general

[west venture]

But it's bricked now (not bricked I can still write to the partitions, but it's way too messed up and requires a ton of work to get the partitions clean again)

[sturdy thistle]

@austere sinew id

[west venture]

ping mikhat

100% packet loss

[devout sail]

What kind of talk in cube today

You haven't seen him?

He got a nice lady on call tho

[mystic harbor]

have

[devout sail]

And yet you show a guy like that

Atleast shave his head

[tawdry sorrel]

Noted echo is bald

https://tenor.com/view/rock-bald-head-meme-the-rock-dwayne-johnson-gif-24006278

[devout sail]

https://cdn.discordapp.com/attachments/760773626378584065/1468230741426180106/YTDowncom_Shorts_Desmos-Music_Media_emBwZmXgA6Q_001_480p.mp4?ex=6987386f&is=6985e6ef&hm=2769a1d44079877934be5f4e6b33e3cbb67d55780ebd1fef346c87d4a95bd6ea&

[mystic harbor]

@supple plume can I send you bald ass head here

[orchid breach]

Echos is swole

[supple plume]

which picture

[mystic harbor]

Oh cube talks going on

[orchid breach]

https://tenor.com/view/nick-walker-bodybuilder-gif-21284768

[supple plume]

make sure I am wearing clothes

[tawdry sorrel]

That's echo

[devout sail]

[frail turtle]

i learn da wey of python

[devout sail]

echo guess what i did today

😏

[supple plume]

say

[devout sail]

make sure to keep it tame

[west venture]

I was almost eaten by a python

[supple plume]

this shi is my head

[mystic harbor]

0 bald

[devout sail]

I finished planning my new machine

[supple plume]

vro lets go to the cubetalks

[west venture]

Nah

[frail turtle]

that sounds really hard

[devout sail]

Breh he's sending your pics in general

[supple plume]

they are going to answer my question on cubetalks

[west venture]

I'm shy

[austere sigil]

golden ratio

[devout sail]

With that unique aah constellation on your bald head, it's literally doxxing

[supple plume]

he asked nicely on dm

[devout sail]

But doxxed you

Alright i come

[supple plume]

only 50% of my head

[tawdry sorrel]

White version of the rock

[devout sail]

.

[supple plume]

I guess but if I grow hair it diesapperas

xd

[frail turtle]

i haven't listened to cube talks in a while because ....I don't have any questions about hacking yet

[devout sail]

But i can find people shave their head and find you

[devout sail]

I lost interest cuz, "how do I get into it"

" How do hack "

[supple plume]

MY QUESTION IN CUBETALKS

NOW

[frail turtle]

yeah that seems like the overall theme in cube talks

[devout sail]

J ki ned

Joined

[supple plume]

aright

[chrome tree]

I think his chin might be a tumor. Might want to advise your buddy echo to go to the docs post haste.

https://giphy.com/gifs/funny-arnold-schwarzenegger-funn-ftmJfRCbcWlBC

[terse dirge]

Waymo time again

[patent hollow]

would it be a nightmare if i just started coding gentoo linux LFS

[supple plume]

vro gentoo linux is not a programing language

[patent hollow]

i meant compiling and stuff

LFS

[brittle quail]

do htb academy modules correlate with each htb labs?

or is it random

[fierce sorrel]

Hey guys 👦 I'm new to hacking world, gttin better with Linux, does anyone has video courses of hacking maybe on mega or drive, sorry for bothering I'm just a noob trying to get better ebooks is not my type so I love watching videos courses. Thank you 🙂

[patent hollow]

theres plenty of websites to use, like tryhack me and hackthebox, i recommend as a newbie myself to use kali linux or parrot security os

[fierce sorrel]

Have tried both

[patent hollow]

any other like ubuntu arent for hacking, or either advanced (black arch), then comes the privacy and security ones that arent completely for hacking

[brittle quail]

wow

it asked me to find the version of ftp

and i acctually knew what nmap command to use to scan it

i remembereddd

[vivid flower]

Looks like a goiter

[brittle quail]

nvm

[supple plume]

so black arch is not for hacking?

[vivid flower]

Black arch is for very specific hacking tooling which realistically you wont use as a learner

[thick forge]

is hacking time

[supple plume]

I did

[vivid flower]

Arch in general is good for rigs where you need like one or two tools and you want them to run well: for example it would be a good choice for a cracking rig

I could see blackarch as a good choice for a threadripper rig you ssh into if you want to make sure all the relevant tools can run on it

Does that make sense

[supple plume]

not to me

but that's fine

[brittle quail]

fucck

[vivid flower]

Its not durable enough to daily drive

[brittle quail]

i forget how to do this

[vivid flower]

There are people that do but arch systems will bork when you have deadlines and thats bad

[supple plume]

well I have been running it for 2 years what can I say

[brittle quail]

sorry for the wall of text but
Password for [WORKGROUP\kali]:

    Sharename       Type      Comment
    ---------       ----      -------
    ADMIN$          Disk      Remote Admin
    C$              Disk      Default share
    IPC$            IPC       Remote IPC
    WorkShares      Disk      

Reconnecting with SMB1 for workgroup listing.
do_connect: Connection to 10.129.144.206 failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)
Unable to connect with SMB1 -- no workgroup available

this came up after smbclient -L (ip)

[supple plume]

good luck 👑

[vivid flower]

Okay so say you need to install a new tool last minute for an engagement and it breaks a bunch of packages. Now you have to unfuck your system when you should have been responsible enough to keep on task all day

Its not that you cant do this, but choosing your tools better is a way of controlling the outcome

[supple plume]

there are many strategies to not get rekt using arch and many others to unreckt

[vivid flower]

Yeah one strat is using a setup designed to not bork

[thick forge]

i am the luck

[vivid flower]

Its good for simple setups or simple servers that do one or two things requiring little management

[supple plume]

the thing is, Arch can be used to hack but it's an aqcuired taste. I just wanted to ask to the guy above if he said blackarch is not for hacking

kali is enough for hacking tho

[vivid flower]

The more complex you make it the more you have to think about when u come back to it

[shadow merlin]

im stuck on facts , the season 10 machine , can somebody help

am i allowed to speak a little details?

[vivid flower]

I really believe kali is the best for most people

[supple plume]

yeah

[molten bobcat]

Today is

[shadow merlin]

smb1 so checked for eternal blue

[molten bobcat]

Gonna be good day

It's probably not gonna be eternal blue lmao

[shadow merlin]

they lie🥹

[molten bobcat]

Also, please erase comments that spoil boxes brah

Other folks aren't supposed to know what the path is

[supple plume]

he is doing no spoiler belive me

[molten bobcat]

Kek

[shadow merlin]

so can you help me out if you read it

im new on discord just joined

and new to all

[molten bobcat]

Howdy!

[vivid flower]

Run!

[molten bobcat]

I'm eating nuggies rn

[shadow merlin]

||how to find the user of facts , tried all from comments but it wont work , cracked the ssh key passphrase||

[molten bobcat]

I cannot help you

I don't do boxes anymore

[shadow merlin]

ahh some1 plz

[rapid badger]

#boxes

[west venture]

How do I contribute to the community so I can become blue?

[brittle quail]

huh

[muted olive]

Leave two bags filled with plain unmarked bills behind the lamp post next to the bridge at midnight

[molten bobcat]

You also have to sacrifice a goat

[muted olive]

Yes

[molten bobcat]

It doesn't say how, so sacrificing a goat token in a game of Magic works too?

[west venture]

Why don't we do sacrifices anymore?

[molten bobcat]

It's been automated

[muted olive]

It has to be on a full moon night

[west venture]

Raining too much? BOOM kill a random person - > rains stops

[rapid badger]

oil too high ? boom kill a not-so-random person -> oil drops

[molten bobcat]

Huh.

The next full moon is a Lunar Eclipse.

[muted olive]

saw something in the news today

a guy died because of balloons

he carried 20 balloons into a lift, all exploded at once

boom

[molten bobcat]

So if you guys have never seen a lunar eclipse I guess look up on.. March 3rd

[muted olive]

real

[west venture]

Humans apparently used blood magick to mix blood with dogs and horses...

Which is why we're bonded to them

[thin kraken]

Hello!

[shadow merlin]

low

[west venture]

It is not a lie. It is known.

[austere sinew]

I was in a voice call and it just glitched me to cube talks this is cursed

[supple plume]

the reverse shell is not reverse shelling

[austere sinew]

Is it stable

I never stabilise my shells

[supple plume]

it was but I lost it and now the same paylaod doesnt work

[supple plume]

I didn't know you hack too

[austere sinew]

Ew no

[west venture]

Who does that lmao

[austere sinew]

Im here purely as a shitposter

[supple plume]

you tricked me

[supple plume]

me

[west venture]

Why?

[austere sinew]

So based tbh

[supple plume]

I use penelope it does automatically

[austere sinew]

Okay but seriously has anyone else been having an issue where they join a voice call and it teleports them to another one entirely

This is the second time it’s happened now for me

[west venture]

Sometimes I don't even use reverse shells if I get command execution directly on the browser, I just rock with it. I'm that lazy

[supple plume]

I have to do many things in the server here

[eager furnace]

should I take soc analystic or pre requsite soc analystic

also good morning

[supple plume]

huge: it depends

I mean what is even your goal

[supple plume]

that's not even interactive

[west venture]

That's a well documented phenomenan called, parrelel phone call teleportation or PPCT

[west venture]

Yeah

[supple plume]

almost like ssh

[west venture]

Too. Much. Work.

[supple plume]

I wanna run linpeas? I detach season, run command in the background and go back while it scans

[hybrid oxide]

Hey everyone! I’ve been building practical AI automations for web apps, think assistants that draft, classify, and trigger actions across tools. I’m big on guardrails, cost control, and measuring quality. Curious what AI use-cases are working for you.

[west venture]

The absolute max I'll go is a netcat shell

[tawdry sorrel]

Have you heard out from brathadare any time soon

This dude have disappeared

[supple plume]

he rejoined days ago

[supple plume]

this is my bash

very customized

[eager furnace]

is this linux?

[supple plume]

I even customized my cat comand

[supple plume]

heck yeah, arch linux btw

[eager furnace]

oh damn arch linux

did you use VM for it?

[supple plume]

nop

[eager furnace]

oh wow cause I thought getting VM is safer

[supple plume]

it is

[west venture]

My shell is the default gnome shell 😭

[tawdry sorrel]

Customers be like bruteforcing my ears

[west venture]

I literally CANNOT be bothered

[eager furnace]

aren't those your friends?

nbm

[muted olive]

can bruteforce the phone numbers ending digits till the pfp matches

[supple plume]

do you like mine?

[muted olive]

[tawdry sorrel]

Nah work stuff

[west venture]

Yeah it's cool

[supple plume]

https://github.com/echoesofwhoami/echoes-bash-prompt

you can have it

[eager furnace]

babysit?

[supple plume]

I made a oneline install

[tawdry sorrel]

Go ahead, you know what I can give you the nb in dm

[supple plume]

if you end up installing it run echoeshelp to know what aliases you can use

[west venture]

Ohh

[tawdry sorrel]

Wtf of course no

[west venture]

Alright

[eager furnace]

mb i didnt get whole context

[muted olive]

[supple plume]

hey

[muted olive]

[e-mail]

gg

[supple plume]

yeah I dont care xd

that is junk mail

[muted olive]

jk

[muted olive]

whats up?

[supple plume]

I quit my job and I'll be getting my first pentesting as a freelancer next month

any advice?

[eager furnace]

curious what are you going to use for that info?

[supple plume]

maybe phishing me

xd

[muted olive]

Well I guess do a good job and make sure the client likes you and hopefully hooks up more contracts with you in the future and recommends you to others. I have done zero freelance pentesting so I'm not sure what other advice to give really.

Oh and dont sell yourself short

[tawdry sorrel]

It's echoes email address, once you mail him you'll win 100 bucks

[muted olive]

Advertise yourself as the best they can get (to a reasonable degree)

[muted olive]

hacking NASA

[supple plume]

he is a former client (when I was a freelancer dev) so I know he will make it fair

[eager furnace]

Lol okay

[muted olive]

Sounds good then, he already knows you

all about connections

[tawdry sorrel]

Why all beginners make them selves wierd usernames

I remember mine was Qubic

[eager furnace]

also was it hard to find anyone's email?

[muted olive]

not really

[eager furnace]

I thought it was simple

can you try find mine?

[muted olive]

I just looked at an unverified commit's patch notes lol

nbd

[eager furnace]

I'll be impressed if you can find my email

[tawdry sorrel]

What's yours

[supple plume]

it's this hard

[west venture]

I have 16 assignments overdue again and it's probably your fault

[eager furnace]

nice try: failed basic social engineering

[supple plume]

isntalled my bash customization?

[restive flicker]

HTB Teams are for learning only?

[west venture]

No, I'm about to pass out, I'll install it tho and Def let you know

[shadow merlin]

i am script kiddie on hackthebox and its because im new , how many labs to solve to become atleast hacker 🥹

[supple plume]

cool

[eager furnace]

it depends what path you wanna take

[west venture]

Like literally haven't slept in 24 hours exactly

[shadow merlin]

im not cool enough to understand what you said

[sour adder]

Where can I go to get some nudges on Season Machines? I am stuck and need some guidance.

[west venture]

And I have a presentation in 2 days

[tawdry sorrel]

Bout 20 active machines

[molten bobcat]

That's not true at all

[tawdry sorrel]

Easy ones

[shadow merlin]

thanks i will surely do

[molten bobcat]

It's 20% of active machines, not 20.

Which equates to about 5

And some change

[eager furnace]

also I think @muted olive is trying to find my email now

[shadow merlin]

will i get banned if i answer this or help others or at what extent can i hell

[eager furnace]

or not

[silk pasture]

Is there that much of free machines?

[brittle quail]

bro what is What is the name of the share

[shadow merlin]

then thats more easy right?

[molten bobcat]

There's just fewer of them to do

[west venture]

Cloud 20% of 100 is 20.

[tawdry sorrel]

Ah noted sorry for misunderstanding

[sour adder]

I am not looking for cheats. I just need a sounding board. I feel lost in the dark

[molten bobcat]

Are there currently 100 active machines?

[west venture]

Yes

[molten bobcat]

I solved fuckin 5 and got hacker rank wym

[restive flicker]

0_o

[shadow merlin]

lets see , i will check for myself now

[west venture]

I don't know stop yelling at me

[molten bobcat]

I'm not lol

[tawdry sorrel]

All active machines are free

[molten bobcat]

Indeederino

[west venture]

I know

[silk pasture]

Yoo

[west venture]

I haven't slept in 24 hours give me a break

[molten bobcat]

Go sleep lol

[silk pasture]

So they retire and new machines get created?

[molten bobcat]

Ye

Oldest one active gets retired first

[silk pasture]

How often that happens

[molten bobcat]

Every few weeks or so I think

[silk pasture]

Damn

W

[molten bobcat]

Been goin on for years

[silk pasture]

I joined week ago so yeah

[shadow merlin]

if i

[molten bobcat]

Welcome aboard

[shadow merlin]

if i solve all boxes

i will reach holo , no matter how late i solve right?

just in the week when its active and giving points?

[molten bobcat]

I believe so?

[shadow merlin]

that means i will get 50% off htb swag

[molten bobcat]

I don't do the boxes these days

[shadow merlin]

i have to solve then

[shadow merlin]

why?

solved plenty already?

[molten bobcat]

I am a defensive specialist

Boxes are for offensive practice 😄

[shadow merlin]

fair enough

[west venture]

I love your enthusiasm, but if you're a beginner, you must go into this with some realistic expectations because you aren't going to get Holo in a week

[molten bobcat]

Ye

But having the motivation to get started is commendable

[west venture]

Ye

[molten bobcat]

Yoo my hoodie is clean again

I forgot

[shadow merlin]

i know

i meant that , the boxes comes every new week or so right

[molten bobcat]

Yaya

[shadow merlin]

so as long as i solve the that single box in a week i will get points

or do i just need flags to reach holo?

[molten bobcat]

Yaya

[shadow merlin]

i need htb hoodie , im grinding for 50% off coupon Lol

[molten bobcat]

I mean flags are how you solve boxes

Ah nice haha

I don't think I have any cybersecurity hoodies outside of uhh

The vx underground bitphomet hoodie

[shadow merlin]

i like the vxundergound hoodie

[molten bobcat]

Huh, they don't sell mine anymore?

[silk pasture]

You can get coupon by being active or what

[shadow merlin]

by being holo they say they give

[silk pasture]

Holo is?

[shadow merlin]

holo is a rank , by solving seasonal machines

[silk pasture]

Got it

[iron comet]

got it

[torn cedar]

Dope hoodie cloud

[molten bobcat]

Ty ty

It needs washed I think

[keen marsh]

Is there anyway I could convince someone to give me a hand in getting into my tablet that I forgot the password too?

[alpine pumice]

factory reset it

[keen marsh]

I would prefer not to delete everything

[alpine pumice]

maybe contact the manufacturer, highly unlikely they can help though

[keen marsh]

I was thinking I might use it to learn how to do a brute force attack but I also think that I put some crazy password on it and that is why I can't remember it.

[alpine pumice]

The problem is it may not be yours, just because you say it is doesn't mean it is, and no one here is going to help you with something that could be illegal.

[keen marsh]

I realize that, that's why I asked it the way I did

[alpine pumice]

There's no way to validate that, you just joined and aren't really part of the community, your first question was asking for help breaking into a device

contact the OEM

[keen marsh]

Understand your position

[mossy swift]

so do I have to email support about a question about academy?

[keen marsh]

One question if I can. Would a brute force attack work if the drive is encrypted?

[rancid snow]

I do data recovery for electronics for a living and tbh you're pretty SoL if you want to preserve data unless the device is ancient

every remotely modern tablet from the past 15 years is going to have lockout timers that will stop a bruteforce attempt

[obtuse fern]

Depends on the question

[rancid snow]

most devices will perma lock around 10~ failed attempts

So like even ethics aside, youre out of luck

[keen marsh]

I think I bought it back in 2020 or so. I thought I saved the password on my proton pass but I aparently did not

[mossy swift]

its just about subscription, like basically if I buy student one, start pentest path and midway through my student expired I lose access to the rest of the modules right

even if I have 18 a month

[rancid snow]

then your options are to either remember the password or wipe the device

[obtuse fern]

Yes, if your sub expires you lose access to modules you didnt complete 100%

[mossy swift]

is the 18 a month just for cubes

[obtuse fern]

No

Student sub is access based subscription, not cubes

[mossy swift]

ye ik thats 8 a month

[obtuse fern]

Meaning it grants access while subscribed

[mossy swift]

but the 18 month plan for non students is cubes only right

[obtuse fern]

Yes

You get exactly what the subscription tells you

[mossy swift]

on the page it does not say anything for the most part thats why I was confused

[keen marsh]

Thanks for the info, I guess it will just take up space on the desk. Maybe one day the spark will ignite and I will remember. I doubt it though I have a HDD that has been setting around for about 5 years that I have the same issue lol.

[obtuse fern]

It says everything it gives you, not sure where you're not seeing info

https://academy.hackthebox.com/billing/monthly-billing

[rancid snow]

amusingly encrypted hdds have a better odds of getting into it lol but theres a lot of scenario specific circumstances to make it possible.

And better odds doesnt mean realistic odds

[obtuse fern]

where's this at?

[mossy swift]

but since I have student rn I can't see what I would get without it

[mossy swift]

2.0 upgrade page

[obtuse fern]

also it says from bc there's different tiers

[mossy swift]

see this is nice

guess 2.0 beta has not fully implmented it

[rancid snow]

Ive gotten data from some bitlocker and firevault drives, but only a handful out of the number that cross my desk

[keen marsh]

It has Linux Mint on it and I know I encryped it but it has a fairly short password. Just a couple words, I just cant rember exactly what it is and have tried several things

[obtuse fern]

no, it's telling you exactly what it gives you

it's not saying anything different...

[mossy swift]

well see how I see the other plans

in the other screenshot

[obtuse fern]

yeah...

[mossy swift]

waiiiiiiiiit

holy thumbnail bait

[obtuse fern]

you can see other plans in this screenshot yeah

[signal mica]

))

[rancid snow]

That probably has a better than 0 odds but I havnt tackled any luks/common linux encrypted drives before.

[mossy swift]

ye just go ahead and time me out for 10 min I derserve that one ngl

[obtuse fern]

reading is fundamental

[mossy swift]

the thumbnail got me

im ngl

[keen marsh]

It just has some service manuals and things of that nature on it. Maybe a few invoices.

[mossy swift]

I am suprised htb does not just have a tier-based access subscription for non students for monthly plan tho

[obtuse fern]

it is silly

but

value

like, there's not much value in having a cheap access-based sub... since that would tank the value of the cube monthly

[rancid snow]

generally if I suspect that a drive has a short password(common for firevault), I try to get a few guesses from the customer of what they think the password mightve been and then I feed them through various hashcat rules to try to crack the drive.

Usually its something like person tried guessing rose1972 and the actual password was rose1985 or something along those lines.

[mossy swift]

I mean I guess but like ppl doing the job role paths then also have to pay for the cert exam

[sturdy thistle]

@austere sinew

[obtuse fern]

correct; the annual subs come with 2 vouchers; silver includes CJCA AND CPTS/CDSA/CWES

[keen marsh]

Yeah I think it was like name of business and year established but I can't seem to guess correctly. It was a thing i tried for a couple of years

[mossy swift]

buying cubes and voucher is cheaper for cpts

[obtuse fern]

no, it's not lol

overall sure, maybe

[mossy swift]

200 for the 2000 cubes, 210 for the exam = 410

[obtuse fern]

yes

[mossy swift]

but if you plan to do another test after then

annual easily 10x more value

[rancid snow]

Yeah if your curiousity strikes you again you should find out what type of encryption it is and see if hashcat supports it. You might surprise yourself with the rule variant method I described.

[obtuse fern]

but the value of the annual subs is access to ALL modules (tier2 below)

[mossy swift]

for the voucher its 2 attempts still right?

[obtuse fern]

yes; with the stipulation for the attempt being submitting a report/something otherwise you forfeit the second attempt on the voucher

[keen marsh]

I really don't know where to start with it, as far as the "hacking" side. I will keep that in mind though. I wan't to learn about the process but I don't want to read for hours or pay for it and that seems to be what is required due to the fact that I don't know anyone in person that can assist. Half the people I know can't figure out normal dir navigation.

[austere sinew]

@sturdy thistle

[mossy swift]

thats not bad at all 2 vouchers 4 exam attempts in total

[rancid snow]

yeah hacking (un) fortunately requires effort lol

[mossy swift]

def cheapest with student tier tho so I need to hurry up then 😅

[frail turtle]

being a lawyer is a very dangerous job

talk about high risk high reward

that's lawyer

[mossy swift]

can you see how much longer your student verification will last for or is it when your school email expires

[keen marsh]

True, and I wouldn't mind a little effort but not the amount it would take me starting from 0. I don't know enough about the concept.

[gray wraith]

so are most roles in cybersec

[frail turtle]

[supple plume]

[foggy forge]

Hi guys, I am new here, can anyone tell me how should I maneuver this server?

[supple plume]

turn right

30km

then go back and turn right in the roundabout again but twice counterclockwise

[foggy forge]

Well now I can see White House

[supple plume]

aright if you make a more specific question I'll answer seriously

mostly first read #welcome and #rules

if you rank up in htb you'll be able to see other channels

[foggy forge]

Yeah I am just coming from those

[frail turtle]

if youre in the academy try asking questions for your track on the HTB academy dropdown

lol

if not just go to the other drop downs, it's pretty intuitive

kidn of an odd question

are you trolling?

[foggy forge]

No, I am seriously new here and wanted to know, how to go about it

[sturdy thistle]

road to 250

[foggy forge]

I enrolled for Penetration Testing Process, do you think it is a good module for beginners? I mean it says Fundamental there

[supple plume]

yeah but I would also recommend you to try the starting point on htb labs

to get some hands on taste

oh also check deez

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[foggy forge]

Thanks I'll go through this

[green kite]

Hello chat

[feral jackal]

hello sweet

[green kite]

How’s it going

[gray wraith]

my eye is killling me today

jfc

[green kite]

What did you do to it

Why does it wanna kill you?

[silver forge]

lick it

[green kite]

How can one lick their own eyeball

My tongue can’t even reach my nose

[devout sail]

https://tenor.com/view/tears-rezero-eyeball-lick-gif-13720021

Take turns

[iron comet]

i have a few suggestions

[green kite]

Ew ew ew

[gray wraith]

nothing, woke up today and its been irrittated all day

thankfully my nose isnt as stuffed as it was yday

[green kite]

Sucks man. Hope it feels better soon

[gray wraith]

hate being sick

[green kite]

Same

When I blow my nose now, my eardrums pop

[gray wraith]

thanks, i should be good by tmrw/sunday, gotta be. i want to go climb some more

[gray wraith]

i couldnt even blow it, it was so stuffed lol

i sounded like i was holding my nose

[green kite]

Damn

[molten bobcat]

I have

Pro gamer tip

For helping clear stuffy nose

When blowing your nose, don't just full blast blow air through your nose, blow a little air out and ramp up the speed towards the end of the breath

For some reason it works better?

[wise radish]

Hello guys

Can anyone help me

I’m beginner in cybersecurity
And I don’t know from where I should start

Any suggestions? 🥲

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[wise radish]

This will help me with Linux fundamentals?

I’m 0 in cyber

[green kite]

This will help you, yes

Academy has great free content

[molten bobcat]

I think there's a module literally called Linux fundamentals

[wise radish]

Should I write everything I learned it in some notebook or something?

[green kite]

Correct

[wise radish]

Any suggestions for beginner?

[molten bobcat]

Most of use note taking software like obsidian

Is free

[wise radish]

I’m confused and lost🥲

[molten bobcat]

Das normal

[wise radish]

Should I download it?

[molten bobcat]

Up to you

[wise radish]

How many months I want to start solve medium ctf challenges

Remember I’m 0 in everything

[molten bobcat]

Care less about the time invested

And more about just starting

There's no definitive answer

[wise radish]

Ok

Thanks guys 🙏🏻

[sharp shuttle]

If you do a box a day you can do mediums in a month

By week two you will understand the boilerplate approach

if you alternate os each day

[sturdy thistle]

welp

[sturdy geyser]

hi, sorry to talk here but idk where to ask, i keep getting machine ips out of the vpn range today, even when i switch vpn. Does someone know how to fix it please ? I have vpn europe 6 for example which gives me ip 10.10.15.191 (in /23) and the box spawns at 10.129.11.53

[gray wraith]

yeah and it doesnt make the nose swell inside

[sturdy thistle]

did you tried to ping the box?

[gray wraith]

why

[sharp shuttle]

I dont get why people use claude, all its doing is running terraform and ansible to wire infra up. You can do it yourself in 8x more time but free

[gray wraith]

what does it give you

dont rush learning bud

[sturdy geyser]

yes it does not work

[sharp shuttle]

Google chrome free model will tell you how to write malware, but chatgpt needs to be convinced

Its so funny

[sturdy thistle]

which box you've tried

[sturdy geyser]

Soulmate

[gray wraith]

aight, new jjk ep watched, time to go back to cpts studying

[sturdy thistle]

and which vpn server you're on?

[sharp shuttle]

theres new jjk?

[sturdy geyser]

europe 6 (same behaviour with eu4)

[sturdy thistle]

this?

[sturdy geyser]

yes exactly

[gray wraith]

yeah episode 6 of the newest season dropped yday

[sturdy geyser]

and i choose udp vpn

[gray wraith]

+manga continuation is running too

and its amazing

[sturdy thistle]

and tun0 is the only interface you're seeing?

and you see the initialzion completed?

[sharp shuttle]

Thats great, ill need to check it out

[sturdy geyser]

no but the machine ip is not in the ip scope

[sturdy geyser]

yes

[frail turtle]

lets go lets go momentum over fear 😄

[sturdy thistle]

works

[sturdy geyser]

i tried with other machine and get another ip in 10.129 while the vpn gives me the ip 10.10.15.191

[sturdy thistle]

yeah that's normal

[sturdy geyser]

oh okay so my interfaces must be overlapping thanks for your help

[sharp shuttle]

Good Luck Mr Robot

[gray wraith]

yea do, both are amazing, gege doesnt miss

[sharp shuttle]

I just wish they didnt kill the principle

I liked him

[sturdy geyser]

fixed it thank you very much for your help

[visual hollow]

I need to watch!

[sturdy thistle]

aweomse

enjoy

[terse dirge]

I still have a bunch of stickers lmao

[molten bobcat]

It's a curse.

From me, to you.

[sharp shuttle]

Making your own friends is not a curse

I would make like 8 squishmallow friends that have different elemental abilities imbued, and wed go live at the north pole

[signal mica]

pridem

[molten bobcat]

It takes the soul information of a real person to perform

Although stuffed animals you control with a CT sounds a lot like fuzzy shikigami

Which is kinda what I thought the principles CT was anyway

[jaunty pulsar]

in a way it does but it's like a mix of curse manipulation and shikagami

[sharp shuttle]

So what season of Naruto 2 is out now? like the new episodes?

im pretty sure they had like a prequel season i havent seen yet too

[jaunty pulsar]

naruto 2 🤣

[sharp shuttle]

jjk is literally naruto 2

[jaunty pulsar]

yea true

[sharp shuttle]

you can parallel every single episode

and characters

its naruto for the modern generation

bro has the 9 tailed fox in him

[jaunty pulsar]

at least jjk is a better "cheap copy of naruto" than boruto is

[sharp shuttle]

boruto is actually very original now (after time skip) and I think its well written

[jaunty pulsar]

even tho the manga of boruto is kinda cooking, the same can be said about jjk's sequel

[sharp shuttle]

but yes, boruto is pretty terrible

[ornate ibex]

Hello👋

[sharp shuttle]

howdy pardner

[jaunty pulsar]

hellow

[ornate ibex]

How is the day so far?

[jaunty pulsar]

kinda tiring but at least I'm relaxed rn

and you?

[ornate ibex]

It's midnight, tryna catch some sleep

[mystic harbor]

I can't sleep

As usual

[tepid vault]

Anyone know how to hack into accounts

[subtle plover]

Cybersecs

@mystic harbor Congrats on guru

[tepid vault]

How tho

[sturdy thistle]

know your password is a way

and then it's called Login

[tepid vault]

That's not hacking

[sturdy thistle]

yeah and

why u wanna know that

[warped plank]

Yes: the way to do it is kinda complex but the jargon people use is hacking. That's how you get into accounts.

[tepid vault]

Buddy said to know your password

[subtle plover]

Congrats on cpts

Congrats on @warped plank

I have the voucher but im scared for planning the exam

[warped plank]

Well thats one way to do it. Real answer is: There's so many ways to do it: everything from ASCII brute force to Exploiting the application's server/network logic.

[subtle plover]

Time is tickicking

[warped plank]

Huh? Wha?

[rancid snow]

bro said 'accounts' like there is only one auth mechanism thats universally used across all devices and environments

[subtle plover]

I did 90% of daddy tjnulls

[warped plank]

It's all just usernames and passwords...*MFA, oauth, and passkeys peaking from the window*

[subtle plover]

https://tenor.com/view/richtech-rich-tech-cyber-security-cyber-security-gif-7436122008845924359

[rancid snow]

kerberos laughing from a distance

[subtle plover]

Kerberos is ez

Cybersecurity is ez

Hacking is ez

https://cdn.discordapp.com/emojis/1154184709337780366.webp?size=64&animated=true

[warped plank]

Yes it's just: ASREQ ASREP TGS TGT SAM MIT... wait what were we talking about again?

[subtle plover]

Rbcdaddy

@austere sinew

https://tenor.com/view/enojado-gif-6930705070173779193

[warped plank]

How many people did @austere sinew get into a ping war with?!?

[rancid snow]

im also amused that 'knowing the password' isnt hacking.

All the apt's that utilize scouring infostealer logs need to pack it up and go home.

[austere sinew]

@subtle plover

[warped plank]

Well... it is a form of hacking

[austere sinew]

Like 30 different people I lost count beyond that point

[subtle plover]

Idk how many but @austere sinew will never be as popular as @seadris

[austere sinew]

I am a victim

[rapid swallow]

so i bought a gift card and used it to get the gold annual sub, where can i find invoices for this

[austere sinew]

[warped plank]

You're only a victim so long as you entertain the pingerz

[austere sinew]

I tried ignoring it for days

Failed

[subtle plover]

Exactly

[austere sinew]

It’s across multiple servers

[warped plank]

There's a discord feature for that

[austere sinew]

I am a VICTIM

[warped plank]

Typical male discord audience reaction to female on discord

This is why you lie and say you a dude

[austere sinew]

I think this is just wolo targeting tbh

They just sense the bully potential

Sybau

[subtle plover]

https://tenor.com/view/laughing-gif-3317347260163801850

[austere sinew]

See if

This was just bullying a woman

Normal

But no

[warped plank]

If this is how you react to bullying then yeah I'd bully you too

[austere sinew]

This is targeted

[austere sinew]

OH COME ON

[warped plank]

[warped plank]

Need something to be happy about, cos a very popular holiday is coming up that makes half the world happy and the other half at risk

[austere sinew]

That’s my brother’s birthday as well

[warped plank]

Your brother was born on Chinese New Year?

[austere sinew]

Oh no

LMAO

I thought you were referencing valentines

[warped plank]

That's the holiday that makes the entire world at risk...

[austere sinew]

LMAO

At least I always have an excuse to not celebrate it “haha uh my brother’s birthday hahahah…”

[warped plank]

Even people in relationships at risk of getting assaulted by a disgruntled Ex or an STD

[austere sinew]

Or being assaulted by current partner

I was on the bus yesterday and this guy was scared shitless of his gf

Who lives in another country

And he has to navigate getting flowers for her

And he was like

WHY DO YOU WOMEN LOVE FLOWERS SO MUCH

and I was like it’s the concept they’re pretty and you were willing to spend time on getting us something pretty even if it doesn’t last and is functional

It’s a standard

Nick if you’re out there good luck buddy

[warped plank]

By that logic I should get girls flash paper. It's pretty, not very functional, and by design doesn't last long.

[austere sinew]

Okay but unironically you should

Every woman loves a bit of mild arson

[warped plank]

https://tenor.com/view/animeme-funny-duck-women-dont-try-to-understand-women-gif-3327411

[austere sinew]

Nu uh yall are just jealous you cant reach our levels of goated

[austere sinew]

It’s why we collect candles

[warped plank]

Ohhh yeah I see that now. At work my manager and co-worker always be playing with the candles... I have to remind em to put it out before we close.

[austere sinew]

Ehehehehehehehehe

[warped plank]

Legitimately they left a candle on one time... next to one of the plants. Thank god that didnt burn.

[austere sinew]

What a shame…

[latent tapir]

hello everyone, the academy.hackthebox subdomain seems to be down ?

[warped plank]

And so we moved all the plants away from the bar area where they play with candles... now just gotta figure out a way to get them to play with candles away from the alcohol

[candid raft]

Do htb offer student discounts on htb labs/pro labs

[wooden dust]

Best device for hacking

• Gaming PC

[warped plank]

Works fine for me

[warped plank]

Nope

[warped plank]

VPS

[wooden dust]

• Cheap
• fast
• Upgradable

[warped plank]

Sorry cheap?!? Have you seen the price of memory?

[candid raft]

@warped plank that sucks then i wish they had

[sinful berry]

can anyone help me

[wooden dust]

Memory these days are expensive cuz they are focusing on ai

[latent tapir]

weird, i've a 500 error

[warped plank]

There's only student sub for academy which does make sense

[sinful berry]

can anyone help me

please

[latent tapir]

yes ?

[warped plank]

https://dontasktoask.com

[latent tapir]

No

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[sinful berry]

no

@warped plank

DMs

[molten bobcat]

How can any of us

[candid raft]

I had already bought the silver plan a couple of months back and didn't know about the student discount. After spending so much money there i kind of broke right now

[latent tapir]

in the cybersecurity community we don't teach how to hack instagram account or something, it's not the point of it

idk

[sinful berry]

bruv

[molten bobcat]

Other people are not responsible for teaching you how to commit crimes

[wooden dust]

Bc this is a public community, it breaking discord rules.

[molten bobcat]

Asking people to teach you how to commit crimes is very, very dumb

[latent tapir]

exactly

[wooden dust]

[latent tapir]

but if you want to learn cybersecurity you're welcome 🙂

anyway xD

why i've a 500 error code

[molten bobcat]

500 errors mean something failed on the server end

Not your fault

[latent tapir]

yeah i know

that's why i asked if the subdomain was down

but apparently it works for other

that's why i don't understand tho

[warped plank]

Could be an isp issue

[latent tapir]

should i use a vpn then ?

[molten bobcat]

The ISP would not force that error

The web server is reachable, it's just responding with a server side error

[warped plank]

Maybe waf/proxy issue?

[latent tapir]

or maybe i just have to wait a bit

[molten bobcat]

It's not based around how you're connecting unless the way you're connecting is actually screwing up something on the host

Someone should be made aware of which endpoint is giving 500 errors

Cuz that means something brokie

[rancid snow]

that someone should be me

[warped plank]

Bro looking to cash in on a bug

[wooden dust]

I would say the best way to learn hacking I can think of is to join a group of people that do the same thing in real life. college is a good place. lol

[rancid snow]

I miss my academy gold sub from the last one

[wooden dust]

Find experience people that can actually help you though everything you need

In real life

That you can always talk to

[latent tapir]

idk, i don't consider myself as a hacker, i just like doing ctf and exploiting vulnerabilites (legally ofc)

[eager furnace]

is there any live support here?

[latent tapir]

i mean i'm not enough skilled for considering myself as a hacker lol

[molten bobcat]

Not on discord

The site has a live support option

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[warped plank]

Speaking from experience: only a few people in college actually wanna learn stuff, the other half just there for the degree and nowadays just cheese everything with LLMs

[wooden dust]

If you don’t consider yourself as hacker you are not a hacker. You have to think you are already a hacker. This way you have motivation.

[molten bobcat]

But also, be advised it might be end of business day on a Friday

[latent tapir]

i feel the same tho

[eager furnace]

i did that and i gotta wait until monday...

[molten bobcat]

Yeh, sorry

[warped plank]

Well it is the weekend...

[molten bobcat]

Support needs time off too

[warped plank]

Support is always limited on weekends

[eager furnace]

makes sense

Just ran into bad timing

[wooden dust]

Is college useless now?

[rancid snow]

Ive subscribed to the old school notion that you dont really get to call yourself a hacker until another hacker identifies you as one

but thats not nearly popular anymore

[wooden dust]

Lol

[warped plank]

It's currently only good for networking... with your professors and the people they know in the industry

[molten bobcat]

Kind of a "real recognizes real" thing

[latent tapir]

Maybe... for now i'm just a baby hacker then, i'm still learning the basics sooooo

[wooden dust]

No. you are a hacker

[latent tapir]

ok well if you say so

I'm a hacker

[warped plank]

Caveat is they have to be someone anonymous to you

[latent tapir]

noob hacker but hacker

[warped plank]

You cant just call your friend a hacker and they do the same with you

[latent tapir]

[wooden dust]

A hacker not any other hacker, not noob, not pro

[rancid snow]

It certainly makes it more memorable.

I remember for me it was after I posted an article about identifying exploit protection mechanisms in Linux back on the SecurityOverride forums.

[molten bobcat]

I don't think I'll ever have that moment

[latent tapir]

ok

[rancid snow]

well if you dont subscribe to that ideology you wouldnt remember it

[latent tapir]

ethical hacker ?

[warped plank]

Bro's a defender why would he wanna be recognized as a hacker?

[rancid snow]

but thered def people that consider you a capable hacker @molten bobcat ❤️

[wooden dust]

There are no legit rules say that

And what happen if I break it

[molten bobcat]

I appreciate it thank you

[warped plank]

Well your friends might consider you a hacker but the community will still consider you a skid

[wooden dust]

Doesn’t matter

[rancid snow]

depends, if your friend is absolutely cracked it could count anyways

[latent tapir]

for me i'm still a skid

[warped plank]

Same

[wooden dust]

Why I need to listen or look at other people letting them decide who I am

I decided who I am

[latent tapir]

that's ok tho, i'm still learning and i don't pretend anything

and i'm trying to improve myself

[warped plank]

If that didnt matter to you in the first place then why join the conversation about people considering other people hackers

[latent tapir]

i'm living in a region of france full of geek, i should improve myself xD that's a must

[rancid snow]

like I said, my view is from a more old school of thought.

Call yourself whatever you want tbh, it ultimately comes down to whether or not youre actually doing shit or not.

[wooden dust]

I consider Lylias a hacker lol

[torn cedar]

[latent tapir]

you don't know my skills, how you can say that ?

what's a hacker for you then ?

[rancid snow]

hackers hack

[latent tapir]

[warped plank]

And they consider themselves a skid. You can't change a person's perception of themselves just by saying they're something they think they're not

[wooden dust]

Oh ok

[latent tapir]

good definition

[wooden dust]

[latent tapir]

idk if i'm a skid but i'm still a beginner at least

[rancid snow]

ill take a skid thats striving to learn over a proclaimed hacker that just shitposts on discord any day

[warped plank]

For instance I've always been a skid and that'll never change

[latent tapir]

ok be my mentor

[wooden dust]

Skid? You never learn programming before?

[warped plank]

@rancid snow taking students? Count me in!

[soft delta]

whens the first class???

[rancid snow]

Sure. Step 1. Read the entire tcp/ip illustrated vol 1 and 2

[warped plank]

Depends on what you consider a SKID I guess. I still use a ton of other people's scripts and don't completely understand how they work under the hood. Take something like impacket scripts I only understand a high level abstraction of what it's doing and dont know what's going on on the packet level. Which is why I think I'm a skid

[wooden dust]

But other people script are the best to use

Programming takes long time

[sage epoch]

decided to restart my soc training from scratch since the last time i used it my notes sucked ass

took a break to train firewall management stuff

[wooden dust]

Basic all powerful tools are coded by a team and contributer

[warped plank]

Yes and no... what you gonna do when the script doesnt work and you cant fix it cos you dont understand it

[eager furnace]

if I want people to just check my pfp on HTB, do I HAVE To turn on public mode?

[wooden dust]

It useful when you want to understand how your target works

Like the client side

[warped plank]

Meanwhile: mimikatz (solo writer)

[sage epoch]

I think palo alto defines a skid very well

[wooden dust]

But he takes long time

[sage epoch]

"novice attackers who use publicly available tools without fully realizing the implications of their actions"

[sturdy thistle]

6 reports are in triage for WP plugins...

[warped plank]

No, your profile is public anyways

[eager furnace]

what does "private" mode do?

[warped plank]

Just requires people to sign in before. Viewing your account

[turbid goblet]

guys

[sage epoch]

in other words, they dont actually know hacking fundamentals and rely entirely on other people's work to do stuff for them

[turbid goblet]

why is there a limited amount of instances lmao

[wooden dust]

Find another script

[soft delta]

why would you need more than one instance

[turbid goblet]

cant start my pwnbox zzz

[eager furnace]

im assuming that would affect me if im applying for intern/job and employer may wanna check to prove I did lot of stuff in HTB?

[warped plank]

Cos money

[turbid goblet]

but i paid my money to always have a pwnbox

or atleast i thought 🙁

[wooden dust]

Programming is a tool too. What if the language doesn’t work? You make your own language or you just find another one that works?

[warped plank]

Mate noone who's employing you gonna be checking your HTB profile other than HTB themselves

[eager furnace]

oh good

[warped plank]

Say that's the only script anyone has ever used cos it's what has worked, even nxc relies on impacket

[warped plank]

This on academy or labs?

[turbid goblet]

nvm im just dumb

[rancid snow]

I know someone whose writing his own impacket lul

[wooden dust]

Wym

[warped plank]

What if for example the environment doesnt seem to work with impacket scripts and you dont have shell access on it. NXC? Also won't work cos behind the scenes it's impacket.

[wooden dust]

Depends on the situation some required you to write your own script

When I was doing file upload & sql by pass I was writing a lot of php

[warped plank]

Exactly, which I'll never do, thus I'm a skid

[manic anvil]

do you get rank rewards when you reach a rank or by the end of season?

[rancid snow]

its funny how much you can learn by just staring at code

[warped plank]

End of season

[manic anvil]

[warped plank]

Ikr I learned how stupid I am after tryna read C

[rancid snow]

The secret is that most code bases look incomprehensible when you first look at them. You gotta give yourself a little time to get used to how the project devs write things before you decide you dont understand

go read the sys utils source go for stuff like chfn and su

a little confusing at first and then its shockingly simple code once you get it

[warped plank]

Meanwhile Rust:

// Taken from Sylvain Kerkour's Black Hat Rust
struct Haha<'y, 'o, L, O>
  where for<'oO> L: FnOnce(&'oO O) -> &'o O,
  O: Trait<L, 'o, L>,
  O::Item : Clone + Debug + 'static {
    x: L,
  }

[terse dirge]

Mission almost complete I think I might still have HTB employees to give stickers to

[wooden dust]

C is only hard by the memory management, and the system library. I used in my MacOSX before and the memory keep breaking, I used both strcpy and strncpy still breaking. Btw that MacBook have 32GB ram

Sometime it works

Sometime it breaks

I was doing fuzzing with that

[rancid snow]

Okay rust is actually incomprehensible even if you know rust without spending an exorbitant amount of time understanding each line

Also didnt realize they made a Black Hat Rust book already, Ill have to pick it up

[warped plank]

I know rust but HRTB and lifetime annotations scares me

[rancid snow]

I wrote a small project in Rust and felt like some of the most beautiful code Ive ever written and then the next day I didn't understand any of it

[wooden dust]

Fuzzing using curl library

[warped plank]

What I hate the most is the lack of interopability of the async libraries. Everyone just uses tokio but if I want to interface with an embedded system I now have to refactor everything to async-std

[wooden dust]

Even used free

[wooden dust]

The syntax

[rancid snow]

thats one thing go does right, being designed for parallelism of all sorts from the beginning.

if rust had async features as part of the design itd be godly

Ive been really liking zig but the documentation is laughable. Doing anything beyond a toy example has you off pioneering your own shit

[wooden dust]

Rust syntax 🤮

Just like go

[warped plank]

Rust has really nice parallelism just not async runtimes really nice cos it does preemptive scheduling which the ways the libraries handle it aren't compatible with each other. Go's parallelism might be easier to write but it's still all runtime voodoo due to cooperative scheduling

[rancid snow]

go syntax is just python with braces

[warped plank]

And if err!=nil

[wooden dust]

Yeah but at least Python uses : before type

[rancid snow]

True but parallelism feels useless without async support. But maybe thats just me

[warped plank]

So does rust

[rancid snow]

yeah, that comes up so often I feel like go really should just have a native shorthand for it

[warped plank]

Don't get me wrong Rust's async is a god send, it's just annoying that the most used library for async isn't compatible with embedded systems

[wooden dust]

But rust have no many weird syntax that can be used

I went a search and identified a bit Rust kinda like C++

[warped plank]

Rust is easier to read than Java...

fn Main() {
    println!("hello world");
}

V.S.

public static void main(String args) {
    std.System.out.println("hello world");
}

[wooden dust]

Does std required in Java? I never used one

[rancid snow]

java is just so verbose it becomes more nonesense than terser languages

[wooden dust]

Rust is hybrid of C++ & Python

& JS

Gladly my situation doesn’t need to use rust

[signal mica]

java and c# are straight up a whole ass iliad

[frail turtle]

Why is madf0x angy

[wooden dust]

Some function syntax in Java is lowest first letter in C# is upper case lol

[rancid snow]

yeah my biggest issue with Rust is that for anything I need to write Rust is just overkill lul but diff languages for diff problems

[rancid snow]

im always mad

[frail turtle]

Why is angyBirb angy

[rancid snow]

their parents beat them as a child

[frail turtle]

Ditch rust and write something new in Nim

[chrome tree]

Know what's easier than that

python

lol

print("Hello World!")

[rancid snow]

I might actually. I like to try out different languages just to experiment

[wooden dust]

W this is the best one

[frail turtle]

They have a nice ffi for glfw

[wooden dust]

Printf is better than std::cout

[chrome tree]

It's the most readable. Not the most optimized and quick though. Plus compiler.

I like the way it writes thouhg. Almost stupid proof

[warped plank]

Yes but python doesn't have true parallelism

[chrome tree]

I hate async library

[wooden dust]

cin.get() vs cin >>

[frail turtle]

But scanf is not better than std::cin

[rancid snow]

python is best when I need something written faster than I need it to run

[frail turtle]

Python isnt even a language its a program

[chrome tree]

Made an asteroid game out of it lol

twas fun for a bit

[wooden dust]

lol

[frail turtle]

Oh yeah i finished that part

[rancid snow]

if I just need to make a web request to scrape a little data real quick I aint busting out c

[frail turtle]

Btw

[wooden dust]

Scanf I think it need use reference

[warped plank]

Imagine everytime you write code it has to run a program to run a program, can't be me

[chrome tree]

I'm aiming to learn go next

[rancid snow]

go is honestly my favorite language to actually write in

[wooden dust]

Get out bro

We Python here only

[warped plank]

If I making a quick web request I aint busting out programming I'm opening caido/burp

[wooden dust]

Even we do know some other language but Python is mainly loved

[chrome tree]

https://giphy.com/gifs/Z2UvoBxaABE3e

[rancid snow]

its one language where I can write 100+ lines and then actually expect it to run how I think it should

[warped plank]

Hey man we dont discriminate for language preference here.

Except php

[wooden dust]

[warped plank]

https://tenor.com/view/php-gif-24572089

[frail turtle]

My friend actually beat me to lvl 45

But he doesnt have a job

Thats why

[wooden dust]

Php is like C++ even the the class constructor uses this.

this->variable

[frail turtle]

He also taking the go path im doing the typescript one

[chrome tree]

I was gonna say he's most likely just hammering away at it. But good for you two for getting through it so quick

it's a really wonderful website

I've learned a ton

[frail turtle]

Dude im steuggling with functional programming

[rancid snow]

I was gunna give an example and realized that I had actually used go for that project instead of python lol

(scraping wordpress.org themes+plugins for mass static analysis)

[frail turtle]

Not in a bad way though

[chrome tree]

Do some challenges. Like ask Boots to craft you some practice on concepts you're still not understanding

That's what I did

helps out a lot

[frail turtle]

Ill try it

[wooden dust]

Go use OOP. So many things you can do than functional

[rancid snow]

whats Boots

[chrome tree]

You won't regret it. Ask it for varying levels too.

[rancid snow]

functional is more satisfying than OOP

but the real magic is when you do both

[chrome tree]

The AI on the boot.dev platform that assists you with hints and questions on certain problems. It recently got the ability to craft challenges for users as well

[rancid snow]

oh neat

[chrome tree]

You just tell it what you want and the difficulty level and it spits out a practice challenge with directions

[wooden dust]

I can’t think of child coding Rblox games in lua without true OOP as object instead using functional as objects

[rancid snow]

I havnt checked out boot.dev yet

[warped plank]

Or use Rust and get the best of both

[wooden dust]

Python do both easy too

[chrome tree]

Do it. It's super great if you want to learn backend development or just have some fun learning coding

[wooden dust]

Even have super to access the child class constructor

[chrome tree]

It has a very HTB structure. Concept, material, and then little quizzes

Very hands on

[warped plank]

Yes but you also always running 2 programs just for a simple hello world

[rancid snow]

Thats def neat. I unfortunately have my schedule packed out for quite some time. Esp since stuff has gotten pushed back for being sick

[frail turtle]

i hate google that's why i dont wanna learn go; there was a time when i was using it, but then i hated google after using it

[wooden dust]

They need to make Python compiled one day

[rancid snow]

...you can

[warped plank]

You can compile python

[wooden dust]

But their bug bounty program is so sweet

[warped plank]

It's just stupid to do so...

[wooden dust]

That’s not truly compiled it just combine the cpython and ur code into one

PyInstaller doesn’t support every os lol

[frail turtle]

they have a bb program? interesting I thought their bounties were outsourced.

[wooden dust]

It large company any bug you find you get pay good. It very hard but you know

When you find one you will be happy

[rancid snow]

I have heard good things about googles bb

[wooden dust]

$5,000 for some XSS instead of $50

[frail turtle]

if its that serious

[warped plank]

Not if you compile with RustPython

[wooden dust]

Yea

[rancid snow]

related but if you ever want a good read go over to reddits r/bugbounty

you get some wonderfully delusional posts

often by people that dont know what a session cookie is

[frail turtle]

no i didnt finish my sentence

if it's that serious