general

[bleak palm]

Finna yoink that

[frosty thistle]

smart card phishtoTgt

i call it smarties attack

[slender fern]

it's an attack very specific to US military networks

[dusky jacinth]

PTGT

PTTGT

[frosty thistle]

and hardened ad envs

[dusky jacinth]

PtTGT

[frosty thistle]

yes

[dusky jacinth]

PtT

no that's taken

[frosty thistle]

SCPtTGT

idk

[dusky jacinth]

https://tenor.com/view/florp-gif-3463891988247851388

[frosty thistle]

SCptTGT

[dusky jacinth]

"The Smart Smoocher"

Eh?

[frosty thistle]

if u wanna read more about it and my very bad code
medium article and github

[dusky jacinth]

send

[frosty thistle]

that is the public defanged poc

absolutely useless in its state

[dusky jacinth]

I believe in changing states

[slender fern]

@frosty thistle send me your stuff. I'd like to mold it into something powershell based for an exercise

[frosty thistle]

https://medium.com/@zumiyumi/hacking-smartcard-only-ad-environments-b3a794b82e6b

[slender fern]

since im AD and have admin creds

[bleak palm]

Question about medium blogs

As a noob to this realm, is there even a point to making box writeups for boxes everyone has already written up

[molten bobcat]

they actually have a policy that says no

to it at all

[slender fern]

if you're looking for a job, yes

[molten bobcat]

tf?

[slender fern]

you disagree?

[molten bobcat]

heavily

[slender fern]

why?

[frosty thistle]

i didnt do any writeups for my current job but i was talking about cve and cert stuff publicly

i never done a box writeup outside of certs actually

and work reports

but i see why u think that asylum

[slender fern]

is having an online persona on social media with writeups not useful?

[frosty thistle]

its not a bad idea

but not mandatory but i wouldnt bust ur balls over that

https://tenor.com/view/hmmmmmmm-hmmmmmm-hmmmm-hm-hmm-gif-2339932555530048784

[slender fern]

naw was just my thoughts on someone new, asking if it was worth the time

[dusky jacinth]

I don't bust balls

[slender fern]

I think yes, it's worth the time

[frosty thistle]

I think it can be helpful

it can also hurt u

if you dont know how to do good writeups

so if it looks like shiitaki mushroom

and full of spelling mistakes

[slender fern]

HR is gonna look you up though. If you don't already have an "in" to the industry, your online pressence is all you have

might as well have something to look up

[molten bobcat]

lmao

[frosty thistle]

i didnt have any HR scout me

my boss scouted me

[toxic rock]

https://tenor.com/view/angry-german-kid-sleeping-agk-leopold-slikk-madclams746-gif-7431361001665698830

[slender fern]

@molten bobcat am I crazy?

[frosty thistle]

youre not crazy

just difference of opinion

[slender fern]

i kinda want to know the opinion of you guys though. I didn't expect to get "lmao" responses

[frosty thistle]

idk why he isnt saying anything

[bleak palm]

Ok so I still dont know

[frosty thistle]

i dont control the rate at which cloud responds

[rancid swallow]

[slender fern]

I've been lucky in just knowing people. so it's been a non-issue

[frosty thistle]

annovative ill tell u what i did

this might take a second im a slow typer

[molten bobcat]

im doing something

sorry

one sec

[mystic harbor]

Put house alarm to every ping

[rancid swallow]

[frosty thistle]

Bachelors Degree in Cybersecurity
OSCP
OSWA
Grind Htb machines
Work at AWS as a support contractor doing vuln remediation for nearly two years
Sec+
Write one article on a CVE i found
Get good at AD
Fail a bunch of Pentesting Interviews and security engineer interviews
Bitch on Discord which is when my boss asked me to DM him
Interviewed with them
Did well enough to start as senior tester

thats everything in a nutshell i did to lead to my first pentest role

[rancid swallow]

nice

[rose onyx]

TL;DR bitch on discord

[slender fern]

just don't know how the OP asking about doing writeups, and me saying yes it's a good idea, being responded with "lmao" makes sense

[frosty thistle]

theres a few other random jobs i worked where i helped train AIs

[worthy narwhal]

just got the ejpt, cpts THOOOOOOOOOOOOOOON

[frosty thistle]

IT DOES WORK SOEMTIMES

[frosty thistle]

congrats

[molten bobcat]

i can explain gimme minuto

[worthy narwhal]

ty ty i remember u

[rose onyx]

noted, maybe i'll try it one day

[worthy narwhal]

ahhh once i finish the THM things, ill be here again

[molten bobcat]

people have been getting their medium accounts banned for simply having htb content

[rose onyx]

i meant to turn my coffee maker off, i accidentally made another cup instead

[molten bobcat]

thats why i am saying

do not do that

[frosty thistle]

you can self host or put somehwere else

[worthy narwhal]

substack? selfhost is easiest, just run a damn jekyll blog lmfao

[molten bobcat]

what i would also like to say is that you're putting too much weight into a blog

[worthy narwhal]

use github pages

[rose onyx]

no fear zumi, i will drink it

[molten bobcat]

its nice but its not what they're after mainly

[slender fern]

what are "they" after mainly

[frosty thistle]

crazy aaaaaaaa i wouldn't be able to sleep

[molten bobcat]

"they" are the people who are hiring infosec roles

[rapid badger]

A strong handshake and eye contact

[slender fern]

and what are they after?

[rose onyx]

i'll probably pass out before finishing the second

[molten bobcat]

and what "they" are after are passionate people with credentials and experience

all a blog does is prove "this person is passionate"

the efficacy of this is a YMMV thing

do not put all eggs into one basket

[frosty thistle]

crazyyyyyyyy 😭

[slender fern]

if feels like you agree with me then

[frosty thistle]

thats the approach i took

[bleak palm]

Just as a noob I will have a friends recommendation coming up, but i dont want to lean solely on that is why id want to write a blog or make something art related

[frosty thistle]

i just did many things

[molten bobcat]

being able to prove you have a tangible passion is nice

but like

its werid

most of my employers straight up ignored my OSCP

[frosty thistle]

i think taking many approaches is good

to include writing

why not

[slender fern]

you have people straight up asking how to get a job in this career field. what the fuck do you recommend

[molten bobcat]

your tone sucks

[slender fern]

you're being so vague and evasive

[molten bobcat]

i am not attacking you

I was commenting on the nuance and weirdness in the hiring situation

[slender fern]

what do you recommend @molten bobcat

[molten bobcat]

how the fuck you interpreted this as a tone is beyond me

[slender fern]

literally what do you recommend

[molten bobcat]

earn certs

duh

[slender fern]

which certs do you particularly think are useful for employment

[molten bobcat]

whatever the hell the job you want asks for

use thy head

[dusky jacinth]

whatever it is, it's 100% not this deep

[worthy cargo]

How this guy is a community contributor with this shit attitude is beyond me.

Every time I see him talk, he's insulting people.

[slender fern]

@molten bobcat you are useless.

[frosty thistle]

LMAO

[dusky jacinth]

gang

[molten bobcat]

holy fuck mad much?

lmao

[worthy cargo]

See what I mean?

[mystic harbor]

Claude is useless

[frosty thistle]

this really tickling my pickle

[dusky jacinth]

y'all are fucked up in the head to take anything any of you fuck heads say in this chat seriously

[frosty thistle]

[worthy cargo]

🙂

[dusky jacinth]

goobers

all of you

[frosty thistle]

HEY

[sick gate]

Certified human trafficker awareness or whatever

[frosty thistle]

i say useful things 1 out of 100 times

[molten bobcat]

im CPR certified

[dusky jacinth]

I'm a certified bitch.

pin it mods

[frosty thistle]

im that bitch

[raven rain]

https://cdn.discordapp.com/attachments/1244940168205697046/1287861515273375854/cubethisguy.gif

[worthy cargo]

Good music always puts me in a good mood! 🙂

https://www.youtube.com/watch?v=0dg-fUN7aXI this is sick. Been on repeat since I discovered it hours ago.

Man. I can't even how good this track is.

[bleak palm]

How do you get a community contributer role

[dusky jacinth]

y'all need to check out post sex nachos

[raven rain]

yea how about we keep it pg13 thanks

[molten bobcat]

i help contribute to the community

😄

[bleak palm]

Someone hasn't had his nachos

[sick gate]

Nachos are explicit?

[molten bobcat]

if they're.. really good?

maybe

[bleak palm]

I will say sometimes people are condescending here, but if you separate the tone from advice its helpful

[molten bobcat]

sorry about the mixup there anno

[rose onyx]

I found out there's a company that makes turkey day gravy for post dinner activities

[bleak palm]

Oh not your fault

[molten bobcat]

i was not intending, at all, to be hostile there?

roger

[bleak palm]

You weren't lol

[dusky jacinth]

it's an actual band

[bleak palm]

I was also busy and just returned to read

[dusky jacinth]

prima/vera is their most recent album

[raven rain]

my bad bro

[bleak palm]

Just the topic on rude people reminded me of some of my previous interactions here

[dusky jacinth]

no it's all good

[bleak palm]

I also like different opinions to the topic of blogging

[molten bobcat]

I have one 😄

[bleak palm]

For me, as a noob in cybersec, yeah a blog not gonna make some employer shit their pants, but maybe could show passion at least

My resume itself can lead to my character especially if I can talk to them

Despite lack of it experience

I just need qualifications and the knowledge

To break in

[rose onyx]

Doesn't have to be specifically about machines you've completed, can be anything you want it to be. light bulb moments, tools you just discovered that you think are really cool, a cve you thought was novel and did a deeper dive into the why.

[bleak palm]

I need to incorporate my art into these writeups too

Could separate my blogs from others

At keast add some ZEST

[molten bobcat]

I love zest

[bleak palm]

Writeups not box related sound interesting too

Just hard to find a topic people already haven't done a million times

So ill either need to revolutionize an approach to an already established topic or git gud and find something novel

I can read Japanese so maybe there are things in their outdated infra I can read up on

Then translate to english

[sick gate]

If someone is interested in you outside of the regular job application process they will probably look at your blog and advocate for you

[bleak palm]

Makes sense.

[molten bobcat]

just nice to have

like a business card

[sick gate]

Or if you go further into the process

[molten bobcat]

but more depth

[sick gate]

I have looked at applicants projects

[bleak palm]

Anything stand out?

[frosty thistle]

I personally dont like doing box writeups, i just write about random things i find interesting

[open lava]

It doesn't have to be unique but made with love a write up is a write up after all

[sick gate]

I've not done it for cybersec roles but I've seen people going for sysadmin roles who had developed automation tools etc

[open lava]

Yo zumi 😂

[frosty thistle]

Yo hru

[open lava]

Again we met

Im fine

[frosty thistle]

its me Zumi!!!

[open lava]

I see

[frosty thistle]

great to hear

[dusky jacinth]

somethings fishy in here

https://tenor.com/view/fish-gif-7118186382740991644

[frosty thistle]

fische

[dusky jacinth]

phischzte

pheischizte

[rose onyx]

glub glub

[dusky jacinth]

fimsh

[frosty thistle]

funny fish

[crude island]

@open lava stalker

[frosty thistle]

whyyyy they stalker

rock is this true

[crude island]

Im just messing with him

[open lava]

No maybe i just left th chat open to do something else 😭

[frosty thistle]

finally i am full

[rose onyx]

Your fullness killed the server

[frosty thistle]

Good

[pine nimbus]

Hi how do i get the symbol thing after my name?

[open lava]

He ate the people 😭

[bronze lion]

Multiple servers actually

[bronze lion]

U gotta earn certs for that

Or complete seasonal boxes

[rose onyx]

https://tenor.com/view/топ-gif-8645824773769135803

[dusky jacinth]

I’m hungry and sleepy

Who else struggling w the wombo combo

[eager gust]

morrow

[frail turtle]

blazingly fast Code optimizations while risking every sense of security known to man!

This is how I will use my pc from now on

[dusky jacinth]

As god intended

[crimson smelt]

more work opportunities for the rest of us

job security

[frail turtle]

[green kite]

today

[eager gust]

indeed

[rancid swallow]

[rose onyx]

MY FAVORITE MOD! You're late

[green kite]

Yes. I had to put pH and chlorides in the pool

It needs to be ready in a few hours

[rose onyx]

that takes like 5 minutes

[green kite]

Yes. I’m only 5 minutes late sir

[rose onyx]

no sir, you are 1 hour late

[silver forge]

I don't have a pool, I have to swim in the lake like a poor people

[green kite]

It’s only a simple Intex pool

No biggy

[rose onyx]

omg even easier

[terse dirge]

https://cdn.discordapp.com/attachments/1481405169378791519/1492337134797852753/00c61e35-1cd8-406f-acd0-3d38f469e7be.gif

[green kite]

Yes

Heya Ceald

[terse dirge]

https://klipy.com/gifs/im-just-vibin-just--k01KQYFFE3KSGK7KCFACPBVCW6E

[rose onyx]

ceald is drunk

[terse dirge]

might go to a night market tomorrow 👀

[green kite]

How’s it going @rose onyx

[terse dirge]

no sadly

[green kite]

Finally legal drinking age

[rose onyx]

i is going

[rose onyx]

dming link

[frigid mountain]

i'm eating hummus and pita chips and olive oil

[worthy cargo]

I love hummus

[frigid mountain]

wanna see the show I was just at?

[worthy cargo]

Sure

[rose onyx]

humans and olive oil? 🤔

[terse dirge]

uh oh too many embeds at once

[worthy cargo]

Oh no bro got muted

It happened to me too a few days ago

Talk to a mod they'll reverse it

[rose onyx]

SPARKLES FIX IT PLOX!

[terse dirge]

https://klipy.com/gifs/1984-skander-1

[worthy cargo]

@green kite unmute @frigid mountain

😄

[green kite]

He’s not muted

Or someone fixed it

[frigid mountain]

now i'm not but I was

[alpine pumice]

Wow pinging @green kite for nothing

[frigid mountain]

ok four at a time

[green kite]

Thank you nuts

[worthy cargo]

Well how was I supposed to know SuperNuts was gonna do it

[green kite]

For unmuting

[worthy cargo]

I don't have magical knowledge powers

[alpine pumice]

you don't?

https://tenor.com/view/the-simpsons-pathetic-principal-skinner-gif-13486077408184960752

[worthy cargo]

I sure don't buddy dude homey

Home slice diggity do dawg

dude man homey bro

[frigid mountain]

https://tenor.com/view/south-park-buddy-guy-friend-canadian-gif-6183589

[worthy cargo]

Adam Sandler: They're all gonna laugh at you: Buddy

[frigid mountain]

hummas and olive oil so good together

[worthy cargo]

https://www.youtube.com/watch?v=SzcpMddxnbw&t=3s

[frigid mountain]

i can eat as much as I want because theyre super foods

[frigid mountain]

that album was epic when i was 15-16

[worthy cargo]

Same

[rose onyx]

humans are not super foods

[terse dirge]

adam sandler distrack?

[frigid mountain]

peak 90s humor

[frigid mountain]

comedy album

my older sister had it

i remember listening to it in her apartment when she was like 21 and I was 15

[rancid swallow]

[worthy cargo]

do a git pull and check out bhtui again 🙂

[rancid swallow]

ok, will do in a while

[west venture]

Hwllo

[cursive bough]

Hwllo

[silver forge]

Hmm. There seems to be quiet a bit confusion about PQC. Many people seem to think they have time to migrate until 2030, and they can use all that time. No. That's the cutoff when non-PQC will be disabled.

[terse dirge]

damn pizza is soo good

[ornate ibex]

Whats the topings?

[terse dirge]

meatball

deepdish still better

much better than new york style

[silver forge]

spaghetti as topping

[terse dirge]

@rose onyx probably like pineapple strawberry pizza

[rose onyx]

https://tenor.com/view/jon-stewart-gif-8771021

[terse dirge]

[cursive bough]

Honestly it doesn't look bad

It's like spaghetti with bread sticks

A more inhumane unethical combo would be pinapple

[terse dirge]

[slender fern]

ss13 pizza hands

[bleak palm]

Fish will swim up your...you know

[bleak palm]

Ss13 is based

[silver forge]

hand net. fish are yummy

[bleak palm]

35,000 SK Hynix employees in Korea will receive 500M Won ($350K) ~ 700M Won ($450K) Bonus a year for at least the next three years, a period during which the semiconductor sector is expected to keep growing. Next year the bonus is expected to reach to 1.3 Billion Won($900K) because of more profits.

[novel hornet]

Hello,I am new to the cyber- world. I wanna do offensive, but first for that I wanna start understanding defensive, I know the basics , can anyone suggest the starter module for start of Defensive security

?

[stable tiger]

https://letsdefend.io/

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[terse dirge]

@novel hornet

[earnest gust]

h

[upbeat tangle]

Good morning general

[silver forge]

This is a forked epiphany browser with ML-DSA support, connecting to web server using only post-quantum cryptography. No mainstream browser supports this stuff. Chomium will in late 2027, and most browser vendors will release the support in 2028.

MLKEM+ML-DSA 😊

My home lab is now officially in 2028

[crimson smelt]

the adam sandler cd's that he used to release 20 years ago were fucking epic

toll booth willie

[high cobalt]

Why didn't you bring home the jackpot numbers instead of Post Quantum Encryption?

But jokes aside, how did you set up post quantum enc on the server?

[silver forge]

I'm just doing some background research and oh boy everything related to certificates in real world will change because the way they are signed and produced will be completely transformed

Oh I have a obsidian note

[balmy vortex]

47 days maximum lifespan waiting room ⏰

[silver forge]

it's more than that. you have to actually update your software as well, as the quorom signing thing will have markers that come with installed software packages, not via the certificates itself

so if you for example skip a monthly browser update, your users will not be able to connect all new services 😄

standalone certificate carries the inclusion proof plus a quorum of cosignatures over the containing subtree, sufficient for any conformant relying party. A landmark-relative certificate carries only the inclusion proof and no signatures at all, on the assumption that the relying party has already fetched, out of band, the hash of the landmark subtree the proof terminates in. Standalone works with any client; landmark-relative only works with up-to-date clients that maintain a current set of landmark hashes.

[balmy vortex]

yeah i know i was oversimplifying the thing

im just thinking about companies whos still updating everything manually lol

its gonna be funny

[silver forge]

they will be effectively disconnected from the internet

[scenic maple]

how does this work will other sites support it

[silver forge]

you need those landmark hash updates

[high cobalt]

Sounds like ... an awfull user experience 😵‍💫

[silver forge]

what do you mean? every single web site will be forced to switch before 2030, because in 2030 the pre-pqc algorihtms will be disabled globally from all software

[scenic maple]

yeah but how will it run now

[sick gate]

https://tenor.com/view/end-homer-simpson-the-end-is-near-sign-guy-simpsons-gif-10822004

[silver forge]

oh outside the lab since I have the only actually working browser that can connect my web server, the user experience is slightly poor

[scenic maple]

the user experience is good in about 1 in 8 billion

[silver forge]

The algorithms are not hard, they are in libraries. The real issue seems to be that the shortening of the certificate lifespans and the fact that PQC certificates are huge forces them to re-implement most of how CAs work from the scratch. And since there are interoperability issues, not even the RFC is approved yet.

[summer urchin]

[silver forge]

that how many donuts you have eaten?

[summer urchin]

uhhhhhhhhhh

sure

AKA codeforces rating

but

yk

thats better

[sturdy thistle]

morning

[summer urchin]

mornin mick 🙂
hows your day goin

[sturdy thistle]

gucci

[high cobalt]

Wait what???

[sturdy thistle]

just restarted CJCA to get the report done lol

[summer urchin]

💪

[summer urchin]

ah, very nice

glgl

[dusty mirage]

.

[sturdy thistle]

Well only Report and Blue part needs to be done

[high cobalt]

That's in just 4 years, in 2026 People are still running Software with TLS < 1.2. Do you mean its forced via Certificate Authorities? How is that gonna supposed to work?!

[balmy vortex]

hello mickhat, i havent forgotten the middle finger emoji you sent me on 3/12/2022 at 8:37 pm

but how are you

[static bloom]

donut always asks how people are doing, but do people ask how donut is doing?

[balmy vortex]

you sent only one in this entire server and it was for me

best memory of my life

[sturdy thistle]

👌

here's a new one

[balmy vortex]

YOOOOOOOOOOOOOO

[dusty mirage]

just like that

[balmy vortex]

amazing thank you

[sturdy thistle]

or wait

actually

forget this

here comes a new one

JUST FOR YOU

❤️

[balmy vortex]

YOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

satuday is fucking amazing

i found this laying on my floor

take it

♥️

its not dirty dont worry

[sturdy thistle]

Thank you!

[balmy vortex]

my pleasure ! happy saturday !

[sturdy thistle]

good sir/ma'am

[balmy vortex]

https://tenor.com/view/cat-i-am-walking-gif-18591290

[dusty mirage]

saturday & happy do NOT go in the same sentence

[balmy vortex]

why

[dusty mirage]

cuz i said so

[balmy vortex]

why would i believe you you dont like peanut butter

[sturdy thistle]

ok, thank you good cat

[dusty mirage]

peanut butter is dogsh*t

peanuts are nice though

[balmy vortex]

butter is nice too

so peanut butter is neat

watch the maths

[dusty mirage]

not when they're together, nuh uh

[proper dragon]

MODS

[sturdy thistle]

ok, back to CJCA

[balmy vortex]

gl sir

[dusty mirage]

i'm gonna pretend i understand what the first C means

[sonic kestrel]

hiyaa everyoneee

[proper dragon]

for you it means crazy
peanut butter is peak and people who dont like it are fundamentally untrustworthy

[high cobalt]

Peanut butter 😍 ❤️

[dusty mirage]

you an opp gng

🔫🔫🔫

[high cobalt]

Peanut butter WITH any cholocate cream 😍 ❤️ ❤️ ❤️ ❤️ ❤️ ❤️

[dusty mirage]

@high cobalt, you.

are you okay?

[high cobalt]

Wdym, mixing these two tastes like Snickers

[rose onyx]

I hope you beat @tough oyster to it

[dusty mirage]

see now that's where it starts getting crazy

i don't like snickers either

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[sturdy thistle]

i got 100 points in the red part

[high cobalt]

I think you are the one who is crazy ...

Who doesn't like Snickers?!

[dusty mirage]

i plead nuh uh

[dusty mirage]

present ma'am 🙋🏻‍♂️

[tough oyster]

Where R ya with your reporting. I'm also at 100 points but only going to submit 80 cus I can't be fucked writing the full report for all machines

[sturdy thistle]

no, DO IT

[tough oyster]

nah. been doing this ALL DAY today and yesterday

[sturdy thistle]

red part is ready - i took 2 voucher for everything

[rose onyx]

https://tenor.com/view/fire-gif-10341555270454130792

[proper dragon]

I dont block people but this guy is getting close

[dusty mirage]

i'm starting to think y'all are autobots

[rose onyx]

https://tenor.com/view/autobots-rollout-rollout-gif-8446870982418360184

[proper dragon]

analysis of Nvidia pivoting away from personal computing:
https://youtu.be/SUqQrlLV0tU?si=my_o7sOsqlT12qhG

[sturdy thistle]

good luck bro

[terse dirge]

What's everyone's thoughts on black licorice?

[tough oyster]

fucking love it

[rose onyx]

yes

[heady sage]

It’s not as bad as people say it is.

[terse dirge]

Based

[terse dirge]

Lol

[high cobalt]

No, I am an advanced AI

A member here called me out a few days ago 😔

[terse dirge]

Ikr it's just like red vines but they taste herbal and have that crisp/freshness like mint

[heady sage]

https://tenor.com/view/donkey-nezeki-sonion-sonkey-son-gif-16040362324989800541

[rose onyx]

it's because of the plant family, same ones as star anise, and fennel

[terse dirge]

I wonder if I can make star anise and fennel into licorice flavors

That'd be interesting

[proper dragon]

the gpu smuggling business is thriving

"yo you got the compute?" "yea I got the compute, wachu need?"

[rose onyx]

anethole look it up, crazy shit

[mental mulch]

Hi guys

[bleak palm]

Ayo I can give u 100 tokens as sample for da compute prompt yo sox off kid

[silver forge]

anise is made into booze, and it tastes very nice

[sick gate]

like sambuca?

[terse dirge]

Who dat?

[terse dirge]

Nice

[sick gate]

let me google that for you

[silver forge]

wait what you guys drink non-alcoholic drinks, too

[proper dragon]

yoo man that compute was some good stuff... but I need more tokens... can't finish this program without some tokens

[terse dirge]

Yeah only when I'm not drinking

[silver forge]

😤

[terse dirge]

Ooo nice.

[scenic maple]

https://tenor.com/view/well-waiting-caddyshack-gif-5385414

[terse dirge]

It's a liquor

https://en.wikipedia.org/wiki/Sambuca

[sick gate]

https://media.discordapp.net/attachments/976835926556819487/1377134937299353600/Make_a_video_202505281401.gif

[terse dirge]

Jagermiester and orange soda sounds good rn

Maybe I'll try to get some Jager at the night market tomorrow

If I remember correctly it reminded myself of a fancier coca-cola

[silver forge]

I kind of feel like hacking, but I have headache so I guess it's video games instead

[scenic maple]

will video games help with headache?

[proper dragon]

dark souls 3

best headache cure

[autumn prairie]

What can i do (legally) with a diy flipper (esp32 with Bruce) guys? Im making one but dont know what to do with it instead of turning on/off tv😭

[scenic maple]

legally you can do very few things tho

[autumn prairie]

Ahh, imma just turning on/off tv then

😭

[terse dirge]

Change tvs in bars to cartoons

[autumn prairie]

😭

[proper dragon]

FCC notified

[autumn prairie]

Wait... Im not old enough for bars

Bruh

[normal mist]

is anyone else excited for Toy Story 5

[sick gate]

how old are you?

[autumn prairie]

14

[sick gate]

[maiden anvil]

wth how do I pop a shell on this

[sick gate]

@scenic maple

[scenic maple]

😩

[terse dirge]

You need to be 18+ to make an account on HTB or get your parents to sign the permission form

[autumn prairie]

Dang

[scenic maple]

https://help.hackthebox.com/en/articles/9456556-parental-consent-and-approval-for-users-under-18

[mystic harbor]

golam is 14 yr old

[scenic maple]

you are missing a few zeros

[autumn prairie]

1400 yr

[mystic harbor]

bro is more ancient than @supple plume

[high cobalt]

Ancient cat god

[supple plume]

[sturdy thistle]

and you're an 18 yr old baby

[terse dirge]

I had some double chocolate chip cookies and they were great

[sturdy thistle]

Leg day today

or just biceps and chest

[terse dirge]

Damn I also got leg day on Saturday

[sturdy thistle]

every saturday?

[terse dirge]

No just this Saturday cause I skipped Tuesday

I was too tired after jury duty

[sturdy thistle]

ah ok

i might do chest instead cause yesterday i had some knee pain

[terse dirge]

The verdict was || not guilty because of a lack of evidence that the defendant was in possession of drugs and that they were theirs all we had was a cell phone recording of security camera footage and it was really shitty ||

[terse dirge]

Oof. Yeah listen to your body man

[sturdy thistle]

chest and biceps day it is

ceald decided

first time jury duty?

[stone marsh]

I gotta skip leg day because I got a small hamstring injury at bjj

[terse dirge]

Yeah and first time I was selected to be a juror and sit through the whole trial

It was very boring and I got a drink afterwards on both days cause why not yk

[terse dirge]

Oof

[sturdy thistle]

hahaha

get well @stone marsh

almost accidentally pinged red

[terse dirge]

First day was a shot of tequila at a taco place and second day was a gin tonic at a local place

[stone marsh]

Will do, want to hit up a competition in like two months, so it better heal quick

[terse dirge]

Oh shit I should probably get cash tomorrow for the night market but idk maybe I shouldn't buy anything lol kinda poor rn have only around $100 left in my account including jury duty payment

I'll spend my jury duty money at the market cause then fees will start applying and stuff

[sturdy thistle]

when u get money?

[terse dirge]

From old job and jury duty

[sturdy thistle]

and when u get new one?

[terse dirge]

I got paid like $40 a day I think

[terse dirge]

Idk. Still waiting on their hr now after I filled out more forms

[sturdy thistle]

ah

u get your moiney weekly?

or biweekly?

[rancid swallow]

yoink

[terse dirge]

Biweekly

[sturdy thistle]

how does US work

[stone marsh]

It truly is a mystery

[terse dirge]

It's different for every job I believe

[autumn prairie]

Why i meet u again here😭

[sturdy thistle]

see, i get it once a month

[rancid swallow]

lel

[terse dirge]

I probably won't even need to pay taxes cause I'll be making $15 an hour for 19 hours a week

[autumn prairie]

Bro is in every chat im in

[rancid swallow]

[terse dirge]

From my previous job I got like $300 back from a tax refund

At previous job I was making $19 an hour for 19.5 hours a week

[rancid swallow]

[terse dirge]

It was ok pay but there was a lack of communication with management and I wasn't really sure who all I worked with lmao

[rancid swallow]

the stupid Big Small 4s of my nation asks for 70-90hrs a week

on a paygrade of 3000-5000$ at max per year

[terse dirge]

Oof. Mines only a part time job

If I was renting then I'd not be making enough at all

[proper dragon]

top tier job to slip into the darkness and get paid for nothing

[rancid swallow]

well stuff are cheap in my country so less pay as well
my monthly rent+food costs like not more than 200$

[boreal pike]

UwU.

[terse dirge]

Yeah I probably could've gotten away with that lmao but I decided not to because I didn't know what my coworker was doing and that's also how I became the sysadmin for the cyber range

19/hr for sysadmin work on legacy systems 😄

One time I deployed a domain controller and a secondary one to make a forest with ad cs and mssql

[terse dirge]

It wasn't great when I was getting paid and it's not any better now that I do it without pay but I've distanced myself more now

[uneven beacon]

[stone marsh]

At some work places it is odd how little you can get away with. I had one co-worker that would fall asleep at his desk, and he was only let go after he asked for a reference for a new job that he got

[terse dirge]

My coworker did stuff. I trusted them that they were actually doing their part

I still sometimes talk with them, they're pretty cool

[high cobalt]

Ouff I can't devide between playing video games and continue learning hacking right now ...

[terse dirge]

New job will be a soc analyst apprenticeship so I'll be doing real cyber now

[jagged storm]

https://tenor.com/view/time-to-learn-finn-jake-gif-5188235

[stone marsh]

Do the hacking, I am sure there is an easy box that you could do

[stone marsh]

Oooh, good luck!

[high cobalt]

I mean the easy box I def. wanna do is released in a few hours ... but that's in the evening here

[rough mirage]

just 1 more game of war thunder

[upbeat tangle]

gaming 😴

[jagged storm]

Word? Congrats

[terse dirge]

Ty still haven't gotten it yet tho

[stone marsh]

Yeah I always hate the release times for boxes. Like sure it is a saturday, but I am often having my meal and watching TV with my girlfriend, bit awkward to just grab the laptop and start muttering about nmap scans

[upbeat tangle]

Good luck on the job

[rough mirage]

job

[upbeat tangle]

No its not awkward at all, thats standard practice

[rough mirage]

pls dont say those offense words

[rough mirage]

congrats mate!

[high cobalt]

Yeah, maybe I will do it tomorrow, in the winter it is okay with 8pm, but 9pm is a bit too late :D

[scenic maple]

which platforms are you using to apply

[jagged storm]

There's only really LinkedIn, for IT

[scenic maple]

😔

[terse dirge]

Irl. My new boss will end up being my boss from my previous job

[scenic maple]

dang that internship came in clutch

[terse dirge]

The whole lack of communication was after my old boss left for the last like 4 months of that internship

Unfortunately I cannot talk too much about the new job lol

[jagged storm]

https://tenor.com/view/classified-top-gun-gif-776610220174644076

[rugged dune]

Drinking my coffee on mid day

Good morning/afternoon

It very sunny in Belgium

[austere sigil]

imagine being in Belgium

[stone marsh]

https://tenor.com/view/michael-scott-dare-i-do-i-dare-should-i-michael-the-office-gif-21612500

[rugged dune]

Just imagine....

[stone marsh]

I got to go walk the dogs before I can get root, but the silentium box is super fun

[terse dirge]

Belgium sounds awesome

[austere sigil]

it's nice

[terse dirge]

Arizona is kinda nice just not during summer

Planning a day trip in 2 weeks to Lowell Arizona

[normal forge]

Hello, good afternoon

[terse dirge]

It's a ghost town stuck in the 50s

[rugged dune]

How was helix

[terse dirge]

Maybe even hit up one of the retro diners in Arizona afterwards too

[random aurora]

/opt its like storing data from any file right

Same as tmp

Right?

If I was local user I will be using bin
If I'm root I will use sbin the
Tools inside sbin for root

[high cobalt]

No, /tmp is for temporary files, /opt is for installing third party software

[terse dirge]

No

[random aurora]

Got it now thirdparty that I download it from other source right?

[high cobalt]

Yeah

[random aurora]

Finally I'm getting great in linux file hierarchy

[terse dirge]

Not really. Local users it's preferred to use /usr/local/bin or /usr/bin while system users/accounts would use /bin and sbin are things only root can run like updating grub

I'm probably wrong but

[random aurora]

Sbin only for roots

[jagged storm]

This reminds me why I prefer BSD

[random aurora]

Bin only for the local users

[terse dirge]

No root can use anything in /bin and /usr/local/bin and /usr/bin

[random aurora]

/sbin This directory contains executables used for system administration (binary system files).

[terse dirge]

You can run echo $PATH to see what your user paths are

[random aurora]

Its like pwd right?c

[terse dirge]

No it shows you what directories you have added to your path

[random aurora]

What the point of path ,

[terse dirge]

To show where your user's executable files are without having to type the absolute path

[jagged storm]

https://tenor.com/view/lenny-thinking-the-simpsons-focus-gif-16290110

[random aurora]

Okay like inside the sbin where the files okay I got u

[terse dirge]

Like /bin would be in your path

[terse dirge]

Not system accounts. Service accounts

Service accounts are things like www-data

[random aurora]

Okay the bin its for commands ls cat to work right?

[terse dirge]

It's the directory for where those binaries are located

[random aurora]

But the sbin it will give us the files root and how to access right ?

[terse dirge]

No

[random aurora]

The binaries is ls cat to deal with shell for kernel

[vast remnant]

yes ls and cat are compiled binaries they exist at /bin/ls and /bin/cat

[terse dirge]

Sbin is for stuff like containing binaries for updating grub.. there may be system links for those higher level binaries but sbin contains uniquely stuff that like updating grub.

[terse dirge]

Yes

[random aurora]

Okay okay got it or shutdown u should to be root to access these commands by the sbin I got u or configure hardisk

Confuse

[fickle kernel]

I’ve never seen an env where PATH was unmodifiable

[random aurora]

Man I really feel linux file hierachy Feel it hard little

[terse dirge]

You can restart and shutdown your system through the init system depending on how it's configured you can do it without root

[vast remnant]

the path variable indicates where to look for binaries, if you empty it and call ls or cat it will say "ls not found"

[terse dirge]

Uhh no. You can change it

[vast remnant]

oh damn you're right

[rancid totem]

morning

[deft furnace]

hello

:3

[vast remnant]

the only time i did this attack was on pwn college and in the next exercice i did they had path unwritable, my mistake

[stone marsh]

Haven't done it yet, but it is on the list once I finish the bare bones of the write up for Silentium. Doing one final push to rank up before the legacy ranks disappear

Got any hints?

[bronze lion]

is silentium a good box?

[stone marsh]

Yeah I have had a lot of fun with it so far. User had a few more steps than I had expected, but the issues it has are fun to do

[bronze lion]

nice

i think i will give it a try too tday or tmr

[floral wind]

I'm starting out my cybersecurity path in htb, is it normal for me to take longer than the time expected for the module

[bronze lion]

absolutely

each person has diff pace

[turbid goblet]

What part r u at, u can dm if need i can see if its a part i understand wel

[floral wind]

I just didn't understand how someone can zoom past a module in 6 hours I've been at for like 3 days now 🤣

[cursive bough]

It's all good just keep going at it

[turbid goblet]

Take as long as you need to actually understand it

[floral wind]

will do sire

[cursive bough]

If youre taking notes I recommend using Obsidian

It's my personal favorite

[turbid goblet]

I plus 1 that but i also recommend absolutely taking notes regardless

[cursive bough]

Yes

[stone marsh]

Oh no I was just being silly since tarfouss is the creator of Helix, so was seeing if he would give me anything

[turbid goblet]

Oooooh lmao didnt notice that

[deft furnace]

I'm new to cybersecurity (actually saw some of it in college but the minimum of theory and cryptography, nothing practical), do you guys recommend the junior cybersecurity associate course or should I complement it with some other module that it doesn't include?

[stone marsh]

Junior course is really good, gives you a good breakdown of offensive and defensive techniques which can set you up well for general SOC/Security work. Thing is that no one course will give you everything you need, so it all comes down to interests and where you may think the jobs in cyber sec are going.

[deft furnace]

Okok, thanks

I'll do the course and if I feel I'm missing on somthing I'll do extra modules

[stone marsh]

In theory, Junior course, CPTS course and the web pentester course is probably around all of the content you may need to be a valuable member of an offensive pentesting team at a junior level.

[rugged dune]

btw @austere sigil

[stone marsh]

Which is a lot of content, and YMMV depending on a whole lot of factors.

[rugged dune]

CPTS junior ?

[stone marsh]

Yeah, in my experience, if you don't have a lot of that knowledge progression at corpos is super painful

All that knowledge applies well even at senior level, but even trying to get junior pentester roles in the UK basically requires you to have good inf knowledge, without it, interviews are brutal

[rugged dune]

u just answered ur self

[deft furnace]

Will take into account

[stone marsh]

Look at my second reply

[rugged dune]

a lot of that knowledge progression at corpos is super painful

[deft furnace]

[pseudo swift]

Can i use same vpn hackthebox provide in my local and docker machine in same time.

[stone marsh]

I assume you are taking it as progression to senior? My point is that even to get into pentesting roles or progress into more valuable positions as a junior you need that inf knowledge

[rugged dune]

I get what you mean but if you have CPTS you already prove you know what you doing for a mid junior ( 2 months to become senior)

alot of seniors can't do half cpts

[rancid totem]

Yes, but that's pain in the ass

jst forward

[rugged dune]

jfyi cpts is x10 harder than oscp

[stone marsh]

That may be true for some orgs! Unfortunately it is not quite accurate at my current org.

[rancid totem]

try docker run -it ubuntu bash

[rugged dune]

ik ik

[chilly flare]

Crazy

[rancid totem]

whatever your docker cont is, fix the line

[stone marsh]

I have done like 90% of CPTS and I am not even considered "capable" of doing inf assessments

[pseudo swift]

Ok i fix it

I am warred if htb team see i use 2 machine my vpn they ban me.That's why i am not trying it.

[stone marsh]

Though I am also in an odd position because I am just about to sit a web app exam that would make me a senior in that specialism. It is what it is 🤷‍♂️

[rugged dune]

in ur point of view what is the cert that is senior level then lol ..

cape is though

[stone marsh]

Well, I am basing my opinion on what is considered desirable or required within the UK cyber security scene

so, basically you aren't a senior unless you have CCT Inf, App or CSTL Inf or App.

But yeah, CPTS would be about junior level in an inf pentesting role

[frosty thistle]

CEH

[zenith pine]

CHTAP

[rugged dune]

my dream cert man

[frosty thistle]

SYBAU

[stone marsh]

Certified Human Trafficking Awareness Professional?

[zenith pine]

Yes that one

[frosty thistle]

i will never obtain it 💔

after cape its osed time

https://cdn.discordapp.com/attachments/1431407319786328084/1503939179573153922/rat.gif

[hearty sun]

hello, I'm new too, CPTS is worth it? Do enterprises consider it very good? Or should I do smaller modules first

[zenith pine]

https://tenor.com/view/post-this-cat-disco-cat-bounce-but-here's-the-jumper-one-time-gif-703903172250378112

[turbid goblet]

zumi the type of guy to type out netexec

jajaja

[tropic ermine]

Yup CPTS is worth it, but it's rlly hard

[hearty sun]

https://tenor.com/view/chiikawa-hachieware-eat-noodles-ramen-gif-10610560750298384877

[turbid goblet]

https://tenor.com/view/memes-embed-fail-embed-lol-goofy-ahh-gif-18059583046613256622

u need to type -embedallow man

[tropic ermine]

Try cjca or cwee ar first

[zenith pine]

crackmapexec -h

[hearty sun]

ok!

ty

[turbid goblet]

are u calling me out

[zenith pine]

https://tenor.com/view/white-role-gif-14508208783363503407

[turbid goblet]

im stupid and about a week ago i found out nxc is a replacement of crack map kek

[zenith pine]

https://tenor.com/view/champoy-el-risitas-kek-issou-etu-gif-17837830

tbf i learned that through the netexec module

[turbid goblet]

oh shit theres a module?

i gotta buy dat

[zenith pine]

i liked it, pretty cool module

[turbid goblet]

wait where

i only see crackmap's

[zenith pine]

you gotta ignore all commands they give and use nxc instead(most commands apply)

its that one, but its the same shit

[turbid goblet]

oh well yeah

fair

[strong copper]

btw how do I get the Verified tag inside Discord?

[stone marsh]

Most enterprises accept that the exam is good, but I don't often see many that have it listed as a desired/required cert. So it really depends on what you are personally seeing in your country/local job market. The knowledge in it is great, and will help you get further certs even if your local job market don't seem to recognise it as much.

[stone marsh]

If you go to your HTB profile, you should see an option to link it to your discord. If you do that you get the tag.

Specifically on this page: https://account.hackthebox.com/security-settings

[scenic maple]

i dont see any cyber jobs in my country

[turbid goblet]

come to america golam

[strong copper]

Thanks, it worked!

[scenic maple]

too expensive

also ice will deport me

[turbid goblet]

but u can make more money here bc capitalism

[rough mirage]

can i get help on the selentium box?

[stone marsh]

You guys see that drupal has an active SQL exploit?

[turbid goblet]

i think all that ice shit fizzled out

[rough mirage]

nah not at all

[turbid goblet]

dm

[rough mirage]

sure

[stone marsh]

I'd say come to the UK, but I don't even know if you would get security clearance

[scenic maple]

whats the requirements for getting one

[austere sigil]

yes?

[rough mirage]

i thought golam was american

[proper dragon]

let's say I built an automated pipeline that does due diligence scans of ransomware executable across a massive library of collected ransomware. What are the odds that something crawls out of my VM if I were to let this run? Any advice on how to do this without worrying about nuking my host?

[rugged dune]

i forgot ngl

[bronze lion]

remote?

[bronze lion]

CPTS 🔥

[scenic maple]

remote is difficult

[austere sigil]

I was afk so I couldn't respond earlier

[stone marsh]

A job and also a whole bunch of things related to your immigration status, country of birth, any potential criminal or financial history issues etc.

[bronze lion]

going abroad is difficult too tho

¯_(ツ)_/¯

[rough mirage]

the chance is pretty low tbh unless its high end malware but i would say do the basic stuff like disconnecting it from the network etc

[scenic maple]

easier than remote ngl

[stone marsh]

Depending where you are based, I have no idea if the UK government would even allow it. I have heard some people having issues just for being the wrong kind of irish due to family history.

[proper dragon]

I already planned on this

[scenic maple]

yall still beefing ?

[eager gust]

still going

[proper dragon]

I guess I'll just make a snapshot of my system and hope for the best

[stone marsh]

Not really beefing, but more so, if your uncle is a member of a known "terrorist" group, getting clearance is unsurprisingly problematic

[rugged dune]

idk they just gave it to me man

[rough mirage]

yeah

[scenic maple]

[bronze lion]

just like that ,

[rough mirage]

i mean, im indian in the uk and i didn't have any issues coming here

[bronze lion]

golam isnt from india tho

[stone marsh]

Oh this is specifically about getting government clearance, not an immigration thing. The UK has gone out of its way many times to bring over people from India

[rough mirage]

oh I see

[scenic maple]

how did you get visa

[rough mirage]

germany?

[rough mirage]

not me

[scenic maple]

classified

[bronze lion]

nah

[rough mirage]

my dad did

[scenic maple]

that explains it

[rough mirage]

my fam moved here a while back

[stone marsh]

My partner is from India as well. Her visa process is kind of annoying at the minute.

she has to do some dumb test about british history/culture

[scenic maple]

can you pass the test?

without studying

[stone marsh]

All I could offer her was a musical about the order in which Henry's wife got beheaded and some random fact about the battle of hastings

[bronze lion]

haha

[stone marsh]

Oh no, I would be deported unless it was pub facts

[frosty thistle]

i cant even read

[scenic maple]

british people loved blowing up copenhagen

[scenic maple]

you came here to hack not read

[frosty thistle]

after this week my brain is fried from hacking

i need to decompress

[bronze lion]

wach azumanga daioh

[frosty thistle]

I LOVE AZUMANGA DAIOH

ya ill watch it on the plane ride home

[bronze lion]

WE LOVE AZUMANAGA DAIOH

[frosty thistle]

good suggestion

[bronze lion]

[frosty thistle]

https://cdn.discordapp.com/attachments/588029217376043023/1505622365172928595/image0.gif

sataaaa andagi

[bronze lion]

americayaa

[frosty thistle]

hru levi

[turbid goblet]

https://tenor.com/view/dance-anime-girl-gif-12256532373203515884

[frosty thistle]

im waiting for hotel breakfast to open hueheuhue

[bronze lion]

never been better

[frosty thistle]

hiii kami

[bronze lion]

went abroad for work?

[frosty thistle]

good to hear me brain broken

[frosty thistle]

nooooo im in a different state

[bronze lion]

oh

[frosty thistle]

for pentest

[bronze lion]

i see

[turbid goblet]

zumi i tried making fun of u but u ignored me

[left hornet]

can anyone help me with setting up ovpn inside a virtual machine using kali? when I try to connect the the target machine it keeps saying "port 22: No route to host" halp plz

[frosty thistle]

THAT WAS MAKING FUN OF ME???

[turbid goblet]

no earlier

[stone marsh]

Well, have you connected to the VPN?

[bronze lion]

whats the command u used btw?

[frosty thistle]

are you using the right ovpn? are you running sudo openvpn filename

[turbid goblet]

"zumi the type of guy to type out netexec"

[stone marsh]

II like the progression in those questions.

[frosty thistle]

one fucking time i couldnt figure out why i couldnt connect to a htb machine

i was using an offsec vpn

[frosty thistle]

WHAT

youre not wrong tho

[turbid goblet]

hehe

lmao

[bronze lion]

[frosty thistle]

but i just use commandmgr.com

unless im in a airgap environment then i do manually type it

or alias it to n

cuz im lazy

p is penelope
n is nxc
rnc is sudo rlwrap nc -nvlp

[zenith pine]

https://cdn.discordapp.com/attachments/588029217376043023/1484768992575885352/attachment-1.gif

[frosty thistle]

thats right i know python

[zenith pine]

can you DDOS and SWAT 🥷 ?

[frosty thistle]

no

[bronze lion]

is this tuff gng?

[scenic maple]

why is australia the ip pinger nation

[bronze lion]

[stone marsh]

https://tenor.com/view/cats-computer-hack-anon-anonymous-gif-14779987

[zenith pine]

you dont wanna know

[scenic maple]

so tuff

[topaz lintel]

solving real bug bounty machines, interested people can come and watch

[left hornet]

oh yeah its 100% connected and I downloaded the file

[zenith pine]

https://tenor.com/view/anime-pfp-anime-is-trash-anime-gif-313814939499218505

[proper dragon]

chat is this real

[left hornet]

yeah its the right file, I delete old ones right after I use them

[frosty thistle]

try udp or tcp

try different region

[bronze lion]

crazy chat going on here

https://youtu.be/dQw4w9WgXcQ?si=L9IPURnFnNCVXkpK

exactly like the drama in this vid

[frosty thistle]

https://gif.fxtwitter.com/tweet_video/HA58T6xbMAAOnMt.gif

big chungus sends his regards

[crimson crypt]

https://labs.hackthebox.com/achievement/machine/2025612/891

[left hornet]

Im doing tcp to avoid packet loss since I thought that was the problem but its still messed up idk wtf to do

[frosty thistle]

congrats spiderman 2

[frosty thistle]

try udp or diff region

[cursive bough]

Pingpong

[warped plank]

which machine you connecting to and what's the name of your openvpn file

[high cobalt]

Maybe because the have high latency to the rest of the world?

[warped plank]

strong suspicion it's something stupid like tryna use the starting-point vpn for machines

[left hornet]

it aint that. maybe my firewall on my machine is blocking the vpn connection from connecting on the vm? because I noticed I couldnt load any webpages after connecting to the vpn

[frosty thistle]

check what wild said

if u think its firewall just turn off firewall

that would confirm or deny

[left hornet]

"academy-regular.ovpn" and im using kali

[frosty thistle]

what machine

[left hornet]

can you even curse here

[warped plank]

which module and section?

[rough mirage]

anyone wanna help me with the silentium box?

[rough mirage]

nah

[left hornet]

linux, legit the first starting module

[rough mirage]

against the rules

[left hornet]

dern

[warped plank]

ask in #boxes

[warped plank]

you do realize there's a lot of linux modules gotta be more specific

[scenic maple]

linux fundamentals i would guess

[warped plank]

for all you know he's doing the Getting Started one

[bronze lion]

lol

[dull current]

Hi guys! Beginner here, do I need to install supplementary tools on my kali Linux vm ? I plan to work through openvpn

[warped plank]

@left hornet this one?

[left hornet]

YE

[bronze lion]

not really

atleast not for now i would say

[warped plank]

ok, you running openvpn and ssh in separate terminal sessions? also openvpn running as sudo?

[frosty thistle]

no but you do need to uninstall cadaver

you will never use it

[dull current]

Gotcha

[frosty thistle]

(i have used it ONCE my entire life)

on a barracuda exploit

[bronze lion]

i havent ever used it nor heard of it tbh

[warped plank]

Now I'mma make a box that forces you to use it

[warped plank]

WebDav stuff

[frosty thistle]

NOOOOO

[dusky jacinth]

🫩

[frosty thistle]

i have an interesting idea for a box but when the hell will i ever have time to make it

[scenic maple]

link?

[warped plank]

https://linux.die.net/man/1/cadaver

[high cobalt]

Why uninstall it even of you never use it?

[warped plank]

basically like smb or ftp but noone uses it

[frosty thistle]

it was a joke

[turbid goblet]

who tryna fish with me in stardew valley

[frosty thistle]

thats like asking someone to date

[bleak palm]

clint flirting

[proper dragon]

Qemu supports PCIe passthrough
doing this means potential DEATH

[turbid goblet]

and what if i was

clint mentioned

[warped plank]

fastest way to brick not only your VM but also your host

[bleak palm]

clint got rejected too many times. looksmaxx in the next update

[turbid goblet]

clint didnt get rejected by his doctor tho

spoon story

oh wait

[high cobalt]

Is it for real dangerous?

[turbid goblet]

ngl i overthought that i thought u were talking ab someone else lmao

[warped plank]

I mean... you are dealing with giving up kernel level control of PCI drivers to your VM which can fudge up a lot of stuff

[bleak palm]

damn i like sql injected or something idk is that a funny hacker joke

[turbid goblet]

better not knowing i think

[proper dragon]

yea not going anywhere near that with my current project

[turbid goblet]

Bro my privesc is so shit

[zealous charm]

[upbeat tangle]

I bought some nice herbal tea instead

turmeric, ginger, and something else

[proper dragon]

something else eh 🕵️

[upbeat tangle]

cardemom i think the name is

[bleak palm]

There does seem a lot of little ends to check

I know a lot of people are using WinPEAS and LinPEAS for this. But I think I want to learn what it checks first

In case I ever had to do it manually or at least understand everything it looks for

[turbid goblet]

Yeah i do both for practice

Even with peas sometimes i miss things bc im still so nooby

[stone marsh]

Linpeas does often just spam you with bs as well. So it can be easy to miss real things

[tough notch]

When the new season starts does the first machine drop at the very start or do we have to wait ?

[turbid goblet]

?

[olive marten]

https://klipy.com/gifs/iqzeusqi

[turbid goblet]

Could take ya 10seconds to find that answer lol

[noble wren]

Something went wrong
Cannot log in user because it's already linked with another HTB Account

Please disable any browser extensions or use an incognito tab
and retry the operation. If the problem persists,
you can always contact our support team.

I think I may have deleted my account a while ago accidentaly and now when I create a user with the same email I get the above error. Is there a way I can recover my old account?

[warped plank]

Contact support

[west lynx]

https://help.hackthebox.com/en/articles/5986762-contacting-htb-support

[noble wren]

@warped plank thanks

[pallid zenith]

passed cysa yesterday as a high schooler! score: 791

[bleak palm]

Nice job

[compact escarp]

-h i want to install a specific list for directory fuzzig for ffuz module guide me .....

in my wsl

[silver bronze]

you write dirs locations, one per line, in a txt file

[turbid goblet]

Based

Bro i skipped the past 3 weeks of legdays but somehow my squat was still stronger today