general

[sharp shuttle]

its become ubiquitous, and thats why software engineering is dead

[clear anvil]

Ohh too much caffeine

[molten bobcat]

Because that's a pretty immediately in demand skillset?

[muted olive]

Thats concerning

[civic lance]

Broooo I hate seeing those tweets saying AI is writing 90% of code

Like 💀

[molten bobcat]

Guess 90% of code fucking sucks lol

[clear anvil]

Is there anyone still down to collaborate or is it too late to ask..

[rancid snow]

if you include ai-assistance and shitty code its correct

[molten bobcat]

Shamelessly stolen

[rancid snow]

yw

[sharp shuttle]

lolol

i love that

[civic lance]

$2509?!!!

[sharp shuttle]

i hope it happens more often

[molten bobcat]

Ai is gonna take your jobs tho

[gaunt gale]

Hi guys

[sharp shuttle]

Hello robin

[molten bobcat]

Not if you're like.. any sort of bar above completely worthless sure..

[muted olive]

TNG, Season 3, Episode 16, "The Offspring"
You send a star trek TNG gif, chances are I can identify it

[rancid snow]

look Im dead serious when I say every vibe coded application thats more than a toy/script Ive examined Ive found vulns in

[civic lance]

Nah just one more data center and it will

[azure wasp]

AI is bad

[molten bobcat]

I hope it all burns to the god damn ground and people are forced back into swords and shields

[rancid snow]

AI is tool, users are bad

[civic lance]

One more LLM update

[azure wasp]

Yup

[dense turtle]

hoo lee sheet

[rancid snow]

and that includes(especially) ai bros

[gaunt gale]

Is it bad to be depressed over being sick? I’m mad at myself because its very difficult to get anything done today. My back aches I have throat issues and a lot of mucus tho I took something to suppress that and it works mostly.

[molten bobcat]

I wish them all a very lose all your money

[molten bobcat]

This is a normal feeling. Rest dude. Being sick is something you cant change lol

[civic lance]

The entire market is backed into AI

[rancid snow]

im convinced that proper way to utilize AI successfully involves a healthy amount of skepticism

treat it like demon summoning

[molten bobcat]

I hope everyone loses everything

[gaunt gale]

Thanks. Ok.

[civic lance]

How do u properly use AI

[muted olive]

https://tenor.com/vIlkQ7Bpvai.gif

[dense turtle]

i just discovered that my mysql sintaxes dont work in sqlite 💀

[azure wasp]

https://tenor.com/view/crushed-it-gif-18087987023179949748

[rancid snow]

you perform a ritual to summon forth an entity to perform tasks or exchange knowledge, but must be done with care because itll slip in little bits here and there to fuck with you

[muted olive]

You use it as a force multiplier. You dont use it as a crutch, and if you do, you're one of the guys getting replaced by it. Otherwise, no.

[molten bobcat]

It's hardly a force multiplier for me

[rancid snow]

fact check it and dont give it control over anything you wouldnt give everybody control over

[molten bobcat]

I am burdened every moment I have to waste fact checking it

[muted olive]

It speeds up a lot of stuff for me but is also a huge pain to deal with it

Trade-off I guess

[molten bobcat]

I just don't bother

[muted olive]

And yeah fact checking takes up time

[rancid snow]

Ive found great usage with it speeding up reverse engineering segments for me

[muted olive]

Plus whenever its logic is fucked, or when it loses context

[rancid snow]

with the caveat that I know enough on my own to steer it in the direction I want

[molten bobcat]

People have told me constantly that they're waiting for my job to get replaced by ai but holy shit trusting my role to AI would be devastatingly stupid

[muted olive]

And I believe people who vibe code lose their model's context frequently and it forgets why it coded something a certain way, and you get spaghetti in the end 😂

[molten bobcat]

I call people to tell them they have to arrest an employee bro

[civic lance]

Obviously when programming

like asking questions about why this piece of code was used

[rancid snow]

for programming specifically, AI is best for templating and short snippets

[civic lance]

Or explaining a piece of code

[muted olive]

👀 how so?

for RE specifically

[molten bobcat]

I raised a no action required case for Proton on Linux Mint today lmao

[civic lance]

You work an IT job?

[molten bobcat]

No

Im a security analyst

[civic lance]

Oooo

Nice

[rancid snow]

giving it snippets to explain to get a rough overview of whats going on. Helps for quickly deciding if its something I want to spend more time on or skip over

[molten bobcat]

I'm a tier 2 shooting for a promotion this summer

[civic lance]

Tier 3

[molten bobcat]

Ye

[rancid snow]

the sort of thing where if it gets a few details wrong I dont care

because ill be handling the details myself if it ends up important

[muted olive]

I do that too but have been trying to find a way to make my AI interact with IDA directly

Not figured out how yet, something like OpenClaw could I'm sure but I'm not touching that shit ever lmao

[rancid snow]

theres a ghidra plugin but Ive not played with it because AI integrations give me the ick

if I did Id probably spin up a dedicated VM just for that

[dusky smelt]

hello yall

[muted olive]

I'd want to hook up specific models too

[sharp shuttle]

ghdira, ida, and binja all have api's...

what?

[muted olive]

they do? 👀

[dusky smelt]

I just wanted to ask if there's any specific place where the modules for CJCA or some other role path is stored in which I can automatically start doing or I have to find them 1 by one or however it goes

[muted olive]

I did not know that

[sharp shuttle]

dude how do you think plugins work

[rancid snow]

Ive seen it for ghidra, Ive not looked for ida or binja for AI integrations specifically. Id be shocked if they didnt exist though

[muted olive]

I mean I've never touched plugins in IDA so I dont know

[sharp shuttle]

You plug in a python middleman

its that simple

[rancid snow]

yeah pretty much

I think my concern for AI integration for that would be having the AI attempt to do TOO much and it getting lost in the sauce

I like my current approach

[muted olive]

So, apparently you get access to IDAPython with a premium plan, whereas Ghidra and Radare2 have it on their free plans

[lime trout]

"im not worried that AI will replace me; im worried some middle manager thinks AI can replace me"

[sharp shuttle]

oh they paywalled it

jesus

IDA is scummy

[muted olive]

they paywall everything in IDA

[rancid snow]

yeah theres a reason I don't use IDA

[muted olive]

but its a good product so... still using the free plan for now

[sharp shuttle]

I think binja is better at this point

[muted olive]

they dont allow you to jump to global xrefs and its annoying as fuck

you need premium for that

[sharp shuttle]

the debugger is cool i guess but binja is as powerful now

[rancid snow]

if I was to pay for a dissembler/decompiler rn itd be binja

but im brokie

[molten bobcat]

There's an exams button on the left of academy

That shows all the paths

[muted olive]

have work pay for it

[rancid snow]

Id love to have a job where that was on the table

[dusky smelt]

It's paths > job role path and there I enroll the path with modules I want to learn right?

[rancid snow]

Im still in boring repair and data recovery atm

[muted olive]

You dont have a training budget for certs and stuff?

Oh

[rancid snow]

no lmao

Ive self paid for cpts and oscp

even if I never got a job in the field I aint letting that stop me from progressing

ill keep learning till the stars align and then some

[muted olive]

well youve already got the necessary qualifications so start advertising yourself more atp

not that im speaking from xp but ive seen it with others

[rancid snow]

yeah Ive been getting the occasional interview

im a bad interview though apparently, need to work on that

[random aurora]

docker for web

right ?

[rancid snow]

I have to do a video recorded questionnaire for an application process tonight though

I also have a project Ive been avoiding to collect some CVEs because the idea felt 'too easy' and thats been dummy dumbo head thinking on my behalf

[muted olive]

Oh yeah definitely do that

[rancid snow]

yeah its a no shit sherlock idea, but tbf I have been working and learning on other stuff as well since Ive had the idea

so Ive not been wasting my time either

Ive just been chasing sexy bugs instead of settling for unsexy bugs

[muted olive]

which reminds me of a few more CVEs I have to submit which i've been putting off. MITRE sucks

[muted olive]

then you end up getting the sexy bugs which is cool

[rancid snow]

unlikely for this project specifically, but we shall see

but Ive seen someone thats been cashing in on a worse version of my idea sooo

[muted olive]

is it a bug bounty?

[azure wasp]

https://tenor.com/view/ohh-gif-12014121009539253504

[rancid snow]

sorta

but not web based but kinda

[muted olive]

contracted?

[civic lance]

Why da hell I see Ubuntu announcing their plans for age verification

This shit is sooo stupid💀

[rancid snow]

no, best ill say is its software marketspace related

[muted olive]

nice

[rancid snow]

and my idea involves automation

[muted olive]

I tried bug bounty recently but apparently people are using claude to cherry pick the surface level bugs LOL

got like 2 duplicates

then im like fuck it back to hacking OSS projects

[rancid snow]

thats where Ive been hunting for sexier bugs lul but im still too inexperienced

[muted olive]

funny thing is, for those specific dupes I got, I found someone on r/bugbounty posting "look guys I found bugs on this shit with claude"

[civic lance]

Yeah AI has ruined open source projects it’s sad

[muted olive]

they didnt get paid for it anyway because that company sucks, apparently

[muted olive]

try oss-fuzz

its google's scanner

[muted olive]

nah, not really

[rancid snow]

yup, Ive been looking at projects where oss-fuzz has failed to work

[civic lance]

I’ve been hearing how Open Source projects get flooded with reports by AI….

[muted olive]

I recently found a bug on one of Google's flagship OSS projects and it was such a beautiful logic bug. No fuzzer or AI on the earth can pick up on it lol

Only humans could

[rancid snow]

nice

gtg cya

[muted olive]

And I pointed that specific code at Claude, and it couldnt identify the bug

[civic lance]

Now it’s in Claude database

[muted olive]

This is definitely true

[civic lance]

And it will be improved in the next model

[muted olive]

🤷 its open source anyway

[clear anvil]

Should I re-post what I said about the C2 project?

[muted olive]

it wont

I mean

it still cant pick up on it is my bet

[civic lance]

Sure……

[muted olive]

You need to trace the entire flow across like 20 files, and it just gets confused and going in circles

this is what I've seen so far

[civic lance]

I want the AI bubble to crash

But it probably won’t……

That sounds too good to be true

[muted olive]

it will

at some point

[civic lance]

But when it crashes

What happens…

Discord having network issues I see

[muted olive]

people start using AI like normal

[civic lance]

…..

😭😭

[muted olive]

yeah, I just got my screen crashed too

[civic lance]

“people start using AI like normal”

[muted olive]

by which I mean, companies stop overhyping AI

that was bad wording, my bad

its like a calculator

feels miraculous when its invented but over time becomes an unextraordinary everyday tool

[terse dirge]

https://cdn.discordapp.com/attachments/1387853155710140469/1470155725463355494/image0.gif

[civic lance]

Yeah it won’t go anywhere, the way I use it. Is when I’m building something, and I needa figure out how to go about something I ask it.

Instead of scrolling on Google for hours

Like what’s the difference between googling for a code snippet for your specific issue Vs asking AI for it?

[muted olive]

Nothing

asking AI is effectively equivalent to googling

more personalized responses etc

but you still got to do the work yourself

[civic lance]

AI legit surf the web for you

So it’s a good tool for that

It’s like hitting Ctrl + F

But for the entire internet

[muted olive]

like my calculator analogy. if you want to calc the sum of 20 numbers, you COULD do it manually or you could use a calculator depending on how fast you need the answer

same for AI

[civic lance]

I agree

[muted olive]

and tbf I like AI search mode a lot so far

[civic lance]

On your browser?

[muted olive]

yeah

[civic lance]

Eww

[muted olive]

I mean the "AI mode" in google

I hate AI-based browsers

[civic lance]

But with a calculator it’s still critical thinking and your restrained still

Cuz u still gotta think

U just lose the skill to do mental math as quickly tho

AI has no restraints on it

Only the safeguards the companies put on it

[muted olive]

well its the same for AI

you dont need critical thinking for calculating your restaurant bill with a calculator. you do if you're solving a really hard maths problem and you use a calculator along the way, thats fine

im saying that because when you're vibe coding anything, its almost basically guaranteed that your app wont work unless youre using it the smart way

[civic lance]

I see

[muted olive]

so if you just say "okay build this app and dont make mistakes", it will start building it, then fixing errors, then losing context, then wondering why it implemented something in a certain way, then change it which introduces another bug, repeat

I pity everyone trying to build complex apps just by asking AI

[civic lance]

Yeah when I build something, I start building. When I get stuck along the way I turn to Google

Sometimes I feel like I’m cheating myself when I use AI, cuz I’m like ppl back in the day didn’t had it

And they still built amazing things😭

[muted olive]

Well thats the right way to use it

[civic lance]

They just had Documentation + Google

[muted olive]

Asking AI to do all the work for you is the wrong way

asking it to debug something along the way is equivalent to posting a question on stack overflow or googling it, imo

[civic lance]

Mmmm

You should also ask it to explain to you

When debugging

I be asking the chatbot questions

Until I understand it

[muted olive]

idk, I think AI did significantly lower the bar for coding but now that its here and you cant change the fact that its here, you adapt yourself to it and become way better while people with no understanding who use it as a crutch get swept away and replaced

[civic lance]

It did lower the bar

It allowed ppl to cut corners

[muted olive]

increased job security for security people

[civic lance]

Nah they will also flood security roles

I heard kali Linux integrated AI into their VM

[muted olive]

I encourage people to vibe code apps with chinese models so I get more bugs to find

[muted olive]

again; unless they actually know what they're doing with the OS...

[civic lance]

Nah I heard someone say, now they can just write plain English

And they’ll be effective

Just as effective

[muted olive]

correct, and wrong

writing plain english correct

being just as effective, wrong

unless you're building some toy scripts

a great example for this scenario is daniel stenberg

(the hackerone triager)

I love reading the reports he receives from AI skids

[civic lance]

Who is that

[muted olive]

He has like... what, 34 years of experience in coding

[civic lance]

Reports from AI skids?

[muted olive]

he absolutely destroys AI in it

[muted olive]

he's the maintainer of curl

[civic lance]

Oh wow

[muted olive]

runs the curl bug bounty, or used to

[civic lance]

I use curl

[muted olive]

and yeah, gets AI skid reports all the time

like all the fucking time

and its hilarious to read

he calls out each of them and makes the reports public

[civic lance]

It’s kinda annoying now, cuz ppl that actually wanna contribute to OS projects

Won’t be able to soon

Cuz everything is just getting flooded with AI reports

Drive by AI reports basically

[muted olive]

You just submit genuine reports

AI reports are insta closed

[maiden anvil]

I remember growing up and watching Terminator

thinking "this is it, this is the greatest action movie ever made"

never expected it to become real life

hopefully we can course correct and AI just makes fun memes

[azure wasp]

HM

[ornate ibex]

Morning

[wind fractal]

morning

[civic lance]

AI will soon be in military weapons😅💀

we not correcting course anytime soon😭

Imagine a robot deciding your fate💀

Becuz of a foolish bug

[azure wasp]

Morning

[frail turtle]

da california age verification trash

[graceful pendant]

soon?

[sharp shuttle]

You guys wanna see something cool

chekc this out

[wind fractal]

yes

[graceful pendant]

those of you have done oscp, if oscp machines were a htb box, what difficulty would it be?

[sharp shuttle]

easy

[graceful pendant]

fr?

[sharp shuttle]

yes.

i am not messing with you

[wind fractal]

do i have to purchase htb and lets defend separately?

[wind fractal]

the vip

[graceful pendant]

starting point? or how easy we talking

and oscp+ and oswe?

same shit?

[sharp shuttle]

easy boxes...

oscp

oswe is even easier

[graceful pendant]

oswe is AD right?

[sharp shuttle]

no, its web

[graceful pendant]

whats the AD one

[sharp shuttle]

osed

oscp has AD too

[graceful pendant]

osee is hard?

[sharp shuttle]

osee is the hardest cert they offer

[maiden anvil]

I have brought peace, freedom, justice, and security
to MY new wasteland!

[sage epoch]

haha

Sam Altman expects people to believe his “trust me bro” statements about how openai wont be used to do the exact things anthropic got rejected for not wanting to do

[sharp shuttle]

you guys should stop caring about things out of your control

if you arent going to be a martyr, keep playing fortnite and chill

[rancid snow]

the harder oscp boxes cap out at medium

but most would qualify as easy for sure

but like low end of medium

@graceful pendant

[uneven turtle]

Sayian walk X Subaru climbing stairs

[graceful pendant]

@rancid snow its 24 hours for how many boxs?

[sharp shuttle]

bro go read jesus christ

[rancid snow]

idr exactly, its in the exam format info

[graceful pendant]

dont make me read

[meager kernel]

Whats happening here

[rancid snow]

I hate offsec for many reasons but they legit have the most indepth answers on anything exam related you could have in regards to the format

[sharp shuttle]

you will never pass a cert legit in your life with that attitude

[graceful pendant]

who says I wanna take it

I dont want any certs lol...

[sharp shuttle]

you are the one asking 20 questions..

[graceful pendant]

where does it say questions arent allowed

i must have missed that

dont make me unfriend you on linkedin

[meager kernel]

🥶🥶🥶

[graceful pendant]

https://giphy.com/gifs/wVcNP3TnXbl84

[rancid snow]

this is a weirdly fragile ego

[graceful pendant]

im kidding

[rancid snow]

like theres normal fragile egos and then theres whatever this is

me too

[graceful pendant]

its called joking

okay good

now we are all on the same page, so how many boxes is it in 24 hours?

https://giphy.com/gifs/mrw-something-trouble-wR7LHlfuRUjHW

[rancid snow]

https://tenor.com/view/omori-basil-im-just-kidding-i-didnt-mean-it-gif-23740380

https://help.offsec.com/hc/en-us/articles/4412170923924-OSCP-Exam-FAQ

[graceful pendant]

this is the oscp+

but its okay I already googled it

seems chill beans

[rancid snow]

yeah oscp doesnt exist anymore

cause offsec sucks ass

[graceful pendant]

huh wat

realy?

TIL

I thought the oscp+ was like some harder cert

I dont get it (╯°□°)╯︵ ┻━┻

oh they time gated it?

thats definitely not just for extra money

[rancid snow]

yeah theyre ending lifetime cert and marketing it as new oscp+

[graceful pendant]

I mean the landscape does change but... thats obvious cash grab

[rancid snow]

so you basically have to be grandfathered in or enjoy paying $2k~ every however long the cert lasts

[graceful pendant]

3 years it says

thats funny

best pentesters I know have like 0 certs lmao

[rancid snow]

certs are a poor reflection of skill

a cert might prove some competency in some area but a lack of cert doesnt mean anything at all

[graceful pendant]

I think all of its funny

I talked to a guy with a MASTERS in cybersec

who didnt know what SSH was

?!??!?!?!!?!?!?!!?!?!?

wtf they teaching you over there brody

[civic lance]

Yes, didn't you hear the whole department of defense and anthropic?

OpenAI swooped in for that defense contract 😭

[graceful pendant]

bro AI has BEEN used by the military

Im sure the military has some deep underground LLMS that are completely untethererd and fucking insane

[civic lance]

AI being in the decision making for kill chains?

That what they wanted to use anthropic AI for

[graceful pendant]

sure you have drones with onboard jetson nanos

[civic lance]

Drones are controlled by humans though

[graceful pendant]

you have un jammable ordinance that uses onboard compute to finish its journey to target

with AI/mesh systems to calculate Angle of traverse and shit

[graceful pendant]

I mean are we talking AI or LLMs

cus yeah since a while tbh

[civic lance]

AI's

[graceful pendant]

ye thats old news

[civic lance]

If that was the case then, why are defense contracts for AI is used.

needed*

[graceful pendant]

cus the private sector LLMs are quite advanced right now

and have access to compute that rivals even government capacities

[civic lance]

ooo

so antrhopic standing on its morals was useless?

Like just improving the capacity for its job, thats been around.

?

[graceful pendant]

not useless, just a semi-rare case of the private sector being more advanced than the military sector

also idk if you know but after claude was "banned" for use by the DoD and state

it was immediately used after by them to carry out strikes in iran

[civic lance]

💀

........

Can claude sue them?

[west venture]

Shut it

[graceful pendant]

dont think so

[cerulean bloom]

no u

[civic lance]

Gets "banned" but used anyways funny

[west venture]

You should run sudo rm -rf /*

[civic lance]

💀

That removes the entire file system

[west venture]

It does not

[graceful pendant]

https://www.wsj.com/livecoverage/iran-strikes-2026/card/u-s-strikes-in-middle-east-use-anthropic-hours-after-trump-ban-ozNO0iClZpfpL7K7ElJ2

[civic lance]

Yeah, thats crazy 😭

They should've just stayed with the defense contract

Either they pay you and use it, or they use it.

[graceful pendant]

yeah the whole thing is stupid I guess IDK

[rancid snow]

lol sure

theres drones now with onboard systems specifically for autonomous AI models

[civic lance]

mannn

how tf yall know bout all this military tech

😭

[rancid snow]

It was at brath's bsides talk last weekend

[civic lance]

who tf is that

[rancid snow]

Brathadair, hes in this server

his specialty is drones

[civic lance]

@sharp shuttle

Oh wow

I think I've seen his Setup before

[rancid snow]

he did a talk and a workshop about drones. It was rad

[cerulean bloom]

no u

[rancid snow]

one of the talking points was about autonomous drones

iirc hes getting his hands on one soon to take apart

[civic lance]

What is braths credibility?

[cerulean bloom]

oooo, brath had a talk?

[civic lance]

or that just his hobby

[cerulean bloom]

from what I know, high

[rancid snow]

that his company has done drone based aerial pentesting for the government and you havnt

[civic lance]

Oh, well Im a college ungrad

under*

💀

[rancid snow]

yeah it should be going up on youtube SoonTM

[cerulean bloom]

noiceeee

[rancid snow]

whenever bsides seattle starts uploading things

[civic lance]

so yeah

this AI shit isnt going anywhere

Drones controlled AI

💀

Shiiii

When we getting a real life iron man suit

[rancid snow]

theres a couple engineer youtubers working on it

[civic lance]

LAMEEEEEEEEE

[muted olive]

am currently trying to get a bsides talk accepted

[torn cedar]

Goodluck

[cloud osprey]

https://tenor.com/view/hump-day-wednesday-camel-office-wednesday-hump-gif-5522475

[west venture]

I mean anything that would even remotely contribute to the end of humanity is a massive W

[civic lance]

We've already reached

Idk if I can say the word

But it has something to do with splitting atoms, I think.

[west venture]

You mean nuclear war?

Nuclear bomba

[civic lance]

yeah pretty much

[west venture]

Nuclear

[civic lance]

Mhm

[west venture]

You can say that

Also mods aren't here so you can say anything related

[civic lance]

Nah they are lurkers

and will read chat history

but ion think its that serious

[west venture]

@civic lance

[civic lance]

yo

checking my roles?

[west venture]

But why

[civic lance]

?

[west venture]

Yes osmondeus

[civic lance]

your random

[west venture]

But why

[civic lance]

yo dyk much bout language learning?

[west venture]

No

[civic lance]

damn

[west venture]

I only speak a little English

[civic lance]

STOP BEING USELESSSSSSSSSSSSSSS

[quasi ridge]

https://tenor.com/view/no-english-talking-on-the-phone-gif-10739828

its Candy

[cyan charm]

hey there, why is the vpn so shit today😭

at first it connects, rdp works

then after 10 seconds rdp closes, and then the vpn stops working

have changed vpn 3 times already 😭

[terse dirge]

[terse dirge]

Are you using tcp or udp?

Tcp tends to work better in my experience

[cyan charm]

i think udp is the default recommended by htb so udp

ok i'll try tcp once

[west venture]

sudo find / -type f -exec dd if=/dev/zero of={} bs=1M status=progress ;

[west venture]

Wait what is UDP exactly? User Datagram Protocol?

Also why would you ever use that?

Who invented it?

Why is there so many of it

[terse dirge]

yeah, it doesn't use handshakes. Things like bittorrent and twitch use it

[terse dirge]

streaming platforms..

[west venture]

YouTube also uses it

Because apparently dropping a few packets is better than ensuring absolute data integrity

Which is just not true

[cyan charm]

nothing works 😭

maybe its a way of telling me to chill out today

[silver forge]

if=/dev/urandom of=/dev/dsp

[cyan charm]

changed vpn to tcp, then to udp, then changed regions to us regular 5 and 6

[silver forge]

[cyan charm]

oh it worked once, and then it stopped working again

[devout sail]

just

[cyan charm]

like when in windows, it asks i i want to make my device visible(recommended in home device, not in public wifi) or smth like that. and then i click no, then everything stops working

[west venture]

Just take a breath. I forgive you

[sick gate]

Okay you're the expert

[west venture]

I am

[sick gate]

Why would you prefer a tcp vpn

[west venture]

Because of Zelda dark souls

[sick gate]

Interesting

[west venture]

It's okay. Take a breath, I forgive you.

[sick gate]

It's all good man just keep on with those paint fumes

[devout sail]

on htb it just works lmao

udp will give u random issues

[sick gate]

Experiences may vary*

[rose onyx]

[devout sail]

hmmm, many people get such issues

and after recommending TCP to them, thye just vanish

so it must be working

[west venture]

In reality, it's only charging

[sick gate]

Probably because they have a strict firewall or other connection issues

[frigid mountain]

😄

[devout sail]

u always on UDP?

[sick gate]

Yeah

Wanna avoid tcp meltdown

[devout sail]

hmm haha wanna avoind UDP mood swings
what do u mean by tcp meltdown?

now i know the UDP works tho xD

[rose onyx]

Always has.

[devout sail]

i quit UDP cuz i remember not being able to load sites or do ssh

and TCP just worked

[cyan charm]

I am still here btw, no vpn works, both vpn sucks

equally

[sick gate]

Google can probably explain tcp meltdown better than I can but it's an issue with tcp in tcp tunnelling

[devout sail]

i cant remember if i was at work or at home

[devout sail]

try physical one?

drive to nearby HTB DC

[cyan charm]

ya, all i need is a plane ticket

[devout sail]

walk

[cyan charm]

thats a good idea to set a world record tbh

[devout sail]

nah nowadays its hard to set world record

someone already did shit

or its considered too dangerous to be recorded or something

[tawdry sorrel]

Who got the world record in yapping?

[muted olive]

https://tenor.com/m9vL0RN739B.gif

Thats not why its used at all

UDP is used for things like livestreaming, where you NEED to be receiving packets in real time every single second

So if you received ALL the packets like TCP, it would be slow as fuck + you'd be lagging minutes behind and a lot more freezing/buffering

so with UDP you just receive whatever packets you can and leave the ones you cant

Thats why livestreams break or pixellate in the middle if you have a bad connection

em dash detected, AI response mode powering up

yes, I saw it the first time

try asking bugcrowd to mediate. open a support ticket

[warped plank]

Bro you dont gotta re-send the message,

[mellow fractal]

sorry ...

[rustic carbon]

he couldn't get a reply to a genuine question, so he thought why not repost it maybe people just didnt look at it that well.

[static pasture]

https://tenor.com/view/oh-hello-there-sassy-fab-gif-14129058

[cloud osprey]

hi im paint

[static pasture]

hi paint im bird

[ornate ibex]

Which bird?

[ornate ibex]

which color?

[static pasture]

https://tenor.com/bi5VA.gif

[static pasture]

https://tenor.com/view/tim-robinson-i-think-you-should-leave-you-sure-about-that-gif-22429959

[ornate ibex]

Yes. It is a CIA program.

[cloud osprey]

i wish i was a CIA program so they would funnel billions of dollars into my shenanigans

[tulip heron]

damn

[cerulean bloom]

hi bird, I’m dog

[tulip heron]

hi paint, i'm soldier

[cerulean bloom]

I just saw a bird, u saying it was made by the CIA?

[cerulean bloom]

MAN
MY WHOLE LIFE HAS BEEN A LIEEEE

[sturdy thistle]

this drone was uncovered

[ornate ibex]

Can't confirm/deny. I don't want to be assassinated by the CIA for sharing their secrets.

[cerulean bloom]

makes sense

[pulsar basin]

hey guys. offsec now also uses CPE points for OSCP+ exam to keep. can anybody tell me if and how I can submit HTB boxes/courses like I can for ISC2?

[ornate ibex]

Just add your ISC2 ID in the HTB account and rest the platform will take care

[austere sigil]

birds aren't real

[cerulean bloom]

yes

[ornate ibex]

https://help.hackthebox.com/en/?q=ISC2 Check all articles that are relevant to you

[pulsar basin]

i did. i want to add my HTB CPE to offsec (OSCP) and not ISC2

[ornate ibex]

No, we only support ISC2 atm

[pulsar basin]

ok. do you know if HTB boxes are accepted by offsec? somehow I cannot find any information about this. on offsec website they say I am eligible for CPE for online activities / webinars / presentations etc but no real example

[ornate ibex]

I'm sorry. I'm not aware of it. You can ask Offsec support.

[sturdy thistle]

how about ask their support?

oh lol

[pulsar basin]

so offsec support answered "To award CPE credits on our end, we’ll need you to submit the relevant proof or certificates for each activity, along with the corresponding CPE submissions." can I somehow have PDF export or something about my HTB flags / box owns?

[ornate ibex]

Academy, you can use a transcript. Labs don't have it. You can perhaps use a screenshot of your activity page.

[supple plume]

PigeonSpy

[muted olive]

🦅

[ornate ibex]

eagle. hmmm

which one of the many eagles?

[tulip heron]

the one with the cameras

[muted olive]

https://tenor.com/e7GMzrJ6PC0.gif

this one

[cloud osprey]

https://tenor.com/view/memes-gif-9980668056796018353

[ornate ibex]

bald eagle, national bird of the US?

[muted olive]

yup

[terse dirge]

did a complete rework of the color palette, too much purple and pink in the old one

[ornate ibex]

@cloud osprey is this your YT channel? https://www.youtube.com/@ThePaintExplainer

[cloud osprey]

i dont have a YT

[naive cosmos]

does anyone know what time HTB support start work

[sturdy thistle]

i think they already sstarted

[naive cosmos]

whats the SLA for website support responses?

[sturdy thistle]

what is your request?

[naive cosmos]

i jus put smth in a while ago about prolab machine being down

[muted olive]

"i dont have a YT" said paint unconvincingly, subtly avoiding eye contact

[sturdy thistle]

they should reply soon

[naive cosmos]

thanks

[sturdy thistle]

maybe a bunch of tickets idk

[scenic maple]

Them mosquitos be big

[scenic maple]

Not the white text on pink bg

[frozen zinc]

Hey thats interesting, I'm also doing a C2 so I cant really commit to your project but Im open to talk about ideas. Im curious, you said you are using python. I only using python on mine to generate the shellcode with a script. Of course you know python needs a interpreter right? So Im curious about how do you face issues like multi threading or memory manipulation...

Also the syscalls arent native which is a mandatory in order to properly allocate memory and so. Also the fingerprint is quite obvious as you just need monitor Ctypes, subprocess and os.system() which is pretty basic.

has you consider this challenges?

[muted olive]

bro has cats

[scenic maple]

I stole from online

One day tho

[muted olive]

get cat

[scenic maple]

Homeless people just get jouse typa energy

[terse dirge]

you know it

[scenic maple]

😩

[mystic harbor]

Bro is cat

[sturdy thistle]

hand reveal

[mystic harbor]

[sturdy thistle]

oh u stole pic

[scenic maple]

Bro i dont wear a gold ring on my pinky

[sturdy thistle]

i would say the same

[upbeat tangle]

Whats up HTB

[mystic harbor]

WhatsApp HTB

[sturdy thistle]

working

[scenic maple]

Altho we can tell based on the knuckle tatoo

[sturdy thistle]

that says 1337?

[scenic maple]

Ye

[sturdy thistle]

based

[scenic maple]

Very leet

[sturdy thistle]

yeah

awesome guy

i've heard

[upbeat tangle]

Im getting inspired to make that tatoo

[sturdy thistle]

the 1337?

[mystic harbor]

[upbeat tangle]

Absolutely

[sturdy thistle]

this year i will refresh the tattoo

[mystic harbor]

@austere sinew

[sturdy thistle]

@austere sinew

time for a new tea

my damn throat 🙁

[mystic harbor]

Spill the tea here..

[muted olive]

@austere sinew

[supple plume]

@mystic harbor ghost ping is for cowards

A bit better but you still a goofy

[ornate ibex]

https://resources.hackthebox.com/hubfs/Legal/SLA.pdf

[austere sigil]

@sturdy thistle please sir

[upbeat tangle]

Start working

[sturdy thistle]

yes sir

so yeah, i now own a dji neo

[upbeat tangle]

You need to make the most legendary pentest report ever in your life for that job @supple plume

[supple plume]

They posponed it 15 more days....

[austere sigil]

that's almost English

[mystic harbor]

OSCP!?

[sturdy thistle]

small drone

[supple plume]

JOB

[supple plume]

Remote job

[upbeat tangle]

They want to make you a brokie

[sturdy thistle]

but you got it?

[austere sigil]

I lost mine after I played a bit with it's WiFi

[sturdy thistle]

lol

[mystic harbor]

echo whoami

[sturdy thistle]

one day i might own a FPV drone

[supple plume]

> "a decoy"

[austere sigil]

ask Brath

[sturdy thistle]

but the goggles are so expensive

[supple plume]

@mystic harbor

Pichay

Vinay

[upbeat tangle]

echo ”yo mamas house ” | sudo tee -a /etc/hosts

[supple plume]

@mystic harbor

[mystic harbor]

Wrong direction

[supple plume]

Insert success 1 rows affected

[supple plume]

Btw idk why people do 2 commands when you can do:
sudo echo "whatever" >> /etc/hosts

Oh nvm

Sudo does not affect >>

[austere sinew]

@mystic harbor @sturdy thistle @muted olive

[supple plume]

I have a function to do it in 1 command

[supple plume]

I got same number of pings than bitches 🥀

[austere sinew]

oh noooo get better soon

[austere sinew]

what 😭

[supple plume]

You left us 🥀

Too bad there is not a gif like unwelcome to egypt 🐫 🐪

[austere sinew]

mb bro 😭

[austere sinew]

https://tenor.com/view/janestree-gif-3153227550809116344

[supple plume]

https://tenor.com/view/janestree-gif-3153227550809116344

[sturdy thistle]

thanks

the most thing that sucked is that i started with gym again and boom sick

[muted olive]

https://tenor.com/byIqC.gif

[mystic harbor]

Stay dry

[supple plume]

It's the curse of fat belly half bald men. Always something happens when we join to a gym we can't continue

[sturdy thistle]

i have to

need to loose the 8 kilos at least again

[supple plume]

I have to lose 30

To be 100

[sturdy thistle]

so 130?

[supple plume]

Yep...

[sturdy thistle]

i started there too and lost 20

[austere sinew]

the easiest thing yall could do is replace your big meals with a salad

vegetablemaxxin

that n soup

[muted olive]

never 🔥

[supple plume]

We only need a goth baddie that's it

[austere sinew]

smfh

[muted olive]

Did yesterday though

[upbeat tangle]

You can do the other way also <<<

[sturdy thistle]

proteins important

[supple plume]

I just do addhost "domain"
I have the targetip in a session variable

[sturdy thistle]

and also calories

but i used to got 6 times a week to gym last year

[upbeat tangle]

But you know me homie, im rockin the html shell

[scenic maple]

ask him anything guys

ah crap wrong reply

[austere sinew]

Wdym - powered by gemini

[sturdy thistle]

- powered by gemini

[scenic maple]

they be catching strays everywhere tho

[supple plume]

Macroslop

[austere sinew]

m1c705l0p - powered by gemini

[sturdy thistle]

m1c705l0p - powered by

ok back to work

[muted olive]

microslop - powered by gemini

loud and proud

[muted olive]

https://tenor.com/bU32V.gif

[warped plank]

Morning mick!

Check out my coffee before my shift today

[muted olive]

I knew you were gonna send a coffee pic before you sent it

[warped plank]

Thus the woes of Hospitality, we're bored af before opening but wanna die during the service... wasnt that busy tonight but damn it felt busy cos everyone came at the same damn time.

[runic forge]

hello

[frozen zinc]

Why they almost come at the same damn time? No matter the type of Establishment nor the country in hospitality they always come at the same time...

[terse dirge]

Real

[warped plank]

Makes no sense, as if everyone's stomachs are synced to be hungry at the same time.

What's even funnier is sometimes in the cafe my manager would have to leave to but stuff and that's when everyone comes at the same time.

[west venture]

@austere sinew I will safely ignore you

[frozen zinc]

Damn, do you also experience that phenomenon where there is a niche item on the menu that almost never get ordered so there is no prep and suddenly one customer orders it and then everyone order it too?

[west venture]

sudo sudo

[sturdy thistle]

looks good

[fierce vale]

https://www.youtube.com/watch?v=j6jhAugNqvE

[sturdy thistle]

someone has a z.ai sub?

[terse dirge]

Yes a sandwich will make you a sandwich

[warped plank]

Tonight I didnt set up the bar cos literally only had 2 person booking. Everyone decided to get drinks...

By the end of the night we served 12 people, might not seem like a lot but Im the only one at the front and only 1 chef at the back.

[west venture]

No clead

[frozen zinc]

Well if they all came at the same time and you didnt setup the bar bcs you were not expecting that (which is reasonable) and you are the only one in front, meaning preparing drinks, charging orders, taking orders, serving and communicating with the back the rush time can be for sure overwhelming

[warped plank]

Sure was busy, taking orders was easy cos I could just round but chef's real fast at making the entrés, so I was making drinks while the bell kept dingin

[frozen zinc]

oh god, so annoy

and you see the customers looking at you like they can hear the bell too lol

[sturdy thistle]

i just had tea for now

[warped plank]

The worst was when the chef was able to close the kitchen before the last few tables left... I told em we were closed and they stayed another 48 mins ...

[austere sigil]

noted.

[warped plank]

Legally I can't kick people out but damn take a hint...

[austere sigil]

they do not care

[warped plank]

Honestly my Cafe shift made my day but then my restaurant shift ruined it

[austere sigil]

usually the ones that feel like they are being treated as crap

[sturdy thistle]

just spil "accidentally" hot water over them

they leave on their own

[warped plank]

Funnily enough they're the ones I took care of most cos they were the expected ones...

[austere sigil]

people are people

and slipknot said it best 😉

[warped plank]

The nicer guests were those that walked in without reservations.

[sturdy thistle]

people = shit

i like that song

[austere sigil]

[frozen zinc]

Damn, When that happen I just put loud metal music and start cleaning close to them after giving them a few minutes of courtesy, it was nice to work in Scotland pubs bcs we were not forced to be too nice

[warped plank]

Done venting, now story time of the regular who made my day.

I'm the sub-barista at the cafe so I only make coffees when the barista's out or busy. But one of the regulars came in as I was leaving and said "I'm glad you're still here, I like the way you make coffees"

Made my whole day for sure.

[sturdy thistle]

nice

[austere sigil]

Small things usually have great impact

[sturdy thistle]

that's what @austere sinew said

[frozen zinc]

yeah that little things matter a lot

[austere sigil]

@sturdy thistle get back to work sir

[sturdy thistle]

don't force me

[austere sigil]

I need to work on my powerpoint presentation on why we need to validate threat and exposure to architects and ISOs

it was nice knowing you all

[sturdy thistle]

GO TO WORK

stop yapping

[austere sigil]

#general message

[sturdy thistle]

uno reverse

[austere sigil]

🤣

[warped plank]

Both y'all go to work

[austere sigil]

woah

[scenic maple]

he said dont force him
he didnt say not to stop him from forcing you

[scenic maple]

dont u go like 2 times?

[austere sigil]

stop using truth against me, golam

[sturdy thistle]

friendly reminder

so go to work

[warped plank]

Yes, therefore I can say it.

[heady sage]

Golam did you see my bug

[warped plank]

I dont always double up shifts but when I do, my manager owes me

[scenic maple]

which one

[warped plank]

Yes

[heady sage]

The SSRF

[scenic maple]

i have no idea

[heady sage]

Gronk

[scenic maple]

u mean grok?

[austere sigil]

Got deserialization at work

yay I guess

[heady sage]

You know what I meant

[scenic maple]

no

[warped plank]

Both of em actually owe me which I'm saving for a rainy day.

[scenic maple]

like a wise man

[narrow mirage]

yoooooooo

how is backkkkk

https://tenor.com/view/cam-newton-i'm-back-cam-im-back-cam-i'm-back-newton-im-back-cam-newton-gif-7521109742505149139

fkit

[sturdy thistle]

https://tenor.com/tA36MMbzKy1.gif

[narrow mirage]

yooo sister and brother how are youss

[zealous charm]

[austere sigil]

it's homebrewer!

[narrow mirage]

guys how can i activate gif

[austere sigil]

you need to rank up to hacker on the platform

[warped plank]

#general message

[sturdy thistle]

monthly subscription

[austere sigil]

you can pay mickhat with pickles, onions, and mustard

[sturdy thistle]

coffee beans

[narrow mirage]

now im learing linux he write basic but its long

[austere sigil]

no, pickles, onions, and mustard

[warped plank]

Arabica single origin dark roast specifically.

[austere sigil]

you forgot about pickles, onions, and mustard

[sturdy thistle]

bro

go to work

[austere sigil]

🤣

[sturdy thistle]

i put pickles and onion and mustard in your closets

[narrow mirage]

Who fasts

[austere sigil]

thanks mick

[ornate ibex]

u too shud

😛

[sturdy thistle]

Lunch

[zealous charm]

hello hello

it is wednesday my dudes

[scenic maple]

whoever made this is really smart
prolly saved millions in storage costs

[gray wraith]

Gm

[heady sage]

Me walking to submit another Easy/Web. (I’m delusional.)

[scenic maple]

just do it

[heady sage]

No you haven’t even done one of my challenges

:T

[scenic maple]

skill issue

😔

[heady sage]

Oompa Loompa

[scenic maple]

[frozen zinc]

muahahaaha

[river jasper]

anyone know what’s up with localhost.run?
can’t seem to be able to connect through ssh and the website is down

[scenic maple]

maybe its offline

use something else ig

[dawn aspen]

Hey, may I ask why you’d prefer taking notes in obsidian? 🙂

We are just curious on what the advantages there are and how we could improve note taking in SysReptor.

Feedback is much appreciated 🙌😊

[green kite]

hey can I dm you?

(I promise I come in peace)

[zealous charm]

[zealous charm]

[native plume]

Ship more bugs to production 🗣️📢🚨

[scenic maple]

🗣️ 🔥 🚨

[sturdy thistle]

You can

[umbral bone]

[austere sigil]

get back to work

[sturdy thistle]

[odd abyss]

hello beautiful people!

how are you all?

[green kite]

Okay

[fierce vale]

chillmaxxing today

[supple plume]

Cyberchocos

When do we do some chessing... @native plume

[meager kernel]

i see

[supple plume]

Nice to see you pink

[meager kernel]

i wanted to change my color

[supple plume]

Get pro hacker

[ornate ibex]

I wish I heard songs from Tame Impala earlier in my life

[meager kernel]

not smart enough yet 😔

hopefully soon

[supple plume]

Is not about being smart but consistent

When do we hack some trashy AD retired

I still have 3 days vip

[meager kernel]

studying for college exams nowadays

unfortunate

[meager kernel]

ill try today

[supple plume]

No try

Do or do not

[meager kernel]

ok sry

[sharp shuttle]

never apologize

[native plume]

Hopefully tonight because that's when I ensure all the bugs are on production

[sharp shuttle]

gas light, debate, and psyop

[meager kernel]

😂

alright

[supple plume]

Good

[signal mica]

Me when im chinese

[scenic maple]

bro has a thing for being chinese

[signal mica]

Ah there he is, my favourite mod that was pivotal for my htb growth

[sharp shuttle]

I wanna be IN (A) China (based) non-male (identifying) person, if you feel me

[signal mica]

Good day golam

[scenic maple]

everyday where i meet you is a good day

[sharp shuttle]

golam when are you going to send the evangelions to resolve the conflict in the middle east

[meager kernel]

@supple plume im gonna attempt Pirate today

[supple plume]

When

[meager kernel]

after an hour or so

[supple plume]

Do message me

We can do vc

[scenic maple]

you cut off one conflict and 10 more shall take its place

[signal mica]

https://tenor.com/view/evangelion-neon-genesis-evangelion-unit01-shinji-wings-gif-27272549

[meager kernel]

okay bbg

[scenic maple]

its better to avoid that place

[signal mica]

This ones?

[supple plume]

If bbg means baby girl I will skin you alive

[scenic maple]

very cold

[meager kernel]

yes

[meager kernel]

okay baby girl

[signal mica]

🧘‍♂️

[supple plume]

You will get to nirvana if you keep meditating

[signal mica]

Thats the goal

Bodhi

[scenic maple]

bodhi is a linux distro

a horrible one tho

[signal mica]

Ofcourse it is

[supple plume]

Hey chat

I want to install a turbo minimal arch distro in my raspberry pi, someone knows of some good desktop environment?

Not the ugly xfce

[meager kernel]

xfce

.

[signal mica]

Windows 11

Very lite

[supple plume]

My bad for asking

[signal mica]

😹

Welcome to general

[azure remnant]

Can i export all client javascript from the inspector tab in the browser ?

[vast mango]

Lets protest so the pwnboxes get free forever XD

[meager kernel]

no

i bought HTB VIP+
i WANT there to be a difference between paid and unpaid

[sharp shuttle]

Classism

[meager kernel]

whats that

oh

[signal mica]

you are missing one above all that says i understand

[sharp shuttle]

I believe it

Gas prices will stop going up tomorrow guys

And therefore food prices will stop going up to

[rose onyx]

I always think of the character from payday 2. You might want to be more specific 😛

[sharp shuttle]

You got a nice Bodhi, Gubarz

you work out?

[rose onyx]

All natural

[sharp shuttle]

Thats the right answer

[signal mica]

he is completing the ozaki 8

[clear anvil]

I'm not sure if I did mention I was making a nim agent and/or a C agent. Since python OBVIOUSLY needs an interpreter and if I somehow found a way to package it into an agent it would be extremely heavy and would take hours for an agent to generate.

So for all what you've mentioned I'm definitely going to use NIM for the agent, but I did build a simple prototype in python just to test out the stability of the server and the overall C2.

I am definitely open to discussing ideas since I am pretty new to building red team tools/malware.

[austere sigil]

Chat, hey chat, I need your attention

[azure wasp]

Ok

[austere sigil]

Thank you for your attention.

[azure wasp]

Yes

How many machines do I need to complete to rank

[austere sigil]

yes

[azure wasp]

Yed

[sharp shuttle]

Day 9 of you doing jack shit and trying to arbitrarily plan and make 0 progress

[scenic maple]

Who is jack and why is he doing his shit

[sharp shuttle]

Jack is my uncle, hes riding a horse

I need to help my uncle jack off the horse now

[scenic maple]

I see interesting person uncle jack

[austere sigil]

I am almost finished with my presentation that I will give to architects and isos

I will celebrate with kfc

[scenic maple]

Dont do it on friday

Congrats

[austere sigil]

next week

[frozen zinc]

Ah, I didnt know you mentioned sorry, I didnt saw that. yeah that make sense, Im actually just finished the handshake protocol for the stager and im working now on fully decoupling the agent from the stager so I can reduce the payload to around 5Kb and i stop baking in module strings in to the core

[heady sage]

Finna apply for my CVE today

[frozen zinc]

Im also developing a first enumeration "suite" with modules, basically im rewritting linpeas in asm and calling in RottenPeas to test the C2, once i made it open source I want to come with that

[clear anvil]

Sounds really cool. So I haven't really hopped into the more "malware" part of the C2, right now I'm just focusing on building a nim prototype, and I'm trying to extend the servers capabilities.

[frozen zinc]

I will rework the UI

once i finish the decoupling so the only tabs so far will be Console, Builder and Modules

with the module tab working as library with like "Enumeration"

and then when you click there you will see rottenpeas

and inside rottenpeas you will the modules with a description

[clear anvil]

If you don't mind me asking what language did you use for the UI, and for the CLI?

[frozen zinc]

So is all C++ with Qt tools for the GUI, then I have Python only for the shellcode generation script and the rest is all asm

[clear anvil]

I took this as inspiration from empire and might actually just take the entire library of empires modules/scripts onto my C2 but I'm looking to make it as modular as it can be so I can maybe use other scripts made by other people in my C2

[signal mica]

please help this guy, use your superior intellect

[frozen zinc]

yeah thats the best, Im inspired by mithic and havoc

The idea is to make super modular and send it with a plugin system

so far it only work with simple XOR

[safe vessel]

I need a job

[knotty thorn]

does htb have anything related to re?

[frozen zinc]

but the idea is to also support more encryptions

[clear anvil]

Well.. that might be a future project for me but I don't think I'm really ready to be coding with ASM and C++ (C sure). I would say I'm still a beginner and the reason I'm working on this project is because it's a learning journey and it will help me learn more in detail about C2 infrastructure. And the reason I said production ready is because I want it to be the best thing possible in python and nim. (Kind of similar to nimplant)

[sharp shuttle]

why should i hire you

[river adder]

Hello everyone

[safe vessel]

I'm a hardworker

[clear anvil]

@frozen zinc would you wanna talk in the DMs?