcat]

I have a hoodie

[scenic maple]

if modules covers it

[vivid flower]

Rocky mountains stopped the cold front, oregon unaffected 😎

[azure remnant]

they do

[scenic maple]

[azure remnant]

Do i get a windows VM during the exam ?

[scenic maple]

u get pwnbox

however i am not sure if windows pwnbox will be there

[azure remnant]

[gray wraith]

Wdym

The target?

Or your "station"

[molten bobcat]

Which exam

Cuz the CDSA provides you with a windows box you RDP to for it

[scenic maple]

i think so during exam

during full exam

[keen elm]

make sure to have ur tools ready for transfer

[supple plume]

hey golam

if I do one of these exams like CWES for example

[pearl grotto]

is someone else having this issue:

[scenic maple]

[supple plume]

can I use my custom tools

[scenic maple]

yes

[supple plume]

hah

amazing

so I can use mn machine tgue

[scenic maple]

no tool restrictions

[supple plume]

can I use my own machine too?

[scenic maple]

where?

[scenic maple]

as in ur pc? yes

[supple plume]

I mean my distro with my setup

but I guess the answer is probably yes

I have about 2 hours now I am thinking about building a cyberweapon

any ideas?

Any idea is welcome even if it theoretically takes more than 2 hours

[scenic maple]

pick a cve and make a poc

[supple plume]

any cve in mind?

[supple plume]

amazing idea btw

[scenic maple]

mongoose_bleed

[supple plume]

that probably has many

[scenic maple]

but none of them are yours

[supple plume]

hahah

what if I make it in javascript just to piss off some Cealds

[azure remnant]

Like a windows pwnbox

A windows with analysis tools installed

[safe terrace]

.

[molten bobcat]

Finally home

[signal mica]

how to be anon on the internet
step 1: solve a htb pwn challenge and get /bin/bash
step 2: install mail server on the challenge box and create a user
step 3: shenanigans with anon user
Step 4: do illegal stuff and relay blame on htb

[gray wraith]

Why would you like that

[molten bobcat]

Blue teaming has that

[pearl grotto]

in the module sections

[gray wraith]

Makes sense if you have to work as a target

[scenic maple]

Ah idk then i am doing labs

[molten bobcat]

I have the next 3 days off so I'll be finishing my exam

[azure remnant]

Bc i dont have a windows machine

Getting a windows host with the tools like the host on attacking thick client apps will be good

[supple plume]

hi marcie

I read your scripts

[molten bobcat]

Good mornin echos

[obtuse fern]

just steal the tools from C:/tools on the windows targets

[obtuse fern]

i tried documenting as much as i felt like lol

[supple plume]

I am glad you didn't vibe code them

[gray wraith]

So you mean if the Windows TARGET would have the tools?

[dapper karma]

https://tenor.com/view/owen-wilson-wow-marley-and-me-smooth-hd-hq-gif-977282450591946462

[supple plume]

cloud did you see my cat rice?

I like to brag

[molten bobcat]

Your what

[supple plume]

https://github.com/echoesofwhoami/echoes-bat-theme

[obtuse fern]

the most i vibed was when i changed it (i needed to make the change because i was switching from using just a standard get to using sessions)

[supple plume]

riced my cat command
-# made a frickass bat theme and aliased my cat command

[obtuse fern]

and i needed to make a slight change

[supple plume]

good

[formal thunder]

Tf is the the new thm cert

[obtuse fern]

(i was missing the x-requested-with header for the post request)

before that -> 419 error
after that 400 error -> (i already had that vpn selected)

[supple plume]

@molten bobcat can you recommend me a cve to write a POC? something web not insane binex please if it's possible

[molten bobcat]

Do you think I have CVEs memorized..?

[obtuse fern]

I also know what the request looks like when you're grabbing the status of a lab :3

[supple plume]

no but maybe you know some that are cool and I can find just by description

[molten bobcat]

I dunno make one of those paper cut RCEs

Papercut is printer management software

[obtuse fern]

mostly because it polls in the background while you have the module open so i just waited to grab it and badabing badaboom

[molten bobcat]

Web interface

So it's web stuff

It's a web management interface to control printers

[supple plume]

is there no way to use api calls on academy?

[supple plume]

ok Ill look it up rn

[molten bobcat]

I used papercut admin logs once to catch a criminal

[azure remnant]

No bro

Literally a windows pwnbox

[obtuse fern]

there is

[azure remnant]

Which i can transfer binaries into

[obtuse fern]

it's just not publicly documented

[molten bobcat]

Easy, windows machine, Linux vm

[obtuse fern]

so i painstakingly documented them on my own

[azure remnant]

Buy me more ram

[supple plume]

imagine using a pwnbox to install a VM with windows there to ssh to your host to connect to the pwnbox

[molten bobcat]

[manic anvil]

i think its like junior cybersecurity analyst

[supple plume]

can windows xp compile C#?

[obtuse fern]

ugh GIPHY sucks for searching gifs

[azure remnant]

i should have bought a pc earlier

[obtuse fern]

i was trying to find a gif re: "Iron man built this in a cave with a box of scraps"

[azure remnant]

Ill move from cyber security into making RAM business

[obtuse fern]

oh @supple plume i'm insane enough to have written it all in vim

[manic anvil]

make ram with built in anti-virus

[formal thunder]

Looks dumb

[azure remnant]

Bro wants AI RAM

[manic anvil]

didnt look at it tbh just the discord message

[azure remnant]

I watch youtube using vim

🗣️

[obtuse fern]

the default behavior of my VPN script is just to download the TCP VPN file and save it as academy-regular.ovpn and the pdf one is transcript.pdf; so you don't need to specify

[manic anvil]

make it block any browser that named something like "chrome"

mf ram eater

[brittle quail]

Why does blackarch take 6 hours to download 😭

[azure remnant]

Google u mean

[manic anvil]

we dont say that naaame

[supple plume]

wtf vro

[gray wraith]

Huh

[supple plume]

install arch and set up blacharch repos

[manic anvil]

download or setup?

[brittle quail]

it’s the iso from their page

[azure remnant]

When did G**gle become a j*b

[brittle quail]

ok it says 4 hours now

[supple plume]

bro

[brittle quail]

Huh

[supple plume]

get real

[manic anvil]

network problem?

[supple plume]

arch with blackarch repos

[obtuse fern]

https://giphy.com/gifs/jerseydemic-3o6Zt5pw24cSaHVavK

[brittle quail]

Ngl might be bc it’s 70 mbps

[supple plume]

eh

[brittle quail]

ok I’ll try it

[gray wraith]

Or use exegol

[obtuse fern]

70Mbps? jesus that's stone age technology

[manic anvil]

bruh what are you downloading ?

[brittle quail]

chillll

not my home

[supple plume]

that is even worse

[brittle quail]

school network

[gray wraith]

Ive heard good stuff bout it

[brittle quail]

I said blackarch iso

[gray wraith]

Even miblak uses it

[obtuse fern]

that begs the question as to why you're downloading it at school?

[brittle quail]

Bc I’m not at home

[supple plume]

vro that does not allow you to say I use arch btw

[manic anvil]

i mean even with 70 mbp whats the size of it??

[supple plume]

is not free so...

[obtuse fern]

https://giphy.com/gifs/rJvYq4DjfP7d6

[brittle quail]

no ima skid I do not how to use it

[brittle quail]

😭😭😭

[azure remnant]

Im already having problems with vpn using fiber optic

[quasi raven]

stick with kali

[quasi raven]

(i'm a skid too btw)

[brittle quail]

I want to make it my daily

[gray wraith]

Isnt there a free comm version?

[manic anvil]

ok question what even blackarch advantage over kali ?

[quasi raven]

so, a pentesting distro as a daily?

[brittle quail]

no idea

[gray wraith]

Maybe its stripped af

[supple plume]

why do you do aaaaaaa

[brittle quail]

Idk I gtg

[supple plume]

why does someone would want to have kali or blackarch as a dily driver

omg

[supple plume]

freemium

[azure remnant]

Ive been using ubuntu for 3 years with little problems so far

[manic anvil]

i know that people love arch because they can set it up and learn linux like that from it and ofc make it as they like but blackarch?

[quasi raven]

it's for the love of the game 😂

[manic anvil]

lol nuh nothing beat the silly dragon it been the face of the community for so long

[quasi raven]

yeah i think it's a solid choice for everyone, even for advanced pentesters

i've tried using arch and i gave up instantly lol

[manic anvil]

in Mr Robot they did the same lol while everyone else was using another distro he was using kali

[quasi raven]

if elliot uses it, why would i use something else?

[supple plume]

8 years ago I tried kali as a daily driver, never again

[manic anvil]

why

[rapid badger]

Arch is nice. When I need a dopamine hit, just run full update.

[supple plume]

is not meant for that

[quasi raven]

.

[supple plume]

jhahah just what Im doing now

[manic anvil]

no i mean why would you use it for daily things

[manic anvil]

i dont even open HTB in it

[quasi raven]

no reason

[supple plume]

I was a skid

[gray wraith]

Kali is supposd to be ran in vms

[manic anvil]

it cant even run videos from youtube as far as i know

it stutter

[quasi raven]

i used to dual boot it but i don't know why it works better in a proxmox vm

[supple plume]

aright time to reboot

wish me luck not debug

[manic anvil]

if it work it work dont change it let the dargon think he is the main and only system in that little vm

[manic anvil]

remember to remove the french package for faster bootup

[supple plume]

lets go

[gray wraith]

Thx for the host name i will now hack you like sam altman

[supple plume]

kernel updated with no issues atm

[supple plume]

omg vro please dont run the 100TB to 1KB compressor on my system

[rapid badger]

[gray wraith]

Ill compress your laptop into a raspberry

[supple plume]

dayun

[manic anvil]

so what if what if you pentest a company and remove their logs if there is no logs there is no hacking happened big brain

[supple plume]

cloud would know what to do there

[manic anvil]

what if you hack their cloud provider

[vivid flower]

This guy plays uplink

[gray wraith]

Unless they have a printer than prints them out 24/7 and the junior SOC analysts have to read them line by line

[supple plume]

I mean our cloud @molten bobcat this one

[vivid flower]

It's pretty cold.I think he has condensed into a solid

[gray wraith]

No more cloud?

[manic anvil]

would be funny if a company do this

[vivid flower]

He joined ice

[gray wraith]

Condensed into.. idk, maybe butter or sum shit

[manic anvil]

snow in fact

he would start screaming "winter is coming" now and then

[frozen zinc]

and add Russian and Chinese they are more efective than clanav

[manic anvil]

sudo rm -rf
sudo apt install russian?

[frozen zinc]

i use an alias dont remenber the exact command

[manic anvil]

tbh i almost fell for the "remove french" joke when i first got kali

i looked in the internet to how to do it and found a reddit post explaining what it acutally do lol

[frozen zinc]

Unironically there are malware that dont infect devices if they have russian and chinese packages on it

But probably there are malware that do the opposite lol

[manic anvil]

i mean i know why kinda

the same reason alphabay didnt accept any stolen russian credit cards

[frozen zinc]

Thats why we steal french credit cards

[manic anvil]

lol

[cloud rampart]

:c

[manic anvil]

are all cybersecurity content creator similar ? i found john hammond then beardless john hammond lol

[quasi raven]

who is beardless john hammond

[manic anvil]

i think his channel called low level

and he look very similar to john lol

[quasi raven]

ohhh wait

the reverse engineer?

i get him on my fyp everytime on tiktok

[manic anvil]

they are both reverse engineers i think lol

at least most of john conetent is reverse engineering

[quasi raven]

yeah my bad lol

but john still the goat

[manic anvil]

there is also a documentary play list of animated cybersecurity attacks and such called "no roll back" i think its one of the best thing i watched last year

[quasi raven]

mhh i've never watched it

do you think i should?

cuz i have issues finding something to watch lately on yt...

[sturdy thistle]

@austere sinew https://cpdy.mickhat.xyz/

[vivid flower]

Seytonic is the best imo

[manic anvil]

its fun and cool

[manic anvil]

i dont think i have seen a bad cybersecurity channel so far

[vivid flower]

His explanations of news are very in depth

[manic anvil]

beside the one that as a kid trolled me on how to hack facebook and made me change the page element so it show me that i changed the account passwords

[heady berry]

any staff member

[vivid flower]

A lot of linux tubers will read the article or w/e but seytonic will read white papers and corroborate things

[sturdy thistle]

?

[vivid flower]

Very thoughtful coverage

[heady berry]

can i dm

[manic anvil]

the no roll back makers did a whole interview with who started the whole anonymous thing lol

it was funny to find out that the current mask they use isnt even the one meant to be for the character

[frozen zinc]

my fav IT youtube channel is PewDiePie

[heady berry]

while playing darksouls

[manic anvil]

oh yeah he is doing great with the whole tech thing he started

[frozen zinc]

I was low key joking but the content is legit

[manic anvil]

my guy wanted to make a camera and he end up making a camera a server and a lot of other things

[frozen zinc]

yeah respect

[brittle quail]

im back

i think what im gona do

[frozen zinc]

back again

[brittle quail]

is use some non pentesting os

as a daily

no idea what those r

[manic anvil]

ubuntu ?

or arch

[brittle quail]

and then kali in vm

[brittle quail]

idrk

[manic anvil]

i would suggest something if you up to it

[brittle quail]

yea

[sturdy thistle]

you ask and before i agree or so you dm me

[frozen zinc]

Im all for Linux but if you already know windows mate, just get WSL and kali in a vm

[manic anvil]

have kali on vm , and dowload an arch system also for vm while learning from htb use kali at the same time build that normal arch , then from arch build it into black arch

[brittle quail]

i cant do htb

its paid im not buying anything rn

[heady berry]

ok u took alot of time to reply and it's urgent subjct

[manic anvil]

all the funds things are not

[brittle quail]

fundamental?

i did all that i could i believe

theres a lot missing

[sturdy thistle]

i dont wrk 24/7

[frozen zinc]

Academy have a lot of weeks of content for free

[sturdy thistle]

and i answered within 2 minutes

[manic anvil]

then try to play the season you get free cubes from there as well

[frozen zinc]

you can build on the content and do extra for each module

[heady berry]

no worries mate not talking about the chat u flamed me for the dm loool

[sturdy thistle]

i don't flame you lol

just server rules

[manic anvil]

i finished like 15 week streak so far with the base cube , not that i wont want to pay but the country i am in there is no concept of online payment lol

[heady berry]

okay sorry for dm

[frozen zinc]

oh wow

damn sorry bro

[manic anvil]

nuh its fun but like the point is the academy give you alot to learn for free

[frozen zinc]

yeah

[shell bluff]

Is anyone completed Unintended pro lab I can't enter 2nd data base I found crdentials can't open it

[frozen zinc]

You can use it as foundation and do extra research on each topic

[manic anvil]

i do , i also found the season so i will try to play next season for more cubes

[frozen zinc]

i have still 3 or 4 modules more to finish all the free content and im on a 87 or 88 streak

only from free content

and i have some stuff done before they introduced the streaks

so you really can take your time and go deep on each topic

[manic anvil]

ngl the streak thing helped me keep going lol

[brittle quail]

alright

ill look

[manic anvil]

like at first didnt pay attention to it then i found i have 5 streak and there was no way i could let that reset

[frozen zinc]

this is the way

[manic anvil]

also one thing i hope the search option take you actually to a page with results not just show you the results

[turbid goblet]

is the HTB VPN unsafe? I recall someone mentioning that it puts us on the same network as other HTB users

[frozen zinc]

well you can go if you click no?

[manic anvil]

to that option only , i want it to take me to all the options that related to what i searched

[manic anvil]

it is safe it would be funny if a platform that teach you cybersecurity put you in the risk of being hacked

[frozen zinc]

but it does that no? What do you mean to instantly render all the content? Bro that is hard and there are multiple concepts that overlap different context

[manic anvil]

no like if you search it show you the content that related as drop down menu from the search bar it dont take you to a different page with the results and also i think it take you only to it if it was a module like i searched before when i started and finished the intro , i searched about the junior cyber path it show it to you but you cant click it i had to look around in the options to actually find it

nvm it take you to it now it got fixed i guess?

[frozen zinc]

bruh 😅

I think it shows you content that you unlocked

[manic anvil]

oh no it dont take you it still dont

[shell bluff]

?

[frozen zinc]

and the reason dont bring instantly to a specific module is bcs as i told you before some content overlap so you needs may be based on context

so you are the one that need to do the final clcik

[manic anvil]

oh if you click a module it take you to it even if you didnt unlock it but it dont take you to paths

[frozen zinc]

yeah well is meant to be use wiki style for reference and documentation

more like a tool for your research

i dont know if im explaining to point right

But you are right it need a bit of refining

Hey bro, do you think i can try your crypto with my C2?

[ionic heron]

Yes. Let's chat.

[molten bobcat]

Hey this guy is a scammer

Don't interact with them please

[frozen zinc]

who?

xD

[molten bobcat]

The guy who's showing his GitHub lol

[frozen zinc]

ok thanks cloud

[molten bobcat]

His repos are full of AI generated trash like this

[frozen zinc]

lol

[acoustic nymph]

hy !!
has anybody done the Firewall and IDS/IPS Evasion - Hard Lab?

[muted olive]

send the github link

[frozen zinc]

I want to see what he have

[frozen zinc]

for the guy?

I think better in private no?

[molten bobcat]

I'll be spending about the next 12 hours working on a report

[frozen zinc]

fun stuff

[fiery copper]

Cloud I wanna tell you something

[molten bobcat]

wot

[muted olive]

lol

[frozen zinc]

triggered

[devout sail]

Are SOC snitch?

[molten bobcat]

elaborate

[fiery copper]

Good luck with CDSA, I believe in you

[devout sail]

Stitching on people's shenanigans

[molten bobcat]

thank you

I'm aiming to have it done by today

[frozen zinc]

sharingans?

[green kite]

Fingers crossed 🤞

[brittle quail]

hey

i made a htb acc

[muted olive]

congrats

[brittle quail]

now what

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[frozen zinc]

OMG

WHY DID HE BLOCKED ME WHEN I SAID THIS???

[molten bobcat]

because hes a scammer

[frozen zinc]

so?

my C2 is still sexy

[brittle quail]

can i see it

[obtuse fern]

My C2 is netcat

[turbid goblet]

my c2 is club penguin

[brittle quail]

my c2 is minecraft

ok

i am hacking meow now

i will take meow down.

[forest trout]

Umm how long does it takes to verify your uni on htb

Academy

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[molten bobcat]

Support can verify your uni live over a chat

[signal mica]

My C2 is htb general

[fiery copper]

@molten bobcat ARE YOU A HTB MVP?

[molten bobcat]

i dont know what this question means

[forest trout]

I have already raised the ticket it's been two days now does it take more time

[brittle quail]

guys

i am hacking meow right now

[molten bobcat]

it depends

[fiery copper]

Hack The Box MVP 2025

[molten bobcat]

i got live chat service on a saturday

[brittle quail]

right.. meow

💀

k ima shut up

[fiery copper]

Shut up

[brittle quail]

wow

[molten bobcat]

be polite

[brittle quail]

help

idk question 2

meow is hard

What tool do we use to interact with the operating system in order to issue commands via the command line, such as the one to start our VPN connection? It's also known as a console or shell.

TERMINAL

ok

i got it

[molten bobcat]

education sure is a rollercoaster

[brittle quail]

ok idk this one
What service do we use to form our VPN connection into HTB labs?

[molten bobcat]

yes you do lol

every single person on htb has to run this sorta command

[brittle quail]

uhh

[frozen zinc]

Oiroke no Jutsu

[brittle quail]

openvpn

?

[molten bobcat]

https://tenor.com/view/kakashi-doton-gif-20181920

earth style, mud wall

[frozen zinc]

[brittle quail]

ok i rlly dont know this one now
What service do we identify on port 23/tcp during our scans?

[frozen zinc]

El hielo se derrite solo

[molten bobcat]

are you just gonna pop into chat every single time a question comes up lol?

[brittle quail]

yes

[molten bobcat]

dont do that

bad

[brittle quail]

okay sorry

[brittle quail]

wow this is very dehumanizing

[molten bobcat]

relax lol

its an emoji

[brittle quail]

my cat bit me the other day

smh

[molten bobcat]

mine play bites

[brittle quail]

i think it mightve been the claws

cus they stick to ur skin

[molten bobcat]

You can ask questions, just make sure you don't literally copy paste module questions

[brittle quail]

alr

[molten bobcat]

ask your own, get guidance understanding something

way better than just regurgitating answers

[lofty warren]

meow

[brittle quail]

arf

[molten bobcat]

i do kinda miss the buttons on my keyboard that changed or paused music

I'm sure i can macro some of my keys to it right

[obtuse fern]

Google the most common ports, or "what service runs on port x" when you run into a port related question

[molten bobcat]

or in this case, scan the target with nmap

[obtuse fern]

Well that too

[muted olive]

help i didnt get it

what do i do

[molten bobcat]

it helps to know what a port is too

[supple plume]

why do you interact with someone that advertices a worse version of rm -rf as a compressor

[molten bobcat]

lol

[obtuse fern]

I remember when I didnt even know what nmap was 2 years flies by fast

[molten bobcat]

i know the feeling

[obtuse fern]

You know what I meant by 'x' smartass

[muted olive]

roughly the same amount of time for in my case 👀

[frozen zinc]

Bcs Im nice

[brittle quail]

wait

it did make me open

pwnbox

or some window thing

[molten bobcat]

you dont have to use pwnbox

[fiery copper]

X points to treasure

[muted olive]

it marks the spot?

[molten bobcat]

you can use your own copy of a virtual machine and an ovpn file to have unlimited time

[brittle quail]

no but

[obtuse fern]

No, its a stand in for whatever number pops up

[molten bobcat]

a variable

[muted olive]

-# I know

[brittle quail]

well i js googled it

idk how i was supposaed to get telnet

[fiery copper]

So like a 1

[molten bobcat]

like i said

you can scan the target host

to find out what ports are open

[brittle quail]

ohhh the ip

at the top

[fiery copper]

What if I dont wanna

[brittle quail]

i ignored the ip at the top

okay

[frozen zinc]

THE IP

[fiery copper]

The IP

[muted olive]

https://letmegooglethat.com/?q=what+runs+on+port+23

[brittle quail]

no

[obtuse fern]

You probably shouldnt ignore the most important aspect

[brittle quail]

ye

proabbyl not

[frozen zinc]

The Ip bring the hogwarts letters

[fiery copper]

What Runs On Port 42

[rich radish]

Rip zyzz

#fuaaaark

[muted olive]

the universe

[rich radish]

#youmirinbrah?

#zyzz2026

[fiery copper]

Bro discovered today that some kid died to steroids abuse

Whats new

[rich radish]

Hes a hero

I remember his death every gym session

[fiery copper]

Ye bro pump steroids to win

[signal mica]

Our whole existence is just an $ip:42 ?

Nmap scan it

[frozen zinc]

Creatine and coffee

[gray wraith]

I would trust nmap with my life

[fiery copper]

I dont

[brittle quail]

why is

[coral cairn]

Baguette

[molten bobcat]

why is indeed

[brittle quail]

i hacked meow

[frozen zinc]

[frozen zinc]

you are on fire bro

[brittle quail]

yess

yay

[frozen zinc]

yup

[molten bobcat]

https://tenor.com/view/expedition33-sandfall-interactive-gif-16773893189782446784

life is a series of battles

[frozen zinc]

yes but what the ninja used in the ultimate battle?

Oiroke no Jutsu

[silver forge]

https://tenor.com/view/rock-lee-naruto-ready-to-fight-ready-to-go-chunin-exams-gif-26427548

[rich radish]

YO FUAAARK, BRAH, WHAT THE ACTUAL FUAAARK ARE YOU SAYING ABOUT ZYZZ TAKING STEROIDS TO “WIN”?! 🤬 BRAH, DO YOU EVEN REALIZE WHO YOU’RE TALKING ABOUT?! THIS IS ZYZZ, THE FREAKING KING OF AESTHETICS, THE MIRIN’ LEGEND, THE GOD OF LEAN GAINS AND PARTYING HARD! FUAAARK! 😡

ZYZZ DIDN’T JUST “TAKE A SHORTCUT,” BRAH. HE TRANSFORMED FROM A SKINNY, INSECURE NERD INTO A BEAUTIFUL FREAK, A CHISELED DEMON OF AESTHETICS, AND HE DID IT WITH HARD WORK, INTENSITY, AND CHARISMA. HE MADE EVERYONE MIRIN’, EVERYONE HUNGRY TO TRAIN, EVERYONE WAKING UP THINKING “I WANNA BE LIKE ZYZZ, BRAH!” FUAAARK!

AND NOW YOU’RE SITTING THERE TALKING TRASH LIKE HE’S SOME CHEATER? BRAH, DO YOU EVEN KNOW HOW MANY BRAHS OUT THERE HIT THE GYM BECAUSE OF HIM? DO YOU EVEN KNOW HOW MANY LIVES HE INSPIRED, FUAAARK?! YOU THINK A LEGEND LIKE THAT CAN BE REDUCED TO “OH HE DID DRUGS”? BRAH, FUAAARK, HE’S A PHILOSOPHY, HE’S A MINDSET, HE’S A LIFESTYLE!

EVERY TIME SOMEONE SAYS THAT FUAAARKING SH*T, I WANT TO SCREAM, BRAH, LIKE FUAAARK, RESPECT THE FREAKING CULTURE! ZYZZ WAS THE GOD OF MIRIN’, THE KING OF AESTHETICS, THE LEGEND WHO TAUGHT US ALL TO BE CONFIDENT, HOT, AND FUAAARKING BEAUTIFUL!

SO NEXT TIME YOU WANNA TALK SH*T ABOUT ZYZZ, BRAH, THINK TWICE. HE’S ETERNAL. HE’S THE AESTHETIC GOD. HE’S FUAAARKING ZYZZ! 💀💪 MIRIN’ BRAH, MIRIN’!

[young glen]

What is this?

[dusky jacinth]

good morning all gamers and non-gamers

[molten bobcat]

lmao

thats certainly a message

[dusky jacinth]

indubitably

[obtuse fern]

I ain't reading all that

[dusky jacinth]

How's reporting going cloud

[molten bobcat]

its goin good!

figured it would be best to stay vague about precisely what im doing

i am most assuredly filling out a never ending word doc

[dusky jacinth]

valid valid

glad it's going well

[molten bobcat]

yep just listening to fallout radio

surprisingly solid for focus

https://open.spotify.com/playlist/37i9dQZF1DWWYN0OyXQBvO?si=a331424366fe4e1d

[dusky jacinth]

LOL

[molten bobcat]

I was serious!

They took the music from the show and the games and made a playlist out of it

[brittle quail]

it says submit root flag now

wth does that mean

[molten bobcat]

so most machines have

a user flag

and a root flag

that proves you have system access the same context as a User and as Root

[supple plume]

what is this shit

[silver forge]

you're either a sub or a dom flag is kind of safety word

[brittle quail]

si where is meow root flag

[dusky jacinth]

wait this is 100% just pontiff sulivan

[molten bobcat]

in the root directory

[frozen zinc]

I hardly recommend you this guy if you like fallout music
https://www.youtube.com/watch?v=K3RjISiW7gA

[brittle quail]

i suck at this

[obtuse fern]

In /root/flag.txt

[exotic pendant]

😄

[brittle quail]

im gonna try to find the root directoy

[molten bobcat]

Dualisste is definitely faster than Pontiff D:

[obtuse fern]

You do know there's a writeup yeah?

[exotic pendant]

Frosto going to find more bugs this weekend

[molten bobcat]

at least this one doesnt CLONE HIMSELF HALFWAY THROUGH THE FIGHT

[dusky jacinth]

it's not about being faster

[exotic pendant]

[silver forge]

bug pizza

[dusky jacinth]

it's about who can have the WORST parry window oat, and the fact that mf duplicates himself

[brittle quail]

no

[dusky jacinth]

alright, study time 🫡

[molten bobcat]

i have mucho reporting to do

[obtuse fern]

All the starting point machines have one to help guide you through. Though the questions generally lead you the way there

[frozen zinc]

Someone have been malo

[sage epoch]

Do yall think the best non quantum super computer in the world can decompress the the 42.zip file

(its 4.5 petabytes compressed to 42 kilobytes)

[fallow peak]

hi im into a problem and that is i have vip+ subscription and wheneever i run a ferobuster or gobuster scan the web goes down im really frustrated although its vip + still this issue how can i solve it?

[sage epoch]

I believe the peak internet traffic per second was last recorded in 2024 or 2025 at 25 tb/s

[brittle quail]

Okay so I telneted

into the ip

Now I login or something

and then I find the flag

ok relax w the reactions idk what im doing 💀

I GOT THE FLAG

[gray wraith]

Does frosto have any plans for maybe... a blog or an article about his workflow and such

[brittle quail]

my machine rank is 540000

is that bad

[frozen zinc]

is better than 539999

[brittle quail]

yes true

[frozen zinc]

fuck

no

is better than 54001

no

is better than

[fiery copper]

Sorry bro I dont promote steroid abuzers

[brittle quail]

okay now im

[frozen zinc]

bro it doesnt matter is the box rank!

[brittle quail]

doing cap

i wanna do a medium one

[frozen zinc]

did you took notes?

[molten bobcat]

you should always strive to take detailed notes

being a record keeper is a crucial skill

[brittle quail]

uh no i didnt

itsin my brain

[frozen zinc]

its mandatory you start taking notes

Do you have any app for notes yet?

Notion? Obsidian?

[brittle quail]

yes i have obsidian

kinda weird to use so i didnt use it for anything

[frozen zinc]

Cool, so the first thing you need to do when you start a box is to create a new page in obsidian and called with the same name than the box

[sage epoch]

every time you run into an issue you cant resolve, note it down and how to get past it

[frozen zinc]

and you need to write the process and the command you are using

[brittle quail]

can i go back

to meow

[frozen zinc]

share link

[molten bobcat]

i cant

my notes are personal

[frozen zinc]

xD

[molten bobcat]

that and they contain copyrighted materials

so i cant give them around

[frozen zinc]

fair enough

[frozen zinc]

thats a good thing to do

so you can take notes

[brittle quail]

how do i go back to meow

[frozen zinc]

brotherman

[supple plume]

[brittle quail]

hello

[frozen zinc]

Are you in meow now?

[brittle quail]

no i finihsed meow

[frozen zinc]

ok but click on starting point

[supple plume]

xd

[brittle quail]

im still in the meow desktop thing

[frozen zinc]

or click back

ok

[brittle quail]

oh i found meow

[brittle quail]

yes

i am in meow

[supple plume]

starting point is 🔥

[frozen zinc]

so you see start machine no?

[brittle quail]

cant i just

download the writeup

and put it in obsidian

[sage epoch]

no recommend

[supple plume]

why not taking notes

[frozen zinc]

NO

[brittle quail]

okay

[frozen zinc]

ahahaha

[sage epoch]

Typing out notes in your own words and understanding is crucial for memorization

[frozen zinc]

BROTHERMAN

TAKE NOTES

[brittle quail]

okay

i am wait

[sage epoch]

Taking shortcuts will hinder you more and more in the long run

[frozen zinc]

do you want to see my notes?

[brittle quail]

yea

[frozen zinc]

https://panicthreads.gitbook.io/d0cs

they are still in barebones

a lot of content are placeholders

and i should not share it

its like a 20% of their final form

[sage epoch]

im restructuring my entire onenote notebook currently lol

[frozen zinc]

but i hope it help you make an idea

[sage epoch]

I used to half ass my notes until i needed them and then i realized they sucked

going back through everything and making it better

[frozen zinc]

I like to take dirty notes first in obsidian

[brittle quail]

yes wow

this is cool

[frozen zinc]

and then work the curated version on gitbook

[brittle quail]

i like this but obsidian graph is rlly cool

[frozen zinc]

so im force to go twice over my notes

[brittle quail]

like the spiderweb thing

[frozen zinc]

yeah xD

[frozen zinc]

really nice to visualize targets

[sage epoch]

been taking a ton of notes with cross references on vpn and cryptography recently

[frozen zinc]

cool

[sage epoch]

I do netsec currently

and plan to transition into blue team within the next year or two

[frozen zinc]

nice plan dude

keep it strong

You will need clear notes for cryptography xD

[brittle quail]

why blue team because i feel like

privacy is no longer an option

[sage epoch]

Yeah ive been becoming increasingly interested in cryptography

although i know zero scripting but i plan to fix that

[obtuse fern]

Blue team isnt about privacy

[brittle quail]

no i mean

preventing attacks

[signal mica]

Blue team is defending, red is attacking. just watch some team fortress videos, thank you

[scenic maple]

Azomax is orange team

[sage epoch]

Ive been eyeballing remediation engineering

[brittle quail]

i feel like nowadays offense is much stronger than defense

[scenic maple]

[brittle quail]

like no system is safe

[signal mica]

Orange team is do whatever it takes

[sage epoch]

my coworker transitioned from senior remediation to netsec to "settle down" lol

[signal mica]

Golam would know

[obtuse fern]

Yeah, prevention is still good regardless of your thoughts on privacy. Blue team also deals with Defensive Forensics Investigation Reporting (DFIR)

[sage epoch]

thats why blue team tries to keep up

Just because something is hard, doesnt mean you should ignore it

[brittle quail]

yes

[obtuse fern]

Meaning analyzing things post-attack to discover and report on Indicators of Compromise to help other defenders fix up their defenses

[brittle quail]

but is it harder to defend than attack

[obtuse fern]

Not really

Most common flaws in getting attacked is just misconfigurations

[frozen zinc]

It comes to attack surface

How do you attack me if i close all my ports?

[sage epoch]

Not implementing Zero trust properly and/or getting phished

[frozen zinc]

Now, what if i need to have a lot of open ports?

[sage epoch]

The first thing i learned when getting a corporate job is

Companies hate the inconvenience of best practices

[obtuse fern]

I show up at your house with a crowbar

[sage epoch]

they love short cuts

[frozen zinc]

easy

[obtuse fern]

Yuuuuup

In most corpo environments Convenience far outweighs security

[sage epoch]

Crappy passwords that are just (companyname123!!) on an account named admin and this account is shared across all network devices

[gray wraith]

Biggest flaw, human nature

[sage epoch]

literally

[gray wraith]

Hmm, i should click this link which will redirect me to hotdadas.com/........

[sage epoch]

I used to tell people "hey change your password your account password is compromised" and theyd ignore me

I work at an msp, the client didnt authorize us to force them to reset their password

the client at the time was a state specific hospital chain

They pulled our hair out

[sage epoch]

Older people like to look at adult material with work computers

[molten bobcat]

ayo

[gray wraith]

[molten bobcat]

wanna know what an attacker hostname was yesterday

PUTAMADRE

[sage epoch]

my last job, the pc monitoring platform had a screenshot of the user's screen updated every 5 mins

occassionally you'd see someone looking at adult content

[molten bobcat]

it was funny hearing our senior australian fella read that out loud

[sage epoch]

without even entering their machine

[molten bobcat]

v gross

[gray wraith]

[molten bobcat]

some peoples kids weren't raised right dude

[gray wraith]

Our sales once received an email from a "bank" which had some weird redirections to Indian websites to Pay for vending machines

[molten bobcat]

wild

[gray wraith]

And the domain was also some Indian religious website

[brittle quail]

like a phising link

what if i get u to click smth

[molten bobcat]

lmaooo

don't co-opt my funny meme to bully echos

[frozen zinc]

brotherman dont scare me pls

[molten bobcat]

threatening a cybersecurity enthusiast with phishing is always funny

[supple plume]

nice

[scenic maple]

[molten bobcat]

like what the fuck do you logically think I'm gonna do when I get sent a message containing stupid shit

[frozen zinc]

what if i reverse your connection and find your server?

[scenic maple]

Give him login creds

[fiery copper]

@molten bobcat while you get reviewed for CDSA do CJCA for fun

[molten bobcat]

don't even need to reverse the connection to do that

just read connection logs lmao

[frozen zinc]

logs?

[molten bobcat]

ya

[frozen zinc]

what is that?

[exotic pendant]

😄

[frozen zinc]

im kidding

[molten bobcat]

🪵

this

[gray wraith]

Ill come over your house, open your ports and go away

[molten bobcat]

obstacle A:

I have a sword

[frozen zinc]

now im getting roasted

lol

[azure remnant]

power speaks 🗣️

[gray wraith]

Fair

[molten bobcat]

https://tenor.com/view/jujutsu-kaisen-nanami-kento-nanami-kento-jjk-gif-9038538130555204111

[azure remnant]

Ive a hunting rifle

Its not powerful enough

But it does hurt

[brittle quail]

what if i dont have a server i am hacking u from a potato

[frozen zinc]

Im the sword

[supple plume]

I just discovered that I can run metasploit as cli, it can even run full exploits setting parameters without getting into the TUI

[molten bobcat]

https://tenor.com/view/nuke-tera-flare-flare-fart-ffxiv-gif-2388384092246117272

[azure remnant]

I think its mentioned in some module

[supple plume]

oh I didn't do that module for sure

[azure remnant]

What if

[supple plume]

but good to know

[azure remnant]

You ran the multi handler

Will it run as foreground

[mystic harbor]

good night peps!

[supple plume]

what's the multihandler

[supple plume]

bad night

[frozen zinc]

then i will eat potatos

[azure remnant]

The meterpreter listener thing

[frozen zinc]

potatos are nice

[brittle quail]

dont let the bed bug bite

[brittle quail]

what if i just explode ur house

[frozen zinc]

pls update the potato

[brittle quail]

hahahaa

[supple plume]

yeah it will as a foreground

100%

[frozen zinc]

what if i have no house?

and i move around?

[brittle quail]

then i explode u

with potato

[frozen zinc]

ok but what do you gain from that?

I will always come back

[brittle quail]

more potatos

[frozen zinc]

do you know potatos are roots?

[brittle quail]

yes

wait

that means

[frozen zinc]

OMG

YES

[brittle quail]

🤯

[frozen zinc]

xD

[brittle quail]

wow

we just solved

[frozen zinc]

you exploted

see

[brittle quail]

wow

yes