resources

[static saddle]

Does anyone have any notes on any of the paths they'd be willing to share? I've done the complete beginner and pre security pathways and It's just dawning on me I should have taken my own notes to study the material.

Was going to resort to just blowing an hour or two screen shotting haha

[vast stratus]

hey guys theres a web app lab called pentesterlab vulnerable blog does somebody have a walkthrough that i can watch thanks in advance

[burnt parrot]

Can't really share my notes (since they're not all in English lol), but I've completed pre-security and I'm 70% on complete beginner. Here's a list of most useful things I've noted down:

• Linux (commands)
• OSI Layers
• nmap (commands and scan types)
• Exploiting SMB/Telnet/FTP/NFS/SMTP/mySQL
• Metasploit (some basic things)
• Burp Suite (Modules)
• OWASP Top 10 (What each one is, how it's exploited and how it's mitigated)
• gobuster (commands)

I recommend going through those modules and nothing what you think is important. It shouldn't take too long

Without notes, it would feel like I've learned almost nothing at all. I can't function without them in some rooms

[scarlet oar]

CAPTCHA Solver Chrome extension
https://chrome.google.com/webstore/detail/noptcha-recaptcha-hcaptch/dknlfmjaanfblgfdfebhijalfmhmjjjo

[cunning meadow]

Do you have anything on Windows part as well?

[burnt parrot]

Haven't reached it yet

[iron shadow]

hey, i am struggling to understand Active Directory concepts and architecture/hierarchy. any good course for it ? i've been asked that in the last two job interviews and i feel like i don't understand it good enough to describe it

[burnt sinew]

Microsoft documentation is a great resources. If you didn't, try to build your own lab. Break theory into concepts and try to implement on your environment.

[thick herald]

https://fourcore.io/blogs/top-10-open-source-adversary-emulation-tools

[thorn elm]

hi anyone know any workable method to extract email from google dork?

most article utilize SERP...

[iron shadow]

they have alot of documents but the problem is that many of then not really explaining the basics

that why i asked here, to get more specific content

[coral loom]

@hushed estuary

[hushed estuary]

-ban 838655145557491742 -ddays 1 please don't share links to porn/scam sites. If this was in error, please secure your account and email [e-mail] afterwards

[odd sinew]

🔨 Banned maxiscool001#7738 indefinitely

[shut ferry]

Thanks mate, I like the format ! Will definitely come in handy

[odd sinew]

Gave +1 Rep to @tawdry bridge

[tawdry bridge]

My Notes about "Broken Access Control" and "IDOR" Attacks
https://sl4x0.github.io/Access-Control-Notes
https://sl4x0.github.io/IDOR-Attacks

[zenith depot]

https://escafl0wn3.com/2022/07/12/the-sand-clock-of-cybersecurity/

[odd quest]

That's a terrible idea.

[fossil kestrel]

Why illegal, there are plenty of websites that do the same but for money, I want to make it free for the public

[odd quest]

What's to stop a malicious individual from abusing it?

[fossil kestrel]

True 😦

[odd quest]

Please stop asking here

!rule 9

[fervent summit]

Rule 9: No discussion of illegal/unethical topics or actions. If the target device doesn't belong to you and you don't have specific permission to perform an attack from the owner of the target, then you don't do it and we don't talk about it. This also applies to piracy / copyright violations -- illegally obtained materials (including classified or potentially classified materials) should not be posted here.
If in doubt, please ask a moderator before posting your message -- preferably without breaking rule 1. Whether an action is unethical or not is at the sole discretion of the moderation team. Be warned -- a community ban over ethical concerns may also be extended to a ban from the TryHackMe website; we do not teach blackhats.

[odd quest]

Dealing in stolen data is unethical

[zenith depot]

https://escafl0wn3.com/2022/07/28/useful-sites-and-tools-for-an-investigation/

[sonic abyss]

What are some good svg2png tools for Ubuntu? I tried svg2png, imagemagick and inkscape but all of them were too low quality

[odd quest]

You can set the export resolution in InkScape and export at very high quality

[sonic abyss]

What's the flag for that? Can't seem to find it, only the width and background opacity

[odd quest]

Oh, at the command line. No idea.

[sonic abyss]

Ah yeah should have been more specific, I need a CLI tool so I can automate the process

[thick herald]

Hey Everyone 👋

We just put an article on Manipulating Windows Tokens with Go.

(And also open sourced a Go package to easily access and manipulate Windows Tokens!)

https://fourcore.io/blogs/manipulating-windows-tokens-with-golang

[agile pawn]

Hello. I Wrote an article about Docke (container in general) hardening and thought it is getting kinda cool. So if it can help someone:

https://farinap5.github.io/Docker-Hardening.html

[runic viper]

hello

[sonic abyss]

hi

[runic viper]

i sent you friend request

[brazen sequoia]

Did you read the #rules ?
Especially rule 1 ?

[sonic abyss]

....why?

[sonic abyss]

any good text based resources on getting better at geoguesser?

[orchid basin]

I don't have anything text based that isn't already found in the OhShint gitbook or osint framework, but if you like YouTube, GeoWizard and RAINBOLT are cracked at the game.

[sonic abyss]

https://application.security/free-application-security-training/understanding-apache-log4j-vulnerability

Superb website in explaining stuff interactively for free really well!

[mystic linden]

https://github.com/Cimihan123/Creating-Pivoting-Lab-In-Docker

smth. I was trying to create.

[odd quest]

@shy glacier Please post this in #thm-community-media

[jagged haven]

Great work :v

[shut ferry]

Hey, searching for a resource that might help me with my ubuntu LTS server. I've done some code and made a website I bought a domain since i wanna try this out. I want to make my website public. But not sure how exactly i do this with the ubuntu server and how i point my domain the server or vice versa. Also how i should setup security. Any video or article would help me 🙂

[sonic abyss]

Where's it being hosted?

[shut ferry]

My own server, an old computer i put ubuntu LTS on to learn myself about servers

[sonic abyss]

Right so you have a couple of ways of making it publicly accessible, for example - port forwarding

What are you using as your web server software?

https://superuser.com/questions/802894/ubuntu-server-how-to-make-a-domain-point-to-it

This could be of help

[shut ferry]

Thanks @hazy bear @sonic abyss

[odd sinew]

Gave +1 Rep to @hazy bear

[shut ferry]

thanks @sonic abyss

[odd sinew]

Gave +1 Rep to @sonic abyss

[sonic abyss]

the pings

[orchid basin]

@sonic abyss what about them 🤔

[valid mirage]

https://info.ine.com/ejptv2-beta/

New eJPTv2 training and exam is free if you sign up for the beta. I believe signups end tomorrow.

[sonic abyss]

Make sure to put in your INE account email as it accepts anything ^

[valid mirage]

I reached out to support. You do not need to use an email associated with an INE account. I was super worried about that too @sonic abyss haha

[sonic abyss]

You don't? That's pretty cool actully cc @obsidian peak

[valid mirage]

Yeah I was worried because the beta program was listed as free, however an INE account is not.

[sonic abyss]

You can get a free INE account with the starter pass

[valid mirage]

Oh bet. That's good to know!

[obsidian peak]

yo thx

[shut ferry]

Hey 👋 It appears that the site http://www.xss-payloads.com/ seems to be down. The site is mentioned in the XSS Room, and OWASP Top 10. Does anyone know a website with similar resources?

[obsidian peak]

works fine for me too

[steep dawn]

Mee too 👍

[sonic abyss]

Ditto

[shut ferry]

Hmm, problem's on my end then. Thanks @odd quest @steep dawn

[odd sinew]

Gave +1 Rep to @odd quest

[topaz gulch]

You're going to be quite limited in the techniques you can use if you're using docker. No true tunnelling, for example.
Been there, done this, doesn't end too well 😆
I wrote a config to build a container that will allow you to better emulate a real pivoting scenario, but it opens it up to a bunch of possible breakouts (these things are disabled for a reason )

If you're building challenges, Docker is a pretty good bet (heck, hardest box I've ever built is a big docker network 🤷‍♂️)
LXC would be a better choice if you're wanting to build pivoting playgrounds though.

Harder to automate / compose, but system containers > application containers for this kinda thing anyday

Also, JFC for the love of all that's good and holy please please please consolidate those RUN directives in your docker files

[mystic linden]

I really did not get what you mean by "true tunneling".
Emulating a real pivoting scenario in a container really is not a thing. I don't know how much hassle I faced while exploiting it. Specially during the time of getting a reverse shell.
You can drop your config file here or DM me 😅
Def agree with the RUN directives. Racking up like that just makes awful. 😂

[topaz gulch]

Emulating a real pivoting scenario in a container really is not a thing.
Not in an application container it isn't.

[prime mantle]

https://www.linux-magazine.com/tags/view/security
Can be a good time pass read.

[regal drift]

Where? It wants credit card info for the trial.

[low marsh]

Interesting. Do you happen know other magazines similar to this one?

[lucid edge]

Security zines?

[sonic abyss]

What trial? It's free
https://checkout.ine.com/starter-pass

[regal drift]

Oh.

When you click sign up on their website it directs you to their trial.

[vernal oriole]

I want to learn more about edb and Linux buffer overflow, Is there any recommendations

[balmy sun]

Anyone know when BHUSA talks will end up on youtube?

[compact cipher]

Anyone knows where to find certs on thm?

[sonic abyss]

Certs?

Are you talking about the certificates?

[devout crest]

Within a month, usually.

[gusty helm]

what do yall use for phishing

ive got html files already but how do people spoof the name of the website/ the email

[hushed estuary]

Now phishing is rarely ethical.

[topaz gulch]

Or rather, when it is, it's being done by people who don't need to ask that question

[sonic abyss]

https://tenor.com/view/atg-capa-stucapa-studiocapa-pandu-gif-24944581

[gusty helm]

im just learning to uise

testing it on myself im not tryna hack ppl

[simple juniper]

https://university.apisec.ai/

[thick herald]

https://fourcore.io/blogs/mitre-attack-mitre-defend-detection-engineering-threat-hunting

[ember sentinel]

Can I share my first writeup on Tryhackme room article here?

[sharp grove]

#thm-community-media

[ember sentinel]

I don't have permission to message in that channel.

What shall I do?

[fervent summit]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[ember sentinel]

Here?

Ok

Thanks @sharp grove and @hazy bear

[odd sinew]

Gave +1 Rep to @sharp grove

[sharp grove]

+rep @hazy bear

[odd sinew]

Gave +1 Rep to @hazy bear

[prisma bison]

@pliant maple Don’t post referral links.

[pliant maple]

Yeah Sorry about that

😅

[odd quest]

-ban @shut ferry -ddays 1 Posting piracy list

[odd sinew]

🔨 Banned koi#7579 indefinitely

[crystal topaz]

Hi. Anyone know if there’s anything like pspy for Windows?

[novel lodge]

I need some guidance I am on a module and when i try to nmap my hackme ip address it will not show me any ftp options to complete the module.

[odd quest]

@novel lodge #room-help please

[odd quest]

@shut ferry Are you ok there?

[novel lodge]

@odd quest I got it figured out it was a noob error lol thank you for the guidance

[odd sinew]

Gave +1 Rep to @odd quest

[balmy sun]

Hate it or not but the certificate map got updated https://pauljerimy.com/security-certification-roadmap/

[orchid basin]

CRTO below OSCP 🤔

[timber lintel]

CRTO > OSCP

[topaz hare]

I'm so glad CBBH is on it

hopefully that one gets more industry recognition

[keen field]

Did u watch it?

[prisma bison]

They’re not in the discord

[orchid basin]

Neither this nor the Flare-VM repo have been updated in about a year. I don’t know how well the commando script works, but the Flare script has been way more inconsistent as time goes on

[orchid basin]

I’m just sad the Flare repo has gotten no love and is slowly becoming more problematic. I’ll probably need to write my own FLARE-lite or something if they don’t update it

[olive bough]

Tooling i made that people might find useful https://github.com/1337Rin/Swag-PSO https://github.com/1337Rin/Auto-Magic

[night ether]

https://www.ncsc.gov.uk/collection/building-a-security-operations-centre

[trim pivot]

Hey Hackers, I hope you’ve been doing well! Here are the Agenda for this Week (16th - 22nd Aug 2022):
https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_03.md

• 1. Hiring & Free course
• 2. Events, Talks & Webinars
• 3. Cve's POC and analysis
  • CVE's Week 04 → 16th—22nd August 2022
• 4. Vulnerability/bugs Write-ups.
  • Hackerone Report Segment:
  • Bugs Analysis and write-ups segment:
• 5. Twitter threads
• 6. Research Article/White paper & Statistics Reports.
• 7. Tools, framework, RAT, Ransomware and malware
  • SAST/DAST/Recon/Exploit Web : * Tool
  • Cloud Security : * Tool
  • Blue Team : * Tool
  • OSINT Tools : * Tool
  • Malware Analysis : * Tool
• 8. Secuirty & Researchers: Pentesting, AppSec, SOC, Red team, Blue team, threat intelligence, Malware, Ransomware etc.
  • Misc. :
  • Blue Team :
• 9. Grey/Black Hat Hacker News:
• 10. How to get involve in Contribution ?
• 11. Source for Weekly infosec Update.
• 12. Wrapping Up. 🙂

[burnt sinew]

Friendly powershell script, might help someone with DF https://github.com/Johnng007/Live-Forensicator

[balmy sun]

Where do people learn ISO-27001, SIEM, SCRUM, etc?

I see those things on every vacancy but I know no resources to learn them

[orchid basin]

Those are 3 very different things. One is compliance related, the other describes various logging and monitoring tools, and the last one is a “framework” for working in a development team

To address each of those respectively

1. Just read it idk I don’t do compliance 🤷‍♂️
2. TryHackMe has a couple rooms on Splunk, the most popular SIEM afaik, and ELK stuff in general (I think), so that’s a good place to start
3. There’s really no way to “learn” it except being in a Scrum team, because that’s what an employer is probably looking for. You can look up how scrum/agile compares to waterfall and at least know that, but not much more beyond that.

[elder parrot]

Interested in getting started with API hacking? Then check out this article: https://danaepp.com/beginners-guide-to-api-hacking

[jaunty cradle]

Would someone like to suggest some good repos for red teaming activities specifically exploitation phase and better if it consists ways to avoid detection

[vivid locust]

https://pastebin.com/SMzEZP9x https://github.com/themixedcoder/IT-Resources/blob/main/README.md#tech-youtubers-and-videos

[pulsar seal]

hi guys, do you have any resources/books for security/security flaws in SCADA systems? I am working on security for a SCADA network and i need more details on how to ensure the security of it. thanks in advance

[orchid basin]

I don't have too much but I think these two are decent places to look
https://github.com/hslatman/awesome-industrial-control-system-security
https://github.com/neutrinoguy/awesome-ics-writeups

[trim pivot]

We started working on "Weekly Infosec Update" because It's very time consuming to monitor the InfoSec Community on twitter, telegram, reddit. discord and visiting security website every day.

I had no idea we’d end up releasing "Weekly Infosec Update" every Wednesday.
I hope community will enjoy the new version.🙏
https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_04.md

[sonic abyss]

@hushed estuary ^

[hushed estuary]

I don't know if I want to click that

[crimson moon]

it's a malicious link?

[deep abyss]

I have a feeling they may have deleted a malicious link 🙂

[olive bough]

https://github.com/1337Rin/CVE-2021-4034

[azure galleon]

I would suggest using github releases for holding the artefact instead of git repo 🙂
also why don't you use os.CreateTemp() instead hardcoding /tmp PATH? not every system has /tmp mount 😄

[olive bough]

Noted, will update the repo to use os.CreateTemp() later today.

[spice garnet]

https://github.com/SaintsConnor/Scripts-PenTest - Hopefully all scripts here work.

If anyone knows of any scripts they'd like added or coded please let me know and I'll try to get them in there.

DISCLAIMER: NOT ALL SCRIPTS ARE MINE, CREDITS HAVE BEEN GIVEN.

PS: Any CVE Scripts, will be placed in a separate folder upon creation

[shut ferry]

https://tenor.com/view/hacker-pc-meme-matrix-codes-gif-16730883

Is this we’re I can find stuff to become ultimate heker

[elder parrot]

Let me show you how to exploit APIs with cURL: https://danaepp.com/exploit-apis-with-curl

[shut wagon]

That's how I often use Pwncat
https://medium.com/@dolor3sh4ze/how-i-use-pwncat-to-reverse-shell-privesc-69f85ac78024

ooh! nice thanks!

[odd sinew]

Gave +1 Rep to @hazy bear

[orchid basin]

i love docker https://notateamserver.xyz/docker-101/

[hollow depot]

@umbral epoch please dont post (paid) self promotion as per the rules

[ebon lodge]

https://regexper.com/

[deep abyss]

I tend to use https://regexr.com/

[trim pivot]

Hey Hackers, I hope you’ve been doing well on weekend!

Here are the Agenda for "Weekly infosec Update" (31th August 2022 - 6th September 2022)🙏🙏
https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_05.md

[viscid bison]

https://media.ccc.de/search/?q=scada take a look here 😉

[shy glacier]

There's also https://regex101.com

[elder parrot]

Learn about careers where you can make money hacking APIs: https://danaepp.com/how-to-make-money-hacking-apis

[odd quest]

@elder parrot is that your site?

[elder parrot]

A personal blog. I’m at a point in my life where I want to try to give back to the community, especially the next generation coming up.

[astral blaze]

has someone any explaining resources about SSRF? I can not really understand it

[sonic abyss]

https://application.security/free-application-security-training/server-side-request-forgery-in-capital-one

Here's one as an example

[astral blaze]

thank you!

[odd sinew]

Gave +1 Rep to @sonic abyss

[cosmic moon]

Anyone got any good threat models for use of a vpn? Based around network attacks

[sonic abyss]

No worries, can I ask - what's the reaction for lol

[elder parrot]

Learn how API keys and tokens are being baked into mobile apps, and how you can win on #redteam because of this oversight: https://danaepp.com/hardcoded-cloud-creds-prove-its-easy-for-api-hackers-to-win

[trim pivot]

Hey Hackers, I hope you’ve been doing well on the weekend!

Here are the Agenda for new version(v0.4) of “Weekly infosec Update” (7th September—13th September 2022).

https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_06.md

[trim pivot]

This week we have made some significant changes in New version of "Weekly Security Update" v0.4

1. Added navigation Bar (called SAVE TIME).
   So hacker can select the segment and read it without Hassle with scrolling.

2. We have reduced the segment from 12 to 7 (Event, CVE, Bug bounty, Research, NEWS, Hiring & Tools).
   And We're finding a way to make it shorter and more user-friendly.

Thank you

[sonic abyss]

Really goes to show how many publicly available cams here are out there

[sharp grove]

can only happen in some developed country that has a lot of cameras around

[clear wedge]

8. Practice - CTF:
   a. Hacker101 CTF - https://ctf.hacker101.com/
   b. HackThebox - https://www.hackthebox.com/
   c. TryHackeMe - https://tryhackme.com/
   d. Root Me - https://www.root-me.org/fr/Capture-The-Flag/
   e. picoCTF - https://picoctf.org/

Happy Hacking! 🙂

[craggy onyx]

Your post includes illegal resources.

[elder parrot]

This week I show 3 tricks that can help you discover the language an API was written in. Know any other tricks? Would ❤️ to hear about it.

https://danaepp.com/how-to-detect-the-programming-language-of-an-api

[fluid fulcrum]

Most of us run virtual labs on our machines. Here's a PowerShell script to ease the pain of managing that lab:
https://github.com/yaksas443/Invoke-AKSH

[kindred dome]

Anyone have any recommendations for any good resources for something like Socat for dummies?

[ripe nest]

An unpacker for PyArmor (Python protector), useful for malware analysis or CTFs
https://github.com/Svenskithesource/PyArmor-Unpacker

[shut ferry]

Learn about control environment narratives
https://www.linkedin.com/pulse/control-environment-narratives-john-whalen

[low marsh]

Learn about V8 exploitation:
https://www.youtube.com/watch?v=Uyrv2F6wI-E

[prisma bison]

@rich dawn Please wait for your room to be published by room reviewers before posting it:)

[rich dawn]

My bad..

[untold nebula]

Is room reviewer someone who is hired by THM or just community members that volunteer?

[fringe spire]

Volunteer.

[azure widget]

No. We are almost solely working from our in-house QA team now.

[trim pivot]

Hey Hackers, I hope you’ve been doing well on the weekend!😀

After taking feedback for last 2+ month, Finally We have finalized the Template for "WEEKLY INFOSEC UPDATE"
Here are the Agenda for new version(v0.5)🎉 of Weekly infosec Update (14th September—20th September 2022).

https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_07.md

[elder parrot]

Want to learn how to reverse engineer an undocumented API? Check this out: https://danaepp.com/how-to-craft-rogue-api-docs-for-a-target-when-they-dont-exist

[small night]

TCM Academy courses Windows Privesc and Linux Privesc are free for 24 hours. Code is 100OFF

https://academy.tcm-sec.com/p/windows-privilege-escalation-for-beginners?coupon_code=100OFF

https://academy.tcm-sec.com/p/linux-privilege-escalation?coupon_code=100OFF

[sharp grove]

I don't have to input any code but it's free thank you

[odd sinew]

Gave +1 Rep to @small night

[sonic abyss]

Yeah code is already given (see link)

[sharp grove]

ahh didn't realize that

[elder parrot]

Hacking APIs for fun and profit requires you to know how long to stay on target, and knowing when to give up. Let's discuss. https://danaepp.com/the-bug-bounty-dilemma-when-to-give-up-on-an-api-target

[balmy sun]

Blackhat talks have been uploaded to youtube

E.g. https://youtu.be/1titzBiuxSc

[balmy sun]

Edit: these are talks from may, not august

It sucks imo that most talks from BH asia have really obvious accents

(English is not my primary language fyi)

[odd quest]

@spring moth Don't shitpost here

[trim pivot]

Hey Hackers, I hope you’ve been doing well on the weekend!😁:

Here is the agenda for #WeeklyInfoSecUpdate v0.6 (21st Sept-27th Sept, 2022)

• In the new Version(v0.6), We have divided #WIU into two parts

1. Professional.
2. Beginners/Intermediate friendly segment.

• And We have reduced the Segment from 7 to 5.

https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_08.md

[orchid basin]

A beginner's guide to the Sliver C2, out of (respectful) spite, because they've had the guide as TODO for 9+ months now
https://notateamserver.xyz/sliver-101/

[remote wind]

https://youtu.be/n92YrzELBJU video explaining how lemmeknow works and how it's different from pyWhat!

[elder parrot]

Let me show you how to find access control issues in APIs: https://danaepp.com/how-to-find-access-control-issues-in-apis

[weak gulch]

Do you guys know and recommend some good courses in udemy about red team?

[undone belfry]

I read about a set of courses from TheHackerNews (even if I'm not sure if they are worth), but try to give a look: https://thehackernews.com/2022/10/pay-what-you-want-for-this-collection.html

[shut ferry]

Ive started The Web Application Hacker's Handbook by virtue of your posts, thanks for the discovery and for sharing with the community👊

[odd sinew]

Gave +1 Rep to @elder parrot

[crimson moon]

Ehy I have one question: this blog series does not aim to a beginner target, right? And in such case, would you recommend studying sth?

[elder parrot]

Start here: https://danaepp.com/beginners-guide-to-api-hacking

And if you haven’t yet, check this out and enter to win 3 of my favorite books. Content ends Tuesday: https://danaepp.com/5-books-every-api-hacker-should-read

[crimson moon]

I know, I already read that, nice post man. But maybe I have to learn the bare basics of IT: I'm so beginner that I don't even know what a proxy really is and how it works

[elder parrot]

Have you downloaded my API Hacking Resource Guide? It has tons of links to resources to learn. The first few pages are all about the fundamentals of HTTP, API protocols etc

[crimson moon]

I got the email with the downloadable Guide, I'll study that. Thank you!

[elder parrot]

Awesome. Hope you find all those resources helpful!!

[jagged hull]

Got an extra 1 month Voucher at the student's account rate... DM me if you want it. I don't need to tell you the things you can get from a subscription 😉...

[hollow depot]

@tribal belfry you can post your repo here 🙂 sorry for the wait!

[elder parrot]

Let me show you how to attack APIs using payload injection with the Postman Collection Runner.

https://danaepp.com/the-api-hackers-guide-to-payload-injection-with-postman

[tawny stone]

I wrote 2 blog posts on exploiting Trackmania's server binary with some pretty advanced format string techniques, enjoy 😄

Fuzzing + reverse engineering:
https://blog.bricked.tech/posts/tmnf/part1/
Exploitation:
https://blog.bricked.tech/posts/tmnf/part2/

[hushed estuary]

Have these vulnerabilities been disclosed and patched?

If so, please provide the CVEs and/or patch notes

[tawny stone]

Disclosed and WONTFIX. Though I targeted a non-default config and my exploit uses the management port which you're supposed to firewall. I purposefully hunted in this area so my exploit doesn't actually affect real server owners. The game is from 2008, so I wasn't expecting any patches either

[hushed estuary]

Original Trackmania?

[hushed estuary]

Can you add remediation recommendations to the blog post?

[tawny stone]

It's literally the first chapter in the exploitation blog post

[hushed estuary]

Sorry I just skimmed it

Alright

[thin skiff]

any resources for CTF pls ?

[prisma bison]

@elder parrot I appreciate all the content that you have been pushing out recently but this is an infosec community.

In the spirit of being civil and professional I would like to ask you to only share content that is purely educational

[elder parrot]

You don’t think the mindset of how we are seen as hackers isn’t educational? And understanding where to draw the line on hacking vs cybercrime isn’t valuable to understand?

There are people in this DISCORD who do not understand where that line should be drawn.

[prisma bison]

I don’t care about the mindset, a rant isn’t a resource. You might disagree with their point of view but this certainly isn’t the place to put your point across.

I understand blogs are opinionated but causing drama isn’t wanted here

It’s nothing against you, I’m here to keep the peace. I would do the same if someone made a blog post directed towards you

[elder parrot]

Well, that’s your right. I think it’s an unfortunate reality that I even had to write that post. I hate the drama, but I want people to understand that hacking is not a crime. But unethical criminal activity is. I will of course abide by your decision, but I think it’s unfortunate.

[prisma bison]

I appreciate that:)

[elder parrot]

I am curious though @prisma bison , did you read my article?

(I would have DM that question, but I know how some mods feel about that)

[prisma bison]

I did not read it all, I usually put a pin in them and come back to them when I’m not busy :)

[elder parrot]

Lol. Fair enough.

When you do get to, I’d ❤️ some feedback on how I could have written that to be more aligned to the knowledge ethos on THM. Feel free to DM your input so I can incorporate that in how I write future articles.

Thanks in advance for any feedback you offer. And thanks for holding us accountable.

[odd quest]

Perhaps because it's against rule 1 of the discord

[elder parrot]

Yep.

[craggy onyx]

Can you please DM it to me, I'd like to read it. 🙂

[elder parrot]

Sure thing

[orchid basin]

Deleting the link without reading it in the first place 🤔

Even if it is technically an opinion piece, it also does go into a little bit of background on the ethical discourse around "hacking" with reference to the Computer Fraud and Abuse act and the programs created to help people, so I would argue it's educational in showing a side of that discussion.

If the conclusion is that it's an opinion piece and therefore does not count as a resource, that's cool, but it was solely judged off of the title, which is by no means perfect judgement of the contents of the article.

[prisma bison]

-mute @orchid basin Not your place to speak at all. You can argue whatever you want, the article was breaking the rule and henceforth it was removed. If you want to argue that, take it up with the community manager

[odd sinew]

🔇 Muted An00bRektn#2772 for 1 day

[burnt forum]

@elder parrot i would like to read it as well

[elder parrot]

Out of respect for the mods, let me DM you the link.

[shut ferry]

Intrigued, Id like to read that article too 🙌 feel free to DM me the link

[elder parrot]

Sent.

[hushed estuary]

People can't stay away from controversy eh?

To be fair I read a portion, and while some of the claims are questionable, it is a sensitive subject in many circles, and can be subject to misinterpretation easily, as it's a very very nuanced subject, which I don't think you covered very clearly (unless it was further in bit I was somewhat occupied at the time)

[patent veldt]

What happened here 👀

[hushed estuary]

Nothing major

Blog post was linked, bit of a touchy topic, asked to remove as opinion pieces aren't exactly resources

[shut ferry]

https://www.instagram.com/tv/CjgW0fEgxb1/?igshid=YmMyMTA2M2Y=

enuisdifferent

In this video I show why it is never a good idea to give out your number to a
Person you have barely met. I also show how you can protect yourself by giving an alternate phone number. With This being said this video is for educational purposes only HAPPY OSINT EVERYONE! note: you cannot use this application to sign up on facebook or a lot of soc...

▶ Play video

Instagram

Small OSINT blog I’m starting to educate the public on OSINT and best steps to take regarding OPSEC

I hope this is okay I posted this as a resource 😅if not feel free to remove it. also any feedback is greatly appreciated

[olive basin]

anyone got resources on image forensics? and i mean image as in identifying if a picture was adulterated by someone

[odd quest]

@desert laurel please don't advertise your YouTube videos here

[desert laurel]

Advertise...!
It's a resource.

[odd quest]

It's your video

[desert laurel]

Even if it is
Don't people create resources and share them so that others can use it.
It was not a tampon add..!

[odd quest]

Advertising is against the rules here.

[desert laurel]

Are previous videos and articles only visible to me😅

Anyway leave it

[elder parrot]

Check out how to use Azure GPU-enabled virtual machines to crack your API JWT tokens to find broken user authentication vulns.

https://danaepp.com/how-to-use-azure-to-crack-api-auth-tokens

[night holly]

I got you bro

[brazen sequoia]

-mute 309688166929924096 7d You always trying to rebel against mod actions. James clearly told them to not advertise their youtube videos here, now you try to circumvent that decision by posting their video yourself.

[odd sinew]

🔇 Muted jB#9815 for 1 week

[patent knot]

https://tenor.com/view/1984-gif-19260546

[hushed estuary]

yes.

[trim pivot]

Hey Hackers, I hope you’ve been doing well on the weekend!😁:

Here is the agenda for #WeeklyInfoSecUpdate v0.7 an open source Newsletter (27th Sept—12th October 2022)

https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_09.md

Note: In upcoming weeks we'll be releasing Weekly Infosec Update v0.7 at different time and date.

[elder parrot]

Why not automate some of your API hacking to test for authorization vulnerabilities? Read this to find out how.
https://danaepp.com/automate-your-api-hacking-with-autorize

[lilac sundial]

I hope it will be helpfull https://link.medium.com/Sw95L3DGZtb

https://link.medium.com/cFx3mpw1crb

[thin skiff]

https://github.com/coreb1t/awesome-pentest-cheat-sheets

[odd quest]

@shut ferry please don't advertise here

[elder parrot]

Let me show you how to use Postman to attack the Microsoft Graph API.
https://danaepp.com/attacking-microsoft-graph-with-postman

[thin skiff]

https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

[shut ferry]

if you complete one of the challenges you get a free cert exam for that challenge topic.
https://www.microsoft.com/en-US/cloudskillschallenge/ignite/officialrules/2022

[trim pivot]

Hey Hackers, I hope you’ve been doing well on the weekend!😁:

Presenting v0.7 of Weekly InfoSec Update #WIU - An open source Newsletter. For 12th Oct—18th October 2022

https://github.com/RESETHACKER-COMMUNITY/Pentesting-Bugbounty/blob/main/ResetCybersecuirty/Weekly_Infosec_Update(WIU)/Weekly_Infosec_Update_10.md

[brazen sequoia]

@shut ferry That site seems to have terrible reviews and requires a signup to access that, so I rather remove that post. (Not talking about the shared microsoft link, for anyone wondering)

[shut ferry]

oh ok

ill keep that in mind

no sign up books

[prisma bison]

@finite patio that’s not a resource

[elder parrot]

https://danaepp.com/can-sbom-help-you-attack-apis

[odd quest]

https://tldp.org/LDP/Linux-Filesystem-Hierarchy/html/proc.html

[reef orchid]

https://github.com/specterops/at-ps

[swift merlin]

Hey All,

Can any one help me Steel Mountain?
I'm getting an error that "Something went wrong..! Usage is :[.] python exploit.py <Target IP address> <Target Port Number>" though I have converted python script to latest python 3

Also not able to start http.server on port 80 as it is already used by other service & if I try to kill that service then the whole tryhackme attack machine is getting disconnected

[brazen sequoia]

Please don't ask the same question over multiple channels.
Also, this channel is for resources, not for room questions

[elder parrot]

https://danaepp.com/5-big-mistakes-beginners-make-hacking-apis

[viscid bison]

https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/

[unborn python]

Choosing the right hacking PC for you can be difficult with all the choices. I tried without being too technical to tell how to choose a good pc for that purpose.

https://youtu.be/VjSmVtB1AEI

[shut ferry]

https://github.com/Supreme-coder929/Mist

I made this, tell me if you like it.

[sudden fern]

can has more tl;dr of what toolkit does???

[shut ferry]

Did you go to the link to see what it does?

I say it in the repo

[shut ferry]

It’s also not long to read

I made it short

[sudden fern]

fair enoughs

[hushed estuary]

A proper description is nice though

[hushed estuary]

If those keys are real, you should revoke them, now.

Quick refactor, you should probably extract the boys that colour the text to a separate class/module/function.

I'd also use command line parameters rather than menus to drive the thing. This will make scripting and automation much easier

[shut ferry]

Oh yeah they are realn

But it’s free

[gritty fractal]

https://twitter.com/TCMSecurity/status/1585683642440814592?s=20&t=Sd4GxvOU7mnzP1PlgR8UHQ

TCM Security (@TCMSecurity)

It's spooky season! Here's a spooktacular deal for you. We are running a pay-what-you-can (min $5) on the following courses:

External Pentest Playbook
Windows PrivEsc
Linux PrivEsc

This promotion ends at 11:59pm EDT on Oct 31st. No coupons necessary! https://t.co/Bq83JxsKAb

Likes

213

Twitter · Oct 27, 2022, 5:23 PM

[odd quest]

Probably not acceptable use to share them

[hushed estuary]

revoke them now, sharing API keys is usually against ToS, and you should never store secrets in git

[sonic abyss]

https://github.com/psf/black

I'd like to recommend you this to use

And use a context manager ( with) instead of using f.open()

[shut ferry]

It’s tos in GitHub?

[hushed estuary]

no, the service

[sonic abyss]

Even if it's not against the ToS, you are responsible for all the actions taken with the API key - some might go against the ToS

https://www.ipqualityscore.com/terms-of-service

[shut ferry]

doesn't say anything about it

[elder parrot]

https://danaepp.com/7-essential-burp-extensions-for-hacking-apis

[olive bough]

https://github.com/1337Rin/sec-resources currently looking for commits if anyone is inclined

[thin skiff]

blog related to CTF
https://wiki.bi0s.in/#introduction

[elder parrot]

https://danaepp.com/api-pentesting-101-the-rules-of-engagement

[tawdry cedar]

Kerberoasting tutorials for beginners. Also useful for oscp students.
https://link.medium.com/h9VdPtEhDub

Tried writing first time , so feel free to give feedback.

[shut ferry]

https://readme.so create neat and organized repositories

[tawdry cedar]

Hello everyone, I have created a cheatsheet while preparing for OSCP. It also has Active Directory Attacks, probably more than required by oscp.

https://strange-1.gitbook.io/notes/

[sonic abyss]

https://www.youtube.com/watch?v=8mAITcNt710

[ebon lodge]

Literally 3rd and 4th bullets

[cobalt canyon]

Anyone know of any good resources or books on cyber law? Reason I ask is because I want to get more experience with external reconnaissance using DNS, etc. but don't know where to draw the line.

Edit: Will just stick with systems I own or have written permission to test to be safe. Just got confused because I ran across a (seemingly) reputable resource with dnsrecon examples that do zone transfers on third-party domains the author clearly doesn't own. There are other examples too of probing what seems to be a bit too far into large company's DNS info.... Maybe I'm overly cautious, but seems better to be safe than sorry.

But still, if you have any good resources/books on cyber law, I'm still interested.

[hushed estuary]

Have you checked the #bookclub ?

[spice garnet]

ToolBar has its first official release:

v0.5 - The first Brew is now out!

https://GitHub.com/SaintsConnor/ToolBar

[shut ferry]

https://github.com/RUB-NDS/PRET

[elder parrot]

When developers use insecure defaults, API security testing gets much more interesting. Let's predict and pwn those GUIDs used in APIs.

https://danaepp.com/attacking-predictable-guids-when-hacking-apis

[reef orchid]

https://skerritt.blog/tryhackme-hard/

[shut ferry]

https://blog.ret2.io/2022/06/29/pwn2own-2021-safari-sandbox-intel-graphics-exploit/

https://blog.ret2.io/assets/img/p2o_2021_eop_demo.mp4

[prisma bison]

Why click link no work

[sonic abyss]

this would be really great

if you could post the actual pdf

[tepid patio]

hey i know that girl

[paper thistle]

What pdf ??

Just zoom in on the images @sonic abyss.

[sonic abyss]

What is the original file

[hushed estuary]

not being able to click on the links is painful tbh

[steep skiff]

this help?

found the pdf from the authors linkedin page that was listed in the first image also available through this route if preferred:

https://www.linkedin.com/posts/chintangurjar_repo-list-activity-6996618801899274240-UE4Y?utm_source=share&utm_medium=member_desktop

[shut ferry]

Hello, any good resource for Active directory pentesting ?

would always pref PDF's

[kindred tulip]

Anyone have resources for AWS Cloud Practitioner Cert?

[craggy onyx]

A Cloud Guru has a good course on it.

[shut ferry]

https://whalenenterprise.com/security-safeguards

The Gramm-Leach-Bliley Act requires companies

that offer consumers financial products or services like loans, financial or investment advice, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data.

[paper thistle]

https://www.youtube.com/watch?v=gd7BXuUQ91w

[paper thistle]

Never authorize any company to use your data for information sharing purposes.

[honest urchin]

Seriously, too much resource

[paper thistle]

https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/

[paper thistle]

How can you have too much resources ???
That's the equivalent of going to the bank and informing the person standing behind the counter that you believe you have too much money.

[paper thistle]

Introducing 23 free resources to learn about API security testing:

- Video: Traceable AI, API Hacking 101.
- Video: Katie Paxton-Fear, API Hacking.
- Video: Bugcrowd, Bad API, hAPI Hackers.
- Video: OWASP API Security Top 10 Webinar.
- Blog: Detectify, How To Hack API's in 2021.
- Blog: HackXpert, Let's build an API to hack.
- Video: Bugcrowd, API Security 101 by Sadako.
- Video: David Bombal, Free API Hacking Course.
- Blog: Wallarm, How To Hack API In 60 Minutes.
- Website: APIsecurity IO, API Security Articles.
- Blog: Curity, The API Security Maturity Model.
- Blog: Expedited Security, API Security MegaGuide.
- Video: Grant Ongers, API Security Testing Workshop.
- Videos: The XSS Rat, API Testing And Securing Guide.
- Blog: APIsec OWASP API Security Top 10: A Deep Dive.
- Podcast: We Hack Purple, API Security Best Practices.
- Blog: Kontra Application Security, Owasp Top 10 for API.
- Blog: Secure Delivery, OWASP API Top 10 CTF Walk-through.
- Blog: SmartBear, How To Hack An API And Get Away With It.
- Blog: Ping Identity, API Security: The Complete Guide 2022.
- Video: SANS Offensive Operations, Analyzing OWASP API Security.
- Blog: Bend Theory, Exploiting Unintended Functionality in API's.
- Blog: Bright Security, Complete Guide to Threats, Methods & Tools.

[odd quest]

https://xss-quiz.int21h.jp/ - some neat beginnerish XSS challs (looks like 9 is broken, and 11 is giving me a 500)
https://xss.challenge.training.hacq.me/ - some more irritating, CTF style ones although some are broken now

[tardy timber]

hi

[elder parrot]

https://danaepp.com/tracing-api-exploitability-through-code-review-and-taint-analysis

[prisma bison]

@shut ferry

!rule 3

[fervent summit]

Rule 3: No excessive self promotion. You are welcome to post livestreams, writeups, and videos of THM content in #thm-community-media; these should be submitted to the room in question and approved by the creator before being posted here (it goes without saying that 'writeups' which are just copy/pasted room content, or are answer dumps, are a big no-no). Please do not abuse this. Be respectful to other users -- we are not interested in seeing you repeatedly spam your own content.
When in doubt, ask a moderator in the chat :)

[shut ferry]

Oh my bad😅

I'll ask next time

[paper thistle]

https://www.youtube.com/watch?v=92I5JwlluK4

[feral jungle]

why does that girl kinda look like andrew tate

[prisma bison]

wut.

[paper thistle]

It is his stunt double.

[paper thistle]

 Introducing 24 web-application hacking tools:

1. Burp Suite - Framework.
2. ZAP Proxy - Framework.
3. Dirsearch - HTTP bruteforcing.
4. Nmap - Port scanning.
5. Sublist3r - Subdomain discovery.
6. Amass - Subdomain discovery.
7. SQLmap - SQLi exploitation.
8. Metasploit - Framework.
9. WPscan - WordPress exploitation.
10. Nikto - Webserver scanning.
11. HTTPX - HTTP probing.
12. Nuclei - YAML based template scanning.
13. FFUF - HTTP probing.
14. Subfinder - Subdomain discovery.
15. Masscan - Mass IP and port scanner.
16. Lazy Recon - Subdomain discovery.
18. XSS Hunter - Blind XSS discovery.
19. Aquatone - HTTP based recon.
20. LinkFinder - Endpoint discovery through JS files.
21. JS-Scan - Endpoint discovery through JS files.
22. GAU - Historical attack surface mapping.
23. Parameth - Bruteforce GET and POST parameters.
24. truffleHog - Find credentials in GitHub commits.

[south marlin]

https://www.osintme.com/index.php/2021/12/06/how-to-investigate-a-massive-phishing-campaign/

[shell cipher]

Is it possible for tryhackme to give me there set up for Ubuntu with all the tools virtual machine for VMware 🤔

[stuck abyss]

No, they don't give the attackbox out.

[shell cipher]

@stuck abyss that sucks it’s such a good layout 😎

[meager zealot]

https://github.com/0x90n/InfoSec-Black-Friday

[paper thistle]

https://www.inc.com/jason-aten/the-fbi-has-a-warning-for-tiktok-users-why-it-says-you-should-be-extremely-concerned.html

[brittle nymph]

https://github.com/trungdq88/Awesome-Black-Friday-Cyber-Monday
re-share from other server

[versed spire]

https://sqlbolt.com/ great sql refresher :)

[gaunt grove]

Looking for good resources on Python/C++ programming specifically for hacking/cyber sec. Something like "Python for Black Hat Hackers"

Also looking for good resources on Cloud basics and security

[faint sluice]

I know a lot of people have asked about building home labs, BHIS is having a webinar on Thursday about how to do this https://zoom.us/webinar/register/WN_lav-QqASTUi--pAp7reMgA

[faint sluice]

if you are interested in Azure, look up John Savill on Youtube. He is great.
Black Hills InfoSec also has a lot of stuff on Cloud security https://www.youtube.com/c/BlackHillsInformationSecurity/videos

[balmy grotto]

Are there any resources that individuals can recommend for policy frameworks? I'm interviewing for a medical device start up and I know ISO 14971:2019 is considered the gold standard, but I think it might be cost prohibitive while the company is in stealth mode. Is there a NIST equivalent or other that one could recommend?

[south marlin]

https://blog.bushidotoken.net/2022/11/detecting-and-fingerprinting.html

[inland oyster]

How much experience do you have with Python? Like learning from scratch or do you already know basics?

[gaunt grove]

Decently experienced, been programming Java and python for 5-6 months pretty intensively

[tepid patio]

https://tech.lgbt/@autumnalbee/109445555183161530

This is nuts, but it's a great resource. I have been using it to learn new things all day and it's so cool that it can just write detailed instructions on contributing to open source projects

[inland oyster]

There are plenty of books available for learning Python hacking, I would look up a few and check the table of contents and check if there is anything interesting for you there.

Personally, I have read Black Hat Python 2e by Justin Seitz, Tim Arnold and Python Pentesting essentials by Mohit. And they are good for getting started.

I think THM also has a few modules with Python scripting which are great for getting started.

[shut ferry]

https://www.linkedin.com/posts/john-r-whalen_why-you-should-use-identity-access-management-activity-7004891679337967616-kpN8?utm_source=share&utm_medium=member_desktop Why is Identity access management SO imperative for excellent performing remote teams?

I explain how to leverage identity access management to clearly align scope, and objectives for distributed technical teams in this 30 second video.

[sterile gale]

A great video/interview on OSINT

https://www.youtube.com/watch?v=ImWJgDQ-_ek

[shut ferry]

Regarding 'note taking' whilst you study and practice. I'm generally not a note taker, i never have been - however, i definitely now understand the importance and value of it. There is so much to take in working through the THM Rooms and then doing further deep dives in to topics, it would be near impossible to just remember everything.

Someone suggested to me 'Obsidian.md' - https://obsidian.md/

honestly had to share it on, i found it incredibly easy to use and internally link/branch topics. I now have my own Archive of knowledge!!

[digital lark]

I noticed a lot of people making writeups for things like sans-holiday hack and tryhackme use https://squidfunk.github.io/mkdocs-material/. Ive been trying it out for my own writeups and its pretty nice. lots of formatting options and its markdown

[eternal rivet]

Any resources for hardware hacking? I’ve been told to just open up computers but it’s quite overwhelming and I don’t know where to go from there.

[topaz quest]

"just open up computers" sounds like real shady advice 😅
I'm not into hardware hacking but I know there is a sub on reddit for it (/r/hardwarehacking) which might be a good start. Also one of the books included in the hacking humble bundle that's running at the moment is for hardware ("The Hardware Hacker" by Andrew Huang)
Good luck and have fun 👍

[shut ferry]

https://tenor.com/view/do-it-kermit-darth-kermit-gif-25450285

[faint sluice]

This humble bundle has some nice books in it
https://www.humblebundle.com/books/holiday-encore-become-cybersecurity-expert-wiley-books

[polar fjord]

any good resources for beginner-level malware analysis?

[elder parrot]

https://danaepp.com/how-to-extract-artifacts-from-openapi-docs-to-help-attack-apis

[shut ferry]

Check NoStarchPress Malware related books (Practical Malware Analysis and Malware Data Science), but also, Husky's Malware analysis course is great. https://academy.tcm-sec.com/p/practical-malware-analysis-triage You will learn how to build safe env, and you will get modified samples. really solid course for beginners.

[silver pendant]

Hi All this is a good article to go through
https://blog.securelayer7.net/web-service-security-penetration-testing/

[shut ferry]

Hi everyone, http://whalenenterprise.com/events-project I offer free digital security courses every Wednesday from 6:30-730 Mountain

[sterile gale]

Hey, one of the tasks for advent of cyber was de-obsfucating malware. I was actually interested in the methods of the reverse. I just don't understand how you manage to do that to your code and still have it run.

And it peaked my interest after doing that task

[shut ferry]

ooh, i haven't done that one yet - but you have peaked MY interest now 😄 following, for any good resources to deep dive into after

[shut ferry]

i was just looking at the sections of this course, @sterile gale it may have some answers here. it's a paid course, but not overly expensive to be fair.

[sterile gale]

I'll take a look. Thanks

[odd sinew]

Gave +1 Rep to @mortal wadi

[shut ferry]

Yea, Husky's course is great - I really recommend it, especially for beginners. I forgot to mention also Sam's Bowne course, which is open to everyone. It uses NoStarch book as a textbook. https://samsclass.info/126/126_S17.shtml

[shut ferry]

Thanks @shut ferry - bookmarked for later 🙂

[odd sinew]

Gave +1 Rep to @mighty gazelle

[sterile gale]

Thanks a heap

[odd sinew]

Gave +1 Rep to @mighty gazelle

[orchid basin]

The Wreath network kind of intros to the ideas behind obfuscation as it relates to AV evasion, but Holo dives way deeper into it. It's a fairly deep topic that I think is more appropriate for the #exploit-and-mal-studies chat, but you're usually writing a readable payload first, then using automated and manual processes to change things around.

You're really just changing the code to be "worse" by traditional programming standards. Adding redundant conditions, making the way data is stored more complicated, etc.

[steel plume]

michael bazzel: i can fix that

[quartz scarab]

I saw this on reddit. If anyone is interested (ISC)2 has released a new course called Certified in Cybersecurity. The first 1 million people to register for it can get the self-paced study guide + exam for free:
https://www.isc2.org/landing/1MCC

[stuck abyss]

$50 fee if you want to sign up

After you pass

[eternal rivet]

Idk if everyone already knows about this since it’s really good, but I found this on gitbooks. Has links to resources on cyber intelligence, red team, blue team, and yellow team stuff. Also goes over anonymity. https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/

[tranquil grove]

didn't know about it, looks interesting, will take a look over it, thanks for sharing.

[odd sinew]

Gave +1 Rep to @eternal rivet

[drowsy agate]

If someone ist interested

[rough marlin]

waf bypassing related resources anybody have

[jagged tiger]

Why are you trying to bypass a WAF?

[polar fjord]

Does anyone have any idea about an Autoit decompiler?? exe2aut doesn't seem to work

[main plume]

Hi, any good resources on Encryption and Key Management(PKI)?

[silver pendant]

Hi folks here is a good article to read https://blog.securelayer7.net/attack-surface-management/

[wispy stag]

linux file permissions for beginners: https://tomsitcafe.com/2022/12/15/understanding-the-linux-file-permissions/

[tawdry jasper]

I'm reading the mdn docs for javascript and it says you can declare and reference variables before/without initializing them (assigning them a value), in which case, (without a value) they will always return undefined.

Why would you want to do something like this?

[tawdry jasper]

The Docs also mentioned variable mutations, which allow you to change the value of a const...? I'm assuming you can use this to manipulate available functionality based on varying events or context?

[hollow depot]

Hey wrapper, have a look through this: https://github.com/getify/You-Dont-Know-JS/blob/2nd-ed/scope-closures/ch5.md
Perhaps that answers some of your questions

This particular chapter is useful I think but this series in general is a good one if you want to learn the workings of js well

[shut ferry]

https://www.youtube.com/watch?v=qdw7ul5_Sjo 

The Vocabulary for Event Recording and Incident Sharing (VERIS) is a set of metrics designed to provide a common language for describing security incidents in a structured and repeatable manner. VERIS is a response to one of the most critical and persistent challenges in the security industry - a lack of quality information. VERIS targets this problem by helping organizations to collect useful incident-related information and to share that information - anonymously and responsibly - with others. The overall goal is to lay a foundation from which we can constructively and cooperatively learn from our experiences to better measure and manage risk.

[tawdry jasper]

Oh my god I almost didn't see this, thank you!

[odd sinew]

Gave +1 Rep to @hollow depot

[hollow depot]

no problem, I recommend that whole book series in general 🙂

[tawdry jasper]

Also, I thought I sent those messages to programming, whaddahek lol

[hollow depot]

its ok, its still a resource I guess haha

[tawdry jasper]

Lmao true

I can't sleep so I'll go give that a read now,.thanks again!

[silent kindle]

Hi ! I'm looking for a good book on sys calls, any recommendation ?

[polar siren]

Learn about bypassing SID Filtering Techniques
https://improsec.com/tech-blog/sid-filter-as-security-boundary-between-domains-part-4-bypass-sid-filtering-research

[cobalt jolt]

Anyone listening to any interesting podcasts for cybersecurity that a beginner should listen too? I watch Dr. Auger on youtube, Neil Bridges, David Bombal, and Network Chuck currently.

[polar siren]

You should check Darknet Dairies by Jack Rhysider. It has interesting hacker stories from darkweb, blackhat hackers and pentesting stories. Available on Spotify!

[cobalt jolt]

ah very nice thank you @polar siren

[odd sinew]

Gave +1 Rep to @polar siren

[urban hearth]

Darknet Dairies is the shit. It's so cool

[south marlin]

Cyber Security Headlines

https://cisoseries.com/category/podcast/cyber-security-headlines/

Also there is SANS Stormcast

https://isc.sans.edu/podcast.html

[cobalt jolt]

Thank you!

[odd sinew]

Gave +1 Rep to @south marlin

[cobalt jolt]

I’m going check this out.

[elder parrot]

https://danaepp.com/how-to-use-oast-to-detect-vulnerabilities-in-an-api

[nova loom]

Would anyone be willing to share their thm notes with me?

[graceful saffron]

Hey guys I am currently writing notes on THM advent of cyber 2022 challenge, I just did post Day 02 article yesterday and today I am gonna post Day 03 as well.

Link (Medium) --> https://medium.com/@dasitha.samarasinghe

If there's anything wrong please be kind to leave feedbacks or DM me on discord, and I am open to work on writing articles with anyone!

[graceful saffron]

DM me brother! 🙂

[west galleon]

you could probably use the -i switch for grep to make it case insensitive

[graceful saffron]

Thank you so much for correcting me, just made the edit now

[odd sinew]

Gave +1 Rep to @west galleon

[prisma bison]

@graceful saffron that’s an answer dump, it is against our content policy.

If you copy and paste whole tasks including all their answers, we may report your blog.

Our employees and partners have worked hard to make the content in Advent of Cyber 🙂

[graceful saffron]

oh its like write up like others doing..i want to share the knowledge with my collegues on this journey

i explained how to obtain the answers, not just dump answers

please read my previous post, I did put hard work and big time to explain this with additional information

i dont understand why it tolerates, since others doing articles and yt video walkthroughs

i can stop from right now writing further about these challenges, if this is serious

[graceful saffron]

i only copied quizzes

not whole contents

[prisma bison]

You copied the whole task content :)

[graceful saffron]

can someone here please confirm that I that copied that contents?

there maybe exact words in both, I just got idea what these contents telling and i did put with my own way like a twist

[graceful saffron]

the task contents, you mean, the quizzes?

[hushed estuary]

while not a verbatim copy, it's still pretty close to what I'd call plagiarism. Also please refrain from posting direct answers, flags and passwords in writeups

[graceful saffron]

Okay i will not to do this again future, hope team doesnt report this

[polar siren]

Learn about GoldenGMSA Trust attack across intra-forest trusts.

https://improsec.com/tech-blog/sid-filter-as-security-boundary-between-domains-part-5-golden-gmsa-trust-attack-from-child-to-parent

[gaunt ivy]

Is there a John The Ripper Syntax#s cheatsheet somewhere? I have just made notes during the room but would like a good refrence to bookmark

[polar siren]

Learn about how schema replication allows a child domain to modify the schema and compromise objects in the parent domain just like a Schema Admin

https://improsec.com/tech-blog/sid-filter-as-security-boundary-between-domains-part-6-schema-change-trust-attack-from-child-to-parent

[peak marten]

https://github.com/chubin/cheat.sh
Does a great job of collecting and making popular cheatsheets usable from web/console (e.g. "curl cheat.sh/john"). I think that you can contribute to the project by submitting your your pull request here https://github.com/tldr-pages/tldr/blob/main/pages/common/john.md

[wispy stag]

here is some help for using LVM for the beginners: https://tomsitcafe.com/2022/12/22/what-is-the-logical-volume-manager-lvm-and-how-to-use-it/

[covert cargo]

hi all, i lookin for a software to scan my website directorie in my linux serveur, i tested clamAV but nothing and i know that i have some files infected. Can u tell me what is the best tool please ?

[steel plume]

https://youtu.be/6xexyQwG7SY

[jagged hinge]

What are some good THM rooms for binary exploitation?

[orchid basin]

To learn? Not many afaik. There's a "ret2libc" room and an "Intro to Pwntools", but those are the only I'd recommend. To practice? "Pwn 101" is the only one I can remember that was decent.

I would recommend looking at LiveOverflow's Binary Exploitation series or CryptoCat's Intro to Buffer Overflow for solid content. ROP Emporium, exploit.education, and pwn.college are other good places.

[jagged hinge]

Thank you very much ^^

[steel plume]

Mobile Application Security:

Websites:
https://snyk.io/learn/application-security/mobile-application-security/
https://mas.owasp.org
https://www.youtube.com/watch?v=Tujbk4ToVMI

Lectures/Courses:
https://www.udemy.com/course/mobile-application-security-and-penetration-testing-e/
https://ocw.mit.edu/courses/6-858-computer-systems-security-fall-2014/resources/lecture-20-mobile-phone-security/
https://people.eecs.ku.edu/~hossein/710/Lectures/Readings/00-EECS710-Workshops/24-mobile-app-sec-workshop.pdf
https://academy.tcm-sec.com/courses/enrolled/1557555

Applications for Testing:
https://github.com/0xArab/diva-apk-file
https://mas.owasp.org/MASTG/Tools/0x08a-Testing-Tools/#mobsf-for-ios
https://github.com/xtiankisutsa/awesome-mobile-CTF
https://www.vulnhub.com/entry/android4-1,233/

Certificates:
https://www.sans.org/cyber-security-courses/mobile-device-security-ethical-hacking/
https://elearnsecurity.com/product/emapt-certification/

Write-ups
https://cygnus.mataroa.blog/

[polar siren]

Learn about how attackers with administrative access on a trusting domain can gain access to trusted domain with the exploitation of trust account.

https://improsec.com/tech-blog/sid-filter-as-security-boundary-between-domains-part-7-trust-account-attack-from-trusting-to-trusted

[shut ferry]

If you (or anybody else) are interested in learning about ICS sec and adjacent topics, you can also check what CISA offers: https://www.cisa.gov/uscert/ics/Training-Available-Through-CISA 301v and 401v are available for free online, you just need to register to them since number of seats is limited (https://www.cisa.gov/uscert/ics/Calendar). First, it is good to go through their listed web based stuff, you can check on https://ics-training.inl.gov/learn/catalog - you just make account and get access. :)

[steel plume]

Web Application Security:

Websites/Videos:
https://owasp.org/
https://youtube.com/playlist?list=PLBf0hzazHTGO3EpGAs718LvLsiMIv9dSC

Lectures/Courses:
https://portswigger.net/
https://learn.snyk.io/
https://www.udemy.com/course/pentesting/learn/lecture/30191548?start=0

Applications for Testing:
https://owasp.org/www-project-juice-shop/
http://www.itsecgames.com/
https://github.com/digininja/DVWA
https://sourceforge.net/projects/metasploitable/
https://academy.hackthebox.com/catalogue

Certificates:
OffSec: Web 100-300
https://elearnsecurity.com/product/ewpt-certification/

Write-ups
https://docs.rapid7.com/metasploit/metasploitable-2-exploitability-guide/

[stray fossil]

Mass hunting IDORs using jq and Swagger files
https://blog.akenofu.me/mass-hunting-idors-in-openapispecification-swagger-files/

[polar siren]

Learn how to bypass Kerberoast detection by modifying the encryption type and ticket options. Also, in the end, act as a purple teamer and use the detect&attack strategy which is useful to gain perspective of both sides

https://www.trustedsec.com/blog/the-art-of-bypassing-kerberoast-detections-with-orpheus/

[elder parrot]

https://danaepp.com/hacking-a-net-api-in-the-real-world

[shut ferry]

As we push computers to “the edge,” building an increasingly complex world of interconnected systems and devices, security and privacy continue to dominate the national dialogue.

Check out the latest video
https://youtu.be/ZG8aUgTqtWg

[prisma bison]

@shut ferry Can you interact with the community instead of just promoting your content, please?

[jagged hinge]

Just for anyone interested in starting off in binary exploitation, CryptoCat's course is amazing. I'm half-way through and having lots of fun.

[polar siren]

Learn about the writable path local privilege escalation vulnerabilities adversary can abuse which includes methods like DLL Hijacking and DLL planting. In this, there are three system services that can be abused.

1. Windows Task Scheduler
2. NetMan Service
3. IKEEXT Service

https://www.praetorian.com/blog/red-team-local-privilege-escalation-writable-system-path-privilege-escalation-part-1/

[wicked tide]

https://njmulsqb.github.io/2022/12/28/Utilizing-data-from-azure-defender.html

[shut ferry]

K9-Crypter, written in C#
https://github.com/Nik0Sec/K9-Crypter

[orchid basin]

I would say my one con with it is that the explanation of the vulnerability and internals is a bit more high-level than I would want, but other than that yeah.

[jagged hinge]

Yeah some more theory would be nice but nothing google and a second screen can't cover!

[polar siren]

https://www.praetorian.com/blog/red-team-privilege-escalation-rbcd-based-privilege-escalation-part-2/

[clear wedge]

EP000: Setting Up The Hacking Lab | HACKING FOR DUMMIES

To set up a hacking lab, you will need to create a simulated environment in which you can practice and develop your hacking skills. This may involve setting up virtual machines or installing specialized software on a physical computer. It is important to follow best practices to ensure the lab is secure.

https://youtu.be/GuOibs-v8qo

[polar siren]

https://www.praetorian.com/blog/inside-mimikatz-part1/

[wicked tide]

I am excited to announce the first release of "Damn Vulnerable Electron App", an intentionally-built vulnerable ElectronJS app for learning security issues in ElectronJS.

There was no other similar project to practice ElectronJS vulnerabilities on, so I built it!

For more details about DVEA visit: https://njmulsqb.github.io/2023/01/03/releasing-DVEA.html

[polar siren]

https://www.praetorian.com/blog/inside-mimikatz-part2/

[jagged tiger]

the njmulsqb.engineer link isn't resolving

[wicked tide]

Its njmulsqb.github.io and working fine with me

[jagged tiger]

This is a huge block that looks a lot like spam. What's your goal in posting it?

[gaunt needle]

do you?

it look like spam?

[jagged tiger]

Yes

Enormous text walls are, definitionally, spam.

Was that Medium link monetized in any way?

Please do not send unsolicited friend requests.

[cobalt canyon]

super amazing website that teaches refactoring for free. you can also buy the course, which i've done. i think it's worth it. https://refactoring.guru/ Note: I'm not affiliated with this site in any way, just found it because I want to learn refactoring

[polar siren]

https://socradar.io/dark-web-profile-muddywater-apt-group/

[spring star]

Any learning resources for android/mobile based ctf's

[gritty birch]

Host your Obsidian notes with MkDocs & Nginx
https://www.youtube.com/watch?v=aMVi4kWd1b0

[prisma bison]

For what?

[prisma bison]

-undelete -a

[odd sinew]

Up to 10 last deleted messages (last hour or 12 hours for premium):

none...

[prisma bison]

Yikes

[indigo sequoia]

CyberDucky is ready to hack! Hope you all are having a great year so far. Thank you for all the love. Blueprint for how a pentest is structured!
https://youtu.be/6o25auMAVv8

[sonic abyss]

Not sure if any of these contain any pirated resources, but there all linked on the defcon websites and I found some great resources in em
https://media.defcon.org/
https://infocon.org/podcasts/?C=N&O=A
https://defcon.org/html/links/dc-torrent.html

[sudden fern]

quite sure it is all legal stuff from defcon or they would get in a lot of trouble quickly

[versed spire]

This is amazing, thanks for sharing!

[odd sinew]

Gave +1 Rep to @sonic abyss

[wispy stag]

i just put together some LUKS hands-on: https://tomsitcafe.com/2023/01/10/what-is-luks-and-how-to-use-it/

[sonic abyss]

https://youtu.be/mJ-qvsxPHpY

[junior sandal]

Hi, curious to know if any automated vulnerability tool exists for Elasticsearch database vulnerability scan?

[elder parrot]

Maybe start here: https://book.hacktricks.xyz/network-services-pentesting/9200-pentesting-elasticsearch

[shut ferry]

https://www.youtube.com/watch?v=1EDI0YUXMRA Learn Information Security with pictures

[hushed estuary]

https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/

Interesting explanation of public key crypto

[hushed pier]

Anyone have a good resource to learn regexp? Looking for book recommendations and sites.

[nova current]

https://taggartinstitute.org/p/intro-to-regular-expressions

[hushed pier]

Thanks.

[odd sinew]

Gave +1 Rep to @nova current

[ancient sonnet]

Sharing this for those who may be interested: I added a #MalwareBazaar downloader to HuskyHack's blue-jupyter notebook. It works but still needs clean ingup.
https://github.com/accidentalrebel/blue-jupyter/blob/main/malware-analysis/Malware-Analysis.ipynb?fbclid=IwAR08jwn7CEp3_f5wi4FEKc8Z85nr2uqu_8jQdppaKF_DhJUcM7cGY452Fjo

[faint sluice]

https://www.humblebundle.com/books/linux-and-sysadmin-tools-oreilly-books

[waxen knoll]

Hey guys, I created a free open source project to help people get started on making their first contribution with an easy step by step guide

If there's any suggestions or ways I can improve this please let me know

https://github.com/HyunCafe/contribute-practice

[karmic cradle]

https://github.com/brightio/penelope

Have you guys tried this tool?

[honest nebula]

Hey, what's the best/most used emulator for mobile?

[jagged haven]

genymotion or the android emulator from android studio, if you go the android studio route this tutorial is pretty good for a full lab setup: https://www.trustedsec.com/blog/set-up-an-android-hacking-lab-for-0/

[honest nebula]

I've used nox and partially bluestacks, my somewhat illogical refrain from geny is that it requires virtualbox

Thanks

[jagged haven]

for debugging purposes these twos are more user friendly I would say but it depends on the user goals as usual

[stuck abyss]

Bee even kindly gave the markdown version.

[iron cliff]

I added more rooms and removed expired ones, also I will be including the write-ups and events. The objective is to provide value and grow the community nothing more

I'm providing a place where people can get all the free rooms, track their process and solutions, and connect with other people with the same taste for cybersecurity, looking for contributors, not the opposite, take care guys @stuck abyss @hazy bear

[stuck abyss]

I get that, however speaking from a personal POV, (and good practice for yourself).

You could give Bee a little credit.

[iron cliff]

Sure whats the socials? I think he deserve it but I couldn't find it so I just did the repo. I'm sure he doesn't mind anyway...

[stuck abyss]

Good point, I don't actually know 😂

@tepid patio

What's your socials 😂

[iron cliff]

Thanks, It's on his discord profile, but I will ask first by email see if he wants

Greetings THM community! ❤️

Are you looking to master cybersecurity skills and take your knowledge to the next level?
Look no further than this TryHackMe free path repository! This collection of personal solutions and explanations will guide you through various rooms and challenges to help you improve your understanding of cybersecurity. Whether you're new to the field or looking to deepen your expertise, this repository has something to offer. Fork it today, and start your journey to becoming a cybersecurity pro!

https://github.com/migueltc13/TryHackMe

[heavy elm]

@iron cliff has been warned.

[iron cliff]

@brazen sequoia How do I get this message in #thm-community-media, thank you in advance

[odd sinew]

Gave +1 Rep to @brazen sequoia

[brazen sequoia]

You copy paste it?

I feel like having it in here already is good enough, but if you really feel the need to post it there too, go for it, since it's technically THM content

[iron cliff]

I have no permissions in that channel

[brazen sequoia]

You probably have to verify first

!docs verify

[fervent summit]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[tepid patio]

henlo bee_sec_san on twitter and skerritt.blog

i saw da email and DM on twitter

currently i am in a job interview rn lol so will look at it properly later

[stuck abyss]

Good luck on the interview Bee!

[sonic abyss]

I really like this idea, however I do think the order is a bit of - for example networking being pretty high up (even above things like RE), it should be lower as a core fundamental you should know

I also think the name of the repo should be more specific instead of just "TryHackMe"

[wispy stag]

i started to take notes during the rooms, now i switched to do write-ups: https://tomsitcafe.com/2023/01/16/tryhackme-owasp-juice-shop-write-up/

[honest nebula]

Hey, I just wanted to say I gave genymotion a chance and it works great!
Setting up was super easy with 0 errors, no hyper-V issues(Nox), no lock screen/root issues(Bluestacks).
Thanks again 🙂

[odd sinew]

Gave +1 Rep to @jagged haven

[heavy elm]

@gaunt needle has been warned.

[iron cliff]

Thank you for the feedback @sonic abyss, what I have in mind is to make more learning paths for specific skills in the future, maybe like "TryHackMe-Paths" idk yet
I will remove the categories and order the free path from fundamentals to advanced, ty

[odd sinew]

Gave +1 Rep to @sonic abyss

[elder parrot]

https://danaepp.com/a-step-by-step-guide-to-writing-extensions-for-api-pentesting-in-burpsuite

[simple creek]

Hey! Can you tell me what guide you used for setting genymotion?
I've been trying to set it up so I can intercept requests in burp but have been unable to do so

[honest nebula]

I've downloaded genymotion with virtual box, installed, registered, opened a samsung galaxy S10 with default options

Android Certificate
Export certificate from burp

Convert the Certificate from der to acceptable formats:

Genymotion: 
openssl x509 -inform der -in cacert.der -out burp.cer
drag&drop and install from phone.

I used httptoolkit for proxy because setting burp to work for apps is problematic, it works great for web though

[wispy stag]

for beginners i put together a little help for Hydra https://youtu.be/jY6-ls1v_qM

John the Ripper will be the next tool

[broken scarab]

VulnPlanet repo - The most extensive collection of well-structured vulnerable code examples and fixes on the internet for Web2, Web3, API and Mobile (iOS and Android).

Link: https://github.com/yevh/VulnPlanet

[slim kiln]

Anyone have a good resource to learn binary exploitation and reverse engineering???

[orchid basin]

You can use the search icon at the top right of your screen and search for stuff people have already posted 🙂

[novel inlet]

👋 hey there! I started a security newsletter dedicated to Threat Detection and Detection Engineering. I try to aggregate news on the art of detection and send it to your inbox every week. Here's the latest issue https://www.detectionengineering.net/p/detection-engineering-weekly-7-circleci if this is useful feel free to subscribe, itll always be free!

[simple creek]

Thanks @honest nebula 😄👍

[odd sinew]

Gave +1 Rep to @honest nebula

[honest nebula]

Hey, thm don't resources in mobile department, anyone knows a good source of similar style?

[jagged haven]

https://mobile-security.gitbook.io/mobile-security-testing-guide/overview/0x03-overview
https://book.hacktricks.xyz/mobile-pentesting/android-checklist

[honest nebula]

I was looking for something more towards the challenges and hands on style

[jagged haven]

TCM security has one course dedicated to mobile, although paid

[honest nebula]

Thanks! I will look into it

[odd sinew]

Gave +1 Rep to @jagged haven

[finite patio]

Total 4 cybersecurity scholarship where UG & PG students can apply. https://www.iamcybersafe.org/s/scholarships
source: https://www.linkedin.com/posts/activity-7021519343624613888-ka3m

[steel plume]

@slim kiln
Binary Exploitation & Pwn

• Reverse Engineering for Beginners
  https://youtube.com/playlist?list=PLMB3ddm5Yvh3gf_iev78YP5EPzkA3nPdL

• Binary Exploitation
  https://youtube.com/playlist?list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN

• Pwn Zero to Hero
  https://youtube.com/playlist?list=PLeSXUd883dhjmKkVXSRgI1nJEZUDzgLf_

• J.H. Binary Exploitation
  https://youtube.com/playlist?list=PL1H1sBF1VAKVg451vJ-rx0y_ZuQMHPamH

• Pwn College
  https://pwn.college/

• ROP Emporium
  https://ropemporium.com/

• CTF Challenges & Write-ups
  https://github.com/guyinatuxedo/nightmare

• Exploit Dev
  https://connormcgarr.github.io/

@honest nebula
Mobile Application Security:

Websites:
https://snyk.io/learn/application-security/mobile-application-security/
https://mas.owasp.org
https://www.youtube.com/watch?v=Tujbk4ToVMI
https://mobisec.reyammer.io/

Lectures/Courses:
https://www.udemy.com/course/mobile-application-security-and-penetration-testing-e/
https://ocw.mit.edu/courses/6-858-computer-systems-security-fall-2014/resources/lecture-20-mobile-phone-security/
https://people.eecs.ku.edu/~hossein/710/Lectures/Readings/00-EECS710-Workshops/24-mobile-app-sec-workshop.pdf
https://academy.tcm-sec.com/courses/enrolled/1557555

Applications for Testing:
https://github.com/0xArab/diva-apk-file
https://mas.owasp.org/MASTG/Tools/0x08a-Testing-Tools/#mobsf-for-ios
https://github.com/xtiankisutsa/awesome-mobile-CTF
https://www.vulnhub.com/entry/android4-1,233/

Certificates:
https://www.sans.org/cyber-security-courses/mobile-device-security-ethical-hacking/
https://elearnsecurity.com/product/emapt-certification/

Write-ups
https://cygnus.mataroa.blog/

[spice garnet]

If we got any UK College students:

https://www.gchq-careers.co.uk/cyberfirst.html (University Bursary/Degree Apprenticeship)

[honest nebula]

Ty

[odd sinew]

Gave +1 Rep to @steel plume

[steel plume]

no worries :)

[tepid patio]

Cyberfirst is great 🥳

Looked at https://github.com/SaintsConnor/ToolBar btw, cool idea. Instead of making a .bat / .sh file and running it you can use Poetry to package it (https://python-poetry.org/) (this might take a week of your time, but it's worth it)

Then you can do poetry publish to get it into PyPi, and then pip install toolbar to get it locally on your system 😄

[autumn oar]

Hiya people! Can anyone provide me with good gRPC pentesting reports?
more like what kind of attacks can be tried out on a gRPC based API :)?
examples of fuzzing gRPC endpoints and tools to do so...

[spice garnet]

Thank you so much for that, never knew about it. Will defo look at that (and might even roll it out on some of my upcoming projects)

[odd sinew]

Gave +1 Rep to @tepid patio

[spice garnet]

Also yeah, I’m looking to apply for the degree apprenticeship next year for when I finish college

[sonic abyss]

What year are you in?

Yr12 I assume

[spice garnet]

Yeah 1st year college

[sonic abyss]

Ah nice, same here :)

I can definitely recommend poetry, it's how I package all my public libraries

poetry init
poetry build
poetry publish 

As easy as that

[tepid patio]

i literally taught you how to do that

you should also apply to CF jay

[sonic abyss]

yup 😄

[spice garnet]

I was like what’s CF and then I realised 😂

[slim kiln]

@steel plume ty

[odd sinew]

Gave +1 Rep to @steel plume

[stray fossil]

Pentest Prerequisites checklist: Web Applications and APIs

https://notes.akenofu.me/Security Consultancy/Pentest Prerequisites checklist/Web Application and API/

[autumn oar]

Anyone :)? Please? :)

Literally any resources will help...

[steel plume]

@autumn oar
https://blog.davidvassallo.me/2018/10/27/pentesting-grpc-web-recon-and-reverse-engineering/

https://github.com/cure53/Publications/blob/master/pentest-report_grpc.pdf

https://www.reddit.com/r/grpc/comments/dgctcy/security_testing/

google your question...

[autumn oar]

You think I came here without googling

[steel plume]

well I don't know cause you just asked without providing much context :/

same with the HTB server

hope you find something in these though

good luck :)

[autumn oar]

If you can answer.... Good... If you can't then you have the right to remain silent.... I researched my fair share and then I came in here to ask for pentest reports/vulnerable apps/ attacking methods.

[steel plume]

apologies officer

ksk

[autumn oar]

😂

Chill

[steel plume]

and I did answer though i probably sent you the same things that you've already found
if i come across anything new I'll send it to you

[autumn oar]

The question I also have is ... Why were the researches dropped :/

[autumn oar]

Sure thing :)

[steel plume]

probably inconsistent vulns that were setup/user error rather than software

[autumn oar]

Exactly.... That's why it should be researched more :).... User errors can happen in any API setups :)... Right? :)

[steel plume]

that's true

[autumn oar]

I know that pentesting gRPC is hard :).... But its actually pretty interesting....

I'm actually looking for some novel methods/ideas that people have tried... Which is why I'm asking the same question in different servers...

Because many a times reports don't mention gRPC in the title :/....

[steel plume]

fair enough

the cure53 one might have something

[autumn oar]

Yes they do... But two of them are patched by gRPC themselves... So no more areas of human mess up :). What shocks me is that this area of research hasn't been touched a lot... Same with HTTP3 protocol fuzzing :)

[autumn oar]

It wasn't toxic my friend :)... Sarcastic rather :)...

The same was we give "letmegooglethat" links 🙃

[brazen sequoia]

That's not how that works. 🙂
If you feel like there is an issue with another user, you can DM or ping a mod.

[wispy stag]

here is my 2nd video in the series, some John practice https://youtu.be/8GbWefXSMRs

[last girder]

Are there any cheap labs to study for Pen 300 anywhere or inexpensive material

[fluid fulcrum]

Wasn’t sure in which channel to post this, so posted it here. Feel free to move it to a more appropriate channel.

[brazen sequoia]

@fluid fulcrum This is becoming a bit too much of self-promotion tbh, since the sites you share, which seem to be owned by you, are always containing links to your paid classrooms/courses. So if you feel like sharing your resources, please make sure to use some content neutral websites/services for that which are not linked to your paid resources.

[spice garnet]

You know if there’s a way to get pip to auto update it

[fluid fulcrum]

So people can post resources that may contain paid links that benefits someone else but not the self. Got it.

[tepid patio]

This may be what you want as a developer, but it is not what users want 😦

The software industry as a whole hates auto-updating software for important things (especially CLI tools) because if they're using it everyday and you change how it works and it auto-updates it annoys them 😓

So, officially there is no way to do this with Pip. Instead what you should do is create an OS-level package like Homebrew https://brew.sh/ or Arch (AUR)

That way when the user does sudo apt update && sudo apt upgrade it updates your package too (when the user wants)

Of course if you don't care, you can just run os.system('pip install --update <package name>)' everytime you run 😅

What other people do too is use Github releases https://docs.github.com/en/repositories/releasing-projects-on-github/managing-releases-in-a-repository and then everytime the program runs it calls the GitHub API to see what the latest release of your package is, and then it compares it to the version number of the local tool and if you can update it you can tell the user (or run that pip command)

sadly personally I have resorted to just assuming auto-updating is sad and let users update it when they want, although I am lucky and other people update my package for me in some OS package managers 😂 https://repology.org/project/rustscan/versions

If you want to do something cool for your CV you can learn how continuous integration / deployment works, use GitHub Actions and add this:
https://github.com/marketplace/actions/python-poetry-action

Then everytime you make a release it auto updates on PyPi. Companies love it when you say "I set up my own CI/CD"

Ok one last thing, if you can get a poetry pipeline to work for auto-deploying you can contribute that to other projects which use poetry (like https://github.com/bee-san/pywhat 😉 )

And you can win points for "I make significant contributions to open source project by setting up their CI/CD for them" too

I like to call this "CV-optimised development" 🙇‍♀️

[prisma bison]

https://cidr.xyz

[wispy stag]

today's video is about some easy Burp Suit practice: https://youtu.be/5df49kwVXYc

[elder parrot]

https://danaepp.com/why-you-should-never-trust-poc-exploits-on-github

[nova loom]

This is a fantastic read and it isn't just a boring explanation it's a whole story. (also realized, it's by you. Great job)

[elder parrot]

Thanks. Appreciate the feedback!

[odd sinew]

Gave +1 Rep to @nova loom

[thorn rose]

Hi guys, can someone suggest training/courses for security champions? We have sec champs team in my company but we are struggling to get knowledge base. Want to buy some kind of course? Thank you for any suggestions.

[boreal snow]

This needs to be seen by a lot of people on this server. Thanks for the article (and the nice memes) 🙂

[odd sinew]

Gave +1 Rep to @elder parrot

[elder parrot]

Thanks!

[sonic abyss]

https://open.spotify.com/playlist/4cBsn2nxxCD6q7rWbF5cYk?si=66c125e232e84289&amp%3Bnd=1&nd=1
not sure how good this it (haven't listened to it) but thought it be worth putting it down

[drifting rampart]

Ok, so I am wanting to get started with Linux, but I don't want to partition my hard drive, so I am wanting to put it on another laptop. How do I install Linux over windows os

[zenith goblet]

https://www.acidop.codes/blog/how-crypto-lost-its-way
Read how crypto changed for the worse

[tardy briar]

Basically .. just install it. It will overwrite your windows (obviously, your windows will be lost forever, take a backup of what you need including license code).
For installing there should be plenty of resources online depending on the distribution you want to use

[wispy stag]

FTP hacking help: https://youtu.be/CkvqXFMe6yk

[sonic abyss]

Some small advice from someone with +20 years in cyber - hope it's helpful

[drifting rampart]

Ok, thanks. It's an old windows 7 i inherited

[odd sinew]

Gave +1 Rep to @tardy briar

[lavish granite]

Free cybersecurity course
https://twitter.com/Dheerajydv19/status/1592455443057901568?t=lU_D4Fi7DVWYGDLbPFJfTA&s=19

Let me know if it's not allowed and i will delete it, no need of warning. Thank you.

Dheeraj Yadav (@Dheerajydv19)

Free Cybersecurity University Courses

Check the thread.
Note - Some of them also provide free course completion certificates.

Twitter · Nov 15, 2022, 9:52 AM

[prisma bison]

Seeing as it benefits the community, I'm not going to remove it, but in-future please send them as plain text instead of via your Twitter:)

[lavish granite]

Oh ok mam. No actually, i joined this server months ago, so don't remember the rules.

[prisma bison]

I would probably re-read them

[lavish granite]

If you can send me the rules, that will be great.

[prisma bison]

And please don't assume my gender.... lmao

[prisma bison]

#rules

[lavish granite]

Oh okok

[wispy stag]

i recorded another video about Burp Suite and its Intruder: https://youtu.be/_HgRIZmMKr0

[shut ferry]

https://wordlists.assetnote.io/

[hushed estuary]

for the CLI fans in the house, this is interesting to keep all your things up to date https://github.com/topgrade-rs/topgrade

[upper citrus]

https://www.internetingishard.com
Literally Gold Mine For Web Design

[elder parrot]

https://danaepp.com/using-a-flipper-zero-to-access-api-source-code-on-iot-devices

[sacred mural]

hats off to this
https://medium.com/@dotwiki/ethical-bug-bounty-learn-from-practical-approach-216422f42c79

[sonic abyss]

@prisma bison

[tardy rapids]

is there a blog or something which y'all have found helpful with a list of questions that can be asked in an Application security interview

or just a list of things to look into

[cobalt canyon]

I hear the OWASP Top 10 is good to know. I think it’s worthwhile learning regardless. Especially if you’re in appsec.

[tardy rapids]

Yeah, OWASP top 10 is beaten to death in appsec interviews, I wanted to know if there was some other resource out there that could help.

[fringe tree]

I'm not an expert, but when I read the OWASP top 10 it looks like an attempt to fit as many different bug types under 10 labels as possible

[tardy rapids]

Sounds about right.

[steep skiff]

looking for recommended podcasts be it general or niche aspects of cyber security

[fringe tree]

same question but for web pentesting

[cyan lagoon]

@steep skiff darknet stories

diaries*

[jagged haven]

I got some:

-> Black Hills Information Security
-> Open source security podcast
-> Cpradio
-> Malicious Life
-> Darknet Diaries
-> Hacker History Podcast
-> Modem Mischief
-> what the Shell?
-> Hacked
-> Hackable?
-> The Hacker Mind
-> Risky Business News
-> Error Code
-> TrustedSec Security Podcast

[steep skiff]

@cyan lagoon and @jagged haven thank you both for the suggestions. I've got some listening to do.

[odd sinew]

Gave +1 Rep to @cyan lagoon

[prisma bison]

@late comet Please don’t promote your YouTube content here

[shut ferry]

Does anyone know any resources that will allow a new linux user to consistently test and use linux commands in a simulated fashion? Something like tryhackme but a bit more extensive and hands on

[stuck abyss]

Something like this?

https://linuxsurvival.com/

[prisma bison]

Hey @leaden scroll

Please ask before posting surveys

[cobalt canyon]

Not sure if this is what you’re looking for but I enjoyed it: https://overthewire.org/wargames/bandit/

[sonic abyss]

https://ctfsites.github.io/

[gusty grove]

I'm missing "Smashing Security" here, one of my favourites beside Darknet Diaries

[jagged haven]

Will take a look, thank you o/

[odd sinew]

Gave +1 Rep to @gusty grove

[fair tapir]

Darknet Diaries is great!

[brazen wren]

Anyone got a link or resources about docker breakout on windows hosts?

[hushed estuary]

You'll generally break out to a VM of some sort

Unless you mean windows containers

[steel plume]

Purple Squad Security is also a good podcast

[sonic abyss]

https://youtu.be/ILsA4nyG7I0
Slightly unrelated to cyber but honestly this is the best introduction to neural networks video I've seen so wanted to share

[dull spade]

appreciated

[elder parrot]

https://danaepp.com/exploiting-embedded-apis-by-dumping-firmware

[gaunt grove]

Anyone know of a good resource to learn pwn? Completely new to it

[cyan lagoon]

https://sploitfun.wordpress.com/2015/02/10/understanding-glibc-malloc/https://sploitfun.wordpress.com/2015/06/26/linux-x86-exploit-development-tutorial-series/

@gaunt grove

[steel plume]

yoinked from zero point sec's server
For people who dont have big spec on their PC but still need a good AD template to play with, someone made GOAD template available on IL https://dashboard.snaplabs.io/templates/73a6fbe0-976e-4a03-b362-ddd2f301ec1d

[steel plume]

Binary Exploitation & Pwn

• Reverse Engineering for Beginners
  https://youtube.com/playlist?list=PLMB3ddm5Yvh3gf_iev78YP5EPzkA3nPdL

• Binary Exploitation
  https://youtube.com/playlist?list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN

• Pwn Zero to Hero
  https://youtube.com/playlist?list=PLeSXUd883dhjmKkVXSRgI1nJEZUDzgLf_

• J.H. Binary Exploitation
  https://youtube.com/playlist?list=PL1H1sBF1VAKVg451vJ-rx0y_ZuQMHPamH

• Pwn College
  https://pwn.college/

• ROP Emporium
  https://ropemporium.com/

• CTF Challenges & Write-ups
  https://github.com/guyinatuxedo/nightmare

• Exploit Dev
  https://connormcgarr.github.io/

[lavish vessel]

Those that cleared CEH, what resources did you use to study? I can't buy the official one because then I will be out of budget for the exam lol. Any free or reasonable priced courses will be very helpful. ^_^

[sonic abyss]

Do you have to take CEH? There are probably (depending on where your from) much better (possibly cheaper) alternatives

[lavish vessel]

Kind of, yes. CEH is very popular in India and most jobs asks for it. There are few listings without it but most demands it. ._.

If it wasn't for that, I would have probably gone for eJPT first.

[sonic abyss]

Yup understandable, it's very valued in India

I believe the exam is multiple choice (no practicals) and isn't that hard so I think THM would be fine for what's on the syllabus but I personally haven't taken it. You could also try asking in #cyber-and-careers

https://blog.redteam-pentesting.de/2021/remarkable-encryption/

cc @hard solar @twin ore

[surreal sapphire]

Stumbled on this episode of "Net Cafe" about hackers/cybersecurity from 1996. It's a pretty cool blast from the past. https://archive.org/details/nc101_hackers

[steel plume]

@lavish vessel
there's now a practical version
with CEHv12 and a theoretical one

[junior sandal]

Hi, I am planning to do CEH certification. Wanted to know if there are any exam vouchers available to get some discount?

[lavish vessel]

I will probably be doing the theory one. Practical exam holds more value but damn these certs are expensive. ,_,

[lavish vessel]

I get a better deal from ec-council official partner institutes. Don't know if it is universal or just for India but try it?

[steel plume]

that's fair, you'll probably find more value doing the PNPT exam tbf

[supple goblet]

Can any one tell me where can i learn bash scripiting

[junior sandal]

Hi, sure let me know what's the deal. will think about it

[dapper pivot]

Network Chuck has some good videos on YouTube for starting out

[supple goblet]

Thats not full course i alredy watch his videos but its not complete

[dapper pivot]

Then your best bet is probably either going through docs or looking at places like Sololearn or Codecademy to my knowledge

[jagged haven]

HTB academy has a module on bash

[stuck abyss]

https://tryhackme.com/room/bashscripting

[terse gazelle]

does anyone know any good resources to learn networking? I wanna spend the next 8 weeks familiarizing myself with it

[topaz gulch]

Conferences are a good bet. LinkedIn and Twitter too. You've got a good start in terms of joining public discords as well 🙂

And now that we've dealt with the "be careful what you ask for"...

Honestly, the CCNA study guides are a really good place to start, if a bit dry. Pick up a copy of the first one second hand. They should be relatively cheap.

I hear Professor Messer is supposed to be decent for Net+ too.
In both cases you obviously don't need to actually be sitting the certs to benefit from the information.

Then, as always, lab it up and play around. Cisco packet tracer is meh but a cheap (I.e. free) way to simulate stuff.
There are other alternatives too.

[terse gazelle]

Thanks man, really appreciate it

[odd sinew]

Gave +1 Rep to @topaz gulch

[night ether]

imo professor messer is only good for exam prep

like cramming content

[topaz gulch]

I'll defer to your experience on that one. I've never used that resource -- just a relay based on hearing it banded around.

[zealous cairn]

Hello there

I am starting to learn Cybersecurity

I have learnt basic linux

Now what should i learn further? And can you also provide resources to learn that

[spring coral]

*found a interesting Website : https://roadmap.sh/

[distant wave]

Do you recommend GNS3?

[topaz gulch]

Haven't used it enough to really recommend it, but from what I've seen it looks pretty damn good. @dense acorn would be a good person to ask there 🙂

[final frigate]

anyone know how can i use immunity debugger on windows 64bit?

[topaz gulch]

iirc Immunity doesn't have an x64 port

Try x64dbg if you want a similar interface

[final frigate]

i am trying to do brainstorm room for bufferoverflow they ask me to open chatserver.exe in immunity debugger i try it inside my kali linux to open but it dosent work any recommendation?

i saw a video he open it in kali weird

[sonic abyss]

wine?

[final frigate]

i am not familiar with x64dbg thats why if there is any solution i would appreciate it

[final frigate]

i dont remember if i try it or not but i will try it again and see

[lime nebula]

anyone know good written resources on networking that are intermediate level or already assume a decent amount of knowledge? i’m a software engineer and i don’t need to go through tcp vs udp, ports, sockets, etc. again. i’d just like to get up to speed on the practicalities of network setup and configuration.

[upper citrus]

https://www.eccouncil.org/train-certify/
Has Anyone Taken Courses From This Website? Google Out Of Nowhere Recommended It D:
Feels Kinda Fishy

[stuck abyss]

EC-Council 🤢

[sonic abyss]

EC council made CEH. The only place where it's really reputable is in India

[upper citrus]

Courses Worth Taking?

[stuck abyss]

Are you in India?

[upper citrus]

No

[prisma bison]

(The user should research this though as there may be jobs going near them that are looking for CEH/ think it has value, there are a few places in the UK that still value CEH)

[sonic abyss]

Fair fair

[jagged tiger]

If an org outside of india has CEH as a major cert on their job reqs, I'm going to go into that interview with a lot more and a lot tougher questions.

[prisma bison]

Having it as a requirement != Valuing CEH 😆

[jagged tiger]

That's true, but if it's on the requirements list, it causes a lot more questions about the maturity of the program

[prisma bison]

Mhm, this is why I didn’t go to Plymouth University.

[stuck abyss]

Did they offer CeH too?

[prisma bison]

Their course was lined to set you up for the certification ‘CEH’, when I asked them if they were worried about the value of CEH, they said they thought that it was still a really valuable certification.

Completely lost my trust in the content on the course.

[stuck abyss]

Sounds like the follow the Open University then, or OU follow then.

Terrible decision to say that CeH is a major cert in the UK

[spice garnet]

Wait are you south west?

[sonic abyss]

I'm SW

[spice garnet]

Mind if I dm

[sonic abyss]

Go ahead

[prisma bison]

North:)

[spice garnet]

Daym, if you were down here. Normally Plymouth ain’t too bad

[tepid patio]

i am north west 👀

of Britain* (if thats the one that doesn't include wales / scotland / northern ireland)

[prisma bison]

Not that North, Cov

[topaz gulch]

Nah, just England
Britain is the whole island

So what you call North West is actually about the middle of Britain

North West of England

[tepid patio]

I always knew Birmingham was in the North!

[topaz gulch]

Hey, it's in the far south to me! lmao

[tepid patio]

I live in Liverpool. I consider myself Northern but many people I have met here do not believe Liverpool is in the north, above York mostly is where they believe the North starts

[hushed estuary]

The True North is across the pond

[sudden fern]

the nordic countries is sweden finland norway and iceland.... also in a few regards denmark gets included

[elder parrot]

https://danaepp.com/analyzing-your-existing-api-testing-through-a-security-lens

[shut ferry]

https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf

[tepid patio]

https://twitter.com/bee_sec_san/status/1628695090313953280 👀 🚀 (still coding it ✍️ and does not have as many decoders as Ciphey)

@[e-mail] (@bee_sec_san)

Introducing Ares, the replacement for Ciphey rewritten in Rust. Now 8445% faster (~20 decodings / second (Ciphey) to 1709 decodings / second (Ares))

https://t.co/snOQE8Vxra

Twitter · Feb 23, 2023, 9:55 AM

[boreal snow]

Cool stuff!

[undone onyx]

Any good SIEM, non very expensive recommendations?

[tepid patio]

Sorry for double posting but this is also cool! https://skerritt.blog/how-i-store-physical-documents/

[restive flower]

Yeah that’s pretty cool !

[tepid patio]

👋 I was interviewed for a newsletter (promise this is the last on my list of self-promos, i make no $$$ from this and neither does the newsletter as they did not get a sponsor 🙈 )

https://console.substack.com/p/console-146

[stray fossil]

https://blog.akenofu.me/security-arch/

[elder parrot]

https://danaepp.com/an-api-security-testing-checklist-with-a-twist

[shut ferry]

https://www.puckiestyle.nl/top-16-active-directory-vulnerabilities/

[reef orchid]

https://nushell.sh

https://xon.sh/

[shut ferry]

https://nmap.org/nsedoc/scripts/nbstat.html

sudo nmap -sU --script nbstat.nse -p137 <host> for getting hostname of a machine. You need port 137 because it's the netbios-ns service that knows the hostname of a machine.

[wet dagger]

Cheatsheet I've been putting together for awhile.

https://deathhacks.github.io/Pentest_Cheatsheet/

[tawdry rune]

👍

[shy moth]

Hey Everyone , how can I Improve my Web Exploitation Knowledge any books or sites ?

[night ether]

portswigger web academy

[shut ferry]

https://www.digitalocean.com/community/tutorials/how-to-use-netcat-to-establish-and-test-tcp-and-udp-connections

[craggy onyx]

Which platform?

[inner portal]

Is there a plan in the new updates that are being done to better categorize the learning paths? There seems to be a lot of overlap and the names of the path seem to pretty similar and not always 100% clear.

[prisma bison]

https://tryhackme.com/feedback

[tardy rapids]

Hi Everyone, can a DOM based XSS lead to RCE ? if yes, how ? ( I have done a fair bit of googling and have not found anything of use)

[odd quest]

Certainly not directly.
Please can we take this to #infosec-general ? It's not exactly resource related

Ping me over there and I'm more than happy to talk over it with you

[final heart]

I have created quite a big repository related to lots of topics in Cybersecurity, which also contains useful links, command tutorials etc. It should be pretty need for newer students. So feel free to take a look
https://github.com/Berkanktk/CyberSecurity

[sonic abyss]

@odd quest

[odd quest]

@faint pulsar hey, this isn't the place for that.

[wind bronze]

Nice repo! Thank you mate!

[odd sinew]

Gave +1 Rep to @final heart

[low tusk]

Wanted to explore Malware analysis ....can I get some roadmaps to follow, resources....want to learn how to detect & prevent malware in system

[humble swan]

have you tried typing malware analysis into a browser?

research can be a powerful tool

[low tusk]

Yaa , I have been surrounded by a lot of em & got lost in it. I needed some suggestions from exp folks

[humble swan]

i see

[stuck abyss]

I know it's a chat about resources, but I'll need to ping @brazen sequoia

As there is a dedicated chat for Malware, and I think I seen juun say one day that that's where they suggest all malware chat goes.

Maybe Fontaene will have more clarification.

[brazen sequoia]

You can just type malware in the room search function, if you haven't already.

[brazen sequoia]

That would apply more to general malware and malware studies, I think the detection and prevention part is fine.

[sterile gale]

Just posting this for a beginner.

https://www.youtube.com/watch?v=kqtD5dpn9C8

@willow plume this is a great video to start learning python

[willow plume]

Thanks

[sterile gale]

No worries. And goodluck!

[sonic abyss]

I'm thinking of making a guide for newbies getting into cyber security using THM and other resources. Would anybody be interested in possibly helping out and have any ideas for it?

[boreal snow]

Hey Jayy, i'd be happy to contribute with the limited knowledge I have 🙂

Were you thinking of a blog, something on github or just a list?

Maybe a sort of wiki could be cool

[sonic abyss]

Hey, thanks! Not sure at the moment. Was thinking of something like #start-here in the form of a github README or smthing like that

[flat falcon]

PicoCTF has very easy CTFs, which are good for beginners (I would place it as practice after Pre-Security Path, although it has some new concepts, the "General skill" category of CTFs there is easy.

[orchid basin]

https://teachyourselfinfosec.com/ exists, but I think there are more things that could be added to it

[sonic abyss]

Interesting, thanks!

[prisma bison]

@finite patio Can you link to the courses, not someone’s LinkedIn post please

[sonic abyss]

@prisma bison Another one

[prisma bison]

@faint pulsar Please refer to the above message

[wispy stag]

a lot of us use Ansible for automation, here is a short help in encrypting text data: http://tomsitcafe.com/2023/03/16/handling-sensitive-data-with-ansible-vault-encrypting-strings-instead-of-files/

[jagged tiger]

So there's a couple of things that may leak passwords, given as examples in that article. Please use discretion when typing passwords (such as vault) as an arg to an ad hoc or playbook command, as that may leave the password in the history or audit log.
It's also not best practice to put sensitive data into the vars files, as those are typically synced with a repo, or included as part of the role.

When I was a consultant, those were very common things I would have to drill into customers when using ansible.

[keen pagoda]

.

[cobalt canyon]

A good article that emphasizes that using write-ups for rooms is okay, and facilitates learning 🙂 https://www.hackthebox.com/blog/It-is-Okay-to-Use-Writeups

[sonic abyss]

https://www.youtube.com/watch?v=Krpb44XR0bk

[shut ferry]

Guys, what would you recommend if someone wants to learn burpsuite from beginner to advanced level ?

[flat falcon]

Burp suite module on THM, than PortSwigger Academy if you want to know hot to exploit with burp, and not just learn the UI.

If you want, I can send a link for PortSwigger Academy learning path. (Port Swigger is the company that made Burp Suite)

[shut ferry]

Sure pls

[flat falcon]

Few minutes

[shut ferry]

Okay

[flat falcon]

sorry, lost the time, here it is: https://portswigger.net/web-security/learning-path#learning-path

[shut ferry]

Thank you 🙌

[odd sinew]

Gave +1 Rep to @flat falcon

[shut ferry]

Hello guys , what would you recommend someone going for malware analysis?

[heavy elm]

Done!

[hexed sable]

I think its pretty safe to use passwords with ansible-vault and we're even using encrypted vault files in our repos with sensitive data, maybe its not the best practice, a service for that would probably be to prefer, like hashicorp vault or 1password or something dedicated to that

to my knowledge ansible-vault is not storing anything anywhere (that might end up in a log), that would be really bad

oh crap, i misread your comment a bit, yeah as an arg to a playbook thats not very good

[jagged tiger]

It's not the vault itself, it's the commands used to access the vault. if you are going to use a password on CLI, --ask-password is the way to go - if the password is included as part of the command, it ends up in the history file.

[sudden fern]

and disabling the command history file is not that good of a patch

[jagged tiger]

*never a good idea

If you have to disable history, it breaks the entire reason for logging and audit logs in the first place

[sonic abyss]

https://protohackers.com

[candid adder]

Before we commence SOC monitoring, do we possess sufficient knowledge of our environment?

Blog post on SOC visibility # Part 1
https://socinpurple.com/soc-visibility-part-1/

[spice garnet]

https://github.com/SaintsConnor/ScriptHub

Ya boy is making scripts for both Blue and Red Team! Slowly expanding them as we go (All are currently in .sh and will get some more types soon!£

[west galleon]

@shut ferry

• https://p.ost2.fyi/ for learning how internals work, helps when doing reverse engineering to understand how things work, they also have dedicated coursewares for reverse engineering
• https://guyinatuxedo.github.io/01-intro_assembly/assembly/index.html this is more of a binary exploitation type of thing but it helps in building rev engg skills too
• https://revers.engineering/applied-reverse-engineering-series/ this is also a mountain of knowledge you can ingest from. this is more of a text-heavy type of thing

[shut ferry]

THANKYOU

giving them a look soon

[shut ferry]

do you recommend like

switching between this and some boxes or
smth else?

between these resources in parallel? smth different?

tryina see how to piece this together

[west galleon]

You can do either of them. I recommend the first resource as it is a courseware so gives you more of a progress

[west galleon]

I forgot also but here is a resource of reverse engineering challenges you can try out

https://crackmes.one/

[shut ferry]

I DID THIS

4 YEARS AGO

AHAHHAHAHAHAHAH

i remember this

[shut ferry]

just another lil thing

tools recommended to learn?

Ghidra + gdb?

or at least get familiar with

[west galleon]

i use gdb with pwndbg

way better imo

Ghidra also

then theres also windbg for Windows

[shut ferry]

rmb using free ida before / cutter and i rmb radare2

[west galleon]

for challenges, i would recommend HTB's reversing challenges

[shut ferry]

u got a link?

[west galleon]

i dont have a link... its in their main website after you login

under challenges

[shut ferry]

roger, will look up

[shut ferry]

and one last question
if I can't solve a challenge, what should I do? look up for a write up? how do I learn from that in the best way? any resources/tips for that?

i seem to find myself not knowing how to do these, and that's fine, but i dunno how to best 'learn' from it

especially if it's like me not knowing a tool

for example i was doing a box and i tried using ghidra, yea, didn't work because it was intended to be done by debugging,, so yea

[west galleon]

Time yourself, after some X amount of time decide if you wanna take a break, read a writeup, or still go in blind

[shut ferry]

how much should I let myself? ig that depends on difficulty

but as a general rule to follow until i figure out myself

[west galleon]

Mine is 3 hours for a box

then I continue if I'm close

[shut ferry]

right

so depending on the progress you say

continue or not

[west galleon]

Yea, sometimes when you're really close you can't stop

But often times I'm stuck on enumeration so I just take a break

[shut ferry]

after 3 hours or like hour and a half or?

[shut ferry]

okay just another thing about here (i'm really sorry if i'm bothering) looking at the resource there's a lot of architecture stuff and some debugger stuff

should I do the assembly then debugger stuff and then go into architecture or?

also do i just do one of windbg/dbg or?

[west galleon]

After 3 hours and I find nothing, I mostly take a break just to freshen up my mind

[west galleon]

I recommend doing Assembly then Debuggers then Reversing

[shut ferry]

both debuggers or?

[west galleon]

But you can also mix and match depending on your skill level

[shut ferry]

yea i'm basically n00b

if not worselol

[west galleon]

I suggest focusing on one area first so like GDB first

[shut ferry]

and i should get pwndgb as well right?

cuz atm i'm on windows with a linux vm

so ye

ig WSL works

[west galleon]

Hmm, I suggest watching some stuff on what pwndbg does and how it helps

So you can appreciate why its a nice addition to gdb

[shut ferry]

yus oke makes sense

thank youuu

i'll be trying this

also will try 3h per box too esp considering i'm still new i probs won't be able to do smth so i should just look up and learn about tihngs I find

[west galleon]

ye dont be afraid to use writeups too, i use em all the time esp. when its something completely new

[shut ferry]

is there any point at which i should just jump in immediately or?

[west galleon]

i use it when im overwhelmed

[shut ferry]

makes sense

i'll do my best

thank you sm

[sonic abyss]

https://freestuff.dev

[thin scarab]

https://cryptohack.org/ For Cryptography

[thin scarab]

Can someone bin this plz