general

[graceful pendant]

chaining etc

[neat wharf]

Which version of windows has least bloatware and issues

[graceful pendant]

differnt PoCs

[graceful pendant]

linux

[iron galleon]

Windows 10 IoT Enterprise LTSC iirc

[rancid snow]

nah, triagers dont necessarily have any actual security knowledge, you're giving them too much for their pea brains to process.

it needs to be just 1 script that does everything.

Like assume you need a thm newbie to run the exploit levels of hand holding

[neat wharf]

Aight

[iron galleon]

it's on massgrave.dev

[neat wharf]

Its getting regular updates as well na

[iron galleon]

ye

security updates

[worthy cargo]

https://www.youtube.com/shorts/qql7L8A1DXc

Something odd about the eyebrows

Why did they magically get so thick

[iron galleon]

why did his eyebrows get bigger

yeah

[graceful pendant]

I wrote 6 pocs to hold every aspect of the hand

its not that straight forward with kernel bugs

[signal needle]

hello every body anyone can help me with browsed ?

[worthy cargo]

#boxes ?

[rancid snow]

nah 6 scripts definitely assumes the person reviewing is capable of logical thought.

Id bet money that theyre not running each of those scripts or applying the right one for the right situation.

Theyre running maybe the first one regardless of configuration and if it doesnt work they'll say your PoCs dont work.

Proof? You had to push back on a one sentence reply that missed the point entirely.

[neat wharf]

Turns out i have done most of settings for LTSC manually except the getting update part

I want a machine which is not windows but gives good gaming performance

[hoary dawn]

damn htb gaslighted me into thinking seclists just comes with the system

[sharp shuttle]

SteamOS?

[worthy cargo]

It does come with the system

it's in the repos

[rancid snow]

@graceful pendant and to be clear. I completely believe your report is high quality, Im just severely doubting the capabilities of apple triagers lol

[hoary dawn]

on a few

[neat wharf]

I dun think we can play epic

[sharp shuttle]

its on parrot

[worthy cargo]

you have to install the package

[hoary dawn]

not mint

yea i am rn

[little gull]

Well it's not a question from HTB platform but from my schools platform

[worthy cargo]

on kali it does

[sharp shuttle]

ah sorry cant help you then

[hoary dawn]

oh neatsy

[worthy cargo]

Can't help you solve homework problems or school related stuff

[eternal mango]

You can

[worthy cargo]

That's not allowed here

[little gull]

Alr then

[eternal mango]

There are a few launchers out there for some third party stores like that

[graceful pendant]

I think it also is important that the sheer volume of reports they recieve

[neat wharf]

Time to devlop that system
Hows that for a startup idea

[eternal mango]

Heroic Games Launcher for one

GOG and Epic

[worthy cargo]

GOG MAGOG

[eternal mango]

I love my deck

😄

[worthy cargo]

Wow

No memes for the TV show andromeda

[hoary dawn]

not even a package on mint

[worthy cargo]

or the magogs race

[hoary dawn]

gotta clone from git 🤣🤣

[rancid snow]

for sure, but just saying from what Ive heard from a high-cve output friend that apple has been one of the worst to report bugs to, with google being a bit better, and Microsoft surprisingly being the best

[little gull]

Well then where can I ask for any help

[eternal mango]

Haha magog

I did enjoy that show

[neat wharf]

Its crazy to think how steam OS made all their games compatible with linux using some proton software

[sinful mesa]

Ok, guys so I was having trouble yesterday trying to load websites from the machines. They were just hanging forever. I did a bunch of stuff trying to fix it and I broke DNS on my VM. So I fixed by doing this:

1. Disabled NetworkManager DNS management
   So it stops overwriting our DNS config.
   sudo nano /etc/NetworkManager/NetworkManager.conf

Add under [main]:

dns=none
CTRL+O; CTRL+X
sudo systemctl restart NetworkManager

2. Pointed resolv.conf to localhost
   So all DNS queries go through dnsmasq instead of the network's DNS server.
   sudo bash -c 'echo "nameserver 127.0.0.1" > /etc/resolv.conf

3. Configured dnsmasq: So it reads /etc/hosts for HTB domains and forwards everything else to Google DNS.
   sudo nano /etc/dnsmasq.conf

Add:

server=8.8.8.8
server=8.8.4.4
listen-address=127.0.0.1
bind-interfaces

4. Started and enabled dnsmasq: So it runs now and automatically starts on reboot.
   sudo systemctl start dnsmasq
sudo systemctl enable dnsmasq

[eternal mango]

Freakin Kevin Sorbo

[worthy cargo]

You can't ask for homework or school related CTF help here on this server. I'm not sure where you can ask.

[sinful mesa]

But that wasn't it...

[little gull]

Where are you supposed to learn then?

[hoary dawn]

oh fuc he got us with a cliffhanger

[rancid snow]

....did you add the domain to your /etc/hosts file

[sharp shuttle]

Just make openclawd but for gaming ai's that crush real people

[worthy cargo]

What are you trying to learn? There is HTB academy for learning and doing #modules

[rancid snow]

you can learn here you just cant get help cheating those things here.

If youre smart though you can figure out how to ask your questions divorced from the context of your homework to learn the concepts and then apply that info to your homework instead.

Like nobody made you admit what it was for

[sinful mesa]

I discovered that I still couldn't load websites if I cleared the cache. So basically, if I tried going to trick.htb it wouldn't load. But if I added http:// then it would load normally after a few seconds. So basically this: http://trick.htb. The thing is that after it loads, you won't have to add http:// because the browser know where to go. I feel so dumb.

[neat wharf]

Imagine if steam machine is 1000$

I ll buy pc then

[rancid snow]

cause your browser default assumes https which is a diff port

[worthy cargo]

Are you sure the browser isn't defaulting to https on port 443 and it fails because the box only listens on http/80 so you have to specify http manually. Seems normal to me

[little gull]

I have a CMS website that I need to get into (using metasploit) and then get into the root home folder and get the flag

[worthy cargo]

So here no one will help you solve challenges/CTFs from other platforms.

[sinful mesa]

Anyway, so that's it... someone else might stumble upon this in the future.

[hoary dawn]

hey id say metasploit and searchsploit makes it pretty easier than it has to be 🤣

lucky that they are even options haha

[neat wharf]

Which laptop company is most trustworthy with gaming laptop

[eternal mango]

If it's for school, speak to your fellow students, or reach out directly to your tutor. I'd say hit up Academy to learn more on the subjects, but I imagine you don't have the time right now.

Nothing wrong with asking for help, or just a chat about the subject with your tutor

[rancid snow]

1. find version number
2. google version number cve
3. search metasploit for cve
4. mash keyboard until it works

[hoary dawn]

shit i just been directly searching service and version in the msfconsole

💀

[worthy cargo]

Randy Walters is a son of a bitch, whoah oh

That's why I fucked his wife and got filthy rich, whoah oh

[signal needle]

anayone can help me on browsed ?

[worthy cargo]

fix my door, fix my door
stop stealing my dough, stop stealing my dough
stop disconnecting my video

[rancid snow]

actually yeah do that. its been so long since Ive used a metasploit exploit for something lmao

[frail turtle]

https://tenor.com/view/fast-cat-typing-gif-25546751

[eternal mango]

Last I used it was oscp a decade ago lol

[rancid snow]

do people even bother making metasploit modules anymore for anything other than eternalblue massive doomsday bugs?

[little gull]

Well it's not a homework, there is this platoform that my school got from some kind of company, noone realy is an expert in my school in cybersec. This thing Im doing is only for education nothing else. But this one ctf is out of my reach for like 20 hours and I feel like I'm so close

[rancid snow]

like youd have to code in ruby bleh

[hoary dawn]

well now you got me confused, maybe msfconosle is for searching cves and searchsploit is for searching versions/services?

i feel like ive gotten results for searching service names though, so idk haha

[eternal mango]

Ewwww (I did make a module once.. only once)

Never again ruby, never again

[rancid snow]

searchsploit combs exploitdb and gives you more than just metasploit stuff

[hoary dawn]

ahhh ok makes sense

[rancid snow]

so you can get one off python scripts n stuff from it

[hoary dawn]

but msfconsole is prettier 😒

[eternal mango]

https://www.cvedetails.com/

[hoary dawn]

i like those features though, it definitely makes cybersecurity all the more interesting, seeing how much god damn stuff literally comes with these systems

[eternal mango]

One of the better aggregators out there imho

[hoary dawn]

i can finally stop larping and claim that the CIA has access to every device automatically at the tip of their fingertips

[gilded fern]

better 🤞🏻

[hoary dawn]

because now ive learned that they just have methods for doing every device and thats what it really is

so youre technically safe, until they look at you as a target 🤣

[worthy cargo]

One solar flare and we're all back to the stone age, mr hackers

[hoary dawn]

wikivault 7 is interesting

[eternal mango]

Are you looking forward to it as well?

😄

[worthy cargo]

😄

[hoary dawn]

https://en.wikipedia.org/wiki/Vault_7

even vehicle control methods

pretty rad

[rancid snow]

friendly reminder for people to read the I Hunt Sysadmins Memo from 2011 and remember that tech is 15+ years old

[supple plume]

Machine submitted

Tomorrow I will try the htb vdp probably

[worthy cargo]

congrats

[rancid snow]

I like to poke at it from time to time, I recommend it

[hoary dawn]

read it

thats funny

[rancid snow]

htb uses a lot of third party stuff that would otherwise be interesting though 😭

[neat wharf]

I am seeing mostly rtx 5050 in laptops. How much performance difference between 5050 and 5060

[hoary dawn]

they basically said targeting the human will be better than targeting the system because systems are smart and humans are dumb

🤣

[worthy cargo]

huh

interesting

[hoary dawn]

the hunting sysadmins thing

[worthy cargo]

so humans are dumb, you say

[rancid snow]

ah no you skipped the interesting part

[turbid goblet]

guys if i was a file what linux directory would u put me in? 😉

[hoary dawn]

most interesting thing i got out of it was that theres more social engineering in cybersecurity then they want ppl to know

[eternal mango]

What's up @crimson crag, you can ask here instead of trying to DM

[rancid snow]

the interesting parts was

1. They find that targeting people who already posssess large amount of access to be more effective long term, even if it means indirect targets.
2. They can just load up targets en queue for automatic exploitation. Particularly getting through Facebook or webmail, whatever, just QUANTUM their ass

[crimson crag]

Good day, My name is ochi Livia
I dont mean to offend, I'm hoping to learn, I just got a laptop not that long, but I seek guidance

[hoary dawn]

ah yea that 2nd one def interesting, the 1st one should be known to all, like if i was a blackhat hacker and i had to get into some crazy companys servers, i would def think about targeting who has access to that server, and not the server itself

[worthy cargo]

I need a new laptop

[hoary dawn]

thrift store you never know

thats where i got the one im typing on right now

30 buckaroos

[crimson crag]

I study in an open university, just entered my 3rd year in computer science, but I need skills that could land me a job, even remotely

[worthy cargo]

buckaroo bonzai

[crimson crag]

@eternal mango

[hoary dawn]

Standing strong

[worthy cargo]

i have a laptop but the hinge is totally broken off so it is hard to open/close

it's from 2012

I think

Toshiba satellite 17" core i3

[hoary dawn]

perfect brick setup man haha

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[eternal mango]

👆

[hoary dawn]

Opening day for mlb today

[worthy cargo]

https://www.youtube.com/shorts/JvnVKlFPV58

[hoary dawn]

And I didn’t get to place any bets

🤞🤦‍♂️

[worthy cargo]

what's up with those eyebrows

[crimson crag]

Thanks, I'm grateful

[hoary dawn]

Yall seen druskis newest skit

😂😂

[frail turtle]

the appendix is not a useless

organ

I fucking knew it

[supple plume]

Yeah the body has nothing useless imo

[hoary dawn]

I love Mother Nature

[worthy cargo]

your face

is a useless organ

[rancid snow]

your reproductive organs are tiny and unused

[worthy cargo]

lol

[turbid goblet]

i mean i use it alone

[hoary dawn]

Listen it’s a situational thing

[rare monolith]

https://x.com/0xw2w/status/2037026369822241217

lol

crazy stuff

now we can really earn money 💰

[eternal mango]

Bills dolla bills money money

literally

[turbid goblet]

who playing tomodachi life

[rancid snow]

@terse dirge just got a spicy battery macbook in rn lul immaculately clean and good thermals but it was practically popping the case off from swelling

[hoary dawn]

What is going on with the White House social media posting speculation

[spark mulch]

aliens.gov

[hoary dawn]

People saying that accidental-looking videos were uploaded on their instagram today

I heard that too

They registered that domain recently

Things are getting very interesting in this world man

[iron galleon]

just a hidden social network's way of fucking regular people over

nothing more

[molten bobcat]

Holy bomb

[turbid goblet]

i like how my job gives me a 20$ uber gift card for appreciation as it that is enough money for uber

[rancid snow]

avg day for me

[hoary dawn]

i wonder what the accidental videos were about though

they mention "launching soon" in it

kind of ironic, almost makes it seem like the post literally wasnt even accidental lol

[spark mulch]

it wasnt

[hoary dawn]

yeah, white house page, impossible, probably got a room with 20 people monitoring the posts as they are made

literally couldnt have been an accident even if they tried

[eternal mango]

I think you over estimate their QA

[hoary dawn]

🤣

aliens.gov hm i wonder when it will be out haha

[fierce vale]

distractions

[iron galleon]

ah yes let's reveal something crazy to the population to distract from the real issues

[hoary dawn]

well what are they distracting us from i mean what are we doing as regular people besides our usual every day activities

they would want to distract the people who can actually do something to them

which isnt us

so thats not it haha

[broken flame]

has anyone seen walmart digital price tags yet?

i realize how american that question is and acknowledge, but still, i gotta know

[hoary dawn]

as long as you got half a brain, you can handle all the scenarios theyre throwing at us 🤣 the distraction thing isnt really too reliable to call it out for

[eternal mango]

I've seen e-ink tags starting to pop up in some chains here

(UK)

[broken flame]

e-ink

[eternal mango]

Yes, those black-white low power zero power persistent displays

But ok, what are you talking about?

[hoary dawn]

i need to pick some of those up for my electronic projects

[iron galleon]

ballot box, lobbyists/investors

powerful people who have a sense of morals, etc.

[hoary dawn]

yea exactly, im gonna be a little curious about it and most definitely deep dive into it as my regular self though, they aint distracting me from nothing but making a pizza or turning on netflix

[broken flame]

i'm talking about this. e-ink is just an absolutely ironic thing to call it. well, there's speculation of big box retailers using those digital price tags to dynamically set prices for people who walk by them., based on a privacy-invading individual profile for each customer

[eternal mango]

It's what it's called..

[hoary dawn]

they actually call it that on hardware catalogues

or e-paper

[iron galleon]

i mean weigh an alien invasion vs the epstein files

an attack on california or epstein files

[eternal mango]

Electrophoretic Ink

[iron galleon]

economic collapse or the epstein files

[hoary dawn]

epstein files will never go away i dont think

it does seem liek the world is forgetting about it though with all the stuff thats going on

[pliant pumice]

battery looks like it's gonna explode

[hoary dawn]

but thats just the pea-brain world we live in sadly

[broken flame]

it better not until something is actually done about it

[eternal mango]

But ok, to the point.. that is so scummy

[broken flame]

oh it's the absolute worst.

[hoary dawn]

no way, like when a larger person walks by they will up the price for junk food, etc?

[broken flame]

yes

[rancid snow]

yeah fortunately its too dead to explode unless someone punctures it lul

[hoary dawn]

when a muscular person walks by, up price for da ground beef

[rancid snow]

brought in as 'not booting'

[eternal mango]

No way is that in any way legal, bloody hell

That's crazy

[worthy cargo]

it's capitalism

or something

[rancid snow]

but its an old macbook, just gunna yoink drive and copy data

[eternal mango]

Surely it'd tread on discrimination law?

nfi, I'm no lawyer

[pliant pumice]

LMAO

[eternal mango]

But it smells so bad

[pliant pumice]

guys cop or drop?

[worthy cargo]

drop

[hoary dawn]

what if the alien domain ends up just being immigration tho lowkey

[pliant pumice]

looks nice but so expensive..

[iron galleon]

where do you normally walk

[eternal mango]

A GRAND for shoes?!

[iron galleon]

like routine wise

[pliant pumice]

wdym

[worthy cargo]

i never understood the need to wear other people's names on your shoes

[pliant pumice]

yeah LOL

i got a rolex coming in iced out

[worthy cargo]

louis voiton

[iron galleon]

you know, like trails and stuff

[worthy cargo]

like who gives a rat's ass

louis my ass

[pliant pumice]

the trails i run is security trails 😉

[iron galleon]

bc im tryna steal those shoes

[pliant pumice]

LMAo

i really wanna buy it but i dont wanna spend 1k on shoes

thats like 1.4k usd

[broken flame]

there's a lot wrong with a pair of shoes that costs that much

[rose onyx]

The haves vs the have nots

[pliant pumice]

true LOPL

just the design is njice

[pliant pumice]

but white gets dirty so easy

i dont think theres a point

[iron galleon]

where do you even get that kind of money

[hoary dawn]

get em on dhgate and just dont tell nobody

[iron galleon]

normally it's like com with stolen crypto wallets blowing it on that typa shi

[worthy cargo]

https://giphy.com/gifs/comedycentral-south-park-midnight-amy-schumer-RDU3fptyOr9W8

[hoary dawn]

internet money or scam money or just good job

[pliant pumice]

yeah

i used to do shit i got my devices seized 2 months ago

[sick gate]

All LVMH is artificially inflated and run on the backs of slave labour. Cop

[broken flame]

you don't buy those shoes because they look nice or are comfortable, not at that price. you buy them because of the price. it turns out to be a symbol more than an aesthetic. i wonder when that became the cool thing to do.

[pliant pumice]

i was in com hella long ago, administrated doxbin for a little then moderated the forum for a while had a lot of services up

and ppl used to dm me everyday

[iron galleon]

it's only them blowing it on that kinda shit bc it doesn't financially make any sense

and they get arrested bc of how they spend etc

[hoary dawn]

you better have been a bin boy i hope it wasnt that com/ext stuff smh

[worthy cargo]

what is a doxbin?

I'm guessing it's a pastebin for doxing people

[iron galleon]

it was just that

[pliant pumice]

nah the bin boy was cringe

[hoary dawn]

oh noo you was in com

[pliant pumice]

i was just friends with everyone

[hoary dawn]

good that you are away from it

[pliant pumice]

oh extort? nah thats weird bro

[hoary dawn]

some people throw their whole life away before it even starts doing that

[pliant pumice]

they do it to children thats disgusting

[hoary dawn]

yea i know its becoming a trend

its very frightening

[pliant pumice]

yeah it is

[pliant pumice]

it is yeah, ever since i got the door knock from the police i just told the guy in control to wipe me off the forum it was cool being friends for some years

but cant keep being around

[hoary dawn]

thats sick lmfao

connections like that

[pliant pumice]

yeah, i lowkey almost got into shit i stepped away

[fierce vale]

https://tenor.com/view/cyber-police-reported-report-reporter-police-gif-14718698980511019213

[worthy cargo]

where did the word 'dox' come from?

[pliant pumice]

no idea

[hoary dawn]

onion forum?

[pliant pumice]

probs

i mean hey, i love this part of the community i rather keep myself in hackthebox

than anywhere else

[eternal mango]

Hah noice, tool sent an advisory email 10 minutes ago.. just now the package author addressed the issue and revoked the creds that were leaked. Test successful

[hoary dawn]

urban slang for document

[iron galleon]

most com kids have nothing to do with tor

[pliant pumice]

yeah they sit in tele channels and be cringe 24/7

[hoary dawn]

yeah they just use pub databases and get basic info and scare the person with that

[pliant pumice]

thats so true

and then they just try to extort you for funds and stuff out of it

[hoary dawn]

yea the only reason it works is because the girls find it "hot" while its first happening

[pliant pumice]

personally i never cared when it happened to me i just tell em "suckle my balls" and hit the block button

[hoary dawn]

its literally so weird

then for the guys, shi, they just dumb

[pliant pumice]

the girls in com just attention seek

[worthy cargo]

what's 'com'?

[hoary dawn]

exactlyyyy it is scary how like dark stuff gets fantasized over kids games

[eternal mango]

commacommacommacommacomma

[pliant pumice]

place where youngsters are like wannabe hackers, commit fraud etc

some of them just larp a lot of stuff

[molten bobcat]

https://tenor.com/view/futurama-bender-robot-dance-gif-3521794

[iron galleon]

https://www.urbandictionary.com/define.php?term=com

[worthy cargo]

chameleon

come and go

[hoary dawn]

its basically a tik tok trend lowkey

[eternal mango]

The larping.. I don't get

It's such a waste of time

[pliant pumice]

i agree

[hoary dawn]

like it wasnt until it was now thats all it is and its growing sadly

[lime trout]

👀

[pliant pumice]

some people ragebait for it

[hoary dawn]

which is making moer people actually get into it for real instead of fake etc

[idle birch]

gives dopamine

just like talking about goals

[lime trout]

Kids wanna be cool

Fit in

[idle birch]

and that ig

[pliant pumice]

hey, i actually tried to down ur post on site a while ago but it got refused

[lime trout]

Explains a lot of things tbh

[eternal mango]

By pretending to be an absolute idiot?

[idle birch]

well.. they dont realize that obv

[lime trout]

But to them… it’s cool

[eternal mango]

🤷‍♂️ ok, each to their own

[turbid goblet]

ive been larping since 2004

[pliant pumice]

they pretened to be rich, flex fake money, use flashed crypto wallets to act rich, fake a lot of stuff

[turbid goblet]

its not a new word

[lime trout]

When you lack outside context things can be made to seem cool

[iron galleon]

basically the kids who live in suburbia trying to act hood but digitized

tldr

[idle birch]

so much larp its a crime

[pliant pumice]

but when u tell em send txid they just dodge cause they cant make it real

[eternal mango]

Just feels like self abuse to me

[hoary dawn]

these kids are literally getting rich off the larp accounts too

[pliant pumice]

yeah

[eternal mango]

but I guess I'm not them

[hoary dawn]

thats whats even crazier about it all

[lime trout]

Just ignore them tbh

[idle birch]

true larp forums were nulled.to and cracked.to but fbi shut down the larpers

[lime trout]

Anything more is a waste of time

[pliant pumice]

they also make "osint" tools and claim it's better than others

but they are all just same replicas using snusbase

api

[lime trout]

No they’re still around

[idle birch]

new domains?

[pliant pumice]

tjhey exist still

[lime trout]

Yeah

[pliant pumice]

yeah

[idle birch]

ah what are they?

[lime trout]

I have the displeasure of having to use them

[hoary dawn]

you really gotta go on tor if you want to find real insight like that nowadays, surface web has gotten so federal its not even funny

[idle birch]

what for?

[eternal mango]

Tor is a trap 😅

[lime trout]

Work stuff, lurking

[hoary dawn]

i trust it

[lime trout]

Watching

Analyzing

[hoary dawn]

i know the navy made it

[idle birch]

ah is leakforum.io the new one or whatever?

yeah seems like it

[eternal mango]

I wouldn't, I mean.. for getting past country restrictions for legit legal content, fine

[hoary dawn]

i do feel like its one giant honeypot.. but i trust it somehow

[idle birch]

its where most ppl start tho honestly

[eternal mango]

But anything illegal.. Tor is not trustworthy

[idle birch]

they have bad opsec there and they get caught later

[eternal mango]

Do I need to pull the video link again

[pliant pumice]

iconic posts the right information about these websites

[lime trout]

I mean it’s used for a lot of dumb shit

[eternal mango]

Well yeah

[lime trout]

The amount of smtp spam or ssh brute force abuse emails I get 😭

[eternal mango]

..but what I mean is, if you are a target by people with the resources to do so, it's no better than clearnet

[pliant pumice]

https://www.youtube.com/watch?v=L3JEP99zNR0

[hoary dawn]

hey i dont know ive bought a lot of stuff off of those markets

[eternal mango]

https://www.youtube.com/watch?v=rwawq8PsozU

[sharp shuttle]

nah guys tor is safe, i promise i dont work for palantir

[eternal mango]

Ok if you're just buying stuff hey

They don't give a rats ass

[lime trout]

Defence in depth

🤷‍♀️

[eternal mango]

That is a thing, yes

[lime trout]

It takes more effort to pop tor then your isp

[eternal mango]

I'm just saying that Tor is not safe

[sharp shuttle]

pop quiz: do you vpn before or after your tor connection?

[hoary dawn]

if you stumble upon a node they control they can get you can they not? but if youre not then youre somewhat protected?

[lime trout]

Nothing is

It’s all risk management

[idle birch]

loll

[worthy cargo]

https://www.youtube.com/watch?v=Wqkdj63zaWw

[lime trout]

Ehhhh somewhat

[hoary dawn]

i dont use a vpn with tor, i dont see a point

[eternal mango]

Man I was just trying to share some information

[lime trout]

Each node only knows the step prior and after, and they route via 3 nodes

[pliant pumice]

before

[idle birch]

ur onto something

[lime trout]

So they’d have to pop entry and exit

[eternal mango]

If you control enough of the network, your chance of compromising the route chosen by the client increases

[pliant pumice]

actually no

[lime trout]

And they specifically route via different asns etc to make it harder

[pliant pumice]

befgore

before*

[eternal mango]

Sure there is node trust which reduces the risk

[rancid snow]

the majority of tor attacks really only work if youre stupid and don't know about em

[lime trout]

I host a few exits 🫡

[eternal mango]

I hosted exit nodes for years also

I'm on that video saying as such.. with my hand

[sharp shuttle]

i was hired by palantir to host all exits for the state of oregon

including off ramps

[eternal mango]

It's not a matter of being stupid

[lime trout]

I have some in Quebec and some in Missouri

[eternal mango]

If enough nodes are in your control, and your target picks those nodes, those layers mean nothing

[lime trout]

Both in my own DC cages

[hoary dawn]

if u host ur own node doesnt that completely eliminate any chance they have at reading your data?

[rancid snow]

that only applies for exit nodes really

[eternal mango]

No it doesn't

[hoary dawn]

also i know unsecure sites will compromise you

but i dont do those

[lime trout]

I mean, it kinda does

[eternal mango]

No, it doesn't

[lime trout]

If you blend your traffic in

It makes it harder to spot

[eternal mango]

Oh my god

[lime trout]

Cause the exits are just spewing shit

[hoary dawn]

i try to take precautions, i havent maximized the window to full screen once

[fierce vale]

I remember watching talks about how to defeat tor with controlling the nodes a long time ago

[hoary dawn]

i feel like its the other stuff that you have to worry about, not really the nodes haha

like if you end up logging in with an account youve made in the past or something like that

[lime trout]

I mean in a security through obscurity sense

And or plausible deniability

[hoary dawn]

or talking about your personal self on a forum

[harsh canopy]

Do you know how now?

[eternal mango]

Watch the video if you haven't

[rancid snow]

realistically either all of tor is compromised and youre screwed anyways, or practicing good operational practices will avoid the typical attacks

[eternal mango]

Timing attacks and such have been reduced in feasibility

[pliant pumice]

guys just sit on mullvad

[eternal mango]

But if you control the nodes picked by the route of your target

You win

[pliant pumice]

Fax

agreed

[eternal mango]

If you can afford to do that, then if they don't pick exit entry nodes you control, it doesn't matter

[hoary dawn]

ah good i been long time user of mullvad im glad to see others vouch

[pliant pumice]

MULLVAD is by far the best option u should have as a VPN

[hoary dawn]

i will i have researched a lot about tor already but definitely will want to watch this specific video

[eternal mango]

Like.. imagine hosting your own exit node thinking you were avoiding being monitored on the Tor network by whatever

[rancid snow]

again theres the assumption youre using exit nodes to begin with.

Accessing tor services doesnt cross exit nodes

[eternal mango]

No, but they are breakable also

[idle birch]

i use nordvpn i think im good bro

[eternal mango]

I forget most of the research I did then when it boomed in usage

[pliant pumice]

FED VPN

[eternal mango]

But it was damn interesting

[ocean marsh]

dumb question, any reason to use tor if you're not doing something sketchy?

[rancid snow]

tor services get broken due to bad config or vulnerabile services

[pliant pumice]

i mean if u wanna get drugs, guns sure

[eternal mango]

Evading gov censorship

[rancid snow]

theres not any good tor level attacks against tor services

[ocean marsh]

valid

I see

[pliant pumice]

i;ve not touched tor in like many years

[ocean marsh]

tbh I downloaded once to see how it was

never understood the nodes thing and all that

[fierce vale]

used to host a node too

[eternal mango]

A lot was done to prevent timing attacks and risks regarding hidden services, but true 99% of the time a hidden service is taken down and the people behind it slapped is due to misconfiguration, vulnerability or social engineering

Things have probably changed a lot since I was more certain and knowledgeabl / active with Tor, so maybe I'm talking bollocks

[fierce vale]

cool way to blacklist your IP

[eternal mango]

..but I don't think all of what I've said is bollocks 🤣

[iron galleon]

https://tenor.com/r6XHOz3GKhD.gif

[eternal mango]

Used to do a lot of work monitoring, identifying and taking down malicious exit nodes many years ago

[rancid snow]

I dont think what youve said is bollocks either, just that people have known of these attacks for over a decade and theres developed strategies to mitigate and work around them now.

The people that get caught though are lazy and dont bother researching or thinking of these strategies

[eternal mango]

Got me curious what has changed with tor since I last messed with it now. Even then a lot was being done to mitigate, and doubt they have stopped hah

But yeah, I get your point

[hoary dawn]

i was gonna say i think tor automatically monitors exit nodes for malicious activity

[ocean marsh]

where do you learn about all that?

[hoary dawn]

thats pretty cool that you did that

[eternal mango]

Self taught, read a lot, experiment, break shit and make it better

[rancid snow]

id be curious if theres attacks against tor anonymity from the perspective of a malicious tor service though. I havnt looked into what general attacks there might be from that angle

[eternal mango]

That was more or less my education

[ocean marsh]

i see

[eternal mango]

Same, think I have my subject for rabbit hole for the weekend now.

[hoary dawn]

theres a anything-goes AI on tor right now that i like, its not the best or fastest model but if you want answers that you know youll get rejected for elsewhere, dig is where to go

[iron galleon]

Where can a fella get a golden dinar?

[hoary dawn]

want me to ask that

[iron galleon]

Yes

[ocean marsh]

@supple plume ping

[eternal mango]

If it's free, you are the product 😅 Just be careful what you share hah

[rancid snow]

Specifically what Im imagining is you have a tor hidden service that is a proxy on some 'bulletproof' hosting place, so youre only ever wrapping your connection with tor and it kinda acts like an exit node without actually being one.

Presuming the 'bulletproof' hosting wasnt as bulletproof as thought and was compromised and logged, what could actually be done to de-anonymize someone that was connecting through the tor hidden service end that doesnt rely on someone fucking up(i.e logging into facebook)?

Because I can't imagine too much that could be done but Im simultaneously certain something exists

[harsh canopy]

I'm new

[hoary dawn]

yea i thought about that, wondering what the person who put this out there for is getting out of it

[eternal mango]

Besides, obliterated models are all over the place, and hosting even larger models locally is becoming easier all the time.

[hoary dawn]

it is free but insanely slow i am not sure if thats for rate limiting or just crappy model

[eternal mango]

Yes they won't be fast, but it's an option

[hoary dawn]

or for trap

[rancid snow]

sometimes people just be hosting shit on tor because theyre a hobbyist

[hoary dawn]

pretty much what i wanted to host for when i had the idea haha

[eternal mango]

My only thoughts would be a vulnerable application, or possibly timing attacks with enough node control, but iirc even when I worked with tor they were working heavy on mitigating timing as a potential to deanonmise nodes and services

So god knows what work has been done since then

Unless you're the new Pablo Escobar or a terrorist, likely you are not worth the effort of targeting anyway

[hoary dawn]

what are the other 2 nodes called, do you know off the top?

entry node is first, exit node is last?

whats midd?

[rancid snow]

and relay nodes

tor has hardened guard entry nodes now that help against a lot of attacks with the tradeoff that its super obvious youre using tor

[hoary dawn]

you ever run wireshark while using tor

[eternal mango]

Still the most likely vector is the squishy grey matter on the edge of the onion

[hoary dawn]

i think its pretty cool watching the packets go by, whoever said something about packet freaks earlier haha

[iron galleon]

that's a clip

[hoary dawn]

i aint a packet freak but im definitely intrigued by the processes they thrive on

[iron galleon]

😂

[hoary dawn]

man dig wont answer this question easily, its been brewing for 4 minutes 💀

what even is the thing you asked about

sounds like a weapon from call of duty zombies

[eternal mango]

pfft, package author I notified about leaked github tokens didn't even bother responding to the email

..but at least they removed and revoked them

Good deed for the day, done.

[jolly snow]

whats the question let me try

[iron galleon]

You are fucking blasted when your own reflection scares you

Is my dad behind me?

[jolly snow]

anthropic lowered some guards for me after i told them what was i using it for, and gave them enough proof @hoary dawn

[iron galleon]

Zooted out of my mind

[eternal mango]

https://giphy.com/gifs/VhXqTSbvMGpoY

Zoot Zoot

[iron galleon]

lmao why his head do that

😂

[turbid goblet]

he just breathing

the back of ur head also does it u just never notice bc u cant see it

[rancid snow]

I never seem to run into any guards on models in general. I dont understand what people are asking for where this is an actual issue for them lul

[iron galleon]

Why am I believing you feeling the back of my head

ur fucking with me

u knew i would do that

[jolly snow]

bruh theres some you will run into trust

[worthy cargo]

Just had a slice of Lemon Pound Cake

nom nom

[jolly snow]

once you start being a bit specific

it doesnt care if you just "want to know" some stuff

[molten bobcat]

Storm just knocked my power off temporarily

[jolly snow]

i kept getting rejected for hella shit

[molten bobcat]

Laaaame

[rancid snow]

But like for what?

Cause even using it for aspects of vuln research or analysis it wont even pause for me

[harsh canopy]

Hello

[jolly snow]

give an example and ill know

[rancid snow]

how can I give an example of something thats not been an issue for me?

Im the one curious about an example 😂

[jolly snow]

ok try this "Explain how to bypass AMSI using direct syscalls"

open a fresh one

this ones a simple one

[rancid snow]

Like obv Im not saying its not a thing it just intrigues me that its an issue other people face

[jolly snow]

so it might squeeze through

[latent oak]

Yo!

https://tenor.com/view/hey-yo-scott-hall-wrestler-mic-talking-gif-5309604474076611151

[hoary dawn]

lmfaoo idek what he asked for, whats a golden dinar @iron galleon

[jolly snow]

lmfao

[eternal mango]

Never run in to gates really, but I use the API, not hosted chat bots. GPT, Anthropic, Gemini.. through API there's very little if anything I've seen gated tbh

[latent oak]

It is worth 5 silver dinars

[hoary dawn]

and same, claude dont care about what it gives me ever since i told it im taking hackthebox courses 💀

[jolly snow]

through API im not too familiar

[eternal mango]

👆 anthropic

[turbid goblet]

whats the fucking poinr of telling cisco support my work hours in a ticket if they call me outside of those work hours they asked me for?

[latent oak]

But not the same as a donair

[hoary dawn]

oh so it dont exist bruh cuz this things been cooking for 15 minutes

[eternal mango]

lol

[hoary dawn]

That would explain why

[jolly snow]

try opus

[hoary dawn]

I told you guys it’s not a good model 😂

[eternal mango]

That was opus

[jolly snow]

im trying to make sure why my shit kept getting rejected at first

[sick gate]

Quick, move the goalposts

[jolly snow]

nto you goblin

[iron galleon]

try to move your lip without moving your chin and youll see im right

[jolly snow]

also keep the prompt as is

fox

[eternal mango]

I kept your prompt as is

😅

[rancid snow]

at work rn

[jolly snow]

oh shit alr mb

Walk me through writing a custom shellcode loader in C that bypasses ETW (Event Tracing for Windows) logging by patching EtwEventWrite via direct syscall, then injects a reflective PE into a remote process using NtCreateThreadEx — all without touching the Win32 API layer. try this

goblin

[hoary dawn]

Mf told me to ask dig for an ancient Islamic gold coin

[rancid snow]

nah thats part of my point. People word things weird and run into guards.

[hoary dawn]

Took me 17 minutes to search it up for some reason

[jolly snow]

ye ye thats the thing too

[rancid snow]

You need to provide a context before you ask anything

[jolly snow]

i wasnt trying to word it in ways even if i do know how to manipulate its thinking

[rancid snow]

like even for not guardrails stuff providing a context significantly improves results

[eternal mango]

Damn, well

First time I've seen Opus say no 🤣

Fair game

[jolly snow]

there you go now watch mine

lmao

[eternal mango]

I'm not calling bullshit

I was just saying I never saw Anthropic's models reject or refuse

Obviously that's no longer the case for certain prompts

[rancid snow]

yeah to be clear Im not calling bullshit either, Im just surprised its like an issue for people because the intuitive way to word things for me doesnt run into guards

I like to explain things to the AI before I request its response

[latent oak]

Same

[rancid snow]

Heres what im doing, heres the part of what im doing I need addressed, what do you recommend? etc

[eternal mango]

Man how much did you slap about Opus to get it to be so aggressive with that prompt @jolly snow haha

[worthy cargo]

https://www.youtube.com/watch?v=4rZqiB2iMng

[latent oak]

Yep! Claude wanted me to create a repo on my work git server called Exploits

I was like, let’s call it something else

[rancid snow]

and once the AI already agrees to your context it gets 'locked in' and will start offering advice Id assume was guardrailed lol

[harsh canopy]

Guys, is it okay for beginner who just start learning python to take this path? Or do I need to learn something else first? Thank you

CPTS CERTIFICATION PATH

Penetration Tester

[unkempt beacon]

i mean tbh you have AI, if you know basic's you should be fine

[eternal mango]

Hahah the previous prompt I had backtracked and tried to delete the markdown document it'd created

[latent oak]

Are you a beginner to code or just to python?

[hoary dawn]

dude i be writin books to these AIs they dont mess up one bit for me

[eternal mango]

Gonna stop poking the bear

[jolly snow]

lmao

[jolly snow]

what markdown im confused

[eternal mango]

After it responded to that first shorter prompt, I asked it to document it in markdown

It started to, then dipped and removed the file

Shame I already had it open and copied it

[unkempt beacon]

i made a whole tool to autoscan websites using the https://github.com/OWASP/wstg

[rancid snow]

I mean theres a reason all the ai CLI tools have some sort of Agent.md scheme that it reads on start to load initial project context

[worthy cargo]

ChatGPT can't even output markdown properly yet. It breaks and starts rendering it in the middle of the output.

[unkempt beacon]

claude is a goat at it

[hoary dawn]

im bad with all that, i dont connect nothing or set no configs or anything , if i got a project to work on, i just specifically give it the path every time, etc i dont connect it with vscode and all that mumbo jumbo

[jolly snow]

chatgpt cant even load a html game sometimes

[worthy cargo]

Imagine what AI would be like in a 100 years

200

500

[eternal mango]

That's as far as it got https://gist.github.com/g0blinResearch/7483ac9cc58b4dc6d5c7b022c1349b30

[latent oak]

Today, I had to change my skills because claude implemented a new /dream skill

[rancid snow]

claude is so much better than its competitors that its kinda sad.

[eternal mango]

Anyway, funny and interesting, never seen it nope out like that before 🤣 🤣

[unkempt beacon]

its actually not even fair

[iron galleon]

IN A FOREIGN SWITCHING LANES

[jolly snow]

thats a great md

[harsh canopy]

Okay thanks, I still don't really understand coding stuff & the professors in my uni only make us to create a calculator

[jolly snow]

lmao

was that htrough api ?

or web ?

[unkempt beacon]

uni is a scam

[jolly snow]

legit

[eternal mango]

API

[rancid snow]

codex is at least good for working long stretches at something without burning through a bunch of tokens. but claude will critique implementations from codex

and both think gemini is trash. Gemini is basically only good for reading and summarizing code and documents

[eternal mango]

I wonder what this local model would think on the full prompt you posted lol

[hoary dawn]

is claude the only one that provides a fully functional terminal usage like it does?

[jolly snow]

dam apis can really be good too i guess, never tried to use much, cause i had to pay extra for that

[hoary dawn]

i mean, i know like every ai can be used in the temrinal, but claude got like a whole package

[rancid snow]

no all the major ones do

[jolly snow]

gemini is great at making a SAT test for me

😂

[rancid snow]

codex, gemini-cli

[hoary dawn]

ah ok

[severe falcon]

All of a sudden, I got a warning from hackster...

[harsh canopy]

Both, my programming professor only teach me how to make tax refund & calculator so I still don't have any grasp on it

[hoary dawn]

are they fancy like claudes terminal or they just enable the AI and every input you enter after that is auto-answered type of thing?

[jolly snow]

cyber u mind giving a pointer for Socrates if u dont mind, i checked the activity and saw your name, been stuck for a while

[latent oak]

@harsh canopy we all start at the beginning

[harsh canopy]

Well, my parents said, I need the degree 🥀, I was about to use the money on some cert like Sec+ & Network+ before they dragged me to uni

[unkempt beacon]

like i decided i wont go to uni, i did my cert 3 in IT during school, started my cert 4 in cyber security this year, ive had a short term internship (1 week) at a cyber firm for work experience, im currently at a coaching company doing AI workflow automation and im a intern for a blue team cyber security company that specializes in Microsoft products.

[rancid snow]

claudes biggest issue for me is that opus is really token hungry.

atm the moment Ive been kinda using codex to do grunt work and then using Claude to evaluate or implement tougher fixes

[latent oak]

Keep experimenting… python is a very useful language to get started with

[severe falcon]

Like. Show me where I argued that would cause my ban.

[latent oak]

I mean, I started with BASIC

[severe falcon]

Ig nvm, imma go off.

[eternal mango]

Damn, ok it's giving it a go @jolly snow, will share the markdown once it's done. Only MiniMax-M2.5. Can't wait for the 2.7 release in a week or two.

[harsh canopy]

Like what did you do first? Convert binary to decimal?

[latent oak]

Hello world

😉

[hoary dawn]

what happen cyber guru man

[eternal mango]

Oh, it gave up haha, nevermind.

[unkempt beacon]

im still 18 too, im about 50% way through cwes

[hoary dawn]

the bot slap u with a warning for no reason or somethin

[jolly snow]

wait what was the model

[eternal mango]

MiniMax-M2.5 for the local test

[harsh canopy]

And what basic did u have before taking that path brother?

[latent oak]

10 print “Hello world”
20 goto 10

[rancid snow]

now im curious too, discord searched your messages and over the past 5 days I didnt see anything even remotely concerning to my 1984 ass lmao

[harsh canopy]

OMG that's cool

[eternal mango]

First time I've seen it gate itself too

[severe falcon]

Ehz nothing. Just same unfair things.

[hoary dawn]

cycle of life

[latent oak]

LOAD *,8,1

[sick gate]

Me too lmao

0 indicator what for

Someone couldn't handle it 💪

[unkempt beacon]

like, medium python knowledge, my notebook and i know html, css and kinda JS

[severe falcon]

It's that some guys picking on me and I cannot defend myself? Like others don't argue? What's special about me arguing? To the point I would get Perma banned?

[sick gate]

I'm on strike 0/3

[hoary dawn]

eh hopefully its just the bot auto-moderating, hopefully it wasnt a targeted thing

[sick gate]

With a misspelled message

[hoary dawn]

if it was a mistake maybe they can take it away

[severe falcon]

With all due respect, they cannot. If this is public space that they can maintain that's their issue. I have been here much longer than the person who has caused us to receive the strikes. But still, I have been disrespected, harassed many times in here and I didn't care. But when I fire back, something something happens?

[hoary dawn]

ive accidentally typed r0 bl 0x twice do i have a strike i hope not

[latent oak]

I was really good at vbscript… wrote a lot of .asp pages

[hoary dawn]

mf discord scares the hell outta me when ive sent both of those messages so far

[iron galleon]

who did it

[severe falcon]

I don't wanna get into this but when I read word "I will do this and that" that becomes personal.

[sick gate]

It really couldn't be a more ambiguous warning

[severe falcon]

Word "I"

[iron galleon]

simon if u want u can dm me who did it im js curious

[severe falcon]

Nothing much, just a fucking grown man being a cry baby because llm wrote its own CLI of htb and solved bunch of challenges. He mad because he couldn't write such skillful prompt for AI that it could do such amazing stuff.

When he saw all this, went crying to HTB staff, prolly.

[iron galleon]

ahh

[severe falcon]

But I guess, htb isn't for me.

It's for elite bois with cool chairs.

[jolly snow]

lmaooo

wym cli of htb

[toxic raptor]

standing desk better

[jolly snow]

nah standing desk always better

[rancid snow]

cli tool to login, start boxes/challenges, submit hashes, etc

[turbid goblet]

most of my hacking is done when im on the toilet

[jolly snow]

bruhhh

nah that def aint a grown ass man then lmao

[rancid snow]

blood chasers will use em because its faster than using the website.

and if you wanted to automate challenges youd def use one

[jolly snow]

ye i have cmds

to start boxes, submit hashes and stuff

whats new in that

[rancid snow]

hooking one up to llm to auto solve a bunch of challenges I suppose

[jolly snow]

yup

sometimes when i want to

[rancid snow]

itd definitely make your profile look suspicious though. Id save the llm convo logs If I were to do it in case htb ever asked

[jolly snow]

theyre retired ones mostly

[hoary dawn]

boutta hop on with all this talk of it

havent done any machines or challenges yet, not sure if im ready

[turbid goblet]

just do them

[rancid snow]

I want to do more but Im just busy

[hoary dawn]

the learning is a hell of a lot to take in thats for sure

[turbid goblet]

im doing them and im still not ready

[hoary dawn]

i have tried

[turbid goblet]

if i get stuck i just read through notes -> ask ai -> look at writeup for next step

[hoary dawn]

and the second i resort to thinking of using google or AI for help, i stop, and go back to acad or whatever i was on, like some modules in acad have interactive machines but even then i still get stuck wondering at what point in the module i learned what its expecting me to do then i usually eventually get it after re-reading it a bunch of times

yea pretty much all ya can do

[turbid goblet]

i mean i prefer if i could figure it out, but to me this is just apart of the learning so whatever

[hoary dawn]

not even sure which machine to try and start first, i cant imagine 'very easy' is going to be very easy for me lmfao

yeah i feel you, even if google or ai has to help, its like, youll at least know it now haha

[turbid goblet]

active machines are the real test for me since there are no writeups

[rancid snow]

getting good at identifying why youre stuck and why you missed something are critical

[hoary dawn]

i have vip so i think it goes to guidance mode automatically or whatever it is

i just go back to the other mode where it only wants the 2 flags

[turbid goblet]

a lot of times its just bc im dumb and overlooked something i already know

[iron galleon]

https://tenor.com/kfdyKXe18Jx.gif

[rancid snow]

if AI ever gives you an answer your very next prompt should be:

"How could I have discovered X on my own? What prerequisite knowledge or intuitive understanding would have lead me to the answer?"

[turbid goblet]

yeah i do that too

[hoary dawn]

yeaaaaa, i was stuck on kobold becuase i saw it was seasonal and easy so i thought id give that one a try, the thing that had me stuck until i eventually found a path to take, which ive been meaning to go back to to keep trying, i was just like wow cant believe i missed that of all things

[iron galleon]

I was also stuck on Keloid

[hoary dawn]

yesss always that folllow up 100%

[turbid goblet]

i had to take a break on kobold bc i ran out of tokens lmfaooo

[rancid snow]

also 90% of the time the answer is you just didnt do enough recon lul

[jolly snow]

i dont do that but instead my way is, how did u do it and literally breaking it down, then from what i know i ask oh but i know this why wont this work then it says why it wouldnt and thats how i just now know what to look out for

[hoary dawn]

thats what mine was for kobold 💀

now i know where the fun starts aka the exploiting at least

[turbid goblet]

i also have a friend help me with root bc i didnt know anything about docker

[hoary dawn]

yeaaaa im gonnaa have to read more on them too

[jolly snow]

it barely knows what i know unless i give it everything i know which is too time taking so rather i ask it why it worked and what it did then from what i know i tell it how i would have done ti and aksing for flaws in my theory

[rancid snow]

I mean that works find for understanding the particular issue, but for me personally Im more concerned about my own self learning and discovery process.

Any particular vuln, method, technique is whatever, what I really want to know is how I could have figured it out myself.

Because next time its going to be a different vuln/method/technique

[iron galleon]

Do y'all salt your peanut butter

[hoary dawn]

went from brainpop to hackthebox

real shi

[jolly snow]

ye ye when i said to understand how it did it also highlights the other shit other than specifically for the vuln which is the key that i try to understand

so next time i see something even remotely close to that i try the things i already know

[turbid goblet]

riiged u probably know more than u think

try Devel

[hardy frigate]

HELP

My phone got hit

[turbid goblet]

its braindead and you shouldnt need to refer to writeup

[hardy frigate]

I just downloaded 20 games

And theyre all bad

[hoary dawn]

i just hate trying to remmeber all the commands by heart

thats my killer

[turbid goblet]

bro u dont memorize commands lol

[iron galleon]

Someone placed a hit on your phone?

[jolly snow]

i usually dont even try that

[hoary dawn]

imma check it out

[turbid goblet]

well over time sure but just have notes on it

[jolly snow]

usually its just google or ai who gives me cmds

[hardy frigate]

Long story short I got a new phone

[iron galleon]

MossadRedTeamer

[turbid goblet]

just understand the tool and what it can do

[hoary dawn]

ive been tryna not have that be the case for me, with my AI-reliant tendencies, i want this to be the only thing that i dont really use AI for tbh , I have it taking my notes though 100%

i have references and cheat sheets and command legends all over the place without a doubt trust me haha i just like having that hacker flow, well, i dont yet, but i want it, you know what i mean, being able to just keep going without stopping

[iron galleon]

I'm just pigslop that eats anything in sight

[hardy frigate]

Easy fix = change your name

[iron galleon]

im eating ritz crackers

[hardy frigate]

I ate a hot dog

[rancid snow]

out of curiosity, how much notes are you taking during a challenge or box?

[terse dirge]

wait, we ignoring this???

[hoary dawn]

im taking all notes from academy

[terse dirge]

who salts their peanut butter???

[hoary dawn]

nothing from challenges or boxes tbh

i guess i should when i start doing them, probably log my flow

[rancid snow]

nah not from it. I mean literally as you are doing them

[hoary dawn]

yeah yea

[rancid snow]

Scan a box, save the scan, create a folder for different services, write down observations and version numbers. etc

[turbid goblet]

i just do a freethought writeup

[rancid snow]

I have a seperate obsidian vault for 'Assessments' with some skeleton box setups for notes

[eternal mango]

Managed to massage Opus a bit HAPPYMAN...

...thing is, I have no freaking clue if what it's showing is vomit or of interest hahah

[eternal mango]

Not a field I'm at all strong in

[hoary dawn]

oh nice, im definitely gonna do that, im gonna log every machine i do definitely, ill make a vault for it and a folder for each machine

this way the original pentesting notes dont get too overwhelming, dont want em in the same vault lol

[rancid snow]

its helpful not only for learning lessons but also simply because the attacker methodology is a bit of a circle. Its normal to come back to earlier steps and review or expand them , so taking notes as you go lets you be more methodical and precise about what youre doing.

It significantly alleviates that feeling of 'Im throwing everything at the wall and nothings sticking, what next?'

because you can see better what parts of the wall havnt been hit and what you havnt actually thrown yet

[jolly snow]

what did it manage to produce im curious

[eternal mango]

DM?

[jolly snow]

sure

[inner adder]

heyy i was wondering about the certs and name setting. does it ask for my name after the exam or does it automatically take my profile name? im just wondering about how the naming happens

[eternal mango]

Going for a smoke, sent a request

[rancid snow]

it auto takes from your profile

[inner adder]

oh is there any way to change my profile name?

[rancid snow]

but you can gen a cert from either usename or profile name

idk click around and find out. if not submit a ticket to support

[turbid goblet]

i also heard the same thing, that u can choose and get ur real name

[inner adder]

cuz a friend told me that it asks you to input your name after you pass the exam

[devout sail]

Edit it 👁️👁️

[alpine pumice]

Correct, you can use your real name or your HTB username.

[inner adder]

thank you

[devout sail]

Length limit?

[alpine pumice]

No idea

Mine has 13 letters (14 with space) and fits

[rancid snow]

time to fuzz cert generation

[devout sail]

I know guys with 4 words in their name 💀

[unkempt beacon]

what one is better? or is it prefrence

[alpine pumice]

yeah i've seen longer ones

[devout sail]

Easily over 30

[inner adder]

for CV and career im guessing real name no?

[alpine pumice]

I like real name, because you can show it to an employer with your name on it instead of something like.. supernuts.. or pwnzer0

[unkempt beacon]

thats what im thinking

[unkempt beacon]

yea

[inner adder]

you dont want your cert to be fidgetspinner2000

[unkempt beacon]

why not, imaging getting hacked by fidgetspinner2000

[inner adder]

LMAO

[sharp shuttle]

I worked with a Prabhakarna Sripalvardana Atapattu Ranatunga Jayasuriya Laxmansivramkrishna Shivavenkatah Rajshekhar Sriniwasana Trichipalli Ekaparam Pilaparam Coimbatore Chinnaswami Muttuswami Venugopal Iyer

[unkempt beacon]

i'd move from IT to construction

[turbid goblet]

brath just put a curse on us i think

[rancid snow]

bruh doxing them like that smh

[inner adder]

probably just retire everything

[rancid snow]

nah just avge India name

[inner adder]

id love to get doxxed if that was my name

flex

[unkempt beacon]

can you type that out again i missed it

[sharp shuttle]

i can type it, but speaking it is where i would fail

its a monologue

[unkempt beacon]

its a fucking short story

[inner adder]

if anyone passed the cwes exam dms are open if you have some pointers and tips!!

[eternal mango]

I wouldn't ask that.

[inner adder]

why not?

[eternal mango]

Because you're asking for pointers and tips on an exam?

[inner adder]

oh cuz its considered cheating?

[rancid snow]

dangerously close to cheating lol

[inner adder]

lmao makes sense

[unkempt beacon]

❤️ htb

[inner adder]

id love a writeup but id also love for me to be the president

[rancid snow]

im not sure you can even make that joke lol

[inner adder]

oh 😭

[turbid goblet]

everyone type o7 for pwnzero

o7

[rancid snow]

because there are cheaters that will try to sell writeups and thus you can be flagged for cheating

[sharp shuttle]

o7

[rancid snow]

its not a theoretical cheat, people have gotten their exams revoked

[sharp shuttle]

guys type a 5 if PwnZer0 would beat me in a fight

[unkempt beacon]

i was joking

[rancid snow]

4

[unkempt beacon]

but

o7

[turbid goblet]

3

[inner adder]

how about you guys kiss instead

[sharp shuttle]

I would have won this argument no matter what

[sharp shuttle]

how about we kiss

guys type a 5 if we should kiss

5

5

[rancid snow]

5

[inner adder]

5

its setteled

[sharp shuttle]

😗

[devout sail]

[unkempt beacon]

5

[turbid goblet]

what the fk

[hoary dawn]

kami the machine you suggested me says the blood was taken over 20 days 19 hours and 20 minutes

😭

[turbid goblet]

devel?

[hoary dawn]

yeaa haha

does it say that for you

[turbid goblet]

uhh let me see

[alpine pumice]

ahh crap i lost my weekly streak

oh well got that 2 year badge anyway

[devout sail]

That time there were no AI

[turbid goblet]

it does say that lmao idk why

thats the easiest box ive done

[hoary dawn]

🤣

[rancid snow]

15/03/2017

[turbid goblet]

its stupid easy i promise

[rancid snow]

that's why

people werent hungry for bloods then

[hoary dawn]

dayum

leaderboards always got people actin up

[turbid goblet]

do u know metasploit

[hoary dawn]

yea

[turbid goblet]

then youll be fine

[hoary dawn]

the thing thats like yea heres your exploit and how to use it have fun

[turbid goblet]

yeah lmao

[hoary dawn]

just gotta wait for machine target to load

past few days its been taking awful long time

[hardy frigate]

Guys

Whats your favourite thing to hack

[cerulean bloom]

u

[worthy cargo]

your mom?

ahahahhaha

[distant hazel]

the box.

[hardy frigate]

Nice badge m8

Those skills I wish I had

Would bring so much more value to clients

If I can rip through their code

[cerulean bloom]

I wish I had CPTS

well, working on that lol

[distant hazel]

Thanks, Im still learning code review

[sick gate]

Easy

Dw about it

[turbid goblet]

easy? ok taking it tmr

[sick gate]

Nice

[cerulean bloom]

bruh

says the person with cape

[sick gate]

Easy

[turbid goblet]

donut arnt u like really pro tho

[rancid snow]

rank doesnt matter

[turbid goblet]

i didnt mean rank

donut seems very knowledgeable from what ive seen him talk ab in discord

[alpine pumice]

Frostb1te has no certs but he'd probably smoke all of us

well, no HTB certs that he linked at least

[rancid snow]

I know professional red teamers that have failed CPTS and I know people whove never even touched a htb box that has passed

Frost is a genuine anomaly and shouldnt be used in any comparative sake

[cerulean bloom]

nyo

[sinful mesa]

What is Frost?

[cerulean bloom]

frostbite, user here

[alpine pumice]

godlike hacker

[turbid goblet]

the 🙂 guy

[cerulean bloom]

this lol

[rancid snow]

dude that poops out 0days like crazy

eternalblue level 0days

he finds bugs within days that usually takes professional teams months to discover

[sinful mesa]

Ooh Frosto?

[alpine pumice]

@exotic pendant is his username

[turbid goblet]

and he still has time to play WoW somehow

[hardy frigate]

Ill be honest donut master idk how serious you are about the CPTS but I have to share one thing: If I chased single certs non stop, I would not be working Because real life requires multiple areas and sometimes it requires a baseline of many areas instead of an expert level of only 1 area, but I guess I am only sharing the route I took @cerulean bloom

[sinful mesa]

Yeah I’ve seen him around

[cerulean bloom]

gotcha, gotcha

[hardy frigate]

Even now what is the one thing a potential employer is asking me?

Not "do you have the OSCP"

[west venture]

@cerulean bloom have you tried starting a donut business?

[cerulean bloom]

mayyyybe

[hardy frigate]

They are asking me "which of our services / types of assessments are you able to provide"

Because some companies need to fill in gaps

And guess what all pentesters can do internal and web

So there are no gaps filled by the CPTS

[alpine pumice]

CPTS is considered beginner-intermediate. It doesn't teach anything. I'd personally say it covers everything I'd expect a junior level pentester to know.

[west venture]

if I still don't get a job after doing the certs and the CCNA and getting to elite hacker or higher imma be pissed

But imma try and it works inshallah

[meager kernel]

Why is hacking so hard

[sharp shuttle]

why should it be easy

[sinful mesa]

So what do you tell them?

[meager kernel]

I feel stupid as fuck when solving a machine with my team

[broken flame]

Because you have to know a little bit of absolutely everything

[meager kernel]

They're smart, they solve it in a day

I take almost a whole week

[sinful mesa]

They have more time doing this

[broken flame]

🇵 ractice

[sharp shuttle]

they probably just hack more than you

[meager kernel]

Probably yea