general

[balmy vortex]

i never tell lies

[random aurora]

bro heartstone the game is very good and startgey game

[balmy vortex]

i love mmyes sticker thankfully it is still here

[honest terrace]

Hi

[latent oak]

jesus I love my job

is that weird?

[honest terrace]

@latent oak

Hi

[rancid totem]

these go binary string blobs are so so so itchy

[latent oak]

hi

I just found another vuln today 🙂

[patent lily]

good moningng

[rancid totem]

awesome

what is it about

[iron galleon]

if you're ever feeling generous im always here

as i buy a discord profile decoration

[signal mica]

Muted

😹

[iron galleon]

god i would love 5 thousand dollars right now

build myself a new pc

i mean we can even make it ten

[zealous charm]

It’s an easily doable goal for your first year of bug bounty

Go forth and do the hacky hacky

[latent oak]

I'm still doing my due-diligence... but my PoC just returned uid=0(root) gid=0(root) groups=0(root)

[zealous charm]

hope it’s more than the standard $3k crit

I hate that crit market value has been the same since like 2019

[heady sage]

https://klipy.com/gifs/mambo-mambo-omatsuri

[azure remnant]

Shirtless obama

[azure remnant]

This is a sign that someone has been cooked

[azure remnant]

Ayy ur on hack nexus

[latent oak]

It’s a pretty bad one… I’m just double checking that it’s not already reported

[azure remnant]

Its not ur fault if its reported but not fixed

[zealous charm]

Use it to exfil source code and find more bugs

[supple plume]

Turboeggplant

[gaunt gale]

hi how is everyone?

[supple plume]

@everyone

[gaunt gale]

I am doing the skills assessment for Information Gathering - Web Edition module. I'm doing pretty well so far. How is everyone else here?

[supple plume]

Nice skills ass you have to be very anal about it

[gaunt gale]

ya I can see that

[supple plume]

How is it going tho

[gaunt gale]

good. I am working on question 3. I am just waiting for gobuster to finish scanning.

which is pretty good

[supple plume]

Do you proxy fuzzing to burp?

[gaunt gale]

I am using gobuster right now I could use burp but gobuster feels adequate for this purpose. I mean you could use either.

but I like burp

[supple plume]

I mean you can use gobuster and proxy the fuzzing so burp can catch the findings on the target

And build a tree

[gaunt gale]

ah ok cool good idea

I don't know if that's necessary for this skills assessment tho

[supple plume]

Yeah also I use feroxbuster to fuzz recursively when it finds something very convenient for htb boxes

[gaunt gale]

but in general I'll do that its a good idea

cool

[supple plume]

Yeah since I discovered that I always do it that way

[gaunt gale]

cool. thank you. I'll try it at some point in the future.

[supple plume]

I even proxy sqlmap

[gaunt gale]

ah I see

good idea

I haven't gotten to sqlmap yet.

but I'll get there.

[supple plume]

I also have been using caido

A lot

Which is cool

[gaunt gale]

caido?

nice

what's caido?

[supple plume]

Yeah is similar to burp

[gaunt gale]

I would google it but I'm assuming you know

[supple plume]

Yeah is similar to burp

[gaunt gale]

I would google it but I'm assuming you know

[supple plume]

Yeah is similar to burp

[gaunt gale]

cool

cool

is it open source?

[supple plume]

I don't think so

But it gives some features only available in burp pro

And I don't like pirating stuff so

I am using caido until I can afford burp pro

[gaunt gale]

ya good idea

thank you

I may try it after I complete CWES

since I don't want to do something not in learning path for the exam

but ya this is great

its free too which is cool

[supple plume]

Yes pretty cool

[zealous charm]

caido has better ai integration which is neat

caido has better ai integration which is neat

caido has better ai integration which is neat

You can use it to cohack better than with burp

[austere sinew]

what are your opinions on caido

[zealous charm]

It’s good for skilled non professionals

[jagged storm]

ugh, finally

https://tenor.com/view/the-voices-meme-cat-gif-23917781

[zealous charm]

0x7ff is shared cache or system address space or something?

[jagged storm]

base address of loadlibrary. My shellcode can finally actually do things.

Well, after I unhook.

[supple plume]

I've been using caido a lot

Caido is good if you're poor

[zealous charm]

Running it with the claude code skills too?

[supple plume]

I can't afford AI anymore 🥀

I am living in 2005

All by hand

[zealous charm]

$20/month AI is okay

[supple plume]

Gimme tokens bro send RAM

[supple plume]

I have -100

[zealous charm]

By hand is fine, with AI is 10x hacker

[azure remnant]

Yeah hes good

[supple plume]

Probably x1.5 in my case

[azure remnant]

My AI pays me monthly for electricity

Its a slave at this point

[zealous charm]

I have spoken to hackers with anywhere from 2x - 6x $200/month AI plans

Just depends on your use

[supple plume]

Yeah it probably helps a lot

It's made me way faster as a dev

[zealous charm]

Everyone is now a software engineer

[azure remnant]

Nothing wrong with using ai

But i wish it didnt exist though

[supple plume]

Yeah but vibe coding != AI asisted coding

[zealous charm]

For sure, it’s like trying to exploit SQLi without SQLmap. It’s doable, and sometimes required, but it sure as hell makes it faster

[supple plume]

Yeah

[azure remnant]

It feels unreal

Bro we made rocks think

[supple plume]

Today I was doing a challenge that sqlmap didn't help the only way was automating with a script

[zealous charm]

You won’t be replaced by AI (yet) but you will be replaced by the engineer embracing AI

[alpine nimbus]

I havent managed to find any worth the time and money red-teaming with

[supple plume]

For a second order blind delete exfiltration

[zealous charm]

I’m at 1x claude max and 1x codex max and I find that to be enough for me

[alpine nimbus]

I have Gemini Pro right now and its good for generating text, images or a script but other than that its a delusional gaslighter

[zealous charm]

I found gemini to be the worst of the frontier models, I had to cancel it

[supple plume]

Chatgpt is also pretty bad

[azure remnant]

Deepseek user

[supple plume]

I mean api based

[zealous charm]

Claude has had my largest ROI, codex medium ROI

[supple plume]

Yeah claude is the only thing useful for me at hacking and coding

[alpine nimbus]

I was until I switched it out for nemotron

[azure remnant]

How do u use it for bug bounty ?

[supple plume]

Coding beyond making a py script

[azure remnant]

Or pentesting

Or say doing a box

[supple plume]

There are mcps for burp

[zealous charm]

“Plz find bugs, make no mistakes” then repeat that for 4-6 hours per day for 2 months

[azure remnant]

Wdym mcps

[alpine nimbus]

You try to correct it until it repeats all that you said back to you and learn nothing new

[supple plume]

Model context protocol

[undone fossil]

"find the bug"
"im stuck"
"here's what id do"
"ok i did that"
"omg agi"

[supple plume]

Is better if you look it up

[azure remnant]

I mean do u make it make the whole work or u just explain ur case and make it suggest next moves ?

[azure remnant]

💀

[signal mica]

https://tenor.com/view/frog-attack-jump-jumpscare-toad-gif-10906339586468151390

[zealous charm]

I’ll put it this way: we all have SQLmap, but yet only some bug bounty hunters find SQLi. Similarly we all have AI, but only some bug bounty hunters are making bank with it. Use your winning methodology + AI to multiply your skill level

[alpine nimbus]

"Tell me about this architecture, Gemini" -"Since you once mentioned making mushroom steaks 3 years ago, you'll appreciate to know that this machine is like a steak!"

[azure remnant]

I meant at the technical level

[zealous charm]

Yes

[alpine nimbus]

Honestly if you want my opinion the Google or Brave browser AI is better

Never tried Claude tho

[supple plume]

He basically said that it just helps you do what you already do but faster

[azure remnant]

Ex i wanted to solve a box with the help of AI, how do u drive it to help you ?

[supple plume]

It depends

[azure remnant]

Or does everybody has his own methodology

[alpine nimbus]

I'd try to ask it about the system if I'm unfamiliar with it. Sometimes a certain one being paired with something like Apache for example will tend to have some configuration holes in it

[supple plume]

Everybody does their own way

[azure remnant]

I see

[supple plume]

I can use it everywhere from the cli passing to burp and I have tools so it can use a rev shell or ssh

But after experimenting with it I found that for boxes is better do it manually

To maximize learning

[alpine nimbus]

I'd be down to hear opinions on those I havent tried like Claude and HackerAI but otherwise its gonna be Ollama for me or going back to just winging it alone

[worthy cargo]

I use text-generation-webui I think by oobabooga

[supple plume]

Claude is the only AI that will do something useful

[supple plume]

Hey!

[worthy cargo]

mistral-7b-instruct-v0.2.Q4_K_M.gguf

[supple plume]

How is it going

[worthy cargo]

That's the model I've loaded righ tnow

Hey bud

Doing well

Just ate food

[worthy cargo]

Doing SQLi labs on portswigger

[supple plume]

I like to do portswigger labs with curl 🤣

For some reason

[alpine nimbus]

I heard Mistral was a pretty good LLM too

[worthy cargo]

Slowly making my way through and learning

Then I'll do the SQLi labs at xssy.uk

Almost done with Adept level. Then on to Expert

[worthy cargo]

Yeah, it's pretty good.

[azure remnant]

Works for u

Daym internet

[alpine nimbus]

I recommend just not depending on it TOO much. AI can be amazing at doing a lot of quick googling quickly or a quick draft script skeleton but its better to ask it in a teaching mode about systems than just spamming "Hack this for me!"

Just make sure you understand whats happening before you start automating it

[supple plume]

🔥

[supple plume]

I only have 4 challs left on xssy but I can't do them

[alpine nimbus]

https://tenor.com/view/tinkering-tony-stark-tony-stark-jarvis-gif-24567852

[random aurora]

bro I dont know I feel heavy when I want learn my path in cybersecurity how to deal with this stuff ?>

[obtuse fern]

What do you mean heavy?

[random aurora]

like lazy to learn cybersecurity it been months I learned but I dont know still I feel burn out still I dont know !

[alpine nimbus]

Like... American..? 🤔 (ITS JOKES!! PLEASE DONT BAN ME!! )

[azure remnant]

I thought i can live with AI denial but i started to get lost ngl

[obtuse fern]

🦅 🦅 🦅 🦅 🦅 🦅

[azure remnant]

Merica 🦅

1 million pounds of pure democracy 🐦‍🔥

[proper dragon]

we have almost 2000 freedoms in storage
'murica

[alpine nimbus]

Yeah, its different than it used to be even from around the 2010s

[obtuse fern]

Its a marathon, not a sprint. Killing yourself mentally over being slow at learning isnt healthy. The proper learning pace is whatever works best for you and that can be just 1 or 2 hours a day to treating learning like a job at 6+ hours a day

[alpine nimbus]

Now theres so many systems and services. Updates 200x a day

[azure remnant]

Bro is not refering to any tomahawk cruise missiles
Must be the wind 🥀

[random aurora]

so if I took some rest and I feel ready I will return withou seeing news of cybersecurity or anything !

[obtuse fern]

Well news always happens, but taking breaks is normal

[random aurora]

what u mean by that ?

[obtuse fern]

And sometimes what comes from the break is that you realize that you enjoy the aspects like ctfs, but dont enjoy business stuff like bug bounties or a job in it

[random aurora]

no I always see news of cybersecurity without taking reset and translte some stuff and I feel like I feeled bored

[obtuse fern]

How can you feel bored if you're not learning anything

[alpine nimbus]

Better to just be consistent. Like I said, theres so many systems now and quick updates that you wont be able to know EVERYTHING. Specialization is more and more valued within the field.

[obtuse fern]

In order to be bored of something you have to be doing something to some degree

[random aurora]

reading news sometimes will give you some new vulnerabilites

[obtuse fern]

Ok, but I don't think bored is the word you're looking for

[alpine nimbus]

Analysis Paralisys

🪄

[obtuse fern]

Forbidden word detected, nuking from orbit

[worthy cargo]

Roadblocks

[proper dragon]

cloud cybersec is probably sitting on a pile of lit tnt

[random aurora]

no I feel bored all of stuff in cybersecurity basics always because I Forget some of it networking and linux and windows commands and bash and the web request many things so I feel bored man like I have little knowledge in networking and some stuff in linux but windows no and some bash command I know but I dont know windows commands and active directory I little of it so I have some knowledge but I like to have some stuff learning linux windows networking many things in one point infromation security foundation should be professional in it to go to job role pentesting to be ready I dont like to go other path without great knowledge I must finish all of it no just have little basics

[rancid totem]

woah

[proper dragon]

ive seen some shoddy cloud configs and some stressed out security teams at my company and were highly regulated
i cant imagine what its like on average

[obtuse fern]

Again I dont think bored is the proper word here

[turbid goblet]

Im bored

[rancid snow]

the cloud is basically: what if we took the concept of a server and then made things 10x more complicated for absolutely zero reason or benefit. Also the security of it is somehow the clients job too not the cloud host.

[obtuse fern]

The cloud: its someone else's computer

[alpine nimbus]

Hi, bored! I'm dad!

[proper dragon]

sorry, couldnt hear you over the sound of my cloud provider's money counters can you speak up

[random aurora]

okay I will define it for you like studying basics and feel bored you want apply what u have learned but still u should go all in it got it

[tough oyster]

Geez lol

[rancid snow]

I mean this just sounds like you dont like the field

[proper dragon]

finished starting point

[vital aurora]

Should be more normalized to be able to admit that

[random aurora]

need more knowledge to get in job role pentesting not just little knowledge

[obtuse fern]

I dont think i understand this sentence at all. You mean wanting to apply things you learned?

[rancid snow]

happens when people chase a paycheck instead of a passion

[obtuse fern]

^

[proper dragon]

[vital aurora]

Just seems really silly to me now because the skill floor is much higher now than 5 years ago

[obtuse fern]

Theres money in cybersecurity, but if you're doing it just for the money you'll end up hating yourself

[random aurora]

okay so for example you learned the information security foundation great so what the next step go to job role pentesing to study what u have learned and apply for it great so still I study learning process I need to finish it to how to learn the thing

[random aurora]

not for money

[random aurora]

wrong

[obtuse fern]

Cpts path

[random aurora]

so basiclly to make it easy for you I bored from learning

[random aurora]

learning the basics I dont know why ?>

[jagged storm]

Then you don't like the subject matter.

[obtuse fern]

You're not bored from learning, youre tired of it

[rancid snow]

I guess I just dont understand your complaint @random aurora because Ive literally never been bored learning or engaging with this field

like ever

[alpine nimbus]

Me at 15. Professional skid

[obtuse fern]

Bored would mean you lost interest entirely

[proper dragon]

it seems like the general cultural climate these days is people trying to build the shiniest pile of turd instead of building a solid foundation that will last which you can also potentially do business out of

so to speak

[jagged storm]

Bro just wants that instant dopamine hit, without realizing that you need to actually care about the theory to ever get that far.

[obtuse fern]

Some subjects are boring, but ive never gotten bored of learning

[random aurora]

look bro I learned many hours in one day I want to understand and finish it and have some achivement so here the thing while learning I didnt take rest that the problem

[jagged storm]

The 'learning' portion takes years.

[alpine nimbus]

Thats why we discovered HTB. To learn and then have something to show for it

[worthy cargo]

As they say, Rome was built in a day

[vital aurora]

Do you dislike learning?

[random aurora]

it can be months or one months depends on your leaning

[jagged storm]

No.

[rancid snow]

I just dont understand this at all, sorry

[proper dragon]

aqueducts? ezpz let me grab my chisel

[obtuse fern]

"Many hours in one day" there are people in here that have been doing this as long as you've been alive (assuming youre 20 years old or around that)

[random aurora]

the module of learning process I hate it to be honest not like networking or linux or windows or powershell

[worthy cargo]

Yap less, learn more!

[rancid snow]

wait are you just complaining about one specific module? lol

[signal mica]

Bro is playing hs while trashing modules

[random aurora]

just chilling

[obtuse fern]

The learning process module is mostly just theory stuff to help you frame your thought process and how to approach problems

[vital aurora]

I think that’s what they are getting at? They want less theory and more practical application

[supple plume]

Lets play Šah dog

[proper dragon]

To add to this, I would rec that book Systems Thinking: A Primer by Donella Meadows to anyone interested in cybersecurity

[supple plume]

Turbo

Feed the bishops

[random aurora]

I dont want to skip it I read alot of it so I feel bored so I say let me take some relax

then I will return storng

[stable tiger]

@obtuse fern yo what happened to ur mod

i took a discord break

[alpine nimbus]

WHICH systems??? 🤔

[proper dragon]

yes

[random aurora]

chilling is for me playing and having some fun

[rancid snow]

marcie kicked a transphobe and then lost mod next day

[stable tiger]

whatd they say

[warm ravine]

[rancid snow]

idr the specifics

[warm ravine]

Anyways

Halloo

[supple plume]

Tbh they should have ragebaited the guy a bit more before kicking

[warm ravine]

Guess what

[supple plume]

Or letting me ragebait him

[stable tiger]

Im sorry i wasnt in chat guys

usually my domain

[warm ravine]

I GOT ACCEPTED TO THE INTERNSHIP

[molten bobcat]

Yaaay for what dude?

[supple plume]

I made the guy get absolutelly triggered

[jagged storm]

He had been raging for like 8 hours before that lol

[supple plume]

By saying ssh = rce

[supple plume]

Congrats!!!

Where

[stable tiger]

I shouldve been here

[warm ravine]

Turkey

[rancid snow]

rip

[supple plume]

Wdym turkey that is just fat chicken

[stable tiger]

Sorry i wasnt around to ragebait guys </3

[warm ravine]

Oh right

Turkiye

What am I saying

[stable tiger]

wait i can ragebait marcie without getting muted

WE ARE SO BACK

[supple plume]

Ok turkiye but where you got internship

No need to dox you can say whats it about

[proper dragon]

kots

[warm ravine]

Should I tell

Or not

[supple plume]

.

[alpine nimbus]

Depends on what you signed lol

Safe bet is no tho

[rancid snow]

I have a pre drafted email to slander you to the institution the moment you message where the internship is at

[supple plume]

Wild times

[warm ravine]

General coding about SQL and Web Development

Perhaps I can learn SQL injection and spearphishing there

[stable tiger]

i can speak freely when shes in chat now

[supple plume]

A few years ago I would have said that's great

[random aurora]

bro I went throught many stuffs ctfs champion learning from other company I dont want say it respect for hackthebox community then I went to hackthebox learning study more learning process and I have understand many things & saw news so here why I stopped because I dont want to hate this field these all happen from jan untill april learning didnt stop that why I stopped I want take some chill breaks and same time I want grinding htb information security foundation and finish many of it to be ready for cpts path so that the conflict thing can someone give me suggestion ?

[proper dragon]

how do you put code in syringe

[warm ravine]

I'm gonna learn it

I dont know it

Yet

[rancid snow]

I think you need to work on your communication skills. Its very difficult to understand what youre saying.

[alpine nimbus]

'freely' or Freely? 🤔

[supple plume]

In my experience as a web dev I can say you won't learn much about cyber directly

[random aurora]

everything is clear I have read what I wrote it

[rancid snow]

are you english second language?

[stable tiger]

i just hit the craziest fucking shot on 8ball pool

[proper dragon]

xssy.uk/allLabsSQL

[rancid snow]

Just because you understand what you wrote doesnt mean other people do.

[stable tiger]

the two balls richocheted came back and hit each other again to get one in

[warm ravine]

[stable tiger]

holy fuck

[signal mica]

Fk i missed u

[supple plume]

But you will learn a lot of related things that will help a lot

[proper dragon]

@worthy cargo

[stable tiger]

nah its chill i just got on

[supple plume]

Done all of them

1 day

No AI

Less than 1 day actually

[random aurora]

okay

[vital aurora]

Build up your discipline, schedule time to consistently study, even if it’s a hour or two at a time. If you really want to make progress you have to make sure you keep showing up and learn, even when your motivation fails you

[worthy cargo]

What?

[proper dragon]

AI is a great learning tool for hammering away at theory

[stable tiger]

i wrote assembly while high once

[random aurora]

thats true

[proper dragon]

i forgot

[supple plume]

It can be helpful

[worthy cargo]

I'm gonna lay down for a bit

see ya'll later

[jagged storm]

You can say the company name here - there's no rule against it. If anything, it will show people which platform to avoid lmao

[stable tiger]

for context i wrote at&t syntax instead of intel

unreadable atp

[vital aurora]

Of course take breaks, but try not to chill for multiple days at a time

[proper dragon]

can indeed

[rancid snow]

built in obfuscation

[supple plume]

Let me flex just once again

[jagged storm]

https://tenor.com/view/subrote-picard-no-law-to-fit-your-crime-all-somethings-everywhere-law-gif-22005049

[stable tiger]

just unlock autism like me

[turbid goblet]

Can someone tldr vercel hack and @ me so i can read it later ty

[stable tiger]

i mean it's meta

[turbid goblet]

Oh i thought it had to do with google oauth

[stable tiger]

"yo trust run this kernel driver

[vital aurora]

That would make things easier lol

[stable tiger]

until you've not replied to your girlfriend for ten hours

[alpine nimbus]

I wonder if I sound like an old man now if I say that I had learned via IRC back in the day

[supple plume]

Just learn to sit down and get shit done

[stable tiger]

just take adhd medication

you guys arent on the right mindset here

[supple plume]

Based

[alpine nimbus]

Instructions unclear. I am tired and jittery and still down coffee like I need it to live instead of water

[stable tiger]

i learned via IRC but i was like 12

so i somewhat feel you

one of many ways i did tbf

[rancid snow]

a lot of my early osint skills came from a game we had in irc. Whenever a new person joined we would race to find as much information as possible about them and drop references to what we found without explicitly saying it was the newbie. Was before 'dox' was a word. fun times

[stable tiger]

all of my early osint skills came from wanting to blackmail my highschool teachers

thank you madfox very cool

[rancid totem]

waiting malware to connect to the ftp server

[alpine nimbus]

15 for me so you were even younger lol

[supple plume]

I had 1 nokia and no internet until I was an adult 🥀

[rancid totem]

alright I think i got it this time

[alpine nimbus]

I belive that game is called "doxxing" 🤔 🚓

[rancid snow]

it is now lol

[stable tiger]

https://cdn.discordapp.com/attachments/588029217376043023/1477822901880357055/ali5t7.gif

[alpine nimbus]

Just saw that that was part of your message lol

[supple plume]

Thas my head 🔥

[proper dragon]

time to make tacos

[zealous charm]

Sir it is not Tuesday

[rancid snow]

back then we just considered it a fun way to vibe check someone. E.g were they smart enough to join a hacker centric irc channel with a fresh or suitably anonymous identity or not

if they werent they couldnt be trusted immediately

[proper dragon]

I bought enough ground beef for two taco days in a row

[stable tiger]

YESSIRRRR 🔥

[alpine nimbus]

Better be a course taco that you learn with

[stable tiger]

LOWKIRKEPSTENUIENLY TWIN

[zealous charm]

Hell yeah, cook once: eat twice

[rancid snow]

with extra special attention applied if someone claimed to be with anonymous

[iron galleon]

what yall think of palm beach pete

[alpine nimbus]

Im glad I didnt get your treatment then lol

I was fortunate enough to get a good mentor to start

[proper dragon]

funny you mention this, I was just about to ask you guys if there are good foundational textbooks in cyber youd recommend
i have hacking by Erikson and that will be my taco reading

[iron galleon]

https://tenor.com/lDuScl6IC1f.gif

[stable tiger]

hacking by erikson mega outdated but good if ur tryna learn basic buffer overflows

[rancid snow]

its a different landscape today, being anonymous just isnt as important as it used to be

[stable tiger]

id suggest also reading the shellcoders handbook and grey hat hacking

then moving into content by off by one security

[median ivy]

hacking: the art of exploitation is a classic

[stable tiger]

literally

unc ass book

[proper dragon]

but it still holds up generally?

[stable tiger]

hows the age attestation in yo OS twin

[median ivy]

yes

fundamentals don't change much

[rancid snow]

non-existent

[proper dragon]

great
its taco time

[rancid snow]

taco time is tomorrow

[stable tiger]

reporting you to Gavin Newsmon rn

newsom

thank u keyboard

very cool

[rancid snow]

neat it IS a digimon

[alpine nimbus]

Im at the point where things are just moving so fast that I feel like taking the time to learn RE might be really useful nowadays

[half sequoia]

Got my first CVE of the year

https://www.kb.cert.org/vuls/id/915947

[alpine nimbus]

I know its usually a blue team skill but hey

[rancid snow]

congrats

[alpine nimbus]

Stuart Beck? 🤔

[half sequoia]

Appreciate it thank you. Very blessed, just a shame SGLang is yet to respond to the issue

[half sequoia]

Omg you doxed me!! (Jk)

[rancid snow]

damn they must have been dead silent if you got a CVE but no response lol

[random aurora]

you know what it been years I want to learn basics I'm going to start job role pentesting

[half sequoia]

yea running issue of communication with them. according to cert, my disclosure wasn’t the only one stuck in the pipeline for them due to vendors lack of response

[random aurora]

directly

[random aurora]

I have basics in networking linux windows how system work active directory from tryhackme so I'm ready !

[proper dragon]

but also today

[rancid snow]

its monday until I say its Tuesday

[proper dragon]

sounds like a full time job
you should automate it

[frigid mountain]

Got this cool RGB desk mat to match my keyboard and tower LEDs

[alpine nimbus]

https://tenor.com/view/red-dragon-hannibal-anthony-hopkins-gif-22166741

Interesting

[median ivy]

That's dope - can you make the mouse red?

[frigid mountain]

yeah I just did. Except for the scroll button. It illuminates to indicate the dpi speed so it has to stay green. Red looks better but red is slow mode

[proper dragon]

oh no

i fogor cheese

[rancid snow]

never automate yourself out of a job you enjoy

[latent oak]

I submitted my first ever CVE last week, and my second one today

[turbid goblet]

Gg brother

When they are released ping me with the poc

[latent oak]

Thx… nope

😉

I’ll probably use them to create a box

[supple plume]

Box not even an idea yet and already spoiled it

[latent oak]

You’re kidding

[supple plume]

Of course I am

Congrats on the cves

[latent oak]

Well I haven’t got it yet… But i proved it in the lab… so I need to wait

[supple plume]

Waiting sucks

[latent oak]

Yeah it does

[supple plume]

I sent 2 bounty reports 2 weeks ago

Not even seen yet

[latent oak]

“Responsible Disclosure”

[supple plume]

"Slow Disclosure"

[alpine nimbus]

They'll move faster once you exploit it (COMEDIC PURPOSES! Do not listen!)

[supple plume]

I actually dosed one of them by accident but still they don't say nothing

Poisoned the cache

[latent oak]

Total time elapsed between discovery and full exploit… about 20 mins

[alpine nimbus]

"by accident"

[latent oak]

Thanks Claude

[supple plume]

Yeah

[alpine nimbus]

Wait what?

Thats what Claude does??

[eternal mango]

Just had a couple of advisories published, four months.. and I wrote the patches for them..

[alpine nimbus]

Damn Im still in university and already obsolete

[rancid totem]

accidentally found a google corporation admin panel

new attack surface has discovered

I mean bounty surface 🤑

and there is a lot of JS, I bet this is vulnerable

[eternal mango]

CVE's reserved, but somehow they have no data on them yet lol

[proper dragon]

its over before it even began

[rancid totem]

accidentally found a google corporation admin panel

xd

[frigid mountain]

https://tenor.com/view/gummy-bear-gummy-bears-searching-developer-choose-wisely-gif-23589738

[rancid totem]

there is tons of js and i bet this shit is vulnerable

[frigid mountain]

are you stuck on repeat?

[eternal mango]

Prove it

[zealous charm]

We love vibe hacking

[rancid totem]

already sent my report to them

[supple plume]

Welcome to the waiting club

Release my machine @eternal mango

[alpine nimbus]

Pics or it didnt happen

[zealous charm]

Best thing to do while waiting for bug bounty report triage is to find more bugs

[eternal mango]

Wish that was my call, I'm sure it will be

Out of my remit I'm afraid, but I did read the writeup

Looked cool 🙂

[supple plume]

Oh yeah?

Yay

[eternal mango]

yeeeh

So I'll get 1m blood

No hax

🙈

[supple plume]

Hahah

[rancid totem]

no pics for you

[alpine nimbus]

@eternal mango Can I make a suggestion for future boxes?

[eternal mango]

What you mean https://login.corp.google.com/c/corploginscript.js ?

[rancid snow]

but how much setup and prior work did it take to get to the point where it could accomplish discovery and exploit within 20 minutes lul

[eternal mango]

(sorry I'm trolling)

[molten bobcat]

Howdy sir

[eternal mango]

Always open to suggestions

[rancid totem]

I am getting DDoSed by FBI

[eternal mango]

Hey C1oud 🙂

All good with you?

[lament kelp]

ik this ment to be off topic but is any1 good with nmap enumeration

[supple plume]

Hey g0b do you think I should make another box or just wait to get feedback from this one first?

[zealous charm]

As always, the hardest part of getting a CVE is setting up the software

[alpine nimbus]

I find that one of the biggest unrealistic features is lack of a noise detection feature. Which causes lots of people to just go in guns blazing but with no concept of noise. I think it'd be really good and useful to practice on and to force people to also learn stealth arguments if there was like a blue team detecting you or something

[frigid mountain]

Venue I'm going to this weekend in a cave

[eternal mango]

Personal opinion.. it read as quality, but I'd always look for feedback after a first submission before moving on

[dusky jacinth]

Kobold was icky

[eternal mango]

But That's just me speaking

[dusky jacinth]

not really

but docker makes my head spin

[eternal mango]

Ok Morpheus

That looks awesome

[rancid snow]

main problem is that anytime you come remotely close to this you get people crying about difficulty and it automatically has to be an Insane ranked box

[eternal mango]

SLOOOOOOOOOOOP 🤖 🤖 🤖 🤖

[frigid mountain]

https://tenor.com/view/ignorance-is-bliss-cypher-joe-pantoliano-the-matrix-oh-well-gif-22197092

[eternal mango]

Blignorass ib is

[proper dragon]

let them cry, doesnt make them better

[dusky jacinth]

Don't pro labs have some evasion mechanics?

[eternal mango]

Gotta rewatch Matrix again soon

[dusky jacinth]

like some of them?

Idk if you can say ig

[alpine nimbus]

Well you dont need to go full corporate EDR. But I find theres a difference between 0 security whatsoever and cyber Fort Knox

[frigid mountain]

Which is better post-apocalypse machines control the world franchise, The Matrix or Terminator?

[dusky jacinth]

I mean having a cyber fort knox challenge would still be pretty cool

[frigid mountain]

I loooove the Matrix. But I think Terminator is actually better

[proper dragon]

I think the answer here is obvious

maze runner

[eternal mango]

Certainly get what you're saying, implementing an environment that not only is intentionally vulnerable, but also includes defensive mechanisms within the limitations of a machine in size and complexity is pretty tricky

Something that covers both sides of the coin well would be beyond insane

[alpine nimbus]

Hacker Jesus, IMO

[frigid mountain]

https://tenor.com/view/matrix-dodge-neo-gif-13288848

I do like the cyberpunk of The Matrix over the sci-fi of the Terminator

[eternal mango]

Suppose implementing some simple rules based preventative measures, like yara rules and common sets preventing scanning and bruteforce would be within possibility

[dusky jacinth]

Ultra-realism category

"Cinematic" in graphics terminology

[gilded fern]

https://tenor.com/view/sybau-ts-pmo-gif-2102579015947246168

[eternal mango]

..but then you'd need to include a legitimate path that doesn't end in frustration due to limitations

[alpine nimbus]

Even something like punishing loud nmap scans? Or whatever they run on auto-scripts?

[frigid mountain]

https://tenor.com/view/thug-life-librarian-reppin-set-gif-7419251

https://tenor.com/view/thug-life-librarian-get-out-library-gif-7419222

[gilded fern]

https://tenor.com/view/no-correlation-gif-1271746605347850530

[eternal mango]

Maybe? Generally machines don't include such punishment mechanisms, because it can be overly restrictive to those unaware of them. Possibly a narrative could be weaved in to the machine under a service that is basically first port of call for most even before an nmap

But it's tricky

[molten bobcat]

I stopped a python RAT with my bare hands today

[supple heath]

Can anyone help with the silentium box I have found the leaked token and whenever I try to reset the password it gives the 500 error. I was told to try the new password I set it to and it still doesn’t work ?

[eternal mango]

https://giphy.com/gifs/NBguojFndR2ow

[molten bobcat]

#1492582441259503747

[supple plume]

This makes me happy ☝️ 🔥

[supple plume]

Silentium bad 🥀

[alpine nimbus]

You know more about it than me. I'd just find it weird for someone to be #1 here and then have no clue on how to not trigger every alarm on a real job

[eternal mango]

Labs and Seasons are certainly not a full representative picture of IRL

[dusky jacinth]

was it cause it was 4 Gb in size??

who writes RATs in python?

they should stop doing that

[rancid snow]

https://tenor.com/view/twitch-rat-rigada-run-dokales-gif-17318963

[dusky jacinth]

that got me

you got one good exhale out of me

[alpine nimbus]

Teen me would be devastated with that right now

[eternal mango]

perl2exe, run my script bruh trust me

[alpine nimbus]

Hey we all had to start somewhere lol

[molten bobcat]

I've got no clue man.

They install an executable for a program, it installs python in app data local temp

[dusky jacinth]

you have lived and learned though

[eternal mango]

Used it to ship code back then, but not for bad reasons lol

Just for... not fully good reasons

[molten bobcat]

And then cred stealer and persistence

Very stupid

[jagged storm]

https://tenor.com/view/awkard-awful-rat-gif-19474679

[dusky jacinth]

someone clearly read "Black Hat Python"

[eternal mango]

Are you still talking about an active machine?

[molten bobcat]

No

This is real life unfortunately

[eternal mango]

Why did you say the channel!!!11!!!!

[molten bobcat]

I'm talking about work

[eternal mango]

I can't trust anything now

[molten bobcat]

Someone asked!!

For help with silentium!

[eternal mango]

Oh

Well I'm just stupid

[molten bobcat]

❤️

[dusky jacinth]

nah it's definitely one of those days

[proper dragon]

the matrix robots are inundating us with the stupid chemical?

[dusky jacinth]

well duh

take your flouride and go be happy

[eternal mango]

Daughter woke me up at 4am the other day, and I had such a powerful intrusive thought, that it must be done

[molten bobcat]

I had to talk to my boss and express my displeasure that I'm being forced to do training for Copilot.

[dusky jacinth]

get your SSRI

[molten bobcat]

I just don't give af about AI

[proper dragon]

and by this surely you understand that youre being forced to train copilot

[molten bobcat]

I am not going to use it

No one can "make" me do anything lol

[proper dragon]

mmmm flouride

[molten bobcat]

I told my boss that if my productivity is deemed unacceptable compared to the light speed my coworkers are clearly accomplishing with AI

Then I'll do my best to keep up with it

But as it stands now I am lightning compared to my coworkers

So y'know

I'll start worrying when there's something to worry about lol

[alpine nimbus]

I used to think like you but someone else spoke with me and had a really good point

[rancid snow]

https://tenor.com/view/john-henry-gif-9736202314484331787

[jagged storm]

It's often not even about productivity. The higher ups paid for it, and now they want assurance that you're using it

[proper dragon]

didnt this guy die right after

[rancid snow]

shh

[alpine nimbus]

If you were tasked with making a fire. Maybe even for survial. You now got all these tools around you, a lighter, gasoline, the works. But instead you throw it all away, even the flint just to rub sticks together the 'OG' way

[molten bobcat]

Sure, but the tool you're describing requires more energy than it's worth

[alpine nimbus]

That kind of changed my aproach to AI now

[molten bobcat]

Lol

Your tool requires me to consume an entire river just to produce a shitty poem type shit

[jagged storm]

Even Microsoft now has quotas that force employees to use copilot as part of their job

[alpine nimbus]

If one could stop spewing hallucination slop for 1 minute

[proper dragon]

people dont understand the mass infra required to bring these tools to the fire grug, and how little the average firegrug can actually make of them in practice

[rapid badger]

The speed at which developers are forced to vomit code is good for us.

more work

[alpine nimbus]

I think MS literally bragged about 80% of their Win11 updates being copilot now lol

[molten bobcat]

More work. More productivity go faster monkey, go faster.

[dusky jacinth]

any company partenered with them is only allowed to use it as well

[jagged storm]

And all of them now cause catastrophic issues

[proper dragon]

good

[molten bobcat]

I'm unfortunately in the business about caring about my work and the impact it has on others, so no I won't be using anything made by corporate ketamine huffing losers

[alpine nimbus]

BSOD-aaS

[proper dragon]

fk windows and microshit

[dusky jacinth]

no other models on the company VPN if you're not using the good ol CP

(co-pilot)

[alpine nimbus]

You got me worried there for a sec

[dusky jacinth]

it was intentional

[jagged storm]

Slop as a Service

[proper dragon]

cmon just use the surveillance tool

[dusky jacinth]

Shit as a service

Spying as a service

[alpine nimbus]

https://tenor.com/view/etri-yes-thats-what-killing-you-means-confused-infinity-wars-gif-14488909

[dusky jacinth]

swindling as a service

[proper dragon]

if you dont want to use the surveillance tool that means youre doing bad things

[jagged storm]

https://tenor.com/view/epic-embed-fail-ryan-gosling-cereal-embed-failure-laugh-at-this-user-gif-20627924

[alpine nimbus]

I am priviledge-less

[turbid goblet]

https://tenor.com/view/jesus-ballin-mars-bars-gif-19910027

[eternal mango]

https://www.pharmaicy.store/

Been around for a while, but just found it funny

Looks like they've kept on growing surprisingly

[rancid snow]

I dont like this argument for it because its simply untrue. Or at the very least its no more true than literally any other big data center usage. Ai isnt unique in its environmental impact

[eternal mango]

Is your LLM not hallucinating enough? No worries bruv, we got yu.

[turbid goblet]

i think we need pets for AI

[eternal mango]

(I know, not the point)

[turbid goblet]

who talks to AI when im not available?

[eternal mango]

Dogz

[turbid goblet]

i need someone to fill that void for them

[eternal mango]

Please say you remember

[proper dragon]

peak

[eternal mango]

Catz

Oddballz

[alpine nimbus]

Our future robot master overlords

[turbid goblet]

i am unaware

[eternal mango]

😮

[alpine nimbus]

https://tenor.com/view/terminator-terminator-robot-looking-flex-cool-robot-gif-16625083

[turbid goblet]

enlighten me

[alpine nimbus]

Gaddamit

[turbid goblet]

https://tenor.com/view/embed-no-no-embed-megamind-megamind-meme-gif-25261934

[jagged storm]

https://tenor.com/view/discord-embed-failure-epic-embed-fail-double-embed-fail-gif-23538127

[turbid goblet]

you need to type -embedallow to turn it on @alpine nimbus

[turbid goblet]

golbin how old do u think i am lmao

[rancid snow]

73

[turbid goblet]

69

[rancid snow]

67

[alpine nimbus]

What rank do I need to be to start having rights here?

[molten bobcat]

I'm moreso referring to the increase in data centers dedicated to AI

[turbid goblet]

just type the command i gave u

[eternal mango]

I'm not even going to dignify that with an answer

[molten bobcat]

Rather than saying their data centers are worse than other data centers

[jagged storm]

Hacker

[turbid goblet]

one day im gonna get someone with the -embedallow trust

[eternal mango]

(that was a joke, please laugh)

[jagged storm]

We do not give fire to the mortals

[eternal mango]

Honestly I do not know Kami

[alpine nimbus]

A reason to to not put HTB aside now then

[turbid goblet]

im 27

[alpine nimbus]

https://tenor.com/view/vergil-motivation-devil-may-cry-gif-2364734360441336590

[copper parrot]

hi

[jagged storm]

https://tenor.com/view/embed-fail-triple-embed-fail-gif-27612196

[eternal mango]

Fair enough, sorry! Haha

[alpine nimbus]

A fellow Z !

[turbid goblet]

im just trolling lol but i never seen Dogz or Catz

[rancid snow]

Even still. It rings hollow to me because the same critique isnt leveled against other things. Its only the perceived value that makes it more of a blame than others in this regard.

Or in otherwords most of the time the environmental impact is brought up not because its an actual concern, but because the person doesnt like AI and therefore will reach for every hit against it, even if its not consistent with their other actions.

[eternal mango]

They were so much fun

[alpine nimbus]

Obviously I dont care anymore, you python RAT

[jagged storm]

Python? Never. Pure asm baby

[eternal mango]

Oddballz was my favourite of the bunch https://www.youtube.com/watch?v=S6nGpzTDlTg

[rancid snow]

like youre not boycotting AI because of environmental reasons, theres a dozen other stuff you should be boycotting first if that was truly thr motivating force

[turbid goblet]

i cant let my LLM get lonely so im gonna have another LLM talk to him when im afk

[proper dragon]

on this note, some massive datacenter operation in texas just got incredibly bad press after the CEO and CFO left abruptly

[copper parrot]

what pieton

[eternal mango]

They were basically desktop pets

[rancid snow]

and not to say your dislike of AI isnt valid, its just the eco arguments fall flat if youre not being consistent about your qualm

[jagged storm]

A ton of other things don't threaten the workforce

[alpine nimbus]

Same for EVs

[rancid snow]

Also majority of the water usage is recycled for cooling, its not a massive ongoing drain

[eternal mango]

Ok yeah sorry, totally derailed the conversation. I saw the word pets, the context of tech, and my brain went to the rot of the 90s that was just too much fun.

[proper dragon]

isnt productivity actually down after AI? and most CEOs say it didnt actually do anything - rather they used it cause they were supposed to

[rancid snow]

And the workforce arguments I think are significantly more compelling. Thats my point.

[jagged storm]

I am considering buying ratsfor.sale

[alpine nimbus]

Every time I've tried it I spent more time swearing at it than being productive so... I believe it

[molten bobcat]

I just think that a lot of AI stuff appears to be "oh fuck new technology shove it everywhere and use it for everything" in order to maximize profits

[dusky jacinth]

from NY?

if you buy in bulk lmk

[alpine nimbus]

Well for cyber stuff anyway

[dusky jacinth]

im tryna stock up;

[proper dragon]

the irony here is that AI hasnt actually returned profits

[rancid snow]

also a more compelling argument to me than the eco one

[dusky jacinth]

nope

most corporations are fucking bleeding money cause of it

[molten bobcat]

It returns profits in the sense that investors dump money into something they believe will have value

[dusky jacinth]

^^

that yes

but not market profits

[proper dragon]

quick lay off more people so we can buy more compute for useless AI

[dusky jacinth]

just investors

[proper dragon]

lol

[molten bobcat]

Not that it like, y'know, generates income or something

It's like asking a screwdriver to fix the economy

It's just a tool

[rancid snow]

my stance still remains that its a useful tool that psychos obsess over and over hype it

[random aurora]

I LOVE YOU HACKTHEBOX 🔥🔥

[alpine nimbus]

"Give me 100 ways to make $1,00,000 this year"

[dusky jacinth]

it can be fun to use sometimes

as a noob

[rancid snow]

both pro ai and anti ai people tend to have extremely wack beliefs about AI

[molten bobcat]

I just turn my brain off when people say dumb shit like "Thanks to AI.."
"AI-Powered"

[dusky jacinth]

it helps to break down problems into chewable pieces

that's about it

i haven't found another use for it really

[random aurora]

I really love you all my heart love you so much you true learner 🤍💻

[proper dragon]

AI has been the greatest obfuscation psyop ever, I think
if you prompt rigorously you can get it to yeild useful results so fat
Im no luddite. But at the same time the crowdsource call-to-arms to make its data better was stupidly executed and I see this pretty consistantly

[alpine nimbus]

The secrets that the elite dont want you to know...

[jagged storm]

It's also worth noting that the big FAANG companies have completely abandoned old eco targets, in order to push AI

[dusky jacinth]

ateotd its corporates grabbing for total control anyway they can

[jagged storm]

Like, global warming was bad even with their targets

[dusky jacinth]

whodoesn't wanna make the most money?

[jagged storm]

But they were all like 'enh, fuck it' and they no longer exist

[dusky jacinth]

like the palantir post

from the Technological Republic

[eternal mango]

Sounds like Google-fu

[dusky jacinth]

that is a psyop

and one of the greatest ones i've lived to see

[eternal mango]

My point is, this is a time of change and adoption akin to when search engines became a thing

[alpine nimbus]

If they truly cared about eco, they wouldnt have razed tens of thousands of amazon rainforest acres

[molten bobcat]

The children have forgotten the ways..

[alpine nimbus]

"Raze the environment, for the environment!"

[proper dragon]

pushing AI down every CIO's throat at every big company to get them to splay it out to multiple roles to crowdsource job functions, data, code snippets, workflows, etc, is a massive data mining operation

[eternal mango]

Ok.. that wasn't anything close to my point

[proper dragon]

what was your point

[alpine nimbus]

@proper dragon

[latent oak]

It took me two to three weeks of working on this tool as a side-project… but from recon to exploit it was literally 2.5 hours maybe 3

[rancid snow]

g0blin sees it as a new tool on the level of the invention of search engines, which used to require skill to get what you want

[rancid snow]

nice

[alpine nimbus]

So that was real??

Gadam

[eternal mango]

Exactly this

[proper dragon]

did search engines have this effect on the jerb merket

[jagged storm]

I feel like they take more skill these days, since you have to dodge promoted bullshit

[molten bobcat]

I knew what page you were on

[eternal mango]

Yes

[latent oak]

In the old days, you just had to know it or look in a book

[jagged storm]

Google search used to be usable

[proper dragon]

i missed your earlier message, my bad

[latent oak]

I was around before Google

[molten bobcat]

I had to teach my neighbors about malvertising because they both got their CCs stolen

[eternal mango]

No worries

[rancid snow]

kinda, it has the caveat that theres less knobs and levers for you to actually control the results to get what you want unfortunately.

I know more than a few people that have been building their own personal search engines

[latent oak]

We had shelves of O’Reilly and Wrox Press books

[molten bobcat]

Google sponsored results make me wanna hurl

[latent oak]

I used to subscribe to programming magazines

[proper dragon]

I saw some article that compared the rise of AI to the rise of computing itself, claiming that some similar economic assumptions were at play and challenged by the paradigm shift

[eternal mango]

"paradigm shift" is the exact term I had in mind

[latent oak]

I used to go to something the ancestors called “the bookstore”

[alpine nimbus]

Thats why I use Brave now. Back to 00s internet

[eternal mango]

Back then, before search engines, it was a very much organic growth and spread of knowledge

[jagged storm]

How about 2600

[eternal mango]

A very personable thing

[latent oak]

For sure!

[rancid snow]

there should be a term for when someone attempts a paradigm shift but goes completely off the rails and they go crazy

2600 is rad

[proper dragon]

"crash"

[latent oak]

I was a 2600 subscriber for many years

[eternal mango]

Then everything changed, the web and its archives were open to the world

It just feels to me a similar degree of change, that's all I'm saying

[latent oak]

Well, at first I bought them from the news agents while wearing different disguises

[proper dragon]

everything changed with the AI Bros attacked
only the Gabe could bring the computing world back into balance

[latent oak]

‘Cause I didn’t want to end up on a list

[molten bobcat]

Huh it doesn't wanna embed

[rancid snow]

worked for me

your discord just being slow

[jagged storm]

Discord just being discord. It was working

[alpine nimbus]

He's flaunting it in my face!

[latent oak]

@jagged storm you a 2600 guy?

[rancid snow]

https://tenor.com/view/get-real-epic-embed-fail-dance-transformers-power-rangers-gif-21957726

[eternal mango]

https://giphy.com/gifs/ben-l-lucky-napolean-dynamite-yaYV8i5n1OjZe

[molten bobcat]

Oh, tim cook is stepping down

[latent oak]

I used to listen to Off The Hook regularly

[jagged storm]

My favorite thing I learned from 2600 was how to access the debug menu on like every soda machine ever

[worthy cargo]

Tim Apple

[latent oak]

lol

[signal mica]

\

[wind plank]

?

[molten bobcat]

Hey, dude

[wind plank]

what is this?

[alpine nimbus]

iSteppingDown Pro Max Titanium Edition +

[turbid goblet]

make the wall of text bigger pls

[molten bobcat]

Maybe don't post giant code blocks of text in chat

[signal mica]

Just pretend its not real

[wind plank]

sorry

[rancid snow]

what cant read?

[supple plume]

Atrás Satanás

[jagged storm]

https://tenor.com/view/stng-picard-too-long-i-decline-to-read-it-i-decline-gif-4994404

[signal mica]

EL RAPIDO MUCHO

[dusky jacinth]

@grok make this longer pls

[signal mica]

ECHOES

[molten bobcat]

"what is this" to a paragraph that explains what it is

[signal mica]

Turbo

[eternal mango]

https://giphy.com/gifs/theoffice-the-office-tv-stress-relief-part-1-rsvLu9kKd15gHxJK2A

[supple plume]

Bru I couldnt even read 3 words already deleted

[eternal mango]

Please no hax

[alpine nimbus]

Your progress is now tracked for life

[rancid snow]

too late payload deployed

[alpine nimbus]

You're welcome. Now tip in BTC

[eternal mango]

Damn

[jagged storm]

https://tenor.com/view/thats-why-im-here-obi-wan-obi-wan-kenobi-star-wars-gif-18535648

[supple plume]

My progress stays in my brain 🧠

[proper dragon]

Asianometry did a video about Apple's failure to take leaps of faith into new industries recently

[supple plume]

Hopefully

[proper dragon]

Xiaomi profitting off where Apple failed probably made their board seethe

[alpine nimbus]

https://tenor.com/view/thanos-it's-just-the-way-it-is-i'm-just-the-messenger-gif-6270475095135913721

[supple plume]

https://tenor.com/view/thanos-it's-just-the-way-it-is-i'm-just-the-messenger-gif-6270475095135913721

[proper dragon]

Appel?
Apple?
it doesnt sound like a word anymore

[alpine nimbus]

I have my embed translator now lol

[rancid snow]

App- pill

take your application and your meds

[jagged storm]

https://tenor.com/view/embed-fail-quadruple-embed-fail-gif-27612249

They don't stop comin

[alpine nimbus]

And they wont stop comin

[rapid badger]

@supple plume that thanos snap emote killed me

[supple plume]

I'm glad that this guy gave me 1 year nitro just because

[proper dragon]

who burnt the toast

[rancid snow]

I did in 2056

seconds

minutes

seasons

feet

miles

[supple plume]

I asked on chat once for nitro to make this place chaotic

[rancid snow]

a qubit of sand

[supple plume]

And I recieved 13 months from ragenotfound

Nitro

[rancid snow]

here thrath more than eagen bo brief kanut so be thus

[proper dragon]

im not sure thats the right unit
surely you mean a smidgen

[turbid goblet]

can i have nitro thnx

[rancid snow]

https://tenor.com/view/worthikids-wizard-beer-buff-muscles-strong-gif-5264775002962851087

[turbid goblet]

actually just pay off my student loans

[eternal mango]

Oh ok

[supple plume]

Thanks @ragenotfound 🥀

[eternal mango]

Wait I can't pay off student loans

[dusky jacinth]

@molten bobcat have you played crimson desert

[jagged storm]

I have never had nitro. I even refuse the free offers.

[turbid goblet]

its only like 60k student loans

[alpine nimbus]

https://tenor.com/view/no-maidens-no-maidens-meme-elden-ring-no-maidens-meme-gif-25095009

[molten bobcat]

No

[jagged storm]

https://tenor.com/view/embed-fail-quintuple-embed-fail-ryan-gosling-cereal-gif-16073866842344496833

[molten bobcat]

Closest I got to the game was helping a friend identify that a cheat engine he downloaded for the game was what resulted in his identity being stolen 🙁

[eternal mango]

Wasn't quite student loans

But was something

[rancid snow]

this is why I tell friends to just ask me for cheats instead

[alpine nimbus]

How many of those do you have?! 😆

[jagged storm]

How many do you need?

[signal mica]

I rooted my ankle monitor

[rancid snow]

septillion

[alpine nimbus]

I can go on forever. You have a limit

[jagged storm]

https://tenor.com/view/tootsie-pop-let's-find-out-mr-owl-gif-14446916230610001271

[alpine nimbus]

https://tenor.com/view/watchdogs2-bang-wrench-gif-7593450

[rancid snow]

thatd actually be a cool blog post

id read that

[jagged storm]

https://tenor.com/view/sextuple-embed-fail-embed-fail-discord-gif-14980486448850152614

[alpine nimbus]

Gadam, boy's loaded with them

[proper dragon]

Its on my list to see if I can successfully cut the band on one by accounting for the fiberoptic breakline that triggers an alert
but theyre expensive and I dont want a visit from the feds

[rancid snow]

@molten bobcat speaking of friends getting hacked. Were seeing a LOT of customers getting popped by "Your Cloud storage is full!" emails.

[dusky jacinth]

Happened to a buncha of my managers

Or people in management positions

[alpine nimbus]

How was your taco, ink-wit

[dusky jacinth]

Always google cloud storage

[molten bobcat]

I'm full

[dusky jacinth]

Always targeting the corporate Outlook account

[proper dragon]

they were gud
i liek ink. i squeeze brain and fill fountain pen with bran jooce

[rancid snow]

For us its very generic cloud storage claims. Ive not actually been able to look at the actual phishing page itself yet. But its been a lot of apple icloud people falling for it

[proper dragon]

itoddlers rekt

[eternal mango]

Wait, did you not receive that @turbid goblet ?

[turbid goblet]

receive wat

[eternal mango]

What's the point in a purchase nitro link under a profile if it's not sent to the profile..

Fucking bullshit

[jagged storm]

You have to send then the link, I think

[dusky jacinth]

I traced one and sent it to my boss but they didn’t respond

[eternal mango]

What is the point in the purchase link under a profile then

[dusky jacinth]

Then our HR em got hacked the next week

[turbid goblet]

omg whyd u buy it lol

[dusky jacinth]

And by trace I just mean I tried to reverse lookup the email header info

[rancid snow]

oh hey I have one in my spam folder

[eternal mango]

Wow

So real

[dusky jacinth]

It came from a commonly know testing domain from what I could find

I guess I was wrong

[proper dragon]

The coinbase phishing emails are high quality

[turbid goblet]

g0blin the goat lmao he actually bought nitro

[alpine nimbus]

Idk man, looks 100% legit to me

[rapid badger]

everybody ping g0blin for free nitros

[dusky jacinth]

I like how storage is a different font size than the rest of the trigger

[dusky jacinth]

Looks legit

[alpine nimbus]

@eternal mango Free nachos? 🌮

[eternal mango]

Only one nacho per tired g0b0 sesh

[molten bobcat]

A tongue shriller than all the music calls to me now

[eternal mango]

https://giphy.com/gifs/foxhomeent-napoleon-dynamite-20th-century-fox-hQjHbdOzik3kHH44aP

Ok I'll stop

nn

[alpine nimbus]

@latent oak Do you mind if I DM you?

[rancid snow]

This phishing email is actually more interesting than I thought looking at the source

why does it have two Top Stories Of The Day sections

that are completely hidden

[alpine nimbus]

Isnt SET still a thing to clone all that?

[rancid snow]

idk

[jagged storm]

Did you follow it, to get a malware sample?

[rancid snow]

not yet

I think its just phishing anyways, unlikely to have sample

[alpine nimbus]

Maybe im remembering the wrong tool but it would just clone a website for you to phish from via a very friendly link

Would be better than that abysmal email

[jagged storm]

They usually have some 'type this in run' nonsense

[rancid snow]

theres a couple tools like that. SET was an early one

[alpine nimbus]

https://tenor.com/view/so-old-gif-27277116

Shut up, @jagged storm !

[rancid snow]

the actual links are hosted on google storage

the main Phish button and the unsubscribe button go to different html files hosted on google storage

[alpine nimbus]

Pretty sure it was SET. Those phishers need to up their game to last decade

[jagged storm]

https://tenor.com/view/next-time-gadget-inspector-inspector-gadget-gif-10546509338483754024

[rancid snow]

looks like they got taken down already, I was too late

[latent oak]

Sure

[vital root]

https://tenor.com/view/oh-hiiii-oh-hi-hi-hello-lizard-gif-5877185002260097302

[latent oak]

lol

[alpine nimbus]

Sent, thanks

[sharp shuttle]

1 blocked message -- Show

[shadow marsh]

hey everyone !
I just started with HTB and I already want to bang my head on the table.
Anyways it's 2 am I'm gonna sleep now. My head's toast anyways after finding every possible solution for the os in the nmap course, but when I type it it's wrong smh anytime.

[sharp shuttle]

welcome and you will know what to do when you wake up

[lofty marsh]

Brath where u been vro

[alpine nimbus]

We all have a magical muse that visits us in our sleep

[shadow marsh]

We'll see

[alpine nimbus]

What machien are you working on?

[shadow marsh]

gn guys

[shadow marsh]

first machine in the nmap course

[sharp shuttle]

ever since rat blocked me, i have been feeling quite sad. therefore i have taken up a morning perineum sunning routine to get myself out of depression

[lofty marsh]

Na man dont fret same here

[sharp shuttle]

its nice that someone also can relate

[proper dragon]

ever since rat blocked me I've neither woken up nor smelled the roses