general

[iron galleon]

okonmah im obliterated

[dire rose]

Why?

[gilded fern]

シ

[west venture]

Miaw

[bronze lion]

Guess good news

Now win 11 comes with a spyware which takes screenshot of everything u do every few sec is obvious a great idea right so win thought why not make it built in.

(not actually a spyware or WHAT THEY ARE SAYING ATLEAST AFTER COLLECTING THE FUCKING DATA)

[turbid goblet]

i thought they decided they werent gonna do that

[bronze lion]

Lucky this idea faced a lot of backslashes so they HAD to make it opt in

[bronze lion]

Who's this they?

[maiden anvil]

yeah who is they?

[maiden anvil]

what kind of animal makes this noise

it sounds something like a mix of a cat and a donkey

[west venture]

A German Cat

[bronze lion]

When a company reaches a certain power it's no longer their choice completely to say like hey let's make **** and shit purely. When they reach a certain power now they and gov have to work pretty much together cuz a change in the company can literally affect the entire nation

Why do u think big companies do give much of a shit abt GDPR ? And the gov suddenly turned blind until a mass no of people bring this issue up

Bcz if the ppl did not bring the privacy concerns Abt the recall in win 11 , u want me to believe that they would have kept the 'opt in' options already?

[west venture]

Windows 11 privacy concerns are overrated

[bronze lion]

Compared to what china collects

Sure

[west venture]

And you really believe using linux is more private? 😂

[bronze lion]

Using Linux give me more power over my own system

And yes WE can make it more secure and private if we want to

Do u disagree?

[random aurora]

https://youtube.com/shorts/Bv1IuWddphQ?si=CAJaj5JvStWpR52i

[west venture]

If you use the internet then nothing matters

[bronze lion]

That's why I recommend to say ' fuck u internet' and throw this crappy junk of metal out and buy a small house in a countryside and live peacefully with ur family

[west venture]

If you use Google, YouTube, Instagram, and X, you can make your OS as secure as you like, but these companies already have a very detailed profile of youe personality, your PII, and your face

[west venture]

You don't really have to be worried if you don't do anything wrong

[bronze lion]

It's not Abt doing something wrong

[west venture]

The government is to take care of you and they will

[bronze lion]

I can't just come in when u are bathing just bcz u are fine with it can I?

An example ofc

I am straight

Af

[west venture]

If I am fine with it, why can't you?

[bronze lion]

a stranger coming into ur bathroom when u are showering sure doesn't sound appealing

Ye wait wait

I dug my own grvae

[west venture]

I'd lowkey be okay with the government doing that. Strangers, no

[bronze lion]

Wht i meant is me entering ur bathroom without permission

Cuz most of the time we do t actually have an option to fully exempt from them collecting our data

[bronze lion]

Don't talk as if the government is ur relative and not a stranger

[west venture]

Stop hating on the government lol

[bronze lion]

Shit I shall punish u with 100 cats punching in ur face

I gotta go exam in 2hrs

[west venture]

Okay gl

[bronze lion]

I don't hate anybody or anything

I was just debating

[west venture]

Good

[random aurora]

Did u see the cat

https://youtube.com/shorts/Bv1IuWddphQ?si=F0PuIEUCt0X1Wkr2

[west venture]

I shall do another box because I am too dumb to hack real shit

[random aurora]

BASICS CALL U

[west venture]

I know basic

[terse dirge]

Guys, I should become a botanist. Cyber is cooked rn

[west venture]

If you're leaving behind an open position, could you be kind enough to refer me to your job before you quit?

[rustic carbon]

sup fam

[terse dirge]

I'm j*bless

[rustic carbon]

me2

me2 movement for jobs

me5Million

rip

[frigid mountain]

anyone played Metal: Hellsinger?

I just did the demo and it's fun

I bought the full game

it's like $9 on steam

[rustic carbon]

negator

[bronze lion]

Censored lol

[west venture]

FYI if you display your HTB rank in your socials, hoping for job opportunities, you'll get 100s of random people DMs asking to hack Instagram and discord instead.

[rustic carbon]

nice

[bronze lion]

I get it without puting the rank

Mick helps me ban then from this server cuz most of the DM's are from here

[west venture]

I get Instagram DMs mostly

[pliant pumice]

LMAO

[bronze lion]

Why would u share ur insta handle anywhere in the first place?

Except me who does that shit

Why would u

[pliant pumice]

exactly... why be a victim of being doxed?!

[bronze lion]

I see a new face here

Exactly

Skill issue in my opinion

😆

U really don't have to pay 3k

[pliant pumice]

ok brb gonna sleepp

[pliant pumice]

people offer this for around 1-3k, not trying to criminalize anything just some insane stuff i saw

[bronze lion]

Ok we are so close to sliding to the gray zone now

Let's stop

[pliant pumice]

i've seen it myself

[bronze lion]

Let's stop

[west venture]

Well it's not that deep. I post shit

[pliant pumice]

yeah ik

[west venture]

The reality is, even if I do manage to compromise every single one of Instagrams servers, the chances of me actually getting your girlfriends Instagram account is very low

[pliant pumice]

anything for "lemme hack my ex pls"

had a kid dm me a bit ago

to hack his ex's facebook i just laughed

im so sleepy bro im preparing for a cyber world competition

next month

[west venture]

The only possibility of doing this is through targeted phishing

Create a fake login page that looks like Instagram, and email your ex a believable email impersonating insta and link your hosted page there. If they're dumb, they'll enter their credentials

[uneven bough]

How to open Ticket

[west lynx]

https://letmegooglethat.com/?q=How to open Ticket

[west venture]

Yk when I was 12 or 13 I used to use my smartphone while it was hacked

[pliant pumice]

just want to thank hackthebox for being the goat of cyber

[pliant pumice]

dude when i was 13 i'd load up termux on my device and act like some hacker with github skidded tools

[maiden anvil]

baa 🐐

[uneven bough]

[west venture]

People used to turn on and off my screen, take screenshots randomly and turn on / off the flashlight etc.

[pliant pumice]

🔥

[pliant pumice]

i remember prank calling the police and they fully

shut my phone off

when i was 12

[uneven bough]

My account is banned 🙂

[west venture]

I knew I was hacked but I kept using it anyway till they got board of trolling and stopped eventually

[pliant pumice]

LOL

when i got hacked first i panicked and rung my cousin about it

and he was like we need to tell ur dad to move houses u will be kidnapped

but i've been irl stalked online on social media

before it was so weird he sent a pic of my home outside during the skype days

[west venture]

I literally had nothing on my phone to lose. It was already so beat up that the screen would fall off if you didn't handle it gently

[pliant pumice]

LMAO

im probablty going to sleep now my eyes r tired

[maiden anvil]

🥹

[scenic flame]

hello

I NEED HELP

any mod?>

?

[alpine pumice]

You don't need to ask permission to DM a mod for mod related issues.

[scenic flame]

umm hey

My friend recently got banned

from htb

and for unban appeal he needs to contact a mod of server

[alpine pumice]

Discord mods have nothing to do with platform bans, they need to reach out to the email provided in the ban email.

[scenic flame]

um you know the hackster?

[alpine pumice]

Hackster is a bot

[scenic flame]

ohh

but that bot sends a msg

that

for unban appeal you need to contact a mod

[alpine pumice]

Then they can contact a mod

[snow wraith]

[scenic flame]

but he is banned from server

how can he contact a mod

[alpine pumice]

He can DM one

[scenic flame]

please help him for his unban appeal he even tried to send his appeal on email of htb

[snow wraith]

Job of a Mod is hectic :" ()

[scenic flame]

which is made for unban appeals

[scenic flame]

ok could you tell him which mod?

[alpine pumice]

He probably got banned for a reason, we don't ban for nothing

[scenic flame]

yes yes

[alpine pumice]

He can DM any mod

or admin

[scenic flame]

but now he regrets

for his mistake

ok but tell me how he can dm a mod when he is banned from server how would he know whom to msg

there is no mod in his dm

that's why I am here

[alpine pumice]

You can tell them whatever mod then

it isn't that complicated

[scenic flame]

will you help?

you are also a mod

[alpine pumice]

Yes as I just said he can DM any mod

[scenic flame]

ok

wait

let me tell him

your username

um supernuts

[meager kernel]

Why'd he get banned

[scenic flame]

he said that

[meager kernel]

[scenic flame]

that u don't accept friends request

when he tried to send you friend request

[snow wraith]

[alpine pumice]

Yeah I don't accept friend requests. Friend requests aren't messages.

It's really not complicated, you can tell me their username but I'm not going to unban them if they broke the rules

[meager kernel]

@alpine pumice iirc, doing sudo rm -rf /* on HTB boxes is against TOS right?

[scenic flame]

and he also tried to dm you but this message pops up

our message could not be delivered.

You can see the full list of reasons here: https://support.discord.com/hc/en-us/articles/360060145013

um his username is

fire_clashing\

[alpine pumice]

idk

[scenic flame]

sry no slash

fire_clashing

his username

[scenic flame]

he promise that he don't repeat the mistake

[alpine pumice]

Nope I'm not unbanning him, he can contact an admin for that.

[scenic flame]

what is the username of admin?

[alpine pumice]

look at the user list...

[snow wraith]

Chap

[scenic flame]

umm please could you contact them for me cause they are not gonna look at my msg

[worthy cargo]

I'm hungry for something sweet but there is only lemon pound cake

[scenic flame]

but if you tell them they probably will

[worthy cargo]

only like 3 slices left

I ate almost the whole cake

I'mg onna get fat

🙁

[alpine pumice]

No, I have zero tolerance for what your friend did. He can DM an admin.

[scenic flame]

super nut he tried to send you msg but msg is not sending

you can talk to him

please

[alpine pumice]

No

He can DM an admin

[scenic flame]

can I mention admin ?

n this chat

in*

[alpine pumice]

Just DM them, or have him DM them

[worthy cargo]

I wonder what he said that got him banned

[scenic flame]

but he said that without someones permission you can't dm anyone

[sick gate]

"my friend"

[scenic flame]

he also got a 1 warning of this this so

[alpine pumice]

Other admin dm's may be open. As I already said multiple times to you, you can DM the mod too. I'm done with this. You have been told like 100x now.

[scenic flame]

sry bro

he said that supernuts knows me

he helped me alot

[worthy cargo]

You should just go eat some papaya

[scenic flame]

how do you know papita = papaya?

@balmy basalt

I need a help

[worthy cargo]

https://www.youtube.com/watch?v=jkdWrx2Ta_A

[alpine pumice]

As I said, this is not the place. DM them directly.

[scenic flame]

I did but no response

like let me tell u what the sitatuion he is in

at the 20 march he got banned

he though whatever I was just cracking some jokes

just got banned from the discord server

but today he thought that he should buy some cubes

and upgrade hi plan from free to

primium

[alpine pumice]

Then you wait

[worthy cargo]

Everyone wants to crack jokes like theyr'e a fucking stand up comedian

[sick gate]

What was the joke

[worthy cargo]

Comedy is hard

Comedy is really fucking hard

[tough oyster]

LOOOL

[scenic flame]

please don

[tough oyster]

This is funny as fuck

[scenic flame]

let me tell

what was the joke

please don

[sick gate]

Yeah tell the joke

[tough oyster]

https://tenor.com/view/please-tell-us-more-gif-10221233

[scenic flame]

please don't band me for that

[sick gate]

We wanna hear it

[rapid badger]

Have you tried Mott's Clamato Caesar Extra Spicy ?
Good stuff

[sick gate]

I'll do as little as I can to stop you being banned for it

[scenic flame]

like he suposed to say a double meaning joke

[sick gate]

Okay enough ABOUT the joke. Tell the joke

[scenic flame]

and he was tryna tell me real meaning in the second sentence

but before typing the second sentence

[tough oyster]

Oh Vege, ya doing it again hahaha. I know you 2 fucking well

[sick gate]

He's not gonna tell the joke is he

[warped plank]

If he does it'll instantly get deleted and get him banned

[sick gate]

Don't give it away

[scenic flame]

he got banned

[sick gate]

LMAO

[tough oyster]

WOAH

WOAH

WTF

[scenic flame]

that was the meaing

[sick gate]

What a fucking cracker of a joke

[scenic flame]

but before he can type cyber punk

he got banned

[alpine pumice]

He needs to fill out the parental consent form and he can DM an admin if he wants, we aren't gonna unban him.

[scenic flame]

he is 18 +

[tough oyster]

So you brothers with him?

[scenic flame]

then why parental consent

[sick gate]

I think he still needs a guardian

[worthy cargo]

Not everyone was born to be a stand up comic

Not everyone should try to crack jokes

It's as simple as that

[scenic flame]

yes he regrets it now

for doing that

[worthy cargo]

Life is a bitch

[scenic flame]

but non of mod repling

[worthy cargo]

And then you get high

[sick gate]

He should probably message an admin???

Idk

[scenic flame]

we are waiting for that

I had Dm all the admins

[ornate ibex]

Hiii

[worthy cargo]

LOL

This kid

Hahahahaha

[warped plank]

Idk if they'll come back again...

[worthy cargo]

Ahhh boy

[sick gate]

Oh they're gone

Thankfully no more jokes

[ruby dawn]

hello ive been stuck on a target spawning for 20minutes rn it just keeps loading what should i do pls

[alpine pumice]

"friend" joined the same day they got banned hmm

[iron galleon]

https://tenor.com/bJQcp.gif

[warped plank]

Swap VPN regions

[worthy cargo]

Sometimes refreshes the page helps. Otherwise try switching VPN

[tough oyster]

@alpine pumice I'll do my checks and have a giggle if it is true

[ruby dawn]

okayy ty for help

[sharp shuttle]

Hey guys

Just wanted to say

I love you folks

[worthy cargo]

Fix my door, fix my door
Stop stealing my dough, stop stealing my dough.
Stop disconnecting my video

[sick gate]

Thanks, here's a picture of a pillow fighting champion

[iron galleon]

i know that guy has horrendous allegations

[sharp shuttle]

If the pillows were filled with rocks that would be respectable

[iron galleon]

LMAO

[sick gate]

In this house Stan Bateman is a champion

[sick gate]

They would get up on a big wooden horse and smack each other until one fell off. For some reason they don't do it anymore and our best guess is injury and or death

[worthy cargo]

So what happened to the dude asking about his friend

he abruptly stopped his quest for his friend

[sick gate]

Probably hitting up an open mic

[sharp shuttle]

Oh thats kinda cool

[iron galleon]

they stopped being friends

[sharp shuttle]

Safer and more interesting than 60 iq brutes charging at each other full stop

For those of you here who would want to learn drone pentesting, would you be interesting in a free gitpage with everything youd need to know?

[ruby dawn]

didnt work 🙁

[sick gate]

Sure (yes pls)

[sharp shuttle]

@iron galleon is your pfp timothie shilomang?

Im considering making a gitpage that goes along with my talk so people can just go get started instead of spending 7 hours post talk helping people

[iron galleon]

it's an old picture of me one of the only pictures i have of myself before a period of time

i recreated it with ai

it's sentimental and autistic

[sharp shuttle]

thats cool

i did not mean any shade, you look like that guy

thought it was a dune promo photo

[iron galleon]

nah no offense taken lol

[sharp shuttle]

i would hope not, hes this generations hottie.com with the bogged bunch

welp time to ride my bike home

😄

[alpine pumice]

why not have your drones fly you instead

[rustic carbon]

sup my guys

and gals

sup life forms

[alpine pumice]

#magical-tunes

[rustic carbon]

k, thanks

i like how your name has 3 or more meanings

snack, other, and crazy

lol

magical

[alpine pumice]

i was nuts in cs

[rustic carbon]

way cool. cracked even?

lol

cracked nuts

lol

puns afloat

a plenty

[rose onyx]

You, me, dd. 20 minutes

[rustic carbon]

i want the name "Cracked Nuts" but don't want to steal your thunder.

[alpine pumice]

You would get smoked

[rustic carbon]

lol

dungeon master

[rose onyx]

https://tenor.com/view/fps-doug-boom-headshot-headshot-pure-pwnage-gif-4455343198282149618

[rustic carbon]

i played mtg, that's about it

had friends into d&d and shadowrun

[rustic carbon]

i miss that guy

"i can dance all day i can dance all day!"

[alpine pumice]

i was winning tournaments back in the day

young man's game now

[rustic carbon]

yeah, for sure

[rose onyx]

So you're old now

[alpine pumice]

yeah

i was pro in source

[rose onyx]

So not much getting smoked more like two dudes falling asleep on their keyboards

[alpine pumice]

https://tenor.com/view/cs-counter-strike-cs-go-cs2-fard-gif-15917503615725617416

[rose onyx]

Mr fancy pants. I too was CAL... O....

[west venture]

Ah hah

[rustic carbon]

eureka?

[west venture]

Yeah

[rustic carbon]

nice. secret?

[west venture]

No I think I found out the reason for the sudden unexplained abdominal cramps: snake bite

[rustic carbon]

oh wow. damn bro. gnarly.

poisonous?

[west venture]

Idk just an assumption

[rustic carbon]

for sure. camping or something?

[west venture]

There are a lot of snakes in my area lol

[rustic carbon]

gotcha.

yeah. my area is pretty tame. i live in the city, so yeah.

gotta worry about humans instead lol

[west venture]

Lol

[rustic carbon]

humans and disease. that's about it.

poor water quality too maybe, lol

you up to anything interesting rn Candy?

or just kicking it?

[west venture]

I am sleeping

[white hollow]

hi

[west venture]

Hi

[uneven beacon]

Hello

[sharp shuttle]

be safe, thats no joke

[rustic carbon]

heyo

[west venture]

Thanks

[sturdy thistle]

ellow

[cerulean bloom]

hello
ellow
elbow

[left haven]

H..

[cerulean bloom]

Guys, I need some advice. I'm going to a boarding school, and I need a laptop for my cybersecurity stuff (VMs, solving machines on different platforms, Kali, Ubuntu, etc.). I'm thinking of buying a thinkpad, but alternatives are welcome! I also want to the price range to be maximum $1.5K, but I might buy one more expensive. I don't need a crazy strong laptop, just a decent one that will be usuable and reliable for at least 4 years and powerful ENOUGH to hold up on cybersecurity and VM stuff. Any laptops you recommend (please be specific, like if its a ThinkPad, which series and generation?)? Thanks!

[scenic maple]

thinkpad a fat one ☝️

[lime trout]

4 years is a rough timeframe tbh

Framework, or M-series mac though

[cerulean bloom]

the school gives a macbook air lol

M4 probably

[lime trout]

its a really good option

battery life is in a class of its own

[cerulean bloom]

but I don't think it will be able to handle it

the storage is one problem

[lime trout]

my MBP M4 runs it all fine

[cerulean bloom]

how many RAM and CPU cores does your MBP ahve?

[lime trout]

dont remember tbh

[cerulean bloom]

lol
just wanted to see how high it is, cuz I'm sure the macbook air they give doesn't have a lot of cores and RAM

[lime trout]

there is like

[cerulean bloom]

I fell like probably 16 GB and idk about the cores

[lime trout]

2 options on the MBA lol

there isnt really a horrid config

[cerulean bloom]

I also hear it's good to have two laptops there tbh

one laptop for school, the other for other stuff

competitive programming will also be easier on a windows computer imo

[terse dirge]

System76 has great laptops. Personally I just use containers for HTB now because VMs are too heavy on resources and I've been using mine for 3+ years with the only issue being having to replace a battery

[cerulean bloom]

are they windows or linux?

[terse dirge]

The purpose of using VMs and such for CTFs I think is old and outdated unless you're dealing with malware but most malware is windows and if you're on Linux you don't really need to worry too much about accidentally infecting yourself

[terse dirge]

Linux ofc but you can install windows

[cerulean bloom]

ahhhhhh
I need windows lol

[terse dirge]

That's kinda cringe, why?

[cerulean bloom]

cybersecurity is the main, but I do want to do other things on there

[terse dirge]

Wine, proton, and mingw exist btw

[cerulean bloom]

ik, but like
I'm used to windows lol

I also need competitive programming, and it'll be very simple for me to install things I need and work on it

[terse dirge]

Quite the opposite actually

[cerulean bloom]

.................... no

[terse dirge]

Linux isn't too bad to daily drive it's much easier

[cerulean bloom]

I've installed it many times lol

[terse dirge]

sudo apt install -y python3.

[cerulean bloom]

I need c++ lol

[terse dirge]

Clang llvm? https://clang.llvm.org/

[cerulean bloom]

can I just....... use windows

like, I understand what your saying

but........... can I just use windows lol

[terse dirge]

https://learn.microsoft.com/en-us/cpp/build/clang-support-msbuild?view=msvc-170

Who still uses C++ anyways? Just use go if you want performance and safety

[cerulean bloom]

almost everyone in competitive programming

[terse dirge]

Tf is competitive programming?

Why not use go instead? Much faster and easier

You just won't have oop which is a good thing

[supple plume]

Competitive stands for competition

[cerulean bloom]

https://klipy.com/gifs/stop-it-get-some-help-5

[terse dirge]

Golang gang!! 🔥🔥🔥

[cerulean bloom]

good luck creating li chao trees in go

[terse dirge]

Calc is also short for calculator btw

[terse dirge]

Binary trees have already been done https://www.tutorialspoint.com/article/golang-program-to-implement-binary-tree-data-structure

[cerulean bloom]

li chao tree is not binary trees

its probably not that difficult

but its simpler to use C++

[scenic maple]

goland is used less than python in competative prpgramming just so u know

[west venture]

It is NOT lol

[terse dirge]

I'll make one and post it

[terse dirge]

Skill issue tbh.

[cerulean bloom]

good luck

[rare monolith]

[west venture]

I run games and stuff and even natively supported games sometimes break in Linux after a update

[terse dirge]

eeew geometry

[cerulean bloom]

well, good luck proving your point lol

[west venture]

Bc Linux has like zero backwards compatibility. The distro I was using randomly decided Wayland is the way to go and pushed Wayland and removed the option to even use x11, breaking a ton of my games in the process

[rare monolith]

you can also just use windows with WSL and then it’s whatever

[scenic maple]

wow thats a bad distro

whats the name of it

[west venture]

Fedora

[cloud rampart]

shitty distro

[scenic maple]

@rose onyx fight back

[cloud rampart]

you would have no problem with ARCH LINUX

[supple plume]

Exactly

[west venture]

I have a life

[supple plume]

[supple plume]

I have arch linux

And a life btw

Where I use arch linux

[cloud rampart]

ahaha

[scenic maple]

i have a distro that doesnt break my shit

[west venture]

I don't get the point behind arch like what do you mean you have to install your desktop environment, set it up with EVERYTHING you need and then start using the computer. I just wanna set something up, leave it alone and use it.

[scenic maple]

seems like u dont have a working distro

[west venture]

Like you have to install and set up the wifi and Bluetooth widgets for god's sake

[scenic maple]

your point is contradicting when they selected wayland for you
you were against it and you want everything pre installed
arch comes with a script that has a TUI to install whatever u may need if u use that it will be like fedora in 5 mins

[terse dirge]

your fault for using trash tbh

[scenic maple]

using that TUI would install and automatically start services like wifi bluetooth and widgets

[west venture]

My point was Linux should learn from Windows and make an actual usable OS

[terse dirge]

this might be more your pace https://fedoraproject.org/atomic-desktops/silverblue/

[scenic maple]

windows is not a usable os

[terse dirge]

working on it rn

[supple plume]

You can install a Desktop environment

[spark mulch]

I don't get the point behind buying an empty house like what do you mean you get to pick the furniture and have space in it for your own posessions. I just want to buy the house, move in, and have some old dead person's stuff in there cluttering up the place already

[west venture]

I can but should I have to? No

[cloud rampart]

seriously imo arch have an excellent compatibility with almost all games/hardware because of the rolling release, some heroes just sacrifying their lives to make my games work

[supple plume]

If you want to stay in windows you don't have to

[west venture]

First of all, I don't wanna be a computer nerd, so I just want something that works out the get go with zero effort

[scenic maple]

like i dont get "u have to setup everything"

then use something like ubuntu

[west venture]

Yeah for now imma stay on windows and hopefully switch In the future

[spark mulch]

perhaps other people like to have more control and configure the system exactly to their own specifications rather than relying on a preconfigured set of opinions with loads of shit they don't need

[cloud rampart]

better late than never

[west venture]

As long as it works, I don't really care lol

[spark mulch]

and that's fine!

[cloud rampart]

(btw distro is just a tool you choose whatever you want bro xd)

[west venture]

Also I need MS office 365

[spark mulch]

but you said you don't get the point of arch, so i tried to tell you the point of it

not to tell you to use it

[west venture]

Yeah I get that

[west venture]

Yeah

[west venture]

windows does give you more flexibility when gaming

[cloud rampart]

unless you play valorant/LoL

you can play almost all games on linux

matter of habit

[spark mulch]

yeah you literally just install steam and then steam takes care of the rest

(with options for using modified versions of proton in niche scenarios if you really need to)

nope

[west venture]

Yes. If you do It the official way sure most games work. But most my games don't come the official way. Plus my laptop GPU isn't very powerful. On windows, I can use frame generation and scaling software to counter this with very little loss of quality, allowing me to play very demanding games that would otherwise be unplayable.

On Linux you can't do any of that.

[cloud rampart]

that was true 15 years ago

actually all that is possible on linux :)

https://www.linux.org/threads/amd-fidelityfx-super-resolution.35648/

for example

[spark mulch]

if you mean you can't run them in steam for whatever reason, then you can use bottles instead (or lutris, but I don't like lutris)
And there's plenty of frame generation/scaling stuff for linux now (and in-game support where games offer it too, because the proton layer just works)

[cloud rampart]

Lutris and Proton make playing non-native games easy

[terse dirge]

@cerulean bloom I have made an attempt, I'm very certain it's wrong lol

warning wall of text

package main

import "math"



type Line struct {
    M float64
    B float64
}

func (l Line) call(x float64) float64 {
    return l.M * x + l.B 
}


func insert(l float64, r float64, segment *Line, a *[]Line, idx int){
    if r-l <= 1 {
        if (segment.call(l) > (*a)[idx].call(l)) {
            (*a)[idx] = *segment
            return
        }
    }
    mid := (l + r) / 2

    leftson := idx * 2 + 1
    rightson := idx * 2 + 2

    if (*a)[idx].M > segment.M {
        (*a)[idx], segment = *segment, &(*a)[idx]
        insert(l, mid, segment, a,leftson)
    }else{
        insert(mid, r, segment, a,rightson)
    }
}



func query(l float64, r float64, x float64,a *[]Line, idx int) (float64) {
    if r-l <= 1 {
        return (*a)[idx].call(x)
    }
    var mid float64 = (l + r) / 2
    var leftson float64 = float64(idx) * 2 + 1
    var rightson float64 = float64(idx) * 2 + 2
    if (x < mid) {
        return math.Max((*a)[idx].call(x), query(l, mid, x, a, int(leftson)))
    }else{
        return math.Max((*a)[idx].call(x), query(mid, r, x, a, int(rightson)))
    }
}

[spark mulch]

can't believe @terse dirge built the wall

What's the *[]Line syntax about? noun after the brackets

[terse dirge]

pointer to an array of that structure

it's to have some sort of OOP so I don't need to deal with global vars

[spark mulch]

is this c#

[terse dirge]

golang

[spark mulch]

o ok not super familiar with go syntax yet, never really touched it (or c#)

[warped plank]

What does the () do in the (float64) in what I'm assuming is the return type for the query function?

[cerulean bloom]

idea wise seems fine

[bronze lion]

U guys use golang?

Why?

[terse dirge]

not sure what it returns but it seems safe to return it as a float. Go is a bitch about type safety

[cerulean bloom]

Ceald uses it

idk

[bronze lion]

Ye he has been using it for years now

Do u?

[cerulean bloom]

no

[terse dirge]

it's fast and my monkey brain understands it better than something that's object oriented

[bronze lion]

K

Lol

[terse dirge]

does it pass the tests tho? 👀

[cerulean bloom]

idk

I mean

[mystic harbor]

[cerulean bloom]

I can try testing it later

[devout sail]

U can test it rn with goplayground

package main

import (
    "compress/gzip"
    "encoding/base64"
    "io"
    "os"
    "strings"
)

func decodeThis(r io.Reader) io.Reader {

    lol, _ := gzip.NewReader(base64.NewDecoder(base64.StdEncoding, r))

    return lol

}

func main() {
    throw := "H4sIABaqgVoA/1WPvW7FIAyFd57ibHmOTlWWrlVHenFIGrCvwCTi7a9Dq0rZ0Pn5OP6kqRBYULV4jlQqVJDkIPclDTvLCV0JpSWq8BxQBUEwuzcsLSU8JOdNM7FOFefqFfOUrbLxvnGELINzSkuBJ0UkvcyKpUg2XocYviC27tyMn1YVp2f2UDJ6t+5qEy7mQpQM6d5F1SP7nYbdONhqtWnOfdBxseTqx+34CzxverIFlxzk5JtRGsMXMd64M1ClMqK31P+/j9JvRvXdXhK+O930cYd9u9HAru0X+gIEKbNKeQEAAA=="
    io.Copy(os.Stdout, decodeThis(strings.NewReader(throw)))

}

https://go.dev/play/p/kN3Bqc6K18l

[terse dirge]

go has restrictions on array length btw

[cerulean bloom]

which is why
c++ is superior

[terse dirge]

but is docker, kubernetes, and containerd writtin in C++?

[timber shard]

Is htb labs season discount code applies to pro labs?

[devout sail]

Yep

You'll see it at the very last step btw

[spark mulch]

https://harmful.cat-v.org/software/c++/

[devout sail]

Like you'll have to go pay got 50$ and at final step it will say credits applied of xx$

[cerulean bloom]

I meant in competitive programming
if docker is involved, I don't know what ur doing

[jagged storm]

Woah, you made a typo there. You meant to type C.

[timber shard]

I see

[devout sail]

So u know c++
Just learn go too
You'll be able to feel superior in both

[terse dirge]

I like C for kernel modules and eBPFs

eBPFs are kinda shitty tho since it is less batteries included if you use C instead of the nonbased rust

[shell hollow]

hey guys

[timber shard]

best AD track after ad exploitation?

[shell hollow]

Honestly, I think you should solve Zeyphr and also solve TJ Null AD Machines.

[terse dirge]

everything should be a container 🔥 even my toaster and washing machine

[timber shard]

tj null?

[west venture]

I love how compact it is and how easy to compile it is lol

And cross compile

[terse dirge]

gotta cite my sources https://www.geeksforgeeks.org/dsa/introduction-to-li-chao-tree/

[devout sail]

Li chao tree

[supple plume]

@native plume @scenic maple Typescript 6 has been released

[scenic maple]

[redacted due to ties with politics]

[terse dirge]

is the compiler fully in go now?

[supple plume]

No, the 6th version is the last one made with TS

[terse dirge]

typescript W

[supple plume]

Yeah

Then my js will be made with go 🥀

[terse dirge]

https://klipy.com/gifs/evil-laugh-127

[shell hollow]

Windows Active Directory Boxes: https://docs.google.com/spreadsheets/u/1/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8/htmlview

[olive niche]

Is anyone from Synack here right now? Can they contact me privately?

[jagged storm]

I used to be, if you just want to know how it is.

[olive niche]

Can I message you privately?

[jagged storm]

Yeah

[meager kernel]

Hi

[supple plume]

Crackton

[meager kernel]

Hi

[olive niche]

Can you send me a friend request? I can't send you a DM.

[supple plume]

How is it going

[jagged storm]

Oh, yeah that nonsense. Uhh... I mean, if it's just about the platform, you can ask here. Others will be able to benefit from seeing the information.

[meager kernel]

Just returned from college, will check work email rn

Then study HTB

[supple plume]

Ok

[meager kernel]

Planning to do a module and then Kobold machine

[olive niche]

I’d like to ask: What kind of resources did you have when you applied? (certificates, etc.)

[supple plume]

Ping me of you want I also have it pending

[meager kernel]

@supple plume you did Kobold?

[meager kernel]

Sure

[meager kernel]

Im stuck on its priv esc

So Im gonna do linux priv esc from HTB academy

[jagged storm]

Synack has a 'pathways', which I used to get in with CPTS. https://www.synack.com/red-team/pathways/

It lets you avoid the testing, and get priority.

[supple plume]

Same

But I didn't spent enough time tbh

[meager kernel]

I spent some time

[olive niche]

I know that. Did you apply only through CPTS, or do you have a bug bounty career from other platforms, for example?

[jagged storm]

If you don't have a cert to bypass the priority line, you'll have to do testing. They accidentally sent me the test, even though I bypassed it, and I did it for fun anyway. It is beyond easy - easier than the easiest active easy box on HTB.

[jagged storm]

No prior experience.

[supple plume]

I think I can figure it out if I lock in for some hours but I am going to be working on my box mostly

[olive niche]

So, did you have any work experience listed on your resume?

[zealous charm]

[jagged storm]

Yeah, I have extensive IT background, including FAANG, but I think I've only ever seen one time where someone with a cert (and no experience) didn't get in.

[uneven beacon]

[olive niche]

I’m really curious about this part. A close friend of mine was rejected outright even though they have a CWES. Yet Pathways says it’s on the same level as the CWES CPTS.

[jagged storm]

Yeah, it's really odd how they handle that. Synack is 100% just web stuff, so CPTS isn't even super relevant. For the longest time, CPTS was the only HTB cert in the pathways.

I can only say that I found to it be an awful experience all around, and that it's not a great way to start out.

[spark mulch]

interested to hear more. bumped into a synack stand at a conference a while back and thought they sounded interesting but obviously no perspective from the testers, just sales engineers

[olive niche]

I have confidence in my own abilities; I don’t consider myself a complete beginner. The fact that Synack is a closed platform appeals to me.

[jagged storm]

The fact that it's closed also works against it. The veterans will steal all the missions, so you'll never get any of those. The veterans are also acutely experienced with the customers that use the platform, and have pre-made reports/scanners attuned to the exact software/hardware they'll need to check, every time a contract pops up.

[spark mulch]

iirc don't they make you work from dedicated synack VMs?

[jagged storm]

Yeah, they give you a VM that you have to connect into, which is either a windows or ubuntu VM.

You can technically do contracts with your own VM, as long as they allow it, but like... no contract will allow it lol

[spark mulch]

i see the appeal of that from the customer perspective tbh

[olive niche]

That may be true, but as the old saying goes: “If you can’t stand the heat, get out of the kitchen.” 🙂

[spark mulch]

from rat's description, it sounds like a similar business model to how courier companies work. You get paid for the work you do, but guys show up at 5am with a massive van and take all the good work

[jagged storm]

Yeah, but I just think it's somewhat of a high competition environment, where you're starting on the back foot. There are plenty of other places to get your feet wet.

They do occasionally set contracts up to be newbie only, where only people who have never gotten a bounty on the platform can participate.

[olive niche]

I know that’s true, but the situation isn’t much different on other platforms, is it?

[jagged storm]

But it doesn't happen often, since they want to keep veterans happy

[spark mulch]

how's the $$$

[jagged storm]

You have to be prepared to not care about money, for at least the first year or so.

Otherwise, you likely won't be salary competitive with a fry cook

[spark mulch]

are you expected to commit to them like a full time job

[jagged storm]

Synack does ask you how much time you plan to commit, but I don't know if there's a 'wrong' answer.

If you are inactive for 1 year, they kick you out.

[olive niche]

What if I only find one bug every year? 😂

[jagged storm]

Probably will still be okay. I abandoned the platform after about 2-3 months, and it still took them forever before they booted me lol

The fact that they remove people leads me to believe that they probably want to keep the user count at a certain level, so that might also be why they reject some people.

Maybe they're just at capacity.

[turbid bloom]

Or they want to maintain an active tester base so that their org still runs with good credibility

[jagged storm]

The veterans on the platform will never leave lol

[turbid bloom]

that's true lol

How do I join it though?

I wanna apply the things I learnt on HTB irl

[jagged storm]

Grab a cert and apply

[turbid bloom]

or I won't understand shit

[turbid bloom]

that easy?

once i complete the cjca path, im plaanin to do the isc2's cc cert

[jagged storm]

Well, it usually is. It was a while ago when I was in, and it might be harder now.

[turbid bloom]

oooh noice

[jagged storm]

but for just starting out, using any of the public bug bounty platforms is a better way to go

[turbid bloom]

thanks for that

[jagged storm]

even without certs, I imagine anyone who uses HTB and can even do most any easy box would be able to pass their skill tests.

[devout sail]

apply on deez

[turbid bloom]

oh daym that's nice

[turbid bloom]

what's that?

[devout sail]

not really
i had an interview where a guy asked me
if i have this webserver running in internal network, how can u "hack" it from outside of network, and "getting into network first" isnt the correct way according to him

[devout sail]

ask echoes

[turbid bloom]

[devout sail]

ask and see

[turbid bloom]

i think i get it

istg

[jagged storm]

You had an in-person interview for synack?

They did a one-way for me, and multiple boxes for the test.

[devout sail]

is that some niche joke

[jagged storm]

wat

[devout sail]

idk u mentioned synack

i had random interview at my work place

[jagged storm]

That's what we were talking about.

[devout sail]

ah

i came ans saw last 5 messages or something

[jagged storm]

Yeah, just meant that their tests are stupid easy.

[devout sail]

yeah plus my experiece (saw only 1 VAPT ever) was soooo dumb
anyone here with starting point experience can do it

3 day VAPT

the guy spent 2 days on pinging the IP

just pings

3rd day Nessus

[jagged storm]

https://tenor.com/view/you-what-wtf-disgusted-repulsed-reaction-gif-9521897686579036997

[devout sail]

and then whatever nessus suggested, he took it nmap -p XX ip and screenshot

i got pissed even tho i wasnt paying

i asked him if he always does that, and he said yeah

[jagged storm]

Top 1% THM

[gilded axle]

yo wassup anyone up?

[scenic maple]

[austere sigil]

be mto
google thm mto
first google result is about Microsoft Defender multitenant management

[scenic maple]

[austere sigil]

Not top 1% so I'm a failure

[bronze lion]

I agree

🗿

[devout sail]

me?

htb marketing team thought gavel was court stuff

[devout sail]

not their fault tbh

fuck im failure too

[bronze lion]

dont even remember the last time i opened thm

I think i have done like 3 or 4 rooms there

[austere sigil]

no you ain't

[devout sail]

MTO....cringe

[bronze lion]

https://tryhackme.com/p/0xMind

same

[devout sail]

not gonna click

nice

[bronze lion]

why lol?

[devout sail]

HTB doesnt have OG

[scenic maple]

bro is illuminaty

[river adder]

Hello everybody

[edgy obsidian]

Hey, can someone tell me where I can contact support- im experiencing a bug on the platform where I am unable to start a PWNBox even after months of being off this platform.

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[edgy obsidian]

<3

[bronze lion]

Golam ur thm? @scenic maple

[manic gazelle]

hi

[devout sail]

goot add another ghoul in that pfp for u

[river adder]

I want to buy a notebook just for pentesting, do you guys have any reccomandations? Budget around 400/800$

[bronze lion]

a notebook?

[terse dirge]

Don't handwrite your notes vro

Obsidian is free

Markdown is great

[bronze lion]

a notebook for 400 dollars?!

[supple plume]

I just openend thm discord server to see what they're doing and I see this

[edgy obsidian]

wha

[bronze lion]

typical day in thm general

[bronze lion]

whts tht key logo on top?

[supple plume]

Idk

[supple plume]

Oh on my phone

[supple plume]

It means I'm connected to the proton vpn

[zealous charm]

sekur1ty

[bronze lion]

weird

mine shows a diff logo

maybe it changes from devices to device

¯_(ツ)_/¯

[severe falcon]

Tired

[split patio]

supp

[scenic maple]

Dont have any activity

[bronze lion]

Hardcore htb user fr

[rancid quail]

Halllo, im new

[sturdy thistle]

hi new

[rancid quail]

Ola

[edgy obsidian]

its ironic to think hackthebox was founded in my home town before i moved

[zealous charm]

any hacking today?

[silk coral]

hello

[west venture]

Soooo apparently Claude found 500 0day vulnerabilities in a day...

Are we cooked

[silk coral]

i am solving 2million room today

i can ping the ip address and also can ping the hostname after adding it to the /etc/hosts

but when i try to open url it just keep loading and nting opens

[zealous charm]

only 500 that they chose to blog about lol, that doesnt include all the BB hunters and vuln researchers

[terse dirge]

This one is better

[west venture]

Are you sure it's running a web server lol

[west venture]

They're just going to keep getting better

[silk coral]

80/tcp open http syn-ack ttl 63
|_http-title: Did not follow redirect to http://2million.htb/

[west venture]

Does the browser just keep loading and doing nothing?

If so try resetting the box

[terse dirge]

Idk it struggled a bit to write tests for my La Chao Tree code

[terse dirge]

Yes you need to add it into your /etc/hosts file

[silk coral]

already did

[west venture]

Isn't that a data structure to classify like data over time or something like that?

[terse dirge]

Idk, data science is for nerds tbh

[silk coral]

@terse dirge

[terse dirge]

I still kinda wanna become a botanist and abandon cyber

[terse dirge]

Ok?

[green kite]

hello chat

[silk coral]

still not loading

[west venture]

Like I said, reset the box

And try again

[terse dirge]

Too many old heads that won't listen to the amazingness of kubernetes and say "trust me it's overcomplicated and not worth it" like bro I'm the one who installed the shit and messed with it ofc ik how it is

[jagged storm]

Different one. My account was deleted ages ago lol

[terse dirge]

Kubevirt is peak btw chat

[silk coral]

still not woking and i am facing this issue in all the box

[green kite]

did you download the vpn file?

and connect to vpn

[silk coral]

yes

[green kite]

re-download it and make sure you ran the correct one 🙂

[west venture]

To what /etc/hosts file have you added the hostname to? You need to add it to whatever VM your connected to the VPN to

[terse dirge]

Get rid of the http:// part of the host if you haven't in your hosts file

[rare monolith]

i love my little kubernetes cluster which is barely breathing on a total of 8 cores and 16GB of ram

[silk coral]

@green kite able to ping the hostname but its not loading

[west venture]

Curl it?

[silk coral]

connection time out

[terse dirge]

The cluster I set up has 1.4 terabytes of ram and 104 cores

[devout sail]

gimme .4 tb of ram

so u can round it up

[dusky smelt]

have you tried to change from TCP to UDP or other way around?

[silk coral]

can curl with ip address but not with the hostname

[terse dirge]

We don't talk about the state of the root filesystem tho, the disks weren't partitioned properly

[rare monolith]

🤤🤤🤤🤤

[jaunty pagoda]

What browser are you using and have you flushed DNS?

[west venture]

If this happens in all the boxes then it's something wrong with your end. Try using a completely different browser

[rare monolith]

rammmm

[severe falcon]

Bros rich

[terse dirge]

It's great but it's all on hardware that's 10 years old lmao and DDR 3 ram

[severe falcon]

Wait, ayoo

That much ram

[terse dirge]

No it's the cyber range's stuff

[severe falcon]

Also hi.

[dusky smelt]

hi

[rare monolith]

lol 1tb of ram on DDR3 is crazy work

[severe falcon]

You skid been away for a long or it was just me being unactivated

[severe falcon]

Blaaz

[rare monolith]

ey if it works it works

[terse dirge]

I'm also on gigabit network in there so storage on ceph is shit

[dusky smelt]

too long sadly..

if you're asking me

tried escaping it with a kobold machine, got stuck harder in it than in skid rank 💀

[west venture]

Try entering the IP address in the browser directly

[rare monolith]

what limits you from getting a bigger bandwidth the networking devices or the ISP or perhaps the cables ?

[terse dirge]

Hardware and cables

All the servers only have gigabit nics and all of the switches are gigabit

Cables aren't fiber is all I can tell you I'm not a network guy tbh

[west venture]

The switches are cisco

[silk coral]

used TCP VPN file now its woking

[terse dirge]

We have a mix of Cisco and other stuff I think

[silk coral]

@dusky smelt thanks

[spark mulch]

Cisco lol

[silk coral]

can anyone tell me that MTU smting smting command

[west venture]

Huh

[terse dirge]

The gateway and DNS server is made from scratch which annoys the crap out of me because it breaks frequently

[dusky smelt]

yeah you're welcome, I had the same problem few months ago and when I changed it from udp to tcp (or other way around) it worked fine everytime after that

[terse dirge]

All because we need this schizo Mac address filtering even though it doesn't really work

[west venture]

You have a DNS server?

[terse dirge]

Yes we love dns. And only use DNS

[spark mulch]

someone post the DNS fancam brainrot video

[west venture]

You can use Google s DNS server

[spark mulch]

not for internal hosts you can't

[west venture]

How many hosts do they have to need DNS internally

[spark mulch]

🏖️

[terse dirge]

All of them

The model is a hybrid cloud but its mostly fairly self hosted

[west venture]

Running a DNS server at home is crazy lol

[terse dirge]

Well the cyber range isn't a home lab lol it's a place you can go to to learn cyber

Mostly Linux because of the amount of invisible hurdles in the place to actually set stuff up or want to do something in there

[west venture]

Oh okay

[spark mulch]

Jumbo Frames make packets heavier just spins around in my brain all day

[terse dirge]

We have 2 proxmox nodes in a cluster that use a Network share that's over NFS and it runs backup jobs every Sunday to another network share or in other words the entire network is nearly unusable for 32 hours

[dusky smelt]

https://tenor.com/view/yes-monkey-gif-17161736773310556283

why is it not working I forgot

what do I need to have for this

[terse dirge]

For some reason it locks up the whole network but that's probably because we don't have any vlans and it's completely flat

[spark mulch]

well vlans are institutionalised discrimination anyway

[terse dirge]

Vlans are fake!

They're virtual meaning they're not real guys, it's all Cisco and mikrotik propaganda

[rare monolith]

aww

that sucks ngl

[rare monolith]

[terse dirge]

We also don't have a VPN server instead we just passing through public IPs gotta have tls on absolutely everything for security

[rare monolith]

pi-hole is a DNS server and you set it up quite easily

[frigid mountain]

😄

[rare monolith]

can’t you make a VPN on the end router ?

or maybe the router doesn’t support it

[rose onyx]

No issues here bor, on Fedora 43, I play all my games just fine. Probably pebkac.

[rare monolith]

or it has 8 million CVEEs

[terse dirge]

Well yes but actually no. I'm not allowed to touch the gateway

[rare monolith]

oh alright

[terse dirge]

But you could technically set up wireguard on it

Also the person who made the gateway would say how VPNs are bad and how wireguard is actually a liability

[spark mulch]

fedora is what happens when you let IBM into your house

[rare monolith]

yeah if it supports it you probaly could or just forward a port to a VPN server on like idk Ubuntu Server

[rare monolith]

yeah i don’t know if that’s true😔

[terse dirge]

Can't port forward either because I don't have access to the gateway. I do have a wireguard server but it's locked down heavily and you still have to go through their shitty system to access it

It's as close as I can get

[rare monolith]

oh well

seems like you can’t do anything really then

[spark mulch]

sounds like you're havinga great time @terse dirge

blissful, flourishing etc

[rare monolith]

i heard someone using claudfare tunnels for a workaround if they don’t have the access to the gateway and then make a VPN there or something idk

I never researched that 😅

[terse dirge]

It's unpaid work. 🥀

I'm looking for work now tho and have been getting rejected

[spark mulch]

maybe HTB will hire you

how do you feel about spending a few months fixing the wifi labs

[terse dirge]

My old job was making content for cyber outreach for a college and the cyber range but the whole content engineering thing isn't for me

[spark mulch]

how about picking strawberries

good honest work in the sun

[west venture]

You can hire me to look for jobs for you

[terse dirge]

I will happily become a plant person by doing botany

[terse dirge]

Nah. I just apply to as much as reasonable on LinkedIn

I get past the filters sometimes but then they send me an email saying "nah, we're going with someone else"

[west venture]

lol

[lofty marsh]

Yooooo wsg wsg

[west venture]

I completely paid all my college debt and other debt with all my savings and I am 100% debt free now and also 100% broke

[lofty marsh]

Oh shi

Speaking of that

Do they do internships?

[terse dirge]

Even entry level positions are kinda fucked rn. All I've been applying to are junior level/internship dev ops, soc work, and security engineering

[spark mulch]

entry level positions don't exist, 10 years experience positions are offering mcdonalds salaries

[west venture]

So I desperately need a job in cyber security and if I continue to not find one, I am going to do things that are not in allowed in the constitution within a particular legislation

[terse dirge]

Real

[spark mulch]

that seems like a bad strategy

[terse dirge]

Become a goat farmer or botanist instead

[hoary dawn]

Man

It feels like I haven’t slept once since learning this stuff

[terse dirge]

Gotta return back to nature from the tech industry

[hoary dawn]

Between real work and trying to squeeze this in as a hobby not realizing how hooked it’d have me

[west venture]

I don't have land

And land is expensive

I also don't have goats

[terse dirge]

Botanist?

You'd probably be doing research at a botanical garden or in a research facility

[west venture]

Go to college all over again and get in debt for a botany degree...

[hoary dawn]

That’s gotta be a sweet job

Surrounded by lovely plants, gotta be having a real bad day to be mad there

[terse dirge]

You could make a reskinned kibana UI and elastic stack and resell it as your own 👀 do what clownstrike and every other soc solution company does

[spark mulch]

um excuse me it's noot reskinned kibana

[jagged storm]

https://tenor.com/view/seymour-skinner-the-peanuts-steamed-hams-devilish-delightfully-devilish-gif-15950427

[spark mulch]

it's crowdstrike NEXT-GEN SIEM

i love crowdstrike's proprietary take on the concept of "community id" too

wherein they only ever relate to a single event, rendering them functionally fucking pointless

[west venture]

If you could self learn that it would be great

[terse dirge]

Or wrap a bunch of AWS services and start your own cloud platform

[latent oak]

I built my own NEXT-GEN SIEM

😉

[fierce vale]

SIEM on the blockchain

decentralized!

[spark mulch]

i wish crowdstrike would work on improving their core features that actually make them worthwhile instead of spending all their time tweaking the UI and adding functionally useless garbage

[latent oak]

Actually I built one for IBM (with several other people / teams of course)

[fierce vale]

also AI

[zealous charm]

S(AI)EM

[latent oak]

Got sold to Palo Alto a couple of years ago...

[jagged storm]

https://tenor.com/view/cat-mod-discord-kick-mute-gif-495505587681287181

[west venture]

Did you get to omniscient by only doing boxes?

[latent oak]

eh? You have to do all the challenges too

[terse dirge]

Never knew Palo Alto had one tbh. I thought they just had an IPS and IDS solution and firewalls

[spark mulch]

Put that in your | and ...

[signal mica]

Sounds awesome, can you tell us more

[latent oak]

haha... they have something, but they bought IBM QRadar on Cloud and NextGen SIEM

[signal mica]

Omni>cpts>oscp>ceh

[latent oak]

https://www.paloaltonetworks.com/company/press/2024/palo-alto-networks--closes-acquisition-of-ibm-s-qradar-saas-assets

[spark mulch]

PA piss me off too

hell they all piss me off

Literally none of these products are superior to fucking grepping a directory full of logs in a unix box

[terse dirge]

That's pretty neat

[latent oak]

@spark mulch not really

[jagged storm]

Bro hasn't tried to grep 20GB of logs

[latent oak]

you can grep the logs, but can you easily tie a flow together to do behavioural detections?

[west venture]

I wanna do CPTS, OSCP, CEH, CCNA, Network+, Security+ and CBBH. So I am irresistible to employers.

[spark mulch]

I assure you i have lol

[sick gate]

its a simple as grepping logs

[latent oak]

"Failed Login" is one record... it's when you see several than then a success, then you see a new port opened up, or unusual volumes of DNS traffic... you start to get a clear picture of a potential incident.

[signal mica]

With that argument id rather reach omni and the money spent on certs would be put on black

[west venture]

cat log | grep <what you want>

[signal mica]

No

[jagged storm]

cat -> grep is a crime

[latent oak]

logs are key, of course, but a single log record has limited value

[spark mulch]

It depends what level of isolation we're talking here. In a vaccuum? no of course not. But if you consider all the implementation, data modelling, query building etc you have to do to actually get to the point where you're implementing detection logic in the SIEM In the first place and sum that all together, on balance actually yeah I think it's probably easier with some POSIX / gnu utils lol

[signal mica]

Grep "password" file.log

[west venture]

Yes

[sick gate]

grep machine learning

[spark mulch]

take this as mostly hyperbole about the overengineered "productized" state of the tools that have become ubiquitous in corpo security

[jagged storm]

https://tenor.com/view/well-yes-but-actually-no-meme-aardman-the-pirates-pirate-gif-26563702

[signal mica]

Veggie post a video of you catching your first tube

🏄‍♂️

[latent oak]

@spark mulch I build a siem for my homelab... my detections are all in yaml. It's knowing what to search for and tuning that is difficult. A SIEM makes it easy to hire a bunch of SOC analysts who can sit and watch a dashboard, then click on "incidents" to investigate, it takes them out of the weeds and saves time. Yes, a talented individual can find the same info, but at what time / cost?

[sick gate]

post a video of no

[west venture]

I love to pipe it's so satisfying

[latent oak]

I agree though... setting up the detections is tiring and tuning them properly is a pain point

[jagged storm]

The knights of standards and practices will haunt you

[spark mulch]

ok but when you buy a SIEM, someone's got to implement those detections, know what to search for etc anyway. In many cases, that's the expectation on those very SOC analysts (depending on org size. larger might have some dedicated detection engineers0

[latent oak]

right!

That's why other companies like Arctic Wolf sell SoC as a service

basically, they will set it up and run it for you

[west venture]

https://tenor.com/view/is-that-suppose-to-scare-me-wednesday-addams-jenna-ortega-wednesday-am-i-suppose-to-be-scare-gif-27433178

[spark mulch]

like i'm looking at it from the perspective of a single, competent computer toucher. If you were the only cybersec employee of a large organisation (silly hypothetical i know but let's run with it for funsies) would you rather have to configure and implement splunk, or just have a RAID array of logs to grep through

[latent oak]

some detections are available out of the box, but when you turn on behavior analytics, it's very noisy

[spark mulch]

i'd feel so much more zen with the latter

[jagged storm]

They will appear to you tonight as 3 ghosts, who will code in front of you in notepad++, in light mode, until you understand

[sick gate]

configure and implement splunk lol

[latent oak]

I just built my own lightweight SIEM, it capturese data from my firewall, my switch, and my pihole atm

The UI is Grafana

[spark mulch]

i was gunna say that's cool until you said grafana but it's still cool

[latent oak]

haha

[sick gate]

ive been in that position and done that

not a large per se

but a lot of data

[latent oak]

I'm only keeping 7 days of data

[west venture]

Oh my sweet summer child. My terminal is pure white, rat. You think I AM in danger, no I AM the danger.

I use light mode

[spark mulch]

working entirely from rc in plan9

[west venture]

I code in python IDLE

[jagged storm]

https://tenor.com/view/subrote-picard-no-law-to-fit-your-crime-all-somethings-everywhere-law-gif-22005049

[latent oak]

Those are a couple of my dashboards

[signal mica]

Let meee fork

[spark mulch]

lol

[latent oak]

@signal mica I need to clean up the repo, but I do plan to open-source it

[spark mulch]

cron jobs to grep over logs, with a webhook for alerting, telnet for incident response

[latent oak]

it's running on colima on my mac mini

[fierce vale]

I made a grafana dashboard for suricata alerts too.. not sure if I prefer it over just kibana.. but doable

[jagged storm]

https://tenor.com/view/bye-cat-meow-chat-gif-14778852254694362862

[dawn aspen]

FYI - SysReptor Service status

We are upgrading our hypervisor platform on Wednesday, 25 March, between 08:00 and 11:00 GMT.
During this time, brief service interruptions may occur. Based on preemptive testing, any downtime is expected to be short (less than 15 minutes).

You can track our current service status here: https://status.sysreptor.com/

[waxen prairie]

My fellow chads, hope everyone is doing well.

[west venture]

Does the HTB rank actually matter professionally?

[spark mulch]

unacceptable. I want a refund and you owe me a car

[scenic maple]

bro leaked the ip

[spark mulch]

all is forgiven