resources

[topaz gulch]

We noticed 😆

-undelete -a

[odd sinew]

Up to 10 last deleted messages (last hour or 12 hours for premium):

5 minutes ago (Sat Dec 11 01:18:04 2021) Wandering Fool#0782 (ID 754136896409567233): 😆 Looks like the weekend is ruined

[topaz gulch]

True

[fathom plank]

https://blog.cloudflare.com/actual-cve-2021-44228-payloads-captured-in-the-wild/

[broken burrow]

Well there goes my room idea.

[odd quest]

Cc @hushed estuary

[hushed estuary]

thanks

looks like ldap is still the primary vector

[hushed estuary]

upgrading Java 8 past u191 will remedy the remote injection path

and java 17 also appears to be immune to both remote and local injection

[sterile frost]

https://coggle.it/diagram/Ya0bMjOIUnwA_6bo/t/enumeration-mindmap

[glacial gazelle]

https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf

cve-2015

[median ore]

wow thanks so much for this resource its very usefull

[odd sinew]

Gave +1 Rep to @sterile frost

[median ore]

this is gonna save me tons of time i already know it haha

[shut ferry]

https://www.youtube.com/watch?v=4tXFHoeOytE

Pretty neat run down ^

[hushed estuary]

I'm going to yoink some of that

[shut ferry]

Now wth is a reverse proxy?

It can be a performance booster for your web server

no kidding

[hushed estuary]

sounds like a googlable question

[shut ferry]

yup just came from it lol

it's pretty cool

sits behind the firewall

[glacial gazelle]

I think I've got a couple of live examples too

although I'd imagine you'd have more than enough

[hushed estuary]

I've got a few pocs

[glacial gazelle]

as in

live demonstrations

actual bug bounties

[hushed estuary]

demos

[waxen creek]

Hi guys.

I am looking for some stats regarding the cybersecurity incidents (like how many times happened, how much money it costs the attacked company, etc) from a trustworthy website that is worth mentioning in my thesis.

I found this website: https://purplesec.us/resources/cyber-security-statistics/ and it has some interesting insights:

The total malware infections have been on the rise for the last ten years
7 out of every 10 malware payloads were ransomware.
Ransomware attacks worldwide rose 350% in 2018.

Do you have any other recommendations for me?

Thank youu

[broken burrow]

https://youtu.be/9iU_IE6vnJ8

[indigo forum]

Hey guys, any good resources to PrivEscalation on Windows?

[broken burrow]

The tryhackme rooms?

[indigo forum]

nah in general

Am looking at this rn-https://book.hacktricks.xyz/windows/windows-local-privilege-escalation

[odd quest]

https://github.com/gtworek/Priv2Admin is one I'd recommend

[indigo forum]

Awesome! Thanks James

[odd sinew]

Gave +1 Rep to @odd quest

[upper pelican]

I personally like this one: https://informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/ It shows the party is not over: more and bigger breaches is the trend

[upper pelican]

What about statistics from ENISA about incidents in Europe? https://www.enisa.europa.eu/publications/enisa-threat-landscape-2020-main-incidents

[shut ferry]

What's the name of the security plus book that everyone recommends?

[pure heath]

I mostly used professor messer's 601 videos to pass the exam, but you could take a look at this two https://www.amazon.com/CompTIA-Security-Study-Guide-SY0-601/dp/1119736250/ref=sr_1_13?crid=1XDHQIMK0TKYE&keywords=security+%2B+601&qid=1639569915&sprefix=security+%2B%2Caps%2C193&sr=8-13 & https://www.amazon.com/CompTIA-Security-Certification-Guide-SY0-601/dp/1260464008/ref=sr_1_7?crid=1XDHQIMK0TKYE&keywords=security+%2B+601&qid=1639569915&sprefix=security+%2B%2Caps%2C193&sr=8-7

Also my local library offers Linkedin learning for free. I used some of the videos from the 601 course as reference. You could check with your local library in case they offer something similar.

[shut ferry]

Oh I haven't heard of that

How long ago did you take security+?

[shut ferry]

I heard there were interactive labs?

[pure heath]

@shut ferry I took my exam Oct 28 of this year. As for the interactive labs I got four on my exam and they were on firewalls/authentication. I didn't really prepare for the interactive part of the test and mostly studied the objective content.

[shut ferry]

Oh OK. Good to know

[pure heath]

Good luck on your exam

[polar fjord]

anyone know good resources for eJPT?

[shut ferry]

INE Starter Pass itself

more than enough to pass eJPT actually

[amber folio]

@sturdy shell hey can I get the files that you used in the ios forensics room ?

It would be of great help to me in performing forensics for my assignment

[broken burrow]

https://youtu.be/N6lYcXjd4pg

[gleaming wind]

Has anyone ever purchased a bundle from ghacks.net? https://deals.ghacks.net/sales/the-2022-premium-comptia-cybersecurity-security-exam-prep-bundle Seems like a "too good to be true"?

[tepid patio]

weekly cybernews recap https://www.reddit.com/r/tryhackme/comments/rii5uz/weekly_cybernews_recap/

[left gyro]

https://www.youtube.com/watch?v=eJulmtgYYlA

Log4js technical aspects and practical demo

[shut ferry]

@arctic mist A humble request for AD part 2 please 🙂

[arctic mist]

I suppose I might be able to do that

[gentle saffron]

Would be interested to know as well

[odd quest]

https://github.com/OWASP/IoTGoat

[sage gate]

@shut ferry This is where you can check out resources to begin your InfoSec learning journey :) Some sources provide free trials like this one here: https://www.itpro.tv/courses/security-skills/

You can also look at what others above posted for more info. Enjoy, friend! Feel free to reach out if you need anything

[pine kindle]

Anyone got a checklist or process they work through when approaching a new challenge/box/target?

[odd quest]

https://owasp.org/www-project-web-security-testing-guide/v41/ is a good one for web?

[shut ferry]

Anyone got any good resource for learning about Link layer in TCP/IP suite? Searched YouTube but couldn't get a structured format.. everything scattered

[sage gate]

If you mean TCP/IP Suite to include oracle, this documentation has a run-down that could help: https://docs.oracle.com/cd/E18752_01/html/816-4554/ipov-6.html
https://docs.oracle.com/cd/E19253-01/816-4554/ipov-10/index.html

[visual zephyr]

How long did it take you to study? And how much time did you give it?

[shut ferry]

Nope. This is just introduction to different models. I want to study all the protocols used in specifically Link layer, the services used, flow, error control protocols.

[pine kindle]

Cheers mate!

[pure heath]

I gave myself four weeks and around three hours of study a day. I would also listen to the professor messer's 601 playlist when ever I had extra time. Such as driving or on a walk.

[left summit]

https://ejpt.ferqwerty.com/

[broken burrow]

https://www.tenouk.com/cnwin32tutorials.html

[restive oasis]

So like the actual standards and design documents of the protocols? https://www.ieee802.org/

[wheat canopy]

https://www.fanatical.com/en/bundle/cybersecurity-bundle

[onyx vapor]

Saw someone mentioning buffer overflows and thought I'd put this in here
edit: just realised it was sent here about a year ago but nonetheless it's worth a read

https://inst.eecs.berkeley.edu/~cs161/fa08/papers/stack_smashing.pdf

[gray vigil]

well it will be of great use to me,so im glad you reminded yourself someone mentioned it!

[rapid urchin]

Does anyone have a free alternative for something like AttackForge? Perhaps something self-hosting from Github

[dawn oak]

Anyone aware of some free resources to learn blockchain as a complete beginner?

[broken burrow]

Depends on what you want to learn. Blockchain is as vague as saying you want to learn hacking.

Maybe not as extensive but broad.

[dawn oak]

i see. i would like to explore it first. if you any good guides for it so it can be explored for various fields

what other sub categories are there?

[broken burrow]

For what purpose? Hacking or developing apps on one or even making one yourself?

[dawn oak]

Idk much. I asked for a friend

I don't have much interest and knowledge myself

[broken burrow]

No problem. Ask your friend what they want in particular.

[dawn oak]

He said he don't have any idea too 😅😂
He just want to learn and see what scope is out there.
I am sure tho he don't want it for hacking

[broken burrow]

Ah well this was where I started.
https://youtu.be/M576WGiDBdQ

[dawn oak]

Ah
Thanks a lot

[odd sinew]

Gave +1 Rep to @broken burrow

[fast wraith]

really interesting study on phishing training within orgs (for those who don't want to click the title is "Phishing in Organizations: Findings from a
Large-Scale and Long-Term Study")

https://arxiv.org/pdf/2112.07498.pdf

[broken burrow]

https://youtu.be/b_IDdQzPRR4

[tepid patio]

buildspace is good

[static grail]

hey, is anyone here following web3, crypto or DAOs? would love to be part of some infosec DAOs, existing ones or anyone interested in learning more & creating a new one. i'm learning smart contract security right now & curious to know how else i can contribute in web3. hope someone point to the right circles please. thanks!

[jagged tiger]

Please do not spam the same message in multiple channels. People will see it if you leave it in a single place.

[static grail]

thankyou, didnt know that

[devout glen]

Is there a list anywhere of well regarded textbooks/documents for cyber security?

[dawn oak]

Will surely checkout!

[broken burrow]

Eeeeeh. Not if you're unfamiliar with the syntax

[tepid patio]

The syntax of what?

Some of the courses are no code 😅

[broken burrow]

Solidity, rust.👀

[tepid patio]

Well they teach you that hahaha

But there’s also no code courses

[broken burrow]

Meh. I found that the first solidity bootcamp thing isn't good at teaching the nuances of solidity so I recommend it as a project thing not for learning.

[broken burrow]

https://github.com/gakonst/solidity-book

Seems like a weird topic for resources but I get them too.

[broken burrow]

@tepid patio might be worth a look but you don't like solidity. :p

[hybrid wadi]

Does anyone know a good and simple network scanner I could use on my home network?

[broken burrow]

@tepid patio it's live! 😄

https://twitter.com/immunefi/status/1475780995563638784?t=jG9gR6-GesGzUZGIAj3BQQ&s=19

Immunefi (@immunefi)

Absolutely epic intro guide to learning blockchain/smart contract hacking from @morphean_sec.

Fantastic read. If you were on a desert island with one 'start here' guide, this is what you'd read.

https://t.co/3gjeTt199Z

Twitter · Dec 28, 2021, 10:49 AM

[tepid patio]

oooohhh

i'll check it out!!!

[broken burrow]

Awesome!

[tepid patio]

@broken burrow some people were complaining that the rewards for AoC were unfair, am I right in thinking that blockchain fixes this?

1. you can create a ticket lottery system on the blockchain
2. you can execute it on the blockchain and anyone can see the results for themselves
3. the code that produced that result is open source & you can verify those results came from that code

I don't think you can do this off-chain and still have (3), you can open source code but you can't prove the results of code came from the open source program everyone saw, without immense effort to create a quasi-blockchain, right?

[broken burrow]

Would it fix it? I'm not sure. Not many people can read solidity code so they might claim it's still rigged even if the code and results are open source.

Some people also erroneously believe that miners can influence randomness and that's true but only when it isn't implemented correctly.(Which is a security risk) Using Chainlink's oracles for randomness fixes this.

What you're proposing is very possible though. It would be extra work for the devs though that's for sure.😂 A lot of "DApps" rn aren't fully decentralised so it's not that hard to integrate the two in theory.

Creating a quasi blockchain is a bad idea though. Deploying a smart contract to polygon and integrating it with tryhackme is much easier.

[tepid patio]

I'm not suggesting we do it, I'm just thinking 😄

I could build it for the subreddit, however

actually I'll just do that

seems like a fun side project

given a list of usernames and a number of "prizes:, verifiably pick random choices

[broken burrow]

Don't you mean BUIDL?
https://docs.chain.link/docs/chainlink-vrf/

[tepid patio]

hahaha i've used VRF via buildspace 🙏

[broken burrow]

Awesome. Chainlink is honestly a life saver. Wish I'd made it first.

Too complicated for one kid though XD

[tepid patio]

ehh there is always stuff to build

[broken burrow]

Yep. Got a side project in the works. It'll probably flop considering my lack of talent with front ends. Might consider outsourcing that bit.

Atleast I'll have something to show until a great idea hits me.

[broken burrow]

You can map the usernames to addresses. Honestly, doesn't seem hard when you think about it.

[tepid patio]

nah i was going to do this:

[broken burrow]

And polygon is cheap enough to make it less painful to deploy

[tepid patio]

React app

1. Insert Reddit link
2. React app client-side grabs all usernames of commentors and makes it into an array
3. React app calls smart contract with this array

Smart contract

1. Uses chainlink's VRF to randomly select X lottery winners
2. Profit????

@broken burrow is there any automated fuzzing security tools for smart contracts? I.E. one that I can run over a solidity project and it picks up the most obvious things?

or do u want to build one 😉

[broken burrow]

That works too. Makes it so they don't have to hurriedly make a wallet with no clue how.

[broken burrow]

There are plenty actually. Look up MythX from Consensys.

[tepid patio]

@broken burrow Okay another project idea for you, a github action anyone can use which:

1. runs that fuzzing tool
2. runs pywhat to search for API keys / wallet private keys etc

Basically a "dont PR anything stupid" automated step?

[broken burrow]

Great idea! Thanks.

[odd sinew]

Gave +1 Rep to @tepid patio

[tepid patio]

npnp, you may want to look into pre-commit hooks which are checks that run before you commit stuff. that way you don't upload anything to github at all (although it's harder to use then a github action) 😄

[broken burrow]

Right right.🤔

I've got googling to do XD

[tepid patio]

Npnp!!

@broken burrow this will help u https://skerritt.blog/make-popular-open-source-projects/

thats the exact framework I use to come up with ideas + publish them + get some cheeky lil github stars!

imo there are loads of things you can build in blockchain / web3

[broken burrow]

So many things but so little time.😆

[broken burrow]

Thanks a lot! You're really farming me for rep haha.

[odd sinew]

Gave +1 Rep to @tepid patio

[tepid patio]

i was here before rep

[tepid patio]

i want to do an airdrop & have an idea for something

[broken burrow]

https://tenor.com/view/banderitax-fortnite-super-mario-jmans-jeremymansford-gif-18016230

Young hacker measures up against the big boss Brandon -circa 2021

[tepid patio]

pls call me bee

i remember when i was #2 on tryhackme 🥲

[broken burrow]

👀You know that TryHackMe DeFi variant looks really appealing.

[broken burrow]

Will do! o7

Life got in the way, huh?

[tepid patio]

yes its kinda my goal to build a course system

learning react rn

poaps at the end of every room

lets chat in thread 2 stop annoying ppl

[broken burrow]

https://twitter.com/timurguvenkaya/status/1475843655567089676?t=JeCVDNkmKsOj3M65gnfRkw&s=19

Timur Guvenkaya🦀 (@timurguvenkaya)

How to start in Web3 hacking on Rust-based chains?

Web3 is more than EVM and Solidity. Hence, here are some foundations that you need to start hacking on Rust chains!🦀

You may treat this thread as an addition to the fantastic @adrianhetman's tweet.
https://t.co/Gk7Tm2K3H4 https://t.co/4Vgg8q80Z9

▶ Play video

Twitter · Dec 28, 2021, 2:58 PM

[sterile frost]

That was you? Neat. It's saved in me Favorites from some of my previous studies. Thanks Bee ❤️🐝❤️

[odd sinew]

Gave +1 Rep to @tepid patio

[tepid patio]

yess thank u!!! ❤️

[odd sinew]

Gave +1 Rep to @sterile frost

[fast wraith]

really cool IR platform
https://github.com/dfir-iris/iris-web

[faint sandal]

Is self-promotion of free content allowed here? 😅

[topaz gulch]

That is not a resource bee smh
Pin it in #general for a bit

[tepid patio]

What did I post again

I genuinely forgot

[topaz gulch]

Your subreddit prediction thingy

[faint sandal]

👀 On the off chance that self-promotion of free content is allowed, here's a little C2 framework I made this year. Any feedback or just checking it out is greatly appreciated! https://github.com/CyberSecurityN00b/star

[topaz gulch]

Nice one!

[odd quest]

Even better Muir, It's Vim style commands

[topaz gulch]

😁

[faint sandal]

That wasn't intentional... 😅 Command documentation is a bit sparse, but I'm working on a room to address that 😉

[broken burrow]

I think so?

[upper pelican]

Looks really cool, but whats the difference with thehive project? (https://thehive-project.org/)

[light crystal]

any gud red teaming courses aimed towards beginers? lab setup would be appreciated thx

[dreamy holly]

THM

get sub

[shadow hound]

Is there any interest in additions to the note-taking tools list in pins? I would point to Logseq (web/local outliner with backlinking, graph view, PDF annotation, etc. that can sync to github) and Dendron (VSCode plugin with a similar feature set that augments the backlinked format with hierarchical "parent.child.subchild-note" designators for nodes)

[simple creek]

Hey! I wish to learn python for pentesting and ctfs... Anyone has any resouces?
Preferably any resource that lists projects that can be done so as to learn by doing
If not, any good videos/blogs would also be worksmile

[shut ferry]

W3schools.com is a good resource, for more than just python

[broken burrow]

CS50 and black hat python.

[simple creek]

Thanks!

[odd sinew]

Gave +1 Rep to @rotund moat

[simple creek]

Thanks!

[humble dome]

https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html is it a good/latest prep guide for oscp?

[faint sandal]

You should check out https://www.codewars.com/ ! They have a bunch of challenges for you to solve; after you’ve solved one you can see how others have solved it, .

Some of the challenges trend a little math heavy for my tastes, but 🤷🏻‍♂️

[simple creek]

Thanks!

[odd sinew]

Gave +1 Rep to @faint sandal

[fast wraith]

great piece of threat intel research
https://victorymedium.com/godaddy-global-issues-canadian-pharmacy-injections/

[small night]

Heath Adams aka TheCyberMentor (TCM) just released the first 12 hours of his best-selling course on YouTube. Learn Linux, Python, and Hacking all with no strings attached.
Arguably the best course to get started. Enjoy
https://www.youtube.com/watch?v=fNzpcB7ODxQ

[quasi sluice]

Learn Assembly Language

https://asmtutor.com/

This looks like a great resource for anyone that is interested in Assembly Language

[sterile frost]

https://www.linkedin.com/posts/sans-offensive-operations_sec504-cloudattacks-incidentresponse-activity-6884224419502280704-QnBd

[vale sage]

can responder run in a pivoting situation? or does it have to sit on the interfaces it is attached to?

[odd quest]

https://labs.f-secure.com/archive/safer-shellcode-implants/
Quick read, interesting though

[night holly]

http://ismycomputeron.com

[craggy olive]

My poor programming skills are becoming evident

Like zero skills at all😕

[placid marsh]

https://www.cisa.gov/uscert/ics/Training-Available-Through-ICS-CERT

free ( as far as i know) industrial control systems training from CISA. you get a piece of paper at the end!

[odd quest]

Also offers CEUs for at least one of the tiers, 100 level through 400

[broken burrow]

CS50

[craggy olive]

Just signed up
Thanks sleepy

[odd sinew]

Gave +1 Rep to @broken burrow

[shut ferry]

where you guys aware of this?

https://d3fend.mitre.org/

I'm so hyped. I'm gonna start planning to deploy the deceive part at my job.

[summer prawn]

where can I learn more about anonymity?

[crimson fossil]

Its someone who know a site to download a good template for my blog where i will post Write Ups

tag me pls

[warped delta]

anyone have any good resources to learn more about IDORs? I am doing the jr pentester path and dont fully understand the concept fully.

[lucid edge]

Just google the following:- site:medium.com idor

[broken burrow]

Portswigger academy

It's made by the creators of burp suite and free

[topaz gulch]

That seems slightly counterintuitive, limiting your research to one site, does it not?
Especially given everything on that site is written by random people who may or may not know what they're talking about.

[lucid edge]

Well i respect your opinion sir. But as a beginner i like to use sites like medium, gitbook.io etc.. Atleast helps me get basic info about a vulnerability.. Next stop is Portswigger always.. :) Or mutillidae practice

Ofcourse we must choose what to read according to who the author is.. And several other factors

[topaz gulch]

Not saying that it's necessarily bad to use a medium article, but cutting everything else out and restricting yourself to a single (potentially incorrect) source of information is definitely not the best way to research a topic.

Especially when you then tell others to do the same thing

[lucid edge]

I never said limit yourself to just one source. There's way too much info on the internet, about vulnerabilities which may overwhelm at first, so start small and work your way up. :) I remember feeling overwhelmed and still feel so..

[topaz gulch]

You just did tell them to limit themselves to one source

[lucid edge]

To encourage them to use the best possible resource out there i.e. Google

[topaz gulch]

The google dork site:medium.com only returns articles from medium, thereby limiting what you find purely to medium articles

It's the same as going to Medium and using their own search feature rather than using Google at all

[lucid edge]

Atleast they'd know where to find info and how to search and learn from Google. I never said limiting yourself to one source. :) Sorry for the misunderstanding from my side

[topaz gulch]

That's all well and good, but maybe teach them to use Google, rather than giving them a search term that does limit them (with no explanation of what it does), and telling them to just use that :)

[lucid edge]

Noted sir. 😊 Will be careful next time

Thanks for correcting my mistake

[topaz gulch]

Not a mistake so much as something that could be potentially misleading -- it's all a learning process, for all of us :)

[cloud lintel]

does anyone know of any blue-team lab resources? similar to hackthebox (for pentesting) or the cyber defense learning path on THM?

[night ether]

https://www.malware-traffic-analysis.net/training-exercises.html

[shut ferry]

BlueTeamLabs / RangeForce community edition are pretty cool

[placid marsh]

https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html#section-12-handling-public-exploits

anybody mess with this? i'm finnin to do the whole shabang

[night ether]

not sure how relevant that list is going to be now the exam has changed

[placid marsh]

sure it has changed but i'm sure getting comfy with kali is still a thing, bash scripting, passive recon

it's not suddenly the GRE right?

[night ether]

nevermind ignore me, that list goes over the new included topics

[faint sluice]

you'll be well prepared 🙂

[hexed crypt]

Hey all, just saw this on HN, it's an interactive site that explains and shows how SPF, DKIM and DMARC work. Good addition to the new Phishing rooms : https://www.learndmarc.com/

[tough wagon]

hi guys, i dont know if this belongs here, but what are u using for notetaking?

[tranquil grove]

I personally went with Obsidian, but there are a lot of other note taking apps like Trilium, Notion, OneNote, Evernote, depends on preferences mostly, i personally tried a few and watched some youtube videos before deciding...

[elfin turret]

Onenote, Evernote have good mobile support, Obsidian will be easier for you if you have some coding background and it's really flexible.

Trilium and Notion I didn't use it at all so I can't comment on those

[prime mantle]

check pins of this channel

[cyan ingot]

Hi All,
Any good books to buy/read for pentest and secure coding?

[full vapor]

https://www.eventbrite.co.uk/e/microsoft-certifications-testing-lab-19th-21st-jan-2022-tickets-216400899917

[wet yoke]

This is the first half (4.5 hours) of The Cyber Mentor's OSINT course, officially released for free by TCM on his YouTube channel. The link to the full course (9 hours, cost of $36.89) is included in the video description

https://www.youtube.com/watch?v=qwA6MmbeGNo

[fast wraith]

https://github.com/mxm0z/awesome-intelligence-writing

[azure widget]

https://bishopfox.com/blog/fuzzing-aka-fuzz-testing

[summer prawn]

any room that explains better port forwarding and how it works here on thm? I'm stuck in a free box on hackthebox, found on the walkthrough that port forwarding is required for the last step, but have no idea how it works

[topaz gulch]

https://tryhackme.com/room/wreath

:)

[summer prawn]

Thank you 🙂

[odd sinew]

Gave +1 Rep to @topaz gulch

[simple creek]

Hey! What book/resource would one suggest to learn about Windows and its working?
I've completed the Windows fundamentals module on thm but felt that was pretty much an overview

[drowsy kestrel]

Checking out Microsoft’s online docs would be a good, free resource to check out. There should be some links out to it in the WindowsFundamentals course

[golden gyro]

Oh good someone already got it

[shut ferry]

OAuth explanation with diagrams and some examples:
https://devansvd.com/oauth/

[simple creek]

Thanks!

[odd sinew]

Gave +1 Rep to @drowsy kestrel

[gaunt rain]

Does anyone know or can tell me how THM manages to make the cloud VMs for AttackBox so silky smooth in response, since I still have some minor lag xrdp'ing into my kali machine on the local network. I see they/you use vnc, can you possibly give me some hints on the setup?

[odd quest]

Apache Guacamole

Someone said it plays nicer with certain DEs - XFCE here

[topaz gulch]

The AttackBox is NoVNC

[odd quest]

Which I believe is just the backend for guac?

Ah, NoVNC is an alternative

[topaz gulch]

Don't think so?

Yeah

NoVNC is basically VNC but with websockets 🤷‍♂️

[gaunt rain]

will check that out, thanks!

[astral maple]

LetsDefend.io

[south marlin]

https://samy.pl/poisontap/

https://www.youtube.com/watch?v=Aatp5gCskvk

[sterile frost]

Found this on LinkedIn (https://www.linkedin.com/in/rachelbicknell)

[barren vault]

@velvet kernel

[halcyon palm]

Hey guys, hope you’re doing well, I’m excited as I finally set up an appointment for my Security+ From CompTia. For resources I did buy Mike Meyers from Udemy and proffessor Messer from youtube. Can’t buy the book of amazon cause they don’t deliver where I’m from, any other resources you guys have to spare?

[rapid pumice]

Hi, i bought CompTIA... Certification Guide by Ian Neil, but i find that tryhackme give me a lot of aid in pratice. I have the exam at the end of February

[halcyon palm]

@rapid pumice Hey , good luck with it! Yeah , without doubt Tryhackme helped me with it, hell I learnt more than half of the material from this platform, but I know they require more technicalities, terms and theory too… was wondering if anyone had the pdf book or some practice tests too

[gentle saffron]

Thank you! Decided to learn some basics of cloud because of this opportunity, and I just passed my Azure fundamentals 🙂

[odd sinew]

Gave +1 Rep to @full vapor

[indigo crow]

i need a book for nmap , can anyone suggest ?

[night ether]

the official nmap book

[shut ferry]

" Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning "

Gordon Fyodor Lyon

[late comet]

Check out the recent XSS challenge by therealbrenu

https://www.youtube.com/watch?v=jX4DkELbhUI&feature=youtu.be

[fast wraith]

nice interpretation of atomic habits for devs
https://bruno-oliveira.github.io/techblog/Atomic-habits-in-coding/

[grave coral]

https://play.picoctf.org/practice

[broken burrow]

https://github.com/l-henri/starknet-cairo-101

[nova current]

Looks interesting
https://olympics.maveris.com/

[lucid edge]

Where can i access the tryhackme bot for verifying myself?

[fiery bear]

!docs verify

[fervent summit]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[lucid edge]

Thanks very much man!

[odd sinew]

Gave +1 Rep to @fiery bear

[fast wraith]

good questions to think about for blue teamers
https://hela-lucas.com/2022/01/22/incident-response-question-bank/

[stiff kraken]

Can anyone give me resources on json jwt tokens

[shrewd maple]

Great piece🙌🏽

[subtle dirge]

-ban @shut ferry -ddays 1 Discord scam.

[odd sinew]

🔨 Banned saaal#0306 indefinitely

[kindred marlin]

https://www.youtube.com/watch?v=_h_d2KWAJng

[fast wraith]

https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034

[hoary ridge]

Maybe we can stop talking about log4j for a while now 😛

[lucid edge]

https://infosecwriteups.com/attacks-on-json-web-token-jwt-278a49a1ad2e?source=rss----7b722bfd1b8d---4

Hope this helps @stiff kraken

[kindred marlin]

https://www.youtube.com/watch?v=zZeSHIJaLLA

[stiff kraken]

@lucid edge
Thanks man I appreciate it!

[odd sinew]

Gave +1 Rep to @lucid edge

[lucid edge]

https://www.linkedin.com/posts/mayank-malhotra-311781191_learning-activity-6892094707581751296-xwGl

I shared my Notion notes and lab walkthroughs for Access Controls module on Portswigger. Please review and do tell if any mistakes

[turbid peak]

Hello,
Can anyone suggest Or share me some resources for cyber forensics

[crimson thunder]

https://dfirdiva.com/ take a look here

[turbid peak]

Ok

[twilit lion]

https://www.youtube.com/watch?v=KEkrWRHCDQU

[swift whale]

hey there can any body recommend any resources for the kismet interface

[dreamy holly]

https://github.com/VainXploits/Ollie

The CLI version of https://revshells.com

[proven cosmos]

What does it do

[buoyant fox]

I’ve got an interesting question for yall. What do you use for a personal knowledge base? I’m trying to figure out an effective way to take notes to remember certain reverse shells, cheat sheets and little things I’ve picked up here and there.

I’ve been using OneNote but I wonder if there’s something more purpose-built for offensive/defensive security

[surreal dome]

Good question. Let’s see if some come up with suggestions.

[lucid edge]

Use notion. It's better! If you want, i can share my demo notes i made on Portswigger module to see how it would help you with your requirements

[crimson thunder]

Nah, use what you like best. I use joplin

[topaz gulch]

Trilium would be my recommendation.

Other common ones:
Obsidian -- very good but stores files in plaintext on disk (either a bonus or a disadvantage, depending on your perspective, but it ain't great for storing payloads). Also apparently a bit weird with images.

Cherrytree -- very good, but gets unstable with bigger notebooks. Starts crashing at around 40Mb.

Joplin -- haven't used in ages but supposedly still very good.

Notion -- absolutely gorgeous, but storing your notes entirely on someone else's platform isn't a great idea (if they go down or decide that you're breaking ToS, you're screwed). Also, don't try to store log4j notes in Notion... it doesn't end well.

[faint sluice]

I've tried all of them, Typora is what I use, most people won't like that its paid ($15 for 3 licenses) but I'm able to type markdown and have it render in the same page and I just use github to save it. The nice thing I like is I can view it in github because its markdown.

[topaz gulch]

Knew I forgot one of the ones people use in here.

[regal mason]

nice linux cli refresher
https://cmdchallenge.com/

[remote wind]

Check pins

[glad hazel]

What's up with Log4j and Notion?

[topaz gulch]

It starts yeeting your notes and blocking your account if you try to store any log4j payloads in it 😆

Ask @glossy blaze -- it happened to him

[glad hazel]

I mean then it would do the same with any cve payload right?

[glossy blaze]

Nope

it just did that because of the way they had to make a WAF for the log4j payloads during the big log4j crisis

didn't have any other issues with any other payloads before that

it's because of the way the log4j vulnerability works and how it just needs that payload on any input that gets logged

[glad hazel]

👍

[glossy blaze]

and my guess is that they were building the "notes history" with it

I haven't tested in a while... so dunno if that's still common behaviour

And this is from me, I really deeply enjoyed working with notion more than most other apps. I still miss it most of the time.

seems like they fixed the log4j thing now .. just tested

at least on a first glance I don't seem to be waf banned and it saved the payload just fine

but I know I can't really rely on it for state of the art payloads because if they freak out and need to block a payload, I can't take decent notes.. so trilium it is

[fast wraith]

quick note on Typora - you can actually install the older version they list in releases which is still free and quite good

[buoyant fox]

Sure, that’d be awesome! I’ve used it a bit but not extensively

[buoyant fox]

True, I’ll probably grab a bunch and see which one fits

[buoyant fox]

Thanks a bunch, I’ll look into these! I’ll definitely keep that in mind, I can see that being troublesome lol.

I was out on PTO but all the other analysts had just sat down with their Xboxs and such for a game night… 5 minutes later, they were in a meeting that lasted 6 hours. But hey, we got SIEM and IPS rules created before Fortinet, but that’s not a high bar to beat

[odd sinew]

Gave +1 Rep to @topaz gulch

[buoyant fox]

Oooh I’ll give they a look, too. I don’t mind paying a bit. My mindset is, if it makes me better at what I do, I’ll get a far greater return than $15. Thank you!

[faint sluice]

I just found all the other note taking apps a bit clunky. I like being able to see my notes in github. My husband and I share Typora, so he has 1 license, I have 2

[lucid edge]

I never knew this lol 😂😂 And there i was about to start tryhackme module for studying log4j and writing notes in Notion 😂🤣

[lucid edge]

@buoyant fox Here you go! Check these out and see if these help you get an idea :)

[twilit lion]

So far been using Joplin and it's been pretty damn useful so far.

[buoyant fox]

The one time I didn’t check pins and it’s right there thank you!

[odd sinew]

Gave +1 Rep to @remote wind

[buoyant fox]

Sweet, I’ll poke around at them. Thanks!

[kindred marlin]

https://www.youtube.com/watch?v=y4ri9GALfks

[hidden furnace]

👍

[vital crown]

made a new writeup https://noob3xploiter.medium.com/how-to-get-started-hacking-django-applications-f407564df9c7

[lone cairn]

Hey everybody!!! I am just a newbie in this field and want to make a career out in ethical hacking or cyber security but don't know where to start. Can anybody help me out what steps should I take and what resources should I use to study???

[shut ferry]

#start-here

[simple creek]

https://dfirmadness.com/getting-into-infosec/the-five-pillars/

[simple creek]

You could also check out this
https://m.youtube.com/watch?v=u4VWQZ8KLmI

[lucid edge]

Are there any prerequisites/topics i must learn before hand to study buffer overflow?

[tranquil lintel]

I also want to know !!

[shut ferry]

You should be able to read C code. Harvards CS50 can help with that.

[lucid edge]

I am good at C.. It's not a problem.. the problem is assembly programming.. Any good resource around that?

[shut ferry]

https://www.youtube.com/watch?v=wLXIWKUWpSs&list=PLmxT2pVYo5LB5EzTPZGfFN0c2GDiSXgQe

Going through the buffer overflow room, though, I didnt need to know assembly. It was well explained.

[odd quest]

I'd aim to learn basic architecture first, understand registers, the program counter, and basic CPU functionality

[lucid edge]

By basic CPU functionality, you mean how programmes are compiled, executed and all of that in context of memory and buffers?

[odd quest]

In the context of registers, ALU, accumulators, stacks

How it's loaded is less relevant

[jagged tiger]

That is lifecycle and software architecture, not hardware architecture. You're looking for information on computer organization and architecture, not software architecture

[lucid edge]

Alright sir. Thanks for the help. I'll start working on these topics you suggested. It's nice talking to people more experienced and knowledgeable than me 😇

[odd sinew]

Gave +1 Rep to @odd quest

[lucid edge]

Understood sir. I am just a bit in the dark related to computer organisation and architecture. But i'll work on that definitely. Thanks for the advice! 😇

[jagged tiger]

Strongly recommend looking up the Hennessy & Patterson Comp Org textbook - it's a university staple on the subject. Several of us had to read it as part of our uni programs, and found it helpful.

[shut ferry]

https://vladtoie.gitbook.io/secure-coding/

https://opensecuritytraining.info/Learning Paths.html

[odd quest]

-ban @shut ferry Posting VMWare License keys, directly endorsing software piracy. Ban appeals are [e-mail]

[odd sinew]

🔨 Banned Dubstix#2748 indefinitely

[minor frigate]

Hello and good morning everyone. Can I post the link of my blog here which I wrote on medium? Just asking before posting to avoid causing mess. Please let me know.

[pseudo bear]

I’m way late to the party but saw this and wanted to share a resource: https://www.nand2tetris.org/

I’ve been working through the accompanying book and it’s excellent for what you’re looking at. Basically you build an assembly language from scratch (including the virtual hardware). It’s actually crazy how easy it is to follow starting from first principles

[lucid edge]

Thanks man! :)

[icy marsh]

I love it! I’m midway through a course on this and it’s awesome!

[chilly bobcat]

https://thehackernews.tradepub.com/free/w_pacb145/prgm.cgi?a=1

[gritty barn]

https://sploitus.com

[tulip rapids]

hello every one i just want to get my hand into cyper security ( Bug Bounty )

i have 0 knowledge of programming soo i started to learn full web developer front end and back end is this right path to start or i dont need to waste time in full stack

HTML, CSS & JavaScript

NodeJS

SQL / NoSQL with NodeJS & Express

this one https://www.udemy.com/course/100-days-of-code-web-development-bootcamp/

am i in right path or tryhackme cover all of this soo i should start directly in tryhackme

[night ether]

it doesn't hurt to know all of that, but if you're not interested at all in development, then learning how to style webpages isn't going to be a great use of your time. learning back-end development is probably going to the most useful to you for a career in security, however it's not required. you can continue with that also, but i recommend trying out the "pre-security" path on tryhackme

[minor frigate]

Umm Good morning people, sorry to bug again but please can anyone answer this? Thank you.

[tulip rapids]

@night ether thx bro for ur advice
soo can u give me a good roadmap to start with and what u think about tryhackme road map is it complete to achieve something in bug bounty

[odd sinew]

Gave +1 Rep to @night ether

[tulip rapids]

Or i need some extremal resources

[icy marsh]

If it’s security related you can

[minor frigate]

Okay so, hello people, I truly hope you and your family are healthy and safe. So we have people who love solving CTF challenges, right? And you always love breaking those things, but have you ever given a thought that I should also build something? Well, for that, I wrote a blog, not long ago, on How to make your own CTF challenge with ease., where this blog is specifically based on creation process of box and mentality behind it. I believe, you should start building things before you break them.
https://infosecwriteups.com/how-to-make-our-own-ctf-challenge-with-ease-6b15f76865b5

[icy marsh]

+rep

[odd sinew]

Gave +1 Rep to @minor frigate

[icy marsh]

I legitimately was going to start looking for this today

I guess the stars aligned haha

[minor frigate]

Wuahahha, I hope you get some insights from it. Good luck. (:

[tulip rapids]

[minor frigate]

Hello and good morning @spark hedge Sir. I hope you are doing well. I have sent you DM, so please check when you have time. Good day.

[vestal locust]

Have you ever feeled queeeeezy whilst looking at assembly? 🥴
Do you want to get into the binary exploitation world, but don't know where to start?
Let me help you with that by starting at the very beginning: Assembly

In this video, we cover

• Compiling
• The stack
• Words
• Registers
• Flags
• Instructions
  And more!

Check it out here 👇
https://youtu.be/WG7QtpRPArg

[short valley]

https://www.youtube.com/channel/UC7hgvxOCLAFZRhDRbUSjAsw

[tropic trellis]

hey i have these books from humblebundle and they have no DRM so i can share them (and if its allowed)

[jagged tiger]

That is not allowed - each of those books has a publisher that sells those books in ebook and physical formats; just because the PDF does not have DRM on it does not mean sharing those books is legal.

[tropic trellis]

got it

thanks for the info

[sterile frost]

https://tcm-sec.com/so-you-want-to-be-a-hacker-2022-edition/

[fast wraith]

pretty comprehensive guide on attacking Active Directory
https://zer1t0.gitlab.io/posts/attacking_ad/

[bleak sage]

This is such a good article, thanks for recommending it!

[odd sinew]

Gave +1 Rep to @sterile frost

[next hollow]

For who suffers from WSL2 problems this might help you.
https://github.com/ab2pentest/NoWSLAfter2Day

[rigid aurora]

I am quite curious to learn more about hardware security, and IoT security especially intrigues me the most! Can someone please recommend some resources I could use to learn about IoT security and related topics? I am still a beginner in the field 😅
Thanks!

[crimson thunder]

https://www.wiley.com/en-us/Internet+of+Things%3A+Architectures%2C+Protocols+and+Standards-p-9781119359678 this is a book about IoT in general in case you want to look into something like this first before diving into security. Then there's https://nostarch.com/practical-iot-hacking which came out last year and is really an amazing book. You could also look into this https://www.apress.com/us/demystifying-internet-of-things-security/17097958, still security focused but very different from the previous one. This one is also available for download (legally).

[haughty pewter]

It's still on beta. Feedbacks are appreciated https://tryhackme.com/jr/kubernetesforyouly

[broken burrow]

https://github.com/secfigo/Awesome-Fuzzing

[icy marsh]

Does anyone have good intermediate/ advanced malware analysis resources? Thanks!

[karmic cradle]

Have you guys tried this tool? https://github.com/brightio/penelope
You get TTY shell automatically and makes download/upload easy

[orchid basin]

If you like that, check out pwncat: https://github.com/calebstewart/pwncat

[graceful mountain]

Pwncat is ♥️

[runic geyser]

h'

[solemn bough]

https://systemweakness.com/how-to-get-the-ultimate-hacking-workspace-on-cloud-9f458e66b203\

[tepid patio]

This is huge for rust based recon apps

https://github.com/Nugine/rlimit/pull/26
All your faves will be coming to windows :)))

[devout minnow]

Does anyone have resources about buffer overflow and window hacking?

[prisma prairie]

Does anyone know the automated tool for LFI scanner?

[devout minnow]

I have some research about your question, and i found this page (https://www.sciencedirect.com/topics/computer-science/automated-tool)

[vestal locust]

🤓➡🦸‍ Pwn Zero To Hero is back!

📑 What will we be learning?

• Reversing assembly ✅
• Step-by-step walkthrough ✅
• Setup and breakdown of functions ✅

Check out NOW! 👇
https://youtu.be/UF1vIqhmogo

[gentle shuttle]

https://github.com/watchdog2000/sploitus

[remote wind]

https://twitter.com/radareorg/status/1493908841817423872?t=Kb5daN1nckmwLelXbYIcZQ&s=09

radare (@radareorg)

You can now install and run latest r2, rax2 and rasm2 in your browser or terminal thanks to webassembly! (no disk or network access, it's a sandbox! (use pc* and terminal paste to load binaries) https://t.co/1PvhQ2gbcO

Twitter · Feb 16, 2022, 11:23 AM

[coral elm]

Anyone have any resources for developing my site on github pages? I want to add subdirectories to put all the work i have done/will do but i cant seem to find much to answer my questions. Or if anyone is available to help pls dm me.Thanks!

[orchid basin]

The GitHub Docs have some good information, especially if you’re using Jekyll. I just copied off of someone else (spooky) until I fully understood the bits and pieces

https://docs.github.com/en/pages

[coral elm]

Thanks for the response, i tried following the github docs this weekend when i got started but it didnt get me far besides getting the site going. Did you find the jekyll docs useful?

[orchid basin]

Since I started my own, they've changed the system to work with GitHub Actions instead of you having to build it locally, so I'd have to check again

At the time, they were pretty much all I used along with GitHub's docs

But my workflow is pretty much "write blog in markdown, git add, git commit, git push, repeat", since I used a template

If you're looking for more than that, then I'm not the right person to be asking

[fiery bear]

https://gist.github.com/joshuapekera/ef364073b01fb0e21d3f
Maybe this?

[coral elm]

No worries but thanks for responding, once I get more comfortable and similar to you, develop a template/format of some sort, then it will be simple. I’m just still trying to figure out how to get my work on the site and organize everything.

[odd sinew]

Gave +1 Rep to @orchid basin

[coral elm]

I have all my write ups within obsidian, which is in markdown, so basically I could try to follow those commands to upload a folder?

[fiery bear]

I have similar setup with obsidian, what i do is convert the md to html and copy <p> and stuff to html template

I included those link because you said subdirectories on GitHub pages

[coral elm]

Haha it seems like I should make a template before I upload my work. But thank you for sending that, I’ll try it out with a test folder

[fiery bear]

Glhf

[remote wind]

I use HUGO paparmod, put all my posts in content/posts/ on main branch, and then GitHub action build and publish them on gh-branch, u might wanna take a look..
PS there is better way to arrange those directories, refer to the docs
https://github.com/swanandx/blog

[coral elm]

Ok, I’ll look into that, thank you as well

[odd sinew]

Gave +1 Rep to @remote wind

[fast wraith]

https://interaktiv.br.de/elite-hacker-fsb/en/index.html

[remote wind]

https://gist.github.com/rexim/38c176fe4669ef83db69aca9909d7b7f

[lucid edge]

Hey has anyone here solved pentester recon badge exercises? I am stuck at recon 02..

[shut ferry]

https://blogs.oracle.com/virtualization/post/install-microsoft-windows-11-on-virtualbox

This helped me install Windows 11 on VirtualBox

[sterile frost]

https://www.cisa.gov/free-cybersecurity-services-and-tools

[cinder slate]

https://leetcode.com/discuss/general-discussion/448990/guide-for-beginners-in-competetive-programming

[willow aspen]

Maltego Playlist I've been working on. Putting together some Transform tutorials next: https://www.youtube.com/playlist?list=PLtoC6Cd29__Wl7JR1yAXo7G3AoqDRq4NM

[remote wind]

https://cheats.rs/ Rust Cheatsheet 🦀

[topaz gulch]

The ETBD PDF

As in, the PEN-300 learning materials

You ain't getting better than that for exam study 🤷‍♂️

[shut ferry]

@shut ferry look for something here mate

[topaz gulch]

Those wouldn't be pirated now, would they?

[shut ferry]

Noo

Dw

They are fine lmao

[topaz gulch]

I would be astounded if that was true considering many of the books there usually cost

[jagged tiger]

What kind of licensing covers distribution of those books? Sure seems sus....

[shut ferry]

Ahm... well it was just a resource I found. Just wanted to help since I too use them. Very helpful ngl

But I can delete it

No worries

Sorry for the inconvenience

[topaz gulch]

That would probably be sensible 🙂
Just in the interests of making sure

All good 😄

As a general rule, if something like a book or a film is free on the internet, it's usually not legitimate -- exceptions being if the author has explicitly released it for free redistribution or if it's in the public domain 🙂

[shut ferry]

Sorry mate

[topaz gulch]

AFAIK PDF Drive basically just grabs PDF copies of everything it can find and displays them 🤷‍♂️

[shut ferry]

U r right

[topaz gulch]

It's fine -- just a heads up 🙂

[shut ferry]

I removed it anyways

Won't happen again

Ty

[odd sinew]

Gave +1 Rep to @topaz gulch

[lucid edge]

Does anyone have any good resource for learning about containers? Someone posted a link for this topic here as well but lost it somehow

[crimson thunder]

https://www.freecodecamp.org/news/learn-kubernetes-and-start-containerizing-your-applications/

[marble sun]

Do you have the activation key for Win11 Professional

[odd quest]

This would be software piracy.

[marble sun]

It's okay. I'm used to using pirated software

I won't pay if I can get paid for it

[odd quest]

-ban @marble sun Asking for pirated software. Was told it was piracy, continued to ask. Ban appeals are [e-mail]

[odd sinew]

🔨 Banned NTMD#5226 indefinitely

[teal grove]

https://0xjin.medium.com/ecptx-exam-review-by-0xjin-7602232b53d3

[shut ferry]

Balls

[lucid edge]

That guy was just drunk i guess 😂😂 Asking senior mod for pirated software.. Can't stop laughing 🤣

[shut ferry]

Search Engine For Hackers

1. Censys.io
2. Shodan.io
3. Viz.Greynoise.io/table
4. Zoomeye.org
5. Fofa.so
6. Onyphe.io
7. App.binaryedge.io
8. Hunter.io
9. Wigle.net
10. Ghostproject.fr

[spring wren]

https://m.youtube.com/watch?v=zl5NdvoWHX4

[lucid edge]

Hey i was wondering if anyone can tell the difference between subdomain and a virtual host?

I googled and searched about it but i am confused between two of them

[topaz gulch]

A subdomain is a DNS thing -- it's a record that points at an IP address.
A virtual host is a software thing -- a feature in webservers that allows them to host multiple sites differentiated by their hostname.

Actually put it this way:

Say you have a domain: example.com
You create a subdomain: sub1.example.com and set an A record (basically a forward lookup address) of 1.2.3.4 -- which is an IP address that is assigned to a webserver that you own.

Any traffic directed at sub1.example.com will now go to the server at 1.2.3.4

That is a subdomain.

But what happens with the webserver?
It's fine if there's only one site on the server -- it just serves the default one to anyone who connects, and all good, but what happens if you have two sites?
Say you have another domain: exampletwo.org that also points at 1.2.3.4 -- how does the server know to serve the site for exampletwo.org when people connect using that domain, and the site for sub1.example.com when people connect using that?

That is VHosting -- when the webserver is set up to serve different content depending on the "host" (in this case, domain/subdomain) that it is accessed using

[lucid edge]

Thanks for explaining it so thoroughly.. sorry for the last question..
So if i serve my web content for a subdomain through /var/www/html directory, then should i use the same directory for the virtual host? Or is there some other directory involved for hosting that virtual host?

[night ether]

shameless plug 🙈 https://work.jake-ruston.com/setup-guides/apache-virtual-hosts ignore everything else on that website it is a shit show currently

[lucid edge]

Great content man! I have a doubt though.. Suppose i visit the host example.com, then how does the web server know which content to provide to me? The content of example.com or dev.example.com?

[night ether]

when apache processes the request, it will see that there are multiple sites enabled -- so it will check each site's configuration:

when looking at each site's configuration, it will compare the requested domain against the entries in each ServerName directive of the enabled sites

[lucid edge]

Ah okay! Understood!! :) 😇
Thanks for explaining! I should've understood ay first

[remote wind]

https://abarrak.gitbook.io/linux-sysops-handbook

[storm ether]

https://github.com/optionalCTF/SSOh-No

[ebon kernel]

https://shivam1317.github.io/Cybernotes/

[night ether]

if you're like me and always forget which potato does what: https://jlajara.gitlab.io/others/2020/11/22/Potatoes_Windows_Privesc.html

[vital grove]

Some months back i was using an alternative to nmap that was allowed to use in OSCP. it used to output into different folders. anyone knows what the tool is called?

please tag me if u know it

[crimson thunder]

rustscan?

[lucid edge]

Autorecon?

[vital grove]

THISSSSSS. Thank you sooooo much

[odd sinew]

Gave +1 Rep to @lucid edge

[ruby canyon]

If it helps any beginners: https://github.com/cybervulcan-org/resources

[nova pulsar]

Thanks a lot, I was looking for something for beginners

[odd sinew]

Gave +1 Rep to @ruby canyon

[granite flame]

Hey I have recently made reveng_rtkit, public. It  is a Linux Kernel mode (aka LKM) based rootkit targeting Linux Kernel: 5.11.0-49-generic as it was only tested on it till now. This project is heavily inspired by Heroin and Diamorphine LKM rootkit projects. Especially, the Syscall interception mechanism section was totally taken from Diamorphine by @m0nadlabs repo. It is a post exp/ persistence/ stealth based framework. It can hide itself as well other processes/implants, also make itself rmmodable proof via IOCTL and syscall interception techniques. Some techniques are differently implemented in order to bypass signature based detection of antirootkit like rkhunter.
https://github.com/reveng007/reveng_rtkit

[icy marsh]

This is awesome! And super good documentation as well, I can see there was lots of work put into this!

[granite flame]

Hey, thanks alot....❤️
If you want to contribute, you make a pull request, you are highly welcomed...

[icy marsh]

I would but tbh I have no idea how to work kernel level, I will definitely read up on the resources you have there and maybe even try to create a remover for the rootkit haha

[granite flame]

Okay, actually I am writing a detailed blog on this...of how I created this rtkit....
I would then share that in here, once it is done....

[granite flame]

Yaah sure, all the very best...❤️👌

[icy marsh]

Awesome! Thanks!

[odd sinew]

Gave +1 Rep to @granite flame

[crisp ridge]

It's very interesting Shivam.

[ebon kernel]

Thanks : )

[odd sinew]

Gave +1 Rep to @crisp ridge

[lucid edge]

Have fun! :)

[night holly]

👀

[placid marsh]

https://www.rapid7.com/blog/post/2017/01/09/breaking-metasploitable3-the-king-of-clubs/

you guys collecting them all? HACKEMON!

[fast wraith]

https://twitter.com/SEKTOR7net/status/1498629358579298306

SEKTOR7 Institute (@SEKTOR7net)

Ukraine needs support! SEKTOR7 has already donated to Polish Red Cross, but there's something we can do more.

Thus we give out a 50% discount on all our courses and donate all the income to the Polish Red Cross

Please share/retweet

#StandWithUkraine 🌻

https://t.co/TfziSchHpW

Twitter · Mar 1, 2022, 12:00 PM

[orchid basin]

Does anyone have any recommendations for what course to buy from ^? My eyes are on Malware Dev Essentials, but I don't know Sektor7 very well.

[vestal locust]

🤓➡🦸‍ Pwn Zero To Hero is back!

📑 What will we be learning?

• Setting up Ghidra ✅
• Using the Ghidra decompiler ✅
• Reversing a crackme ✅

Check out NOW! 👇
https://youtu.be/m6NbJkGA3XY

[crimson moon]

Which edition?

[slender narwhal]

What guides or rooms can you recommend for setting up your "operations environment" inside home network + secure those two?

[tranquil grove]

Do you guys use ebook readers? If yes what would you recommend?

[prime mantle]

I don't use it on laptop, but on android I would very highly recommend 'Moon Reader', not sure if it's on iOS or not.
Also just remembered, try using 'Bookwiser' for windows.
Recommend both 5/5 ⭐

[tranquil grove]

Hey thanks for the info but i'm more interested in a physical ebook reader something like kindle, but heard really bad things about it and wondered if you guys have an idea or experience with them..

[odd sinew]

Gave +1 Rep to @prime mantle

[prime mantle]

Ah, understandable, I was skeptical to buy kindle because I just love handheld/physical copies more, tried my friend's kindle for a while, you should give it a try first before you buy. It's like anime, either you like it a lot or you just simply doesn't get a kick.

[tranquil grove]

Fair enough :), thanks again

[odd sinew]

Gave +1 Rep to @prime mantle

[prime mantle]

bot going crazi

[sick nexus]

check out my game Check out the project i made https://haqer-man.github.io/WordLess/ sorry if this looks like a phishing message xD

[placid marsh]

https://portswigger.net/burp/releases/professional-community-1-7-36 Make sure to click the community version and not the professional version on the left bar.

" But why fomori would you suggest an old version of burp suite ?" " well well , my brother in arms, because this version still has the automatic spidering of the site map, if you right click !"

[plush lily]

Hehe just gonna leave this here
https://youtu.be/Zma6Mk5bEI8

[graceful mountain]

Kinda self promo isn't it sid
😆

[plush lily]

It's actually a great opportunity for those who have yet to enroll in the course to get a taste of what the pwk lab machines are like 👀

[iron bay]

Hi everyone I’m new to this discord so please forgive me if I’m asking my question in the wrong section of the discord group lol .

I just wanted to know do you guys have any tips on how to memorise/study key terms and acronyms ?

There’s a lot of networking / cyber security key terms and acronyms I’m trying to revise is there a list I can download from the internet with all the key terms etc

[odd quest]

Keep notes, refer to them, try to understand how things work as best as possible.
This makes the connections in your brain with the key terms. Makes it easier to remember.

[iron bay]

@NinjaJc01#7746 thanks, that’s helpful .

[lucid edge]

I'd suggest use note taking tool like obsidian. I switched from Notion and life just feels more organized tbh 😂 In Community plugins, use the Mindmaps plugin.. That would present your notes in form of a mindmap.. It's really useful when u need to revise quick :) Hope this helps

[autumn dust]

Hi , I wanted some resources/techniques on finding the actual IP addresses behind a proxy/VPN IP address. Its for a project Im working for, not getting much info regarding this.

[onyx laurel]

What's the username and password of @ebon valve volatility vm from the website resources?

[atomic yoke]

Can anyone suggest a vulnerable web application apart from DVWA and Owasp Juice Shop?

[icy marsh]

https://github.com/ncrocfer/whatportis.git
Didn't make this but it's really helpful!

[night ether]

or grep mysql /etc/services 👀

[graceful mountain]

Would that work with just a port number tho?

[icy marsh]

it works, but having a one line tool is easier, theres also more stuff in the tool I think

[icy marsh]

ssh        22/tcp                # SSH Remote Login Protocol
xmpp-client    5222/tcp    jabber-client    # Jabber Client Connection
dcap        22125/tcp            # dCache Access Protocol
gsidcap        22128/tcp            # GSI dCache Access Protocol
wnn6        22273/tcp            # wnn6

another problem haha

[graceful mountain]

Well, kinda works so, you're link is pretty much useless
Sorry buddy

[icy marsh]

mine has a server you can use though, since not all machines have that file, you can curl it and get the output.

and it has regex search

and json output

Mr. can't read docs.

[graceful mountain]

Mr. Forgot obvious script in linpeas

[icy marsh]

Mr. SHUT UP IT WAS TOO CTFY.

[icy marsh]

compared to whatportis 22 it's somewhat worse.

[odd quest]

You can trivially write a bash function to form that regex around an integer though.

[icy marsh]

yeah theres some more features to the tool, like json output, a webserver for when you don't have the command on the machine or in your case if theres no /etc/services on the machine.

[odd quest]

Still seems like massive overkill for a trivial problem. You'll have /etc/services on your own machine.

[icy marsh]

Yeah but still, loads of tools are not needed and people still use them even if they are 5% more comfortable than manually doing stuff

if you have the options to either use pure nc or rlwrap nc which do you use?

[odd quest]

That's a different case, you're comparing apples to oranges.

[icy marsh]

how come?

[odd quest]

It's very different to searching for a string in a text file?

[icy marsh]

In both you have one case where you type more and it's less comfortable and there's a solution by installing additional software

[hollow moss]

https://twitter.com/RoppersAcademy/status/1498631476988030979?s=20&t=JhGA4pndjbjrq5SRbvPpFA

Roppers Academy (@RoppersAcademy)

🚩🧙‍♀️Capture the Flag competitions are THE BEST way for beginners to learn technical skills🧙‍♂️🚩

With 2 weeks before @picoctf I've released a free CTF course so students can prepare themselves to have the best experience possible. https://t.co/46eRWBQedF.

Retweet to help share! https://t.co/UrAdtG6goL

Twitter · Mar 1, 2022, 12:09 PM

[weary pumice]

I figured there's some THM room creators here, so just out of curiosity - how do you add the mock terminal to tasks when you create a room?

[topaz gulch]

-arole @weary pumice Creators-Lounge

[odd sinew]

➕ Gave the role Creators-Lounge to Agnes#8772

[topaz gulch]

Check the pinned messages in the channel I just added you to 🙂

[weary pumice]

Yay thank you so much! 😄

[odd sinew]

Gave +1 Rep to @topaz gulch

[topaz gulch]

Np 👍

[mortal briar]

Hi, I need help. I am not able to download the PowerUp.ps1 file from github. How do I complete Steel Mountain?

[shadow hound]

This is the function being used, you could do the pieces of it manually but it would probably be easier to figure out why you can't download the script https://termbin.com/gv3u

[fast wraith]

new Dirty Cow-like exploit
https://dirtypipe.cm4all.com/

[icy marsh]

Such an awesome read! Thanks!

[odd sinew]

Gave +1 Rep to @fast wraith

[odd quest]

@hazy bear ^ not so much discussion but that's the only place I've seen it mentioned so far

[odd sinew]

Gave +1 Rep to @odd quest

[icy marsh]

How did go?

[graceful mountain]

it's in #infosec-general 🙂

#infosec-general message

[icy marsh]

Yeah awesome haha

[fast wraith]

https://www.graplsecurity.com/post/iou-ring-exploiting-the-linux-kernel

[icy marsh]

As always, Droogy with the awesome vuln writeups xD

[hasty sage]

Hello everyone, I’d really like to improve my white box skills but as far as I know THM is mainly black box. Do you have any suggestion for trying something white-box? Any recommended ctf or maybe even thm rooms or other resources? Thank you 😄

[tribal gull]

Check out envizon on thm

Not a guide but a white box challenge

[topaz gulch]

My Hip Flask (https://tryhackme.com/room/hipflask) also has whitebox components. It's technically blackbox, but you end up dumping the source code for an app and reviewing it for vulns, so 🤷‍♂️

Trying to think if there are others. Symfonos 6 was removed, or that would be another one where you get the source code and have to review it

[mortal briar]

Thank you it works

[odd sinew]

Gave +1 Rep to @shadow hound

[fast wraith]

nice write-up on bypassing EDR
https://blog.redbluepurple.io/offensive-research/bypassing-injection-detection

[remote wind]

Released v0.3.0

• Added Filter support and boundaryless regexes
• Minor improvements

lemmeknow is pyWhat but in Rust, making it fast af.

( Will add benchmarks soon™ but it was like 20x faster for files on v0.2.0)

https://github.com/swanandx/lemmeknow

[somber cosmos]

simple software that uses dictionary attack to crack passwords :).
https://github.com/IZABOD/IzabodPasswordCracker

[gleaming wind]

👍

[lucid edge]

Anyone in need of a Practical ethical hacking course by Heath Adams? If you're unable to afford it, please DM me.. I can gift you one from Udemy as it have it there as an extra.

No strings attached.. If you need it, i would be happy to give it to you

[faint sluice]

how do you have it as an extra? It is no longer offered on Udemy unless you are offering someone a Udemy account, which doesn't seem very ethical.

[lucid edge]

No i meant that i have it from tcm site as well.. So i could gift either. I just discovered while gifting that I can't gift it as its no longer available. So i gave them the one from TCM site

Sorry for the confusion. I was trying to help but wasn't aware of the gifting process as it was new for me

[faint sluice]

ahh ok good deal

[hexed sable]

https://twit.tv/shows/security-now
Latest podcast was interesting covering the current state of cyber warfare in relation to the Russia Ukraine conflict

[shut ferry]

anyone have any brute force software?

[vapid hound]

Thanks - I am going to listen to that on my morning commute tomorrow.

[odd sinew]

Gave +1 Rep to @hexed sable

[vapid hound]

Yeah of course. Lots comes preinstalled on Kali. hydra being the main one.

[shut ferry]

oh, thanks man!

[odd sinew]

Gave +1 Rep to @vapid hound

[shut ferry]

People who have Raspberry pi's, do you subscribe to "Hello World" ?

This months issue has Cyber Security in it, (I've had a skim through, I haven't had a chance to read it fully.

Sorry, I forgot to add the important bit,

This is an issue that can be subscribed to for:

£6 a month.

You get it free if you meet certain posts, (UK related)

The PFD is free to download.

Also so are all the back issues, some of them are good.

[icy marsh]

Any specific ones you recommend?

[vapid hound]

Been listening today. Good in-depth overview of the situation. Nice recommendation, frazzet.

[dusty chasm]

Raspberry pi fan and this looks like an interesting magazine. Thanks!

[odd sinew]

Gave +1 Rep to @rotund moat

[shut ferry]

All of them, they all have interesting things.

[shut ferry]

Excellent, if one person makes use of them, I'll be more than happy!

[graceful mountain]

i wanna do the "muppet" joke but don't wanna annoy you too much

[shut ferry]

You don't annoy me, ya muppet!

[graceful mountain]

well done ya muppet...

[dusty chasm]

I set up a raspberry pi with kali linux recently. I'm looking forward to trying it out.

https://tenor.com/view/muppets-gif-11331702

[shut ferry]

Does anyone has a cheat sheet about the rooms that has been listed on THM? More specific a reminder about the most commands you use in linux? I know i can find all these with just the command man ls. But it would nice to have a cheat sheet that u can just open and check when you are stuck

Take notes, on anything you think you'll forget.

The rooms have tags also, on some of the stuff you'll encounter on the room.

[icy marsh]

@fast wraith I’m waiting for new cool writeups xD

[faint sluice]

are you talking about priv esc? or something else... https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/

[meager zealot]

Did I post this in the right area?

Oops

Thanks :3

[odd sinew]

Gave +1 Rep to @modest bison

[thick hare]

Also, take note of how old the room is. At the very bottom, some things I have issues with in old rooms. There are a couple that will not give up the flags even though I performed the tasks

[shut ferry]

I've never had that trouble.

[thick hare]

Well, things get updated and are slightly different than what the 'directions' may say. It just requires some research and is actually good for the real world

[odd quest]

Age isn't an indicator that rooms are broken, in fact it's more of an indicator that they're not broken as broken rooms tend to be fixed or made private.

[thick hare]

I never said it means they are broken, I said it means things might be different

And in my experience with THM, any room I have an 'issue' with, it tends to be an older room

[hexed sable]

Youre welcome, security now is the best, been listening to that podcast for years 🙂

[balmy sun]

Does anyone know any resources for revenge hacking into C2 servers? listened to a podcast from the dutch intelligence agency about it today, and it kinda peeked my interest

^not saying I want to hack into C2 servers. I'm just interested in the TTPs and what makes the C2 servers weak considering they usually make use of sneaky endpoints and double encryption

[orchid basin]

I know ippsec made a box not too long ago inspired by the bugs in C2's
https://www.youtube.com/watch?v=pc-_tK6CWnA

[vapid hound]

I have run into that. There's a Linux Priv Esc room that about 1/4 of them don't work anymore. But it doesn't ask for the flag only mark it Complete. so you can "finish" the room.

[odd quest]

If that's the new linux privesc room, some aren't meant to work - they're provided to teach you

[karmic mural]

you don't even know how many hours i've spent re-doing tasks only to realize some of the flags just won't work but i'm completing the task the correct way. Not a terrible thing though as now I know those skills really well lol

[rotund socket]

Hey guys I made a CTF walkthough for Blueprint CTF challenge. If anyone is interested you can find it here https://medium.com/@n3phel1m/blueprint-tryhackme-ctf-walkthrough-c71c27d6e652 I would love to hear your opinion on this!

[topaz gulch]

Nice work!
One thing I would say is, believe it or not, Metasploit isn't actually unrealistic 🙂
It's a tool designed for pentesters to rely on in irl situations. It's arguably less good for CTFs and examinations because of the whole "You don't learn by watching it say 'pwned'", but it's very commonly used in the real world because it speeds things up considerably.
Good to learn different ways of doing things though! Not least given Metasploit really does remove the need to learn how things work if you use it as a crutch, which... isn't hacking.

[torpid oak]

I was wondering what people usually use to organize their notes, I used keepnotes for a while but there may be something better

[torpid oak]

lets try cherrytree

[torpid oak]

me too since 2012

[dusty chasm]

I write my notes down. On paper, not wet clay tablets. Writing down anagrams, definitions, modelling paths, make it easier for my brain to remember. I am very fussy about writing implements. I love mechanical pencils and all the different leads (live forever, 2B leads!), nicer notebooks (especially dotted paper), and gel pens and highlighters for colour. Coding, I like Atom and VS Code. My terminal is gaudy with ohmyzsh (all the shades of pink and teal). Good times.

[icy marsh]

Have you tried Pilot V5 0.5 pens? Absolutely amazing!

[dusty chasm]

Pilots were my first non BIC stick pens in uni! I love the purple.

[icy marsh]

I’m an exclusive red user, either that or pink.

Are you an 0.5 or 0.7 gal?

[dusty chasm]

0.5 for typical notes, 0.7 for words/phrases I want to stand out

[jagged tiger]

R0tring mech drafting pencils are awesome. 2nd best is the pentel.
As far as pens, I love the R0tring technical drawing pens. 0.05mm line width is the best

[icy marsh]

For highlighting the Pilot erasable markers are nice, a little smother but not too bad.

My nan gave me a gold covered fountain pen I hadn’t used yet, can’t find the ink tank for it haha

[jagged tiger]

For paper note taking, I use a rocketbook when I'm not at home, or I prefer to use scientific lab notebooks or engineering calc pads.

[dusty chasm]

Micron pens for flash cards when I don't need colour. I adore my rotring 600 but tend to lean on my uni kuru toga. Muji makes surprisingly good and affordable gel pens in a dozen different colours. But I like the gelly roll gel pens for their stand out colour.

[icy marsh]

I just use the normal basic paper you get in bulk haha, I want a rocketbook though, it seems lit

[dusty chasm]

now I must go explore rocketbook

[icy marsh]

I cannot stand ball points / roll gel pens

It like sticks to the paper

It feels yucky

[dusty chasm]

they do, especially when they get gunky and leak.

[jagged tiger]

rocketbook is a little different. the pages are plastic, so the pens tend to slide more than roll

[icy marsh]

The Pilot leaks are a meme at this points.

[icy marsh]

Isn’t rocketbook the stone one?

Or is it the self erasable one?

[jagged tiger]

i order the smaller frixion pens from JETpens because I prefer finer points. O.7mm is too unwieldy for me.

[jagged tiger]

https://getrocketbook.com/

they make one that is self-cleaning inthe microwave, too

but i prefer the 'wipe with damp microfiber towel to clean' ones

[icy marsh]

I 100% agree, 0.7 is unusable to me, I just write too small xD

[hexed sable]

Anyone have any asset management system/framework recommendations ?

[fast wraith]

i've heard good things about ITGlue

[hexed sable]

A bit pricy but worth having a look at it, open source framework would be preferred, but thanks will look into this!

[hexed sable]

Oh right, and thanks 🙂 Thanks must be given out in threads in discord

[odd sinew]

Gave +1 Rep to @fast wraith

[brittle grove]

Anyone recommend a resource on Powershell obfuscation, common techniques of obfuscation and how to deobfuscate? (not the -ge stuff)

[hearty forge]

https://youtu.be/c7H1W4BmZ6g Learn about linux fuzzing, finding 0day vulnerabilities in applications and exploit-dev! great course for beginners looking to start a path in exploit-dev 🙂

[tepid bane]

Hey. Can anyone recommend a good news outlet for Cyber updates? (Sorry if this is the wrong channel to ask in)

[lucid edge]

Rss feeds

[ivory canyon]

Hey. I try the Buffer Overflow room i do every reverse engineering room on THM to understand assembly and RE. But even with these new skills I can't figure out how to make the room. Do you have any resources about RE or Buffer Overflow to help me ?

[zinc wraith]

this one?
https://tryhackme.com/room/bufferoverflowprep

[ivory canyon]

no i talk about https://tryhackme.com/room/bof1

[ivory canyon]

you think i have to do your room before mine ?

[zinc wraith]

oh im not there yet 🥲

[vestal locust]

🤓➡🦸‍ Pwn Zero To Hero is back!

📑 What will we be learning?

• Setting up GDB and Pwndbg✅
• Dynamic analysis of a binary✅
• Cheatsheets and more ✅

Check it out NOW!
https://youtu.be/-pKu42v_opk

[vast pine]

Not exactly sure what this is, but seems to be useful for some fellas here
https://youtu.be/2eLe7uz-7CM

[shut ferry]

--> BloodyAv is Custom Shell Code loader to Bypass Av and Edr.: https://github.com/MRNIKO1/BloodyAv

https://github.com/phra/PEzor

[supple coyote]

Hey guys, check out my write up for Napping room. Comments and suggestions would be appreciated. https://systemweakness.com/napping-tryhackme-writup-dfb62211959f

[odd quest]

@topaz gulch ^

[topaz gulch]

Yeah, I saw it. That may actually work

Oh, no it won't

Oh, maybe actually

[hearty forge]

There is a good news outlet in twitter for cybersecurity/hacking daily news called "The Hacker news"

[hearty forge]

Yeah, Powercert videos are great :)

Not doing a+ currently, revising for my net+

[simple creek]

Here's a collection from many sources
https://allinfosecnews.com/

[wispy condor]

this is my collection of websites to learn cybersecurity
https://tryhackme.com/
https://www.hacksplaining.com/
https://portswigger.net/web-security
https://blueteamlabs.online/
https://overthewire.org/wargames/bandit/
https://www.hackthebox.com/
https://www.hackasat.com/
https://picoctf.org/

[tulip shoal]

happy weekend everyone

[topaz gulch]

Lovely though that sentiment is, please don't spam it in every channel 😆 ♥️

[tulip shoal]

😂

I'm afraid no one will care about me. Hahaha

[topaz gulch]

They'll care about you for the wrong reasons if you piss 'em off by spamming it everywhere 😄

[tulip shoal]

hahaha ，ok

I am a silent person

[odd quest]

@rotund socket #thm-community-media please

[rotund socket]

wooww sorry

[fast wraith]

good to know RTLO exploits are still a thing lol
https://www.bleepingcomputer.com/news/security/url-rendering-trick-enabled-whatsapp-signal-imessage-phishing/

[glad barn]

how do you get roles on the server? I don't see a role channel

[stuck abyss]

!docs verify

[fervent summit]

TryHackMe

Verify your TryHackMe Profile!

https://help.tryhackme.com/community/discord

From TryHackMe with ❤!

[stuck abyss]

You'll get the verified role Subscriber role too if you've subscribed.

Mods can give you other roles too based on Certs you may hold (CCNA, eJPT etc)

You can also get special roles from events, the last event was for "Pentester"

You can also get the Bug Hunter role if you submit 3 bugs in the THM Bug Bounty.

[topaz gulch]

Mod is the best role though 😁

[finite patio]

Free scholarships from ISACA and one in tech program https://isaca.secure-platform.com/a/page/oitscholarship/aboutscholarships

[stable wolf]

Hi everyone, little video I found very useful to understand the logic in the sysmon module. Hope it will also help you.

https://www.youtube.com/watch?v=2xA5Sm0Xdd0&list=WL&index=16&t=666s

[fast wraith]

https://zetter.substack.com/p/unmasking-chinas-state-hackers?s=w

[topaz gulch]

No thank you. I already have one to deal with rn

[fast wraith]

https://www.mandiant.com/resources/evolution-of-fin7

[odd quest]

Please don't ask the same question over multiple channels

You got an answer in General

[stuck abyss]

No.

[boreal thicket]

sry wrong channel

[stuck abyss]

I wouldn't advise asking that in any channel.

[boreal thicket]

What do you mean?

[stuck abyss]

What you're asking isn't ethical in any sense, and any conversations will be shut down by mods, (quite right too)

[boreal thicket]

ok sry i had no intentions of using it for "evil" but it is understandable that it is not allowed and i will make sure that i don't address something like that again

[jade plume]

the architecture you are using is not the same as the software you are trying to install. You are using arm64, so you should look for software versions compatible with that architecture.

[turbid badge]

I’d like to learn about the Linux system and look for ways to set it up without investing hefty $
My mentor recommended CYBRARY saying that it will allow me to set up a virtual Linux server for learning and practice purposes. Any suggestions?

[still quarry]

Leave your mentor and install virtual box

[jagged tiger]

Linux runs well on old hardware. Refurbished/used laptops can be a great place to start building a home lab. Another very cheap alternative is to get a raspberry pi.
If any hardware is out of budget, you can also install a hypervisor like virtualbox or vmware workstation to run a linux VM.

[urban void]

yea i often get old laptops when customers want upgraded (got tow linix installs on latops over 10 years old) Linux will run on almost anything x) and honestly (this is just my experience+,opinion) but I generally see people struggle more trying to vm linux thsn doing an actially install (unless your dual booting and have a dedicated Nvidia gpu) now don't get me wrong cybrary had good contents, expensive af though, but if your just wanting to learn Linux theres much better options . and hardwares wise (depending on what country your in and their fair use/fair dealing copyright laws ) you can even install full distros on phone's **that said pleas check your local law before attemping :)

[glacial gazelle]

You don’t need to spend any $ in my opinion

linuxjourney.com

and install Linux and use as a daily OS if possible

then just force yourself to use cli

and research everything

THM has free vms

And you can get quite a lot of free credit for VPSs on linode etc.

[stuck abyss]

Linuxsurvival.com is a good website to use for learning CLI.

[graceful mountain]

wish I'd known about these sites, I learned linux the hard way running random commands, looking up the errors and so forth

[stuck abyss]

That's how I learned too, back when I switched from Windows XP to Ubuntu. 😄

[graceful mountain]

but did you break your entire system 1 or 2 times cause you loved dual-boot and had to wipe the entire hard disk, 👀

[stuck abyss]

No, because I didn't dual boot 😂

[graceful mountain]

noob

[stuck abyss]

Did you ever recover your files?

[graceful mountain]

yeh, I made a bootable usb and recovered some files but pretty scraped most of the stuff

[stuck abyss]

And did a fresh version?

[graceful mountain]

Yeh, dual-boot for life

[stuck abyss]

Have we learned form our mistakes before? and backed up everything? xD

[graceful mountain]

[urban void]

@graceful mountain I went from windows to arch linux dualboot with a dedicated nvidia gpu :) i facerolled my system for 4months before i gotna working GUI and by then i prefered the command line so i feel that think i formatted and started over at least 8 times x)

[graceful mountain]

this is the way

[urban void]

also learned more in those 4 month than 25 years ob windows

as much as i love linux i know for the time being ill be dealing witb windows and need solutions that span the x) that and my scool coursesbwere 90% windows x) lol i broke server 2019 couple times Durning that course too x) i got to self learn things like manually restoring window bootloader and rebuilding raid 1-0 arrays because they have your project which is due in two days stressfull course that's done but still being sorted out x)

[graceful mountain]

Yeh, the software that we use for our labs in uni only runs on windows, but I daily drive linux and only switch to windows when I have school stuff to deal or write reports/assignments cuz need office...

[urban void]

ahh x) yea though ive found some solutions to make windows more likely linux (other than learn PowerShell and use wsl)

[stuck abyss]

Office 365? or is it missing features you need?

[urban void]

so gnu32utils found this year

[graceful mountain]

we don't get office 365, but we get a student standard educational license

[urban void]

(which gives you gawk on Windows as an exe)

[stuck abyss]

Ah...

I don't like Office 365 for the reason I listed, I prefer the desktop application.

[graceful mountain]

powershell is very strange for me, granted I've not used it that much,
havn't tried wsl other than simply installing, looked good

[urban void]

PowerShell has some nice features but very differet

[graceful mountain]

I recently tried the "windows terminal", that combined powershell and some oter stuff I think, and it was very linux like and comfy

[urban void]

but msys32 is a cross compiling platform for windows if you copy the bin it makes in root theu contain the DLL and exe of about 400 gnu linux commands

[turbid badge]

Thanks!

[odd sinew]

Gave +1 Rep to @glacial gazelle

[urban void]

yea terminals nice full graphical background with gif support cool, launching 4 window pwsh cmd kali blackarchnwas neat but was more just tonsee if i could x)

[turbid badge]

Thanks!

[fast wraith]

https://www.scythe.io/unicon2022

[grizzled ore]

I published a few articles in Red Teaming (AD Introduction, AD Offensive Powershell, AD LPE, AD Lateral Movement )
More coming soon 👀
Any suggestions are welcomed 🙏

https://0xstarlight.github.io/posts/Active-Directory-Introduction/
https://0xstarlight.github.io/posts/Offensive-PowerShell/
https://0xstarlight.github.io/posts/Active-Directory-Local-Privilege-Escalation/
https://0xstarlight.github.io/posts/Active-Directory-Lateral-Movement/

[urban void]

thanks @OxStarlight l

also i wanted to share this with everone because these have served me well in the past id i made use of one today due to a dispute im having with my school theyre called canary tokens, these files look like jucy little tidbits of low hanging fruit but are really a form of honeypot, given inticing names and placed where the generally wont get snagged by staff where and what is up to you, eg. a broken unlinked page with an admin.php or in my case my school inbox marked school name inportant evidenced dont lose. if said file is opened it triggers an email to you to let you know youve had a breach and fast tracks singing out which ip are snooping your network potentially before an actual attack occurse or at least giving you a starting place in your post investigations. they come in many different file formats. https://canarytokens.org/generate#

[hasty fox]

one note, if they are using a "modern" email system, the IP shown may just be one of the email providers like google or outlook, not the ip of the user opening the email, and even more aggressive systems might pre-download all images and open all links and scan them for malware/phishing/whatever so a notification might actually mean nothing other than the email server received the email

but regardless, canarytokens is great

[urban void]

oh no you dont send ot

thats what tracking pixels are for

you name it something juicy that wants to be read and its a warning if someone's poking around (like your inbox)

or unlinked pages where they shouldnt be x)

they see what they think is a passwords.txt

or other and the opening of it trigerrs the toke

[willow aspen]

For OSINT folks, a guide on creating custom Maltego transforms: https://www.youtube.com/watch?v=k5oikWy0OLc

[urban void]

ohhh

has anyone played around with openEX https://www.openex.io/en/

[shut ferry]

Where can i find ELI5 for blockchain storage ?

[grizzled ore]

Red Teaming(Active Directory - Domain Persistence) 5th Article
Any feedback is welcomed 🙏
https://0xstarlight.github.io/posts/Active-Directory-Domain-Persistence/

[hearty forge]

https://samsclass.info/127/ED_2020.shtml
Great resource to learn beginner to advanced exploit-dev/Bin exploitation for Windows and Linux! Credits @coder_rc on twitter)

[lucid edge]

Does anyone have any good resource or blogs for learning amass extensively? I know there's help options in amass but i'd like to learn it with examples with performing and executing different commands

[urban void]

@grizzled ore very nice write up, as a note id love for you to throw in a pull request https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet you do a much nicer job explaining the process 🙂

@lucid edge https://www.dionach.com/blog/how-to-use-owasp-amass-an-extensive-tutorial/ https://blog.intigriti.com/2021/06/08/hacker-tools-amass-hunting-for-subdomains/ https://hakluke.medium.com/haklukes-guide-to-amass-how-to-use-amass-more-effectively-for-bug-bounties-7c37570b83f7

[grizzled ore]

Sure, ill give it a look if you do a pull request

[urban void]

oh its not my repo X) i just selfishly use it 🙂 i actually should have checked prior to that statement if tits open colab, either way i collect resources and your blog seems to have quite a few things i need to pour over 🙂 so thanks for the write up

[grizzled ore]

Np man, im glad you found the articles helpful 😊

[urban void]

yea wish i had this ad post months ago when i was doing w740-742 in college X)

ohh reminds me if you don't know there's an amazing powershell script get-newview just excellent creates a data dump running pretty much every network command you could ever need and outputs to a directory on your desktop (not fast) in organized folders and text files but very inclusive 🙂

[grizzled ore]

Would you mind sharing

[urban void]

yea its availabile in the psgallery

[grizzled ore]

Oh damn, that's nice

Ill check it out

[urban void]

yea it pretty much runs every network command you have and logs it as json so you can examin your network

took about 4.5 min but should contain everything you need to have a comprehensive understanding of the network

the files are named after the command run to get that specific data set

also pulls logs drivers and vm configuration

[untold nebula]

Hey all 👋 I am looking for recommendations for good free python course or video that is cybersecurity oriented. I have some experience in c# programming so not necessarily a beginner level.

[cyan lagoon]

You could consider looking into BlackHatPython and/or GrayHatPython

[vocal magnet]

Are there any labs or platform to practice the Information Systems/Security audit besides books and slides?

[vocal shore]

That's the best part of THM! I just created my first room the other day, it's a pretty fun CTF 😁

[turbid badge]

How popular is Kali Linux as an OS? What pen test tools are widely used in that environment?

[urban void]

well @turbid badge thats a loaded question X) it depends who you ask 🙂 its one of the more popular one but every linux user has a favorite and theyre all sure that theirs is the best X)

and theres a couple thousand tools in kali (multiple tools for the same job and a lot of the times it comes down to what you know whats preinstalled and ease of use {which is also subjective based on what you know})

as a day to day os? no i would not recommend 90% of the pen testing distros (though parrot is a sideline exception as it is more security os focused than pen testing though also has a host of pen testing tools and is debian based so in theory any tool available on kali should work on parrot). 95% of python program can run on windows and linux (though you may have to set up virtual environments to sort your dependencies out) rust and go are also generally universal assuming you sort deps and compile for your specific architecture. and a lot of pen-testing tools are built on those three languages.

[turbid badge]

@urban void Thanks!

[odd sinew]

Gave +1 Rep to @urban void

[urban void]

@vocal magnet do you mean just hacking labs or specifically audit specific, or just challenges in general,? im about to drop a list of labs and challenges some of these links are dead and i need to refind them if you find a dead link please try to go to the main site and see if you can relocate the resource if you have to do this if you could msg me with the updated link or just a MSG that you found a broken one. commented lines are dead links ive yet to fix. again enjoy and sorry for the incoming massive labs/challenges drop

actually apparently cannot paste thatmuch text in discord

oh yes i can just shows as a txt file and thats not even that bad

also if you see im missing something pm me as well 🙂 challenges labs vm's vunlerable web apps ctf cyber ranges, belong on that list 🙂

[grizzled ore]

Red Teaming(Active Directory - Domain Privilege Escalation) 6th Article
https://0xstarlight.github.io/posts/Active-Directory-Domain-Privilege-Escalation/

[turbid badge]

Just received a message that the trial version of NetLimiter expired. It was installed as part of my cybersecurity project. Not quite sure if I have to renew or uninstall. Your thoughts?
https://www.netlimiter.com/products/nl4

[stuck abyss]

Did you use it?

[turbid badge]

Yes I did. Is it a problem? Any malware possibility?

[urban void]

hmmm pro version is 30.00 but doesnt seem to add functionary beyond a graphical interface for what you can do in powershell on pro/enterprise/server and at that price i image its just using those systems to populate the information. and theres always a possibility of malware (even if its very low) id be more suspicious of bloat/tag alongs that get installed along side it. but if your auspicious you can always have a look inside the exe file and see how the installer is configured

[urban void]

(found this out recently so thought id share, there is no real definitive standard for what an exe file is there are several ways to make them and are not always created during compiling, generally they are a packaged collection of files libraries registry edits and other function scripts to organize and distribute the program/resources) and you can only really tell by looking inside (how software gets bundled or malware/trojans can be added to legitimate installers) i use a program called universal extractor to upack the exe when turning programs into portable apps (i then repackage them using 7zip/winrar/inno/iexpress #iexpress comes with windows) using 7zip or winrar your making an sfx archive (self extracting) which contains the files necessary for extraction, so even of the system doesnt have a rar extractor a sfc archive will extract because it contains the components it needs to extract it self, most of these methods will extract to a tmp location and run the binary you choose and self clean on close. and that is one way to make portable exe apps x)

its also a convenient trick if you want to bundle install a bunch of apps that you use all the time into a single launcher (though not using the sfx method youd use inno which is more scriptable ans generates a gui that allows much more customization and builds the user interface for you and allows for adding licences and tos)

[odd quest]

Windows PE format is a standard for exe files.

[urban void]

@odd quest yes it is "a standard" though when i say standard i mean every exe being the same having multipule standards and methods lacks consistency you cant look at the extension and make assumptions about its configuration based on the extension, in fact there are several "standards" for exe files which nullifies the concept of standard since it could be one of many 🙂 https://en.wikipedia.org/wiki/Comparison_of_executable_file_formats

[odd quest]

The fact you can't just look at the extension is way more important.

File type on Linux is determined by magic bytes, not extension. Windows is just weird.

[urban void]

yes thats what i was trying to emphasize that you need to actually examine them 🙂

[odd quest]

Pretty much all of the exe ones you linked there are deprecated/no longer relevant

[urban void]

well technically exe's them selvs are deprecated and being moved towards msix (replacing msi) according to microsoft but theyre still around as vendors still produce them so we deal with them as we find them.

[odd quest]

MSI is installer, MSIX is a whole package

[urban void]

yes but if you read the original post i was discussing installers and packaging and not the binary and the whole purpose of the post was to highlight that there is a distinction (which i did not know until recently)

that and the point that an exe file isn't necessarily a binary or necessarily an installer or self-extracting archive but that you need to examine it, and highlight a few low level implication (such as bundling malware with original executable (binary)) 🙂

[odd quest]

Aside from the fact that file extensions are unreliable, what do you mean by "an exe file isn't necessarily a binary"?

[urban void]

kk so you have program.exe which may be the actually launcher for the program named program or it could be and installer that relocates files to where they should be and then launches internally the program/program.exe so i guess launcher would be a more correct term because the exe does preform an action though not necessarily launch the program.

[odd quest]

It's still a Windows binary, and it's going to be a PE format one

[urban void]

it may contain i windows binary, but itself may be a self extracting archive, a script, or a collection of windows "binaries" in installation format

[odd quest]

The exe won't be. An MSI might be.

[urban void]

i disagree becuase creating a sfx archive creates an exe, though in reality its an sfx

which was my original point 🙂

[odd quest]

https://en.wikipedia.org/wiki/Self-extracting_archive#:~:text=A self-extracting archive (SFX,be%20already%20installed%20on%20the - it's an executable program, a binary.

[urban void]

yes thats what i had previously said in my original post,

[odd quest]

So it is a binary?

[urban void]

yes but not the binary i had origonally thought it was my origonal assumption had been that lets go with ccleaner.exe, i had thought that ccleaner.exe was the binary for ccleaner however it may be the binary (that which gets loaded into memory and launched) but in fact it can also be a sfx binary (thought it shares the same name and extension) and it self extracts and installs then launches the ccleaner.exe (the one that gets loaded into memory and run as a program)

[odd quest]

Ok so the name and extension for a binary might be lying to you and programs might do different things to what you thought? That's a trojan.

[urban void]

yes and not, it may not be a trojan if its origonal intent is to install the program. my confusion lay in the assumption that the exe file denoted a program binary (launcher or installer) where the equivalent of each other and singular in nature. and that all exe's were just launchers, (if the program was not installed the launcher first installed the program)

ty btw 🙂 this kind of discussion help me shape and form and better articulate my understanding of the subject 🙂

it may also just be bloat ware instead of a trojan too as ccleaner.exe may also install programb.exe silently 🙂

@odd quest do you mind if i dm you a couple additional questions on other similar topics? 🙂

[odd quest]

I'd rather they went in #infosec-general so everyone can learn and contribute

[urban void]

fair enought 🙂 thought they might be to narrow for that but wico 🙂

[zenith spindle]

Hi can any one share this task files as a zip file Thanks Advance ! https://tryhackme.com/room/snort

[inner delta]

HI

does anyone have beginner to advance red team recon process methdology and tools list?

[urban void]

https://github.com/rayiik/Red-Teaming-Toolkit

mostly tools but :)

https://www.ired.team/

[grizzled ore]

Red Teaming(Active Directory - Forest Trust Abuse) 7th Article
https://0xstarlight.github.io/posts/Active-Directory-Forest-Trust-Abuse/

[fast wraith]

https://catalonia.citizenlab.ca/

[urban void]

the ired team notes are not my notes its the description given x) wanted to clairfy that

[south marlin]

Interactive cheat sheet, containing a curated list of offensive security tools and their respective commands.
https://wadcoms.github.io/

[sudden fern]

@jagged tiger ⬆️

[sturdy shell]

on it

[sudden fern]

thanks

[odd sinew]

Gave +1 Rep to @sturdy shell

[urban void]

@grizzled ore can i dm you a somewhat confidential question regarding your blog.

[grizzled ore]

Yes sure

[craggy glade]

Does anyone have any good recommendations on resources for learning binexp? I have been struggling with ret2libc and hoping to find some basic binaries to practice with

[orchid basin]

Nightmare: https://guyinatuxedo.github.io/index.html
ir0nstone's notes: https://ir0nstone.gitbook.io/notes/
LiveOverflow: https://www.youtube.com/playlist?list=PLhixgUqwRTjxglIswKp9mpkfPNfHkzyeN
CryptoCat: https://www.youtube.com/playlist?list=PLHUKi1UlEgOIc07Rfk2Jgb5fZbxDPec94

I have personally found CryptoCat's series to make the most sense for me, but it does assume a prerequisite understanding of assembler and C, which is the most important part of any RE/binex skillset.

[craggy glade]

Awesome thanks for that! CryptoCat does look like a nice series, see how I go, ive done high level programming but yeh getting into assembly has been a bit of a challenge (done most of the beginner THM rooms for the subject)

ir0nstone's notes also look awesome, clean and simple straight to the point, my kinda thing 😛

[fast wraith]

https://www.intezer.com/blog/incident-response/analyze-malicious-pdf-files/

[vestal locust]

🤓➡🦸‍ Pwn Zero To Hero is back!

📑 What will we be learning?

• Installing Pwntools ✅
• Automating exploits ✅
• Connecting Pwntools and GDB ✅

Check it out NOW!
https://youtu.be/9wepzpQhhio

[simple creek]

@craggy glade check the Nightmare link in abv video... Just went through it, haven't used it yet but looks very helpful for binexp

[urban void]

thaks added to my lab list :)

[vocal shore]

setting up a new simple site to host fun and useful scripts, configs, files, etc ... always open to suggestions 😄
https://f11snipe.sh/

[urban void]

f11snipe i found a really cool setup of something similar but im not sure how the built it 🙂 but it doesnt require curl it just downloads X) should have a look and if you know how let me know X) ahaha
https://inventory.raw.pm/tools.html

its hosted on git hub but i didnt know you could do that from githubpages

[urban void]

just saw its gitlab not hub

[turbid badge]

Hi. Looking for recommendations for SEC+ cert prep resources. Thanks

[south marlin]

I have used these two resources:

https://youtube.com/playlist?list=PLG49S3nxzAnkL2ulFS3132mOVKuzzBxA8
https://www.udemy.com/course/security-601-exams/

[turbid badge]

👍

[turbid badge]

How long is the prep time? Like 2 weeks?

[odd quest]

https://inst.eecs.berkeley.edu/~cs161/fa08/papers/stack_smashing.pdf Mirror of the classic Phrack article

[vestal locust]

🤓➡🦸‍ Pwn Zero To Hero is back!

📑 Last week I gave you some homework. Did you solve these?

• A tour of x86 from CSAW ✅
• Strings from picoctf ✅
• Salty Spitoon by Helithumper ✅
• Beleaf from CSAW ✅

Check it out NOW! 👇
https://youtu.be/7LTNdASGFgU

[wraith lichen]

https://gchq.github.io/CyberChef/

[trail bramble]

Curious if someone could talk to me about some networking stuff to help me better understand some things going on with subnetting

[storm gyro]

I know some basics

[lucid edge]

Watch PowerCert video on YT for subnetting

Then go to a video named Seven second subnetting to brush up on it

[thorny nymph]

witch platform would you recommend use GhostWriter or Pwndoc?

[shadow hound]

one approach to subnetting that clicked for me

[simple juniper]

https://github.com/pyscript/pyscript

[kindred sequoia]

https://github.com/digital-dev/Log4j-Remediation

[shut ferry]

https://edk2-docs.gitbook.io/understanding-the-uefi-secure-boot-chain/additional_secure_boot_chain_implementations/machine_owner_key_mok

[rough abyss]

Is there a room or can anyone suggest any resources out there covering environments and the PATH variable?

[odd quest]

The Deja Vu room explains PATH exploitation

[nocturne lance]

https://medium.com/@StarDust770/how-to-access-the-dark-web-straightforward-guide-37415cc5b299

I am self promoting unpaid content

[shadow hound]

if you can reach the public net from whatever you're doing, nc stuff to termbin.com 9999 for ez pastebin

[shut ferry]

Hey, I made a python package to search the exploit database. Don't hesitate to use it and tell me if you like it !
https://pypi.org/project/pyxploitdb/

[balmy sun]

https://github.com/minimaxir/big-list-of-naughty-strings/blob/master/blns.txt

might be interesting for fuzzing

[odd sinew]

Gave +1 Rep to @balmy sun

[icy marsh]

Is it possible to use as a CLI?

[shut ferry]

It's just a package to use inside your code. Searchsploit already do that so it's no use doing it :/

[icy marsh]

True, I got excited cause searchsploit doesn’t work on my machine haha

[graceful mountain]

[icy marsh]

🤭

[main grove]

Hey guys feel free to check out my E-learning website https://kaynology.ga/ I got two courses on there so far

[stiff hemlock]

hi

[urban void]

@trail bramble https://packetlife.net/library/cheat-sheets/

[unique sluice]

This is my first blog post regarding how i bypassed microsoft endpoint solutions during my first red teaming engagement
https://hackzzdogs.gitbook.io/how-we-bypassed-microsoft-security-products/red-team-blogs/bypassing-microsoft-endpoint-solutions-for-fun

[hoary canopy]

Could someone tell me where i can find the ultimate wifi hacking guide, course or book?

[mortal tinsel]

Hello everyone! I'm on "Offensive Pentesting Path - Buffer Overflow Prep" Exploitation. It walks us through it step by step. But, I just don't understand what I'm doing & what this is supposed to do or good for? Any resources I can check out to help me understand?

[steady valve]

https://glorykanes.notion.site/How-To-Have-a-Successful-Tech-Internship-c16fab982c1b47838bd37ee4b986619b i found this resource i think is helpful for everyone here who is having an internship
applies bc cybersecurity is tech
this is for ppl who are brand new to the tech industry job expreience i think

[civic wedge]

hey i just got interested in ethical hacking i wanted some sources so i can learn to start

especial deauthing for pranking a friends

[odd quest]

You know that's illegal right?

[civic wedge]

oh

...

ok

thx for the info

but why wouldn't take the website down tho that sells deauthing wrist bands

and boards

[odd quest]

Ask them

[civic wedge]

ok

ill email a senator

or some thing like that

ok

but still were is a good start for ethical hacking

[odd quest]

Remember the word ethical, pranking your friends isn't ethical

[civic wedge]

yea i know it just one freind and he plays fortnite lol

[odd quest]

That's still unethical

[civic wedge]

yea

ok

thx for the info that inleagl

illegal*

really helps

[rough fox]

am newbiee

hope you guys are gonna me help me ou t

out*

[carmine hedge]

https://youtube.com/c/Nerdslesson

This professor looks really nice

[gleaming wind]

Are bundles like this legit? Always concerned when it states "at least". Sounds like the old days of buying cd's from Publisher Clearing House or other venues. https://www.humblebundle.com/books/python-no-starch-press-books