general

[stable tiger]

nah theres a lot of shit botnets

[green kite]

On LinkedIn?

[stable tiger]

depends what u infect

[stable tiger]

nah just on my browser

im rawdogging extreme puzzles in like 10 mins

shits addicting

[green kite]

Im doing the daily games on LinkedIn haha

[severe falcon]

You gotta be smart buddies to be in bots.

[severe falcon]

Ooo, hiii spark

[green kite]

👋

[severe falcon]

Missed you a lot homles

How you been

[green kite]

Im alright. How’re you?

[stable tiger]

eh the ones ive reversed arent anything crazy

but maybe i find shit ones

[severe falcon]

I'm doing awesome. Good to hear, what you been up to lately?

[ornate ibex]

Sparkling!

[green kite]

Just work 🙂

[severe falcon]

Will take you some days to get the reference of what I meant

[green kite]

Hello 🙋‍♂️

[stable tiger]

yeah probably

lmfao

[severe falcon]

Yo my 2nd fav indian brother

[coral hornet]

hie

[severe falcon]

That freelance one?

[ornate ibex]

belated Eid Mubarak bhai

[green kite]

Yep, that’s what I’ve been doing for the past 9 years

[coral hornet]

i recently got done with cjca and wanted to publish a blog and had a question aorund it

[severe falcon]

Khair Mubarak Bhai, thank youm

[ocean marsh]

congrats on the cjca!

[severe falcon]

Consistency is 2nd name of homie Spark.

[green kite]

https://help.hackthebox.com/en/articles/5188925-streaming-writeups-walkthrough-guidelines
no spoilers of the exam or any info that’s not public

[coral hornet]

thanks 🛐

[green kite]

But congrats 🥂

[ocean marsh]

now, who's the first?

[coral hornet]

thanks

[coral hornet]

so the no. of alerts you ahve to solve isnt public they have used words like approx but no right no. and i am using 40 (Approximately ) in my blog which isnt the actual no. of alerts

sorta confused

[sturdy thistle]

Reach out to support to confirm

[neat wharf]

i still haven't got the answer for which ai is used to solve the boxes

[stable tiger]

ive got an answer

your brain

its not artificial tho

[devout sail]

Hmm any?

[neat wharf]

someone told me yesterday, there is dedicated ai to solve boxes on htb or thm

[devout sail]

For help tho not solve

[stable tiger]

just use claude if its for help

[devout sail]

Ask that guy then 💀

[stable tiger]

pretty sure automated solving is cheating

[devout sail]

I ask cgpt it helps in explanation
But if it seems any reverse shell
It stops

[stable tiger]

just rawdog it highkey

[neat wharf]

this guy

[devout sail]

Nah i dont think so
Many does it

[stable tiger]

avoid ai for most shit lmao

[stable tiger]

well you arent solving the boxes

its the same as googling a spoiler site

its htb, its for learnin g

[neat wharf]

for example, if i share the box ip on LLM. will it do enumeration and find exploits?

[stable tiger]

no

[cerulean bloom]

it might if u ask it to

I know people do that for challenges

[stable tiger]

needs to be routed in the vpn lmao

[rose onyx]

People have their own ways of having fun, if you want to solve using AI, it's a tool, learn to use it. Doesn't mean you shouldn't learn the fundamentals and go beyond.

[coral hornet]

aight reached out via chatbox

[gilded axle]

yo can i join your team i am a beginner i have completed the nmap , intro to networking , linux fundamentals , web requests module

[neat wharf]

quick question : how would you scan an ip using nmap without losing packets

[gilded axle]

without being detected?

-D RND:5

[gilded axle]

i didnt get the question

[neat wharf]

you have to minimize the packet loss

[severe falcon]

@cinder tundra

[gilded axle]

normal TCP scan . i guess

[neat wharf]

no

[gilded axle]

whats the answer

[neat wharf]

nmap -Pn -sT --max-retries 10 --max-rate 100 <IP>

[gilded axle]

how ?

[molten bobcat]

Sigh

[gilded axle]

i think nmap -Pn -sT --max-retries 0 --max-rate 50 <IP> will have less loss right?

[neat wharf]

comparatively yes

[molten bobcat]

Why are we worrying about loss with a tcp based protocol

[gilded axle]

idk

[neat wharf]

just testing his knowledge

[gilded axle]

how did i do

[neat wharf]

nvm, another question for you,
how does cloudflare prevent DDOS

[gilded axle]

idk tell me

[rancid snow]

cloudflare big everyone else small

[neat wharf]

gotta learn more

[gilded axle]

i have just started

[cinder tundra]

🫄

[gilded axle]

recommend some material or some modules from where i can learn

[neat wharf]

both htb and thm offer good resources for learning

i recommend try hack me resources

beginner friendly

[stable tiger]

thm is ass

[gilded axle]

some modules or paths ?

[worthy cargo]

I like ass

[neat wharf]

paths

[worthy cargo]

I don't like THM though

[gilded axle]

but you like ass

[worthy cargo]

Their community on discord, the mods are fucking insane

They mistreat people

[neat wharf]

i got banned there

[worthy cargo]

I never got banned or anything, but I don't like it when I go there

it makes me feel like I'm not a person anymore and I'm dehumanized to just a online name

fuck THM

[neat wharf]

welcome to real world

[rancid snow]

here at HTB we make sure to personally tailor your torture experience

[worthy cargo]

This is the real world. People dont' do that here

[gilded axle]

do you sometimes think that everyone else are npcs and you are the only real person

[cinder tundra]

I'm happy to share that I've been ranked top 5% in THM

[signal narwhal]

hola alguien me ayuda estoy perdidisimo en htb me acabo de crear una ceunta

[stable tiger]

lmao rip

[neat wharf]

damn, you must be getting lot of bitches

[cinder tundra]

@severe falcon how are you bby girl?

[severe falcon]

This one never serious

[worthy cargo]

I got a vape pen!

[gilded axle]

hey i am new in this server is this server chill?

[severe falcon]

I'm good bbgay, how have your room been?

[neat wharf]

we believe in bullying

[signal narwhal]

Hi, can someone help me? I'm completely lost on HTB. I just created an account.

[severe falcon]

Yo, have you seen indian Labubu?

[cinder tundra]

lol wtf is that

[gilded axle]

will i get banned for saying it hard r

[gilded axle]

no , get out

[severe falcon]

Let me share.

[worthy cargo]

What do you need help with?

[neat wharf]

nope

[gilded axle]

lets go

[severe falcon]

https://www.instagram.com/reel/DV-VmSLkWP9/

suvamvlogs7

I Love Junk Food 🍔🍕😋
.
.
.
.
.
.
.
#viralreels #trendingreels #funny #comedy #explorepage

Instagram

[gilded axle]

i am going to say it now

[molten bobcat]

Grow the fuck up

All of you

[signal narwhal]

I mean, I want to make my first room or something like that

[molten bobcat]

This isn't the place for stupid shit

[gilded axle]

i am gonna say it

[molten bobcat]

Go right ahead

[gilded axle]

are you a mod

[cinder tundra]

I'm 47 already?

[molten bobcat]

FAFO

[worthy cargo]

This isn't TryHackMe. We don't have rooms. You can learn to create machines for people to hack.

[cinder tundra]

what does this mean? sry too old for these genz terms

[worthy cargo]

Fuck Around Find Out

[neat wharf]

we all are children here, i am 25 btw

[worthy cargo]

People are abbreviating everything now

[cinder tundra]

oh nice, my son is 25 too

[worthy cargo]

It's annoying

[jagged storm]

frfr

[neat wharf]

ikykyk

[gilded axle]

for how many years are you into hacking

[neat wharf]

almost 10 months

[worthy cargo]

I have to do so many dishes today in the kitchen. ZOMG

I'm not looking forward to it

[cinder tundra]

wtf is ZOMG?

[signal narwhal]

Ah, okay, thanks

[neat wharf]

Zzzz omg

[jagged storm]

https://tenor.com/view/star-wars-meme-its-an-older-meme-but-it-checks-out-gif-14147822

[gilded axle]

do you have a Receding hairline

[cinder tundra]

Im bald, why?

[neat wharf]

what type of skibidi shit is that

[scenic maple]

2000 was 26 years ago

[neat wharf]

no

[cinder tundra]

good old times

[scenic maple]

bro couldnt handle the truth

[jagged storm]

Cloud, this guy gonna get the boot?

[neat wharf]

its strange how people are still being born after 2000

[jagged storm]

Oh golam, just in time

[neat wharf]

they missed all the OG cartoons, games and times

[gilded axle]

we will live in a time where we will have colonies on mars

[neat wharf]

if you believe in melon husk, sure

[worthy cargo]

melon husk
elon musk
what's the difference?

[molten bobcat]

I should just relax on my computer and try not to think

[neat wharf]

elon was human, melon is ai

[gilded axle]

which country are you from

[neat wharf]

NZ

[scenic maple]

@gilded axle you should stop trolling and change the name please

[gilded axle]

whats wrong with my name

[scenic maple]

like being an anarchist is a crazy thing to do right

[silver forge]

, said the gollum

[scenic maple]

[molten bobcat]

They also set their pronouns to antisemitic jokes

[neat wharf]

if your name is not supporting any political ideology, then whats the point

[gilded axle]

i indentify as a goy , what is your problem

[jagged storm]

I support rats

[molten bobcat]

Shut the fuck up

[worthy cargo]

What is a goy?

Did he mean gay?

[gilded axle]

?def = goy

[molten bobcat]

He knows exactly what it means

[scenic maple]

ok so its better if we keep this religion stuff out i dont know what will offend people i dunno what it means either

[molten bobcat]

He's being a moron online to offend people on purpose

[scenic maple]

i told you once mr governor

[worthy cargo]

Well obviously

look at his profile pic

it's charlie kirk

[neat wharf]

what they gonna do about it

[molten bobcat]

Remove them from the server and move on with our lives lol

[scenic maple]

well if he continues to troll and offend people we will be forced to do something

[gilded axle]

goy/gentile is anyone who is not jewish its simple as that

[molten bobcat]

We know

But those aren't pronouns

[gilded axle]

what have i done?

[molten bobcat]

And you know exactly what you're doing

[scenic maple]

its not just that i saw your previous 1/2 messages

[worthy cargo]

So goy is a term for non jewish people? Is it a slur?

Do people use this pejoratively?

[gilded axle]

no

[molten bobcat]

He's an antisemitic loser who thinks it's funny to make edgy jokes about people who died or ongoing conflicts

I've seen your kind a thousand times over

It's boring at this point

[gilded axle]

i never said that

[neat wharf]

unpopular opinion, but cloud security seems fun

[molten bobcat]

I said that

I'm saying it now

[scenic maple]

ay lets calm down

[gilded axle]

or has done anything like that

[scenic maple]

keep it chill

[molten bobcat]

I'm chill

[silver forge]

https://tenor.com/view/simpsons-desk-flames-riot-down-with-homework-gif-12778212689976656977

[gilded axle]

i am chill

[worthy cargo]

I am warm

[molten bobcat]

I'm just stating facts

[scenic maple]

all good just no politics or religion in general

[molten bobcat]

He'll trip up eventually and get banned

[gilded axle]

i have no hate against anyone

[molten bobcat]

K

[jagged storm]

It's clearly just a troll account

[gilded axle]

i will not do anything to hurt anyone just as my lord jesus crist and budda

[silver forge]

how about just a tiny riot on #general

[molten bobcat]

Low effort

[worthy cargo]

I don't wanna go do the dishes

but dishes got piled up after last night and I gotta do em'

[neat wharf]

anyone tried doing cloud posture assessment

[worthy cargo]

the dishwasher is broke right now

yeah the water doesnt' d rain

I haven't run the dish washer cuz im afraid it might overflow and flood the kitchen

[gilded axle]

i mean according to @molten bobcat thats a misoginistic joke for what ever reason

[worthy cargo]

huh?

[molten bobcat]

It's whatever, they'll be gone eventually

[neat wharf]

[gilded axle]

come to voice chat @molten bobcat @neat wharf @worthy cargo

[worthy cargo]

https://www.youtube.com/watch?v=TmBI7i3HZRU

No thanks

I'm listening to some kickass music

[neat wharf]

i dont know english

[molten bobcat]

I have zero desire to talk to this guy lol

[worthy cargo]

Alright I'm gonna try and see if I can go do the dishes and clean up the kitchen a bit

Sigh

[random aurora]

I want ai for hackthebox

[molten bobcat]

https://tenor.com/view/hedonismbot-apologize-apologize-for-nothing-futurama-hedonism-gif-17808398

[latent oak]

What is up?

[gilded axle]

wassup my

[random aurora]

where is the ai of the hackthebox

[raven rain]

you can talk to HIVEMIND in the support bubble

[molten bobcat]

Oh no

You're misunderstanding

[random aurora]

how to get to hivemind ?

[molten bobcat]

He wants a chat bot that solves the boxes for him 🙂

[random aurora]

no I dont want like that

I want the chatbot hivemind how to get it ?

[dusky smelt]

hello

[molten bobcat]

Stay in school

[dusky smelt]

wassup

[ocean marsh]

hey

[dusky smelt]

how yall doing

[ocean marsh]

doing good wbu

[dusky smelt]

same hehe

just broke in some kind of malware I'm proud of myself asf xD

[ocean marsh]

niceee

I'm studying some malware development

[dusky smelt]

oh nice that sounds cool

[ocean marsh]

its super interesting

[gilded axle]

to wassup guyz

[dusky smelt]

are you into malwares like can you detect malwares for example in .jar etc..

[ocean marsh]

I just got into malware, like four days ago

and I'm more of a pentester, idk how to detect the malware

[dusky smelt]

nice just keep it up, wish you good luck

[ocean marsh]

thanks man, same to you

[dusky smelt]

thanks man hehe, I started with CJCA and right now I'm so tired cause of networking and I damn well know I have to learn that

[raven rain]

dont tell this to anyone but the secret to detecting malware is by running it in a vm. they dont like being in vms

[ocean marsh]

I think I have around 55% of CJCA done because of other paths

is it cool?

[zealous charm]

VMs are annoying to set up, I just run it on my main host

[raven rain]

but how will you ever know

[zealous charm]

it's ok, since I am a mac I cant get viruses

[dusky smelt]

oh yeah I did that and found interesting things but I was playing cat and mouse with it for 7 hours straight it's crazy xD

[raven rain]

oh ok

[dusky smelt]

yee bro I like it it's very useful but u know it better than me cause I am way below 55%

as for now it's great

and there's plenty of useful material

[raven rain]

it def feels like cat and mouse sometimes

[ocean marsh]

nice man, its important to have fun while learning, if some network concepts are boring you, try another module from the path for some days

that helped me complete some paths

some parts are boring but they're not less important

[terse dirge]

https://klipy.com/gifs/orange-kitten-orange-cat

[gilded axle]

i have completed the nmap , intro to networking , linux fundamentals , web requests module can anyone recommend me some other modules and what to do next

[terse dirge]

do a box

[ocean marsh]

starting point

[gilded axle]

done

[gilded axle]

what is a box

[terse dirge]

https://app.hackthebox.com/machines?tab=active

[dusky smelt]

real, I've used bytecode-viewer for the first time, I'm relatively new to malware analysis, but I've been using Bytecode Viewer and an AI assistant to help me with it, and it was crazy it had Control Flow Flattening, Dynamic String Construction, Data Exfiltration, Charset Masking and Anti-Instrumentation he even masqueraded few files to make sure it's looking legit and them strings were for that when I load a mode on Minecraft his code will just go in my ram and there he would start by extracting microsoft credentials, discord api (or token I wasn't sure) and few things here and there. But at the end I broke it all down, only bad thing is that he keeps deleting my YT comments

[latent oak]

Do overthewire

[dusky smelt]

yeah man that's right, I am just forcing myself to do it cause I don't like networking just cause it's hard for me but I am forcing myself to learn it ASAP, thanks for advices :DDD

[ocean marsh]

fundmetnals🔥

[graceful pendant]

Nested birdualization

[ocean marsh]

noo where's ichi

[dusky smelt]

if you're still unsure and uncomfortable with your knowledge do starting point then start with retired machines which have writeups available so when you feel stuck just take a look at the writeup, remember where you got stuck, learn that part and continue with active machines

[gilded axle]

thanks my iga

[ocean marsh]

dude you're playing with fire

stop or someone will ban you

[dusky smelt]

yeah that's good advice right there

HAHAHAHA

[austere sigil]

stop.

[terse dirge]

specifically in go too 🔥

[dusky smelt]

seems easy let's try it

[ocean marsh]

try doing this with javascript

[dusky smelt]

...

[terse dirge]

you would write your own structures

https://github.com/Ceald1/Go-Go-Gadget-Katz/tree/main/modules/kerb

you would just copy them over really

(I copied them from someone who already did it)

[ocean marsh]

you gather snippets until that can be called a tool

and you say its yours

its really that easy

[terse dirge]

https://github.com/ziggoon/gkirby.git is the original and I have it cited

[ocean marsh]

that's a whole kindergarten

[latent oak]

We stand on the shoulders of giants

[ocean marsh]

yeah I guess so

if you say so

[iron galleon]

the united states should build a layer over the sky and grow the crops on top of that layer and let the underneath of that layer be the habitable zone so it's always night time

[ocean marsh]

minecraft ahhh

[latent oak]

I want to play video games suddenly… what was that “pokemon with guns” game?

[ocean marsh]

palworld

[latent oak]

Ah right

[ocean marsh]

we might be related

this is too much connection

[austere sigil]

it's still time, there's still hope

[ocean marsh]

too much chemistry

[latent oak]

Singleton brain

[ocean marsh]

we share the same braincell

[austere sigil]

you know the guy runs around trailer park with a glass in his hand, right?

[latent oak]

Julien

[ocean marsh]

what

[rapid badger]

Its like the old greek mathematicians that lived all over the med coast exchanging letters with ideas and proofs.
But we have github 🙂

[austere sigil]

trailer park boys

[latent oak]

https://tenor.com/view/netgear57-netgear-netgear-57-57-ccf-gif-9221434538596417978

[ocean marsh]

https://klipy.com/gifs/jgmm-cat-meme

i dont get it

[austere sigil]

it's a show

[dusky smelt]

just bought Rust

seems interesting

[ocean marsh]

bought?

oh shit

[austere sigil]

https://tenor.com/view/decent-bubbles-trailer-park-boys-gif-8992096

[ocean marsh]

LMFAO

[dusky smelt]

game rust

xD

[ocean marsh]

I'm so fried man

omfdg

[latent oak]

Used car?

[ocean marsh]

I need to take a break

wtf

[dusky smelt]

ahhahahahhahaha

its ok bro

[latent oak]

Bubbles has been charged with assault

[ocean marsh]

I was reading rust code the whole day

[austere sigil]

like for real? oO

[ocean marsh]

i thought you got scammed

[zealous charm]

iron oxide

[dusky smelt]

hahahahhahahahah

[ocean marsh]

drunk driving

[latent oak]

Yeah

[iron galleon]

i was broke now a young fella flexed up

[austere sigil]

that's bad

[ocean marsh]

everyone talks about drunk driving, no one talks about drunk flying

[dusky smelt]

well if anyone plays Rust give me a little advice I would appreciate it

[ocean marsh]

you're the only guy who ever brought up nettspend in htb btw

[iron galleon]

LMAO

[ocean marsh]

[static burrow]

still confused on how to combine academy and labs

[ocean marsh]

learn in academy, apply in labs

[static burrow]

is it possible without upgrading

most related labs are retired

[ocean marsh]

Idk how are the current labs

[dusky smelt]

it is but it's hard and you'll learn more with upgrading in the academy to be honest

[iron galleon]

i got lean & some 40 in my red cup

[dusky smelt]

speaking from personal experience

[static burrow]

im already upgraded in academy

[ocean marsh]

i read the same thing as you

are we the same person atp?

[dusky smelt]

do you have any specific path you're focusing?

[rapid badger]

If you get through enough modules you should be able to do easy boxes.

[zealous charm]

red 40, my favorite flavor

[iron galleon]

in a foreign switching lanes you can catch up

me and kk why we always geeking

[static burrow]

web exploitation rn

but ive been looking into labs and just found it overwhelming

[ocean marsh]

try portswigger

its free

and good to apply web concepts

their code review pens are delicious

[rapid badger]

Even "easy" labs are not really easy for a true beginner. HTB is tough.

[static burrow]

mhm

[dusky smelt]

yeah try portswigger as @ocean marsh said and try CJCA path cause it's easy if you're a beginner it's explained very well for beginners

[ocean marsh]

Hackthebox difficulty rating is based on how many steps to pwn the machine

[dusky smelt]

if portswigger is still hard for you try maybe CJCA

[zealous charm]

or do bug bounty for learning web, it's also free

[static burrow]

yeah ill probably look into portswigger

[dusky smelt]

there was silver annual role before in this server right?

or am I going crazy

[ocean marsh]

what I really love about web is not when I'm not studying web

[crimson elbow]

tbh that's one underrated thing that the majority underappreciates

it gives you intelligence about the surface you're hunting in

it's a gold if you leverage it correctly

[ocean marsh]

aura

aura master

i cant

https://klipy.com/gifs/devious-evil-cat

shhh

[crimson elbow]

it's not rocket science

[ocean marsh]

i am a man that can only do ad

jk

i should try that

[zealous charm]

the hardest part of getting a CVE is setting up the app

[silver forge]

https://www.youtube.com/watch?v=oG1LrPN9moQ

[ocean marsh]

setting up the apps was the hardest part on CWEE path

[gilded axle]

https://youtu.be/4GPFduVKuEg?si=VFx2_dseoKn6VjVg.

yo you guyzs interested in metal music

[zealous charm]

nope

[maiden anvil]

alright yolo click I'll check it out

we're off to a good start

[zealous charm]

what's crackin'

[maiden anvil]

no fishing today my paddle broke yesterday

so Im chillin and labbing

wbu @zealous charm

[zealous charm]

doing some batch testing of an RCE poc to see if I can increase reliability, then playing DnD this afternoon

[ocean marsh]

@meager kernel

[meager kernel]

@ocean marsh sucks

Everyone ban @ocean marsh

[ocean marsh]

https://tenor.com/view/it's-over-over-it's-gif-3551756699416095564

[maiden anvil]

reminds me a bit of Ouroboros

[austere sigil]

[maiden anvil]

sounds cool af

[ocean marsh]

mto mute this skid please

😭 🙏

[maiden anvil]

im trynna figure out what to do with my cve microservice now

maybe I'll build another one on top of mitre attack and bridge a bunch of intel relationships idk

[zealous charm]

Went from 5 to 40% reliable today

[maiden anvil]

this is great KPI

[zealous charm]

this is that same browser bug i've been working on for like 10 days

[crimson elbow]

on chromium?

[zealous charm]

Yeah

[crimson elbow]

CVE out yet - or still being triaged?

[zealous charm]

This one is triaged, which is why I am still trying to improve the poc

[maiden anvil]

any workaround for payload size yet? 👀

[crimson elbow]

neat

[zealous charm]

That's what I was working on today, different sizes etc

I fit the command id>~/z in, that's good enough, just want a better hit rate

[maiden anvil]

you got a write primitive right? any large memory regions you can JOP to?

[silver forge]

my payload is the largest

[crimson elbow]

is it a buffer overflow, UAF, or entirely web related?

[zealous charm]

Yeah read/write

[waxen prairie]

anyone of yall use wave terminal or is it just bloat?

[zealous charm]

This one is buffer overflow, but I've also got a UAF without miracleptr protections

[ocean marsh]

is it that AI powered terminal?

[crimson elbow]

have you found a way to leak a pointer to bypass KASLR?

[devout sail]

Game of thrones?

[zealous charm]

with the read/write I can read first to get pointers, that's what I've been working on for increased reliability

[latent oak]

I use warp

[devout sail]

How do y'all even find the target lmao, i try to do shit and give up on step 1 - finding the target

[crimson elbow]

you have to be persistent

[waxen prairie]

yup, basically htb suggests us to use it, its mentioned in the setting up module in the htb academy.

[crimson elbow]

i think like an applicable target for vulnerability hunting

[ocean marsh]

never saw anyone using it, I would stick to alacritty or kitty

[devout sail]

What to fw
I tried h1 and got overwhelmed with rules
So i thought, eh I'll just browse GitHub and pick something interesting
And yet have to pick anything to fw

Hmm, that's kinda nice

[maiden anvil]

you should consider a cve microservice

[zealous charm]

github or openbugbounty for easy mode, BC/H1/SRT for mid tier, apple/google/msft for big boi tier

[devout sail]

Wdym by CVE microservices xD

[waxen prairie]

random question do some of yall use the inbuilt notes feature in the htb academy??

[crimson elbow]

a zero-click iOS chain can be worth more than thousands of XSS, to put it in perspective

[ocean marsh]

nope, never used that

[devout sail]

No, what if they read it and laugh at me
-# I don't do academy

[ocean marsh]

I dont think its a good way to store your notes

[crimson elbow]

(that bypasses BlastDoor, PAC, lockdown mode, aslr, MIE, etc)

[ocean marsh]

having to go through modules and all that

[devout sail]

Yes, i think I got that "pattern recognition" I just need to start doing it now

[zealous charm]

for sure, but there is maybe 2-5 0click mobile bugs reported total per year, whereas a single person can easily find 200 XSS per year

[crimson elbow]

the scarcity is unfathomable practically if you put both in comparison of course

entire different leagues

[devout sail]

Sure, I'll check it out
Can dm someday if I need any help?

[crimson elbow]

one takes a bit months, the other takes years

[ocean marsh]

yumi

[devout sail]

yum?

How much do you involve a clanker in your work

🤖

[ocean marsh]

🐿️

[zealous charm]

CTBB podcast just put out a good episode on BBH with AI

as we all know, BBH is usually a strong indicator for where the industry is headed

[gray terrace]

Eh? I was saying there are llms out there dedicated to that subject, as well as mcps

[maiden anvil]

tl;dr I converted https://github.com/github/advisory-database to sqlite then built a golang rest service on top of it. this runbook lets me query my cve microservice and I can build deep meaningful queries for n-day targets

if I want to drill into specific CWE's I can do that too

then setup those apps for n-days and more exploits

[gray terrace]

https://tenor.com/view/neat-gif-meme-neat-gif-gif-19560608

I mean that non sarcastically

[zealous charm]

back down to 20% RIP control now

[maiden anvil]

making big moves

[zealous charm]

12 days of CVE-mas gonna be lit this year

[crimson elbow]

btw does the exploit you're working on bypass browser sandboxing?

[devout sail]

So GitHub just lets u do that?
Didn't know that

[zealous charm]

No, google will pay $55k-85k for no SBX RCE. RCE with SBX is like $250k

[maiden anvil]

not natively thats why you should build microservices

[gray terrace]

GitHub no

[carmine fulcrum]

hey

[maiden anvil]

making your own tools is the way to go

[carmine fulcrum]

fix point system

thanks

[devout sail]

Ah fair enough, ig I know what to do now

[worthy cargo]

Vibe coding is the way to go!

[gray terrace]

You can clone the repo though and do what you do

[crimson elbow]

you gotta be a fricking genius to do that its genuinely hard for a solo researcher (sandbox escape mostly)

[rapid badger]

I hope that was a go pun

[gray terrace]

It most def is

[latent oak]

I’m making many tools atm

[worthy cargo]

VIBE CODING is the FUTURE!

[gray terrace]

I’ve been deep into tool making for a bit now I’ll be releasing some of them soon publicly

[maiden anvil]

the microservice is in fact written in go

[devout sail]

What tools?

[gray terrace]

Got some heat built up you all will enjoy

[latent oak]

My SIEM is kickass

[devout sail]

[gray terrace]

Go is my favorite language tbh

[zealous charm]

Yeah I think in 2025 only 1 sandbox escape (SBX) was reported, they are pretty rare. But even if you RCE just in the sandboxed renderer process they pay $55k

[latent oak]

I am working on a scanning suite, I built a client for trustify

[gray terrace]

It’s fast, cross compiled binaries. It’s easy to understand and logical and has tons of cool stuff

[upbeat tangle]

whats up general

[maiden anvil]

I've been enjoying it for this project, it's been very stable for network requests

[devout sail]

Me

[latent oak]

I built a span and malware scanner for quay.io

[gray terrace]

It’s so good for network requests

It kicks the shit out of rust

Also for async

[maiden anvil]

this sounds really cool and interesting

[devout sail]

I did some go, i don't really find anything good or bad in language
But barely do anything to know much

[rapid badger]

Go is the most mid lang in the best way.

[crimson elbow]

that was in august last year yeah, a race condition in the ipcz mechanism

though it wasnt memory corruption, surprisingly

[latent oak]

It also has a little namespace squatting module that I never got back to

[zealous charm]

the handle confusion one, right?

[crimson elbow]

yeah

[zealous charm]

Yeah, neat report

[crimson elbow]

cve 2025 4609, read that report completely, insane for a single person to achieve

[zealous charm]

That dude wasnt even their #1 2025 researcher haha

[crimson elbow]

wait really? lmao

[zealous charm]

https://bughunters.google.com/blog/google-vrps-in-review-2025

[crimson elbow]

i see

[latent oak]

I found some namespace squatters, cryptominers, and a bunch of empty repos with just html files pointing to url shorteners for SEO poisoning

[zealous charm]

Somewhere in there they have their list of top 10 chrome researchers. Micky (who reported the SBX) isn’t #1

someone made like $800k

[crimson elbow]

that was in 2022 if i recall correctly

[supple plume]

Hi mr brewer I have a question for you

[crimson elbow]

think the sandbox escape was this year had the second most highest payment in google's VRP program

[supple plume]

I recently stumbled into windsurf daily limits, and it sucks but I am too used to visual studio code for coding dev projects, I mostly use claude on it. Is there something similar that you know?

It should be vs code like

Anyone is welcome to answer my question too

[iron galleon]

there's cursor.ai, but i have only ever used claude code

it produced a lot of bugs considering it was a niche project, but i would never recommend to use it the way i used it

it was my first time

[supple plume]

Yeah vibe code clásico

[iron galleon]

it's probably best for reviewing code if anything

[supple plume]

I didn't try cursor but I want to know what other alternatives are out there specially opinions about it

I did google them but I want users opinions

[rancid snow]

been trying out gemini-cli and wowsy is it way dumber than claude

[supple plume]

Gemini is trash

[iron galleon]

with claude you can pay a fixed amount of money, not sure how fast cursor prices run up or if you can put caps on the amount you pay to use it

[supple plume]

And I don't want a cli for dev projects

[iron galleon]

i don't think any ai is good for writing code rn anyways

[supple plume]

It doesnt matter I am good at writing code, the AI helps me do it faster

[rancid snow]

id have gemini make plans or implement something in its own folder and then claude will be like 'this is trash and garbage heres why:' like low key claude will sound mad

[supple plume]

And the best one I tried for that is claude

But through windsurf for the GUI

[iron galleon]

code code has a vscode extension

it's not just cli

[supple plume]

Claude code?

[iron galleon]

if that helps

yeah

[supple plume]

Oh

[iron galleon]

omg i said code code

lmao

[supple plume]

I should try that but I had another problem with that

I used claude as a provider with the api token and it charged me 6$ for a small prompt obviously something went wrong

[iron galleon]

dont use the api

do subscription-based

[supple plume]

Or maybe I'm crazy and just claude is expensive

[supple plume]

Yeah I want that

[iron galleon]

jjust warning u tho its gonna run out fast with pro

i personally use max

and i dont even use it for coding

i just use claude cowork

for planning n shit

[supple plume]

Hmm

I have to do some research ig

[iron galleon]

if it's something ur relying on to do a collossal amount of work then it's worth it

we humans gotta recognize our limitations

unless u on stimulants or sm then go crazy

[supple plume]

https://cdn.discordapp.com/attachments/1471588315873542194/1485355845117280382/Screenshot_20260322_201322.png?ex=69c190ee&is=69c03f6e&hm=158488757969fa0a8110d2090a27caefcdd9f5a608565d89e1b0acac23663582&

[iron galleon]

ur gonna probably want to try max $100/mo plan first

it goes up to $200/mo

[supple plume]

And I don't vibe code

[iron galleon]

not affordable for parts of the world

obv

i am fortunate enough to be able to afford it

[supple plume]

100 is a lot

[iron galleon]

it is a lot

[supple plume]

I was using 15$ a month with windaurf

[iron galleon]

try the pro plan first then

it's $20/mo

[supple plume]

Yeah I'll try with the vsc extension

[iron galleon]

lmk if u run into problems with using the sub

[supple plume]

Ok

Thanks

[iron galleon]

np

@supple plume try to be conservative with it tho

the pro plan is ass

icl

[supple plume]

It runs out fast?

[iron galleon]

yeah

it's prompted-based iirc

people say 2-5 prompts or some shit

which is crazy

[supple plume]

For the 20$

[upbeat tangle]

Sometimes thats all you need!

[supple plume]

That is not all I need

[iron galleon]

some other people report 2 hours usage

[supple plume]

That is trash

[iron galleon]

i think it's token-based idk

yeah

but it resets after 5 hours

[worthy cargo]

Tolkien based?

[upbeat tangle]

I have a suggestion how to get unlimited

[worthy cargo]

😄

[iron galleon]

it'd be interesting if u could use agents for coding n shi i havent tried it

i wonder how fast thatd run out

[supple plume]

If you have unlimited money

[worthy cargo]

if i had unlimited money I'd be so happy

[iron galleon]

id spend every last dime

[upbeat tangle]

If i had unlimited money i would cause inflation to the moon with my spending

[iron galleon]

it's actually hard to productively spend money that's the funny thing

[upbeat tangle]

"ah shit, the breaklights out on my lambo, better buy a new lambo"

i would buy a new lambo instead of changing the light

[iron galleon]

i'd want to keep a low profile

the game becomes a matter of many things, like endurance

[upbeat tangle]

Low profile like a ghost

meanwhile... id walk like an elephant

more my style

[iron galleon]

then u get people who have bad intentions around u n shi

gotta start metaphorically playing chess all the time

[turbid goblet]

why talk to ppl if u can just talk to ai

[iron galleon]

i used to do that actually

i used to have personal conversations with ai

[upbeat tangle]

Seems abit wierd

[iron galleon]

yes

[upbeat tangle]

AI will never tell you what you need to hear

only what they think you want to hear

[iron galleon]

well i specifically told it to not bullshit me basically

[upbeat tangle]

its still going too xD

[iron galleon]

it actually listened

and surprisingly it started executing prompts that otherwise wouldn't be allowed

the ai began trusting me bro

lmao

[upbeat tangle]

lol

AI is a tool man!, its like having a conversation with your penis

[iron galleon]

i mean i do that sometimes

"not right now"

"i'm busy"

[upbeat tangle]

50% of the population can relate

[turbid goblet]

i want this

[iron galleon]

i just bought a cuban ring and dipped it in a fountain chain so heavy it feel like i'm holding up a mountain

[sharp shuttle]

are we discussing my bunda

[turbid goblet]

who is bunda

[sharp shuttle]

bunda is butt

[iron galleon]

i'm drowning

everywhere that i go its a light show im surrounded

we went from chilling in the projects to making projects

[turbid goblet]

2014 rap got u that pulled?

[worthy cargo]

bunda means man

[iron galleon]

chain so heavy feel like im holding up a mountain

[worthy cargo]

gunda bunda means bad man

[sharp shuttle]

sory eggzy the ghetto dictates speech in our country

[supple plume]

Hmmm

[cerulean knoll]

Wassup HTB fam 👋

[sharp shuttle]

building a drone

how about yourself?

[cerulean knoll]

I'm just lazying around 😅

Damn it's been awhile I spoke in the server

[cerulean knoll]

Yooo that's cool

[jagged storm]

https://tenor.com/view/hello-chat-cat-couch-crawling-crawl-gif-27214040

[rare monolith]

costum PCB or pre ordered parts ?

[zealous charm]

Hola

[gray terrace]

https://tenor.com/view/noragami-yo-gif-20517736

[limber quest]

https://tenor.com/view/pepe-the-king-prawn-drive-gif-22611409

hi all,

hope all is well.

i miss htb 😅

i been busy chasing work specific certs/knowledge so had to take a backseat with htb...

however, linkedin is rife with THM gossip😅

i guess htb will get more followers/participantes.

good luck too all.
stay safe and drink water 😙

[turbid goblet]

i think the people that dislike thms moves are already on htb lmao

[jagged storm]

We're due to accept another mod exodus

[gray terrace]

Just more hate train for thm they make it very easy to do so. Their AI shit alone smoked them some months ago and booger content creators in the community like Tyler talked about it on LI and YT and ya led their content from their platform while disowning them after their ceo showed he didn’t give a shit and was a liar

Since then their ceo has double and tripled down with the lies and bs and nobody likes the dude

The platform already was rife with cheaters and skiddies who thought they were hacking gods through flam spamming and a discord community full of abusive as shit mods

This has led to their gradual downfall over the past couple of years and the same topics are heating back up but now with more traction

[jagged storm]

https://tenor.com/view/explaining-lore-christopher-nolan-goat-movie-gif-3463157536357197370

[broken flame]

there's nothing i give a shit about less than discord drama

[gray terrace]

K

[rancid snow]

I love discord drama, spill me the juicy tea

[turbid goblet]

thm user spotted

[limber quest]

@gray terrace
i never got on with THM personally.
here since the days you had to "hack" to login and register.

its good to have a community/place that isnt about ripping ppl off and has great integrity make "ethics" more valuable than buzz wordy.

[gray terrace]

I like the fact here that mods unless you really press them are chill

As far as discord communities go

[rancid snow]

the mods here are almost too chill

[gray terrace]

I’ve talked a lot of shit on here within reason and never been abused because of it

[rancid snow]

theres things they could be less chill about lul

[gray terrace]

Unless you get on their bad side lol

Thats what I like about them they are just peeps being peeps who happen to also be able to ban you

[limber quest]

https://tenor.com/view/spider-man-uncle-ben-with-great-power-comes-great-responsibility-its-true-just-saying-gif-24193883

[gray terrace]

But they join in on the shit talk and talk shit sometimes too and troll around

[rancid snow]

brother ive seen dedicated hate campaigns directed towards mods and the people behind them barely get a warning lol

[gray terrace]

I can respect it

[gray terrace]

They are pretty hard up on not being in feels and enforcing rules as impartially as they can for the most part

And yea I’ve definitely seen the same

People will come in and just try and bait the mods out the gate then paint them as terrible people when they get told to shh and chill

I believe @iron galleon as an example just last night was like “I’m recording all of this” “I’m gonna contact Corperate” on Marcie lol.

There he is he will tell you all about it lol

I was cracking up

[iron galleon]

right we need authoritarianism and political correctness

it just has to exist

[turbid goblet]

computertrash is giga schizoposter

[gray terrace]

https://tenor.com/view/stewie-griffin-squint-eyes-suspicious-doubt-gif-9773820164031851317

[turbid goblet]

its based and harmless

honestly i thought bro was a bot for a while

[gray terrace]

It’s all harmless for the most part it’s the internet

On the internet nobody knows I’m a horse

[iron galleon]

the urge to moderate

god i just have to discipline my fellow hackers

get em str8

so goofy

[gray terrace]

Do it

[rancid snow]

unfortunately a discord community is not a formal government that takes taxes from citizens or holds a standing army

[gray terrace]

Feels good man

[rancid snow]

but that can change if im elected

[gray terrace]

Depends, do I get to be in charge of weapons?

[rancid snow]

how much you bribing me for it

[iron galleon]

it's like school teachers speaking at defcon bro

[gray terrace]

I bring weapons for the army best I can do.

[gray terrace]

And some chicken nuggets I suppose

[limber quest]

create a holding channel <cell> for rule breakers, make them listen to huun huur tu.

[iron galleon]

No talking

is that a dogwhistle?

[gray terrace]

Yes. It’s code for the oppression of my people

[iron galleon]

That's a ban

[worthy cargo]

It's the matrix. everyrhing is code!

[gray terrace]

You’re a ban

[iron galleon]

No trolling

Is that rage bait?

Anything I dislike is rage bait

And rage baiters will be shown the door !

[turbid goblet]

wheres the door

[gray terrace]

Man clearly feels a certain way about certain things

That’s fair

[supple plume]

Thanks for the insight

En español

[iron galleon]

it reminds me of my high school computer science teacher who knew nothing about computer science and ruled her classroom with an iron fist, made everything about politics, constantly spoke of ethics, rules

i pretended to like her

all i needed was that letter of recommendation for college

lmfao

and i didn't even go

meanwhile associates/friends who had motion had no preoccupation with those things

[gray terrace]

Do you think Marcie doesn’t know how to hack?

I have to say you would be wrong in that department.

[iron galleon]

let's not talk about that person

i am speaking of a sentiment not a particular person

[gray terrace]

Well I get the sentiment and why that would be frustrating. Also no, not all the mods are going to be super hackers but most of them are fairly versed in a thing or two.

[gilded axle]

I need help for solving a machine (kobold)

i am a beginner and took kobold as my first machine to solve but, somehow i tried everything i know and nothing is working i tried ffuf , gobuster different domain names even subdomain but nothing is working any help will be apriciated

[gray terrace]

Then go to #1484998637653332200

I’m sure they will help

Well someone might

[iron galleon]

i was so eager to learn more about CS in high school bro

[gray terrace]

But that’s the proper chan for that one

[iron galleon]

and i had to show up to that everyday

[gray terrace]

I dropped out of high school, though I did have to deal with that in college

[iron galleon]

college is such a joke, obviously not speaking about what the degree does for you

but the process is just ridiculous

tour of professors with opinions

my uh forensic biology professor constantly spoke about political topics

[gray terrace]

Now with as open source as education has become unless you are doing something that you need to certify on so to speak that requires a license etc yea it’s a joke

[iron galleon]

and we barely learned anything like in the classroom at least

tbf the professor knew it was just a prerequisite class

[gray terrace]

I got my degree in 2010 and I have not had it have a bearing on my job placement or opportunities once

[iron galleon]

once i get CPTS and CCNA ill apply for jobs in cyber

[gray terrace]

If your in the states ccna will be far more valuable up front and really even long term

[iron galleon]

ye am in the us

[gray terrace]

I would prioritize your networking skill set

It’s pretty much a prerequisite of any major engineering role in tech, well to be one worth a damn anyways

And you can get into work fairly quick with it

People hate on the net+ but for concepts I would knock that out too

It will teach you a ton of stuff the ccna won’t as the ccna is Cisco specific and really only covers switching and routing

[iron galleon]

ill put that on my list

[gray terrace]

So if you have the funds it’s worth a detour for that one

Don’t get me wrong though the net+ is pricey and it will very likely not land you a job

It’s worth for the theory though even if you just study for it and don’t buy the exam voucher

In my head though why waste all that hard work might as well get a shiney sticker

[iron galleon]

i had the opportunity to knock out the ccna in high school apparently

there was a class for it

i didn't know about it at the time

[gray terrace]

I have a ton of older Cisco gear for a Cisco lab that is still very usable for the ccna if you want it

If we are close in the states you can come pick it up I don’t mind

It’s been sitting in my storage space for a bit

[iron galleon]

r u east coast?

[gray terrace]

But I have 3 switches, 2 routers, and a firewall

[gray terrace]

Central

[iron galleon]

ahh

[gray terrace]

Leaning towards east coast though

[iron galleon]

i may take you up on that offer anyways

ill send friend request

[gray terrace]

You’re more than welcome to pay for shipping and that’s all it will cost you by that shit is heavy so be warned ahead of time

[iron galleon]

o shit i can't send friend request

[gray terrace]

lol I got you dude

[iron galleon]

that's alright i appreciate it

i'll let you know

[latent oak]

I’m atlantic… anyone got gear to give away? 😉

[gray terrace]

I got some monitors I need to get rid of still

Like a whole ass slew of them

[latent oak]

I just sold 2 monitors… had to reduce my stock from 7 to 5

[turbid goblet]

stock or u actively use 7?

[gray terrace]

That’s where I’m at now I’m at 7 lol

[turbid goblet]

god damn

[gray terrace]

For me stock

[turbid goblet]

ah

[latent oak]

I actively use 4 right now, with 2 more at the cottage, so I miscounted

[gray terrace]

I use an ultra wide big ass mon now

Oled, she’s a beaut

[latent oak]

I’ve got a 3 monitor setup at my desk, one samsung G3 ultrawide + 2 regular 28” G3

I’ve got an old LG hooked up to my proxmox host

I’ve got two viewsonics at the cottage

[turbid goblet]

i hack in vr

[latent oak]

Sweet

[gray terrace]

Ayy

[gray terrace]

Speaking of that have some vr headsets I need to get rid of at some point and I have like 8 laptops lol

[iron galleon]

i am very interested in the vr headset

what kind of vr headset is it

[latent oak]

I’ve never gone VR

[turbid goblet]

god damn feel free to send me a laptop

[latent oak]

Wonder if that would be super distracting or not

[turbid goblet]

i cant even run hashcat or bloodhound on my laptop

[iron galleon]

where u from

if u r comfortable answering

[turbid goblet]

philly

[latent oak]

I have to figure out how to wire up my laptop and mac mini to the 3 monitor setup… I’ve also got a windows PC, but a 3 machine kvm with displaylink

$$$

[iron galleon]

id get a part time job if you can for at least 2 months to save up for a decent laptop

i did that

retail is ass

though

[turbid goblet]

im a full time cyber sec analyst lol

[iron galleon]

oh shit

[turbid goblet]

i just dont wanna spend my money 🙁

also bought defcon ticket and flight last week

[iron galleon]

i should do that i just dont have the money for a hotel rn

let me check that out

i wanna go to defcon

i'll prolly just go in 27

yeah there's just no way i'll have 2.5k-3k just available to spend around that time

and i dont want to have a bad experience thats the thing

[gray terrace]

It’s just a spare quest 2 that’s modded and a regular spare quest 2

[iron galleon]

i don't want to like feel like im stealing from you at that point lol

i'll be grateful for the cisco stuff

someone else can have the vr stuff

[serene moth]

t

[turbid goblet]

u

[supple plume]

[hoary dawn]

Just wanted to show off my elite thrift store find

I figured it was a must grab the second I seen this man 😂

I also got a hdmi 3-1 adapter for 99 cents 😎

[turbid goblet]

wtf lmao

does it sit up straight on its own

[hoary dawn]

Yea 😂 Got a flattish bottom

The hdmi adapter is $60 in store too pretty neat find for that as well

[rustic carbon]

sup my g's

[stone edge]

hello

[rustic carbon]

hey, how goes it?

[worthy cargo]

it's going

i'm trying to go with it

[stone edge]

been going

[rustic carbon]

nice

same

[stone edge]

had to tell my girl how to avoid scareware

[rustic carbon]

haha very nice

f11, right? haha lol

[worthy cargo]

https://www.youtube.com/watch?v=u4AiuqQpB1U

[rustic carbon]

(f11 key to de-maximize full screen browser window)

[worthy cargo]

I like Afroman

[rustic carbon]

cool. who is he?

[worthy cargo]

You don't know what's been going on?

[rustic carbon]

nah dude

[worthy cargo]

he is a corrupt cop who tried to raid afroman's house

[stone edge]

it was doing the notifications ;_;

[worthy cargo]

didn't press charges

so afroman made diss tracks making fun of the cops

the cops sued afroman for defamation

[rustic carbon]

lol that's classic. nice.

[worthy cargo]

afroman won the lawsuit

[rustic carbon]

winning

[worthy cargo]

free speech

[rustic carbon]

afroman ftw

https://giphy.com/gifs/reaction-winning-charlie-sheen-x0kMYoT7J31i8

anyway, i'm bored as hell. anything cool you guys are up to?

lol. facts, having a girlfriend is so hetero that it loops around back to gay.

[tardy compass]

sorry wrong server

[rustic carbon]

lol

[tardy compass]

my bad

[rustic carbon]

i really don't care bro

i say that and other things. these are a few of my favorite things.

god, what movie is that from?

[rustic carbon]

that guy's deep in thought

figured it out lol

[jagged storm]

https://klipy.com/gifs/jgmm-cat-meme

[rustic carbon]

perfect shot there

can't find an Always Sunny meme for Frank when he plays an artist, damn

[jagged storm]

https://tenor.com/view/bye-cat-meow-chat-gif-14778852254694362862

[terse dirge]

https://klipy.com/gifs/cat-meme-40

[latent oak]

Mama’s Lemon Poundcake is a banger

[terse dirge]

https://klipy.com/gifs/epic-embed-fail-ryan-gosling

[lament basin]

It’s a fad that seems to be catching on lol

[supple plume]

general generaling

[supple plume]

clásico

[supple plume]

how does it feel being omni

[rustic carbon]

we are the creatures of the night. oh, yeah. i need to play that song...

[signal mica]

I forgot already

Always looking forward

[dull hemlock]

yo

[supple plume]

-# yo

-# wsp

-# don't speak too loud it's late

[dull hemlock]

nothing much

just left try hack me as they lie to their users

[supple plume]

great

htb is better in any aspect

[signal mica]

1am how come ur still awake

[supple plume]

mmm lack of execrise I guess

[signal mica]

Understandable

[dull hemlock]

HTB first platform i used but originally started using THM has they had a discount on premium

[supple plume]

I've been working on my machine today but windsurf changed the usage limits pissing off everyone so I joined their discord to give them high quality roast feedback

[supple plume]

what are you interested on?

in hacking

[signal mica]

Let me see it

[dull hemlock]

web app pentesting

[supple plume]

nice me too

I have found portswigger academy very useful for learning web pentest

combined with htb

[dull hemlock]

web apps and i'm starting to look into hardware testing

[signal mica]

😼 😼 😼

[supple plume]

like look at this shit

I only know for sure free = 0 cost

[signal mica]

Oh its straight up $$$

[supple plume]

yes

es mierda

[signal mica]

So whats their bizmodel now? You buy X tokens and $$$ represents token usage?

[supple plume]

they had 500 credits per month with a subscription a credit is a prompt but some models require x2 x3 so you can plan your prompts

now they have $$$ and a percentage of daily usage

which expired when I was working

[signal mica]

money

[supple plume]

I liked the credit system because I could use claude and instead of using 1 prompt I instructed the model to give me feedback with a terminal input

so 1 prompt lasted me like x10

i've been using claude like crazy that way

[inner adder]

hey question is the student subscription still available cuz i cant find it

[supple plume]

https://help.hackthebox.com/en/articles/13465244-getting-the-student-subscription

it was 1 google away

[dull hemlock]

is SSH on the machines something i should be looking at or what staff use for testing

[turbid goblet]

what

[supple plume]

depends on the machine

but attacking ssh is usually not the way to find a vuln to access

[rancid snow]

sometimes its involved, sometimes its just there. Services can be red herrings

its rarely the entry point but sometimes you get creds or other ways to gain ssh access

[supple plume]

yeah it's involved

sometimes I wonder if I could bruteforce sudo inside the machine

is it rate limited?

gonna make some browsing about that

it seems like it's possible but very slow and makes a lot of noise

and that is there is no specific protection for bruteforcing it

anyway good night chat

[signal mica]

Wdym

[supple plume]

upload a seclist and a py script

to retry sudo passwords

[rustic carbon]

you spin me right round baby right round

[zenith pine]

run sucrack

[supple plume]

I read that pam gives a 1-3 sec delay

Making it really slow