lmao that's gonna be a difficult one
#room-ideas
sleek elbow
oak finch
Hey Guys,
I on my last exercise for the Complete Beginner Path. I completed the Scripting Room but was not able to code the last 2 questions in it. I watched the blogs online and then completed the exercise.
So can we have some more rooms related to coding ?
tropic cave
What kind of coding? @oak finch
heady walrus
What kind of coding? @oak finch
@tropic cave I would imagine he's talking about general coding concepts. Not sure if a room could ever be expansive enough to cover all of the intricacies of writing code.
@oak finch
This page includes a link to a 4-hour (ad-free) YouTube video on Python 3 (Python 2 is being deprecated). https://www.freecodecamp.org/news/best-python-tutorial/
tropic cave
I wasn't sure if it was general coding or bash or python or whatever. But yeah what bit1 said here is pretty good. Python is a good place to start learning to code
heady walrus
Especially, cause a lot of code written for security people, by security people, is in Python.
somber crow
There's an intro to python room already
cedar echo
2 even
heady walrus
Do they cover Py3?
somber crow
Exclusively
cedar echo
noone uses Py2 anymore
heady walrus
Nor should they.
cedar echo
that's because it's vulnerable maybe ๐
somber crow
It's due to the byte strings
brisk stone
Would be nice to get more AD rooms
sleek elbow
I'll tell you what, I'll finish up the AD Section of my "Looting Windows" room tonight
brisk stone
๐
I really should make a box
I was actually gonna stand up an AD lab at home
just to learn
i know like nothing on windows
karmic raven
yโall are going to end up being sick of ad content in about a month
native raptor
Thank you @karmic raven -- really need Windows stuff right now ๐
karmic raven
Iโve been just grinding out all the ad content
native raptor
Lovely. I understand that AD isn't actually in OSCP, but it all helps
gaunt cosmos
Lovely. I understand that AD isn't actually in OSCP, but it all helps
@native raptor It is real life though ๐
cold viper
hi guys I want to level up at CTFs what should I do ?
tight night
This is a better question for #general chat. But in short, practicing CTF's is the best way to get better at them. ๐
cold viper
@tight night sorry I didn't know bro
tight night
It's ok. ๐
rotund tapir
hello
rotund tapir
TNX BRO
gaunt cosmos
A C# room maybe? With a focus on the โhackingโ application of it
final sun
Honestly, that would be too much of tiresome work.
gaunt cosmos
๐๐ Fair enough
final sun
Although there can be a room with a custom C# application and in order to exploit it, you have to know the C#.
solemn canyon
#room-ideas we need a music boat pleas
golden mountain
#544951750801752079, this is for thm room requests
native raptor
#room-ideas we need a music boat pleas
@solemn canyon A... what?
solemn canyon
a music bot ..... like groov bot
native raptor
Ah. A bot
native raptor
Indeed ๐
sleek elbow
plz no
tacit anvil
Oh yes
native raptor
Nope ๐
cedar echo
Is there a room on the Firefox/chrome dev tools?
somber crow
HTTP fundamentals covers them but not extensively
glacial acorn
What about a room that we can learn SQL?
sleek elbow
learn SQL or SQLi? @glacial acorn
outer jewel
glacial acorn
SQL @sleek elbow
So that we can get a good understanding and exploiting it will be easier
native raptor
(Remember this is a hacking platform -- not a programming platform)
karmic raven
I donโt really think a room just on SQL will help with anything in particular except understanding sqli what do you want to gain from learning sql
sleek elbow
I wish I knew more about SQL tbh
glacial acorn
What about sql and sqli?
native raptor
There are some really good resources for it online
karmic raven
Very different things
karmic raven
maybe a bit of how a sql database looks inside of a sqli room but I donโt think there should be a whole room on It
sleek elbow
Lets let the community devide on that one?
our opinions dont necessarily voice the majority of the platform
karmic raven
@outer jewel Iโve thought about doing an attacking the cloud/ attacking azure and aws room but those environments are just not practical for tryhackme
sleek elbow
and I dont think the "TryHackMe isn't a programming platform" argument isnt a valid one because we literally have Intro to Python and Intermediate Python requested
karmic raven
but those make sense because python can be used a lot more for ethical hacking sql by itself has no use for ethical hacking
native raptor
^^
Scripting is an inherent skill for hacking. I do agree that SQL is a really useful language to know, but it's not like being able to automate attacks, wouldn't you agree?
Happy to have that opinion changed, for the record
Just becomes a really fine line between what we're focussing on for dev work
Which, in the end, is up to the admins ๐คทโโ๏ธ
sleek elbow
you need to understand how something works before you can really understand how to attack it, 'OR 1=1 will only get you so far. I'll be the first to say it, I have no clue what UNION SELECT even means or does or how its relevant to SQLi
obviously its SQL commands but I have no clue what they do
native raptor
I only learnt that recently -- I do agree with you there. Wouldn't have had a clue before that
But the stuff we need for hacking can all be easily learnt from w3, or just otherwise by searching it up
Same as if we're looking at code for vulnerabilities
Anything we don't know is Googleable
karmic raven
Which is why I think it should be a part of it along with the sqli so you can understand exactly how your exploiting sql
native raptor
You don't need to be able to write it to understand it
But yeah, introducing the commands as you go along does seem like a really nice idea
sleek elbow
thats why I think supporting material should be included in an SQLi room
native raptor
Focussing on SQLi, but also covering the background that's required
sleek elbow
its one thing if someone tells you to do it, its another to explain what its actually doinf
native raptor
I am pretty sure there's something in the works for that actually
Oh, 100%
A tutorial that doesn't explain how something works is a crap tutorial
karmic raven
Who knows thereโs a lot of content being made now
sleek elbow
iirc a SQLi room has been pitched to multiple room authors and no one has really been looking forward to doing it
native raptor
True...
Fairly sure Chev had been assigned it months ago
I've got four boxes on the go, then PWK to get on with
karmic raven
I donโt think anyone likes sqli they just deal with it
native raptor
If there's nothing done once that lot is done, I'll do it myself
sleek elbow
^^
lament star
....
lament star
.....
scenic badge
im probably in the wrong area im sorry
somber crow
@scenic badge Rules 3 and 9
scenic badge
right its not illegal its a pentest
somber crow
Rule 3
scenic badge
ahhh it says dont turn it into advertising
somber crow
Don't argue over this.
scenic badge
oh no sorry im not aruging
im saying i can see what the rules say
i didnt read the end of the rule 3
hmmmmmmmm
do you know where i could post a job????
ill just look online sorry for the distrubtion!!
somber crow
Probably not in this server.
native raptor
#cyber-and-careers would be the best place in here ๐
lament star
Craigslist
native raptor
Although chances are you'd be better asking elsewhere
Ad agencies in your local area, for example
scenic badge
awesome makes sense sorry for the confusion! didnt want to disrupt anything!
tacit anvil
Has anyone started or already created a room on the socket module for python?
native raptor
That again seems like something that might be best Googled
Be a bit difficult making a room entirely about the socket module
tacit anvil
True
I do have some ideas about using the module to get a flag. Could be a challenge room
tacit anvil
If no one has anything like that made or planned, I could make it a challenge walk-through
final sun
@tacit anvil More of a heads up, if you're making one then I think if you can do a certain number of programming challenges that involves network interaction then it'd be quite good.
tacit anvil
Alright, I'll definitely involve some network stuff into it
shadow cloak
Maybe one anime related box. Cause from the discord dps I can see people watch anime here. :-3
feral reef
nah, we don't
tacit anvil
Powerplant based box.
tropic cave
Anyone considered an Ansible box yet?
Might be better once we get networks soon โข
Though maybe you can use Docker Containers to simulate additional workstations that you're automating??
tight night
I have it for Raspberry Pi too and it's a bit different and limited. I'm hosting it in a VM as well to try some of the more heavy stuff. Issue is I cant get KVM's to load, despite hypervisor being turned on naturally.
I think the cost is incredibly high for their hardware and software.
tropic cave
Havent heard of it
old abyss
DLL exploits
tacit anvil
Windows DLL and more reverse engineering stuff.
native raptor
In the pipeline. I believe ๐
livid cliff
is there a suitable place here for me to ask questions about a room I am creating, I don't want to spend a lot of time building something to find out it can't be licenced, I know windows is ok because blue, but what about MS SQL Server - can I install Dev edition to my challenge ova and upload it?
tropic cave
If there's a community license available or free edition or it's open source it's fine I assume
You can ask in #general though
livid cliff
cheers
sudden garnet
don't know if this is a question for here. but i've made a machine with vagrant, and everytime i try exporting from virtualbox it's not keeping all my files on the box. am i missing something?
somber crow
@sudden garnet this channel is for requesting content in thm really
sudden garnet
ah sorry
tacit anvil
Manual IDOR?
hybrid tundra
Excuse me
I want to upload a new room but I have a few questions before
With who I can talk ?
lunar plank
Have a read through of these here: https://docs.tryhackme.com/docs/room-creation/room-creation-getting-started/
Though in future, this would be best for #general. The topic of this channel is for requesting rooms you'd like to see on THM itself (:
hybrid tundra
Oh
Sorry lol
sick vine
More Rooms like boxes like hackthebox have like brainfuck box maybe in OSCP path
tropic cave
Why would you have a brainfuck box in the OSCP path? The OSCP doesn't include anything on that language at all. Also the Offensive Pentesting Path covers OSCP topics quite well
Also, they aren't aiming to copy HTB so I doubt they'd try to make HTB esque boxes
quartz grove
Why would you have a brainfuck box in the OSCP path? The OSCP doesn't include anything on that language at all. Also the Offensive Pentesting Path covers OSCP topics quite well
Just for the record, I believe they were talking about the HTB box of the same name, commonly included on the OSCP like boxes lists.
tight night
That HTB list made by TJ Null really seems like they just wanted to shotgun blast a bunch of machines onto it. I've asked people about that specific one being on that list, and the 100% consensus is that it doesn't belong there.
languid ibex
OSCP is a CTF
tacit anvil
that is true
karmic raven
You have upset the offsec gods
tacit anvil
A room on writing a good pentest report? Bonus: have them create a writeup
native raptor
If you think I am sitting marking reports and sending out flags manually, you have another thing coming...
tacit anvil
Another thing coming... adding rotating flags manually?
lethal marsh
Rooms on HOW ROOMS ARE MADE, Showing the backend stuff
somber crow
To?
lethal marsh
Darkstar's talk
lethal marsh
Ill search. Thanks for this! ๐๐
somber crow
rocky gazelle
I have the video linked on my website @somber crow @lethal marsh https://www.darkstar7471.com/resources.html
lethal marsh
@rocky gazelle Thanks man! :)
rocky gazelle
Look for the SECARMY talk, I have it linked just before my talk starts (albeit you'll want to pull up the slide as well as it's a little glitchy)
lethal marsh
Okay!
heady walrus
Room request:
I'd like to see a room dedicated to topics and tools involved in digital forensics, if possible.
lunar plank
I have content like file carving and use digital forensics tools like that in the works, there is a volatility room already if you want to get to grips with memory forensics
is there anything you'd like to see in particular? (:
modest trail
I could also go over FTK but that's quite a pricy tool that I doubt many have access to
somber crow
Imager does a lot and is free, but full FTK is super expensive
modest trail
claps
somber crow
Covering imager would be fine, that's my point
heady walrus
is there anything you'd like to see in particular? (:
I'm a complete noob when it comes to digital forensics. So ideally, a lot of concepts and introduction to tooling, with a gradual increase to higher proficiency.
I hope that doesn't sound too demanding. I appreciate our content creators!
glacial acorn
is there a room about virtual hosting and how to attack it?
glacial acorn
Im thinking of the wrong thing.
tropic cave
What are you thinking of
glacial acorn
Its where you can find the secret login page like admin.htb
tropic cave
Secret login page?
gaunt cosmos
You mean virtual hosts
glacial acorn
yes
gaunt cosmos
You can do it with wfuzz I donโt think it needs a whole room
Wfuzz -H โHost: FUZZ.thmโ ...
glacial acorn
thanks
gaunt cosmos
Np if you need more info look into subdomain brute forcing with wfuzz. I think ippsec has some videos on it
meager portal
A Room where the basics of C/C++ is explained
A Room on How To Create Your First GUI Application using python or C it doesn't matter
somber crow
@meager portal we're trying to avoid becoming a programming platform
meager portal
@somber crow i see i see , now i can better gather my ideas
rocky gazelle
@somber crow false
somber crow
@rocky gazelle I mean, it's been brought up before
rocky gazelle
Programming is an integral part of hacking and I'm pushing it on the platform
meager portal
Thanks dark โค๏ธ
snow tartan
A room more dedicated to Wireshark / reading out traffic?
tacit anvil
More Python Stuff but on the intermediate side.
tropic cave
There's already a whole room dedicated to Python though. And it's fairly recent
What concepts would you like to see?
tacit anvil
A room on the new SMBGhost exploit ( win10 )
feral reef
There is already one in the works. Waiting for it to become part of msf @tacit anvil
tacit anvil
There's already a whole room dedicated to Python though. And it's fairly recent
@tropic cave More pwntools usage. Tho, im just a beginner in python. More like a room explaining different ways python can be used in ctfs. Image Manipulation, RSA Decryption, etc.
somber crow
You know you can do that with basically every programming language right?
And pwntools is just Par's room (cod caper) the python room is seperate
tacit anvil
i've the python room by optional
it was really good
done**
@tacit anvil it may not be exactly what you're looking for but I'm making a room using python for networking/web stuff
I can give you some resources on image manipulation and cryptography in python
low lichen
do any of you guys here thinking of bringing a room that contains idor?
native raptor
There's a walkthrough on it waiting to be released
tacit anvil
I can give you some resources on image manipulation and cryptography in python
@tacit anvil That would be amazing
@tacit anvil it may not be exactly what you're looking for but I'm making a room using python for networking/web stuff
@tacit anvil i'll be waiting
final sun
@tropic cave More pwntools usage. Tho, im just a beginner in python. More like a room explaining different ways python can be used in ctfs. Image Manipulation, RSA Decryption, etc.
@tacit anvil
Pwntools has it's own detailed documentation.
tacit anvil
I can understand the conflict with a new person to python and pwntools. I could add it to my list to make a more beginner oriented guide to it
tacit anvil
@tacit anvil
Pwntools has it's own detailed documentation.
@final sun I'm really newb, and it's really hard for me to understand that tbh.
I can understand the conflict with a new person to python and pwntools. I could add it to my list to make a more beginner oriented guide to it
@tacit anvil Yeah, That would be really helpful.
final sun
@final sun I'm really newb, and it's really hard for me to understand that tbh.
@tacit anvil Just ask me whenever you feel stucked, I'll be happy to help.
tacit anvil
Alright mate. Thanks.
undone tide
Programming based rooms in addition to the existing Python room. C++, C#, Go etc
@outer jewel i will be making one for golang :3
undone tide
Btw can we have a room teaching how to create boxes? And how its integrated with THM because i think it will surely increase the content on THM
@rocky gazelle could surely pull up some great content ^^
undone tide
Oh that's great I'll check it out, thanks
rocky gazelle
I should probably make a room about it tbh
tight night
Room on creating and using basic Docker containers.
feral reef
i wouldn't mind going through that
are you looking at also using certain docker containers too @tight night ?
tight night
I'll be completely honest in that I have no idea how to use them in general and think it would be something worth learning if I had the right environment to do that in.
feral reef
let me see what i can put together
native raptor
Docker is absolutely beautiful.
gaunt cosmos
Docker is absolutely beautiful.
@native raptor especially docker compose
low lichen
im really down for a room about room creation ๐
simple gust
What about some SDR stuff? I played with someone's YS1 at Defcon a few years back and that was a blast.
meager portal
i really can't stress out how much a room showing how to make the machines is needed finally โค๏ธ
simple gust
A guide to designing good rooms with a standard in place would be great.
tropic cave
Room creation room was suggested
simple gust
Delightful!
tropic cave
Maybe a room on shimming
karmic raven
why would we make a room on a credit card scam?
cedar echo
Credit card scamming it called skimming
So where should I go to learn to make rooms? I have a silly idea but I'm not sure how to make it work...
lunar plank
As it stands @cedar echo this is the best resource as it goes https://docs.tryhackme.com/docs/room-creation/room-creation-getting-started/
cedar echo
I'll take a gander
lunar plank
however, I believe a more formal process is in the works (if someone picks it up hehe)
If there's any questions, feel free to PM me (full disclosure: as a creator & tester)
gaunt cosmos
the creator sets it
somber crow
And the reviewer will comment on it if it's wrong
However the docs set out a guideline for walkthroughs
cedar echo
First I'll have to get virtualbox working on the PC :)
lunar plank
yesss ^
cedar echo
Hard to export those
feral reef
nah i hate hyperv
lunar plank
I will fight Hyper v -> vmware any day
lunar plank
LMAO
cedar echo
Hyper V is fine, it's just a little greedy
feral reef
you go do you and keep your opinion being singled out
lunar plank
LMAOOOOOO
final bronze
ssrf
gaunt cosmos
@languid ibex that room doesnโt have ssrf. You could be thinking of SSTI
native raptor
There is, however, an SSRF room approved and waiting for release
meager portal
@native raptor I sent you a dm
robust bear
is there a room for breaking-out of a docker containers
tight night
There is one that requires it that I know of.
robust bear
could you tell me one that is
sorry i ve just been looking for oneof them for a while
karmic raven
dog cat has a docker breakout if I remember correctly
tight night
Yea sorry I couldn't remember off the top of my head.
lament star
You might get better results by asking in #general. That said most people are inactive right now ๐คท
true coral
Okay, thanks
tacit anvil
So I'm considering make a room that caters to GitHub - given it's a service we all use and is fairly vital in the hacking community I figure the room will help beginners to the pentesting community. The room will cover the general understanding of Github including it's uses and how to use it. I was wondering on what you all thought of the idea whether it's something you think would be worth having on the site? If you could respond with an up or down vote dependant on the figures will help me to decide if it's a good enough idea.
karmic raven
Its not a bad idea but to me its not something that is needed as there are plenty of already existing content on GitHub and how to use it as well as its somewhat intuitive to use
tacit anvil
other than the two boxes (i think ) that are out... any Pivoting type boxes in the works? maybe even larger scale to cater quasi to KOTH?
true hornet
I'm working on a pivot box yes
lament star
๐
native raptor
I've got one planned too
There will be a lot more when THM networks are out though
tight night
@karmic raven in that case, the Burp room was unnecessary because of Portswigger Academy.
golden mountain
no?
native raptor
@grand tiger it's a learning environment, remember. Community spirit aside, that's what it is
tacit anvil
Room on manual recon and enumeration? Especially good to know so the boxes don't get doxxed by a countless amount of bruteforcers
And just a general thing that was mentioned before: an update to the custom wordlist room
somber crow
You don't share boxes.
tacit anvil
I know. Still good to learn for bounties and other platforms
karmic raven
theres already plenty of rooms covering more manual tools for recon and enum such as enum4linux, linenum, smbmap, smbclient etc
somber crow
Those are automated scanners
karmic raven
yes I know thatโs why I said more manual and not manual however youโre not going to get very far really doing manual enum trust me it sucks if heโs worried about doxxing those tools wonโt do much when it come to doxxing problems
tacit anvil
True
somber crow
Doxxing isn't the right word
tacit anvil
My point here is really that there's times when automated tools are out of scope, so some knowledge in in manual testing can be useful. I have a few ideas for manual stuff that I can start working on soon
past wren
Room about wannacry or maybe ransomwares in general
karmic raven
CMNatic has it coming up in his malware series I believe am I correct @lunar plank ?
https://i.imgur.com/ZklNr1i.png heres the outline for the series wannacry is a little later @past wren
past wren
We need more malware stuff,they are great
lunar plank
Yesss correct @karmic raven thanks for sharing the path/route (: mucho appreciated. Room coming soon! @past wren
tropic cave
Need that now
lethal marsh
More rooms on web app testing pls that will help us in bugbountys
tacit anvil
I think there are some in the making
robust pike
Would it be possible to get a room for the autorize tool within burpsuite?
Would be great to see priv-esc within autorize
karmic raven
burpsuite is such a big tool that covering everything and all the possible uses for it isnt possible the new burp room covers everything you need to know to get up and running with burp I think that would be better off researched on your own
robust pike
gotcha, thanks @karmic raven
somber crow
@limpid locust wrong chat
limpid locust
mb
tacit anvil
More stuff on wireless pen test?
eternal pelican
Hey, is the Linux challenges box being removed from free section?
somber crow
@eternal pelican what free section? Probably wrong channel?
eternal pelican
can I dm? @somber crow
somber crow
@eternal pelican no.
somber crow
It's been asked for many times
eternal pelican
how can i complete this graph isn't there any alternative?@somber crow
ember tide
No you have to take the subscription
tacit anvil
More stuff on wireshark and .pcap file reading?
tacit anvil
i would like a lot more free reversing and binary exploitation challenges
i don't want to be stuck a script kiddie
opal saffron
A room on making oneself Anonymous.. clearing logs post exploitation, scanning a target with nmap in stealth mode.. using proxies, decoy or zombies
sleek elbow
so the big thing is you can't really be "stealthy" with nmap.
Its super loud and noisy, and its footprint is way too noticable. You'll want a homebrew port scanner. If logging is deployed & deception technologies are in use and you try to scan a whole address range and hit a fake box, you're instantly known.
and thats from first hand experience.
tropic cave
What mean u by deception technologies
inner depot
Honeypots and such
languid wharf
Free binary exploitation walkthroughs would be cool. ROP4noobs would be very helpful.
somber crow
More binexp coming soon
languid wharf
๐
shadow cloak
a room with the famous http -> redis SSRF? I would really love that โค๏ธ
tacit anvil
a room about covering your tracks when pen testing, etc.
not getting caught or traced
proxies, etc. etc.
golden mountain
somber crow
When someone decides to make it
Or Skidy/Ashu decide to commission a creator to make it
golden mountain
these are just ideas for boxes that:
- community members can make a box of
- maybe they'll be picked up by admins and commissioned to a creator
somber crow
I'll see what I can integrate into my next box
tacit anvil
thanks ig
somber crow
You can create/submit rooms if you want
tacit anvil
but they need to be confirmed by admin ofc
tacit anvil
ah i see
ill try to find a topic im knowledgeable about in room-submissions
or just make a hashcat/johntheripper/hydra tutorial or guide
somber crow
Long as it's actually a good, high quality one and not copy/paste from the docs
tacit anvil
lmao it won't be
tacit anvil
chrome dev tools room
somber crow
Firefox comes with kali tho
earnest copper
python pwntools walkthrough room please
minor maple
a room on how to be anonymous!!
somber crow
@minor maple what do you mean?
tropic cave
This has been suggested multiple times over the last few days though
valid loom
It is already in the room submission queue, as pointed by our local orange cat
minor maple
a bug bounty hunter path !!
rain flax
ehh, i believe the content on THM (and the internet) is good enough to teach someone about pentesting, and then that knowledge could be applied ro bug bounty
seems like it would be redundant, long story short
tight night
"bug bounty" is just a fad name for web app pentesting, except the triagers tell you your submissions aren't findings (which they really are findings generally).
Plenty of web app on the platform already.
deep bolt
Sa
tacit anvil
chrome dev tools room
@tacit anvil @somber crow yeet thanks for submitting
little olive
Any django base vuln room are there....
vital brook
@little olive yes
tacit anvil
intense room on exploiting without the use of tools like metasploit. sort of like blaster but more in depth
nodemcu esp8266 room, how to load packages and make stuff in arduino
somber crow
More exploitation without metasploit is already submitted, quite important due to OSCP restrictions
somber crow
Would there be any interest in a "How webapps work?" Room?
lament star
Yep, I sure would be interested in that room
tacit anvil
nodemcu esp8266 room, how to load packages and make stuff in arduino
@somber crow what do you think about this?
I also really can't believe we dont have an SQL injection room 
lament star
@languid ibex is making a sqli room if I remember correctly ๐ค
somber crow
It's being reviewed at the moment
Personally, they're cool but a little out of scope for cybersec? @tacit anvil
tacit anvil
@languid ibex is making a sqli room if I remember correctly ๐ค
@lament star thanks!
gaunt cosmos
A room on nosql injection would be cool ๐
languid ibex
I can give early access once it's approved ๐ณ
lament star
nosql would be nice as well
tacit anvil
Personally, they're cool but a little out of scope for cybersec? @tacit anvil
@somber crow yeah but i there are some really powerful things you can do with it. it is a bit out of scope for thm in general as it would be hard simulating that irl
would be cool if we can hack wifi
somber crow
You can't simulate it on THM
tacit anvil
through your openvpn
tacit anvil
maybe you can automate a way to deploy wifi networks the same way for vms
though that would mess up the ovpn stuff
tacit anvil
well yes but i cant exactly talk directly to dark or ben lol
somber crow
Skidy/Ashu would be the people
tacit anvil
ah, thanks
golden mountain
I could maybe look at that when I'm free. I saw a wifi card sim a while ago which could be used to simulate APs
tacit anvil
theres a script on github that you can load into a nodemcu to create a virtual wifi to mess around with the wifi cards and stuff
golden mountain
not everyone owns a nodemcu
lament star
Ooh, when you do send me a link too @golden mountain
golden mountain
the point is to have everything you need on a thm VM
tacit anvil
theyre really cheap
yeah youre right
that would kind of ruin the entire slogan i guess
lament star
golden mountain
I think that's the one
lament star
Hmm, yeah, I'll take a look at it tomorrow, thanks 
somber crow
I'm interested, would you be able to use monitor mode etc and have a virtual wlan?
lament star
๐ค
golden mountain
not sure, i'll need to research that
somber crow
If so, that makes this idea really feasible
golden mountain
from finding mon in code it looks like it might be possible, i'll get a vm and test that
somber crow
Spicy
golden mountain
if this works then this opens up a whole new area of things to do
wireless pivoting maybe 
tacit anvil
If so, that makes this idea really feasible
@somber crow i get credit kthxbye
somber crow
dev it yourself if you want it to happen
tacit anvil
excuse me but i came up with the idea <:(
karmic raven
dear god just thinking about setting up wireless pivoting gives me a headache
golden mountain
lmao yes
golden mountain
๐
karmic raven
Itโs a cool idea but it would take a lot of dev time
golden mountain
leaked room code?
tacit anvil
lol theres only 1 task
golden mountain
joined it for a split second
karmic raven
thatโs evil now I canโt sneak into your room in the middle of the night
Iโm in a lot of oddball rooms that have yet to be released
somber crow
As a tester, I'm in more
tacit anvil
how can i be a room tester?
somber crow
Get selected
tacit anvil
bruh
cedar echo
I feel that there aren't a lot of rooms running NoSQL dbs
also, how bloody evil are we allowed to be?
prisma hemlock
as evil as your little heart desires
just know that your standing in the community falls the more evil you are
cedar echo
so forcing someone to nmap without nmap is too evil?
gaunt cosmos
Thatโs not evil enough
cedar echo
I just storyboarded a path I'd like to try to implement, but I feel like it'll be too easy to run into dead-ends
I also have to learn to willfully code vulnerabilities and I feel like that'll be hard...
and also block vulnerabilities where there shouldn't be any
sharp bough
do a room with a challenge about reroute the md5 to oc3
somber crow
Could you provide a little more detail?
MD5 is a hashing algorithm.
OC3, you've said, is related to fiber networking.
I'm struggling to see what you're asking for here, and how the two relate.
@sharp bough
somber crow
Or in real life. They're very seperate things.
somber crow
You can tap fibers, but MD5 hashes aren't usually sent over a network.
sharp bough
oh i see
simple thistle
Room on indepth buffer overflow with gdb and gdb peda
native raptor
It's coming soon ๐
simple thistle
So excited!!!
tacit anvil
Should be a blast
past wren
A room about git?
sudden garnet
not a room but if you wanna learn before a room is maybe created: https://learngitbranching.js.org/
tacit anvil
a room about major exploits such as mirai, heartbleed (i know, really old) and so on.
somber crow
There was a heartbleed one
tacit anvil
also, we should have android vms that are hosted via noxplayer. i really want to know what hacking an android would look like, as its a phone
somber crow
Mirai was a botnet that used a collection of exploits
tacit anvil
yeah i know
somber crow
AWS can run android natively, but it's just linux
somber crow
I suspect @lunar plank's malware series might cover that at some stage?
tacit anvil
oh thats good. i hope he has tuts on rats and social engineering in there
what about android hacking?
karmic raven
CMNs series is on malware analysis so I donโt believe that there will be any content on social engineering and if there is any content on rats it would be about looking at the insides of a rat not how to use them as far as android hacking there is already a room on it and as James said aws can run android natively itโs just finding the right creator willing to make the room @tacit anvil
tacit anvil
thats a mouthfull lol, thanks
ah, understandable, and id like to see how theyre structured
is the series out/partly out?
tacit anvil
that looks awesome
after i finish my current rooms, primer path, beginner path and a few network stuff ill do his series
plus i need to finish my own room
ruby zephyr
thanks @lunar plank
lunar plank
anytime!
ruby zephyr
how much time takes room to get evaluated ?
native raptor
@ruby zephyr have you got one in the queue?
native raptor
Depends on how busy the queue is usually. How big a room is it?
ruby zephyr
2 tasks
2 windows VM's
one for testing exploit
another for flag
no problem i wait
just asking
native raptor
The writeup you linked is for a CTF that already took place -- do you have permission to be using the material in the room? ๐
native raptor
Fair enough.
ruby zephyr
๐
storm canyon
oh i remember doing that one. it was fun
lunar plank
Thanks for sharing that @karmic raven sorry I missed the q's about it (:
tacit anvil
wb a capstone room thats really hard and makes you feel like a pro after finishing it?
karmic raven
......
we have plenty of hard challenges
networks will be similar to this idea however
somber crow
You just want more hard content?
final sun
wb a capstone room thats really hard and makes you feel like a pro after finishing it?
@tacit anvil capstone? It's more useful for making a project, not a room. Only if you meant capstone the disassembler.
tacit anvil
Can we have a room where we blow up a centrifuge? K, thanks, bye.
lament star
Stuxnet ๐
royal merlin
creating fake APs.
sleek elbow
airbase ezpz
karmic raven
I donโt know how we could actually make a high quality room with that other than here you go wow now you have a fake AP gathering intel, recon, etc would be all hard to simulate in a room
tacit anvil
room on how authentication tokens work
somber crow
@tacit anvil specifically?
JWT is covered in a room already.
What are you actually asking for?
somber crow
So you want session tokens basically
tacit anvil
@somber crow how tf am i supposed to know what the rooms are named
lament star
Common sense
golden mountain
@tacit anvil there's /hacktivities that filters through names, tags and description
shadow cloak
Ezpz
tacit anvil
hello. is anyone here?
icy trellis
Just type the room that you would lke to request.. (kindly)
tacit anvil
i looking for something with smtp
and should be great with message submission agent
and postfix server
lament star
V8 exploitation room
brave barn
SherlockHolmes Room?
karmic raven
As in Sherlock the tool or a Sherlock Holmes themed room
brave barn
As in Sherlock the tool or a Sherlock Holmes themed room
@karmic raven Sherlock Holmes theme of course
somber crow
Sherlock holmes is probably public domain now
brave barn
How is that, didn't understand sorry
brave barn
Well you're not making it based on the TV show so I think yeah that might be Ok
sinful pier
And Mr Robot isn't copyrighted?
somber crow
@sinful pier Wasn't made by THM, no one is making money
I'm not saying you can't use characters etc
I'm just saying it's easiest to go Public Domain
sinful pier
Interesting, it's money based then?
somber crow
Not a copyright lawyer
sinful pier
sure sure
sudden garnet
wait
the room i'm making at the moment, i have a theme based on a disney show
do i need to change it ? ๐
somber crow
Copyright law is messy
sleek elbow
I dunno what applies, ex. Bighead is a direct rip from Silicon Valley on HTB 
somber crow
Importantly, public domain is clear cut allowed
sinful pier
Honestly, as long as Disney fanfiction exists, I think you're fine @sudden garnet
sudden garnet
@sinful pier i don't even wanna read some of the disney fanfiction out there ๐
sinful pier
That implies you do wanna read the rest. No judgement here
sudden garnet
@sinful pier maybe you can come up with some when you try my next room, hopefully a little harder for you haha
tame plaza
guys... aloha.. any room to learn BoF on THM?
somber crow
have you used the search feature?
This channel is for requesting rooms to be made
Not recommending rooms for you
tame plaza
I just wanted to know if there's any room for basics of BoF already on THM
tame plaza
thats all
native raptor
https://tryhackme.com/room/bof1 That's a good bet @tame plaza ๐
tame plaza
https://tryhackme.com/room/bof1 That's a good bet @tame plaza ๐
@native raptor God Bless you... I really appreciate your help.
native raptor
Np ๐
sinful pier
tbh, the search feature is kind of hidden. I didn't know it existed until I checked this discord
I don't think of "hacktivities" as teh place to go looking for rooms
somber crow
Where do you go?
slow anchor
Do room creator need to add flag himself?
lunar plank
Ya huh
Most use the THM{} formatting but itโs creators choice
Just as long as itโs consistent (:
slow anchor
Ah alright ๐
tacit anvil
Hi . is there any room related to maltego
tacit anvil
room on osint tools like pipl, whitepages, etc. other than maltego
tropic cave
Sherlock!
karmic raven
the thing is its hard to make good content on it we try to not only show you how to use the tool but also the knowledge behind the tool thats hard with osint I might make a room similar to cc: stego but with osint im not sure I have a lot of other stuff going on as well so
tacit anvil
you have a problem with run-on sentences, cry
karmic raven
its just the way my brain thinks im a very run on kind of guy if you look at my rooms its not like that though mainly because I get bullied if I have bad grammar in my rooms
tacit anvil
i can see that
native raptor
Guilty of bullying o/
prisma hemlock
Cyber bullying is a crime!
@karmic raven if you need a shoulder to cry on Iโm here for you 
cunning thunder
CVE 2019/2020 exploit based rooms. ๐
tacit anvil
How do I can hide the account name on Facebook?
plush tiger
hello
slow anchor
@somber crow I am trying to upload vm but it's stuck at 0.00 for almost half hour
Can you please guide me
slow anchor
In which part I can post about it ?
tacit anvil
Binary hacking room
past wren
An in-depth binexp walkthrough room
lament star
There's a buffer overflow room in the works, through we already have these and a few others:
https://tryhackme.com/room/binex
https://tryhackme.com/room/bof1
somber crow
@somber crow I am trying to upload vm but it's stuck at 0.00 for almost half hour
@slow anchor #site-support
tacit anvil
refresh the page...?
tacit anvil
pwncat room
karmic raven
should see about John doing it as heโs the best person for it
somber crow
Click "view room feedback"
ruby zephyr
i deleted my room few days ago and cant see feedback
ruby zephyr
ohhh ok
somber crow
We can't evaluate a deleted room
Also please remember, not all the testers are mods
And not all the mods are testers
ruby zephyr
ok ok
karmic raven
general room on utilizing c2 frameworks like empire, covenant, cobalt strike etc or an update to the empire room with the new updates by BC-Security
somber crow
Updates to RP Empire are on dark's list already
tight night
I'm actually playing with Starkiller and E3 right now. Pretty cool.
And I might touch on Covenant as I'm using it more and more.
Cobalt Strike probably won't happen unless they give everyone a license for it.
fleet frost
Would be great to have a room to learn about websockets
tacit anvil
The python scripting room has a task that involves programming a python websocket to solve it
fleet frost
The python scripting room has a task that involves programming a python websocket to solve it
@tacit anvil Thanks, will check it out!
thorn oasis
can we have a room covering passive recon?
karmic raven
We already kind of have google dorking, and sublist3r I could see about making a room on general passive recon however itโs hard to virtualize some of the techniques
maybe able to do passive recon room where you gather recon on tryhackme I donโt know Iโll see what I can do
sudden garnet
if you were to do it, iโd suggest making the tasks not require answers since things will change all the time - such as those shodan questions
light lynx
if you were to do it, iโd suggest making the tasks not require answers since things will change all the time - such as those shodan questions
@sudden garnet Yes, please consider this. Unless you write a program to auto-update the answers, the Shodan room is the bane of my life because of how frequently the answers changed ๐ฆ
karmic raven
I could probably fairly easily make a script that updates the answers once a week or every some odd days it wouldnโt be hard
light lynx
szy pls i bet u send me the route
let me make a program specifically for updating answers in rooms
I need this ๐
golden mountain
@light lynx sure, send me a DM and we'll talk in there 
wet laurel
are there any rooms geared towards the Security+ exam?
I heard Blue Primer but I only see 2 rooms
karmic raven
@wet laurel 1.) #cyber-and-careers is a better place to ask this question
2.) thereโs not any rooms specific to it however you can probably look through for reviews on it and see exactly what the content is and study on tryhackme from there
wet laurel
Thanks @karmic raven ! I have some people taking the exam in a couple weeks and I'd like to give them a hands-on supplement so they can do something besides death-by-powerpoint.
tight night
It would be easier if the exam was more hands on. But it's all theory.
viscid gyro
Any room for the basics in port forwarding or tunneling using the like of chisel would be good if there isnโt any.
native raptor
I may have a look into that ๐
viscid gyro
Cool thanks ๐
timid vessel
I'd like to see a room that is an Intro to CTFs. Going over the different types of CTFs, solving for each type, etc. Preparing you to then do the regular CTF rooms by discussing the structure and how CTFs work for those who may be new to CTFs and how they work.
brisk tapir
That's called a writeup
brisk tapir
You can check ctf writeups on medium https://medium.com/ctf-writeups
Then there are resources like https://ctf101.org/ and https://www.hacker101.com/
timid vessel
oThanks @brisk tapir I'll pass those along as well. In the security engineering mentoring I have done "what is a CTF?" seems to be a common question as well as sometimes from senior security professionals who don't work in the offensive space but want to learn what a CTF is and how they can get into them more. Those links you posted are good as well as John Hammond's Youtube video about it. When I first suggested it I was also thinking about it potentially being in the beginner or similar learning path on THM even as a "Intro to" type high level type room. Thank you again for your reply.
coarse pebble
Room about regex would be cool
coarse pebble
Uff
native raptor
Just waiting on its creator to make a couple of changes ๐
native raptor
silver atlas
is there any room for begginer crypto-cracking?
tacit anvil
https://tryhackme.com/room/cryptofunhouse This is a pretty decent intro-to-crypto room with varying difficulties.
stuck vale
are there any more rooms to practice osint besides OhSINT?
icy trellis
Some rooms have OSINT in them but are not based around OSINT.
tacit anvil
Is there a demand for OSINT based rooms?
I think educating people about how dangerous open disclosure of personal information on the internet is can be a good topic
Things like SIM hacking usually rely entirely on OSINT
and social engineering
lunar plank
I'mma be biased here and say Google Dorking
you can find some very
interesting results if you query it right
icy trellis
^
tacit anvil
I feel like the dorking room doesn't teach you too in-depth about dorking
you could go so much more in-depth and thorough
icy trellis
I'm sure the Dorking room is a base overview though
How to get what you want with a web browser
tacit anvil
Like it should definitely teach you about people publically disclosing things like PDFs and config files
lunar plank
it creeps closer and closer towards the borderline of "does this encourage blackhat stuff"
tacit anvil
those are pretty important vulnerabilities
icy trellis
It does, but legally speaking
it creeps closer and closer towards the borderline of "does this encourage blackhat stuff"
Yeah exactly
lunar plank
It's designed with the mind of "research if you wish" but heree's how it works
without crossing the ethical line
tacit anvil
right, but I also just think that it's a way for pentesters to find out if a webapp is disclosing unnecessary information
I mean- it's still a vulnerability that can be easily patched
It's like leaving your security config files out in the open to the public
But I guess you're right, since google implies that whatever you're pentesting is already out on the open internet
and is probably a production server
lunar plank
I appreciate the thoughts though smackhack
there's a lot further I could go into google dorking I fully agree
icy trellis
I'd say leave it to the user as Dorking is really powerful and TryHackMe might be in legal issues if someone takes it too far and blames it on us
tacit anvil
Yeah, true
lunar plank
It's something I'll very much consider developing further when I get a bit of time
But yes
as Jabba said
It's very easy to encroach on that sort of things
I designed to make people aware the technique exists and how it works
icy trellis
Maybe provide them with the file. Saying "Using Dorking we found this website: " and then give them a .html or .php file containing the information they "found" and then let them exploit a webserver that was setup by a user
lunar plank
they'll have to research further outside of THM to do anything meaningful which in that it's on them
I like that!
tacit anvil
Maybe like a built in browser query on a box that lets you look for hidden .pdf files
lunar plank
I have something similar setup for an event, once that is over, I'll definitely look into incorporating that into there
tacit anvil
containing info that can be used to gain credentials
lunar plank
I really like your ideas there (both of you)
tacit anvil
I mean ideally- if we're training ethical hackers/webapp pentesters
it should be public knowledge that people can accidentally disclose this kind of stuff unintentionally on their webservers
and that pentesters should look for these
lament star
ideally
lunar plank
it's one of the main reasons why attacks happen the way they do
accidental disclosure
tacit anvil
yeah
Not telling people about it would defeat the purpose of doing an all-encompassing pentest imo
Could make a bulletproof webserver, but if you accidentally disclose root account credentials in a random .conf or .pdf that happens to be on the wrong side of the server
lunar plank
Absolutely agree
I really like the idea of getting people to hack a box on THM using techniques such as that
tacit anvil
I think part of improving cybersecurity as a whole is also educating people on very commonly and easily abused vulnerabilities such as these
tacit anvil
even though it could potentially be used by blackhats, I think it's a good idea to make it public knowledge so people are more aware of not doing it by accident
LMAO
lunar plank
definitely
icy trellis
Damn CMN you're plate is full
icy trellis
Wish I could take some of it off your hands
lunar plank
"so here's how you hide it"
tacit anvil
yeah exactly
It's a really easy patch usually too anyways
it's literally just oversight
lunar plank
Yeah, I've been none stop for a while now @icy trellis, now with my work starting again
Keeps me out of trouble at least :PPP
tacit anvil
I'm gonna go into full box dev as soon as I finish my networking cert exam ๐
tacit anvil
np np
lunar plank
I appreciate your thoughts on it fr
once this event is over
there should be something that I can develop further for it (:
icy trellis
Awesome Sauce
light lynx
Damn CMN you're plate is full
@icy trellis tbh i have been telling cmn to take a break for like 3 days now
storm canyon
There is a room on how to make a room coming right??
karmic raven
yes
lunar plank
yessss
ETA:
mid august
and that's when it'll be gone through via dark
and then the normal submission queue
regal tundra
ACtive directory machines?
somber crow
There's one already, one coming, and then networks will bring a lot of AD content ss you can actually have a network of VMs to make a domain
karmic raven
thereโs 5 out 1 ready to release and a huge network coming
@regal tundra
- Ra
- Set
- Attacktive Directory
- Post Exploitation Basics
- Attacking Kerberos
regal tundra
Nice, thankz
wide osprey
There's one already, one coming, and then networks will bring a lot of AD content ss you can actually have a network of VMs to make a domain
@somber crow I can't wait for this! has so much potential
sturdy galleon
Anyroom on wireshark
tacit anvil
this has a task that briefly explains how to use wireshark
and I think https://tryhackme.com/room/smaggrotto involves packet analysis maybe
native raptor
There's also a whole room on pcap analysis
Plus a room full of challenges
Plus the ridiculously hard room full of challenges
icy trellis
And the advent of Christmas has a lot of pcap analysis
quiet grove
Hey there fellow hackers! So after pwning about 20-30 vulnhub/hackthebox boxes i want to make by own. tho i could use to help on making it (have the basic idea on a txt file). so if theres someone up for it ping or dm me! I woulden't mind a colab of some sort!
prisma hemlock
Thereโs a room coming out soon โข๏ธ about how to make a box
quiet grove
oh awesome
prisma hemlock
John Hammond also did a video on the making of a box on YouTube
torn frost
A room to learn GTFObins ?
lament star
There really isn't much to learn there ๐คท
You just look up what binary you need and follow the steps
torn frost
Well in vulnversity room you have to exploit a binary and use GTFOBins and "follow the steps" as you say, but it could be interesting to understand those steps, and why we do it that way
Dunno just guessing
prisma hemlock
usually youre following the exact steps, I think a little self research for why it works is expected if youre interested in knowing
tacit anvil
@torn frost Check out the linux priv esc playground, or the lazy admin final rooms.
Those have tons of exploitable vulnerabilities, most of which are gtfobinnable.
torn frost
Thanks for the info, I'll check
waxen snow
A room explaining how the browser Tor operates ? (Setup, dns, cryptography etc.) Maybe a part regarding how to use proxychains or other of our usual tools on Tor?
prisma hemlock
https://tryhackme.com/room/torforbeginners you mean like this?
waxen snow
Well maybe not the set up as there is already a room for that but for the how it works precisely
ahah I saw that one right after I wrot the above text ๐
waxen snow
Ill give it a look thanks ๐
tacit anvil
It's in the works at the moment
lament star
It's a soonโข๏ธ through you can use the docs + Dark's new video.
jovial prawn
Yeah i meant that
jovial prawn
Last time i used vagrant it bork my whole ubuntu
tacit anvil
i'm trying to look for it atm
jovial prawn
Without vagrant if possible ?
jovial prawn
Thanks a ton โค๏ธ @tacit anvil
tacit anvil
np
tacit anvil
Some basic Powershell box?
lament star
Already have that I think?
https://tryhackme.com/room/powershell
tacit anvil
Oh Sorry. Didn't know it. Thanks.
balmy portal
I would love to see a regular expression room. I always have problems with them. And It would be nice to see a regex walkthroughs combined maybe with grep or find.
tacit anvil
There's a find command room, but yeah, not regex afaik
balmy portal
thats great! thank you!
tacit anvil
@lament star do you mean like next room release cycle soon ๐
lament star
Maybe, maybe not ๐
native raptor
A regex room will be released soon
@lament star How the hell do you know that?
tacit anvil
Any rooms on return oriented programming and return to libc (state of the art exploitation techniques)?
I'd would LOVE a room like that!!!
lament star
@native raptor I joined that room before it was even approved, the creator is a community mentor and he mentioned it in the mentors channel 
tacit anvil
Maybe a room/walk-through for writing your own shellcode would be interesting.
light lynx
@lunar plank this seems like a room we can do together ๐ #544951750801752079 message although idk anything about hacking related ML ๐
lavish roost
Throwing out a suggestion. It would be really nice to see an android malware apk reverse engineering room!
coral ravine
lavish roost
yay!
random saffron
I would like to upload a vulnerable VM to TryHackMe, can it be in OVA format?
prisma hemlock
I think thatโs the only format it can be
lament star
๐
prisma hemlock
What the heck is qcow
People have never done that cuz they probably thought it was a joke
golden mountain
Does also take qcow
@native raptor last time I checked it doesn't even though it's on the page
golden mountain
{
"message": "We are currently not accepting qcow2 files. Please convert to file type OVA and try again."
}
๐ง
tacit anvil
imagine if somebody spent all that effort to making a qcow and it doesn't work
lunar plank
Y'know @golden mountain you can have an answer to things in everything but JSON right
like
normies read in text
lunar plank
lemme just API and book
thats your way of learning
of look
this
let's JSONify it
golden mountain
serene rain
Is there a room explaining gobuster?
somber crow
Cc Pentesting
neat gazelle
How about a room on Network Steganography?
It's kind of a niche topic and would be hard to make but it would be really cool to see
strange schooner
Ew steg
gleaming token
I'm applying now to some cyber security company.
They asked me as an home exercise, to create some informative document about passive footprinting.
Now, while doing footpritng with some tools, we look, among the rest, for details like: DNS, IPs and other networking stuff.
I would like to know if there is some good room to understand why these details are essential actually, how do they help us at the further pentesting, what do they say at all?
Thanks.
somber crow
Sounds like you need to look for some passive recon tools and see if there are rooms on them
gleaming token
@somber crow Yeah, it might be suitable. But there are a lot of them, I think it's not really realistic.
BTW, how can I look for rooms that contain even some word, for example, if some room contains the word DNS I want it to be displayed in the results.
I can search in THM only for my rooms, according to their titles I think...
gleaming token
Cool thanks
@somber crow Yeah, it might be suitable. But there are a lot of them, I think it's not really realistic.
BTW, how can I look for rooms that contain even some word, for example, if some room contains the wordDNSI want it to be displayed in the results.
I can search in THM only for my rooms, according to their titles I think...
@gleaming token Anyway, if someone has another idea, something more concrete - it would help me a lot ๐
feral reef
you've asked for this in the resource channel as well pal, try doing some research yourself too. hacking is not a skill is an attitude.
valid loom
Not trying to sound rude but if you don't even know what recon is and how it's used in a RTE, you're gonna have a bad time
Also you asked about this a weekish(?) ago, as brought up by Chevalier.
somber crow
(If this is homework, or for an interview then it's kind of unethical to ask us to find your resources for you.)
valid loom
You're unqualified. Take the L and spend time learning the process instead of asking for the answers to the exam.
tight night
Is that really necessary?
sleek elbow
erm, id say not, this whole conversation isn't even in the right place anyways
- we're not going to help you do your homework to get a job. Do that yourself. You're not qualified for the position if you're asking in here for help :/ @gleaming token
- Sundae, I agree, but please watch the tone there.
- Career talk goes in #cyber-and-careers
valid loom
I don't think I'm in the wrong. He asked about this last week and he was directed on where he can do research inside of this server to further inform himself. He was also told (by me) that he shouldn't just include THM in his research. He is here today basically saying he doesn't know about the job is that he's applying for and that's off-putting. You wouldn't hire a programmer that doesn't know how to program. You would tell your applicant to learn the process and come back later. I might have sounded blunt, but he's going to hear a lot worse if he actually lands across someone that knows he basically doesn't know the topic, but somehow has the job. I've seen people get pecked straight out of jobs because they lied about being qualified. He needs to learn the process and about the job before applying and that's what my overall message is.
sleek elbow
@valid loom Please dont discuss further. Its not the primary topic of this channel.
valid loom
w/e
onyx rivet
Can we have rooms on DFIR? I actually haven't found any mainstream platform where we could practice DFIR. Tools like Graylog , Moloch , osquery and kibana , all these were alien names to me before I started looking into defense and Incident response or are these tools not feasible to use on Personal Computers. Just wanna know. Peace โ๏ธ.
somber crow
More forensics and blue team content is something Skidy has said he'd like to focus on
onyx rivet
Yeah basically searching and reporting ๐ , I was like people get paid for this
But it's always good to know atleast what they are.
lunar plank
How does something along those lines sound @onyx rivet ?
That's what my focus is once I can get back into room dev
I ain't got much on reporting which actually, in hindsight, is a good idea
I'm only qualified to write a report for UK justice system for device forensics but
shut steppe
Hi guys
somber crow
Hi there. Got a room suggestion?