general

[supple plume]

And I code javascript

[signal mica]

whats going on, why are you not working in IT

[obtuse fern]

job requirements ask for a bachelor's I only have a lowly associate's

[crimson crypt]

But Sliver works better than Meterpreter for some functions

[obtuse fern]

because they are functionally different programs for different purposes

[signal mica]

ah yes the

if paper{
};
statement

[visual hollow]

It’s bullshit if you ask me

[sharp shuttle]

shoulda lied

[devout sail]

Yep the first one is vulnlab, which will retire instantly

[visual hollow]

Lets go!

[crimson crypt]

I was wondering if it’s possible to replace Meterpreter.

[visual hollow]

https://lichess.org/kH5SORLH

[sharp shuttle]

replace?

[devout sail]

Chess?

[sharp shuttle]

why would you not wanna use meterpreter?

its goated

[obtuse fern]

yes... any tool is replaceable with another if you're determined enough

except evil-winrm, because no one can be bothered to write a replacement

[sharp shuttle]

i always opt for meterpreter shell if possible

[crimson crypt]

Because it’s old

[obtuse fern]

also, meterpreter isn't a hard requirement to do things with

if a guide you're using is using meterpreter, there is a high likelihood that it can be done with another tool or PoC script

[crimson crypt]

I need to do some research

[obtuse fern]

in all reality msfconsole is using a ruby script based off a PoC for an existing vulnerability.

which sends it to a stable shell interpreter

that has some built in functionality

[crimson crypt]

Yes, but I think it doesn’t work very well in real environments

“Real”

[obtuse fern]

if it didn't work well they wouldn't be selling EP licenses

[crimson crypt]

🤔

[molten bobcat]

Fresh air is curative I swear

Goodness

[obtuse fern]

fresh nuts are also good, i like almonds and cashews

the occasional Walnut

[crimson crypt]

I’m asking myself these questions because, in a Pro Lab, Sliver’s getsystem succeeded where MSF didn’t

[obtuse fern]

likely some differences in how they work under the hood

[crimson crypt]

Ah ok, there is an enterprise version… my bad 😬

[visual hollow]

What else was I meant to do

Good! You played well!

Literally only got to 1000 today

@supple plume Is 1600 - 1800

We played a couple of times

Echo was

[zealous charm]

@maiden anvil

[oblique glen]

[maiden anvil]

[zealous charm]

[crimson crypt]

[lyric robin]

[supple plume]

[turbid goblet]

thought i got hacked but amazon just randomly billing me for prime

gg

[rare monolith]

lol

[woven hinge]

anyone here????

[turbid goblet]

no

[sturdy thistle]

no

[woven hinge]

from cybersec

[sturdy thistle]

no

it's a chess club

[turbid goblet]

no

[woven hinge]

need serious help plz if anyone can help me out

[sturdy thistle]

ask

[turbid goblet]

the answer is probably en passant

[native plume]

The glitch move

[rare monolith]

any1 using kasm round here i think ill set it up

[woven hinge]

new in cyber sec just completed the presec in tryhackme whats the next roadmap for me?? I want to grow as purple teamer

@sturdy thistle

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[rare monolith]

W bot

[woven hinge]

plz can u get with full form 🤣

@vestal nimbus

[turbid goblet]

yeah get with full form

[woven hinge]

any free path??
like hackthebox or tryhackme?

[woven hinge]

yes plz

sry if I sound like a kid now but i am very curious to learn

i cant invest now i am just 17 thats why i am asking for free sources

ohhh

[rare monolith]

hooold up what country are you from if you dont mind me asking

[woven hinge]

can u guess?

[rare monolith]

eee india?

[sturdy thistle]

time to get rich

[woven hinge]

I think I am defaming my country

[rare monolith]

oh yesss

[woven hinge]

😭

[woven hinge]

how do u guess if u dont mind?

[tender sparrow]

hey, i am doing info gathering web edition , and do the dns zone transfer, i think there is something wrong with module

[sturdy thistle]

#modules

[turbid goblet]

i just did this yesterday so no way

[tender sparrow]

do you remember the command?

[turbid goblet]

dm me

[obtuse fern]

you'll need to have the parental consent form filled out

[woven hinge]

for what?

[obtuse fern]

to be able to use HTB

accounts for users under 18 require a parental consent form to be filled out per the ToS

[woven hinge]

now i have adult ids

[obtuse fern]

and you're now admitting to committing id theft?

[sturdy thistle]

omg

[obtuse fern]

you admitted here that you're 17, end of

[woven hinge]

so what the big deal?

yes i am 17

[obtuse fern]

legal reasons is the big deal lol, Terms of Service

[woven hinge]

but anyone can make google acoount of adult

[obtuse fern]

dude

[woven hinge]

and login

[obtuse fern]

https://help.hackthebox.com/en/articles/9456556-parental-consent-and-approval-for-users-under-18

[woven hinge]

I will be 18 in 3months

[sturdy thistle]

it doesn't matter

[deep ferry]

Cobson

[sturdy thistle]

your parents need to fill out the form

[obtuse fern]

@sturdy thistle typo in the PC form

[sturdy thistle]

not support anymore

[obtuse fern]

no one is support anymore

[turbid goblet]

im gonna sign my kid up when he turns 5

[deep ferry]

That's aryan

[sturdy thistle]

@autumn wyvern is

welp

[woven hinge]

u guyz from htb?

[obtuse fern]

huh?

[sturdy thistle]

sorry

@somber patrol is

[obtuse fern]

I would be support, but you keep kicking me out at the gates

[sturdy thistle]

i'm in academy now

since 3 weeks

[obtuse fern]

nice

having fun with all the feedback on the jank UI changes?

[woven hinge]

ohh thats why u guyzz stopping me

[sturdy thistle]

i dont do UI stuff

so i dont even see

[obtuse fern]

you don't see? how do you hack then?

[sturdy thistle]

blindly

i do QA and such

[obtuse fern]

well according to lots of people the Q was not A'd for the UI change

[sturdy thistle]

module QA

[obtuse fern]

does the thing work the intended way

[sturdy thistle]

i think

[obtuse fern]

push button do work

push button no work

no work sad

[sturdy thistle]

i push the pc shut down button now

[crimson crypt]

https://thehackernews.com/2026/03/weekly-recap-qualcomm-0-day-ios-exploit.html#:~:text=New AirSnitch Attack Shows Wi-Fi Client Isolation May Not Be Enough

[deep ferry]

^ip grabber

[crimson crypt]

[sturdy thistle]

How you know

[crimson crypt]

At random

[scenic maple]

Walaikum salam
I see marcie answerer :)

[sturdy thistle]

Salam golam

[thick forge]

chaina

[frail turtle]

CHYNA

Does anyone here like pocket knives?

[deep ferry]

^fed

dni

[frail turtle]

I can't be a fed

[sharp shuttle]

explain this

perhaps it has always been planned from the start

[turbid goblet]

when god made hacking why didnt he make it easier

[sharp shuttle]

electronics are that of demonic origin

[frail turtle]

I cannot confirm or deny

[turbid goblet]

damn lucifer

[sharp shuttle]

lucifer is just one of hundreds of fallen angels

ur mom is a succubus and you her cambion spawn, i am a bastard nephilim and we all sing kumbaya baby

my cat is a chimaera egyptian-iranian chad

[supple plume]

bre I open the chat and someon call my mother SucCUmbUs

https://tenor.com/view/writing-too-fire-fire-writing-writing-fire-friendcord-gif-7801118907023267493

[sharp shuttle]

imagine being upset

[supple plume]

it actually made me laugh briefly

[zealous socket]

hi chatters

[undone fossil]

hi chatters

[zealous socket]

@pale basin

hey

are you awake?

@sharp shuttle are you awake?

[undone fossil]

turbo based

[normal drum]

How goes it? I’m wondering about AI and the “cognitive debt” it might leave in its wake after seeing lots of ai hype slop

[zealous socket]

skill issue

simple

[latent oak]

What do you mean? Don’t make me use AI to understand your question

Do you mean “tech debt”… it exists today and has existed since we started writing software

[zealous socket]

@undone fossil

hey

!

[undone fossil]

I think they're talking about users getting worse at critical thinking etc.

@zealous socket

hey !

[pale basin]

https://tenor.com/view/lucky-star-patty-i-cant-hear-you-lalala-gif-6332485185577503664

[zealous socket]

HEY

szy!!!!!

[undone fossil]

HEY

[latent oak]

That is a problem because how does someone who has never written code the “hard way” accurately judge whether AI is building good code

Or maybe we don’t have to give a shit

[iron galleon]

UwU

[latent oak]

AI writes the code, Ai exploits the code, ai refactors the code… eventually it works, and meets whatever performance and security goals need to be met

[signal mica]

[zealous socket]

dont ping king

[iron galleon]

what are you like his security or something

[zealous socket]

yeah, problem?

[latent oak]

We gave been treating code like it’s fine wine, but maybe it is just sausage

[iron galleon]

https://tenor.com/EkWX.gif

[zealous socket]

@pale basin

[pale basin]

yes

[zealous socket]

confirmed

and factual

thanks szymex

[rapid badger]

Some people make sausage and some people make wine.

[latent oak]

Yes, but nobody cares how the sausage is made

😉

[turbid goblet]

hi guys how do i download more ram

[latent oak]

Asking the important questions

[rapid badger]

Yes, but they care if it makes them ill

They care about the look

the smell

And everybody knows what they eating in a cheap dog

[normal drum]

I should’ve elaborated but yeah, this

[rapid badger]

Always happy to argue with vibe coders when Claude Code is down

Seems to be when they show up

🙂

[normal drum]

“Where do I put my semicolon in python to run the code?”

[latent oak]

I think code smell is entirely fixable already… don’t one shot your dev, make it write a plan, then have another agent review the plan for anti-patterns and security violations. Have another review it for violations of prior architecture decisions… have coder agents, code review agents, qa agents , red team agents, Don’t ship code until it passes all functional, performance, and security gates.

[normal drum]

I saw a vibecoder the other week who made all this software and then couldn’t figure out what a double was

[latent oak]

Also, review the plan yourself before you waste the tokens to build it

[signal mica]

https://tenor.com/view/matrix-agent-smith-clone-approval-gif-16819694555183336857

[latent oak]

It’s not perfect, but it’s better since I started doing it that way.

[undone fossil]

mount google drive to the swapfile

[undone fossil]

code is cheap, engineering is not

that's the difference nowadays

[latent oak]

Right

[undone fossil]

adjacent but different skillsets

[sharp shuttle]

whats up itachi

[zealous socket]

thats not my name pal

[latent oak]

@undone fossil I really like that phrase… I’m going to use it

[sharp shuttle]

RASENGAN!

[sly summit]

There is a lot of that floating around

[zealous socket]

try again buddy

[sharp shuttle]

hmm

ok buddy bloody bloody

[zealous socket]

hi brath

!!

[sharp shuttle]

hey kozmer (:

[alpine pumice]

tell that to the company i work for thanks

[edgy jetty]

https://tenor.com/view/spider-dance-ilp-gif-10968519049859801761

[undone fossil]

if they pay me to i shall

[edgy jetty]

hello world

[normal drum]

I wonder what happens in 5-10 years when all the seniors get sick of reviewing AI code and retire but there’s not enough trained juniors

[iron galleon]

im in quite a conundrum

[sharp shuttle]

5 years LOL, bro next year AI code will be reviewing AI code

[latent oak]

@normal drum why review it at all?

[undone fossil]

Test driven development is "currently" the way folk seem to be having success with

[rapid badger]

It already does, if the constant outages are not obvious enough,.

[latent oak]

My AI reviews the code… does a better job than most people

[zealous socket]

agile

[sly summit]

Just SIGTERM it

[undone fossil]

nah man we only use waterfall

noob

[edgy jetty]

https://tenor.com/view/sad-cat-car-silly-cat-sad-scary-gif-12889095585962936860

"omniscient"

[native plume]

What’s the point of reviewing it if they’re going to bombard you with 10 new feature request tomorrow

[sharp shuttle]

agile is just waterfall with extra useless people in the process (agile certified dipshits)

[zealous socket]

you are agile brath!

[sharp shuttle]

on opposite day!

[normal drum]

“The AI has declared that the AI is correct, ship the code”

[sharp shuttle]

not much different from "we investigated ourselves"

and thats good lawfare

[normal drum]

So true

[sly summit]

going to the toilet and realising there is no paper requires an agile solution

[undone fossil]

difference is that one can be held legally liable

[latent oak]

Different sessions different contexts, different tenperatures…

[normal drum]

“Claude, hire someone to bring me toilet paper”

[latent oak]

Enforce it with traditional unit testing, sast and dast scanning, dependency tracking

[undone fossil]

I'm still waiting for something of substance in the AI takes though tbh

[iron galleon]

ai derangement syndrome

[undone fossil]

https://rentahuman.ai/

[turbid goblet]

wtf lmao

[hoary dawn]

ai stealing jobs more like ai giving jobs

[sharp shuttle]

...

so like

[zealous socket]

like

[sharp shuttle]

can it hire me to plug a usb into it over and over again until a kernel panic?

[maiden anvil]

the clankers were really excited about this on moltbook recently

[zealous socket]

yes

[normal drum]

Imagine an AI hires you to pass a verification test to make sure you aren’t a robot

[rapid badger]

When claude has outdated maps so it's palantir deranged cousin double taps your kid's school.

Oh wait thats already happening

[latent oak]

https://corpwaters.substack.com/p/the-corporate-collapse-of-2026

[iron galleon]

why dont yall just accept it and go to sleep

[native plume]

And if you don’t obey the AI then it will ransomware you

[iron galleon]

it's over

[latent oak]

I read this last night and I cried a little

[sharp shuttle]

i can attach a actuator to a drone and uhhh come to your window and uhhhhh make you feel a certain way and uhhhhhh you can uhhhh pay me for it

[iron galleon]

i just want an ai wife bro

is that relatable

[normal drum]

Holdon, let me ask chatgpt to summarise this

[latent oak]

lol

[hoary dawn]

i had claude make me a terminal style search bar

i fw it it goes so hard

[sharp shuttle]

yes i too want an ai girlfriend so my wife can get an ai boyfriend and we can all become polyamorous together

[latent oak]

I spend my whole day in terminal now…

[normal drum]

Is this written by an AI, it did the “that’s not a [insert thing] that’s [insert other thing]”

[iron galleon]

honestly just pump me full of fent

[normal drum]

Somehow everything is calmer and more peaceful in the terminal

[latent oak]

I installed a terminal based music player yesterday

[iron galleon]

i am a lab rat for experimental psychoactive drugs at my local university

[latent oak]

Kinda like it

[iron galleon]

they pump me full of all kinds of shit and watch me go crazy

[latent oak]

Winamp for CLI

[rapid badger]

Nice

[iron galleon]

it's so cold in here

but i feel amazing

[rapid badger]

Bro is 1 step away from moving to the woods and writing a manifesto

[iron galleon]

lmfao

[rapid badger]

xD

[iron galleon]

humans as a species is such a cruel thing to design like, enabling them to create a civilization that their brains are ultimately incompatible with, or at least cannot keep up with

and someone's calling me

[latent oak]

It’s me

[iron galleon]

why are you calling me bro

[latent oak]

One ringy-dingy

I’m inside the house

[iron galleon]

just stay wherever you are rn

[normal drum]

It is your AI gf, I got Claude to whip one up

[iron galleon]

i dont want her to call me right now

im busy

[normal drum]

Imagine having an ai gf and then she runs out of tokens and you have to wait until daily reset

[latent oak]

She can wait

[iron galleon]

thats perfect

[latent oak]

Or you have to reset the session and she’s like “nice to meet you”

[iron galleon]

all i could ever ask for

[normal drum]

Hahahaha

Imagine “I’m gonna ransomware your gf” being a credible threat

[iron galleon]

dont

[latent oak]

I’m going to reset her context… she won’t remember that you forgot to take out the trash

[iron galleon]

im protective

[latent oak]

She also won’t remember you

[iron galleon]

why is my brain not working

[normal drum]

Her context gets wiped, she doesn’t remember you and then she hires some random guy to be her bf instead

[iron galleon]

someone's hacked me

[latent oak]

Did you forget your tinfoil hat?

[iron galleon]

i can fall asleep but i cannot get into REM sleep

[normal drum]

You have to pay for extra context

[latent oak]

You need the $100/ month max plan

Maxgf.com

[iron galleon]

dude for context i stopped taking trazodone and i haven't been able to get any sleep at all, like, i toss and turn

and the ironic thing is that i feel more cognitively capable, im actually getting things done

this is crazy

i slept for like 15 hours straight at least if i had to guess, just tossing and turning, never getting to the point of experiencing any dream

[latent oak]

Ah

I take melatonin sometimes at night, not sure it actually does a lot, but it feels like it helps

[iron galleon]

i went the extreme route and took an ssri for sleep, being trazodone

bc i had mild sleep issues

not worth it

at least imo

plus melatonin made me groggy asf

[turbid goblet]

do u workout

helps sleep

[latent oak]

Sometimes if I can’t sleep i take half of a benadryl

[iron galleon]

yeah, i lift

[iron galleon]

haha i have a funny story about this one

[turbid goblet]

hatman

[iron galleon]

yall would think im questionable as shit if i told it

im not gonna

😭

[latent oak]

I also take vyvanse, so as long as I take it before 8am, sleep comes easily

[iron galleon]

ah yes vyvanse is great

i also take that

best adhd medication ive ever taken

[latent oak]

Same

It actually seems to work

[iron galleon]

when i first started taking it, it was extremely potent, and at a relatively high dosage it actually is working out pretty well for me, whereas other meds would have these awful crashes, not last all day, etc.

ppl shit on vyvanse bc it doesn't have street notoriety

which is silly

[normal drum]

Takes note

[iron galleon]

dumb thing

god bless psychiatry

[rapid badger]

Brother thats not psychiatry, thats just drugs 😄

[iron galleon]

my friend used to go like

"you have the shitty adderall" and try to make me feel bad abt having extended release capsules

very slippery culture when u get on adhd meds at a young age

anyways

[iron galleon]

idk if i approach it the wrong way

i got zepbound today

for weight loss

america issue

[graceful pendant]

how about just lock in and go to the gym

the helly

[iron galleon]

bc that takes time n shi

zepbound doesnt just werks

it reduces hunger n shi

let me see what else it does

"slow digestion, and improve how the body processes sugar and fat"

[latent oak]

Vyvanse reduces hunger too. I’m down 15-20 lbs

[iron galleon]

i envy that but my issue is that i take vraylar too

[latent oak]

Still fat though

[iron galleon]

which makes me abnormally hungry and it's hard to resist that sounds so chud-like but it's true

can we just print so much money that everyone can afford healthcare gosh

[latent oak]

I’m a Canadian… we pay for our healthcare via taxes…

[iron galleon]

i keep having to jump through these hoops like payment assistance programs

[iron galleon]

im american jerome powell pays for everything for us

[latent oak]

lol

[iron galleon]

alr im going back to sleep

was awake for a solid 5 hours today

[turbid goblet]

and u spent an hour of that in general chat

damn

[latent oak]

Night

[turbid goblet]

backspace how long did it take u to get omniscient

[frigid mountain]

2 days

[latent oak]

A few years

I think 2-3

It’s a fucking grind

Every week you’ve got to do the weekly, plus try and tackle another box or challenge

I spent most of my free time working on it (as well as too much time when I should have been working)

[turbid goblet]

i have enough coffee to be prepared

[latent oak]

I think I got it in 2019 sometime

[turbid goblet]

ping me in 2029 if im not omniscient i owe u a beer

[latent oak]

You can do it!

If I can, anyone can

[normal drum]

I might try

Any advice?

[latent oak]

Be persistent, be curious, help others, ask for help when you need it…

[rapid swallow]

No

https://tenor.com/view/arthur-lies-lie-internet-lie-stop-lying-gif-16106191074125891844

[latent oak]

lol

[maiden anvil]

[raw niche]

hey people. just joined HTB. I have zero experience and am starting at square one. Any tips or advice? 🫠

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[latent oak]

Yep! Welcome to your new obsession

[frigid mountain]

Turn back now

Sorry I meant proceed

I always get those two confused.

[raw niche]

ight, imma head out now before forming a new addiction xD

[latent oak]

That’s gotta create a lot of problems

[frigid mountain]

https://tenor.com/view/car-nope-turning-back-going-back-turn-back-gif-23660450

[maiden anvil]

I for one fully embrace the power of the dark side

https://tenor.com/view/cackles-star-wars-sheev-palpatine-gif-15366449

[frigid mountain]

https://tenor.com/view/you-will-try-anakin-skywalker-anakin-skywalker-made-by-fordo-gif-27525595

[latent oak]

https://tenor.com/view/scedaddle-scadaddle-benjammins-time-to-leave-time-to-head-out-gif-77735242597555461

[frigid mountain]

https://tenor.com/view/spongbobe-gif-10360974685639755235

[raw niche]

https://tenor.com/view/chuckles-im-in-danger-ralph-wiggum-the-simpsons-gif-14149962

[latent oak]

https://tenor.com/view/bro-gif-22919429

[raw niche]

ok. i feel like the biggest loser in the world sending gifs as links, im for real gonna head out

[latent oak]

Good lick with the hecking

[raw niche]

its gonna go great. off to a strong start.

[normal drum]

I shall try to help others after I gain the skills

[manic gazelle]

.

[stoic flint]

Hello
I need help with a module; I've been trying for a long time.
Can someone help me privately or should I send my question here?

[hoary junco]

Hello, may I ask if there is an issue with connection section, having VPN option missing from options when trying to finish academy material? Maybe I missed something

[stoic flint]

I noticed that too; sometimes it appears and sometimes it doesn't. I refresh the page and it appears. Otherwise, I reuse the previous VPNs.

[stoic flint]

Fractal.

[hoary junco]

Thing is I fail to find any VPN file whatsoever, so I am stacked in Pwnbox instances. I've refreshed the page lots of times, maybe Ill try some cookie/cash reset.

Same thing, there is no HTML value as "VPN" loaded there even...

[stoic flint]

Module: information gathering web edition skills assessment Q: What is the API key in the hidden admin directory that you have discovered on the target system? - I tried using gobuster and fuzz, but I didn't find any subdomains. I want to know if the problem is on my end or if the lab is malfunctioning. These are the commands I used: gobuster vhost -w SecLists-master/Discovery/DNS/subdomains-top1million-110000.txt -u http://inlanefreight.htb:31731 --append-domain -t 200 and fuzz: ffuf -w SecLists-master/Discovery/DNS/subdomains-top1million-20000.txt -u http://inlanefreight.htb:31377 -H "Host: FUZZ.inlanefreight.htb" -fs 120. I used -fs because otherwise everything would return positive, so I filtered by size. It seems that no matter what you pass to it, it always gives you status code 200: ~$ curl -H "Host: dev.inlanefreight.htb" http://inlanefreight.htb:31731 <!DOCTYPE html><html><head><title>inlanefreight</title></head><body><h1>Welcome to inlanefreight.htb</h1></body></html>

[stoic flint]

I have no idea how to help you friend, that's the solution I found. All that remains is to use pwn box

[hoary junco]

I tried from another device, same thing, must be something else. Thank you tho

[stoic flint]

I'm having the same problem, except I have the VPNs saved. It seems to be a bug.

[opal mural]

Hi

[stoic flint]

HEllo

[opal mural]

Are there any Indonesians here?

[stoic flint]

No.

[terse dirge]

#modules

[patent lily]

why are you looking for subdomains if the question says hidden admin directory

[stoic flint]

I also listed directories, so I didn't find anything there either, I thought. I suppose I should look for a subdomain and list the directories there. But I found neither directories nor subdomains.

[patent lily]

Try another list

[stoic flint]

I've already tried a lot of dictionaries.

[fluid gate]

anyone having issues

with the machines von

vpn

[stoic flint]

I think it's happening to all of us.

[fluid gate]

ohhhh

[long matrix]

Hey, there are some clues

https://forum.hackthebox.com/t/information-gathering-web-edition-skills-assessment/319537/6

[fluid gate]

im having the issue where my internet route is changing

[stoic flint]

Thanks friend, but I already tried all that and still no directory or subdomain appears.

[hoary dawn]

I’m making my own cheat sheet website on my profile but I’ve only added up to Linux fundamentals section 14, I’m on like section 20 so gotta add the rest still but there’s a lot of directory related stuff in it already

[stoic flint]

Thanks

[long matrix]

@stoic flint I'm sure there are some public solutions on google.

[stoic flint]

I don't believe this is the API key on Google.

[long matrix]

Cool website

[hoary dawn]

Well when you find the hidden admin directory what do you do? Have you found the hidden admin directory yet?

Thank you, Claude Sonnet 4.6 🤠🧳

[stoic flint]

Salta, Argentina.

[lean dagger]

Why does the new UI is eating half of the screen without beneficial content

like what should I by staring at the header and footer for 24/7

[stoic flint]

gobuster dir -w SecLists-master/Discovery/Web-Content/DirBuster-2007_directory-list-2.3-big.txt -u http://inlanefreight.htb:30197 -t 200 R: Progress: 1273832 / 1273833 (100.00%)I haven't found anything.

[ornate ibex]

Morning

[hoary dawn]

You downloaded that directory for the wordlist? I was told default directory is /usr/share/wordlists/

[long matrix]

Morning

[long matrix]

Did you find any subdomian?

[hoary dawn]

Try ffuf command same arguments basically

[sharp shuttle]

i do know of the sub dom named ian yes

[hoary dawn]

Ffuf -u url -w wordlist

Maybe ur wordlist just crappy idk

[stoic flint]

Yes, I already did it.Yes, I already did it. It didn't give me anything either, use: ffuf -w SecLists-master/Discovery/DNS/subdomains-top1million-20000.txt -u http://inlanefreight.htb:30197 -H "Host: FUZZ.inlanefreight.htb" -fs 120

[long matrix]

Maybe you need to try a larger wordlist for sub domain

[stoic flint]

I already tried the largest one: subdomains-top1million-110000.txt

[hoary dawn]

If no wordlists are bringing results like any at all then the problem is the format of the url

[stoic flint]

I simply get nowhere:

[hoary dawn]

Try changing the url around

Make sure it ends with a slash etc

[long matrix]

I'm sure you'll find a specific domain, and its webpage will reveal information about a hidden page.

[hoary dawn]

Yeah honestly you can just curl random page names and find it probably 😂

[stoic flint]

It only finds Index.html

[stoic flint]

Please avoid saying stupid things. I'm trying to figure this out; I need help. Apparently, anything I do makes it return the index. Well, I guess it's because it uses nginx, but even with the size filter, that should be enough.

[hoary dawn]

That’s what your module is about

Finding the page and viewing the contents

[stoic flint]

curl -H "Host: asdfasdfasdf.inlanefreight.htb" http://inlanefreight.htb:30197
<!DOCTYPE html><html><head><title>inlanefreight</title></head><body><h1>Welcome to inlanefreight.htb</h1></body></html>

[hoary dawn]

That’s all I said

Your command format is wrong

I don’t know what it is but you’re missing something in the command, I guess if it’s retuning an index then the url format can’t be wrong

And manual checks aren’t an uncommon thing for common page names, it’s always worth a shot

[long matrix]

Have you tried the gobuster to search the sub domain?

[stoic flint]

I ALREADY TRIED IT, IT ONLY RETURNS AN HTML WITH TEXT THAT SAYS WELCOME.

[stoic flint]

Yes, I already tried that too.

[stoic flint]

here

I did a manual test, ffuf, go buster. I don't think the tool is the problem. I already searched on Reddit, but it just doesn't find anything; it's like I don't have a vhost.

[long matrix]

Have you changed your /etc/hosts? or you local hosts file

[hoary dawn]

I was about to say that, I remember having to do that in a module practice, it made it so that the connection is simply hosted correctly, without it it will resort to default connection I assume

[stoic flint]

YESSSS, that's how it looks ~$ cat /etc/hosts

Standard host addresses

127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
154.57.164.67 inlanefreight.htb

[rose onyx]

Til #general is now #modules 😩

[stoic flint]

Nobody answers there.

[patent lily]

did you try /FUZZ/ instead of /FUZZ

and what status codes are you matching with ffuf by default it excludes some maybe you got 405 or something and it didn't catch it do -fc 1-999

-mc not -fc lol

[stoic flint]

Great observation, but I tried with GoBuster and didn't get anything either.

[raw prism]

which one is better gobuster or fuzz?

[patent lily]

I prefer ffuf

[raw prism]

ohh

why?

[patent lily]

more things you can do with it than gobuster

Like finding hidden parameters

Fuzzing many things concurrently

[patent lily]

Well I guess gobuster can also do it haven't used it much but I think they also have some fuzzing mode

[raw prism]

hmm

ok

thanks for attention btw

I will try fuff

[stoic flint]

I already tried -mc, but I'm not getting anything. I'm filtering by size because otherwise everything returns 200.

[patent lily]

You tried -mc 1-999 -fs 120?

[stoic flint]

ok

I'll send you the result when I'm finished.

[rose onyx]

You never clarified what your problem was there. People are not mind readers.

Clearly stating which module, section, and question you are stuck on, along with maybe some things you tried without spoiling content typically yields decently fast responses.

[stoic flint]

nothing: ffuf -w SecLists-master/Discovery/DNS/subdomains-top1million-20000.txt -u http://inlanefreight.htb:30455 -H "Host: FUZZ.inlanefreight.htb" -mc 1-999 -fs 120 -t 200 R; :: Progress: [20000/20000] :: Job [1/1] :: 820 req/sec :: Duration: [0:00:24] :: Errors: 0 ::

[crude nest]

That module is broken. I have the gold subscription and followed the official solution and it does not work. Write to the support on the website

[stoic flint]

Thank you, I was expecting that answer. I can finally stop believing it was me.

I realized this by doing: curl -H "Host: asdfasdfasdf.inlanefreight.htb" http://inlanefreight.htb:30455
<!DOCTYPE html><html><head><title>inlanefreight</title></head><body><h1>Welcome to inlanefreight.htb</h1></body></html>

[stoic flint]

Specify the section and what I did with the commands. I was just banned from that server. It's just that it bothers you, you should be quiet, you should be helping. There's nothing wrong with asking here, are you the owner?

[rancid snow]

imo if theres other convos going on keep it to the relevant channels even if responses are slow. If chat is otherwise dead tho then who cares

[turbid bloom]

mornin people

[sharp shuttle]

I will make you my jam boy

[stoic flint]

The chat was inactive; I was just looking for some help, I don't see anything wrong with that. Maybe you could correct me or give me some ideas, that's all I was looking for. I think "General" is broad enough for me to ask my question. I resorted to this channel because the moderator in the other one told me she was busy.

[rancid snow]

yeah then who cares

[molten bobcat]

also wrap code in back ticks

Like so

[stoic flint]

That little pest just wanted to cause trouble.

[rancid snow]

I have tried out claude code for the first time.

I ran one prompt and it consumed 48% of my daily tokens

[sharp shuttle]

jesus

tokengate

[molten bobcat]

the problem is solved by avoiding it all entirely

yeehaw

[rose onyx]

There's zero need for name calling, and I did give you some good advice. That module is tier two and shouldn't be discussed out in the open like that.

[sharp shuttle]

im still on chatgpt because i think claude causes absolute brain collapse by making things TOO easy

i need to play chatgpt ping pong or else ill not remember anything

[stoic flint]

I won't allow you to call me when I ask politely. Also, stop pretending that you're the only one bothered by this.

[molten bobcat]

no idea what this argument is about, but i can guarantee it ain't worth it

[rancid snow]

Im just trying it out to see if it really is as good as the diehard fans says it is. Id rather have an informed opinion than a feels opinion

unfortunately theres a power outage going on now and its family bedtime, so I wont be able to actually investigate the prompt results for my project till tomorrow/friday

[silver forge]

for below average software developer, it's kind of meh.. it takes actual software architecture skills, prompting skills, and software development background to get actually good results out of it. but then it's like you're the lead developer leading a team of 5 semi- to competent developers.

especially on issues like modularity, reusability and testing correctly you have to direct it

[gaunt gale]

Ok so finally I’m not sick anymore

[rancid snow]

I was reading the documentation and I was pleasantly surprised how much general just good advice for using AI there was.

Stuff that 99% of vibecoders dont follow lmao

[gaunt gale]

And I’m more or less caught up on electronics work (no need to cram anymore)

So tomorrow I can do HTB again

[silver forge]

yeah. I work and discuss with actual lead developers who are into AI using and they all describe it as force multiplier that allows them to accomplish in day more than they used to do in week, with same overall quality.

[gaunt gale]

But humans who know how to code still need to be the ones using it

Right?

[silver forge]

Yes, AND if you are below average developer you will never be using it well.

[gaunt gale]

Ya ok

So might as well still need entry level developers

Etc

At least for now

[rancid snow]

Like Ive always been saying: review and verify or youre doing it wrong

[gaunt gale]

Maybe in five years it’ll be different

[silver forge]

For lead developers to emerge - sure. For software projects producing new software entry level coders are simply unnecessary today.

[gaunt gale]

Ya we’ll see about five years or ten years from now

[shrewd heron]

Hello everyone!
Is there any chance I can use old style of hackthebox academy???

[rose onyx]

No, it's gone unless htb reverts, but they seem pretty dug in on 2.0.

[turbid bloom]

i just found a bash scripting module question on stack overflow 👀

and it had 2 solutions as well 👀 👀

which gave the correct flag

[rose onyx]

Report the URL with /spoiler

[turbid bloom]

👍

[turbid bloom]

done

[rare monolith]

the only way for that not to happen is if suddenly all the tokens just skyrocket in price

and that’s not likely

[violet hare]

Why do you think that is unlikely? This was a discussion today on theprimeagen’s standup and how that is very likely the direction

[sharp shuttle]

I think thats very very likely, slowly, systematically, when the gov subsidies run out, normal people will not have access to premium models

[violet hare]

Yeah the main point was that only a small subsection of users, vibe coders, use large amounts of tokens and it will be inevitable that a popular tool becomes mainstream that is not vibe coding that will use large quantities of tokens

Moltbot proves there is a market for it

[rare monolith]

i was ment to say pretty likely yeah i agree with yall 🙏typo

[obtuse fern]

you need a bigger list

[ornate ibex]

wassup

[graceful pendant]

I wanna start a research group and bugbounty team : /

[turbid bloom]

Can I join 😄

i wanna get experience

i learn more from experience than just sitting and doing exercises

[sturdy thistle]

Morning

[azure wasp]

Morning

[uneven beacon]

https://tenor.com/view/morning-gif-18014148662754561971

[frosty bane]

Morning

[heady sage]

Only 14? What a steal!

[fierce vale]

[sturdy thistle]

@ornate ibex @scenic maple delete pls

[simple wolf]

oooo

sory

[mystic harbor]

!golam del

[simple wolf]

I didn't know it was forbidden, I just wanted help. @sturdy thistle

[scenic maple]

i dunno what happeend

but what did you need help with

just ask high level dont paste stuff

[vocal sorrel]

Do i really need to Read the introduction of pentesting?

[scenic maple]

if you want

[simple wolf]

Pterodactyl I couldn't root the machine; I keep getting the same error.

[green kite]

#boxes would be more apropriate

[lime trout]

Gday chat

[hardy frigate]

Sup

[frozen zinc]

Is HTB down?

[cerulean bloom]

not that I can see

let me check academy

[lime trout]

Apparently, the team is already working on it

[cerulean bloom]

oh, yeah, infinite load

although, labs is working

[frozen zinc]

thanks!

[turbid bloom]

the academy is working just fine

i just compelted a module and started another one

[cerulean bloom]

account is not working

for me anyway

mistype LOL

[hardy frigate]

Holy actual smokers

I think someone just tried to hack me

[hardy frigate]

Yeah they contacted me for a job

Now theres an assessemnt I have to unpack a file and run a docker container

[turbid bloom]

ouch 😂

[hardy frigate]

But their website is dysfunctional

[lime trout]

Not entirely unheard of

[turbid bloom]

[lime trout]

But if they reached it first kinda sus

[hardy frigate]

And they have 20k followers on linkedin but no activity in their posts only 2 likes each

[turbid bloom]

i appliped for a python dev internship and i got an offer for ~$200/month from them. keep in mind im a freshman college student who applied randomly without even trying

[frozen zinc]

Maybe is one of this Lizard squad guys, I heard they need someone who can manage compressed files properly

[turbid bloom]

and their website is so messed up that the company's own name is different in their website's subdomains

[lime trout]

Run lol

[turbid bloom]

different subdomains have different names 💀

[lime trout]

How is that even legal to pay 😭

[terse dirge]

That's super below minimum wage (in the US)

[lime trout]

Most places

Not all, but most.

[turbid bloom]

well in india, it's a barely decent offer

for freshmen, its a very good offer (if they actually get it)

the pay was not the most sus part tho

[terse dirge]

You're only working like 7 hours a week?

[turbid bloom]

yup

[terse dirge]

Indiana goes off of federal minimum wage so it's like $7 an hour

[turbid bloom]

its india 💀

not indiana

i converted the currency for yall

[terse dirge]

Oh I misread

[lime trout]

Bruh

[turbid bloom]

id prolly have to work at max 14 hours a week

that's actually a pretty decent pay for 2 hours of work per day

given that i could do insane amounts of work in 2 hours

[lime trout]

Less then you think tbh

When company bureaucracy / dealing with others things go slower

It’s different doing things for a company/ in a team

[turbid cypress]

Hi, is there a problem with HTB platform? I'm getting 502 response trying to access https://account.hackthebox.com/

[rotund pumice]

yep me too!

was about to ask through a proper channel like a ticket or somethign

checked status but they were showing operational since 11th

[frail flicker]

uhh... Guys why am I unable to connect with my release arena vpn file? And also i can't find any release arena or seasonal vpn files in the list. I haven't opened the HTB site since last Saturday, please help

[rotund pumice]

there are issues going on with vpn which are currently being worked on for a fix

[frail flicker]

oh.. ok thanks thought there was problem on my end

[rotund pumice]

yeah, your welcome, for now the site isn't responding

[lime trout]

is everything working now?

[rotund pumice]

yep working perfectly! thanks!

[cerulean bloom]

you know what's funny
a person in my country is currenlty #1 in HTB labs by solving tons of machines and challenges in a time that just doesn't make absolute sense

[lime trout]

dm me

[turbid cypress]

Yup, Thank You

[crimson crypt]

Is it normal to dream about the box you did the day before?

[cerulean bloom]

yes

[crimson crypt]

No arch nooo

[cerulean bloom]

cough the terminal cough

[supple plume]

yes, 🤘

[crimson crypt]

And it’s equally stressful

[supple plume]

what's the problem with the terminal

[crimson crypt]

I like Arch, but it’s too much hassle. It slows down my workflow

[supple plume]

no hassle for me, already seasoned

do I want my terminal blue? well I already have a script for that

[rotund pumice]

don't let bro discover ricing

[supple plume]

I am fine with just customizing kde a bit

[cloud osprey]

i am fine with you

[rotund pumice]

kde works fine

[terse dirge]

Have you tried void Linux yet?

[crimson crypt]

Because you’re confident. I made my choice and decided to focus on Kali. But I know the terminal and how packages work

[supple plume]

not yet

[terse dirge]

It's a lot easier than arch btw

Faster too

[supple plume]

I'll definetly try it at some point

[opaque halo]

Hi everyone who has done the Sherlocks: ShadowBait.

Can anyone help me find the answer for tasks 6 and 7? I've solved everything except those.
https://app.hackthebox.com/sherlocks/ShadowBait

[zealous charm]

[terse dirge]

#sherlocks

[terse dirge]

Hell yeah. I highly recommend a window manager for it 😉

[opaque halo]

Thank

[terse dirge]

Niri is my personal fave still but hyprland is also good on it.

[rapid swallow]

https://tenor.com/view/arthur-lies-lie-internet-lie-stop-lying-gif-16106191074125891844

[crimson crypt]

You can customize Hyprland however you like. It’s very useful, but I don’t have the right hardware for it

[mystic harbor]

@supple plume

[supple plume]

Get out

[mystic harbor]

🚪

@supple plume

[supple plume]

Bro what

You delicate little flower

[dense turtle]

morning guyss 👋

[hardy frigate]

Good morning

[upbeat tangle]

🔫

[raw prism]

ayo

[lime trout]

Can we not?

[frosty bane]

[signal mica]

He just said greetings 👀

[zealous charm]

[lime trout]

the rest was deleted

[muted olive]

[devout sail]

now that makes me curious

[signal mica]

Restore it

Im still waiting on your PR sado

[hardy frigate]

Hey guys

I need an alternative to chatgpt that will help me write malware

Do I just use copilot

Or is there a product for hackers

Mostly I just did not program very much and need the help but my chat gpt is inconsistent in helping

[rare monolith]

just use claude vro

one dude made a literal os with claude 😔

[hardy frigate]

I simply don't feel like in this day and age that I should be writing my own malware

[neat cipher]

Have you tried learning to code and becoming a software engineer? It's still the preferred method for malware researchers, even the ones most successful with modern LLMs

[hardy frigate]

AI is more than capable of writing malware

[hardy frigate]

Bro do u know how many things I have to do

U want me to slow down and write var x = 1++

[crude nest]

Coding != Softwareengineering.

You still need to understand Code if you vibe code and the funniest thing is your malware needs evasion tactics and needs to exploit vulnerabilities. Things a LLM can't provide you since it is learned on public data

[hardy frigate]

Okay there is one more problem I have

[neat cipher]

If you don't know how to do anything, how can you be the person who directs the AI to generate anything worthwhile?

[hardy frigate]

My chat GPT cannot handle large data

[crude nest]

no int x += 1; //we want to use C

[west venture]

You have a fundamental misunderstanding on how an LLM works

[hardy frigate]

Like for example if I want to put into chat gpt every single GPO that exists in an environment

And then make it for example find SIDS of my choosing

I cannot do that

Is there an AI which handles large data

And can make spreadsheets

This should be a thing

[crude nest]

then teach me

[neat cipher]

Not yet. LLMs are notorious for not retaining or reviewing prior actions

[hardy frigate]

Bro I am legit the only real AI red teamer

Everyone else is just trying to be trendy

[crude nest]

Contextlength is the one thing that keeps LLMs stupid lol, so no if the biggest companies don't provide enough contextlength, nothing will

[west venture]

An LLM does not depend entirely on only the data it has learned. The fact that it has only seen public data does not mean it cannot create new things.

It is more than capable of discovering and writing 0days on completely new software, because an LLM depends on patterns. It learns patterns from it's training data. It does not depend only on previously seen knowledge.

[azure wasp]

Hello everyone

I haven’t learnt in some days

I’ve been busy

[crude nest]

No shit sherlock. But who provides the samples? Someone who does not understand anything or someone who identyfies the possible vulnerable code? You can't just put a whole app into an LLM and hope it writes you a zero day, that is my whole point

[latent oak]

You can feed the codebase to AI and have it attempt to fuzz it...

[west venture]

Yes you can, LLMs are used to automate bug hunting on Hackerone. I'm pretty sure an AI used to be #1 on their leaderboards

But it sure does help if you have an understanding of what's actually happening

[devout sail]

Lmao, I was busy
And today i overslept (till 4pm)

[devout sail]

But "can" you create malware?

[latent oak]

The scary thing right now is how fast AI can build an exploit once a zero-day or CVE is disclosed. The gap between discovery and KEV is shrinking

[west venture]

Yeah

In the future most of us will have no jobs

[latent oak]

so the patching process also needs to be AI-automated to the maximum extent possible or we'll drown in CVEs

[west venture]

The good part about AI, though, is it's everything I wish Stack Overflow was. Instead stack overflow is a literal shithole, so

[latent oak]

lol, true that

[turbid bloom]

Fair enough ig

You seem to speak with experience

[signal mica]

yesterday you were talking about a full agentic code development flow, ranging all the way from architecting, sec review, code review, ... unit testing. Do you have that setup? Or can you point me to any articles so i can setup a barebone for myself?

[latent oak]

I actually open-sourced it yesterday

[crude nest]

We'll drown in AI CVEs yeah, it started poisoning itself already by hallucinating stuff into the internet and using this crap to train itself.

[latent oak]

https://github.com/backspace-shmackspace/claude-devkit

This is claude specific ATM, but I'm going to update it to work with Gemini... people are welcome to use it or modify it as they like.

I'll qualify this by saying "I am not an AI Expert" I am a developer who's been using it to help me solve problems for a few months now, and this solves a problem I was having. It's not perfect at all, but I'm pretty happy with the results overall.

[neat cipher]

Yeah AIs are used so much to automate bug bounties on hackerone that projects like Curl have to shut down their bounty program cos of all the slop they were getting

[west venture]

It was still #1 on their leaderboards, so it was generating legit stuff, and doing it faster than people

[valid thicket]

hey, was learning networking from professor messer, then would i have study anything on top of that for networking ?

[neat cipher]

The reason it appears to do things faster is that 90%+ of what it does is wrong, and it creates absolute mountains of wrong answers until it randomly comes across the right one. There's nothing like beating the odds by bruteforcing the solution

[west venture]

It was still #1 on their leaderboard 🤌

Being obsessively against AI just because it's "against the trend" is the dumbest shit ever lol

[signal mica]

hel lyeah

[rare monolith]

techniques are changing gotta adapt or be left behind

[neat cipher]

Yeah but how much waste was created for that? How much training data was stolen? How many tonnes of fuel were burned to train that system? How much rain isn't falling in the world to produce all that slop?

[west venture]

Yeah I'm just not going to get into the whole "stolen data" bullshit lol

Again people being obsessively against AI for literally no good reason whatsoever

[valid thicket]

hey, was learning networking from professor messer, then would i have study anything on top of that for networking ?

[west venture]

The world moves in the direction it moves regardless of all the copyrights violated, or the atmospheric impact, or the energy waste etc, so just deal with it. You either use that tech to your advantage, or just keep whining like a baby 🍼

[warped plank]

Well pretty much all of the internet is built on networking so... depends on where you wanna go from there but learning networking is essential.

[crude nest]

xbow is a project by a security team, this thing helped finding bugs but it did not by itself. Costed probably more than it earned and had to be supervised by a team of people

[crude nest]

I am not against AI, I am just against doomers, AI is an awesome tool, not more not less

[valid thicket]

hm

[west venture]

Yeah. Some people just hate it for no reason 😂

[neat cipher]

AI has its upsides, it is used to produce a lot of very interesting things. But we still do need to explore the questions where the answers are unpleasant. That's how the cybersecurity industry got started, after all

[west venture]

The same goes with the Microsoft hate and all that shit too. Just hate for the sake of hating

[west venture]

Not saying it's perfect, but it's definitely a huge part of the IT industry now. And we have to use it as a tool to our advantage

[neat cipher]

No, not for the sake of hating. For the sake of it being not only mostly useless, but actually creating more work and stress while costing vast resources. Eventually the vast waste adds up to more than the useful output, and all I'm saying is we have to make sure we understand the rate of deterioration of the rest of the environment, notice what direction it's accelerating, and see if we can do anything to correct it. Right now we're in a speeding bus on a mountain road and the bus is going forward, but it's pulling very strongly in an unpleasant direction, and some people want to leave the bus to drive itself

[crude nest]

bro now you are getting into deep water

[jolly depot]

Hallooo

where can i ask questions abt bug/s

is there a sepecific channel i mean ?

[crude nest]

#1234357888114364508 or support on the website

[jolly depot]

meghcii

oh wait

bugs in general not bug in the platform itself

[west venture]

Who's, "we"? "We" are the billion dollar tech companies that do this regardless of the environmental impact or the resources or anything. They will keep doing this no matter what.

So why worry about resource wastage? Individually not using AI is not going to solve anything. All I'm saying is, just accept and role with it.

[crude nest]

oh just ask then, maybe someone will answer

[jolly depot]

[cold lotus]

and the impact of ai in the htb?

[neat cipher]

More targets

[cold lotus]

i was looking in older boxes and the solution time had decrease by a lot now

I believe the boxes became harder but the time of the first blood decreased

[devout sail]

To sleep again 😔

[scenic maple]

the amish people might be onto something

maybe living offline is the best

[devout sail]

give me all of your devices

And go offline

[signal mica]

imagine explaining active directory to an amish

[zealous charm]

We all want to retire early and never look at the computer again.

[devout sail]

I think explaining AD in simple words is pretty easy?

Active Directory is like one big shared family ledger book that the boss of a big company or school keeps.

Instead of every computer and person having their own separate list of passwords and permissions, everyone’s name, password, and what they’re allowed to do (open this file, use that printer, log into that computer) is written in one central book — the Active Directory.

• When you sit down at any work computer and type your username + password, that computer quickly asks the central book: “Is this the right person? Do they get to use this machine?”
• If yes → you’re in. If no → door stays locked.
• The boss can change things in the book once (like “this person is fired” or “give Sarah access to the accounting folder”), and it instantly works on every single computer in the company — no need to walk to 500 computers and change them one by one.

Passive Directory where

[crude nest]

what is computer and file? Am I accused of a crime? And what is a printer and why is it stealing my log?

[devout sail]

We got an amish here

[neat cipher]

I've worked with it on and off since NT5 was the name of the system that became Windows 2000, and had studied things like LDAP and X500 in college prior to that. I don't think the Amish have any problems, the solution to which is directory trees and IAM

[rapid swallow]

ANyone do azure pentest offically?

i have some questions

[neat cipher]

Better to just ask the questions then

[rapid swallow]

if i did people who dont do it would give there opinion

and not looking for that

always does happen

[neat cipher]

Probably best to ask in #red-team or #careers-and-certs

[azure wasp]

I forgot I was writing something I’ve been putting chairs around my room

[cerulean bloom]

hi so much for subtlety, don't see you here often, hru 🙂

[crimson crypt]

[zealous charm]

[exotic pendant]

😄

[dense turtle]

👽

[supple plume]

Why bro

Changed your username 🥀

[dense turtle]

why wut

[supple plume]

This is cool tho

But stick with one

[exotic pendant]

Rocky road ice cream for breakfast

https://tenor.com/view/nacho-life-good-my-life-is-good-really-good-gif-4052742

[dense turtle]

I’ve been trying something with alien for ages, but everything was taken, so this one ended up sticking 🥀

[crimson crypt]

[dense turtle]

sticked!

[rustic carbon]

it sucks I have to keep loggging in everytimeee

[dense turtle]

2 min

[zealous charm]

Any hacking today?

[crimson crypt]

Pro labs

[supple plume]

I'm making this lil machine for htb 🍫

It's going to be some hacking for testing 💢

[signal mica]

turbo

[frail turtle]

What is up with all this asshole science everywhere

Flies being controlled through wires in their neural network

[devout sail]

ehehe

[frail turtle]

Where are we headed as civilization

[devout sail]

Too late to talk about it

[frail turtle]

Lol

Im going home

[neat cipher]

Eventually you'll reach an age where a proctologist will need to take a look

[devout sail]

I remember finding out an old video of a scientist maintaining a decapitated doggo head alive

[frail turtle]

thats not what i meant

[neat cipher]

Even DARPA hires proctologists occasionally

[neat cipher]

Scale it up to drones with fiber optics

[wispy sparrow]

Hi all.. Nice to meet everyone. I am new to the community , hope we can be friends and share some knowledge to eachother. thank you

[quasi ridge]

can you share us your users/passwords?

😉

[rustic carbon]

Hi guys

[supple rain]

Can anyone help me with AWS tips please?

[rustic carbon]

My parents are asking about the scope of cybersecurity. I have told them that I have a strong interest in this field. However, they are of the view that in this field one must study for life (like keep digging into stuff)
I have told them that even development or any strong technical field for that matter would require to keep upskilling.
What are your views on this?
And also, they are asking regarding the future of cybersecurity...
I would be grateful if u guys can leave some valuable suggestions as I intend to work in this area..
I am currently in my sophomore..

And also regarding job market they have expressed their concern..

[quasi ridge]

my guy depending on where you live in the world, the market might be very tight anyway for all fields

[rustic carbon]

Yeah ... I have told them that I want to work in the area where I like and dont regret later on..

But yeah..this field does seem endless...😅 and right guidance seems to be extremely crucial..

[latent oak]

basically, the models are saying that most math and computer jobs will be replaced by AI in the coming years... I don't know how much is true and how much is hype, but the job market is getting worse every year in the field.

Those who continue to work in the field will constantly be pushing and learning...

[quasi ridge]

I mean more like..in India, there are thousands of graduates every year in each city for this.....and you may live in Bodunk Idaho and be the only kid in your comp sci program....and you'll be competing with them because h1b

[maiden anvil]

and yet we still gotta pay taxes 💀

[quasi ridge]

🙁 cries in VAT

[latent oak]

My nephew is an electrician... I think that the trades will be one of the last areas to resist AI automation.

[quasi ridge]

imo trades will take off as the experienced folks retire or die and the handful of people left in the market will be okay or terrible quality

they're also hard enough that everyone seeking their fortune will fall out within first 5y

[latent oak]

I honestly don't know what young people will do... I don't actually know what I will do. I'm not old enough to retire, but not young enough to really start over.

At some point, I might be forced to reckon with the fact I have zero real-world skills that will put food on the table.

Wasted my life on this computer fad

[neat cipher]

Can you dig a hole and put seeds in it? Can you pour water on it? Can you wait a while til vegetables grow? Then you'll have some food... Maybe...

[latent oak]

can I afford the land? or do I get room and board from the landowner if I work their land?

[rustic carbon]

My parents initially did push me to take up electrical engineering. However, I had interest in IT hence I have taken that..
In my college from the onset of my sophomore, I got interest in this field of cybersec

[quasi ridge]

I feel this...only so long I can break myself in the physical side of arch..so either I pull trigger on something that puts me in driver seat for things or I figure out what an old man will be capable of

[latent oak]

We'll go back to fiefdoms and tenant farmers

[maiden anvil]

imo i think you dont give yourself enough credit, omni on htb isnt easy to do
but i do agree cybersec jobs are really hard to get into

[neat cipher]

Yanis Varoufakis has a book on exactly this

[quasi ridge]

certainly appears we are on the way backward to that

[latent oak]

@maiden anvil my best bet right now is to become dangerous with AI... to stretch this out until I can retire.

[worthy cargo]

Today is my birthday

[latent oak]

If I lose that race... then I guess I'll start collecting dung

[quasi ridge]

happy bday

[worthy cargo]

thanks

[quasi ridge]

https://www.youtube.com/watch?v=dbMXi9q78Tk
relevant lmao

[latent oak]

Network Chuck is great

[neat cipher]

Always nice seeing Network Chuck unhappy

[maiden anvil]

this video is a bit ridiculous for a different reason
because the guy is in japan and keeps reading about AI stuff

[quasi ridge]

Hi Chuck

[latent oak]

He's actually helped me a lot as I was getting started with AI

[maiden anvil]

homie if you dont stop to look around once in a while
the world might pass you by

[neat cipher]

Hey, those people are well on the way out of the fax machine era!

[quasi ridge]

imo its ridiculous because he makes his money off grifting youtube and classes

[maiden anvil]

how did you know about Japan's cybersecurity practices

[quasi ridge]

and AI removing the grift by removing the job availability is why he's scared

[maiden anvil]

i can respect the hustle, but i understand it's not for everyone

[neat cipher]

Fax machines have been around since the time of the Samurai. And Abraham Lincoln. I've been watching for a long time

[maiden anvil]

real talk last time I was in Japan about 2018 or so
they still had widespread WEP all over Tokyo

fucking WEP

[quasi ridge]

I respect the hustle in the sense he's not robbing people or sticking his hand for a free handout like some do....

but he's basically like the guys on late night tv hawking Oxyclean knockoffs

[zealous charm]

@maiden anvil sup big dawg

[maiden anvil]

im about to ejecto seato out of here and into a meeting, hbu?

[quasi ridge]

https://tenor.com/view/english-please-i-don't-speak-spanish-will-ferrell-ron-burgundy-anchorman-gif-4881432732934294849

[maiden anvil]

https://tenor.com/view/ejecto-seato-cuz-gif-11431839

[quasi ridge]

holy shit there is a real one?

what movie?

[maiden anvil]

2 Fast 2 Furious

[neat cipher]

Yeah, they have a different way of doing things over there. It's important to take time for a visit to the Onsen. Faxes also contribute to why a 16 hour work day is normal

[zealous charm]

I am excited for 8 fast 12 furious

[maiden anvil]

time to eject, bbiaf

[rustic carbon]

So guys...I know you all are way senior to me as I am just a college kid rn. But honestly, I seek some advice in the way you would probably give to your younger self.
I believe y'all too started and stayed resilient in this field because of your interest...so genuinely just wanted to know..because parents being worried creates self doubts..and mental pressure too..😅

[vestal tinsel]

Hey everyone.

Back from a break cuz I was studying for my CCNA ^_^

[quasi ridge]

😮 people still do that?

[quasi ridge]

my advice: skills, network, take school jobs in all departments you could remotely see yourself working in.

degrees are worthless, certs are too; bosses want people they can stand and who know what they're doing

[young glen]

CCNA is a good network certification. The knowledge involved can help a lot

[quasi ridge]

yea but years ago I tried and it was already considered saturated...same for A+,Sec+ the triad,etc.....

Now that everyone and their mom has a cert, I'm surprised people still do the older name ones

OSCP has been going out of style slowly, for example...

CEH already is

[rustic carbon]

So which certs should I be doing
Considering my college already has covered the computer networks course

[young glen]

I got an MCSA for windows server and it was one of the last ones

[rustic carbon]

Is CCNA really required?

[vestal tinsel]

Yis :3

[young glen]

CCNA is good for Cisco specific equipment

[quasi ridge]

CCNA, OSCP, CEH, and a handful of other things used to be your ticket to job....and then it got saturated, quality dropped, and employers started screening harder or asking for more certs

[earnest tusk]

Hi everyone, I'm new here, nice to meet you.

[vestal tinsel]

I got a good job with a helpdesk that allows me to dip into cyber and network stuff! So ive been away from HTB for some time while I been learning 😸

[rustic carbon]

I am believing that doing practical projects using fundamentals is going to be beneficial
But I feel I still need to do certs to SHOW to the people who dont know (like ehm..HRs?)
Oh..more certs? Sir on behalf of all students I really want to know what to do then?

I think something practical maybe internships will help..

[ornate ibex]

Hello

[rustic carbon]

I plan to apply for internships after some practical projects and conceptual hold in cybersec topics..

[visual umbra]

Hey

[visual umbra]

How are you

[ornate ibex]

I'm fine. Hw are you?

[rare monolith]

it’s all work experience imo and if you can’t get a internship or a job well then personal projects are the go to

[quasi ridge]

there are a number of issues I've raised and can raise here:

• Seeing employment as purely a "pick me" thing..... Most of the brand names you know are folks who didn't try to get picked...... back in the day it was like..Kevin Mitnick and that sort......These days I dunno who brand names are... All the folks who you know names of are people who went solo business or did it on the side...
• Networking.. who you know determines how many HR folks you dodge
• You're in a global competition............Expats like me and folks in other countries like India(which I mentioned) are competing with you and we're cheaper overall.
• Experience counts.....and the more exposure you have, the better it looks.
• Knowing the hows is only part of it, you need to know the whens...if you know when a thing works and doesn't you're way more useful than a person who fills a seat and knows how to do the thing when told.

[visual umbra]

Good What are you doing

What to do around there

[ornate ibex]

vacationing

[visual umbra]

Hahaha, good, enjoying it.

[quasi ridge]

local or abroad?

[ornate ibex]

local

[rare monolith]

🤤

[golden hull]

hey

whats up

[devout sail]

Again

[quasi ridge]

vacation, whats that? 😉

[devout sail]

He works every few vacations

[ornate ibex]

wdym?

[rare monolith]

has anyone ever made an AI wordlist maker as a tool ? 🤔 could be a fun project i could make imo

[devout sail]

would be cewl yeah

[visual umbra]

@ornate ibex

[ornate ibex]

?

[rare monolith]

might start creating the repo rn

[visual umbra]

Can I message you to ask you something?

[ornate ibex]

reg?

[visual umbra]

DM

[rare monolith]

im just wondering if i would be using an API for getting the wordlist or just use a local LLM

[lofty marsh]

fellas