general

[meager kernel]

its KDE

but its not the HTB edition

also idk why but when im using parrot in vbox, the clipboard doesnt work

[eternal mango]

I know, I was just curious if it was the same as 6

[meager kernel]

its very annoying

i would have stuck with parrot if the clipboard worked

[bronze lion]

It doesn't?

[meager kernel]

not for me

[eternal mango]

Guest additions installed right?

[meager kernel]

atleast

[meager kernel]

yea

[bronze lion]

I can't recall if it did for me or not , I used it wayy back

[eternal mango]

weird, not sure why it wouldn't work then tbh

[mystic harbor]

wayyyyyyyyyyy.....

[bronze lion]

We pray to Lorenzo faletra?

[bronze lion]

Wayyyyyyyyyyy..,..

[meager kernel]

@eternal mango what all should i check once to make sure the clipboard works?

[mystic harbor]

Do it in VMware it works for me

Maybe Virtual box issue

[eternal mango]

Either via the ISO as usual, or the packages as here https://parrotsec.org/docs/virtualization/virtualbox-guest-additions/

But they are the same thing AFAIK

[meager kernel]

i downloaded the prebuilt image from their website

[eternal mango]

I don't know then tbh

sudo /usr/sbin/VBoxService -V shows additions running?

[zealous charm]

@maiden anvil sup big dawg

[exotic pendant]

@zealous charm so i dug deeper, its actually caused by windows

so windows bug and maybe i can report the secondary to google since it hits that also

[zealous charm]

Nice, would be neat to stumble across an accidental windows bug

[molten bobcat]

One day I'll be able to find stuff like that too

But for now it's tummy aches and sadness

[maiden anvil]

about to get lunch and then smooth sailing for the rest of the week

hbu @zealous charm what you up to today playa

also greetz to the channel

[zealous charm]

just working on a web test this week, running some src code review on the side for bug bounty

[merry pagoda]

hi

[neat wharf]

any shortcuts to find particular variable when doing reverse engineering apart from searching whole application because i dont know the exact name of variable

[eternal mango]

Depends, are you running the target, or purely doing reverse engineering in a static fashion?

Assuming it's a binary application, not a web applianace

[sacred lynx]

hi

[eternal mango]

There's a channel for that anyway 🙂 #binex-rev If the query is related to an Academy module, there's also #modules

[chrome tree]

https://tenor.com/view/crab-lara-waving-hi-hello-gif-10815615172503534079

@maiden anvil

[normal wyvern]

hello all! is HTB coming out with an AI cert? the content is really nice & structured, feels like the wifi one before it came out

[eternal mango]

There is a Red Team cert coming, yes

[normal wyvern]

ahh I'll save my voucher for that then 😄 thanks!

[eternal mango]

https://www.hackthebox.com/blog/htb-ai-range-launch

HTB AI Red Teamer Certification Coming in Q1 2026

[hexed horizon]

hI guys, I'm doing Wi-Fi Penetration Testing Basics, where do I have to ask for help?

[rapid badger]

#modules

[hexed horizon]

that's for me?

[rapid badger]

yes 🙂

[hexed horizon]

th

thx

[normal wyvern]

😮 looking forward to it!

[untold valley]

anyone else had AI take away the coding power from them

?

I used to script in python but i've fallen into the chatgpt generate trap

and now I don't remember shit i decided to take the beginner's python course on academy to refresh 😭

[eternal mango]

I wouldn't say take away, I've had little time for coding personal projects in the past while, and so working with AI and then improving what it's created has helped me to be creative.. ish..

I mean I didn't code much before due to work, now I code a bit more, and get to explore stupid ideas with help

..but I still get my hands dirty

[neat wharf]

static fashion, its an apk

[eternal mango]

Certainly I'm rusty, but that's down to my current position in work / life I think

[neat wharf]

i am using apktool and jdx

[untold valley]

hmm you have a point

[rancid snow]

the most important part is just being able to verify the results.

as long as youre not shipping code you dont understand its all good

[eternal mango]

This probably belongs in #binex-rev unless it's Academy related then #modules , if you want to move to either channel

[rancid snow]

Lately Ive been having fun using it to generate targetted semgrep rules

[neat wharf]

nah its personal

[eternal mango]

But the TLDR would be.. either you can switch to active reversing instrumenting with things like Frida, or explore the codebase and walk back to where the variables are utilised based upon what you are observing in the app itself

There's no real shortcut I don't think if the source is obfuscated, apart from knowing where it's used, in what UI / resource, connecting the dots from the strings and walking backwards

[neat wharf]

idk if frida or ghidra works with android packages

[eternal mango]

Not with packages no

but with devices

as in running the package, and instrumenting it with Frida

[rancid snow]

frida is the #1 active reverse engineering tool for android apps

[eternal mango]

frida is omnomnom

[neat wharf]

i have apk, does frida accept it

[eternal mango]

No

[rancid snow]

most of the frida content I see is in fact mobile related lol

[eternal mango]

You run the app on a device

and you instrument it WITH frida

You can then hoook on to specific classes/methods/etc

[untold valley]

I made a wrapper for a PDU with python only with chat gpt because i didn't know what I was doing tbh, but now I've decided its enough, and If i want to get into the industry i need to go back and regain my knowledge

[neat wharf]

thats sounds too complicated from what i am planning

[eternal mango]

frida also very useful for active binary work too, like hooking methods etc

[untold valley]

it feels good to write code again by hand to be honest

[eternal mango]

Well, it's a good skill to learn, but ok

then my first recommendation stands I think

[rancid snow]

frida sounds too complicated until you learn it and realize it makes life easier

[eternal mango]

Yeah, it's not that hard honestly, and has a lot of useful tools that would help you in this situation

eg with discovery of your variable and the methods that use it

But if not then aye, you're gonna have to do some reading and understand how the app accesses and uses that variable you're interested in if it's all obfuscated

[rancid snow]

yeah watchdogging a variable is one of the best use cases for frida

[eternal mango]

...oooorr

[neat wharf]

i mean, idk if any tool can spoonfeed me with the variable or functions i am looking for

[eternal mango]

Working with LLMs for reversing and "humanising" source is a thing

So long as you control the temperature so it doesn't imagine TOO much

[rancid snow]

I like that as well but its trickier if you dont have a foundation

[exotic pendant]

OK reported bug

nice

[eternal mango]

Aye, a foundation in the language you're reversing is still needed, but using LLMs to humanise a program from decompiled binary or extracted obfuscated Java, it then allows you to query that codebase

[brittle quail]

can i install wine on parrot if im on arm64

[eternal mango]

The prompts for it aren't that hard to come up with, nor are they massive

ike literally a couple of paragraphs, repetition and patience

Damn now I've forgotten what I was actually doing

[rancid snow]

explain this:
[copy paste snippet here]

has done wonders for me

I think people overcomplicate prompts

[eternal mango]

Certainly can do aye

Lemme see if I can find a prompt as example from my workflows which have worked well for me

Might be on my laptop though, which is upstairs

Too far away.. wi ll check on this machine anyway

[neat wharf]

yikes, i dislike java

[rancid snow]

me too, the application Im bug hunting in right now is Java and I want to barf

its not even using any dangerous java functions which means I need to actually hunt for java based logic bugs if I want to find anything useful

[exotic pendant]

😄

[oblique rivet]

Anybody’s help me? 🤯

[exotic pendant]

Had to read a bunch of perl the other day

eyes are still bleeding

[oblique rivet]

I need help with module

[rancid snow]

#modules

[eternal mango]

Ok yeah.. can be as simple as Your role is to analyse the obfuscated project source code in this directory, and create a deobfuscated and human readable version of it.

or more targetted if you've already reverse it to a degree in Binary Ninja or whatever

..but of course you can now do so much more using skills and formatted prompts etc

It does work surpisingly well anyway.. now, I gotta figure out what I was working on before I got distracted..

[silver forge]

lasers. and rockets.

[eternal mango]

Oh right haha that's what

https://asciinema.org/a/jhadBK7S2SfeZPa1 🤣

Proper camera projection and movement around the space..

[austere sigil]

Gday!

[eternal mango]

This should totally turn in to some janky game jam horror puke of a thing

[brittle quail]

bro it keeps saying unable to llocate package wine32:i386

[austere sigil]

path maybe?

[eternal mango]

You're on arm @brittle quail ?

[brittle quail]

yes

is it possible

[eternal mango]

What do you want to do with wine?

[zealous charm]

winders bug?

[eternal mango]

Run Windows x86/x64 programs?

[brittle quail]

install something that works on windows

[brittle quail]

yes

[eternal mango]

That won't work

You need more than just wine for that

[molten bobcat]

Don't you have a windows host?

Didn't we go over this yesterday?

[brittle quail]

why

[eternal mango]

Google it

[molten bobcat]

I need more than just wine for this conversation I'll tell you that much

[eternal mango]

Sorry

but you didn't even try

[brittle quail]

i did

it told m

[molten bobcat]

"it told you"

What is it

[eternal mango]

Right one sec.

[molten bobcat]

Who is this great creature that makes you do things

[brittle quail]

u need wine to run windows applications

didnt say i needed anything else

[molten bobcat]

That's not true at all

[eternal mango]

That took two seconds

[silver forge]

https://tenor.com/view/ape-dance-hyped-gif-21698509

[molten bobcat]

For one, you're running parrot in a VM on a windows host. Why are you trying to run Windows applications within your Linux host when you're literally using a fucking windows machine?

[brittle quail]

uh

[molten bobcat]

See that's

Called critical thinking

It's an important skill!

[brittle quail]

i dont want it on my windows

[molten bobcat]

What is "it"

That you need to run so badly

[exotic pendant]

yar

all my microsoft bugs

[eternal mango]

Beast

[molten bobcat]

I see the word heap twice

[exotic pendant]

both memory issues but differen areas

[molten bobcat]

One of those is definitely stored xss

[exotic pendant]

open redirect -> XSS for the opens

[eternal mango]

Ok nevermind, not gonna try that joke

[zealous charm]

How do they pay for memory corruption compared to chrome?

[eternal mango]

I'll get told off

[molten bobcat]

Hehee

I need to start doing stuff like this..

[exotic pendant]

got $50k for one for notepad but that serves as a hyper-v escape

other ones are like $5k

DoS ones paid $0

[molten bobcat]

I want a thank you letter

[rancid snow]

you have some nutty workflows

[brittle quail]

from finding a bug??

[molten bobcat]

I have small goals lmao

[exotic pendant]

gib email i'll email "Thanks"

[eternal mango]

hyper-v escape is big biscuits

[zealous charm]

Nice, I've got some OOB writes in chrome I am waiting to see how they turn out

[molten bobcat]

Yooooo

Don't you have me on LinkedIn?

[silver forge]

don't report them if they don't pay. sell them on tor

[molten bobcat]

I haven't used LinkedIn in like, a year and a half lol

[eternal mango]

FPS gamers, what's a "comfortable" fov? I've NFI

Oh wait

I'll Google it

[molten bobcat]

Oh!

I don't know if you're interested at all goblin

[eternal mango]

Always

[vital heron]

Time for bed. Goodnight.Is your icon Fallout series?

I love that game.

[molten bobcat]

But kingdom come deliverence got

An update

[eternal mango]

Oh yeah?

[rancid snow]

kcd is rad

[molten bobcat]

It plays at 4k 60fps on PS5 now!

[eternal mango]

I finished the first one not long ago

Not started the second one yet

[molten bobcat]

If you owned the PS4 version they let you upgrade for free yay

[eternal mango]

Noice

Can't remember the last console I owned tbh

[molten bobcat]

It looks very pretty I got my shit kicked out of me by a guy who stole my dad's tools

[eternal mango]

probably PS1 or N64?

[silver forge]

I'm playing mostly Arena Breakout Infinite. As long as you don't stress about the PVP it's actually pretty fun.

[rancid snow]

I like to roleplay as a serial killer in kcd

[eternal mango]

https://giphy.com/gifs/grandad-grampa-gampa-pP88YOmpaQ2LlHFcLU

JFC

What the HELL was that

[molten bobcat]

Hey hon

Why's there a uh

Demon turtle..?

[eternal mango]

Man that's horrific

I'm leaving it

[molten bobcat]

Yep! It's the perk Four Eyes

[silver forge]

Mostly I'm getting my ass kicked in ABI, but I'm taking it chill and doing some missions

[vital heron]

I only have Fallout Las Vegas, which I think is the best one, besides Fallout 3 and Fallout 4

I don't own fallout 4, but I had fallout 3

[molten bobcat]

Fallout New Vegas*

It's new!

[eternal mango]

I really wanna play that London mod

[molten bobcat]

I heard about that

[eternal mango]

It's bloody impressive

[vital heron]

For a moment, I thought you meant the game was new

[eternal mango]

I've played a bit, but it really dislikes wide monitors, even with tweaking it just shits the bed

[vital heron]

But yes, you are correct.

It takes a lot of memory space too

[molten bobcat]

Nope haha it's an old game

[eternal mango]

Oh yeah, so many mods and such bundled for it

[vital heron]

Curved monitors are the best for your eyes from what i've experienced and heard.

[molten bobcat]

They're okay

[rancid snow]

my monitors are like a decade old. Itd be nice to upgrade but on the other hand... they still work

[molten bobcat]

I dislike ultrawides though

[eternal mango]

I can't go back from super-ultrawide 32:9

[molten bobcat]

Too much info across too much space

[eternal mango]

..but it does make some games angry

[molten bobcat]

This isn't minority report

[vital heron]

Games are all right, but I don't play them as much now.

[molten bobcat]

https://tenor.com/view/minority-report-looking-searching-looking-up-stalking-gif-9548432812386765873

[vital heron]

afterplace was a fun game though

[eternal mango]

No, I mean some games literally are not compatible

You can try to convince them, and some times succeed

[vital heron]

I like this 🙂

[eternal mango]

But some REALLY fight you

[vital heron]

Which movie is it from?

[molten bobcat]

Minority Report

Tom Cruise movie

[eternal mango]

Good film

[vital heron]

I see

[molten bobcat]

The glove hand hologram thing is referenced a lot haha

[vital heron]

I like this.

[molten bobcat]

https://tenor.com/view/rewind-futurama-dance-seriousface-funny-gif-5354932

[signal mica]

me scrolling reels

nice pfp cloud

looks like sm from a perk

[molten bobcat]

It is

It's the four eyes perk

It's me irl

[vital heron]

Hm.

I'm looking at something that has to do with HackTheBox

[rancid snow]

same

[vital heron]

How long has everyone been on this platform?

[bronze lion]

We only keep our real pfp's

[eternal mango]

A while

[molten bobcat]

I've been here since 2020

[rancid snow]

how do you define 'on'

[austere sinew]

DELETE THISSSS

[bronze lion]

This platform is referring to HTB? or dc? Or htb dc

[eternal mango]

Sharing is caring

[molten bobcat]

Won't you gentlemen

Have a Pepsi?

[bronze lion]

I don't like pepsi

[molten bobcat]

I'm quoting movies again

[austere sinew]

OH REALLY!? LET ME SHOW YOU HOW MUCH I CARE THEN

[molten bobcat]

You'll have to forgive me I didn't have internet growing up, it was movies and TV.

[eternal mango]

https://giphy.com/gifs/latelateshow-come-here-bring-it-on-ron-burgundy-LoCDk7fecj2dwCtSB3

closes Discord

[molten bobcat]

Me and Dad like watching movies together. Ever since I was little

[eternal mango]

ruhrow

[bronze lion]

Oh damn mb

[rancid snow]

when I was 12 I caught a frog with a friend. he nailed the frog to a tree. I think about that frog sometimes

[austere sinew]

Check dms

[molten bobcat]

Hey mad what the fuck

[eternal mango]

I did

You check yours

[bronze lion]

My dad doesn't know English that well so I used to watch Hollywood alone

[molten bobcat]

Ahh

I only know how to read really well because of final fantasy

[rancid snow]

I thought sharing was caring

did I care too much 😭

[molten bobcat]

Share too much

Also can my boss quit putting me on the damn priority queue

Every other case I pick up I have to call the damn client and none of them ever answer

So I'm just in hold music hell

[bronze lion]

Throw a file at his face and make a mass exit with cinematic music.

[molten bobcat]

Nah lol I just helped him out in a client call

[bronze lion]

Get this month's salary and throw the file then

[molten bobcat]

Dude is mad we're not creating cases for unsuccessful bruteforcing activity

[bronze lion]

Chair will also do

[bronze lion]

You guys are over performing it seems like

[rancid snow]

tbf thatd be an excellent way to boost case numbers

line go up

[molten bobcat]

About as effective as opening a window on an airplane for some fresh air.

[vital heron]

HTB

[molten bobcat]

https://tenor.com/view/happy-death-gif-23959999

[bronze lion]

2 yrs

[vital heron]

I see.

[bronze lion]

Are u new?

[rapid badger]

🐸

[austere sinew]

EVERYONE @static pasture @zealous charm @molten bobcat @sturdy thistle IM TOO SCARED TO PING MORE PEOPLE IN CASE I GET THINGIED BUT GOBLIN OVER HERE NEVER KNEW THAT YOU COULD FAVOURITE GIFS IN DISCORD.

[rancid snow]

My post wasnt about frogs

[zealous charm]

[eternal mango]

Fake news

[austere sinew]

LIAR

[bronze lion]

I just wanted to ask u something. I see the GOS tag so I'm guessing you are using grapheneOS. What are the down sides of using graphene over google android ⁨@vital heron⁩

[eternal mango]

Don't believe the lies

[austere sinew]

DONT FAKE NEWS THIS

I HAVE THE EVIDENCE

I HAVE

[eternal mango]

Haaaaahahahahaha

[austere sinew]

THE

EVIDENCE

[eternal mango]

Do it

[austere sinew]

SHAME THE MAN

[molten bobcat]

Fork found in kitchen, yawn

[austere sinew]

Oh you really

[austere sinew]

WHAT

[austere sinew]

YOURE REALLY TAKING ADVANTAGE OF THE FACT THAT THIS ACCOUNT CANT SEND IMAGES HUH

WELL THEN

[molten bobcat]

YOU THINK GROWN ASS MEN KNOW HOW DISCORD WORKS?

[silver forge]

fork you

[austere sinew]

ILL GET SOMEONE ELSE TO SEND IT FOR ME

[molten bobcat]

HELLO?

[austere sinew]

HE HAS BEEN HERE SINCE 2015

[molten bobcat]

And???

[austere sinew]

Shut the fuck up yumi

[eternal mango]

It's fine

I deserve it

[molten bobcat]

We'll just ban her it's fine

[austere sinew]

WDYM AND

[molten bobcat]

Silence the haters

[austere sinew]

HOW MANY GIFS HAVE BEEN USED

[austere sinew]

Never

I am immune

I am basically

[molten bobcat]

https://tenor.com/view/shibecord-mod-abuse-domain-expansion-gojo-bigshibe-gif-1252041892102611504

[austere sinew]

The server mascot at this point

[rancid snow]

the screams of haters fuel me

[austere sinew]

My presence is required

This is my job

[bronze lion]

He is in in his early 20s

[austere sinew]

Without me

There would be a hole

In this server

[molten bobcat]

Ayo?

[eternal mango]

Always 21

[austere sinew]

The server would even risk becoming

More productive

And less toxic

[bronze lion]

True

[austere sinew]

That cannot do

[molten bobcat]

Only toxic cuz I'm here

[rancid snow]

this server has never been productive or non-toxic

[austere sinew]

I AMPLIFIED THINGS

LET ME PRETEND MY LIFE HAS PURPOSE FOX

[rancid snow]

nah lol

[molten bobcat]

Look man, some people genuinely eat glue

[bronze lion]

This channel to be more specific

[rancid snow]

server is more tame nowadays

[austere sinew]

Oh right

Hallicon

[eternal mango]

Man I had an image for that somewhere

Wtf is it

[molten bobcat]

https://tenor.com/view/glue-gluea-eating-paste-eat-glue-gif-8579890

[austere sinew]

You would have jt

It*

If

You used

THE FAVOURITES

BUTTON

HOW DID YOU NEVER USE IT

[molten bobcat]

I'm fully convinced most folks here are just ralphie with internet access

[sturdy thistle]

I sometimes love this channel

[molten bobcat]

I'm a hackers!

[bronze lion]

Are we included?

[austere sinew]

This channel always loves you mick

[molten bobcat]

https://tenor.com/view/lisa-ralphie-gif-18800083

[zealous charm]

idk how to hack

[bronze lion]

Heck

[zealous charm]

im just here to yap

[bronze lion]

Ez

[sturdy thistle]

That’s fact

[austere sinew]

Fake hacker over here

Pfft

[bronze lion]

Sudo

Loic

[austere sinew]

You dont even know web hacking

Like

[bronze lion]

127.0.0.1

[austere sinew]

That guy a few months ago knows so much more web hacking than you

[bronze lion]

I know how to ping tho

Professional hacker here

[austere sinew]

No not you

Some guy tried to mansplain web hacking to homebrewer

Which I found to be hilarious

[rancid snow]

me when I want to read s text file

[molten bobcat]

Real

[austere sinew]

I’m dreading turning 22

Like

What even happens

I think that’s what they call middle aged

How do people even live

Where is my mortgage

[rancid snow]

this is the funniest joke I've made all week and not enough people are laughing. Truly I empathize with van gogh

[fierce vale]

https://tenor.com/view/good-morning-gif-6172052806702782738

[zealous charm]

no mortgage at 22? kinda slacking tbh, try cutting out the avocado toast

[turbid goblet]

I love meetings

[austere sinew]

Offsec's motto looms in the back of my mind...

[turbid goblet]

Anyone else wanna put a teams meeting on the books?

[eternal mango]

Teams...

TEAMS!!!

[austere sinew]

NO

[eternal mango]

https://giphy.com/gifs/page-shaft-crimson-dOl2LFw0RbTMc

[austere sinew]

nO

[zealous charm]

let's hop on a quick call to discuss

[molten bobcat]

Huddle?

[zealous charm]

Teams only

[turbid goblet]

Sorry im already in a meeting

[eternal mango]

Quick Zoom right

[molten bobcat]

Slack anyone?

[austere sinew]

The only slack I know is slacking on my oscp

[exotic pendant]

😄

[molten bobcat]

Slacka lackin

[exotic pendant]

there we go in review now

[eternal mango]

JFC I'm learning so many terms regarding rendering techniques with this stupid ascii thing

So awesome

[austere sinew]

hell ye

[molten bobcat]

share

[zealous charm]

[exotic pendant]

aye

[austere sinew]

i felt @ocean marsh 's disappointment from here i'm gonna go study now...

[sharp holly]

Is there a role selector place

[eternal mango]

Your role is equal to that on HTB Labs, or any others gained via achievements through Seasons, or certifications via Academy

[molten bobcat]

Htb blanket when

[eternal mango]

hah, duvet and pillow cover set

[molten bobcat]

Exaaasctly

Hack the bed

[eternal mango]

😄

Another April 1st contender

I hope someone is writing these down

[sharp holly]

No I mean how I have red team

Idk how to change they

That

[ocean marsh]

nice

[eternal mango]

Uhhh.. honestly, I don't know.

[vital heron]

Are you kidding me? Just don't make costly mistakes.

[eternal mango]

Maybe a legacy role or something?

[sharp holly]

Maybe

Mystery!

[molten bobcat]

It's a role assignment

For channels #red-team and #blue-team

That's all it does

[eternal mango]

Well yeah, but I don't see where it's assigned anywhere

[exotic pendant]

😄

[molten bobcat]

Bot command for it

Former, bot command I assume

[eternal mango]

Right

so legacy role

[molten bobcat]

Yes yes

[eternal mango]

😄

[exotic pendant]

I felt this

[austere sinew]

uh

see there's a problem

i do that a lot

[torn cedar]

Aunt wolo

[austere sinew]

NO

[static pasture]

I have been pinged

https://tenor.com/tHmYIzjTg4c.gif

[austere sinew]

Goblin didnt know what the favourites gif section id

Is*

He has had discord since 2015.

Shame the man.

[static pasture]

Not everyone knows the ins and outs of Discord. No need to shame someone for it

[austere sinew]

SHAME HIMMM

@eternal mango you are immune to being shamed

How is this even possible

[static pasture]

https://tenor.com/view/austin-powers-dr-evil-how-gif-19601238

[austere sinew]

[eternal mango]

Experience

[austere sinew]

teach me your ways

[eternal mango]

[austere sinew]

[static pasture]

Thats the neat part, he doesnt

[austere sinew]

[jaunty pulsar]

[eternal mango]

Not something I thought I'd ever say

[austere sinew]

Poly poly

[eternal mango]

I mean it did do what I asked, repeating the initial tree model

...which was a triangle... on a stick..

[austere sinew]

So you asked for hot water and got hot water

And you complain about the BURN

[eternal mango]

I've never been accused of being a designer

[jaunty pulsar]

well then I'll gladly take the honors, dear designer

[austere sinew]

Tut tut

[eternal mango]

I did win 2nd place in a CSS hackathon competition at a HTB meetup a couple of years ago mind

but I think that was my stubborn nature over talent

[austere sinew]

Css….

Ew

[jaunty pulsar]

this is my 1st time hearing of a CSS hackathon

[eternal mango]

We had to draw various scenes using only CSS

and get them as close as we could

[austere sinew]

show

[eternal mango]

accuracy mattered, as did speed

I'm sure it was some platform, but I don't recall the name

[jaunty pulsar]

very interesting

[eternal mango]

https://cssbattle.dev/

[austere sinew]

Ooh it has daily challenges

Based

[jaunty pulsar]

it looks fun

[zealous charm]

kat

[jaunty pulsar]

[austere sinew]

KITTEH

[molten bobcat]

I signed him up for a vet appointment and he's clueless hehe

[glad needle]

Does anyone know, why the latest cube talk uploaded to spotify is from the 23.1.?

[austere sinew]

Mean

[molten bobcat]

It's just an annual checkup

[eternal mango]

Forrrrest https://asciinema.org/a/ZznZsp1LfgiFvxfc

[jaunty pulsar]

the true definition of a randomforest

ok jokes aside it is impressive work

[molten bobcat]

https://tenor.com/view/star-wars-bossnass-head-snake-gif-10683586

[eternal mango]

It's pretty mad right

Like the rendering engine is pretty simple, as is the camera and projection math

So cool to see it represented in such a simple way

Ok so we gotta have something hunting us in this forest. What should it be

[heady sage]

Open Redirect intensifies

[eternal mango]

A wild Seadris

...how would I represent a seadris... 🤣

[molten bobcat]

Hmm..

[eternal mango]

Keep it simple.. chop trees, run from ents, die horribly

I didn't intend for this to go this far.. it was supposed to just be a test of a model..

Oh well shit happens

[molten bobcat]

Ent moot

Oh my god.. what if I'm gay for Tolkien?

https://tenor.com/view/archer-vomit-gross-wtf-mind-gif-26842790

[eternal mango]

lol

[frigid mountain]

hi

😄

[frigid mountain]

https://tenor.com/view/humor-gif-6169314

[maiden anvil]

yo what it do famalam

[frigid mountain]

hi m0rph

https://tenor.com/view/power-rangers-morphin-time-ready-change-transform-gif-8085109

[eternal mango]

https://giphy.com/gifs/drugs-comment-der-FHBCwkY0UuBZm

[maiden anvil]

https://tenor.com/view/flute-power-ranger-green-ranger-dragonzord-gif-16538656

[dim lagoon]

\

[maiden anvil]

gandalf

[zealous charm]

you summoned me?

[frigid mountain]

green ranger was so dope

[maiden anvil]

bro LMAO

it's crazy you know the lore

[dim lagoon]

https://www.youtube.com/watch?v=ty62YzGryU4

[maiden anvil]

that was before your time 😭

[dim lagoon]

Malk.

[frigid mountain]

https://tenor.com/view/julian-smith-jstv-malk-milk-gif-20176229

[maiden anvil]

Malk it out
HTB now Malk it out

@zealous charm side step now Malk it out

[frigid mountain]

https://tenor.com/view/crazy-walking-gif-5982973787961681137

[zealous charm]

i can only 2 step

[frigid mountain]

https://tenor.com/view/hardcore-hxc-hardcore-punk-two-step-2step-gif-7581617270258117067

[dim lagoon]

https://www.youtube.com/watch?v=Mz26Qvi7TyE

[maiden anvil]

now get jiggy with it

[dim lagoon]

https://tenor.com/view/julian-smith-jstv-malk-milk-gif-20176229

[eternal mango]

https://giphy.com/gifs/mrw-mods-bethesda-vX9WcCiWwUF7G

[dim lagoon]

https://open.spotify.com/playlist/7F2PYRLkHLzcd4Wc7NAIAr

[eternal mango]

How's it going b4ndit

That was not intentional.

[frozen zinc]

Is going, today was a different day actually, had to go early to the hospital, to finally get a full radiography of my back and hips

[eternal mango]

Good to get it done, you get results the same day, or does that all go off somewhere else?

[frozen zinc]

So the results are there for the get got, now i need to go tomorrow to ask for an appointment with my Doctor so they give me a proper diagnosis

Which is nice to finally get done, bcs It have been years since I have pain on my left leg and back

[eternal mango]

Ah gotcha, well I hope for the best.

Wait

You have a left back AND a right back?

[frozen zinc]

I started 3 months ago doing exercises and is getting quite better

[eternal mango]

Urgh nvm

That sounded funnier in my head

[frozen zinc]

🐝 good

[eternal mango]

NOT THE BEEEES

[frozen zinc]

muahaha

[eternal mango]

Well yeah fingers crossed.

[frozen zinc]

nah more like a tight plank

[eternal mango]

Some answer finally will be good

[frozen zinc]

Im flying the 21 of march

new life

[eternal mango]

Just so you can at least focus on the right path, or whatever else if needed

[frozen zinc]

Im going to the beach

Tenerife

[eternal mango]

Can you take the rain from the UK with you please?

Like, just arrange for it to meet you at the airport

[azure remnant]

☝️

Ive never been on a beach yet

Im 21

[frozen zinc]

I left the UK exactly a year ago

[eternal mango]

I know as soon as the sun and warmth comes back, I'll be moaning again

but at least I will be moaning with air con this year

[frozen zinc]

I feel you

[eternal mango]

Well, enjoy Tenerife!

[azure remnant]

Come to jordan its 20° here

[frozen zinc]

Thanks!

[eternal mango]

20c is a good temp

[azure remnant]

Last summer it hit 45° for some days

Hottest ever been

[eternal mango]

my next holiday location is gonna be Iceland with the daughter though

We been going on about it for years

[frozen zinc]

?

[azure remnant]

Go to greenland

[eternal mango]

Iceland first, but greenland did look mindblowing from the air

[azure remnant]

Last time i went out was 4 years ago

To egypt

[frozen zinc]

Did you saw the pyramids?

[azure remnant]

I saw it from the plane

But never been to it

Its massive tho

[eternal mango]

insert joke about pyramids and blocks having already been sawn

[frozen zinc]

must be so cool to see them

[azure remnant]

It is a lot bigger than it looks in the photo

[frozen zinc]

you?

have you been inside?

[eternal mango]

Ok that went down about as well as if I'd even tried to write a joke

So I'm glad I put a placeholder

[manic anvil]

guys i have a dumb question

[azure remnant]

A question is never dump

[molten bobcat]

I have a dumb answer

CONGRATS ON THE RANK UP RAVEN AHHHH

LOOK AT EM HES NOT NOOB ANYMORE

RAISE HIM UP

[eternal mango]

💪

poggers

[azure remnant]

Welcome to script kiddie

[cerulean knoll]

[azure remnant]

I promise ill be a pro hacker in 1 month after i finish cpts

[frozen zinc]

Looks like the same color

[eternal mango]

Forgot how freakin funny this Norsemen series is

[manic anvil]

now the passwords supposed to be stored on company servers as hashes , but i suppose when you put a new password it have a host side function to see if the password meet the way the password supposed to be if the password is getting thro server does it go to the logs as well?

[manic anvil]

also thanks guys

[eternal mango]

If you configure it to do so

But you shouldn't

[molten bobcat]

This.. turned into a stroke halfway through..?

[eternal mango]

That's called compppliaaaance

[molten bobcat]

I'm having trouble understanding the question

[eternal mango]

As a host, you never want to log passwords in plaintext, and never should you need to

[manic anvil]

no like the reason we store password as hashes so even if it get leaked it still hard to get it right ?

[eternal mango]

You do the checks in memory, and then move on

[molten bobcat]

https://tenor.com/view/bobsburgers-bob-teddy-menruin-gif-7391251

[azure remnant]

Why would one output passwords to logs

[manic anvil]

so does that function store them as plain text?

[eternal mango]

No

[molten bobcat]

Nope

They're stored as hashes 🙂

[eternal mango]

I mean, you COULD

But you shouldn't

[molten bobcat]

That leads to things like RockYou

[azure remnant]

Maybe if the authorization header was logged ?

[molten bobcat]

One of the largest password breaches of all time

[eternal mango]

Again, they COUL be

but shouldn't

[wooden jacinth]

Helllo good morninggg 😄

[molten bobcat]

One layer of security is better than zero layers

[manic anvil]

no no not when they are finally stored but when you create them and the function confirm like the password have small and capital and special digits and such

[azure remnant]

Thought u will say rickroll

[molten bobcat]

A and a are different characters that are represented in ascii different

[eternal mango]

I think the default log format is for username only from that header

[manic anvil]

so if , if i am the man in the middle during an account creation can i see the password ?

[molten bobcat]

But yes, the hashing algorithm turns the passphrase into a hash and the hash is what is checked against and saved

[eternal mango]

Well in theory sure?

[river adder]

Good evening everyone

[manic anvil]

i think i will go to HTTP site and test it with burp and see what i get during creation

[eternal mango]

In theory you could encrypt client side with a public key before it's sent to the server

[chrome tree]

https://giphy.com/gifs/scarymovie-zoemysd-just-chilling-killing-hFGMJ5feWELbAOBFzY

How you doing man?

[molten bobcat]

During account creation? My brotha haha windows says hello with their ntlm hash for a ton of protocols

[eternal mango]

If you got MITM on a target, they got much bigger problems

...or you got much bigger connections

[molten bobcat]

There's a whole world of easier lower hanging fruit than waiting for an account to be created haha

[azure remnant]

The regex matching function returns the sanitized password to another function but will never print them to console, except, if you told it to do it like goblin said

[maiden anvil]

finally got some downtime so Im about to chill, hbu?

[manic anvil]

i mean not really like waiting for it but taking in mind any possibility that could work

[frigid mountain]

https://tenor.com/view/green-mile-im-tired-boss-michael-clarke-duncan-gif-2375696290766999196

[chrome tree]

Coming off work and about to work on some portswigger. Maybe a little code

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[molten bobcat]

It's easier to sit and man in the middle more common traffic like SMB

As if you have the ntlm hash, it's effectively the password.

You don't need to know what it says when cracked

That's called Passing The Hash

Or, PTH

😄

[eternal mango]

https://giphy.com/gifs/weed-420-joint-qAZqlUrjbJDMxGHxFs

[molten bobcat]

Real

[eternal mango]

What a film

[azure remnant]

Is ntlm still being used in the wild ?

[manic anvil]

ok now another question , i have only 50 cubes left should i take the payloads and shells module or password cracking ?

[molten bobcat]

I'm sorry why is that thing in a toilet paper roll lmao

[azure remnant]

At least in hybrid configs ?

[molten bobcat]

AS THE DAY IS LONG BROTHA

[frigid mountain]

https://tenor.com/view/пенчев-gif-18218568

[azure remnant]

I guess its something like ipv4

[eternal mango]

Raaaalph

[azure remnant]

Temporary solution that will stay forever

[rancid snow]

Pretty much if its a windows env its still using ntlm. Its an absolute massive undertaking for most networks to disable it completely

[molten bobcat]

Ipv4 was not a temporary solution lmao

[rancid snow]

though some orgs do manage to do it

[azure remnant]

Let it slide bro 🥀

[frigid mountain]

https://tenor.com/view/tommy-chong-stoned-huh-what-gif-20575200

[molten bobcat]

No!

Don't be wrong!

How else are you gonna be correct in the future if no one catches you on it?

[sharp beacon]

https://klipy.com/gifs/uh-uhh

[azure remnant]

Heard about a whole collapse could happen if an org purges ntlm and purley used kerberos

[frozen zinc]

testing something

[molten bobcat]

Uhhh

What

[rancid snow]

Def possible depending on what theyre running

[azure remnant]

Then cotinue on it

[sharp beacon]

can you teach me to be a subject matter expert

[azure remnant]

[rancid snow]

usually its vendor limitations that prevent disabling ntlm completely

or legacy shit

[azure remnant]

I saw military computers running windows 7 and connected to internet

Used for comms

[molten bobcat]

Welcome to the world

[rancid snow]

Ive seen telnet running on humvees in the military

[molten bobcat]

It sure is wild out here

Just because something is "not good" doesn't mean you ain't gonna see it

[azure remnant]

Good news this day

Finally

[rancid snow]

I almost said why I saw it but realized that might actually be against the law for me to say 😂

[molten bobcat]

All of the world's technology is still here it didn't go anywhere

[azure remnant]

+1

[river adder]

We live in dark times

[rancid snow]

im like 90% sure the cause is decomissioned now but...

[molten bobcat]

If you have to question it

[azure remnant]

The one i saw is less than a month old

[molten bobcat]

I hate when they put a phone number down and it's their reception auto phone number.

[azure remnant]

Bro be like "how did they knew our plan

🥀

[azure remnant]

This call will be recorded for quality control purposes 🗣️ 🗣️

[azure remnant]

"cloudflare be down for maintainence" ahh moment

[river adder]

Hey guys, curiosity, what's the difference between chatgpt and openclaw?

[vital heron]

That's a good question.

ChatGPT isn't run by AI components like OpenClaw is.

I'm hearing OpenClaw is very exploitable and I would be against using the technology with your home-labs

[river adder]

Ye, i was reading now that openclaw was already under attack

[eternal mango]

ChatGPT is a provider of services, models, etc. OpenClaw is a piece of software you apparently trust implicitly, and then wonder how you got owned

[vital heron]

Exactly what they said.

I wouldn't trust that software for anything, its a major cybersecurity flaws all in it.

[eternal mango]

https://x.com/i/status/2024583239331991830

Simone Margaritelli (@evilsocket)

1,184 malicious skills were found on OpenClaw's ClawHub marketplace - stealing SSH keys, crypto wallets, browser passwords, and opening reverse shells. One attacker uploaded 677 packages alone. The #1 ranked skill had 9 vulnerabilities and was downloaded thousands of times.

X · Feb 19, 2026, 8:33 PM

OpenClaw is an agentic framework which performs tasks, either prompted by the operator or by itself.

And yeah, wouldn't touch it with a barge pole imho

It's interesting, but damn just read the articles out there on the risks.

Funny thing is Kirtaner created something like OpenClaw, a framework that had access to machines, accounts, data, history and was let loose to act as it wanted, like a year or so ago?

Scary thing now is people are trusting this thing with their personal data, their computer, their details

[wicked dagger]

Hey guys quick question, when do you think it is the "good" moment even if there is no one to start to do some machines? My problem is I always do a lot of academic htb but never machines, is there a certain rule that you follow or had followed in the past (for the good ones of you)?

[rancid snow]

Ive considered playing with openclaw in like maybe a vm but I wouldnt let it touch anything important

[molten bobcat]

This isn't cloudflare

[river adder]

Imo, ai start to be a problem, but maybe i'm paranoic

[molten bobcat]

The picture I sent is malware btw

[rancid snow]

tonight

[eternal mango]

Ohh, that's why calc popped up with 80085

[molten bobcat]

It's the Clickfix malware campaign using a Cloudflare Turnstile

[wicked dagger]

yeah but I need some training to sometimes no?

[molten bobcat]

It tricks users into opening the windows run key dialog and copy pasting clipboard contents that the web page filled with malicious powershell

[rancid snow]

Try -> fail -> study the points where you got stuck -> repeat

[eternal mango]

Sneaky, null byte hiding the tailed script?

[molten bobcat]

It's annoying as shit and has a damn near 45% success rate.

[eternal mango]

or whatever escape char it is

[river adder]

Just start, you have walktroughs too, start with easy machines and you'll learn machine after machine

[rancid snow]

A lot of campaigns are using it. Its such an easy and effective setup

[molten bobcat]

All they have the non tech savvy user do is open powershell and copy paste content into it

[wicked dagger]

Okej will try it, also what if I'm stuck? I always think that I'm noob and abbandon the thing ^^

[molten bobcat]

They barely obfuscate it and tack on a dumb message at the end of the powershell block that echos "verification complete ✅" back to the terminal.

[eternal mango]

Right but the malicious script is hidden between a couple of control chars in the seemingly safe text

[molten bobcat]

Works every time

[eternal mango]

Right?

[rancid snow]

Wherever you get stuck is what you need to study.

Say you do a box, do basic recon and only see a website. You get stuck on where to proceed. Time to study enumerating websites

[molten bobcat]

No

It just states "this is what the box will output"

[wicked dagger]

Okej ty will try it to night thanks

[eternal mango]

Ohh nevermind yeah

I should probably read it properly first.

[molten bobcat]

But when you click "copy to clipboard" to copy the thing it'll fill the clipboard with straight up powershell commands

Then they paste and you're off to the races.

[eternal mango]

But that is another technique, hiding malicious scripts in a seemingly safe string using a couple of characters in HTML, gotta find what those are now

But ok got it

[molten bobcat]

Sounds familiar

[rancid snow]

id also recommend starting with boxes that have public walkthroughs. That way you have something to reference to get a feel of things.

eventually youll learn how to learn without having a good guided direction but the walkthroughs are nice till then

[molten bobcat]

Haha a client set up a firewall rule backwards

Blocked a bruteforcing IP by placing a block on traffic destined for the malicious IP?

Honey..

I pointed it out and he felt so silly lmao

[rancid snow]

gotta be careful even doing it the right way.

Oops I just ip spoofed my 'bruteforce' attempt to be google 😉

[molten bobcat]

Lul

[manic anvil]

dude it appear that HTB is really the platform to learn was watching a playlist to learn website pentesting from 2017 just for HTB to be mentioned as one of the places to practice what you learned

[molten bobcat]

Nah past two days, same bruteforce ip

[eternal mango]

Ok maybe not a control char, but simple hidden span in between text

[molten bobcat]

An IP block is appropriate here

[austere sigil]

can I have your attention, cloud?

just for a moment

[molten bobcat]

Not at all

What's up

[austere sigil]

thanks

[eternal mango]

I'm sure there was a technique using a control char to hide appended text from a copied string though

[rancid snow]

for sure, its mostly a concern when people do automated ip blocks without a sensible whitelist

[molten bobcat]

Oh gosh no this was manual for sure

[gray wraith]

Me when dojng web proxy module paid off in the first box i touched after it

[rancid snow]

theres unicode whitespace encoding but im not actually sure how terminals parse that

[gray wraith]

Though I have faced a problem alrdy

[manic anvil]

i have question guys , proxy chaim come with linux right ? but i never saw a mention use for it so far only once , why ?

[rancid snow]

https://www.irongeek.com/i.php?page=security/unicode-steganography-homoglyph-encoder

[eternal mango]

Right but that's Right but that'sencoding, requires decoding after

Maybe I'm just being dumb and mis-remembering that invisible span trick

[rancid snow]

its for forcing applications that dont natively support a proxy to use a proxy.

[eternal mango]

span with font-size:0 was one I found in my notes

[manic anvil]

cant it be used for things like nmap and such ?

[rancid snow]

yeah

[eternal mango]

https://jsfiddle.net/n5me8wbt/

[molten bobcat]

Yep

Used it during my OSCP exam to proxy my traffic through a compromised host

[rancid snow]

I prefer other tools that dont rely on proxychains personally but thats preference

ligolo-ng my beloved

[molten bobcat]

I used proxy chains lol

[manic anvil]

it hurt my head like when you would know your IP got blocked

[crimson mantle]

hello

[manic anvil]

also what IP get blocked yours or the router ?

[molten bobcat]

[molten bobcat]

WAN IP of router sir

[eternal mango]

I think there was a control char in the hidden span that was interpreted in a terminal that kept it hidden too

but I can't find a source and wanna get back to my show 😄

[molten bobcat]

The outside world has no knowledge of what IP is in any given private network

Unless yknow, it's leaked

Various other exceptions

[manic anvil]

so in case you get your router IP blocked is it permanant if yes is there a solution for that beside buying a new router?

[rancid snow]

tfw testing nasa and they block you 😭

[jade cove]

Hey guys can i have some help with a command?

[rancid snow]

test from a vps instead

[eternal mango]

Or maybe a prefix, like move cursor to start of line, and clear current line before the "legit" script snippet pastes

[molten bobcat]

You IP address is not guaranteed to be static 🙂

[supple plume]

--help

[rancid snow]

setup a cheap aws ec2 instance with wireguard, connect through that for your testing

[eternal mango]

Damn it that's gonna piss me off now, I know there's SOMETHING like that

[zealous charm]

Getting banned from every site on the internet using Akamai is a rite of passage for bug bounty hunting

[rancid snow]

yeah Ive never heard of it. Would love to see a source if you find it

[eternal mango]

I ain't about to scroll all my likes to find it though 😅

[keen elm]

what would be the easiest way to transfer a set of tools lets say to the pwnbox

[manic anvil]

i will put that in mind

[molten bobcat]

You lease 1 IP address from the ISP. You don't get to choose what it is at any given moment.

[upbeat drift]

Hello, someone know how I can prepare me for the CPTS exam after the Academy path ? I read about the Ippsec YT playlist but some people sayed it is outdated. There is the CPTS preparation path in Labs but most people are not talking about it. Is the path better or the Ippsec YT playlist

[manic anvil]

what you mean

[supple plume]

Ozonator how is your injury

[eternal mango]

Will do, either it's out there, or I imagined it in a feverdream

[molten bobcat]

@manic anvil

[crimson mantle]

curious if HTB is planning on moving it's discord community to another platforme, following the discord privacy issues

[manic anvil]

uh that damn you ISP

[molten bobcat]

This server will be unaffected by the changes

[manic anvil]

didnt it get dropped anyway ?

[molten bobcat]

As this server does not have 18+ content

[crimson mantle]

it's not about the servers lol, what

[supple plume]

I am +18 content

[rancid snow]

I don't think you know what youre asking

[manic anvil]

the whole idea of giving your ID for discord got dropped it got shifted so servers listed as +18 will ask for it

[rancid snow]

^

[crimson mantle]

no, i asking a question

[molten bobcat]

And we're giving you an answer

You just don't like what it is

[rancid snow]

and you got the answer and didnt know why it was relevant

[eternal mango]

🤣 How'd you get on with that thing?

[rancid snow]

This server isnt affected by the concerns so why would it move?

[molten bobcat]

And also, htb will never ask you for your ID

[rancid snow]

outside a show of solidarity or something

[molten bobcat]

Not that I'm aware of at least

[crimson mantle]

it is, very relevant..

[supple plume]

I'm not safe for work 🥀

[rancid snow]

Yes... exactly our point

are you esl?

[zealous charm]

Only because you’re not working!

Get back to work!

[supple plume]

Hey madf0x we got banned that yesterdays weirdo

[rancid snow]

oh rad which one

[eternal mango]

Meant the refresh token thing, or was that not you

[supple plume]

Paralelelilope

[rancid snow]

I forget weirdos like 10 minutes after I stop interacting with them

[rancid snow]

lmao

[gray wraith]

Much better, thanks for asking! DIP joint feeling better, bicep tendon too. And today my new climbing shoes came by

[rancid snow]

Weirdo got baited into being a weirdo so easily

[gray wraith]

Im battling gym tmrw vs figuring out a box

I might do da box

[supple plume]

Oh the refresh token. I saved your comment about it to try tomorrow I got in a meet and had to go away from the computer

[molten bobcat]

I have my exam report to spruce up this weekend

[gray wraith]

Cuz I feel like I know what I have to do

[eternal mango]

Cool cool, good hunting

[gray wraith]

For CDSA? Or what was it called

I dont remember

[molten bobcat]

Yessir

You got it right 😄

[supple plume]

Do you have vip?

[gray wraith]

Yeah vip+, i have to make better use of it

[supple plume]

Which box will you try

[gray wraith]

Iirc I started working On reset

Have you done it?

[supple plume]

I don't remember

[molten bobcat]

Paper is a reference to The Office

[gray wraith]

I have to study more and harder

[eternal mango]

Ok, I think this was the technique I had in mind, 10 years ago https://github.com/dxa4481/Pastejacking NFI is still relevant

but that's for sure the one

[molten bobcat]

Pastejacking.. huh

[eternal mango]

They had to name it something I guess

but yeah, overriding clipboard copied contents with simple events in js

[molten bobcat]

Nah brah, just copy paste powershell invoke web request immediately

It just works

[eternal mango]

Ok sorry for sharing

[molten bobcat]

I'm just kiddin

[eternal mango]

I know, so am I

[molten bobcat]

I think what you shared is very interesting

I crave.. a burger of some kind

[frigid mountain]

https://tenor.com/view/reigen-hedgii-burger-gif-picmix-gif-10155226696160827721

I suggest a hamburger

perhaps a cheeseburger

definitely a meatburger

[gaunt gale]

a beefburger

a sheetmurder

[chrome tree]

https://giphy.com/gifs/PixelBandits-lotr-lord-pixelbandits-gcJtwIVrbnLClD0Ntm

[gaunt gale]

a frankfurter

a flat earther

lmao

I had to

[rapid badger]

fry a runny egg in the burger juices after finished and slap it on top of the patty

[scenic maple]

it might
if you claim to be underage and then say you arent

happend to bingbong

[gaunt gale]

fly a runny egg on your face and slap your face on top of your buns hun

[rapid badger]

how bout i slap deez nuts on yo face ?

[winged ridge]

so I spend 2 weeks straight just to rapport a high bug that is a duplicate?

are you kidding me

[lime trout]

This is not true lol

[winged ridge]

https://tenor.com/view/druski-rage-angry-annoyed-whatever-gif-5126333390325209476

[zealous charm]

hopefully the original bug wasn’t submitted in those 2 weeks

[lime trout]

A) sanctions compliance
B) you say your under 18

[frigid mountain]

😄

[winged ridge]

idk but I feel that they lying

[lime trout]

Or if you share a name with a terrorist

[winged ridge]

and the bug is now patched 3 days after I rapported it

that is SUS

[crimson mantle]

yeah, generic answer from people that only understand stuff on surface level.... my bad for asking in the general chat where people like you think they're gods and MUST share their opinion. But it doesn't really mater to me, just wanted to check... and btw, you should know this isn't just about the age verification thing... that was the the straw that broke the camels back, as the saying goes. You do You

[scenic maple]

us sanctions typa shit?

[eternal mango]

Lol wtf

[terse dirge]

Get in n out

[lime trout]

Yeah, US UK EU ETC

Need to make sure your not them

[zealous charm]

Depending on the platform you should be able to see the original report (or at least the date and bug type)

[scenic maple]

someone like them playing htb would be the funniest thing ever

[winged ridge]

they are not allwing me to see that rapport

[crimson mantle]

no doubt you're going to correct me on my grammar too

[dusky smelt]

are you talking about "hackerone" platform by any chance?

[winged ridge]

yes

[dusky smelt]

bruh

I had similiar problem

[zealous charm]

I believe that usually means the original report had more info or sensitive data compared to your report

[dusky smelt]

thats why I quit

[winged ridge]

like if that is actually a duplicate rapport why dont they let us see that rapport?

[dusky smelt]

and they are deleting reports I think after they "close" it

[winged ridge]

that is a SCAM

[dusky smelt]

idk if it's a scam but it could be tho

still, it depends on their day xd

[rancid snow]

neat, I def see how that could elevate the clickfix attack(if it was necessary to elevate it lul)