voice-chat

[echo frost]

ok thank you very much !

[fickle acorn]

don't all the private docker addresses resolve to lo ?

internally though - because SDN is fucky

[supple trellis]

veth0 or something

[echo frost]

I'm pretty sure with using chisel even with jndi:ldap I got a callbak

but only ldap port maybe http server too has to be local

anyway can't even complete the box now 🙂 with this wonderful talk - thank you @fickle bronze and all the hosts

[dire jacinth]

Gave +1 Rep to @fickle bronze

[final swift]

I have to go now but thank you Hydra and Omega for the session, really enjoyed it and learnt a lot!

[supple trellis]

@midnight fern i leaked that already 😄

@midnight fern https://logging.apache.org/log4j/2.x/manual/lookups.html you mean this?

oh a wordlist for environment variables that would be nice

[fallow brook]

seems to be

[fallow brook]

would be nice to have that on seclists ye

[supple trellis]

curl ".../uploads/../../../../../etc/passwd" --path-as-is

[echo frost]

these works

GET /uploads/%2e%2e%2f%2e%2e%2fetc%2fhosts HTTP/1.1


GET /uploads/%2e%2e%2f%2e%2e%2fapp%2flogs%2fapp.log HTTP/1.1

[shell spear]

thanks Hydra! 🙂

and Meggy too :3

[fallow brook]

thanks everyone for coming. Enjoy the rest of the evening 🙂

[shell spear]

pied piper

[fallow brook]

gonna get some water and then might go do some enumeration XD

[supple trellis]

5 billion devices run java @fickle bronze 😛

[fickle bronze]

setFeature("http://apache.org/xml/features/disallow-doctype-decl", true)
setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false)

setXIncludeAware

setExpandEntityReferences

https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html

[midnight fern]

YouTube is doing it better 😂

[echo frost]

I'm one of the people who can't do shaker even with video - need writeup @fickle bronze 🙂

[fickle bronze]

I'll get that out now 🙂

[echo frost]

great job thank you again @fickle bronze

[dire jacinth]

Gave +1 Rep to @fickle bronze

[echo frost]

for first time I did same as @midnight fern 🙂

on hamlet

[quiet needle]

https://twitter.com/ben_sturrock/status/1482469466030149633?s=21

ben (@ben_sturrock)

good night https://t.co/QpvylAKc71

▶ Play video

Twitter · Jan 15, 2022, 9:47 PM

[fickle bronze]

writeup should be live now

[echo frost]

thank you seen it

oooh it is this nasty bash trick $@| / for java: I HATE JAVA @fickle bronze

[shell spear]

the default music under videos in microsoft photos makes me go crazy
My mom was editing a video for days and had it loop on speakers

[midnight fern]

Haha love this!

[midnight fern]

I’m with you!

[shell spear]

:c

I'm hopping off. Good night guys

[quiet needle]

@hexed bloom server cannot reach factorio auth?

it was working like 2 mins ago

[hexed bloom]

https://www.pcgamer.com/factorio-blueprint-science-solar-nuclear/

[quiet needle]

@hexed bloom running it on a different machine that can defo dns lookup and still can't coinnect

maybe factorio is having issues

[hexed bloom]

hmm

Our clients are good?

what does nslookup say?

[quiet needle]

yeah it's just the auth process fro the server

it's connecting now but doesn't seem to do anything

[hexed bloom]

hmm

is it run through stream?

[quiet needle]

nope

same result running on 3 different vms (obvs not all the same time)

I might head off for the night and take a look at this tomorrow @hexed bloom xx

ty toast ((:

o/

[faint bison]

@midnight fernis there a way i can join you in vc?

seems the room is full now

[unreal forge]

Ooo interesting, thank you for the suggestion

[dire jacinth]

Gave +1 Rep to @weak rose

[unreal forge]

I was thinking of getting this, is it worth getting now or wait for a sale?

[tepid hatch]

@vapid moss alr I'm off to bed, nice talking to you

[midnight fern]

Sorry didn't see this, or I would have dragged you in!

[faint bison]

https://tryhackme.com/room/metasploitexploitation task 2

[distant garnet]

@final swift mind if I send a friend request?

[final swift]

Sorry just saw this now but mine is switched off

[distant garnet]

Ah, I see

[final swift]

hope everything is ok?

[distant garnet]

It is, thanks for asking 😄

[dire jacinth]

Gave +1 Rep to @final swift

[final swift]

Ok cool!

[hasty pike]

@near grove one week and youre already on level 6

thats fast

😂

i took like 1 year to reach level 7

but its prob cause I have too much assignments and everything

[distant garnet]

@little condor you might wanna mute yourself.

[little condor]

😡

[distant garnet]

we can literally hear everything going around you.

[little condor]

❓

[distant garnet]

your mic isn't muted

we can hear everything going around you

[quiet needle]

@hexed bloom after that match I can hop on for one or two rounds if you're down?

[little condor]

🤡

[little condor]

❤️

[distant garnet]

what

[little condor]

💔

sorry

[hexed bloom]

hec kn ya

[distant garnet]

for what?

[little condor]

u broke me

😂

[final swift]

Hey just observing if that's ok!

[runic geode]

@hexed bloom what are you up to?

[hexed bloom]

just finished a a320 startup 🙂

[runic geode]

but a320 can't blow shit up

[fresh solar]

Just use https://colab.research.google.com/github/mxrch/penglab/blob/master/penglab.ipynb with this added

[midnight fern]

@tawny jungle ^

Give that a shot

Thanks @fresh solar

[dire jacinth]

Gave +1 Rep to @fresh solar

[tawny jungle]

Ill do !

Thanks guys @midnight fern @fresh solar

[dire jacinth]

Gave +1 Rep to @midnight fern

[faint bison]

Wow vc is full today

[final swift]

I'm off now but thank you for the streaming @trim sable and good luck with everything. Hope you become a successful cyber sec person and achieve your goals!

[dire jacinth]

Gave +1 Rep to @trim sable

[blazing arch]

nc -lvnp SPECIFY PORT TO LISTEN

@trim sable

nc -lvnp 1234

[orchid iron]

Change the option to -nv

[harsh moon]

@trim sable Is that code from BlackHat Python?

Cool I think I have built same script when I was learning BlackHat Python lemme check @trim sable

[blazing arch]

@midnight fern Ngrok

[blazing arch]

latex

[limber jasper]

#1

[blazing arch]

https://www.youtube.com/watch?v=_JW_0TyNpus @trim sable

[midnight fern]

Thank you 🙏

[dire jacinth]

Gave +1 Rep to @blazing arch

[split kraken]

What does this command do "head -n -1 readme.txt"

1. Display all but the last line of readme.txt
2. Display all but the first line of readme.txt
3. Number the first line of readme.txt
4. Display the first line of readme.txt

[midnight fern]

First line I think

My power is out, I can’t even test 😂

[split kraken]

nw ty

[rapid juniper]

just ran the command 0day's answer is correct obviously

[split kraken]

ty ty ty

[limber jasper]

https://media.discordapp.net/attachments/680459914828972076/744920808501280910/Hmm48.gif

[proper marsh]

dude i swear lol

[limber jasper]

https://tenor.com/view/john-cena-cena-are-you-sure-are-you-sure-about-that-are-you-sure-about-that-meme-gif-23133134

https://cdn.discordapp.com/attachments/560120793523290133/932095569940340806/video0.mov

[tame ether]

enjoy a cat picture

[limber jasper]

cherry coke

[split kraken]

lol szy I love Coke too

https://arstechnica.com/information-technology/2022/01/backdoor-for-windows-macos-and-linux-went-undetected-until-now/

TempleOS

[iron palm]

terry my man

[tame ether]

do you love it as much as I do tho

[split kraken]

Cats and Coke

[fresh solar]

RIP CGR

[split kraken]

I'm trying to open this article for a homework assignment and it won't load on Firefox or Chrome...

https://searchdatacenter.techtarget.com/definition/shell-script

[sand agate]

<scr<script>ipt>alert('THM')</scr</script>ipt>

@trim sable

[faint bison]

i got it

A shell script is a text file that contains a sequence of commands for a UNIX-based operating system. It is called a shell script because it combines a sequence of commands, that would otherwise have to be typed into the keyboard one at a time, into a single script. The shell is the operating system's command-line interface (CLI) and interpreter for the set of commands that are used to communicate with the system.

A shell script is usually created for command sequences in which a user has a need to use repeatedly in order to save time. Like other programs, the shell script can contain parameters, comments and subcommands that the shell must follow. Users initiate the sequence of commands in the shell script by simply entering the file name on a command line.

In the DOS operating system, a shell script is called a batch file. In IBM's mainframe VM operating systems, it's called an EXEC.

How shell scripting works
The basic steps involved with shell scripting are writing the script, making the script accessible to the shell and giving the shell execute permission.

Shell scripts contain ASCII text and are written using a text editor, word processor or graphical user interface (GUI). The content of the script is a series of commands in a language that can be interpreted by the shell. Functions that shell scripts support include loops, variables, if/then/else statements, arrays and shortcuts. Once complete, the file is saved typically with a .txt or .sh extension and in a location that the shell can access.

Types of shells
In Unix and Linux, the two major types of shell scripts are:

Bourne again shells (BASH)- BASH is the default shell for Unix version 7. The character for prompting a bourne again shell is $.
C shells- A C shell is run in a text terminal window and is able to easily read file commands. The character for prompting a C shell is %.
Examples of shell script applications
Using a shell script is most useful for repetitive tasks that may be time consuming to execute by typing one line at a time. A few examples of applications shell scripts can be used for include:

Automating the code compiling process.
Running a program or creating a program environment.
Completing batch
Manipulating files.
Linking existing programs together.
Executing routine backups.
Monitoring a system.
Advantages and disadvantages of shell scripts
Shell scripting is meant to be simple and efficient. It uses the same syntax in the script as it would on the shell command line, removing any interpretation issues. Writing code for a shell script is also faster and requires less of learning curve than other programming languages.

However, if there is an error in a shell script, this can prove to be extremely costly if left unnoticed. Additionally, differing platforms associated with shell scripting may not be compatible. Shell scripts can also be slower to execute than individual commands.

@split kraken

[split kraken]

Awww ty

https://www.bedbathandbeyond.com/store/product/ninja-reg-foodi-reg-8qt-6-in-1-2-basket-air-fryer-with-dualzone-trade-technology/5514328?skuId=69594838&store=1025&enginename=google&mcid=PS_googlepla_nonbrand_kitchenelectrics_local&product_id=69594838&adtype=pla&product_channel=local&adpos=&creative=232742510815&device=c&matchtype=&network=g&utm_campaignid=71700000037211805&utm_adgroupid=58700004142068776&targetid=92700034062229623&gclid=Cj0KCQiAoY-PBhCNARIsABcz773P8B_m2mGTROv16hfwMB92hNncJIEk3tE3aLIpoWjYW-ihbfhyCEcaAi8nEALw_wcB&gclsrc=aw.ds

[still tide]

@fickle bronze could you pull me in?

[fickle bronze]

no

[still tide]

pleaseeeeeee

pretty pleaseeeeeeee

with a cherry on top?

[still tide]

cries

[still tide]

sells soul to devil

@dense kernel can you drag me into medium study, please?

oday, thank you <3

[swift folio]

I want to develop some rooms like try hack me room

But for cloud security vulerablity

@midnight fern

[still tide]

@midnight fern my pc crashed can you drag me in again?? Its been happening a lot recently my screen just freezes and my computer dies

[split kraken]

I don't have access to do that

[still tide]

wrong ping LOL, my b

thank you again 0day. 0DAY ALL DAY

[meager tundra]

hi

[past breach]

https://blackarch.org/

[blazing arch]

&&

[hasty pike]

where database like 'sqli_three%' @trim sable

try to get the sleep response

[quiet knot]

Learning Linux admin ?

[split kraken]

Yes

[tame ether]

@split kraken @slender kayak my power went down aaaa

[split kraken]

D:

[hasty pike]

the whole town or just u?

[tame ether]

Few buildings i think

It's super windy here atm

My homelab is down

[hasty pike]

nah im down

nothings going on anyway

we can get on call

@split kraken

[brave wren]

It took me some time to line up the wires when I first tried it xD.

[blazing arch]

is it RJ45 or something like that?

[fickle acorn]

Very nice. What crimper are you using?

[still tide]

@plucky vault https://www.redteamtools.com/espkey

[still tide]

feroxbuster

[junior raft]

it's a RJ-45 T-568 A pinout, though standard in most cases is T-568 B

though it doesn't matter either way much I suppose

[still tide]

https://www.youtube.com/watch?v=HZbee93OIdo&ab_channel=TylerYamauchi @near grove

[hexed bloom]

https://www.youtube.com/watch?v=AbSehcT19u0

https://factoriocheatsheet.com/#train-colors

[faint bison]

https://pimylifeup.com/minecraft-raspberry-pi/ @hasty pike

[hasty pike]

my pi has been dusty for couple months now, gonna try it out soon

hacking a packet tracer, my dude

🙂

im on a switching ccna

[blazing arch]

@hasty pike I'm waiting here to try out some INDIAN DISHES for the first time

They call it CHICKEN BIRYANI

I've never seen this kida RICE which is so long and thin...Can any Indian explain me in this VC?

[glass nexus]

not indian, but got indian wife, that looks like basmati rice

[distant garnet]

Aye

[hasty pike]

yup, they usually use this. Even my mom uses this rice in lots of occasion

[hasty pike]

never knew what Indian-made biryani taste like, but the way my people did it here, it's damn good

I prefer the chicken whole, and eat then with my bare hands

😂

[distant garnet]

/reverseshell

[split kraken]

-Raspberry Pi4 supplied by Canakit as part of their PI4 STR32 4GB kit
-Running Raspbian OS
*NOTE: Installed WiFi card does not support “monitor” feature
-Raspberry Pi3 7” Touchscreen Display Kit
-Case for Pi 4 and Official 7” Touchscreen

[iron palm]

software defined radios, with replay attaccks using gnu radio

[split kraken]

As a student committee, our focus will be to research and create instructions for 5-6 Raspberry Pi projects. These projects can then be used to benefit our members through hands-on projects during in-person meetings, Girl Scout troops who can learn how to assemble a Pi and what they can be used for, and also to educate the public by showcasing them at future on-campus events like WiCyS’ Cyber Smarties Event last year.
With this in mind, we can possibly have projects of varying levels of difficulty, but it would be best that they are mildly quick and easy to deploy/complete due to time restrictions of meetings/events and visits by Girl Scout troops, etc.

kizmap

[iron palm]

kizmet

or

kismet

one of em

[split kraken]

kizmet war driving

https://null-byte.wonderhowto.com/how-to/wardrive-with-kali-raspberry-pi-map-wi-fi-devices-0176558/

[iron palm]

so with the sdr stuff you could implement an rfid cloning tool with coils as antennas and stuffz

awus036h

Realtek RTL8187L

to find out what chipset you have in linux do lsusb

[solemn elbow]

what a party in there eh

[solemn elbow]

LOL

[split kraken]

lol

[plucky vault]

anyone here into unix sys admin stuff

yea

noice

from where we get roles 👀

nvm im lazy

people say that but idk what to write in place of that

trying to develop malware?

[iron palm]

yh

alot better

lol

[plucky vault]

xD

[iron palm]

cause malicious means with intent no? and it said your red team too

[hexed bloom]

Offensive Tooling

[plucky vault]

ahh

sure

do any of you write go?

[hasty pike]

nope

[plucky vault]

okieee

[vapid moss]

fancy

[vapid moss]

am nodding my head

[tiny bridge]

its Klöntalersee, Switserland

[plucky vault]

https://www.oracle.com/in/cloud/pricing/

Oracle offers a Free Tier with no time limits $300 in free credits to try additional cloud services

[split kraken]

Specs:

Here is a list of the hardware available to the clubs for these projects. The first portion of any planned project would likely be assembly.

Raspberry Pi4 supplied by Canakit as part of their PI4 STR32 4GB kit
Running Raspbian OS
*NOTE: Installed WiFi card does not support “monitor” feature
Raspberry Pi3 7” Touchscreen Display Kit
Case for Pi 4 and Official 7” Touchscreen
Peripherals available for use on campus (keyboards and mice)

Scope:

As a student committee, our focus will be to research and create instructions for 5-6 Raspberry Pi projects. These projects can then be used to benefit our members through hands-on projects during in-person meetings, Girl Scout troops who can learn how to assemble a Pi and what they can be used for, and also to educate the public by showcasing them at future on-campus events like WiCyS’ Cyber Smarties Event last year.
With this in mind, we can possibly have projects of varying levels of difficulty, but it would be best that they are mildly quick and easy to deploy/complete due to time restrictions of meetings/events and visits by Girl Scout troops, etc.

[hasty pike]

so, what are your suggestions to solve the issue of improper use of skills among black hat hackers?

[stone oar]

Maltego

[stone oar]

Pwned

[split kraken]

poned

pwned

[slender kayak]

rustscan -a $ip -- -A

[still tide]

pwnagotchi?

[sand agate]

<%execute request(chr(42))%>

[main raven]

sup bro, wut ya doing

@vapid moss hey

[vapid moss]

hey hey

[main raven]

supp

wut ya doin

this guy writes so fast XD

types

it's not printing to server tho

@slender kayak how long have you been coding/hacking for

:(

@vapid moss can u ask him pls

hahahah @vapid moss ty

[dire jacinth]

Gave +1 Rep to @vapid moss

[vapid moss]

np man

[sand agate]

https://github.com/bayufedra/Tiny-PHP-Webshell/blob/master/README.md

[vapid moss]

@hallow gate you can type here

[stone oar]

Wgel CTF

[slender kayak]

https://tryhackme.com/games/koth/join/b159b79cb573c640ffd35dbe

[blazing arch]

Is there a way to recover a source code for C++ written using DevC++ editor?I still have the file to run the program that I've built but can't find the source code anymore.it was like I think I've overwritten the main file again and again while trying to create a new file

And that lost source code was for my college assignment

[hasty pike]

@quiet stratus

https://books.goalkicker.com/ theres lot more useful stuffs here, maybe youll like it

[hexed bloom]

ghidra

~~iswh

[stone oar]

/home/kali/.zshrc

[hasty pike]

I'll be back in a minute or 2, or 10 probably

[unique shore]

Notion.so

[stone oar]

mkcd (){
mkdir $1
cd  $1
}

`

[hasty pike]

test code

[stone oar]

mkcd (){
mkdir $1
cd  $1
}

[scarlet magnet]

'''testy 12'''

[unique shore]

'''CSS

[hasty pike]

print("Hello guys")

[stone oar]

`

``

[scarlet magnet]

https://www.youtube.com/watch?v=icyTUMjlvMg

[stone oar]

Searchlight - IMINT

[unique shore]

https://application.security/

[stone oar]

Startup

[distant garnet]

@limpid badger making last minute preparations for a CTF I'm playing later today

[limpid badger]

good luck and have fun 😄

[hexed bloom]

https://askubuntu.com/questions/590442/how-can-i-install-broadcom-wireless-adapter-bcm4352-802-11ac-pcid-14e443b1-r

https://askubuntu.com/questions/1260753/no-wifi-networks-listed-ubuntu-20-04-broadcom-bcm4360

https://help.ubuntu.com/community/WifiDocs/Driver/Ndiswrapper

[blazing arch]

ok thanks..i'll check out how does ghidra works and how to reverse it..

[slender kayak]

https://tryhackme.com/games/koth/join/6dffc2e8a57e25c53b1e129e

[slender kayak]

https://tryhackme.com/games/koth/join/76610f6e968776decfa6440a

rustscan -a $ip -- -A

[tough sinew]

ustscan -a $IP -- -sC -sV

[urban mauve]

ggs @slender kayak

[slender kayak]

ggs

sorry for brutality of password change

but i guess you bruteforced that, right?

[urban mauve]

i changed it as soon as i got killed

[slender kayak]

https://www.youtube.com/watch?v=3vxO1BVgea0

[urban mauve]

no mic 😭

getting one this week i hope

yep lmao

[raven scroll]

YO

[split kraken]

Raspberry Pi4 supplied by Canakit as part of their PI4 STR32 4GB kit
Running Raspbian OS
*NOTE: Installed WiFi card does not support “monitor” feature
Raspberry Pi3 7” Touchscreen Display Kit
Case for Pi 4 and Official 7” Touchscreen
Peripherals available for use on campus (keyboards and mice)

[amber dove]

keyboard

waht gif

:c

wha ghfdhjbgfdhbgbjkfdg

bnnuy ears :3

wow amzon

my brain is empty I hav no idea

thats canvas I know the favicon thingy'

whats

[whole coyote]

:mi_sad::mi_sad::mi_sad::mi_sad:

[amber dove]

[whole coyote]

[amber dove]

[whole coyote]

[amber dove]

squibwards

[whole coyote]

[amber dove]

cat

[whole coyote]

[amber dove]

[whole coyote]

@amber dovewhy did u choose to become a catgirl but not a monkeygirl

or like a doggirl

[amber dove]

becauxsce im a cat not a momkey

[whole coyote]

why not like uhhh

a octopus girl

[amber dove]

octopsu

[whole coyote]

or likee a alligator girl

[amber dove]

I saw a pi for 2 dollars ocne

[whole coyote]

@amber dove

https://media.discordapp.net/attachments/696436420226580580/795409615478980608/image0.gif

i found it

[distant garnet]

aaahhhh

[amber dove]

ahhhh

😖

[whole coyote]

i was waiting 20 minutes for the gif now its no longer funny

[amber dove]

how fdo i chang my noiclkkname I forgor

I figru it out

"No time"

hav you tried turning it off and on again

make a script that prints a ascii cheese

I hav no micry

[distant garnet]

sus

[amber dove]

send me the script too pls

I have curl

you should obfuscate the script

the file extension doesnt matter with scripts so you could write the whole thing with .txt

[distant garnet]

aah, I see

[amber dove]

you should write an entire virtual machine in bash then submit it

you need echo too

you can do several line quotes

I dont think cat.echo exists

you need to do echo -e I think

yeah you need echo -e

[hasty pike]

echo "trash test" >> whatever-the-file.txt

do for each line

@split kraken

[amber dove]

but you could do echo -e

[keen compass]

@split kraken There's hint above

[amber dove]

but if the file doesnt exist then rm wont work

but /usr/bin/bash is the interpreter

check if it exists

[copper ruin]

@split kraken try this

[hasty pike]

ps -p $$

[keen compass]

@tough sinew Congrats It's running.

[amber dove]

you could run it without a shebang

[keen compass]

Lol it looks blurry but its fun KEKW

[amber dove]

you could make it one echo and only use one >

yeah!!

if you have multiple echos and all of them use one > it willl only show the last line

[opaque dragon]

@split kraken first one >
then all >>

[amber dove]

yeah

[opaque dragon]

the > use to overwrite
then >> to add line in there

[hasty pike]

read name
echo $name

[amber dove]

you can also take arguments if you want

oops I forgot to show

its the read

[opaque dragon]

@split kraken txt file did not find because you moved that

[amber dove]

read takes input from the user so you have to type something and press enter

[opaque dragon]

@split kraken it did work but that file cant show because it moved

you can show then move the file its easy

[opaque dragon]

@split kraken do that it will be easy

[amber dove]

its pausing because read

you need to type something

read creates a variable for you

[opaque dragon]

yes

[amber dove]

you can get the home directory by echoing ~

or you can use $HOME

if you need the current directory you can use $PWD

[opaque dragon]

@distant garnet pwd > you writing your current dirt. in this txt file then it will show that not root

use >> on that place

[amber dove]

but you can also use $PWD or $HOME

the variable is a bash thing

[opaque dragon]

not use ls

[amber dove]

wha

echo $PWD

im nO T

DOL:PHIN HI

[tiny bridge]

hello 😄

[opaque dragon]

hello

[keen compass]

hello

[final swift]

Hey everyone 😄 hope you're all well!

[tiny bridge]

doing good, hbu?

[amber dove]

hi quirky

[final swift]

I'm good ty just thought I'd hop in and observe whilst "working"

[tiny bridge]

😄

[final swift]

How are you catgirl? Not seen you around for a while?

[tiny bridge]

Hey @median aspen

[amber dove]

I am catgirl

[median aspen]

hello Dolphin! :)

[vestal coyote]

guys help with ctf please

[final swift]

Hey Gabriel!

[median aspen]

Hiii :D

[final swift]

Sorry habit to put capital letter with names....or do you mean you're just catgirl?

[amber dove]

but this is voice chat

[amber dove]

yeah

[final swift]

Ah okie

[amber dove]

why dont I have pictures of cheese on my computer

[keen compass]

Sure, why don't you go in #room-hints #room-help maybe there you'll find help.

[amber dove]

you can have an executable txt file

wait didnt theuy say you need comments or it will affect your grade

[distant garnet]

Break == Minecraft

[amber dove]

minecraf :3

[opaque dragon]

CSGO or DOTA

[amber dove]

the best break is sleep

vargy?

[distant garnet]

role*

[opaque dragon]

😆

[amber dove]

waa

[distant garnet]

not you

[amber dove]

:c

[opaque dragon]

that was about me

[vestal coyote]

go to medium study

russian power his

[tiny bridge]

18 and a half

[median aspen]

💀

[final swift]

👀

[amber dove]

paranoid smh

[iron palm]

aye

[final swift]

~~isn't that normal here though ~~ 😬 🙄

[amber dove]

I let random people run code on my computer once

[distant garnet]

Remember wifi?

[final swift]

And what did you achieve?

[amber dove]

people just made it say bad words

[final swift]

No... 😐

[opaque dragon]

bye.... i get go

[median aspen]

oh no 💀

[amber dove]

tails?

[median aspen]

🤔

[tiny bridge]

https://tryhackme.com/leaderboards

check top ranking 🙂

[amber dove]

thats the funny 0day guy

[tiny bridge]

all countries / all time

[median aspen]

incredibly humorous individual indeed

[daring atlas]

@meager tundra @scenic prawn It's not a directory listing, you can enumerate the content of the web server as long as it is inside the web root and not forbidden like, a 40X Code

What room is it, I can take a look and maybe try it out with you

[final swift]

@split kraken lmao you're too funny

[amber dove]

what about joe biden and cheese?

I just like cheese

[final swift]

An ungodly hour

[daring atlas]

@scenic prawn You've access to source code, and it's written in node, so should better look up the libraries used in these JS files and find out if they have common vulnerabilities..
I did similar one on HTB, it had JS prototype pollution vuln in pug module.

[final swift]

09:41....the day is just beginning 🥲

[amber dove]

my clock is actually wrong its probably like 10 PM

[final swift]

I would like to go to bed

[amber dove]

no it is indeed 4

ben do you like cheese

[final swift]

Hi Ben!

[distant garnet]

@quiet needle
#general message

[quiet needle]

thanks

[distant garnet]

np

[amber dove]

vain do you like pink

[distant garnet]

yeah, why?

[amber dove]

🤝

[distant garnet]

what?

[amber dove]

👍

[tiny bridge]

pink is nice

[amber dove]

[final swift]

pink is cute

[amber dove]

I lik pionk

[final swift]

Maples!

[amber dove]

dolphin can you make dolphin noises

[final swift]

whatever Maples, you wanted to join 😛

Oooooohhhhhhhh

Never heard of kegger before

[tiny bridge]

no

haha

but have you seen my dolphinator CLI yet?

[amber dove]

[amber dove]

theres a cli version:???

[tiny bridge]

yes on npm

dolphin8

[amber dove]

woah

h

[median aspen]

when you go down the dolphin path, a certain risk must be taken

[amber dove]

im looking for the dophonator cli I think this is the wrong weebsite

[tiny bridge]

https://www.npmjs.com/package/dolphin8

its this one ^

[final swift]

bye ben get well soon!

lmao Maples how many people's babies do you want?

[quiet needle]

thank you

[amber dove]

wait you can press the copy buttonm multiple times and it will just keep saying copied to clipboard

[tiny bridge]

yes

[quiet needle]

but yeah I'll say it in text form: if anyone's creepy ping a moderator/weird/making you feel uncomfortable and we will deal with it as we have (:

[amber dove]

lol

I think I just broke my chair

[tiny bridge]

you have node installed and npm?

[amber dove]

no but im installing it to use this life changing package

[tiny bridge]

hahahaha

[final swift]

lol

[tiny bridge]

❤️

dont forget to check out the dolphin art

[amber dove]

DOPHIN ARt

EEEEEEEEE E EEEEE EEEEEEEE EEEEEEEE EEE

[median aspen]

👀

[final swift]

I'm really really old

[amber dove]

how old are you dplhnin

[amber dove]

dinosar??

[median aspen]

duckling 🦆

[final swift]

Erm

[amber dove]

[final swift]

Suurreee....

[median aspen]

💀

[tiny bridge]

want to guess?

[amber dove]

umhmmm

380 billion years olkd

[tiny bridge]

close

[median aspen]

O.o

[final swift]

Dolphin but we're young at heart!

[amber dove]

was it 380.1 billion

[final swift]

Yes Mandy lol

[amber dove]

how do i use the dolphonator cli

[tiny bridge]

really ez

dolphin8 -h

[amber dove]

[tiny bridge]

looks like it wasnt installed correctly

dolphin8 -v?

[amber dove]

my life cannot be complete without dolphin CLI

[amber dove]

it says the same thing

[tiny bridge]

I think the installation wasn't complete

https://docs.npmjs.com/downloading-and-installing-node-js-and-npm

maybe this helps

but dont worry if you dont want to 😉 I wont be offended haha

the webversion is handier to use anyway

CLI was just for fun 😄

I submitted it to CyberChef too, ahahah. Awaiting PR approval

brb

[median aspen]

wait what?? XD

[median aspen]

how long ago was this? 👀

[amber dove]

oh

It says that chalk isnt compatable with my version of npm

im crying in real life

[tiny bridge]

just last week. I dont think they will approve it, but it was a fun exercise for me regardless

[final swift]

Goodnight Mandy!

[tiny bridge]

awww

[final swift]

Goodnight Maples

[tiny bridge]

damn too late

[amber dove]

what if I made my own dolphinator cli

[median aspen]

that's awesome :D

[tiny bridge]

@cunning ridge good night!!

[final swift]

That's so cool!!

[tiny bridge]

I just put on my headset to say bye

[final swift]

Oh no

[tiny bridge]

my first OS contribution is a literal joke

hahahha

Well, started as a joke*

[final swift]

I keep getting a call from Masacheusettes

Every morning

[tiny bridge]

:/

[median aspen]

wtf

[final swift]

I know right!

[tiny bridge]

Its probably the CIA

[amber dove]

whats this

[median aspen]

oh definitely

[final swift]

Last time I looked up the number it was from a cyber security company

But then got calls from different numbers

[final swift]

Yes!

[tiny bridge]

Converting it to 16 bit binary

[amber dove]

:0

[tiny bridge]

16 because I also wanted non latin characters to work

[amber dove]

I tried writing the same thing in python

[tiny bridge]

But the space char was being a pain, so any spaces are converted in the if statement there

[final swift]

Bye!

[median aspen]

Bye! :D

[amber dove]

[distant garnet]

you didn't talk, so we sad

you happy

[tiny bridge]

export function encode( input ) {
    let result = [];
    let charArray = input.split('');

    charArray.map( ( character ) => {
        if ( character === ' ' ) {
            result.push( character );
        } else {
            const binaryArray = encodeToBinary( character ).split('');
            result.push( binaryArray.map(( str ) => str === '1' ? 'e' : 'E' ).join(''));
        }
    });

    return result.join('');
}

export function encodeToBinary  ( char, padding = 16 ) {
    return char.charCodeAt(0).toString(2).padStart( padding, '0');

maybe try it with this catgirl

this is from the CLI, slightly different

[amber dove]

woah

lots of

stuff

me no likey

[tiny bridge]

alright, looks good. Now just convert the 0's and 1's

and join them into 1 string

[amber dove]

so

is 0 lowercase e

[tiny bridge]

01100001

EEeeEEEEEeeEeeee
1100111110010000

[amber dove]

oooo

I think I dids it

[tiny bridge]

ooh can you copy the output here?

then I can check it

[amber dove]

eeeeeeeeeEeeEeeEeeeeeeeeeeEeeeeeeeeeeeeeeEEeEEeeeeeeeeeeeEEeEeeEeeeeeeeeeEEeEeEEeeeeeeeeeEEeeEeEeeeeeeeeeeEeeeeeeeeeeeeeeEEeeeEEeeeeeeeeeEEeeeeEeeeeeeeeeEEEeEeeeeeeeeeeeEEEeeEE

uhh

[tiny bridge]

ﾶ￟ﾓﾖﾔﾚ￟ﾜﾞﾋﾌ

[amber dove]

whoopsie

[tiny bridge]

needs a bit more work

yeah

haha

[amber dove]

oh no the spaces

[tiny bridge]

"I like cats" should come out like "EEEEEEEEEeEEeEEe EEEEEEEEEeeEeeEEEEEEEEEEEeeEeEEeEEEEEEEEEeeEeEeeEEEEEEEEEeeEEeEe EEEEEEEEEeeEEEeeEEEEEEEEEeeEEEEeEEEEEEEEEeeeEeEEEEEEEEEEEeeeEEee"

[amber dove]

h

uh

I messed up something on second

it doesnt work with no spaces

[tiny bridge]

yeah interesting

[amber dove]

I thinks I know whats wrongy

I

my e's are flipped

[tiny bridge]

yeah that also

[amber dove]

this should work

EEEEEEEEEeEEeEEeEEEEEEEEEEeEEEEEEEEEEEEEEeeEeeEEEEEEEEEEEeeEeEEeEEEEEEEEEeeEeEeeEEEEEEEEEeeEEeEeEEEEEEEEEEeEEEEEEEEEEEEEEeeEEEeeEEEEEEEEEeeEEEEeEEEEEEEEEeeeEeEEEEEEEEEEEeeeEEee

[tiny bridge]

woohoo

[amber dove]

time to make a decoder

I figur its out

uh

[tiny bridge]

yes looking good 😄

[past breach]

woaw

[tiny bridge]

now join them all together into 1 string

[past breach]

it s beautiful x)

[amber dove]

but its all the same

its just 0011010010000000 over and over again

[tiny bridge]

are they?

[amber dove]

I made a working one

[tiny bridge]

yes that looks better

[past breach]

it s 😂

you want to translate strings into binary code ?

[tiny bridge]

decoding dolphin script back into human readable text

[past breach]

oh that 's nice !!

can we see main.py ?

[amber dove]

it not done yet

[past breach]

okeyy

[amber dove]

ok the functional part is done

its kinda bad

[tiny bridge]

make worky first 😄 and nice later!

[amber dove]

I really dont like the replace() parts

but it works

[tiny bridge]

very nice! super cool 😄

[amber dove]

fdjngjsdkfngksdfnkgnksdfgndfjgs

[final swift]

fungus gnats

[amber dove]

doplhin

nfdgjnfdsjksgnksdfnglksdfg

I had your code to look at though

I need a better way to parse arguments :c

vcmnsjkdnsckjfnkdsgnsdjkfngskdag

one secomnd brb

can you say I like cats in japanese

Woah

I used argparse to make it pretty

[tiny bridge]

❤️

[amber dove]

fdnjgnsdfkjglnsdjfgd

I stole your banner

[tiny bridge]

yeasssssss

[amber dove]

colors

[tiny bridge]

❤️ ❤️

[amber dove]

jnfjsdnakjfnjsdg

[past breach]

it s a fu*king PINKK DOLPHINNNN 😂

[amber dove]

I like pink

[past breach]

i prefere blue

like the sky

oh hell yeah that s the best ever color !!!

[amber dove]

I chang it

[past breach]

amazing

as i said now

you have a BLUEEE DOLPHINNN

he s so beautifull !! 🥺

[amber dove]

vc suddenly became sad

[final swift]

sooorrryyyyy

[amber dove]

is oki

https://github.com/kitty14956590/dolphinator-py

I puit it on gibhub

[past breach]

awww it work and he s so beautiful

let s give him a name !

[amber dove]

fvfhgjfnsjkhbksflgjlhg

I hav to go

[tiny bridge]

okay

thank you catgirl that was awesome!

[final swift]

Bye catgirl!

[hexed bloom]

https://web.mit.edu/6.933/www/Fall2001/Shannon2.pdf

https://ieeexplore.ieee.org/document/8102762

[vagrant valve]

hi

@hexed bloom @iron palm what are you guys talking about?

osi models and ssh?

yeah collison domains

like broadcasts

and multicats

@hexed bloom

ignored

[iron palm]

🙂

[vagrant valve]

i have heard about them on proffesor messer's course

oh ok

i don't have a mic

what food?

@hexed bloom what do you think about ssh honeypots?

high

they put a honeypot on port 22

and hide their real ssh behind the last port like port 65535 😆

someone said Tor is an NSA honeypot 😄 @iron palm

[iron palm]

lol im a true hyperbole

[vagrant valve]

are you from the UK?

[iron palm]

aye

[vagrant valve]

@quiet stratus how are ya?

same

exams are killing me lol

programming exams

paper 1 is easy

paper 2 is shit and hard

algorithm and binary to hex

all of them

they're all gonna be in one exam

what game is this

i remember on guy made gta 1 in 10 minutes lol

with python

and pygame

[iron palm]

that actually wounds my soul

[vagrant valve]

usually games are made with c++ and java

that would be hard yes

you need a whole team

not only one programmer

people who do 3d modeling

game desgining

art

effects

and then programming

@hexed bloom you're back

look at the image i sent toaster

a long time lol

and programming error

also debugging too...

yeah psuedocode...

[quiet stratus]

pseudocode

[vagrant valve]

i have write algorithms, flowcharts and an instruction in pseudo @hexed bloom

its easy

cya later guys

[hexed bloom]

Cya!

[vagrant valve]

toaster, when did you join thm

@hexed bloom

alright

you too

[hasty pike]

MY MICS STOPPED WORKING FOR NO REASON😭

[iron palm]

gotta reboot brb

[vagrant valve]

oh my god it's not running smoothly @split kraken

fps is low

@stone oar you mean switches?

@hexed bloom he probably means switches

subnetting yes

security+ is easy @marble orbit

sec+ is way less challenging if you ask me

[marble orbit]

teach me your ways 😍

[vagrant valve]

net+ like common ports, trunks, briges, domains, routing, switches, WAN, LAN etc

[vagrant valve]

bruh?

[marble orbit]

if it was easy for you, id love any reccs on study strategies or material you used!

i work at top sec companies but sec+ is 0_0

[vagrant valve]

i had say watch proffeser messer's course on yt

he has a good course on sec+

[marble orbit]

ooh gotcha, did you buy his paid material too?

[vagrant valve]

yes

[vagrant valve]

subnetting involves binary and hexe convertion

[quiet stratus]

en
conf t
int fa0/0
ip add 10.0.0.1 255.0.0.0
end
motd banner ^no hax this rooter pls^
do wr mem```

now you know how 2 cisco

[marble orbit]

im gonna input this into my mac cli

[quiet stratus]

Do yes no

Wtf

[marble orbit]

[vagrant valve]

Hello

@split kraken

[split kraken]

HI

[vagrant valve]

You know this guy

Paul

[split kraken]

I've seen his movies but I don't know him

[vagrant valve]

I have been in that exact same place

In that same year when he was being interviewed

Fucking crazy

John the ripper

Hashcat etc

@plucky vault Black arch is hard to install and configure

Always fail when first installing

https://tenor.com/view/fastand-furious-brian-paulwalker-almosthadyou-bromance-gif-5159662

@plucky vault

[iron palm]

-nomodeset in grub config for nvidia baremetal installs on laptops too

[vagrant valve]

@worldly viper what do you think about anlyzing malicous PDF documents?

[worldly viper]

I think I have something about that open in one of my tabs.

[vagrant valve]

You can talk about it

In vv

In vc

I can hear you

[worldly viper]

Oh hey, I see you 😄

[vagrant valve]

Yes I'm in vc, i can hear yall

[worldly viper]

No mic?

[vagrant valve]

Nope sadly

[worldly viper]

I don't really have any tricks for analyzing PDFs yet, but after I get to open tab 😄

[vagrant valve]

If i were to anylze a malware, would a VM be a good choice or nope? I have seen cases of some malware escaping vm's and infecting the anylsts host

Of course at the time, they were running vulnerable hypervisors

What would be the best os for that?

[worldly viper]

A VM is always a good first step, but yeah, also having physical hardware that is dedicated to the purpose of analysis as a just in case.

I've been planning to do some testing at running in a Hyper-Visor first environment because any escapes wouldn't be able to do much unless they were designed specifically for that environment.

[vagrant valve]

I agree

[worldly viper]

Some malware also checks to see if its on a VM.
So you ideally want to set-up a VM that pretends to be bare metal, and then keep a clean image of that.

[vagrant valve]

Ah i see

[worldly viper]

Yeah, the thought is, systems on a VM are likely to be used in analysis, and are also generally easier to recover from/wipe infections. So they make less favourable targets.

[worldly viper]

https://youtu.be/xiGE3paw5WQ?t=64

^ Bad ass

[quiet stratus]

hacker = offensive information security researcher

[vagrant valve]

How are you @midnight fern

[worldly viper]

RTFM²

[midnight fern]

Doing well, you?

[worldly viper]

RedTeamFieldManual 😄

[vagrant valve]

Same

Doing some red teaming

@midnight fern what do you think of DEFCON and BLACK HAT conferences?

Have you ever went into one?

[iron palm]

it should be free lol

you should install black arch and do a write up

the syn packet?

[vagrant valve]

@split kraken look at #general

[iron palm]

rtl8182 or some shit

[vagrant valve]

The wireless adaptor?

[iron palm]

realtek chipset and one or two atheros chips do it too

[quiet stratus]

@hexed bloom

could i join the server mandy's on

[midnight fern]

They are great, and yes!

[amber dove]

isnt it possible to make computers too cold

I made mine 10C

[vagrant valve]

🙃

[quiet stratus]

you fell off + ratio + you're white + you're british + who asked + no u + deez nuts + radio + don't care + didn't ask + i'm a minor + i'm a neurodivergent + caught in 4k + cope + seethe + gg + in 1947, the world's first general purpose computer the 30 ton ENIAC was created + your mom's white + the hood watches markiplier now + grow up + L + L (part 2) + retweet + ligma + taco bell burrito crunch + think outside the bun + ur benched + you're a wrench + i own u + ur dad fell off + my dad could beat ur dad up + ur aim hacking + silver elite + tryhard + zoomer + sksksk + ur beta + i'm sigma + ur submissive + L (part 3) + yb better + sus + this is a cry for help and i'm extremely depressed + quote tweet + ur cringe + i did ur mom + u bought monkey nft + ur weirdchamp + ur a clown + my dad left me + my dad owns Steam + who want me? + i'm lonely + L (part 5) (3D) + ratio
@iron palm

[amber dove]

what-

[quiet stratus]

did i stutter

[amber dove]

well no but

[hasty pike]

F for mandy's dolphin

[worldly viper]

https://www.youtube.com/watch?v=d4Pgi5XML8E

But you may just need to use Strings or a Hexeditor depending on what you need to find.

[hasty pike]

ok nice

thanks

[iron palm]

@hexed bloom can i dm you?

[remote zealot]

.

[rapid juniper]

that's the whole point man

[rapid juniper]

@clever urchin

[clever urchin]

-ban 672772796392275979 Steam Scammer

[dire jacinth]

🔨 Banned 702_titi#5821 indefinitely

[rapid juniper]

@zealous cedar || hydra -l Elliot -P fsociet.dic 10.10.10.10 http-post-form "/wp-login.php:log=^USER^&pwd=^PASS:The password" || this should work if you're stuck

also, fsociety has duplicates IIRC, pipe the output to uniq
||cat fscoiety.dic | uniq | tee word.txt||

Good luck!

[zealous cedar]

thanks zeeshan1234

[dire jacinth]

Gave +1 Rep to @rapid juniper

[dawn bone]

https://tryhackme.com/room/osiris

[paper wedge]

should i be worried ?

[vapid moss]

damn

[distant garnet]

`

sudo -l -l

[vapid moss]

@paper wedge yo, nm, you?

[paper wedge]

did you replied my DM in thm voice chat ?😂

[vapid moss]

yeah, no need for dms 🙂

what do you need?

[paper wedge]

oh okay

[paper wedge]

nothing just wanted to chill

[vapid moss]

cool

[vapid moss]

nice profile pic btw

self-made?

[paper wedge]

No not fully I changed the background only

[paper wedge]

https://tryhackme.com/room/archangel

[plucky vault]

sudo -l -l

$sudo -l -lsudo -l -l

[paper wedge]

http://mafialive.thm/test.php?view=/var/www/html/development_testing/mrrobot.php..//..//..//..//..//..//..//..//..//..//etc/passwd

[sand agate]

https://github.com/bayufedra/Tiny-PHP-Webshell

@worn dagger wanna move to study room?

[plucky vault]

.

[drowsy umbra]

flawed check: Does .../... contain ../.. ?

Bypasses https://portswigger.net/web-security/file-path-traversal

..//..//..//
.././.././

Strip bypass: ....// -> ../

[drowsy umbra]

https://github.com/danielmiessler/SecLists/blob/master/Fuzzing/http-request-methods.txt

[sand agate]

https://github.com/danielmiessler/SecLists

[split kraken]

Hey nostalgia

[vagrant valve]

Hey Amanda

I'm really stressed somehow..

[amber dove]

What-

[split kraken]

Why?

[vagrant valve]

Exams..

[split kraken]

Which ones

[vagrant valve]

Physics..

[split kraken]

Yikes

scary

[vagrant valve]

Yeah

Statistics? Like samples

Is it like math releated

Like higher maths

[vagrant valve]

Do you like cheese?

[amber dove]

Yeah

[vagrant valve]

Uwuntu

I find driving auto cars easier than manual somehow @split kraken

[split kraken]

I can't drive manual

[vagrant valve]

Most i went was probably 90 mph

90-95 average i had say

[split kraken]

I can for an emergency but lol the car will probably be messed up

[vagrant valve]

Yeah lol

Are you sick?

Ohh.. Hope you get well amanda

[split kraken]

ty

[vagrant valve]

Np

[split kraken]

Let's study together, I'm working on english literacy

[vagrant valve]

English?

He's like 13 lmao

@split kraken

He's intelligent for his age

How's the family so far? Arr they sick too

Okay

Its a dog right?

You have a dog?

Ohh haha

Have you been doing any thm recently?

Anyways cya later. @split kraken

[split kraken]

bye

https://www.google.com/search?q=cornell+notes+template+word+document&rlz=1C1CHBF_enUS977US977&sxsrf=AOaemvLTY8NJWrDFWy7YmLGnhHbvcXXZcw:1642892940863&source=lnms&tbm=isch&sa=X&sqi=2&ved=2ahUKEwiliZORvcb1AhXhJ0QIHX6cBPkQ_AUoAXoECAEQAw&biw=1920&bih=942&dpr=1

[split kraken]

https://vm.tiktok.com/TTPdrw3KV9/

[zealous robin]

password is password123@5678

that is the trick

make the password harder

without 4

[quiet stratus]

ping -f 127.0.0.1

how to get free robux

||that is a joke dont ban me ☹️ ||

[zealous robin]

how you make this

[quiet stratus]

`
`
`