Vulversity*
#room-ideas
shut steppe
somber crow
This channel is for asking for rooms to be created
shut steppe
Can u create fun box
somber crow
I try my best.
somber crow
If you're not here to request a room on a specific topic, can I ask you to move to #general please?
sharp bough
Can we have a room about pwn completely?
languid ibex
There's 1 in works, IIRC
sharp bough
owo
onyx rivet
@lunar plank recently got the opportunity to work with suricata, ftk imager and autopsy great tools, eagerly looking forward to have rooms for that. I hope you come back to room dev ASAP. Best wishes.🙃
serene rain
Is there any rooms which are good for two people to work on??
prisma hemlock
I try my best.
@somber crow hahaha oh james
Ahhh I just realized that was from last night sorry for early ping 😱
brisk tapir
Is there any rooms which are good for two people to work on??
@serene rain You mean like a team 🤔 You can pick any box you like or host a private KOTH
lunar plank
It's honestly my absolute favourite part art of my graduate degree @onyx rivet so I'm hoping that will reflect when I can get back to it (:
lots of blue team stuff to come
restive niche
Can we have a room about pwn completely?
@sharp bough was just about to ask for that. Both PWN and RE would be nice
tacit anvil
Is there any chance that there will be a RE room for iOS Apps? Or are the Policies from Apple too strict?
prisma hemlock
From what I understand the rights are pretty locked down, so I doubt it.
Someone correct me if I'm wrong, though.
tight night
iOS stuff is difficult.
valid loom
Apple seriously has that stuff locked down. Like they are giving out iPhone devices for certified reverse engineers, but you have to also pay for it and, again, be certified.
feral reef
isn't that like a very restricted version of the iOS if i recall correctly, designed only for testing @valid loom ?
valid loom
Yes you're correct
tacit anvil
There is a room about noSQL injections? If not is a good idea to develop one
slow anchor
I saw noSQL in one room not sure
tacit anvil
Yeah , in one of the hards, but I mean explaining it,a tutorial instead of a box
slow anchor
Ahh right
coarse pebble
Smart @tacit anvil
graceful scarab
rooms like bufferoverflowprep but for linux executable would be nice
icy trellis
For OSCP you mean?
somber crow
For OSCP you mean?
@icy trellis No
PWK teaches both, but the exam is only win32
bufferoverflowprep has a bunch of vulnerable binaries and the tools you need to exploit them
icy trellis
I worded my response badly my bad
graceful scarab
just in genral.. I'm still strugling a bit in the linux part using gdb r2 or whatever tool
somber crow
I worded my response badly my bad
@icy trellis Point still stands, OSCP doesn't care about linux bof for now
icy trellis
Yeah that's what I was meant to say
graceful scarab
really struggled with anonymousplayground
icy trellis
But the words aren't flowing correctly Sorry James haha
mellow shadow
Is there a room that explains the logic of buffer overflow with baby steps?
somber crow
Not yet
mellow shadow
So should I wait for it to open or try to solve the difficulty at hand? I don't have self-research on the topic and I think it's difficult.
*If my question is a little silly, I will ask it more clearly. Are you thinking of bringing a room to explain from easy to difficult?
somber crow
Me personally? I'm not making anything for BoF
There are people making walkthrough beginner level introductions to buffer overflow
mellow shadow
Under a room ?
somber crow
As a room, yes.
mellow shadow
Thx.
tacit anvil
I have a couple good resources that explain BoF if you want @mellow shadow, its not in "baby steps" but a good introduction if you have a little bit of programming experience
mellow shadow
@tacit anvil Let me check if you can share. And thanks
final sun
@mellow shadow Check pinned messages in #resources
mellow shadow
For Ctf101's buffer overflow ?
strange schooner
@light lynx Don't they have to get the room checked out first?
tight night
@somber crow
light lynx
@south trail I deleted your message, your room has to be approved by THM first. you can do this by submitting your room 😁✨
also this is the wrong chat
south trail
Ah, I want aware, could you point me to the right chat please. In the developer options where may I forward my room to could you please advise to a document i can follow up on
light lynx
also once it's approved it has to go in the queue and once it's published you can advertise 😁
I'm on mobile right now but if you go into settings of your room you'll see a heading called "make public" and if you click that switch it'll be reviewed :)
if anyone else is reading this please clarify I'm on mobile and out at the moment 😜
somber crow
As it's a challenge, it will need to have an official writeup for the reviewer to follow
strange schooner
Plus on top of that your write up contains the answer.
tacit anvil
Who rates the dificult? the creator or the reviewer?
south trail
It has both. and the writeup is supposed to contain the answer isnt it viewable once flagged?
light lynx
Who rates the dificult? the creator or the reviewer?
@tacit anvil both, the creator suggests a difficulty and if the reviewer disagrees they can change it
tacit anvil
An idea here: the posibility to delete all the completed task in rooms in order to do them again without the answers, just doing from 0 all the times you want. I think it could be a good way to learn also.
icy trellis
Ask the room owner or Muir kindly to reset your progress.
sudden garnet
hashcat walkthrough
shut crown
@sudden garnet I could take a look into making this. The issues are though is it depends on specific hardware, so I'd need to see the specs on a THM box and tweek it accordingly (this just means I have to deploy a box and do some testing)
Hashcat devs themself has said there isn't a lot of good intro2hashcat content (that is actually correct) so I could coordinate with them to get some ideas together
karmic raven
either put on hold or rejected probably
shut crown
hashcat is GPU based
brisk tapir
It looks pretty detailed tho
lament star
It was rejected
brisk tapir
the reason being
brisk tapir
Not that something's wrong with the topic ?
lament star
Also very bad grammar
It was rejected, end of story.
It's also made by a banned member 🤔
sleek elbow
an intro to hashcat room is probably feasible with Google Collab
brisk tapir
I mean if someone is thinking of making a room, like sandw1ch above, it's better to know beforehand the reason of rejection. That's all 🤔
sleek elbow
karmic raven
I mean if someone is thinking of making a room, like sandw1ch above, it's better to know beforehand the reason of rejection. That's all 🤔
@brisk tapir the description says it’s cpu based I think that outlines the misinformation and bad practices in it
brisk tapir
Yeah it's clear now that it was just badly written
sleek elbow
I wouldnt mind revisiting an Intro 2 Hashcat room post networks
shut crown
Uploading an ubuntu VM with a working version of hashcat 6.1 on it, going to test resources and talk with someone who works with the hashcat team to get some ideas for a good set of intro info
somber crow
You might struggle as there's no GPU
brisk tapir
Isn't it better to let people run it on their own system ?
shut crown
@somber crow Yeah, but we can still use the intel CPU there. Hashcat can use more than just GPUs. Uploading to see if it's even possible to get it running on a VM lol
native raptor
It's highly recommended against
shut crown
You just need to install some OpenCL runtimes
native raptor
We've got one of the creators in here
somber crow
It's highly recommended against
@native raptor They fixed it out of the box on Kali so you don't need --force now
native raptor
Although that might have changed recently, given it's now fixed
somber crow
You just need to install some OpenCL runtimes
@shut crown If you recommend --force I will hard reject the room
native raptor
Ooh, fair enough. Ignore me
shut crown
Oh 100% james
@native raptor you mean the creators of hashcat? I'm working with one on testing this box rn lol
somber crow
Spooks recommended the Google hashcat tho, which is probably a better bet
native raptor
I do. Haha, fair enough!
shut crown
Yeah, ideally it would all be contained within THM. And trust me, I would never use --force lol
Just for ease of use ^
native raptor
Certainly a wonderful way of teaching people about it
I look forward to seeing this
shut crown
Yeah, hoping hashcat actually plays nice with me lol
near ferry
Hi all, I am half way through the creation of a room called AC12, based on the Line of Duty TV show (BBC). If it is good enough to a beginner room, is there a process of review and or testing by peers?
prisma hemlock
Make sure you have the rights to make a room based off that show
near ferry
The information from the show comes from the fandom site.
native raptor
Hi all, I am half way through the creation of a room called AC12, based on the Line of Duty TV show (BBC). If it is good enough to a beginner room, is there a process of review and or testing by peers?
@near ferry To answer your question, if you're wanting to release it publicly, it goes through the review team first. If it does contain copyrighted content then it won't be released, but otherwise we'll be checking to make sure that it all works / doesn't have anything potentially unintended, is grammatically correct, contains accurate information, etc..
shut crown
Hashcat can run on THM but it's SO slow (no surprise, GPUs are king):
hashcat@hashcat-demo:~$ hashcat -b
hashcat (v6.1.1-47-gb8a09615) starting in benchmark mode...
Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.
OpenCL API (OpenCL 2.1 LINUX) - Platform #1 [Intel(R) Corporation]
==================================================================
* Device #1: Intel(R) Xeon(R) CPU E5-2676 v3 @ 2.40GHz, 919/983 MB (245 MB allocatable), 1MCU
Benchmark relevant options:
===========================
* --optimized-kernel-enable
Hashmode: 0 - MD5
Speed.#1.........: 65444.1 kH/s (15.78ms) @ Accel:1024 Loops:1024 Thr:1 Vec:8
Hashmode: 100 - SHA1
Speed.#1.........: 48643.0 kH/s (21.28ms) @ Accel:1024 Loops:1024 Thr:1 Vec:8
Is there any way to request more resources? I don't think I'd need it, but it would be a good thing to know in case I need to request anything.
native raptor
Yeah, speak to Skidy @shut crown
And try to pick passwords that are easy to crack...
somber crow
You won't really be able to get GPUs though, most likely. They get crazy expensive @shut crown
Just get them to do it all locally?
Hashcat has builds for Windows on the site, and comes with Kali
shut crown
Oh yeah, I wouldn't request GPUs, more curious on the request for more speed.
native raptor
To be honest, tasks explaining how to install it properly would be a Godsend, although having a copy in the cloud could be great for beginners
shut crown
I can get away with this speed and then have harder bonuses for those who can run stuff locally
native raptor
My one concern would be people booting it up to use it instead of their own VPS or whatever, which is where a lack of speed could come in handy I suppose
shut crown
Yeah that's fair. I can assure you that it would be insane to try to crack anything on this
shut crown
Hashmode: 0 - MD5
Speed.#2.........: 439.2 MH/s (56.33ms) @ Accel:1024 Loops:128 Thr:8 Vec:1
Speed.#3.........: 4093.0 MH/s (64.73ms) @ Accel:512 Loops:512 Thr:64 Vec:1
Speed.#*.........: 4532.2 MH/s
Hashmode: 100 - SHA1
Speed.#2.........: 197.1 MH/s (62.75ms) @ Accel:512 Loops:128 Thr:8 Vec:1
Speed.#3.........: 1341.5 MH/s (49.20ms) @ Accel:256 Loops:256 Thr:64 Vec:1
Speed.#*.........: 1538.6 MH/s
My macbook does these speeds just as a comparison ^
Yeah, that's going to be the goal. Going to go over the common attack modes and reasons to use them.
shut crown
Going to run it by the hashcat guy I know first to catch any of my slip ups too lol
near ferry
@native raptor That is perfect - thank you. Much appreciated. Saves me asking for the template that Nick Cage and Brooklyn 99 supplied 😆
native raptor
If you want to include installation instructions for various platforms alongside the VM, that would honestly be gorgeous @shut crown
Great either way though obviously! 😁
shut crown
I'll probably include some basic stuff but include a your mileage may vary note, cause there is no way I'm going to try to help every OS lmao. I'll include ubuntu 18.04 and win10 because those are the easy ones.
native raptor
That would be perfect
karmic raven
@shut crown why not just utilize the google collab for cracking?
shut crown
@karmic raven Haven’t looked at it yet, but I think there is some value in using the actual hashcat commands and understanding the attacks. I’ll need to look more into google collab to be able to answer your question better.
somber crow
It just gives you some crazy fast GPUs
shut crown
Oh yeah, colabcat looks pretty cool, especially because you can just get a shell and run your commands. Maybe for the harder tasks I can say you can run locally or just go and run colabcat
lunar plank
Google colab is so damn good for everything datascience and ML
I v much imagine that translates to password cracking etc
shut crown
@lunar plank This was linked above, but someone already did the heavy lifting for setting it up https://github.com/someshkar/colabcat
shut crown
Thank @sleek elbow , they linked it first :p
sudden garnet
@brisk tapir that hashcat room ain’t mine
brisk tapir
I know it isn't yours. I thought a room on hashcat was already developed and was in works
But it was rejected
brisk tapir
I was already making one on hashcat @shut crown , but if you want to do it, go ahead
somber crow
There's no reason you can't both do it.
somber crow
They're from different people. They cover the content in different styles.
brisk tapir
All right then I will keep working
somber crow
@toxic quarry wrong channel
toxic quarry
ok
shut crown
@brisk tapir If you want we could collab a bit to not have overlap.
brisk tapir
Works with me, but I don't see how it can't overlap. Mine is like a walkthrough along with some challenges with a ctf at the end
Users need to install hashcat on their own system
Hit me up in dm, if you wanna talk further 🙂 We can try to avoid the most obvious
shut crown
Sure!
turbid schooner
I am unsure this is the place to post this so be free to tell me if i am in the wrong.
I downloaded openVPN thanks to some resources over internet in order complete the introduction room. I then found the openVPN room which would have been helpful at the time but now feel like confirming what i know. Did you ever though of linking the openVPN room inside the introduction room?
If my english is awful and/or not understandable, feel free to comment i am still learning.
strange schooner
@turbid schooner probably one for #544951750801752079
somber crow
The welcome room integrates the VPN room
turbid schooner
yeah but it only show for a kali linux while the openVPN room is showing for windows, macOS. but you might be right, this might be enough ^^
@strange schooner i feel like it's about a room but if you are sure i am in the wrong i will move it
tacit anvil
I just have an idea for someone to do a room about bluetooth hacking. I don't have a clue about how it works or what it does. It is just an idea so please don't roast me 😔
icy trellis
Nobody will roast you dw :)
somber crow
The theory side would be ok to make, I'm interested if we can add to that with dome practical bits
tacit anvil
I just don't know what can you in general do with hacking someone's bt device, and this is the only place that I'm relying on to teach me 😂
icy trellis
Bluetooth hackers can use your phone's Bluetooth connection to make phone-based payments or call pay-per-minute numbers. They can also download texts, photos and other files and install malware.
This is only a snippet and obviously it depends on the device but there does seem to be some discussions and posts online about the possibilities so you might want to read about them if you’re interested
tacit anvil
So if I'm not wrong. Technically if u can install malware on it, that means you can take control over the device completely... Or am I missing some knowledge?
Bluetooth hackers can use your phone's Bluetooth connection to make phone-based payments or call pay-per-minute numbers. They can also download texts, photos and other files and install malware.This is only a snippet and obviously it depends on the device but there does seem to be some discussions and posts online about the possibilities so you might want to read about them if you’re interested
@icy trellis btw thanks 😂😇
strange schooner
So if I'm not wrong. Technically if u can install malware on it, that means you can take control over the device completely... Or am I missing some knowledge?
@tacit anvil yes if you can install malicious software you can take over the whole device.
prisma cape
There's rooms on linux/windows exploitation, what about android/ios? I know there's an android room but as far as I know, it's more theory based on how applications run so idk, food for thought.
somber crow
So it's possible to do android on AWS, but creators can't upload android
it gets a little difficult there
prisma cape
I see, aren't there like simulators or maybe even VM's that can use android?
somber crow
You can have an android VM on AWS
But a creator would have to ask Skidy/Ashu nicely to spin one up to work on it, or use their own AWS infra and then transfer it
dull summit
since it's back to school time, at some point soon I'm going to begin work on a room that uses Canvas LMS which is used by lots of US universities and school districts. i'd also like to approach it from the perspective of a security analysis and forensics after someone else has accessed the system and made unauthorized modifications. i would appreciate any input and will be reaching out for help to some of you i'm sure
somber crow
Mobile forensics, rather than mobile hacking
tacit anvil
Mobile is mobile, idc 😂😂
Idk shit about mobile hacking, that's why I was asking yesterday about the bt stuff
coral ravine
There is an android hacking room that may help you understand a bit better about mobile hacking
tacit anvil
Mostly what I got from it to go on intro to x86/x64 room, where I was supposed to learn Assembly or what was that, so I gave up a little
I'll come back to it after I finish all easy rooms
coral ravine
yea buffer overflow yea I stopped that but will come back to it BOF hurts my brain sometimes
tacit anvil
63 to go 👀
coral ravine
I still don't understand it that well
tacit anvil
Buffer overflow was the second thing I started, but dnf
Same 😂
I've mostly finished the non-web based challenges
I think this belongs to #general
tacit anvil
Arch/Black Arch tutorial? Anyone? 👀
sharp bough
Arch/Black Arch tutorial? Anyone? 👀
@tacit anvil their official website have tutorials on how to use it
valid loom
Arch is too complicated to throw into a room. And I think Black Arch is not as worth making a room about since it's used less here on this server than Parrot. I don't think I've seen anyone talk about using Black Arch. As for Arch tutorials, the wiki contains a lot of good information and some of it you can transfer over to help with other Linux troubles.
Also Black Arch has like 2400 tools. I don't think it's within a reasonable scope to have a "tutorial" on it
icy trellis
The Learn Linux room is good enough to get you going. If you use Kali Linux for long enough you’ll gain the confidence to move onto arch.
I myself learned Linux through the learn Linux room and I’m slowly transferring over to arch. It something you should do on your own in my opinion ;p
pallid token
I can't see the point of an Arch tutorial, if you know UNIX you can use it. Installation is an easy process extensively described on the website.
I guess you could want a pacman tutorial but that would really just be reading the included --help to you, and stating "generally never do pacman -Sy package"
and a pacman tutorial wouldn't get anything from the interaction with an actual machine
make a room for NixOS 
long kraken
I have like 0 expertise in this but would it be possible to make a like apple themed room?
brisk tapir
Where you give out iphones and macs to all the people who root it ? 
steady hornet
isn't that not allowed by Apple?
native raptor
I have like 0 expertise in this but would it be possible to make a like apple themed room?
@long kraken MacOS VMs are... uh...
Well, I don't think I've ever seen or heard of one.
Apple certainly would not be licensing them through AWS...
somber crow
You're allowed to virtualize macos, but only on apple hardware. That's the problem.
steady hornet
I thought apple just doesn't allow it. Ah, that must be why people can make illegal copies out of the system.
radiant imp
Hi! I would like to suggest a simple linux attacking room where you get in by finding a swagger page and finding a interesting API endpoints which you can use to get credentials or whatever...
tacit anvil
Anyone's interested in creating a room for M-i-t-M attacks?
karmic raven
those will come more as networks further release
a lot of them can be difficult in just a stand alone box
the new throwback network has one mitm vector
radiant imp
Hi! I would like to suggest a simple linux attacking room where you get in by finding a swagger page and finding a interesting API endpoints which you can use to get credentials or whatever...
@radiant imp Anyone interested?
native raptor
You, uh, know you can make them yourself, right?
radiant imp
yeah, but i first want to know if people find them interesting
And i really dont have any clue how
somber fractal
I dont think if this is a good idea for a room or not but I think it would be interesting a room that explains how DNS works
Since it is used in AD and also there are some rooms with virutal hosts (i dont even know if virtual hosts use DNS or not)
somber crow
There's a little bit in Web Fundamentals
radiant imp
@native raptor Can i DM you with some questions?
native raptor
Regarding?
radiant imp
Room creation
native raptor
Have you checked the Docs?
somber fractal
There's a little bit in Web Fundamentals
I know but i can't understand much how DNS works so i thought a room would be nice
But maybe it's just me and i need to do more research
valid loom
If we have a Learn Linux 2, I think a good topic to include would be a topic on Daemons
prisma hemlock
Demons?? 😱
native raptor
I think Chev has a followup in the release queue
Whether it covers systemd is another matter
prisma hemlock
Demons are scary
native raptor
That's because you have the mental age of your average six year old
native raptor
There's an emoji for that
valid loom
:P
feral reef
The Learn Linux room is good enough to get you going. If you use Kali Linux for long enough you’ll gain the confidence to move onto arch.
I myself learned Linux through the learn Linux room and I’m slowly transferring over to arch. It something you should do on your own in my opinion ;p
@icy trellis There is a room soon on linux from me as a followup to Learn Linux
I think Chev has a followup in the release queue
@native raptor i should've scrolled down before replying...
No, Daemons
@valid loom What exactly do you want to see?
i am planning to build a follow up to it anyway, i covered very basic topics for now
also the above is post 11th of September, so bare with me ; - ;
valid loom
It was a thought but Vulnersity covers making a daemon to get a root flag. I feel like an explanation on how we can work with daemons to get what we want would be neat
valid loom
Yeah I was super lost even with the write up that explained how it worked.
In my head I’m asking for something simple but to get to that point it is probably like trying to straighten up the leaning tower of Pisa
tacit anvil
A room about ethics and law for hacking, a hefty course learning what's right and wrong for a substantial amount of points
somber fractal
Wouldn't it be hard do to this since different countries have different legislations?
trail cloud
I just asked about it in chat but the sadmind exploit would be a cool beginner room to have added
somber crow
That's a 2001 Worm, it depends on someone being able to get the right version of solaris or IIS
@trail cloud Sadmind was a worm that used two different vulns. Do you mean the solaris one, or the IIS one?
somber crow
That vuln isn't the one that was used in sadmind
The CERT/CC has received reports of a new piece of self-propagating malicious code (referred to here as the sadmind/IIS worm)
@trail cloud Can't do solaris on AWS anyway
trail cloud
thought i was on to somethingf
somber crow
Language please. This is an educational discord.
karmic raven
Getting Solaris on aws probably wouldn’t be that hard but getting the vulnerable version would be a pain
aws only really allows the current version for AMIs
somber crow
AWS no longer support solaris
sudden yew
I'm working on a room with another user, how can both users get credit for the room?
somber crow
Officially right now? You can't.
Your best bet is to credit them in the text.
This is a feature that I believe is coming soon.
sudden yew
fair enough, I hope the option to add a user after the room is live will be there.
I'm working with a well known YouTuber, I'll make sure and credit him in a task
spiral gull
I think it would be awesome if we could get the metasploit unleashed course from offensive security as a room
karmic raven
yeah that’s probably a not going to happen
however there is already a very good metasploit primer room that covers it fairly well
cunning thunder
Purple Team Networks, utilizing Atomic Red Team integration of testing security controls https://github.com/redcanaryco/atomic-red-team and integration of their Execution Framework https://github.com/redcanaryco/atomic-red-team/tree/master/execution-frameworks as offensive security, and Blue Team activity as Defense/Detection/Mitigation strategy activities related to it.
sudden yew
So I'm working on my room. Just wondering are answers case sensitive?
somber crow
There's a small amount of tolerance on answers
Like 15% or something?
Couple characters can be "wrong" on longer answers
sudden yew
So if my answer was Some Thing Here and they enter some thing here it will be fine?
I see that public rooms require a write up. Can this be a video or does it have to be typed?
native raptor
@sudden yew it can technically be a video, but it's a very good way to seriously annoy the reviewer. Having to go find something in a video if there's something quick we need to check is a lot harder than just searching for it in a nicely written write-up.
sudden yew
@native raptor so my room is more of a "challenege/what do you know" kind of room. There is some very basic teaching and I include 2 videos for the user to watch to get a vast knowledge for the room. Is the write up just for the admins so the can test the room works? This has no VM.
native raptor
If you DM me a link I'll take a look
sudden yew
to the room?
native raptor
Ooh, interesting. Right, I would set that to "Walkthrough" rather than Challenge.
And walkthroughs don't need any kind of writeup @sudden yew 🙂
That's just for challenges so we can see if something isn't working as it should be. A walkthrough should be its own writeup.
sudden yew
OK, does a walkthrough still give points? I just want there to be motivation for users to do the room
hey dming you something else
vestal bear
hello, im starting to make a new room, idk if this is the right channel to search help but anyways, i would like to do it with django. can somebody that has room making experience that could give me help to make that the like server auto-runs orauto starts when the machine starts?
sudden garnet
hello, im starting to make a new room, idk if this is the right channel to search help but anyways, i would like to do it with django. can somebody that has room making experience that could give me help to make that the like server auto-runs orauto starts when the machine starts?
@vestal bear https://www.jake-ruston.com/posts/linux-system-services.php :)
vestal bear
now that im looking, ill do the room on flask
and not in django
its way better
xDD
(at least for what i am looking for)
and to be my first room it ill be ok
@sudden garnet u saved my life
xDD
thx
compact summit
who do we contact about potentially creating a room?
prisma hemlock
Anyone can create a room
So nobody
Create a way and if it meets the specs it’ll hopefully get approved and eventually released 🙂
Me
No you
compact summit
typo sorry lol
prisma hemlock
🙂
lament star
🧐
prisma hemlock
compact summit
@prisma hemlock you're saying we can come up with a rough draft for a room and submit it somewhere?
prisma hemlock
You can completely finish/create a room and then if you want it publix it will get reviewed by a room tester and if it passes it’ll be made public
If you want to make a private room to just share with friends or a class or something then there is no restriction
compact summit
ohh ok i see. thank you
prisma hemlock
No problem
compact summit
@prisma hemlock are we able to clone other walkthroughs? im making a room that uses the gamezone VM as an example
prisma hemlock
If you ask whoever made gamezone they might make it clone able
If they say yes then yes. If they say no then no
native raptor
@naive notch
Oh, wait a second
That's gaming server
Sorry for the ping Suit..
GameZone is a THM owned one, correct?
native raptor
What's the tutorial on?
compact summit
i wanna make a room that introduces concepts of PoC exploit writing using gamezone as an example. basically convert my writeup to a room https://cd6629.gitbook.io/oscp-notes/converting-metasploit-modules-to-python#example-1-gamezone-converting-from-metasploit-to-python
native raptor
@remote socket would you be Ok with this?
lament star
🧐
prisma hemlock
remote socket
i wanna make a room that introduces concepts of PoC exploit writing using gamezone as an example. basically convert my writeup to a room https://cd6629.gitbook.io/oscp-notes/converting-metasploit-modules-to-python#example-1-gamezone-converting-from-metasploit-to-python
@compact summit I think this is really cool idea, but the GameZone VM is for subscribers only - I can give you access to the VM, but when you release your room it would have to be for subs only.
native raptor
If it's just for that one exploit, given it's the privesc in GameZone, you'd probably be as well just installing the software yourself
Save people hacking the thing just to get a chance to use their code 😆
remote socket
Yeah I agree, making the Vm on your own would be great:)
compact summit
yeah i dont wanna ||spoil the room with the creds & port forwarding||, maybe i could clone the VM and make a dummy account
@compact summit I think this is really cool idea, but the GameZone VM is for subscribers only - I can give you access to the VM, but when you release your room it would have to be for subs only.
@remote socket alright np
@remote socket @native raptor do i just need the .iso and install the version of webmin on it? i havent done something like this before. to avoid spoilers ill just note that at this point you'd have to have local access
native raptor
Yes. Just download the Ubuntu 18.04 server ISO, set it up as a VM and install the software -- that's all you need for something like this 🙂
You can just give the credentials in the room
compact summit
perfect, thanks guys
sudden yew
When a room is submitted for review, how is the room creator notified if it is accepted or rejected? Is it via the email tied to the account?
prisma hemlock
I believe The tester will let you know if it’s rejected and why. If it’s accepted you’ll be able to see it in the room management console
native raptor
@sudden yew you will get an email 🙂
If it's rejected, there will be comments in the management console telling you why
sudden yew
@native raptor thanks. Didn't know if it would be under the site Messages feature.
LOL is that your subtle way of telling me something!
native raptor
Huh? Nope 😆
Just that there won't usually be comments if it's accepted.
That's just where the feedback is shown
somber crow
It occurs to me that I haven't actually had comments via the system
Muir, next time?
native raptor
That's because everyone knows who you are...
native raptor
Haha, you telling me to leave you comments next time I test one of yours?😆
sudden yew
OK, I'll just sit back with scotch and wait, if you take longer, I get drunker... LOL
prisma hemlock
I wouldn’t hold your breath as you wait
Sometimes room testers get busy with life
weary basin
My idea ? Advent of cyber 2020 
native raptor
It'll happen @weary basin 🙂
We haven't started working on it yet, but it's confirmed as happening
weary basin
I’ll set a reminder for December 1st then
How does it work , we submit ideas for the tasks or it’s a complete surprise ?
icy trellis
it’s a complete surprise
weary basin
Ok !
native raptor
Yeah, I'd imagine Skidy and Ashu will make a few themselves. Otherwise the content creator's program will get assigned tasks to build
keen bone
some rooms you have to be a god of guessing to resolve just a msg to box creators or rooms: i want to thank all of you of the effort that you put to help the community rise in security knowledge but to create rooms which the solution depend of the wordlist that you are going to use or an algorithme that you have to use to decode a password for initial access it s just a wast of time if you want to rise the difficulty of your box you have to combine differente techniques, your custom filter to bypass with a logical mindset behind, something that need a deep knowloedge of a certain product or even a vulnerability without public exploit why not for hard rooms? hacking is have a deep knowledge of things and try to find some( design, code....etc) bugs
prisma hemlock
If you want to talk about actual hacking a ton of it is guesswork. So although I see your point, I don’t think your argument is entirely valid
somber crow
@keen bone That sounds to me like you don't like the CTF style boxes or techniques. That's fine, but other people do.
Security through obscurity is used concerningly often in the real world too.
keen bone
If you want to talk about actual hacking a ton of it is guesswork. So although I see your point, I don’t think your argument is entirely valid
@prisma hemlock it's just a point of view good discussion and good critics make things better 🙂
sudden garnet
htb have a life like -> ctf scale on their boxes, idk if it'd be copying them too much or whatever but i like that feature
keen bone
@keen bone That sounds to me like you don't like the CTF style boxes or techniques. That's fine, but other people do.
Security through obscurity is used concerningly often in the real world too.
@somber crow it s not a matter of liking or not it s technical matter we are in face of zero and one try to understand the idea first i m working in the real world of security network,server and web app protection so no one use jsfuck for example 😂 the same time encrypted or encoded password username or some hash in welcome or login page it's a point of view of a security consultant (ctf are a way of making people learn hacking real world app and real scenario)
somber crow
People do genuinely use obfuscation for their HS
People do genuinely leave accidental comments
But seriously, this seems like you really dislike CTF style boxes because they're not realistic. That's an inherent thing, that's what makes CTF style boxes NOT the same as realworld boxes
karmic raven
A lot of the creators are either security professionals or consult with security professionals and base their boxes off of vulnerabilities found in the wild. There are also quite a few boxes on the site that are designed as fun challenge “ctf” boxes which is what it sounds like you’re only basing it off of
somber fractal
some rooms you have to be a god of guessing to resolve just a msg to box creators or rooms: i want to thank all of you of the effort that you put to help the community rise in security knowledge but to create rooms which the solution depend of the wordlist that you are going to use or an algorithme that you have to use to decode a password for initial access it s just a wast of time if you want to rise the difficulty of your box you have to combine differente techniques, your custom filter to bypass with a logical mindset behind, something that need a deep knowloedge of a certain product or even a vulnerability without public exploit why not for hard rooms? hacking is have a deep knowledge of things and try to find some( design, code....etc) bugs
I agree with you in some things, i'm no security expert or anything, i'm just a guy that heard about cybersecurity some months ago and then started creating interest in it, but here's what i think: Tryhackme is a learning platform, lots of people here are starting in cybersecurity just like me and although many things like comments giving out password, brainfuck, steganography, etc you probably would never find in real world scenarios, they are things interesting to create the kind of thinking that you would have in a real pentest (again, i dont work with this, i may be super wrong). And also tryhackme let the community make some rooms, and for a begginer it's hard to think super interesting things to put in every part of you room.
keen bone
it s just a point of view maybe some box creators share with me same idea and create box without public exploit for exemple as hard box to encourage exploit dev and want to thank all box creators😃
somber crow
Someone has submitted a box like that before
Undisclosed vulns being used in boxes isn't very ethical
The vulns should be disclosed and patched
keen bone
Undisclosed vulns being used in boxes isn't very ethical
@somber crow i don't speak about 0day for sure
somber crow
Then they're public.
sudden garnet
@keen bone hopefully my next box is more to your liking 🥺
karmic raven
The closest thing you have to exploit dev is like buffer overflows other than that creating custom exploits is def out of scope
somber crow
Either it's an application developed specifically for the room (Check out some of mine) or it's a public application with public vulns
keen bone
Then they're public.
@somber crow not all of them their s a lots of vuln without public exploit
somber crow
Ok, then the room creator has to write an exploit
sleek elbow
either way -- an exploit has to be found/created
if its on public software, someone will report it.
if it's custom software, then it wont feel as genuine.
light lynx
@keen bone hopefully my next box is more to your liking 🥺
@sudden garnet Jake out here making interesting boxes while I'm sitting here teaching Git
tight night
Ra 1 was developed around an exploit found by the creators if I'm not mistaken.
Also, any basic buffer overflow room (thinking Brainpan, Gatekeeper, etc) likely do not have public exploits available, and require exploit development, albeit incredibly basic.
sudden garnet
@sudden garnet Jake out here making interesting boxes while I'm sitting here teaching Git
@light lynx but git is very useful for people to learn so i have no doubt it will be amazing 🥺
compact summit
just curious, what's the usual eta for a room to be evaluated and published?
prisma hemlock
depends on the room tester
karmic raven
just curious, what's the usual eta for a room to be evaluated and published?
@compact summit if you give us the room name we may be able to look at the schedule for you
native raptor
@compact summit yell at @tacit anvil
tacit anvil
what did I do this time
@compact summit Why hello there! It is dependent on the tester
depending on who your tester is
native raptor
You are the tester...
native raptor
🤦♂️ 🤣
tacit anvil
I can promise you I am avidly working on your room
compact summit
I can promise you I am avidly working on your room
@tacit anvil oh its np at all, was just curious 🙂 lmk what changes need made. The biggest thing I think I lacked on that room is exploring more common methodologies and giving more abstract instruction about the process of exploit development. i feel like i focused too much on the example.
im really not that well versed in exploitdev tbh. i just wanted to give a complete beginner and those closer to my skill level a jumping off point and something to strive for.
robust karma
Will there be more rooms that will help someone practice their forensic and IR skills? Room walkthroughs or challenges that help solve a computer incident/crime type of scenarios.
karmic raven
Will there be more rooms that will help someone practice their forensic and IR skills? Room walkthroughs or challenges that help solve a computer incident/crime type of scenarios.
@robust karma I know that cmnatic has one room in the queue on forensics and plans on making more and thm is working on hiring a blue team dev which will probably cover some IR stuff
robust karma
Sweet thank you for the feedback!
meager portal
Pivoting Explanation Room and Practical Pivoting
karmic raven
That can only really be done with networks it is covered extensively in throwback
I mean you can do it in docker as well but it’s a bit different
native raptor
In fairness it's the same practically speaking in Docker, from an attacker's perspective, assuming it's been set up to use that as the only method. Just no Windows
tight night
I'm working on something with Docker currently.
Can do it with Windows in Docker, but the restrictions on Windows OS containers matching the the host is a pain.
native raptor
I've got two docker escapes in the running just now. One approved, one pre-built
tight night
There's no escape here. Just multi level, multi docker network pivots through different services, etc.
native raptor
Awesome
tight night
With different OS's so people have to understand not only debian based like Ubuntu, but Alpine nonsense as well. 😆
lament star
We'll have to use ash 👀
tight night
mmhmm
/#
People gonna be scratching their heads on that one for a bit.
Why can't I run apt
What is this busybox nonsense.
potent remnant
Has anyone thought about a room for pwncat or is it even worth it?
karmic raven
If anyone would do a room on pwncat it should be John
prisma hemlock
@johnhammond 👀
karmic raven
I haven’t played with it’s functionality too much but I also don’t think it doesn’t have enough to make a full room
tight night
Was looking at it just now and I don't think it does either.
karmic raven
geez I can’t english right now... just don’t worry about my English skills
native raptor
I've got a room on shells almost finished, but pwncat isn't covered in it I'm afraid
Got plenty of netcat and socat though! 😁
tight night
Might be something to add to a room that includes tools.
stable stirrup
prisma hemlock
You start by reading the channel descriptions
And finding the appropriate channel to ask your question
somber crow
@robust bear You can suggest that here.
Please bear in mind, I'm not TryHackMe. I'm a discord mod and I make some rooms.
robust bear
Oh ok. Sorry about that
sudden garnet
not sure what you mean by api hacking, do you mean oauth or the likes?
somber crow
I'm working on a webapp hacking room that will include a little bit about APIs that drive webapps
gloomy trail
@sudden garnet yes like that
somber crow
@lunar plank XSS room first, that's commissioned 👀
sudden garnet
@sudden garnet yes like that
@gloomy trail if you already know the basics and just want practise, i know htb retired one with oauth type hacking recently
but as james said he's making one and his rooms are all good quality so be on the lookout :)
gloomy trail
@sudden garnet cool tell me the machine name
sudden garnet
@sudden garnet cool tell me the machine name
@gloomy trail it's called 'oouch' :)
mystic rose
karmic raven
its already vulnerable to basically all the windows servers on thm
edgy condor
tested and true
compact summit
just wondering how far down my room introexploitdevelopment is on the testing schedule?
native raptor
@compact summit we had a little bug a week ago -- some of 'em disappeared. Mind setting it to private then resubmitting it for me?
I'll do it tomorrow 🙂
compact summit
@compact summit we had a little bug a week ago -- some of 'em disappeared. Mind setting it to private then resubmitting it for me?
I'll do it tomorrow 🙂
@native raptor its been stuck on Evaluating for awhile
native raptor
Interesting. Lemme double check and see if it's in that pile
@remote socket when you get back, any chance of tracking down another that's still missing? Stuck on evaluating: introexploitdevelopment 🙂
@compact summit I suspect one of the other testers likely has it in their notes to work on it, but without it in the list we can't set it to readied or otherwise. Skidy should sort it when he gets back 🙂
compact summit
@native raptor ok np, thanks for lmk 👍🏽
native raptor
Anytime. Apologies for that
nocturne pendant
!help
soft hamletBOT
##### HELP #####
{required args} | [optional args]
> Verifying/Role Assigning Commands
verify {token} | Verify yourself to get your roles.
> Room
writeup {room_code} | Get the writeups for a room.
randomroom | Select a random room.
> Announcements
notifyme | Toggle the role to get notified on announcements.
> Leaderboard Commands
leaderboard [page] | Prints the leaderboard.
monthly [page] | Prints this month's leaderboard.
> Rank Commands
rank [@mention/username] | Get a THM member's rank.
> FAQ
vpn | Learn how to use OpenVPN to connect to our network!
multivpn | Learn how to look for duplicate instance of your OpenVPN connection.
vpnscript | Use our VPN troubleshooting script to diagnose common issues!
> Rules Commands
rules | Sends the rules.
rule {rule} | Sends the requested rule.
> Social
github | Get the bot's Github link.
twitter | Get the Twitter link.
reddit | Get the Reddit link.
website | Get the Website link.
discord | Get the Discord invite.
social | Get links to all our socials.
tweet | Get THM's last tweet.
> Fun Commands
skidy | Sends Skidy's emote.
ashu | Send Ashu's emote.
dark | Send a random Darkstar quote.
honk | HOOONK!
boop {@user} | Boop someone!
noot | NOOT NOOT!
cooctus | COOCTUS!
shibe | Sends a shibe picture.
spaniel | Sends a spaniel picture.
xkcd | Send a random XKCD comic.
> Help
staff | Displays all staff commands.
help | Displays all commands.
> Provide Feedback
feedback | Let us know what you think of TryHackMe!
> Utility
exploit [-Title][-CVE][-Type][-Platform][-Port][-Content][-Author][-Tag][-Help] {Query} | Searches exploit-db for exploits.
> Docs
docs [topic] | List our documented topics.
TryHackMe
nocturne pendant
How do i change the xss keylogger script in xss room to send the keylogs to logs page
Help please
lament star
@nocturne pendant #bot-commands
tacit anvil
can we get a room on BeEF, the XSS exploitation framework
native raptor
There was one in development -- not sure if Dan scrapped it or not
tacit anvil
uh, dan?
native raptor
Disagreed with what happened regarding optional
tacit anvil
oh
well i hope he is still active on other thm communities
because we really need a BeEF room
native raptor
You are very welcome to make one
tacit anvil
i wouldnt be asking for a BeEF room if i knew how to use it lol
lament star
There was one in development -- not sure if Dan scrapped it or not
@native raptor He deleted all of his site content, so pretty sure it's scrapped now. 🤔
native raptor
Yeah, that was my memory too
nocturne pendant
In the css room the last challenge where most of the words are filtered, I'm using <img src="blah" onclick="confirm ('HHelloello')"/>
To print Hello,
It works but I'm not getting the flag
Help
xss room
Sorry posted the question in thw wrong chat
tacit anvil
He deleted all of his site content, so pretty sure it's scrapped now. 🤔
what a waste
naive vapor
Make a room of freeBSD with vulnerabilities
somber crow
There's one already but it's a pain because creators can't upload freebsd
karmic raven
naive vapor
😅
karmic raven
they’re possible and creators have access to them we just have to jump through a couple more hoops with aws and the admins
compact summit
@remote socket when you get back, any chance of tracking down another that's still missing? Stuck on evaluating:
introexploitdevelopment
@native raptor were you able to find the room? 🙂
remote socket
Its there:) Just seen it on the submission list
civic willow
can i get some tips for creating rooms based on some vulneranilities
cyan breach
Is there a room on port knocking walkthrough? I'm thinking of making one.
cyan breach
Okay, thanks. I'll try to make one then. 🙂
brisk tapir
There is not much to port knocking, is it 🤔
Interested to see how you make a whole room out of it
cyan breach
Yeah, there is not much so I'll try add some more to it to make it fun.
coral ravine
Maybe add different ways they can port knock and have multiple deployed machines
cyan breach
Yeah, that's a good idea. I'm also thinking of adding bonus challenge like okay you got access to the machine now go root it on your own.
lunar plank
That sounds wicked to me imho
Throw in a bit of "this is how port knocking works, x,y,z"
That'll be very welcome I'm sure! If you have any questions about it all I can give you a role into #creators-lounge (:
cyan breach
No no, its not like that. Its like I'll first explain what port knocking is then will give more practicals to perform it like that. Also, I'll try to add more to it than just port knocking.
What is creators-lounge?
lunar plank
That sounds great!
Creators lounge is a place where you can discuss everything THM box development (:
cyan breach
Sure, I'd love to discuss there.
sharp bough
optional is banned ? 🤔
coral ravine
He got banned a while ago
sharp bough
why tho
coral ravine
Something probably not to be discussed but he did some pretty bad things I heard
sharp bough
oh i see
lunar plank
Indeed (in the sense that we don't discuss reasons for banning, etc here), they've been given the appropriate channels to appeal the ban as does everyone else (:
somber fractal
Hello people, i'm thinking of making a room teaching how to setup a simple web site using html,php,apache and mysql. I think it would be nice since a good way to understand something in my eyes is making it work. I want to see what people here think of this idea so upvote or downvote this message to give your opinion (feel free to elaborate more your opinion on why you find this idea good or bad in a message).
tacit anvil
i think its a great idea @somber fractal
although there are a lot of tutorials for these sorts of things, nothing beats the interactive way of teaching that THM has
so yes, it's a great idea
coral ravine
I'm learning html right now in college so it would be good to see a room on it and get extra knowledge
brisk tapir
Hello people, i'm thinking of making a room teaching how to setup a simple web site using html,php,apache and mysql. I think it would be nice since a good way to understand something in my eyes is making it work. I want to see what people here think of this idea so upvote or downvote this message to give your opinion (feel free to elaborate more your opinion on why you find this idea good or bad in a message).
@somber fractal Tailwind CSS + Tailwind Blocks = Fully interactive UI in 5 minutes
karmic raven
Hello people, i'm thinking of making a room teaching how to setup a simple web site using html,php,apache and mysql. I think it would be nice since a good way to understand something in my eyes is making it work. I want to see what people here think of this idea so upvote or downvote this message to give your opinion (feel free to elaborate more your opinion on why you find this idea good or bad in a message).
@somber fractal Personally I think this could be great in say a blog post however tryhackme is a hacking website. Ive seen other scenarios of things similar being shot down because they are just more programming or general thats not to say it coudnt work though. If you could apply it to hacking somehow then I could see it doing well. For example Im making a room on Honeypots and Deception so I may cover setting a web server a tiny bit.
somber crow
I'm making a webapps walkthrough room that discusses the theory behind webapps. Because you need to know how they work to hack them properly
somber fractal
@somber fractal Personally I think this could be great in say a blog post however tryhackme is a hacking website. Ive seen other scenarios of things similar being shot down because they are just more programming or general thats not to say it coudnt work though. If you could apply it to hacking somehow then I could see it doing well. For example Im making a room on Honeypots and Deception so I may cover setting a web server a tiny bit.
@karmic raven yeah i thought about this, this is the main reason i asked here for opinions :p
karmic raven
I mean I guess bee did just come out with the rust room however rust can be applied to hacking more than html,css, etc
I honestly dont know
somber crow
Webapp content is good
People want more webapp for bug bounty
Understanding how stuff works is good.
somber fractal
but also, the way that i learned the most in tryhackme was creating rooms, and thats why i thought about this idea at first, to help someone that dont have any idea about how a web app works, setting one up maybe would help them hack it
karmic raven
so things like apache, mysql etc that can be vulnerable I can see it being good to show what makes them vulnerable however html and css.... youre not going to get alot out of
somber fractal
i'm not planning on teaching css on the room
somber fractal
html just the basics to make the user be able to interact with the backend
karmic raven
and showing exactly what makes it so that the code is vulnerable and how to make the code not vulnerable
somber fractal
thanks for your feedback 🙂
karmic raven
thats just my opinion others may have their own
gaunt cosmos
A room on scapy.
storm canyon
@gaunt cosmos make it yourself
prisma hemlock
A room on scapy made by @gaunt cosmos
gaunt cosmos
I dont code python
prisma hemlock
cunning thunder
jB stands for JavaBeans.
vague rampart
Love the iOS Forensics room. More DFIR rooms!!!!
somber crow
@lunar plank ^ ❤️
lunar plank
Thanks @somber crow @vague rampart I’m glad you enjoyed it!
Once this hefty malware room is done, much more DFIR to come 
Appreciate the feedback
karmic raven
yer
@lunar plank got that DFIR I got that threat hunting
we’re going to make y’all blue teamers some day
quaint brook
Could there be a room that teaches ICS security?
lunar plank
I know there's one being tested at the moment (:
lunar plank
^ gotcha this time james
quaint brook
NICE!!! Thank you guys! That will hopefully help me out with a senior project that I am working on
lament star
That's like SCADA stuff? 🤔
lunar plank
Yahuh @quaint brook
karmic raven
THM attackbox but with i3 👉 👈 I miss my keybindings
karmic raven
tmux is niche 
mighty hearth
tmux?
sleek elbow
tmux and i3 is trash
storm canyon
tmux and i3 is trash
Nuclearpro wants to know your location
nocturne ingot
more scripting rooms pls, and one covering pwntools for python would be pretty cool
left pawn
Would be great if we could have tutorials on tips and tricks with Nuclei from Project Discovery (https://nuclei.projectdiscovery.io/)
tardy hollow
Hi folks! Sorry for the silly question but what is the advantages to create a room non-free (like when you have to have the subscription to deploy the machine/room"?
native raptor
@tardy hollow most non-free rooms are commissioned. As in, they're set to subscriber only because the site has paid for them to be made.
tardy hollow
Ooh I see, got it. So for an "CTF Developer" (lol) there is no payment. Did I get this right?
Like for a casual one
native raptor
That depends on whether you're part of the content creators programme. Some of the commissioned developers do challenges, some do walkthroughs, some build KoTH boxes. Most do a combination.
If you're a part of the programme then you get given assignments -- those are paid for, yes.
But otherwise, it's just community development.
tardy hollow
Oh okay, got it! Thank you a lot for the infos!
native raptor
Np! 🙂
hexed stream
gaunt cosmos
Just provesc with gdb. It’s on gtfobins
prisma hemlock
Idk where else to put this since it’s not a room idea but whatever: a discord channel for non THM help but still serious questions. Cuz real questions often get lost in general and if it’s not directly room related then they’re directed away from the help channels
icy trellis
icy trellis
Oh is that site only?
lament star
@prisma hemlock +1 on this
pine olive
Didn't we talk about this the other day too? Though I'm starting to see a point to this
pine olive
Is there like a standard VM we use for room creation?
somber crow
Nope you're fairly free as long as you follow the AWS conversion requirements @pine olive
Most of us tend to use ubuntu server 1804
Centos is favoured by a couple creators
pine olive
Cool cool, thanks.
compact summit
i really dont mean to sound annoying but im wondering when i can expect my room introexploitdevelopment to be tested? 🙂 just anxious about the feedback
native raptor
Good question. Go yell at @tacit anvil, @compact summit -- it's on his list.
Hopefully not too long, because that's a while you've been waiting now. Sorry about that; it's not usually quite so bad. Just the ones around that glitch that kinda threw a spanner in the works
somber fractal
Hello, i saw the mensage above and i'm also wondering when will my Room "You're in a cave" be tested, i submitted a month ago, but 2 weeks ago muir told me to resubmit It, Sorry If i'm being annoying, but i'm hyped to receive some feedback for the Room.
light lynx
Idk where else to put this since it’s not a room idea but whatever: a discord channel for non THM help but still serious questions. Cuz real questions often get lost in general and if it’s not directly room related then they’re directed away from the help channels
@rocky gazelle Thoughts?
rocky gazelle
Um
Regarding that, I try to avoid things like that as they're typically dramatically unrelated to TryHackMe
And that might encourage questions which are not acceptable for this discord
I'll consider it though
prisma hemlock
And that might encourage questions which are not acceptable for this discord
Even just a #serious-discussions channel? With the same PG13 no illegal stuff rules and whatnot?
prisma hemlock
Regarding that, I try to avoid things like that as they're typically dramatically unrelated to TryHackMe
You could argue general doesn’t really have much to do with THM as people just hang out. The serious discussions channel would be the same idea just no trolling basically
native raptor
Honestly @rocky gazelle, that might not be a bad idea. Several people recently have expressed a desire to have a quieter version of general that isn't flooded with the same level of... uh... weirdness, that general can exhibit at times
A "quiet-discussion" channel, as it were
golden mountain
bring back #offtopic
prisma hemlock
If it helps I can clear up the idea: basically, a second #general just with the explicit rule of no trolling (which I am guilty of using general for)
golden mountain
before we had #offtopic (it was renamed to general) and #general for infosec discussions and stuff
i don't remember the reason why both were merged 🤔
strange schooner
I can only imagine off-topic quickly turned into a sess pool
native raptor
off-topic is basically general
golden mountain
well, offtopic was roughly the same as general
rocky gazelle
@native raptor a lot of that comes from people that are new to the discord. I'll see about adding a hacking-discussion chat
prisma hemlock
@native raptor a lot of that comes from people that are new to the discord. I'll see about adding a hacking-discussion chat
The newer people come and look for a channel where they can discuss stuff without trolling mixed in. I can definitely see how it’s intimidating if they go to #general to ask something and they’re bombarded with a bunch of trolls, best girls, and feet pics when they don’t know the community already
native raptor
That strikes me as being similar to going back to the old style, no? We basically just ended up redirecting people all the time with that 😆
Might be better to see about another version of #general (i.e. loose discussion regarding hacking) that's exempt from the more frivolous nature in the current general. Means that the part of the community who still want to hang out and discuss stuff have a place to do it without being yelled over by, well, that ^^ @rocky gazelle
Sundae is case in point for that, although Bob's right in saying that it would be helpful for new members too
prisma hemlock
I would argue it’s more helpful for new members
native raptor
If the new members want to have fun with the hacking community then there's general. If they want guaranteed serious answers then it would be good to have somewhere for that
prisma hemlock
People who know the community like sundae know who to ignore in general (like me when I’m feeling troll-y) and can direct their questions and people who will actually answer
If someone new comes and they encounter me as their first experience in general I can see if that comes off with a bad vibe seeing that I’m just having fun in there 95% of the time
rocky gazelle
Done
native raptor
Thanks Dark ♥️
prisma hemlock
Thank you dark!
topaz bramble
hello there guys , i am wandering about what is the best platform where anyone could make writeups on it ?? medium ? wordpress ? what u guys prefer because i want to write one 😄
native raptor
@topaz bramble Medium is good if you don't want to deal with infrastructure, but otherwise avoid it like the plague.
Ideally use something like Digital Ocean to set up a VPS with Wordpress or Ghost or something on it.
If you want the free option, Netlify or Github Pages will give you free hosting which you could use Jekyll, Hugo or an equivalent to generate static pages for
topaz bramble
Okay got it , Thanks
tight night
I don't mind Medium. My articles pay for my $5 a month subscription there.
crystal jungle
@mayor Can you link a sanitized SS of your visitors metrics?
tacit anvil
Any Blue Team learning path?
cunning thunder
Any Blue Team learning path?
@tacit anvil That's a good idea. Partially covering that, there is a Forensics section on the Hacktivities page https://tryhackme.com/hacktivities
karmic raven
Any Blue Team learning path?
@tacit anvil we’re all working very hard to bring out blue team content, cmnatic is going crazy making forensics content and malware analysis content, I’m currently working on taking a threat hunting course and making threat hunting content and tryhackme is working on or have hired on a full time blue team dev so we’re all working on getting out blue team content as quickly as possible
tacit anvil
@tacit anvil we’re all working very hard to bring out blue team content, cmnatic is going crazy making forensics content and malware analysis content, I’m currently working on taking a threat hunting course and making threat hunting content and tryhackme is working on or have hired on a full time blue team dev so we’re all working on getting out blue team content as quickly as possible
@karmic raven sounds great man. Waiting for that
tacit anvil
A button to easily delete room progress. And another button to go up to the first task without having going one by one.
tacit anvil
damn sorry, HAHAHAHAHAH
prisma hemlock
The deleting your own room progress is either already submitted or already in the works I believe
nocturne ingot
Not really a room idea but maybe a more robust leaderboard system (e.g., average time to complete a room, average monthly placing, weekly leaderboard, some other fun stat I'm sure y'all compile), ik most people don't remotely care about their rank but the competition motivates me a bit
tacit anvil
The deleting your own room progress is either already submitted or already in the works I believe
@prisma hemlock It would be nice. Sometimes when you want to refresh concepts it is not good to have all the questions solved.
somber fractal
Not really a room idea but maybe a more robust leaderboard system (e.g., average time to complete a room, average monthly placing, weekly leaderboard, some other fun stat I'm sure y'all compile), ik most people don't remotely care about their rank but the competition motivates me a bit
@nocturne ingot all these but the average time to complete a room can be nice in my opinion, you can submit ideas for the site in this form https://discordapp.com/channels/521382216299839518/757261859270426745/757262012949463202
summer ocean
hydra
light lynx
There's already a Hydra room
nocturne ingot
Not really a room idea, but CornCon got me thinking, is there anything stopping more CTFs from being hosted on THM (besides resources)? Either way would be really nice if THM expanded their capabilities as a platform for CTFs, love being able to participate in a CTF and get points for it on my THM account.
somber crow
You won't get points unless it's a public room
nocturne ingot
oo okay got it, so those points earned in CornCon just going towards that specific leaderboard
somber crow
Yep
shadow cloak
Make a room for Se* privileges. Like all of them maybe. The most common one is covered I think the Impersonate one.
maybe a walkthrough
or maybe it's in Networks.
quaint tiger
So just a thought if it isnt already a room... I was thinking a room detailing the mentality and thought process of a social engineer/ethical hacker/etc might be nice. Since a lot of people are drawn to the allure of '1337'ness of hacking, but get overwhelmed when they discover the amount of work involved, not just with the actual 'hack' but with recon, research, personal education, and more. Kind of a 'get you up to speed' room. Just an idea, and not sure if this is where this post goes
fervent sparrow
A simulated attack that you have to track and recover from
strange schooner
A simulated attack that you have to track and recover from
@fervent sparrow THM has hired a Blue Team Content Dev. So this could be a possibility in the near future. And it sounds rather fun
somber crow
A simulated attack that you have to track and recover from
@fervent sparrowRecoverydoes this
fervent sparrow
Oh nice
This is a fun feild to be in
Excited for a blue team path sounds like apt of fun
fervent sparrow
a hacking email room
karmic raven
pretty sure blob has one coming up
they’re just annoying to setup and the attack vector are eh ish
fervent sparrow
its nice that everything i want is comeing up
prisma hemlock
pretty sure blob has one coming up
@karmic raven I haven’t completed it yet 😅
Soon ™️
karmic raven
its nice that everything i want is comeing up
@fervent sparrow we have so much crap in the works, I mean I know a lot of what is happening behind the scenes but even I as one of the major devs don’t know every thing these crazy people have going on
fervent sparrow
sounds like ill be staying subsrcribed for a while
candid abyss
More room for real beginners, explaining by example how to use post exploitation tools of metasploit properly, how to start reverse engineering, really basic stuff that needs to be known in order to be able to continue learning even more
karmic raven
That pretty much all already exists in one form or another
brisk tapir
There is a Intro to x86-64 for basic assembly, and there are rooms on r2 and Ghidra for basic RE as walkthroughs. You can also find ctf's based on RE's and other walkthroughs too. There is also a Metasploit room for basic Metasploit , you can refer to Metasploit Unleashed for more
https://tryhackme.com/hacktivities, try using the filters in combination with the search feature to find what you are looking for
candid abyss
Thank you for your answers, will keep looking into that ! Have a nice evening both of you
nocturne ingot
More of a discord idea than a THM/room idea but it would be nice to have an open-source channel or programming channel where people can share projects/one-liners/scripts and other little tidbits of code and discuss
somber crow
#resources does most of that
nocturne ingot
yeah ig but maybe we could have a community-resources where the content must be your own? I would feel a little awkward throwing my crappy blog and ramshackle scripts in there alongside the professional content in there
foggy chasm
it would be amazing to have a notes section in the rooms
users could add the notes in there about how did they enum the machine
how they find bugs and vulns, how did they pwn the machine and what they've learned from it.
it also would be really helpfull for further studies
it'll be helpful after a while when the users came back to the rooms and also in cases that users learn new things, they can simply add it there like
"i've learned how to use cron-tabs for privileges escalation in this machine"
"this is how i have to use php reverse shell script for RCE"
"this room was very good to remmeber how do i have to use hydra"
and many many more
this will helpful for future CTF and real world pen. projects
native raptor
Uh, who's paying for the storage there @foggy chasm? 😆
It is a really good idea to take notes though. Like, you're doing something wrong if you aren't taking them
I suggest CherryTree
I know other people prefer Notion
foggy chasm
i have a very good, big and well organized document for myself
i keep it on the cloud for fast and reliable access
but it's very good to learn newbies that how important is a well organized self document
and about the storage it could be limited to 5 lines for each room.
Uh, who's paying for the storage there @foggy chasm? 😆
@native raptor 😆
native raptor
Really not sure what you can do in 5 lines, but maybe throw it into the feedback form anyway? 🙂
There's a link in #feedback-and-ideas
foggy chasm
@native raptor are u agree that this is one the best self documented bulletins ever? https://book.hacktricks.xyz/pentesting-web/web-tool-wfuzz
do u know any others, good like this
if yes please introduce that to me
tnx a million
native raptor
Try #resources 🙂
fervent sparrow
Cal 2 is the hardest
fallow lichen
You suggesting a Calc 2 room?
small zephyr
kk
fervent sparrow
I mean it would be useful
proven gate
ssh pivoting box would be awsome
native raptor
There will be something like that coming relatively soon @proven gate 🙂
proven gate
thanks you @native raptor is it machine or learning box ?
native raptor
Better 😁
proven gate
🧐
sleek elbow
can confirm something is in the works
brisk tapir
@native raptor 😅
devout pumice
What happened
native raptor
What are you doing?...
karmic raven
concern
fervent sparrow
There not even verified
raw moat
somber crow
@native raptor and pure evil? Name a more iconic duo.
storm canyon
Bad Muri
native raptor
@native raptor and alcohol
south pasture
Just finished the tartaraus
All those horizontal escalations are somewhat redundant since not only d4rckh can edit the exploit.py
it'll be much more fun if hackers have to go through sudo -u thirtytwo /var/www/gdb -nx -ex '!sh' -ex quit
PAGER='sh -c "exec sh 0<&1"' sudo -u d4rckh /usr/bin/git -p help
!/bin/sh
I’m sure this is known but it doesn’t belong in this chat
You can try posting it in #room-bugs but I’m sure it won’t be fixed
pseudo hedge
how long is it for a room to be evaluated/accepted ?
lunar plank
Hey Noraj! There isn't an exact time scale, it just depends on how many other rooms are due for/in the process of evaluation and the availability of room testers
What's your THM username? I can check to see the status of this for you
There's quite a lot in the queue at the moment, but I can check to see where your room is specifically @pseudo hedge
Or alternatively you can DM me the room code 😄
light lynx
why would you want that info? @hoary onyx
hoary onyx
i just thought i would part of learning cybersecurity @light lynx
so i thought there would be a room for it
somber crow
I mean there's just an API for it. Nowhere near complicated enough for a room IMO.
somber crow
No, because it doesn't tend to be used ethically.
glacial acorn
what about a room about learning about the binary protections and how to bypass them, like NX enabled, stack canary, ASLR, etc...
native raptor
@final sun? ^^ 🥺
final sun
Without markdown support, believe me writing a top down approach on binary exploitation with code snippets is impossible.
native raptor
And what if I were to tell you that there's a markdown editor coming @final sun?
final sun
Then I'll promise you it's going to be the best creation of mine till date.
But it's soon™, we both know how soon is that soon™ is.
native raptor
Haha, True
prisma hemlock
Henlo robin chwan
final sun
Blob!
radiant storm
Hi everyone
fervent sparrow
so whats comeming soon
icy trellis
....
lusty tapir
so whats comeming soon
@fervent sparrow within this very week I'll be launching "Learn Bash Scripting" room, wish me luck!
fervent sparrow
cool ill do that room
lusty tapir
brisk tapir
@fervent sparrow within this very week I'll be launching "Learn Bash Scripting" room, wish me luck!
@lusty tapir I'll take a lot more than that for the room to be public. It has to go through a review process and it'll be public only if it's accepted
lusty tapir
yup I am aware of that ... I'll try my best to make it suitable for THM standards!
tawny shell
I will be exploring other paths after the oscp learning path... in general i just like having multiple instances of the same challenge in the same room, such as Buffer Overflow Prep, for instance....instead of just 1 room, do this/that and its over. Can still learn a lot that way, but i like the reptitive nature of this buffer overflow prep room. Would like to see more rooms like that across the board. Think it would help beginners a lot more.
tight night
Do you have a room in mind that we can try to correlate this idea to?
sturdy hatch
how about a room for new guys who don't know how to hack
native raptor
You mean, aside from the majority of rooms on the platform?..
sturdy hatch
i gusse
native raptor
That's what the Complete Beginner path is for 🙂
And trust me, there are many people in here (myself included) who are living proof that TryHackMe can get you off the ground 😁
sturdy hatch
nice to know
light idol
Do you have a room in mind that we can try to correlate this idea to?
@tight night
Maybe a room on text manipulation utilities, like grep, sed, awk, cut etc... and how they're used together.
lusty tapir
Maybe a room on text manipulation utilities, like grep, sed, awk, cut etc... and how they're used together.
@light idol
I am working on a room called - "Learn Bash Scripting" and I am including all of these
sand rune
@tight night
Maybe a room on text manipulation utilities, like grep, sed, awk, cut etc... and how they're used together.
@light idol Well, if you want to practice that you should definitely try bandit game at overthewire.
It will start at the most basic linux commands and the levels keep on icreasing
increasing*
light idol
Thanks ill check that out
tawny shell
@tight night my idea regarding my previous post... when i first started, i did all the free easy rooms.. but even then, certain rooms left me stuck because i didnt know or i had forgot how to do something... so maybe like having simple rooms that cover all the basics... such as a room with 10 different quests relating to the same thing such as running an nmap scan.. doing gobuster/dirbuster scans... all the way to gaining a shell, privesc, etc. Keeping in mind how the Buffer Overflow Prep room is set up. 1 room, 10 completely separate tasks, but all attained by virtually doing the same exact thing. The repetitive nature of that is more along the lines of what i had in mind. I understand there is a "complete beginner path" but again, those are your typical rooms. Once youre done 1 room, youre done and moved on to something else. So thats all i was really saying... having more of a repetitve nature to some of the rooms....just an idea
tight night
Please no need to keep @'ing me. Thank you. 🙂
I gather what you're suggesting. Using something like Docker might make some things like this possible. But I would guess that many people aren't going to want to do the same exploit over and over again in a single room.
Something like buffer overflow exploitation makes sense to me as it's a more advanced, multi-step exploitation and reverse engineering process.
Creating a room that has you using the same or similar SUID privesc several times isn't going to go over well in my opinion.
tawny shell
No worries..just ideas
@light idol never been to overthewire but just checked it out due to your previous reply in here... cool site! So far its a lot of fun
dark coral
Zerologon exploit.
languid ibex
There's a room for that already
dark coral
oh oops.
sleek elbow
F
fast nymph
Epic Bug Bounty prep room that makes use of specific example scenarios and bounty writeups, not just going over the owasp top 10. would be super 
fast nymph
yesssssssssssssss
tacit anvil
a room with the theme of a bug, and that there are flies or so by the ctf, that is simple type user and root only with the theme of bug, bug bug and insect bug
native raptor
Um, what?
karmic raven
bug, bug bug and inspect bug
steady rose
Just submitted by first room on OSINT / geolocation. Excited to see what you think 😁
somber crow
That's quite difficult, because you can't legally distribute the OS images
Hosting them would be legally iffy, and otherwise you'd be depending on people having the appropriate hardware
tidal apex
Request room : Threat Intelligence Analyst
glacial acorn
A room based on vhosting and how we can bruteforce it to discover other web content
native raptor
@glacial acorn that would be a smaller aspect of another web room. That said, whilst wfuzz is best for it, gobuster will let you do it really easily if you give it a little research
The wfuzz command will be something like this (although bear in mind I'm on my phone and can't test it): wfuzz -w WORDLIST --hc FILTER-STANDARD-CHARACTER-LENGTH -H "Host: FUZZ.domain.tld" IP
sudden garnet
i am also on phone but for gobuster: gobuster vhost -u IP -w WORDLIST and if you’re interested in how they’re set up i wrote this short blog post :) https://jake-ruston.com/posts/apache-virtual-hosts.php
fast sequoia
Is there a room on honeypot and how to set it up
light lynx
no
icy trellis
Have you googled that topic?
ashen trail
I would love to see a room turn the Security+ into a CTF
sleek elbow
Is there a room on honeypot and how to set it up
@fast sequoia Cryillic has one planned iirc
A room based on vhosting and how we can bruteforce it to discover other web content
@glacial acorn A larger project im working on for THM will feature this
fast sequoia
thorn remnant
Not exactly a room, but it would be nice if there was a web page of some sort where we could add tools, and their features. Hopefully we could mark what they were good for (red team/pen test/Blue Team) Is a tool for recon/exfil/detecting ...
For noobs who don't know the tools this would be a big help. Not to mention you only need a few people who are used to finding tools sharing to expose the info to many people.
karmic raven
I mean maybe could be a blog but 🤷♂️ it’s just one of those things you just pick up
thorn remnant
The idea is you can basically make a list of tools that can be used for recon, for priv Esc, or detection. A Blog would be an unorganized list I think. But if it can be organized then it works.
light lynx
you can always organise a blog post?
thorn remnant
No idea, not my thing.
sleek elbow
yeah, that's blog post topics
obsidian tartan
The idea is you can basically make a list of tools that can be used for recon, for priv Esc, or detection. A Blog would be an unorganized list I think. But if it can be organized then it works.
@thorn remnant you can use something like gitbook to do that.
sudden garnet
@thorn remnant check out https://book.hacktricks.xyz/pentesting-methodology, click on the section you wanna learn about and it will give you a boatload of tools :)
fast nymph
Listen I don't care what the room is actually about, but if it's doom eternal themed I'll squeel like a girl
native raptor
Right then
somber crow
Hi, this channel is for suggesting rooms rather than asking for hints@pearl nebula
pearl nebula
@somber crow ok thx
gusty spindle
For the Nessus room (which is part of the primer series), I'd suggest having instructions set up in a way that installation of nessus is complete first before deploying the server... I wasted a lot of time due to some connection troubles. 😩
high kestrel
More rooms utilising or about SSTI and XXE would be great! These are areas I tend to struggle with down to very little practice. Also how to spot these. I think ZTH was a pretty good room on this.
Some rooms explaining about how to exploit .htaccess and .htpasswd files as well as how to ensure they are secure.
vague root
Looking to see, I enjoyed the zerologon room, maybe if we could get a blue primer to see and investigate this from a blue team side. Such as going through windows logs and network traffic. And suggested patch for final step.
sleek elbow
@vague root funny you mention that. I've given @karmic raven a sample pcap of it for something he's working on
vague root
@sleek elbow sweet. I just like seeing both sides as it helps strengthen skills for work place if I do both. Looking forward to it.
thorn remnant
It would be interesting to have some Blue Team tools running a few places to show what gets noticed for (Red Teams, and Blue Teams) and obviously a room to talk about that stuff in.
native raptor
Believe it or not, there's an entire blue team path coming
tacit anvil
Blue team path 
jaunty talon
SSRF vulnerabilities
jaunty talon
Oh thanks, sorry
fast sequoia
Room : metasploitable 3 for practicing
native raptor
fringe field
I dunno if it already exists but a room aiming to learn how to abuse google cloud misconfigurations . It's quite new but it has generated some significant payouts in the bug bounties.
karmic raven
pretty much anything relating to cloud including aws, azure, google cloud is kind of out of scope due to the environments we have to set up. I would suggest just making your own cloud lab
fringe field
alright
gusty spindle
https://tryhackme.com/room/rppsempire
It's due for an update...
somber crow
Known issue. That's not really an idea for a new room.
karmic raven
We’re working on it 
high kestrel
Look forward to the blue team path
lament star
somber crow
I mean that's just a single port forward rule?
Not sure how to stretch that to a whole room
karmic raven
If you’ve configured your own home firewall that blocks thm connections I would expect you to be able to configure it yourself
somber crow
Their point seemed to be reverse shells where you're not VPN'd onto the target network?
somber crow
yeah, so that's a single port forward rule and doesn't really extend to a whole room
vague root
somber crow
Perhaps a link to the article might be better?
safe lava
Hi, i tried to create a public room but it seems I can't access it from public, any idea(?)
I deployed and test-solved it like 12 hrs ago
somber crow
Hi, this channel is for room ideas.
As stated on the room creation pages, rooms are tested before they're made public.
safe lava
Sorry, I kinda dontknow where to ask or who to contact
somber crow
They will be tested by the room testers, and then either have a release date scheduled or will be rejected and remain private.
If you have submitted it for review, you wait.
safe lava
I see, thanks sir
lunar plank
Hey @safe lava I can see your room in the submission queue here. I just picked it up about 10 minutes ago. We aim to get room reviews done as quick as possible, but there's usually a bit of a queue that can stack up depending on the amount of available room testers (who aren't already doing a couple of boxes) so sometimes they can take a couple of days.
It's getting late for me (well, 5AM is pretty early in the morning now). Whilst I've had a brief look through your room, I'll be beginning my feedback and testing of it full once I've got some shuteye and complete a previous room over the upcoming weekend (:
You will receive emails on the decision of your room - where constructive feedback will be given from the room tester responsible for it, for either outcomes
Thanks for taking the time to submit content onto TryHackMe!
In the meantime, you can have a look through on the various things that room testers look for when testing a submitted room https://help.tryhackme.com/the-room-review-proccess
So it can be a bit of a time consuming procces (:
safe lava
I see, thanks sir. My first time and its been really nice of you guys, love the community!
native raptor
Glad you enjoyed it @merry ice!
karmic raven
@vague root from my experience working with the team they like to keep away from 0days for a bit until they’re at least patched and generally safe. This 0day also doesn’t look like the craziest thing ever compared to something zerologon but it could be a cool priv esc in a challenge room
thorn remnant
For blue teaming it would be interesting to talk to Splunk, and Solar Winds, to see about getting some discounted licenses so you can have a few rooms that show you the basics on how they work. I personally would like to see some Red Team rooms with SIEM monitoring so you can send alert messages to attackers, saying you were not stealthy enough, and so Blue team can actually look at the logs n such.
karmic raven
we have a room on splunk with more to go
the automation on a room with automated blue team is possible it would just be insanely annoying to script
SIEM is basically just a collector it takes human detections to look over that data
gusty spindle
For the memory forensics room which is part of the blue primer series... Seems like the volatility tool required is no longer in existence in their kali repositories. Maybe a new one could be used for training?
lunar plank
The VM attached to the room should have volatility installed on it
Along with the image you need
You can SSH in or use the in-browser functionality 👍
candid umbra
🌐
torn portal
Python for Crypto, about libraries available in python for crypto, etc!
south pasture
Room attackingkerberos This will only be an overview of how the pass the ticket attacks work as THM does not currently support networks but I challenge you to configure this on your own network.
iirc THM supports network now?
brisk tapir
It does @south pasture
south pasture
ehm, might be a good thing to update these network-related rooms?
native raptor
@south pasture I already yelled at @karmic raven for that
Feel free to keep pinging him until he changes it
sleek elbow
@native raptor dont ping him, just perma mute him until he networks it 4head
native raptor
Done 👍
glacial acorn
What about a room that teaches you how to bypass anti-viruses
somber crow
That's been discussed before. AV bypasses constantly change so it's hard to make a room on it.
glacial acorn
true
karmic raven
its not impossible to make a room but its also just hard
Its better for us just to tell you to do your own research than make a room
tacit anvil
Hi there, since there is a recurrent question (i would say once a day or so) about the module requests used by python2, in a CVE needed for a easy/free room Simple CTF wouldn't that be relevant to make a note in the task indicating that you have to have the module for python2 and not python3 ?
somber crow
I mean it's a general hacking thing that you can easily solve with research
tacit anvil
Sure.
tacit anvil
That's been discussed before. AV bypasses constantly change so it's hard to make a room on it.
@somber crow are there new ways being used everyday to change how AV detects viruses? maybe make a room on general ways or even ways that have been used before.
native raptor
What about a room that teaches you how to bypass anti-viruses
@glacial acorn @tacit anvil I'll be covering the basics of that in something that's due out in a couple of months 👀
native raptor
Nah, commissioned stuff 😄
karmic raven
Assuming it gets approved I’ll be taking a course on some crazy windows advanced things including malware droppers that bypass AV depending I might look into making a room on some more advanced techniques for concealing scripts and payloads
jagged blade
hey
strange schooner
@jagged blade Do you have a room idea? If not, you need to go to #general and make sure you read the topic and room name in future 🙂
heavy moat
What rooms are best for learning? I've completed the tutorial and basic learning path.
icy trellis
This isn’t related to room ideas please ask in one of the general chats
light lynx
Room idea: Shodan room but not broken
icy trellis
@ CMNatic
icy trellis
😁
lunar plank
Hey @heavy moat by "basic learning path" do you mean the "Complete Beginner"?
lunar plank
Can very much confirm that a room on Yara is in the works!
lament star
🙂
tacit anvil
I'm working on my first room 🙂 This will be a viking themed CTF.
lunar plank
Sounds neat @tacit anvil! Have you seen the topics on our help site about room creation?
tacit anvil
I got various sites open at the moment. The "room creation getting started", "making the mountain", and so on 🙂
lunar plank
Ah wicked! Make sure to take a peep at the room testing guidelines if you wish to submit to be released to the community (:
Otherwise, you've got a good bunch there already!
tacit anvil
Yeah, I'm looking at those. And got a very wothy hint from James -> using ubuntu server and no desktop version
brisk tapir
Aren't CTF Type boxes discouraged now ?
fallow lichen
No, why would we discourage fun?
native raptor
CTF boxes following the same old path are, @brisk tapir.
It doesn't have to be realistic, as long as it's something more than "ssh key or creds in an ftp server or webserver with bruteforcing". Basic crypto and stego are also discouraged, along with any of the other generic pathways.
Doesn't have the be realistic, but it does have to be innovative.
tacit anvil
That is one of the reasons I do Muir boxes.
native raptor
That is one of the reasons I do Muir boxes.
@tacit anvil There's another one coming out this time next week. My first Windows box, so I'm afraid I kept it fairly simple, but should be interesting. I know there's nothing else like it on THM certainly
tacit anvil
That's great! I have very less knowledge when it comes to Windows machines, would be interesting for me. 😄
native raptor
Aye, this is one that very much relies on features of the OS, rather than exploits, per se.
It's a good way to pick up a few tricks for Windows
I certainly did making it 🤷♂️
tacit anvil
I am waiting. 😉