general

[shell nova]

I actually submitted that talk as a joke

[glass nest]

and my hollow skull makes my voice sound deeper

[devout palm]

Whenever i sing on my own, it feels great at first but then i ruin a note and feel embarrassed

[sick lance]

Aye OK Barry.

[shell nova]

My recorded voice is deeper than what I hear

[glass nest]

i'd prefer Morgan, but Barry is cool 😄

[sick lance]

Morgan White doesn't have the same ring to it.

[shell nova]

Barry Freeman?

[glass nest]

'Andy Dufresne'

[sick lance]

White, Barry White.

[shell nova]

I know, I was taking the joke too far, again

[devout palm]

Coffee coffee coffee

[shell nova]

Tea?

[devout palm]

That'd work too

[glass nest]

Hot Bovril?

[devout palm]

beef tea?

[glass nest]

Pretty much 😄

[devout palm]

Sure

[chilly veldt]

On my way to work nr2

[fiery quest]

where would i go to learn about yersinia network protocols

[pallid epoch]

Anyone here have their own CVE registered

[near hawk]

Pretty sure quite a few people here do

[chilly veldt]

Yeah, Ryan does I think

[shut hawk]

Many do

[pallid epoch]

How much time does it take for a confirmed bug to be registered as the CVE? (If the company itself is in CNA)?

Average

[near hawk]

I believe muiri has one as well not sure

[chilly veldt]

Depends I guess

[pallid epoch]

Does it take more than 1 month?

[chilly veldt]

Could easily yes

Have friends who have waited 3 months on theirs before they got it

[near hawk]

Yea depens on severity and patching i guess

[lament tendon]

Just installed QubesOS.
It‘s completely broken.
I hate it here.

[rapid merlin]

ngl these active directory stuff got me on ropes

the entire thing is just intertwined

[ionic bloom]

Its open flr everyone btw

[shell nova]

probably depends on when the fix is released

[bold latch]

It's strange and rickety the first time you install it compared to your average OS, yeah. Its built with the infrastructure you'll use the VMs more than the host OS

[pallid epoch]

I mean, if they applied for a CVE (after fix) how much time will it take approx? Does it depend on the CNA

[shell nova]

who cuts vertically?

[boreal scarab]

@sinful moon wanna feel old? https://youtube.com/shorts/2vU-ozLcbYs?si=aTPmXVk0sfjUsiM6

[proven quartz]

clearly people who can't handle more sandwich

[boreal scarab]

Psychopaths

The blockbuster one 💀

I remember going to those and renting PS2 games 💀

[devout palm]

lfie bug?

[chrome marsh]

Hi everyone, I was just curious do we have roles we can assign ourselves if your going/becoming a red teamer or Blue teamer..etc

[devout palm]

IIRC Red teamer role was for an event and it got deleted

There are no specific roles for that

[chrome marsh]

Ah I see thank you!

[smoky isle]

That's funny, I am the costume lol -- Party like it's '99 fo' eva

[lament tendon]

Doesn't really help that my installation seems to be busted. Got no templates, no network, only Dom0 runs and no of the buttons in the qube manager do anything.

dnf is not present either.

[shut hawk]

What are you installing it for?

[grim sparrow]

Your avatar is: https://cdn.discordapp.com/avatars/302122762858921984/cd1cbc2180098704465ce41c3a810afb.webp

[mossy river]

L Bozo

[shut hawk]

https://tenor.com/view/perms-no-perms-gif-19925400

[mossy river]

Going over old clips with my friends is so funny

[shut hawk]

Managed to do a 720 today skiing! (definitely didn't fall over at the end)

[mossy river]

ooo

now do a backflip

[shut hawk]

check dms

[bold latch]

Happened to me last time I tried installing Qubes as well. Thought it was the fact I didn't allocate enough space for the machine types

[whole yew]

Honestly that's kind of the use case of Qubes. If you don't have a really good understanding of linux, networking, VMs, and containers, you are going to struggle a LOT

[bold latch]

You ever think about how intensive Qubes probably is on disks? It has to commit a read of a few GBs worth of template data each time a new machine is started to copy to mem

[chrome marsh]

Got it from this site: https://www.flaticon.com/

You can pick and choose what icon you want and download it.

[bold latch]

Yep, as I'd said while ago, takes a steep learning curve

[drifting maple]

If i have to make a ret2libc atack how do i leak the libc base address on the remote system? I can do a intf vulnerabilty btw, and also i have PIE enbled on the binarry

[scarlet mantle]

SAMEE

[simple valve]

is this for a THM room

[drifting maple]

yes

[simple valve]

then #room-help pls

someone can help you there more

[lament tendon]

I am down for that. And struggeling.

Lmao.

Currently preparing a new installation media, maybe that will work.

[lament tendon]

Hmm, I gave the entire thing 1.4 TB or storage.

For the VMs it showed a little over 1.2 TB being available.

So that should be ok, I suppose.

Wonder whether it has something to do with the fact that I have two separate SSDs, maybe I should install it on only one disk or something.

[boreal scarab]

To 3d print an m.2 screw hmmmmm

[glass nest]

thats a challenge

[boreal scarab]

Yah, so tiny

Even with 0.4 or 0.6mm nozzle at 0.1/0.2 layer height it's still going to be a PITA

[glass nest]

Yeah. filament is 1.75.

Just the width of that.

might be easirt to make a 2mm 'pin' then tap it

[boreal scarab]

It's so tiny. I can't find someone on Thingiverse who has posted it

[glass nest]

I don't think it'd be possible..

just based on the filament/nozzle with.

It'd have to be smaller/equal to the threads

[boreal scarab]

To spend pennies at a hardware store for one, or hope that the 3d printed 2mm pin doesn't break in my server... HMMMMM

[glass nest]

Print it. Don't risk leaving the house. Bears live in the outside.

[boreal scarab]

Like it's already got a standoff in it, so can't put my own standoff

Because this thing is a PITA to get out

[boreal scarab]

So do hooman

Got the standoff out, thanks IFixIt. Never have used the top row. Legit only use the J1 bit, cause that's the standard size for everything electronic apparently lol

[glass nest]

So you were just whinging for no real reason?

[boreal scarab]

A yup

... standoff is stuck in this bit

https://tenor.com/view/checked-out-gif-8139111214977286037

[glass nest]

Hahaha

I mean.. Oh, thats so bad for you

[devout palm]

hihi

[glass nest]

Sorry, that was a cough - Might have looked like laughter

[devout palm]

3D Printing is pretty awesome

When i get one, i will build a raspberry pi case

[glass nest]

Nah, it's boring.

[devout palm]

how

you can do everything

[glass nest]

Dunno, i'm just being argumentitive for no reason

And I've not printed anything in days 😄

[devout palm]

Phone case, phone holder, roof

[boreal scarab]

Welp, hardware store I go, because this standoff from my dad's new rig is not the right height, and the screw is too short to screw into this server standoff

[glass nest]

good luck. I hope the bears don't get you

[boreal scarab]

At this point, I hope they do

[clear jackal]

@stoic surge please do not send me unsolicited DMs

[stoic surge]

It would be helpful if someone could answer my queries . I did not get any response previously .

@clear jackal

[glass nest]

cmon man. We are all just people here, volounteering our own time.

[stoic surge]

I would refrain from doing so , it's just that I needed some guidance as a beginner on how to approach certain things . Hope all's cool

[clear jackal]

I am not at your beck and call. If you have career questions, #cyber-and-careers is the appropriate place to ask.

[glass nest]

Can you be at my beck an call? In case I have a moose-based emergency?

They are rare, but they happen

[stoic surge]

Sure . You could have put it in a better way tho

Sorry for disturbing

[mossy river]

@stoic surge Have you read the server rules?

[clear jackal]

Yes, I will swim at 30mph across the ocean

[glass nest]

them spindly legs have a lot of power, it seems

[blazing granite]

Do you need some moose for your hair? 😂

[hollow pivot]

Just saw your post in #cyber-and-careers , your question might need to be a bit more specific than "How should I go about things"

Here are some roadmaps that could help https://www.sans.org/cyber-security-skills-roadmap/ and https://pauljerimy.com/security-certification-roadmap/

As for TryHackMe, you can start with the fundamentals (Complete beginner or/and Pre Security paths) then go onto JR pentester and Red teaming paths

[stoic surge]

@mossy river I happened to make a mistake and I do apologise. It's a rookie error .

[mossy river]

Just asking if you have read the rules as you did press the “I agree” button when you joined the server 🙂

If you haven’t, I would recommend reading them :)

[stoic surge]

I posted my queries but somehow they didn't get through for a couple of days . In the heat of the moment , I went ahead for personal feedback .

[stoic surge]

I have but I might have overlooked some details . Will make sure to do so

[rapid merlin]

hello 😄

[stoic surge]

Do , I go ahead and post my queries on the #cyber-and-careers ?

[glass nest]

Gonzo has given you some solid advice above

[stoic surge]

Thanks a lot . I appreciate your response 😊 .

[twin ridge]

Gave +1 Rep to @hollow pivot (current: #51 - 129)

[stoic surge]

Thanks , I missed it

Earlier

[hollow pivot]

No problemo, feel free to DM if you have questions, I am not a pentester or anything close, but I can try help 🙂

[sand trench]

Waits for new tryhackme room exitedly

[rapid merlin]

Guys, It is possible To do Evil Twin Attack with ESP32? Or it is possible with ESP8266 only?

[lament tendon]

I have an ISP32 with a 2.4GHz wifi chip, I'd suppose that could work.

Never tried it tho.

[rapid merlin]

Thabks for this

[mossy river]

Keep this to the advanced channels please

[finite basalt]

Ever played with an NRF52840? they're neat, they can do bluetooth and wifi 2.4ghz

I've got one programmed for BLE sniffing, it's quite cool, works with wireshark as an external capture interface using a python script

[rapid merlin]

Okay

[devout palm]

What's up James

[naive violet]

Big fan, and they're cheap

@lament tendon @finite basalt You seen the esp32 based satellite ground station project?
Receive data from spaaaaaaaaaaace

https://tenor.com/view/space-what-gif-23991655

[lament tendon]

Nope, only the flipper and it‘s dev board. 😅

[lament tendon]

Damn, that‘s actually insane.

[crude stump]

Hello

Bots a opp

Before I got rudly muted by the bot. I was going to send the offical discord for NZXT. They have there own discord if you want to ask them technical questions

[boreal scarab]

https://tenor.com/view/mintydoge-minty-doge-dogecoin-meme-gif-25656820

[lament tendon]

Is the bot really an object oriented program?

[crude stump]

😂

Yes

[shell nova]

yay comments!

[crude stump]

Not cool comments

[lament tendon]

Is this a room you‘re making?

[crude stump]

What ya making

[shell nova]

not for THM...yet

making an easy CTF

[devout palm]

Unless there's a reflected XSS

[shell nova]

shouldn't be

[lament tendon]

I see.

[devout palm]

Just noticed you've tried it

[lament tendon]

I‘m doing this HTB room right now, and it literally crashes itself after a while for reasons I understand but don‘t want to type out on mobile.

[shell nova]

that would have been stored

[lament tendon]

Doubtful this is intended, it is really annoying.

Don‘t make something like this.

[mossy river]

Please make sure to ask before sending discord links to external servers 🙂

[devout palm]

Oh yea

[crude stump]

Will do

[shell nova]

even then, automod doesn't like it

[boreal scarab]

Go to the hardware store to pick up an m2 5mm screw for my m.2.

Go there guy was like "m2 is 2mm, not 5mm." Thank you, I know. 5mm is the damn length

[quasi plaza]

hey guys

[shut hawk]

watt the

[quasi plaza]

are you paying for the subscriptions or using own Virtual Machines?

[shut hawk]

I've always used my own VM

Unless I'm traveling

[shut hawk]

A lot more flexibility

[glass nest]

did you just.. reply to yourself?

[quasi plaza]

did you paid for tryhackme? I´m just starting and want to make sure

[glass nest]

the subcription opens up a bunch more rooms aswell

[devout palm]

lol

[shut hawk]

Agreed

[quasi plaza]

do I need rooms?

as a beginner

[glass nest]

Rooms are what we call each of the challenges and tutorials on the site. about 80% of them are free, so you don't NEED a subscription, but it does add more than a faster attackbox 🙂

[sick lance]

Always a good feeling when you're the first person to drop something in VirusTotal.

[rancid lava]

hello, i want to start openvpn with wsl ubuntu but the vpn dont want to work...

[sick lance]

Wsl is pants for networking.

You might run in to issues with that constantly.

[rancid lava]

okayy thanks and what is the solutions ?

[sick lance]

Personally, I'd just suggest using a VM.

[boreal scarab]

@hot cairn this server is LOUD AS FUCK

So loud I can't hear myself think nor hear my other server

[devout palm]

Because you're shouting

[boreal scarab]

Finnaly. Fucker slowed down in RPM. I can hear myself

Fml... that 32GB of ram I put in, yah no good

Back down to 16

[sick lance]

Let me Ferox it.

[rancid lava]

yesss but in the long term the vm become slow

[sick lance]

you must be doing something wrong then.

[rancid lava]

yes maybe

thanks

[boreal scarab]

It's a FW

Tf....

[sick lance]

New room, 25 min(s)

[boreal scarab]

https://tenor.com/view/lfg-kama-chameleons-lets-fucking-gif-25117697

Fixed the ram issue

It doesn't like slot 2 and 4, but 1 and 3 work.

[shut hawk]

Eh WSL2 is fine

[boreal scarab]

Yeh! Not the one in turb features on or off, but the one from the store

[sick lance]

So you say.

But every other day I see people having issues with it 🤷

[shut hawk]

Link?

[sick lance]

Literally this server...

[shut hawk]

Yeah, link to the messages lol

[sick lance]

Stop being lazy.

You search 🤓

[boreal scarab]

Quick question.

Got a ThinkServer RS160, just has 1 256GB M.2 gen 3X4.

This server is just going to be a firewall. Which is better, UFS or ZFS?

[shut hawk]

You're the one making the claim lol

[sick lance]

There's one.

Is Ben reliable enough for you?

Or do you need more?

[mossy river]

How about you both provide proof

One for and one against, we’re all intellectuals we can have a spirited debate

[boreal scarab]

We are?

[sick lance]

we are, jury is still out on you..

[boreal scarab]

https://tenor.com/view/confused-what-really-no-words-huh-gif-11734443283337114503

[mossy river]

I meant me, Jayy, Scrubz

[boreal scarab]

I hate you all

[shut hawk]

That's not "every other day", also if you look at the full context Ben said "may be weird", that doesn't mean it's "pants for networking"

#general message

[mossy river]

WSL 2 was notorious for networking problems when it was first released.

As for now, I don’t know, but we generally do not recommend it for TryHackMe.

[sick lance]

It's pants for netowrking for tunnels on tryhackme.

Fixed it for you 🤓

[crude stump]

AHHHHHHH

[boreal scarab]

Booting up. It sounded like my Dell PowerEdge 2950. Then slowed down to actually desktop air-cooled quiet noise. Quite lower than my Quanta 1U server.

It legit sounded like an airport

[sick lance]

I mean, I get it works for you ok.

I wouldn't suggest it to anyone.

[shut hawk]

Well that's better, I can agree with that

[boreal scarab]

But here's the question. Was that WSL through Windows Feautures, or Microsoft Store?

[shut hawk]

But giving it a blanket statement of "pants for networking" is doing it injustice imo

[hot cairn]

That’s a server for ya

[boreal scarab]

Server go BRRRRRRRRRR.
I could hear it throughout my house F

[buoyant tree]

hullo

[wind lake]

hiiii

my server is still in hibernation

im moving soon to a 1 bedroom im curious if ill have space anywhere to set it up

[sick lance]

Hang it from the ceiling.

[boreal scarab]

What server?

[buoyant tree]

So the bed's for the server?

[wind lake]

yeah ill sleep in the bathtub

scrubz ur a genius

[wind lake]

honestly i cant remember

i havent used it since i moved in april last year

[boreal scarab]

It's been in hibernation for that long? Dang

[buoyant tree]

keep server in the bathtub instead, water cooling

[wind lake]

say how much do you think i could sell a 48 port 2960 with PoE?

[split compass]

How loud is your server?

[wind lake]

not terrible tbh

[boreal scarab]

My Quanta I don't know the model, their naming is very weird, but this ThinkSever RS160 is quite nice

[split compass]

If you don't mind being in the same room, see if you can get a half-height rack to store it in, or make an ikea rack.

[wind lake]

i have a coffee table from ikea that fits it perfectly

[boreal scarab]

@hot cairn I did a big whoopsy. I installed PFSense rather than OPNSense

[wind lake]

might be a centre piece in the living room

[hot cairn]

It’ll work lol

[split compass]

Did it have up-to-date enough drivers for your NICs?

[hot cairn]

I got a 42u rack in my 1bdr

It’s fun

[boreal scarab]

Well, if I don't like PFSense, I'll just burn it to the ground and install OPNSense

[split compass]

I would be amazed if you can't find an export/import utility for rules between the two.

[wind lake]

ya it might be a bedroom special

[sonic dust]

dude this pentest report software has a msf command generator built in

tf

[split compass]

Which software?

[wind lake]

in unrelated news, thank god for wget

lets go wget

you get it wget

so far the only way ive been able to get anything downloaded of this 26gb file

[split compass]

curl requires extra flags to make it resumable.

[sonic dust]

even has TOOL INTEGRATION

[wind lake]

yeah i tried witth curl with those flags and it still broke

[buoyant tree]

Wget is simple

[shut hawk]

Bee, try aria2

[sonic dust]

https://gitlab.com/invuls/pentest-projects/pcf

[shut hawk]

Might be useful here

[wind lake]

wus that

[split compass]

Thanks, I'll have a look 🙂

[twin ridge]

Gave +1 Rep to @sonic dust (current: #1999 - 1)

[shut hawk]

https://aria2.github.io/

Download utility

[sonic dust]

pretty nifty

[wind lake]

if this breaks, ill give it a try

[buoyant tree]

good thing its open src

[sonic dust]

you can upload from nmap msf etc

even upload creds and such

[buoyant tree]

hmm its got burp support

[sonic dust]

yes it does

[buoyant tree]

learnin burp shortcuts atm

tired of clicking 56 times

[sonic dust]

whats really nice is the nmap upload. everything you scan is auto uploaded via xml

services hostnames ports etc

[buoyant tree]

nice

[sick lance]

I have a pentest report to write soon 💀

[sonic dust]

lol you are welcome @sick lance

[sick lance]

I already had this. lol

[sonic dust]

oh

well screw you for not sharing

[sick lance]

I got it from an old mod.

[sonic dust]

anyways yeah i like this better than mose

tried sysreptor PT, pwndocs etc

[mellow pumice]

0-0

[real void]

I am an intern. I need help with this.

I have a csv file with 4000 ip addr and need to do whois enum and add the info in other column respectively. How can I do that?

[sonic dust]

jfc 4k?

[sick lance]

Is this for your work/school?

[real void]

Company I am intern

[buoyant tree]

don't you study digital forensics?

[sick lance]

We don't help with that sort of stuff. 🙂

[sick lance]

I do both.

[shut hawk]

I'd advise talking to your senior @real void

[mellow pumice]

ohhh

[shut hawk]

Better than asking a random discord server full of strangers

[mellow pumice]

spittin fax

[split compass]

Yeah, I always see a commercial solution recommended, but haven't looked for any community solutions.

[sick lance]

Red team room this week.

[buoyant tree]

Hmm, although a question I forgot to ask but I heard about.
Are forensics reports required to be super simple but still include all the complex stuff. (Exact example I was given, Somebodys grandmother should be able to understand it)

[lament tendon]

Ask your supervisor, that will probably be the easiest solution. ^_^

[real void]

Ok

[sick lance]

Whoever is reading the report, should be able to repeat the process so they can get the same result and conclusion.

As it the resuts need to be identical, it has to be factually correct so it won't get dismissed as evidence in court.

[boreal scarab]

Dunno, I probably need to create rules. Gotta read up on OPNSense

[sonic dust]

i wish they would bring back the AD network:'(

[blazing stone]

test

[real void]

I just wanted to know if there is some website or method to do this quick. So I wouldn't look stupid to ask my supervisor.

[buoyant tree]

but what about the simplicity element?

[boreal scarab]

Dunno, 2017 server, so probably

[blazing stone]

the test tested

[sick lance]

Depends on the writer and template.

I've seen that were simple, I've seen some that was like alphabet soup

[split compass]

I just know that was an issue that LTT ran into when they moved buildings with one of their 25Gbps NICs, they had to dop PFSense and switch to OPNSense because PFSense prioritizes stability to a detrimental level.

[heady nova]

ello

[buoyant tree]

hmm.

[split compass]

Tons of ways to accomplish this.
Not really a hacker topic specifically, more of a data analyst topic.

But you could use a combination of simple tools like awk and sed.
You could use Python with the csv library imported
You could use PowerShell with the "Import-Csv" cmdlet.

The beauty of computers is there's never one way, and rarely one "right" way to skin a frame buffer.

[wind lake]

python

[real void]

But whois required connecting to server won't it reject request of that huge amount so I have to take that into account as well?

[wind lake]

you can set python to only do a whois every couple seconds or somethin

[split compass]

That will depend on the whois solution you use, if you want to use a public one like domaintools I believe you can purchase api access to allow for large number of searches.

[real void]

Yeah I understand, there are few website I know thanks I'll talk with something in my hand now.

[twin ridge]

Gave +1 Rep to @split compass (current: #54 - 123)

[wind lake]

weve reached %1 downloaded lets goooooo

W's in chat

[buoyant tree]

what u downloading tho

[wind lake]

not relevant

its for work tho

[buoyant tree]

oh k

btw bee u got any recommendations for instrumental jazz

[split compass]

No worries.
Take a small subset of your data, maybe 10 lines, to make a sample set

w/ linux head -10 file.csv > sample_set.csv

Play around with your idea of how you want to make your requests, as Jayy said, invite your seniors to see and direct what you're working on.
Once you have your sample set working, if you're relying on something with a commercial API, advise your manager that you need them to purchase you API access.

Best of luck.

[wind lake]

john coltrane, kind of blue by miles davis, tigran hamasyan

[chilly veldt]

Ahhhhh

[buoyant tree]

will give it a listen in 1.5 hours

[shell nova]

Never had issues with WSL rev shells, just things mucking with iptables

[buoyant tree]

also question why would someone want to view hex in Burp SUite

[wind lake]

have fun

[wind lake]

there are valid reasons, i just cant articulate them right now..

[boreal scarab]

Yah, I run 1g, not 25 lol

[loud marlin]

hex can show some detailed things or so

[buoyant tree]

...

[buoyant tree]

such as

[boreal scarab]

My 10g ports on my Quanta is connected straight to the machines

[split compass]

Characters not rendered in ascii

[loud marlin]

like some weird looking chars, like not human readable things

[buoyant tree]

oh k, but how might that be useful? any examples

[loud marlin]

well any char have his own hex value

so if you do not know how to get something in clear text or so you can check hex value and get to be more clear

[wind lake]

its own hex value :)

[loud marlin]

language barried... mea culpa 🙂

[wind lake]

i know, thats why i corrected! no harm

[chilly veldt]

My brain not braining

[loud marlin]

yea ik... but thanks 🙂

[twin ridge]

Gave +1 Rep to @wind lake (current: #58 - 115)

[wind lake]

brain harder or osmething

[loud marlin]

did you try turn it off and on

[split compass]

echo -e \033[95m some characters are just weird and do nothing. \033[0m

Some characters are invisible, but will change whether an value/field matches the expected input format.
if select UserName0x01 from user_table == UserName0x01.value

Not to mention any kind of simple control characters that might be used.

[mossy river]

Trying to take a picture at the gym after doing a heavy workout 😭 they’re all blurry

[chilly veldt]

My brain be thinking about this one thing

[wind lake]

shaky jabba

strong jabba

[split compass]

What camera?

[wind lake]

brains do that sometimes

[chilly veldt]

That's cause your muscles tired after workout

[mossy river]

Literally me https://open.spotify.com/track/7gcMKL3lnDxsp4bIXyv6Zk?si=XU_u1dDBR0yRnZgBfbXRNg

[chilly veldt]

Yeeeeeee, it's cool thoughts though

[mossy river]

iPhone 14 Pro Max

[split compass]

Yeah, hard to find much better digital stabilization.

Try just propping it up somewhere and shouting "Hey Siri take a photo"

[loud marlin]

@buoyant tree
might help

[split compass]

Cyber chef is great. 🙂

[loud marlin]

id does his job greatly

[split compass]

I should try running one on local hardware and see if it is more performant than the GCHQ shared instance.

[wind lake]

it very well might be

[molten sky]

cyberchef is overrated

just do it by hand

[wind lake]

why the festival tickets gotta be so expensive...

[loud marlin]

https://tenor.com/view/slap-gif-25249881

[sick lance]

Doing by hand is over rated,

Do it by feet.

[molten sky]

you've sent this to me a lot lately

[loud marlin]

i save it for very special occasions 🙂

[night prairie]

https://cdn.openai.com/sora/videos/train-window.mp4
https://cdn.openai.com/sora/videos/tokyo-walk.mp4

openai sora looks insane

[graceful thistle]

Anxiety inducing

[night prairie]

Does anyone know if there's any issues with doing LSB image steganography on formats besides PNGs? I can't find anything online that says so, but in class we were told only to work with PNGs for some reason

edit: nvm there's a research paper on it by bharat sinha

[devout palm]

yay

[night prairie]

Oo, what are you using ur pi for?

i still have mine just sitting in a drawer somewhere, it's a model 1 tho so not very powerful xd

or 1b, i dont remember

[devout palm]

I'm planning to code a network management tool

Just playing around right now

[night prairie]

Ah I see, that sounds fun, good luck!

[devout palm]

Thanks

[night prairie]

besides the non-readable characters, imo there might also be some cases where there's a proprietary communication protocol where you might have to manually interpret the bytes
things like when they have the first 2 bytes represent an ID, the next few bytes represent something else, etc.

though I've only seen it in games and through socket communication (to lower latency, idk if ppl do it with http requests too but i'd assume there's things like c2s which do smth similar but for obfuscation, though I may be wrong)

[boreal scarab]

When all you have is 6 inch ethernet cables to configure your FW on your laptop with

https://tenor.com/view/bartlett-west-wing-head-desk-gif-6012433

[shell nova]

Splice them all together

Data rate will plummet but who cares?

[boreal scarab]

Not me! As long as I can get to the WebUI, I don't care if the cable is even 5 mbps

Doesnt help that I'm getting old, bending down to configure this with no seat

I really do hate myself

[split compass]

If not existing C2s, then certainly the one you write? ^_~

[night prairie]

👀

actually wanted to make a really basic one for fun last year but didn't end up doing it

wanted to try a new language when working on it tho, was thinking of going with rust

would be a nice github project

[buoyant tree]

hmm

[buoyant tree]

might be a advanced implementation

[dense cedar]

Islam be upon you, my brothers

I have an important question, what do you mean by port?

Is the port the protocol or the computer port??

[tired peak]

so not a brother but it may help for you to google. Port and protocol are not the same. The port is a number. The protocol is how you communicate on a port

like protocol http often runs on port 80

it it could run on any other port, sometimes you see it on port 8080, 8081 but if a port is available, it can be used

[dense cedar]

Do they have a device?

[tired peak]

what do you mean?

[shell nova]

Not...exactly

A port is more of an identifier used by a service so it can tell what network comms are aimed at it

[dense cedar]

The port has special devices

[shell nova]

There may have once been a hardware analogue, long ago

[tired peak]

ahh no, like hydra said, its part of a client/server architecture

so a server will allocate a port for a service, then a client connects to that part but its not a special device

[shell nova]

You can also use port to describe a device interface, for example serial port, or usb port

But that's a hardware concept

[tired peak]

oh true

[shell nova]

Which is why the question is incomplete

[crude stump]

Wait do Yk how in movies they always show the hackers pcs terminal as green? How do they do that

[tired peak]

green font?

[crude stump]

Yeah

Like that hacker green

[shell nova]

Legacy monitors used green phosphors

It stuck

[dense cedar]

I know the computer ports, such as RJ45

[tired peak]

yeah you are talking physical ports then'

[crude stump]

Ooh

[shell nova]

Very cool tech tbh

[tired peak]

https://hackertyper.net/ you too can be a hacker

[loud marlin]

not sure if is correct representation. but hex is alike hash. if i explain it good

[shell nova]

Cute

[crude stump]

[buoyant tree]

yea understood it a lil

[night prairie]

type color 0a if ur on windows

[loud marlin]

and if char is unreadable like on first pic. you can find his hash value on table

[buoyant tree]

ye

[buoyant tree]

isn't that tree

[rapid merlin]

Hello guys quick silly question, i haven't done any thm in a long time but for RCE with a file upload bypass, i need to bypass the filter then navigate to where my code was uploaded to get it to execute on the server right?

[loud marlin]

https://www.commfront.com/pages/ascii-chart for example

[rapid merlin]

I was being a silly man and just thought uploading the file would get it to execute >_<

[buoyant tree]

time to learn another language, Hex

[lean furnace]

hi do i need to create a new account with my student email to get the student discount? it doesnt let me change my email...

[loud marlin]

is not quite language... is just table representation or so

[night prairie]

Simply setting my student email without verifying gave me the discount last time iirc - though, I'm not sure if you can reach this step with whatever issue you're facing - also don't know if they made it so you have to verify it now or not

[shell nova]

Sounds about right

[night prairie]

hex is a just a different numbering system, shouldn't take long to pick it up
https://learn.sparkfun.com/tutorials/hexadecimal/all

[shell nova]

It's base 16

No more, no less

[chilly veldt]

We do love base 16

[shell nova]

It's a representation of numbers that happens to match binary with less space

[loud marlin]

and hex help into uderstand how cpu understand/translate. if i explain it ok

cos is 2 char

[shell nova]

There is base32, usually used for OTP keys these days

But 2 hex digits represents one byte

[loud marlin]

@buoyant tree so when you find weird chat is like this

[shell nova]

And that's handy

[molten sky]

i find base 1 to be the easiest to remember

[shell nova]

Base 2 is better

[lean furnace]

i just created another account with my student email and it worked thanks mate

[twin ridge]

Gave +1 Rep to @night prairie (current: #99 - 63)

[loud marlin]

so when you wish to program something that have that kind of weird char you can use from hex to ascii or smth like that if you cant tipe that kind of ascii on keyboard

[glass nest]

And useing the alt-codes 😄

[loud marlin]

and that shit also hehe 🙂

[shell nova]

Yeah but use utf-8 instead

[night prairie]

i had a few useful ones i'd use but can't remember them anymore :c

[glass nest]

hold down alt and type a random number.. Go! «

ê <- nice

[shell nova]

On mobile, no alt

[loud marlin]

yea... but what if you need input some Asina chars or something that looks alike the buttons on calculator that you never use 🙂

[crude stump]

Trash

[shell nova]

It's not AI imo

[crude stump]

Number 1 ai hater here y’all

[shell nova]

LLMs sure

[glass nest]

Its the current 'Big thing' so worth learning some security aspect of it

[molten sky]

say orange

[night prairie]

OpenAI's Sora looks insane, I'd like to get into AI at some point, seems like AI's going to be used in every sector in the near future imo

[shell nova]

Pineapple

[crude stump]

Apple

[night prairie]

Pen

[glass nest]

Mango

[molten sky]

https://tenor.com/view/ppap-dance-pikotaro-fad-smile-gif-6099018

[shell nova]

The fruit is a lie

[crude stump]

Wonder what happened to bro

[glass nest]

Just got back from dinner with an old Uni friend. Not see her in ages, and it was lovely. Went to 'blues bar and Grill'

[buoyant tree]

yea trying to **kinda **remember that

[rapid merlin]

Nice i try later

[molten sky]

according to the interwebs, apparently he's still around, but i've never actually seen him again

[crude stump]

Sure she’s a friend 😉

[glass nest]

Haha we did have a thing after Uni, but she lives too far away for anything to happen.

[crude stump]

I see

[buoyant tree]

AI is smart

[night prairie]

Seems he's mainly a TV entertainer and comedian in Japan, would explain why we don't see him in the west

[crude stump]

Esqy got rizz

Duke Dennis rizz 💀

[night prairie]

"make me an AI model that codes whatever I promt it in C"
well.. technically already a thing, needs improvement though

[glass nest]

When I first met her during Uni, I went to hers so we would walk to the Union bar together (As we lived near each other then). When I got there she was playing FFVIII fight a tricky enemy, and had a page of notes - what movees she used, and what the enemy did. It was sooo geeky! We were best mates after that 😄

[molten sky]

she's a fed

[open anvil]

path recommended after finishing complete beginner?

[fast wave]

hi i probably do have kind of stupid question but when using pentest tools like gobuster or nmap or some of these bruteforce/scanning tools do they like use your IP to check? so for example say if you used gobuster on google and it scanned 9k hidden pages google would see that your ip is the one sending the requests?

[crude stump]

💀

[buoyant tree]

eh AI atm is insanely expensive

[molten sky]

if you ask me, try the Jr Pen Tester path or whatever it's called

[crude stump]

D1 hater

[open anvil]

nice ty

[twin ridge]

Gave +1 Rep to @molten sky (current: #93 - 67)

[buoyant tree]

Like SUPER EXPENSIVE

[shell nova]

They won't be, don't worry

[molten sky]

yes

[buoyant tree]

heck Sam Altman asked 7 trillion dollars from the world for GPU's

[night prairie]

@shell nova

[shell nova]

At least AI won't replace humans in any creative fields

[fast wave]

i see

[shell nova]

Yes, and don't scan machines you do not have permission to scan

[fast wave]

im aware now

[shell nova]

Yeah but they can't create. Not truly

[crude stump]

Of course but what is that really gonna take over. Definitely the graphics industry

Tho it’s not perfect

[shell nova]

You hear about game studios wanting to use AI art. That's because they're cheap greedy bastards, but AI art is wildly inconsistant

[crude stump]

Those ai image creations have a hard time creating hands for some reason

[shell nova]

And letters

You'll be fine

[fast wave]

so when using scanners like that its basically like im ddosing cause im sending too many requests or ddos is way more potent?

[crude stump]

Ai won’t take over the cyber industry anytime soon. If that’s what’s your worried about

[shell nova]

More like a DOS

But yeah, you can unintentionally break things

[crude stump]

Too many errors ai makes

[shell nova]

Nah, generated code is still terrible

AI cannot understand intent

[loud marlin]

i think you can't ddos/dos with simple scanning. scan might be detected but not as ddos/dos...

[shell nova]

Might make compilers better though

[night prairie]

I recall reading somewhere that things like nmap scans would sometimes end up taking industrial systems offline lmao

[fast wave]

i see well i did dumb thing and i scanned website with 2K requests before i stopped it (it was supposed to check for 10k so thankfully not) do you think like the server providers are gonna notice?

[loud marlin]

i did happened

[shell nova]

Some industrial systems are running off an old pentium that somehow runs windows XP under a machine

[shell nova]

Probably, but that stuff happens all the time on the net

[night prairie]

i cant remember the name for industrial hardware, the one i had in mind at least

[fast wave]

its not neccessarily illegal no

[shell nova]

Ugh, whatever scraps they can spare at the time

[fast wave]

since i didnt shut it down

and i didnt do any harm

[shell nova]

It technically is

[fast wave]

smh

[shell nova]

I mean I'm testing copilot, it's...alright, but definitely need to reread what it spits out

[loud marlin]

using nmap might not be illegal, but might not be ok to do so. and it can get you in trouble for sure

[mossy river]

Why wouldn't it be illegal?

[fast wave]

yeah i used gobuster

[night prairie]

Your ISP can also have a problem with it

[fast wave]

i see

[night prairie]

wish i used copilot more in beta

[shell nova]

In short, don't do that again

[fast wave]

im aware now

i did it on my school website

that was hella dumb

[mossy river]

[loud marlin]

oh... not sure where exactlyu to put that in scale of not legal/illegal but it can be problem if some big industry caught it

[crude stump]

State website 💀

[shell nova]

Yup

[fast wave]

smh i thought like scraping around isnt illegal

[shell nova]

Big industry will definitely catch it. Might deem it mostly harmless though

[fast wave]

like its publicly available information

[tired peak]

you would be surprised some of the hardware and software that very important systems run

[crude stump]

Technically it’s not if you have to use software to find it

[boreal scarab]

I really do hate firewall rules.. I'm able to ping from my laptop which is after my firewall, to my internals. but I can't ping from my internals to my laptop

[loud marlin]

it is. not smart to do

[shell nova]

No I wouldn't 😉

[tired peak]

well not you...

[fast wave]

i mean it doesnt change anything

i could still do that manually

[mossy river]

That's not scraping, that's a brute force attack

[tired peak]

like it'll something like "our billion dollar program relies on this PC from 1980s..." and you are like "What?"

[fast wave]

damn

[shell nova]

I still have to deal with obsoleting windows XP vms

[loud marlin]

@fast wave as i say:not sure how stupid that is, but aint smart

[fast wave]

yeah

[tired peak]

I've dealt with older than XP and yeah we have XP too

[shell nova]

And there's that mainframe somewhere

[boreal scarab]

Reminds me of the time we went on site and they had a win 95 running a label maker or something.... obv not connected to the network

[tired peak]

I had a program buying scrap parts from ebay because they didn't want to update the software and all current hardware isn't compatible...

so they basically have someone who has alerts for ebay set up

[ruby pier]

Every Cyber Security course should have a section that gives you insight on how to collaborate with administration/c-levels because my lord.

[crude stump]

It’s the infinity certs

[shell nova]

Yup

If we could use AI to predict the stock market, it would already have been done

[night prairie]

Would an LLM alone be able to do smth like this or would you need to specifically train a model on trying to guess the market?

[shell nova]

Probably both, but the market as a whole is more or less unpredictable

[tired peak]

Udacity has a course on AI and financial analysis... its been out there for almost 10 years

[shell nova]

Stock market is more an indication of human behaviour rather than any logical or rational behaviour

[loud marlin]

there is good reason why SCADA system is used to control systems. if AI can predict things will be used as in stock market. on my work, our SCADA cost small 1mil (and more) euro to control things. and it's doing great job

[tired peak]

what you'd really need to predict is how companies are fairing vs the stock market itself

[buoyant tree]

do something dumb like turning the firewall off

or whitelist what u wanna do

[loud marlin]

and tbh, SCADA saved us on few occasion from complete environmental catastrophe...

might nob be legal... humans can't do that speed

[boreal scarab]

Well FW isn't even fully configured yet. I'm able to ping from my laptop (behind the firewall) to my internal network. So laptop is on 1.0 network, internals, for this example, are on 2.0 network.

But my 2.0 network can't ping to the 1.0 network

I am not a network person, so learning this as I go

[tired peak]

there are some companies that are using AI trading today

[loud marlin]

i work in chemical industry. things we develop can be done only if gov allow us. and some things in clear form are scary dangerous if goes out. imagine 99% ammonia got out. around 2000 liters leak will be catastrophe

[tired peak]

but basically they are using best practices vs trying to catch the dips/rises

[shell nova]

HFT is already dodgy

[tired peak]

WealthFront, Schwab, Vanguard, etc all have AI advisors who will auto invest money for you

[loud marlin]

it will be illegal or so even for one moment. i think.

again... not sure how stupid that is, but aint smart

same reason why game cheating is illegal and can be punished

[tired peak]

AI trading isn't illegal

[loud marlin]

fully develop AI that can predict stock market ?

[tired peak]

its doing the best it can, most stock platforms out there have AI trading already

[loud marlin]

hmmm...

oh... crypto...

[tired peak]

I'm not talking about crypto

[loud marlin]

same... i didn't think in of crypto

[chilly veldt]

Stocks

[tired peak]

I'm talking about stocks

[chilly veldt]

I was close to working for a trading company😅

Building their infrastructure

Eh, not exactly what I wanted to do

If I look at it now

[night prairie]

ahhhh this is the word i was looking for earilier, scada

[chilly veldt]

Even though it's green stock, it's a no thanks for me

[tired peak]

I have my money invested via an AI bot

and have been for about 5 years

[chilly veldt]

Nice

[tired peak]

not all my money mind you but some

[chilly veldt]

Yeah, of course, I have done some trading myself

[tired peak]

AI bots aren't sentient

you'd have to provide them direction

[shell nova]

Not much

[loud marlin]

they can't learn from them self. they have knowledge of what ppl provide them

[proven quartz]

They cause each other major problems and usually just end up riffing garbage at each other

[shell nova]

Garbage in, garbage out

[night prairie]

Would you recommend others try it too?

[loud marlin]

when AI reach point of creating better wersion of him self... we are sfucked

[tired peak]

this is my robo (aka AI) advisor. I no longer contribute money to the account but it does pretty good

[shell nova]

Good thing we aren't there

[loud marlin]

yea

[shell nova]

All they can do now is shitpost

Poorly

[rapid merlin]

Evening 👋

[tired peak]

I too can shitpost poorly

[loud marlin]

yea... and they sux on it hehe

[shell nova]

Aye, and I can too, so we're safe

Nah, cause at the end of the day, you still have people

[loud marlin]

if AI use our shitposting as learning data... we are safe for long 🙂

[proven quartz]

There are other major issues with how our current AIs are producing various results and outcomes

[shell nova]

Aside from the plagiarism?

[night prairie]

Wasn't there some Twitter AI account that went unhinged, because well, it was learning from Twitter

think it was made by microsoft

[shell nova]

Tay

[night prairie]

Ah that's the one

[shut hawk]

on the topic of shit-posting and stocks:
https://youtu.be/USKD3vPD6ZA?si=O45LT2IKGcD0tP7g

[night prairie]

Is it commercial software or your own?

[proven quartz]

Well that's a major issue that needs to be tackled with the companies appropriating everyone's creative outputs but there are problems with models and their behaviour, reliability, trustworthiness; we don't know what they're doing and they do very strange and unexpected things sometimes

[shell nova]

Probably turned out better than half of other traders

[chilly veldt]

It did

Actually

I saw the video when he released it

[shell nova]

Saw an entertaining story this morning about someone winning a lawsuit against Air Canada because their chatbot hallucinated a procedure

[boreal scarab]

I'm going insane with OPNSense

[shell nova]

https://www.cbc.ca/news/canada/british-columbia/air-canada-chatbot-lawsuit-1.7116416

[chilly veldt]

That makes no sense

[split compass]

Need only look at the Warren Buffet vs. Day Trader story to know how that turns out and why,

[night prairie]

"In an argument that appeared to flabbergast a small claims adjudicator in British Columbia, the airline attempted to distance itself from its own chatbot's bad advice by claiming the online tool was "a separate legal entity that is responsible for its own actions."
🤨

[boreal scarab]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[shell nova]

Stock markets are mostly random

[shell nova]

That's a really fun defence

[proven quartz]

Yep that's the tip of the iceberg. They have no concept of reality or verification for their outputs so there's nothing in them that makes sense. They're just really bad at giving accurate or precise info

[split compass]

Yep, and any knowledge of variables that can be used to improve outcomes cannot legally be used.

[shell nova]

They're really just trying to predict the next word that makes sense in english

[shell nova]

Unless it's already public data

[alpine kraken]

Is the file inclusion room hard or am I just a noob?

[split compass]

At which point everyone has acted on it, and no edge was given.

[shell nova]

Probably just a noob

[alpine kraken]

Knew it

[shell nova]

Or the info is non obvious

[tepid prairie]

Hello guys who did the new challenge Broken RSA

[buoyant tree]

Anybody used burp's sequencer in a real life application here?

[shell nova]

Keep at it, you'll get it

[tepid prairie]

Breaking RSA

[chilly veldt]

Can't wait till Tuesday ngl

[shell nova]

Not the free version

[proven quartz]

Yeah pretty much, or at least we think that's what we programmed them to do. People are going to keep being fooled by these things until they're regulated properly

[chilly veldt]

People in #1208126025612009492 might have, but no hints for now

[buoyant tree]

Hmm, a question like sequencer needs to make a lotta requests so do they like whitelist your IP or you have to make ways to bypass the rate limits

[split compass]

Fair, like the story from that social media movie; trading oil futures based on weather patterning.

[shell nova]

You'll need to Math your way in that one

[loud marlin]

don't worry... we are all noobs most of time 🙂

[shell nova]

The paid version has no limits

But it's really just a fancy version of hydra

[night prairie]

Are you referring to this? https://medium.com/@cereantuandrei/views-of-warren-buffett-on-day-trading-views-of-warren-buffett-on-day-trading-c72aa35fbd00

[glass nest]

I thought you were the fancy version of Hydra?

[alpine kraken]

Idk honestly. I spent 2 hours in that room and didn't finish the last challenge...

[tired peak]

It's an investment company's offering

[shell nova]

It's a tricky one

[loud marlin]

check writeups... is not against the rules

[chilly veldt]

Esqy can I DM you about something cool happening on Tuesday?

[split compass]

Not going to read right now, but if the TLDR is he and a day trader bet the S&P500's rate of growth vs. the Day Trader's ability to manufacture growth, and the S&P500 won, then yes.

[alpine kraken]

I wanna do it on my own tho. That way I feel like I'm learning something

[glass nest]

Of Course, Bella - you don't need to ask 🙂

[shell nova]

Figure out what server is running, then adapt your payload

[buoyant tree]

I don't believe that hydra does analysis on token strenght

[loud marlin]

fair...

[chilly veldt]

Don't want to break rules 😅

[alpine kraken]

Thank you

[twin ridge]

Gave +1 Rep to @shell nova (current: #12 - 545)

[buoyant tree]

Although I think Burp Suite has the sequencer in the free version

[shell nova]

It's heavy limited

[glass nest]

Thats cool, Bella, My DMs are open you and the other regulars anytime 🙂

[dense cedar]

I have a question

[buoyant tree]

yea its slow but eh its good enough for learning

[loud marlin]

share it with group...

[shell nova]

Or am I confusing with Intruder

[buoyant tree]

that might be the issue here

[shell nova]

Ask away

[buoyant tree]

might be that this screenshot reminds you

[night prairie]

Ah, found it https://finance.yahoo.com/news/warren-buffett-once-bet-1m-113000485.html

wait no wtf

[dense cedar]

what is router

[night prairie]

actually yes

[shell nova]

Broken access control

[loud marlin]

the box that gives you internet

[tired peak]

Did you try googling?

[buoyant tree]

IDOR's for me usually

[shell nova]

Falls under broken access control

[dense cedar]

I know what I mean, so what is its purpose in the network?

[buoyant tree]

yea, although idk why but IDOR's are fun fo rme

[shell nova]

It's not number 1 on the OWASP top 10 for nothing

[loud marlin]

to route trafic... kinda

[tired peak]

Did you try googling?

[loud marlin]

also this

[buoyant tree]

Haven't seen a SQLi on a BB or VDP yet

[dense cedar]

To bring the network together??

[dense cedar]

I tried, but I couldn't

[shell nova]

SQLi should be getting rarer as frameworks are getting better at handling it

[buoyant tree]

yea

but now I see more reports of RCE's than SQLi's in the wild

[shell nova]

rce is usually chained with something else, usually an injection

Not necessarily SQL, command injection is still poorly handled

[night prairie]

https://www.cloudflare.com/learning/network-layer/what-is-a-router/

[shell nova]

RCE is the holy grail for a hacker though

[shell nova]

An RCE will be almost guaranteed critical

[near hawk]

There was one RCE on the DOD

Got disclosed two months ago

[rapid merlin]

Good evening hackers

[buoyant tree]

yea

[dense cedar]

Thank you very much, I will search

[twin ridge]

Gave +1 Rep to @night prairie (current: #99 - 64)

[buoyant tree]

unless they were smart and made a service account for it with limited privileges

[shell nova]

Still can be used as a jump server

[buoyant tree]

yea but would limit exposure

[shell nova]

Not necesaarily

Would complicate the exploit chain sure

[night prairie]

if it's a web server, then the IP would probably be whitelisted on their database server so you could poke around there too ig

[shell nova]

Or internal networks, possibly bypass a firewall

[night prairie]

i rememebr few years ago, i was using my friends database server for one of my projects, we had no IP whitelist and at some point he was testing smth and disabled authentication too
few days later i see my shit aint working, i started investigating and check the database only to find a single record with a ransom note 😂

[shell nova]

Oops

[night prairie]

in my defence i was like 14-15 and knew nothing about security

[shell nova]

Eh, at that age I didn't know what a database was so...

[glass nest]

All your database were belong to someone else?

[shell nova]

Then again the internet was just beginning, JavaScript wasn't really a thing either

[loud marlin]

at that age i didn't know how fly don't fall from sealing =/

[night prairie]

I got into programming early, probably when i was like 8, but stopped programming like 2 years ago (besides a few small things, or uni stuff)

[shell nova]

Magic

[loud marlin]

some wizard shit

[shell nova]

Yup

[loud marlin]

weird indeed

[night prairie]

Ah

[chilly veldt]

https://tenor.com/view/suctioncupman-gif-21721758

[loud marlin]

cartoon teach me that gravity don't work until you look down... then you start falling down 🙂

[buoyant tree]

now am curious

[glass nest]

Of course. And if you program in python, you just need to import antigravity. Solves that challenge

[buoyant tree]

time to google

[loud marlin]

https://tenor.com/view/coyote-kaaleeya-road-runner-delayed-gravity-beep-beep-gif-11880317

[buoyant tree]

oh its a glue

[loud marlin]

tru tru

[night prairie]

Was being hosted by my friend yes, was some small hobby project

couldnt afford a server 😂

[glass nest]

It was an aged internet reference 😄

[night prairie]

or rather, i wasnt old enough for a bank account so couldnt pay for it

[buoyant tree]

eh remember time when I made a minecraft server

and made it have TERRIBLE SECURITY

for complete convivence

[night prairie]

Oh 😛

[buoyant tree]

All of the warning's I got, ok, ok.

[night prairie]

this sounds funny, i'd like to hear more

[chilly veldt]

Depends on your region, position and experience

[buoyant tree]

Password was 123

[proven quartz]

A decent wage is one where you can afford a nice house in a nice neighbourhood, have a wonderful spouse, enjoyable pastimes and holidays, send your kids to college and treat yourself regularly, without the worry of debt or medical issues cramping your lifestyle

[buoyant tree]

and enabled a few other settings that I don't remember

[past sparrow]

It's my usual lobby password in games, so far no one has accidently joined it

[chilly veldt]

looks at my pay and the 57 hours a week I work just to survive living by myself

[buoyant tree]

hmm

[proven quartz]

Whatever your boss is on

[buoyant tree]

depend's on your country

[proven quartz]

I know, it sucks

[past sparrow]

If you take your current salary and subtract financial obligations, are you in plus/minus/zero?

[shell nova]

Yeah that was about 40 years ago

[chilly veldt]

Yup, student pay is not fun

[glass nest]

Mmm pizza rolls

[proven quartz]

Things'll get better

[stray escarp]

hello, i'm new and i want to make basic ctf with my friend, the problem is that idk how to invite him in my room

[shell nova]

Use the jr link

[chilly veldt]

Yeah, just need to land this thing I talked about and then December 2025 I graduate

[past sparrow]

Then depending on degree of financial obligations, you might be earning a decent wage or not so decent

[proven quartz]

That's gonna be one hell of a celebration 🙂

[buoyant tree]

Why don't yall like pizza rolls, just looked them up they look delicious

[chilly veldt]

Yuuuup, gonna be sooo cool, can't wait till the meeting on Tuesday

[stray escarp]

can someone help me pls

[glass nest]

Hydra just did..

[chilly veldt]

Speaking of pizza rolls makes me hungry and I don't have any more calories left

[proven quartz]

🙂 You'll have to let me know how it goes

[chilly veldt]

Will do!

[past sparrow]

Since people are getting their certificates on my profile, how should I approach to get mine as well 🤔

[shell nova]

In the room link, replace room with jr

[night prairie]

😭

[stray escarp]

oh ok i will try thx

[glass nest]

So December = Land thing, Graduate, Xmas and AoC. Damn bella!

[night prairie]

No one would guess the password for my Kali laptop

[past sparrow]

Oh? What is it?

[night prairie]

kalikali

[glass nest]

hunter2

[night prairie]

Default passwords are bad so I changed it

[loud marlin]

toor

[buoyant tree]

In my VM's I just keep it default

[stray escarp]

i did it but it's doesn't work

[buoyant tree]

root

[night prairie]

Yeah I got it default on my VM too, but I take that laptop into uni so I changed it just incase, but don't care enough to put a proper password

[buoyant tree]

Easier to not get logged out of VM's when I keep breaking them

[chilly veldt]

Well land thing = probably this or next month

[buoyant tree]

Change it to this

NeverGonnaGiveYouUp

[molten sky]

honestly probably 5 other people on the entire campus even know what the default is, so i wouldn't even care

[night prairie]

Well, I doubt anyone would guess it

[molten sky]

(in this case)

[night prairie]

I'm doing a hacking course 😭

[molten sky]

okay that's fair

[past sparrow]

If there is nothing of value there, why not 🤷‍♂️

[glass nest]

'If ever you think something is obfusacted enough, some finnish kid in his bedroom will find it' - Thats an internation rule of computers

[native shell]

hi good night guys

[stray escarp]

does someone know how can i do basic pentesting with a friends 😭

[buoyant tree]

actually one of my passwords

guess for what

[night prairie]

Minecraft? 😂

[buoyant tree]

nop, windows vm atm

Trying to see how many ways I can get it to BSOD

[night prairie]

For my macos VM, I set the password to whatever the title of the VMware window was, idk why

Was annoying to enter every time lmao

[buoyant tree]

kekw

[proven quartz]

You can join THM. There's plenty of rooms to try. #start-here

[stray escarp]

we wanted to do rootme, in easy mod but we don't know how to join us

[night prairie]

Any success so far?

[buoyant tree]

more than enough

at my 4th windows VM to break

others couldn't recover

now I know what not do change or delete

or just edit

[loud marlin]

@glass nest here is one more to make you fix you laser
https://www.youtube.com/watch?v=-FnCWjKV8ps

[night prairie]

Oh you want to do it together?
Uhh not sure if you can connect to the same target machine - not easily at least

[buoyant tree]

uhm why would u want to target the exact same machine

u can spawn up 2 machines

[proven quartz]

You will each get your own copy of the machine to attack

[buoyant tree]

and stay on a call

[glass nest]

Dann you, Ralex

[stray escarp]

but can we do it in the same room

[loud marlin]

more soon 🙂

[shell nova]

You should be able to share the ip

[stray escarp]

we wanted to connect two VM on the same room. Is that possible?

[night prairie]

Can you connect to the same VPN profile concurrently?

[shell nova]

Don't need to

[night prairie]

Oh

[loud marlin]

just target same ip

[glass nest]

If you had the mindset of a hacker, you wouldn't be asking.. you'd just be trying it 😄

[shell nova]

If you start a machine and I know the IP I can connect to it

[night prairie]

I thought the machines were tied to your account's VPN profile
Now I know to censor the IP in screenshots 😂

[shell nova]

Hehe

[night prairie]

Too lazy :x

[shell nova]

I had already done it to help someone troubleshoot

[glass nest]

Aye, I've done it a few times... that comment was towards the person who was asking 😄

[loud marlin]

esqy... last one for today...
https://www.youtube.com/watch?v=FDVmWtpZUnE

[shell nova]

Is that a cat with a bat?

[loud marlin]

yep

[tranquil rapids]

hello

can someone help me with something

[loud marlin]

ask

[tranquil rapids]

its kindda embarassing its with my cs hmwrk

its kindda of topic

[loud marlin]

in cyber area or ?

[tranquil rapids]

well i have this prompt and criteria i need to follow

no very basic

[shell nova]

We can't really help with homework, unfortunately

[tranquil rapids]

rip

thank you

apologies

[shell nova]

Depending on some profs, it may be considered cheating

We don't want to take the risk

[tranquil rapids]

oh i see thank you

im sorry for wasting your time

[shell nova]

No worries, go see your prof if you have issues

[glass nest]

nothing stopping you from emailing your tutor if you need clarity

[tranquil rapids]

i dont have a tutor and my engineering classes take a considerable amount of time and and run over his very limited office hours

[shell nova]

What are these green things you speak of?

[glass nest]

Hydra, I think its the food that your food eats

[shell nova]

Best not eat them then

[glass nest]

A Dragon Fruit does look kinda alien

[shell nova]

Yeah that one was 7 iirc

[graceful thistle]

https://tenor.com/view/regal-t-scott-pilgrim-vegan-power-float-gif-11947449

do it right, and unlock real power

[shell nova]

Anyways I dunno, I haven't watched Dragonball Z in 26 years

Who knows

[iron salmon]

nice weekend

[blazing granite]

I liked Thundercats 🙂

[boreal scarab]

I hate myself for getting into the world of Firewall Rules and OPNSense. Yaaaaay going insane time

[loud marlin]

and save button is important

[boreal scarab]

https://tenor.com/view/newspaper-gif-18150652

[sand trench]

t minus 2 days

[iron salmon]

oh god oh god what is going to happen? can i sleep till 1200 on monday?

[sand trench]

pay day for shadow and shadow finally being able to finalize their dragonbox pyra order

[sand trench]

so unlees you shadow you should be able to sleep comfy

unless you also want a dragonbox pyra but the preorder queue is long to say the least

[iron salmon]

oh pay day nice but i guess i have to get up early again sighs

i am getting used to feel stupid had to google that XD

[sand trench]

anyways back to watching avatar the last airbender shadow goes

[molten sky]

can i ask someone a quick question

[hardy copper]

Hey, new here. Was wondering if TryHackMe offers regional prices 🤔

[pine stratus]

1

[pine stratus]

0

[hardy copper]

[pine stratus]

:ke

[molten sky]

thx

[twin ridge]

Gave +1 Rep to @pine stratus (current: #1999 - 1)

[pine stratus]

[iron salmon]

the tryhackme suby is not expensive

[hardy copper]

idk where u live, here 10 dollars is a good amount of money 🤷‍♂️

[pine stratus]

Any time

[iron salmon]

hm might be right there...

[pine stratus]

buy year sub

[hardy copper]

bruh...

I'm a begginer though, should I wait before I buy a sub?

[iron salmon]

no no its true there are places where 10 is a lot sadly

[hardy copper]

I'm doing the pre security course

[iron salmon]

yes try it a bit first

[pine stratus]

from 0 to hero , perseverance is the key

[crude stump]

Do that

Do some free stuff and see how you like it