#general
1 messages · Page 490 of 1
I prefer bugcrowd, but all platforms are pretty much the same
thats only cause its orange
and they're unfair it seems
same color as burp
I'll take a look at it, thanks
My burps are invisible
Burp pro is blue 
i am gonna make a detector for it ur screwed
community edition on top
zap enjoyers
Friends dont let friends use ZAP
you aint got zero days
bro I use curl
Gotta have a bug of value to sell to anyone
i was hired by palantir to tell you
soonTM
Complaining about dupes means you probably don’t have any bugs a buyer would want 
.
talking to me?
ye
Yoo..
Whoever posted about selling bugs outside of bounty platforms. BB is nice because you’ll get paid $300 for shitty rXSS, outside of BBPs no one wants that
Ok I think I've played with this enough for today 🤣 Terrain, mountains, random forest generation https://asciinema.org/a/FkN6ZmarYAWlxQ1N
bugcrowd triager told me to break scope to prove further impact and I, in polite language, said wtf not unless the actual program managers tell me too because I dont want to go to jail (it was nasa) and that I was okay with the issue being declined if so.
3 months later the issue was accepted and I got the nasa thank you later.
But its made ne a little skeptical of bugcrowd. I can only imagine the trouble someone could get into if they thought the bugcrowd triager was actually authorized to make that request.
I was paid by palantir to elicit ven0om through copious long term psychosocial abuse techniques to share his 0 days out of frustration and demoralization
Unfortunately it seems like BC has the worst triage team right now. That is what I hear from many people
The issue involved a leaked developer credential. So they were asking me to try to log in as this specific nasa employee lmao
Bug bounty people (who dont just automate) are basically cheap imported labor comparatively, you are basically an immigrant hotel room cleaner, good job
I am a BC fan, but the other day I had to guide one triager on how to install a desktop app that was in scope for the program 😆
I really wanted a nasa letter
Did you get it
I’ve bug hunted for over 5 years with no automation and made more than a full time pentester job in most of those years 
yes
There is a ungodly difference between private and public bb
My firm was primarily staffing people for private bb, me included, and it wasnt even funny how much we made
how do we even find a bug man
oh fuck yeah
ai
sorry
how do we find a bug in open source
fuzzing.
literally 10s of thousands of subdomains
I look at both public and private but hunting on private does tend to be better. Especially “on demand” programs where they give you the invite before the program launched
LOLLL
I laughed so bad at this
oh
I just picked out interesting sounding ones till I found some gitlab instances and started reading code
You mean, it was shit Pay?
🎉
the year is 2026 and you want to compete with AI at Bugbounty? you might be stupid sir
No, it was insane. I was specifically doing hardware bug bounty
I want to go back and get another letter for something more interesting but I have other stuff on my plate
Oh aight, you made me think which way you meant it was going towards
Lets do socratic method
why do you think its not cope
If AI finds a bug did you find it?
Define attribution
I think it varies.
AI has not been useful for someone as cracked as frost is, it wouldnt have helepd over standard automation tools for the issue I found.
But with its assistance Ive been able to analyze some projects much faster than if I was alone
Frost is cracked because hes been developing his own fuzzers for years
Its that simple
Define attribution though
Can you really say you found a bug if claude did the work?
Therefore would claude be credited?
I say yes because AI is a tool and if the bug isnt validated it doesnt exist
the person who used the tool correctly gets the credit
Would you define the ability to perform bug bounty as a specialized skill requiring general intelligence at a baseline?
ai is not leading bro to bug, bro is leading it to the bug
jk I was using AI too and then I realized how useless it is
I'm talking about Bug Bounty too, and I'm calling it useless about this specific thing
(you are on the kill list now moron)
it is useless except it can help you learn thing or two and thats it
which AI do you use?
Wait til he finds out about private models lol
I know someone whose gone from 0 cves to nearly a dozen within a few months thanks to AI assistance, and I dont even think his workflow is optimal
on my todo list
and it's useful?
Only one insane box this szn rip
then I'm scammed
id be curious how you were using it that lead to the conclusion of it being useless
I'm talking through my personal experience here, not some google researching about how AI is useless, I'm just saying that it's useless cause it was indeed useless for me
Tested inside fedora 43 container, ubuntu 26.04 container and on regular fedora 42 installation, same error Took example directly from README.md GCC is present and can compile code just fine: root:...
perhaps the onus is on the person querying
I believe that simply because a lot of people use it wrong. including(especially) die hard ai bros
Do you avoid using sqlmap because it makes SQLi too easy? AI is like that for tasks like code review, use the tools at your disposal
Write your own
uhhhhhh
You will understand AI better once you write your own (at the very least) Naive Bayes model
In what world would anybody care to seize your goonpad
I remember using gpt2 lul
I have a gpt2 model on my GitHub still
To be honest, the first thing I realized is that it started mixing up things and it kept leading me on the same thing over and over again even tho I told him that there's nothing wrong with it or that the thing he's trying to find is the thing I told him I found etc.. It's more about that it's confusing people with no knowledge with this basic problem it had
How do i even respond to that
just like plus cannot compare to premium or pro
ofc it's going that way
None of us will have access to high end models very soon. Make good use of them
Interesting, I usually dont have issues with it retreading ground I said to ignore.
I absolutely agree that for people without a proper foundation its very easy to let the AI push you towards chasing down rabbits
I just think it’s neat to review code
Ive been enjoying my code review journey for sure
I have some more planned for after work tonight
I understand
as with anything in modernity you get drip fed the addiction and reliance until they pull the plug on access

yeah that's what I'm trying to say but as for the problem I previously mentioned, it still might be problem with my leading him through the bounty program cause it was a year ago and I've had knowledge but not good as now tho
any group of people in power would not allow general people access to equilibrium
God knows
What does God know
everything
I said God knows about this
born too late for manual bug bounty, born too early for AGI, born just in time to submit AI slop to curl's BBP
it cost alot to run these models! and with no customers there will be no AI
oh there'll be customers
AI makes no money, it is a military investment and tax payer is responsible for its dominance
AI is usless without us humans, cuz AI needs new dataset all the time to train

and when there are no dataset the epochs of training will decline
and the models will be much stupid
I think skidzz agrees
becase you cant just say "oh AI will generate its own dataset" that's not true
yeah it is...
are you guys living in fucking 2021
AI PRIMARILY trains itself now
Let's say that AI is acutally trained by himself! who will judge whats wrong and whats correct?
You are demoralized, I cannot reason with you
The model trained to do so.
what do u mean "yet"? it will never be
where did you get that info, I'm curious
It was
okay no doubt about it! but when you want to train an ai you need to classify what true and whats false! and who classify that? it's us humans
lel
the pilpul is entertaining guys but get real
you guys fall for AI videos every day
data can be useless data
lets take that for example! imgaine that we let AI train by himself, he will create his own objects
AI NEEEDS HUMANS to continue to improve
That ended last year.
https://research.google/blog/a-decoder-only-foundation-model-for-time-series-forecasting/ ..just sharing as it included mention of mixing synthetic real and real world data.
I don't wanna get involved any more than sharing an interesting blog post and new forecasting model (new ish)
Have u heard abt AI that is able to BUILD itself? Ye ik
Ones like SEAL and autoMl Zero
How come it's not Friday? It feels like Friday.
is there any dates where people do live hack the box sessions in this server? want to start learning more by watching others in real time
Just go watch ippsec or any of the other hundreds of content creators
I mean it's Friday for me haha
yeah true, just feels better watching others in real time cause I can ask questions lol
theres twitch streamers for that
not against tos ?
10 min of work to go
Retired boxes
streaming live boxes is against tos whether its be twitch or discord
Guessing academy is a no no also
correct
how tf would people doing academy content be allowed lmao
Oh it's danpatrick, I thought u were some new guy
😄
I can't help with Discord issues, sorry.
you formatting it correctly?
your name correct? lul
you say that buttt....
you cant prove thay without doxxing yourself
I'm excited for my new toothbrush and waterpik coming from Amazon tomorrow 🪥 It's electric. Never had an electric tooth brush before
getting raided isnt fun
Nice
does turn into a fun story later though
i just figured out what a music album is
when I was raided they werent even looking for me. I just happened to be living with my then gfs family at the time and it turned out her dad was a pedo
Damnnnnnn
dont spam lame shit
It's not spam?
Lol
Nah It's NORDVPN
who accepts random friend requests?
COVERS UP YOUR IP AND INTERNET TRAFFIC
Idk maybe u?
Lol
interesting, why me ?
Idk
AND WITH ONE CLICK I'M CONNECTED TO THEIR SERVERS INSTANTLY
Lol
is this a nordvpn ad ? I am confused
😭 😭
Lol
Nah
luckily the dad confessed right away so we got let go relatively quickly.
He ended up going to jail for 2 years, got out and died of a heart attack in his sleep a month later
The fucks wrong with you
I see, 2 years is a bit low ain't it?
but sitting in handcuffs for three hours on the lawn held at gunpoint sucked ass. Esp since I got woken up with that shit
where freddy fazbear
He was redistributing materials but wasnt a 'creator'
so they didnt actually give a rats ass about him outside of confirming where he got his materials
fr
me and my gf were the last ones out
so it was just megaphone blasting 'madf0x and blah come out with your hands up in the air'
Ye but I mean even a simple port scan to see open ports is upto 3 yrs and 5 lakh in fine. And pedo's get 2?
Crazy world we live in
in what jursidiction?
India
crazy
U should have been able to tell by the way I said 'lakh'
idk what the fuck a lakh is lmao
100000 rupees is 1 lakh
larp central over here
idk anybody thats been arrested for just a port scan before
In F12 we trust
tbf someone dumb enough to get caught admining doxbin would be dumb enough to blab/confess about it and their arrest in a htb discord server

But I'm sure u had a adventurous life so far
why
😄
alr bro
My boss asked me for help with a host
I found a completely separate problem
Oh no.
Oh he's inspecting for renamed windows binaries
I found a malicious pdf editor

Things basically a c2 lmao
With the added benefit of being a PDF editor
So y'know
what is c2
I create HTB accounts with names that are actually C2 commands
Those Flipper Zero compatible boards finally arrived yesterday 😄 They're soo teeny!
If you can send and receive, it can be used as a c2
What?
I don't think they sell usernames and I don't work for HTB anyway
what is the use of that
But nah gonna have some fun with it
nothing
That does look weird lol, it's just a shadow
It's a small form factor board that is compatible with Pineapple Zero, so used for working with various wireless and connected devices
Wait
Flipper Zero, not Pineapple
lol
It will fit in a wallet as a business card hehe
The cylinder must not be harmed.
Not a massive battery life compared to the Flipper obvs as it just runs off of a coin cell
but duration isn't everything when you need something like that
cant u hook a small battery to it. Looks like it takes usb-c charging
Didn't know charging had preferences..
Charging 
xD
You could hook it up to a small battery, but this kinda kit generally used for quick interactions
Do not put magnets on a motherboard
Do it, you won’t
You're right I won't
You're not sitting there for 30 minutes prodding a flipper when using it in an engagement I'm sure
But I know nothing
I could just throw the flipper and knock the security guard out
How do I get the cylinder out of a very tight spot?
Attach a rope, Flipper Meteor Hammer
Between my flipper and pineapple pager I like the pager more
It runs a full Linux OS so you have more flexibility
But both are gag gifts
I pissed off my dog with it by remotely controlling their rc car toy
That’s all I’ve done with it
He was barking his butt off and he did not like it one bit
Ok yeah that didn't deserve a reaction
99% of people will just use them to turn off the pub TV or capture some wifi handshakes
Huh?
I meant my attempt to be funny
❤️
😮
Oh well
Funny is funny
I'll take it
But yeah, remote control cars are mostly 2.4ghz these days right?
Defcon this year will just be a flood of deauth packets from pineapple pagers
Time to find a 0day in it to pwn everyone’s “hacker” tool
Someone chucked out a plugin to listen in on the pager bands not long after release
I almost got told off for discussing listening on the very same bands the week before that lol
Which yeah technically illegal
you can physically track them with portapack foxhunt
I'll go to defcon and connect to the first open wifi I see
Hahah
yolo click, love it
I wanna try to go this year
Not been to a conference in so long
but life be life
Only if you don’t change the default MAC address and hostname and other identifiers
But yeah might be fun to track em down
no you can physically track them because RF can be triangulated
Big dawg is cooking
so if someone is generating a very loud 2.4ghz then you just fox hunt them and follow them around
same logic applies if you're being stalked by federal law enforcement
generally TPMS tho
It’s defcon, you can just follow the smell of BO to track hackers
It's also defcon, just point at a random person
Odds are high they have something
😄
Last (only) time I went, there was a massive lightning storm on the last day
I’m sorry I can’t comment on this without my lawyer present
realistically if you do that some DND reddit moderator will start crashing out and shriek at you to stay on one side of the hall
even if there's only 3 people there
because DEFCON goons are fucking losers
Kinda true tbh
maybe that was a little harsh
@maiden anvil so I’ll see you there this year 
nope, doubt I'll ever go again
who actually works in cyber in here ?
tickets are probably 1000 this year
I should be there for BH + LHE, but idk about defcon
Defcon had a bump up to like what 400? 500?
I cant remember exactly how it went but something like 200 cash at door
to then 300 with credit card
to now 500 with credit card or 500 cash at door
and they went to a less expensive venue the year I went
so not sure why they jacked up the price
and I doubt the 5% transaction overhead is cutting into their revenue
but "how are we supposed to make any money???? 😢 "
Now defcon is like $500 for a shittier location
Did you find the tinfoil hat crafting station?
Nope, only LARPers in this channel my friend
no but I did find the scrap beverage cooler competition which was pretty neat
guilty as charged, I am noob
Yeah bro I bet you’ve never even exploited a headless browser
or used a C2 burp extension
Or used nano
Rumor has it Burp C2 is FUD out of the box
Holy crap fox just ran through the garden and jumped 8ft over the fence
You go foxy
That scared the crap out of me
red teaming in mortgage companies is my next move
go where the money is
mb
Until your run nuclei and it takes down the whole federal treasury
or your coworker tries kerberoasting all kerberoastable accounts simultaneously
do people actually use nuclei
knock knock mfers the red team is here
it looks so boring
We want spn = */*
it's funny to me that all problems can be solved with an E5 purchase
Someone, who will not be named, by mistake ran responder in the wrong terminal. It was supposed to be in a lab environment. It was not
Bro you could take out 9/10 consulting firms by running nuclei over open ports
The glare from the it dept they got could cut steel
lol
We don’t sell solutions, we sell products
nuclei just looks like a newer nessus
The WiFi mesh in that office kept crapping out, and the explanation they kept propagating was that it was due to planes flying overhead
And how many millions have Nessus reports generated? There’s a reason their “export to PDF” feature lets you add a custom company logo
fair
Dawh, those cards came with a little cat keychain thing
I never used used nuclie, is it like nessus? Or just checks web stuff?
It’s like a better Nessus for web ports
But yeah the newer templates support other protocols
And how expensive is it?
Nessus is just too expensive
It's open source
:0
Alright time to check this today
Every external pentest these days is NNN (nmap, nuclei, Nessus). If you aren’t doing that you are behind
The hackers NNN
I love go so much
😼
Yes sir, if you go into any interview and don’t know project discovery tools you will be rejected
go is noice, not worked with it much, but when I did it was pleasant
Had a poc replacement for OpenVPN years ago in HTB
Wrote the client wrapper in go, and the overlay network was also written in go (that bit wasn't done by me)
Would've been so nice if it had gotten out to production 😢
projectdiscovery does put out some rad stuff
I heard about nuclie, but never bothered (tried nessus once just to see how it works) cuz i just assumed it's paid
I just don't bother if anything is paid just for testing (that requires 4 souls to buy for a week)
I remember there was something called OpenVAS too
I Wonder if my crop runs even one
Corp*
Aye used OpenVAS before

Greenbone?? That was open-source too
Used that for testing too
Arachni was another we played with
From what I understand, nessus is great but not as great as it charges
Idk how it maintains the dominance.
I don't really know much about it so I'm assuming it barely scans stuff and map any known vulnerabilities
No longer maintained that one though I don't think
Hired
Not hired
Oh ok, they deprecated it and replaced with "Codename SCNR" https://ecsypno.com/pages/codename-scnr
Not tried that one
Paid, 350EU license
Ehehe, lurking here is enough
I can just read y'all's message and find out stuff about tools to talk to.
oof
Oh well
That's a harsh feature scaling model
Well I mean, features not in community are pretty basic to be excluded
Community gets basically nothing 
but eh
business be business? 🤷♂️
Might still check out the community edition
Just out of curiosity
483mb sheesh
Mix of node and ruby it looks like
eh another day, nn
ok
I want
Gimme
tomorrow is last day for working to switch like a simple developer for a weekend hacker

Theirs no off topic
But I wanna send an abnormal amount of messages to someone willing participant
I can produce around 5 thousand texts/giphs
If interested hmu in DMs to stay confidentcial
lmfao
I too have friends craving for thousands of texts a day
Ok you hear them out
its enrichment
Tell us more sir @ivory burrow
Oh no
Oh yes
every text brings them joy
That's not where a phone is supposed to go
their life support system is hooked up to their phone and they need texts to live
Are you interested
Tell me more first to be interested…
I’ll send pics first as proof of so
lol
So I’ll explain a bit
Go to DMs
iPhone has shortcuts
Explain yes please
Don't spill this crap here
I can’t wait to see the sleep score
I purposely made sure it is disabled so you do not lOOM OVER ME
LIKE THAT
HEY ALSO
IM NOT THE ONLY BRIT HERE
GOBLIN IS AWAKE TOOOOOOOO
LMFAO
Yeah this is goblin’s answering machine
My fault
Oh fucksake
Nhs at their finest

I dmed u
They're both "off list" meds as in not the usual, so not kept in stock, so kinda expected it
but kinda hope they'd have SOMETHING for me
Mb goblin I asked first respectfully
You're advertising services
When you dmed me I grabbed your ip address so now you have been reported to the international police
It’s not illegal if I have consent
Don't make me do it
But yeah my ip brb let me grab it from ip chicken for you
Yo what I js came back😭 😭
Ahhh nice one, use this form! https://nsa.report
fuck you
of course it's skibidi toilet
Ok
I love trolls
ohhh you in trouble!
You explained a CRIME
What
10.56.202.106 random ass IP i came up with in my head
lol
Omnomnoodles
We must stop meeting like this
Chow mein and orange chicken…
Why are we the same braincell
That’s here wdym
Orange chicken is soo good. Ive been practicing making my own
I love it sm
MY script kiddie server
Right.. before bed I'm curious about if this model can do this
One shot port this Python ascii thing to Javascript and WebGL
I got the breaded chicken part down how I like but I need to start experimenting with making my own sauce
3 2 1 GO
Maybe it can… find out…..
See Im not smart enough
So
I choose life
Give it to the professionals
Gmo and all
🥬
Choose a jb, choose a crrrrrr, choose a famfam, choose a fucking big vr headset
spammer
What a tune
I am unbannable
spam
Instead I will be muted
And they will laugh at me
I provide too much entertainment value here
😄 It'll take a while, maybe 30m or so
Make it go faster
That's what you assume
This is merely factual marcie 
You're explaining this like a fucking jester being restrained from talking bro😭
@austere sinew if you're so unbannable, post a homelander milk gif
I am the jester
Oh fuck no
I can give the seadris treatment and tempban for a second 
Timmy tuff knuckles over here
MEAN
It's working through the shaders atm
STOP FUCKING SPAMMING
Renderer is supposedly done
YIPPEE
No way this works first time
WHO THE FUCK ARE YOU DONT TELL ME WHAT TO DOOOOOOOO
THIS IS MY DRAMATIC FLAIR
Hampter
I am Hampter.
I HOPE A CAT COMES ALONG AND EATS YOU
If it doesnt
I shall laugh
At your pain
Indefinitely
I let off a mystery aura that kills cats as soon as they come near me.
Despite the fact that I couldnt achieve half of what you do
Shower bro
And also sometimes myself
Don't be rude
My fav is the fresh falls deo
Ty :>

It's only been Friday for 1 HOUR (here)
Yes because He was infact Spamming
At least ease in to it
It's 6 in the morning
Never
fuh naw👎
U know I tried to act as a nerd and woke up at 4 tday
if I had a genie my wish would be for everyday to be monday
Youre evil
wow
I hope your sock gets wet today
Ye i now , i told Abt time here
This is the evidence you were in the army
This right there

My coffe atp is just sludge
Sicko….
Patrick wants it so much
He's look at that cube
Those eyes
I saw a cursed video the other day
Be so glad I didnt save it
It would have been a perfect time to traumatise you
IT was ON INSTAGRAM
10.56.202.106
Actually
oh fuck dude thats mine
Uhhh
no its not bruh
Oh apparently I favourited two
you HACKED me
No I hacked me
really?
Its a random IP adress I figured out in my head
oh yeah then how do you explain this
Ye I can't even remember how many times I got trolled with the embed failure gif for the past years
YO BRO I DIN'T DO THAT SHIT
LIES!
how did you do this?!?!
NOOOOOOO
I SISN'T SO SHIT
HE HACKED ME
NOOOOO IT'S FAKE
THIS MAN NEEDS TO BE CONTAINED
I DIDN'T DO ANYTHING ITS AN IP FROM A CRUISE
rip
LIAR
Hamster hacks the crab. How ironic
THE PROOF IS IN THE PUDDING
NOOO I'M TRUTHING
please dont delete me 😭
THE FUCK DOES PUDDING HAVE TO DO WITH THIS
Morph it’s okay morph he cant get you…
Kinda seems like no hacking today?
We’re gonna ban him before then….
You terrify me
😄
First shot
Between hacking checkups and sleep score checkups
I won't m0rph I won't do anything just release the files saved on your PC
HELL YEEEEEEEEE
Even the unredacted Epstein files.....
Ye release all the feet pics u have of golam bro
THE FUCK BRO
Lol
The internet is a scavenger hunt of bounties just waiting to be found, and who doesn’t like scavenger hunts
I have evidence of @zealous charm and Tib3rius torching a car in a cornfield wearing bug crowd tshirts
Why are you now dropping weekly lore
Wait send
I want this
Well, this is true
@austere sinew
I need this in fact
OH FUCK YEAHHHH
wild if this was vibe coded in one prompt
No no
oh makes sence
@maiden anvil where is the pic 
It was ported from a Python script that renders those scenes in Bash over to HTML and WebGL
..in one prompt
I actually just checked and for some reason I only have the original original
I dont have the torch pic anymore
Right I’m just gonna give up with my life and start selling bathwater there is no competing anymorr
@dim lagoon post music in #magical-tunes
dont think you want the parking lot doxed
I have the edit 
Wdym "Parking lot"
send ittt
it was originally a pic of them walking in a parking lot
I edited it to make it look like they were burning a car in a cornfield
I made a dataset in the stein library and turned it from pdf to mp4
What
Jfc
I’m gonna have to scroll for the original
FUCK YEAH
looks very painful but much worth it
<@&861185840277487616>
U can do coloured tattoos? Damn
There is a clear difference here.
color realism
Damn
have you read the #rules
its a pg13 discord server
@eternal mango @sturdy thistle ping
Mb bro
but it's european pg13 so...
Wake up europeans
Damn thts enough mate, u don't have to make it worse
Sleep score where
crash out
everytime i try to sleep there is a serious rule break
NEVER
cold world out there
cold world we live in
JA, WAS MÖCHTEN SIE?
U are hot tho
What that has nothing to donwith the hampsyer guy
I just wanted to bully my fellow europeans
Oop I put in german mbbbbbb mods
Don't devil's advocate this; the rule is generally- there are children in the server, don't share things kids shouldnt be seeing
^
Just because kids do see things, doesn't mean they should be seeing it
We're not naïve enough to think children dont go looking for websites they shouldn't
right i'm just saying europoean and american pg13 ratings are different culturally. Like you can say c*nt all day in england but in the US that'll give your mother a heart attack
fav australian word hahaha
something like those files though definitely shouldnt be mentioned willy nilly - they're pretty scarring
but only if you are australian you can say it hahahah
WHEN CHEESE DRAW OPENS YOU GOTTA PAY THE TAX
Does new zealend count?
oi it's our word too in britland
nah. not australian enough
I just found out
dont make us recolonise
Batman is the weakest of tibbetan monks
unfortunately, it came from the land down under
ROIT MATE
my fucking eyes are COOKED
WE'RE HAVING THIS WAR
chocolate thunda from down unda
I have one and I'm trying to transition but it's so hard
im about to send a billion emus to fight you for that word @tough oyster
oh no the emus......
did someoen say EMirU's?
They actually lost that war
Few the aus military lost
That is why I used that threat
Oh my god..
They have a number of hell for Dyslexics
+44 1913131337
THE. NUMBERS. KEEP. MOVING!
I kinda want i...NO
I already have stupid domains
I don't need a phone number that brings pain
what challenge
silencio
four four one nine le- le LEET
too north africa for that
elephants are a little more south
ah lol
If it was't a landline number, I'd totally have bought and ported it lol
lol
today is cube talks dayyyyy
speaking of which, falcon still hasn’t replied to my request
what have you done donut....
well, my request was to be a guest speaker of cube talks as g0blin’s junior
I second this @static pasture MAKE IT HAPPEN
NEYOOWWWWW
LOLLLL
I honestly fell asleep on the sofa last week, sorry
happens
no cube talks last week tho
MAKE DONUT THE GUEST SPEAKER
THAT IS PERFECT
Not up to me, community teams call 🙂
name names.
i shall terrorise whoever needs to be terrorised
donut shall be on this panel.
It was just a funny thought last week
falconspy
but please don't
lol
Like if you see them active you can say something right
but don't terrorise
was just an idea
Thanks
thx @austere sinew for supporting the idea tho
anytime donut you are precious and shall be protected and supported
👀
hi 🙂
cough emma cough possible idea
me not totally trying to be guest speaker
i mean, i will be leading tmmrws cubetalks 👀
WHATTTT
Though guest speaker is better for our AmA or Cube Cast format
perfect opportunity
true
tmmrw do be monday though
wdym
donutmaster
I am doing the pro lab but it is extremily slow. The target becomes unavailable every other minute. Are we facing any infrastructure issue?
hey can I get some help
don't ask how but I somehow deleted Documents, Downloads, Music, Videos and so on
on kali linux
will this affect anything
except the things I lost
from those files?
thanks man, after deleting my system by accident everything feels risky rn 😢
Yeah, if that is the case... it is not worth spending the money on prolabs. It is totally unstable
#1 have u tried other pro labs?
#2 might me just rn
I mean surely youre running kali on a virtual machine anyways and dont store anything critical on it and can just rollback the snapshot or do a clean import, right? 😉
started web proxies module today haven't had any problems
#1: ok so let me rephrase: Dante is not worth it - since this is the prolab tha I am trying.
#2: I didnt get your question or afirmation.
I'm at my meetup location waiting for people to show up no one is probably gonna show up tonight
and I'm kind of sad
meetup officially would have started at 7
so I'm gonna wait until 8
we'll see what happens
Dante, as I’ve heard, is pretty good
so the unstableness might just be temporary
Ayy rastamouse :D
Dante is good. I'm targeting/focusing on doing the AD prolab.
After I've done CRTO, I'm gonna aim for rasta prolabs
noice
Good Morning
How did you do that
I organized this meetup no one came
I’m sad about it
In 10 minutes I’m just gonna go home
13 minutes actually
But still
Ya it sucks
yeah well, I was doing a little research since I'm new to whole cybersecurity and it's branches so I pulled up this command from tiktok: rm -rf --no-preserve-root / (or was it another one I forgot, starting with sudo rm rf and something more I guess) and I hurried up not looking at other comments nor doing any research so I pretty much f..ed up it and had to reinstall it
but pros are that I got a newer kali cause I was using that one for almost a year
cons: I feel sad for not installing it as a system for dual boot but maybe I will later on when I understand it better tho
I've had some time lately and I started learning some things about networking, I know python and I've learned some C# - started learning bash and I plan to learn go too, I think I have solid knowledge about linux as OS right now and I've learned many things when I started doing machines on HTB with help of yall but the thing is that I don't know what should I learn first, to be precise what is the best "roadmap" in cybersecurity, and I am planning to learn more about ports cause I get confused by them. I also realized that when I start a machine I get confused fast and don't know from where should I start, typically nmap > site (if there's any) > trying to find a vulnerability and its CVE and I did great, again with the help of yall, with easy machines but since I completed them all I tried some medium ones and I see that it's getting (of course) harder for me, I was thinking about starting a course here on HTB but I'm not sure which one would be best to start with, so I would appreciate some help here, my plan was to get a job as penetration tester.
You can think of ports the same as the physical ports on your machine. Except they are virtual and you have 65k of them
that's helpful, thanks for explaining man
Hello, good evening. I have a question regarding the evidence of certificates. I'm taking the CJCA exam and I'm unsure if I can paste a screenshot in the Collected Evidence section.
I love the way the comments ignite a license war, and furries are also mentioned 
Why are furries mentioned 
That you created
I HAVE COMPLETED EVERY VERY EASY MACHINE NOW ONTO EASY
WE HAVE A WINDOWS BOX !!
Imma say that your job as a pentester is to learn quickly
And efficiently
If you're gunning for that then you're going to see a new tech stack once every like couple of weeks to like 2 months
So your job at this point is to get really familiar with the most common stuff. Like, you should not just know the principles behind like web apps, but you should also know principles of how they are built, what different common stacks look like.
At this point I recommend doing things that make you get really stuck a lot


