general

[austere sigil]

[stable tiger]

yo gurt

gurt; yo

me when i drink aloe vera

but specifically the chemical bullshit for burns

[wanton dock]

i have a dream

[molten bobcat]

Heya friends

I didn't pass the exam

[stable tiger]

which exam

the prostate exam?

[molten bobcat]

The CDSA

[stable tiger]

sorry to hear that man

o

what

why

[austere sigil]

why not?

[stable tiger]

i thought u said that shit was a breeze

[molten bobcat]

It was

[stable tiger]

then how did u fail

[fading sigil]

Omg the burp attack takes for e v e r

[molten bobcat]

My exam was failed due to my report not containing screenshots

[stable tiger]

https://tenor.com/view/fadding-baby-cry-gif-13060743193639102619

me crying for u

[molten bobcat]

Which is not a stated exam requirement

[stable tiger]

then appeal

lowkirkly

[molten bobcat]

I have, they told me that all reviews are final

[stable tiger]

bruh

Wtf

[wanton dock]

https://tenor.com/bmRYD.gif

[austere sigil]

that sucks

it really does

[molten bobcat]

I've made sure to, at the very least, inform the other CDSA test takers

So they won't lose an exam attempt due to a not clearly stated exam requirement

[austere sigil]

keep your head up

[green kite]

Sorry to hear buddy

[silver forge]

just offer to mspaint them some screens

https://tenor.com/view/orangutan-driving-gif-24461244

[novel oriole]

Anyone from support???

[silver forge]

I can support you - YOU CAN DO IT

https://tenor.com/view/just-do-it-shia-la-beouf-do-it-gif-4531935

[novel oriole]

Just get my acc sanction free 😥

[silver forge]

what do you mean sanctions?

[devout sail]

Blocked mini

[azure remnant]

cant solve skill assesements on attacking common applications

am i cooked

[devout sail]

Try harder

-# twss

[silver forge]

"common" applications you will never see mostly, but yeah

[azure remnant]

i know ill try harder . i have the passion 🗣️ . everytime i look for the solution, i be like 1000 steps from it 🥀

[azure remnant]

uncommon ahh applications

[frozen zinc]

Leave lazarus

[novel oriole]

Idk htb making my life hard

[azure remnant]

yall be criticizing the modules

its not the first time

[novel oriole]

Can't access anything

[azure remnant]

= modules are bad

[silver forge]

maybe you are just destined to play by yourself

[novel oriole]

I've been yapping about it early as well.. Gave 0 reasons for it

Gave me a green signal yesterday that I'm good to go

Again got sanctioned today

[frozen zinc]

Probably was something automatic and you will be fine

[novel oriole]

Again they demanded id card etc which I sent again and awaiting their reply

[frozen zinc]

your IP must be triggering stuff

Sadly the protocol for your problem must be very annoy

[novel oriole]

Yk bruh I don't wanna say this but I'm struggling emotionally these days I committed fully to htb and now facing this.. Makes everything worse

[green kite]

Glad it’s sorted @novel oriole

[frozen zinc]

is normal you feel like that bro but dont worry you wll be fine

[novel oriole]

Huh.? It isnt

[green kite]

Ooos sorry I read that wrong

[heady sage]

Anyone for SSOS

[thick forge]

[novel oriole]

All I want is access to full htb bruh i also got the student subscription and planning to have it till I graduate uni which is like 1.5 years from now
Paid money for 2nd month earlier today and got sanctioned completely

[frozen zinc]

Im pretty sure you will be fine if they gave you clearance once, thats was something triggered by your IP and bcs from where you are the protocol to solve the issue must be the most annoy issue in the entire platform

[devout sail]

@scenic maple

@thick forge

[silver forge]

just send support a message and chill

[thick forge]

[devout sail]

[thick forge]

i gonna need to build a realtime traslator

[novel oriole]

Well I hope so.. They did clear me yesterday I have their email
Today it happened again and worse.. Before it was only labs which were sanctioned now full account is.. Including academy

[thick forge]

to connect my family

[devout sail]

Or use vencord

[thick forge]

what is vencord

searching

[devout sail]

Oh they don't speak kypanz language?

[novel oriole]

I did.. They replied quick , I provided credentials.. No reply till now..

[thick forge]

no

[devout sail]

Learn non kypanz language then

[thick forge]

in my family have a lot of languages

[frozen zinc]

That's why it seems like something automatic got triggered, you will be fine

[devout sail]

Instead of eating pizza

[silver forge]

you do realize they don't work 24/7/365

[thick forge]

English, Spanish, Ucranian and Rusia

[devout sail]

Russian

[frozen zinc]

Kypanz we are in the same team now

[thick forge]

so now i gonna need to build something for insta translation

[novel oriole]

I hope so.. I'm willing to give my all to htb my goal is to clear Cpts before I graduate uni

[devout sail]

Make it rn

[thick forge]

i am working right now xD

[devout sail]

With these many AIs there will be something good as long as u don't care about privacy

[devout sail]

No more slap today

[thick forge]

maybe the weekend i gonna build a half duplex in realtime to translate

[novel oriole]

Yup sir.. Last time they replied 8 days later and again this happened.. And Im not even receiving any mail indicating the reason for this so kinda sucks but yeah they're humans w jobs too I get it

[devout sail]

Make Full duplex bridge rectifier 🔥🔥

https://tenor.com/view/electroboom-full-bridge-rectifier-the-grand-rectifier-gif-4452298672528044478

[frozen zinc]

you got this bro, just breath, enjoy the breeze...

[novel oriole]

Brush I really hope.. Tysm

🙏

[devout sail]

Do some sword practice

[frozen zinc]

@thick forge How many boxes are you going to solve this season?

[soft delta]

i got accepted for my first cyber job :DD

[sharp beacon]

\o/

[soft delta]

yippayyy!

[sharp beacon]

やった

😉

[supple plume]

gaddayum congratulations

[frozen zinc]

https://tenor.com/view/happy-dance-happy-dance-gif-20350305

[soft delta]

thank you !!

next up

leaked secrets

jk

[devout sail]

[rapid badger]

Thats the spirit

[supple plume]

[frozen zinc]

Next?

LOL

[gray wraith]

Congratss

Gj gj

[gray wraith]

I dont understand

[frozen zinc]

I dont want to say it too loud

(but put it down fast)

go

stop typing

[soft delta]

shhh was rushed for the application more update soon but ive only done seasonal so 💀

[soft delta]

😔

the shutdown button

[frozen zinc]

writeup for active boxes are not allow xD

thats why i did the joke about: next?

just put it down fast

[soft delta]

yeah ik thats why

but the soc lab

juicier

[frozen zinc]

Dude you have an active box writeup in your site

[soft delta]

what .

[rapid badger]

[soft delta]

oh SHITTT true

[frozen zinc]

FIESTA

[soft delta]

my bad thanks for pointing it out 😭

[thick forge]

not sure

[soft delta]

downnn

[thick forge]

i am be used to translate things to my family now

[frozen zinc]

is fine just put it down before the handy dandy bot come

[thick forge]

kypanz translator

🤣

[soft delta]

truetrue

can you put active machines behind password though? saw someone doing that

[frozen zinc]

yeah

[thick forge]

task for the weekend, build a realtime translator

[frozen zinc]

that is allow

[thick forge]

[soft delta]

hell yeah ¨

[frozen zinc]

3 or 4?

[soft delta]

hope it delivers fruit feller

[thick forge]

not sure, i just try one time seasons

maybe the weekend i can do one if i have time

[frozen zinc]

We will be grinding

the team you know

We can give you a few pushes

[thick forge]

[frozen zinc]

you can do it!

[silver forge]

https://tenor.com/view/monkey-gif-10597550588380004065

[thick forge]

me after finish a section module

[maiden anvil]

same project as last week but i got this cool pi blade hanging out while I print a shelf for the new NUC

looks pretty cool imo

[zealous charm]

Looks sweet, what are you using the NUC for?

[maiden anvil]

casually pwning lxc's from other lxc's in proxmox

but with the 3rd NUC I can cluster now, so that's the next project

but it's also not too late for me to convert the whole thing to a k8 cluster

not really sure which direction I want to go but leaning toward proxmox

just kinda makes sense cuz I'll be building an evasion lab in there with Elastic

wwyd @zealous charm?

[zealous charm]

A few more nucs and you can run a local AI fleet

[zealous charm]

I got the day off today so I am sitting at good personal computer instead of bad work computer

[maiden anvil]

I might be able to with just this tbh will be setting around 96GB of RAM and 42 cores with 60 threads

[maiden anvil]

did you build one? 👀

[zealous charm]

No I havent done a computer build

Just doing some bug hunting now, then will head to the gym

[maiden anvil]

sounds nice

I want to workout but every gym in my area has some stupid exit scam with their contract

could go for a walk in the freezing cold ig

[maiden anvil]

what day is it today?

I hope full body day that's my favorite

[broken mural]

مساء الخير يا شباب حد هنا بيحل لابات HTB محتاج اسئل عن كام حاجه عشان دماغي قفلت خالص

[terse dirge]

English only pls

[broken mural]

okay

im sorry

[zealous charm]

Monday is upper body. I generally just do upper/lower/upper/lower rather than PPL or anything

[rapid swallow]

does anyone know a prominent and well know certificate or course for physical engagements and lock picking

[broken mural]

need solve for this lab i have got trying more things to doing it DOM XSS

[frozen zinc]

Lock picking is something you can learn by picking proper locks, like dont buy the transparent one

and then just try to open every lock you see, once you know what you are doing get the right tools and thats it

But red teamers most of time rather lurk at the doors and use stuff to block it or to stop it from closing than pick the lock, i think

[rapid swallow]

yup i get it

tailgating

is what my friend does

[rapid swallow]

i see, guess try it on my own door

[frozen zinc]

Probably wigs and delivery clothes are more useful that lock picking xD

[heady sage]

HAS ANYONE HERE DONE SSOS

IM GONNA PISS ON THE MOON

[rich mesa]

can i not download any other tool in pwnbox?
sudo apt install medusa
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
E: Unable to locate package medusa

Getting this always

[frozen zinc]

feels good when you open your own door

[rapid swallow]

u do physical assessment?

[frozen zinc]

Well.... I have stole Warhammers from supermarkets when I was young, slept in some hotels, get in to concerts without paying, squad a few building and explore forbidden places. but i dont really do assessments xD

yet

[rapid swallow]

my co worker does it

asked my manager to let me go with him

but he said learn some lock picking

and we can try to arrange it

and some other things

need to recap with him

[frozen zinc]

that super cool

[rapid swallow]

yeah

one was wifi pentesting

which is already done tho

so other 2 needs to be done

[frozen zinc]

I mean if he say learn some lock picking do it

but there is a difference from trying when you are chilling than trying when you can get arrested

I recommend you to expose yourself before you are on duty 💀

So you know how it feels

[rapid swallow]

yeah theres an agreement and often a meeting with the contracters before hand

u do end up gettin g arrested sometimes

but that agreement gets you out

[frozen zinc]

Yeah i get that

What i means is that your hands

will behave differently

and you better have a good grasp of what you are doing

If that agreement give you enough confidence then good for you

[iron galleon]

👋

[frozen zinc]

Are you rebranding?

[iron galleon]

yeah

[frozen zinc]

cool

[molten bobcat]

I wanna go on a walk

I haven't done that in a while and it's warm enough now

[frozen zinc]

https://tenor.com/view/do-it-star-wars-emperor-palpatine-palpatine-gif-799657800635657398

[green kite]

https://tenor.com/view/go-for-it-bruno-tonioli-britain's-got-talent-you-can-do-it-get-going-gif-17157480863386292661

[thick forge]

well guys now i have polonian people in the lands too

my family is like a mix of country

[winged ridge]

is it even possible to solve Blinded

it's freaking hard

so I need to calcute the distance of bytes on each round or what?

https://tenor.com/view/the-office-hardest-thing-ive-ever-had-to-do-i-havent-had-a-very-hard-life-ed-helms-andy-bernard-gif-17634765

[thick forge]

you just need to understand binary things

how can hard can be

[winged ridge]

did u solve it?

[thick forge]

no

we are in a trap

[winged ridge]

https://tenor.com/view/cope-bird-trap-bird-trap-bird-cope-gif-9878295031528154539

[supple plume]

[exotic pendant]

😄

[fading sigil]

I have to be doing something wrong there is no way this is right CD

[supple plume]

wdym

[fading sigil]

Doing the burp intruder and I have a feeling im definitely not supposed to sit through all 9,000+ flies to load in the attack

[supple plume]

wdym sit through 9k+ files

[fading sigil]

ah cant send images but its going through like 9,000 files like one by one

[supple plume]

hmmm

so you're fuzzing with intruder?

[fading sigil]

Yes

[supple plume]

ok then

is not the best way tho, but is not wrong

is it a htb box?

[fading sigil]

Mhm!

Do you want me to send the module?

[supple plume]

don't worry I dont do modules xd

so the module told you to fuzz with burp?

[fading sigil]

Yep!

Using Burp intruder

[supple plume]

burp intruder throttling is a bit annoying if you dont have burp pro

the way I fuzz is this I set up feroxbuster or ffuf proxied to burp to track the findings

I have a bash script but the idea is this one:

feroxbuster --url "$target" --wordlist "$wordlist" --redirects --burp --silent -g --no-state

this is similar to ffuf or gobuster

and it will track the requests to burp proxy history

and show the tree in the dashboard

[fading sigil]

I se

[supple plume]

burp intruder always felt like an unpractical demo version

[rancid snow]

yeah Ive never used it except like once for a lab

and that was me going 'holy shit Im never using this'

[supple plume]

I even prefer making python scripts proxying requests to burp before using intruder

[thick forge]

whats on going

on going whats

[sturdy thistle]

Bed

[thick forge]

is working time

👷

[sturdy thistle]

11:30 pm

[thick forge]

19:36 here

time to build the house

[ocean marsh]

same here

https://klipy.com/gifs/cat-whuh-cat-huh

[gaunt gale]

HTB Academy has gotten much easier as of today

I think zoloft is starting to work

its intermittent right now but my focus today has been much better if not perfect.

redoing module I did a long time ago. doing last section today.

how is everyone else here?

[vast galleon]

Tired

Works sucks the fun out of computer stuff

[devout sail]

what's left if no fun

[gleaming moat]

how do i know if im good enough to do htb labs? i barely complete easy machines without writeups tbh

i mean i couldnt beat the easy machine without an unofficial writeup on google

yet the starting point machines were too easy

[molten bobcat]

Labs are fun puzzles

Not to be used or seen as live representations of what it's like to be a pentester

Some of them are like that, sure

But they're not all designed to be real lookin

[devout sail]

I've done like 50+
Still not good enough, sometimes i open up easy machine and my brain freeze.

You just start doing it, take help, read writeup if available (obligatory for retired machines)

It's either too easy cuz well there was nothing to do, or too hard cuz u didn't know about that thing before doing that machine.

[thick forge]

i thinki gonna sleep

no working today

[scenic maple]

[cerulean bloom]

me going to my grandmas

meaning….. GAMING

I can game in one place: my grandmas lol

[devout sail]

Pattern recognition time
https://cdn.discordapp.com/attachments/585739600971169809/1473082907475050610/IMG_1986.png?ex=6994eadd&is=6993995d&hm=c185ef85e65578a3271edc05a2458dbc12ed4f9c54c1cceb088cbe9b593b8dbf&

[mystic harbor]

How You up early

[devout sail]

Haven't slept
Office at 5am

[mystic harbor]

Today i woke up at 4

[maiden anvil]

memeing

[zealous charm]

In 2 years the go-to post-exploitation tool will be claude code

[sharp shuttle]

Isnt that just right now?

[jovial quest]

Hello everyone!

Good afternoon!

[lofty warren]

[jovial quest]

[maiden anvil]

claude code exploiting bugs introduced by claude code that were discovered with claude code

[sharp shuttle]

lol literally

if you want to get rich create the problem then the solution to it

[molten bobcat]

Heya brath

[iron galleon]

^_^

[sharp shuttle]

Hi cloud

did you resolve your thing

[molten bobcat]

No

[zealous charm]

How long until AI is making up/discovering entirely new vuln classes that people don’t know about 🤔

[signal mica]

In 2 years me and homebrewer will be 在这个宇宙的混沌中，我们的灵感早已D̵̪́i̸͉͌ë̶̝́d̶̠͗。S̵͈͠u̶̻͌c̶͈͗c̶̩͝u̸̠̎m̸̨̍b于V̶o̵i̶d̸，连螃蟹都在Ë̶̝́n̶̪̾t̶̠͗r̸͉̆õ̸̡p̸͉͌y̶͈͝里感到尴尬。

[sharp shuttle]

Already happening

Brother if only you knew how bad the robot race is already with rogue bugs

[molten bobcat]

I don't anticipate it being resolved

I'll just try again and if not, oh well

[signal mica]

Gl kloud

[sharp shuttle]

I think thats best, dont be so emotional about it. You informed them and they should fix it

But ultimately you have the option to succeed

[molten bobcat]

The only reason I'm emotional is because my effort feels unseen

[cerulean bloom]

https://tenor.com/view/cat-chat-cat-fall-hello-chat-cat-gif-24961178

[sharp shuttle]

I get it dude

[molten bobcat]

It's just a kick in the balls. I'll recover

[iron galleon]

https://tenor.com/bmRYD.gif

[sharp shuttle]

The irony is your report not being read is my reality for eternity

[jovial quest]

Me

[cerulean bloom]

oof

[cerulean bloom]

that sounds rough

[sharp shuttle]

thats pentesting man

nobody fucking cares

[molten bobcat]

I'll believe they read my report when they directly quote the content lol

[frozen zinc]

https://tenor.com/view/briankik-turn-around-hedgehog-mrbond-gif-24320492

[sharp shuttle]

you dont do this job for recognition

you do it because nobody else will

[iron galleon]

i do this job for my mom

[sharp shuttle]

https://tenor.com/view/muscle-man-regular-show-my-gif-26029512

[iron galleon]

XO,,

[cerulean bloom]

hoping for the best!!

[iron galleon]

donutmaster

wyd if i eat you

[cerulean bloom]

yes

[cerulean bloom]

u can’t

I’m an invincible donut

[iron galleon]

not for long

[cerulean bloom]

lol

[frozen zinc]

I work once in a place that have burgers on donuts instead of buns

it was a pain in the ass to prepared them with all the fucking sugar in the grill

[iron galleon]

wyd if i put you on the grill with a bunch of sugar

[muted olive]

making up vulns which dont exist? already does that

[finite zephyr]

rahhhhhhhhhhh

[frozen zinc]

the sugar is already on him

he will sweat it

was also served with lotus sauce

[rancid snow]

they just wanted to give Cloud the authentic blue teamer experience

[frozen zinc]

i dont know how many heart attacks that recipe caused

[thick forge]

i need this, stoled

[frozen zinc]

https://tenor.com/view/coruja-biriguijonson-coruja-biriguijonson-extreme-path-bora-bill-gif-2610579943926034716

[frozen zinc]

https://tenor.com/view/ёж-gif-26077268

[finite zephyr]

RAHHHHHHHHHHHH

[frozen zinc]

https://tenor.com/view/redrum-the-shinning-danny-lloyd-gif-13916375

[sharp beacon]

slop or bop?

[frozen zinc]

slop that work

[sharp beacon]

slop 4 tha clurb

[iron galleon]

i don't know if you realize this or not but i'm geeked

[frozen zinc]

I dont know why it remind me to the shinning

[maiden anvil]

https://tenor.com/view/痛い-じゅんや-junya-junya1gou-激痛-gif-21977894

[iron galleon]

these bitches got me stimming

[frozen zinc]

https://tenor.com/view/clanker-died-gif-17244828584521304511

[iron galleon]

can we get much higher

[thick forge]

[west venture]

I think I found my new favorite thing to do. In the bus, if you randomly look at some random corner inside the bus and keep staring at it, people be looking at that direction too bro ts is so funny lmao 😭

[sharp shuttle]

i love this

[past elbow]

is this what they call social engineering chat?

[civic lance]

Hey chat

What is critical thinking?

How would you define it?

[sharp shuttle]

what video game do you play

ill show you

[turbid goblet]

use dota 2

[civic lance]

Huh idk

[civic lance]

CS2?

[azure remnant]

Ive literally one game on my computer since years

Battlefield 2

Yes, the one from 2004

[rancid snow]

mewgenics

[alpine pumice]

hell yeah

been playing that recently

isaac was s+ tier

[ornate ibex]

Helo

[terse dirge]

No helldivers 2?

[sharp shuttle]

why is the best gun in that game the best

[civic lance]

AK 47

[sharp shuttle]

Why though

[civic lance]

It's comfortable to use

[sharp shuttle]

thats all you got?

[civic lance]

yes 😭

[sharp shuttle]

bro...

Critical thinking would be dissection of the reasoning

[thin peak]

test

[civic lance]

OOo

why is that word censored?

rblx?

I guess HTB sees it as a competition

But there is this game called Dueling Ground, and the best weapon I'd say is the spear

[sharp shuttle]

For instance, if something is meta, if you cant figure out its counter you are not capable of critical thought, you probably 'follow the meta'

its also possible to go along with the meta after understanding the counters

Card games are the best example of this

[civic lance]

and I say the spear is the best weapon, because it's one of the weapons with a long range.

[sharp shuttle]

And what counters it?

[civic lance]

You can strike players from a distance, while maintaining your distance

The counters I'd say are short range weapons

[sharp shuttle]

to a spear?...

[civic lance]

Cuz players with short range have to close the gap

Year

the spear recover rate is slow

In close combat

[sharp shuttle]

you are saying the weapon that defined combat for centuries is countered by short weapons?

[civic lance]

Its a lego game 😭

Not realistic

[sharp shuttle]

Okay so what you meant to say is getting in front of the spear is the counter

[civic lance]

Yes, cuz u can tank a hit. and Deal damage at a quick rate

[sharp shuttle]

which is true, so the next logical question would be then why is the spear the most popular?

[civic lance]

Strike players from a distance, allowing u to quickly fall back from any potential hits

while*

Maintain distance

[sharp shuttle]

and in any positionally based game, game theory would suggest that if everybody is using spears you should camp corners

right?

[civic lance]

Camp corners?

[sharp shuttle]

hide on the sides of entrances

[civic lance]

Oh no no no

This what the map look like

Its basically fighting in a round confined area

[sharp shuttle]

Its open?

[civic lance]

Kinda like fighting in the octagon in UFCA

UFC*

[sharp shuttle]

okay if its open then there is no counter play

[civic lance]

There is

[sharp shuttle]

and that suggests bad game design

[civic lance]

Blocking and parrying

[sharp shuttle]

oh god

[civic lance]

and dodging

[sharp shuttle]

lets apply this to a risk assessment

what is your exposure to people using auto parries/auto dodge etc?

[civic lance]

frequenet

[sharp shuttle]

with bots/scripts

exactly

[civic lance]

depends on the player skill

[sharp shuttle]

because game theory would suggest that cheating is rewarded

in a game like that

[civic lance]

Do yk how good is bitfron anti cheat is?

I think that what its called?

[sharp shuttle]

i dont think any anticheat is good

ive spent my whole life circumventing them

[civic lance]

OOh its called byfron

[sharp shuttle]

any heuristics based system has thresholds that can be gamed

[civic lance]

u ever circumvent byfront anti cheat?

byfron*

[sharp shuttle]

you have this idea that its infallible which is half of what sells anticheat to people who follow rules

the mechanic is to deter you from cheating without evidence using sunken cost fallacy

what makes it so special?

[civic lance]

damn

Exploting was pretty common

before the introduction of byfron anticheat

But after the introduction

it's less

[sharp shuttle]

and you know how it works right? it evaluates input at the game engine level, guess what happens when you modify the inputs to have delays?

anticheat stops working

sure, the cheater may take a hit now, but they still win in a binary outcome

[civic lance]

Well that if ur on linux

[sharp shuttle]

regardless, critical thinking comes down to cheating the game, whether thats ethically or not

[civic lance]

How I view critical thinking, is just asking questions. and finding trust worthy sources to back it?

[sharp shuttle]

what if the trust worthy sources are deceiving you?

[alpine pumice]

at some point you have to trust the experts

you can't go doing your own research on everything

[civic lance]

Figure out the credibility of the authors?

[alpine pumice]

you have to make a judgement call and sniff out the fakes

[sharp shuttle]

if i am committed to playing a game 8 hours a day im going to learn everything about it, i am the expert

and a game is defined by anything in life

not just video games

[sharp shuttle]

credibility can be falsified

and many times, should be

rapport gaming is essential to success in any game

[civic lance]

Usually I'd just find other credible authors who come to the same conclusion?

[sharp shuttle]

there you go, now youre thinking critically

the correct approach is comparing all perspectives

look for inconsistencies

then test them

[civic lance]

Oh okay

So in a nutshell it's questioning things, and looking for many angles?

[sharp shuttle]

i hit legend in hearthstone every season by never playing the meta because i create countermeta decks that always work

why?

because everyone is playing the meta. my exposure to something that beats me in below 50%, therefore my win rate becomes high than 50% and leads to ranking up

[sage epoch]

based

[civic lance]

Show proof

[snow wraith]

Need small help regarding xfreerdp, anyoone up?

[sage epoch]

My friend decided to learn almost the entire warhammer 40k lore just because the recent game came out

[alpine pumice]

hot take: ranked doesn't mean shit really

[sage epoch]

Actually a genius idea

[sage epoch]

spending forever learning the counter to each meta

rather than mastering the meta

[sharp shuttle]

i agree

[sharp shuttle]

you learn more about the game this way

[sage epoch]

I usually just stick to learning one thing, meta or not, as much as possible in a game

[alpine pumice]

bring back elder scrolls legends

[sage epoch]

Although that doesnt work well in russian war games

[sharp shuttle]

There is no reason to chase rank in a game with guns

everybody is cheating

[sage epoch]

battlefield moment

I meant games like world of tanks though

in FPS games I don't care at all for rank

[sharp shuttle]

your exposure to cheating is roughly 90% or higher

why would you play that

[sage epoch]

It used to not be so bad

[alpine pumice]

hot take as an ex-fps professional: you suck at fps's and call people cheaters when they're not cheating

[sharp shuttle]

it used to be not that bad, except for gamebattles cheating

[sage epoch]

Rocket league stripped any amount of care I had for climbing ranks in high competetive games

[sharp shuttle]

qvaults, throttling, etc

[sage epoch]

Lag switching used to piss me off back in the day

[sharp shuttle]

yep.

[sage epoch]

Max ping i had was 32000

[alpine pumice]

lol lag switching

only works on console garbage

imagine not playing on dedicated servers

[scenic maple]

is that 32 seconds?

[sharp shuttle]

lol

[sage epoch]

i think

[sharp shuttle]

games over by the time you can shoot cause you are always on killcam

[scenic maple]

i once found a out of bounds ssrf
it was async but around 20 mins ish

collaborator came in clutch

[sage epoch]

My favorite thing about rocket league is it's impossible to cheat your way to even top 1,000

At some point players are so good at predicting ball movement that no known hacks can keep up

Side note, doing a 2v6 on age of empires 3, I had a 1 fps

[muted olive]

waiting is annoying

[scenic maple]

marked as p5 couldnt escalte

[muted olive]

found an out of bounds sqli once took 24 hours to trigger

[muted olive]

why

[scenic maple]

so i could make http requests as a system

[muted olive]

ssrf by itself is a vuln

[scenic maple]

but i couldnt see the outpiut

so i couldnt show impact

[muted olive]

oh

[scenic maple]

worst i could do is tell them internal machines ip

[muted olive]

that is still P2/P3

what else could you do

[scenic maple]

thats it

i just could make http get requests as a internal machine

not even see output or anything

[muted olive]

yeah, maybe to internal endpoints 👀

[scenic maple]

i guess i could have dont a scan by comparing time things but that would have been too much wsork

also i had to wait 20 mins

[alpine pumice]

https://tenor.com/view/money-crying-woody-harrelson-wiping-tears-with-money-gif-6945518

i found cve's

give me a delayed ssrf of 24hr sql response any day

[scenic maple]

[ornate ibex]

Howdy

[novel oriole]

Anyone from support?? 😕😕😕

[sage epoch]

HP released laptops you can lease

not lease to own

permanent lease

[eager gust]

Morning

[novel oriole]

Yo mods can u link me up w team or support person?

I have a serious issue

My subscription also is being wasted like this

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[terse dirge]

@novel oriole

[novel oriole]

Already tried that bro

They fixed it before and now it occurred again and much worse this time

[terse dirge]

Not sure what you mean but just wait for support to get back to you

[sharp shuttle]

i DEMAND support NOW reeeEEEEEE

[novel oriole]

Sanctioned

[ornate ibex]

Did you reach out to us? @novel oriole

[sturdy thistle]

morning

[green kite]

hello Mick

[sturdy thistle]

heyo

all good?

[green kite]

yeah all good

how are you?

[sudden bolt]

Um hi guys, I'm here just to ask about the subscription discount on the university domain, is there a supporter?

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[sturdy thistle]

also good thanks

[green kite]

https://help.hackthebox.com/en/articles/7973133-getting-the-student-subscription

To qualify for the Student Plan, you'll need to change the email on your existing account to the email provided by your academic institution or add it as a secondary email to your HTB Account; you don't need to create a new account.

[sudden bolt]

Tysm

[muted olive]

💪

bro's calling out gemini

[obtuse fern]

Emma said she would look into it yesterday and reach out to the relevant team since it appears they already did the things

[ornate ibex]

Yeah, checked the ticket and I've highlighted the issue to the CS team.

[wary pumice]

Hey everyone, quick question, anyone know any active machines that have subdomains? I'm redoing the vhost enum and subdomain enum plugins for autorecon and need a machine to test it on

iirc soulmate has subdomains?

[hidden lark]

i need to test my lab with box
if anyone would like to help me to test
dm me

thank you in advance

[tawdry sorrel]

One day I gonna get my first zero day just like this

[meager kernel]

soulmate got retired day before yesterday i think

[wary pumice]

goddamnit

any one of the active machines that have subdomains?

[supple plume]

I'll take a look in a bit

[terse dirge]

@austere sinew time to wake up and do kubernetes

[wary pumice]

Thank you!

@austere sinew ping

[terse dirge]

Don't think you can't escape kubernetes either twin

[novel oriole]

Us?? R u from the support team ? If yes then yeah I did.. Waiting for my compliance issue to be resolve so that I can continue my study

[terse dirge]

Kubernetes time!@supple plume

[novel oriole]

I'm hating every single second of time rn.. I was back to the consistent studying everyday but it had to be ruined 😐

[terse dirge]

Did you set up kubernetes?

[novel oriole]

I'm checking my gmail every hour expecting reply from Sh3ll.. I'm so frustrated

[novel oriole]

What even is that?

[terse dirge]

Docker but on steroids

[novel oriole]

I'm literally a beginner dude idk this stuff

On Junior analyst path

[terse dirge]

It's the worst and best thing ever invented

[supple plume]

[novel oriole]

I also have student subscription WHY THE HELL WOULD I STILL BE SANCTIONED

[terse dirge]

https://youtu.be/PziYflu8cB8

[novel oriole]

Let me see

[terse dirge]

Sounds like you ran a tool that you weren't supposed to

[supple plume]

hey can I dm?

your question

[novel oriole]

I ran 0 tools haven't even opened 1 yet other than terminal on Kali Linux

At least I deserve to know why I got sanctioned.. There's no reason mentioned

[supple plume]

well Ill dm anyway since you asked for subdomains, I dont want to say it here since it could be considered spoiler @wary pumice

[wary pumice]

Aye np

[novel oriole]

Yesterday someone introduced me to CGNAT
And I had this issue but Emma here told me its not the issue

[languid wraith]

hey guys i am new

[rose onyx]

You're alive

[wary pumice]

Aye sir! College is keeping me busy

I’ve had final exams for the entire month of December lol

January was busy cuz family stuff, finally getting back into doing HTB haha

[languid wraith]

guys can get help in how to start

[rose onyx]

Send a request

[wary pumice]

Off on the team

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[supple plume]

@languid wraith

[languid wraith]

ty

[supple plume]

@lime trout hey Emma I want giveaways please

[terse dirge]

Wassup Gubarz

[rose onyx]

Nm, shiny new discord role, that's about it.

[terse dirge]

Nice congrats on cape

[tender sparrow]

why isn't there a pen testing room? in serious conversation

[supple plume]

Rooms are in THM

[tender sparrow]

i k i don't mean like a room but there is general magical tunes and in serious conversation there is red team blue team programming etc.. does anyone know why there isn't one for pen testing?

[green kite]

#hacker-lounge ?

[tender sparrow]

it says i have No Access

[supple plume]

Hacker-lounge like sparkling suggests but you can't see it I believe until you get hacker rank

[tender sparrow]

ohh ok

[deft bay]

howdy

[meager kernel]

I used Niri

[thorn field]

Hi everyone

"Beginner here! Any tips on where to kick things off? 😄"

[split patio]

yo

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[terse dirge]

based

[devout sail]

Corner

[supple plume]

@obtuse fern hi marcie

@sturdy thistle I'm listening 👂

[ornate ibex]

I was. I checked and there is no sanction indicator on your account. Did you log out and log in?

[hearty meadow]

@everyone hello friends, I want to ask if there is a free active directory engine for beginners on HTB

[rugged sentinel]

https://tenor.com/view/nerd-final-fantasy-vii-ffvii-frog-dance-gif-16104435

[tender sparrow]

do i need a wifi adapter to crack a wifi password? can't i just use my laptop with kali linux instead (root installed) btw not illegal i asked the owner of the wifi first

[supple plume]

for (;$day > 0;$day--) {
    grind('/dev/null');
}

it's valid php btw

[novel oriole]

Brother I don't even see logout option anymore

[ornate ibex]

Do you have a different account from the email that you reached out to us.

[novel oriole]

Nvm I see it I'll try to logout login

[novel oriole]

Same account

[ornate ibex]

ok ill speak with them

[novel oriole]

I'll send u sanction I'd in dms

And screen shot of interface

[ornate ibex]

Yes pls

[novel oriole]

Too one thing is weird

Yoo

The sanction date yesterday was Feb 16 as it happened yesterday

Now it shows 17th feb

Wtf is going on

[ornate ibex]

Can you DM me please?

[tender sparrow]

how do i get that?

[mystic harbor]

[supple plume]

Hacking active machines

[tender sparrow]

on discord?

[obtuse fern]

imagine trying to ping everyone

[obtuse fern]

you need to pwn active machines and challenges on https://app.hackthebox.com

[tender sparrow]

ohhh thanks!!

This is a very helpfull community

[sturdy thistle]

until you get trolled

[obtuse fern]

there is a 1/365 chance of that happening daily

[tender sparrow]

ok

[supple plume]

marcie doesnt like me 🥀

[ornate ibex]

why doesn't he?

how do uk?

[supple plume]

careful is "them"

[mystic harbor]

Need to ding dong echo

[supple plume]

I try saying hello marcie some days they never answer back

[supple plume]

[novel oriole]

@ornate ibexsir! u wont believe how grateful im rn tysm
but i have some questions...

1. WHY IT HAPPENED?
2. CAN I LOGIN ON KALI LINUX?
3. WILL THIS HAPPEN AGAIN?
4. AM I GOOD TO GO NOW?
5. WHAT PRECAUTIONS SHOULD I TAKE?

i dont wanna face this hurdle ever again

[ornate ibex]

They'll clarify it

[sturdy thistle]

hey @supple plume

Reach out to support please

[supple plume]

what why?

[ornate ibex]

Uh, I always used to use geneder neutral prepositions this time 🤷‍♂️

[sturdy thistle]

not u

[mystic harbor]

you need it

[novel oriole]

yk what? when i created my acc last month i coudlnt acces labs but now i can access full! even though im not ready for labs but it feels great to have 100% access now

[mystic harbor]

💯

[sturdy thistle]

Please contect support only they can help you

[supple plume]

is just Marcie that asks to use they/them

[novel oriole]

they resolved it and im happy just wanna know why it happened

[sturdy thistle]

ask support

[supple plume]

ok Ill ask support

[sturdy thistle]

only support can explain and no mod or something here

[supple plume]

@sturdy thistle mickhat asked me to ask support you're customer service right? I need 2 beers

[sturdy thistle]

i'm not anymore

[supple plume]

real;ly?

what thappened

[sturdy thistle]

yes

i moved to a different department

[supple plume]

which one

[sturdy thistle]

Academy

[brazen vale]

hey guys I bought Pro Labs subscription, but still can't access them.
What should I do now? Contact the support, or there is some time frame for the app to load my subscription?

[ornate ibex]

Do you see any errors?

[brazen vale]

I don't think so.
Also I got the invoice on my email

[ornate ibex]

Then wdym by cannot access?

[brazen vale]

There is still "Subscribe" button, and app is asking me to pay

[ornate ibex]

Then reach out to the support

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[brazen vale]

Will do! Thanks bro! :))

[green kite]

have you tried logging out and back in?

[brazen vale]

yeah..

[muted olive]

I want to join HTB's meme development department, where can I apply?

[novel oriole]

guys should i try labs rn or not? im absolute beginner and yeah after completing the path for CJCA which is the junior analyst path would i be able to do any lab??
what do u guys recommend?

[terse dirge]

I recommended finding a specialization and sticking with it

[novel oriole]

like i should first complete the junior analyst path before jumping to labs?

[terse dirge]

Find what you do and don't like in cyber

[terse dirge]

No. #general message

[novel oriole]

then?

[terse dirge]

Specialize in what you like in cyber.

[novel oriole]

im yet to explore everything

[terse dirge]

Now is your chance to do it

[novel oriole]

i see

[terse dirge]

Find what you like, git gud at it and specialize

Avoid certification hell too

[novel oriole]

so cjca, cpts is a no go?

i joined htb solely for cpts.. someone misguided me a bit and when i joined htb i realized i need to do the junior path first

ill do the path of cjca i may or may not attempt cjca but cpts.. ill 100% try to reach that level and give exam one day

[green kite]

You got this 💪

[terse dirge]

You don't need to do any paths if you don't want to. Cyber has many niche jobs so explore and don't lock yourself to just one part until you find what you enjoy.

[valid fox]

hello guys i am new to this server , i am here to learn cyber sec

[terse dirge]

What part of cyber?

[valid fox]

blue team

security analyst

[cunning furnace]

hi i bought cwes voucher by mistake can i ask for refund ?

[novel oriole]

the junior path touches both defense and offense i think ill figure out something after doing it

[terse dirge]

Cyber isn't just offense and defense there's also engineering things that the blue and red team use like malware or a SIEM and EDR.

[terse dirge]

HTB has good resources for that

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[terse dirge]

It might say in there

[novel oriole]

im slowly learning about new stuff everyday and getting surprised everyday so ur right

[valid fox]

thanks

[valid fox]

i had a question

is it worth learning cyber security in 2026 ?

i mean soc

[novel oriole]

@terse dirgebtw ur name reminds me of a place in elden ring called caelid where hte infamous Radahn boss is found

[terse dirge]

There's tons of things like radio security, iot, hardware hacking, malware development, cloud security, reverse engineering, forensics, cloud pentesting, soc architecting/engineering

[valid fox]

some people were saying ai will do the soc work so its not worth learning it

[terse dirge]

No ai will never replace soc analysts

[novel oriole]

what about tier 1?

[terse dirge]

It might help with anomaly detection but it'll never be better than real people

[wild tree]

Can you technically change your HTB name?

[supple plume]

ai will only replace you if you're useless

[valid fox]

okeey

[wild tree]

typed it out by mistake and now it's wrong

[terse dirge]

Not sure, I've never worked in a management position or have had access to AI tools in things like elastic. I've been mostly doing sysadmin and soc architecting at a cyber range

[wild tree]

@balmy basalt

[terse dirge]

I'm too broke to afford elastic enterprise

[terse dirge]

You can change your HTB name on the platform

[valid fox]

dont you use splunk

[wild tree]

not username but the "full name"

[terse dirge]

Nope

[wild tree]

soc?

[terse dirge]

We use elastic stack instead.

[valid fox]

ive heard of it but eveyone always talk about splunk

[terse dirge]

Probably because it's owned by Cisco

😅

[valid fox]

oh lol

[terse dirge]

I spent a bit of time yesterday clustering our elastic and I need to fix fleet still

Very pissed about SSL certs

[valid fox]

whats the hardest part in defensive/offensive security ? just curious to know haha

[terse dirge]

[valid fox]

understandable

[terse dirge]

I can tell you that kubernetes is a pain and so is dealing with people.

[gray wraith]

Gm

I slept like 10hrs and feel so Dizzy

[gray wraith]

Figuring out technologies you had no prior experience with is tricky

Maybe RE

[supple plume]

morning

[gray wraith]

I dont think there is anything relatively easy in cybersec besides knowing how to run a mindless scan

[valid fox]

lol

[gray wraith]

I injured my bicep tendon yday

[supple plume]

bro...

[gray wraith]

What a start of the week

[exotic pendant]

😄

[exotic pendant]

Soon for Friday

[gray wraith]

Naah.. i have to be healthy for sunday climbing

[valid fox]

rub sum dirt on it

you aint hurt

stay hard

[gray wraith]

DIP joint feels iffy too, need to do some bloodflow rehab later

[valid fox]

david goggins ahh

[supple plume]

good luck with that

[terse dirge]

@exotic pendant you should set up kubernetes

[valid fox]

get well soon

[exotic pendant]

to poke at?

[meager kernel]

you should go outside

[terse dirge]

For fun

[supple plume]

you should lock in with python

[meager kernel]

yea im trying payloads

[terse dirge]

I'm very pale and have those ginger/redhead genes so I'm as pale as a ghost and can't go outside

[meager kernel]

unlucky

[exotic pendant]

I got weird skin. I'm pale af but I dont sun burn

[terse dirge]

Lucky

[twin fulcrum]

🍴

[meager kernel]

@supple plume did anyone in our team complete airtouch?

[exotic pendant]

I'm also part korean and I just get tan like my dad if i do go outside

[supple plume]

man got good jeans 👖

[exotic pendant]

Korean, scotish, german

[supple plume]

the closest is chocos, he is grinding his ass off in academy learning wifi stuff

but he is only halfway

[meager kernel]

that machine sucks

[supple plume]

🍔

[meager kernel]

just let it be and move onto another one

[supple plume]

ik..

[sharp shuttle]

frost is a hapa? explains everything

[meager kernel]

i have to do the AD ones after im done with linux ones

[exotic pendant]

But I dont look wasian

[supple plume]

@cerulean bloom

[sharp shuttle]

nah you look white

[exotic pendant]

I've been told I look scotish

[split needle]

https://www.bbc.com/news/articles/cx2gn239exlo

[exotic pendant]

My dad looks more like betty from Kung pow

https://tenor.com/view/birdy-evil-betty-kung-pow-birdies-gif-26983510

[supple plume]

I've been told I look american until I start yapping so better to keep my mouth shut around police

[exotic pendant]

Even the balding

[split needle]

Nobody ever told me how I look

[supple plume]

you're probably invisible

[meager kernel]

@supple plume had a question, kind of stupid
in a linux distro, where are repo mirror links stored?

[split needle]

I do my best

[supple plume]

is not a stupid question

[frozen zinc]

They always tell me i look like im from Israel

[exotic pendant]

https://tenor.com/view/chosen-one-enter-the-fist-huaaaaaa-gif-1917443046695347883

[supple plume]

depends on the distro

[meager kernel]

in debian derived distros, like Kali?

[exotic pendant]

IF anyone wants a stupid (Intentionally) but good moviehttps://www.youtube.com/watch?v=qBjKXk9QULQ

[supple plume]

in arch is here /etc/pacman.conf

[split needle]

@meager kernel in RH used to be in some .conf files in etc

[supple plume]

debian based I dont remember but it's literally 1 googel search away

@meager kernel try here /etc/apt/sources.list.d/*

[meager kernel]

i found it

i wanted to add official debian repo in kali

[supple plume]

for what

[meager kernel]

cause there is an app that isnt in kali repo but is in debian

[meager kernel]

vscodium

its not in kali repo

[supple plume]

you know you can just install something with dpkg -i if you download the .deb package

[split needle]

can't you get a .deb from somewhere?

[supple plume]

in debian based distros

[meager kernel]

ah

yea im stupid

my bad

[supple plume]

yeah don't overcomplicate

[supple plume]

vro quit that shit you're just learning

[split needle]

you can do what you want but it will give you 100 other deps you need

I lost all my hair to doing stuff like "make && make install"

[wary pumice]

@supple plume Thank you so much for the req, I tested everything out and pushing some new updates haha

[meager kernel]

@supple plume installed

lets go

ty

[supple plume]

can I see?

[zealous charm]

[frozen zinc]

@supple plume do you need the syntax highlighting for when typing commands or when using cat?

[wary pumice]

I'll ping you once I push and merge the updates haha

I'm writing down the commits and what the updates are

[supple plume]

cool

[supple plume]

I dont need syntax highlight when typing commands and I have riced my cat command

I asked for zsh lsp/highlight for the editor to be able to code longer scripts with proper dev tools but I already gave up, bash/zsh are not the right tools this task

I'm using a proper language

[frozen zinc]

aaaah for like VSCode or VIM

[scenic maple]

What

@mystic harbor

[supple plume]

yes

[mystic harbor]

echo ping

[supple plume]

go ping yourself

[scenic maple]

[mystic harbor]

He is the one

[frozen zinc]

what are you cooking?

[supple plume]

gesh

[supple plume]

so I've been writing a lot of scripts for automation since I joined htb

and it's becomming a burdain

[frozen zinc]

🙂

[supple plume]

these can for example generate a xss paylaod with the right url and set a detactched netcat listener

one command

[frozen zinc]

yeah

[supple plume]

I copy the paylaod and send then check the logs

is one example

auto fuzzing for example proxies all to burp

[frozen zinc]

time to build the hub?

[supple plume]

hashcrack autodetects the hash type and cracks

[supple plume]

I'm considering submitting it to AUR

once is done

[frozen zinc]

cool

[supple plume]

mostly to brag in my resume

[frozen zinc]

So you are not playing to make a GUI? like classic html local interface?

[supple plume]

honestly I rather not use GUIs in general

[frozen zinc]

baby c2?

[supple plume]

I like cli tools

[frozen zinc]

you can use it as CLI and still have a gui

[supple plume]

I've been doing too much frontend as a developer

[frozen zinc]

to browse the results?

[supple plume]

I considered a tui but I just want a cli

[frozen zinc]

Can i do a gui?

[supple plume]

so mostly this is for web exploitation

so I use burp a lot as a proxy to log requests

[zealous charm]

WEB

[frozen zinc]

I had i mid a similar project I want to integrate with my proxy github.com/b4ndit23/Groxy

and build like a web framework to pair with the C2 framework (that should be ready in 5850 years)

[frozen zinc]

Exactly

[supple plume]

nice

[frozen zinc]

Every tool has to be sexy

We have an issue in cybersec

Nobody listen to prodigy anymore

and they are 87 years old with pubes

I want to offer the winamp skin experience

[frozen zinc]

not the vanilla one lol

you know what im talking about

[supple plume]

honestly not really

[frozen zinc]

Winamp use to have crazy cool skins

Stuff like that are not done anymore

Now everything is boring and ugly

[supple plume]

I see

max I'll give is a TUI with my boring theme

[frozen zinc]

I dont know if is open source

[supple plume]

iit's open source

[frozen zinc]

but I would not mind to fork it

[supple plume]

xd

[frozen zinc]

and mixed with my stuff and do a gui