general

[hot cairn]

i only do a lil traffic via cf

[shut hawk]

same

[hot cairn]

if i start pushing my entire web traffic load via CF - they get angry

[shut hawk]

it's so small my blog is like 10x the traffic of my home server network combined

[buoyant tree]

anybody would get angry

[hot cairn]

My ISP doesnt lol

[shut hawk]

....aren't you your own ISP 😂

[hot cairn]

upstream wtver

[boreal scarab]

https://youtube.com/shorts/TNjFsNGKhqI?si=9a6MW55hJKdHb5f1

Teaching them life skills at a very young age, I love it.

Teaching em how to fix their own stuff, not be afraid to learn, love it.

[buoyant tree]

we do that here also but without the machines

[boreal scarab]

I remember controlling a machine once when I was a child with my father.

Think it was a backhoe too

[torpid ether]

Use either Cloudflare Tunnels with the Zero Trust client (free) or Tailscale. The latter is a bit quicker to setup. Both are excellent for getting into your network resources without the need to setup a public facing VPN or port forwards. Also doesn’t have the same restrictions as Cloudflare tunnels doing public hostname proxying (which you were mentioning).

[boreal scarab]

https://youtube.com/shorts/3aGUwvfjogY?si=c2I1PExhXt8bcsaY

[tough kayak]

Does anyone know where I can find the recording of the event that took place yesterday?

[main kraken]

why is this popping up

im just trying to scan thm challenge

[deep urchin]

Hi all, is someone able to help me with a Curl query? I want to include a variable in the URL but am not sure how to format it correctly

[boreal scarab]

Were you trying to do -p- for all ports?

[main kraken]

Yes

[boreal scarab]

You're missing a - after the p

[main kraken]

oh yeah

ty

[boreal scarab]

Welcome

[main kraken]

but why is -p illegal

[sick lance]

#room-help is a better channel. 😄

[main kraken]

:)

[chilly veldt]

Cause you're specifying a port

[boreal scarab]

You never specified a port after -p

[main kraken]

OHHH

ty

[sick lance]

Actually

[boreal scarab]

No problem

[main kraken]

:)

[sick lance]

It was taking the op as the port range.

[boreal scarab]

https://tenor.com/view/nerd-ackchyually-actually-gif-11156171

[sick lance]

Ip*

[main kraken]

:)

[sick lance]

-p 10.10.xxx.xxx would be the port range

[chilly veldt]

No?

[deep urchin]

Can someone who knows bash and curl help clarify why the following doesnt work?

for date in $(cat 2023Dates.csv); do
curl "https://website.com/generation/$date/data.csv?overlay=none&access_token=XXXXXX"
sleep 2
done

[chilly veldt]

That's the IP range

[sick lance]

Yeah, but they didn't specify anything after -p

[sage wolf]

You wanna specify a port, you do something like -p22 or if you want a range do -p2000-6000 or osmething, and if you want all ports just do a dash to make it simple -p-

[sick lance]

So nmap would assume it was the ip

[chilly veldt]

Ah, in that way yeah

[loud marlin]

all ports is -p- if you do -p nmap expect port number or range

[rapid merlin]

hi everyone

[sonic dust]

has anyone else had their network vpn files download with nothing in it?

im re doing wreath and ive had issues with it all day

[boreal scarab]

This is safe, right?

[glass nest]

Just wait a solid 2 mins if you reg-gen it

[boreal scarab]

@glass nest got a bottle you can put on your pizza

[molten sky]

does that stuff even go bad

or does it just get weaker

idek

[glass nest]

It 'matures' 😄

[molten sky]

never had a bottle expire lol

[boreal scarab]

Dunno, don't feel like testing a 15 year old thing

[sonic dust]

still nothing

[glass nest]

@blazing granite You know everything about aged liquids. Whaddya reckon? 15yr old sauce that has Anchovies as a main ingredient?

Exec - Tried a different server?

[sonic dust]

regular thm vpn is fine

[sonic dust]

i just switched from .85 to .57

[buoyant tree]

should i try ice cooling a cpu

[glass nest]

I mean when you re-gen the ovpn file?

[sonic dust]

so leave switch ips then regen?

[iron salmon]

i could not connect today beats me why...

[sonic dust]

to wreath?

[iron salmon]

no in general its not conecting from my machine

[sonic dust]

interesting

[glass nest]

Hmm.

Maybe drop a note in #site-support

[polar spoke]

No, not without proper protection

[iron salmon]

got a new config but that one is totaly dead the old one is worky but at the end its a fatal error

[sonic dust]

ill be damned

[glass nest]

there we go, might be something dodgy happening in the background.

It's a shame, cos the wreath network is 'lit' (as the kids say)

[iron salmon]

so it might not be me having the stupid this time

[sonic dust]

i did enjoy it the first time i did it

that was 2 years ago of sorts

[glass nest]

Has a staff member replied in site-support?

[buoyant tree]

gona try with a plastic wrapper

CPU's at 60 C atm

lets see how low it goes

[naive violet]

You're going to kill it

[polar spoke]

Subambient cooling is not suggested without taking care of condensation risks

[loud marlin]

dry ice 🙂

[blazing granite]

Personally I don't know any sauce that old. Beverages are different, because chemical processes, alcohol, acidity, etc help to keep the beverage fit for human consumption

[molten sky]

dry ice moist board

[loud marlin]

nop. dry ice is co2

[polar spoke]

Dry ice is subambient

So… you’ll get condensation

In more places than you might think

Including inside the socket

[buoyant tree]

hmm

whats a fun way to cool a cpu

[molten sky]

dry ice

[glass nest]

I wanna use the word 'subambient' in everyday conversation

[loud marlin]

hmm... that didn't know. since we make dry ice from co2 only...

[polar spoke]

Right but the ice isn’t the source of the moisture

The water in the air will condense onto a surface with a temperature lower than the ambient air temperature

[molten sky]

cold air holds less moisture than hot air, air cools, moisture leaves air (and goes onto component)

[polar spoke]

Like on the outside of a cold drink

[loud marlin]

that might be the case yea

[polar spoke]

This is a serious problem when using LN2 or other very cold coolants for CPUs

Anything with any access to air that will get cold, will get wet

Normally you would fill air pockets and voids like the socket with dielectric grease or rubber clay/eraser

And then plaster the rest of the area around it in similar

[buoyant tree]

how do you even know all this

[glass nest]

Part chicken, part man. no-one can know what he truly knows.

[loud marlin]

well... he develop hashcat... or so

[buoyant tree]

I don't think hashcat had cooling in mind

[loud marlin]

gpu cooling 🙂

[glass nest]

I'm sure it did after a few GPUs burnt out 😄

[buoyant tree]

yea but not thinking of ways to hypercool something

[molten sky]

i asked the opposite, lol

that's why it's relative humidity after all

hotter air holds more water than colder air

that's why your weather app has a dew point

[buoyant tree]

hmm

also Verum did u write Windex ur self

or with AI

[molten sky]

also why people get dried tf out in the winter

[buoyant tree]

the error handling doesn't seem a lot human for a single person making it

[molten sky]

is i

used gpt as a reference for a niche problem here and there but nothing monolithic

[buoyant tree]

oh k

[glass nest]

I thought Windex was a glass cleaning product

[polar spoke]

I have approximate knowledge of many things 🙂

[buoyant tree]

the error handling just seems AI type

[buoyant tree]

pretty nice

[polar spoke]

Also quite a lot of hardware work haha

[devout palm]

Heya folks

[glass nest]

@polar spoke So tell us.. Whats so interesting on the other side of the road?

[buoyant tree]

u ever tried cooling a CPU with a frozen egg

[molten sky]

what file you looking at? curious what you're saying looks like it

[buoyant tree]

https://github.com/ppfeister/Windex/blob/master/modules/Debloat AppInst.ps1

[glass nest]

cook a tiny pancake on your CPU

[molten sky]

ahh the winget module

[buoyant tree]

yea

[devout palm]

why did the

chicken

ok ok sorry

[buoyant tree]

it doesn't seem like a normal human would think of that

[polar spoke]

I’ll let you know when I get there

[polar spoke]

Food tends not to work well 😛

[glass nest]

AIO - makes me smile that you think anyone on here or that develops tools like that are 'normal humans'

[buoyant tree]

eh I know they are beings at a higher plane of existence

[molten sky]

yeah there's a lot of trying to account for weird edge cases and such. the AppX module has a similar thing going on where a specific error message will cause it to recurse a few times before failure

[buoyant tree]

and have master privilege escalation to get there

[molten sky]

far from perfect tho. still a WIP

[buoyant tree]

yea, thought so also fun fact, never read powershell code in detail before

but its easy to understand

[molten sky]

i've had a painful week

[buoyant tree]

my condolences, although i wouldn't recommend going to Microsoft HQ to burn it down

[molten sky]

https://tenor.com/view/reading-sign-cant-stop-me-no-one-can-stop-me-gif-13921932

still gotta add a bunch of stuff to rip out telemetry

[buoyant tree]

the door can't stop me because I can't see

[molten sky]

technically still is

( they both clean windows )

[buoyant tree]

good idea

[molten sky]

considering a simple gui. but that's later. not before the services are all pruned and telemetry razed

haven't decided what to create it with though if i do

[chilly veldt]

Well I am stuck in the city, apparently my car got locked in🤣

[molten sky]

you mean your keys got locked in your car? or is that a typo of blocked in?

or like locked in the lot

[chilly veldt]

Locked in the lot

[molten sky]

ouch

[chilly veldt]

I parked in a parking basement, and the basement got locked

[molten sky]

is it one where you can just drive over the sidewalk or

ope

[split compass]

Tell the CISO you'll be performing an unscheduled security test of the lot's lock up mechanisms?

[chilly veldt]

So now I either take the train home, and back again, find someone I can sleep at in the city or pull an all nighter

Fun thing is

I have to be in school at 8 am

Guess when the store opens

[molten sky]

wya again? you're not with us around ny/nj are ya?

i kinda just thought you graduated already too

[chilly veldt]

Denmark

Lom

[gaunt lion]

hi all

[chilly veldt]

Lol

[molten sky]

yeah that's not very close

[chilly veldt]

And no, I still have till December 2025

[molten sky]

hola

[molten sky]

my condolences

[chilly veldt]

But tomorrow is picture day for the class I just graduated

Cause we just finished that final exam and finished half of my education

[split compass]

grumbles at spotify api dashboard

[molten sky]

ya know what sucks

Edge

[chilly veldt]

Yes

[rapid merlin]

ASLR/NX bit.

[devout palm]

ROP!

[rapid merlin]

Good old SEHOP.

Microsoft Windows Defender Exploit Guard is a masterpiece in its own right.

[devout palm]

yep

I think that's the only thing i like about microsoft

[rapid merlin]

I like many things from Microsoft, including Windows and Microsoft Learn (with its very extensive documentation).

[molten sky]

microsoft documentation is the worst thing i've ever experienced

idk is Learn is different

but my god is their normal stuff bad

[rapid merlin]

Literally anyone will tell you that Microsoft documentation related to their Windows stuff is the best. It's among the most extensive resources you can find (and also in general how it's formatted). There's also Sysinternals and their Windows Internals books.

I literally have no issues at all finding information on their website.

[molten sky]

lmao, no

[rapid merlin]

It's very smooth and extremely well organized.

[molten sky]

just finding wtf you're paying for is near impossible

[rapid merlin]

Then you are bad at retrieving information.

[devout palm]

It's worded clearly and visualized properly

[molten sky]

if you actually work with it it's the most difficult thing to navigate ever. just trying to find the difference between DFE P1 and DFE P2 is difficult, if you're trying to get actual info and not marketing stuff

if you're trying to find things like "what's this powershell command?" it's fine, but there are signifcant areas where they are lacking

[torpid ether]

https://m365maps.com/matrix.htm

[molten sky]

i use this all the time lol

great alternative tool

[torpid ether]

Haha it’s great.

[chilly veldt]

It's the same with all the AWS machines and their prices

There's a website for that

[molten sky]

I do wish they'd add one for individual tools though instead of just user licenses

like the aforementioned DFE license tiers

[torpid ether]

Agreed

[molten sky]

honestly though, AWS is fine. It's cluttered, but it's navigable. MS is just a mess

(i still like the third party tool for them tho)

[torpid ether]

Tbf AWS isn’t also trying to be an entire core productivity and business services suite like MS is

And I think MS is great for what it is.

[rapid merlin]

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api/exposed-apis-list?view=o365-worldwide

And you go from there, literally every link is interconnected.

[molten sky]

on the other hand, AWS builds out whole unrelated product lines and still makes the documentation somewhat useable

[rapid merlin]

It's quite nice when people know what they are doing. However, it's also very easy to mess things up due to the sheer complexity involved.

[molten sky]

still trying to find a grid of features to compare each tier

[shut hawk]

Are we talking EC2 instances?

[molten sky]

nah, X509 is trying to demonstrate how microsoft's documentation isn't horrid and i'm disagreeing

still can't find that grid

[shut hawk]

uhhh not what I was on about

[rapid merlin]

Defender for Endpoint Plan 1 capabilities
Defender for Endpoint Plan 1 includes the following capabilities:

Next-generation protection that includes industry-leading, robust antimalware and antivirus protection
Manual response actions, such as sending a file to quarantine, that your security team can take on devices or files when threats are detected
Attack surface reduction capabilities that harden devices, prevent zero-day attacks, and offer granular control over endpoint access and behaviors
Centralized configuration and management with the Microsoft Defender portal and integration with Microsoft Intune
Protection for a variety of platforms, including Windows, macOS, iOS, and Android devices
The following sections provide more details about these capabilities.

Defender for Endpoint Plan 2 capabilities
Defender for Endpoint uses the following combination of technology built into Windows 10 and Microsoft's robust cloud service:

Endpoint behavioral sensors: Embedded in Windows 10, these sensors collect and process behavioral signals from the operating system and send this sensor data to your private, isolated, cloud instance of Microsoft Defender for Endpoint.

Cloud security analytics: Leveraging big-data, device learning, and unique Microsoft optics across the Windows ecosystem, enterprise cloud products (such as Office 365), and online assets, behavioral signals are translated into insights, detections, and recommended responses to advanced threats.

Threat intelligence: Generated by Microsoft hunters, security teams, and augmented by threat intelligence provided by partners, threat intelligence enables Defender for Endpoint to identify attacker tools, techniques, and procedures, and generate alerts when they are observed in collected sensor data.

And from that same website, you can either click on the videos or follow the sublinks.

[molten sky]

(@rapid merlin btw hope you're not taking this as hostile)

[rapid merlin]

I don't perceive any hostility. It seems like a normal conversation. It's a product after all.

If they ever mess things up, I will change my stance and find something else.

[molten sky]

Just making sure. Text can be difficult to judge sometimes.

[rapid merlin]

Of course, I mean it's very hard for me to get mad or feel affected by insults or anything else. I consider myself extremely open-minded and good at compartimentalization (I also don't care so that helps).

[molten sky]

which tab was this?

[rapid merlin]

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1?view=o365-

[molten sky]

(I also don't care so that helps)
100% this

[rapid merlin]

https://go.microsoft.com/fwlink/p/?linkid=2154037

Right under the video.

[rapid merlin]

On a side note, it makes me much happier in general.

[molten sky]

i still see literally no matrix anywhere

i see disassociated lists

but no matrix

[rapid merlin]

I just read the texts and visualized it from first glance.

[molten sky]

every product ever that has multiple tiers of licensing has a feature matrix to compare licenses

[torpid ether]

https://m365maps.com/files/Microsoft-Defender-for-Endpoint.htm

[molten sky]

oh my god they made one

[torpid ether]

M365 Maps has a bunch of different products in there.

[molten sky]

m365maps is one of my most used ms bookmarks and i didn't have that one saved

[rapid merlin]

You also have this : https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance

Which licenses provide the rights for users to benefit from the service?

[torpid ether]

You should perhaps bookmark the main page. :p

[molten sky]

but yeah Microsoft not having a matrix to compare makes them the black sheep here, and is pretty poor

being used to the lack of documentation doesn't make it good documentation

[molten sky]

my god that's a long page lol

[molten sky]

it's like stackoverflow -- homepage doesn't exist

interesting that they have a specific link for Australia

[rapid merlin]

Yes quite extensive.

[boreal scarab]

Broccoli Beer Cheese Soup

[bold dawn]

I actually agree with this

[boreal scarab]

@sand trench @mossy river

[rapid merlin]

I also dabble with exploit development, so I'm familiar with documents like that for the most part. I read a lot of whitepapers and can read quickly so it's fine.

[bold dawn]

I usually enjoy the microsoft products we use and manage

[mossy river]

yuck

[rapid merlin]

They are very professional and generally very robust.

[sand trench]

the beer is questionable.... the cheese is good

[boreal scarab]

Wym yuck?

[bold dawn]

O365 management is also very easy, and customizable

[boreal scarab]

There's white wine in it too!

[sand trench]

why must we taint everyting with ww2 era missile fuel????

[devout palm]

Broccoli beer???

[rapid merlin]

I don't have much experience in Office 365, but I agree based on what I've encountered so far.

[boreal scarab]

It sounds sooo good! We haven't tried it yet, but it smells amazing

[boreal scarab]

Broccoli beer

[sand trench]

anyways back to watching a kids show shadow did not get the chance to see as a kid.... avatar the last airbender

[torpid ether]

Looks dope, I’m jealous.

[blazing granite]

how was the wine?

[torpid ether]

Beer cheese is soo banger.

[boreal scarab]

I'll let ya know how it tastes, along with letting Rex know too lol

[boreal scarab]

Bubbly

Like, very bubbly lol

Good, but I'm still a sucker for Pinot Noir. We put that wine in the broccoli beer cheese soup. Along with Shiner Bock beer. Still have yet to taste it lol

It's sitting on the stove on low

[devout palm]

It's in my "Try it before you die list"

I want to try it so badly

[blazing granite]

Did you buy a sparkling instead of the gruner veltliner one?

[obsidian steppe]

hello chat

[boreal scarab]

I bought that same one I showed you, 1 sec

[torpid ether]

If only there was a shorter, more well established term for such a list.

[blazing granite]

because you said bubbly 😂

[boreal scarab]

@blazing granite

[devout palm]

TIBUD list

[blazing granite]

did you tasted it or just put it all in the soup?

[devout palm]

Of course he tasted it

[boreal scarab]

I tasted it, poured 1 cup in the soup lol

[blazing granite]

I love gruner veltliner

[torpid ether]

I’m now imagining a soup made with 750ml of wine in it

[boreal scarab]

Had a glass, that's how I knew it was bubbly, like the finish was bubbly

[devout palm]

That's a mandatory thing while cooking :p

[boreal scarab]

I wouldn't complain

[bold dawn]

I was so confused what it was, and I just realized you meant bucket list lol

[sonic dust]

how do i add my ejpt cert

[devout palm]

That's not a soup anymore

[bold dawn]

i would

[boreal scarab]

There's beer in it. Would you still complain?

[devout palm]

Broccoli flavored wine

[bold dawn]

yes

[boreal scarab]

Broccoli CHEESE flavored wine

[devout palm]

We got the feedback! Time to move

[chilly veldt]

Ask a mod

[bold dawn]

i aint no froo froo cowboy, i like me some whsikey

[devout palm]

It's whisky, duh.

[sonic dust]

MODDDSSSS i have my cert i can shoe proof

[boreal scarab]

Shoe proof

[sonic dust]

yus

[boreal scarab]

https://tenor.com/view/shoe-nike-design-shoe-spin-gif-17074872

There's my shoe proof.

[blazing granite]

depends on the dish and the quantity you're making

[devout palm]

Yo

Don't post your personal info here, mate

[boreal scarab]

Prob not wanna show publicly

[torpid ether]

Self doxxing

lol

[sonic dust]

its the internet if my name isnt on there then ive lived under a rock

[blazing granite]

@boreal scarab you like PN so much you should try Coq au vin

[sonic dust]

im 99% sure all of our info liek names and such is on the internet

[devout palm]

That's a weird approach

[boreal scarab]

https://tenor.com/view/spongebob-patrick-star-notes-noted-gif-26232003

[sonic dust]

but its true

[rapid merlin]

Don't play that game.

[sonic dust]

what do you think fb netflix instagram etc is doing with the sign up info

[rapid merlin]

The premise and statement are flawed though.

[sonic dust]

didnt apple just get sued for selling data?

[devout palm]

Just because it's on the internet doesn't imply you should reduce the time attackers spend

[sonic dust]

also your birth certs are public knowledge too...

[devout palm]

It's all about time

[blazing granite]

it's chicken braised with wine, it's a traditional dish from France and the wine is PN 🙂

[rapid merlin]

With that kind of thinking, why bother protecting yourself?

[sonic dust]

exactly

[devout palm]

And you're making your data more accessible

[rapid merlin]

So, you're either simplifying the attacker's job tremendously or acting carelessly by throwing your information around like an idiot.

You are not targetted remember.

[devout palm]

Okay, don't eat. You will starve eventually

[blazing granite]

@boreal scarab the dish is made usually with PN from bourgogne, but you can use a local PN if you like

[kindred plover]

newbie made it 😎

[rapid merlin]

@devout palm On a side note, do you think you will pass (or at least try it) the OSED?

[devout palm]

With a proper study schedule, why not?

[rapid merlin]

I can't get a voucher (they are always sold out).

[rapid merlin]

It's 100% doable.

[devout palm]

I don't know its value in the job market though

[rapid merlin]

I'm considering pursuing it in college, but honestly, it's quite expensive at this stage. Plus, the programs are sold out, and the field itself has limited marketability. It's very niche.

It's nice to have though, really makes you stand out.

[devout palm]

Get your company to pay it... Simple

[rapid merlin]

Pretty much.

It seems like everyone has the OSCP certification.

Time to get something harder (mid to expert level).

[shut hawk]

When you say college, is that UK or US college?

[rapid merlin]

US university.

[shut hawk]

Cool

[devout palm]

You got this

[rapid merlin]

I appreciate that. I never back down, but I also tend to avoid taking certifications that most people pursue. Even though I'm still in college, I always opt for the hardest challenges because not only is it elite, but it's also more tightly knit and prestigious.

And of course, goal is to stand out.

[rapid merlin]

You?

[devout palm]

Well, yeah it is. I like complex and hard stuff

[rapid merlin]

That's the true hacker spirit.

[shut hawk]

Just be careful about going for advanced certs without getting the industry experience

[shut hawk]

UK

[devout palm]

Revised my blog.. Now going to set up a sinkhole DNS

And prepare a CV

[shut hawk]

Nice!

[rapid merlin]

I understand. I plan to pursue it to distinguish myself and to have a certification that demonstrates I've achieved certain skills or accomplishments, even though I haven't attempted the OSCP yet. I've been extensively researching it since high school (like the beginning of high school).

[boreal scarab]

@blazing granite @torpid ether it's quite good, not creamy, more.. soupy. But 100% would have it again. Prob tweak the recipe a bit to make it more creamy

[rapid merlin]

I will probably be extremely overqualified for entry-level cybersecurity jobs though (which is not an issue).

[shut hawk]

Yup, exactly

[devout palm]

Remember this. Sometimes they don't care about certifications

[rapid merlin]

I also do it out of pure passion.

[rapid merlin]

I only pursue the knowledge at the end of the day.

[shut hawk]

Well you say that, but it might be a lot harder

[devout palm]

Definitely will be harder... But no worries at all

[blazing granite]

did you paring with the gruner or drink PN? 😂

[covert salmon]

if you have no experience, you won't be

[rapid merlin]

Perhaps, I am actually sure. It's just that I feel like what I'm doing at the moment might be a bit excessive and next level considering where I'm currently at in my journey. I do have confidence in my cybersecurity skills though, especially since I started delving into it when I was just 10 years old.

[covert salmon]

companies value experience over certs

[rapid merlin]

Knowledge is knowledge.

[shut hawk]

Experience beats theory

[devout palm]

But practice > theory

[shut hawk]

Because you are actually applying that knowledge

[devout palm]

Cyber security can't be only done with theory, IMO

[jagged moon]

I need osed too

[boreal scarab]

Oh, gruner. Good choice BTW, it pairs VERY nicely with the soup

[devout palm]

Go for it

[shut hawk]

Either way, good luck with your journey X5 - sounds like you got the passion for it so I'm sure you'll go far

[jagged moon]

Right after this one, probably

[devout palm]

Nice, you got OSEP and OSCP already

and you're preparing for..?

[boreal scarab]

#general message @jagged moon

[rapid merlin]

Having hands-on experience is definitely important, but companies also appreciate newcomers who can adapt, learn, and grow swiftly. I actively participate in HackTheBox challenges and have attracted the attention of recruiters who reached out to inquire about my interest.

Gaining professional experience requires prerequisite knowledge.

[devout palm]

OSWE*

[blazing granite]

Like I know something 😉 😂

[rapid merlin]

Haha, I hope so, thanks you too.

[shut hawk]

I don't disagree, I'm just saying that a lot of cyber roles will be looking for people with work experience already - which is why it's quite difficult to break into the sector

[rapid merlin]

Sure, which is why I do my best to stand out.

[covert salmon]

epistemic humility is a virtue..

[boreal scarab]

https://tenor.com/view/a-little-bit-michael-che-saturday-night-live-lil-bit-a-bit-gif-15024532712384690663

[devout palm]

I wish i could land my first cyber related job

[rapid merlin]

In high school, I began coding with C and Assembly languages. I primarily focus on exploit development whenever I get the chance. Recently, I spent an entire month fully immersed in hackthebox finishing most of the challenges and machines up to the hard level. Once I finish what I am doing right now, I'll likely move on to the insane ones.

I have like a whole backlog of 6 years of writeups.

[shut hawk]

Nice 🙂

[rapid merlin]

I think I am reasonably competent.

[shut hawk]

You should also network a lot, really important in this field

[rapid merlin]

Yes definitely, that's right.

I still need to work harder though.

[shut hawk]

Don't burn yourself out

[rapid merlin]

Still trash where I am at right now.

[devout palm]

I also started when i was young. Mine begins with C++ then cyber security stuff

[rapid merlin]

Then you are already ahead.

[devout palm]

It's definitely not enough. I won't be satisfied

[rapid merlin]

Yes, certainly. But considering I've been working for about 12 hours a day, most of the time, I believe I'm alright.

[rapid merlin]

Same thing for me, I am not even close to be called a hacker.

[devout palm]

You alright, mate?

:p

[jagged moon]

Famous last words

[rapid merlin]

I live and breathe information security haha.

[devout palm]

I can observe that

[rapid merlin]

I just really like this thing.

I don't play video games or anything like that, this is my entertainment haha.

Which is odd for most.

[devout palm]

Being odd sucks

[rapid merlin]

You are unique when you are odd.

[jagged moon]

I can't even

[rapid merlin]

I don't pay much attention to most people's opinions. What matters to me is that what I'm doing right now brings me immense happiness and productivity, which will ultimately lead to even greater happiness in the future. Many people can't understand that.

[shut hawk]

pls get at least 8 hours of sleep

[rapid merlin]

I do around 7-8 in general.

[devout palm]

What video are you watching while having your favorite breakfast?

[jagged moon]

Nyan cat 20hrs usually

[rapid merlin]

Generally, the news or I read articles.

Sometimes I like watching liveoverflow and things like that.

[shut hawk]

Long brekfast

[devout palm]

As i assumed

[devout palm]

Boo. Old

[shut hawk]

Reading the news depresses me

[rapid merlin]

I am legit very old school despite my age.

[blazing granite]

Odd or not, just be yourself, everybody else is already taken 😉

[rapid merlin]

If you were to see my Linux/Windows setup, you'd probably wonder, "What on earth is this?"

It's the most basic thing on earth.

[spiral sierra]

basically

whos good at hacking

[rapid merlin]

Not me, not yet.

[spiral sierra]

i need a hacker

[devout palm]

Fluff

[shut hawk]

sup

[devout palm]

@jagged moon

[shut hawk]

fluff is the elite haxxor

[rapid merlin]

Seems like someone is going to get banned.

[hazy jay]

true

[spiral sierra]

shit

[devout palm]

Check deleted messages

[spiral sierra]

so

idc

[jagged moon]

U know it's illegal, right?

[rapid merlin]

@devout palm Linux or Windows?

[devout palm]

Seriously?

[rapid merlin]

Yes.

[spiral sierra]

didnt clock

[devout palm]

Of course templeos

[spiral sierra]

k bye

[jagged moon]

Ciao

[spiral sierra]

kinda uselss to my prblem

[rapid merlin]

The best sound design and graphic design ever.

[shut hawk]

Sorry but that is obviously Biber OS

[rapid merlin]

I am not at that level yet.

[shut hawk]

none of us are

[boreal scarab]

I hate the people who just search for "hack" and like "Yah this one, let me ask for illegal shit"

[sonic dust]

wreath access file still broken

4 hours and still empty vpn file

[jagged moon]

Pretty sure most of them get scammed out of money eventually when they find something

[boreal scarab]

Not to be the one to say it, but I will.

Karma's a bitch.

[sonic dust]

flufff can you put certs in my channel profile?

[jagged moon]

Dm

[civic siren]

IM GETTING DOXED RN FOR NOTHING I NEED HELP PLEASE SOMEONE

[hot cairn]

@boreal scarab 👀

[civic siren]

^^^^^^^^

PLEASE IM BEGGING

[hot cairn]

Just be careful of what you share on the internet tbh

[boreal scarab]

👀

[covert salmon]

I've seen multiple people use their irl legal names as unchangeable nicknames in mmorpgs

some people could really teach a class on how to have the worst opsec possible

I couldn't put that much pii on the internet if I tried

[boreal scarab]

Whatcha up to?

[hot cairn]

Workin, u?

Gotta try and finish up some homelab stuff too

Stupid monitoring and observability being a PITA

SNMP is cursed

[civic siren]

wowww yall jus gon lemme get doxxed,

[boreal scarab]

Just finished dinner, so chilling right now. Just had the Broccoli beer cheese soup

[boreal scarab]

Nothing we can do 🤷‍♂️

[hot cairn]

Thats a weird ass combo

[boreal scarab]

This is a discord for https://www.tryhackme.com , not an unethical retaliation discord.

[mossy river]

It’s not like we can erase the information you posted

[civic siren]

i didnt post it tho

[mossy river]

@hot cairn @boreal scarab ping a moderator please

[mossy river]

Neither did we

[civic siren]

they got my shi bc the com my discord acc

they*

[mossy river]

Com?

[sonic dust]

i mean ur name is nolan

so

[rapid merlin]

Script kiddies

[boreal scarab]

Quite excellent. Wine, beer, cheese, broccoli

[hot cairn]

Wb

bread + cheese + water in microwave

[boreal scarab]

Hear me out, change that water to beer

[civic siren]

brute

[mossy river]

Homie you’re not making sense

And if they brute forced your account

Research how to make a secure password

[hot cairn]

2fa ^^

Download a 2fa app on your phone and secure accounts with that

[devout palm]

woaa

Nice

[hot cairn]

PiHole is amazing

[devout palm]

😂

[blazing granite]

and don't use a microwave 😂

[boreal scarab]

I've been asked to remove that post. Still in my accomplishment.

[hot cairn]

Microwave best for cooking though

steak even

[blazing granite]

microwave is not for cooking any kind of good meal

[hot cairn]

Microwaved Wagyu ❤️

[blazing granite]

I love Wagyu, but not way I would cook a prime piece of Wagyu on the microwave that's a crime. Fire a grill. I don't like microwaves, but I was born in Argentina so BBQ is in my blood 🙂

[devout palm]

Building home lab can be considered as a project, right?

[hot cairn]

I mean yes

until it turns into a 2nd job and home-prod

[rapid merlin]

Yes.

It's actually recommended.

But only decent ones.

[hot cairn]

i mean its hard to not learn from setting up a lab

[rapid merlin]

Yes, only boast about it if it's genuinely something significant that you're proud of and, most importantly, something from which you've learned a great deal.

All home labs are projects (an you can learn from them), but ultimately, it's the complexity that truly defines them.

[buoyant tree]

arghh

pihole stopped showing up in gui

[hot cairn]

depends on where you are honestly

if you dont know much , learning out how to setup and configure a hypervisor/linux system can be valueable

i wouldnt pitch that as "homelab" more so sysadmin/systems skills, but still

[buoyant tree]

Emma can boast about it all it want's, it's setup is probably one of the most advanced homelab's in the world

[hot cairn]

not most advanced, but i am insane

BGP at home is fun

[rapid merlin]

I have to admit, my perspective is quite different from most people. As a true perfectionist, if I boast about a home lab project or something similar, it absolutely has to be the most incredible thing I've ever created and even then it depends.

[devout palm]

Literally, my CV is full of void

I want to fill

[hot cairn]

yeah fair

[devout palm]

I don't have any prior experience

[hot cairn]

I could rant about my homelab for hours kekw

[rapid merlin]

Design exceptionally impressive projects that are truly mind boggling.

[buoyant tree]

like a rick roll entirely in the cli in rust

[rapid merlin]

I'm not suggesting that you shouldn't pursue it. I simply shared my perspective and how I perceive such a thing.

[devout palm]

For a SOC Analyst role, what can i do?

[hot cairn]

setup security tools at home

get your own logs and look at them

[buoyant tree]

yea

[hot cairn]

ELK stack, etc

[devout palm]

How am i going to document this?

[rapid merlin]

Generally, your direction matters, but think about delving into malware reverse engineering, even though it's considered tier 3. It's vital to tell apart between harmless and genuinely harmful elements. Explore MITRE attack techniques linked to APTs and expand your understanding from there. Also, get to know how Sysinternals tools, especially those for Windows, work well. While learning the software might be simple, distinguishing between malicious and legitimate aspects is the real challenge (most people fail there).

Mastering the fundamentals is essential because you don't want to simply be a script kiddie in the truest sense of the word.

You'll also become more valuable overall because people will appreciate your expertise when you can analyze why a particular process behaves in a certain way and correlate it to attacks that occurred some time ago. Being able to delve into these details enhances your credibility and worth.

[devout palm]

Yes i want to do that

But i suck at describing myself

[rapid merlin]

Do you mean reports and similar documents?

[devout palm]

yes

like CV stuff

[crude stump]

If your a soc analyst and they need a written report. How detail should they usually be?

[buoyant tree]

ah fixed pihole's dashboard

[bold dawn]

is it a good sign when your boss says “do you have any clones of you that we can hire?”?

[devout palm]

I guess so

[bold dawn]

as detailed as you can be

[rapid merlin]

You can practice this quite easily; it's primarily about your mindset. You aim to be clear while also conveying precisely what you intend to accomplish. For example, with a pentest report, you strive to be thorough yet coherent and easily understandable. It's not solely about overwhelming others with technical details (X, Y, Z), but rather ensuring that someone without an IT background can still follow along, although they might encounter problems while understanding the technical sections obviously.

It's all about being clear and very direct.

[bold dawn]

in any report in this field, give enough detail where it makes sense to anyone, tech savvy or not. Also make sure every detail is there, so there is nothing they need to find for themselves

[rapid merlin]

You designate your objective and consistently ask yourself, "Does this report effectively fulfill its purpose?"

[rapid merlin]

Yes.

[rapid merlin]

Very detailed.

[devout palm]

I want to be a pentester, but first i need experience

I'm currently aiming for SOC Analyst, system admin jobs

[bold dawn]

For example, when I’ve done pentests, I like to be detailed enough where the client could replicate the exact attack, with no experience

As well as I give them fixes, and how to implement the fixes

[crude stump]

Makes sense. Especially if you’re sharing your findings to the public to educate them

[bold dawn]

Also explaining the dangers of what is found, what harm could come of it, and why it is rated as critical as it is

[crude stump]

If your aloud of course

[rapid merlin]

Practice capture the flag challenges alongside studying real-world penetration testing techniques like XSS, XXE, SSRF, XSRF, etc. Keep the focus on learning rather than overly gamifying the process.

I engage in HackTheBox frequently, but I find that it's heavily gamified.

[bold dawn]

Do portswigger, and practice writing reports as if they are pentests

[rapid merlin]

It's good to learn but it's very much a puzzle game.

[rapid merlin]

Definitely portswigger, it's good.

[bold dawn]

and even your CTFs, practice report writing

[devout palm]

I think I'll just post this pi-hole thing on my linkedin. I won't put it in my resume as i haven't done anything hard. Disabled DHCP and set a static IP then ran auto installer

[rapid merlin]

Yes, I agree.

[bold dawn]

now that’s more for web usually, your best bet for network would be focusing in AD, and general pivoting within a network

[devout palm]

But otherwise, CV is empty

[rapid merlin]

Active Directory (AD) is a valuable skill to learn. I always recommend to those genuinely interested to begin with the hard-medium machines on HackTheBox or dive directly into Active Directory challenges on platforms like TryHackMe or do it yourself (vm's).

[bold dawn]

create a homelab, and practice attacking the infrastructure. Try bypassing firewalls, antiviruses, etc

[rapid merlin]

Totally agree.

[crude stump]

And how do I go about making a homelab

[bold dawn]

The best part of practicing on home projects, is you can then try and implement the fix, and understand how everything works

[rapid merlin]

Exact, people should really strive for that.

If it's too complicate, then figure it out and try again.

[bold dawn]

yeah, fixing the issue is a valuable skill for a pentester as well

[rapid merlin]

That's why most people hate the AD part in OSCP.

[rapid merlin]

1000%.

[devout palm]

I don't think my 8 GB mac can run more than 2 VMs 😂

[bold dawn]

pentesters are usually consultants. Our jobs are to test for vulnerabilities, and educate the client on our findings, and best practices to improve

[rapid merlin]

I worked on 4-6 gb for ram for years before I got my new computer (didn't care to change until now).

[crude stump]

Anyone?

[buoyant tree]

just add ur thm pathway certs, seen people gloating a lot with them

[mint pier]

there's a good number of sites out there that give tips and walkthroughs for this, varying between getting your hands on some gear to setting up virtual networks. It really depends what you can afford.

[bold dawn]

and of course compliance

[rapid merlin]

Find a project and try to replicate or desing something new yourself.

[bold dawn]

about to shower, if you DM me I’ll circle back and send you a video for Active Directory

[crude stump]

I see

[rapid merlin]

But most of the time, the equipment is rarely the issue.

[crude stump]

Ight

[rapid merlin]

If you really want to make it work, you can easily do so.

[devout palm]

How am i supposed to run a home lab then?

I have no devices

[crude stump]

You said you have a computer

[bold dawn]

For a web server, you can run very little

for an AD, you’ll struggle a bit

[devout palm]

For simple things ok. But AD

Windows eats at least 4 GB of ram

[mint pier]

virtualizin' baby!

Here's a good overview that might get you thinking in the right direction about what you want to do. @crude stump you might be interested as well

https://resources.infosecinstitute.com/topics/penetration-testing/how-to-make-your-own-penetration-testing-lab/

[bold dawn]

BUT THM has some AD stuff that’s good

[rapid merlin]

You can achieve it on the cloud, simulate it logically, and then replicate it using frameworks that provide direct output. While you may not be able to run 1000 machines simultaneously, you can simulate such behavior by carefully laying them out if you understand precisely how they work. Most people with crazy homelabs have dedicated hardware so don't compare yourself to them.

I literally learned everything so far on 4-6 gb of ram.

Especially these days with TryHackMe and so on.

[devout palm]

I was doing rooms on tryhackme with my old ass phone

Using nethunter

[rapid merlin]

There you go.

I also used GNS3 to simulate routers and so on.

[rapid bobcat]

https://tenor.com/view/hi-chat-gif-20883935

[crude stump]

Oo thanks

[twin ridge]

Gave +1 Rep to @mint pier (current: #1993 - 1)

[devout palm]

Ok. I'll just go for a detailed research and try the most efficient way

I really want to do it

[rapid merlin]

Before, I used to personally examine each machine, monitor its performance, and analyze its output for a certain period. Then, I would duplicate the process for numerous other machines using a Python script. This allowed me to generate synthetic logs for around 1000 hypothetical machines. Although this approach has its limitations, I never had the chance to test it in a real-world scenario (that was the only way for me).

[devout palm]

I can actually make something like that. A server that monitors all of the machines that are connected to it

[rapid merlin]

Hi.

[rapid merlin]

Yes that's good.

[devout palm]

I'll make a server and client in python

[rapid merlin]

Read about NOC's.

[molten sky]

send help

[devout palm]

I can actually use my phone

as a test device

termux

[rapid merlin]

You can look into different frameworks that relate to these ideas and see how they understand them. If you're interested in going deeper, you can also explore how these concepts are used in data centers.

[devout palm]

and create a VM on my mac

[rapid merlin]

Yes or you can use TryHackMe machines indirectly to apply that knowledge.

[devout palm]

3 Devices, enough

[rapid merlin]

Yes.

[devout palm]

Thank yall for the support

You're really pushing me to it

[rapid merlin]

I did that for a while on HackTheBox and even TryHackMe when I get domain admin.

I would stay there and just check how everything is setup.

I would take notes and modify this and that.

I would mentally map out the entire network and ask myself how I would navigate to locate X APT if they were present in the system.

[devout palm]

Ok, so while setting up the pi-hole. I thought of /etc/hosts . Can't we do the small part of pi-hole with that?

[rapid merlin]

Even my approach to crack these machines, is full stealth. Since I would always go back and check the logs at the end once I get domain admin.

[devout palm]

I wrote my blog about this:

Why don't we just use /etc/hosts ? Well, we can also point known malicious/ad domains to 127.0.0.1 (localhost) so that we don't connect to the real server. But our list is huge. And this method is limited to only one device. If you want to block a few sites, then you can go for it.

[rapid merlin]

No clue what that is but you can easily play with that I am sure.

[crude stump]

a hacking tool im pretty sure

[devout palm]

No

[bold dawn]

i’ve heard pi-hole a lot recently, no clue what it is

[devout palm]

It's a file to point domains to IP addresses locally

[bold dawn]

comes up a lot out of nowhere

[rapid merlin]

Same I am rather clueless.

[devout palm]

Oh pi-hole

yeah

[crude stump]

derogatory ah name

[bold dawn]

lol

[devout palm]

Basically, it is configured to intentionally return incorrect or non-routable IP addresses for specific domain names. The purpose of it is to redirect or block access to certain websites or services by preventing the resolution of their domain names to valid IP addresses.

Just like a black hole

[crude stump]

except its a pi hole

[bold dawn]

him, is it for security purposes? or for attacker purposes?

i can’t really tell lol

[devout palm]

You can block ads

[rapid merlin]

@devout palm Just remember a skilled hacker isn't held back by hardware limitations. They find clever ways to make the most of what they have, maximizing their learning potential.

[crude stump]

if its blocks certain ips wouldnt it be security?

[rapid merlin]

Even with a basic setup, I can still do what I need to do without any problems because I can adapt. I'm not a hacker yet, but I'm working towards it.

[devout palm]

It doesn't block certain IPs

[crude stump]

websites

[devout palm]

It points domain to the void

[crude stump]

oh

[devout palm]

So that you can't access that domain

[rapid merlin]

It's a DNS sinkhole seems like.

[bold dawn]

yeah, but could also be used for attacking availability possibly? Unless its just a weird firewall

ohhhhh

[devout palm]

Also used to log DNS requests

And monitor

[rapid merlin]

It's actually interesting it blocks unwanted content without installing any additional software on the client side.

[crude stump]

thats cool

[devout palm]

That's really cool

Should i put it in my resume? 😂

I'm so clueless

[rapid merlin]

If you truly get how it works and have genuinely learned from it, try presenting it in a different format.

[devout palm]

I can speak about it

I can talk about DNS, networking and stuff

[rapid merlin]

Based on my brief understanding and a 2 minutes read on the topic, it seems one can can talk about network defense, traffic monitoring, tracking prevention and so on.

[crude stump]

definitly

put anything you know on your resume. the more stuff on there the more the recruiter will see you are passionate

[rapid merlin]

I understand/see how you can connect and relate it to SOC. You can also nuke it and then observe its behavior.

There is a 1000 different ways.

Just be careful though with nuking.

[devout palm]

It's running in a VM

[rapid merlin]

Make sure it's airgapped.

[devout palm]

I can spam with DNS requests, i guess? But that's useless

[rapid merlin]

Malware based attacks.

[devout palm]

Like, you need to find a unique domain

That's all

Pi-hole can't block it

[rapid merlin]

I mean try to have it stored locally and have the malware interact with it.

Something that can adapts dynamically to counter its defenses.

It's in the line of polymorphism but still.

It's very advanced but very impressive if you pull it off.

You will be 99% overqualified.

The idea is to just learn make the most out of it.

[devout palm]

Can i PM?

[rapid merlin]

Sure no need to ask.

[crude stump]

kinda a rule here

[rapid merlin]

But for me that doesn't apply.

Anyone can message me.

[crude stump]

ight

[boreal scarab]

Big brain move. Use BlackArch in a VM on a Arch Laptop

https://tenor.com/view/linux-chad-arch-arch-linux-chad-user-gif-21904978

[rapid merlin]

I still remember backtrack linux.

[molten sky]

when did backtrack end anyways

13?

damn. that would make it a decade

[rapid merlin]

Yes good old days.

I was so young back then.

BackTrack was really cool.

It's pretty much Kali Linux now.

The design was better though.

[blazing granite]

the good old day were the one of Slackware and XFree86 🙂

[molten sky]

shit

i just deleted a snapshot instead of restoring it

[blazing granite]

it happens even in the best families 😂

[crude stump]

aye

Notice anything new

[devout palm]

Congratz

[crude stump]

Yes sirr

Also heap did you complete the soc path

[blazing granite]

lechaim 😂

[devout palm]

Nope not yet

[crude stump]

I’m doing it right now. It’s really informative

[boreal scarab]

[crude stump]

Dannng that background is fire

[blazing granite]

I don't get all this hype for arch

[boreal scarab]

Default BlackArch

[crude stump]

Better then kalis lame default background

[sand trench]

people using black arch on here???

[boreal scarab]

Right terminal is my Arch laptop

[rapid merlin]

That's old, I think 1991.

[sand trench]

anyways it is meepity moopity meep moop to the beepity boopity beep boop sleep sloops times for shadows

[boreal scarab]

I'm making the big chad moe to run BlackArch for HTB stuff on my Arch Linux Laptop 😄

[rapid merlin]

I tried it once, and it was not convenient at all when something broke.

That's arch in general though.

[sand trench]

it is actually rare that arch breaks

and generally the things that can cause breakages is in the news section of archlinux.org

[rapid merlin]

No clue, I don't use Arch. I use Ubuntu.

[rapid merlin]

I have to read more about Arch to be honest, so I don't know.

[sand trench]

ah yes ubuntu... the distro that breaks every 4 years when you need to upgrade from one lts to another

[blazing granite]

Xfree86 1991, Slackware 1993, the good old days 🙂

[rapid merlin]

It's actually good and works very well.

I like it because the design is nice, it's fast and very smooth.

I don't bother with customization, I don't like that too much work for too little reward.

[sand trench]

that is how it starts

[rapid merlin]

I have been using Linux for ages though.

[crude stump]

I thought shadow was going to sleep

[sand trench]

same here ace

[rapid merlin]

I will check them out, looks interesting.

[sand trench]

but x509 threw a curveball

[rapid merlin]

It's very OG.

[crude stump]

😂

[blazing granite]

I had never had a break update with ubuntu

[sand trench]

shadow used ubuntu until around fall/autumn 2023

[rapid merlin]

That's interesting I haven't had any issues on my end. If I encounter any, it's likely my fault. Last time I had a kernel panic was in November 2015.

[sand trench]

from 2016

[buoyant tree]

Is it possible for ssh to disable its self and disable its port if no network is available for some time on ubuntu

[crude stump]

Can you download a bare metal Linux os on a crome book?

[sand trench]

technically started first using linux in 2014 but switched to it as main in 2016

used ubuntu for a long time

[rapid merlin]

Never had that happen to me.

[buoyant tree]

My dad turned on hidden network accidently on the router and now my RPI isn't letting me ssh in but other ports are working like plex, jellyfin

[sand trench]

then got into problems when the tools and stuffs shadow needed more then 3 ppas causing heavy breakage at lts updates

[rapid merlin]

My first distro was Gentoo.

Which I worked with for 3 years.

[sand trench]

that is not the brightest idea

update times on gentoo is pain

[rapid merlin]

It was fine and cool but I got bored.

So I switched to Ubuntu.

Since then never switched.

[sand trench]

still use what works for you

[buoyant tree]

Anybody got a idea, port 22 got closed now

[sand trench]

just for shadow ubuntu is nightmare

[devout palm]

Hey X509, can you give me the range of your age? ~ Just curious

[rapid merlin]

I don't touch anything else after I install the OS. I don't even change the wallpaper.

[rapid merlin]

16-22

[sand trench]

maybe it is not closed but just not open on the current subnet/ip range

[buoyant tree]

waddya mean

[sand trench]

you don't install a ton of hacking software????

[rapid merlin]

I do when I need to.

[devout palm]

Nah, he codes them all

:p

[rapid merlin]

I hope haha.

[sand trench]

then you could also run into the ppa nightmare zone

[rapid merlin]

I don't use kali linux for that specific reason.

Too many packages.

It's filled with junk.

I only install what I need.

[sand trench]

if you got more then around 3 ppas on ubuntu and update from 22.04 to 24-04 your chance of breakage is not insignificant

24.04

[rapid merlin]

No clue, I always clean my setup here and there.

[blazing granite]

Xfree86 there is no update since 2008, I think is finished, Slackware the last update was 2022 I used Slackware from 1993 to 1995 or 6 then move to Debian

[sand trench]

happened the first time from 16.04 to 18.04 for shadow.... happened again between 18.04 to 22.04

[rapid merlin]

I like checking old software.

[sand trench]

and then shadow called it quits

[wind lake]

How are the tryhackme homies doing

[sand trench]

procrastinating sleep

[rapid merlin]

I started with Gentoo then I dual booted Windows XP on the side.

Then moved to Windows 7 with Gentoo on the side.

[wind lake]

I would expect nothing less from you

[rapid merlin]

Until I switched to Ubuntu.

I tried Vista once, not that bad.

But the design is horrible.

[sand trench]

and this is not complaining about the crazies that ubuntus parrent company canonical are doing

[rapid merlin]

Doesn't affect me so I don't care about it.

[devout palm]

Hi bee

How's it going?

[blazing granite]

once upon the time Xfree86 was the main GUI in Linux.

[sand trench]

it did not affect you when they swapped from unity to gnome????

[rapid merlin]

I like Gnome.

[wind lake]

Goin okay hbu :)

[rapid merlin]

Gnome terminal is the best.

[sand trench]

same.... still it was a huge change that broke the workflow for tons of people

[rapid merlin]

The UI is very nice, I saw some pictures.

[sand trench]

then we have them messing up the sudo apt install command to search for snaps and install those instead if the exist

[rapid merlin]

I'm confident it did frustrate people.

[devout palm]

Nice! I'm taking a look at pi-hole

[sand trench]

which have created over 100+ steam bug reports for buggy in house canonical steam snap sent to steam/valve when they have nothing to do with said unofficial version

[buoyant tree]

arghh I hate headless setups in a non stable enviorment

[devout palm]

Interesting stuff

[molten sky]

@rapid merlin you've been roped into this convo quite a few times already, lol

[blazing granite]

vista not bad???? That was one of the worst sh*t ever the only worst than that is windows me 😂

[devout palm]

Windows 7 is Gold

[blazing granite]

very Unix like

[rapid merlin]

I hold some unusual views.

[sand trench]

or how firefox snap is not fully compatible with all addons or profile management that the .deb version supports( even though this is partly mozillas fault )

[rapid merlin]

It very nice.

[rapid merlin]

I only like it due to UAC but they still messed it up.

The design is genuinely trash though.

[sand trench]

eh vista was fine after a few service packs

[blazing granite]

I wouldn't say gold, but it was OK

[molten sky]

on the rare occasions i have to build an ubuntu desktop, that's the very first thing i do --- toss snap and install firefox from apt/flatpak

[rapid merlin]

Windows XP and Win7 will always remain the best.

[rapid merlin]

Yes.

[blazing granite]

I used all the versions of windows, since windows 2

[sand trench]

and now there is ubuntu professional edition ( icky )

[rapid merlin]

I was too young to experience anything before Windows XP and Vista.

[blazing granite]

XP started a bit shaky but got good after service pack 3

[rapid merlin]

Never tried it.

[rapid merlin]

Windows XP is genuinely awesome.

Very solid.

[sand trench]

arch linux fills the niche that windows 10 was supposed to fill

i.e a operating system that keeps updating and evolving forever without reinstalls

[molten sky]

didn't expect to read that today

[rapid merlin]

I never had any issues with Windows 10 personally.

[molten sky]

constantly here

[blazing granite]

yes, I never thought to see win10 and arch in the same sentence 😂

[rapid merlin]

You might want to clean up the OS here and there.

[sand trench]

well shadow could list issues with it but in this instance it is an issue with microsoft marketing windows 10 as the final version of windows that they were gonna update forever..... and then jumping ship and making windows 11

[rapid merlin]

Which is fine Windows 11 (I know people don't like it but who cares I do).

[molten sky]

just get ready --- next is gonna be Windows One

[sand trench]

yuup but that is true of basically everything...

[rapid merlin]

I really like what they did with Windows Defender Exploit Guard (fall update Windows 10).

[blazing granite]

I miss OS/2 🙂

[rapid merlin]

Good old IBM.

[sand trench]

no idea what that is as shadow has not used windows in ages

[rapid merlin]

If I am not wrong they coded it with Rexx, Object Rexx and so on.

[sand trench]

linux does currently 100% of what shadow needs

[rapid merlin]

Late 1980's.

[blazing granite]

SCO was pretty good too

[rapid merlin]

It's a masterpiece let's just say.

[rapid merlin]

If I am not wrong it's openserver right?

Or opendesktop something like that.

[sand trench]

wait is that the thingy that specially protects folders and files????

so only approved stuff can edit said folders and files???

[rapid merlin]

Windows Defender Exploit Guard is a new set of intrusion prevention capabilities that ships with the Windows 10 Fall Creators Update. The four components of Windows Defender Exploit Guard are designed to lock down the device against a wide variety of attack vectors and block behaviors commonly used in malware attacks, while enabling enterprises to balance their security risk and productivity requirements.

[sand trench]

jargon jargon jargon jargon

that paragraph tells you near nothing of the specifics of what it does

[blazing granite]

Santa Cruz Operation, Unix that doesn't exist any more 😂 I love OS and I tried a lot of them even before VMs, I had 3 HD and my PC has at least 4 or 5 OS 😂

[sand trench]

none.... you use the split view to solve that machine only as nothing else has access to fakebank

[rapid merlin]

They added ASR for example which blocked win32 imports from macro codes, office apps injecting into process, block obfuscated (powershell code, JS, VBScript and so on).

[rapid merlin]

That sums it up well (what I sent). It's a very complex software. You would need around 100 pages just to explain it properly and even then that's a big if.

[sand trench]

would prefer that

[rapid merlin]

The name is unique let's just say.

[sand trench]

is your terminal open into the desktop folder???

[rapid merlin]

https://www.microsoft.com/en-us/security/blog/2017/10/23/windows-defender-exploit-guard-reduce-the-attack-surface-against-next-generation-malware/

Not 100 pages but you will get the idea.

It's really next level and it's awesome.

[sand trench]

that would be why then

[rapid merlin]

At one point, I had Gentoo, Windows XP, and Windows 7 all installed simultaneously but that's about it (so 3 max).

[sand trench]

at one point shadow had windows 10 and linux in dualboot

bad idea

so many times windows broke the grub install

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 9, 2024, 1:44 AM

[sand trench]

@hollow turret can you follow those instructions and then post a picture

headdesk

shadow think they know what you did wrong now

[rapid merlin]

I'm not sure if I've been blessed by the Microsoft gods, but honestly, I haven't had any problems with Windows 10.

Actually with Windows in general since XP.

Either that or I know what I am doing (which I doubt to a certain level).

[sand trench]

dual boots generally work fine if you place the operating systems on different disks.... if you place everything on the same disk windows has a tendency to think some thing random and overwrite the boot partition when checking disks or trying to fix itself causing grub to go poof making you unable to boot into linux

[blazing granite]

I had dual boot for years win/linux never had an issue.

[blazing granite]

even microsoft attempt to enter the Unix world with Xenix

[sand trench]

see at the bottom middle of the screen kinda... there is thm attackbox and hack fake bank

click the hack fake bank

then redo the steps on there

[rapid merlin]

I like the name.

[sand trench]

i.e you started both the traget machine and attackbox

but this room specifically needs you to only use the target machine

[rapid merlin]

Interesting, that's only if you mess things up partition wise.

[sand trench]

or if you run chkdisk on windows

probably not.... think they maybe are just a bit weird if you are used to starting the attackbox and target machine

[rapid merlin]

Interesting.

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1626)

[sand trench]

no problem

[molten sky]

windows used to have a major issue where it'd just say fuck your dual boot and overwrite your second bootable partition or disk

not really prevalent now but it used to be

[rapid merlin]

That never happened to me, so that's interesting.

[buoyant tree]

anybody got a cheap router recommendation

[molten sky]

yeah it wasn't really consistent either, it was quite random

[sand trench]

your smartphone

[buoyant tree]

Need for a home network

[molten sky]

tplink archer lineup

[buoyant tree]

https://www.amazon.com/WiFi-6-Router-Gigabit-Wireless/dp/B08H8ZLKKK/r

seems good?

Gotta get a new router since my dad is scared about hackers hacking into his wifi

[blazing granite]

I guess I was lucky, even with lilo I've never had an issue, afterwards I used different HDDs

[buoyant tree]

So gotta get my own router

[buoyant tree]

Watched a facebook post about it and nothing on facebook is false

[sand trench]

hackers would not do that... only crackers would /joke

[buoyant tree]

eh mad af atm

Gotta set up my headless rpi AGAIN

[molten sky]

honestly can go cheaper probably. we use a bunch of the older AC1200 and AC1900 models. never had any issues with em that we didn't cause by doing dumb shit

[buoyant tree]

4 hours of work now

[buoyant tree]

mainly need fast lan speed

[blazing granite]

so just because you bought a new one won't get hacked 😂

[molten sky]

can often find the AC1200s for like 30 bucks, but they typically sell for 40 nowadays

[sand trench]

annoyed at how many people think hacking and hackers is basically straight up technological magic

[buoyant tree]

Nop just gonna get my own router and pay for my own internet

[buoyant tree]

IKR

[rapid merlin]

If someone genuinely wants to hack you, they will find a way. Don't overthink it unless you know precisely what you're doing.

[buoyant tree]

Told him that

[molten sky]

what's fast though? because unless you're exceeding gigabit net you're fine with most

[buoyant tree]

eh current google wifi that my dad got does like 40mb/s on lan

[sand trench]

40megabit/s or 40megabyte/s

[molten sky]

google wifi as in their APs or Google Fibre?

[buoyant tree]

megabytes

[buoyant tree]

AP

[sand trench]

because the difference there is staggering

[molten sky]

ahhhh

[rapid merlin]

You?

[molten sky]

yeah very different

8x actually

[sand trench]

40 megabyte to megabit

40 megabytes = 320 megabits

[molten sky]

but yeah 40MBps is only like 320Mbps. A gigabit router can handle that fine

idek anywhere that sells 10/100 hardware anymore

[sand trench]

also known as more then 3 times faster then shadows internet connection

[buoyant tree]

eh then TP link archer

Anybody here also tried buying routers in used/refurbished

[molten sky]

i don't like the idea

well, not from amazon i mean

(speaking in regards to used, not refurb)

[sand trench]

anyways really gotta sleep sloop to the beep boop for the meep moops now

[rapid merlin]

Goodbye

[molten sky]

@buoyant tree similar to the ones we have around the house / more similar