general

[west venture]

Cloud is officially part of the No Linux movement

[molten bobcat]

He's getting much more exercise now that he has places to run and jump to

[young glen]

Cute animal

[fiery copper]

VM more like Very Motivated

[supple plume]

What are you doing these days?

[formal thunder]

okay

i am verify

[west venture]

College

[supple plume]

Any hacking?

[west venture]

Ye

[supple plume]

Hmm cool

[fiery copper]

Yes bro you are verify

[west venture]

I do hack on windows

[brittle quail]

i hack windows

[supple plume]

I believe it I just couldn't do it

[fiery copper]

I hacm windows with rock

[formal thunder]

i hacked the windows

[young glen]

What tools for Windows ?

[zealous charm]

calc

[brittle quail]

i use my bare hands to hack

[supple plume]

Windows copilot

[formal thunder]

calcules

[heavy oak]

Windows + WSL + Docker

[supple plume]

Paint

[formal thunder]

how to hack windows copilot

[west venture]

You should not. Most of that time, I cannot distinguish reality from what is in my mind.

[fiery copper]

Hmm ask copilot

[supple plume]

I run arch linux and I have similar problems

[west venture]

Meaning don't believe everything I say

[supple plume]

Should I believe this?

[west venture]

Idk

[supple plume]

[lofty warren]

Fact: ||You are in Plastic rank, so now you can't see the Noob rank||

[fiery copper]

Yesss

[fiery copper]

Yo how are u 1.81

Arent ur people short?

[graceful pendant]

Three constants in life you can always rely on

1. death
2. taxes
3. @supple plume in #general

[fiery copper]

Trust me I can never rely on taxes

[graceful pendant]

https://giphy.com/gifs/tractor-T8DarIbTMG3GU

[fiery copper]

Also I have an interesting fact

[lofty warren]

not actually but maybe

[fiery copper]

If you feel like I hate you, then you are wrong.

I only hate myself.

[magic terrace]

https://tenor.com/view/oh-no-cringe-mexican-cat-cringe-gif-4559101190015770860

[supple plume]

Well change that shit

[graceful pendant]

Let it be known. i love you all

[fiery copper]

About me or you @supple plume

[supple plume]

You

[fiery copper]

Aww thats sweet

[magic terrace]

You as in @supple plume not you as in yourself

[supple plume]

As of an echo of an echo

[magic terrace]

Echo echooo echooo.... echoooo.... echooooo

[brittle quail]

no im in substrate rank

[manic anvil]

"see the NSA release of security tools to the public"
what tools they mean?

[supple plume]

Hahah

I remember someone posting that

Look up on this chat history

It is mostly weird shit tools

1 month ago at least

[manic anvil]

last time they did this they caused like 2 major malwares lol

[fiery copper]

@supple plume I wish you something

that something is you being happier each day

[supple plume]

Im working on that it doesnt happen upon a wish

But thanks

Why are you so nice with me today

When you joined you treated me like trash

[manic anvil]

nub cat moment

[fiery copper]

cuz I saw you having a bad day, and I like you to be happy

[supple plume]

Wdym

[fiery copper]

my pfp

[manic anvil]

their pfp the creator of them gave them funny personality

[supple plume]

Idk

Wish you the best

But let's hack

Actually

Someone could recommend me a beginner retired AD box

[manic anvil]

i have question about the nmap in the firewall ivasion section they tell you you can specifiy a source ip but it seems to never work what i am messing here?

[supple plume]

Not about CVEs

[supple plume]

Are you connected to the vpn?

Also nmap can take like 10 minutes sometimes

[manic anvil]

yeah but like if i specifiy a source ip wouldnt that just send the result to the ip and not to me ? it just directly say the host is down

[supple plume]

The source ip isnt the ip that youre attacking?

I cant run nmap --help rn

[lofty warren]

https://tenor.com/view/kryonax-skull-gif-26476587

[young glen]

Spooky

[manic anvil]

like using "-S 10.129.2.128 -e tun0" the source ip is what you want the firewall to think the packets are coming from

[supple plume]

Oh that's cool

Unfortunately I didn't do that module yet so I can't help you...

[manic anvil]

i tried it on the nmap scanme site and the target site on the module and both showed that they are down which is weird

[sacred leaf]

@real cove nice song btw 😹

[fiery copper]

who passed eJPT

[lofty warren]

dawg

[azure remnant]

its all fun and games until pseudo soldering kicks in

[formal thunder]

Send me

[gray wraith]

Read the articlr aboud evasion again

Like, slow

[subtle plover]

Im back

[mystic harbor]

[subtle plover]

Eww junior pentester

[subtle plover]

I was muted 5 days

[azure remnant]

"smb null authentication" ahh cert

[dull oxide]

Hey, is there any way to filter for free machines in the HTB labs?

[supple plume]

active machines

free

and retired there is only 2 usually

I think you can see it in a tab

[mystic harbor]

goon starts at 100

and ends at 3

[dull oxide]

ok, thank you

[quaint adder]

https://tenor.com/view/jarvis-iron-man-goon-gif-5902471035652079804

[molten bobcat]

Always with this guy lol

[cerulean bloom]

lolllllll

[manic anvil]

i got trolled by the section in the module because it show that it return a result because it say you can use it with an IP that the firewall allow

[cerulean bloom]

also, how's the CDSA report goin?

[molten bobcat]

It would be going at all if my cat wasn't on my keyboard

[cerulean bloom]

[manic anvil]

any admin here ? scammer detected

[maiden anvil]

the gov knows where the ufos are

[mystic harbor]

FOR..

[cerulean bloom]

wat

[subtle plover]

Being too good in hacking

[cerulean bloom]

https://klipy.com/gifs/peter-griffin-family-guy-31

[subtle plover]

Oscp?

[manic anvil]

got another scammer in my DM

[cerulean bloom]

uhhhhhhhhhh

idk wat to do in this situation

[mystic harbor]

teach me sir 🙏🏻

[subtle plover]

Okay

Step one is null auth smb rcp

[mystic harbor]

I am a skid

[cerulean bloom]

I think you ping SeriousRuleBreak

[manic anvil]

lol no like they are from this server lol tahts why i need an admin , they usually join the server looking for "hackers"

[cerulean bloom]

uhhhhhhhh

[lofty warren]

https://tenor.com/view/hanna-ball-kitten-soft-fluffy-kitty-cat-paws-gif-2803341425267067710

[cerulean bloom]

then just report them

and leave it

[subtle plover]

Goon

Lmfao thats almost a year time of just exam days

[mystic harbor]

or forstbite

[subtle plover]

Whosbite?

[green kite]

Dm me some screenshots

[mystic harbor]

like you dont know

[lofty warren]

goat

[subtle plover]

Cape cpts cwee is a whole month of just doing exam

[lofty warren]

ill get the CAPE in someday at 2026

[subtle plover]

30dayz

[subtle plover]

Lies

[lofty warren]

[manic anvil]

done

[azure remnant]

"all 65535 tcp ports are closed" ahh cert

[silk storm]

why there isn't a memes channel?

[manic anvil]

because thats the meme

[azure remnant]

No pls at least wait until i get the cpts

[silk storm]

nah, it isn't

[subtle plover]

Did you know i have btw i also have:
Penetration Testing with Kali Linux (PEN-200)
Web Application Penetration Testing (WEB-200)
Advanced Web Attacks and Exploitation (WEB-300)
Exploit Development (EXP-301)
Wireless Attacks (WIFI-300)
Offensive Mobile Application Security (OSCP)
Advanced Social Engineering (SE-400)
Advanced Penetration Testing with Metasploit (MUX-400)
OffSec Certified Professional (OSCP)
OffSec Exploit Development Expert (OSEE)
OffSec macOS Researcher (OSMR)

can you believe i passed this:
CompTIA A+
CompTIA Network+
CompTIA Security+
CompTIA PenTest+
CompTIA CySA+
CompTIA Project+
CompTIA ITF+
CompTIA Server+
CompTIA Cloud+
CompTIA Linux+

Certified Ethical Hacker (CEH)
Certified Penetration Testing Professional (CPENT)
Computer Hacking Forensic Investigator (CHFI)
Certified Network Defender (CND)
Certified Cloud Security Engineer (C|CSE)
Certified DevSecOps Engineer (E|CDE)
Certified Application Security Engineer (CASE) (offered in multiple tracks, like CASE.NET and CASE.JAVA)
Blockchain Business Leader Certification (B|BLC)
Blockchain Developer Certification (B|DC)
Blockchain Fintech Certification (B|FC)

[naive leaf]

Cert collector

[subtle plover]

@mystic harbor

[cerulean bloom]

https://klipy.com/gifs/doubt-press-x-3

[silk storm]

how is this even related?

[manic anvil]

but do you have +7 years experience for entry level job ?

[green kite]

You forgot certified liar

[azure remnant]

Bro is a certified human

[supple plume]

it looks like a certified yapper

[subtle plover]

Uncertiedied ethical hacker

[naive leaf]

I know he's not honest because the implication is he's willing to waste his time on blockchain certs.

[azure remnant]

Bro wants a meme channel and cant get it 🥀

[naive leaf]

Why would you do that to yourself

[subtle plover]

20% of the certs i put dont even exist

[mystic harbor]

no omniscient 🥀

[subtle plover]

[naive leaf]

Certified Ethical Hallucinator

[subtle plover]

I need por hacker

[silk storm]

I can't send gifs or photos that why I am want one

[azure remnant]

My phone filled up space because of that certs message 🥀

[mystic harbor]

I am sleepy man

goo night

[silk storm]

good one

[azure remnant]

U gotta convince the mods to let u

[naive leaf]

Gotta be hacker rank

[subtle plover]

I know someone that pays 1k in cert renewals

[naive leaf]

Or mods approve you

[subtle plover]

Bye

[silk storm]

Okay now there is a reason to learn social engineering for me😂

[naive leaf]

Or you can do that

[cerulean bloom]

#general message

[silk storm]

now I really want to be hacker rank

[naive leaf]

I recommend hacking things, will get you there

[subtle plover]

Asocial engineering

[naive leaf]

It's not too hard just complete all the easy VMs.

[azure remnant]

Nah with those mods its easier to get hacker role instead

[naive leaf]

That are active

[silk storm]

I am working on this anyways a chall "get a machine or challenge published"

[silk storm]

didn't get it

[cerulean bloom]

planning to create one after feb 8th

[naive leaf]

Oh silver season rank

Is even easier

Just hack a few boxes

[cerulean bloom]

well

season hasn't started yet

[naive leaf]

Well I guess it might not be permanent

[cerulean bloom]

so

[naive leaf]

Also

While hacker rank is

[azure remnant]

I only done few boxes and im 30% away from hacker role

[naive leaf]

Ye it's really not that hard

Just complete all easy boxes and you got it

[silk storm]

yeah, I just don't have the time I solved 2 active boxes and upgraded to the script kiddy so I think yes it isn't hard

[azure remnant]

Would have got it a long time ago if i spent time in it rather than the academy

[naive leaf]

I got mine years ago. Pro hacker is such a grind though.

[cerulean bloom]

learning is important

[naive leaf]

All easy all medium and 1 hard all active

[cerulean bloom]

indeed

[naive leaf]

I just don't have time for it

[cerulean bloom]

gotta do all the new machines after feb 8th

[silk storm]

I am waiting to the new season

[naive leaf]

Like I was motivated at one point

[lapis apex]

Shut up dummy

[naive leaf]

But like now

I'm like idk

[silk storm]

I just want to get pro hacker so my name is green, it looks amazing

[naive leaf]

Your name green now

[silk storm]

nah it is lime I think

[naive leaf]

Pro hacker is neon green

I think

[silk storm]

yep and it looks AMAZING

[naive leaf]

Idk it's such a grind tho

[maiden anvil]

can confirm

[naive leaf]

Depends on box but you're looking at anywhere from like 2 hours for the truly easy boxes to a day for the "easy" boxes that decide to hide creds in weird places you wouldn't think of.

[silk storm]

I am planning to get the academy student subscription in the vacation, and I will finish the CPTS path

[maiden anvil]

I did it by competing in a season I think I got 11/13 or something

[naive leaf]

And then mediums are like, more of that and hards are like hard and insane boxes I hope you're just good

[silk storm]

I thought I am bad cuz I spent 2 hours on easy boxes

[naive leaf]

I've had a couple of the really easy ones that took me like 30 minutes I mean it really depends on just how much stuff you have seen

A lot of the easy boxes have some pretty standard methods at this point imo

So many random hidden subdomains

Alongside a template website with a bunch of links that go nowhere indicating you need to look elsewhere

[loud epoch]

angrybird

@lilac cipher

[silk storm]

I only solved 2 boxes on hackthebox so I don't think I have a saw a lot

[naive leaf]

Probably not no

Idk I'm in the like 30 range

Or so

[molten bobcat]

https://tenor.com/view/gojo-screenshot-jujutsu-kaisen-gojo-satoru-gojo-nah-id-win-gif-4087154782000543513

[silk storm]

30 years old?

[naive leaf]

30 boxes solved

I'm not 30

[silk storm]

bruh 😂 sorry bro

[silk storm]

great effort

[naive leaf]

I'm like 24 lol

I've been here for years tho it's nothing special.

[silk storm]

okay you are still older than me

[brittle quail]

for htb am i installing openvpn on hyperv

oooooooh

[lean goblet]

Hi, Anyone here? Im new to HTB i need some help

[naive leaf]

Feel free to ask here

[brittle quail]

dude i cant do ts

im about to

crash out

[lean goblet]

I am getting started with HTB, as far I understood, first do Intro to InfoSec, then SOC Analyst Path, then Penetration Tester, Web Pentesting, AD, and then AI Red Teaming... All in a squence or should i only get onto a single path only... Please help me in getting the right direction

Edit:
@naive leaf

[chrome tree]

I could get you a bag of concrete

so you can harden the tf up

lol jk

Take a break and come back to it. No matter your skill level you'll always hit snags. Beginning is the hardest tho

[brittle quail]

no like

i cant find hyper v manager

and it says i need that to setup openvpn

for the htb lab

[molten bobcat]

okay so there's a few things that are

needed to be understood here

[chrome tree]

Oh, my bad. Are you trying to setup a vm so you can access labs through your own vm?

[brittle quail]

yes bevause pwnlab ran out

[molten bobcat]

You are able to interact with HTB via a Virtual Machine of your own. This can be anything from vmware workstation to virtualbox, etc

[brittle quail]

i dont need openvpn?

[molten bobcat]

This virtual machine will likely have openvpn as a binary, preinstalled.

which means all you need is the .ovpn file provided by htb to connect

[brittle quail]

yes i have it

[chrome tree]

You do, so you can connect but you need machine to do so. It's easier to create a virtual machine and then connect through that

[molten bobcat]

sounds like you're missing a virtual machine of your own

For example, I have Kali Linux in a VmWare workstation box

[brittle quail]

i have kali linux and parrot vms can i use those

[molten bobcat]

yep

I use kali myself

[brittle quail]

okay ill use kali but what do i do w the file it gave me

[molten bobcat]

its just preference

[manic anvil]

uh you do the intro then junior cybersecurity analyst path the SOC and penetration tester are their own field like what you want to be

[molten bobcat]

the file it gave you is meant to be used in the openvpn command used to establish your vpn connection to htb

sudo openvpn /path/to/your/.ovpn

[brittle quail]

that file wont be in my vm tho its on my windows

[molten bobcat]

put it in there

[brittle quail]

uh

idk how

[chrome tree]

Gotta transfer it

[molten bobcat]

copy paste

[brittle quail]

oh wow

[molten bobcat]

most vms nowadays support copy pasting shit between vms and the host

[hexed horizon]

hi, I'm starting with MCP and I'd like to know, according to your experience, what tool is the best to learn on HTB the MCP skills: Claude Desktop, Claude Code, CLine or Cursor.

[brittle quail]

i didnt know thats

[molten bobcat]

[brittle quail]

how

i made a whole mega account

to transfer files

[molten bobcat]

lmao goober

not needed 😄

[brittle quail]

😭

oops

[molten bobcat]

oh well

this is how we learn

[chrome tree]

Welcome to cyber security, where we all know nothing and everything is a struggle until you go research lol

[molten bobcat]

https://open.spotify.com/track/7rwp86hIhD7pGcvx5fi2Uv?si=tkj9a8YRRwS3jAoudHg0pQ

[brittle quail]

okay i just dragged it in

[molten bobcat]

Sometimes if that doesn't work you can right click copy right click paste

[brittle quail]

yea copy and pasting never works for me

well

ctrl v doesnt

[molten bobcat]

its CTRL SHIFT V for vms

❤️

[brittle quail]

i can click to copy and past

oh

🤯

[manic anvil]

its shift ctrl v in the terminal

[molten bobcat]

mind blown

we're unlocking

[manic anvil]

also just a head up if you using RDP or any form of connection it may break your system sometimes so you need to copy from the target to your vm machine and then copy again from the vm machine to your pc

[brittle quail]

alright i ran the sudo cmd

[molten bobcat]

okay this is

big important

that terminal

needs to stay open

in order to the vpn connection to stay open

[brittle quail]

okay its just timestamps with stuff right now

[molten bobcat]

do not close that window

thats fine 😄

[brittle quail]

okay

[molten bobcat]

it just spits its logs into the terminal every now and then

whenever you wanna disconnect from htb, CTRL C that window

[brittle quail]

alright so im connected to the vpn

[molten bobcat]

for now you can minimize it

[brittle quail]

oh yea it says connected on htb

[molten bobcat]

if you're in kali your VPN IP address is in the top right of your screen

[manic anvil]

if you using to kali press the number 2 it switch you to another workspace or whatever it called where that termianl doesnt exist

[molten bobcat]

yep thats correct

different workspaces and stuff for organization

[brittle quail]

lemme try

oh

thats rlly nice

[manic anvil]

yeah very helpful for when you have alot of things running , ofc having other monitors would be better but this work too

[olive umbra]

and Im newbie

hey Im newbie

[brittle quail]

the vpn im on has a different ip than the htb

i think i took to long it reset or something

[olive umbra]

doing htb tasks on mac os running vm is fine ?

[manic anvil]

like the target ip or what they using?

[brittle quail]

oh nvm

yea

ima try to do this lab now

[olive umbra]

im being ignore

[brittle quail]

im not the person to ask but i think it works

[manic anvil]

most of us use linux on vm for learning

[olive umbra]

thanks sorry for the rude msg before

[gray wraith]

@molten bobcat u up with jjk modulo? Spoilers included?

[molten bobcat]

i am not

[gray wraith]

Or anime only

[supple plume]

yay

[molten bobcat]

Im caught up to the end of JJK

[gray wraith]

Oh, icic. I recommend to check out modulo, its insanely good

Once you finish up the cdsa report, that is

[molten bobcat]

ofc ofc

I am

almost done

I should finish by today

[gray wraith]

Easy finish

[austere sinew]

WHY DID I GET PINGED SEVEN TIMES

[molten bobcat]

because we care about you? hello?

duh

[austere sinew]

.

[molten bobcat]

see fellas, defuse with kindness

[supple plume]

oh we were teaching people hwo to ping you

[austere sinew]

@molten bobcat @west venture @supple plume @brittle quail

@fiery copper @cerulean bloom @sturdy thistle

[molten bobcat]

my discord is set to dnd because im not a goober

so that did nothing

c'est la vie

[austere sinew]

hush

[fiery copper]

Have a nice day!

[shadow sun]

https://tenor.com/view/wololo-age-of-empires-empires-szaman-shaman-gif-21642499

I guess you have a typo in your name UndeadWolo

[austere sinew]

@static pasture @maiden anvil

[austere sinew]

👁️

[olive umbra]

what first htb you guys recommend

[gray wraith]

what

[shadow sun]

There is a Starting Point Section

[sturdy thistle]

@austere sinew healthcheck passed

[olive umbra]

btw are you french ?

[olive umbra]

ok I didnt see it

[shadow sun]

Nope, why?

[olive umbra]

cause the icon looks like the french flame

[shadow sun]

No, I'm just awesomely Certified as Junior

[brittle quail]

so its asking me

what the id of the pcap file is

its 2.pcap but 2 is wrong

nvm

[devout sail]

I'm dnd forver
Yet I get pings???

Wait that's idle 💀

[brittle quail]

i cant find nathans flag

[pseudo locust]

hello

How can i get invoice

[heavy oak]

Quickbooks

[pseudo locust]

where is payment history

[fiery copper]

hi

[frank tusk]

hello guys how do i set up virtualbox to work as a pwn box

[heavy oak]

1. Open Google
2. Put this question in the search bar
3. Press ENTER

[frank tusk]

thanks

[molten bobcat]

you need a virtual machine image to load into it

https://www.kali.org/get-kali/#kali-virtual-machines

[frank tusk]

yeah i know

[brittle quail]

i can not find

this flag bro

hi giddsec

[maiden anvil]

wololo!

[zealous charm]

@maiden anvil yo

[maiden anvil]

any hacking today? 👀

[zealous charm]

nothing fun

[supple plume]

keli lenus the louder the better

[zealous charm]

wbu big dawg?

[maiden anvil]

lots of stuff cant talk here tho

[zealous charm]

gotta go to the trusted hacker channels

[brittle quail]

lemme in hacker lounge

[austere sinew]

wololooooo

[rancid snow]

complete more boxes

90% of htb rank is just time invested

[brittle quail]

oh okay

what is airtouch

[rancid snow]

idk google it

[manic anvil]

the SOC team watching all the alerts i am doing with 3 vms opened doing aggressive nmap scan

[gray wraith]

Lmfao

[manic anvil]

consider it grinding game but with actual life reward as it add to your experience

[supple plume]

something that will make you cry

[manic anvil]

dude HTB certificate art is fire af

[signal mica]

Linor kal

No sound, more

[supple plume]

https://tenor.com/view/go-golang-my-beloved-mybeloved-gopher-meme-gif-3557932171434243883

[manic anvil]

dude they changed metasploit art to a ninja?

[rapid badger]

Ive been testing out 1.26.
Some neat stuff https://antonz.org/go-1-26/

[dusky jacinth]

should I just say fuck it to learning python and learn GO

I feel like that's what I should be doing on a thursday

[terse dirge]

Yes

[wanton gull]

is there a live support for htb?

[rancid snow]

both are good

python is still nicer for super quick stuff and the truly massive library support for everything, but go just feels nicer for actually writing tools n stuff thats going to have more serious usage

[urban bramble]

sup HTB homies

hope all are keeping well

[rancid snow]

Youre also gunna encounter code bases for both. Few languages are actually worthless to learn

[azure remnant]

That interpreter promot is smart

[supple plume]

I designed that and made it open source if you want it

[short gulch]

Hi everyone 🙂

[supple plume]

Wsp

[short gulch]

Well everything is ok but the learning for cert is tough, for CISSP at least...I am preparing a lot of months.

[supple plume]

Dayum

[short gulch]

I know that this cert is offtopic because it is not HTB cert, but still I need it for a new job....

[supple plume]

Well this is the offtopic channel

Looks difficult this cissp

[zealous charm]

ontopic yappin only

[short gulch]

Well it is a leadeship, managerial and technical exam

[supple plume]

Looks like a lot

At least to me

[zealous charm]

[short gulch]

after that HTB...

[supple plume]

I couldn't do it

[supple plume]

It's usually the other way

[short gulch]

If you do not have 5 YOE

[supple plume]

Yeah one starts doing some htb certs to get 5 yoe some day

[short gulch]

ok

[raven rain]

https://tenor.com/view/pillar-men-awaken-my-masters-awaken-jojos-bizarre-adventure-jjba-gif-19344086

new cert dropped

[short gulch]

Well I hope for the best 🙂

[supple plume]

Is this a requirement or a recommendation?

[raven rain]

hard requirement

[supple plume]

Very hard

[raven rain]

well difficulty wise it's not hard

[short gulch]

it is requirement to have 5 YOE or 4 YOE with a degree

[raven rain]

unless you get laid off

[supple plume]

Well good luck tho

[short gulch]

Thank You 🙂

Anyone here have a good TV show to recommend ?

[supple plume]

Breaking bad

[short gulch]

I wached that a while ago

crazy TV Show

[supple plume]

Death note?

[short gulch]

Never head for Death note, going to se trailer 🙂

[supple plume]

Oh

[supple plume]

It is anime

And a bit old

But hey one of the best things I've ever watched

It's not silly

[short gulch]

Anime is not my cup of tea...

[supple plume]

It wasn't mine either

But this is something else

[short gulch]

There is a Netflix show with the same name

[cerulean knoll]

Mr Robot

[pulsar basin]

can someone explain to me why I am paying for VIP+ on HTB? every evening the connection is so damn slow, boxes not responding, shells not usable, downloads via FTP or SMB absolutely not possible

[exotic pendant]

😄

[supple plume]

If it's not anime do not watch it

It will be very bad and spoil the real one

[supple plume]

I've noticed this too

[thick forge]

time to pay more

is icecream timeee lets goo

[cerulean knoll]

[thick forge]

[cerulean knoll]

[signal mica]

Tucced

☆

[valid sentinel]

Hi Everyone, I am trying to do RDP and SOCKS Tunneling with SocksOverRDP, but I have a problem with this section, I execute the dll and it was successfull, but when I try to connect by RDP to the machine 1, I have the message "Remote Desktop cant connect to the remote computer"

I execute the dll and it was successfull, but when I try to connect by RDP to the machine I have that message.
I am in the pivote windows

kali - 10.10.14.205
pivote windows - 10.129.3.252 (I did all and was ok, but I cant connect to machine 1 by RDP)
machine 1 - 172.16.5.19 victor:pass@123
machine 2 - 172.16.6.155 jason:WellConnected123!

[raven rain]

please ask in #modules

[exotic pendant]

😄

[signal mica]

🚬

[exotic pendant]

plex confirmed my bug

[signal mica]

You know

At this point

This is u frosto

[heavy oak]

Burns down house

[brittle quail]

ok

time for more lab

[serene wasp]

Has anyone done the Control pro lab? There's no tag for it yet in #1263635449335910531 ...

[brittle quail]

@molten bobcat qestion

[molten bobcat]

whats up

[brittle quail]

so

im on my pc at home now

continuing the lab but the vpn wont connect

in kali terminal

forget it

the only thing i still dont get

is the hex code

[lapis apex]

what about it you dont get?

[brittle quail]

i donrt know how to get it

it says submit the flag located in his home directory

[rancid snow]

getting it is the entire point of the exercise

its 'proof' you completed that stage/box

[molten bobcat]

Sorry, I was focusing on my exam

I'm taking a break currently for my brain

[brittle quail]

i cant find it

beent trying for a while now

[rancid snow]

right, exactly

finding it is the goal

[brittle quail]

but how do i find it

[lapis apex]

good luck!

[rancid snow]

which lab?

[brittle quail]

cap

[lapis apex]

if its smth like abc11393eed82930ae
and this is a box, I think that is the flag

[molten bobcat]

Those are called "hashes"

[brittle quail]

it says its 32 hex characters

[lapis apex]

yeah lol

[molten bobcat]

Yeah, so either numbers or letters

[rancid snow]

Im not gunna tell you the answer for that one as its basically cheating.

If you give up though its a retired box so you can find a walkthrough

[molten bobcat]

Hex stands for Hexadecimal

[lapis apex]

arent hashes with only hex values either

smart guy

[brittle quail]

i found one earlier that was i think 32 but it didnt work

[lapis apex]

I have not done a box in 3 years

[molten bobcat]

It will be inside of a file called flag.txt, user.txt, or root.txt

[rancid snow]

for htb standard boxes like cap there will always be a user.txt and root.txt that has the hash

any other hashes you may find might be important or might not be, but they wont be submission flag hashes

[brittle quail]

so i get inside those

somehow

[molten bobcat]

Yes

[rancid snow]

yup

[molten bobcat]

You can read them

[brittle quail]

k ill try

[molten bobcat]

In the terminal

[cloud osprey]

usually you can just hack into the machines and grab the files, dont have to worry about solving anything

[rancid snow]

youre doing a hacking challenge, gotta hack it

[molten bobcat]

Hack n smack

[brittle quail]

yebut

idk how to hack

😭

[lapis apex]

🤣

[cloud osprey]

https://klipy.com/gifs/just-do-it-shia-la-beouf-1

[molten bobcat]

Welcome to the club

[rancid snow]

might want to try starting point before an easy box then

[rancid snow]

htb easy != newbie

[lapis apex]

yeah pmdev you are going to love the ride

[brittle quail]

now

[molten bobcat]

Be advised

Spoilers

Even for retired content and shit

[brittle quail]

huh

[molten bobcat]

Don't talk about box steps

Cuz it's a spoiler

[brittle quail]

oh sorry

[molten bobcat]

All good 😄

[brittle quail]

the um

curl command

in writeup

isnt working

[obtuse fern]

Are you:

• connected to the vpn
• using the target ip

[brittle quail]

wait i have to install linpeas

[obtuse fern]

No you don't

[brittle quail]

oh

[obtuse fern]

I hate linpeas for beginners, it throws a bunch of useless info at you that will just end up getting you more lost

[brittle quail]

im at the privelage escalation step

[obtuse fern]

Also; you cant get linpeas from targets. You have to transfer it over

They are designed not to have access to the open internet

[cloud osprey]

just memorize the script and type it out on the target

ez

[brittle quail]

that paint in ur banner

looks delicious

ohhhhh

now ik who ippsec is

[zenith pine]

join botnetbuddies

[brittle quail]

okay

what is that

[dusky jacinth]

Good evening gamers and non gamers

[torpid patrol]

Hello everyone, I joined this server about 4 months ago but didn't bother registering an account until now.

I've been using thm for about 7 months and having fun there. Plan on finishing out the sub and see where I wanna go from there.

I have experience with DOS, win3.1, win95, win98, win98se, win me, win 7, win 10, win 11, red hat, centos, debian, cisco security, firewalls, dns, radius, apache, wireless, mysql, php, routing, switching, IPSEC L2L VPN, Remote Access VPN, network engineering, system admin, perl, python, BGP, EIGRP, OSPF, VoIP, Load Balancers, Infoblox and probably some other stuff that I am forgetting. Ask me anything, happy to share my knowledge.

I have been in IT as a Network Engineer for 25 years and have a dual CCNP Enterprise and Secuirty.

[warped plank]

IPv6 killing IPv4 when?

[torpid patrol]

Oh that process started 15-20 years ago

[cloud osprey]

already using IPV7, catch up nerds

[torpid patrol]

still waiting

I honestly think NAT is just fine and I doubt it will be widespread IPv6 any time soon

[warped plank]

NGL with the security state of the internet thank God for NAT, idk how secure the world'd be without it.

[torpid patrol]

Well IPv6 is great for hackers

lets put everyones public IP back directly on the internet!

lol

It will be like the days of IRC!! Those were the fun days

[lapis apex]

yeah so fun to get DoSed

[torpid patrol]

I just locked up peopls computer

made them reboot

[lapis apex]

didnt know you could do that

[torpid patrol]

yeah , win 95 was insecure and no firewall and directly on the interent

there were some exploits in c that were easily ran, just put in their IP and they get BSOD

[zenith pine]

book club

[brittle quail]

lemme in

[torpid patrol]

Nice to meet you W1LD

[zenith pine]

ask the leader @spare acorn

[warped plank]

Yeah, that stuff is useful especially if you're the one person in your family everyone relies on for IT support. I just yeet a remote desktop session to my grandparents anytime they need IT support.

Half the time it's just a hard-reboot

[lapis apex]

meanwhile I lose my connection for half a minute and want to flip the table

[brittle quail]

bro ts impossible

[torpid patrol]

A friend of mine just created a ticket system for his family and friends and told them to put in a ticket if they need help

[brittle quail]

i give up

[lapis apex]

idk man my family finds it weird that I work with computers but dont know excel shortcuts

lmao

i can barely use excel tbh

[torpid patrol]

lol

[torpid patrol]

I'm not a big fan of excel either

[warped plank]

What's impossible?

[warped plank]

real, use json or for larger data sets use a database

[brittle quail]

the lab im doing

cap

[molten bobcat]

I use Excel every day

[torpid patrol]

This NMAP is taking forever on this THM room that has 3k open ports... maybe i should not have done -sC -sV --script vuln on 3k ports

[warped plank]

Ohhh, yeah that's a fun lab

[molten bobcat]

Easy csv parsing

[warped plank]

Usually run 2 passes, 1 to just scan and the second to script scan the open ports the first scan found.

[brittle quail]

not fun im getting mad

[lapis apex]

isnt there an option to put more threads to it?

[warped plank]

That's part of the fun

[brittle quail]

ahhhhh

[lapis apex]

yeah htb has that effect, you got a long way ahead

[torpid patrol]

That's what I do. This box has 3k open ports lol

[brittle quail]

yea very long way

[warped plank]

Threading an asynchronous task isn't very useful, it's just using more memory for multiple threads waiting on a network process.

[torpid patrol]

I think I am wasting my time anyway. I do port scan using python socket library, then grab the banners with wget, then do the full scan, but all 3k ports respond with Dropbear

only other open port is 22

[warped plank]

Bro found an Australian room I see

[torpid patrol]

It's the looking glass room on THM

I haven't and yes I know it's not. I registered on here early.

I haven't graduated from THM yet.

[warped plank]

Meanwhile me who's touched 1 whole THM room:

[torpid patrol]

I need to do all the THM rooms and learn enough to do the hard ones on THM first, then I can have a chance at HTB rooms

[warped plank]

Dive straight into the deep end

the water's fine...
-# with a risk of drowning

[heady sage]

Lol imagine dragons

[torpid patrol]

Nah, I've tried some deeper end ones, I need to practice enough with the basics and procedures and all that. Thanks for the tip ZumiYumi on the research for the dropbear. I'm still learning the ctf stuff

I'm sure I am exageratting. I've heard the rooms here are very hard though.

[warped plank]

what about em?

[torpid patrol]

I saw Imagine Dragons Live a couple years ago, they are awesome LIVE

[heady sage]

https://youtu.be/laHht8kGdVU?si=9O8vcet2i9JV5gKa

[torpid patrol]

I wasn't really seeking feedback as much as commenting. I'm not going to ask for help in THM rooms here.

[warped plank]

*has done insane machines*
*still struggles with a very easy challenge*

[heady sage]

MVP for HTB btw

[torpid patrol]

Imposter Syndrome

[warped plank]

To be fair: It was an ICS challenge and I had never touched ICS before.

And now I never will again

[exotic pendant]

😄

[heady sage]

Do secure coding @warped plank

[torpid patrol]

No worries man, I understand though, people come into these servers all the time asking for dumb stuff and you've never seen me and I'm a newbie in here.

[meager kernel]

You can just....
Dive into HTB

[warped plank]

My own code isn't secure...

[torpid patrol]

Do you do Cyber as a career?

[torpid patrol]

Hey Kratos, whats up man

[meager kernel]

Wassup

[torpid patrol]

I'll finish my paid year of THM first

want to get as much before it runs out

[warped plank]

Bro gets to play with planes for a living

[torpid patrol]

7 months in I am ranked top 1200...... people quit that site fast

[meager kernel]

THM isn't known for its quality

[torpid patrol]

you pentest the cloud for real

[heady sage]

Did you get promoted?

[meager kernel]

Ever since they introduced that stupid clanker in their site, it went downhill

[warped plank]

@frosty thistle Aviation Network Security talk at DefCon when?

[torpid patrol]

Yeah, right after I joined that happened

[warped plank]

Ahhh I get it, NDA and allat

[alpine pumice]

i used to work for an airline, can confirm they are not secure in the slightest

[brittle quail]

I GOT THE FLAG

[warped plank]

Good job

[heady sage]

https://youtu.be/4O-SX_W0lrQ?si=7RAKxRlAdbU2QDwK

[alpine pumice]

they're using software from like 1960's

[rancid snow]

https://tenor.com/view/hacker-hackerman-kung-fury-gif-7953536

[torpid patrol]

it's secure though... it can only be accessed with punch cards

[brittle quail]

now i haev to get soem full path thing

[heady sage]

@warped plank listen to this

https://youtu.be/zLm5oSJRxIU?si=qACYAD-1RYQLDvAC

[rancid snow]

good luck

[warped plank]

That doesn't sound like Adam Sandler...

[heady sage]

It actually is

Look it up

[warped plank]

Damn he can sing... I can't stop laughing but bro can sing

[torpid patrol]

You never heard Adam Sandler sing??

[warped plank]

No I have not, but to be fair I live under a rock

-# a rock filled with korean content

[torpid patrol]

Adam Sandler first performed "The Chanukah Song" on Saturday Night Live during the "Weekend Update" segment on December 3, 1994.

[rancid snow]

He can also actually act when he wants to

which is shocking

[lofty warren]

you can try one

[torpid patrol]

Good song too

[obtuse fern]

Fun fact, this guy went to jail

[warped plank]

btw we don't say rooms here, we only have boxes. Unlike THM our computers don't take up a whole room.

[heady sage]

Really?

[rancid snow]

Adam Sandler in uncut gems is such a wild difference in acting ability compared to all his other films.

But also most of his films are basically just an excuse to take his friends out on vacation for awhile.

[obtuse fern]

Yuuup I dont recall the details but it was not good™

[lofty warren]

tryhackbox🫦

[brittle quail]

i got the root flag had to google some stuff

[torpid patrol]

Good to know W1LD, I will take care and precautions to ensure that I attribute the appropriate nomenclature to the activities available within the site from now on.

[warped plank]

basically 99.9% of cyber security in a sentence: I had to google some stuff

[obtuse fern]

Yeah, Sandler can do a good flick. He just does slop to take his friends on vacay

[brittle quail]

it says i finished but i still havent gotten the full path of file

task 8

[dusky jacinth]

Where was the file

[warped plank]

well you don't really have to submit all the tasks, but if you spawn the machine again you should be able to submit it.

[dusky jacinth]

Give it the path of that

[brittle quail]

no idea

[dusky jacinth]

Well it was probably the root home directory yknow

So like the path of fhat

[obtuse fern]

When it asks for the path of something it's asking for the full written path

[brittle quail]

root@cap:/root#

this i dont know

[dusky jacinth]

Yea

[obtuse fern]

pwd

[brittle quail]

what

[dusky jacinth]

Use that command

It’ll give you the absolute path of your working dir

[brittle quail]

gave me /root

[obtuse fern]

Theres other ways to determine your location

[warped plank]

Could I introduce you to: https://academy.hackthebox.com/module/details/18

[obtuse fern]

Yep, /root

[dusky jacinth]

That’s the path

[brittle quail]

i mean it didnt work tho

[dusky jacinth]

/root/

[obtuse fern]

Any file or location past that is /root/filename.ext/

[brittle quail]

yes introduce me to anyhting

none of em work

[warped plank]

Ohhh it's looking for the full path of the binary with the capability

yeah you need to find the full path of what you just exploited to get root.

[brittle quail]

oh

uh

[oak frigate]

hello everyone , anyone knows where to contact support by any chance?

[muted olive]

buffer overflow

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[warped plank]

@oak frigate ^

[obtuse fern]

Usually its /usr/bin/somebinary

[stable tiger]

https://www.youtube.com/watch?v=koWipFDgD6c

incase anyone here is into mal analysis

and for devs, don't run on drives that arent nvme

[undone fossil]

I prefer this, chad move tbh https://www.youtube.com/watch?v=zTOKEKQ8ITA&pp=ugUHEgVlbi1VUw%3D%3D

[naive leaf]

I mean the better question is what do you want to do? Like, there's a ton of ways to go about learning security, but I can only give recommendations when you know what you want to do.

If you don't know what you want to do, then the correct thing is to try things until you have an idea of what you want to do in security.

If you want to be a pentester vs appsec engineer vs soc analyst vs whatever all the paths to those jobs are different.

Also if you edit with a ping then I won't get the ping. So just ping separately.

[obtuse fern]

this ^ one of the first modules i did that was outside the pentester pathway and infosec fundamental paths was JavaScript Deobfuscation

[naive leaf]

Like if you love exploit development and vuln research then I have very very different advice for you than if you want to be a pentester with your own custom built exploit suite for what stuff you see most often, vs if you want to be a log nomad who does digital forensics or being a soc analyst.

[obtuse fern]

I actually really enjoyed it, and actually feel comofortable enough to make a basic thing that replaces eval( with print(

(well not print, but you know what i mean)

damn saw this in my steam list, this takes me back;

o7 rip

[cloud osprey]

arch mentioned

[meager kernel]

[torpid patrol]

[obtuse fern]

I love probability distributions I love probability Distributions I love probability Dis—

[cloud osprey]

what are the chances you convince yourself

[obtuse fern]

the more I repeat the lie, the more I believe myself

honestly though i lowkey love the Windows Reading mode stuff in win11; I can tab back to both things in reading mode instead of tab one, then tab the other

[latent oak]

what's up folks?

[rustic carbon]

ay

oh my name changed

[obtuse fern]

yes; your name in this server reflects the name on your HTB account

[rustic carbon]

hack inmg china numer one

[obtuse fern]

let's not be overt trolls

[rustic carbon]

i like being silly

is this a serious channel?

[obtuse fern]

that's fine, just no need to be an overt troll

if it goes too far, you can and will get smacked with the #rules

[rustic carbon]

you just dont get my swag and thats fine, but fr yeah I'll continue my module now. Nice to meet you

[latent oak]

Generally this channel is pretty tolerant of silly

risky click?

[pastel smelt]

its a gif mb

no gif perms

[rustic carbon]

Seems like not, however I have no choice but to obey thy mods

[obtuse fern]

@pastel smelt we do not condone or promote illegal activity here see #rules

[muted olive]

doing the AI module I see

[obtuse fern]

as the general rule, we mods have to treat most statements by default as genuine. Zero Trust principles

[obtuse fern]

Nop, statistics

[muted olive]

Oh

[latent oak]

ick, not thanks

[muted olive]

I need to study those but in physics lol

radial probability distribution curve :3

ok yuck that image didnt render properly

[obtuse fern]

dog that image got fucked

[latent oak]

that's why I studied music

[obtuse fern]

it treated whitespace as literal WHITE space

whatever algo was used to determine that needs to be taken back to the workshop

[muted olive]

there

not much better but itll do

[obtuse fern]

ah radial

[rancid snow]

iirc I think thats default matplotlib behavior

[latent oak]

I got a 92 in calc in high-school, then I forgot it all and never used it again

[obtuse fern]

3 dimensions of fuck you

[rancid snow]

but its been awhile

[obtuse fern]

probably

[muted olive]

I just offer my condolences to whoever learns quantum physics

[latent oak]

Once we get past the quantum entanglement stuff, my head starts to explode. I should probably try and understand more about it someday, but... other interests

[muted olive]

At least you're not forced to learn this

There can be no worse punishment

[latent oak]

yeah no

[alpine pumice]

i can't even count from 1 to 2.. because there are an infinite amount of numbers between 1 and 2...

[muted olive]

you'll never get there

[obtuse fern]

and there are an infinite number of infinities

[muted olive]

the achilles paradox

[latent oak]

can't get there from here

[muted olive]

according to which motion should be impossible

but im moving

chat did I disprove zeno

[rapid badger]

yep you did it

[latent oak]

My job is now just to sit in a chair and keep claude in check

[obtuse fern]

something cannot move without an impetus to move; likely something cannot stop without an impetus to stop

in this essay i will—

[muted olive]

POV: shakespeare meets newton's first law

[obtuse fern]

bullet to the head right neow

[naive leaf]

Me when I need enough statistics to timing attack something over a network

[silver forge]

and the funniest part is all the actually relevant interactions happen at quantum field theory side, not on the mechanics

so you're not even yet near the actually interesting part

[normal axle]

isnt it np

the actual symbol used should be roh no?

[silver forge]

for example, a photon never accelerates to light speed. it either does not exist, or it goes the full speed already.

[normal axle]

or na not ro jusg p

pi has significance in math

[obtuse fern]

nah, textbook uses pi and notes that it's just used as a stand in for the probability of success in a binomial distribution

[normal axle]

and if it i sampling it would be p hat

or would it be pi hat

i have never seen that

[silver forge]

also, if you assume a photon has an inside observer, from its viewpoint the photon never exists. since full time dilation there's literally no time that passes during the existence of a photon.

[rapid badger]

[obtuse fern]

i didn't make the textbook, i'm just following directions

[terse dirge]

eBpfs are kinda neat in Linux I won't lie they feel a bit cleaner than something like a lkm for hooking into system calls

[silver forge]

the most important thing to study is Lorentz and the implications of his formula(s). they are simply stunning work.

and something like the Wheeler-Feynman absorber theory is interesting, too

[obtuse fern]

you make it sound like I actually care

[silver forge]

You should because if one of those formulas are incorrect you cease to exist

[obtuse fern]

except I know how to parse my notes and that it explicitly dictates that pi is being used as a standin for P(x) where P(x) is success

it's not that deep

also pi => pop parameters
phat => sample statistics

[silver forge]

I haven't seriously studied pi, but I will at some point.

[meager kernel]

[obtuse fern]

so you're not wrong

but my textbook focuses on population data, not sample data

[silver forge]

for example, pi does some wild stuff with euler's formula, which is mind bending

[obtuse fern]

i'm aware LOL

i think you're just looking too deeply into the notation

also Rho is used for population correlation

[silver forge]

No, it's interesting... Mathematics is so undeveloped field even after couple thousand years of work into it. "we found out there's something fucky going on with X and Y, because this in X causes this in Y" is the best even modern mathematics has. It's very rare to find the why part, although sometimes that happens too.

[tough oyster]

yoo @real cove when ya getting CDSA?

[silver forge]

I think geometry has many completely solved problems, but then you move into something more recent and bam

And I think the quantum computers will cause the interest to solve the actually hard mathematics behind RSA will just dissolve, so as a pessimist I think some will never get solved

"why understand it when this black box can break it anyways".. uhh

[molten bobcat]

Alright

I'll be turning in my CDSA here soon

[muted olive]

F=qE+qVB

thats all I know about lorentz

[meager kernel]

aight buddy

JEE is over

chill out

no need to flex

[real cove]

Planning Next month on 17th

I still reviewing it

[muted olive]

boards is still upcoming 🤣

on a different note

I subscribed to Quora for study tips but idk what I did to deserve shit like this

time to delete gmail entirely

[obtuse fern]

ah Quora

the wild west of forums

it's about as well moderated as 4chan

[fluid gate]

Hi quick question i remember to see on the retired machine the type of attacks or im going crazy lol

one more question does anyone knows if the prolabs are dedicated or shared

[obtuse fern]

that used to be the case iirc; i think the UI changed

[fluid gate]

thanks

[obtuse fern]

pro labs are shared from what I recall

the dedispawn change did not affect pro lab environments per the post

https://www.hackthebox.com/blog/quality-hacking-labs-experience-with-dedispawn

[meager kernel]

whats the things in prolabs which makes them way harder/better?

[obtuse fern]

generally there's gonna be some level of EDS running, and it's a multi-machine environment

[tough oyster]

Good luck!

[tepid elm]

hello errbody

[torpid patrol]

hi

[graceful pendant]

man my sleep is so fucked tbh

[dusky jacinth]

real af

[azure remnant]

when stucking on a section

in a friday morning

best thing to do is

play battlefield 2

[dusky jacinth]

for me its total war

but yeah

[graceful pendant]

for me its VPS and making random agents that do random shit

I had a great grey hat passive income idea today so im working on that rn

[dusky jacinth]

radical

[dusky jacinth]

How's you get into doing VPS stuff

i've been wanting to do my own kinda home labbing, but never really got around to doing it lol

[graceful pendant]

digital ocean, galaxy gate, hetzner

[meager kernel]

[graceful pendant]

then you just ssh and start building whatever you want

[dusky jacinth]

hmmm

icic

[left haven]

Hi I'm new to HTB where should i started?

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[fluid gate]

Looking for noobie studie buddy or team

[warped plank]

most of the modules in that article are, but there's a couple that aren't free.

[left haven]

Thank you

[sturdy thistle]

hellow

[graceful pendant]

digga warum bist du wach

insane

[warped plank]

English only mate.

[graceful pendant]

[supple plume]

[graceful pendant]

tienes trabajo hoy o que tio

[supple plume]

Trabajo de mierda

[warped plank]

[supple plume]

He started

[graceful pendant]

im out here doing the lords work, i have at least 3 more sentences in other languages before getting warned again

[warped plank]

bro typed one command and thinks he's above the rules

Noone's above the rules mate.

[graceful pendant]

https://giphy.com/gifs/family-guy-sigma-reddit-mod-ijpPKgdCAMNlHXgY3i

[graceful pendant]

if no one broke the rules why are we in a security related discord

checkmate

[vague ivy]

is anybody good in osint

i have some doubts

please dm me

[graceful pendant]

im using osint to see whether or not you have doubts rn

it seems you have doubts

[vague ivy]

whaaaa

[vague ivy]

how'd you know

dayum

[warped plank]

What's this for? you might get better help in #challenges if it's related to a challenge

[vague ivy]

no no

it was a random challenge

i was given 2 pictures

[warped plank]

If it ain't HTB related we can't help you.

[vague ivy]

fr?

damnn

[warped plank]

FR. We don't know if it's a CTF or from a competitor, either way we want no part of it.

[vague ivy]

geniune

thankss

[warped plank]

Yeah HTB doesn't wanna be involved if any rules are broken in any CTF or other platforms.

[vague ivy]

understandableee