general

[molten drum]

anybody got that lazy chud hacking tutorial

I don't wanna learn too much

[warm ravine]

Hello... People from the underground

I've finally.. found a way to contiune on my hacking journey

[hollow iris]

😭

good this was a joke

i was shareing tools sumn said

[worthy cargo]

Nihilistic mystics
Apostolic alcoholics
Messianic manics
Cataclysmic and prolific
In the age of super-boredom
Hype and mediocrity
Celebrate relentlessness
Menace to society

[hollow iris]

i saw thes in the hidden wiki

[worthy cargo]

This is counter-culture from the underground
Eternal revolution, this is our sound
KMFDM, better than the best
Megalomaniacal and harder than the rest

[iron galleon]

if i were to suggest any computer to anyone it'd be a macbook pro

unless ur doing sensitive work

[warm ravine]

Hm

[worthy cargo]

https://www.youtube.com/watch?v=A_DhCglA72o

[iron galleon]

but even then it depends on ur threat model so

[worthy cargo]

One of the best songs by KMFDM

[iron galleon]

really judging the entire system here over the ram itself

i dont think x220 or x230 suppport nvme i could be mistaken

lotta factors

[worthy cargo]

This is counter-culture from the underground
Eternal revolution, this is our sound
KMFDM, better than the best
Megalomaniacal and harder than the rest

Man this song kicks so much ass

[iron galleon]

i think my next system finna be gentoo instead of arch

[worthy cargo]

Ew

Gentoo

https://ircbots.debian.net/factoids/search.php?q=gentoo&term=key

[iron galleon]

compiling might be an issue

i just want to customize as much as possible

[worthy cargo]

spends (5|6|7|8|9) (days|weeks) recompiling $1, and when it's all done, $1 runs ((1|2|3|4|5|6|7|8|9|10)% slower|no faster|0.(1|2|3|4|5|6|7|8|9)% faster) than previously

[devout sail]

Customize deez

[worthy cargo]

<reply>the uninformed desire to compile everything for your particular chip "for performance reasons" despite no good reason to believe that there will be any gain in performance.

it's really stupid to spend hours recompiling everything to gain nanoseconds in execution, especially given that the pace of development in most linux programs means that you need a new version about every 6 months to a year. Can you compare the number of hours in a year to the number of nanoseconds in an hour? recompiling to save cycles is just not worth it.

[devout sail]

Still bloats with fancy aah shit to balance it up anyways

[worthy cargo]

It;s like suckless

It doesn't suck less

It sucks. period

Until you patch shit up and add features

I know I know, I use suckless tools

[sturdy thistle]

switched to what

[iron galleon]

it was a very stupid decision

but a purism librem 14

theyre not for sale anymore

i just thought it was cool

[sturdy thistle]

and why stupid

[iron galleon]

the company isn't great support-wise, i could have gone with system76, and it was a premium price for the brand

i mean the switches are cool, but that's about it

hardware switches

ig it wasn't "stupid" per se, but not my proudest decision

[spark mulch]

compiling for improved performance is about economies of scale. if it's just a userspace application for a desktop computer then yeah generally the gains are negligible.
When it's for software intended to run on hundreds, or thousands of instances simultaneously through containerized orchestration then those performance gains quickly multiply into non-negligible numbers.

As for suckless, the general principle of making a tiny module which is both easily maintainable, extensible and non-monolithic is valuable I think

[iron galleon]

they got pureboot when u could use system76 which i think uses coreboot, which is just better supported let me check

i mean pureboot has tamper resistant features

which i dont use

[sturdy thistle]

what specs?

[iron galleon]

didnt buy the librem key

[iron galleon]

32 gb ddr4, let me check their latest cpu

[sturdy thistle]

i mean yours

[iron galleon]

ye, mine has 32gb ddr4

i should have gotten 64

Intel Core i7-10710U (10th gen Comet Lake, 6 cores / 12 threads)

for cpu

i have 2 tb nvme ssd

i dont use that computer anymore

i use a system76 thelio rn

and a macbook pro m1

[sturdy thistle]

if you wanna do something good, gift it to me 😄

i install qubes

[iron galleon]

haha maybe bc i dont think it'd sell

[sturdy thistle]

i will install and use qubes there with proud

[iron galleon]

i wish i had a decent amount of money ill try to get there in the near future

[bronze lion]

can i have it then (hehe)

[iron galleon]

mickhat asked first

[bronze lion]

damnit

[sturdy thistle]

beat yo

@iron galleon check DM

[bronze lion]

there wont be a next time

👁️

[frail turtle]

Yo yo yo

[sturdy thistle]

i was first so xD

[bronze lion]

true true

[worthy cargo]

Yo yo yo

Check dis out

Eggzy is in da house

[wind plank]

my best top

[azure remnant]

Do a rebirth back to noob

Like me

[frigid mountain]

what up fam?

How was the interview?

[worthy cargo]

It went okay

Thanks for asking

They said they will let me know on Tuesday as he has two more interviews to do

[frigid mountain]

That's good. At least letting you know something is a win.

[worthy cargo]

Yeah, I'll have to go around and get leads and close sales

I don't know if I want to do it

Let's find out

[frigid mountain]

I just got back from my "errands". Coffee for me. Pup cup for my dog, Kali. Gassed up the ride. Car wash. Went to Tractor Supply and took Kali in to pick out treats. She got a beef knuckle. a split elk antler and some freeze dried salmon cubes.

[open lava]

you are a hacker

[frigid mountain]

I'm about to go to the guitar shop and pick up my telecaster clone that was getting worked on. New strings, setup and a little adjustment to hopefully keep the high E string from slipping off the fretboard.

[worthy cargo]

Nice

Productive day

I have a Xiphos XPT 707 FX

Necrophagists guitarists guitar

cost me $1400

I wanna sell that

You wanna buy?

https://ibanez.fandom.com/wiki/XPT707FX

[frigid mountain]

I've got Ubuntu on a 17" i7 w/ 16gb of ram to play with now

[worthy cargo]

7 string

[frigid mountain]

sick nasty

[worthy cargo]

I play 7 strings

[frigid mountain]

That's cool. I was just looking at a 7 string. I want to convert a 6 string into a .60 gauge C-tuned sludge monster

[worthy cargo]

Check this out

I played guitar over a psychedelic trance song

I love the melody of it

So beautiful and serene

[frigid mountain]

I'm just learning. I've been in lessons for 2 months. I had some leftover guitar skill from being a teenager but I'm trying to be more disciplined. I actually am learning bluegrass songs primarily. I have an Alvarez MD60BG that's my main rig.

[worthy cargo]

Oh word

I love bluegrass

Alvarez is sweet

They make some sick guitars

I had a 12 string accoustic by them

I gave it to my roommate

[frigid mountain]

The tele is one from a kit my dad made for me. I have an Ibanez Gio with dual humbuckers and a single center pickup.

Those are my main 3 guitars.

[worthy cargo]

Nice

I got a Ibanez RG Series 7 string

I only have two guitars now

I used to have like 5-6

[frigid mountain]

yeah, I actually decided to just practice some drop tuning and put the C-tuned one the backburner for now. Gear lust is real

Here's a pic of my dog and my ibanez and amp/pedals from earlier today.

oh it's over in #htb-pets actually if you want to see

I just got the Orange micro dark amp head w/ the 8" cab

I have a Big Muff pedal there, a Blue Driver, an analog delay and a Noise reducer

the Noise reducer is so clutch

[worthy cargo]

I got a bees box

BOSS ME-50 multi fx board

and a small Marshall 15W amp

https://www.boss.info/us/products/me-50/

[frigid mountain]

that looks cool!

a lot cleaner than a pedal board and simpler

[winged marsh]

do any of the machines need a bruteforce dictionary

[azure remnant]

This is reverse spoiler if i answer

[bronze lion]

finnaly did a htb box after a long time

feels good

time to sleep

( @devout sail u hear tht )

time to learn something from me

🗿

[latent oak]

Wow! I just got a friend request from Hackthebox0405… I can’t believe we’re finally going to be friends

[bronze lion]

let me guess he is gonna send u a gambling sites link after some time

talk to him casually and thts wht awaits u(most prob)

has happened quite a few times already now

[supple plume]

This guy is you?

[proper dragon]

dt770 pros are peak

[worthy cargo]

Yes

[supple plume]

Cool bald head team let's go

[bronze lion]

Now I know ur face , it's only a matter of time till I find ur house and then steal all ur ice creams

[winged marsh]

does microsoft rpd rate limit?

[azure remnant]

u must be lucky

[latent oak]

I’m going to inherit millions! This prince in Nigeria just told me

[alpine pumice]

buy me dinner

[jagged storm]

https://tenor.com/view/hello-chat-cat-couch-crawling-crawl-gif-27214040

https://tenor.com/view/cat-lurking-gif-22179921

[devout sail]

same i just came home

gonna sleep

[turbid goblet]

I meant to take an hour nap but fell asleep for 3 hours

Based

[rotund forge]

Make surf n' turf while bangin' Fat boy slim. This is your life's mission

[worthy cargo]

You could go with this

Or you can go with that

https://www.youtube.com/watch?v=XQ7z57qrZU8

[lost loom]

guys how to participate for giveaway?

[rotund forge]

?

they're giving away stuff?

this platform is free as it is

[turbid goblet]

no i just checked lol

[lost loom]

subscriptiom

n*

[turbid goblet]

well they sometimes do but none are active

its just in the giveaway channel they will post

[rotund forge]

I'll kill for htb staff

[turbid goblet]

and u react to the post

[rotund forge]

lmao

[lost loom]

last giveaway was 2 weeks ago tho

[turbid goblet]

u just answered ur question then

[rotund forge]

https://tenor.com/view/kermit-jumping-off-gif-2840901526967396529

It's joever

[lost loom]

i mean how to participate

so they announce and we react on the message or how is it?

[turbid goblet]

yes

[lost loom]

ah aight

ty

[rotund forge]

Go get a set of goodwill speakers and a bottle of hennessy and solder a bluetooth module to it. Deep fry 20lbs of chicken wings tell me how your night went

[lost loom]

tf

[rotund forge]

u postin' in offtopic my guy

https://tenor.com/view/super-hot-uploading-mind-freeing-your-mind-gif-14512660182813696837

[terse dirge]

Gonna make Chicago style deep dish pizza tonight

Deep dish is the best pizza chat

[jagged storm]

https://tenor.com/view/anakin-liar-star-wars-lying-gif-8634649

It only ranks slightly above Rhode Island pizza

Which is the worst pizza ever created by mankind

[rotund forge]

That and a old style huh?

[glad crystal]

Just made a new GitHub for write-ups 🙂

[silk talon]

Eh? What did i do?

[glad crystal]

The name checks out.

[minor pike]

heyo everyone

burp suite merch good?

[pseudo bluff]

I’ve never heard of burp suite merch

[minor pike]

me 5 min ago

[frail turtle]

Buy the hat

So everyone knows what you are.

[minor pike]

cant use hats in class

[frail turtle]

You can if youre in college

[minor pike]

im not

[frail turtle]

Bro one

Guy I remember brought some chinese food

To my Music 101 class

Just to annoy us

[minor pike]

i can bring food

just not hats

im also not a hat guy, i have awsome hair

[frail turtle]

Well you are dumb

[minor pike]

debatable

[frail turtle]

Because i said so

[minor pike]

@frail turtle i didnt mean to be mean

sorry

i js deadass dont remember

im soryyyyyy

[worthy cargo]

Have to go to dinner in 45 minutes

[frail turtle]

Sorry gor what

For

[worthy cargo]

about 20 min away to a restaurant

I don't know what kind of food

[frail turtle]

Quit being a sorry sod!

[worthy cargo]

Hallicon leave the poor guy alone

😄

[frail turtle]

[pseudo bluff]

Are you in high school

[glad crystal]

System76 merch is pretty cool too.

[minor pike]

yes

[worthy cargo]

How old are you two?

[alpine pumice]

I think if he was only two he wouldn't be able to type

[worthy cargo]

Huh?

No I'm asking both of them

They both said they were in HS

That means they're probably under 18

Which means they need a parental consent form to be here

[pseudo bluff]

I’m 18

Just finished HS

[sturdy thistle]

@austere sinew night ping

[quaint hinge]

Im a big fan, but the hardware is too steep for me at the moment. I want one though

[glad crystal]

I'm so excited to be getting one in a couple months 🤗

[quaint hinge]

Oh nice!

Is it the top choice for each or just the basic laptop?

I have a dream bucket list for some expensive things and I chose the huge/extra hard drives, biggest/best gpu/cpu, etc.

I could prob get the basic setup, but I want to go for broke xD

[rapid badger]

U can buy a $70k machine from them lol

[quaint hinge]

https://tenor.com/view/really-gif-16462970074420267735

I thought the 4k was steep lol

[glad crystal]

Added a z-test vs. t-test logic and hypothesis testing to my GRC auditing script.

That picture uploaded like shit.

Python is

[frigid mountain]

😄

[quaint hinge]

That one did too

Is it just my phone that can't render it lol

[glad crystal]

Yeah, that shit bugs me because it's crystal clear in my photos.

[quaint hinge]

Its all good. Its discernible for the most part

[worthy cargo]

Bro. PHP is fire

I like PHP

Python is ... blah

I like my curly braces

[frigid mountain]

@worthy cargo Got my tele from the luthier. Just fired up the Billy Strings livestream. They started earlier than I expected so I'm watching the backed up footage so the show just started for me. 🙂

[worthy cargo]

Nice Dan

[frigid mountain]

wyd?

[worthy cargo]

I gotta need a Luther too. Get my 7 string restrung and intonated

I'm omw to dinner and it's raining a lot

[frigid mountain]

yeah. That's my 3rd guitar so I'm finally all setup and g2g. It's supposed to rain here later. I had bbq ribs and fried catfish for dinner. Kali is having a split elk antler.

[worthy cargo]

It's got Floyd rose

Fuck yeah

[frigid mountain]

I don't use a tremolo so I had the luthier block my bridge to make it like a hard tail.

[worthy cargo]

I'm going to an Arabic hooka lounge restaurant

[frigid mountain]

fun

i recommend the kebob

[worthy cargo]

Yeah some folks invited us

I love kabab

I also love Khabib

Lol

Mma

[frigid mountain]

enjoy dinner

ttyl

[worthy cargo]

Later bud

[glad crystal]

Here's a better photo. Google photos compressed the image or something originally

It uses pandas, numpy, matplotlib, seaborn, and scipy.

[terse dirge]

Deep dish goin into the oven 🔥

[rapid badger]

Waiting on some rice and meat stuffed peppers

[worthy cargo]

We're at the restaurant

Nice

[alpine pumice]

don't forget your purse

[worthy cargo]

I'm gonna smoke hooka and eat Arabic food tonight's

[fallen abyss]

Enjoy brother!

[glad crystal]

Ive been smashing some pizza for the last couple hours myself

[alpine pumice]

every pizza is a personal pizza if you try hard enough

[latent oak]

lol

[glad crystal]

I give the crust to my dog.

[latent oak]

That is some Mitch Hedburg right there

[glad crystal]

Mitch Hedberg was the GOAT

[latent oak]

Anywhere is walking distance, if you’ve got the time

[glad crystal]

Lol

I used to do drugs. I still do but I used to too.

[latent oak]

lol

[glad crystal]

His smacky the frog skit is the one that got me hooked.

[latent oak]

Rice is great when you’re so hungry, you want to eat a thousand of something

[glad crystal]

Lmao

I haven't slept for 10 days, because that would be too long.

[west venture]

You can't be awake that long

[latent oak]

lol

[glad crystal]

Read the joke again.

[west venture]

No

[glad crystal]

https://tenor.com/view/joke-missed-over-your-head-gif-8604199

[latent oak]

Do it

[west venture]

No

[latent oak]

The nerve

Kids these days

[fervent mantle]

https://tenor.com/view/napoleon-dynamite-wave-bye-gif-5121301879489036543

[glad crystal]

And I must say, I would like to challenge your 10 days awake belief. You ever heard of amphetamines? Extremely dangerous but people have done it.

[turbid goblet]

https://tenor.com/view/cat-fall-epic-embed-fail-fail-funny-gif-21341768

[west venture]

https://tenor.com/view/embed-no-no-embed-megamind-megamind-meme-gif-25261934

[latent oak]

https://tenor.com/view/embed-fail-gif-23637150

[fervent mantle]

hello everyone

[west venture]

Hello

[latent oak]

Heya

[glad crystal]

https://tenor.com/view/jesus-ballin-mars-bars-gif-19910027

[glad crystal]

Hey there 👋🏽

[west venture]

ozymandias

[latent oak]

Ozymanreviews?

[fervent mantle]

think i might have a memory leak.

[west venture]

Yeah that's a thing too

[winged marsh]

anyone having this problem where like half the time the machines arent replying back to attempts to ping or nmap them?

its been happening all day to me

have to keep resetting them

[turbid goblet]

is it on and off

[latent oak]

Only half of the time machines?

[winged marsh]

yes

[turbid goblet]

i moved to tcp vpn and that fixed my issue

[winged marsh]

thanks

[latent oak]

https://tenor.com/view/back-to-the-future-doc-brown-smile-hey-christopher-lloyd-gif-4584331

[glad crystal]

https://tenor.com/view/bookio-gif-13932157847762104386

[west venture]

I wanna get to omniscient but I just can't

Bc I don't wanna do challenges

[glad crystal]

That attitude is why.

[west venture]

Challenges are boring

[glad crystal]

Make them fun

[latent oak]

Have you tried applying more jigawatts to your flux capicitors?

[west venture]

Backspace can we make a deal?

[latent oak]

No

[glad crystal]

https://tenor.com/view/deal-no-gif-9429617

[west venture]

*Yes

You spelled yes wrong

[latent oak]

Your powers of negotiation are too powerful

https://tenor.com/view/rule-121-everything-is-for-sale-even-fr-iendship-star-trek-ferengi-gif-14617843925530401624

[west venture]

Anyways the deal is, when the new windows box comes out, you do it and then give me a step by step writeup. In exchange I will give you 30 gold.

[glad crystal]

https://tenor.com/view/negotiate-5th-element-bruce-willis-gif-24816366

[latent oak]

https://tenor.com/view/hey-gurl-you-wanna-lets-do-this-lets-do-it-star-trek-gif-15443817

[glad crystal]

[west venture]

30 of these

For a writeup

40 of these for writeup and a Facebook zero day

[glad crystal]

You don't write your own zero days?

[latent oak]

You drive a hard bargain, but, I’m going with no

[west venture]

Why do you keep spelling yes wrong

[latent oak]

No

[west venture]

^ again smh

[glad crystal]

https://tenor.com/view/tough-crowd-toughcrowd-rodney-dangerfield-gif-22093859

[latent oak]

Take my wife, please

[glad crystal]

https://tenor.com/view/ill-never-get-married-doc-shaw-malik-payne-house-of-payne-never-gonna-get-married-gif-18558336

[west venture]

I don't want children

[glad crystal]

https://tenor.com/view/prenup-marraige-love-gif-4986030

[west venture]

My laptops battery charging light started blinking In amber all of a sudden

[glad crystal]

https://tenor.com/view/monkey-working-computer-fire-burning-work-pressure-gif-797541937587978407

[west venture]

Apparently it means catastrophic/fatal battery faliure

[glad crystal]

Uh oh

[west venture]

I don't care 💅

[glad crystal]

https://tenor.com/view/nicholas-cage-you-pointing-smoke-gif-5426646165088032025

[latent oak]

https://tenor.com/view/michael-scott-the-office-no-respect-gif-13432188

[winged marsh]

work at facebook, distract zuck with beetles, put backdoor in

[west venture]

Put a backdoor in zuck?

[glad crystal]

Facebook is the backdoor.

[winged marsh]

nmap is taking forever what do i do

pinging works

regular nmap works

wtf

[west venture]

What's non regular nmap?

[quaint hinge]

-min-rate=5000

[winged marsh]

flags like -sV and -sC

[glad crystal]

What box are you on

[quaint hinge]

For first scan

[latent oak]

Go YOLO mode

[winged marsh]

sequel

[quaint hinge]

Then use those ports for deep scan

[west venture]

Don't do -p-

Like ever

[turbid goblet]

use rustscan

[winged marsh]

its good sometimes

[west venture]

Useless for HTB

[winged marsh]

it was necessary to find something once

[glad crystal]

Like someone else said, do min-rate and probably scan a smaller range of ports

[winged marsh]

i know exactly what port it is

[turbid goblet]

rustscan -a 10.129.12.202 --ulimit 5000 -b 2000 -- -A -Pn

[quaint hinge]

No, use -p- with --min-rate

[winged marsh]

i just need the version

[quaint hinge]

Then use deep scan on those poets

[turbid goblet]

rust scan then have nmap scan the ports that are open

[quaint hinge]

...ports.

[winged marsh]

nvm it finished

[latent oak]

I want to do a deep poet scan

[west venture]

That's 2 steps

[winged marsh]

didnt even know nmap has an argument for deep scanning of specific ports

[quaint hinge]

2 steps is guud

[west venture]

What

-p <port>

[winged marsh]

yes i see it here now

thank you

[turbid goblet]

prob should do some academy before sending boxes if u dont have the basics of nmap yet lol

[winged marsh]

i wasnt fucking around with it because its been slow all day

the boxes have been iffy

i had to switch my vpn

[quaint hinge]

-sCV -O, or just -A has a lot

[glad crystal]

Have you finished starting point?

[winged marsh]

yeah

[west venture]

He didn't know you could enter a specific port number and scan that

[quaint hinge]

O.o

[west venture]

Or numbers

[winged marsh]

no i knew you could do it i just forgot how

[quaint hinge]

-p22,33,44

[glad crystal]

You could always do the top 1000 first and then go from there

[quaint hinge]

Its all good

I forget lots

[winged marsh]

it still takes fucking forever regardless of whether i specify a specific port

even though i have decently fast internet

[glad crystal]

It's not just the internet factor bro

[quaint hinge]

Wrong.

[winged marsh]

yeah ive got a good pc as well

[latent oak]

Sometimes boxes can be a bit slow… could be a variety of factors

[quaint hinge]

Bad scan. Use a simple -p- with --min-rate

[west venture]

If it's a Linux box, while nmap is scanning, put the IP address in the hosts file and navigate to the BoxName.htb in the web browser

[glad crystal]

The targets configuration matters too

[west venture]

I guarantee you there's a website

Then enumerate from there

You don't have to wait around for nmap to move on enumeration

[quaint hinge]

If you've already scanned and have ports to enumerate, those are likely it. You need to dig into them.

[glad crystal]

I don't know how deep into depth HTB goes but you can block ICMP

[winged marsh]

this is a mysql with no http

[west venture]

Oh

Well 99% of Linux boxes I've done has port 80 open

[winged marsh]

this one has one port open

its 3306

and it has mysql

[turbid goblet]

https://tenor.com/view/ريال-مدريد-gif-9964137448935000493

[west venture]

Yes

I know

Bc I haven't done that

[quaint hinge]

What box is this?

[winged marsh]

sequel

its one of the earlier ones

i started yesterday so

[west venture]

Easy?

[winged marsh]

very easy

im just doing them in order

of however it shows them to me

my first time ever doing an sql hack with no website

is it really hacking if theres no password

[glad crystal]

If you're on sequel, -sV -sC should work fine. You have another issue.

[winged marsh]

it worked now but it took like a good 2-3 mins

which is very annoying

[glad crystal]

Run it again with -n and see what that does for speed

[west venture]

Try to connect with admin/admin there's a good chance you'll get in

[quaint hinge]

-sCV

[winged marsh]

theres no password requirement

[west venture]

Well then you just connect

[turbid goblet]

why are there squares

[winged marsh]

correct

[terse dirge]

A bit of a failed attempt

[west venture]

Whats inside?

[winged marsh]

4 databases

[turbid goblet]

put cheese on that and i bet it still tastes good

[winged marsh]

they all look boring

but one has the flag im assuming

[glad crystal]

You using the writeups?

[west venture]

What are their names?

[terse dirge]

It's under the sauce

[winged marsh]

got the flag

[turbid goblet]

oooo

[winged marsh]

htb, information_schema, mysql, performance_schema

[winged marsh]

the flag is in htb then table config

[turbid goblet]

looks exactly the same

[terse dirge]

The pepperoni is also under the sauce

[glad crystal]

Starting point has write-ups available. Use those while you're learning but make sure you read them and try to understand the "why" behind it all.

[west venture]

Well the only two you should be focusing on is HTB

The other 2 are default databases

[winged marsh]

yeah i look at those if im unfamiliar with how it works

kinda the only way to know what to do

if you dont already know

[glad crystal]

Nothing wrong with using them when you're learning. Thats what they are for.

[winged marsh]

i also have hacktricks and i used that once without looking at the walkthrough

[glad crystal]

If you have the time, re-write the write-up and break it down from your own understanding. It will help you learn.

[winged marsh]

i dont think thats necessary

[glad crystal]

Suit yourself.

[turbid goblet]

it will be

[quaint hinge]

It is

[turbid goblet]

pentesting is like 90% reporting

[glad crystal]

95%*

[quaint hinge]

90 lol

[winged marsh]

i just do this for fun though

[turbid goblet]

word

[winged marsh]

also these kinds of skills are helpful if you ever need them

[terse dirge]

1/4 of it is 700kcal 💀

[winged marsh]

i doubt i will though

[glad crystal]

Ran a command? Document it. Discovered a vuln? Document it. Made a system change? Document it.

In cybersecurity, you document everything. Furthermore, you have to understand chain of Custody.

[west venture]

You can do bug bounty and like earn money

[winged marsh]

are you like a cybersecurity professional

[quaint hinge]

Thought this box was called sequel?

[quaint hinge]

One of my teammates gets bugs all the time. Reports are important.

[winged marsh]

im not that big into coding

[glad crystal]

Undergraduate almost finished with a B.S. in cybersecurity. So, you could say that. I've got thousands of hours under my belt doing labs, learning NIST, ISO/IEC, etc.

[winged marsh]

thats great

[glad crystal]

You should see my cybersecurity playbook lol

[west venture]

I need to be able to consistently find them tbh

The job market is fucked. It's my only hope

[glad crystal]

Job market is shifting. Learn GRC.

[west venture]

What's that

[glad crystal]

They aren't looking for just blue team and red team anymore. Market is shifting to purple team.

Governance, risk, and compliance.

[winged marsh]

you know i watched pen testers hired by the us department of energy successfully get far enough into the energy grid to be able to shut it down for i think was most of the U.S (its been a while since i saw the video)

they mostly just wore high vis vests and pretended to be people

then plugged in whatever they wanted into servers and shit

[wintry venture]

Question for you guys, I was about 45% through CPTS and had to take a break for my MS for a couple of months. I took pretty detailed notes but not sure if I should just start over and read or pick up where I left off / fill in gaps. Anyone went through the same situation?

[winged marsh]

people had passwords written on sticky notes

[glad crystal]

A lot of pen testing involves social engineering.

[west venture]

Can I complete an entire certification path just from cubes earned through seasonal rewards?

[quaint hinge]

Tf is GRC. Im so out of it recently and hacking is becoming doctor school with all the acronyms.

[glad crystal]

Skim through your work and decide from there. It's your call on how well you feel you remember it.

[frigid mountain]

social engineering is the easiest exploit. People are the weakest link in cybersecurity.

Finding an actual vuln is hard. Pressuring someone into sharing their MFA is much easier.

[glad crystal]

Governance, risk, and compliance. Learn the NIST RMF

[quaint hinge]

Okay. Am I unable to see this? Where is sequel?

Can't find tjis machine

[glad crystal]

Starting point

[west venture]

Maybe you should move on to newer easy machines, they'd teach you stuff

Unlike logging into an open MySQL server and getting a flag

[quaint hinge]

Bruh

[glad crystal]

What? Lol

[quaint hinge]

I just spent 15 mins opening my VM thinking this box was misbehaving and wanting to check and its got all the steps listed.

[glad crystal]

Lmao

[quaint hinge]

To the homie. USE GOOGLE

Everything in hacking is about learning what, how, why.

[turbid goblet]

can i use bing

[quaint hinge]

Straight to jail

[glad crystal]

I don't want to give up my personal GitHub with my real name on it so I had AI summarize my hierarchy structure. Warning: wall of text incoming for those interested in GRC.

[worthy cargo]

Smoking hooka at the Arab Lounge

[glad crystal]

To excel in Governance, Risk, and Compliance (GRC), professionals must master the NIST Risk Management Framework (RMF) and its associated documentation lifecycle. The journey begins with the Prepare and Categorize phases, where you must develop Roles and Responsibilities (PM-16) matrices, comprehensive Asset Inventories (CM-8), and Network Diagrams (SC-7) to define the system boundary, followed by a Business Impact Analysis (BIA) and Security Categorization (FIPS 199) to determine the system's criticality. Moving into the Select and Implement phases, you are responsible for authoring the System Security Plan (SSP), which outlines a tailored baseline of NIST 800-53 controls, along with detailed Implementation Statements and Technical Configuration rulesets that document how those controls are physically engineered. The high-stakes Assess and Authorize phases require proficiency in generating Security Assessment Reports (SAR), conducting Vulnerability Scans (RA-5), and developing Risk Heatmaps and Plans of Action and Milestones (POA&M) to manage residual risks, ultimately leading to the Authorization to Operate (ATO). Finally, for the Monitor phase, practitioners must maintain Continuous Monitoring Strategies (CA-7) and Incident Response Testing Logs (IR-3) to ensure the system’s defensive posture remains resilient against evolving threats. Master these artifacts, and you transition from a "technical" user to a "strategic" asset that organizations are eager to hire.

[frigid mountain]

https://tenor.com/view/wesker-albert-albert-wesker-resident-evil-resident-evil-4-gif-5143688443782660001

[glad crystal]

https://tenor.com/view/druski-shrug-hands-up-druski-shrug-druski-idk-meme-gif-7093177929627107381

[quaint hinge]

Thats like trying to learn grammar before the alphabet. I swear. Mfkers in charge dont want professionals. They want drones who were able to be beaten into submission....

[glad crystal]

It's a dance. You learn both at once (technical aspects and governance).

[frigid mountain]

wtf?

no

[glad crystal]

I wanna speak to your manager.

[frigid mountain]

[quaint hinge]

Yes

Game challenges

[split patio]

when my friend asked me when I was sick today

What my friend said : You sick

What I heard : You Six

And I replied to my friend: Yea, im seven

[glad crystal]

https://tenor.com/view/bosnov-67-bosnov-67-67-meme-gif-16727368109953357722

[sick gate]

https://media.discordapp.net/attachments/872924113725956106/1213894709169356850/fatseal.gif

[quaint hinge]

Ive had 6 or 7 cigarettes fretting about this nonsense.

[glad crystal]

Fretting about what

[quaint hinge]

The box I thought was broken.

I think I need vacation from work.

[glad crystal]

Well, is it broken?

[quaint hinge]

No.

[glad crystal]

Then let it go and move on 🙂

[split patio]

I noticed a similarity in your username to a food item

[quaint hinge]

marcescence

[fervent mantle]

just started my path today.

[sick gate]

Regular Sherlock Holmes

[split patio]

Ah okay, I just found out😅

[sick gate]

https://youtu.be/DZySt3i2qm4

[raven rain]

good luck and have fun

[iron galleon]

is the best way to get to pro hacker doing challenges?

im tryna calculate how much it takes to get there and it's like all the boxes or something

obviously not all but let me see how many more id need

i have like a week

10 more machine roots

so basically a full page and like a few more

[quaint hinge]

Its any active content. Whatever you can make decent progress in

[iron galleon]

damn man

this is gonna suck ass

ill learn i guess though

[quaint hinge]

Try not to measure your progress on ranks.

[glad crystal]

Hacker rank is still pretty impressive.

[quaint hinge]

The content shifts constantly. If you get a good window you can go high on easy content.

Its all about what you can do. Some guys never go past newb and are really, really talented.

I only got to pro bc I had a few months off work to hack often. If I didn't Id still be at hacker.

[iron galleon]

im trying to rank up plus the cpts curriculum im almost done the latter

like 68% done

im just left on the advanced shit

[turbid goblet]

im one box away from hacker and i dont know shit still

[iron galleon]

from my perspective, at least, at the moment

[turbid goblet]

next season box is gonna be the box Pog

[iron galleon]

good luck getting that 1 box

could do it rn

imma get back to the grind in a few

[turbid goblet]

aint no way im rooting garfield

[glad crystal]

Man, I'm exhausted. I'm trying to juggle college, NCL, and HTB.

[bronze lion]

Gn

[glad crystal]

I have to do a statistical analysis project tonight.

[bronze lion]

Imagine taking rest

[glad crystal]

I practically don't lol.

[iron galleon]

imma try garfield next actually

i did overwatch and that shit was hard i can't lie

idk if i can say which part

i wont

but still

[solid moon]

COAE is an April fools joke right

[glad crystal]

I tried to jump into active boxes and I don't think I was ready. I have a very solid foundation when it comes to networking, OSes, hardware, and legal. But I am fresh on the scene for proof of concept penetration testing. Definitely shows me I need to step my red teaming game up to strengthen my purple teaming angle of expertise.

[iron galleon]

id say it's a matter of pattern recognition yeah

i've done something like 40 boxes so far

of retired content

iirc

let me check

ye 41

[turbid goblet]

how u check that

[iron galleon]

htb profile

in labs

[glad crystal]

Yeah, a lot goes into it. Helps to understand multiple protocols, scripting, pen testing tools, etc.

[bronze lion]

Damn

[turbid goblet]

36 im catchin up

[solid moon]

I tell people its an oral tradition; you learn by seeing others do it. Watch the videos of someone like ippsec or alh4zr3d doing a box and follow along

[glad crystal]

I think the web server boxes are my biggest weakness rn.

[iron galleon]

when i first started pwning boxes that shit hurt my brain

i can't lie

even with the writeups

[glad crystal]

Web Servers are fucking though.

[solid moon]

Use write-ups when you're starting eventually you won't need them. There is no shame in using the help around you

[maiden anvil]

this

[glad crystal]

Yeah, I decided I gotta walk before I can run. Im going to capture as many retired machines as possible after I finish up tier 2 starting point. Already did tier 0 and tier 1.

[quaint hinge]

Idk, I learned a lot from raw dogging it. I started some years ago tho. I needed this discord to find nudges.

[glad crystal]

https://tenor.com/view/hot-dog-girl-gif-12001974846064297556

[quaint hinge]

Sometimes banging your head against the wall is the best way.

[glad crystal]

[dusky smelt]

hello

[quaint hinge]

https://tenor.com/view/gay-d-gay-gif-26897914

[dusky smelt]

I'm about to install kali linux as dual boot I have nvidia gpu and intel cpu is there anything I need to know before installing it?

[solid moon]

I haven't finished starting point even IMO some of the tier 2 are too annoying to set up

[glad crystal]

Yeah, look up how to configure your machine to use your GPU. It's pretty easy, though. Assuming you already know how to properly configure a dual boot.

[glad crystal]

The writeups are a bit old. Some of the Code and commands have to be re-worked.

[dusky smelt]

noted, I appreciate it. First and last time I installed it was few days ago but the OS itself lasted few minutes, it broke down right after I installed graphic drivers for gpu with nouveau command. Thanks again.

[solid moon]

@glad crystal https://docs.google.com/spreadsheets/u/1/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8/htmlview
This is the tj null curated list of htb machines you can do to study for the oscp. If you want a sense of progression in your studies try some of these and see how far you get

[bronze lion]

Lol

[iron galleon]

use a virtual machine for isolation since ur doing hacking

[bronze lion]

Are u new to Linux btw?

[glad crystal]

You don't use nouveau when you configure GPU setup. You're supposed to disable it or whatever. It should do it automatically.

[glad crystal]

In fact, you might try live booting first before you try a dual boot.

[dusky smelt]

I am actually, I have one and been using it for a year I think and I will keep using it for some malware analysis tho

[solid moon]

IMO its a lot more structured than doing random boxes unless you are doing academy for cpts

[sick gate]

Idk why you'd move away from using a VM

[dusky smelt]

Nope, I was on linux for a year (maybe a little bit more than a year)

[glad crystal]

Because GPU pass through on a VM is a pain in the ass.

[dusky smelt]

laggy, doesn't fit me for hacking any machine from HTB

even tho I set 8GB Ram and gave it 500GB

and idk about processor

[bronze lion]

Nice

[dusky smelt]

real

[dusky smelt]

I'll try it thanks

[frigid mountain]

just fielded a call from my bff's wife. She was all concerned she done been hecked because she was getting a scary message when trying to go to google....It was a date/time mismatch on her macbook air. Crisis averted.

[solid moon]

If you're gonna dual boot be aware windows uses local time and Linux uses UTC and periodically windows will change your hardware clock because it wants to be the only OS on your system. You have to change your registry if you want to avoid that

[frigid mountain]

😄

[glad crystal]

Fasho. Live booting is way safer tbh

[frigid mountain]

weird ya'll are talking about clock issues here at the same time though lmao

[dusky smelt]

sure, I'll keep it in mind, thanks

[solid moon]

That and you can't use full disk encryption on both windows and Linux and expect your boot loader to work. I've never gotten veracrypt chainloading to work its too sweaty for me

[glad crystal]

https://tenor.com/view/planets-070shake-guilty-conscience-outer-space-aligned-gif-18502145

[frigid mountain]

i can go back to watching Billy Strings shred on the livestream 🙂

[glad crystal]

I am procrastinating on this project ngl.

[dusky smelt]

would it work if I install it on HDD and windows on SSD

[glad crystal]

Got the first section done but I'm just chillin lol

[solid moon]

Windows tends to delete other boot entries of other drives on the system even if you installed it first and then installed the other system on another drive. It'll just randomly overwrite your master boot record one day in the background

Idk if registry edits will fix that behaviour

[glad crystal]

https://tenor.com/view/fuckthis-ron-swanson-dumpster-trash-nickofferman-gif-4679104

[solid moon]

Usually if you have another install of grub it'll get overwritten

Kinda sucky its why I don't dualboot anymore

[dusky smelt]

oh so that might be the problem I had when I installed it first time cause I am sure I did everything right and still it got broken, it launched linux only in TTY Terminal

[solid moon]

I just use Kali and a windows vm

[glad crystal]

Should I say it?

I think I'm going to say.

[dusky smelt]

that's better tbh

[glad crystal]

[dusky smelt]

real

[glad crystal]

Just be like me and go bare metal because you've finally had enough of being treated like a guest in your own house.

[solid moon]

If you need a VM for engagements you can use Kali VM in Kali

[glad crystal]

https://tenor.com/view/shrek-farquaad-its-a-sacrifice-i-am-willing-to-make-its-a-sacrifice-but-its-a-sacrifice-i-am-willing-to-make-gif-2046508029570999696

[solid moon]

It may sound silly but I do it

Roast me

[worthy cargo]

Kali vm in kali?

[dusky smelt]

5 minutes in, I got a "Your device ran into a problem a d couldn't be repaired" just for trying to go in BIOS, didn't even start an installation 💀💀💀🥀

[worthy cargo]

What

I use kubuntu and vbox as my hypervisor

I use a kali vm

[glad crystal]

Explain this in more detail?

[dusky smelt]

I managed to fix it but what happened was when I tried to go in bios, after pressing del few times I got the message: Diagnosing your PC, connecting to network and finally a black screen came up with text: "Your device ran into a problem and couldn't be repaired.
Click or press Enter to see other recovery options.
Log file: C:WINDOWS\System32\Logfiles\Srt\SrtTrail.brt" and I pressed enter, got in the kind od recovery mode I forgot what's the name of it and I pressed exit and continue so it loaded windows

But still, small problem is that I yet cannot enter bios with pressing DEL so I had to go to recovery in settings and advanced reset and thru that I went in UEFI Firmware and entered BIOS

[glad crystal]

Try running these in order from CMD as administrator to make sure everything is repaired.

sfc /scannow

dism /online /cleanup-image /restorehealth

bootrec /fixmbr

bootrec /fixboot

bootrec /rebuildbcd

Once you do that, make sure you are pressing the right key to get into BIOS. Its normally like F12.

[dusky smelt]

Sure, I'll try, as for BIOS it's del but I tried f12 too, I'll try f11 too but I'm sure last time I went in bios was with del button, that even says at the bottom of the screen when logo of my motherboard or whatever it is appears, I just broke something

Thanks

[glad crystal]

Those won't fix a BIOS issue but doesn't hurt to make sure all of your system files are fine.

And BIOS is either F10 or F2, my bad.

[worthy cargo]

https://github.com/shuvonsec/claude-bug-bounty

[dusky smelt]

Yepp I got it thanks man, I turned off fast boot and now it works when I press few times F11 for boot options

[glad crystal]

For Lenovo sometimes its Fn + F2

Nice

You turning off secure boot?

[dusky smelt]

I turned that off too

[glad crystal]

If you're trying a dual boot, make sure you don't wipe your recovery partitions or anything.

[dusky smelt]

Yes, now the only thing I gotta fix is USB on which is kali installed and it's not being recognized in boot options

Small problem I hope

[glad crystal]

Usually is. You have to flash the correct file. Try flashing with raspberry pi imager. Usually have problems with the other imager programs.

Also, you mentioned having two drives. You might run a RAID configuration incase a drive fails or has problems.

[dusky smelt]

Noted, I'll do that, thanks man❤️

[glad crystal]

No problem, man. Raspberry pi imager is my favorite flashing tool. I've never had issues with it.

[west venture]

So my laptops battery led went from flashing amber to flashing red and has cut power to and from the battery and the bios is asking me to take the battery out immediately

So dramatic smh

[iron galleon]

WOOHOOHEHEWAHA

[iron galleon]

rip laptop

[static badge]

what happened to my garden 😭

[iron galleon]

i mowed that shit down

[static badge]

😭

[iron galleon]

lawn mower sounds brrr

[robust walrus]

Any backend developers here?

[iron galleon]

https://tenor.com/vUqdAPxaHpe.gif

[robust walrus]

Im doing an internship developer internship and my job is basically using claude to generate codes. And just fixes or implement features in lovable/manus

Is this real or what

Have not written a single line of code.

They also be having me learning n8n

[iron galleon]

i just ate a bunny's ears off

like a chooclate bunny

[rapid badger]

Welcome to the age of slop

[robust walrus]

It feels hmm

Not real work?

[iron galleon]

none of this is real

you should wake up soon

[robust walrus]

[iron galleon]

i'm applying for jobs as a sleep paralysis demon

[robust walrus]

So, a therapist

[iron galleon]

found out what your worst fear is and im a red teamer

anyways sleep paralysis demon got to sleep too

im finna sleep

dont wake up

[cloud rapids]

Hey 👋🏻

[elder lichen]

hi

[cloud rapids]

Wasup

[glad crystal]

This data analysis project for applied statistics is going to end up turning me into a sports gambler. 😂

[rapid badger]

phone shots of code is wild work

Ask ur friendly llm how to take a screenshot

[naive kernel]

Morning hackers

[knotty grotto]

Morning guys. I'm the newbie

Nice to meet you guys

UwU

I am doing Way of Thinking section in htb and found this discord

[west venture]

Kewl

[bronze lion]

How does it look?
Is it he or she

[bronze lion]

Morning and good to see you here

I hope that u will find this server useful

[stuck cliff]

how to heck

[knotty grotto]

Yes, I'll try my best and I think I'll ask a lot here

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[lime trout]

@stuck cliff ^

[stuck cliff]

yes bro @lime trout

[lime trout]

above link

[stuck cliff]

man htb is annoying as hell

[lime trout]

Has good info getting started 🙂

[stuck cliff]

i needa pay for the good stuff

[gaunt gale]

does discord block vpn users universally?

[quasi ridge]

what doin

[gaunt gale]

every time I connect to a VPN discord stops letting me send or receive messages

why

this is with mullvad

I would try on riseup or proton but don't see the point

[late sleet]

Not for me, however some addresses via proton have been blacklisted by discord

[gaunt gale]

for me mullvad has been blocked at the very least

I am gonna try riseup and see if that works too or what about proton

[late sleet]

Yeah, mullvad gets blocked by everything. They just don't have enough vpn servers to bypass certain blacklists

[gaunt gale]

gotcha

[late sleet]

Proton works just fine, not sure about the free subscription

however some ips I've come across have been blocked by discord

[gaunt gale]

hi testing to see if I can connect from protonvpn

yay it works

ok cool

let me try something else

ok it won't let me go from mullvad > proton but proton is a good backup for discord

hold on a sec

[stuck cliff]

hecking is cool

[terse dirge]

Why does bro need mullvad?

[gaunt gale]

because its the best privacy of any vpn

its not like I'm using tor

lmao

[runic cliff]

why vpn for discord?

[terse dirge]

Most tor nodes are owned by governments

[gaunt gale]

I use it for everything

privacy

[gaunt gale]

I know what I said is I'm not using that

chill tf out

[terse dirge]

I was just saying a fun fact

[gaunt gale]

ok

[runic cliff]

rlly wt is privacy if u r using a public platform?

[gaunt gale]

I'm connecting to other stuff besides discord

but whatever

I know discord knows who I am that's not my issue

[silver forge]

why would discord know who you are, unless you have had bad opsec

[terse dirge]

[gaunt gale]

well, they know because I'm not hiding my identity from discord

also privacy and anonymity aren't the same thing

I'm doing privacy not anonymity

anonymity is about hiding your identity

privacy is about something else

you just aren't familiar with the difference between the two

[silver forge]

[austere sinew]

Morning ping @sturdy thistle

[summer urchin]

@supple plume could you invite me to our ctf discord server? I'll explain what happened

[summer urchin]

woloooooooooo health check

[silver forge]

t

[austere sinew]

Heyooo we doin better hru donut

[supple plume]

Explain in dm please

I can see 2 donutmasters

[silver forge]

apparently wolo is an air tank

[austere sinew]

WHAT

NO

BLASPHEMY

[austere sinew]

@static pasture CAN CONFIRM IT IS AN AGE OF EMPIRES REFERENCE

[silver forge]

but I trust Google implicitly

[austere sinew]

[summer urchin]

glad to hear! (I'll send a fr and explain some things in DM)

[static bloom]

[summer urchin]

heh, u want me to tell u too?

[static bloom]

shoot a dm

[hollow depot]

https://tenor.com/view/hackers-penn-teller-gibson-technoweenie-we-got-a-hacker-gif-17879803

[quaint hinge]

Hey donut. What did you submit recently, type i mean.

[remote bolt]

https://www.youtube.com/shorts/5xXKHmL7fY0

[frigid mountain]

hi

[azure remnant]

why would we put air in a tank while its available everywhere

Like its not even a special air

[graceful pendant]

https://giphy.com/gifs/AoE-Community-PfU0R7E4hhWBhZAhJ9

[remote bolt]

how to send text messages to urself from phone to linux pc:

1. install termux on phone
   2.connect with wifi and check ur local ip "ifconfig" or "ip route"
2. type the command "nc -l 4444" the -l means Listen
3. open terminal on linux pc and connect with ur phone ip "nc 192.168.1.6 4444"
   where 4444 is the port number and 192.... should be ur own local ip from phone, or do it the other way around find pc local ip and switch the steps

i installed f-droid via apk for my blackberry key2, got termux and nethunter kex via f-droid, now i can run linux kali pc on my phone

[left haven]

🫃

[austere sinew]

yessss

[glad crystal]

When you get doxxed and try to take your pain out on others but have to clue what the fuck you are talking about.

That is almost the equivelant of "your IP is 192.168.1.1" but somehow also astronomically worse at the same time.

And what's with the pedophile? There's way too much happening here. I've had enough internet for the day.

This screams "victim to offender overlap" from both parties.

https://tenor.com/view/horse-what-dog-what-cat-what-horse-dog-gif-12922782066956089731

[sturdy thistle]

time for whey shake

[rare monolith]

166.321.990.249🔥 🔥 🔥 🗣️ 🗣️ 🗣️ 🗣️

[supple plume]

That's the joke?

Ah got doxxed

[muted olive]

990 cant fit in an IPv4 octet 💀

[devout sail]

😔

Like 321 does

[muted olive]

lol

[devout sail]

It's IPv4-ng

[muted olive]

didnt see that

[muted olive]

IPv5 even

[remote bolt]

ipv3 does

[devout sail]

Nah IPv4-ng but all goes to 999

[remote bolt]

my vpn says im in mexico but im in europe x) am i a hacker now ?

[devout sail]

They should have asked me when creating IP

[muted olive]

yes

[remote bolt]

😄

i use protonvpn, what do u guys use, or recommend, i want free not paid

[glad crystal]

Give me a sec and I'll tell you my entire network infrastructure.

[remote bolt]

xD

u use proxychains tor and ur own vpn

[glad crystal]

Nah, but anything Swiss is cool. They have the strictest data privacy laws in the entire world. I like to use Quad9 for my DNS too.

[remote bolt]

nice

[glad crystal]

I kind of half-ass when it comes to my own security. All I do on my PC is school and CTF shit. All my MFA, emails, and banking shit is segmented too. I don't use any of those on my PC.

[remote bolt]

true

[glad crystal]

And I use FIDO2 keys

I guess that's not really half-ass... what am I saying

[supple plume]

IPvDeez

[remote bolt]

fast identity online

[rare monolith]

you don’t understand hes just using IPv999

[glad crystal]

My identity was comprised in a breach recently 🙁

Stupid hospitals keep getting fucking hacked.

[remote bolt]

😦

[devout sail]

I use incognito 🥸

[remote bolt]

thanks for the terms ive never heard be4, i'll try quad9 swiss country and fido2

i only know protonvpn

[glad crystal]

VPN is handy but if you're really worried about security you should strictly enforce HTTPS and take other measures. The biggest one being not to click dumb shit.

[remote bolt]

yes thats easzy

[glad crystal]

You should aso do checksums anytime you download anything.

And make sure you do hours of OSINT to ensure that the original source is trustable.

[remote bolt]

the only reason i use vpn is because my internet service provider can see which websites i visit, and the websites i visit can see my ip(which city im in)

[glad crystal]

You got your tinfoil hat ready? I'm about to lay it on you.

[remote bolt]

hahahahahha

[glad crystal]

https://tenor.com/view/conspiracy-heres-the-deal-tin-foil-gif-12879246013854436579

[remote bolt]

i am a webdeveloper since 2007 so i know exactly what websites know/log, easiest example is google analytics, they log which device u visited from, time, city,country everything

even when u login, which ip u logged in etc, even when the login failed, they log everything

[glad crystal]

A lot of companies do that and I am not about to spill the beans on how to stay anonymous lmao

You would probably have to do some illegal shit if you really wanted to be truly anonymous.

[remote bolt]

if u really want to be anon, dont use internet xD

[glad crystal]

Everything is tracked. Even the money you spend. It all has serial numbers and identifiers.

[remote bolt]

yes

when i get some cash from the ATM, the little camera is looking at me

[left perch]

Hey guys, just wanted some advice on choosing my next laptop :)

I attend a lot of live CTFs, and my current laptop is way too heavy.

I usually run a Windows VM for digital forensics (autopsy, EZtools, dotpeek, etc) and a Kali Linux VM at the same time

I was considering purchasing a MacBook Pro M5 Pro with 64 GB RAM or a Lenovo Thinkpad X1 Carbon Ultra X7 with 64 GB RAM

Thoughts would be greatly appreciated!

Just wondering if running a windows VM on Parallels still sucks on Mac

[glad crystal]

That's why I say you would have to break laws to be 100% anonymous. I don't even give a shit if the government watches me anymore. Of course they do lol. More worried about parasites.

[remote bolt]

yes

[small osprey]

why does it say % of users when you completed something? is that the amount of people who completed that track/box etc etc?

[glad crystal]

I've never noticed "%" but it does tell you how many people have finished the box.

[small osprey]

I might have phrased that wrong it says Rarity and the % of users?

https://i.imgur.com/LgFXeON.png

2.7% seems insanely low for a starting point?

[balmy oriole]

The AI defense module has been completed by 267 people but the complete AI has been done by more than 500 people ..how is this possible?

[jagged storm]

Go view how many people have gotten the first achievement in any game.

A lot of people are 'interested', but that doesn't mean that they actually get anywhere lol

[jagged storm]

This might be related to enterprise? Not sure, though.

[small osprey]

Still new to labs and all this, just need to navigate to where that is but I mean tier 0 is obviously the starting point so everybody should have done it, unless people couldnt be bothered xD

[jagged storm]

It came out long after the badge system did. I never went through it.

So unless an existing user went back to do it, they'd never do it. Plus, not everyone joining the platform is just starting out.

[small osprey]

That makes sense. thank you for clarifying

[rain scaffold]

Yo

[hoary dawn]

The current crypto meme market had to have been made so that money can be laundered without questions

And the bots are out of control too, can’t compete with the bots 😂

[swift canyon]

yo is premium necessary to start on htb

[summer urchin]

no
for labs, you can do active machines
for academy, all tier 0 modules are free (you receive the same amount of cubes as the amount of cubes you used to "purchase" the module while you finish the module)

[rain scaffold]

Yo what is error PJQ180

[sturdy thistle]

Google?

[rare monolith]

Gemini

[glad crystal]

That auto mute was wild

Tried to post DM screeshots of some guy trying to add random HTB users to get them in another server to "fight cyber bullies" and I got auto muted.

[rare monolith]

i wonder what do they define cyber bullies as

stupid autocorrect

[glad crystal]

Doubt they were actually trying to deal with cyber bullies. Seemed more like an attempt at a script kiddie trying to recruit people to do their heavy lifting for them.

[jagged storm]

https://tenor.com/view/do-you-have-any-idea-how-little-that-narrows-it-down-that-narrows-it-down-clear-now-its-clear-now-i-understand-now-gif-21256627

[hollow depot]

https://letmegooglethat.com/?q=error+'PJQ180'

[sturdy thistle]

Gym on Easter Sunday is fun

[next pumice]

help me, I'm trying to solve starter point Unified machine from last two days and i am unable to get the shell.

[quaint sun]

may be best to ask in #starting-point

[next pumice]

thankyu sir

[glad crystal]

Think I'm bout to pull another 2 days of no sleep. I have to get this damn project finished.

Just made the strangest batch of coffee I've ever made and it tastes terrible lmao

[next pumice]

no one is responding in starting point

brothers can you please help me

[glad crystal]

Ill message you in starting point so we don't clog this channel up with a topic that already has a dedicated thread

[next pumice]

thank you brother

[terse dirge]

Be patient

[sturdy thistle]

Leg day

Booked an appointment for the machines though. They’re new and I can use the half of the equipment that I know lol

[analog perch]

I tried Garfielding yesterday. Such an annoying cat!

[fervent token]

true that

[swift canyon]

any1 knows how to transfer files from main machine to htb machine

[fervent token]

curl?

[lime trout]

my fav way is just, python3 -m http.server then hit it from a browser

[swift canyon]

alright

[fervent token]

anyone. some ideas with garfield?

[swift canyon]

is the htb machine on the same network?

[lime trout]

oh i got it backwards

[swift canyon]

so theres a file that I need to download from htb

but it doesnt let me connect to htb on the machine

[fervent token]

how you connecting to it?

[quaint sun]

If you're connected to openvpn yes. Do ifconfig and check tun0 to find your IP.

[swift canyon]

I am not

[fervent token]

connect to it

[swift canyon]

I am using htb machine

[swift canyon]

ight

[fervent token]

can you ping htb to your?

[lime trout]

i think he means pwnbox

[swift canyon]

yea

[fervent token]

yea

I have no idea how that is functioning. do it via vpn void667

[swift canyon]

alright will do

[fervent token]

download the udp file.

[swift canyon]

never used openvpn on kali tho

[fervent token]

save it to a path.

all good. guidance here

save the ovpn file

[swift canyon]

openvpn already installed on kali?

[fervent token]

check the path and exe

sudo openvpn