#thm-community-media

1 messages Β· Page 32 of 1

graceful coral
#

noots on Elf McSkidy

latent stirrup
#

It's actually starting to feel like groundhog day.

lethal egret
#

@quaint elm be proud of me, I did two pwn rooms today and actually enjoyed them

quaint elm
#

@lethal egret I am proud of you, very proud. (which rooms btw?)

#

And of course, congratulations.

lethal egret
#

brainpan and vulnserver TRUN

#

ngl it may only be basic but hell it's fun

quaint elm
#

Oh god, both windows pwn.

#

Apparently, brainpwn has windows pwn being a linux machine.

graceful coral
#

I never doubted you for a second @lethal egret

lethal egret
#

yeah it is, it's weird wine shit

quaint elm
#

But, that made me even more proud.

#

Good job. @lethal egret

graceful coral
#

Have a shibe of good job

lethal egret
#

popped a windows shell andw as like, literally nothing works wut

#

then realised the filesystem was linux

quaint elm
#

Yeah, that's the best part of the machine.

#

But, without a doubt, I am very proud of you @lethal egret . You came from learning ret2libc in one week to two windows buffer overflow in a day, that's progress.

graceful coral
#

@quaint elm how is u

quaint elm
#

As I was before, quarantined and pwning. You? @graceful coral

graceful coral
#

Quarantined and degening

quaint elm
#

lol

graceful coral
#

I'll prbly be degening until August

#

When I'm shipped off to uni

quaint elm
#

It's just like, one second you're bored and the other you realized you have 1000 ideas sitting in your brain.

#

Oh.

graceful coral
#

Eyyy @formal iron

#

How ya doin

formal iron
#

ayyyyyy lad

#

v tired

#

But keeping healthy! how about yourself? @graceful coral

graceful coral
#

My head's hurting

#

But other than thay

#

Fine

formal iron
#

owie 😦

latent stirrup
formal iron
#

+10 the malware book

cobalt thicket
#

That's a lot of No-Starch

olive sundial
#

Is @meager compass dead?

graceful coral
#

Just read 'Cult of the dead cow' @latent stirrup Great book!

#

Not sure if you've read it but Kevin Mitnick - Ghost In The Wires is also a great read.

graceful coral
#

Cult of the Dead Cow is also in my pile at the moment

last marlin
#

Hey guys, after installing Visual code i get update message, after updateting "code", i get this message when i try to launch Vc. Any suggestions ?

strong crown
#

Does anybody ahve issues installing Empire on kali 2020?

last marlin
#

I recently switched to Parrot, but i didn't qhen i was using Kali

strong crown
#

maybe is just a network problem and failed to download some stuff. i'll keep trying

#

same issue in kali room. i think that the problem is that installer tryes to use pip and not pip3

olive sundial
#

specify that you want to use pip3?

strong crown
#

ok. solved @olive sundial . the problem was in compiling and installing the M2Crypto module

olive sundial
#

Well done!

last marlin
#

I was wondering, seeing that kali and parrot is debian based, wouldnt that be a best option to instal ldebian and install all the tool you need afterwards ? its not that you are using 100% of the installed tools anyways.

olive sundial
#

you can always install kali with a skimmed down version of tools according to your requirements @last marlin

last marlin
#

its not that im bothered by tools, i was just wondering isnt that better having debian instead of debian based ?

#

not that i dont like parrot, just came to my mind

olive sundial
#

loool

#

idk, it's personal preference i assume

last marlin
#

sure, but that doesnt stop me from laughing πŸ˜„

graceful coral
#

anyone have any job experience of β€œjunior penetration tester”? ..... how much experience and skill is needed? I am thinking to apply for internship

urban crescent
#

knowing networking basics is the single biggest thing you need to know

#

port numbers, protocols like ARP, TCP vs UDP

#

port scanning without normal tools is a good thing to know

#

how to interact with various protocols, ex. smb, ftp, http, https, snmp, nfs, NetBIOS

graceful coral
#

how to interact with people

#

port scanning without normal tools is a good thing to know
@urban crescent scripting using puthon?

#

*python

urban crescent
#

sure, or bash

#

echo test < /dev/tcp/ip/port

graceful coral
#

Thanks banana

urban crescent
#

np

last marlin
#

knowing networking basics is the single biggest thing you need to know
@urban crescent I would always wonder what means having a basic knowledge ? HOw do i know do I have a basic knowlede or not ?

urban crescent
#

if i can ask you various questions about basic networking concepts, i.e. how could i find the broadcast ip address of a network, if I ask you about ARP poisoning, can you explain what an ARP request is as an immediate followup question, can you desribe the three way handshake, how TLS/SSL versions are negotiated, etc.

#

heres some interview questions ive been asked in the past:

#
Networking:
- Describe the 3 way handshake
- Without nmap and other standard utilities how could you determine a port is open
- Say you have a root shell, you see information that you believe will be useful for
  another engagement, however the shell is not stable and the file is too large to copy 
  and paste, without access to Netcat, how could you transfer the file?
- You see a service running on a non standard port, nmap does not recognize the service
  how could you figure out what service was running?
Linux:
- What distros do you use/deal with on a daily basis?
- You got a low privilege shell on a box, what are some of the first things you may do 
  to attempt to elevate privilege
- What are some other things you might check for?
- You notice a HTTP server running on a port that is only locally accessible, how might you
  access it? 
- Explain how a SUID binary works and how you could exploit it
- You have a custom SUID binary on a key production server that you have never seen before
  how might you be able to to use this to your advantage?
Windows:
- You have recieved a low privilege shell on a Windows box, what is your next step to
  elevate privileges?
- Describe how an active directory style network works and the structure of it?
- How familar are you with powershell? Can you provide some examples
Web:
- Talk about some web exploits you've preformed
- Talk about an exploit/vulnerability that you found insteresting
- Explain how SQL Injection works
- You're tasked to Pen Test a web server, give a rough high summary of how it looks
Other:
- How familar are you with automation, give specific examples of something you've automated
- What is your familiarity with docker (non exploitation).
tropic lava
#

I can answer a lot of that, that's quite nice to know

olive sundial
#

yup

#

you should pin it

#

it's proper handy @tropic lava

olive sundial
#

thanks a lot

last marlin
#

@urban crescent thank you man, that is very informative. Will def. work on that.

olive sundial
#

also. state your projects that you do out of work

#

THM for example

#

employers love this kind of stuff

#

or anything else that you work on in your free time

#

i landed a job, purely on my out of work knowledge of security

last marlin
#

realy ? I would always see those kind of question, as somehting like, writing a software. Might be lack of good English, that sometimes I understand not fully when i read English

#

def gonna state that now πŸ˜„

olive sundial
#

yeah, anything really that you think it's worth mentioning

graceful coral
#

Yeah anything relevant out of work should be mentioned. I always mention things I'm learning in my spare time and my work for a cyber security charity. Employers always really like that tuff

urban crescent
#

THM is a great thing to mention

#

especially if you contribute to the platform

#

any CTFs you do are also worth mentioning

tropic lava
#

Being able to teach something is generally accepted to mean that you understand the topic very well

graceful coral
#

Even if you do writeups and throw them up on a personal site

#

They like that in interviews

lavish iron
#

they like it for you to spoil the fun for others?

#

nah I'm just joking πŸ˜‰

graceful coral
#

I don't show flags

#

Yeah I show the method but I explain it too

lavish iron
#

well yeah.. there's a difference.. I've seen some really bad writeups which was just essentially "I'm showing i did this"

#

which just... isn't really insightful (not even for the writer)

graceful coral
#

I like to think
"Would this help me"
If I list off 5 commands
do this then this then this
etc
That doesn't help anybody

lavish iron
#

you should always include your way of working and explaining commands (or the way an exploit works) when making a writeup... it shows about you:

  • that you know this kind of stuff
  • how you work
  • if you're good at communicating (in written)
  • if you're good at coaching (with your explaining)
    which could be things a interviewer wants to know about you as a person
graceful coral
#

Yeah we're agreeing here, I'm just not good at explaining what I mean clearly

tropic lava
#

What are you doing, why are you doing it, what does this achieve.

lavish iron
#

I know @graceful coral I was just trying to enrich your answer πŸ˜‰

graceful coral
#

I appreciate it πŸ˜‚

lavish iron
#

❀️

graceful coral
#

As long as somebody understands my nonsense

lavish iron
#

....something about soulmates.... but I don't want to jump the gun

graceful coral
#

We need to keep it PG
"Just good friends"

lavish iron
#

friend with benefits? .... the benefit? I just enrich his ..'nonsense'

graceful coral
#

Will the mods give me in trouble if I say
"Good pentesting buddies"

urban crescent
#

just some other general advice

#

always keep your resume updated.

graceful coral
#

Be a real human is my interview advice. You can be as technical if you want but if you show up at an interview an antisocial little goblin nobody is going to want to hire you. Ask lots of questions, crack a few small jokes within reason. They can teach technical but they can't teach a good attitude

cobalt spruce
#

Does it helps if you say, that you got alot of friends working in this field?

graceful coral
#

I would say no

#

Unless you have a friend at that company. In which case they would have referred you

urban crescent
#

No

lavish iron
#

@cobalt spruce they'll probably ask you if one of THEM needs a job

urban crescent
#

kekw

cobalt spruce
#

Hmm if I would hire somebody, I guess I would acknowledge the fact that a person is a part of the comunity in the field he is working.

lavish iron
#

being part of a community doesn't mean being friends with them...

#

you should show you're part of a community.. by participating

urban crescent
#

also

lavish iron
#

so show what you have done (in that community)

urban crescent
#

bring copies of your resume with you

#

it shows youre prepared, they'll be able to reference things on it, and it can help give you some talking points

graceful coral
#

I would say list accomplishments on a resume as opposed to general duties at a job

urban crescent
#

also, keep the length to 2 pages unless you have a legitimate reason to expand to 3 or more

graceful coral
#

If you've got no experience or 1 job I'd say keep it to 1

#

But after that 2 is a good rule

cobalt spruce
#

Is it hard to land a job if you know stuff?

urban crescent
#

its hard to land an interview

cobalt spruce
#

What about agencies?

urban crescent
#

even more difficult

#

they're dead set on bachelors

tropic lava
#

Only reason I'm getting a degree

lavish iron
#

.. doesn't it really depend on where you're from?

#

here they are SCREAMING for it sec people

graceful coral
#

Depends. Working in helpdesk it's easy to get other helpdesk interviews but when you're trying to take a step up can be harder
Recruiters are basically the worst but hard to avoid them. The job I'm starting in 2 weeks was through a recruiter so sometimes it works out

urban crescent
#

in the states, you need a degree to get a job at an agency or else your app wont really get reviewed

cobalt spruce
#

what about certifications?

graceful coral
#

Also getting a degree in my spare time while working full time. Experience always trumps it but having a degree will never hurt you so good to plan to get one at some point

urban crescent
#

certifications rarely help, im stacked cert-wise, everything that the DOD wants, but because I lack a degree, my apps get passed along

graceful coral
#

Certs are more about the knowledge you can get from them if you actually study and don't cheat the exams
They don't always meana lot

cobalt spruce
#

you can fill the gap of degree by having certifications can yuo?

urban crescent
#

certs should suppliment formal education, professional experience, and personal knowledge

graceful coral
#

You'll never be hurt by a degree

lavish iron
#

Also getting a degree in my spare time while working full time. Experience always trumps it but having a degree will never hurt you so good to plan to get one at some point
@graceful coral Agreed.. I started working a programming job before getting my bachelor in software engineering.. the experience is actually all that matters but it's a good thing to have the papers to back it up πŸ˜‰

tropic lava
#

Associates degree or batchelors? @urban crescent

#

@graceful coral oof my debt

urban crescent
#

currently finished my Associates

tropic lava
#

I'm currently being hurt by a degree

graceful coral
#

Sorry, goverment pays for my degree

lavish iron
#

same

urban crescent
#

about to switch majors from Cyber to Business since I can't stand formally learning about cyber anymore

lavish iron
#

I wish we had cyber mayors...

urban crescent
#

no you dont

graceful coral
#

I'm doing cyber but that's only because I already work in IT so I've got experience. Though I'd at least do a degre I enjoy

lavish iron
#

ok.. I dont.. 😦

tropic lava
#

Government "pays" for my degree

urban crescent
#

if you enjoy writing 4 page papers about nmap, sure

#

and enjoy doing metasploitable, sure

tropic lava
#

My THM sub does all the teaching though

graceful coral
#

Government "pays" for my degree
@tropic lava You're right, government doesn't charge me for my degree I should say

urban crescent
#

but ill tell you it gets old really fast

graceful coral
#

I'm exempt from half the modules due to previous study lol

lavish iron
#

@urban crescent tbf I did the same for my bachelor in programming.... I had 4 years experience before doing the degree... it was too easy.. I did everything 'to good' (and with that I did a lot more thinking/ writing about stuff than my classmates)... too much time wasted

#

for a lousy piece of paper

urban crescent
#

its a huge waste of time

cobalt spruce
#

what about if you focus by being task oriented assasin, is it a way to go ?

lavish iron
#

I do agree.. but here.. they just NEED that piece of paper.. it's really weird

cobalt spruce
#

in a legal way i mean

graceful coral
#

what about if you focus by being task oriented assasin, is it a way to go ?
@cobalt spruce What do you mean?

urban crescent
#

ill tell you this much

#

by doing TryHackMe and other CTFs

#

you're already better off than half of the people in my degree program. You're formulating your own methodology, knowing and learning how to properly use tools, and so much more.

lavish iron
#

yes... mindless bots.. 'just doing what i'm being told' for getting that degree... being assertive (and doing CTF's) helps ALOT more than just being a generic run of the mill degree holder (at least for their first year)

cobalt spruce
#

@graceful coral I mean master one thing, and sell only that thing. In open market such as Upwork, Fiver not sure about the platforms yet. And gradually expand your portfolio of service.

graceful coral
#

Not a lot of money in it

#

You'd be better off putting that time into studying to get a job than selling services on fiver

urban crescent
#

yeah, isn't really a place for cyber security services in fiver

lavish iron
#

because your first year on the job.. means you'll formulate your own methodology, knowing and learning how to properly use tools etc. πŸ˜‰

urban crescent
#

plus, you're 100% putting yourself at risk

graceful coral
#

Learned more in my first 2 weeks about infrastructure than I did 2 years at college

lavish iron
#

@cobalt spruce you should look at HackerOne...

urban crescent
#

there's a ton of safety procedures that you need to have to protect yourself, which I know for a fact you'll be forgetting

graceful coral
#

I agree, I volunteer for a cyber security charity and all we do is advise people on how to deal with issues themselves. We don't remote on or anything because then you're at risk of something going wrong and getting in trouble legal wise

lavish iron
#

@cobalt spruce you should look at HackerOne...
What I wanted to say with this.. is that HackerOne is a place where you can find real exploits for real businesses.. so you'll master your 'one thing' and get some money out of it (sometimes, depends on multiple factors) and you can show that off as experience when looking for a job

cobalt spruce
#

@lavish iron would you advise any other platforms such as Fiver, Upwork?

lavish iron
#

... uhm, well I'm a noobie at this also.. but you have to understand that doing these kind of pentesting stuff could land you in a lot of trouble when the 'contract' (or as I like to call them 'the RoE' a.k.a Rules of Engagement) isn't clear and you end up doing something 'illegal'

#

so i'd stick to websites that KNOW what they're talking about (like hackerone) and read the R.o.Es carefully before trying stuff on their client's websites

graceful coral
#

Definitely not something I would just dive into

cobalt spruce
#

@lavish iron what if instead of pentesting, offer a service to building something. And afterwards upsell with the fact that you can pentest the thing you have built. Wouldnt you be able to avoid 'contract' trouble then? (hipoteticly speaking, I am a newbie too, but I believe there is people who would love to have for example networking setup in a business)

graceful coral
#

Network setup in a business is a lot more complex than you think
Especially if you have no experience

urban crescent
#

network architecture is very complicated, can confirm

graceful coral
#

I'm not trying to be negative. But I've got 2 years infrastructure experience and I wouldn't setup networking for a business solo

lavish iron
#

yes.. I agree

urban crescent
#

especially if you're diving into configuring cisco devices

lavish iron
#

My job lies in between development and admin.... it's pretty hard

urban crescent
#

ASAs are different than routers, and switches

cobalt spruce
#

@graceful coral I like when people are realisting, didnt consider you being negative.

lavish iron
#

i'd say developing enterprise stuff is less hard sometimes

urban crescent
#

i wouldn't attempt Fiver due to a ton of reasons

graceful coral
#

Old job was infrastructure and support
New job is infrastructure and security

urban crescent
#

-protecting yourself being the biggest
-hourly rate will be extremely poor
-you'll likely make minimal sales, if any at all

lavish iron
#

@cobalt spruce not to be an asshole but..... it just sounds like you need a bit more experience before going into the field (guessing IT in general) maybe start off with a few certificates

#

it's good that you're eager to learn and assertive in trying.. keep that mental state!

graceful coral
#

@cobalt spruce You're definitely on the right path attitude wise

cobalt spruce
#

@lavish iron @graceful coral well yeah this is my first week on THM, doing it as a hobby for my self. Slowly working my way up. πŸ™‚

#

Thanks for the insigthful knowledge for sure.

tropic lava
#

Also it sounds like you'd create security flaws for yourself to give yourself more work

#

Mild conflict of interest

graceful coral
#

Also it sounds like you'd create security flaws for yourself to give yourself more work
@tropic lava Really good input actually

tropic lava
#

There's a reason you get independent people in for pentests

lavish iron
#

@cobalt spruce if you'd like some more info about certifications I'd suggest starting to look at comptia stuff..

tropic lava
#

CompTIA is a bit mixed

lavish iron
#

Mild conflict of interest
@tropic lava We have a saying for that here.. about advising your own stuff...

cobalt spruce
#

I did learn CompTIA + few weeks ago .

lavish iron
#

CompTIA is a bit mixed
@tropic lava Depends on where you start

tropic lava
#

Which +? @cobalt spruce

#

@lavish iron They're mostly for HR

lavish iron
#

their network+ is allright

graceful coral
#

If you've got any professional experience I'd ignore CompTIA completely
Except maybe sec+
maybe
If you've got nothing the trifecta can be good

lavish iron
#

for a starting position

tropic lava
#

I thought sec+ was a meme?

cobalt spruce
#

this one

tropic lava
#

Ah A+

urban crescent
#

let me put it this way:
I passed CySA+ by the largest margin over Sec+ and PT+

graceful coral
#

I did a couple of the Microsoft MTAs when I first started
Again, good for the very basic fundamentals but not much past that

lavish iron
#

@tropic lava I agree when you're talking about higher stuff like their cysa+ and pt+

graceful coral
#

Cert I enjoyed the most was MCSA: Server 2016

urban crescent
#

CySA+ I enjoyed the most

lavish iron
#

I did a couple of the Microsoft MTAs when I first started
Again, good for the very basic fundamentals but not much past that
@graceful coral exactly what I wanted for @cobalt spruce to look into.. fundamentals

urban crescent
#

challenging exam, but not too challenging

graceful coral
#

For the 3 MCSA exams in total consumed about 4 months of my life

cobalt spruce
#

I am looking now to do CompTia Networking +, but meanwhile want to train on the machines THM offers, dont want to be stuck in 'learning mode without practice'.

urban crescent
#

Net+ is a majority theory

#

if you want something with both you should look at CCNA

lavish iron
#

yes.. except when you use wireshark or any of the commands daily .. it helps πŸ™‚

cobalt spruce
#

Anki flashcard deck: https://drive.google.com/file/d/1VJcki-kSYvMhkcq31i_LUH-JzlTvjUXX/view?usp=sharing
πŸ“šBoson ExSim: http://bit.ly/BosonCCNAExSim ← the BEST practice exams for CCNA
πŸ’»Boson NetSim: http://bit.ly/BosonCCNANetSim ← even MORE practice labs for CCNA

How to use the...

β–Ά Play video
#

looks legit. I guess I just changed my mind will go for CCNA now. πŸ˜„

graceful coral
#

Will actually be tackling the new CCNA later this year hopefully

urban crescent
#

im skipping the new CCNA since I hold R&S kekw

#

not sure what I'm going to reup it with, probably new CyberOps

cobalt spruce
#

I have arch linux on 4 of my machines. Using linux for a year now, they break quite alot, and that way I learn alot by fixing them. Using linux everywhere I can.

tropic lava
#

Linux doesn't break often for me.

urban crescent
#

you might be interested in LPIC-1/2

graceful coral
#

I need to get some security certs
All mine are infra based

lavish iron
#

lol.. most of mine are for programming πŸ™„

graceful coral
#

My programming is rusty lol

urban crescent
#

im a jack of all trades

#

CCENT, CCNA R&S, A+, Sec+, PenTest+, CySA+, CEH, OSCP

graceful coral
#

How was Sec+ thinking of doing it for fun lol

lavish iron
#

My programming is rusty lol
@graceful coral as in.. you only do Rust development?πŸ˜‚

graceful coral
#

Think my list currently is
MTA: Server Fundamentals, MTA: Networking Fundamentals, ITIL: Foundation, MCSA: Sever 2016

#

@lavish iron More as in I could probably whip up a quick hello world and that's about it these days

lavish iron
#

everything microsoft?

#

I was joking πŸ˜‰

graceful coral
#

Old job was a full Microsoft enviroment

#

Least I'm pretty dam good at PowerShell though so that's a positive

#

and there's a sneaky wee ITIL in there so not all MS πŸ˜‰

urban crescent
#

I did Sec+ for no reason

lavish iron
#

oh yeah.. that's great for windwos exploiting πŸ˜„

urban crescent
#

just registered for it one night

#

so im not necessarily the best person to ask about a majority of certs

lavish iron
#

just registered for it one night
@urban crescent fucking jealous... I always have to study for shit like that... information flows right through me sometimes...

graceful coral
#

I'm on a bit of a cert break anyway
Spreading myself too thin lately

lavish iron
#

@urban crescent how do you normally study for stuff?

graceful coral
#

textbook, lab lab lab

tropic lava
#

Lab is the most fun

urban crescent
#

formally

lavish iron
#

ugh.. I hate textbooks.. I jsut can't get through them.. it takes for ever with me

#

plus like I said... information from books goes through my like I'm a sieve....

graceful coral
#

@lavish iron maybe skip the mcsa then πŸ˜‰

lavish iron
#

yeah.. with a 6m/o daughter it's not the best time to study, hehe

graceful coral
#

Yeah studying can be hard while trying to keep a little person alive

lavish iron
#

formally
@urban crescent I'm not sure what that means

urban crescent
#

in a classroom setting

graceful coral
#

Classroom can be good, only if the business is paying though

lavish iron
#

oh really? does that help? I always think its a huge waste of money

graceful coral
#

a whole week in a classroom with an expert on the product you're learning definitely helps

#

But I wouldn't pay for it myself

lavish iron
#

yeah.. with the amount of certs i'd like to get.. I don't think my manager would like that either :p

graceful coral
#

Focusing on my degree and THM at the moment
4 months of intensive study puts you off certs for a while

lavish iron
#

.. yeah I had the same when I had my last year of school and working 40 h/w

graceful coral
#

Yeah man, really takes it out of you. And I don't have kids so can't imagine what it's like for you

lavish iron
#

well.. she was 'timed' really well! she was born about 2 months after I got my bachelor πŸ˜‰

last marlin
#

How many of you use firewall on your pc ?

#

Well my question is actualy, would you suggest having it on a normal pc, or not ?

tropic lava
#

Windows has one by default

tropic lava
pseudo cobalt
#

thanks

#

is there a way to break from this, if optional caughts me?

tropic lava
pseudo cobalt
#

cyeet

tropic lava
#

@hearty timber Hi, please respect rule 1 for all of the members of this discord.

#

And also, keep it civil?

hearty timber
#

?

#

what wasnt civil ?

last marlin
#

What did i miss ?

tropic lava
young roost
#

lmaoo

#

update your apt repos bro

tropic lava
#

@young roost This is a 2019 install

young roost
#

oh rip

tropic lava
#

But the fact it's giving a local address means something weird is happening

#

Ah that's better

young roost
#

so apt update fixed it?

tropic lava
#

yeah, just funky that I got a local IP

#

Wait no I didn't, I misread that

young roost
#

it happened to me when i tried to upgrade metaspolit

#

i had to apt update

tropic lava
#

Yep

last marlin
#

what do you guys think of eJPT ?

tropic lava
#

@olive sundial you just took and passed it, didn't you?

olive sundial
#

Yup

#

What's up

last marlin
#

was it hard to pass ?

olive sundial
#

Not really. I mentioned a few times

#

But if you have a basic understanding of networks and you know how to do Blue you should be just fine

#

Other than that. Google is your friend

last marlin
#

Waht does it cost 200$ ? or is that just a voucher ?

olive sundial
#

The exam is 200 plus taxes

last marlin
#

@olive sundial I assume this exam is easier than OSCP, right ?

olive sundial
#

Yes. That is very correct

#

You got 3 days to do it

last marlin
#

sounds tempting

olive sundial
#

Same

#

I read the material and jumped into it

#

Just don't rush and read everything

#

It's not a ctf

fading crown
#

Yea. Nothing eLS is CTF based like OSCP. It's more rounded and representative of real world.

tropic lava
#

OSCP is quite CTF?

olive sundial
#

Haven't done any real world scenarios so far so i can't relate

last marlin
#

I read the material and jumped into it
@olive sundial I have requested "Penetration Testing Student"

#

waiting for mail

olive sundial
#

Coolio

#

That's for eJPT

#

Study it very carefully especially networking

last marlin
#

I will do my best

fading crown
#

When you need flags to win it's pretty CTF'like.

When I took eCPPT, there was only one "win" condition, and it was to gain root on the DMZ. But it's also made clear that it isn't inclusive, and that you have to find all vulnerabilities and machines and exploit them. While pivoting.

olive sundial
#

And routing traffic

fading crown
#

eJPT is heavy on routing table stuff.

olive sundial
#

It wasn't for me lol

fading crown
#

It's the same exam.

#

for everyone.

olive sundial
#

I'm not certain of that

fading crown
#

Just differently worded questions.

#

I am. It's the same environment, with slightly different variations to the forward facing stuff.

olive sundial
#

Didn't find any routing info on the machines

fading crown
#

Enough difference you can't just burn through it quick and retest.

I think you're overthinking it.

olive sundial
#

That's on eCCPT i think

fading crown
#

Routing table manipulation was very much on eJPT

#

I didn't touch a routing table outside autoroute on eCPPT.

olive sundial
#

Might be. I've manually added my routes. Anyway, same thing

fading crown
#

...

#

That's what I'm saying.

olive sundial
#

Just read every bit of the material that's the whole point

#

Sorry dude, I'm slightly tired and misunderstanding stuff

fading crown
#

It's ok. πŸ™‚

olive sundial
#

For eCCPT you need to create a report too. Right?

fading crown
#

Yep

olive sundial
#

And still 3 days?

fading crown
#

No. It's always been 7 days to exploit, 7 days to report from what I know.

olive sundial
#

Oh damn, that's neat

#

I'll definitely give it a go later through the year. It's a big financial commitment

fading crown
#

Yea they don't promote poor health and sleep like OffSec. They give you a realistic amount of time in a realistic environment.

olive sundial
#

Hahahaha. That's good to hear

#

Worth a shot if i get 4 days to get my way through

#

Does it have any binex? I suck at those pretty badly

#

Or bofs

fading crown
#

Exam has a BoF.

olive sundial
#

😫

fading crown
#

dostackoverflow good

olive sundial
#

Yeah, welp, i always avoided that subject as much as i could

graceful coral
#

Bofs

#

Are

#

A myth created

#

By the

#

Government

tropic lava
#

Pars. Didn't you put one in cod caper?

graceful coral
#

Yeah @tropic lava

#

Occasionally you have to do what the government says

lavish escarp
#

erm do aliases get reset after a restart if set using alias command1="command --i_want_to_run"

#

cause i just came back from been in windows and my metasploit alias has vannished

tropic lava
#

Yes

#

Add it to your bashrc or something if you want to keep it.

lavish escarp
#

ahh right okay thanks

tropic lava
#

alias vpn="openvpn ~/NinjaJc01.ovpn" alias htb="openvpn ~/htb_NinjaJc01.ovpn" alias msf="msfdb start && msfconsole -q" alias cutter="/root/Downloads/Cutter-v1.9.0-x64.Linux.AppImage" that's what I have in my bashrc at the end

lavish escarp
#

nice can you set system wide ones as in is there a bashrc that would be checked before local users one

#

??

tropic lava
#

Google it

lavish escarp
#

just so i can set it in there so i can use it in both root and mainn user

#

fair

tropic lava
#

linux system wide aliases

lavish escarp
#

thansk was jsut abotu to serach that now you said it sorry for askign liek i do just a really bad habbit i gotta get out of

#

hmm i for soem reason thoguth hackthebox wasnt a thign anymore admitted i havent checked to see i just had it in my head it was gone lol

#

@tropic lava i added te aliases i want to /etc/bash.bashrc but they dont seem to be working dose it require a service restart maybe and if so what service

tropic lava
#

Read the notes on that

#

@rocky quarry When I used to do IT support, I used malwarebytes and then hitman pro

rocky quarry
#

@tropic lava thanks a bunch because my wifi kept cutting out and stuff and I just scanned with malwarebytes and found a bunch of sketchy exe files in weird directories so i'm trying to get rid of as much stuff as i can

tropic lava
#

Don't download sketchy exes

#

Game hacks especially.

rocky quarry
#

I don't think I did

#

oh actually yea I did download half life alyx from iggames

#

most likely spyware from that site

#

guess I won't do that again

tropic lava
#

Too good to be true, then it is.

rocky quarry
#

exactly

#

wow I had no idea how many google chrome cookies were collecting my data and stuff

#

something like 130 different cookies

#

guess it's a good idea to clear cookies often then

tropic lava
#

Or run privacy extensions and don't lose your login sessions

rocky quarry
#

i'll look into that

quaint elm
#

alias vpn="openvpn ~/NinjaJc01.ovpn" alias htb="openvpn ~/htb_NinjaJc01.ovpn" alias msf="msfdb start && msfconsole -q" alias cutter="/root/Downloads/Cutter-v1.9.0-x64.Linux.AppImage" that's what I have in my bashrc at the end
@tropic lava Didn't knew you do Reverse Engineering too.

tropic lava
#

I do everything

#

badly

quaint elm
#

Badly?

graceful coral
#

A James of all trades

tropic lava
#

Mediocrely then

lavish escarp
#

okay shouldnt having

Defaults !tty_tickets```
mean that once i run sudo in one terminator terminal  that every subsiquential one should need the password its seems to work for a little while but eventually ask me for the password again after a little bit but i was udner the impression after the first password request it shouldnt ask again untill all terminal windows have been shut/system, restarted
graceful coral
#

anyone know how to setup kali linux from offensive security for Hyper-V
It keeps giving me errors

olive sundial
#

?

#

what errors

graceful coral
#

gimme a second ill get the error

#

oop it works now

olive sundial
#

well done

graceful coral
#

the classic try to show someone and it works perfectly

olive sundial
#

it works fine for me

#

lol

#

i moved away from hyper v. I used virtualbox and now moved to VMWare

graceful coral
#

isn't VMWare not free

#

why isn't kali/kali working

#

root/toor worked

olive sundial
#

they have the version where you can run 1 vm free

#

i got the paid version

cobalt thicket
#

I use Qemu because I hate myself skidy

olive sundial
#

lol

#

masochism?

graceful coral
formal iron
#

Qemu's for the cool kids

#

Vmware player is still better then virtualbox imho

graceful coral
#

ill get it on my next paycheck when i go back to work

formal iron
#

better of the free tiers even if you are limited to the amount of VM's you can run

graceful coral
#

yeah

formal iron
#

handy lil' feature-comparison table as well :^^

olive sundial
#

yup, i like my vmware workstation pro

graceful coral
#

I've got it just waiting for the kali install to download before i reset to use it

olive sundial
#

you can keep stuff in folders

#

and make it look nice and pretty

formal iron
olive sundial
#

agreed ^^

formal iron
#

it runs so seamlessly it's big pogchamp

olive sundial
#

yup, gotta love it

#

haven't used the shared VMs feature

#

as most of my stuff is local

formal iron
#

has vmware workstation pro - can still only run one VM at a time on his laptop kekw

olive sundial
#

looool kekw

#

i can do 2 or 3 depending on the resource allocation

graceful coral
#
from subprocess import Popen, PIPE; p = Popen("passwd blah", stdin=PIPE, shell=True); p.communicate("Bleh"); p.communicate("Bleh")

would change the password?

quaint elm
#

Have you tried it yourself? @graceful coral

graceful coral
#

nothing seemed to happen

quaint elm
#

It didn't change?

graceful coral
#

I tried to make an account to ssh into the vps

#

from subprocess import call; call("useradd -g root linu", shell=True)

quaint elm
#

would change the password?```
#

Then?

graceful coral
#

I didn't sudo it

quaint elm
#

If you're interacting with IO operations consider taking look at pwnlib.

#

Or pexpect.

graceful coral
#

I know my mate ssh using root

#

I have access to one of his bot's eval command
he was like i bet you couldn't get into the vps and he said I could try so thats what im doing

formal iron
#

gl with your OSCP both @tranquil bison & @lethal egret x)

quaint elm
#

They have OSCP today?

formal iron
#

I know Optionals is impending, not sure when Mickat's (just going by status) is but I probably wouldn't get a chance to say on the day

quaint elm
#

Good luck guys @tranquil bison and @lethal egret

#

Oh.

tranquil bison
#

thanks πŸ˜„

formal iron
#

x))

tranquil bison
#

stil in lab time πŸ˜„

#

need to issue an exam day still

formal iron
#

ah! Hope it's going well so far nontheless

quaint elm
#

^

last marlin
#

Get luck. Hope you pass.

last marlin
#

Anyone using arch linux ?

#

I'm on the distro testing street these days πŸ˜„

primal quiver
#

woh. Student loans are now in forbearance until November!!!

olive sundial
#

what is that supposed to mean lol

last marlin
#

it means no party till november πŸ˜„

#

stay indoors.

torpid coyote
#

Severely offtopic, but does anyone have any recommendations for good horror games on steam?

strange axle
#

If you'd like a horror game that's also hacker related, check out welcome to the game 2

torpid coyote
#

Should I check out number one also? Or just 2?

strange axle
#

Two is significantly improved but one is also a great game

torpid coyote
#

Alright, thank you!

lethal egret
#

@formal iron @quaint elm thanks guys. 7 hours and I’ll be sitting down ready to start 😳

tropic lava
#

GL

quaint elm
#

Good luck.

#

You can do it.

primal quiver
#

howdy howdy

graceful coral
#

@olive sundial isn't Mordred that character from the King Arthur stories

olive sundial
#

yup

graceful coral
#

I've heard fate was like some weird historical fanfiction before

#

Is this true

olive sundial
#

fate is cool, trust me

graceful coral
#

Because if so I may watch it

olive sundial
#

as long as you start from fate: zero

#

so the correct order is fate: zero, fate: unlimited bladeworks, then whatever you want

#

there are like 7 series or so

#

but the best ones are the ones mentioned above and fast: last encore + fate: apocrypha

#

there, are different characters from the past like: Arthur Pendragon, Alexander the Great, Mordred, Gilgamesh

graceful coral
#

Aight but is Caesar in it

olive sundial
#

no

graceful coral
#

Bet

olive sundial
#

but there is Nero

graceful coral
#

;-;

#

Ok

#

That's fine

#

Does he still light half of Rome on fire

olive sundial
#

in Last Encore

#

can't recall his power :/

#

i think it was the colosseum

#

but at least he doesn't get backstabbed

graceful coral
#

So it is historical fanfiction?

olive sundial
#

not exactly

graceful coral
#

Does the show teach you latin

olive sundial
#

no

#

but it's a really good anime, definitely

pseudo escarp
#

@lethal egret are you streaming today? As Exam is tomorrow

cobalt thicket
#

His exam starts at midnight tonight iirc

pseudo escarp
#

What a weird time to start an exam haha

olive sundial
#

if he passes will he send pictures of his feet?

pseudo escarp
#

Lmao

safe citrus
#

Darkstar's talk starts soon pepega

olive sundial
#

Dorkstork you need to finish the last requirement for me and @urban crescent

urban crescent
#

can you link it? @safe citrus

tropic lava
#

@urban crescent

#

I've asked skidy to make an announcement about it

urban crescent
#

<3 sorryz just waking up

safe citrus
#

We just finished with a talk so he should be up soon

strong crown
#

just completed nax room. how it's possible that metasploit, with the same options set, gave me 4 different errors and go straight at the 5th?

tropic lava
#

Different internal states?

#

Unreliable exploits?

strong crown
#

i think the main problem was slow connection.

urban crescent
#

theres our beautiful boy

safe citrus
urban crescent
#

new emote time

strong crown
#

😭 YT won't load

pseudo escarp
patent rain
#

πŸ˜”

pseudo escarp
#

Just froze on Dark

patent rain
#

i can't even describe this face lol

urban crescent
safe citrus
#

Hahaha

restive tartan
tropic lava
#

Earn some cash - THM creators program

restive tartan
#

Earn some cash - THM creators program
@tropic lava If you have the skills to do it aha:)

tropic lava
#

Ouch, that hurt

restive tartan
#

Not @ you sorry

#

I mean

#

In general

#

You're a great dev

pseudo escarp
#

Shots fired

olive sundial
#

where's your Chad at @pale cove

pale cove
#

what

#

oh

olive sundial
#

nice

#

Chad Gang

lethal egret
#

@pseudo escarp yeah gunna start in 40 minutes. Likely to stop at 11

primal quiver
#

i just took a pretty decent nap πŸ˜„

last marlin
#

up to date distro

pale cove
#

hmm i don't really see a point in these ones ^

#

as a penetration tester, you need a stable release which would not cause any errors/crashes during the work process

last marlin
#

hmm i don't really see a point in these ones ^
@pale cove I must say downloading this made my problem with AMD r9 390 go away, I would normaly add line in grub to avoid that problem, but now I dont have to. and anothet thing, after fewsh install you would have to download something like 800mb updates, but now after install i had to download nothing, everything was up to date

#

but i see your point

pale cove
#

hmm that's great honestly

last marlin
#

I have heard python2 is no longer gonna be supported

pale cove
#

it is not already

last marlin
#

sweet.. less trouble with script i guess

pale cove
#

it's still in use though

#

but everyone is trying to completely switch to 3d

last marlin
#

would be nice. maybe its me roockie in python, but had to corrct script a few times cuz it was written in python2

#

I need to invest more time in it, wanna learn python

olive sundial
lethal egret
#

Ah John recommended this in an older video of his

olive sundial
#

oki dokes ^^

lethal egret
#

Gunna just throw it all in joplin as I can do markdown and then export as pdf

olive sundial
#

good good

lethal egret
#

Thanks for the link tho man ❀️

olive sundial
#

no worries

last marlin
#

saved it for the future )

olive sundial
#

i have more stuff to dump

last marlin
#

HASHDUMP

olive sundial
#

nah, bookmarks

#

i like to call it 'Journey to Slough' reading

graceful coral
#

May someone help me with pip? It's giving me some errors and cant do use python to complete the room, have tried in google but nothing works

olive sundial
graceful coral
#

Well, this is about pip so thought it shouldnt go into #room-help

#

pip/python

olive sundial
#

what's the error

graceful coral
#

Unable to locate python-pip

#

sudo apt install python2-pip

olive sundial
#

@graceful coral did you forget pip ran out of support

#

you need python -m pip i think

graceful coral
#

it says the same too

olive sundial
#

for which one

graceful coral
#

Depending on his distro

#

He may be able to find it in the repos

#

paradox one

last marlin
#

what about : sudo apt install python3-pip

olive sundial
#

that will work, but we don't know the context

graceful coral
#

He needs python2

#

Not python3

last marlin
#

riight

graceful coral
#

tried python -m download but says "ERROR: You must give at least one requirement to download (see "pip help download")"

last marlin
olive sundial
#

python -m pip -r requirements.txt

last marlin
tropic lava
#

Frankendebian alert

last marlin
#

πŸ˜„

#

ahtung

tropic lava
#

I'm serious

graceful coral
#

Franken Debian alerts

last marlin
#

its gettin serial

olive sundial
#

@past nymph give this guy the command to install with python the pip requirements

graceful coral
#

for line in $(cat requirements.txt) do python -m pip install $i; done

olive sundial
#

thanks senpai

last marlin
#

for line in $(cat requirements.txt) do python -m pip install $i; done
@graceful coral MAssta

graceful coral
#

for i in $(cat requirements.txt) do python -m pip install $i; done
@graceful coral

#

My bad

#

I typed line instead of i

olive sundial
#

you pinging yourself

graceful coral
#

xd

olive sundial
#

well done sir

last marlin
#

he is on the roll, roll with it πŸ˜„

olive sundial
#

senpai pooroodoox

graceful coral
#

well, i dont know what to do with it :)

olive sundial
#

ctrl c from here

#

ctrl shift v in your kali, in the folder where you have the stuff you need to install

graceful coral
#

?

olive sundial
#

have you tried pasting the command in your terminal

graceful coral
#

yes?

olive sundial
#

and what happened now

graceful coral
#

syntax error

olive sundial
#

prnt screen?

graceful coral
#

bash: syntax error near unexpected token `done'

#

Oh my b

#

for i in $(cat requirements.txt); do python -m pip install $i; done

#

There

#

That one should work

#

Forgot a semicolon

#

do its in "do"

#

What

#

You don't need a semicolon after do

#

bash: syntax error near unexpected token `do'

#

Do you not have python?

#

Try python2

#

Some distros don't make a symlink to /usr/bin/python

#

do i paste it into python 2?

#

No

#

It's a batch script

#

Bash*

#

Just run it in bash

last marlin
#

Bashing it all over the place

graceful coral
#

Replace python with python2

#

well i do have python2 but keep getting that

#

No

#

for i in $(cat requirements.txt); do python2 -m pip install $i; done

#

Try that

past nymph
#

Hoi, someone mentioned me

#

What dis

strong mango
#

Hey guys, I was modifying my tmux.conf file and I'm almost done with what I needed to tweak. One thing is not working though , the switching panes with Alt key and arrow. I put it like so :

Switching panes with alt

bind -n M-Left select-pane -L
bind -n M-Right select-pane -R
bind -n M-Up select-pane -U
bind -n M-Down select-pane -D

#

I checked on different example and it looks like the same. Any ideas why it doesn't work ?

graceful coral
#

@past nymph I should ban you

#

But I like you, so I won't

formal sparrow
#

🀣

#

Small warning @past nymph -- with the same nickname as one of the mods, you are going to get a lot of pings around here...

pale cove
#

πŸ˜†

past nymph
#

xd

#

❀️

graceful coral
#

im off topic

formal sparrow
#

We noticed 😁

graceful coral
#

yay my senpai noticed me

#

jk jk

last marlin
#

Who is that wanna be senpai ? πŸ˜„

#

version two point O ?

tropic lava
graceful coral
#

damn that looks kinda thicc

tropic lava
#

Huh?

graceful coral
#

the page

last marlin
#

Should I be using duckduckgo ? I come a cross often videos on youtube talking about it

graceful coral
last marlin
#

i've tried everything but i keep getting this
@graceful coral have you tried this :
https://www.ivobeerens.nl/2013/12/16/running-hyper-v-and-vmware-workstation-on-windows-8-x/

ivobeerens.nl

For testing I use Hyper-V and VMware Workstation 10 on my laptop. One restriction of VMware Workstation is that it does not support VHDX disk files (yet). VMware Workstation support VHD files, so the VHDX files must be converted to a VHD first. After the conversion VMware Work...

graceful coral
#

yep

tropic lava
#

@graceful coral You can't user HyperV AND Workstation

#

You have to pick one

#

Disable HyperV

graceful coral
#

yeah

last marlin
#

I was thinking about that

graceful coral
#

ive done everything to get rid of Hyper-V

#

nothing it working

last marlin
#

purge babe purge

tropic lava
#

Remove the thing through features

graceful coral
#

I did that

tropic lava
#

Reboot

graceful coral
#

same error :/

quaint elm
#

You're settling HyperV for docker?

graceful coral
#

I just got Win10 Pro last night and enabled Hyper-V in Windows Features

last marlin
#

I just got Win10 Pro last night and enabled Hyper-V in Windows Features
@graceful coralhttps://www.iobit.com/en/advanceduninstaller.php?b1
try this one, I used to use this when I was using windows.

graceful coral
#

HyperV doesn't show up

last marlin
#

have u tried this ?

graceful coral
#

Yeah

#

Ill just reinstall Win10

#

I have nothing important on my PC yet

last marlin
#

why not try creat new user and delete the old one, mayv you have some left overs in tha user acc

graceful coral
#

I'll try

last marlin
#

and if you are using win10, it has a feature to reset, you dont have to reinstall it, just like on your phone, you can reset it to default settings.

graceful coral
#

Thats like never worked for me in that past

#

it justs throws up errors and reverts changes

last marlin
#

strenge, I been using win 10 before its release, and that think has never given me errors..

graceful coral
#

ive never had a simple time with Windows

last marlin
#

install linux, maybe that will change

ebon pewter
#

Anyone used zenmap here?

graceful coral
#

yeah, but steam doesn't run as well

last marlin
#

Anyone used zenmap here?
@ebon pewter I have at the beginning, but now I just use nmap

formal sparrow
#

@ebon pewter Do yourself a favour. Don't use Zenmap

last marlin
#

AAAaight )

ebon pewter
#

Trying to do blue, cant download kali rn cause im on a hotspot

#

Just tryna do a port scan

formal sparrow
#

Then use the nmap exe for windows

last marlin
#

greetings from my shell πŸ˜„

ebon pewter
#

Help @formal sparrow

formal sparrow
#

With?

quaint elm
#

It's not good to tag people and if you need help, try heading over to #site-support or any help channels.

ebon pewter
#

Using nmap exe on windows

#

Ok robin

formal sparrow
#

That's a Rule 13

ebon pewter
#

What is

formal sparrow
#

( #rules -- if you haven't read them)

last marlin
#

And btw, forgive me saying that, but if yoou have trouble using nmap, maybe its not a good idea to start with blue, there is a room dedicated to nmap

#

start with it

ebon pewter
#

Yes

#

Im doin blue along with other rooms

last marlin
#

I would recommend finishing nmap room.

#

cuz first thing you do starting any room is use nmap

graceful coral
#

Not with the zthlinux room

last marlin
#

forgive me senpai.. πŸ˜„

formal sparrow
#

Or most of the AoC rooms

last marlin
#

im just a mortal who makes mistakes here and there

formal sparrow
#

Don't worry, so's Pars

empty sorrel
#

notice me senpai blobheart

formal sparrow
#

Ask him about getting out of Vim

last marlin
#

πŸ˜„

#

vim vim vim viiiiiiim

formal sparrow
#

(I trapped him in Vim last Koth 1v1 we did)

#

(and he's never living it down)

ebon pewter
#

I don’t feel like using nmap rn

#

Tryna port scan with zenmap help

#

Lol

graceful coral
#

You have the gall! @formal sparrow

formal sparrow
#

Rule 13 @ebon pewter

quaint elm
#

Muirland trapper Pars in vim?

formal sparrow
#

Go read -- or take a break until you feel like reading

#

Yes @quaint elm 😁

#

Took him five minutes to get out

#

By which time I had the box locked down πŸ˜†

quaint elm
#

What did you do?

#

lol

ebon pewter
#

Why u mad at me?😳

last marlin
#

I don’t feel like using nmap rn
@ebon pewter thats one lazy atitude

formal sparrow
#

Changed the default editor to Vim

#

In fairness, something else went wrong with it -- not sure what

graceful coral
#

@quaint elmhe likes to say he trapped me

quaint elm
#

I and 2 of the other guys from my CTF team played Attack and Defence CTF, we did rm -rf / on the top CTF teams of our country lol.

graceful coral
#

He didn't trap me

formal sparrow
#

@ebon pewter because you're not willing to do the work for yourself. Hacking is 95% research and 5% sheer dumb luck

quaint elm
#

lol

graceful coral
#

I was attempting to use a suid exploit

ebon pewter
#

Im just tryna learn this side of hacking

graceful coral
#

And trapped myself

quaint elm
#

Lol

ebon pewter
#

Why u pressing me?

quaint elm
#

It'd been so hilarious.

formal sparrow
#

Enjoy 😁

ebon pewter
#

And no rash im not lazy

graceful coral
#

Do the research room

quaint elm
#

@ebon pewter He's not mad at you. It's just you keep asking for help. We are not backing off from helping you, we like to help but not unless you're ready to help yourself. If you're stuck at at first, try reading a write-up and follow it along, then do it next time without write-up.

last marlin
#

And no rash im not lazy
@ebon pewter If what you say is true, than you are lazy, its no rocket science to figure that out, I have spent hours and hours trying to get one anser, and you are not feeling like using nmap ? what is that if not lazy ?

#

and let's hope you are feeling like readin πŸ˜„

#

catched my eye

ebon pewter
#

Lmao, I study daily(more than u guaranteed), and I asked a question nicely and u press me for no reason

last marlin
#

"more than u guaranteed" how can you say that ? you dont even know me

quaint elm
#

Stop arguing guys.

formal sparrow
#

^^

last marlin
#

You cant argue with facts πŸ˜„

formal sparrow
#

Not strictly true

#

But either way, that's enough

quaint elm
#

Yeah, but I don't see this conversation going in good way.

last marlin
#

im done btw

quaint elm
#

Btw, is there some sort of nickname to address you MuirlandOracle?

formal sparrow
#

Haha, mouthful isn't it?

last marlin
#

like the joker would say : sometimes all you need is a lil puuuush

quaint elm
#

Like, for Paradox we have Pars, Sherlock's nickname is Dan.

ebon pewter
#

Congrats on knowing more about nmap than me RashSec! Want a sticker?

last marlin
#

I wont say no to that πŸ˜„

formal sparrow
#

The accepted shortened form is Muri.
A few people have adopted other, less accepted versions 😁

quaint elm
#

Muri is acceptable.

formal sparrow
#

πŸ˜„

last marlin
#

im surfing web, looking for book, to learn more about sockets in python.. any suggestions ?

ebon pewter
#

Quit being lazy and research it urself

last marlin
#

πŸ˜„

#

that is what im doing

formal sparrow
#

@ebon pewter That is enough. Rash has been kind enough to stop fighting back, do us a favour and stop lashing out at him

ebon pewter
#

How was I lashing out I said what he said to me

graceful coral
#

@last marlin im gonna read that one

last marlin
#

let him be, he will get tired ) breaks and bones can break my bone, but words will never hurt me. Good old saying

graceful coral
#

O.o

ebon pewter
#

Look at all y’all attacking me cause I just joinedπŸ˜‚

graceful coral
#

Wdym @ebon pewter

formal sparrow
#

That would be a matter of context, @ebon pewter

ebon pewter
#

At least paradox doesn’t hate me

last marlin
#

You are more than welcome, if you just see it.

graceful coral
#

Who is paradox

#

Oh nwm

quaint elm
#

What the heck

last marlin
#

senpai, notice him πŸ˜„

graceful coral
#

Muri notice me plz

formal sparrow
#

That you are @ebon pewter
Everyone is welcome here, as long as they follow the rules and be civil

graceful coral
#

Muri ignores me @last marlin

last marlin
#

@last marlin im gonna read that one
@graceful coral looks good to you ?

graceful coral
#

Its kinda sad

ebon pewter
#

You guys all buds attacking new guyπŸ˜‚

graceful coral
#

Im so confused what are you talking about smh πŸ˜‚πŸ˜‚

quaint elm
#

@ebon pewter Dude, no one is attacking you.

graceful coral
#

Fr hahhahaahha

last marlin
#

πŸ˜„

#

buds, notice me

quaint elm
#

Im so confused what are you talking about smh πŸ˜‚πŸ˜‚
@graceful coral Believe me you don't want to know.

graceful coral
#

LOL

#

Maybe its a bot tbh seen that type of bot before

ebon pewter
#

REEEEEEE

graceful coral
#

Nwm its defenetly a human

last marlin
graceful coral
#

I do not own any of this material

ebon pewter
#

Rashsec and muirland dont like me

#

At least paradox nice to me

formal sparrow
#

No one dislikes you here..

ebon pewter
#

Haha i know u dont hate meπŸ™ƒ

#

Rashsec does tho

#

Pressed me for no reason

last marlin
#

No one dislikes you here..
@formal sparrow I wouldnt be so sure of it, he can guarantee things πŸ˜„

quaint elm
#

Oh god, I told you guys to drop off that conversation.

formal sparrow
#

^^ I second that

graceful coral
#

Play nice y'all

last marlin
#

im really kidding here, but he is def taking it all to close

graceful coral
#

No disrespect will be tolerated by anyone

formal sparrow
#

Let it go Surfer
Play nice πŸ™‚

last marlin
#

im not hating anyone.. really, i dont have time for that

#

and energy

graceful coral
#

Hating is taking energy away

quaint elm
#

Look guys, the time and energy you're wasting here arguing can be used for some good work.

graceful coral
#

Loving is taking energy away

#

Emotion less is best trust me

last marlin
#

im looking for book...

#

and not being lazy

#

directing the energy to the right direction

graceful coral
#

Sir im broke i dont have any energy left please give me energy by giving me a good meme to laught at

tropic lava
#

Good, or subjectively good?

graceful coral
#

Like ultra good

#

Jeez

#

Lmao

tropic lava
formal sparrow
#

Ha

#

That's actually not bad

quaint elm
#

^

last marlin
#

πŸ˜„

graceful coral
#

Im keeping that one

tropic lava
#

But why is the rum gone?

formal sparrow
#

Quarantine...

graceful coral
#

Cuz fireee

formal sparrow
#

I'm running out

#

I need more alcohol

tropic lava
#

I left all of mine at my dad's place

#

Bad decision

formal sparrow
#

Oh you poor soul

graceful coral
#

Lol prohibition of alchocol sounds fun

formal sparrow
#

Oof, no thanks

tropic lava
graceful coral
quaint elm
#

Alright, see you guys later.

tropic lava
#

Cya

formal sparrow
#

Cya Robin

graceful coral
#

Bye robin

last marlin
#

cya

#

bye bud

graceful coral
#

So about that beer you owe me

formal sparrow
#

Hey @graceful coral -- you playing much Koth these days?

tropic lava
#

How many years under legal drinking are you?

formal sparrow
#

(About five in Britain from memory)

last marlin
#

going under πŸ˜„

graceful coral
#

Yeah played a couple of games few days back when dc was live

#

I was but i stoped drinking cuz its bad when you do it everyday on big scales

tropic lava
#

@somber flicker discord and tryhackme are separate. You set profile pictures independantly for each.

#

The only link between them is the TryHackMe bot. Which can't change your discord settings.

somber flicker
#

who does that upped tho ?! f--- wierdos

#

why offer course and then act hard up

olive sundial
lavish iron
#

@olive sundial can I DM you with a few questions about your certification path (as seen on your twitter) and ejpt?

olive sundial
#

sure

#

1 moment

#

try now

cobalt thicket
#

Only took me 6 attempts

lavish iron
#

... you killed a giraffe for that @cobalt thicket ?

cobalt thicket
#

I guess Jad kinda is a big Fire Giraffe now that you say it

lavish iron
#

yeah sorry.. I'm a runescape-heretic, I guess... not sure what I'm looking at πŸ˜›

olive sundial
#

same

last marlin
pale cove
#

No, but the description looks promising

#

β€œextend burp” β€œwindows priv escalation”

last marlin
#

I was looking for a book python sockets, but I think this one will cover sockets as well

quaint elm
#

It has chapter where the author makes a netcat in python.

#

I have read it a bit, quite good.

last marlin
#

but i see its not that new, is that a deal breaker ?

#

overall is that a bad thing that a book is few years old ?

quaint elm
#

Nope, not really.

strong crown
#

maybe there are some changes, but i think it's worth reading

quaint elm
#

Art of Exploitation is quite old but it still holds the value.

#

So does the Practical Malware Analysis.

last marlin
#

understood

#

after long research im glad with my purches

#

will be doing some reading tomorrow

fading crown
last marlin
#

I'll be going live at 1pm est at to cover BLASTER. I hope to see you all there!
@fading crown You mean the actual gun ? πŸ˜„

tight scaffold
#

Anyone is interested in making use of WSL2 with Kali to get a full desktop experience without VM?
Got it working.. took me few days πŸ˜„

last marlin
#

what kind of abomination is that ?

quaint elm
#

Dude, go on write a blogpost on it. @tight scaffold

tropic lava
#

Kali in WSL2, with a VNC connection? @last marlin

tight scaffold
#

it uses vcxsrv

cobalt thicket
#

Nothing like a good ol' nationwide Virgin media outage

formal sparrow
#

Again??

tropic lava
#

@cobalt thicket Fine here, but friends in Ports are ded rn

cobalt thicket
#

I feel bad for optional

#

Down in the middle of his OSCP exam KEKWG

tropic lava
#

Oh yup

formal sparrow
#

Oof, that's gonna be making his OSCP difficult...

tropic lava
#

Ouch

formal sparrow
#

Let's hope he worked through the night and is done with the actual hacking aspect now...

cobalt thicket
#

I can't even get on the virgin media website now

tropic lava
#

It's back for some

cobalt thicket
tropic lava
fading crown
last marlin
#

I can't even get on the virgin media website now
@cobalt thicket What is that ? some local provider ?

cobalt thicket
#

UK ISP

last marlin
#

got it

tropic lava
#

UK wide

cobalt thicket
#

Only FTTP proivider in most of the country

tropic lava
#

Also Coax to the home DOCSIS stuff

tropic lava
#

RIP VM again @cobalt thicket

cobalt thicket
#

twice in 20 mins smh

#

I can get to discord but nothing else

tropic lava
#

Can't connect to voice tho

cobalt thicket
#

Ye

tropic lava
#

No Route reeeee

cobalt thicket
#

Can't login to Runescape paradox

tropic lava
#

CoD mw immediately starts a download

cobalt thicket
#

sounds about right

last marlin
#

Some apps from deepin are so sexy, almost makes you wanna test that distro

formal sparrow
#

Oh yeah, Deepin is absolutely gorgeous

#

Privacy?