thm-community-media

[tropic lava]

@pseudo escarp Yeah, but the majority

[formal sparrow]

Strange people...

[pseudo escarp]

Missing out

[olive sundial]

... agreed

[tropic lava]

Fresher's is lethal for any regular human

[rustic moss]

nah

im freshman

[pseudo escarp]

Half drunkenly coding some of your best stuff is big brain time

[tropic lava]

@rustic moss Again, UK

I think mild innuendo comes under PG13

[graceful coral]

today i learned that smb-vuln-ms17-010 is a Server Message Block Protocol exploit

[olive sundial]

lol

did you not do blue

[tropic lava]

smb = smb

[graceful coral]

i did

but i didn't know the meaning of smb

[tropic lava]

what is smb

[olive sundial]

it's also called samba

[tropic lava]

@olive sundial Not quite

[rustic moss]

suck my boots: smd

[graceful coral]

eternalblue 😂 i used it when it was leaked on my other pc for testing smh

[rustic moss]

dang it

[hexed thicket]

Good Morning!

[rustic moss]

darn smb

[tropic lava]

Samba is an implementation

[pale cove]

https://www.worldatlas.com/articles/who-drinks-the-most-alcohol-consumption-by-country.html
Place 16 let's goo 🦾

[tropic lava]

@hexed thicket 👋

[rustic moss]

AYE zwacky sama

[olive sundial]

that's the product used for it lol

[pseudo escarp]

suck my balls: smd
@rustic moss Defo not PG-13

[hexed thicket]

@tropic lava 👋

[graceful coral]

@hexed thicket you have very long name

[rustic moss]

hey i fixed it

[hexed thicket]

It's @graceful coral's name in real life

[tropic lava]

smd is a type of component

[rustic moss]

lololoolol imagine

[graceful coral]

im confused

[tropic lava]

We don't have to imagine

[hexed thicket]

Whats to be confused about

[rustic moss]

that was meant towards zwack haha

[hexed thicket]

nice!

[tropic lava]

@rustic moss Yea, we don't have to imagine that it's Pars real name

[rustic moss]

lol i know pars real name XD

it aint that

[formal sparrow]

No, it really isn't

Be pretty funny though

[rustic moss]

facts XD

lets just call him that

[tropic lava]

I know Muri's real name tho

And none of you except muri do

I keep seeing Will on my linkedin

[rustic moss]

dang muri is confusing me

[pseudo escarp]

I keep seeing Will on my linkedin
@tropic lava Me Will?

[tropic lava]

@pseudo escarp ye

I think thru tobi

[pseudo escarp]

Ah okay

Makes sense

[formal sparrow]

Yeah, James is the reason I changed my pfp..

[graceful coral]

muri is a good human

[tropic lava]

😉

@pseudo escarp Some day I'll probably bump into you

Post corona

[pseudo escarp]

Ayy hopefully, it would be nice to see some of the THM lot in person and not exclusively on discord haha

Haven't been to uni this term though lol then Corona happened

[formal sparrow]

dang muri is confusing me
@rustic moss 😁

[rustic moss]

evillllll

anyone play Dragon's Dogma?

[pseudo escarp]

Muri's real name Gloria Foster

[rustic moss]

ima get it on linux

ooh i know a foster

used to like her lol

[graceful coral]

what is Dragon's Dogma

[rustic moss]

check it out

[graceful coral]

idk can i run it tho

[pseudo escarp]

@tropic lava she played The Oracle in the Matrix

[rustic moss]

oof

[tropic lava]

@graceful coral Wait, you were using ubuntu I stg

[graceful coral]

i was

but i switched to debian

[rustic moss]

LOL

[graceful coral]

cuz performance 😄

[tropic lava]

Distro hopper.

[rustic moss]

guys

arch

come on

[tropic lava]

new CPU when

[graceful coral]

and it looks way better i just love look and design of debian

[rustic moss]

btw, i use arch

for the meme i apologize ^

[graceful coral]

idk i can't install arch or any other cuz my usb doesn't want to lisent to me

and i think he died or something

[rustic moss]

uh

wut

[graceful coral]

but i know i will blame debian for it

[rustic moss]

XD what

so confused

[graceful coral]

so i was deleting stuff

from my usb

when i was on debian

and i did something

and now

when i insert usb

it doesn't load

good formating

[rustic moss]

u prob wiped the file sys

its prob just unallocated

[graceful coral]

what do i do

[rustic moss]

u have a graphical ui?

might be easier

[graceful coral]

aaa

idk

[rustic moss]

wut

[graceful coral]

[rustic moss]

ur running a DE right?

twms are better

[gritty dome]

Dragon's Dogma was tight

[graceful coral]

DE?

[rustic moss]

facts @gritty dome

desktop environment

[graceful coral]

yes yes

i have desktop

[rustic moss]

like gnome kde xfce etc

[graceful coral]

gnome

its gnome

[rustic moss]

ok

open gnome start

and open disks

[graceful coral]

wait i don't know where is my usb rn

hang on like 5 sec

[rustic moss]

haha ur good

@gritty dome what u play as?

[graceful coral]

okay i found my usb

[rustic moss]

sick

open Disks on gnome

[graceful coral]

oo

okay

what now

[rustic moss]

see ur drive?

flash drive*

[graceful coral]

done

[gritty dome]

Sorcerer usually. The magic and spell animations were just too good

Felt powerful af

[graceful coral]

ty for help tho

[rustic moss]

sure

and facts the magic is so sick

[tropic lava]

VendorCo productcode Ah my favourite device

[graceful coral]

hehe

[tropic lava]

@gritty dome Did you have some certs you want added btw?

[rustic moss]

i always have been a stealth player in all games that i play so i think this time around ima make a more mage based strider

[tropic lava]

stealth is normally OP

This post brought to you by bethesda

[rustic moss]

and just downright fun

HAHA right

dragons dogma is literally 100% better combat skyrim imo

[gritty dome]

Nothing I'm too terribly proud of lol @tropic lava I have all the LogRhythm SIEM certs, Sec+, and getting Pentest+ in a week or two. IDK if there is a "Took PWK but failed miserably" role

[tropic lava]

I can add Sec+

I can't add my 3cx certs for myself though

Someone else did it

Nice

[gritty dome]

dragons dogma is literally 100% better combat skyrim imo
@rustic moss This. 100%

And night travel was actually terrifying

[rustic moss]

ik thats why im scared to play it again 😂

i think ima mod it

[gritty dome]

lol I liked how it was "hard" but not RAGE inducing like dark souls

[rustic moss]

i dont have time for the super long travel times

agreeed

[gritty dome]

Yeah but that kinda went with the gameplay

I loved the companions borrowed from real players component

ALMOSTTTT coop

[rustic moss]

and even if it is rage inducing, atleast it isnt just dodge block and attack haha, its actually good combat

FACTS

that part is so sick

[gritty dome]

I'd always get a fighter companion to melee while I cast spells

[rustic moss]

the spells tho just obliteeeeerate

theyre legit insane

and the anims are so dang sick

[gritty dome]

For real - most other games don't really nail the feel of magic when it's supposed to be powerful

[tropic lava]

Opposite of skyrim

Spells just tickle

[gritty dome]

laser blast from fingers....

fire blast from fingers....

skyrim magic

[tropic lava]

Like here's a blast of magic fire. Or you could smack them with a steel sword and do more damage

Magical weapons is where it's at for skyrim

[gritty dome]

https://tenor.com/view/dragons-dogma-capcom-wizard-magic-gif-16581044

even that shitty gif looks badass

Yeah but magic weapons didn't change the appearance of the weapon or how they attack. They just debuff/cause more damage

[rustic moss]

spells in skyrim XD poor skyrim, mods dont even help skyrim much

[graceful coral]

jueez that motion blur is tilting me so much

[rustic moss]

yeh dogma is just insane

[gritty dome]

and the RPG customization is so well done

[rustic moss]

i gotta get farther into it

i usually forget bout everythin if it isnt combat

my issue when i play games lol ^

[gritty dome]

haha I spend a lot of time in games "preparing" and cycling through all the options

the best part of skyrim is char creation

[rustic moss]

only thing i read is the skills lol

as to why i played blade and soul and black desert online my whole gamin life

ah i wish there were more options in skyrim char creation

[graceful coral]

one day i want to be so good coder that im able to make code like this https://github.com/worawit/MS17-010/blob/master/eternalblue_exploit7.py

[rustic moss]

idk if that is as much coding as it it knowing what you are doing with the code

cuz like there isnt "too advanced" coding structures etc in that, its just knowing how to manipulate it well

[graceful coral]

yeah well its kinda godlike

[tropic dust]

imma do Hackers while listening to this:
https://www.youtube.com/watch?v=3m5qxZm_JqM

[graceful coral]

pls no

bet naughty alredy writing script

[tropic dust]

i am hacking "NASA"

[rustic moss]

oml 😂

[tropic dust]

while :; do printf ("!!!!Hacked!!!!!"); done

[graceful coral]

no don't tell me here

[rustic moss]

lol

[hexed thicket]

wait

[tropic dust]

#room-help ? 🤣

[hexed thicket]

in what language is while :; valid syntax

[rustic moss]

facts that is some odd syntax

[hexed thicket]

That's disgusting

[tropic dust]

in koth language

[graceful coral]

a

dragons

[graceful coral]

Good evenin' gents, the student account discount is still available on tryhackme?

Indeed Linux expert

So, how should I proceed to acquire that discount?

If you've got a .edu or .ac.uk email use that

Ah.

If you have a different email [e-mail]

Well, actually my student email address is student.uaic.ro

I'm from Romania, so things are quite different.

[tropic lava]

(email from the student email)

[graceful coral]

Yeah so email thm

Alright, will do. Thank you a lot gents!

[glacial shard]

Guess who got into hogwarts

[last marlin]

good evening lads

[gritty dome]

sup

[tribal warren]

Okay so, was thinking about putting Linux OS onto my computer so I can choose if I want windows/Linux on start-up (botched explanation), is it worth it?

I do have an old laptop that I can format and put linux on but it's a bit slow and don't think it's worth it (Laptop is about 6/7 years old)

[tropic lava]

I dual boot Windows 10 Edu and Ubuntu on my Thinkpad x230

2012 laptop

i5-3320M

Performs just fine, I run VMs on it for hacking too

[tribal warren]

Hm

[tropic lava]

But honestly

Run linux in a VM unless you really want to daily drive it

Vmware/virtualbox fullscreen is really nice

[formal sparrow]

Daily driving it is very beneficial, but you have to be really committed to it...

[tropic lava]

You also have to be good at fixing it

And be aware what software you'll need

[formal sparrow]

^^

[tropic lava]

And whether it runs on linux

Hint: That's why I still have Windows on my laptop

[tribal warren]

I'm going to just stick with VmBox until I am committed 😂

[formal sparrow]

And why I keep it on my Desktop, despite disliking it

[tropic lava]

Uni digital forensics software doesn't run on Linux

I run windows on my desktop because I play games

[tribal warren]

I'll read into what i really need more but doing things on THM doesn't really require a whole OS install

[tropic lava]

Yep

I just run kali in a VM

I've only had issues with Wifi hacking, but that's a VMWare bug

[rustic moss]

daily drive is so nice

i do recommend

but

you have to be able to troubleshoot a TON

[cobalt thicket]

Just improved my home network by tenfold

Finally setup a pi-hole

[tropic lava]

@cobalt thicket Nice.

[cobalt thicket]

data is beautiful

[tribal warren]

I love the look of the UI

So clean

[rustic moss]

r we showing off our rices now ?

[tropic lava]

No

[rustic moss]

😦

ill just go back to unixporn then :exits:

lol

[tropic lava]

Not even a rice

[rustic moss]

no full boot?

[tropic lava]

I needed a VM for my coursework

[cobalt thicket]

I hope my spotify blinds you all

[tropic lava]

I also play games

@cobalt thicket

[rustic moss]

i play games too haha

[tropic lava]

I just needed an 1804 VM because Java is horrible

[rustic moss]

lutris is out there

[tropic lava]

I play games that have anticheat

[rustic moss]

lol well alright

i wiped windows

so that i dont play games

cuz i get too addicted

[tropic lava]

I also use software for my uni course that requires windows

[rustic moss]

waste less time

[tropic lava]

I fullscreen that VM normally when I'm trying to do work

[rustic moss]

like wut?

vs2019?

[tropic lava]

VS Code

[rustic moss]

vs code works on linux

[tropic lava]

Yes

[rustic moss]

java does too

[tropic lava]

I use it on linux

[rustic moss]

oh ok

[tropic lava]

That's why I have a linux VM here

[rustic moss]

also vim is the best ide

prove me wrong 🙂

[cobalt thicket]

I can't wait to be that guy in uni that bought a mac because they couldn't be bothered with VMs or dual boot

[tropic lava]

VIM isn't an IDE

VIM is a text editor

[rustic moss]

can be

[tropic lava]

@cobalt thicket There's too many

[rustic moss]

mine basically is

[cobalt thicket]

oh I know, I intend to be one of them

[tropic lava]

But you actually know how to use the terminal so you can get away with it

[cobalt thicket]

cannae get away with the price tho

ouch

[tropic lava]

hackintosh thinkpad ezpz

[rustic moss]

rice time

😀

[tropic lava]

welp the arch user turned up

[rustic moss]

ofc

[tropic lava]

Time to leave

[rustic moss]

too sad

if u cant appreciate arch atleast then idk if u can say you like linux 😀

[cobalt thicket]

https://cdn.discordapp.com/attachments/588029217376043023/634335462185631763/rice-oct-19.jpg

[rustic moss]

aye arch

!!!

picom?

[cobalt thicket]

?

[rustic moss]

oof

de or twm?

[cobalt thicket]

It's been months since I turned that laptop on

not a clue

[rustic moss]

XDDDD

wut

how XD

[tropic lava]

A9-9410 I see why...

[cobalt thicket]

That screenshot is all I remember

Good 'ol Lenovo 2 in 1

[tropic lava]

o, yoga

[rustic moss]

waht window manager lol?

[tropic lava]

oof

[rustic moss]

ur neofetch doesnt say there

[cobalt thicket]

i3-gaps

[rustic moss]

ah

reee

looks good tho

[cobalt thicket]

kawase blur makes all the difference

[rustic moss]

yeh so picom

/compton

[cobalt thicket]

special compton iirc

[rustic moss]

yeh ofc

tryone

/yshui

dual_kawase?

[gritty dome]

Someone was spelling it how their Uncle who fought there said it

[graceful coral]

Hahaha im playing from phone

[tropic lava]

I need to try osrs again

but not yet

[formal sparrow]

Same

[tropic lava]

@cobalt thicket what's the grind to mithril level like?

[cobalt thicket]

Not that bad in the grand scheme of things

Mith is usually Lvl 20

For F2P your goal should be rune imo, but that's 40 and realistically the max for F2P

You pinged me as I was in the gulag kekw

[tropic lava]

That's where I got to when I played, that's why I specified

Did you win?

[cobalt thicket]

Yes

[tropic lava]

Nice.

I'm trash at Warzone, ok at plunder, better at regular multi

[cobalt thicket]

That's how I play the game, so

I can see the individual pixels

[tropic lava]

lmao

That low render res?

1080p 100% here

[cobalt thicket]

1267x713

not even 720p

Poor 1050ti can't handle it kekw

[tropic lava]

RIP

I'm using my 980

[cobalt thicket]

I'll try 1080p, see how bad it is

Might be okay now, idk

[tropic lava]

I have to lower to medium settings

[cobalt thicket]

oh wow

so much better

[manic lion]

Blacknote, Liikt, Soul, and I streaming some KOTH right now! https://www.youtube.com/watch?v=xC5sHZ5prOI Game starts in 5 minutes. 😁

[last marlin]

If there are any gnome fans, kali weekly realease W19 includes gnome 3.36 ver. FYI

[silk herald]

is the website down?

[formal sparrow]

Nope -- shouldn't be

[urban crescent]

it's up for me

[silk herald]

now it works, cool

[silk herald]

😦

it's cool now, weird

[cobalt thicket]

@silk herald don't suppose you use Virgin Media as your internet provider?

Both times THM went down for you my internet also went down

[silk herald]

oh I see

yes, I do use Virgin Media though

been having some internet issues the past week

😦

[tropic lava]

...understatement lol

VM has uh

[cobalt thicket]

I think the issue is ISP end then, not THM end

[graceful coral]

Good morning I assume. I do have one question regarding the installation of a Linux Distribution on a desktop PC. Few days ago I've installed Ubuntu on my desktop, and I've encountered a "technical" problem, if I can call it like that. Basically, the resolution wouldn't just go higher than 1600xsomething, but on Windows 10 my monitor goes up to 1920x1080, does anyone know how to solve this issue since I'm going for a dual-boot on my desktop? I've tried adding the resolution manually, but without success, Ubuntu says that the biggest resolution is 1600xsomething.

[last marlin]

have you installed drivers for your VC ?

[graceful coral]

Uh, from what I remember yes, I did some updates to my video card after I've installed the linux distribution

There was something called like, Nvidia driver.

[last marlin]

have you tried googling your problem ?

[graceful coral]

Yeah, I did.

[tropic lava]

Linux nvidia drivers are... an experience

[graceful coral]

The only answers I found out were that I have to add the resolution manually.

But I would add it manually, if the monitor would support the resolution on Linux!

[last marlin]

http://ubuntuhandbook.org/index.php/2017/04/custom-screen-resolution-ubuntu-desktop/

try doing it

[graceful coral]

Yeah, that's what I did a few days ago.

I was receiving an error when trying 1920x1080

I assume it's just the drivers, just like @tropic lava said

[tropic lava]

Fix your drivers probably

Nvidia drivers on linux have given me a lot of pain

[last marlin]

Yea i think that to, with good installed rivers you shouldnt have that problem

[graceful coral]

Mhm, I understand.

I will go ahead and try it once more tomorrow, try to install the drivers manually

Also, I just remembered. After booting into the "try ubuntu", the monitor was just claiming that it was out of range, I just had to do a manual commands into the grub to get it working.

I assume that's because of the drivers too?

[tropic lava]

The live image is different

[graceful coral]

Mind explaining? I don't quite get it.

Oh.

I get it.

Well, it was the same right after installing it, same problem with out of range.

I assume it's just because of the driver, I will try installing the drivers manually tomorrow and hopefully I will get it going.

Thanks for your help! Have a great night!

[tropic lava]

@graceful coral Don't use the installer scripts that Nvidia ship

https://www.cyberciti.biz/faq/ubuntu-linux-install-nvidia-driver-latest-proprietary-driver/

[graceful coral]

Alright

[tropic lava]

The scripts are BAD

[graceful coral]

I get it

Thank you!

[last marlin]

Deepin is nr 10 on distro watch..

might try it tomorrow

[tropic lava]

Isn't it chinese spyware?

[last marlin]

I have heard something about it, do you think its still in there ?

[tropic lava]

Yeah so it does collect data

https://linuxinsider.com/story/deepin-linux-security-threat-or-safe-to-use-86044.html

[last marlin]

sad to hear that, after seeing deepin 20 beta i was def going to test it out, but now i guess i'll skip that test

[tropic lava]

I mean read it

It's not collecting much

[last marlin]

I have red soe parts

I'll just stick to my Kali 🙂

got to say, after using KDE for a month or so, going back to Gnome doesnt feel at home

btw I se nr 1-2 on distro watch MS linux and manjaro, never heard of them

[tropic lava]

Manjaro is arch but easier

[formal sparrow]

Yeah, Deepin is absolutely beautiful

But, uh, nope

[last marlin]

Yeah, Deepin is absolutely beautiful
@formal sparrow Totally agree with that.. looks really nice

[formal sparrow]

Mhm, that it does

But, nuh uh

[tropic lava]

@formal sparrow Cybersec academia is hard.

Send booze

And better sources

[formal sparrow]

Have you run out of booze?..

[tropic lava]

No but then I'd be drinking alone

[formal sparrow]

That's the best kind of drinking

[tropic lava]

It's really hard to find sources for stuff that I find intuitive from experience

[formal sparrow]

There's no one around to judge you

[tropic lava]

I also only have redbull to mix

[formal sparrow]

Mhm, I hear that. Just had to do the same thing for my whitepaper...

[tropic lava]

But seriously

[formal sparrow]

Linux Privesc. The stuff we do on a daily basis

Boring...

[last marlin]

BTw in Holland from June 1, we are opening everything.. what is the status in your countries ? still remaining indoors ?

[tropic lava]

Publish an academic paper on "Do recon, find exploits, use them, privesc" and you will be my hero @formal sparrow

@last marlin Big announcement on sunday IIRC for uk

[graceful coral]

@last marlin lock down 😛

[formal sparrow]

Haha

Looking for citations, are we? 😁

[tropic lava]

@formal sparrow I'm srs, I had to refer to a CREST pentesting framework to say "In order to attack something, you have to find things to attack"

"In order to try and break down or open a door, you have to locate the door"

Sounds intuitive

[graceful coral]

i get the point

first find the door

[formal sparrow]

Ouch

[graceful coral]

and then break it

noted

[tropic lava]

That's what recon is

You find the doors, maybe check the locks 😉

[graceful coral]

no no im scared of locks

[tropic lava]

Locks are great

[last marlin]

rule nr1 of thief,: before breaking the door, check if its open 😄

[graceful coral]

ye fr

[last marlin]

https://www.guru3d.com/news-story/free-to-grabeve-online-starter-pack-free-on-steam.html

[tropic lava]

@formal sparrow essay is methods for finding information about a remote host, how to mitigate that, then a pcap analysis

[formal sparrow]

I can see why that could be problematic..

Especially when you can't just put "my experience" in the references and be done with it

[tropic lava]

@last marlin DLC broke

[last marlin]

I was going to upgrade my CPU, but ended up upgrading my electro scooter https://www.youtube.com/watch?v=fU-psBwondI

here it costs almost 800 euro, bought it from china for 420 euro. now need to wait 30 days 😄 cant wait

[graceful coral]

so

nmap -A -sV -p- is my favorite

is that a good one ?

[tropic lava]

nmap -sV -v -p- -T5

[silk lintel]

Doesn't -A do a version scan anyway?

[graceful coral]

i think it does haahha

2 version scans sounds even more fun bhaahah

[silk lintel]

extra version

[graceful coral]

also what is that??? SF:lp,2E,"SKIDY'S\x20BACKDOOR.\x20Type\x20.HELP\x20to\x20view\x20command

skidy has his own backdoor?? ? ?

[tropic lava]

Always

😉

Encoded spaces

[graceful coral]

jeez lmfao

[tropic lava]

Although skidy does have passwords to a user with ALL ALL sudo on all my boxes

So there's a backdoor for skidy there

[graceful coral]

lol

im even more confused now

NICE

[tropic lava]

@formal sparrow I've just cited a man page.

That was

An interesting reference

[formal sparrow]

Eh, don't worry, I did the same thing with mine

Granted, I've yet to see his response...

[tropic lava]

Basically referenced as a website as you can get an exact copy from there

[graceful coral]

wait this isn't subs help

LMFAO

does Common Vulnerabilities and Exposures count as a 0day if it isn't published ?

[tropic lava]

What?

A CVE is a published vuln

[graceful coral]

yeah but

if it isn't published

then its a 0day

[tropic lava]

@graceful coral But CVE is published

So a CVE can't be an 0day

[graceful coral]

yes but if it isn't

[tropic lava]

isn't what?

[graceful coral]

like if vuln isn't publisheed

then its a 0day

[tropic lava]

Then it's not a CVE

Which is Common Vulnerabilities and Exposures

[graceful coral]

yes

but then its a 0day

?

[tropic lava]

define 0day type that into google

[graceful coral]

okay

okay so

Relating to a security vulnerability or exploit that has not been released or known about by the general public. Often begged for on lists such as "Full-Disclosure" by kiddies.
Sometimes lamers will call it Ohday (OH-day)

OH-day

okay

[blazing sage]

Hey guys! Streaming at 10pm PST at https://twitch.tv/actual_tom , more TryHackMe rooms in the Beginner Path! Come check me out!

[tropic dust]

its common to have those messages in hashcat or i am doing something wrong? No idea

Using:
.\hashcat64.exe -m 1800 -a 0 .\hash.txt .\rockyou.txt

[graceful coral]

aaa

idk whats the command

[olive sundial]

are you running it on your main os @tropic dust ?

[graceful coral]

Morning all

Possible job opportunity for any computer security professionals! 😛 😆

[lavish escarp]

omg im so glad i invested in this new keyboard my old one was making it impossible to do try hack me stuff but this has exceeded expectations earned up getting the steel series apex pro

[olive sundial]

well done 👏

i love my corsair rgb

[lavish escarp]

i had 2 corsairs they died pretty quickly on me 😦

[olive sundial]

i have this one for the last 3 years almost

[lavish escarp]

my last was the logitech g810

yeah my k95 kinda died because i spilled monster on it but i also was going to change it as i realised i didnt like reds and wanted to get browns so when it died i got a k75(i think its 75) with browns that lasted alot longer and even survived 3 spills

what killed it was the over priced rgb driver board didnt take to kindly to a lightening storm

[olive sundial]

my keyboard has brown 🙂

[lavish escarp]

and in the process it killed my entire top row of keys all of them lost backlight but top row just didnt respond at all

i wasnt sure what to expect with these omnipoint switch's but there are beautiful and i love the per key actuation adjustment

[lavish escarp]

and it even has onboard profiles and weird but i kinda like it the wrist rest is magnetic so when i need the extra desk space for arduino projects its not a pain in the rectum to take off

[olive sundial]

this is what i use

[lavish escarp]

ahh you have the newer style corsairs

both mine were firts editions

witht he tramp stamp logo which i liked

[olive sundial]

oh, might be

[lavish escarp]

i dont no why people got so but hurt over it

[olive sundial]

but it's cherry mx brown

i found the price decent for what i wanted

plus i got a full set of corsair rgb: mousepad, mouse, case, fans, headset

[lavish escarp]

hehe yeah i was gunna go full corsair at one point but yeah my main system is pretty much all asus gear and will likely go corsair liquid cooler i have a corsair rm750i which is actually surprisingly can do way more than 750 watts and still keep a above 68% efficiency i managed to push 940 watts at 72% efficiency

which considering its rated at 750 is good gooign

i've maxed it at 1123 watts

i just noticed something weird tho normally the key youd hold shift for is above the normal key but on this keyboard its backwards the key you hold shift for is the bottom one :S

[olive sundial]

the one in the picture is a weird layout

i got the uk layout

so pipe is next to left shift

[lavish escarp]

yeah im on uk layout anyways heh

[olive sundial]

i just like the keys at the top for the music

it works with spotify and chrome

[lavish escarp]

us layout confuses the fuck out of me but belgians use azerty if i remebr correctly and i had a friedn who woudl ask me to fix his laptop and id have to switch it to uk layout and touch type as azerty ios just fuckled up

yeah the media keys are beautiful

[olive sundial]

french people do azerty too

and lock windows key is cool too

[smoky idol]

Has anyone ever used spynote 6.0

[lavish escarp]

hey curious guys is it possible to get work in the pentesting world without having qualifications i was curious if its possible to go freelance without qualifications

[olive sundial]

depends on the country

you uk based?

@lavish escarp

[mortal citrus]

Hey guys. Just about to go live on https://www.twitch.tv/jpitcairn with some more TryHackMe.com challenges. Yesterday was great with a few people joining in the chat. Would be great to see some more folks today! come check it out! Thanks 🙂

[lavish escarp]

@olive sundial yes uk based

[olive sundial]

you can start by doing an apprenticeship if you want to gain some experience

[green mountain]

You can possibly find an apprentice or internship program

Use that experience to start your own consulting business as there are a lot of intricacies you learn while on the job

[calm light]

Learning while on the job is one thing. Without any safety net or mentors=disastor imo

[green mountain]

To clarify, I mean learn on the job while working for someone more experience ( IE Apprentice, internship, employee)

[lavish escarp]

yeah makes sense

[green mountain]

There are certain things you learn while working in the industry that take experience. Client interaction is a big one. I've worked in this industry for a bit and I still have a lot to learn. But pentesting is one of those careers that has many parts to it.

[tropic dust]

are you running it on your main os @tropic dust ?
@olive sundial yes

[olive sundial]

hmm, i'm not sure you are using your GPU in that case

[tropic dust]

Is there some sort of error or what?

[olive sundial]

i think it's a switch you need to use

check the manual

[tropic lava]

@graceful coral

[graceful coral]

Aww

[tropic lava]

There's a screenshot from a manga

someone feeds their pet and remarks that the pet's dinner cost more than theirs

I cannot find it

I know i have it saved

[strange axle]

Just a heads up, I've adjusted this chat topic

Repurposing it and making general the true /dev/random chat

[cobalt thicket]

/dev/urandom

[tame ledge]

Where is offtopic?

[strange axle]

It's now just general

As it is in most servers

[fading crown]

So if I'm streaming THM content, or have, can I share that here?

[tropic lava]

@fading crown That was the goal I believe

[formal sparrow]

Yep!

[fading crown]

Cool. Thank you.

[coarse beacon]

https://www.twitch.tv/b1ackc0ffee Come and hang out!!

[blazing sage]

Going live in 3 minutes on the BurpSuite Beginning Path room! Come watch at https://twitch.tv/Actual_Tom

[mortal citrus]

Good morning! Going live on twitch in 10 minutes streaming more TryHackMe rooms. Yesterday was a good stream with a pretty decent chat going on. Come watch and join in! https://www.twitch.tv/jpitcairn

[blazing sage]

Good morning all. Going live with more TryHackMe in 5 minutes. Hope to catch you all there! Link above from last night.

[fading crown]

Going live over at https://twitch.tv/themayor11. Working on the new Network lab and whatever else we can fit into an hour.

[fading crown]

Thanks everyone who came to hang out!

[young roost]

I am live streaming some KotH and new boxes solves !

Come and join me:

https://www.twitch.tv/trollzorftwww

[coarse beacon]

https://www.twitch.tv/b1ackc0ffee Streaming THM and listening to some sea shanties, come hang out!

[blazing sage]

TryHackMe - Beginner Learning Path - Ice w/ Metasploit Let's GO! https://twitch.tv/Actual_Tom

[restive tartan]

https://www.twitch.tv/NahamSec Is currently streaming TryHackMe with TheCyberMentor - Go and check it out

[coarse beacon]

https://www.twitch.tv/b1ackc0ffee Doing some THM and listenin to sea shanties! Come and hang out!

[formal iron]

ty for the stream @coarse beacon good job. Lemme know if you end up rooting that box :3

[coarse beacon]

thanks!

[ocean harbor]

https://www.twitch.tv/thelosthacker 🙂

ew i have no pfp

oops

[lone otter]

https://www.youtube.com/channel/UC0rd3rYEXdSSNtgVj9O8P9Q?sub_confirmation=1

[fluid aurora]

With all due respect (not much), this channel is only for youtube and twitch channels that have THM content

[pale cove]

^^

[lone otter]

@pale cove https://www.youtube.com/watch?v=Ocd42YFjBMw&t=974s ?

[fluid aurora]

ok works for me

[smoky idol]

Tryhackme hackpark..
In this video well Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine! We need to find a login page to attack and identify what type of request the form is making to the webserver. Typically, web servers make two types of requests, a GET request which is used to request data from a webserver and a POST request which is used to send data to a server. You can check what request a form is making by right clicking on the login form, inspecting the element and then reading the value in the method field. You can also identify this if you are intercepting the traffic through BurpSuite we will identify and execute a public exploit (from exploit-db.com) to get initial access on this Windows machine! First we will pivot from netcat to a meterpreter session and use this to enumerate the machine to identify potential vulnerabilities. We will then use this gathered information to exploit the system and become the Administrator.

https://youtu.be/y5LKJFFSgw4

[fluid aurora]

Could you remove the giant summary of every step needed to solve the room, please? Sorry, it's just a bit spoiler for people who want to do it

[lethal egret]

@fluid aurora sir you need to realise spoilers are a thing on thm

this isn't htb

[fluid aurora]

i mean thats fair but its still not really allowed

[lethal egret]

I think you misunderstand the rules

[fluid aurora]

I do

[formal sparrow]

Welcome back @lethal egret 🙂

[lethal egret]

o/

[formal sparrow]

@fluid aurora how to do it is allowed

Flags/Passwords are not

[fluid aurora]

Ah alright, thanks for the clarification

[tropic lava]

@formal sparrow Watch optional's stream

Doin fortune

just got booted out 👀

[formal sparrow]

This should be good 😁

[smoky idol]

we'll be Compromising a vulnerable Joomla 3.7 CMS webserver using SQLi to steal the admin users credentails. then exploiting this machine by using a joomla public exploit
once we get the creds the password will be the only thing we would need to crack since it is in encrypted as a bcrypt hash.
once we crack the password and log into the server and get our shell. well be escalating our privileges by taking advantage of yum.
https://youtu.be/8IkUzv77GnY

[fluid aurora]

Nice

[smoky idol]

@fluid aurorathat summary is the same summary on the room.

[lone otter]

xD

[fluid aurora]

I'm aware.

[blazing sage]

Going live on Try Hack Me - Blaster. Hope to see some of you there!

[foggy rapids]

https://www.youtube.com/watch?v=8gdTaYFbHvw

[smoky idol]

@blazing sageare you using YouTube for live stream or twitch?

[blazing sage]

@smoky idol I stream on Twitch.

[coarse beacon]

Just another shameless plug! Listening to shanties and doing some THM! Come Hang Out! https://www.twitch.tv/b1ackc0ffee

[blazing sage]

Going live in five! Hope to see you all there. https://twitch.tv/Actual_Tom

[blazing sage]

Thanks to everyone who dropped by! Great night!

[tepid atlas]

Can anyone help me to find the admin flag in pepega energy ?

[fading crown]

This isn't the right channel for this request :)

Can you please start in #room-hints, with an explanation of where you currently are in the challenge, and try not to give away any spoilers.

[tepid atlas]

Sorry and thank you @fading crown

[blazing sage]

TryHackMe - Cod Caper Part Two! (Free Room)

[tardy panther]

Hacking tomghost room on @realTryHackMe in 10 min.

https://tryhackme.com/room/tomghost
https://twitch.tv/lordsaibat

#pentesting #cve-2020-1938

[fading crown]

Let's IGNITE!!! https://twitch.tv/themayor11

[fluid aurora]

Shoot good call, I still need to do that room

[blazing sage]

TryHackMe - ToolsRUs, Web Scanning, and more? https://twitch.tv/actual_tom

[fluid aurora]

hey

hows tom hooland doing

[fading crown]

Big goal over at https://twitch.tv/themayor11/

[blazing sage]

Hey everyone - want to watch me get frustrated and beat my head against a wall? Streaming in 17 minutes, Actual_Tom tries Inoculation.

https://twitch.tv/Actual_Tom

[harsh crypt]

Video walkthrough for BrainStorm 🧠 https://youtu.be/YumW81RwAAw

[blazing sage]

Back to Basics on Information Gathering and Enumeration - https://twitch.tv/Actual_Tom

[olive sundial]

Video walkthrough of Brainstorm by @crimson swift - https://youtu.be/T1-Sds8ZHBU

[coarse beacon]

https://www.twitch.tv/b1ackc0ffee Going live!

[blazing sage]

Come watch Black Coffee! Great stream going on!

[urban crescent]

https://www.twitch.tv/tibsec Tib3rius is streaming THM 👀

[lethal egret]

Juicy koth action from last night (Box - Panda) https://www.youtube.com/watch?v=reE__zUAN-A

[snow arrow]

Was a really good stream @lethal egret !

[thorn helm]

cant i put my link to my livestream in here?

[tame ledge]

@thorn helm Is it related to THM? 🙂

[tropic lava]

of TryHackMe content

[quick shoal]

yikes I just read that

hahah

[coarse beacon]

https://www.twitch.tv/b1ackc0ffee Finishing up DogCat then continuing on to who knows what! Come and hang out!

[smoky idol]

what going on youtube its z3r0xpl01t; today i'm doing Agentsudo from tryhackme.

well be doing some enumeration,exploiting sudo, brute-forcing, and cracking some hashes.

sudo version 1.8.21 has flaw in the way sudo implemented running commands with arbitrary user ID. this flaw can be used by the attacker to bypass that restriction. this flaw also allows a user to run a command as root by specifying the target user using the numeric id of -1.
https://youtu.be/q_QGyigNhq0

[fading crown]

Going live in 5 minutes at https://twitch.tv/themayor11/ and doing Anonymous!

[blazing sage]

Actual_Tom - TryHackMe - Kenobi - https://twitch.tv/Actual_Tom

[snow arrow]

Nice stream (Let's do some Buffer Overflow) @blazing sage - good job!

[humble light]

My stream from the other day is on YouTube and time-stamped. Went through Inclusion, first few parts of dogcat, first part of ConvertMyVideo, and rounded it up with the XSS Playground: https://www.youtube.com/watch?v=4Nb97-1_x1o

[fading crown]

I'm streaming "GATEKEEPER" in 10 minutes at https://twitch.tv/themayor11/. Come see how I built the machine, how it's exploited with Ruby, and get some hints on how to conquer that pesky privesc (hint - we're gonna enumerate like mad!).

[blazing sage]

Actual_Tom - @RealTryHackMe - Let's finish the Gatekeeper! https://twitch.tv/actual_tom

[ocean harbor]

https://www.twitch.tv/thelosthacker duel stream with @wheat mural https://www.twitch.tv/itsjuhfa

[blazing sage]

https://www.twitch.tv/thelostcircuit

[fading crown]

https://www.twitch.tv/themayor11/ RIGHT NOW for the 1,000 follower celebration stream and FREE 1 YEAR sub to TryHackMe!

[warm urchin]

https://www.twitch.tv/lionaneesh Just streaming some KOTH games with TryHackMe community 😄

[coarse beacon]

going live! https://www.twitch.tv/b1ackc0ffee streaming some boxes and taking user requests!

[graceful coral]

https://youtu.be/2qw7MZWc3ZE , I solved room Learn Linux, Spanish language, i will continue solving and posting to document my own learning, i hope these content can be useful for someone, thanks

[primal sierra]

@stone dagger is doing a KOTH livestream in ~ 30 minutes https://www.youtube.com/watch?v=cEhZqhc1Ync

[coarse beacon]

Going Live https://www.twitch.tv/b1ackc0ffee doing ICE and then user reqs

[primal sierra]

something totally different: https://www.youtube.com/watch?v=KRqwITBv6HE

An ISP from Switserland talks about they they they got hacked and what happened after that. Truley a great story

[fallow pulsar]

hey guys, love your comunity but its a shame that no BTC payment option there yet...

[tropic lava]

@fallow pulsar It's been discussed, and there are many reasons it will not happen. Also, #522158404614225920 is probably a better place for that comment.

[fallow pulsar]

sorry about it, thanks.

[formal sparrow]

(Probably best confirming that's Ok with the creator @languid island -- room hasn't been out for very long, and the submissions on the website exist for a reason)

Unless it's already been added there, that is

I see there are a bunch up 🤷‍♂️

No idea what your THM username is

[tropic lava]

@formal sparrow https://tryhackme.com/p/StillNoob

[wheat moth]

Lets Hack! Skynet #TryHackMe https://twitch.tv/thelostcircuit

[fading crown]

Let's do Mr. Robot! Five minute Warning https://twitch.tv/themayor11/

[blazing sage]

@median palm - Let's do Game Zone & some SQL Injection! https://twitch.tv/Actual_Tom

[simple moss]

Solving "Madness" http://www.twitch.tv/rinconhacking?sr=a

[wheat moth]

Lets Hack! Daily Bugle #TryHackMe https://twitch.tv/thelostcircuit

[nocturne remnant]

im playing alfred and the vm keeps going down or lagging

hapens in alot of them for me...cant run gobuster says sites down

any workarounds?

[tropic dust]

@nocturne remnant wrong channel

[nocturne remnant]

my bad...i caught that

[nocturne remnant]

8351

[blazing sage]

Actual_Tom - @median palm - Let's Do Skynet!

https://twitch.tv/Actual_Tom

[pseudo escarp]

https://www.youtube.com/watch?v=TdW_edIld1Y Premiering now

[fading crown]

Gonna do some beginner boxes today over at https://twitch.tv/themayor11/

[blazing sage]

Skynet Part two! https://twitch.tv/actual_tom

[wheat moth]

https://twitch.tv/thelostcircuit We are going to try to hack the ones that got away. rematch

[graceful coral]

https://youtu.be/ExNhkQlg-OA, Django solution in SPANISH Language, flags were vanished, and link to tryhackme.

[pale cove]

good job, @graceful coral ! i love that walkthrough

[topaz lynx]

ops

[pale cove]

sorry 😅

wrong tag

[coarse beacon]

Doing CTF 100! Come hang out! https://www.twitch.tv/b1ackc0ffee

[graceful coral]

Checking out hackerNote! https://www.twitch.tv/nidenctf

[torn palm]

Mostly CTF and KOTH : Join in 🙂 http://twitch.tv/KeJaDy

[coarse beacon]

In 30 mins (4:30 EST) @wheat moth @blazing sage and I are going to be doing a small streamers KOTH! You don't wanna miss it!
https://www.twitch.tv/b1ackc0ffee
https://www.twitch.tv/actual_tom
https://www.twitch.tv/thelostcircuit

[blazing sage]

Hey, everyone! Actual_Tom is now live on https://www.twitch.tv/actual_tom ! Go check it out!

[tropic lava]

@spark dirge Hi, the channel topic is Streams and videos of TryHackMe content so I don't think that video belongs here.

[spark dirge]

in which channel should I upload them? or maybe can't promote them in the server?

[meager compass]

You cannot upload non THM content to this channel, so I assume nowhere? We have no self-promotion channel for non THM content

It is sometimes allowable in #general if someone builds something really cool (such as Pyblaster by @graceful coral ) and that person is very active in the Discord, but as a general rule, this discord isn't a place you can just dump content to get some extra clicks 🙂

[tropic lava]

@meager compass #resources or #709537796809031730 for github projects.

[strange axle]

THM-only things here, we don't really allow self-promotion beyond that as it usually becomes excessive very quickly

[graceful coral]

@meager compass im a good elf

[meager compass]

classroom style stream for Blue in ~3 mins, Blue because imo its the best box for newbies. If you're new to cybersec and confused about things, come and watch! Will be in #general voice chat

[tropic dust]

classroom style stream for Blue in ~3 mins, Blue because imo its the best box for newbies. If you're new to cybersec and confused about things, come and watch! Will be in #general voice chat
@meager compass did i missed it? F fever

[meager compass]

kinda!!!! but i can always walk people through old rooms if they want 🙂

[tropic dust]

Will be looking forward to that

[graceful coral]

Django solución en español: https://youtu.be/ExNhkQlg-OA

[blazing sage]

Finishing off the Daily Bugle! https://twitch.tv/Actual_Tom

[blazing sage]

OSCP Prep Day 1 let's go!

[wheat moth]

Live now! https://www.twitch.tv/thelostcircuit

[ashen sparrow]

@humble ibex

[humble ibex]

?

[ashen sparrow]

what's wrong?

umm

wait show options

are you sure it's running on port 8000?

wait which tutorial is that?

[wheat moth]

Live now! https://www.twitch.tv/thelostcircuit

[fading crown]

Come hang out and hack! https://twitch.tv/themayor11/

[strange axle]

One quick reminder, make sure all content posted in here is TryHackMe ❤️

[graceful coral]

Video solution of https://tryhackme.com/room/injection, in Spanish language: https://youtu.be/vFg3tkewJ8k by @graceful coral

[hushed island]

Here i Explained Hydra , and i Showcased Hydra Room in THM , It WOuld Be Cool if you guys check it out. https://www.youtube.com/watch?v=LzwShak5unY&t=5s

[meager compass]

@hushed island great video, loved the slideshow too! Keep it up 😄

[hushed island]

Thanks @meager compass

I really appreciate your feedback ❤️

[keen lion]

streaming lord of the root in general voice chat

[graceful coral]

Streaming Wonderland on twitch. https://twitch.tv/nidenctf

[fading crown]

Let's hack! https://twitch.tv/themayor11/

[blazing sage]

ActualTom is now streaming! OSCP Prep Day 3 - TryHackMe LazyAdmin (https://twitch.tv/Actual_Tom)

[outer vale]

https://www.twitch.tv/0reobyte

[wheat moth]

Getting ready to try the "Attacktive Directory" Come join me! https://www.twitch.tv/thelostcircuit

[mossy agate]

https://www.twitch.tv/smokeyspace

doing the linux challenges!

[fading crown]

Let's Hack! https://twitch.tv/themayor11/

[fading crown]

Let's Hack in 5! https://twitch.tv/themayor11/

[meager compass]

https://www.twitch.tv/darkstar7471 Dark is streaming RN

[patent rain]

1.5h

[strange axle]

I really should post here when I start

[wheat moth]

https://www.twitch.tv/thlostcircuit Lets Hack! Inoculation THM

[outer vale]

https://www.twitch.tv/0reobyte

just setting up parrot os again

[fading crown]

https://twitch.tv/themayor11/ Come hack!

[noble valley]

https://www.youtube.com/watch?v=T1JThnW7gAQ

[wheat moth]

https://www.twitch.tv/thlostcircuit Lets Hack! lord of the root THM Continued

[glass marsh]

Hello. I like that flag finder

My favorite way to mess wig other players: set a bunch of movie quotes as a bash array, for loop through /pts/x that’s not me, echo a quotes from the array to their /dev/pts, sleep 2 seconds.

[urban crescent]

#koth

[coarse beacon]

Going live after a break! https://www.twitch.tv/b1ackc0ffee Come and hang out hack and listen to some sea shanties!

[wheat moth]

https://www.twitch.tv/thlostcircuit Lets Hack!

[graceful coral]

https://www.twitch.tv/berib3ri

[tardy panther]

Working on Blueprint and Attacking Kerberos on @realtryhackme. Come hang out!

https://twitch.tv/lordsaibat

[wheat moth]

Lets Hack! Advent of Cyber #TryHackMe https://twitch.tv/thelostcircuit

[wheat moth]

Lets Hack! Advent of Cyber #TryHackMe https://twitch.tv/thelostcircuit

[strange axle]

@quiet lynx TryHackMe content only in this channel. Next time is a ban.

[thorn ingot]

https://youtu.be/hpNyPQ11q5s

[crisp ruin]

The path to first flag on Carpe Diem: https://www.youtube.com/watch?v=1OTmSs94f2w Another nice video by "The XSS rat"

[idle gull]

my first write-up

“Source CTF” by Abubakr Nasir https://link.medium.com/dKp2KmtIZ7

[rich pagoda]

Pwning Jeff (or Geff) writeup: https://www.khalidalnajjar.com/hacking-jeff-writeup-thm/. The box was fun, thanks @modern acorn!

[formal sparrow]

I suspect these are fine, given that Jeff already has one writeup, but can we please not post links to them here until they've been approved by the creator 🙂

(Given this is streams and videos, they probably shouldn't be here at all, actually -- just put them in the room)

[silk lintel]

I approved it earlier on the room @formal sparrow

[formal sparrow]

Huh, so you did. It didn't show up when I checked.
Strange

[silk lintel]

You may have checked before I approved 🤷‍♂️

[somber osprey]

hey guys

Can anyone authorized answer me? (PM) Are there any problem in resolving private rooms while in my live broadcasts?

[tame ledge]

Rooms that haven't been reviewed by room testers, yes.

[patent rain]

^

unless they aren't supposed to be submitted and reviewed

if they are supposed to stay private then it's up to the author to decide

[somber osprey]

But I think it's okay to broadcast while in the free rooms?

[patent rain]

the public ones? It's fine unless the room was just released

if it's a fresh room then it's a rule of thumb that you wait around a week to stream and release writeups

[somber osprey]

Thanks for answers

I make my publications under this title.

[solemn meadow]

https://youtu.be/3339qHeCflY

[tropic dust]

umm @solemn meadow i think thats more like a #general or #resources kind of a video, right? As this channel in only for THM content.

[solemn meadow]

ok ok sorry

i thought it comes under videos and posted it lol

[meager compass]

umm @solemn meadow i think thats more like a #general or #resources kind of a video, right? As this channel in only for THM content.
@tropic dust You're right! The description of this channel states "Streams and videos of TryHackMe content"

[exotic mantle]

Hello. I have a couple of questions regarding write-ups. Firstly, is this the appropriate channel for discussing this topic (if not, I apologize, and whereto should I take this?). Secondly, are there any guidelines to making writeups besides not including passwords/hashes in the writeup, and where may I find these if so? Thanks in advance

[exotic otter]

Just don't include password/hashes/flags, and you're good to go @exotic mantle

[exotic mantle]

And am I then free to upload the writeups to the corresponding rooms on the thm website?

[exotic otter]

yes, they then get reviewed by the creator of the website who then decides if they want to post it or not

[exotic mantle]

Alright, thank you for the quick response - it is greatly appreciated! 😄

[fading crown]

Let's stream some THM today! https://twitch.tv/themayor11/

[fading crown]

TryHackMe and chill https://twitch.tv/themayor11/

[sweet spade]

https://thmwriteups.blogspot.com/2020/07/daily-bugle-write-up.html

My write up on daily bugle, please feel free to drop any feedback/advice, it is highly appreciated, Thank you so much

[formal iron]

https://discordapp.com/channels/521382216299839518/544951750801752079/733307871953027204 ^ echoing the above

It's being discussed if writeups have a place within the Discord. For now, as others have suggested, keep to submitting writeups to the site itself - the facility is there

[formal iron]

Update: ask and ye shall receive. Anything THM related media wise is welcome (streams, videos or writeups for THM rooms). Please share your writeups once they have been accepted to the room you're covering. The review process for them is important, and will be done here too i.e. no passwords and flags. Anything posted here that is un-related or containing passwords and flags will be deleted by the administrative team

[fading crown]

OWASP Top 10 Day three and whatever else we can get in to. https://twitch.tv/themayor11/

[sweet spade]

https://thmwriteups.blogspot.com/2020/07/avengers-write-up.html

[formal iron]

Looks good to me! Thanks for sharing @sweet spade (:

[sweet spade]

Thanks alot @formal iron 😋

[mellow onyx]

what is this

oh channel got renamed

[summer vortex]

https://youtu.be/Y17o0inIZyo

[tropic lava]

Without tools
Uses nmap immediately

[formal sparrow]

Closely followed by dirsearch 😁

[summer vortex]

I meant GUI tools

[formal sparrow]

Why would you be using GUI tools anyway? 🤔

[tropic lava]

Metasploit isn't a gui tool

People still look down on it

[summer vortex]

damn~ lots of haters around

[tropic lava]

I mean, just gotta be real with yourself

[summer vortex]

nothing positive to do on a sunny Sunday?

[formal sparrow]

Good work with it anyway 🙂

[tame ledge]

Here I thought you were going to use /dev/tcp to port scan 😐

[summer vortex]

thanks Muirland

no, I’m not that good as you Sith Lord

I’m noob

you may be very experienced

[tame ledge]

Not really 🤷

Through it was meant as a joke 🙂

Scanning with /dev/tcp would take a long time, and would be really ineffective 🤔

[formal sparrow]

Relatively quiet though

[tame ledge]

^

[formal sparrow]

And easy if you're in a pivoting situation

[tame ledge]

Been checking out socat, and I have to say I can see why you like it 😄

[summer vortex]

I mean, just gotta be real with yourself
@tropic lava stop judging me. If you don’t like who and how I am, carry on

[formal sparrow]

Socat is the most beautiful tool in existence

[summer vortex]

it is, though it’s complex AF

[formal sparrow]

Nah

Pick two things

[tame ledge]

Just alias the listener

[formal sparrow]

Connect 'em together

Think of it as providing a bridge between two points

A connection between them

Those two points can be across a network

They can be local

Whatever

But that's what socat is doing

I mean, you can literally use socat to copy a file 🤷‍♂️

Total overkill

But it would do it

Just moving one thing to another

[summer vortex]

MuirlandOracle I started using socat with your Year of the Fox write-up. Nice write-up btw~

Why would you be using GUI tools anyway? 🤔
@formal sparrow instead of using burp or another similar tool. I use mitmproxy with a custom script to upload a shell

It’s nice to get out of comfort zone and learn new stuff

https://youtu.be/Y17o0inIZyo
@summer vortex btw~ I’ve modified the title to be “without GUI-based tools” 🙃

[urban crescent]

rlwrap > socat

[tame ledge]

👀

I use rlwrap but might switch to socat

[formal iron]

Don't let Muirl hear you 👀

[summer vortex]

rlwrap > socat
@urban crescent I’ve actually set an alias netcat to be rlwrap netcat

[urban crescent]

thats a pretty good alias

[formal sparrow]

Yep

alias listener="sudo rlwrap nc -lvnp 443"

Best alias 😁

[silk lintel]

Pwncat > literally everything

[formal sparrow]

Nuh uh

Socat

[silk lintel]

No

[formal sparrow]

Use pwncat as a port forwarder or proxy, I dare yah

Or as a webserver

[silk lintel]

Pwncat > Download http://<ip>/chisel

[formal sparrow]

That's two tools in place of one though

Double the chances of being caught

Also, talk about inefficiency

[silk lintel]

Can’t get caught on a ctf box

[formal sparrow]

Wanna bet?

Watch me put an IDS into my next one

[silk lintel]

yes

Do it

[formal sparrow]

JB

Just for you

[silk lintel]

Please do it

[formal sparrow]

I'm gonna do the Windows one I have planned next

And I'm gonna put AV on it

[silk lintel]

AV is easy 😂

Just means i gotta not be lazy and code a bit of C

[formal sparrow]

Means you can't use chisel, that's for sure 😁

[silk lintel]

Seriously though an IDS would be sick

[formal sparrow]

I might look into it tbh

I do genuinely have a Windows box vaguely planned

[silk lintel]

Ehh I’m sure there’s a socks5 c code on stackoverflow somewhere

[formal sparrow]

To improve my own skill with is as much as anything else

That also relies on being able to open ports

[silk lintel]

[fading crown]

More OWASP Top 10 today! https://twitch.tv/themayor11/

[formal sparrow]

@thick veldt are you accepting writeups for that yet?

[thick veldt]

Yes

[formal sparrow]

Have you accepted that one?

[thick veldt]

I've been so busy I haven't checked

Too busy being the official studying entity and all

[formal sparrow]

Yeah, it's in your submissions list 🙂

[thick veldt]

Ah okay

I accepted a bunch on Friday

But if it was submitted after that then not yet

[formal sparrow]

@sweet spade Would you mind not posting links in here until they've been approved by the creator in the room? 🙂

[sweet spade]

I'm sorry I'll remove it

[formal sparrow]

No problem 😄
Feel free to post it once Nameless has had time to go through the submissions!

[sweet spade]

No problem 😅, i didn't knew we had that kind of rules so I'm really sorry

Didn't mean to break rules

[thick veldt]

No problem lol

It's gonna be a few weeks

Sorry

[formal sparrow]

Not a problem at all -- it really should be in the actual rules list

[sweet spade]

It's gonna be a few weeks
@thick veldt I don't mind it's ok☺️

[formal sparrow]

@thick veldt is it just the standard checking for passwords/flags you're doing?

If so I can read through it now

[thick veldt]

Yes

[formal sparrow]

Unless you have any special stuff you're watching out for in these

Ok, I'll have a read through this one then 😄

[sweet spade]

Thanks @formal sparrow

[tame ledge]

I've checked it, it doesn't have any from the looks of it 🤔

[formal sparrow]

Yep, all good

I've accepted it in the room 👍

[sweet spade]

Ok I'll repost it, thanks for the approval 👍

[formal sparrow]

Pleasure

[sweet spade]

https://thmwriteups.blogspot.com/2020/07/blog-write-up-thm.html
I wrote a walkthrough on the machine "blog", please check it out and let me know if you have any feedbacks and advices to improve my writing, your comments are highly appreciated
Thank ☺️

[thick veldt]

Woo

Thanks

Back to work

[limpid owl]

hey guys i am having trouble with metasploit video its buffering a lot where as i can play nmap video very easily

i dont have any network issue to

[tropic lava]

Wrong channel

[naive coral]

https://youtu.be/4L9k7r6-ShM

[tropic lava]

@tawny turret Please do not post writeups until they are accepted

[tawny turret]

Oh alright, sorry I was not aware.

[tribal helm]

can anyone help me in this question -
A third predominant address type is typically reserved for the router, what is the name of this address type?

[formal sparrow]

You'll get a better response asking in one of the help channels @tribal helm 🙂

[tribal helm]

which one?

[formal sparrow]

(i.e. this one is for posting videos, blogposts, etc)

Any. Preferably #room-help

[tribal helm]

thanks

can you help me @formal sparrow

[formal sparrow]

I think Bob may already be doing that 🙂

[exotic otter]

yep, please stick to one channel for help 🙂 @tribal helm

[tribal helm]

i am new on discord

i didn't knew how to use this

@formal sparrow he told me about the channel for help btw sorry

[exotic otter]

no need to keep tagging the mods

[tribal helm]

ohk

[naive coral]

https://youtu.be/5KOjv6v_l5I doing some koth live again!

[formal iron]

https://twitch.tv/cmnatic

Spectating the SecArmy finals including our very own myDonut and Naughty (:

Match starts in ~30 minutes so should be quite interesting

[toxic girder]

@formal iron i just clicked to a random bit of the stream where you were tryna hide the ip, if you keep that page open and it doesn't need refreshing (idk if it updates in realtime) but you could just inspect it and remove it :)

ok nvm i watched a bit more and u did that

[formal iron]

Ah yeah, that's what I had to do in the end hehe

should of thought of that first 😛

I appreciate it @toxic girder