general

[jolly snow]

fr

even the llm started laughing

[obtuse fern]

It is realistic, misconfigurations are the leading causes of breaches

[jolly snow]

it goes

[rancid snow]

Marcie I think youre misunderstanding

[obtuse fern]

Perhaps

[jolly snow]

ye marcie

im not hating

im just saying theres a limit to where you can teach the ways

[obtuse fern]

Exec() in a profile picture is brain dead

[jolly snow]

theyre beginners and if they teach them this shit then imagine what would happen

later on

lmaooo

[obtuse fern]

Im just referring to file upload exploitation in general being realistic

[rancid snow]

not saying a misconfiguration or anything. Hes saying literally the code is

system('python3 account_pfp.py')

[jolly snow]

they trying to upload python shells on a static site

lmaooo

[rancid snow]

for sure

[jolly snow]

or not even that a literal image my man

[obtuse fern]

If thats in your code, you deserve to get hacked

[rancid snow]

usually theres a step 2 at least

[jolly snow]

ye ye for sure

and funny thing was they were not even python pfp, literal images

jpegs lmaoo

[rancid snow]

idk if thats as bad an an endpoint that is literally just executeSQL?sql=

which Ive seen in a real application

[jolly snow]

nah the executesql one is wild, they go, ayyo you want a mssql shell, i gotchu

[rancid snow]

wasnt mssql but yeah

[jolly snow]

in theory

not literally

[thick forge]

[rancid snow]

it was pretty funny though. Still unfixed:/

[jolly snow]

dam

devs are pretty interesting these days

[rancid snow]

I did some research and the devs were literally some college graduates that made the app before they got any actual software dev jobs and got lucky enough that it makes enough money they havnt needed to

same place that has a capt cha that is purely client side

as in no parameters ever gets requested to any server. its entirely self contained javascript

[jolly snow]

so theyre stored within the js too

wow

[rancid snow]

the only captcha Ive seen that is mathematically proven to waste peoples time without a single once of bot protection

[jolly snow]

very interesting

[rancid snow]

not stored. the js just adds the disabled tag to the login button html until you solve the captcha

[jolly snow]

oh you talking about captca , when u said capt cha i didnt get it so i thought you were talking about something else

[rancid snow]

I have a tamper monkey script that just clobbers it so I dont have to do it at all

[rancid snow]

yeah phone trolled me

[jolly snow]

i read a article the other day about captchas, most of the time they just check your time to complete or your mouse movement to prove youre human lmaooo

they got no real way to verify you actually doing shit right, the good ones prob do

[rancid snow]

yeah captchas are generally pretty bypassable. I was just stunned by this one doing utterly nothing

theres a number of other issues Ive found too

[jolly snow]

fuckin 7 times

[rancid snow]

lots of 'only an admin can do this function -> inspect element delete disabled tag hit submit -> action successful!'

[jolly snow]

the worst one for me was when i was a kid and that stupid ass rob*** captcha

dam server banning robl**

lmaoo

[rancid snow]

thousands of users 😭

[jolly snow]

ye its pretty wild what we can do with just js

and what it can also do to fingerprint a lot of browsers to later identify

i dont know much about forensics but read stuff about it

[rancid snow]

I think theres also some deserialization->rce in said app but the context seemed risky to test for so I never bothered.

[jolly snow]

wait u talking about the react one

[rancid snow]

no

the db stores some php serialized objects. Normally you cant just add an object directly but refer to the executesql endpoint above.

Test and prod share the same env though so if I fucked up the payload itd bring down prod and I didnt want to risk that

[jolly snow]

ohhh

i seee what u mean

ye ye def, cause the wrong thing gets deserialized and executed, and next thign you know

the whole thing crashes

[rancid snow]

yup

and since the payload lives in the database....

[jolly snow]

it gets deserialized on any query ?

not sure if thats how it works but idk

[rancid snow]

presumably yeah, wasnt risking finding out

[jolly snow]

oh

i mean usually its not necessary unless the object is needed or referenced

but ye

[rancid snow]

yeah there was high likelihood thatd be a frequent occurrence

[jolly snow]

possibly yeah

so youre a senior dev right ? or a soc analyst or some

[rancid snow]

nope I do data recovery

Im trying to transition roles though

id like to do more pentesting or appsec work

[jolly snow]

see what i mean when i said if beginners are taught this way what would happen 😂

[muted olive]

they'd go to r/masterhacker

[jolly snow]

dude said iguess, bro himself doesnt know why to do that lmao

[rancid snow]

my weeks project has been testing my friends homelab setup. Unfortunately(for me, not for him) his setup is extremely solid so Ive now devolved into checking some of the more obscure applications he uses and seeing if I can find a cve for it lmao

[keen elm]

guys is the academy working for you?

i am getting 504

[jolly snow]

lmao

[jolly snow]

nah its down for me too

[keen elm]

hmm weird

[lyric oasis]

Same^^

Back now

Must've been the wind

[fiery copper]

@obtuse fern dont let the haters own you, be the happiest person you can be

and this can be said for anyone here

Also dont hurt people emotionally I think

[fiery copper]

@alpine pumice go nuts and revive the chat

[mystic harbor]

Remove the s

[fiery copper]

you have a garbage game collection

[terse dirge]

https://klipy.com/gifs/cat-meme-40

[frigid mountain]

😀

I've been busy

[muted olive]

you mean pre existing cve or completely new cve?

[rancid snow]

new

youll never find bugs without trying to look for em

[gray terrace]

Typical THM user tbh

[gray terrace]

You just be new here. I thrive off spite.

Feed me your hate

It’ll replenish my tanks

https://tenor.com/view/skeptical-futurama-fry-hmmm-i-got-my-eyes-on-you-gif-17101711

[quasi zephyr]

hey how do i start, i am a free user and i just signed up

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[quasi zephyr]

doing this completely free is possible?
or at some point there is a requirement to purchase

[cerulean bloom]

for academy, you won’t be able to ALL content for free, but u can do quite a lot of them for free
for labs, u can only do active machines and challenges (not sure about other stuff in labs)

[quasi zephyr]

So is it still worth to spend time on this as a free user?

or should i think of at least spending in the future

[cerulean bloom]

if u are starting out, continue with what you can with free content (in academy, they use cubes as a currency, and free content would mean content that give back all the cubes u spent to get access to the content after u complete it)

[quasi zephyr]

yes I read about it

[cerulean bloom]

but, if u want to unlock more advanced stuff in HTB, you will at some point need to spend money

[quasi zephyr]

But basics can be done for free right?

[cerulean bloom]

yes, a lot of them

the Tier 0 ones

are all free

[quasi zephyr]

alright then i will first stick to basics, then explore what i am really interested in before paying.

[cerulean bloom]

sounds good 🙂

[quasi zephyr]

to be honest i thought there would be a way to farm cubes by giving tests or something

[cerulean bloom]

nope

if there were, HTB would be out of business lol

[quasi zephyr]

true true

thx for the help ;D

[cerulean bloom]

no problem 🙂

[spare horizon]

@sharp shuttle if u ever became a millionaire can i live in ur mansion

ill be that one random dude who is fun to hangout with

[maiden anvil]

I want to always be laughing like this guy on the left

24/7

365 days per calendar year

but even more insane looking

like this

at all hours of the day

just imagine my face like this while I'm shrieking "ROTFL!!!"

[meager kernel]

Time to hack

[terse dirge]

https://klipy.com/gifs/american-psycho-patrick-bateman-eJF

guys I did a network engineering

I got a vpn goin as an access point

https://klipy.com/gifs/plink-dead-chat-plink

[feral jackal]

omggggg

that's really bad

when I open my account it tell me

💘 Swipe Right on OnlyHacks
Valentine's XSS Special

what is only hacks???!!!

is it like onlyfans but for HTB?

[rustic carbon]

wtfdidyoujustsaytome?

[maiden anvil]

real

omg CJ

where you been buddy?

all we had to do was follow the damn train

[west venture]

Bro chess.com fuckin sucks. I was beating this guy and he was almost lost literally like -3 eval, then he stops playing for 5 minutes straight and proceeds to play the top stockfish moves 10-20 times in a row. Like if you cheat at chess you're literally an inferior human being and you absolutely suck at everything you do.

[rustic carbon]

busy doing cameo for gta 6

[supple plume]

Play with me I will beat you every time without cheating

[silver forge]

people actually do that? lol... when I played (which is a loong time ago), that wasn't as much a thing. and who cares about losing that much

[west venture]

Quite. I'm mad

[rustic carbon]

guys i have figured it out

[west venture]

Losing in chess sucks but cheating is just embarrassing

[silver forge]

once you get a bit further and you play stuff like blitz games against actual masters, you will lose a lot. that's besides the point. what you learn from those games is what matters

[rustic carbon]

do you guys like jobs ?

[west venture]

Yeah

[silver forge]

I liked Steve Jobs

[rustic carbon]

if i offer a job with a reasonable payment will you like it vs a job thats fun, interesting, has equal payments and fair for all according to their work, pays decent not very high and provides good life

bascially a job that doesnt feel likr job it feels like doing something good and worth it

[rustic carbon]

The worst job culture ever

[supple plume]

Losing at chess does not suck

It can be enjoyable

[quasi zephyr]

getting caught after cheating is the most embarassing

[supple plume]

Yeah cheating is trash

[silver forge]

https://old.reddit.com/r/analytics/comments/1r4dsq2/we_just_found_out_our_ai_has_been_making_up/ sounds likea comedy goldmine, shame there aren't more details

[supple plume]

Retro left

[west venture]

Eh

[supple plume]

You have too much ego and shit

Appreciate your weaknesses and fix yourself

[west venture]

How do you appreciate a weakness

[supple plume]

Understanding how it was produced and how to avoid it after the game is over

[west venture]

"sorry I lost to stockfish yeah I will use that as a motivation to become better at chess than an engine"

[supple plume]

I sometimes play the best move too

[west venture]

Playing absolutely ass, then pausing for 5 minutes, then playing the best moves in a row till winning is not natural

[supple plume]

Well just report it and move on

If they find is cheating you get the elo back

Why do you spend time thinking about it

Mental energy flushed down the toilet

[west venture]

Bro I'm not as evolved as you to be all matured and shit sush

[supple plume]

That's the cutest thing I've seen today

[west venture]

Welp that's no more chess for another 3 - 4 months again

[silver forge]

perhaps you should play blitz, because it's harder to cheat (effectively) there

[west venture]

I'm too slow for that

[silver forge]

https://tenor.com/view/yoda-star-wars-gif-7807401677966294286

[west venture]

I be making moves with zero deapth

[supple plume]

It is totally normal to suck at chess at the beginning

[terse dirge]

I'm so happy and proud I configured and set up a VPN server with wireguard

[west venture]

I've been paying for years

[terse dirge]

Network engineering is the bane of my existence

[supple plume]

Yes but how many games in total?

[west venture]

On Amazon? I have one too

Aws

[terse dirge]

No

[west venture]

Like 1000+

[terse dirge]

I have it on a completely different IP range than the local network and I'm so happy I got it working

VPN clients are on 172.16.1.0/24 and the local network is 10.0.0.0/8 (yes the local network is flat, we love dns and think vlans are socialist propaganda)

[west venture]

What's it purpose if it's inside your LAN? The traffic still goes through your ISP hence the same IP

[terse dirge]

It's meant for accessing internal resources easily that's the purpose of this VPN

[west venture]

Oh okay

[muted olive]

you know what else is flat

the earth

[terse dirge]

Yes

[west venture]

Yeah I set up an entire wireguard server on aws so I can get better routing while playing online games

[muted olive]

using vpns to play games is just making it slower

[terse dirge]

Maybe invest in better internet it's cheaper.

[west venture]

Nah bc my ISP defaults my traffic to Europe for some reason. I have to get a server in Asia then connect to the game via the server

[west venture]

This is free tho

Free teir

When it expires imma make a new account and get another free teir

[silver forge]

oracle cloud has free tier that does not expire. probably has a site in the asia as well

[muted olive]

nice ISP

[west venture]

They scam. They ask for $2 from my credit card for verification and say verification failed after they deducted the amount and never refund it back

I tried 4 times and lost $8

[silver forge]

oracle may be technically inept, but I seriously doubt their intent is to scam. just saying.

[elder lichen]

hi

[silver forge]

ok, today 3 prompts to claude and context is full ah well

[terse dirge]

I always forget that Oracle exists same with IBM.

[silver forge]

oh I'm an IBM stock holder and the company is suuuperb.

[terse dirge]

What do they do anyways?

Like Amazon is online shopping and server hosting, Netflix is streaming, apple is phones. What does IBM do?

[elder lichen]

i tried 3 times to sign up and they take total ~1000 rs and no refund scam 😭 scam

[silver forge]

IBM guys have black suits like the Men in Black, and they talk business.

seriously talking, they do cyber, custom hardware/software solutions, and consult the enterprise sector

if you need a private could they are one of the actually potential vendors

[supple plume]

[meager kernel]

i think i learn better from HTB Labs than I do from Academy

[silver forge]

I think they also have superb AI accelerators and innovation centers, which you can use as a client

[supple plume]

Good it only took 5 months to be telling you that every day

[meager kernel]

sybau

[silver forge]

... and we are not even at noon, and I'm out of claude code credits

[west venture]

You know you can use Gemini 3 pro for free on google IA studio?

[silver forge]

what's the quota for the free like?

[west venture]

I don't think there is one

I haven't reached it personally

[terse dirge]

Instead of messing with ai we could be learning kubernetes and oauth for rancher

[west venture]

Who is rancher

[silver forge]

doesn't look that good of a match for developing python code that has to run in my network...

does look pretty nice otherwise however

[terse dirge]

Kubernetes time!!!

It's a management ui for kubernetes

[cerulean bloom]

I HAVE DONEIT

[terse dirge]

It's like portainer but better and free

[vestal trench]

Some one did oscp recently..?

[terse dirge]

Did you install kubernetes?

[cerulean bloom]

NO

submitted my own coding challenge

[west venture]

Now why would I need kubernetes

[terse dirge]

Because. Don't you want your containers to be fast?

Faster than they already are

Better

Stronger

[west venture]

I use docker. I am simple

[terse dirge]

Don't you wish docker was faster?

And better?

[west venture]

🙂‍↔️

[terse dirge]

Don't you want to be able to customize it?

Kubernetes!

[west venture]

customization is overwhelming

[terse dirge]

You don't even need to customize kubernetes, just use k3s and add in your own features

Or don't add any

Speaking of kubernetes I need to make a home lab with kubernetes

[cerulean bloom]

@eternal mango @obtuse fern @scenic maple I submitted my coding challenge 😁

[terse dirge]

I need to buy raspberry pis!

[west venture]

Pis

[idle mauve]

gm

[idle mauve]

same

[west venture]

Speaking of raspberry pis I turned a Huawei smartphone into a DIY raspberry pis

[idle mauve]

raspbery piss

[pine topaz]

Morning

[idle mauve]

What

[west venture]

What

[idle mauve]

How did u use GPIOs

[west venture]

Installed Linux bare metal and used the flashlight connection and the power and vol buttons as direct connections, for everything else, I attached an Arduino nano and wrote a bridge so that the Arduino becomes an extension of the phone

[supple plume]

🔥

[cerulean bloom]

good luck solving it if it gets released lol

[idle mauve]

you said i turned my smartphone into a pi

Have u just installed linux?

[west venture]

Not just installed Linux, It does everything a raspberry pi does

[idle mauve]

Have u ever used postmarketos?

[supple plume]

If it is math I am going to vibe code it

[west venture]

No it doesn't work for this specific phone

Not the kernel

[idle mauve]

nano is slower than pi

So it doesnt

[west venture]

I mean...

[idle mauve]

But its cool

[west venture]

Is it that big of a deal

[idle mauve]

ive mate 8

if you have know how to do it, can you suggest me a way?

[cerulean bloom]

well

heh

good luck

thats all I'll say

[supple plume]

It's math

[cerulean bloom]

I won't confirm nor deny this statement

[supple plume]

It confirms it

[west venture]

Well how I did it was by using the stock android Kerbal and installing a Linux user space on it. In this case alpine Linux

And of course extract and get the drivers working

[idle mauve]

Bro you just did how pmos get prepared

[cerulean bloom]

trust me, it doesn't lol

[idle mauve]

Ye ik

[supple plume]

I'm going to eat a donut rn, well see when I get to the challenge

[cerulean bloom]

HTB has to first accept it tho

[west venture]

Does it use the stock Kernel of the phone?

Is it available for the Huawei y5 lite 2018 (MediaTek MT6739 SoC)

Because you cannot even use the stock android kernel (even though you technically should bc this phone is compatible with treble) proprietary Huawei drivers won't work

[supple plume]

Good luck

[west venture]

So you have to unpack the boot image extract the Kernel and build a user space and get the init system working.

[cerulean bloom]

I'm worried if they'll even understand it lol, tons of jargon

[supple plume]

It's their job to understand it

[raven rain]

i finally got my letsencrypt cert to work in my cluster

holy ares

so nice to see my longhorn dashboard on https

[cerulean bloom]

true

yipee

[torn cedar]

Goodluck

[oak timber]

Same here, I’ve got four pending as well 🔥

[meager kernel]

AD is hard to do without any prior knowledge on it

[idle mauve]

There are two options:
Mainline => Use original linux kernel with configurations
Downstream => Android Kernel with some modifications

[west venture]

So can I use it for phones that aren't officially supported?

[idle mauve]

Actually there is no team that messing up with devices

Everyone port their own machines

my phone doesnt support it due to locked BLs and lack of drivers

[west venture]

Oh

[west venture]

Well you can just extract the drivers from the stock android itself

Drives are in /system/vendor and /vendor partitions

Get them and insmod them manually

[idle mauve]

it's quite tricky

because

i bricked my tablet/phone

[west venture]

Ohh

[idle mauve]

I just have access into bl

[west venture]

Yeah well I have BROM access so I practically cannot brick mine.

[idle mauve]

and searching for an exploit

[west venture]

Yeah

[idle mauve]

Actually i found a tethered script

but i need a perm access

still researching at my weekends

[west venture]

Cool

Try and find a Boot Rom exploit

[idle mauve]

tbh i think it's quite pathetic

I have to exploit my own device to take fully access

[manic anvil]

cant wait for the new machine

did half of the old machine but got stuck but learned new things

[warm ravine]

Hey uh, fellas. I need some help to connect the VPN server to my VM

[manic anvil]

you dont know how or there is a problem?

[warm ravine]

I mean, I dont know how actually

I'm on the Linux section

I mean

At the system information section

[manic anvil]

oh its pretty easy
download the vpn file that suit your location and copy it to your vm
on your linux distro type this one by one
"sudo apt update"
"sudo apt install openvpn"
"sudo openvpn /here type the path to your vpn file you downloaded"
on the top right your IP should change

[warm ravine]

Uh, I'm confused about the type path thing

Like

Am I gonna write commands like cd/Downloads or smth?

[manic anvil]

where did you put the vpn file? on your desktop?

[warm ravine]

Downloads?

[manic anvil]

type "Downloads/the name here"

[warm ravine]

Ok uh, let's go for DMS

[manic anvil]

sure

[supple plume]

@warm ravine I'm glad you didn't give up yet. You may become a hacker at some point

[warm ravine]

I'm no longer the old person anymore

If I have something that I really wanna do

I wont leave from it

[supple plume]

We'll see in a couple of years

[sturdy thistle]

Hey

[turbid bloom]

Can anyone give me tips on how to reverse engineer a rust file?

[sturdy thistle]

Read it backwards

[supple plume]

First learn how to engineer it then reverse it

[manic anvil]

ok what to do about the demon in my house now?

[muted olive]

exorcize it

[manic anvil]

[terse dirge]

I LOVE SPENDING 2 HOURS FIXING INGRESS CONTROLLERS AND DEPLOYING A SINGLE APP!!!

absolute peak kubernetes experience

[feral jackal]

urmom

[idle wagon]

https://klipy.com/gifs/panicopipoca3d

[warm ravine]

Uh... @warped plank Yo someone just send a friend request to me, the account looks really new

[fiery copper]

I spent 4 hours building a chair

[warm ravine]

@bronze goblet thats the person who send it

[feral jackal]

me too

XD

[warm ravine]

Wait

Same person?

I mean

Did this Sally person send it to you too?

[feral jackal]

yeah

[manic anvil]

you will get used to them lol

[warm ravine]

Ok yeah throw bricks at sally

Yo we got a bot in this server aye

[feral jackal]

who are they?

[manic anvil]

scammers lol

[feral jackal]

people who DM you and ask you to hack ig?

[feral jackal]

aaahhh

[manic anvil]

not to hack only scams too

the problem they choose the wrong places lol

a server that literally teach ethical hacking and anti scamming lol

[warm ravine]

Mods here are doing much better than the discord's pathetic AI moderation

[feral jackal]

btw my account is new because am new

into life

[slim harbor]

Hi guys, in the cybercafé there's a system that tracks the games and applications on the device, as well as the user's account, time spent, and money spent. How can I run Kali Linux and Tor Browser on this without exiting this system?
BTW I pay money for cybercafé not illegal
And chrome is available in this

[manic anvil]

"welcome to Sally tech how can i help you"
bro what you mean you were the one to send a friend request

[feral jackal]

i want to know why there is some challenges labeled hard but they are actually easy

[feral jackal]

hhhhhh

[manic anvil]

there is websites that run it on their server and you can use them thro browsers other than that i doubt the cybercafe will let you do anything like booting from a USB stick or anything

[idle mauve]

depends on your skills

[slim harbor]

USB is forbidden so can i install kali or any other Linux distribution for penetration testing or ethical hacking

[manic anvil]

ask the owner if you can install vmware or anything similar , if no you can use the academy pwnbox which is parrot OS that you can use in the browser

[slim harbor]

I've asked him before and gave me permission
But he said: don't quit the cybercafe's system

[manic anvil]

the vmware wont effect your system in anything mostly so its safe download vmware and linux distro you want for it

[slim harbor]

There is reborn or deep freeze as usual
So if I installed it, it will be deleted automatically after I finish my time

[manic anvil]

then there is nothing really you can do beside using the pwnbox on browser

[devout sail]

mods'

[slim harbor]

Will USB stick effect in this system?
And can u give me links to wht I should install

[manic anvil]

the usb will make the PC boot up from it using the linux distro on it it wont allow the owner to control your time and monitor your pc

[slim harbor]

Will VMware be inside the cyber system?
Or it will quit

[slim harbor]

Forgive me bro cuz am senior

[manic anvil]

the vmware will be inside the system yes the vmware is an application that allow you to runa prebuilt linux distro so you will be using it like any other app on the pc but it have a linux system inside of it

[manic anvil]

nuh all good

[slim harbor]

And as usual it will be deleted when I close the pc

[manic anvil]

if the internet connection is fast its not that hard to setup you just download the vmware which around 300 mg and the kali image is around 4 gb in size

[slim harbor]

I know, but if I come another day, will I find it or will it be deleted?

[devout sail]

@scenic maple

ID 931439814920765460

[manic anvil]

oh ask the cyber owner of the system delet things when its done it depends on them really

[manic anvil]

once my friend sent me this and i told them oh cool congrats , two months later i was talking to them on another platform just for them that their discord got hacked like few months ago lol

[muted olive]

dont you want to make infinite money

[devout sail]

i cant count them

so no point

[manic anvil]

dude what the fuck is purple kali

[devout sail]

cooler one

[manic anvil]

i just scrolled down in the images page and found alot of things

what you mean offline installation

[terse dirge]

SSL sucks chat

[devout sail]

😼

[west venture]

Closest I am ever going to get to "I hacked the fbi"

[supple plume]

🗣️ 📢 🔥
https://github.com/echoesofwhoami/CurlSwiggerLabs

[keen trench]

Hey guys, in the profile section of HTB, I can't seem to add any certification from companies other than offsec, GIAC, and EC-Council

[warm ravine]

free hacking scripts

[rustic carbon]

happy valentines day @supple plume 💋

wil you be my valentine

[zealous charm]

[devout sail]

[meager kernel]

@austere sinew

[ocean marsh]

happy valentines day @subtle plover

[fiery copper]

PUSH PUSH PUSH

[elder inlet]

@austere sinew WOLOOOOOOOOOOOO

[fiery copper]

crumb away

[elder inlet]

Who?

[subtle plover]

Thanks

[zealous charm]

any hacking today?

[simple monolith]

sure new box new

[cerulean bloom]

WOLOOOOOOOO

[elder inlet]

@austere sinew WOOLOO

https://tenor.com/view/wake-up-dog-doggy-hooman-get-up-gif-4229210329433945821

@austere sinew WOLO WOLO WOLO WOLO WOLO

[west venture]

Bro the new HAL AI or whatever in HackerOne is straight up asking me to download exposed .SQLite files I was trying to report so I can confirm they have sensitive info. I am pretty sure that's illegal right?

Don't really do this often just wanna confirm

[signal mica]

Later for sure

[turbid bloom]

It's for a CTF. Trying to engineer it and reverse it is gonna take way too much time.

I'm stuck on an OSINT level now lol.

[supple plume]

good luck

[dry blade]

do we already have physical cert for CAPE?

[terse dirge]

Lmao it's 7am. Gn chat

Too much kubernetes

I got gitea and working ldap auth with authentik going and I fixed our ingress controller

Too much kubernetes makes ceald a tired pod

[turbid bloom]

Thanks.

It has an mp3 file as an attachment 💀

[frigid mountain]

good morning

[exotic pendant]

[upbeat tangle]

So whos ready for new machine release?

[sonic blaze]

I need to get back into hack the box

I always start for a few days and give up 😤

[upbeat tangle]

Why do you give up?

[scenic maple]

bro became green

[upbeat tangle]

i always wanted to be a ninja turtle!

[manic anvil]

does onion websites work the same as normal websites?

[scenic maple]

pretty much

[manic anvil]

the enumeration part tho you need to edit the tool script or most tools know how to deal with them?

[scenic maple]

you have to tone it down tho cause of bandwith

[scenic maple]

so like fuzzing it?

ffuf stuff?

[manic anvil]

yeah

[scenic maple]

well first of all you obv should be running it without permission
but even if you have it those sites arent able to take lot of bandwidth as i said
but if you want to do it anyway you can do it by proxying your request via tor

like install and setup tor on local and then pipe it through the proxy locally

but it is highly likely that the tor nodes will ban you

so i would advice agaisnt it

also it sounds very illegal now that i think about it

[manic anvil]

i see

[scenic maple]

-x is ued for proxy same for curl

[manic anvil]

thanks for letting me know

[idle mauve]

I'm getting ready for tonight's machine

my cancer cycle is going to release

[scenic maple]

A man who runs with aggression walks without dignity ~ Smaurai Jack

[manic anvil]

dude leaks groups are silly a group put on their site that they hacked a company and have alot of their info , just for the company to come out and show them that they hacked the wrong company that just happen to have the same name but its based in india

[scenic maple]

very cringe

[manic anvil]

funny thing they put the thing on their leak website then took it down like nothing happened

btw guys are rainbow tables any better than waiting for john or hashcat to try everything in rockyou file?

[neat cipher]

Use john on your host machine rather than in vm to fully use your graphics card no matter what password list you're using

[manic anvil]

make sense

[supple plume]

-x in curl is http methods iirc

Let me check

Oh method is -X seems like proxy is -x lowercase gaddayum

[upbeat drift]

Hi everyone,

I’m a bit confused about the difference between Labs and Challenges on Academy x HTB. Labs seem to be topic-based (e.g., XSS), while the OWASP 2025 Path contains Challenges. What’s the actual difference between the two? Also, for CWES preparation, should I focus more on Labs or Challenges? I know there’s a dedicated CPTS prep path — is there something similar for CWES?

Thanks!

[frigid mountain]

labs are full machines with an exploitable vulnerability while challenges are like smaller puzzles around a particular vuln

A challenge gives you a direct question or problem while a machine is more open-ended

[wary wind]

Hello, i know this question are being asked alot and repeatable but may i know the roadmap for cybersecurity where i can expand myself on later on

[upbeat drift]

Okay, thank you ! I guess I will focus more on the labs.

[frigid mountain]

yw

[young glen]

I prefer machines

[median karma]

sup

[young glen]

Hi

[bronze crow]

hey guys
i kinda wanna make the transition from thm to htb but i heard that htb is not really the best option for begginers
whats yall thoughts about that?

[supple plume]

just try and see for yourself

there is free tier stuff on both places

[signal mica]

[supple plume]

also btw asking here you'll likely get the opinion of the users of this platform that will likely be inclined towards this platform

[meager kernel]

HTB has gotten better for beginners

[signal mica]

@sharp shuttle can you pick me up n drive me to the bus station

On hood?

[bronze crow]

i guess but i believe that everyone here tried both of them

[silver forge]

played a bit more of that Infinite Arena Breakout game earned 5 millions

[pure jasper]

Hey fam.
I'm new Here, just joined in, I'm a beginner in computing and I really want to make it pretty well in this category.

Can someone be my guide please 🥺

[thick forge]

moooveeee

is hacking timeeee

[silver forge]

developing stuff

[thick forge]

y remember me i need to vibe coding

to spend less time

kypanz activate second core to do parallel tasks

[tidal musk]

Happy valentine day

[silver forge]

or, Melissa

[thick forge]

my new vps is under attack

[silver forge]

good, attacking makes services stronger

[thick forge]

time to activate default passwords to see what the hacker does

[thick forge]

this rememberme this video : https://youtu.be/40SnEd1RWUU?si=h-bXTqgMjOe-OLZj&t=10

🤣

[silver forge]

"What is this talk of 'release'? Klingons do not make software 'releases'! Our software 'escapes', leaving a bloody trail of designers and quality assurance people in its wake!"

[manic anvil]

HTB profile is a portfolio right ?

[silver forge]

Bugs are there only to build the character of the user!

[toxic sandal]

Anyone running ParrotOS ARM in Parallels?

[devout sail]

https://tenor.com/view/parrot-stick-arms-walking-makingmywaydowntown-gif-8033051

[devout sail]

[thick forge]

[devout sail]

Oh fighting back??

[thick forge]

the noob revelation

[devout sail]

[thick forge]

🏃 🏃‍➡️

[devout sail]

[thick forge]

[devout sail]

Alright you win this time

https://tenor.com/view/tom-and-jerry-tom-leaving-tom-leaving-tom-sad-gif-7145580921896709502

[thick forge]

[mystic patio]

I wonder if I could have trouble with HTB if I develop and publish POC of CVEs of active boxes

Any mod can help me with this?

Like i dont find decent POCs for CVEs when Im doing an active box and I want to develop one

[alpine pumice]

Mods can only help with Discord server related problems.

[mystic patio]

Who should i talk to?

[alpine pumice]

It's against ToS to post writeups for active boxes.

[mystic patio]

I know

But im not sure if a POC of a CVE is allowed

I mean it must be allowed

Its not a writeup

But

I want to be sure

[alpine pumice]

That would reveal the attack path on an active box, against the ToS to provide writeups/attack paths/etc. for active boxes

Providing the way to solve a machine and trying to not call it a writeup is still a writeup

[mystic patio]

I understand

Ill wait when the box is retired then

[ornate wren]

if you mean develop POCs that happen to exploit something on a box that's fine though just don't do like

"here is the POC for thsi box"

if it's poc for cve whatever

[alpine pumice]

If you have questions like this it's best to reach out to HTB directly on the website. Their support can answer the questions better than anyone here.

[mystic patio]

Ok

Thanks

[undone fossil]

If you mean publishing on github. That's fine, just make it focused on the CVE and not the box itself.

[thick forge]

cofeee time

[simple monolith]

ready for the machine

[rancid snow]

yeah every time a cve htb box drops theres suddenly 50 billion new githib repos with new PoC for a ten year old cve with no mention of the box

[fiery copper]

anyone wanna be my friend?
https://www.chess.com/member/mario_dev

[tame plaza]

hop on minecraft 1.8

[devout sail]

Nah

[supple plume]

[idle mauve]

May I connect release arena via machines vpn

[thick forge]

[potent gull]

sup

o/

\o/

oi

[tame plaza]

sup

[supple plume]

zero units of dumb

[potent gull]

I need a new hobby

side quest perhaps

[tame plaza]

airsoft

[potent gull]

unlikely

[supple plume]

install arch linux

[potent gull]

LMAO nope

[supple plume]

it's not that bad

[potent gull]

I like mine

[silver forge]

why doesn't report cpu

[supple plume]

wdy do you said nope xd

[potent gull]

because I turned all the none your business off

[tame plaza]

bro knows his job

[supple plume]

then why you shared the neofetch that just reenables the none my business into business

[potent gull]

LMAO

[supple plume]

btw

[supple plume]

bro you turned off your computer 🥀

[tame plaza]

terminator

[supple plume]

I wanted to see that 100 uptime days

[supple plume]

do you bash script things?

[tame plaza]

how are you display the htb/target ip ?

[silver forge]

I was downloading stuff from the huggingface, and it was interfering with something else, and I yanked the cord

[supple plume]

with zsh

[potent gull]

a few

[supple plume]

I have hacked my terminal

[potent gull]

yes

[tame plaza]

thats cool

[potent gull]

with zsh, to answer

[tame plaza]

usable

[supple plume]

I have a repo btw

[tame plaza]

can u send it to me ?

[supple plume]

so regards bash, how more comfortable it is?

[supple plume]

sure https://github.com/echoesofwhoami/echoes-bash-prompt

[potent gull]

extremely

[supple plume]

it has hacking scripts too

[supple plume]

huh I was thinking about switching to zsh

like this shit is so impractical

[potent gull]

I have three configs. common, bashrc, zshrc so just in case I need to swap around. most everything lives in common, very little is zsh

[bitter wasp]

Hello, I am creating a firm in Slovakia that focuses on penetration testing. We are doing a deep research into methodics and tactics to use while doing these tests. Can someone here tell me more about their own procedure or reference some links, where I can find these things?

[supple plume]

I update it often, I have not set any versioning tho, but to update is like the same oneliner that's used to install

[green kite]

Hello chat

[supple plume]

leave me some gh star if you like it

[green kite]

No

[supple plume]

[green kite]

Ill leave two

[supple plume]

hey I started a blog today

[potent gull]

super

[green kite]

Oh really?

[potent gull]

whatcha bloggin

[supple plume]

yeah CurlSwiggerLabs

https://github.com/echoesofwhoami/CurlSwiggerLabs

[green kite]

Nice

[devout sail]

I gotta raise an issue on it

[supple plume]

your issues are related to skill

[potent gull]

issue and PR, instantly. gotta get that contribution badge

[bitter wasp]

No I want to create a business based on penetration testing. In my country, it's not common and I think this gives me a perfect opportunity on market

[devout sail]

Like farming.?

[supple plume]

if someone sends me a good pr I may take it

[tame plaza]

cybersecurity

[supple plume]

I'ma run sqlmap through websockets brb

[tame plaza]

you can start with experienced people to provide the service but I think u should first focus on getting the people and clients, penetration testers know what they are doing most of the time 😄

[potent gull]

where's your super flex .net domain?

[tame plaza]

if you want to do a deep research on TTP I think you should have a specific goal of the research and kinda niche

[supple plume]

I try to stay away from .net xd

[silver forge]

The Toilet Paper

[green kite]

I found another nice IDOR

[silver forge]

[green kite]

No bbp. But the company is considering it

[cerulean bloom]

https://klipy.com/gifs/cat-chat-cat-fall

[green kite]

🙋‍♂️

[supple plume]

[green kite]

Watching kingsmen with the wife

This cutie is keeping me company too

[bitter wasp]

yeah, my colleague has this covered, I'm here trying to discover some proceduries we can use so we can develop and expand our service

[cerulean bloom]

what a cutieeeeeeeeeeee

[green kite]

He’s snoring

[cerulean bloom]

lol

[green kite]

This one’s recovering from class

How’s everyone’s Saturday

[potent gull]

super! yours?

[green kite]

Yeah it’s been good, thank you.

[cerulean bloom]

it has ended, but was pretty good

[graceful pendant]

happy valentines

[green kite]

You too 💚

[rose onyx]

is it the one to my heart?

[green kite]

No, got a 403 there

[graceful pendant]

I got a 404 there

[green kite]

But might be able to make it a 418

Valentines is overrated

[graceful pendant]

im tryna make it a 500

[green kite]

Why? Should try to go for 200

Then a 201

Then in a few years 429

[gaunt gale]

Do you not celebrate valentine’s day with your gf/bf?

[green kite]

No, it’s overrated. I don’t need a commercial day to make her feel loved

[gaunt gale]

Ok

Gotcha

[green kite]

She knows I love her by the little things 😉

[gaunt gale]

Ya that’s a good philosophy

[green kite]

Pre-heat her car when she’s gotta go to work for example

[gaunt gale]

Ok agreed

Ya

[green kite]

Load the dishwasher wrong so she can yap about it

[gaunt gale]

Ya ok

Wonderful

[green kite]

How’re you birdie?

[gaunt gale]

Good I did half a CWES module a couple days ago. Yesterday had severe anxiety and wasn’t able to focus

Today I’ll finish the module

I’m celebrating my birthday today and tomorrow

[green kite]

Oh I am sorry to hear that. Did you get your appointment with that doc you were talking about?

[gaunt gale]

Tomorrow is my actual birthday

Yes

[green kite]

OMG !!

Happy birthday in advance

[gaunt gale]

Thanks

I really appreciate it

Anyway, my doctor prescribed zoloft more than two, soon to be three weeks ago

[cerulean bloom]

https://klipy.com/gifs/birthday-wishes-317

[gaunt gale]

Thank you

I appreciate it

[green kite]

I hope it’ll help you

[supple plume]

How old?

[gaunt gale]

It probably will but I’m on a low enough dose that the therapeutic effects haven’t kicked in

[gaunt gale]

I don’t want to say for privacy reasons

[green kite]

18+ experience

[gaunt gale]

I’m absolutely an adult I’ll say that much

[green kite]

Yeah, you’ve got experience at being 18

[gaunt gale]

Haha

Anyway I’m off to a concert with a friend

[green kite]

Enjoy!!

[gaunt gale]

Thanks guys

Ttyl

[green kite]

See ya

[supple plume]

Getting ready for the seasonal

I hope all my team gets in vc

[cerulean bloom]

uhh

I might not LOL

[crimson crypt]

@fossil sequoia can I send you a DM?

[supple plume]

why not

[cerulean bloom]

its like

4 AM

I'll join ig

[supple plume]

Oh yeah

[cerulean bloom]

worst timing tbh

you guys can help me tomorrow if possible

I'll try, but me getting sleepy

[supple plume]

Yeah these nasty machines get released always at the same time

[supple plume]

You can ask me always DM no problem

Have you checked my blog btw?

[cerulean bloom]

uhhhh

no

[supple plume]

@cerulean bloom CurlSwiggerLabs!!!

[celest meteor]

Why is it not allowed to screenshare in the channels? (i am new here, just switched over from THM)

[supple plume]

Maybe you need hacker rank to unlock perms

[celest meteor]

Ahh, okay xD

[supple plume]

Yeah it works like this with embedding

[celest meteor]

THM has become so bad lately, the VMs are unresponsive, latency blows and rooms are just basic questions with almost no effort to find the flags

[supple plume]

I have heard that

[supple plume]

Why is it

Huh

What about the chat

[supple plume]

From 1 to 10 rate toxic

[celest meteor]

8,8

[supple plume]

Hahaha

I would say here is 1.7/10

[celest meteor]

There are so many randoms in there like femboys, people joining vc and meowing etc

[supple plume]

Hmm

There is femboys here too

[celest meteor]

FUC...

[supple plume]

What's wrong with femboys?

[silver forge]

it's the femboy apocalypse

[warm ravine]

They're disgusting

[celest meteor]

Yes like we can respect LGBTBBQ but just dont shove it into peoples faces if they dont want to (No hate)

[sharp beacon]

wut

[supple plume]

I have one in my team and I am proud of him y'all can suck my ass

[sharp beacon]

hell ya

[warm ravine]

NOOOOOO

[thick forge]

[crisp sand]

i completed the jet fortress challenge and i got only 12 points for all flags is that normal ??? (on my profile points )

[thick forge]

[supple plume]

bro if someone is shoving something into your face you have the face in the wrong place

[thick forge]

i never win points because i am noob

[supple plume]

bru

[supple plume]

maybe one day you can join my team

[crisp sand]

🤣

[supple plume]

we are learning a lot here

[thick forge]

spanish team ?

i wanna participate en ctf time

[supple plume]

2 members are

[thick forge]

but i dont have much time to spend

lot of work

[supple plume]

hehe

[tame plaza]

connect with the work pc then

[thick forge]

with secalca ?

🤣

[supple plume]

it's dificult to find spanish speakers

[tame plaza]

nice pwnboxes on web

[supple plume]

wdym

[thick forge]

i dont know, decrypt

🤣

read it fast

[sonic wharf]

lol the webpage said it can't find the machine

[tame plaza]

10 minutes later first blood will pop up

[naive coral]

i started machine but nmap scan shows not a single port open lol

[alpine pumice]

https://app.hackthebox.com/challenges/OnlyHacks?tab=play_challenge

[tame plaza]

maybe try udp or the machine is broken

[naive coral]

nvm it works

[silver forge]

or apply more force

[thick forge]

[silver forge]

I have now been trying to find a bug for almost 3 hours... sigh

[rare spoke]

user blood taken before i can even spawn box lol

[woeful osprey]

same lol

[tame plaza]

xD

[thick forge]

hacking in deploy

[sonic wharf]

how are they starting the machine so fast, the page forces a reload once the machine is released then i just get stuck trying to load the webpage lol

[silver forge]

once upon a time I had the blood for user for one box, but decided to take a nap. after waking up I realized what I had done

I had the hash there, but didn't submit

but was good nap

[tame plaza]

best nap ever

[potent gull]

yesterday my domain email was spoofed. weird getting an email from myself, saying note to self, and also saying suspicious activity, user may be impersonating sender. First time this had happened in all the years of me managing my own domains.

anyways, be vigilant

also, naps are good

[silver forge]

dmark/dkim/spif, use them

spoofing email addresses, if your domain is properly configured, is nearly impossible

[potent gull]

I do. I had p=none like a noob

anyways, I swapped it and should be fine again. it wasn't a primary address, I use it for testing mostly, but, my fault is my fault.

kinda funny though. failed all checks, and still landed in inbox. my primary email gets filtered sometimes. but some rando sending me an email saying "hello" from my own domain= straight to priority 🤣

[tame plaza]

who's using omarchy ?

[potent gull]

nope

but, because no opportunity wasted. I use arch

btw

well if it's "basically Arch"... do you have a question or are we just asking to ask?

oh, then nope. I will let you whisper into the void

[silver forge]

https://tenor.com/view/whisper-whisper-in-ear-gif-1173647009616547334

[azure remnant]

to do is to be

• gigachad8520 rahimahullah

[young glen]

Any openSUSE users?

[silver forge]

hopefully not

[dusky pebble]

what's the point of streaks, it pops up once a week but I can't review it anywhere on the platform???

[thick forge]

for continuous learning

is from the academy

[dusky pebble]

okay, maybe I understand some of the points - why can't you see the streak data anywhere beyond a simple streak goal on the dashboard or when you complete an item required for the streak or are about to "miss" a streak... there's no historical view??

[thick forge]

when you have the possibility to miss a streak you receive an email notification

about the historical view, not sure, thats gonna depends of how the streak are stored in the htb database

[dim lagoon]

I'm in the files

[thick forge]

could be just a strike counter of 3/3 or can be store all the streaks that do you do in the academy

but what i think maybe is just a counter that reset the sate when the week ends

now i am curious about it

[dusky pebble]

ha, sorry

[thick forge]

np

but is a interesting question, all depends of how htb is handle it in the db

[tame gust]

how do you handel life

[thick forge]

thats depends

emotional or economic

[tame gust]

no

it does not depend

[thick forge]

well

so it does not depend

is eating time

i generate auto dubbed with ai

[dim lagoon]

veiny ahh dih

[azure remnant]

Casual

[dim lagoon]

Yo what

veiny ahh dihveiny ahh dihveiny ahh dihveiny ahh dihveiny ahh dih

[azure remnant]

You should be lucky if ur not in

[dim lagoon]

ALLAH UKBAR!

[manic anvil]

bro wtf

[azure remnant]

bro is on religion generator 🥀

[silver forge]

now I have prompts in my prompts in my prompts

[manic anvil]

can you make a prompt to make prompt to make prompt ?

[silver forge]

that's actually what's happening

I have claude designing a system how to design a prompt to design prompts.

[manic anvil]

this is like writing prompts to ai so it write you prompts for it to generate something

[silver forge]

the issue is, my prompts have become so complex I have to start using multi-level templating

so I have a prompt template skeleton, which gets populated by sub-prompts. and I'm using a prompt to manage them.

[silver forge]

... and again claude launched 18 sub-claudes, and there went my quota. ah well

[thick forge]

what about opencode ?

i not try it yet

[supple plume]

Survive one day more

[thick forge]

but can works

[supple plume]

I tried it

It's kinda slow for free models and dumb models...

But the idea is cool

Also you can add your api keys

[silver forge]

claude's models are suuuperb. although some people say gemini pro is also superb.

[rapid badger]

I am gonna laugh my ass off when they raise the price to something actually profitable

[thick forge]

what models do you try it ?

[supple plume]

big pickle

[silver forge]

I'll pay it. It allows me to do some days more than 5 next people in the office.

[supple plume]

look how dumb it is

[supple plume]

@thick forge

[rapid badger]

I am sure that llm generated draft you gave the lawyers wasnt thrown straight to the garbage

[exotic pendant]

😄

[silver forge]

thing is, all I work with daily are lawyers. and they eat the stuff just fine.

[thick forge]

i gonna try it maybe today or tomorrow

[tawdry sorrel]

Hey there

[loud solar]

hello guys

[tawdry sorrel]

https://tenor.com/view/lonely-will-smith-gif-7930199408076641350

[tawdry sorrel]

Hello ghost

Wsp

Visit account.hackthebox.com/dashboard

[alpine pumice]

Your account is verified though

How are you here talking then?

Unlink and re-link the account

try another browser if you're having browser issues, or private mode, extensions disabled

[loud solar]

ive got that issue

have you tried /verify

[west lynx]

Whoops! I cannot DM you after all due to your privacy settings. Please allow DMs from other server members and try again in 1 minute.

[hollow prism]

guys, could someone help me? i'm strungling when its a good time to start with the labs, if it is when i finished the modules or smt, what do u guys think?

[obtuse fern]

Sometimes it can take a little while, make sure you're also not signed in on another discord

[torpid root]

yoo anyone form Santé Québec? I have some questions for you !

[sturdy thistle]

Hello guys

[west lynx]

Whoops! I cannot DM you after all due to your privacy settings. Please allow DMs from other server members and try again in 1 minute.

[magic blade]

it is very cubic

[azure remnant]

Hi htb can i have lifetime sub

How much watt hours would i spend by mentioning all

[terse dirge]

Mfw when I spend 5+ hours setting something up and fixing stuff just to be told that it's not right because a different system should be used:

[obtuse fern]

If you dont change it youll be forced to leave

Its literally the htb logo, which can mislead people into thinking you're staff.

[zenith pine]

change color

https://tenor.com/view/happy-cat-silly-cat-happy-cat-smile-gif-11748501437476694103

red, evil htb

[toxic sandal]

Am I wrong in feeling like Parrot is more stable than Kali? I feel like I've gone full circle back to the "Kali vs. Parrot linux" question everyone asks at first

[warm ravine]

Why bother checking the roles

[zenith pine]

yes

[obtuse fern]

People regularly don't check the roles

[toxic sandal]

Do you run Bloodhound CE on your host or in VM?

[obtuse fern]

It is more stable, kali operates as a rolling release distro

[zenith pine]

vm

[warm ravine]

Bleh
That's so weird

[obtuse fern]

You expect the average discord user to read?

[toxic sandal]

I feel like I've run into issues anytime I want to update anything in Kali. So much that I've built a Ubuntu build script to mirror stuff... but I don't want to maintian it... so I might just use Parrot and port my history over

[toxic sandal]

Wild, I had a bad experience with that with performance. MacOS M4 in ARM kali via Parallels. Maybe it was a me issue

[obtuse fern]

Its ok

[obtuse fern]

ARM

[zenith pine]

could be arm issue

[toxic sandal]

I've run into a lot of ARM issues but mostly with compiling super old POCs, but not enough that it hasn't been useful

Parallels is super smooth (this isn't an ad) compared to Virtualbox on a gaming pc

[zenith pine]

use arch btw

[terse dirge]

https://klipy.com/gifs/cat-meme-40

[warm ravine]

Hey yo @supple plume
I'm starting to get into the hands on how to connect into a machine

[toxic sandal]

I'm just a cat who uses scripts

[warm ravine]

But I'm curious why VPN needed for it

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[terse dirge]

@warm ravine

[toxic sandal]

VPN is like a wormhole through the internet from your network to theirs

[supple plume]

to avoid making it accessible for the whole internet, they provide a vpn access

[warm ravine]

Ooooh

Yknow that that's actually so clever

I never thought that

[warm ravine]

With that, I understand what does red and blue teams mean

[supple plume]

I also believe they assign a vpn ip internally linked via backend to your account so they can check if you cheated doing machines

[sharp shuttle]

What?

[supple plume]

too late brath

[sharp shuttle]

Are you in Oregon?

[supple plume]

he is next to Oregon in Slovenia

[warm ravine]

Why do I need to cheat anyway

[obtuse fern]

Because the boxes and labs are (typically) on an internal network to prevent random people from accessing and messing them up