general

[dim dirge]

is something that can be use for ever. Thank you very much.

[chilly veldt]

I have done a little too much PowerShell scripting, so I should know a trick or two

[sick lance]

Moar DevSecOps rooms!

[chilly veldt]

Moar Infrastructure!

[crude stump]

Chatgpt🤮

[buoyant tree]

so now they using terminator to promote IaC

[chilly veldt]

If I haven't created it in 4 hours please ping me, then it's because I might have forgotten about it

Need to travel home and make food, just got off from working out

[dim dirge]

Sure, no problem. Thank you a lot. You should put it in github, if you get it to work. this can be a very powershell tool.

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 808)

[devout palm]

Here @earnest knot

$userAccounts = Get-WmiObject Win32_UserAccount | Where-Object { $_.Disabled -eq $false }


foreach ($user in $userAccounts) {
    $username = $user.Name

    $netUserOutput = net user $username 2>&1
    $comment = $netUserOutput | Where-Object { $_ -like "Comment*" } | ForEach-Object { $_.Substring(10).Trim() }

    Write-Output "Username: $username, Comment: $comment"
}

Fail ping

@dim dirge

[umbral bay]

DevSecOps Terminator says: I'll be Rollback.™️

[loud marlin]

that's how all things starts... soon there will be "clan" site, then will make gatherings, then some will bring guitar, and soon there will be revolution 🙂

[devout palm]

You are rude

[dim dirge]

what?! No, how?

[devout palm]

Is it foolish to try helping somebody?

[lone thistle]

"I'm not here to terminate, but to upgrade your security" 😄

[buoyant tree]

Hasta La Visa Baby

[devout palm]

huh?

[umbral bay]

"No problemo."

[devout palm]

Oh you were replying to "Try harder" message

[dim dirge]

I tried the script now, is giving me access denied I thing i will need administrator rights for it

I will try it with administrator and see if it works

[dim dirge]

yeah

[devout palm]

Sorry, thought that was directed to me

[umbral bay]

🤝

[twin ridge]

Gave +1 Rep to @devout palm (current: #28 - 273)

[devout palm]

Love the comics!

THM always makes it more entertainable

I think it's because of the net user command

Maybe because it doesn't allow you to take a look at other users

If it works for the same account, but not others.

Something with the script execution then

General perms to execute a script

[naive violet]

Do you know what it's being blocked by?

Execution policy is an easy fix etc

Ah no wmi access, rip

Looks like you'll need to script net user or use a different powershell cmdlet

Yeah it's using a different interface that needs privs

Scripting net user isn't thaaaaat bad

I mean you said it works as a DA

[devout palm]

It's working on my machine as well

[naive violet]

As a standard domain user?

[devout palm]

yes

[naive violet]

I already know you're running it as DA for it to work.

What user account are you running it as?

When it doesn't work

Can you be more specific?

[devout palm]

I had to do
Set-ExecutionPolicy RemoteSigned

[naive violet]

It's not that

That'd be a different error.

[dim dirge]

User name                    hacker
Full Name                    hacker
Comment
User's comment
Country/region code          000 (System Default)
Account active               Yes
Account expires              Never

Password last set            2/15/2024 12:49:06 PM
Password expires             3/28/2024 12:49:06 PM
Password changeable          2/16/2024 12:49:06 PM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   2/15/2024 4:44:19 PM

Logon hours allowed          All

Local Group Memberships      *Remote Desktop Users *Remote Management Use
                             *Users
Global Group memberships     *Domain Users
The command completed successfully.

this is the user

[devout palm]

No no

It's about WMI

[naive violet]

Hmm, interesting. Both domain users.
So evidently you have something set different

@dim dirge Try logging on and running it rather than using winrm

Remove that as a variable

[dim dirge]

Access to the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell' is denied.
At line:1 char:1
+ Set-ExecutionPolicy RemoteSigned
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : PermissionDenied: (:) [Set-ExecutionPolicy], UnauthorizedAccessException
    + FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.SetExecutionPolicyCommand
*Evil-WinRM* PS C:\Users\hacker\Documents> 
``` I get this error

[naive violet]

We did say that wasn't the problem...

[devout palm]

try this:

$userAccounts = Get-LocalUser | Where-Object { $_.Enabled -eq $true }


foreach ($user in $userAccounts) {
    $username = $user.Name
    $netUserOutput = net user $username 2>&1
    $comment = $netUserOutput | Where-Object { $_ -like "Comment*" } | ForEach-Object { $_.Substring(10).Trim() }

    Write-Output "Username: $username, Comment: $comment"

}

[dim dirge]

true, let me try it

[naive violet]

Local users or domain users?

[devout palm]

local

whops

Would Get-ADUser fix it?

[naive violet]

I don't know what api that users
I'm interested to see if it's a winrm issue though

[dim dirge]

yes give me a second this thing is slow to boot in

[devout palm]

The first script also is local

something with the WmiObject

[devout palm]

Ph0bos - try this too

[dim dirge]

Oh man, i hate these VMs

Is taking for ever to boot

[naive violet]

Honestly SSD/NVMe for VMs is a life changer

[dim dirge]

Yeah I will try all, had you try it in a AD?

[devout palm]

Nope, i don't have an AD lab set

[dim dirge]

Oh i see,

[mossy river]

Love NVMe

[dim dirge]

ok

im in

[devout palm]

Prepare statement in php is an efficient way to prevent SQLi. The best way to prevent it is to use parameterized queries or prepared statements

[dim dirge]

what is the script i should test?

the last one?

[devout palm]

The first one without the WinRM and the second one normally

[dim dirge]

ok

[dim dirge]

ok you were right

here is the problem... with the pc it works BUT you cant see what is in the comment

[dim dirge]

this time worked but you cant read what is insied

is all blank

[devout palm]

huh?

[dim dirge]

yeah look here

[devout palm]

because the description is empty

most likely

[dim dirge]

No no, look at the other logs

There are passwords on it

[devout palm]

I mean, which one are we talking about right now?

[naive violet]

Iiiiinteresting

[devout palm]

First or the second script

[dim dirge]

Username: Son, Comment:
Username: Administrator, Comment: Built-in account for administering the computer/domain
Username: Guest, Comment: Built-in account for guest access to the computer/domain
Username: SQLService, Comment:
Username: elisabet.jeanelle, Comment:
Username: odelle.bertha, Comment:
Username: kassey.clemmie, Comment:
Username: roxana.cindi, Comment:
Username: avis.cathie, Comment:
Username: brier.stephie, Comment:```.

and it doesnt work with evil-winrm

[devout palm]

can you see it with net user SQLService?

[dim dirge]

Yes

[devout palm]

uhh Might be the "User's Comments" part it is showing im not sure

the Get-Local one works with the winrm?

[dim dirge]

let me see

[dim dirge]

AccountExpires         :
Description            :
Enabled                : True
FullName               : son
PasswordChangeableDate : 2/16/2024 12:37:15 PM
PasswordExpires        : 3/28/2024 12:37:15 PM
UserMayChangePassword  : True
PasswordRequired       : True
PasswordLastSet        : 2/15/2024 12:37:15 PM
LastLogon              : 2/15/2024 12:40:31 PM
Name                   : son
SID                    : S-1-5-21-4067545166-1296066028-3412031950-1535
PrincipalSource        : ActiveDirectory
ObjectClass            : User



*Evil-WinRM* PS C:\Users\hacker\Documents> ````yes

[devout palm]

I meant the script

[chilly veldt]

👀

[devout palm]

Alright

You're welcome

Tricky that they put the pass there

[sick lance]

I've never seen a CTF do it.

But that won't say it won't be done.

[scarlet mantle]

@rapid merlin ur so hot topic i like u a lot

good stuf

[desert shuttle]

my head hurts

[near hawk]

I think amazon is telling me i'm fat, everytime I type amazon it takes me to a pack of 12 chocomel

[devout palm]

Might be left there from yesterday

[buoyant tree]

Is chocomel good?

[near hawk]

The best

[buoyant tree]

hmm

[sand trench]

what is chocomel???

[blazing granite]

That remind me of a Daniel Tosh about google, google make me look bad every time I type a, google goes Asian... 😂

[sand trench]

yes shadow knows this is not jeporday

[buoyant tree]

Some form of chocolate milk

[near hawk]

A dutch chocolate milk

[buoyant tree]

and a daymn expensive one at that

[blazing granite]

give me IDK for 200 Alex 😂

[buoyant tree]

6$ for a can of chocolate milk

[sand trench]

[chilly veldt]

I love chocomel, it's in lidl

Sooo good

[buoyant tree]

lidl?

[chilly veldt]

An amazing grocery store

[near hawk]

It's a German shop, where here in the UK is the cheapest place to go

[scarlet mantle]

use acupressure on right before the palm of the two hands and the nose thing that smells like intense peppermint perma and heavy and put urself in a the very cold

[buoyant tree]

hmm

[scarlet mantle]

also paracetamol with coffee combo

[near hawk]

It's German but the UK has stores of them

[twin ridge]

Gave +1 Rep to @near hawk (current: #90 - 68)

[random garnet]

I want to switch to this field, can someone with experience give me suggestions?

[near hawk]

It's very broad, which part of the field would you want to go in?

For some reason my work assigned me two projects due tomorrow even tho i'm off sick til the 5th

[glass nest]

Damn, son

[chilly veldt]

Esqyyy, I hit the meanest leg day today

[near hawk]

It's only to upgrade the Windows 10 to 11 but still why assign them to me lmao

[glass nest]

Cos no-one else wants to do it, so they assigned it to you, knowing that they'll be like 'He's off sick!' then have an excuse to reassign it to someone for next week, and putting it off for longer

[wind lake]

howdy

[near hawk]

Seems that way I asked if I could ask them to work from home 3 times said will speak to HR but never got back to me

They're also making me do Scope of Work and sending them out to customers for already completed projects from like 1-2 years ago

[chilly veldt]

My legs are so dead tomorrow

[mossy river]

You got that mind leg connection

[grizzled crystal]

hi! how goes it

[devout palm]

hi bee, long time no see

[gaunt basalt]

Hey

[devout palm]

Another bee over here

[gaunt basalt]

Bzz

[devout palm]

Thank you so much for making honey

[chilly veldt]

I mean, I hit 140kg leg press, 70kg calve raises, 80kg hip thrusts, and 60kg leg curls today

[rapid merlin]

Make sure you get good sleep mate

[chilly veldt]

I'll most likely get 10 hours

[sand trench]

that is 5 times the amount of sleep shadow had last night

[chilly veldt]

It's 5 hours more than what I had last night

[wind lake]

uuuugghhhhh

tor is being annoyinggggg

[sand trench]

what you doing over tor bee/jazz

[wind lake]

stuff for owrk

[sand trench]

noted
jazz/bee is a journalist and taking information to and from using tor

[wind lake]

no i just need to download a ransomeware dump

[chilly veldt]

Hmmm @mossy river

[mossy river]

Malware is restricted to the advanced channel

Furthermore, you have already stated that you are new to the field, don’t go messing around with things until you learn fundamentals

[rapid merlin]

So u wouldnt advise going on vmware and mess around with different malware samples as a beginner?

[wind lake]

nope

[mossy river]

Definitely not

[flat hamlet]

@mossy river do u got a list of playlists ? im bored from the one u sent that day, thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1157)

[mossy river]

Both

[mossy river]

Nah all my playlists are private sorry boss

[flat hamlet]

no worries 😄

[whole yew]

absolutely not. this is how you infect every device on the network

[sand trench]

100% both

[whole yew]

if you don't understand how to be safe, don't play with dangerous things

[chilly veldt]

@dim dirge you still wanting me to look into it?

[sand trench]

this.... so very very much this... also the reason shadow don't touch malware research for now

[dim dirge]

Sure

[distant gazelle]

would removing all networking from the machine fix that issue?

[chilly veldt]

#advanced-general

[dim dirge]

As I said before, if you get to put this together. This can be a very powerful tool.

[devout palm]

😭

[shell nova]

Get gud, noob 😉

[near hawk]

Only get it if you're 0xd, done throwback or have a high cert

[shell nova]

You're almost there, keep at it

[shell nova]

Throwback was retired, no?

[near hawk]

Might have been

[devout palm]

Yessir

[sick lance]

Throwback was

[sick lance]

Infosec devoloper too

[shell nova]

That's not given very often

[shut hawk]

Just had an absolute miracle, got the sticks trapped between the chair-lift poles and it took my hands upwards with me, if they were metal instead my wrist would have most likely been broken

[near hawk]

Ahh channel description still says throwback

[sick lance]

Still eligble xD

oxD is probably easiest

[shell nova]

This is why you remove them before going on the chairlift

[shut hawk]

Yeah should not have had my gloves attached to them

Lesson definitely learned lol, think that aged me a bit 😆

[rapid merlin]

hey guys, is OBS safe

[shell nova]

I think that problem has arisen many many times before, sadly

[shell nova]

Depends on where you get it from

[rapid merlin]

Obsproject.com

[shell nova]

That the official site? Can never remember

[near hawk]

Yea, that's the official site

[rapid merlin]

ok

becuz i keep seeing these ad things

which go to weird websites lol

[shut hawk]

I think I was so focused on not dropping them, that I didn't realize that I might have needed to, like in that situation

On another note: night time skiing is absolutely amazing, would highly recommend if you have a resort near you

[shell nova]

Only takes one freak accident, unfortunately. You got lucky and only had to pay a set of poles

[shell nova]

Agreed, though they usually limit the trails. Plus there's no snow here anymore. Was 18 this afternoon:/

[shut hawk]

That does seem the case everywhere, out of the 9 trails here only 1 is open due to the lack of snow

Very sad 😢

[sick lance]

Is this for THM?

[shell nova]

What are you scanning?

[shell nova]

Gotta wait for the AMOC to collapse I guess

[opal ember]

@sick lance no this is not for THM

[shell nova]

Once again, what, exactly, are you scanning?

[opal ember]

@shell nova This is one of the assignments that I am currently working on.

[shell nova]

We cannot help you with homework

[opal ember]

No no it's not homework

[shut hawk]

Wow yeah, seems scarily close

[shell nova]

We cannot help with assignments either

[opal ember]

I am doing a project about web dev and after it did live we Wana check it .

Bro please try to understand it's not an assignment but if you can't help me it's okay

[shell nova]

Have you looked at the nmap room on tryhackme for a tutorial on how nmap works?

[grizzled crystal]

How are you enjoying those 50kbs speeds

[opal ember]

@shell nova yeah obive man

[shell nova]

Then I suggest you redo it because the lesson doesn't seem to have sunk in quite yet

[opal ember]

Ty

[twin ridge]

Gave +1 Rep to @shell nova (current: #12 - 544)

[shell nova]

Take notes

Understand what you're doing

Probably not

VPN won't do anything

[scarlet mantle]

@distant gazelle i lik ur name and pfp a lot appreciate u being here gj

@rapid merlin ur question make me learn a lot keep it up boss

[shut hawk]

What would limiting the allocated RAM do in terms of security?

[shell nova]

Can't say, I am not a malware expert, but I wouldn't touch that stuff with your level of experience

[twin ridge]

Gave 1 Rep to thatguy2328 (current: #996 - 3)

[shell nova]

Nothing tbf

VPN would also just give the thing an easy path to your host as well

VM is a good start, but it needs to be hardened and instrumented

[scarlet mantle]

maybe evil will be slower

[shell nova]

Anyways, advanced topic not for here

[shell nova]

Nah, evil doesn't care

These things can run on your toaster

[scarlet mantle]

wow

[near hawk]

Shouldn't it be 2024 bot?

[sharp citrus]

Pong!

API Latency

105ms

Client Ping

273ms

Feb 15, 2024, 8:24 PM

[shell nova]

now you know

[sick lance]

It was written in 2023

[sand trench]

https://arstechnica.com/gadgets/2024/02/mozilla-lays-off-60-people-wants-to-build-ai-into-firefox/

.....

[near hawk]

AI is becoming really competitive

[proven quartz]

Layoffs are never good news for the people affected. The last CEO had been gradually increasing his take-home with no increases for staff, justifying it as there being no money (not because he took it all, of course). Glad to see a new interim CEO but they do need to do some heavy promotion to get the word out. Most of their money comes from Google sponsorship and most other browser users are using Chrome or a clone

[sand trench]

yeah but building in content plagarism engines into a browser sounds bad

oh..... that was towards blackout by the way

layoffs are also nearly always bad

[grizzled wing]

this guy shows Bitlocker bypass (once all set up) in 43 seconds, pretty neat video explaining the attack {there is an add for cyber sec platform at end}

this video is good at teaching
https://www.youtube.com/watch?v=wTl4vEednkQ

[proven quartz]

Everyone wants to get some kind of cashpile out of the AI bubble before it bursts. There's major technical problems with how it works and ethical issues about where they're getting their data, so we'll see how far it goes the next few years

[sand trench]

yeah

[distant gazelle]

kind of thing theyre probably hoping to figure out later

companies cant really afford to slow down

[proven quartz]

I'm sure it'll all work out in the end and we'll be able to build an intergalactic space-based civilisation with plenty of sci fi toys to hack in the future. One can hope

[sand trench]

shadow really wants firefox and mozilla to succeed but man do they have many weird things that don't look promising

[grizzled wing]

we need firefox to stay around, i see why they have the version of Delete Me thing for monthly subscription

[wind lake]

100KBS excuse you!

[proven quartz]

Definitely, it's been my favourite browser for a long time and I would like to have a non-Google browser well into the future

[sand trench]

exactly this subtlety

compition in the web browser space is very very helpful and needed

[grizzled crystal]

My mistake pls forgive

[wind lake]

this time i shall

[proven quartz]

Maybe we need to fork/clone it for preservation reasons

[grizzled wing]

i have heard some mentions of Arc browser, haven't tried it

[sand trench]

there already are a few good forks but yeah

[grizzled wing]

wow, lockpickinglawyer has 4.45 million subscriptions! 🤯

[molten sky]

lpl is just polite mcnally

[proven quartz]

Macos and iOS atm with a Windows beta. I live on Linux 😛

[grizzled wing]

Linux 🐧

[molten sky]

btw

[grizzled wing]

just mentioned Arc since discussion was on browsers

[sand trench]

linux is the way
linux is the life
linux is the future

[proven quartz]

It's an interesting looking project alright

[grizzled wing]

i learned about Quickemu project! omg Linux is awesome

open source

i updated my Linux Mint VM, it's now cinnamon

[molten sky]

what's the difference between that and just qemu

[grizzled wing]

simplicity ?

it can run MacOS

[molten sky]

can qemu not

[proven quartz]

I've been using Mint Cinnamon for years. Just upgraded to the latest a few weeks ago

[grizzled wing]

i dont know

[grizzled wing]

i upgraded yesterday haha

[molten sky]

seems that quickemu will just get the image for you? no iso?

[grizzled wing]

that is what it looks like, it will have it for you

[molten sky]

interesting

[grizzled wing]

i watched The Linux Experiment youtube video on it

[chilly veldt]

@dim dirge I almost got something here 👀

[devout palm]

My brain not braining

[chilly veldt]

@dim dirge I got it!

just need you to test this out, it works on my machine at least

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 809)

[chilly veldt]

give me a sec

[distant gazelle]

the singularity is only 5 years away!

(i hope)

[chilly veldt]

https://gist.github.com/KyootyBella/57db78c6cdb7b95b8f02078350073d9a

[devout palm]

Nice one bella!

[chilly veldt]

thank you

it works?

ah

no worries

[loud marlin]

if using wget allow you to scrape paid content on some website, is that consider a bug or so ? by paid i mean you shoud not be able access it without pay it.

[devout palm]

Bad architecture

[chilly veldt]

that might be because they don't have a comment

give me a second then

weird, mine shows

it's local, as I don't have a domain setup right now

what box are you working on?

[rapid merlin]

yayy (i barely remember anything from the last room)

[chilly veldt]

ah, goad

ah yeah, give me a second then

just weird that it doesn't show

[molten sky]

"net user comments" tldr?

me no do windows

[chilly veldt]

only edits or creates

doesn't show

[molten sky]

i mean wtf is a net user comment

you mean like the comments for an account?

those user comments?

[chilly veldt]

yeah

[molten sky]

got it

[rapid merlin]

thank the lord tomorrow is friday

[devout palm]

That's why you need to take notes. Congratz, btw

[rapid merlin]

amen

[rapid merlin]

redoing rooms after a bit can help a lot too

[molten sky]

i'm as far away from windows as i can get so the phrase net user comments didn't land at first

[devout palm]

Absolutely, freshing helps

[chilly veldt]

not really

we get alarms on this

😄

in a SOC

we get alarms in the SOC every time someone runs net user

[molten sky]

SOCs are overrated, just install mcaffee

[devout palm]

Damn

[chilly veldt]

yeah, I'll work on it tomorrow on why it doesn't work over evil-winrm

should maybe work for a local access to powershell

alrighty

[boreal scarab]

[solar thunder]

Hello

[near hawk]

👋

[chilly veldt]

I did use that script

I used the script and made my own net user parser

Yeah, going to see tomorrow what causes this issue

[sick lance]

https://www.tomsguide.com/computing/malware-adware/first-ever-ios-trojan-discovered-and-its-stealing-face-id-data-to-break-into-bank-accounts

[loud marlin]

so... it begins 🙂

[rapid merlin]

didnt they also put a piracy app on their store

some piracy movie thing

[near hawk]

There's been a few apps they've put on they're they had to pull back because a few were malicious

[sand trench]

cries in the i am rich app being pulled

which was an app that costed 999.99 usd and gave you a red gem as a background on your iphone

[dense canopy]

[buoyant tree]

Is it really the first IOS trojan

[sand trench]

maybe not

could just be the first found one

[buoyant tree]

yea tomshardware quality has been reduced

[buoyant tree]

eh there have been more that were found

[stone lynx]

nearly top 400 :)

My friend's rank 399, time to kick him out of the top 400 >:)

[buoyant tree]

eh no need for that

u got a great rank

404

[stone lynx]

Rank not found :)

the forbidden rank

[buoyant tree]

just stay afk for a while and get 418

even better

[stone lynx]

teapot moment

[devout palm]

Congratz!

[stone lynx]

Thanks thanks :)

[grizzled wing]

403 , what a great rank

[sand trench]

shadow has still not broken into the top 2k

[grizzled wing]

neither but i am currently pausing active work on THM

[buoyant tree]

reminds me I have to do TCM

[sand trench]

well yeah have been playing a ton of dragonfable instead of doing tryhackme

[grizzled wing]

i wish Go Lang and THM meshed haha

[buoyant tree]

doesn't made sense

[grizzled wing]

if THM had learning Go
then both learning happens at same time

[buoyant tree]

ur learning Go/?

[grizzled wing]

yea, i tried Rust but did not like

[sand trench]

yeah veggies is messing around programming in go

you probably won't get any points on tryhackme for it but you could make rooms on tryhackme that are related to golang

[buoyant tree]

eh u will like Go

great language

[grizzled wing]

yea, that is the plan!

my room will take awhile to get approved, so if you see Hashcat Playground, i made that

[buoyant tree]

simplicity & sppeed

[grizzled wing]

Go is cool

[sand trench]

well shadow will know before most people as it will drop in room testing channels

[grizzled wing]

yea, that's right, you test rooms for any shadows

[sand trench]

and as you are in this discord you will be added to the thread for your room to take feedback and patches from us room testers

[grizzled wing]

lovely

[sand trench]

⬆️ quite sure shadow is allowed to state this for how the testing phase works

would otherwise also be possible to learn it from releasing multiple rooms or asking other room creators

[grizzled wing]

i gave invite to 2 people, only 1 tested it

[sand trench]

think vain gave cheesectf invite to 2 random people too

or well friends of vain

[grizzled wing]

i tested that room, did not get far

not a very good red teamer

[sand trench]

t minus 3 days

[grizzled wing]

t minus 3 days for ?

[sand trench]

pay day for shadow and finalising the dragonbox pyra order

[grizzled wing]

🐉 in a 📦

sounds like a CVE

[sand trench]

it is a mini pc running debian arm linux

and shadow preordered it in 2016

[grizzled wing]

⚠️ there may be a 🐉 within this 📦

a child in the world named Debbie/Debra needs to have Arm as middle / last name

friends would say, Deb Arm uses Linux

[boreal scarab]

@blazing granite yo, you on?

[chrome marsh]

The nostalgia of playing DragonFable. It's such a good game

[sand trench]

indeed

and it still gets updates

[blazing granite]

here

[sand trench]

and amazingly diverse challenge endgame fights

[boreal scarab]

Too late. I ordered a pinot noir with a lean brisket

[chrome marsh]

Yes indeed! I haven't played in a few years thou so probably there's alot that's been added

[sand trench]

yeah you have quite a lot of story to catch up on then

which is the best part in shadows opinion

[boreal scarab]

Discord is drunk

[sand trench]

sadly one of the lead devs got sick in covid this week so probably slow release or not very big release this week

[rapid merlin]

Is there a Hashcat version for Mac so I can use my actual machine to crack hashes in CTFs ?

[blazing granite]

If it's lean it's not a bad choice

@boreal scarab I answered the second I saw the msg I wasn't paying attention to discord 😂

[sand trench]

it has a homebrew install options so probably

not sure if that is only for the intel based macs or if that includes the m1-m3 series

if that fails look at this file: https://github.com/hashcat/hashcat/blob/master/BUILD.md

[boreal scarab]

Tsk tsk tsk

[sand trench]

you telling shadow a gar licked this bread??

[rapid merlin]

I had to look up what homebrew is, its basically what apt install on linux is right?

[boreal scarab]

@blazing granite My personal sommelier should be by their phone 24/7 for all my requests!

/j

[sand trench]

yeah but you run it as brew something something what to install

it is used a ton by developers on mac systems

[rapid merlin]

okay nice

[sand trench]

will let you install tmux and vim or neovim too

[blazing granite]

for a convenience price he can be /j 😂

[boreal scarab]

https://tenor.com/view/kim-kardashian-money-cash-make-it-rain-make-that-money-gif-6509116106792146073

[sand trench]

oh noes they nuked the wrong server

[boreal scarab]

@blazing granite

[stone lynx]

Finally got to the top 400, wew

knocked my friend @rough gorge out of the top 400 by 3 points haha

I saw him sitting at 399 and had to do it :>

[boreal scarab]

https://tenor.com/view/its-melting-in-my-mouth-the-great-canadian-baking-show-gcbs-thawing-in-my-mouth-its-so-delicious-gif-21139059

[chrome marsh]

Yes! It'll be fun to catch up and binge the story as much as I can

[crude stump]

would be a shame if you lost that streak

[stone lynx]

It would be, I've kept it up for a while

[crude stump]

whats your goal

[stone lynx]

Getting a job

but basically everything is full-time, and I can't really do that while in high school

[sand trench]

mornings

kinda blegh

and heading to sleep in about 1-2 hours

[bold latch]

What's y'alls opinions on this Artix rice, is it looking good?

[copper magnet]

Could anyone tell me how I got about getting started on the website in terms of which module I should start on?

@keen depot I'm just getting started I've doing the coursera certificate so still fairly new to this

Sounds good thank you

[crude stump]

to add onto what weary said

#start-here

wait nvm it doesnt tell you the path you should take

but it tells you good info tho

[rapid merlin]

Guys is it worth it spending a lot of money on a macbook pro for studying cyber security? or should i just go for the cheapest macbook air?

[crude stump]

i think any computer is good with cybersecurity but ram is the main thing you want to be looking at

[bold latch]

Everyone here will typically tell you, you can essentially hack off a potato and still get away with it

[crude stump]

yeah

all you need is linux and vms and basically your set

well vms has linux but yk what i mean

[rapid merlin]

macbook air is half the price but it has 8gb ram

[crude stump]

im guessing your sticking to apple?

[bold latch]

Though 8Gb RAM min/16Gb recommended for the sake of how many tabs you might have open, and a 4-core 2ghz CPU would be great for long password lists if you're using something like a brute-force pass-cracker or hydra/an automated webcrawler with a bunch of threads

[mossy river]

I bought an M2 Air for University and it holds up to the amount I paid.
But, I also have a tower so everything I can't do on the Mac I do on my Tower

[rapid merlin]

i think so yea

[mossy river]

For Cyber, MacOS is terrible and M chips make everything super long winded and horrible

Especially with the no ARM support

[crude stump]

whats your guys opinions of lenovas

[sand trench]

shadow only used mac back in year 6-8 of school

[mossy river]

Cheap, last long and are good for on the go hacking machines

[sand trench]

so long ago

[crude stump]

facts i think there pretty good

[rapid merlin]

should i get a windows laptop then?

[spice adder]

Does anyone have any guidance on linking my THM to discord? Ty :)

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 16, 2024, 12:26 AM

[rapid merlin]

i dont need to game on it, i just need a laptop for tryhackme and studying in general

[spice adder]

🤟

[crude stump]

then a macs good if your sticking to apple

[rapid merlin]

Just do like me and put Ubuntu on your mac

My macs also past its end of support date (10 years) so not much choice for me

I love both but the Macbook Pro is too expensive

[crude stump]

idk who it was but i remember someone converted a crome book to linux?

is that even possible?

[rapid merlin]

Why wouldn’t it be?

I never owned a chrome book so honestly don’t know

[mossy river]

Nah don't do that

If you don't want to use MacOS, don't buy a Macbook.
And if you're doing CTFs or whatever, do it in a VM.

[blazing granite]

I once used Chrome OS, it gave me nightmares, felt I was trapped inside a chrome browser with not possible escape 😂

[sinful moon]

We got spooked by a Chromebook user which we were unable to support at work today actually lol.

It’s literally based on Gentoo Linux base, and the Android subsystem is a framework and not the core OS

Not all Chromebooks (especially very old) support running Android apps at all

[rapid merlin]

Why wouldn’t it handle another flavour of Linux tho?

Apt over brew

[sinful moon]

They’re locked down in ways that make it more difficult than standard x86 machines, or are just ARM. You can do more free Linux setups but they’re typically using ChromeOS developer tooling

[rapid merlin]

They’re pretty much the same tbf

Except for some things such as PIM

Being forced to keep chess is annoying

[sinful moon]

MacOS is quite a bit more limited in tooling than a typical FreeBSD or Linux install. Yes Homebrew has a lot but you’ll practically need to ssh into a real Linux box to get a lot done pentesting wise

[hollow stream]

Hey all, I have an idea. I want to create a script that automates some commands over SSH. I was thinking of doing it in C, since I'm using it for a course at university and some practice would be good, but I was wondering if bash or python would be better. What would you guys use?

Also I'm kinda a trash C programmer 😛

[rapid merlin]

For automating commands on what kind of system?

[sinful moon]

I do use a Mac Mini as a side computer in work from home setup, mostly for *nix stuff indeed… including sshing into my real pentesting infra lol

[hollow stream]

Linux for now

[rapid merlin]

Dobby keeps the game or Dobby gets the spray bottle again

[sinful moon]

Python is highly used in infosec, and bash is invaluable knowledge. Doing what you describe in C is for sure doable but just why?

[rapid merlin]

Id go with bash

[sinful moon]

Yeah I’d agree

[rapid merlin]

Why over complicate?

[hollow stream]

I need the practice tbh, I'm learning about C in university so I thought some practice would be good

Problem is, I don't know bash at all

And I'm already learning 3 languages in uni so I'm hesitant to jump into a 4th

[sinful moon]

Nothing wrong with that either, whatever works for you as long as you have some Linux around. Personally I main Linux but fair I use all three main OSes every day

[rapid merlin]

Can you recommend a laptop I should get? I was thinking about a Macbook but the price is crazy

[sinful moon]

imho that’s the best way, just be well rounded and know how to do what you need in any OS put in front of you

[sinful moon]

I can’t easily without knowing your desires. My laptops these days have a gaming focus and may not be viable for you

and expensive lol

[rapid merlin]

I game on a console so I just need a laptop for studying/pentesting

[hollow stream]

Even still, I'd recommend getting a good laptop even if it's a gaming one

You kinda want one that will last you 8 years

[sinful moon]

I’d used to say something like a Dell XPS but those have gotten weird with “invisble track pad” and touch function keys. Just shop around for best ultrabooks

likely fit the bill but yeah you do want to make sure you have proper CPU and RAM long term. Upgradability is great but depends on how “ultrabook” you go lol

I’ve never had a laptop without a pipe key, it’s kind of essential for backslash alone, but idk your keyboard region

[rapid merlin]

As a pen tester bash has been invaluable, more than other languages

Power shells a close second

But depends what you do if

[sinful moon]

I’m en-US so Pipe and \ are basically a given, even on this iPad physical keyboard I’m typing on

[buoyant tree]

Heya Ellie, bought katamari damaci reroll

got it for a great deal

1$

[hollow stream]

I'm planning to be a software engineer tbh, not in the cybersec field

While it is fun I'm paying £9k a year for a CS degree!!

[rapid merlin]

Oh then it’s probably less relevant for you

Ryzen 7, 32GB RAM

Is that okay?

[sinful moon]

My new laptop however doesn’t have a Print Screen key and that’s my biggest complaint lol. Yes Win+Shift+S exists (and I use that mapping in Linux as well) but not the same

[rapid merlin]

Same, at first it was daunting but now I struggle to leave the safety of a shell

[sinful moon]

Which Ryzen 7, but yes most likely especially on RAM

[rapid merlin]

Are you also a tester?

yes the macbook pro i wanted was twice as expensive and had 16gb ram

[sand trench]

*annoyed at how many laptops butcher the sysrq key

[rapid merlin]

Fair

[sand trench]

the sysrq key is magical when used correctly

[rapid merlin]

Bash is handy as its everywhere, such as embedded systems are usually based on a type of bash

[sinful moon]

lol I’ve had more than a couple without that, but fair I rarely had a need for it. Always fun when it did come up

[hollow stream]

Yeah I see that bash and PS is very handy

[sinful moon]

Must learns for IT/infosec indeed

[sand trench]

yeah normally you will not need the sysrq key... but when you actually need it it is an amazing life saver

[sinful moon]

bash scripting is pretty easy, honestly Powershell isn’t hard but learning the syntax is a bit more insane

[buoyant tree]

may be a stupid question but I have never heard of the sysrq key before

[hollow stream]

But I primarily work with Java and Python, with experience in C, PHP, JS and a few others

[buoyant tree]

what does it do

[sand trench]

https://en.wikipedia.org/wiki/Magic_SysRq_key

this is the most common use for it nowadays

for legacy uses see this: https://en.wikipedia.org/wiki/System_request

[sinful moon]

This is more a complaint about Powershell writ large (documentation as code) but would you rather:

md5sum or Get-FileHash <file path> -Algorithm MD5

[rapid merlin]

I do THM only because it takes me hours to complete 1 room, what's a VPS ?

[sinful moon]

Far from the most extreme example but it is interesting to think about

Virtual Private Server

I use a VPS for my THM stuff

[rapid merlin]

What would I use it for?

[sinful moon]

THM isn’t a huge risk but I don’t want a machine on my local networked VPNed into THM

(personally)

You can use a VPS as your attacker machine and baby steps to C2 infrastructure

You can then use methods like SSH tunneling HTTPS or RDP traffic to your local machine when you need it for THM

[rapid merlin]

I just learned about port forwarding so Ill probably wait a little before getting a vps subscription

still learning the basics

[sinful moon]

Yeah if you don’t know why or if you want it, best to wait

Also persistent infrastructure and filesystem that’s retained on your machine unlike Attackbox (and has internet connection)

That’s fair, but yeah my VPS doesn’t set me back too much. Although I likely over-specced it for my needs

I was more sane with the VPSes I deployed at work

[hollow stream]

I'll try python for my project

I've been meaning to learn argparse anyway

[sinful moon]

But a Kali VM gives you a lot of the same benifits

main thing with a VPS is you have some infra outside of your home network dedicated to pentesting/attacker machine

Just don’t mix it with work if you end up in IT/infosec. Make work provide infra

[sinful moon]

Black Hat Python from No Starch Press is also quite a good read

[hollow stream]

I'll give it a look, thanks for the recommendation 🙂

[twin ridge]

Gave +1 Rep to @sinful moon (current: #38 - 185)

[sinful moon]

No problem, I’ve been flipping through it and learning tons about interacting with sockets and more via Python… and then seeing how similar interacting with sockets was in other languages

[rapid merlin]

Let me know if this laptop is a good idea or not please

Acer Swift X

Ryzen 7 7840HS(3.8/5.1GHz 8 cores/16 threads)

RTX 4050 - 6GB

32 RAM

16" OLED Display

[sinful moon]

Hah but at least these are monthly vs AWS run amok with scale

[buoyant tree]

depends on the price

[sinful moon]

Read tons of reviews first

[rapid merlin]

1657 EUR

1784 USD

[buoyant tree]

Over priced

[sinful moon]

I’m more partial to Asus than Acer though so I’m not as familiar with their lineup

[rapid merlin]

Okay

[sinful moon]

Yeah that’s about what my proper gaming laptop from Asus was

[buoyant tree]

You can get it for like 1.2-3k$ for the same specs new

[sinful moon]

So indeed a bit much for ultra book 4060

[buoyant tree]

don't you have a 3070 ti?

[sinful moon]

No Ti, but otherwise correct

[buoyant tree]

Hmm then my laptop's better than yours.

[rapid merlin]

Youre right it was expensive because of the OLED display which i dont need

[buoyant tree]

I got the 3070 TI

[buoyant tree]

gaminglaptop.deals

[sinful moon]

It was around $1,600 but directly competes with Razor blade which breaks $2,400 regularly

[buoyant tree]

its made by a youtuber

usually a lotta good deals listed there

[sinful moon]

Congrats you bought your laptop a single year after I did lol

Really this stuff is marginal, doesn’t make sense to upgrade for years

[buoyant tree]

got me about 1,700$ with taxes

[buoyant tree]

Yea, next upgrade of mine probably gonna be a PC

but saving up nearly 10k$ for it

[sinful moon]

You mean a desktop?

[buoyant tree]

1.4k$ done

[buoyant tree]

Yea, semantics

[rapid merlin]

all laptops I found with Ryzen 7 and 32GB RAM come with a good GPU

[sinful moon]

I would for sure recommend building a desktop, but not viable for my current situation and job

[buoyant tree]

Eh not viable for me also atm due to family

But just saving up

[sinful moon]

Only spot I have for a desktop is work from home office which you bet I don’t step foot into after work lol

[rapid merlin]

I miss bringing my laptop to different rooms/places, im bored of sitting in 1 place

[buoyant tree]

You do have a server

a beefy one at that

[sinful moon]

Yes in work from home office lol

I access that remotely because, lol, it’s a server

[buoyant tree]

ye

[sinful moon]

My old self built desktop is in there as well but I haven’t used it in a year and a half at least

[buoyant tree]

also I got 2 great deals today, Portal for 0.5$ and Katamari Damari reroll for 1$

[rapid merlin]

Is the M3 CPU on the new macbooks really that good or is Apple just extremely overpriced?

the ryzen 7 laptops im checking out right now are half the price

[sinful moon]

Awesome!

[sinful moon]

Apple is overpriced

[buoyant tree]

Don't go for apple

[hollow stream]

import argparse


def get_args():
    parser = argparse.ArgumentParser()
    parser.add_argument("ip", help="IP Address for the system", required=True)
    parser.add_argument("-u", "--username", help="Username for the system to SSH into.")
    parser.add_argument("-p", "--password", help="Password for the system to SSH into.")
    args = parser.parse_args()

    if args.ip is None:
        parser.error("Please provide an IP address.")
    if args.username is None:
        parser.error("Please provide a username.")
    if args.password is None:
        parser.error("Please provide a password.")

    return args

Alright, decent start!

[buoyant tree]

@rapid merlin mind if I dm you with some laptop buying advise

[sinful moon]

Also Apple silicon will dramatically limit your ability to do x86 stuff like most VMs or easily running Linux natively, despite Ashai Linux coming along well

[rapid merlin]

please do

[hollow stream]

An apple silicon is a glorified android

Change my mind 😉

[teal stream]

im new here lmao so how do i hack i want to help people

[sinful moon]

No need lol, I have a very limited use case for mine. Like lol sshing into my real Linux machines

And just typical office work with some light *nix on the side

But lol I just got a Mac Mini for fun and curiosity, in that respect it was a better experiment than expected. But these things are cheap

[hollow stream]

True, I use my x86 Mac for uni and coding (even though it can't run Visual Studio) and it works great

They're not terrible

[sinful moon]

Yeah it’s just my quick portal into slightly more *nix friendly world as my third monitor, while I’ve got remote Windows Server up on my other two monitors at work

[buoyant tree]

Also Ellie question, Portal with RTX or without

[sinful moon]

Without for your first time, besides your 3070ti will cry

[buoyant tree]

Isn't it a 10 year old gam

e

[sinful moon]

Yes play the original game

[buoyant tree]

My laptop was crying yesterday
movie + music + 2 browsers + docker (2 containers running) + game

game was sunset overdrive on max settings

[sinful moon]

Uh only 16GB RAM?

[buoyant tree]

yup

[sinful moon]

That’ll do it

[buoyant tree]

when i closed 1 browser got 20 fps more

but still was playing at 80 fps stable with everything

[sinful moon]

I am also unfortunately stuck with 16GB due to half of it being soldered in, could only max to uneven 24GB. My last laptop I upgraded to 32GB (despite not listed as supported by OEM, but sure worked)

Part of why I have a server with 256GB of RAM to offload things to lol

[hollow stream]

┌──(kali㉿kali)-[~/CustomScripts]
└─$ python linuxForensicsCheatsheet.py 10.10.97.6 -u root -p password
Connection succeeded!
Connection closed.

https://tenor.com/view/frankenstein-its-alive-gif-10618052

[sinful moon]

Good stuff!

[buoyant tree]

you can upgrade it to 48 I think

atleast on my model

the 16 gig will remain in

but u can add a second card with 32 gig's

[hollow stream]

Most of the hard python stuff is now out of the way

[sinful moon]

With DDR4 it’s less ideal to not have the same sizes than DDR3

[sand trench]

meep moop time for sleepity sloopity sleep sloops while the beepity beep boopity boops goes in the background

[hollow stream]

Now it's just about how to run commands via python

[sinful moon]

G’Night Shadow!

[hollow stream]

noight

[buoyant tree]

beep boopity bye

[buoyant tree]

eh its DDR5

[sinful moon]

Same sorta concepts

You’ll loose some efficiency once you pass 16GB since it’s not easily able to live on the other DIMM as well

[buoyant tree]

Eh haven't upgraded yet

its on a wishlist if I win the lottery

[sinful moon]

If gaming is your main concern, skip it. If desktop is bigger concern sure, but may still be odd

[crude stump]

Buuut you could buy a super computer

[sinful moon]

No you can’t even with lottery kind of money

[buoyant tree]

My priority list really.
Open ear headset (THe ones with air passthrough)
7.1 Surround sound system.
Top End pc but full AMD and 128 gigs of ram

and a server

and a monitor

[crude stump]

Some lottery’s go up to a billion except tax

[hollow stream]

Guys, you don't need to win the lottery

You're only 36 hands of blackjack away from becoming a billionaire

[rapid merlin]

Should I sacrifice performance and get a laptop with a 4K Display

Or get a powerful laptop with a disgusting 1080p display 🤔

[crude stump]

[hollow stream]

Go for a 2k display to assert dominance

[crude stump]

Idk if we can help you Rixon

It’s all preference tbh

[buoyant tree]

1440p is the best way

[sinful moon]

Unless lol you live in 2000 and 1Ghz is making mags go “It’s a FREAKING SUPERCOMPUTER in a single chip”

[rapid merlin]

[buoyant tree]

I love my 1440p monitor

[buoyant tree]

Gotta love streeet legal

[crude stump]

Sounds legit to me

Bouta buy one

[sinful moon]

We’re talking 1000Mhz, aw yea!

[crude stump]

Wish me luck hall

Bruh I hate autocorrect

[hollow stream]

Who's hall 😉

[buoyant tree]

Although if I think about it I may have seen a thingy like that in a flea market

[sinful moon]

lol still beats my 800Mhz Pentium III retro machine. The 1Ghz slot 1 PIIIs are stupidly expensive

[crude stump]

Hey hall

[hollow stream]

https://tenor.com/view/scott-the-woz-sonic2-now-thats-funny-gif-24121538

[buoyant tree]

Uhm shouldn't it have gotten cheaper

[rapid merlin]

I dont but 1080p display is pretty bad

[blazing granite]

I jumped from a 386 to a Pentium MMX it felt I got a NASA supercomputer in my room 😂

[loud marlin]

well... if you play games on CRT... don't complain 1080p =/

[buoyant tree]

Ellie u were right

[sinful moon]

No it’s uncommon vs socket 370 variants, and very saught after even today

[crude stump]

I gotchu buy one of this puppy’s

[buoyant tree]

Portal with RTX has some high system requirements

Like INSANELY HIGH

[hollow stream]

I'm literally getting distracted by pretty colours on my terminal

print(Fore.GREEN + "Connection succeeded!")

[buoyant tree]

Higher than Cyberpunk 2077

[sinful moon]

Yeah don’t bother since you’ll likely play at 30fps for your first time

Just do normal Portal

[buoyant tree]

Eh but I like shiny stuff

Gonna benchmark them myself

[sinful moon]

And much easier than color escape codes in bash at that!

[buoyant tree]

do some math to see what's the better scientifice choice

[buoyant tree]

colorama?

[hollow stream]

I was so happy to see it was so simple

[hollow stream]

yuup

[buoyant tree]

nice

[buoyant tree]

wanna know a secret to make it easier

green = Fore.GREEN

[hollow stream]

Hmmm

Maybe

[buoyant tree]

then you can do py print(green + "Connection succeeded!")

[sinful moon]

Eh close enough, I got this

[hollow stream]

That's true

[buoyant tree]

a lil prettier

[sinful moon]

Damn it meant to reply to the super computer one lol

[buoyant tree]

eh its still lower specs

We need that super computer

[sinful moon]

lol that was not going on the wood floor

[buoyant tree]

HAVE SOME FAITH ARTHUR

[sinful moon]

sure no room for a rack atm, so quieter tower server was perfect for messy home office corner there

[hollow stream]

Bloody 'ell Tommy

[crude stump]

Is it bad my cpu is at 186 degrees

[sinful moon]

Ferenheit?

[crude stump]

Yes

[buoyant tree]

Follow the daymn plan

[hollow stream]

Was about to say

[crude stump]

Should I cook a egg on it

[sinful moon]

People typically measure tech specs in Celcius even in the US

[clear jackal]

Yee

[honest dragon]

two eggs

[loud marlin]

@sinful moon here is one vid of engraving. real time was around 47 min
https://www.youtube.com/watch?v=-ZlDy7x8wmE

[buoyant tree]

should be around 70's

[hollow stream]

Arfur follow the plan

[clear jackal]

99°C is typically max

[buoyant tree]

We can escape to Tahiti then

[clear jackal]

Before severe throttling

[crude stump]

What type do you like. Runny or scrambled

[honest dragon]

its more at 99*C

[hollow stream]

Okay first stumbling block: I ran the command ls -l and nothing is there, now what
client.exec_command("ls -l")

[sinful moon]

60-80 is about ideal under load, above 90 is potentially thermal throttling unless AMD or designed for such. 100c is indeed danger sone

[honest dragon]

the censor is broken

[hollow stream]

https://tenor.com/view/danger-zone-gif-6160128

[buoyant tree]

my laptop's usually around 75

[hollow stream]

I'm sorry for the gif span I can't help myself

[crude stump]

😡😡😡

[buoyant tree]

Wrong meme for that

[crude stump]

How dare you

[clear jackal]

I think mine usually stays at 50°C

[sinful moon]

It was degrees F

[loud marlin]

75 in iddle ?

[honest dragon]

[buoyant tree]

https://tenor.com/view/im-ready-lets-go-lets-do-this-prepared-helmet-gif-14804916513894161995

[crude stump]

Left it in the sun

[buoyant tree]

While gaming

65 while idle

[hollow stream]

True dat

[loud marlin]

ah.. thats ok

[sinful moon]

Yeah 75 under load is sane

especially in these laptops

[buoyant tree]

wait its 75 atm

[clear jackal]

I burned myself on one of my work machines

[buoyant tree]

ain't gaming but got firefox, chrome, plexamp, plex, task manager, armory crate, cpuz open atm

btw gtg

[crude stump]

Did it feel like the sun

[buoyant tree]

brb 1 hour

[crude stump]

Guess you can say money is too

[clear jackal]

Yeah, it was pretty damn hot

[sinful moon]

Also if that is Armory Crate, try G-Helper, the minimal replacement

[crude stump]

Magic

[sinful moon]

I’ll just say things like gaming laptops become sensible if you have the income and legit need for it

[loud marlin]

3d printer nozzle is 220C... and touch that is painful as hell

[hollow stream]

┌──(kali㉿kali)-[~/CustomScripts]
└─$ python linuxForensicsCheatsheet.py 10.10.97.6 -u root -p password
Connection succeeded!
Output: root

Connection closed.

We are so in boys

[sinful moon]

If not, yes always build your own desktop

[hollow stream]

I'm gonna say it

I'm in.

[crude stump]

Just touching a hot glue gun nozzle

[loud marlin]

yea

[crude stump]

Gave myself a bad blister

I was working with hot glue and the glue stuck to my skin

[loud marlin]

if you know what white phosphorus is. that thing if you get on skin.. you have rly bad day

[crude stump]

Used in some weapons. Horrible stuff

[sinful moon]

My gaming laptop, 2021 Asus Zephyrs G15. Best of both worlds, 3070

[loud marlin]

yep... quite bad stuff

[crude stump]

“Banned” weapons of course

[sinful moon]

Plenty of thin and light while also have like 12 Ryzen 6 cores and dat mobile 3070. More than enough for my needs beyond the RAM. However they’re getting even more ultrabook with some of these gaming laptops these days

[crude stump]

Oooh

Looks nice

[sinful moon]

Yeah competes directly with the Razor Blade line but undercuts by a good $1,000

[hollow stream]

British "smoke" grenades used it too

[crude stump]

But was it used against people? Or just for smoke

[sinful moon]

Yeah, the 2024 go even slimmer, but I need to see more legit rather than launch previews to know if they’re decent for real

[hollow stream]

Not sure tbh

[crude stump]

Cus ik white phosphorus creates a very thick white smoke

[hollow stream]

It's very good for that

[loud marlin]

it was used in ww1 and ww2. and now is banned in general. i have it in lab and we also need to have special papers to have it

[sinful moon]

Also infamous part of Spec Ops: The Line

[hollow stream]

Mfw my mate brings out an old army smoke grenade in airsoft

[sinful moon]

for sure straight up chemical weapon that is banned under Geneva convention

[rapid merlin]

Made your own ssh?

[sinful moon]

Just a script which automates ssh atm

[crude stump]

Yeah nowadays they use magnesium. Still burns but is a very gray area

[hollow stream]

I used paramiko for the ssh connection, argparse for the parses and colorama for pretty colours

[sinful moon]

But sounds like they’re building it out for security checks

[hollow stream]

It's a glorified script

[rapid merlin]

Sounds cool

[hollow stream]

Mostly for the Disgruntled room

[crude stump]

Slim computers are always so nice

[hollow stream]

It's fairly decent, I'm following this guide they gave me to create it

[loud marlin]

it can be used in smoke and so things. if content is extra low. aside that. if you have it might be best to call police and so

[sinful moon]

Until this computer is wasn’t aware you could do both slim and gaming well in one package, but very little complaints with this laptop

[hollow stream]

I was only kidding 😅

[crude stump]

Interesting

[sinful moon]

Does use similar vapor chamber cooling tech as modern phones

[loud marlin]

btw you can make smoke "grenade" thing from simple sugar...

[crude stump]

Sugar can be used to make rocket engines too

[hollow stream]

You can make a bomb through sugar too

[sinful moon]

lol, and something something fertilizer. Yeah best if we not get into anarchist cookbook kinda material

[crude stump]

Hm alright let’s clear away from that topic

[hollow stream]

Yep

I do not want to be on a list somewhere

[loud marlin]

that book is not ok to look on it. today's chems are more pure and can be more dangerous if receipt is used from book... sadly

[sinful moon]

Interesting topic though and best left to your own research. Personally I love how shows have to purposefully botch the formulas to bombs as to not give out this kind of advice

[loud marlin]

yea... lot's of bad things are to much in free world

[loud marlin]

yea... is not ok to do things if you don't have 100% knowledge of what you do

[hollow stream]

Moving on, I would like some advice on this

[sinful moon]

Easy to loose fingers or much more

Yeah lol

[hollow stream]

Basically the guide gives me loads of cool information for getting system info, system configs, all that good stuff

[crude stump]

And?

[hollow stream]

The purpose of the script is to simply grab them, send them back to the SSH recievee(?) so they can be reviewed

I'm ngl I am bad with this whole cybersec thing and I'm unsure of the commands I need

[loud marlin]

yea... let's drop it

[sinful moon]

look at what enum4linux is doing typically

[hollow stream]

Yeah exactly

I wanted to build my own script for fun

[crude stump]

Got a stupid head cold

[hollow stream]

It's horribly overengineered: just the way I like it

[crude stump]

Sucks fr

[sinful moon]

Yeah I mean see what it’s running internally to try to get a sense

[hollow stream]

Hope you get well soon man 👍

[hollow stream]

Ahh I see

[sinful moon]

Here’s a good list of things to check more broadly: https://book.hacktricks.xyz/linux-hardening/linux-privilege-escalation-checklist

[crude stump]

Thanks but it’s nothing tbh. Just stuffed up.

[sinful moon]

I don’t know this room tbh, just general advice

[crude stump]

Y’all ever seen a polydactyl cat before

[hollow stream]

I see, this checklist is awesome but it's not the scope of this project, let me grab what I need from the room and I'll come back to you

[sinful moon]

But you can effectively automate a lot of this, unless there’s monitored SIEM and or EDR on the system

[hollow stream]

I'm assuming it's not, it seems like a fairly simple room

It's a blue team exercise

[crude stump]

They got THUMBS

[sinful moon]

Yeah no Linux rooms on THM will have EDR, those products require business licensing

[crude stump]

AH

[hollow stream]

AH

[sinful moon]

But I deployed EDR on all of my Linux servers at work

[hollow stream]

Hmm

Could be nice to research and develop a script for that

[sinful moon]

Yeah even if you just re-create something like Enum4Linux, still great experience doing it yourself

also I hope I’m not crazy, because I do swear enum4linux does both WIndows and Linux enumeration, but please disregard me if it’s Windows only

[hollow stream]

But for now, here's what I would like to have:

• OS release info from /etc/os-release
• User accounts information from /etc/passwd
• Sudoers list from /etc/sudoers
  Once I get these basic things, I should be set to do the rest

[sinful moon]

Yeah all trivial… besides lol the last two

[hollow stream]

I plan to get the files from the machine and copy them into a directory for the user to review

[hollow stream]

Yeah haha, but I have root priviledges so escalation isn't an issue

[sinful moon]

you can’t just cat /etc/passwd without escalated permissions

fair not sure how general purpose you wanted this to be

[blazing granite]

AFAIK is Windows and Samba

[sinful moon]

You can just output the /etc/os-release and regex for the Distro if you really need to detect

[hollow stream]

Not complex at all, it's a script I plan to build up overtime should I need it

[sinful moon]

Thanks, yeah that’s why I was second guessing myself

[twin ridge]

Gave +1 Rep to @blazing granite (current: #149 - 43)

[sinful moon]

Sorry I meant to say /etc/shadow

[blazing granite]

but I can confirm 100% I have used it only on Windows

[sinful moon]

/etc/passwd is obviously readable by all and thus why we use shadow

[hollow stream]

What would be the commands to download the file? scp?

[blazing granite]

it's for kali so tricky one runs on Linux

[hollow stream]

I'm bad with linux 😅

[sinful moon]

Yeah you can use scp, it’s technically depreciated in favor of sftp but it works fine

[hollow stream]

Yeah it's installed

[hollow stream]

https://tenor.com/view/perfect-popcorn-michael-jackson-gif-26271837

Do tell 🙂

Yeah we're good on that end

[sinful moon]

People don’t use scp much anymore, I don’t know the full reasonining, sftp is interactive and I’m not sure if it’s easy to script

[hollow stream]

I'm sure I can support it

[sinful moon]

It sure still works but depreciated, really no big deal

Indeed, but I honestly didn’t expect to see scp depreciated since it is used a good bit in scripting

[hollow stream]

I think that's my long term goal

[sinful moon]

I for sure just sftp when I need dem files but yeah interactive sessions

[hollow stream]

That'll be easy to implement

The package I'm using supports SFTP

[blazing granite]

@sinful moon https://www.kali.org/tools/enum4linux/ I checked Windows and Samba, indeed 🙂

[sinful moon]

That’ll do yep

[hollow stream]

If you have the permissions, obviously

[sinful moon]

Thank you, that was tickling the back of my head like I indeed made a mistake.

[hollow stream]

Seems so, I'll let you know!

[sinful moon]

But yeah that HackTricks Priv Esclation checklist is a good guide for things to check indeed

[blazing granite]

I checked because I wasn't sure on my answer either 😂

[sinful moon]

You sure can with libraries like NaCL is using in Python. I’m not familiar with bash scripting with sftp directly. I probably would have used scp instead for scripts until more recently indeed

SFTP supports all of this obviously, I just literally don’t know how much is exposed programmatically in the sftp client

They’re trying to do enumeration of the Linux system writ large

ssh was just avaliable connection to script

Just one THM room with the potential for more, just scripting learning

lol idk why I’m answering for you Android, but just quick info to fill people in

Interesting, yeah SFTP uses the same kinda syntax indeed, scripting it is something I’ve never tried either

Indeed

[hollow stream]

┌──(kali㉿kali)-[~/CustomScripts]
└─$ python linuxForensicsCheatsheet.py 10.10.97.6 -u root -p password
Connection succeeded!
FTP Connection opened!
FTP: Got test.txt
FTP Connection closed.
Connection closed.
``` Bingo!

It has colours normally

That's very important it has the colours

[sinful moon]

lol screenshots are welcome too. You can do syntax highlighting in Discord as well but obvs not the same

Yep! Free SFTP for any ssh

I use it all the time

For sure, currently best method to get files into my work Linux VPSes I deployed

It’s more or less the same APIs, it’s more just scp client was depreciated

also yeah doesn’t mean scp will stop working just like you can still use ifconfig if you want in Linux

[blazing granite]

I kind like it without colours, feels like home, a trip to memory lane so speak. Old Linux/Unix didn't have colours, if you really need colours to see what it's what you need to go back to the books and study more 😂

[sinful moon]

meanwhile in BSD land, ifconfig is still current and best practice since maintained by BSD core teams

[hollow stream]

Maybe I could include a flag for "retro mode" 🤣

Right, I assume that /etc/os-release is a file?

[sinful moon]

Yes, it’s always text but as mentioned above it’s not always universal to parse

better indeed

[hollow stream]

What's globbing?

[sinful moon]

also wouldn’t hurt just to do your own uname -a and other sane steps

Indeed but covering the bases

It can be at times lol

[candid goblet]

hey guys, im a little new to wireshark and am trying to analyze a pcap file for a lab im doing. I was wondering if anyone here might be able to give me some pointers cause i rlly cant figure out how to dig much out of it

(not a tryhackme lab btw, its from online)

If anyones down to look into it with me that would be awesome

[sinful moon]

Have you done the TryHackMe rooms on Wireshark? Honestly Wireshark is pretty straight forward until you get into much more advanced content as was in THM Advent of Cyber Side Challenge 2023

[hollow stream]

Nice

[candid goblet]

Yes but im still confused ab where i should be looking on it

[sinful moon]

Just having some basic Wireshark knowledge should let you do what you need in a vast majority of cases

[candid goblet]

thats whats bothering me lol

ik its a ransomeware

but i cant seem to find much more on it

[hollow stream]

I know this is a really dumb question, but when you say "scrub them manually", wdym?

And yes this script is dead simple but I am starting out for now

[sinful moon]

If you found that much, you can likely reverse a lot of how the infection happened and more. I doubt they’ll have you decrypting HTTPS certs to do so, but that is something that Wireshark can do.

[candid goblet]

Its probably a super easy pcap and im jsut too braindead from being sick ngl

[sinful moon]

If you actually need to decrypt HTTPS (not common) you iirc need the server’s private key which is quite uncommon

[candid goblet]

severly doubt thats the case with this, its supposed to be an introductory pcap from what i gathered

[sinful moon]

then yeah likely unencrypted, I’d pull on that thread where you actually found the ransomware, and see how and why

[polar spoke]

unless reterminated within the network

[candid goblet]

i found out it was most likely a ransomeware by filtering dns and searching a suspicious website

[hollow stream]

That's fair. For tonight though, I'm just having the script grab the files I need, and if I need to run a command I'll save them to a seperate file.

I've got university in the morning and I have about 40 mins to finish it haha

If the script works I'll start parsing the files and looking for unusual activity

[sinful moon]

Great point, yeah we specifically don’t do deep packet inspection at work, but fair i have some Linux setups which terminate SSL/TLS in one spot for multiple endpoints

[sinful moon]

Now that you’ve found it. Keep that packet number and unfilter. Trace activity to that remote IP both backwards and foward

[hollow stream]

Which would be better? ip address show or ifconfig?

Answering my own question, if I wanted a more verbose output, ifconfig would be better

[sinful moon]

ip a even shorter and same difference. But you’ll likely need to parse to be readable in a quick script

as mentioned above ifconfig has been officially depreciated for years on Linux and many distros require additional packages to be downloaded to use it

[hollow stream]

Aah I see, so ip a would be better

Cheers

[blazing granite]

I like ifconfig 😂

[sinful moon]

Just use *BSD where ifconfig is current and supported c:

[hollow stream]

Added to the retro flag!