general

[supple plume]

you forgot is valentines day and you got 0 bitches

[tawdry sorrel]

I'm engaged

You're not

[supple plume]

oh congrats

[tawdry sorrel]

Thanks dude

https://tenor.com/view/me-sad-cry-emotional-gif-12502927

[silver sinew]

Guys how longe you are learning cybersec

[tawdry sorrel]

Longe enoughe

[gray wraith]

Not long enough

[silver sinew]

That's it cuz that's not limited

[silver sinew]

Where do you started

[tawdry sorrel]

https://academy.hackthebox.com/module/details/77

[supple plume]

I started as a developer

Been doing this for 6 months

Cyber

[tawdry sorrel]

Really 😲

[supple plume]

Yeah

And some of these months I couldn't be 100% because of work

[tawdry sorrel]

I was thinking that you've been into the field way longer

[supple plume]

But I learned a shit ton of stuff

[supple plume]

Well almost a decade of web development kinda gives some background

[silver sinew]

That's cool

[tawdry sorrel]

Well understanding how the code work will make it much easier to pwn it

[supple plume]

Understanding code and back in the day deploying services on production via ssh

Configuring vps and databases

[tawdry sorrel]

I've around 21 course finish certificates from sololearn back in 2019

[supple plume]

Apache vhosts all the above

And while making code as a dev you have to make it secure

So there's that

[tawdry sorrel]

Html css js php sql c c# c ++ java jQuery rust ... Yet for now I can write small scripts in various languages and understand the code cuz I haven't practiced a lot

[supple plume]

Coding is great tbh the funniest thing to combine with cyber

I said this many times I guess but I'll say it once more

Scripting attacks are fun as hell

Try beating portswigger labs only using python

A pleasure only reserved for idiots like me

[tawdry sorrel]

https://www.sololearn.com/profile/27560051/?ref=app

[sturdy thistle]

#rules

oh

i just saw ?ref

[tawdry sorrel]

You're accualy not, most people can't do stuff you're doing

[gray wraith]

Wait wat

[glass kite]

if u want to learn how to code get a degree

[tawdry sorrel]

I might delete it ?

[supple plume]

I quit at mid high-school and I know a ton about coding

[gray wraith]

Waste 3 yrs on compsci instead of 3yrs of specific studying abt coding and cyber?

[tawdry sorrel]

If you want to learn how to code just code

[glass kite]

right...

[supple plume]

Even better if senior developers give you feedback about the shit you make. That was golden for me

[sturdy thistle]

all good

i was just dumb

[tawdry sorrel]

Nope, I was suspicious

[sturdy thistle]

a mix of both

[azure remnant]

Waz

[tawdry sorrel]

Being seen by people we see as perfect, is a sign of success

[supple plume]

I mean when I worked with them on the same codebase that feedback was very valuable for my learning

During years

It's a bit sad that some people that hack with me in vc think I learned this all of a sudden and they think is too hard

This shit takes years

[tawdry sorrel]

So you're here to strengthen your journey as a developer or to make benefit of your skills merging them with cyber security

[supple plume]

Not really, I joined here to switch my career to cyber because I got bored of making software

And I find this fun as hell

[tawdry sorrel]

"You'll never know until you try"

[supple plume]

Why did you joined htb

[tawdry sorrel]

Htb machine rating (easy medium ...) is suspicious

[tawdry sorrel]

It was always my dream to be in the leader board of cyber security stuff, cuz I'm in love with zeros and ones, so I've joined the army to afford it and started my journey.

[signal mica]

[tawdry sorrel]

I have an master degree in information technology also but it's useless in my country.

[tawdry sorrel]

Pray for us azo

[supple plume]

Zzzomax 😼

[supple plume]

Yo wanna play chess before I lock in?

[tidal musk]

can we play?

[supple plume]

Let's wait 30 seconds to see what azo says since I offered him first

But yes

[supple plume]

aright send lichess link

[tidal musk]

what time

[supple plume]

I like rapid

[tidal musk]

https://lichess.org/rOfsmi6D

@supple plume whats ur elo

[supple plume]

goddayum

gg

[tidal musk]

gg

[supple plume]

I didn't expect this kindagame xd

my elo about 1600-1700

what's yours

[tidal musk]

on lichess or chess.com?

[supple plume]

in chess.com and regional federation

[tidal musk]

wtf ?

no way

[supple plume]

xd

whats your elo

[supple plume]

well you're doing well

my thing is I suck at openings but I can see crazy tactics

and you played very aggresive without blundering

[tidal musk]

yeah the opening was really nice for me

[supple plume]

yeah

[supple plume]

I noticed I blundered when I did...

it wasn't huge blunders but somehow I felt it xd

[tidal musk]

what is regional federation?

[supple plume]

mmm

[tidal musk]

fiide?

[supple plume]

over the board competition like fide yes but smaller

like in my country every state has a small fide thing

tbh I mostly played 4 hour games against turboautistic 12 year old kids

xd

[tidal musk]

my classmate at school coached me 😭

[supple plume]

on comptetitions I mean

dayum

I like long games and 960 chess a lot

[ornate ibex]

@silk talon chesssss ^

[supple plume]

anyway I gotta lock in

@tidal musk add me as a friend and DM anytime for chess

[sharp shuttle]

you cool with doxxing yourself here?

[tidal musk]

i dont mind you can come have a coffee with me if you want

[sharp shuttle]

i respect it, i am not trying to be private anymore its futile

[tidal musk]

trying to be private but intel ME exists

🥀

[sharp shuttle]

my other swedish friend likes chess too

his sister was a female GM or something

[tidal musk]

https://cdn.discordapp.com/attachments/1274706043657781301/1375619397036675072/glup.gif

[sharp shuttle]

thats like the least of your worries lol

[tidal musk]

thats why i only go out at night

one step ahead

[sharp shuttle]

https://klipy.com/gifs/nikocado-avocado-two-steps-ahead

[supple plume]

dang

[tidal musk]

this my one of my biggest worries

im getting fired 🥀

[terse dirge]

ebpfs are pretty sick tbh

[supple plume]

work

[terse dirge]

j*b

[tidal musk]

backup is loading

how can u brick a firewall in 2026

[supple plume]

find the 0day already

[terse dirge]

run masscan

[sharp shuttle]

nobody is keeping their job bro, the moment the US market crashes the entire world goes tits up

[terse dirge]

impossible!

[tidal musk]

phew it got synced again

[terse dirge]

it's made by Berkeley so it's over engineered and super schizo with security

altho you can use PAM to exfil creds in plaintext

[sharp shuttle]

is that really your work?

you probably should not share that

[supple plume]

I backup is comming

[silk talon]

I’m noob

[lofty marsh]

Hellooo

Long time no talk broskis

[terse dirge]

proper nextgen wootkit coming soon from ceald! 🔥

I just want to use eBPFs in the worst way lmao they're too obscure and new to not pass up

[ornate ibex]

https://giphy.com/gifs/Friends-friends-episode-6-tv-MXoC6HvToDWLirNxBT

[tidal musk]

there is nothing sensitive in the image u can find a pic of it even in the fortigate docs

[terse dirge]

sadly I don't think it's possible to do process injection with ebpfs because the checker is super strict

you'd need to hijack libraries or somethin I think

[supple plume]

may unemployment lead the way

[lofty marsh]

Echo where you at vro

[terse dirge]

I should probably stick to techniques that won't be patched out

[lofty marsh]

Took a break of the server and u still here bro-

remember me?

[supple plume]

the mr holmes?

[lofty marsh]

Yeeee

mrhomeless type shit

[supple plume]

bro you left my team without saying shit

I thought someone did somethig to you or something

[lofty marsh]

Had to lock in bro sry

[supple plume]

I asked you via DM and you had me blocked or sm

[lofty marsh]

Na I just deleted the acc

lol

[supple plume]

message didn t go thorugh

I would have appreciated a simple sentence explaining

kept thinking about it

[sharp shuttle]

you cant just ghost your friends man

[lofty marsh]

Na no hard feelings it was all me

Yooo brath u here too?

[sharp shuttle]

I wont be active

but yeah ill stick around this time

[lofty marsh]

I mean I came here temporarily too to ask a question since I know u guys know more than me and I'm almost done with CJCA

[broken pagoda]

Hey guys, do you know where can i press to restart a module, what i mean is to restart a module so i can answare the questions again ?

[ornate ibex]

You can redo the exercise by browsing the sections of the modules, yet there is no way to reset the submitted answers.

[lofty marsh]

Sorry wrong dude-

[broken pagoda]

thx man

[lofty marsh]

Where do I ask questions??

Which chat?

[ornate ibex]

Question about what?

[lofty marsh]

Its basically about what cert should I get...

but with context

[ornate ibex]

Hmm, maybe #careers-and-certs

[lofty marsh]

Yee thx man

[wicked prism]

Hi, if i wanna ask someone regarding a problem i have met in priv escalation of AD, which channel is the most appropriate ?

its not hackthebox machine

i am testing in a local AD, an attack path from synacktive but have problems with a service

[lofty marsh]

Alright I asked it in the chat thanks man

[ornate ibex]

#red-team

[lofty marsh]

Also random question here

Can someone become a red teamer with CPTS?

[sturdy thistle]

this is even better

[lofty marsh]

Hi mickhat

[signal mica]

nda status broken

stop with the brown boots therapy midas behaviour

[sturdy thistle]

hi?

[lofty marsh]

Btw can anyone help me in #careers-and-certs? Thank you

[finite burrow]

[jolly snow]

i thought they stopped this a long time ago

[sturdy thistle]

what exactly

[jolly snow]

model specific usage

[zealous charm]

[tidal musk]

there is no confidential information 😠

[broken pagoda]

is someone here that is specalized in Android Pentesting ?

[muted olive]

👋

[zealous charm]

any hacking?

[muted olive]

yup I got a new CVE

you?

[lofty marsh]

How is the horror winnie the poo going man? 💀

U still watch it?

[tidal musk]

which one

[muted olive]

wdym still? its a movie, I watched it once

and regretted

[muted olive]

CVE-2026-25749

[lofty marsh]

I remember u talking about it lmao

I watched it bcz of u

[zealous charm]

Just been doing a lot of AI-assisted source code review across various targets. Waiting to see how 2 new bugs play out on a different target

[muted olive]

Same... codex has been semi productive so far

lots of false positives but makes it easier

[muted olive]

https://tenor.com/qynFf5dVIOg.gif

[tidal musk]

no way u found heap overflow in vim

[muted olive]

:)

[tidal musk]

strcpy 🥀

[muted olive]

have been also trying glibc lately

close to something

[tidal musk]

amazing

[jolly snow]

dam dude, glooks

[zealous charm]

Nice, I’m still using claude but have been meaning to try other models

[jolly snow]

AI can help in many ways, people just think its a replacement

[muted olive]

I kind of want to buy opus but 💸

ive been using sonnet 4.5

[jolly snow]

wait u noty using claude pro ?

broo

[muted olive]

nah

[jolly snow]

bruhhh

[muted olive]

im using the free tier lmao

[jolly snow]

switch man

i have both

[muted olive]

nomoney 🥲

chatgpt is ok mostly, I have go

[jolly snow]

wait i said switch tho

[muted olive]

gemini has a massive context window but sucks at reasoning

[jolly snow]

claude's context and usage have been improved a lot

[half vine]

Hy

[jolly snow]

and the model just reasons way way better than its prev gens

[tidal musk]

get gemini trial and download antigravity = claude opus 4.5

[jolly snow]

trust me youll like it

[muted olive]

Reasons well but also quadruple guesses itself into a bag of potatoes

idk about opus or claude code yet

but sonnet does this all the time

[jolly snow]

nope, very less likely now

[muted olive]

👀

will try to check it out

[jolly snow]

oh and laso

also*

theyre giving 50 extra usage to all pro

members

[muted olive]

gemini hasnt been great so far

[jolly snow]

untill march

also giving it extra context or knowledge matters too

[muted olive]

oh will get it later then

[tidal musk]

yeah but you can download antigravity if you have it and there you can use opus 4.5 model

[muted olive]

oh you can? you dont have to pay to use that model?

[jolly snow]

its base model is prettys trong but that combined with extra knowledge for example skills is one of them can be a huge diffferncce

[tidal musk]

no you dont its included

[zealous charm]

with claude's max plan you can run 2 claude code terminals for most of the day without running out of usage

[jolly snow]

ye max is just worth that 100 nopw

now

i wouldve not recommended it like 3 months ago

but they understood they were being greedy asf

[muted olive]

will check it out then ty

[frozen zinc]

I feel like I should make a writeup about how to solve the current box in Arch

[jolly snow]

bro it sweeped through ctf challenges

peppermint was more like babymint for it

[frozen zinc]

has anyone solved in arch?

[jolly snow]

and that combined with shared knowledge is just pure progress

[muted olive]

kind of why ive lost interest in ctfs

ai can just solve everything now

and script kiddies will do just that

maybe a ctf where ai usage is forbidden but you cant really stop anyone

[frozen zinc]

Lets ban google also, and nmap

Honestly you just have a massive skill issue

[jolly snow]

ye ctf's in general are just too predictable nowq

[frozen zinc]

You cant use LLM properly

and you blame the tool

[muted olive]

me?

lol

im talking about cases where a person just uploads challenge files to an LLM and says here solve this and return the flag ty

[jolly snow]

wait whatt ?

[muted olive]

that just means they are useless

[jolly snow]

ye

[frozen zinc]

nah it doesnt work like that

[muted olive]

augmenting your own skills with ai is fine

[jolly snow]

it does 😂

[muted olive]

unfortunately it does

thats what most do

by most I mean most in the larger crowd

[frozen zinc]

Only for super easy challenges

it stop working like that quite fast

[jolly snow]

yo someone shed some light on this man

[muted olive]

Nah lol I've seen people upload entire exams to an AI, forget about a few standalone challenges lol

of course whether its effective or not is a different thing

sometimes it leads them down rabbit holes

[frozen zinc]

I know exactly what im talking about

bcs i use it

[jolly snow]

its pretty effective now i must say 😂

[muted olive]

and ive seen them ask "hey why this not working" and a chatgpt chat open in the background with "BUT WAIT - " on it 😂

[jolly snow]

oh and you think others dont

[frozen zinc]

?

No im tellin you is a tool

[jolly snow]

it can be used like a tool

[frozen zinc]

and some people are mad bcs they are dumb or cant use it properly

[jolly snow]

doesnt mean it has to be used as one

[muted olive]

Yes and thats true, but people who treat it like a brain replacement than a tool wont benefit from it

[frozen zinc]

and is not that easy to manage context when it comes to more hard challenges

they way you are describing it is not true

[jolly snow]

how about you try this

[frozen zinc]

bcs you dont use it

[jolly snow]

go on claud code

[graceful pendant]

any claude code enjoyers who use the CLI?

[jolly snow]

select model to opus 4.6 , and set reasoning to high

put it the source code of lets just say Deadroute

[frozen zinc]

Can you read?

[jolly snow]

2 min tops

[frozen zinc]

so what?

find a harder challenge

push the limits

stop crying

[gray wraith]

Yooo broo leave the CEOs alone... /s

[frozen zinc]

baby

welcome to the real world

[jolly snow]

lmao

[jolly snow]

thanks man

[graceful pendant]

you ugys usin claud code cli?

[sharp shuttle]

you hurt my feelies you are no fren of mine!

[muted olive]

wdym i dont use it 😂

i do use it and this is what ive seen in ctfs in general.

[jolly snow]

brath is back

[muted olive]

not commenting on using ai itself

[jolly snow]

its game time now

[sharp shuttle]

back? brother i am always lurking

[jolly snow]

oh shit mb gang

u got it

[frozen zinc]

Lets ban penicillin too many assholes with skill issues alive

....

[muted olive]

I'm talking about ctfs. People can just speedrun easy challenges without actually putting any effort into it

[graceful pendant]

https://github.com/tikket1/tikket-statusline

just made this, its kinda nice and simple

[sharp shuttle]

did you vibecode it

[jolly snow]

i might use this if it can help me beautify my claude code

[graceful pendant]

no i wrote it by rubbing my junk across my keyboard

[sharp shuttle]

alright

your balls 67 wpm

[graceful pendant]

yeah it does that

its a great way to see how full ur context window is

what branch ur on

etc etc

[jolly snow]

ye been workin on it too much lately

[graceful pendant]

youll be the first person to use it if you do

❤️

[signal mica]

back on pepeposting

[sharp shuttle]

i like to post my pepe here

[lime trout]

People scared of getting help moment

[sharp shuttle]

Huh?

Those people don't wanna help you

[jolly snow]

society is fucked

[fiery copper]

Emma

you need

I dunno what you need, but you sure need something

[sharp shuttle]

If i go to a physician and find out they are part of a PBM, I would be livid

[jolly snow]

yo also brath how effective do you think flipperzeros are, since youre more like a radio guy

[sharp shuttle]

they are toys

[tidal musk]

adderall?

[sharp shuttle]

but so is most infra, they work reliably

[jolly snow]

valid response

[supple plume]

@lime trout hey what will happen next month here when discord begins requiring ID verification?

I want a self hosted htb alternative server on a htb subdomain if is not much to ask

xd

hire me to help develop it

[sharp shuttle]

why would you want that?

[supple plume]

I don't want to provide my ID card to discord

[supple plume]

do you want to do that shit

[meager kernel]

discord will only limit you to a non-adult account if you dont provide ID
you wont be able to access NSFW channels on discord, thats all

rest will stay the same

[supple plume]

mmm

is my server nsfw?

[sharp shuttle]

you forgot i already got banned for saying i was a different age as a troll

[meager kernel]

no

[sharp shuttle]

they got my id

and then fucking leaked it

[supple plume]

xd

[sharp shuttle]

They will do it again

[meager kernel]

its not categorized as NSFW @supple plume
a channel has to be categorized as NSFW in the server settings to be considered 18+
our server will remain unaffected

[lime trout]

It won’t affect essentially anything here

[sharp shuttle]

he doesnt know about the nsfw channels

[supple plume]

aright then

[lime trout]

If people leave discord En-masse well see then

[supple plume]

I dont know about these right

[supple plume]

thanks for the feedback

[meager kernel]

why does pterodactyl machine keep fucking freezing? 😭

nothing works on it

wtf is this machine man

[muted olive]

stupid of them ngl

I mean they wont, thats another thing

but essentially:

[jolly snow]

TTL - 6

[muted olive]

https://tenor.com/ofx679qGkyb.gif

this

right now

[supple plume]

pain

[muted olive]

is the discord privacy thing

[lime trout]

yeah thats my feeling too

[meager kernel]

Was this same for you?

[lime trout]

it happens alot

[meager kernel]

Did the machine lag alot?

[lime trout]

people get mad, realize no good alternatives, forget about

[supple plume]

for me it was worse

because I use arch

[meager kernel]

@lime trout fix pterodactyl pls 😭😭🙏🏻🙏🏻

[gray wraith]

Not that its a good thing lol

[lime trout]

yeah 100%, i dont agree with it, but its j ust the way things are

[supple plume]

this is one of the rare cases where using arch actively affects the hacking session

[mystic wagon]

hello

[lime trout]

its not like there is even a good alternative

[meager kernel]

i mean, people usually dont use their host machine to hack

they either use a VM or a docker session

[muted olive]

"im working on an alternative"
as if there weren't 198500 alternatives already

[supple plume]

I can't say much to not spoil the machine but this is an edge case

[jolly snow]

a simple ubuntu or kali can work too

[muted olive]

besides it wont lock everyone out of their accounts

[supple plume]

for arch users

[muted olive]

they use some ML thing to predict whether someone is an adult or not

[gray wraith]

Thats what happens when one Corp has basically a monopoly (?), not sure if that word translates how I think it does

[lime trout]

its kinda the catch-22 of social stuff, you gotta be where everyone else is

[meager kernel]

ive read the CVEs, ik what to do, but i cant do it cause the machine FUCKING LAGS THE HELL OUTTT

[supple plume]

@meager kernel

[muted olive]

but also its not a bad move from discord imo

children do be seeing stuff they arent meant to see

some of its fucked up

[lime trout]

parents should parent

[meager kernel]

yea i just use a Kali prebuilt image from their website

[gray wraith]

This feels like a power move to test algos

[muted olive]

but to what extent

[lime trout]

"think of the children" -> errosion of rights

[lofty marsh]

Ooooo

U still here?

[supple plume]

be careful with leaving it running shi

[meager kernel]

oh its you

[supple plume]

dont jkust copy paste commands

[meager kernel]

ik ik

[lime trout]

dont give kids unsupervised internet access?

[lofty marsh]

yeeeee

[gray wraith]

Well... too bad, UK is already at the "protect children" phase innit?

[tidal musk]

@supple plume wanna go another game?

[meager kernel]

ill let pterodactyl run for some time

[supple plume]

actually it's the best moment now

[lofty marsh]

Bro I made this mf discord account just to dm top pentesters

[jolly snow]

chess ?

[lofty marsh]

I dmed stuffy and 0day so far

[supple plume]

send a 960 fuck opening

[tidal musk]

https://lichess.org/EdO2M1Pw

[muted olive]

I mean even if they do, discord would still likely have a gazillion legal data privacy related stuff to deal with every year because a child joined an nsfw server, clicked "yes im above 18" or whatever it currently says and viewed questionable stuff. And its not unreasonable to think children wouldnt do that imo

[lofty marsh]

What is uni CTF 2025?

[muted olive]

like

[supple plume]

what you missed

[jolly snow]

fuck i think i joined thew agme

[supple plume]

@tidal musk someone opened the link btw

[gray wraith]

They can find it everywhere and it aint a justifiable reason to give up on privacy imo

[muted olive]

if parents do supervise kids but discord still doesnt see results, they'd have to take measures they believe is in the best interest of their business

[jolly snow]

am i interuptting the session

[lime trout]

and you think this is going to stop kids?

[supple plume]

stole my place @tidal musk

[lofty marsh]

I wouldnt have gotten it anyway bro I was locked in CJCA 😭

[supple plume]

bro

[jolly snow]

mb

[lime trout]

if anything, they'll either A) Bypass it, or B) goto even worse, shadier places that dont follow the laws

[lofty marsh]

Btw @lime trout if I get the CPTS can I become a red teamer?

[jolly snow]

i can leave

[lofty marsh]

Sorry for the ping

[supple plume]

@tidal musk 🥀

[lofty marsh]

But I have to ask

[muted olive]

significantly slow down anyway
there are controls in place to prevent bypassing from what ive read

[muted olive]

but also good point on B lol

[tidal musk]

https://lichess.org/IULK28W5

🥀

[supple plume]

now we playin

[tidal musk]

[lime trout]

as much as discord's moderation sucks, there is always a worse place

[lofty marsh]

Like with only the CPTS can I become a red teamer?

[jolly snow]

@tidal musk can i play next ?

[tidal musk]

https://tenor.com/view/cat-nod-cat-nod-cat-nodding-cute-cat-gif-23793862

[lofty marsh]

If I have only professional backend experience, cjca and cpts?

[gray wraith]

Tbf id rather have it suck and remain not corpo fucked or have some weido policies forced upon

[muted olive]

you can also look at it this way: if parents cant effectively stop their children from accessing nsfw content (which they dont for the most case) and they use discord to do it, then they gotta do what they gotta do at the minimum to protect tehm

this ID verification as I heard was for nsfw gated channels and servers yeah?

[lime trout]

some privacy settings too

and talking in stages

which is the dumbest one

[lofty marsh]

Emmaaaaa

[lime trout]

i just hate the way these are all being implemented

[meager kernel]

pretty sure you can block nsfw content entirely on your network so it'll just block all websites and content which comes under nsfw

[muted olive]

still I guess they dont have a choice either

[lime trout]

like, shit IOS/Android have Digital ID's now, with passports etc

[muted olive]

actual crime involving minors takes place regularly on discord

like serious crime

[lime trout]

Just have your device verify your age, then share a signed token or something

[meager kernel]

atleast thats what i plan to do if i ever have children

[lime trout]

that just confirmed 18+

[muted olive]

would that extend for discord tho?

because discord isnt inherently nsfw

[meager kernel]

might, not sure

[gray wraith]

You can but also cant

[muted olive]

you can block discord if you want but thats just regular parental controls

[lime trout]

Chief, serious crime happens everywhere.

IRC, Skype

[muted olive]

and discord doesn't want to fecilitate it any longer

[lofty marsh]

How I can and cant?

[gray wraith]

Literally

[lime trout]

This doesnt address it, at all

[muted olive]

also the "live selfie" feature, thats in use for other stuff too right? linkedin etc?

[meager kernel]

honestly i would block discord for my children, atleast till a certain age

[lime trout]

servers will just mark things not NSFW channels, etc etc

[muted olive]

true but they'd have taken a necessary measure at the minimum I feel by actually gating nsfw places other than just "are you 18, click yes or no"

[gray wraith]

Isnt telegram constantly targeted for their "privacy protection" because shady sjit takes place there?

[meager kernel]

the selfie thing has been bypassed by Garry's Mod

i dont think they patched it

[lime trout]

how? if a channel is not marked NSFW - anyone can access it

regardless of if said channels c ontent is NSFW

so it requires people to mark channels in good faith

or discord to actually moderate

[meager kernel]

discord has been hacked, data has been leaked
i aint giving my ID

[lofty marsh]

Im speaking to a wall..

[lime trout]

or people will just go off platform

[meager kernel]

throw a brick at the wall

[lime trout]

this is why its always "for the kids" to erode your rights

because people have a hard time aruging against it

[lofty marsh]

Bro what have you undigged..

[meager kernel]

about?

[lofty marsh]

Now the song popped up on my head

U know that?

Another brick in the wall 💀

[meager kernel]

i dont get what youre saying

genuinely

[lofty marsh]

Its a song

A 90s song

[gray wraith]

Because although it confirms you have certain skills, it is not a guarantee to get a job as a pentester

[meager kernel]

man i just wanna finish this machine and go to the gym

[lofty marsh]

Yeah that goes for every tech role

[thick forge]

i wake up after the nap

today is a good day because i say is a good day

lets facking goooo

[devout sail]

I don't 😔

[lofty marsh]

Dude I came back after 3 months and no one is absent on this server 💀

respect

[devout sail]

How do u know

[lofty marsh]

Remember a mrholmes?

[devout sail]

You?

[lofty marsh]

Surprise

[devout sail]

Heh

Why different account

[lofty marsh]

Because I deleted my previous to lock in to CJCA

This one is temporary too just to ask this questions #careers-and-certs message not only here and to other cyber servers I know

[fiery copper]

I hate when everyone when they wanna take your rights they always apply the reason "its for kids". @lime trout like for real, I would see someone make a law that you must need to let strangers in your home and the politician would say "its for your kids" type shit.

At this point fk em kids, I dont care about strangers kids, if my life gonna be worse cuz of kids, then leave me alone

[lofty marsh]

real

Btw Emma now that you got tagged if you got time I desperately need you to help me out on this if you can #careers-and-certs message

[fiery copper]

cant you ping Emma simply there?

[lofty marsh]

I mean now that you pinged her I dont wanna disturb her again..

Hope it doesnt bother

[fiery copper]

anyway so you do backend for websites right?

[lofty marsh]

Not only websites

I know python java js I'll learn API, I know c c++ c#..

etc etc

[fiery copper]

ye but you said you are an intern

[lofty marsh]

Almost

Im still a student

[fiery copper]

what kind of backend you do for what exactly

[supple plume]

@tidal musk 🔥

Gg

[tidal musk]

gg

[fiery copper]

yes but what kind of backend do you plan to do, for apps or websites

[fiery copper]

what did I miss

[supple plume]

I like your playstyle

[tidal musk]

u cooked me

[tidal musk]

what about it

[lofty marsh]

To be honest whichever I can merge it with cybersecurity..

[supple plume]

Dayum 93%

[tidal musk]

fr u lock in

[fiery copper]

so both

[supple plume]

Quite aggressive without blundering

And good openings

[lofty marsh]

I think web backend is more wanted tho because everything is http nowdays

[tidal musk]

@jolly snow wanna go?

[fiery copper]

erm I guess

[supple plume]

I never studied openings

[fiery copper]

I wanna study your openings

[jolly snow]

ye give me a sec

[supple plume]

Study

[tidal musk]

me neither i just look at the top if has a name then i continue playing those

[lofty marsh]

Anyway whatever focuses on python js c++/c# and SQL

to sum it up

[fiery copper]

study your nuts, with pleasure

[supple plume]

Bro go lock in with something, anything

[fiery copper]

ok locking in

[supple plume]

Good

[warm ravine]

Huh, what's this?

[supple plume]

The aftermath of a battle

[tidal musk]

lichess

[fiery copper]

who wants to play chess with me

I kinda suck

but I love some fun

[warm ravine]

Welp

Day 2 of my journey to learn hacking

[supple plume]

Welcome

[tidal musk]

"6 days, 6 hours
Average time to bounty" - crypto.com bug bounty program

[fiery copper]

Ok I will test your knowledge, hack a hospital

[tidal musk]

arent they ashamed of lying

😠

[warm ravine]

Why always 6

[fiery copper]

cuz 6 8 7

[warm ravine]

Well, rn I know wi-fi hacking but since it's just someone who can do it without any problem, I've decided to understand how these things works

Like

[supple plume]

Well wifi hacking is a whole thing

[warm ravine]

I do wonder how hackers bypasses an user's password on a website, which kind of commands they use to execute it

[supple plume]

There is a new module in htb academy and new lab machines are made related to wifi hacking

[fiery copper]

you didnt see anything

[warm ravine]

What I wanna learn is PWNing

Literally "Give me the admin yo" hack

[fiery copper]

@supple plume are u a femboy?

[tidal musk]

how ironic 😭

[supple plume]

Bro do even think after you ask stupid stuff

[fiery copper]

so I will take it as a yes

[supple plume]

Htb is the place for learning

[thick forge]

ez, waifu malware

[warm ravine]

Imagine HackerOne puts a bounty on this guy

[supple plume]

Takes time tho

[warm ravine]

I wanna take your guess
How many months does it takes to master it?

[devout sail]

I always thought something types pwned instead of owned and then everyone started using it

[zealous charm]

H1 lowered the bounties on their own program this month 🥴

[supple plume]

Classic ass question

[warm ravine]

I'm new duh

[fiery copper]

then Hacker One shall be lowered to make them increase their bounty program

[supple plume]

There is no answer for it since it is very personal. It depends of what you know how much time do you study regularly, etc

But overall the path takes a long time to get to master these techniques

[lofty marsh]

Do friday events still happen in this server?

With the staff talking?

[warm ravine]

I mean genetically I'm a quick learner

[supple plume]

Yes

[supple plume]

Nobody will be able to answer realisticly even if you provide the results of an iq test

It depends is still the right answer

[tidal musk]

u can pwn quickly if u only hyper specialize in a very specific type of exploit

[lofty marsh]

And also you cant master hacking

nobody does

[warm ravine]

Well, I'll talk to my parents to see if they accept to buy me a 120 video of "Python Zero to Hero"

[supple plume]

Bro

[warm ravine]

What..?

[supple plume]

Don't do that

[hearty birch]

dont do that

[tidal musk]

why... bro why....

[supple plume]

Almost 10 years of exp coding on my back and my advice is: do not do that

[lofty marsh]

Yo hold up when did you get the cpts?

[warm ravine]

I'm just trying to learn dude...

I mean

[hearty birch]

1 year + ago

[warm ravine]

Oof..

[supple plume]

I know that's fine but there are better ways

[lofty marsh]

Ohh nice..

Now that you finished it what is your % on the cwes?

I have a reason why Im asking

[hearty birch]

completed 100%

[lofty marsh]

Wait..

[warm ravine]

This feels like too hard
I dont know what to do now..

[lofty marsh]

So if you finish CPTS you complete CWES too?

[hearty birch]

yes

[lofty marsh]

Bro...

I love you

You just completed my dilemma

[supple plume]

It is hard, requires years of overcoming your frustration over not understanding stuff

[lofty marsh]

💀

[supple plume]

Patience

[warm ravine]

What I just wanna learn is to find a way to learn it

Otherwise what am I doing in this server?

...

[hearty birch]

chatting to echo

[lofty marsh]

Are you a backend dev too m4ine?

[hearty birch]

no red teamer

[lofty marsh]

You can be a red teamer with just CPTS???

DAMNNNNN

[supple plume]

Aright so you have a lot of material for free to start with

[hearty birch]

i completed CAPE too

[lofty marsh]

Yeah cuz I had this question

[hearty birch]

and CDSA

[lofty marsh]

#careers-and-certs message

But since you said that you complete CWES with CPTS I dont think I need this anymore

[warm ravine]

But I dont know which ones

[supple plume]

Htb academy free tier stuff is a bit boring lots of text but is a good beginning, htb labs starting point is a guided hands on first contact with real hacking and also portswigger labs is free. To learn code there are free resources in internet too

[lofty marsh]

Im half way done with cjca

[hearty birch]

whatever you start, will be a good start

[warm ravine]

I didnt heard htb labs btw

Like

Is that a separate app

Or smth

[hearty birch]

i personally wouldnt have done that, though i completed that too

[supple plume]

Yeah, hosted in another subdomain: academy.hackthbox.com and app.hackthebox.com (labs)

[lofty marsh]

I mean since Im finishing with software engineering it's a good proof of knowledge in cybersecurity

[chrome tree]

Don't forget to let him know about ||removing the french language pack.(Please don't attempt this.)|| tis essential.

[supple plume]

Also htb acquired let's defend so you can learn free tier stuff there too

Linking the login

[chrome tree]

Had to throw the warning in incase someone actually went to look it up. CYA, my cert of choice. lol

[young glen]

What’s let’s defend?

[lofty marsh]

defensive side of cybersecurity

[supple plume]

Just goigle it

[hearty birch]

meh, it's confusing. i like when the goal is clear, blue team or red team, attack or defend

[jolly snow]

yo chess now @tidal musk

?

or anyone

[lofty marsh]

Me personally it helped me a lot to get the foundation of shit in cyber... to let me decide what role I want..

Plus it will give me a cert of proof of knowledge in cyber while in backend so its a win win for me

[young glen]

HTB has good certs

[lofty marsh]

It has practical ones

Thats why its powerful

[hearty birch]

yeah i suppose... but it's not a requirement to CPTS or CDSA, anyone that tells you that is just selling. both CPTS and CDSA are well crafted, you dont need anything else to understand. but if you're confuse about your identity (attack or defend). well yes do that to test the waters i suppose

[lofty marsh]

Yeah that was my reason of going CJCA first..

I was either DFIR or red teamer

[warm ravine]

Hm?

[lofty marsh]

Im going red teamre

[supple plume]

Google it

[lofty marsh]

Btw I dmed 0day and stuffy and they havent replied yet

[hearty birch]

the other reason i'm picky is because, time/energy is finite. you dont wanna spend on things that could have been avoided, or saved for something else...then, you are tired (my hacking udemy course are still unfinished)

[lofty marsh]

Yeah you're right on this

[warm ravine]

Well

Not bad actually

But eh

What I want to focus on

Is to learn python

I just dont know how

[lofty marsh]

But since I dont have cyber knowledge on unis or anything, not even linux fundamentals too... It isa very useful cert journey for me personally

If I havent gotten throught cjca I would struggle with cpts

[hearty birch]

i dont neither, CPTS and CDSA, takes you from scratch , there is alot of theory

anyways, good luck

[lofty marsh]

I dont think there was linux fundamentals and things like that there..

[supple plume]

Find out free stuff on Google. Code advents, and free academies is just grinding and building stuff

[lofty marsh]

Yeah... thanks a lot!

[supple plume]

Use some AI a bit to get feedback and validate it with

That's what I would do if I had to start again now

[warm ravine]

But y'all said "Dont do this" to the 120 video thing, like.
Dude, I better clear my head rn

[hearty birch]

there are things you learn on the fly... at least now, we have AI/LLM

[warm ravine]

I'm so stressed

[supple plume]

Yes do not buy a 120h video is my advice

[lofty marsh]

Ai is genuinely a threat to me 💀

Since Im going backend

[supple plume]

But hey if you wanna do it there is nothing wrong with it besides wasting money

[lofty marsh]

Thank god I didnt go fullstack or frontend..

[supple plume]

And maybe a bit of time

But it could be somewhat useful

Me myself I bought a udemy course when I first started

Actually I bought way more than 1

[warm ravine]

It only costs 500 Turkish liras

[supple plume]

About 20

[warm ravine]

Which is.. 10 dollars or smth

[supple plume]

Waste of money

I wasted my time and money with most of these courses

[lofty marsh]

Oh we're neighbors 😭

[supple plume]

How do I say sybau in greek

[lofty marsh]

Skase

[supple plume]

Voluptuous skate

[lofty marsh]

skate

Skase bro

[supple plume]

Sparse

Bro autocorrect

[lofty marsh]

[supple plume]

@austere sinew

[hearty birch]

@tidal musk check your dms

[hearty birch]

https://klipy.com/gifs/ah-shit-here-we-go-again-1

[warm ravine]

@supple plume What do you think about programming With Mosh YouTube channel?

[supple plume]

at the beginning you just have to start writing and reading code

idk about that channel but I would say just do it

doesnt matter if the instructor is unclear you can always validate info

read the manual

write a poc locally

to validate what is being said

the best way to learn is getting hands on

[warm ravine]

Alright..

It'll be too rough

I'm not sure how I can handle it

Even this affects my mental health with giving me anger for unable to find or complete something

[supple plume]

just be ready to face frustration

yeah you have to learn to control anger and frustration

[warm ravine]

Hmm..

[supple plume]

otherwise you'll never get further in cyber or coding

like at the beginning I suffered for a week to find that my php code didn't had a semicolon ;

[warm ravine]

Guess we all have to start from somewhere

[supple plume]

you won't have these problems nowadays if you use a decent editor but the essence is the same

[warm ravine]

At least I feel hope when people also feeling the same things with me

[supple plume]

when I started it felt very frustrating and demoralizing

most people I know struggled a lot too

[warm ravine]

Well

I do wonder how much the VIP + of HTB costs

[thick forge]

what are doing

[gray wraith]

Well u just gotta learn how to cope lol

[thick forge]

i need context like chat gipiti

[gray wraith]

Frustration is a normal thing

Cybersec is not easy

[supple plume]

vip+ on labs cost 25 euros a month but why do you think about paying first you should first complete the free stuff, at least the starting point

[thick forge]

ez

[gray wraith]

Nibbles made me almost cry when it broke three times and I had to do this shit all again and it was not a fun box

God i was so pissed

[supple plume]

when cyber gets easier the fun increases

like with chess

[gray wraith]

Yeah thats how it is with most things

[supple plume]

yeah

[gray wraith]

Nobody likes sucking at something

[supple plume]

takes time that's all

[warm ravine]

Well thats because the virtual box of htb is limited, you close it, wait 1 day

Thats why

[gray wraith]

Unless... on dem toes

[supple plume]

btu I believe cyber is a bit extra hard

[gray wraith]

Use vpn

File

[supple plume]

yo can use their vpn with unlimited access

[thick forge]

are talking much about hacking

now i gonna wanna hack

but i am working

XD

[supple plume]

conquer the box 👑

[thick forge]

maybe this year i gonna retake the machines

i mean the real ones, now i am just doing 1 hour of academy per day

[supple plume]

good

[thick forge]

but i think is all the time the same steps, like recognition, search vuln, exploit them

[supple plume]

Im going to hack a fortress now Im almost done with faraday, very cool fortress I recommend it

[thick forge]

is a machine ?

[supple plume]

a fortress

[thick forge]

español ?

[supple plume]

special kind of machine you unlock access after obtaining hacker badge

[warm ravine]

How does it gonna help me?

[thick forge]

ohh

i understand

[supple plume]

unlimited access

[tawdry sorrel]

[warm ravine]

Oh

I mean ok

I'll take a look at it

[supple plume]

https://giphy.com/gifs/starwars-star-wars-episode-3-3o84sq21TxDH6PyYms

[supple plume]

these fortress machines are not standard like they don't follow creator guidelines made by htb for content submission, they are made by companies so you can find there crazy stuff

you need hacker badge in htb to unlock embed perms

[thick forge]

so is similar like a hack a real company ?

[supple plume]

not really, they aren't way more realistic, just different

[frozen zinc]

Just Hacker rank

[supple plume]

you can also do it getting a cert yes

[thick forge]

i think if got hacker rank, the admins of the server gonna update the min requirements to send images xD

[supple plume]

|| or hack a few machines for free ||

[thick forge]

cause i spam a lot with gifs

what i can say

[lofty marsh]

I was in that cube talks

[thick forge]

wee need that dog edited with a crown and the glasses

i gonna buy a vps now, i gonna see if have for nawtroo too

[supple plume]

asomax

gimme that hint vra

bro wtf is this @sturdy thistle

[chrome tree]

Quit your job and tell them you're gonna be successful security auditor cause it's your destiny. Then hack all day for weeks.

[sturdy thistle]

idk

[merry pagoda]

Oo

[supple plume]

I want my money back

[sturdy thistle]

open a ticket

[supple plume]

ah dont worry im joking

[chrome tree]

Make sure to ask for cash.

[supple plume]

I just had to refresh

but I wanted to let you know

[sturdy thistle]

ticket

[supple plume]

that I got an error

...

I dont want money back Im good fr

xd

[frozen zinc]

skill issue

[supple plume]

also you forgot to ping wolo

[signal mica]

i forgor

[thick forge]

i wanna do that but i am the CEO/CTO

time to pivot the company

🤣

time to use multiple clawbots like workers @sturdy thistle

after 2 days the clawbots have a meeting with me :
** Sir kypanz you are fired **
kypanz : but is my company
clawbots : ** no more **

[stray wind]

any codebreakers in US/Canada trying out the MrBeast/Salesforce challenge?

[heady sage]

Why are my docker spawns all fucked

[warped abyss]

Where do people usually find open-source bounty bugs?

[frozen zinc]

Do you mean public programs?

[warped abyss]

public progarams have src code or public repository in github

that is my teacher requirement

[frozen zinc]

Bug Bounty platforms have many programs there and the majority are public

Im not sure what you are trying to say

Maybe you teacher is asking you to get an open source software (app, program, however you want to call it) in order to bring it to class to see if you can find bugs on it?

Then yes github is the place to look

A bug bounty program is not the same than software program

[warped abyss]

Could you give me more information about that program?

And how do I know if that program provides a CVE code when I report a bug?

[cerulean bloom]

@austere sinew HEALTH CHECK

[zealous charm]

Run the tool bbscope to extract the scope of all your public/private programs and grep for GitHub

Web3 is open sourced/code review

[frozen zinc]

I dont know what you are talking about sorry, you need to be more specific with me

[warped abyss]

can i dm u

[frozen zinc]

ok

but is better

if you phrase your questions here properly

bcs there are a lot of people that know more than I do

and also can help you when they read your question

[heady sage]

I got the first part of pit to work

My first medium challenge and im already doing good

[cerulean bloom]

you creating a HTB challenge? or

[warped abyss]

I mean, there are so many bug bounty programs, and how do I know which one provides a CVE code for the bug I find?

[heady sage]

No I'm doing a medium challenge called D*xpit

[cerulean bloom]

ohhhhhhhhhhhhh lol

glgl

[sharp beacon]

hello donut master

have a good day today

[chrome tree]

Sounds like you got the resume attention grabbers with CTO/CEO. Time to say goodbye 9-5 and hello to hacker man schedule.

[cerulean bloom]

thank you
the day just started for me 🙂

technically

[tawdry sorrel]

echo 'Faraday come to daddy!' 2>/dev/null
cd /home/ @supple plume
sudo rm -rf faraday

[supple plume]

sudo pacman -Rns faraday

[tawdry sorrel]

I'm assuming it's not a package

[supple plume]

> cat cur_status.txt
6/7 flags

[tawdry sorrel]

cat cur_status.txt
0/7

[heady sage]

What are you doing g

[tawdry sorrel]

Faraday fortress

[supple plume]

@tawdry sorrel

[zealous charm]

how to hack sir?

[supple plume]

that one was very cool tbh

100% recommended

[thick forge]

i not need to be the CEO/CTO no more, time to be the hacker

[chrome tree]

https://giphy.com/gifs/cat-cool-l2cxqpE4kKUyk

[devout sail]

why are u nerd arch user @frozen zinc

use something cool like windows

he think hes superrior just cuz he got 23 in his name

[frozen zinc]

lol I dont think Im superior, but I dont let anyone intimidate me

[frozen zinc]

Bcs the custom cursors capabilities

[devout sail]

whats that

bee?

show

[frozen zinc]

And people were saying was impossible to do it in Arch and it takes one liner

[cerulean bloom]

wat

I have 123 in my name

[devout sail]

tf

[cerulean bloom]

[supple plume]

xd

[devout sail]

he thinks he is superior

[supple plume]

what happen with docker

[frozen zinc]

that ultra hackers forgot it exist

[full aurora]

hey guys is HTB working now ? I connect vpn and tried to ping Pterodactyl but no reply.

[supple plume]

I use it a lot

[cerulean bloom]

LOL

[devout sail]

hehe 003 person

[frozen zinc]

is super powerful it has qemu emulation.... people sleep over the potential of docker...

[devout sail]

i dont think there was any issue tbh

did u try changin region or VPN?

[full aurora]

Thanks mate

yea

[frozen zinc]

do you know why my name is bandit23?

[devout sail]

and the issue was 100% packet loss?

[full aurora]

yea

[devout sail]

u robbed 23 people?

[frozen zinc]

bandit is a CTF from over the wire right?

[full aurora]

719 packets transmitted, 0 received, 100% packet loss, time 735221ms

[frozen zinc]

do you know what happen in level 23?

[devout sail]

ok, usually just changing region or VPN fixes it, prefer Release Arena tho or just take a lil break for few hours xD

[devout sail]

i didnt do that CTF to know

[full aurora]

finished 3 league of legends game, gonna do one more then lol

[devout sail]

oh nvm

go try all VPNs