general

[hexed rune]

it was pretty fun

[tame axle]

games are fun when ppl are racsist

[hexed rune]

nah games are fun when everyone plays it like a game and not something their lifes depend on

[desert vortex]

I heard that Bug Hunting programs will filter AI-generated reports

[hexed rune]

i have had the most fun when i played and laughed together with randoms

[desert vortex]

real

[hexed rune]

maybe cuz they generate a lot of false positives i believe

but like will they remove reports that are generated by ai or all reports that even contain people who used ai to write reports but did manual testing

[desert vortex]

yes, plus, your report may take waaaay long time to review

[azure hinge]

hey guys do we need to collect all tickets to participate in raffle event or collecting only 5-10 tickets also give us chance to win ?

[hexed rune]

all tickets

[desert vortex]

all

[hexed rune]

i see

[tame axle]

gemini tripping zawg

it gets worse

[hexed rune]

who even uses geminin

[tame axle]

me

3.1 pro is pretty good

[desert vortex]

Me (got 1-year student subscription for free, provided by our government)

It will expire on September

[hexed rune]

i use chatgpt go

i got it for free 1 year

[tame axle]

i dont have anything valuable im good

[river garden]

sup

[tame axle]

hi

[hexed rune]

nice pfp

[timber spindle]

hey guys, i'm new to linux, what distro do u suggest? many suggested Mint, do u agree?

[river garden]

mint is ok

hot take u can also take ubuntu

[tame axle]

fedora or arch with hyperland

[timber spindle]

arch? hell nah, i still can't custom everything, but fedora is a nice choice though

[desert vortex]

You can install CachyOS

[tranquil geyser]

1 ticket is fine

You enter the raffle with 1 ticket

[desert vortex]

It's arch-based distro

[tranquil geyser]

The more tickets the more chance

[desert vortex]

And more user-friendly

[hexed rune]

gentoo

[timber spindle]

didn't heared about this one before, thanks man, i'll look about it

[twin ridge]

Gave +1 Rep to @desert vortex (current: #3779 - 1)

[desert vortex]

It's new, but gaining fame

However, get your hands on Linux commands and fundamentals

[timber spindle]

yeah sure, ik some, but still have to improve

[desert vortex]

good luck

[tight kite]

Finished this both room

[shell copper]

Nice work!

[desert vortex]

bravo

[tranquil geyser]

noob

[tight kite]

Now pro in this

[flint knoll]

man don't bother your self , just chose one of those 2 , mint if really new on linux , and manjaro if you want to see how arch work in easy way

[shell copper]

Yeah honestly if someone has never touched Linux before, I’d probably say Mint first. Easier learning curve and less overwhelming at the start lol....

[river garden]

i missed you guys

hows it goin

anyone need help with anything?

[hexed rune]

Use omarchy

[tight kite]

Arch is best

[river garden]

its the perfect femboy os i agree

[vernal timber]

Do any of you have any good books where I can learn ethical hacking? Where do I start? I would be happy to learn.

[river garden]

why a book?

[vernal timber]

Sorry for the question

[river garden]

nono

absolutely fine

[desert vortex]

It's also perfect for aurafarming

[flint knoll]

man don't look at books right now

[river garden]

i was just asking

if you like reading books go for it

but i would say just getting practical

will get you further faster

[flint knoll]

just start by knowing what is in the pc

like the ram and cpu

[rigid urchin]

Books won't be the most updated information but might at least provide some insight.

[river garden]

a lot of dust in mine

[desert vortex]

i have noisy fans in my laptop

[vernal timber]

Pdf files, courses, yeah, or exercises that help out.

[river garden]

there is also a famous dj that had a dead mouse in his pc

can you guess the name?

[rigid urchin]

Deadmau5

[heady dove]

Hi all, first time posting. My streak got reset today even though I answered a question yesterday. A bit frustrated to have been on 141 days and now back to 1. I'm sure its happened before too, but I've had streak freezes. Anyone else experience this?

[river garden]

https://tenor.com/view/monophobia-deadmau5-dancing-dance-moves-music-video-gif-16682196

[flint knoll]

maaaaaan i man serious he need to know who the pc work first

and then we can talk about hacking

[rigid urchin]

You can talk to mods iirc and they csn reset it back up.

[worn gulch]

hey guys im new

and im interetsing in learning abt cybersecurity

what does tryhackme teach ?

[tight kite]

Hey ghost

[worn gulch]

wsp man : )

[charred idol]

Hi

[worn gulch]

wsg!

[desert vortex]

blue teaming (defence), red teaming (pentest), security engineering

[worn gulch]

explain it in simple words lol cuz i havent started

[charred idol]

how to be verified? and i am premium user also

[tame axle]

type /verify

[tight kite]

It was a super boring day, with temperatures so high it felt like I was in the desert what about you?

[tame axle]

then put ur token

[river garden]

To add images or gifs you need to verify:

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[worn gulch]

litterally the same

[tame axle]

ur token is all the way in the bottom of this

[river garden]

i have this in text expander

[worn gulch]

it was like 40C° or smth like that

35-40

[flint knoll]

it is like def and atk

that what you learn

[worn gulch]

defense and attack?

[flint knoll]

in simple way

[charred idol]

do i need to do it here or there any other channel?

[desert vortex]

Blue Team: Responsible for defending the system and countering the cyber attacks
Red Team: Ethical hacker that makes penetration testing to find vulnerabilities in the system and report it
Security Engineering: The one responsible for maintaining the security setting in the system (e.g, developing security plans and designs)

[flint knoll]

@desert vortex he explain it for you

[bleak prairie]

How to be a super cool hacker

[flint knoll]

there is no answer

[desert vortex]

anywhere, it will be hidden

[worn gulch]

thats so cool

[bleak prairie]

Just use Kali Linux and you’ll be like a pro hacker over night

[worn gulch]

lol

[river garden]

best to write it to the bot

[worn gulch]

im exicted to start : )

[river garden]

if you fuck up your token will be visible here

people have done that

[flint knoll]

naaaaaaaaaaaaaaaaaaaaaaaaaaaaaah

[worn gulch]

wish me luck chat

[sleek dune]

insane that I'm only 0x8 level and 223,494 rank, but I'm in top 10% of THM (the Profile says so)

[river garden]

thats how user bases go

[desert vortex]

I am 0xB and Top %3

[river garden]

a lot of people register

not a lot of people active

especially not over a long time horizon

[sleek dune]

ye coz ppl brains keep getting fried

so they quit

lul

it's the easiest to quit. WE WILL KEEP ON AND WIN

[desert vortex]

people just thinks things are easy at first

they struggle

they quit it

[sleek dune]

the fact it being challenging makes it also SO WORTH IT

[rigid urchin]

You gotta take it one step at a time and see if you wanna continue don't over burden yourself

[desert vortex]

If you don't accept the fact you will face difficulties in the start of learning anything, you will quit it sooner or later

[desert vortex]

Yeah

[sleek dune]

true homies

just spent 4h over a box

but pwnet

[desert vortex]

just don't get in the middle of the road and be like, that's it

[sleek dune]

ye i never quit lul

[desert vortex]

difficult things are what makes you learn

easy is easy to forget

hard is hard to be washed away

[tame axle]

its also what makes it addictive so you wanna keep going

[desert vortex]

yeah

[sleek dune]

true the dopamine rush on rooting is insane

[dark wolf]

TryHackMe

[charred hill]

Hi, everyone! Are there any French people here?

[dark wolf]

I need to become hacker like the big boys. I only have 91836 pts 🙁

[elder lynx]

would this be the place to ask for help on a THM question?

[dark wolf]

sure

[sand trench]

nope none... you are not french yourself so there is 0 french people here ;P

[dark wolf]

or #room-help

or you can ask echo, realize it doesn't know anything, then come back here

[elder lynx]

ah, I see it, thank you. haha ya echo been having me put in all sorts of command with no answer to have.

[charred hill]

😆 Yeah, that's true

[elder lynx]

been working on it since last night doesnt even involve the terminal super easy but idk maybe im doin it wrong.

one sec

[blissful current]

So you are one of the Knowledge Points earning maniacs?

[elder lynx]

lol how do can i put screenshot in the chat

[digital estuary]

verify

[sharp citrus]

@elder lynx

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 24, 2026, 5:57 PM

[dark wolf]

i'm just learning content and trying challenges

I'm not speedrunning or trying to stack points

[blissful current]

understandable have a great day

[dreamy bronze]

points on what

[dark wolf]

the learning site

[dreamy bronze]

you have 91k??

[dark wolf]

let's have a great day together! Let's everyone have a great day!

[dark wolf]

correct, i started last july

[sullen peak]

Hello guys I wanna learn hacking because my ip Adresse and everthing got Hacked and I want to learn How to defend it

[digital estuary]

https://tenor.com/view/xqc-eat-chips-dorito-doritos-xqc-eat-gif-24431271

[dark wolf]

That's like going to a medical school and saying "Hey guys, I wanna become a doctor becuase I just got the flu"

Then you realize it takes 7 years of schooling ... Hacking is no differnt.

[rigid urchin]

also your ip address is exposed everyday

[tame axle]

yo bro what 91k from last july ive been on the platform for 2 yrs 😭

[dark wolf]

It takes years my friend.

[sullen peak]

Wait How

[rigid urchin]

anytime you are on the internet your ip address gets broadcast to the web

[pliant skiff]

Heyoo
Anyone with compliance and privacy law knowledge

[dark wolf]

Well, if you do about an hour or two a day for 10 months straight you can do it

[sullen peak]

And my Instagram acc got hacked I want to know How to defend it

[dark wolf]

lol

[rigid urchin]

talk to support first

and then change the password and if they have 2fa or MFA use that

[digital estuary]

you don't need to be a hackerman t defen instagram account just basic internet hygiene

good passwords, 2FA / MFA, and don't trust everything

[dark wolf]

The best way to keep your acounts safe:

1. Always use 2FA/MFA Two factor authentication, like an authenticator
2. Use a password manager and complicated passwords
3. Never use the same password on more than one site
4. Change your password every years or so
5. Watch for data leaks, if the site you are on has one, change your password.

[dreamy bronze]

do not be dumb bro

thats it

[rigid urchin]

Don't fall for phishing links though it's hard sometimes if they are convincing enough. make sure its the actual instagram site and not an imposter site.

[dark wolf]

That seems a little to simplified and assumptive. You can say "don't be dumb" but you didn't know any of this stuff until you learned it. So I would not say "don't be dumb", I would say, educate yourself.

[sullen peak]

How to Send pictures

[silver sky]

No no, it is the correct answer.

[dreamy bronze]

knew that before i learned anything about cyber btw

idc

educate myself LMAO

[sullen peak]

If somebody have my ip Adresse can he swat me?

[digital estuary]

no

[silver sky]

No

[dreamy bronze]

yes

[sharp citrus]

@sullen peak

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 24, 2026, 6:11 PM

[blissful current]

u can get ur IP changed btw via your ISP

[silver sky]

Still doesn't mean you're going to get swatted

[rigid urchin]

Just an ip alone wouldn't do it

[blissful current]

ofcourse lol

[silver sky]

Physical address of your house yes.

https://tenor.com/view/anyone-home-open-open-up-open-the-door-let-me-in-gif-7419395546559085837

[dreamy bronze]

who is trying to send gova pizza bro

not nice

[dark wolf]

or change your routers mac

I give out my IP regularly and I’ve yet to be located

My IP is 8.8.8.8

[digital estuary]

https://tenor.com/view/jinx-the-cat-jinx-jinx-cat-cat-computer-gif-25786466

[rigid urchin]

My ip is 127.0.0.1 crazy how that works 😄

[dark wolf]

Oh nice. one of my ipads uses that IP

[lucid rock]

[dreamy bronze]

https://klipy.com/gifs/dawiussux-dllg

[hexed rune]

Guys i need some help

[dreamy bronze]

perkele

[hexed rune]

Yo

How do i get 518 yrs of experience in cybersecurity?

[dreamy bronze]

stop i do not want another reminder of the horrid market

stop stop

[junior raptor]

^^

[dark wolf]

Work more than one job at the same time ... basically you do this ...

[dreamy bronze]

i have so much supressed rage

rahhh

[digital estuary]

i can network you with ashurnasirpal, heard he is really good with this kinda stuff, decades and decades of work experience

[dark wolf]

Create 30 companies, each companie has its own client, and then you work 40hrs / week at each of the 30 companies

[sand trench]

shadows ip is 127.42.0.69

[dreamy bronze]

im inside of 127 42 0 69 rn

[rigid urchin]

I approve of this ip Address 😄

[dark wolf]

I love shadows IP

[trim portal]

wow.

[sullen peak]

Guys somebody who hacked my ip Adresse sed that Im gonna get swattet its not his First time what Can I do

[dark wolf]

ooh skittles name is purple with an irish surname, i bet skittles has 518 years exp

[dark wolf]

Report them to the police

[trim portal]

what’s the salary is like with 518 years of experience?

[rigid urchin]

lol That's a great question maybe the same salary for someone with 10 years experience 😄

[dark wolf]

less than elon musk makes in a minute

[trim portal]

518 years of experience of confusing people including myself

[dark wolf]

haha

[trim portal]

518 years of experience: Am I joke to you lol

[dreamy bronze]

yes ur gonna get swatted

it’s ok just don’t answer the door

[rigid urchin]

T come on stop it

[dark wolf]

Just blast Body Rott by Bone Thuggs N harmony so they can hear it outside

[dreamy bronze]

alright my bad

https://cdn.discordapp.com/attachments/1110792603030540288/1490703345034334339/attachment-4.gif

[sullen peak]

Oh Cant I do Anything in to Young to get swattet

[dark wolf]

Yes, call the police and FBI

[digital estuary]

https://tenor.com/view/1-ignored-message-ignored-blocked-discord-gif-12232675189221626225

[dark wolf]

report it

[blissful current]

itz way past ur bed time wot r u doing up so late

[sullen peak]

Okay ty

[twin ridge]

Gave +1 Rep to @dark wolf (current: #37 - 305)

[dark wolf]

They are trying to get to 519 years of exp

[molten sonnet]

It could be just to scare you, most people do that

[trim portal]

oh sugar!!

[trim portal]

Have some food to take my meds

[hexed rune]

Do you have 600 years of experience?

[blissful current]

oki

[dark wolf]

No problem, also block and ignore that person claming that, do not interact with them any longer

[dark wolf]

No, sadly only 575

[trim portal]

Will back to bed soon, I promise.

[sullen peak]

Ty you guys

[tight kite]

[elder lynx]

cant even seem to find my token

[tight kite]

I just saw this reel, 518 years of experience for a junior role 🥴

[narrow swan]

Hi

[dark wolf]

Hello Addict. We can help you recover.

[tight kite]

Hey addict

[dark wolf]

What are you addicted to?

[narrow swan]

Could anyone private msg me my IP I wanna know if anyone can find it

[tight kite]

Son

[dark wolf]

Sure no problem. Would you mind joining this EFNet IRC server with me so I can tell you?

[tight kite]

Get permission

Written one

[narrow swan]

?

[rigid urchin]

You can literally google your own ip

[narrow swan]

Yh but I'm using a VPN

[rigid urchin]

You know vpn's don't work for that 😄

[narrow swan]

Can anyone find out my real one if I use a vpn

[tight kite]

It hide the ip

[dark wolf]

It depends on if it is a proxy vpn for the web or if it is a vpn running as a service on your computer

[rigid urchin]

Contrary to popular belief no they actually don't

[dark wolf]

the latter, people cannot get your IP

[narrow swan]

Proxy

Which one is better

[dark wolf]

If it's a proxy, then only on the web is your IP hidden, games and other apps will use your real IP

[rigid urchin]

Is there a reason you need an vpn

[dark wolf]

It's better to use a program that installs on your PC and you run the VPN from the PC, not the browser

The Browser VPN just changes your IP and tracks you and logs what you do to sell it

[narrow swan]

I'm using a app but I'm on incognito

[rigid urchin]

That still does nothing

[cloud quiver]

Please don't spam and self-advertise 🙂 #rules

[dark wolf]

The function of Incognito is that it doesn't keep cache and history of what you do in the browser.

The VPN running as an app will tunnel all of your Internet Traffic through the VPN

[rigid urchin]

Your isp still knows all of this

[narrow swan]

So could you find my IP if I was on app

[dark wolf]

Any service you use will show you coming from where the VPN is

If I had a backdoor into the VPN provider then yes

if i were law enforcement I could get judges to sign a warrant to get that info to me

[rigid urchin]

A lot of vpn providers are garbage anyway 😄

[dark wolf]

unless the vpn doens't keep logs

you should use one that doesn't keep logs, and don't believe them, research on the internet what people say

[narrow swan]

What type of VPN is mullvad

[dark wolf]

I don't know. You should research it on google and reddit and other sites.

you have to figure out what are the lies and what are the truths by comparing what people say

This applies to everything in life btw

324 days in a row yay

[narrow swan]

Check Ur pms

[rigid urchin]

Mullvad is ok as a vpn

[dark wolf]

I can't find your IP. Also, if I could find your IP, I wouldn't let you know I found your IP. Just like if I knew your address, and where you lived, and where you went to school. It's more likely I would just show up and continue the engagement by collecting photographs rather than let you know I am able to do such a thing.

[narrow swan]

Smart

[narrow swan]

But I just wanna know if I'm hidden

[dark wolf]

With what you are doing, yes, you are relatively hidden and safe.

You are never 100% hidden because it's the Internet.

[half girder]

https://arstechnica.com/tech-policy/2026/05/police-boast-of-hacking-vpn-where-criminals-believed-themselves-to-be-safe/

[dark wolf]

LOL

[half girder]

so the whole vpn "you are safe using us" is bullshit, dont waste your money

[rigid urchin]

Wrong thing

[dreamy bronze]

real ones do not use vpns

[rigid urchin]

https://www.whonix.org/wiki/Whonix_versus_VPNs

[cursive bone]

tlain uses his own vpn

[narrow swan]

@cursive bone who

[dark wolf]

WHonix is a full OS that routes everything through Tor

VPN encrypts traffic from your local pc to the internet

but with vpns, there could be leaks for your IP, it really depends on who youare hiding from

and why you need to hide too I suppose other than the default skid mentality of you should always stay hidden

[slow cloud]

Who is this grooted fella

[dark wolf]

Do not ivestigate!! Turn back now 🙂

[dreamy bronze]

grooted seems cracked

https://cdn.discordapp.com/attachments/1110792603030540288/1490703345034334339/attachment-4.gif

[dark wolf]

i'm based no cap

[dreamy bronze]

😂😂

[boreal scarab]

@sand trench got a request: Colby Swiss

[dull otter]

What the fuck is this heatwave

I’m dying

[dreamy bronze]

humid and rain 💔

[dark wolf]

For Cheesecon?

[sand trench]

can do

[dark wolf]

I have Defcon tickets and I am highly anticipating Cheesecon

[boreal scarab]

Nah, for Cheese Of The Day 😄

[dark wolf]

oh haha

[dreamy bronze]

265 for me

[boreal scarab]

Oh, we got a shit ton of cheese coming

[dreamy bronze]

🙏

[slow cloud]

Real man

Its not fun ova here

[river garden]

hey guys its me again

günther

[dreamy bronze]

femboy

jack

[twin ridge]

🔊 Unmuted kangafoo

[slow cloud]

So i am getting another cold beer

[river garden]

i have a lot of fun ovas

[dark wolf]

Hello Femboi

[river garden]

hello not-general

[half girder]

woop, guess ive hit some triggers ^^

[river garden]

HI VIOLETTTT

[rapid raven]

if i become an hr and then hire myself as a devloper

that can be fun

[rapid raven]

https://tenor.com/view/hello-hello-there-cat-cute-cat-waving-hello-gif-22985947

[dark wolf]

haha, it is a little obvoius but only to the keen

[river garden]

guys, how sigma are you on a scale from 0-10?

[dark wolf]

-1

[river garden]

i feel like i break the scale ngl

[dreamy bronze]

9

[rapid raven]

i likee waffles

[river garden]

that sounds very sigma yeah

[dreamy bronze]

https://tenor.com/view/kitty-weight-0-kg-o-tiny-gif-6694694639184327596

[rapid raven]

with chocolate filled and crunchy too!

[river garden]

im so sigma that i start wrapping around to becoming alpha again

[river garden]

yes yes very sigma indeed

[dark wolf]

This is accurate

[river garden]

i'll put this on my gravestone

[rapid raven]

one time, i was commenting under a post on LinkedIn, and i wrote: love t-it instead of loved it and then went out for a 10 minute walk so that nasty ass comment sat there at some business profile until i got home and deleted it

i dont think i am sigma

[river garden]

if this wouldnt be pg13, i would say "who doesnt"

but bc of that, i will refrain from making that comment

[rapid raven]

https://tenor.com/view/sad-emoji-man-gif-9804261718830123352

wait i should remove it then

[junior raptor]

what if you loved the bird version

never know

[river garden]

i cannot say you should, because that would be mini-modding

and i DEEPLY FROM THE BOTTOM OF MY HEART believe in the concept of mini-modding

[rapid raven]

i changed it a little

https://tenor.com/view/shinchan-shy-gif-5714106419450459191

-# i am just going to bed my past actions of idiocracy still haunt me

[river garden]

want to share?

[rapid raven]

some day

i would

not today though

https://tenor.com/view/out-disappear-bye-vanished-gif-4932063

good night mister femboi jack

[river garden]

good night violet-chan

[narrow swan]

🤣😭

[native harbor]

good morning

[cursive bone]

good morning

[river garden]

good late evening

[rapid raven]

good night

[dreamy bronze]

Good

[sand trench]

good death day

[dark wolf]

whoaaa ... death??

[river garden]

where is it death day

r u in mexico

[sand trench]

:D

shadow is just joking around

[dark wolf]

shadow is funny

[slow cloud]

This beer i have is so good

[river garden]

it's Öttinger, isn't it?

[slow cloud]

Nyooo

Never heard of ottinger

Its this

Weizen tripel

[normal flare]

Hello

Iam new to this server

Well no idea

[narrow swan]

Tiki tiki fonk

[cursive bone]

hello

[normal flare]

Hi

[slow cloud]

Hi new to this server

Im timo, nice to meet ya

[normal flare]

Hi there

[tame axle]

ahh cmon

[river garden]

hey timo, nice to meet ya; i'm jack

[river garden]

@timo @slow cloud @slow cloud @temu

IS THIS A JOJO REFERENCE

[normal flare]

🤣🤣.gg man

[river garden]

or directly apply through the tag yeah; aside from that i won't discuss the server here; not going to promo here

[normal flare]

Ok

[viscid acorn]

Good day jack

When did you convert

[native iron]

Is this a good place to ask for help with CyberChef or would somewhere else be better?

[loud marlin]

just ask

[native iron]

Ok. I am having some trouble with AES decryption in CyberChef. Here is the link of what I have so far. https://gchq.github.io/CyberChef/#recipe=From_Base64('A-Za-z0-9%2B/%3D',true,false)To_Hex('None',0)Register('([\\s\\S]*)',true,false,false)Derive_PBKDF2_key({'option':'UTF8','string':'0x4A434A454E534F4ESOLVER0x636F707065722D39statusjcjensoninternal3047'},128,2100000,'SHA256',{'option':'Base64','string':'6gV965IdM2b7zzmDy2gXcpp1DgawiXBq'})Register('([\\s\\S]*)',true,false,false)Find_/_Replace({'option':'Regex','string':'^.*$'},'$R0',true,false,true,false)AES_Decrypt({'option':'Hex','string':'$R1'},{'option':'Base64','string':'p7bkD7c2zDnQivbU'},'GCM','Hex','Raw',{'option':'Base64','string':'0bHBGmj1mZH2hm/OEjVnsQ%3D%3D'},{'option':'Base64','string':''%7D)Return()&input=blN2RnBYZTFGNlU3SXdWSmxFRFI2QT09

Everything seems to be working up until trying todecrypt with aes.

[loud marlin]

where did you get that

[sand trench]

holy link being long

[native iron]

If you want talking about the passphrase and salt and stuff I got it from a website that I am trying to solve

Also I probably should have shortened it but I didn't see how long it was until I pasted it in here

[sand trench]

yeah it is a valid way for cyberchef links

just don't generally like how long they get

[native iron]

Yeah, it seems to just put it all in mainly plain text, still works though I guess

[loud marlin]

@polar spoke might help

[native iron]

I made the recipe myself so it could be broken somewhere or something like that.

[loud marlin]

if some can help is the guy i ping. if he is amoung alive ppl

[sand trench]

yeah chickenman is on cray cray level of understanding cryptography and hashing

[native iron]

sounds good

[river garden]

okokokokokokkkokokokokokokok

[native iron]

I will continue burning my code with cyberchef until then

[river garden]

wassup people

[native iron]

ello

[polar spoke]

Sup

[quick blaze]

🤔

[polar spoke]

What’s the issue? I’m on mobile so it’s not exactly playing nice for me right now

[native iron]

I have made a recipe that creates a PBKDF2 key with a saltand then uses it to decode the input using the previously generated key and given IV and GCM tag, but it keeps on saying that it was "Unable to decrypt input with these parameters."

[polar spoke]

what’s the construction for what you’re doing

you start with some material, in this case it looks like it’s base64 already?

Then you pbkdf2 that and derive a key?

[native iron]

With what I am doing the only thing changing is the salt for the pkbdf2 key and then the input is used with a nonce/iv and auth tag to give the decrypted output

[loud marlin]

this

[dark wolf]

🤔

[polar spoke]

that seems…. Wrong

[native iron]

I made it myself so most likely

[polar spoke]

That’s a large tag for a 128bit key isn’t it? And the input material seems like it’s being handled in a pretty nonstandard way

you’re dropping padding with regex? And converting to hex?

I’m not sure I understand the construction

[native iron]

What I was trying to do with the registers and regex was to store and then get back the input after making the pbkdf2 key

[loud marlin]

if you use aes 256 then might key needs to be 256 not 128 as se

[native iron]

lemme try that

Just to let you know it is also like my first or second time using CyberChef so the chances of this being wrong are like 100%

[polar spoke]

yeah something is messy with the handling and sizes

What is the input value supposed to be?

It’s clearly not a password

[native iron]

it's supposed to be the encrypted data

[loud marlin]

also are you sure that is passphrase correct

[native iron]

That is the thing, I am not,

I will try to check again

[loud marlin]

since even if all is set ok, and passphrase is not then for sure will not decrypt

[native iron]

good to know

also now there are even more ways I could be messing this up

neat

thanks for all of your help, I will tell you if I find out what I'm looking for, or if I get cooked by cyberchef

[loud marlin]

heh ok

[cursive bison]

Hii
Any tips what to expect for a soc analyst intern interview?

[slow cloud]

Jack jacm jacm

[slow cloud]

[vast venture]

Hii
Can anyone tell me when the red raffle event ends? And are all the rooms free that have a ticket?

[slow cloud]

I couldnt tell you

[vast venture]

Why?

[slow cloud]

Because i dont know

[quick blaze]

You moron.

[vast venture]

@quick blaze did you know about the red raffle event?

[quick blaze]

No. I don't use THM.

[vast venture]

Oh, okay

[polar spoke]

how was the data encrypted?

[loud marlin]

data = encrypted

lol

[polar spoke]

lol

i think it's a problem of the key derivation or the cipher setup

[quick blaze]

[loud marlin]

if you change to 256 from 128 it fail. if im not wrong the passphrase is the issue. might be wrong

[polar spoke]

a lot of stuff is weird with this construction even when you break it into pieces

[loud marlin]

i also paused to go step by step. but yea. i notice only in derive is 128 but hes using aes-256

[polar spoke]

this is not standard generation from any of the popular libs

[loud marlin]

but it didint help

[mental turtle]

hi

[polar spoke]

you can spot some out of standard stuff going on immediately

salt for pbkdf2 as defined is 24 bytes

but most libs will generate at 16 bytes by default

pass phrase looks like mixed data types, but ingested as utf-8

high iteration count too

[mental turtle]

idk what conversation is going on

i wanted to start my journey

if anyone can help

do lmk know

I will be thankful

[warped blade]

nah

[mental turtle]

WHAT

[dark wolf]

#start-here

[loud marlin]

2100000 yea

[tropic laurel]

I only have 3 raffle tickets yet. BUT I WILL GET THEM ALL!!!!

[dark wolf]

Good Luck

I'm hoping to win the Data Center. It isn't listed as a pirze but I'm hoping that secretly it's a prize.

[jovial crypt]

yooo guys anyone got a good free vpn to recommend?

[slow cloud]

Good and free usually dont go hand in hand

When it comes to vpns

[jovial crypt]

haha true

[slow cloud]

I like mullvad

5euros a month

I think proton has some free option

[jovial crypt]

good for sandboxing?

[slow cloud]

And windscribe

[slow cloud]

But i cannot speak for the privacy stuff

[jovial crypt]

ah okay i wanna get a somewhat safe one for my sandboxing

[warped blade]

what does this mean

[jovial crypt]

sandboxing?

[warped blade]

sandboxing what

for malware analysis the vm shouldnt have any sort of network connection

[jovial crypt]

sandbox is an isolated, controlled environment where suspicious code, files, or programs can be safely executed and analyzed without endangering the host system or network

[jovial crypt]

thats the problem

i dont really have a choice in that

[warped blade]

why not

[jovial crypt]

its not my vm💀

[warped blade]

why are you testing malware on somebody elses vm

[jovial crypt]

do u have any good recommendations?

[warped blade]

yes

cut the network connection

all together

[jovial crypt]

its a friend of mine

i wanna get him on virtualbox but hes skeptical

[jovial crypt]

thanks ill try to convince him

[twin ridge]

Gave +1 Rep to @warped blade (current: #135 - 80)

[pearl hedge]

Does it really help learning cyber security i wanna graduate in IT when im older so im asking

[jovial crypt]

depends what u wanna do but its a good skill to have

[pearl hedge]

I wanna work in cyber security and so on

[jovial crypt]

if you wanna work in cybersecurity then learning it is worth it yeah lol

[pearl hedge]

Aight thx

[jovial crypt]

np

[dreamy bronze]

@pearl hedge nice pfp bro….

good lord

https://tenor.com/view/dog-side-eye-rolling-window-up-gif-13323690016508828792

[pearl hedge]

Thanks🥹

[jovial crypt]

yo real quick, should i set the network in vbox to host only adaptor or internal network? or is there some other way i needa do it so theres no connection at all guaranteed

[sand trench]

for vpns you should want systems that have the following qualities:
no identifiers like email or phone number required
able to pay with either cash or monero
no log policy that has been vetted by third parties
preferably systems that can obfuscate that you are using a vpn and avoid data analysis by AI
which basically leaves you with 2 options
mullvad vpn
ivpn

[jovial crypt]

mullvad good for sec?

heard its like 5 euro a month

[sand trench]

yeah mullvad is great

they are very much on the for front of making things to keep their users privacy paramount

[jovial crypt]

holy their home page is so inspiring

"Free from personal data collection and business models where your online behavior is treated as a commodity."

tuff

[warped blade]

literally just disable the network toggle

[sand trench]

mullvad has also been there for a long time

[warped blade]

idk why u think a vpns going to help

[jovial crypt]

yup found it

[warped blade]

the box being on a vpn wont make malware unable to communicate

a vpn just encrypts traffic

why would it protect u from malware

[jovial crypt]

running nat initially to download then disabling network is good?

or should i download in another manner

[warped blade]

I'd much prefer a shared folder

[jovial crypt]

appreciate it

[warped blade]

also copy and pasting and audio should be disabled

[jovial crypt]

audio?

[sand trench]

and be careful with shared folders too

[jovial crypt]

didnt know thats a vulnerability

[sand trench]

as shared folders can and have lead to VM escapes in the past

[warped blade]

^ they should be readonly

[jovial crypt]

really appreciate the help guys tysm

[sand trench]

they should be neither read or write able when running the malware after moving it onto the research vm

[jovial crypt]

pretty new to csec but actually testing stuff out makes it so fun

[sand trench]

as readable only can lead to arbritary file reads in worst case senario

and some malware read files and uploads them

[warped blade]

i guess

[sand trench]

anyways technically malware research is an advanced topic and you should not really be doing it without a ton of knowledge of all the risks

[warped blade]

and prevent the vm from being able to write / exec / copy back

should also probably be on a type 1 hv

and be weary of anti vm

[jovial crypt]

i saw that worms and ransomware shouldnt be tested unless youre like on a device you can literally just throw away for paperweight

[warped blade]

yea, a vm

[jovial crypt]

i heard they can easily go through most vms if not set up like perfectly

[warped blade]

no

[jovial crypt]

wow fr?

thought there were like huge worm attacks in the past

that got thru stuff like that

[warped blade]

through the network sure

through the hypervisor is extremely rare

[jovial crypt]

i wanna start testing out intentional educational malware to learn more about it

dont wanna get straight into the deep end

[warped blade]

what malware is educational

[jovial crypt]

never heard of it?

i was talking to this person who studies cs and he told me hes been doing it for ages

theres like intentional malware made where you know exactly what it does

[warped blade]

you mean u write it urself

[jovial crypt]

maybe i dont get u but no u dont make the malware urself

[warped blade]

how convenient i have that

https://github.com/TITAN-Softwork-Solutions/Blackbird-Adversary-Emulation-Suite/tree/main

[jovial crypt]

whats this?

[slow cloud]

Int net is nice but disabling the NIC fully is best

[warped blade]

malware ttps

[slow cloud]

Whats a ttps

🤓

[warped blade]

https://cdn.discordapp.com/attachments/1369766547010359337/1426551092061405305/togif-24.gif

[jovial crypt]

i see

[warped blade]

its just a bunch of code that simulates a specific technique done by malware

[jovial crypt]

really interesting

for monitoring, is portmaster sufficient

[warped blade]

uhhh

network mon u usually do with wireshark

[jovial crypt]

gotcha thanks

[warped blade]

portmon is good but doesnt give the same depth

use both

also they market heavily

lol

[jovial crypt]

so its not really all that

[warped blade]

good observation jigsaw

[loud marlin]

@mental turtle i google the things. and found the puzzle that you solving. you might missing data

[tropic notch]

That is very true

Google is powerful

[signal ingot]

Time to cultivate red teaming fundamental again...

[tropic notch]

Goodluck achieving heavenly demon god pen tester

You might reach the heights of my brothers from mount hua

[dull otter]

https://cdn.discordapp.com/attachments/631390469317853194/1508238932435800157/IMG_4596.jpg?ex=6a14d077&is=6a137ef7&hm=32b1f4aa3fa936fa72fe489010b7e50fe85aeb40b179178bc80db318a847dda6&

[tropic notch]

Sailor June

😛

[tranquil geyser]

Sailor july

[loud marlin]

heh

[dark wolf]

yeah the one is basically a mini pc

[loud marlin]

and two different things. v1 work on layer0 and v2 on layer1

[tropic notch]

ARM

[dark wolf]

LEG

[tropic notch]

@warped blade

[warped blade]

vas

[tropic notch]

Hello

[cursive bone]

@warped blade

[tropic notch]

Wth

[warped blade]

speak

[cursive bone]

shut up

[warped blade]

potty mouth

[valid ermine]

Hi

[tropic notch]

You need to step your game up sir

[cursive bone]

hello

[tropic notch]

When's the military contract

Coming in

[warped blade]

🤔

[tropic notch]

WOAH enterprise

We went from local

to international

Im still at home 😔

I gotta lock in

[dreamy bronze]

https://tenor.com/view/aint-tuff-bad-meme-benjammins-is-not-tuff-loser-gif-4433955606435510984

cool concept but why is that needed

[river ore]

Is that even an actual THM employee? Lol

[tropic notch]

Im an employee too then

[rigid urchin]

So you want people in a room full of hackers to just willingly nfc a profile to another individual

Yeah that would go over so well lol

[river ore]

Its obvious hes a clanker lol

[rigid urchin]

Oh for sure

Also with a name like passwd

[river ore]

Facts

[dark wolf]

hides a scam link in there too

[gusty inlet]

U ok?

[dreamy bronze]

https://cdn.discordapp.com/attachments/1110792603030540288/1490703345034334339/attachment-4.gif

[fading perch]

https://klipy.com/gifs/yoisaki-kanade-polyniigo

[dark wolf]

🧐

[tropic notch]

What is a polyniigo

[dark wolf]

I was wondering the same thing

[blissful current]

[keen lark]

Hi

[blissful current]

hi

[loud marlin]

hihi

[blissful current]

hi³

[keen lark]

Yo

Aura

Bro why did they change the jr pentester path

If I was a complete beginner I wouldn't wanna study because it's just too much

This is leqit oscp level

[fading perch]

oscp level AI

[keen lark]

?

[tropic notch]

Isn't that a good thing

Keeping paths up to date

[blissful current]

[dark wolf]

yes path up for date .. is very very good

must learn new exploit.. teach people lesson who don't update

[keen lark]

"uo to date" dude there is mobile application security

[tropic notch]

Elaborate

Why is that a problem?

[keen lark]

This is not jr stuff

[tropic notch]

I haven't checked out the section but what would you consider to be jr level "stuff". Wouldn't it be good to teach users on mobile application security whose to say that something is jr or senior. Also the user has a choice to participate or not

[river ore]

That's good its not Jr shit

[blissful current]

exactly

[tropic notch]

Plus it looks fun

Ill do the path now

[dark wolf]

Get it!

[blissful current]

imma do HTB free active challenges first

[dark wolf]

Once I finish HTB ill do HackTheMossad

[river ore]

[dark wolf]

in like 3 years

[river ore]

@weary juniper get out clanker

[loud marlin]

@cloud quiver

[warped blade]

sounds legit

[lucid pumice]

Done!

[silver nacelle]

;------------------------------------------------------------
    sub     rsp, 56
    mov     rcx, 0x80000001
    lea     rdx, [run_key]
    xor     r8,  r8
    mov     r9,  0x0002
    lea     rax, [hkey]
    mov     [rsp+32], rax
    call    RegOpenKeyExA
    add     rsp, 56

I cant find the literal hex value for hkcu in the windows docs

where can i find this value without ai

[dreamy bronze]

@warped blade ur niche

help a brother out

[silver nacelle]

no your niche

[warped blade]

idk

i dont write assembly

[dark wolf]

i use punch cards

[kind linden]

C:\Program Files (x86)\Windows Kits\10\Include<version>\um\winreg.h

[silver nacelle]

it seems i dont have just as you posted robot told me it needs to be downloaded

[loud marlin]

predefined Windows reg root key and contains settings specific to currently logged user

[warped blade]

#define HKEY_CURRENT_USER (( HKEY ) (ULONG_PTR)((LONG)0x80000001) )

0x80000001

HKCR = HKEY_CLASSES_ROOT         = 0x80000000
HKCU = HKEY_CURRENT_USER         = 0x80000001
HKLM = HKEY_LOCAL_MACHINE        = 0x80000002
HKU  = HKEY_USERS                = 0x80000003
HKCC = HKEY_CURRENT_CONFIG       = 0x80000005```

[kind linden]

right

as of (mov rcx, 0x80000001) , HKEY_CURRENT_USER - 0x80000001

[silver nacelle]

OK SO I downloaded and i have the values

what is this file?

is it just a elaborte notepad?

[warped blade]

its a header

[kind linden]

part of the windows SDK

[warped blade]

they contain declarations for functions its like a table of contents

[silver nacelle]

ok so it is a big notepad

sweet

thx

[quasi dome]

Goood boy

[fervent meteor]

WHAT UP

[dark wolf]

The title bar

[warped blade]

i couldve just done this 💔

[hollow scarab]

Hi all,
Can anyone please share with me the contact number of the person with whom I can talk about the course and the fees?

[dark wolf]

there is only email

[hollow scarab]

Oh so can you please share the email?

[dark wolf]

[e-mail]

[hollow scarab]

Thank you

[twin ridge]

Gave +1 Rep to @dark wolf (current: #37 - 306)

[dark wolf]

no problem

[signal ingot]

😂

[warped blade]

damon reference

[mental spoke]

garrysmod oddly stores their entitylist in the heap

no single clean address

pointer + dereference is just annoying

[fervent meteor]

👉 👈

[warped blade]

https://cdn.discordapp.com/attachments/1369766547010359337/1426551092061405305/togif-24.gif

[plucky horizon]

@warped blade tell me what it means please.

[sick maple]

https://tenor.com/view/who-are-you-huh-offended-what-disgusted-gif-12444006

[stoic quarry]

Don't ping random members of staff

[cursive bone]

@warped blade fed

[sick maple]

you are

[fervent meteor]

fem

[mental spoke]

lmfao

this gmod server really thinks ANYONE is gonna sign an nda to do dev work for them

on a 20 year old game

😭 dumbest shit ive argued abt in months

[stoic quarry]

For a server?

[winter girder]

Can anyone save my ass?

[stoic quarry]

Lmao

[winter girder]

I'm confused on something

[mental spoke]

for a darkrp server to do dev work

[stoic quarry]

What are you confused on?

[winter girder]

I'll DM u

[stoic quarry]

Isn't it all Lua scripts?

[mental spoke]

yes LOL

which makes it even funnier

no ones putting legal strain on themselves over some .lua files LOLOL

[stoic quarry]

100% lmao