resources

[light crystal]

Thank you!!

[odd sinew]

Gave +1 Rep to @fast wraith

[light crystal]

https://exploitation.ashemery.com

[shrewd umbra]

Reverse malware first, develop second

[shut ledge]

hiya all. just starting the thm. running non-kali linux locally. recommendations on installing tooling locally or creating a dedicated kali instance to do all the things from?

[topaz gulch]

Now why would you want to do a thing like that? 👀

[light crystal]

learnin? am not gonna do anythin bad..

[tranquil shuttle]

sus

[light crystal]

:(

[topaz gulch]

There are precisely no legitimate uses for malware if you're not a professional redteamer developing tooling, and even then that's a very specific class of malicious software developed by professionals for use in authorised situations.

It's something that can be discussed in #exploit-and-mal-studies, but nowhere else in here.

[light crystal]

oh, i understand ur worry..sorry..just a interest for learnin. am never gonna do anything bad with it.. and for the channel, sure sorry again

[shrewd umbra]

So no one can write some malware to gain experience on actually implementing injection/hooking/evasion techniques, so if that person does land a red team job in the future, they can have experience in offensive tooling and be of more value? Plus, u can build more knowledge on actually using the msdn docs for various api functions used in different classes of malware. Their is more to just reading what the api functions does. If u can actually re implement a specific technique using the api docs, and some googling, then thats more valuable knowledge for yourself and a job in red team or security research down the line.

[topaz gulch]

You can do whatever you like -- you just can't talk about it in here 🤷‍♂️

Be aware though: it's illegal to develop malicious software in many jurisdictions -- even without intent to distribute or deploy.

Sooooooo, you had better have a bloody good reason for it if anyone comes calling

Your best bet is to look into building offensive tooling rather than traditional malware -- then you have a plausible reason if you are a student, in industry, or looking to enter industry. Regardless though, if you're discussing it in this server, it goes into the specific channel that we have set up for it. There are way too many malicious skiddies around for us to have the liability of y'all discussing it publicly.

[shrewd umbra]

Correct. Nothing wrong with what you stated on the legal side of things. Just feel like when diving into a particular subject in cyber besides grc, if u aren’t actually doing any hands on and re implementing techniques for learning purposes, then how does one actually understand the subject matter come a real engagement

Their is a channel for this topic here?

[topaz gulch]

#exploit-and-mal-studies -- it's restricted under a few different roles (0xD, Throwback, OSCP, eCPPT, and a few other of the entry level certs).

[fast wraith]

https://medium.com/@openmohan/dns-basics-and-building-simple-dns-server-in-go-6cb8e1cfe461

[light crystal]

https://www.youtube.com/playlist?list=PLJQHPJLj_SQatUsJy3O4k-VQlllquDmDr

[fast wraith]

requesting if anyone has a sane and practical implementation of zettelkasten in Obsidian - I've read the top articles that come up in Google and watched Obsidian's video on the subject but it's still a bit confusing

[remote wind]

Confused regarding? Zettelkasten or obsidian?

[fast wraith]

zettelkasten, obsidian is easy enough to understand

[remote wind]

Zettelkasten is ez too, if you prefer book, i would suggest How to Take Smart Notes: One Simple Technique to Boost Writing, Learning and Thinking – for Students, Academics and Nonfiction Book Writers

Or just watch/read summary of it. It isn't specifically for obsidian, but it's core is zattelkasten method

I would recommend it

[spiral zodiac]

https://twitter.com/Flangvik/status/1434579985528934400

Melvin langvik (@Flangvik)

Bypass defender with Powershell? Run the same payload twice, yeah, you did read that correctly. Watch. 🙃 https://t.co/CaxnJYeJHy https://t.co/i8S6ByJ4vn

Retweets

246

Likes

754

▶ Play video

Twitter · Sep 5, 2021, 6:11 PM

[fast wraith]

thanks!

[odd quest]

lmao

[sudden fern]

omg the lols of that type of a failure

[jagged tiger]

I wouldn't worry about it- organizing your notes in a tree structure is basically the same thing. Only more sane to manage.

[fast wraith]

true, its starting to get a little annoying having huge tree structures to scroll through, esp since some structures are like 5 folders deep

and now I'm in the process of centralizing all of my notes from various cherrytree DBs and multiple Obsidian vaults, figured I could try something different

[jagged tiger]

I've had good luck using Trilium - as much as I loathe JS and Electron apps, it does have most of the features I want when taking notes

[upbeat token]

Could I get the OSCP role? I got mine about a week ago but I didn’t realize it would also give access to another channel, so I didn’t bother asking for the role. I’d be happy to DM proof 😊

[topaz gulch]

I'll trust ya. Congrats 🙂

[upbeat token]

Thank you! 😄

[balmy sun]

Does anyone have good list of burpsuite (pro included) extensions used in CTF and bugbounty context?

[sudden fern]

#room-hints or #room-help are more likely to help you then here and also specifying what room and task you are on will help too

[night ether]

i don't think they're asking for help with a room, just in general to help them when doing any room/bb

[faint sluice]

maybe ask in #bug-bounty ? I think most people use burpsuite free or owasp zap

[balmy sun]

Alright!

[balmy sun]

Yup

[sudden fern]

@hushed estuary ⬆️ scam link

[carmine shard]

shouldn't it also be deleted? 🤔

the message I mean

[sudden fern]

¯_(ツ)_/¯

@prisma bison could you delete the message in here??? and the other places it is in???

[fast wraith]

https://www.eff.org/deeplinks/2021/09/introducing-apkeep-eff-threat-labs-new-apk-downloader

[split mantle]

https://www.trustedsec.com/blog/obsidian-taming-a-collective-consciousness/?hss_channel=tw-403811306

[shut ferry]

Anyone knows about an academic paper about web hacking/security??

With a credible author

[odd quest]

Is this for an assignment?

[shut ferry]

Yes

[odd quest]

Are you sure it wouldn't be cheating if we gave you some?

Try searching with Google Scholar or asking for help at your school/college/university library

[shut ferry]

Wait is that cheating?

What about names of the authors

Would that be considered as cheating?

Also every time google scholar I get like pdf where I have to buy them

[jagged tiger]

Some academic journals do require buy-in; if you connect to google scholar through your university wifi or vpn, you should have access to those.

[shut ferry]

Oh alright thank you

[fast wraith]

https://github.com/brimdata/brim

[shut ferry]

Hey guys. I threw together a small nmap tutorial/cheatsheet. It might be useful if you're going through the Furthernmap room. It covers basic switches, scripting and scanning types. Hope this helps

[shut ferry]

Thats very nice, thanks!

[odd sinew]

Gave +1 Rep to @boreal ermine

[round estuary]

Thank you sm

[odd sinew]

Gave +1 Rep to @boreal ermine

[shut ferry]

https://cybersecuritynews.com/owasp-top-10-2021/

[vast mountain]

https://www.humblebundle.com/software/kubernetes-with-pluralsight-software

[azure widget]

https://www.amazoncareerday.com/regions?share=true

[hushed estuary]

https://owasp.org/Top10/ for a bit more context (Still in draft for now)

[odd quest]

I like these changes

[shut ferry]

I didn't see that link earlier thank y0u

[odd sinew]

Gave +1 Rep to @hushed estuary

[shut ferry]

Bot too strong

[hushed estuary]

haha

[light crystal]

it tkes the word thank

[azure widget]

https://www.researchrabbit.ai/

[dawn oak]

Any blog/article for note taking tips? I am kinda new to reports and notes so it would be helpful.
Tried finding but haven't caught something useful yet

[fiery bear]

https://twitter.com/cyberdefensemag/status/1436336235551809546?s=19

CyberDefenseMagazine (@cyberdefensemag)

Request Your Free eBook Now: A wide range of tools to help for digital forensics investigations and incident response mechanisms Digital Forensics with Kali Linux - Second Edition ($24.99 Value) FREE for a Limited Time – Expires 9/15/2021

https://t.co/uxwxjxBnQF

Twitter · Sep 10, 2021, 2:30 PM

[night ether]

@odd quest ^

[fast wraith]

it takes trial and error to find a method that works for you, I recently integrated Zettelkasten into my note-taking which has been pretty handy

the biggest take-away for me is that you just need to write things down, have a daily note that you just always have open, end of the day pull out important bits you like and see how you can file and categorize those important bits

[dawn oak]

Yeah
Thats one hard part of it
Regularly updating them and categorizing them frequently and efficiently

[odd quest]

@spiral zodiac Muir deleted it because "it's an n-day vuln -- we probably shouldn't be directly advertising code for it".
If something is deleted, probably best not to repost it?

[spiral zodiac]

Oh it was muir he could have told me smh, but okay I understand why it was deleted

[topaz gulch]

Yeah, sorry, did it on mobile in a hurry ♥️

[split mantle]

https://twitter.com/metasploit/status/1437439337931628555

Metasploit Project (@metasploit)

Last week's Metasploit wrap-up includes an exploit for Confluence Server CVE-2021-26084 and loads of fixes and quality of life improvements. Get it: https://t.co/RQIzUB2Ac9

Twitter · Sep 13, 2021, 3:33 PM

[rain kernel]

https://github.com/brightio/penelope

I try this tool it require python 3.8 or later
Upgrade your shell automatically. It sounds interesting.

[split mantle]

https://github.com/OWASP/Nettacker

[shut ferry]

https://www.thehacker.recipes/

AD Pentest Mindmap - by Mayfly

https://twitter.com/m4yfly/status/1437453135883157504

Mayfly (@M4yFly)

AD Pentest mindmap upgrade :
Full version: https://t.co/hE0VKO5b2I

xmind version (slow, the map is big) :
https://t.co/D3Dck14tiq

Fell free to tell me what is missing !

Retweets

150

Likes

314

Twitter · Sep 13, 2021, 4:28 PM

[fast wraith]

solid explanation of AXFR
https://cr.yp.to/djbdns/axfr-notes.html

[drowsy niche]

Upgrade shell??

[queen mortar]

Found something interesting from a IT news website.
It's a leak of a Ransomware group affiliate who was let's say not very happy and fed up by them, so he leaked there total playbook.
It's kinda interesting to see how a group access and pivots through the network, exfiltrates data, and many more.
It's also interesting for understanding Attacks against AD, Kerberoasting, and many more.
The catch is, its purely on Russian, so a tool like Deepl can come in handy if needed.
//It's purely for educational purposes only//.
Link to the documents:
https://github.com/ForbiddenProgrammer/conti-pentester-guide-leak

I hope it's not against the Server rules, to link this resource.
-R1ot

[broken burrow]

I assume he means make it interactive and stable.

[drowsy niche]

oh like an automatic python -c bin bash thing??

[shut ferry]

Time 2 update

https://www.bleepingcomputer.com/news/security/kali-linux-20213-released-with-new-pentest-tools-improvements/

[broken burrow]

I think so? Haven't tested it.

[remote wind]

This is great read https://kerkour.com/blog/shellcode-in-rust/

[brittle nymph]

AWSome Day Online Conference is a free, one-day cloud training delivered by AWS
https://aws.amazon.com/events/awsome-day/awsome-day-online/?trkCampaign=awsome-day-online&trk=
Register (before 30 Sep) to participate if you like 🙂

[keen temple]

[Replying to the now deleted message] I believe this is a scam going around the cybersec discords recently

[odd quest]

It's everywhere

[keen temple]

I hope it's not another academic project gone wrong like that one uni injecting crafted fake vulnerabilities to the linux kernel github repo to test the effectiveness of open source code audit practices.

[faint sluice]

maybe you should be clear that AWS is not the scam 🙂

[keen temple]

Oops 😂

[faint sluice]

no its ok, just wanted to make sure others knew the AWS is a valid link and not a scam

[keen temple]

oh definitely

[keen temple]

-.-

[keen temple]

^

[split mantle]

https://gist.github.com/TarlogicSecurity/2f221924fef8c14a1d8e29f3cb5c5c4a

[crimson thunder]

https://www.freecodecamp.org/news/linux-essentials-for-hackers/

[split mantle]

https://twitter.com/OscarAkaElvis/status/1435154925743378433

Óscar Alfonso Díaz (@OscarAkaElvis)

Evil-WinRM v3.3 released. Dynamic AMSI bypass and more stuff! let's see this time how M$ try to create a Defender AV signature 🤣

https://t.co/PEwvSTxt8p

#evilwinrm #winrm #hacking #pentesting

Retweets

110

Likes

242

Twitter · Sep 7, 2021, 8:16 AM

[light crystal]

https://github.com/CyberSecurityUP/OSCE-Complete-Guide

[hollow phoenix]

👍

[light crystal]

https://github.com/r0r0x-xx/OSEP-Pre

[odd quest]

https://www.fireeye.com/blog/threat-research/2021/03/attacker-use-of-windows-background-intelligent-transfer-service.html
https://docs.microsoft.com/en-us/windows/win32/bits/background-intelligent-transfer-service-portal

[split mantle]

https://www.sans.org/tools/ez-tools/

[light crystal]

https://github.com/security-prince/PWK-OSCP-Preparation-Roadmap

[tranquil snow]

Can I get any Networking related stuff here

[light crystal]

https://github.com/Aksheet10/Cyber-security-resources/blob/main/README.md#networking check this out 😁

[short junco]

Hey any resources about Threat Intelligence infrastructure ?

[fast wraith]

great bash shell reference guide
https://github.com/jlevy/the-art-of-command-line

[abstract pilot]

https://github.com/pentest-tools/shad0w

[abstract pilot]

https://github.com/3ndG4me/torphantom

https://github.com/hephaest0s/usbkill

[split mantle]

https://casvancooten.com/posts/2021/08/building-a-c2-implant-in-nim-considerations-and-lessons-learned/

[spiral zodiac]

^ good article, the author is one of my friends

[light crystal]

damn

nice frands

[gloomy badger]

https://www.makeuseof.com/how-to-learn-python-for-free/ has some useful links to free courses.

Also i found this pretty useful too https://danielmiessler.com/blog/build-successful-infosec-career/

[fast wraith]

a sane way to grep through code!
https://github.com/returntocorp/semgrep

[flint bison]

What are your favorite SQL injection tools/scripts/etc. ?

[split mantle]

https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/

[split mantle]

Should introduce me, I'm a fan 🙂

[gentle jolt]

Hello

[fringe spire]

You are from Pakistan?

[light crystal]

https://devopswithdocker.com/

[gentle saffron]

https://www.tradepub.com/form/hunting-cyber-criminals-a-hackers-guide-to-online-intelligence-gathering-tools-and-techniques-24.00-value-free-for-a-limited-time/w_wile339/prgm.cgi?sr=hicat&_t=hicat:1091

[craggy onyx]

Great read ^^^

Of note: Vinny is not afraid 😄

[fringe spire]

https://www.fortinet.com/training/cybersecurity-professionals#advanced-training

[glacial gazelle]

https://twitter.com/joehelle/status/1440422404799406090

Joe Helle, Mayor of Hacktown, First of His Name (@joehelle)

Free until I turn it off. Maybe in 10 minutes, maybe in 10 days. People complaining that they missed out will be shamed forever.

Coupon code FREESIRPLEASE

https://t.co/mndI9vWye1

Twitter · Sep 21, 2021, 9:07 PM

[broken burrow]

Thanks a bunch for sharing, Freddie! I missed it last time.

[odd sinew]

Gave +1 Rep to @glacial gazelle

[lean coral]

https://twitter.com/parsan26/status/1439535368173277185?s=20

Prasan Singh (@parsan26)

Made an awesome thread to explain all the essentials tools in a simple way.
#cybersecurity #infosec #oscp
Inspirations/ Mentors: @theXSSrat @_JohnHammond @davidbombal @offsectraining @InsiderPhD @0xTib3rius @RealTryHackMe @hackthebox_eu @BlackHatEvents @BHinfoSecurity

Twitter · Sep 19, 2021, 10:22 AM

[split mantle]

https://www.rand.org/pubs/research_reports/RR2713.html

[shut ferry]

@odd quest ^

[tepid patio]

https://www.reddit.com/r/tryhackme/comments/pujd1c/heres_yours_weekly_cyber_news_recap/

[prisma bison]

I don't want to be rude but there isn't much of a guide in that blog post.

[keen field]

https://hackerstop.org/mobilepentesting

[split mantle]

https://twitter.com/mubix/status/1441856493364580355

Rob Fuller (@mubix)

To all my fellow Infosec old farts, what’s one piece of advice you would give yourself during your first week of your first Infosec job?

Twitter · Sep 25, 2021, 8:05 PM

[wet spruce]

https://youtube.com/playlist?list=PLBf0hzazHTGOepimcP15eS6Y-aR4m6ql3

[light crystal]

thnks

[last wolf]

Ive written some random thing, If some kind soul reviews it Ill be grateful
https://hamzawinix.com/zathura_in_wsl/

[jagged haven]

yoh, I use it on linux, pog :v. Its the best pdf viewer imo

[last wolf]

so what do u think I got right and what did I get wrong in the article ?
is there something you would change ?

[jagged haven]

its pretty straight forward, altho the assumption of VcXsrv being installed is bold its understandable, some people might be wondering about why you export DISPLAY on the zathurarc but I think people who want zathura on their linux are aware of why cuz they worked with zathura previously. another note is the set sandbox none, I would explain a bit better, for the rest it seems a cool walkthrough for a problem I didnt know there was an answer

[last wolf]

Thx for the feedback @jagged haven

[jagged haven]

thank you for the article

[odd sinew]

Gave +1 Rep to @last wolf

[azure widget]

https://www.youtube.com/watch?v=OigKnI68Sfo

[fast wraith]

@hushed estuary

[languid parcel]

hmm

[hushed estuary]

Likely not around at 3 am

[wet willow]

Hey guys, I've been enjoying writing while I study this PEH course, and thought my notes may be useful to others. I've written my own version of the teaching, not verbatim, in case that worries anyone!
Critiques and comments always welcome too 🙂
https://heavenly-nape-4b6.notion.site/Practical-Ethical-Hacking-The-Cyber-Mentor-Udemy-Course-02b07014b6eb4695bbcd3b423f7e5325

[light crystal]

that is nice!

[bright osprey]

https://github.com/taielab/awesome-hacking-lists
Big archive of applications.. Uhh... nothing else to say, it takes like 1 minute to scroll all the way down

[broken burrow]

@cobalt lily
https://github.com/hasherezade/malware_training_vol1

[cobalt lily]

👍

[glacial gazelle]

"The course is accessible for FREE right now on UDEMY with the code "LLS10K" as a part of the fundraiser I'm doing with them. If you have ever wanted to donate to me, buy me coffee/food, or just support me, please take the time to donate it to LLS instead! https://pages.lls.org/ltn/sac/sacr21/BSadeghipour"

https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec/?couponCode=LLS10K

[broken burrow]

Freddie coming in clutch.

At this point, I've never bought a course on Udemy but my library is packed.

[odd quest]

https://jc01.ninja/pwdump/
Hate messing with meterpreter hashdumps or impacket secretsdump pwdump format? Try this
Spits out a hashdump that's ready for John to use immediately, or hashcat to use with the --user option

[spiral zodiac]

that's actually quite useful, bookmarked

I wonder if I can break it somehow

[broken burrow]

Bad.

[odd quest]

It's all clientside but it's not very robust

[split mantle]

https://infosecstreams.github.io/

[spiral zodiac]

wow dark is there 🤔

pls stream minecraft again dark kthnxbye

[dreamy holly]

Hello Toaster

[remote wind]

Can you also add the mode for JTR/Hashcat? Or the command itself so user can just copy paste?

[odd quest]

No, I cannot

Because I don't want to add fields to enter wordlists and hashfile locations and stuff like that

[split mantle]

https://csrc.nist.gov/publications/detail/sp/800-204c/draft

[shut ferry]

from where can i start?
i am new
to hacking
pls
help
(:

started on tryhackme.com

[night ether]

hey :) give #start-here a read through to help you get started

[fast wraith]

ESET's T2 Threat Report
https://www.welivesecurity.com/2021/09/30/eset-threat-report-t22021/

[tepid patio]

https://www.reddit.com/r/tryhackme/comments/pz7pqq/weekly_cybernews_recap_is_ready_to_be_read/

[raw ice]

Hey, have any of you guys taken the Cisco course about networking? If so, is it worth it?

[keen field]

https://hackerstop.org/

[mighty ferry]

@raw ice i have went through all of the old CCNA/CCNP/CCIE RS track and I can say that professionally it will open a ton of doors, however, for cyber security IMHO you will not get much value past the CCNP level certs. The OSCP and CISSP is going to get you past the HR gatekeepers at that point.

[light crystal]

https://techvomit.net/web-application-penetration-testing-notes/

http://www.securityidiots.com/

[hollow phoenix]

can i dm @tepid patio ?

[tepid patio]

ok 🙂

[next marlin]

How to configure burp suite with tor for better anonymity
https://youtu.be/uGyKfeJBDbw

[calm ermine]

@next marlin Hey Man 🙂 Not seen you here before 🙂

[night ether]

are you a ccie or did you just go through the training?

[mighty ferry]

@night ether held CCIE RS until it changed to EI in 2020 working on getting my collaboration to re-up.

[night ether]

daaaamn huge brain gg

[mighty ferry]

Nah huge brain would of reupped before covid hit and testing became a PITA

[night holly]

CCIE when?

[night ether]

my dumbass can't even do ccnp yet

[night holly]

CCNP big brain

I keep trying to do CCNA with Mike Andersons course but get bored after a video or 2

[mighty ferry]

@night ether CCNP isn’t that bad, the TS exam is so so good at learning the material you need. If you can identify what’s broken and how to fix it you are we well on your way to passing the rest.

[night ether]

gotta use jeremy and keith

[night ether]

ah i'm gonna be doing security, not enterprise

don't do networking anymore so don't see the need of going any further than ccna r&s

[mighty ferry]

Makes sense.

@night ether from what my colleagues have told me you will get a ton more mileage out of OSCP or CISSP unless you are trying to pigeon hole into Cisco security

[night ether]

yeah i'm doing oscp too (already failed once but will try again soon 🤪 ) - i just really like the cisco side of things

as well as the guys the write the official study guides for ccna/ccnp, the content and the way they phrase it is sooooo good

[mighty ferry]

Nice! Good luck my friend!

I just started down the OSCP path been working on proving grounds and THM. PG was a bit too hard for me starting out, THM fit that middle e ground nicely.

[night holly]

who dey?

[night ether]

awesome :) are you planning on shifting into security? or do you just like it as a hobby? (also let's continue in #infosec-general to stop flooding the #resources channel)

[night ether]

from cbt nuggets; jeremy cioara and keith barker

[night holly]

hmm okay I look, thanks 😄

[urban badge]

I have the CCNA R&S, yes this one adds a lot of value as it will give you a solid networking foundation

CCNP and CCIE are overkill unless you want to focus on network security

[broken burrow]

On a side note, the CCIE is currently free if you have the brains for that.

[night ether]

que

where did you see that?

[broken burrow]

Hold up. I'll link it.

Heard it first from David Bombal.
https://learningnetwork.cisco.com/s/article/byod-mobile-labs-overview

[night ether]

oo

that's cool

you still need the core exam though for it

ie. the core ccnp for that track

[broken burrow]

Mhm. Pretty sad otherwise I would've signed up. Never look a gift horse in the mouth.

[light crystal]

https://hunter2.gitbook.io/darthsidious

[tepid patio]

Non-monetary self promo 👀 But PyWhat 4.1.0 Bug Bounty Edition™️ just released 🥳

Now with:

• 69 new regex for bug bounties 😏
• Supports UNIX pipes (curl abc.xyz | pywhat) 🍕
• New bug bounty mode designed to work with your flows 🔥

https://github.com/bee-san/pyWhat

[sturdy shell]

Hello, does anyone have good recommendations for C? Crash course, practical, I'll take it 😄

[orchid basin]

freeCodeCamp got me through my Operating Systems course, but it definitely is intended for people just learning to program
https://youtu.be/KJgsSFOSQv0

[glad hazel]

Isn't this simmilar to CipHey?

[carmine furnace]

Anyone that has given Security+ 601 can recommend which book to go with?

[sturdy shell]

Thanks so much! That works for me 😄

[odd sinew]

Gave +1 Rep to @orchid basin

[sturdy shell]

I'm doing very similar -- OS & embedded systems so 😳

[orchid basin]

I made the mistake of taking my OS class right after I had my Programming Fundamentals/Java course without knowing anything about architecture, memory, etc so a lot of it went over my head

[odd quest]

https://2020.romhack.io/dl-2020/RH2020-slides-Cocomazzi.pdf

[glacial gazelle]

https://www.youtube.com/watch?v=tUVBW3e8P-s

[fast wraith]

pretty great opportunity to earn some free certifications and education (A+, Security+, Cisco CyberOps, plus others) if you qualify - program is supported by the NSA

https://www.pnw.edu/cybersecurity/cwct/

[broken burrow]

Certs as in vouchers? Awesome.

[zealous void]

Does anyone know good ansible courses?

[gritty shuttle]

@zealous void I don’t know about courses, but this book is amazing and helped me learn Ansible.

[jagged tiger]

The best book for 'intro to ansible' that I've found is the pearson IT cert guide for the RHCEv8

[zealous void]

Thank you

[odd sinew]

Gave +1 Rep to @jagged tiger

[zealous void]

Thank you

[light crystal]

@calm ermine

[spiral zodiac]

nice typo squatting huh

l vs i

good try

[light crystal]

heh

[spiral zodiac]

also uhh @hushed estuary

[light crystal]

check another channel

[hushed estuary]

hmm?

[dreamy holly]

nitro scam spam

[hushed estuary]

ah

[keen temple]

Is it ever gonna end?

[hushed estuary]

nope

did Esqy right-click ban?

[dreamy holly]

probably

[spiral zodiac]

it was a good typo squatting attempt should have tried a homograph attack

[light crystal]

HEHEHEHE

lets talk in #general instead instead of here 😛

[worldly palm]

how widely used is Ansible? Looks really useful Wondering if I should get across it.

[gritty shuttle]

It’s pretty popular. We use it it at work to set up firewalls, Selinux, nginx, and other stuff and it keeps things nice and consistent.

[jagged tiger]

Ansible is very widespread. Especially since the only real prerequisite is that a managed server has python3 installed

[worldly palm]

Consistent is good. I'll add that book to my tbr.

[split mantle]

https://www.youtube.com/watch?v=th_S0zXthrg

[tepid patio]

https://www.reddit.com/r/tryhackme/comments/q3xbto/weekly_cyber_news_recap/

[thorny ocean]

Does anyone have recommendations for OSCP/real-world machines to practice on? I think I've done all the ones Tryhackme has to offer, and all I have left are the straight up CTF machines.

[night ether]

hmm

oscp and real world are totally different so which are you after

[thorny ocean]

If I have to choose, then OSCP.

I just figured real-world would be closer to OSCP than CTF

[topaz gulch]

Real world infra pentesting is mainly AD

There is no AD in the OSCP exam

Or SCADA/ICS/IOT for that matter

[topaz gulch]

Which THM machines have you done?

[thorny ocean]

A lot of them. I can go look and make a list. I even did a good amount of CTF machines before I got the feeling that it wasn't really helping me.

[thorny ocean]

Good point on this

I did the Pentest and CompTia+ paths, so all the machines associated with those

[topaz gulch]

https://tryhackme.com/room/yotjf

That's about as close to an OSCP exam machine as you get in terms of style -- although not in terms of content (for obvious reasons)

If you can do that in under 4 hours, you should be good to go

[thorny ocean]

Right on, thank you very much.

I'm actually getting an error going to that link

I'll try manually searching

Weird, can't find it

Is it this https://tryhackme.com/room/yearofthejellyfish
@topaz gulch ?

[topaz gulch]

... Yes

Please ignore my inability to remember room codes for my own boxes...

[thorny ocean]

Lol

No worries, thanks for the suggestion.

[little canyon]

https://www.poplabsec.com/attack-apache-and-php-5-3-metasploitable/

[shut ferry]

I don't know if the course is worth it but it's free so here it is :

https://www.udemy.com/course/learn-digital-forensics-beginner-to-advanced-2021/ with the code DIGITALFORENSICSFREE

[cold bay]

Hey, I just published a list of resources I found/used in my cybersecurity journey, might be useful to some of you:

https://github.com/W3rni0/W3rni0-awesome-resources

[rustic coral]

Eol. Php

[gleaming wind]

Thanks @shut ferry

[odd sinew]

Gave +1 Rep to @spare finch

[light crystal]

PNG -> 89 50 4E 47 0D 0A 1A 0A

ZIP FILE -> 50 4B 03 04 or 50 4B 05 06

MAGIC BYTE

[glacial gazelle]

https://en.wikipedia.org/wiki/List_of_file_signatures

@light crystal 🤔

[shut ferry]

anytime

[light crystal]

ah ty

[odd sinew]

Gave +1 Rep to @glacial gazelle

[crystal slate]

https://www.udemy.com/course/bug-bounty-hunting-with-burp-suite/?couponCode=TRYTSOMETHINGNEW

[sudden fern]

thanks @crystal slate

[odd sinew]

Gave +1 Rep to @crystal slate

[coral sentinel]

oi, anyone have some UK based cyber sec online store they suggest for some cheap kit to dick around with?

[light crystal]

https://0xrick.github.io/lists/stego/

[plush lily]

https://github.com/vdjagilev/nmap2md

[fickle mulch]

@mod

[remote wind]

Nice resource @glacial gazelle btw, congrattzz

[light crystal]

swan u already have things 🤣

[odd quest]

https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/
Grab a pre-built Windows VM for dev stuff. Comes with Visual Studio, WSL, etc.
Free, licensed for up to 30 days. Get an new VM after it expires.

[autumn void]

Can someone link me up with some resources to create VMs

[fringe spire]

You can find some more from the internet but these two are also good if you want to create a box on THM.
https://www.youtube.com/watch?v=2qUWfrqAwdI
https://www.youtube.com/watch?v=XyEmZUpNVcI

[autumn void]

Thanks a lot

[dawn oak]

Can anyone suggest how can i improve my scripting? Like any practice platform or something?

[split mantle]

https://wrongbaud.github.io/posts/ghidra-training/

[orchid basin]

There are a good amount of websites pinned in the #programming channel for coding challenges. But, you could also always try and make autopwn scripts for boxes you've already completed. Or try and recreate challenges you've seen in the language you want to practice.

One of the things I do a lot is redo anything I'm doing in burpsuite repeater using Python. If I do it right, it's probably faster

[dawn oak]

Will sure do. Thanks for the info

[odd sinew]

Gave +1 Rep to @orchid basin

[light crystal]

try solving challenges

https://rosettacode.org/wiki/Category:Programming_Tasks

[dawn oak]

Seems pretty interesting
Thanks

[odd sinew]

Gave +1 Rep to @light crystal

[odd quest]

https://i.blackhat.com/us-18/Wed-August-8/us-18-Guri-AirGap.pdf
Attacks on airgapped infra

[shut ferry]

https://infinitelogins.com/2020/02/22/how-to-brute-force-websites-using-hydra/

[odd quest]

Quick trick to safely use netcat on low ports without sudo.
Capabilities are like SUID but more granular, you can assign specific permissions like binding to low ports.

[spiral zodiac]

iirc kali did something so non root users can bind to ports less than 1024

[odd quest]

Huh, that must be the version up from me

[odd quest]

I believe it's a parameter when compiling the kernel

[spiral zodiac]

Initially I thought Kali used authbind for this purpose, but after a bit of research I found that they modified a file /usr/src/your-kernel/include/net/sock.h

They changed this line which pretty much takes care of everything from there:

#define PROT_SOCK   0

The default value of PROT_SOCK is 1024 which is the normal port bind limit.

[pine blade]

You can also change that parameter at runtime using sysctl, sysctl -w net.ipv4.ip_unprivileged_port_start=0

[odd quest]

Capabilities are also great though

[pine blade]

Oh yeah for sure it's better to use caps over system-wide so you can have finer control

Also so you don't introduce security issues same thing goes for disabling aslr you should never disable it system wide and instead use setarch

[split mantle]

https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/

[drowsy niche]

What is caps?

[spiral zodiac]

He means capabilities

[plain gust]

https://github.com/SDToropov/PortScope

For scan open ports

[topaz gulch]

!rule 11

[fervent summit]

Rule 11: No distribution of illegally obtained materials within the discord. Do not pirate books in #bookclub. This also applies to classified (or potentially classified) materials, which should also not be posted in the server.

[topaz gulch]

@shut ferryWhich part of that was difficult to understand?

[night ether]

https://youtube.com/playlist?list=PLT98CRl2KxKHgBWIp7XBwVjGf6dmOCj98

[broken burrow]

Thanks a bunch.🙏

[odd sinew]

Gave +1 Rep to @night ether

[balmy sun]

@everyone Happy Cybersecurity Awareness Month!

To help generate more interest in the security field and hopefully help close the security job gap, we are giving away our best-selling Practical Ethical Hacking course. Expires at 3:00pm EST on 10/20/2021. See image for code.

https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course

^free PEH course

from TCMs server

[shut ferry]

Fortunately everyone ping is disabled

[haughty zinc]

The site is under maintenance, I guess?

[balmy sun]

Yep haha. I copied the msg from their Disocrd server

[runic flint]

https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course

Coupon code- SECURITYAWARENESS
Will work till 3PM EST on 20th October 2021
Image

[bright lantern]

Is anyone have this materials

[shut ferry]

Which one

[glacial gazelle]

all of them

[dreamy holly]

[shut ferry]

[hardy peak]

https://tenor.com/view/elmo-burn-gif-5195241

[spiral zodiac]

https://owasp.org/www-project-web-security-testing-guide/stable/

[inland anvil]

Hi, I want to learn how to create/analyze Malware. I'm doing this course on tryhackme https://tryhackme.com/room/malmalintroductory. I'd be happy to know what other resources are

[craggy onyx]

On the search page, https://tryhackme.com/hacktivities?tab=search, search for malware 🙂

[fast wraith]

newest phrack issue from a couple weeks ago
http://phrack.org/issues/70/1.html#article

[spiral zodiac]

[azure widget]

How to Take Notes Like a 1337 Hecker

• It is important to note, haha note get it, that even with all of the solutions and new and flashy tools available for note taking, your own note taking should be very indiviualized and meet your needs.
• These resources should also be prefaced by saying that I am a heavily biased towards obsidian, therefore most of my resources are centered around Obsidian, but can be applied anywhere. I will attempt to keep this updated as I encounter and collect other useful links
• The first step to effective note taking is to identify what you need and why you need it,
• From the LYT PKM Kit,

You don't need any of this. Just make notes and start writing. Worry about structure later.

• Moving on from why and how to begin effectively taking notes lets talk about resources to get there.
• Note-Taking Platforms by Category
  • Mind-Style Platforms
    • Trillium
    • Obsidian
    • Evernote
    • Roam
  • Automated/Synced Platforms
    • Jupyter
    • Joplin
  • Straight to the Point/Node-based Platforms
    • Notion
    • One Note
    • Cherry Tree
  • Unique platforms
    • Compendium Cards
• Syntaxes and Languages to take notes
  • LaTeX
  • Markdown
  • HTML
  • MathJax
  • Mermaid
  • Just straight up notes dawg

Pandoc doesnt fit under this category but can be really helpful for converison

• Personal Knowledge Management Resources
  • Zettelkasten
  • LYT - Link Your Thinking
  • Evernote
  • PARA
  • IMF
• Research and Academia Resources
  • Zotero
  • Research Rabbit
• Random Helpful Links I Utilize
  • https://www.icl.utk.edu/~mgates3/docs/latex.pdf
  • http://thedocly.io/
  • https://math.meta.stackexchange.com/questions/5020/mathjax-basic-tutorial-and-quick-reference
  • https://mathpix.com/
  • https://www.youtube.com/channel/UCfhSB16X9MXhzSFe_H7XbHg
  • https://forum.obsidian.md/t/para-starter-kit/223/2
  • https://forum.obsidian.md/t/lyt-kit-now-downloadable/390
  • https://github.com/argenos/zotero-mdnotes
  • https://www.youtube.com/watch?v=XbGJH08ZfCs
  • https://docs.google.com/document/d/1Ti90jJG2b9cnKbOoGZyT6ve5P_iyhva6lLRrlL9sCek/edit#heading=h.jcidduny8pla
  • https://www.youtube.com/watch?v=ziE6UExsOrs
  • https://publish.obsidian.md/hub/00+-+Start+here
  • https://oasislab.pubpub.org/pub/54t0y9mk/release/2
  • https://www.youtube.com/watch?v=JoCjpTXCklw
  • https://chris-grieser.de/Comprehensive-Academic-Workflow-from-Reading-to-Writing-in-Markdown

Posting this here as well because why not

[light crystal]

https://twitter.com/_nwodtuhs/status/1451510341041594377?s=20

Shutdown (Charlie BROMBERG) (@_nwodtuhs)

[thread 🧵] Kerberos basics & (ab)use of Certificates within Active Directory (i.e. AD CS and PKINIT)

• Kerberos 101
• Pass-the-Certificate
• UnPAC-the-Hash
• Shadow Credentials
• AD CS escalation (ESC1 to ESC8)

(Links and credits at the end)

Retweets

297

Likes

829

Twitter · Oct 22, 2021, 11:26 AM

https://www.thehacker.recipes/

[serene fossil]

https://hackingpassion.com/ Jolanda de Koff is really awesome!

[light crystal]

@night plinth ^^

[finite patio]

https://www.linkedin.com/posts/jose-praveen_freelearning-packtpub-freecourses-activity-6857323331826401282-is-9 came across this linkedin post about free packtpub library

[robust notch]

https://subscription.packtpub.com/register without the sketchy linkedin post

[fast wraith]

new blog post going over how I implement Zettelkasten and take notes
https://droogy.tech/post/lazyzettelkasten/

[balmy sun]

Found this really interesting talk by SANS about making digital alert-traps, y'all should check it out if you have time https://www.youtube.com/watch?v=KgQoGIkozL8

[balmy sun]

@prisma bison ^might wanna remove that phishing post

or any other thm staff

[fringe spire]

they noticed

will be gone soon

[balmy sun]

oh. I hadn't noticed it was posting in every channel. MB!

[late comet]

Suggestion for improvements would be appreciated:
https://youtu.be/4of_6Q_wHzw

[odd quest]

Is it desensitisation or deserialisation?

[late comet]

Oops, that's the reason I've posted here

Thanks for the correction

Fixing ...

[serene fossil]

https://youtu.be/G8lrwmsx8KA

[prime mantle]

a pin of this would be nice

[prisma bison]

Already pinged Muiri Sleepy

[broken burrow]

@hushed estuary @night plinth

RIP

Sorry, guys!

[hushed estuary]

??

[prisma bison]

Scam

It's gone Muiri got it

[hushed estuary]

Ok

[dull barn]

@shut ferry Response.
Yes. You can checkout this course from edx. It is from Harvard University.

https://www.edx.org/course/introduction-computer-science-harvardx-cs50x

It covers some computer programming foundations (don't get overwhelmed). From this you can actually learn how computer understands us.
Do checkout their other courses.

[azure widget]

@calm ermine lemme do a talk about note taking

[topaz gulch]

Esqy, don't let him do a talk about note taking smh

[prisma bison]

Nono

Let him

And if it’s bad, I get to ban him

[topaz gulch]

We require our speakers to be competent

[prisma bison]

C’mon Muirrrr

[azure widget]

That’s not what you were saying in me dms ay bruv

[topaz gulch]

You wish smh

[glacial gazelle]

isn't cry american

:|

ay bruv

[topaz gulch]

He is, he's just very confused

Not an unusual state for him, I may add

[glacial gazelle]

poor guy

an identity crisis type of thing?

[broken burrow]

[shut ferry]

Thanks

[odd sinew]

Gave +1 Rep to @dull barn

[light crystal]

IG those are pirated books?

@balmy sun

[balmy sun]

Mb

[shut ferry]

Not sure where else to ask for help, but I’m experiencing major burnout, can’t even sit down for 30 minutes now to complete a few rooms or tasks without feeling tired or my mind getting occupied

Was able to sit down for ages and manage to get a lot more done but no idea how to get out of this rut I’m in

[worldly palm]

It's easy to end up overworked and overtired, what with the state of the world and pressures of work and study. Are you getting enough rest, eating right and getting exercise? Those basics are important. Fresh air and sunshine - resting the brain and eyes.
Social media isn't helpful - make sure when you're having downtime, you're actually having downtime. Read a paper book, grow a potplant or something. I think it's important that our tech time is good quality - when you're working and playing in a screen-heavy environment, you need mental downtime, and save your screen+keyboard time for the important stuff.
... the other thing is, what's your motivation? Do you have a clear goal?

[noble tangle]

https://github.com/oversecured/ovia

[scarlet venture]

The team Killer Queen is hosting their first CTF: Killer Queen CTF!

Killer Queen CTF will be primarily targeted at high school and college students featuring tons of challenges ranging from a beginner level of difficulty to ones that will test even the most seasoned competitors. It will feature all of our favorite categories including web, crypto, pwn, rev, and forensics with a variety of exciting topics such as quantum-safe cryptography that are not always covered by many other CTFs.

Killer Queen CTF will also be featuring a list of extensive prizes for both open and highschool division from top sponsors as well as a special prize for the top female competitors. Partnering with the WiCyS organization, we hope to increase the amount of participants and the diversity of our competitors so make sure to tell everyone you know to come participate!

Killer Queen will be providing a competition that is both great for new CTFers to learn and fun for more experienced players so regardless of your skill level, we'd love to see you come join :)

Max team size is 7 people.

Prizes:
High School Division:
1st Place - $500, Wolfram Award, and HTB VIP 1 year
2nd Place - $250, Wolfram Award, and HTB VIP 6 months
3rd Place - $130, Wolfram Award, and HTB VIP 1 month
4th Place - $20 and Wolfram Award
5th Place - $20 and Wolfram Award
6th Place - $20
7th Place - $20
8th Place - $20
9th Place - $20
10th Place - $20

Open Division:
1st Place - $500
2nd Place - $250
3rd Place - $130
4th Place - $20
5th Place - $20
6th Place - $20
7th Place - $20
8th Place - $20
9th Place - $20
10th Place - $20

Middle School Division:
1st Place - $50

CTF link: https://2021.killerqueenctf.org/
CTFtime link: https://ctftime.org/event/1482

We hope to see you all on October 29th for this exciting 3 day CTF!

For those of you more Junior Pentesters out there ^

[shut ferry]

Getting about 5-8 hours of rest per night
Out for quite a bit of the day, so defiantly getting fresh air
And my motivation is to just kinda learn the most I can I guess?

Thanks for taking your time to respond aswell

[odd sinew]

Gave +1 Rep to @worldly palm

[broken burrow]

The problem seems to be that you're overextending yourself in place of learning and honing one particular sub skill in cybersec

I've been there before.

[worldly palm]

I agree, likely overextended. Focus on just one pathway. And maybe take a break - perhaps do some related lighter reading - something like Mitnick's Art of Inivisibility - for inspiration. Get more sleep.

[tepid patio]

Rust is crazy fast 😮 https://twitter.com/bee_sec_san/status/1453317350258790405

︎ ︎0xbee.eth D_D 🐙 (@bee_sec_san)

Ciphey vs Ares, preliminary test. 9 decodings nested :)

Ciphey:
4.7 seconds (warmed up)

Ares:
13 milliseconds (warmed up)

The difference is astonishing. The next generation of automatic cipher crackers is going to be amazing 🔥🔥

Twitter · Oct 27, 2021, 11:07 AM

[topaz gulch]

You may wish to advertise that in the HTB server instead :)

[remote wind]

https://github.com/swanandx/rustywitness Tool for taking screenshot of websites, like gowitness (more similar to webscreenshot.py) written in Rust!

currently, just slightly faster than gowitness, like around 5 seconds

for ~15 urls

[broken burrow]

I know what I'm learning after solidity.

[tepid patio]

Haha, if you like solidity check out Solana. It’s a cryptocurrency but with Rust 😊

[glacial gazelle]

or maybe THM can sponsor too :)

actually, do THM sponsor many ctfs?

[broken burrow]

I've seen it about and was gonna try it later. Learning sol for now to attempt some smart contract ctfs.

[topaz gulch]

They do, yes, but that isn't a request for sponsorship -- it's an advertisement for an already-running CTF 😆

[glacial gazelle]

yeah I know

I was more just asking generally

I rarely see their name of prize sheets, when HTB seem to appear everywhere

[broken burrow]

Perhaps because HTB is seen as more of a practice ground and THM is more for learning. I think it's assumed that CTFers have the basic knowledge? Idk

[topaz gulch]

THM tends to do things like Diana initiative, plus another few similar ones.
Remember HTB also got given what, 11 million, to distribute as sponsorships to CTFs?

[tepid patio]

make a flash loan attack 😉 they're rather fun and require economic undertanding to exploit, as well as code exploits 🙂

[broken burrow]

I will! It's on my list along with re-entrancy and a few others. The goal is to get all the common ones down. Thanks though!

[odd sinew]

Gave +1 Rep to @tepid patio

[glacial gazelle]

shit really?

was that government funded or something

I didn't hear about that

[light crystal]

https://github.com/Zeyad-Azima/Offensive-Resources

[tribal gull]

They got 11 mil in series a funding. It wasn't for sponsorships, just a general investment in the company.

[icy marsh]

https://github.com/sootier/403bypass

Cool 403 bypasser with a big effort on UX

If anyone has any suggestions or opinions feel free to DM me or just tell me here

[odd quest]

You're using a LOT of global variables. You should be passing those as parameters, especially URLs/ports etc.
Big ASCII banners have a lot of accessibility impact, damages UX horribly for screenreaders.
Variable names could be improved, and they're not PEP8 compliant.
You don't have a final else in your if elif block in banner() or main(). Also weird to use os.system() there when you could be using input(), makes it non-portable.

You could also swap to requests rather than urllib, it has a much more friendly interface for programmers

[icy marsh]

For this one I simply couldn’t in order to keep the script shorter since I’m brute forcing http methods and I can’t do it using requests without import the api which seemed like a headache

[icy marsh]

Thanks alot tho

[odd sinew]

Gave +1 Rep to @odd quest

[odd quest]

You're brute forcing methods? requests has get and put and patch and stuff so where's the issue?

[icy marsh]

I’m using way more and I want it not to be like 15 lines of just the requests

[topaz gulch]

Oh Jesus, yeah, if you're using globals like that, just go OOP...

[tepid patio]

Think about "designing to do one thing". Each function is meant to do 1 thing, each class is meant to do 1 thing, each file is meant to do 1 thing (even if those things grow "bigger" the higher up you go) 🙂

I'd sep it into files so it's easier to navigate

I would also pin your versions in https://github.com/sootier/403bypass/blob/master/requirements.txt. One day one of those may upgrade and break your program 🙂 By pinning them like requests=0.6.0 you ensure it will always work and won't break due to unexpected upgrades 😄

[icy marsh]

I changed it a bit if anyone wants to take a look again, I did leave two functions with quite some globals but I removed quite a bit aswell and I think it would look worse to have tons of parameters on a function that is being ran quite a bit of times {banner func)

[icy marsh]

Thanks so much for the feedback!

[odd sinew]

Gave +1 Rep to @tepid patio

[icy marsh]

@hushed estuary

[shut ferry]

https://leanpub.com/b/theindiepythonextravaganza/c/pytober

These guys are providing free Python ebooks until the 31st

[wet spruce]

https://dfirdiva.com/

[dreamy parrot]

Nice. Thank you. I’m just starting to learn Python, so this is timely.

[odd sinew]

Gave +1 Rep to @primal onyx

[shut ferry]

@odd quest another one kek

[odd quest]

@topaz gulch totally new link

[topaz gulch]

Yep so I see

-undelete -a

[balmy sun]

https://twitter.com/_nwodtuhs/status/1454049170243952640?t=zZP_H-H_DsSf5nWzPOl8Pg&s=19

Shutdown (Charlie BROMBERG) (@_nwodtuhs)

[thread 🧵] this is a sub-thread about Kerberos Constrained Delegation (KCD) and abuse scenarios.

Likes

165

Twitter · Oct 29, 2021, 11:35 AM

[shut ferry]

https://www.youtube.com/watch?v=4d-qmWLt90E Would recommend this video if you are new 🙂

[shut ferry]

Sure thing!

[night ether]

https://www.learndmarc.com/ @fast wraith this site looks quite nice

[craggy onyx]

You might also enjoy https://dmarcian.com/dmarc-tools/ 🥳

[night ether]

ooh that’s quite cool too thanks :D

[odd sinew]

Gave +1 Rep to @craggy onyx

[fast wraith]

ooh nice that is pretty spot on

[light crystal]

The best thing you can do is forget about there being any sort of "pathway" or secret knowledge you're missing out on.
Learn everything you can about IT.

• metastable state

[shut ferry]

I'm looking for some good learning resources (books/courses/videos) related to IOT security. Does anyone have any recommendations?

[craggy onyx]

Check out IoT Security: Advances in Authentication 🙂

[shut ferry]

Thanks @craggy onyx

[odd sinew]

Gave +1 Rep to @craggy onyx

[shadow imp]

looking for good resource about msfconsole, anyone have?

[odd quest]

Metasploit Unleashed?

[balmy sun]

Good list of certs https://pauljerimy.com/security-certification-roadmap/

(interactive)

[plain wagon]

That's already in the pins I believe but it is pretty good

[shut ferry]

https://medium.com/@dpmcclurg/netcat-hyper-v-and-the-windows-subsystem-for-linux-3f9dc611b58e

[normal hazel]

Good afternoon !! Newbie, here::🍴

[fast wraith]

think I know what my next hardware project will be, always wanted to look into LoRa
https://makezine.com/projects/armachat-lora-communicator/

[shut ferry]

Anyone have a resource for scripting filling out job applications?

I know there's some for scraping sites like Indeed with BeautifulSoup but was wondering if theres something similar with maybe filling out applications with Selenium?

[tepid patio]

Why?

https://mikehudack.substack.com/p/a-product-management-reading-list also this is great for product managers

[broken burrow]

I think they want to spray and pray.

[tepid patio]

😦

[shut ferry]

Eh not really, it’s more like when you apply in like Indeed/LinkedIn, and you put in your resume and then it still asks you to put your entire work history into the job application

It’s mad annoying and mad time consuming

[fast wraith]

probably not worth the hassle of adapting the script to all the various job boards that could pop-up, it takes like 5 extra minutes max to fill out that information manually provided your resume is formatted properly

also, if every application you send in is via the company website - you are doing something wrong, you should ideally be passing off your resume directly to hiring managers first

sometimes they'll come back and tell you that you have to fill out the company application first, thats fine but at least you're on the radar at that point

[shut ferry]

Thank you very much for these tips

[odd sinew]

Gave +1 Rep to @fast wraith

[jagged tiger]

^^^ That's why social networking is so key. It's really easy for a hiring mgr or recruiter to ignore things from people they don't know anything about

[shut ferry]

Would you connect with them via LinkedIn?

[jagged tiger]

IMO LinkedIn is hot garbage. Local meetups, SIGs, conferences, school, and work are where I met my most valuable contacts. From CISO down to admins, devs and soc analysts.

[shut ferry]

gotcha, understood

SIGs?

[jagged tiger]

Special Interest Group

[shut ferry]

gotcha, thanks for the insight @jagged tiger

[odd sinew]

Gave +1 Rep to @jagged tiger

[light crystal]

https://www.varonis.com/free-security-training/

[shut ferry]

If any of you got some servers and want to selfhost something

https://github.com/awesome-selfhosted/awesome-selfhosted

[pure schooner]

https://tenor.com/view/gojo-gojo-satoru-jujutsu-kaisen-gojo-smile-jujutsu-gif-18819303

[young juniper]

Hey

Hey

Anyone here knows a katoolin working repository

Most of the repos ...they use that key server that is gone down and other ones dont work with it

Please I'm currently on my ubuntu and want kali repos ...is there any other way than katoolin?

[foggy kindle]

https://miloserdov.org/?p=3609

You could try that.

Otherwise just download the tools you need on Ubuntu

[neat pine]

is there somebody who can tell me if its possible with amass to display the running service on a subdomain? struggling with it since yesterday...cant believe that there is no option for it :/

[odd quest]

Subdomains resolve to an IP like a domain does

So scan the IP?

[neat pine]

yes yes...i was just wondering about if amass is able to do that in one step right away...scan the domain for subdomains and give the subdomains back, INCLUDED the versions...i wrote a script to do it with python and nmap afterwards (nmap -v and so on). but if there is the possibility to do that within amass with a parameters seems more logic so i am searching if there is such a way to do it...

[odd quest]

Scanning for subdomains is a pain
It's either brute force, zone transfer, or dorking

[broken burrow]

https://www.sentinelone.com/labs/tipc-remote-linux-kernel-heap-overflow-allows-arbitrary-code-execution/

[supple adder]

Zone transfer?

[odd quest]

Zone transfer.

[shut ferry]

https://youtu.be/8I21RlpKWbc

[fickle mulch]

is it useful for cyber security?

[tepid patio]

deviant ollam is so good

ty

[balmy sun]

https://twitter.com/kellthenoise/status/1457792337539600385?t=DaWNFet1-QAdub1Nc8n_Uw&s=19

Kelly Villanueva (@kellthenoise)

Here are some Kerberos visuals to describe authentication/authorization and their offensive scenarios
Here are some of the acronyms I used:

• Ticket-Granting-Ticket (TGT)
• domain controller (DC)
• ticket-granting service ticket (TGST)
• krbtgt (Kerberos ticket-granting service)

Likes

126

Twitter · Nov 8, 2021, 7:29 PM

[odd quest]

Anyone have something about fully tearing out Defender on 21H1?

https://www.alphr.com/delete-windows-10-defender/ gonna give this a go

[prime mantle]

oh shhhhhisssh that's super damn awesome!

I am surprised at every minute of information in this video, it's just so so info-packed

@shut ferry thanks! didn't know I needed this, but it's pretty damn good

[odd sinew]

Gave +1 Rep to @rapid eagle

[shell cypress]

https://github.com/nomi-sec/PoC-in-GitHub

[tribal gull]

https://twitter.com/gynvael/status/1457647304127750145

Gynvael Coldwind (@gynvael)

If you're just starting in programming/infosec, here's a list of obvious and less obvious things you can put on your CV - a 🧵

Some of these things can be done in a week and might improve your CV.

Did I miss something? Please add to the thread.
And RT so it helps more people :)

Retweets

151

Likes

425

Twitter · Nov 8, 2021, 9:52 AM

[shut ferry]

If any1 of you want to practice their AD skills

https://github.com/WazeHell/vulnerable-AD

[light crystal]

thek society

but i still het u

[shut ferry]

[icy geode]

hi everyone

Just sharing

https://www.sans.org/cyber-security-training-events/pen-test-hackfest-2021-live-online/#agenda

it's free

[tender mauve]

Wait you guys threw it into this tab, after saying it was 'too much' information when I posted it 😆

[broken burrow]

Lau is not us and this list has been known by many prior to you posting it.

[tender mauve]

Bold claim. Gotcha

[hushed estuary]

https://youtu.be/MGt-DpYf30g Tips for countering impostor syndrome (in French from Devoxx FR 2021)

[orchid basin]

Good website to make resumes for little effort

https://resumake.io

[gloomy badger]

For those who are applying or have interviews coming up, I found these articles useful!

https://www.ukcybersecuritycouncil.org.uk/news-insights/blog-posts/competency-based-questioning-part-1/

https://www.ukcybersecuritycouncil.org.uk/news-insights/blog-posts/competency-based-questioning-part-2/

https://www.ukcybersecuritycouncil.org.uk/news-insights/articles/competency-based-questioning-part-3/

[south marlin]

Ian Neil published his Security+ SY0-601 study materials for free.
https://securityplus.training/

[nova current]

Credits Certification Station
Free threat hunting training at 1100 EST (10 hours from now). Can partake live and get a certificate of completion, or register and watch the recorded session later and do the same training, just with no certificate.
https://www.activecountermeasures.com/cyber-threat-hunting-training-course/

[fast wraith]

This was yesterday, I took the class

[nova current]

Oh. Looks like I posted very late. How was the class?

Sorry I mistyped the question

sir

Looks like I missed your class :(

[fast wraith]

Very good, I've taken it twice before, this one in particular is the updated course which is why I wanted to check it out - used to be 4 hours

[nova current]

That was Great. I am very curious to learn from your course.

I am very glad that I was speaking to the instructor of that course 🙂

[fast wraith]

I'm not the instructor lol, sorry for the confusion

[nova current]

Np 🙂

[shut ferry]

https://github.com/sickcodes/Docker-OSX

[broken burrow]

Awesome! Thanks

[odd sinew]

Gave +1 Rep to @spare finch

[jagged tiger]

Doesn't that break Apple TOS for the OS?

[shut ferry]

Anytime

[shut ferry]

Given its popularity I think Apple / GitHub would have take it down way before but I may be wrong, I don't exactly know their ToS

[broken burrow]

Better fork it just in case.

[shut ferry]

I starred it but yeah we never know :p

[nova current]

Hackerone
Calling all hackers! HACKtheMACHINE hosted by US Navy and powered by FATHOM5 and Booz Allen Hamilton, launches TOMORROW! With 3 tracks and up to $90k in prizes, the event offers bug bounty rewards and competitions to test your cyber skills. Register before it's too late! http://ow.ly/hO5C50GO0fi

[broken burrow]

Those categories are really exotic.👀

Except data science

[nova current]

Yup

It looks really awesome

[tepid patio]

for my k8s friendos https://www.cncf.io/announcements/2021/10/13/entry-level-kubernetes-certification-to-help-advance-cloud-careers/

[glacial gazelle]

https://twitter.com/freddie0x1/status/1460232332112240642

Freddie (@freddie0x1)

If you're in a docker container and wget/curl/python aren't installed, you can just use bash sockets and cat to easily transfer files.

Twitter · Nov 15, 2021, 1:04 PM

wow, really useful post from this random guy I found

definitely recommend following said person

[fringe spire]

DAMN i wonder who that mad lad is 🤔

[topaz gulch]

You'll often be better encoding it before transfer, just fyi

It's usually fine, but if it happens to corrupt (and you don't bother taking a hashsum / don't have the tools to take a hashsum), you're gonna have a hell of a time figuring out why

This is literally the reason why base64 encoding exists

Also helps evade network monitoring, although you may need something stronger than base64 for that

[broken burrow]

I need to meet this genius and give him a thank you.

[odd sinew]

Gave +1 Rep to @glacial gazelle

[glacial gazelle]

@topaz gulch base32

[glacial gazelle]

@fringe spire dunno but you should definitely like and retweet this mad lads tweets 😏

[fringe spire]

[tribal gull]

Compress it

[fringe spire]

Type each letter manually 😄

[balmy sun]

I'm not us?

[broken sedge]

hello, any resources on how to approach benchmarking and implementing a security/pen testing strategy for a platforms + infrastructures ?

[supple adder]

If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio*" folder, you can bypass Defender and dump LSASS. https://t.co/Vk8vPYFTPC

[topaz gulch]

Neat trick, although both writing to a Program Files (x86) subdirectory and dumping LSASS require SYSTEM/Admin rights anyway (i.e. making it easy to bypass defender in a dozen legitimate -- albeit potentially louder -- ways)

[supple adder]

👍🏿

[odd quest]

Immediate subdirectory, perhaps.
Steam installs games there, they don't need admin often

[topaz gulch]

Not in this directory tree certainly

Read/Execute

[broken burrow]

BlackBerry released a book on cyber threat intel today. Completely for free. Deals mainly with Cobalt beacons from my scroll through.
https://blogs.blackberry.com/en/2021/11/all-your-beacon-are-belong-to-us-new-blackberry-book-cracks-code-of-cobalt-strike-threat-actors

Now you know why they stopped making phones. 😉

[spiral zodiac]

Yea, I already got a copy

[supple adder]

Whenever you end up on Okta login, click on "Need help signing in" just to see if there is any link to their internal wiki or helpdesk. I ended up on an IT helpdesk which had "Sign Up" enabled and got access to internal docs, passwords & what not. #bugbountytips https://t.co/W6yMm1pJLc

[glacial gazelle]

https://twitter.com/freddie0x1/status/1461008772634234892

Freddie (@freddie0x1)

Start a python HTTP server on ports under 1000 without sudo:

sudo setcap 'cap_net_bind_service+ep' $(readlink -f $(which python3))

Twitter · Nov 17, 2021, 4:30 PM

more self-promo

but for boot2root machines, so might be helpful here

[broken burrow]

You make me want to steal those tweets.😂

[glacial gazelle]

(this isn't anything new, capabilities have probably been around for longer than I've been alive)

just haven't seen many people here use them before

[violet tide]

https://github.com/Yash114Bansal/PyIntruder

[supple adder]

Guys what is Cloud storage bucket used for

[broken burrow]

You answered it yourself. Also sounds like a google question

[supple adder]

Yeah

[fast wraith]

https://github.com/3CORESec/MAL-CL

[sand parcel]

https://portswigger.net/web-security/certification burp suite certification is 9 USD currently

[odd quest]

Note: requires full license of burp pro

[broken burrow]

You can use the free trial.

[glacial gazelle]

nah, unfortunately you can't

I'll get the email real quick

[broken burrow]

It doesn't specifically state that anywhere. Hmmm...email? 👀

[glacial gazelle]

when I asked

[broken burrow]

Because from what I've seen, you could even attempt it without the license. You'd fail of course though. One of them even mentioned that they don't monitor it. You just need access to a valid license

[glacial gazelle]

Oh right, well by all means give it a go

the support email suggested otherwise

but it's only like 9 bucks, so is there any harm in trying?

worse that can happen is you pay the money, then you get to the exam and they decline you

which from what you said sounds unlikely

[broken burrow]

Mhm. It is 9 dollars so @sand parcel our guinea pig will do it and tell us how it goes lol

[glacial gazelle]

apparently it's rather hard...

I've heard that from two sources now, the 3 hours just isn't enough time

[broken burrow]

That email is vague and this whole thing is confusing because I've checked all the faqs, website info etc and it doesn't specifically state that you can't use the free trial

[broken burrow]

RIP. People have passed it though. Maybe the difficulty and the rep of Portswigger will make it valuable in time.

[glacial gazelle]

yeah, and it's very cheap now so I don't see the harm in attempting it

have you spoken to anyone who's passed?

[broken burrow]

Not yet but I could. Just need to go hunting lol

Easiest place to find them is LinkedIn

[glacial gazelle]

ah right, looks good cheers

[topaz gulch]

Oh, that's easy if they don't monitor it then.
I have my own version of collaborator on a VPS, and Adam made one for THM too which is on his github and easy to deploy :kekw:

[barren vault]

https://twitter.com/0dayctf/status/1461397727850512394?s=21

Ryan M. Montgomery (@0dayCTF)

PyIntruder - Extremely Fast Intruder Replacement

Repo: https://t.co/yRSaq4SLvu

Creators: @yash114bansal & @SagnikHaldar1

#infosec #bugbounty #bugbountytips #CyberSecurity #burpsuite #intruder

Twitter · Nov 18, 2021, 6:15 PM

[wet spruce]

https://www.humblebundle.com/software/cyber-security-for-hackers-and-developers-software?hmb_source=humble_home&hmb_medium=product_tile&hmb_campaign=mosaic_section_6_layout_index_3_layout_type_twos_tile_index_1_c_cybersecurityforhackersanddevelopers_softwarebundle

https://github.com/0x90n/InfoSec-Black-Friday

[shut ferry]

https://twitter.com/hackinarticles/status/1461728848509227008?s=20

Hacking Articles (@hackinarticles)

Best of Nmap Cheatsheet (Part 1)

#infosec #cybersecurity #pentesting #ctf #oscp #cheatsheet #redteaming #nmap

Likes

214

Twitter · Nov 19, 2021, 4:11 PM

A Nmap Cheatsheet

[simple juniper]

https://github.com/corkami/collisions

[wet spruce]

https://www.eduonix.com/cybersecurity-edegree

https://www.eduonix.com/mighty-cybersecurity-bundle

[simple creek]

Hey!
Does anyone here know how many days(maximum) would one have to give the Burp cert after purchasing it?

[broken burrow]

12 months

[simple creek]

Thanks!

[odd sinew]

Gave +1 Rep to @broken burrow

[marsh grove]

I was told by email I could use the free trial version, but it's not recommended since "some users faced difficulties during the exam".

[stoic field]

https://github.com/xbufu/adlab

[broken burrow]

What's the harm in doing it for 9 bucks?

[broken burrow]

I see someone's active again.👀

[stoic field]

yeah little bit, mental state slowly improving x)

[broken burrow]

Awesome seeing you back around regardless. OSCP done?

[stoic field]

Yeah some time ago already. Got CRTP in the meantime as well, prepping for CRTE now

Hows it going for you?

[broken burrow]

Nice nice. I'm trying to save up for oscp. Taking any odd jobs I can to make it work. I've got an interview for a contract tomorrow so hopefully I land that one. I'll have more than enough to buy the course if I do land it.

[stoic field]

Oh nice 😄 You'll get it for sure!

[broken burrow]

I sure hope so.😄

[light crystal]

https://grow.google/intl/en_in/certificates/?utm_source=HPP seems interesting

[marsh grove]

None. I honestly can't see what kind of difficulty could arise from doing the exam with the free trial version. By the way, they increased the time from 3 to 4 hours.

[fast wraith]

good list
https://github.com/0x90n/InfoSec-Black-Friday

[shut ferry]

https://www.flaticon.com

networking icons 😄

and other icons

[dense acorn]

If anyone's still editing /etc/hosts with vim/nano – you deserve better! hostsed

[jagged tiger]

this seems like a very unnecessary tool

[azure widget]

So it’s echo? But it only has one use?

[orchid basin]

It’s probably more annoying to use for CTFs too if you end up discovering a new vhost midway through since it doesn’t seem like there’s an option to edit an existing entry

Also, why are there 4 different aliases for the same function? I don’t mean to dunk on this too hard, because it was probably created with good intent, but this is excessive.

[jaunty pulsar]

alternatives for https://letsdefend.io/

[fast wraith]

awesome course, $10 is a steal - great for people looking to step up their networking and pivoting a bit
https://opsdisk.gumroad.com/l/cphlab/blackfriday2021

[orchid basin]

75% discount for students 👀

[honest raft]

Hi

[azure widget]

https://www.graplsecurity.com/post/kernel-pwning-with-ebpf-a-love-story

https://iximiuz.com/en/posts/container-learning-path/

[simple juniper]

https://youtu.be/GMNOT1aZmD8

[halcyon ridge]

Is there a way to get a version of openvas that is 100% compatible with a known kali version?

not really sure where to ask this room seemed like the right place

[tepid patio]

https://github.com/bee-san/pyWhat

[shut ferry]

resources for beginners?

helo?

[glacial gazelle]

@shut ferry check in #start-here or in the pinned messages I guess

[shut ferry]

cool

[orchid basin]

Any time I've used OpenVAS, I've always run it in a docker container. I would not straight up install OpenVAS on Kali without a container imo

Keeps things cleaner, you don't want 100 different installs of tools you've only used once to bloat your machine.

[jagged tiger]

OpenVAS should be treated as an appliance, whether installed in a VM or on bare metal. Regardless, when I've installed OpenVAS, I always use a stable supportable OS as the base. Usually that's the version bundled with Greenbone OS as it is less messing about to get it working.

their website has fairly recently had a change to make it much less usable, though

[halcyon ridge]

I should have specified that my problem is more along the lines of getting postgresql to start on the designated web port 9392 or something along 9000s they may have more than just one don't quote me on that. Everything else works fine or rather was tweaked to work I am just curious because this seems very how would you say it...disorganized as each small tweak or detail can throw off the whole software solution, with that in mind does anyone actually use openvas like today or these days I get the feeling most people would just use exploitdb or something easier to maintain?

[digital lichen]

anyone know's how to create virtual machine like attackbox

[shut ferry]

Guys I need help devoloping a kernel exploit for windows any resources you would recommend

[odd quest]

1. Install Linux, AttackBox uses ubuntu but Kali will be easier for step 2
2. Install cybersec tools

[shut ferry]

Anyone,??

[broken burrow]

Not to be a discouragement but if you're asking us that question then you're probably nowhere near capable of doing so. I've never done anything like that before but a good place to start would be learning assembly and getting low level with a computer, reverse engineering, writing shellcode and looking at existing kernel exploits.

[digital lichen]

I have kali installed, what I want is attackbox like GUI.

[odd quest]

They're both XFCE

I'm sure you can find out how to do things with some googling

[keen thunder]

Hey guys is there any resources regarding hardware hacking in THM. Looking for the basics then building my way up. Looked at some LiveOverflow videos (GOLD). Mostly there are lectures on this which doesn't make me feel awake. Anywhere I could try them online?

[broken burrow]

This is all I know that relates to it tbh.
https://microcorruption.com/login

There are also a couple of No Starch press books on the subject that could be worth looking ay

[broken burrow]

Might be worth taking a look at Azeria Labs too
https://azeria-labs.com

[keen thunder]

Thanks for the info! I already had a look into the micro corruption. Will take a look on the books

[odd sinew]

Gave +1 Rep to @broken burrow

[topaz gulch]

@serene fossil and how exactly is that a useful resource?

[serene fossil]

ok nvm I thought it was a nice article. but apparently it is not appreciated. I couldn't care less.

[topaz gulch]

I mean, what reason could you possibly have for needing to know how to hire a black-hat hacker?

More to the point, what reason could everyone else in here have to do so?

[serene fossil]

Jesus I get that you want to be important. But I don't care. I thought it was a nice article that's all. Well I'm going to get on with my life. Success with it!

[topaz gulch]

Charming 🙂

[night holly]

He’s rekt you there lad

[gleaming wind]

nice resource

[spiral zodiac]

good read http://phrack.org/issues/66/10.html

[sterile frost]

http://www.mathsisfun.com/numbers/binary-count-fingers.html

[odd quest]

Did you paste the wrong thing?
Did you mean for that to be two links?

[sterile frost]

thanks for the heads up, copied a second one that I didn't mean to post

[regal pilot]

Humble Bundle - Hacking eBook Bundle
https://www.humblebundle.com/books/hacking-by-no-starch-press-books

[fast wraith]

pretty interesting write-up on COM tradecraft
https://medium.com/maltrak/com-objects-p-1-the-hidden-backdoor-in-your-system-947ac4285e85

[ripe wasp]

Does anyone have a Windows XP VM for practicing Pentesting/metasploit on?

[floral vapor]

https://www.pearsonitcertification.com/promotions/happy-booksgiving-buy-2-save-55-on-books-and-ebooks-142353

[sterile frost]

I think I got mine from Windows a long time ago, but I'm not sure what a Google search would yield today

[solemn socket]

if you happen to use unraid there's an xp vm option to install

[fast wraith]

talk on breaking into Threat Hunting from Active Countermeasures coming later today
https://attendee.gotowebinar.com/register/4497991437362184208?source=thc

[south marlin]

https://www.contextis.com/en/blog/xslt-server-side-injection-attacks

[shut ferry]

If you somehow can get hold of a visual studio code license, you can get access to the XP .iso and license keys. Otherwise...I can't really think of any other way :/

Oh man this is great! Thanks

[odd sinew]

Gave +1 Rep to @ripe wasp

[odd quest]

@ripe wasp @shut ferry Licensing on that is technically not legit. Deleting it.

[ripe wasp]

https://tenor.com/view/nice-christian-bale-patrick-bateman-american-psycho-good-gif-18161424

[broken burrow]

Was that the MacOS docker thing?👀

[shut ferry]

nono the windows xp vm that came with internet explorer to test dev on it

microsoft pulled it out and now you can only get those starting from windows 7

[broken burrow]

Ah rip

[shut ferry]

Still haven't tried it though, I will some day

[broken burrow]

Same

[shut ferry]

Does anyone have any recommendations for a good way to obtain Security+?

[jagged tiger]

Study hard and pass the exam.

[golden gyro]

Professor Messer. He has free videos and is enough for most people.

[shut ferry]

Thank you!

[vestal swallow]

Can somebody suggest me a good resourse to start web app pentesting ?

[halcyon forum]

Is HTS still a thing, its what i used way back when.

[shut ferry]

Web Application Path at https://tryhackme.com

[shut ferry]

Webgoat

https://owasp.org/www-project-webgoat/

[atomic yoke]

Portswigger academy

[vestal swallow]

Thank you so much for this. It really helped me.

[odd sinew]

Gave +1 Rep to @atomic yoke

[prime mantle]

those trying to write a good resume:
https://ocs.fas.harvard.edu/files/ocs/files/undergrad_resumes_and_cover_letters.pdf?m=1598037165

It's a handout to Harvard grads from what I know, I could be totally wrong, but hey, the doc is really nice.

[shut ferry]

I can swear there's a famous super upvoted post in Reddit by a ex recruiter guy who shared exactly the same format. (Yeap! https://www.reddit.com/r/jobs/comments/7y8k6p/im_an_exrecruiter_for_some_of_the_top_companies/)

[prime mantle]

damn, plagiarism or what lol

very similar content

either way, I just went through it, and felt that the Harvard doc is clearer to understand, whereas the Reddit one is kinda more like a human telling the approach, so depends on personal preference in the end.

[frosty rune]

I'm gonna ask for these 18 books for christmas, have any of you read at least one of these on the list? They seem useful/interesting.
https://www.humblebundle.com/books/hacking-by-no-starch-press-books?utm_campaign=07_0562&utm_medium=paid&utm_source=facebook&utm_content=2021_hackingbynostarchpress_msrp&utm_term=2021_hackingbynostarchpress_book_bundle_mobile&fbclid=IwAR2KXfZTp6ZlZW00qY18E6lWHlvTg10hFS1xxn8IXKfMityQGyp5cAiwqWE

[atomic token]

I have that bundle

If you're pretty new to everything they will have some helpful stuff

[frosty rune]

Thanks! I still have a lot to learn so I hope this will be useful

[odd sinew]

Gave +1 Rep to @atomic token

[frosty rune]

Got 'em!

[median meadow]

anyone who can help me bypassing file upload?

[fringe spire]

is that for HTB challenge?

[shut ferry]

Can anyone recommend good discord servers where writeups are posted related to bug hunting and Pentesting? Searching on medium is sometimes just exhausting

[night ether]

https://tryhackme.com/room/uploadvulns
https://book.hacktricks.xyz/pentesting-web/file-upload

[median meadow]

ya had some issus, but ive done it already

thank ya tho ^^

[fringe spire]

would recommend asking in the relevant discord though.

[median meadow]

my question wasnt related to any platform, it was about the method but yea, thank you anyway.

[odd sinew]

Gave +1 Rep to @fringe spire

[urban badge]

hackerone

If you have an account you can read the latest published bounties

Most of the time including pocs and stuff like that

Could be overwhelming at first tho

A lot of the hunters link there blog post related to the bounty in there to get a bit more explaination

[shut ferry]

https://www.blackhillsinfosec.com/webcast-getting-started-in-pentesting-the-cloud-azure/

[wet spruce]

check out

[hoary canopy]

hi, what is a nice tool for keeping notes? (for attacking machines)

[topaz gulch]

I would suggest Cherrytree for notes on specific machines, and Trilium for general notes 🙂

[hoary canopy]

looks nice, thank you very much 🙂

[odd sinew]

Gave +1 Rep to @topaz gulch

[sweet mountain]

obsidian

[topaz gulch]

Notion you're at the mercy of the company not going down, but it's very pretty. Obsidian your notes are stored in plaintext markdown on your hard drive, so good luck when you start writing notes that trigger AV

(Spoiler: AV deletes them for you)

[sudden fern]

can't you just mark that folder for exclusion for the AV though??? even though that might be a security risk

[topaz gulch]

Yes, but then where do you think I'm storing my payloads if I compromise you?

[sudden fern]

/dev/shm probably

but yeah if you can figure out what folder is excluded form the antivirus when hacking a machine that is a great spot to store payloads

[topaz gulch]

Get-MPPreference

Problem solved

Have the stager find the excluded directory, save all later stages there.

And you use AV on Linux..?

[sudden fern]

clamav

for files shadow shares with family and friends

so in a way both yes and no to that question... it is part of daily scan as long as shadow don't have that disabled... which they currently have

[prime mantle]

Just dropping this here as the conversation is relevant, I saw this few weeks back in random GFeed, the app looks nice and is opensource. https://github.com/AppFlowy-IO/appflowy

Very much like notion

rip-off but yeah

[azure widget]

Here just use one of mine.

you just mad Obsidian is better

[shut ferry]

https://cryptohack.org/challenges/ (Dropping this here so it's not lost in the general chat)

[broken burrow]

Made by the same guys that made embedded security ctf. Fun

[tribal gull]

idk that doesn't sound right, got any source? 👀

[broken burrow]

I remember finding mentions on their that they made it after cryptopals? I can't remember.

[tribal gull]

cryptopals != cryptohack tho

[shut ferry]

MysteryTwisterC3 also cool

[tepid patio]

this is 8super* cool!!!! https://www.reddit.com/r/tryhackme/comments/r9xjep/quizlet_for_the_full_presecurity_path/

[atomic token]

Cryptohack, cool

Cryptopals was awesome

[fast wraith]

https://teachyourselfinfosec.com/

[shut ferry]

damn why windows gotta be so hard to learn how it works

[azure widget]

Really isn’t

[untold bramble]

Here a article from me about broken link hijacking 🙂 https://proviesec.medium.com/broken-link-hijacking-what-it-is-and-how-to-get-bounties-with-it-ca64db6a3f74

[fast wraith]

new drive-by attack via Windows URI handler, great write-up on bug hunting methodology too
https://positive.security/blog/ms-officecmd-rce

[sterile gale]

Hey guys just wanting to know if there are any good guides on Red Teaming that assist in stealth when perform enumeration

more so IT/network enumeration not physical

[uneven flume]

Can you guys please fill out this google form, its for a school project

[broken burrow]

A lot of people would be happy to if they knew what it involved

[odd quest]

@uneven flume Please ask for permission before sending survey links

[uneven flume]

who do I ask permission to?

[odd quest]

A mod here. Not by DMing them though.

[uneven flume]

basically the survey just asks a bunch of questions about what you look for when buying a laptop

[uneven flume]

can I just ping them?

[odd quest]

I'm one.
What class is it for?
Have you had an ethics review done?

[uneven flume]

its for a JOT case competition

[odd quest]

A what?

[uneven flume]

its for a friend, she's writing a report about laptop companies

[uneven flume]

Basically its an extracurricular that focuses on business

she's writing a report

and she wants data

also wdym by an ethics review?

[shut ferry]

Hi guys! Now that Active Directory has become part of the OSCP I've written a guide on how to setup a lab for pentesting. This is just the setup, nothing about the vulnerabilities, but I'm expecting to cover some typical attacks in the following days.

If any if you finds it useful, then I'm happy!

https://shroudri.github.io/guides/setting-up-active-directory/

[faint sluice]

I have been collecting resources and wrote down some AD resources including THM rooms and other things that can be used to practice AD https://github.com/zjja/Cyber-Notes/blob/main/Learning/Active_Directory.md

[fiery bear]

https://twitter.com/cyberdefensemag/status/1468711998934368262?t=pZdhpKmKbLDCUjYyIud8eg&s=19

CyberDefenseMagazine (@cyberdefensemag)

@cyberdefensemag Publisher @miliefsky Linux Security Fundamentals ($24.00 Value) FREE for a Limited Time – Expires 12/14/2021

https://t.co/WfvzOJErye

Twitter · Dec 8, 2021, 10:40 PM

[dark silo]

thm-banner-gif needs translators
https://github.com/OSCAR-WOS/thm-banner-gif

[gloomy helm]

https://application.security/

[olive crypt]

Two word-class experts of security – Paula Januszkiewicz and Mateusz Chrobok -will share their experience on event for tech leaders ‘A stormproof security strategy for your digital product’ on 14th December.
You are welcome to join them!
Take your free ticket here: https://hubs.la/Q010Cpsr0

[fervent parrot]

Roadmap for bugbounty

[broken burrow]

An unbiased look at Web3.
https://youtu.be/wHTcrmhskto

[odd quest]

NGL "Unbiased" and using 4chan templates strikes me the wrong way

[broken burrow]

It's unbiased in that it doesn't push it onto you. Just explains the premise and how it differs.

Then leaves you to form your own opinion. Much better than our mutual friend from a few days back 🙂

[jagged tiger]

Subtitling 'by answering stupid questions' also doesn't indicate lack of bias

[broken burrow]

The creator doesn't mean it in a demeaning way. It's in the same context as when people make self deprecating comments like "This may be a stupid question but..."

[tepid patio]

Russel & Norvig once defined artificial intelligence as "any modern technology". They talked about how all exciting & new tech was classed as AI, even if it didn't fit into the original definition of AI.

I feel the same way about Web3. All new & exciting web technology falls under this banner, even if it doesn't pertain the original meaning 🙂

Exact same thing happened with "Blockchain" in 2017. A lot of tech was named under that phrase even if it didn't need to be or it didn't fit. ICO mania spewed hundreds of scams. If you was a tech company you put "Blockchain" in the name to 10x your valuation.

Then all the silly uses eventually died out, and we mostly reserve blockchain for the real uses (all ledger related, of course. Mostly in cryptocurrencies, logistics, or any application where you need a really strong ledger. AWS has some great real world use cases here https://aws.amazon.com/qldb/customers/?pg=ln&sec=c#Driver_and_Vehicle_Licensing_Agency)

Going even further back, the dot com mania (https://en.wikipedia.org/wiki/Dot-com_bubble) had the exact same thing

People just seem to find a new tech, try to implement it in every single way possible and eventually it finds its use cases 😄 (after all the bad ideas die)

[broken burrow]

That's true. It doesn't discount how interesting learning it is though. 😄

Oh btw Bee, have you played around with WebAssembly and Rust?

[tepid patio]

i have not 😦

i am doing a builspace course rright now haha

[broken burrow]

What? Me too! 😂

[tepid patio]

Ship your own custom NFT collection on Solana w/ Metaplex in a weekend

?

[broken burrow]

Oh that one. I suck at front end so I'm leaving it on the backburner for now but I could sign up for it too

I'm also shitty at Rust haha. Need to sit down and look at the syntax

[tepid patio]

i am also bad at frontend but i plan to learn it

[broken burrow]

I'm also trying to put aside learning React and see if I can do the same project in Svelte instead

Seems easier and better than React

[tepid patio]

react has so mnany blog posts / stack overflows

i think its easier to debug

[broken burrow]

But harder to learn in the beginning perhaps. Web3 in this context just applies to decentralised web apps so maybe we haven't seen much that doesn't fall under it but is classified as web3.

[tepid patio]

I'd class Mastodon as web3

decentralised, giving the power back to users

@broken burrow are u in any DAOs?

[broken burrow]

Not at all. 😆 I'd like to see how they function though.

[tepid patio]

I'm in developer dao, do rec checking us out when we open signups back up (bankless dao is also cool)! 🙂

[jagged tiger]

would you consider microservices to be web3 then?

[broken burrow]

I will! Gonna look it up and watch. What protocol does it run on and do you need to exchange membership tokens with cryptocurrency?

[tepid patio]

depends, can any user run a microservice on your platform? if so then yes 🙂

well

not your platform

a decentralised mesh of microservices anyone can contribute to, then yes

[tepid patio]

dev_dao signup is not open right now, the entry originally was an ERC-721 but we're creating an ERC-720 for people 😄

bankless DAO airdrops you a POAP after 1 month of membership to their newsletter

[jagged tiger]

Is openness a requirement of web3? Instead of say, load balancing across multiple k8s clusters?

[tepid patio]

its not a requirement, but you can't build things without it being in the open. An example is building a video game and having swords in it. Those swords would be non-fungible tokens which would allow any other game to easily import them, and anyone can fork your game and change the code if they would like. It's a public blockchain so openness is baked in 😄

one of the problems a lot of startups face is that people can fork them and just do it better, or you build something and in a weekend there are 500 shitty forks of your startup 😅

[broken burrow]

ERC-720...🤔 I've never heard of that token standard. How does it differ from 721?

[broken burrow]

Or a much better one in a month

Look at what happened to Dapp tools

[tepid patio]

721 == non-fungible token
720 == fungible token

if you've ever used a token (BAT, DAI, USDC, Shiba Inu) you've used 720 😄

[broken burrow]

Paradigm made a faster rust based framework named Forge

[tepid patio]

sorry

erc-20

hahahaha

[broken burrow]

No wonder I was confused

https://www.paradigm.xyz/2021/12/introducing-the-foundry-ethereum-development-toolbox/

[tepid patio]

some startups are designed to be forked and worked on, like Loot project or Sandbox

[broken burrow]

You should take a look at this since Rust seems to be your jam. Uses ethers.rs as opposed to ethers.js

[tepid patio]

ahhh I have great respect for Georgios

[broken burrow]

I have more respect for his colleague, samczun. 😄

Georgios is a beast too though

[broken burrow]

The premise of web3 is a decentralised internet owned by the people not just huge tech giants that control all the information so less censorship, little to no collection of PII and user data and ads unless the user opts in. That doesn't mean everything including sensitive information has to be public as there are off chain solutions for that and nothing sensitive or private should be stored on the blockchain. The video I linked explains it to some degree

[craggy onyx]

Let me throw one in: IPFS

[broken burrow]

Mhm.

[tepid patio]

i think single sign on is the biggest improvement I've seen

super simple to integrate

privacy orientated if u want it

just super simple

[broken burrow]

Ethereum and it's children(all the ones that came after it) also hit home the fact that cryptocurrency isn't meant to replace or really be a competitor to fiat currency. It's meant to fuel the decentralised ecosystem and implement faster transactions without a middle man to restrict the transfer to certain countries/slow them down

Oh btw @tepid patio did I mention that the Foundry actually lets you write tests in solidity not JS or python?

[tepid patio]

oh thats cool!!

i need to do some more non-buildspace stuff

[tepid patio]

from a banking perspective defi can help a lot

fintechs succeed because they are tech based (compare to old banks which are not). it means we have a lot of automation in place that can cut down costs, time and other things to make it better for the user.

defi is the same but for finance, just more automation 😄

https://www.gro.xyz/ is one of my personal faves for this

their tranche system is p/ cool

[broken burrow]

That one seems pretty cool and their security seems great. They even have a bounty up on Immunefi. I'd look at their smart contracts and see if I could get away with a bounty but they've been audited multiple times so I doubt i'd find anything

I can barely finish Damn Vulnerable DeFi as it is haha

[tepid patio]

I’ve never done defi security

I wanna get into hft tbh

So much fun

[broken burrow]

Hft?

[tepid patio]

High frequency trading

[broken burrow]

DeFi/Blockchain security is actually why I've learned blockchain dev

My friends have told me multiple times that I can't audit a smart contract if I don't know how it works. I didn't listen so I found out myself when I everything looked like gibberish in a CTF. 😆

I've started to love dev though

[tepid patio]

Auditing is big big money haha

[broken burrow]

Hm...isn't that just day trading but with a higher chance to lose money?

[broken burrow]

Salary wise, you could start out entry level with about 100 to 150k but I've heard skilled auditors and some freelancers earn over 300k.

[tepid patio]

Well, for a hedge fund preferably

It is basically day trading

You actually get all the money if you’re the fastest lmao

The problem is figuring out how to be fast

Risk free too if you can figure out that

Arbitrage it’s called

I just love the idea of writing code and optimising it and the hardware to be as fast as physically possible

And to play with the real world financial markets

“Flash boys “ is a good book about this

And “flashboys 2.0” is the blockchain white paper exploring this too

[broken burrow]

Flash boys looks suspiciously similar to flash bots

[broken burrow]

So you basically want to create a bot/program that's fast enough to automate this process for you?

[tepid patio]

It’s the same thing haha

[tepid patio]

Yes but the “fast”part is the hardest

It’s really hard to get into it as everyone else has billions

To work with*

Ideally I’d work for a hedge fund or a quant firm

[broken burrow]

Seems like a good project.

I'll add it to my ever growing list

[broken burrow]

Billions of funds?

[tepid patio]

Yeah you can’t be the fastest unless you have enough to invest in. Being fast

An example is laying a fiber optic cable@from one side of the US to the other just to experience 18ms faster latency

[broken burrow]

Of course. I'm assuming there'd be some application of front running when it comes to implementing this in the blockchain world so you'd better have enough gas on hand. 😆

[tepid patio]

Front running is actually a HFT attic haha

Attic

Tatic

You can protect against it in the stock world by using the IEX exchange

Or by trading exclusively in darkpools

Which you can do neither of as you’re not a hedge fund lol

[broken burrow]

👀In a gc a few days back someone mentioned a protocol that offered 5 or so % yields in staked funds every 8 hours so they were thinking about taking out a flash loan a few minutes before the stake ended.

I've not seen it tested but it seems relevant to the discussion.

[broken burrow]

And then staking to significantly increase returns before paying it back.

I'm not sure how flash loans work but it seems like it could work in practice

[tepid patio]

Flash loans exist for 1 transaction block

You’d have to be in the same transaction block as the payout

It’s possible but unlikely to time it perfectly

If you used an oracle to time it too you’d be paying for that also 😦

[broken burrow]

Interesting

[tepid patio]

https://aws.amazon.com/message/12721/

[sterile frost]

https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_10.1_build

[pure heath]

(Log4j Vulnerability in Java) https://www.lunasec.io/docs/blog/log4j-zero-day/