general

[buoyant tree]

it hooked me in

[sinful moon]

lol top gun?

[buoyant tree]

yup top gun maverick

a great movie

[sinful moon]

Get back to me after you play some Ace Combat lol

Pretty arcadey and fun

[buoyant tree]

eh I uninstalled miles morales and rdr2

now to decide between these 3 to play first

[sinful moon]

They have a whole modern day alt reality earth with insane geopolitics and near future weapons

[buoyant tree]

its chinese?

[vast badger]

THeirs a new DMC?

[sinful moon]

Ace Combat, its Japanese by Namco

[buoyant tree]

its DMC 5

[sinful moon]

The newest entry is a good start

[vast badger]

holly I thought they stopped at 4 when I had my ps3 !

[buoyant tree]

oolala

[sinful moon]

It’s even got Top Gun DLC for you lol

[buoyant tree]

yup

[sinful moon]

Just buy the base game

[boreal scarab]

It's Webkinz!

[buoyant tree]

eh its 18$

[boreal scarab]

Nah! Webkinz! One of my childhood games!

[buoyant tree]

for the complete maverick edition

[sinful moon]

Do it on sale, but that’s not bad compared to the above lol

[buoyant tree]

even if I don't play it still a good collection

[sinful moon]

Just get the base game tbh

Won’t known if you want dlc until later

[buoyant tree]

yea but the next game I want to buy is really undertale

I don't care about the story right now

i want those epic scores

[sinful moon]

lol undertale is kinda all about the story as well

[buoyant tree]

yea but the main reason I am playing it because of the scores

[sinful moon]

May have to spam a fave of mine

[buoyant tree]

They are GREAT

[buoyant tree]

send it over

[sinful moon]

https://youtu.be/9X7I3bW49S8

Epic

[buoyant tree]

yea its good

its my alarm atm also

btw

just thought to tell u

[boreal scarab]

@sinful moon

[buoyant tree]

although for personal listening I prefer taylor davis's version

[boreal scarab]

Some more nastolgia

[sinful moon]

lol yeah I think I did link it previously so makes sense

[buoyant tree]

But daymn the beat of megalovania is just great

1:30 and god daymn its great

[sinful moon]

And nice, yeah I’d heard of this as well

I’m slightly too old for webkins and ToonTown but more than familiar with their tech presence

[buoyant tree]

first I heard you say that

[sinful moon]

And lol watched my fair share on YT videos ok then

[sinful moon]

What do you mean?

[buoyant tree]

You are too old for something

[sinful moon]

When the were new

[buoyant tree]

oh k

[sinful moon]

I’m not excluding me trying out ToonTown Rewritten at some point

[buoyant tree]

oh k

[sinful moon]

Just was a teen and my younger siblings were all in

[buoyant tree]

also Ellie I really need your help in this decision

[buoyant tree]

and the ending changes entirely so great

[buoyant tree]

Which to play first

[sinful moon]

Can’t help when I’ve played only one of those

[buoyant tree]

all are great fighting games just can't decide which one to play first

Evil west I really wanna play for over a few months

but DMC5 i heard is great

[sinful moon]

I would describe them more as beat em ups and similar, fighting game has some Streeter Figher expectations in English

[buoyant tree]

eh ones beat em up

ones slice them up

ones shoot them up

[sinful moon]

Heh totally fair

[buoyant tree]

imma do shooting

Haven't shot a gun in a game in some time

[light sundial]

What is the best VPN file configuration for Asia?

[sinful moon]

Likely IN-Regular-1 or AU-Regular-1 latency wise. I’d imagine some of the EU VIP ones would be fine if you have access

[vast badger]

VPN only help a little it's better to create your own VPN Military grade encryption if you don't want the company to give away information to the government

[light sundial]

I do have access to them, now I am based in south east asia, i will give all three a shot,tho would be nice have a feature to check latency from the website

[sinful moon]

You can do your own solutions like WireGuard for access to your own stuff, but they just mean OpenVPN access to the site

[sinful moon]

Yeah unfortunately can’t check your own latency easily via the site, some simple ping checks looking at TTL of THM targets should help once connected via each OpenVPN

[vast badger]

I'm using proton open sc and brought my own servers through me and my buddy are building it

[sinful moon]

They were mainly a stuffed animal toy that just happened to have this web aspect

Neopets did similiar, but they never went all in on the “the toy is the product” aspect

[vast badger]

You guys don't know proton is open sourced?

[sinful moon]

Obviously it is

Been using it since launch, prior to Steam Deck and yes it’s lovely

[sinful moon]

What are you building into yours that wine-staging or proton-GE don’t already provide?

[vast badger]

me and my buddy's just wanted something of our own.

[sinful moon]

Nice idea I guess, but yeah just keep your fork up to date with upstream

Also kinda missing out on some niceties like just using protonup-qt to manage the most popular custom proton versions

Including some neat ones like Luxtropedia which acts as a shim to actually load Linux native source ports for specific games

[molten sky]

hello chat

[sinful moon]

Heya!

[molten sky]

send help

[sinful moon]

Totally didn’t get distracted from my 1960s TV watching for tech talk

why lol

[buoyant tree]

also Ellie I have movie for you

Madame Web

[sinful moon]

lol that new one that’s supposed to be rated as badly as that um, other related movie?

[buoyant tree]

morbius

[sinful moon]

yeah lol

[buoyant tree]

yup

[sinful moon]

I’ll pass for now

[buoyant tree]

Planning on watching it for comedy

[molten sky]

building out a new monitoring and enum server

is annoying

[sinful moon]

Sony needs to stick to their animated ones, which are killer

[buoyant tree]

yup spider-verse certified great

[sinful moon]

How so?

That’s kinda what my VPS attack box/fake c2 is

[molten sky]

well the start of it was finding out that owasp split amass into several separate tools recently

[sinful moon]

low key have that with my vuln scanning at work

[boreal scarab]

Early 2000 childhood games

[molten sky]

so now I can't dockerize it as a whole unless i use an old version

[sinful moon]

Not hard of that being the case before, weird

[molten sky]

and then to install the seperate new tools onto the host itself, it requires a new version of go that's not yet in the repositories, which just didn't work for some reason when installed manually

spent a few hours trying to resolve only to remember that you can install new versions of go alongside go with go

[sinful moon]

What host? Just do Kali or Arch tbh

[molten sky]

server does a lot more that i would rather not use either of those for, lol

never been a problem 🤷‍♂️

[sinful moon]

I was being facetious, it’s mainly just used for THM/HTB while having no relation to my home network beyond ssh/ssh tunneling

I just pretend it’s my c2 infra since I’m a leet hacker lol. But nah I’ve tried some c2 frameworks on it for real

Yeah and then I ssh in, and then ssh tunnel my HTTPS and or RPD traffic back to local as needed

[molten sky]

just uses the vpn like you would from your own computer

[sinful moon]

I’m just making this remote VPS do the attack box duty, and tunneling the things I need back to me

I could get more fancy than that but this is nice

[molten sky]

i need something to send emails with from the server. just simple notifications when a new asset is discovered. think i should just use sendmail or got any fancy ones you've played with recently

[sinful moon]

Yeah my last investigation into Linux mail was more of a fullstack but sendmail should do fine

[torpid ether]

If you want cheap and easy, and don't already have a reputable SMTP server you can relay through, SMTP2Go is solid.

I've personally never been a fan of sending mail out via a built in function.

[molten sky]

no relay needed, just going direct

[torpid ether]

Fair

[molten sky]

relays are good normally i just don't have a need when emailing notifications to myself

[sinful moon]

I can also tell you the SMTP relays I see used most in phishing attempts 🙃

[molten sky]

also dealing with relays is such a massive pain in the ass sometimes

SES is expensive

SendGrid is owned by Twilio now

Mailgun or whatever is sooooooooooo delayed, and sometimes fails entirely

SMTP2Go I haven't tried yet but do plan on trying

email sucks

screw email

[sinful moon]

Mailgun was one of the first on my mind lol

[molten sky]

so

god

damn

slow

[sinful moon]

and yeah Sendgrid as well

[molten sky]

i have like a 30% failure rate with mailgun rn

to myself

[boreal scarab]

https://tenor.com/view/i-was-charles-brooks-peter-hermann-younger-i-did-gif-21452328

[sinful moon]

Not sure if AmazonSES works the same way but whew so much phishing from them it’s silly

And can’t just block these, gotta be surgical

If we blocked AmazonSES, we’d block default EDR notifications 🙃

[molten sky]

we should just deprecate email

[buoyant tree]

top gun maverick hits hard

[sinful moon]

Almost like it’s 1960s plaintext protocol that we’ve tacked onto over the years enough that it’s gotten insane… or something lol

[molten sky]

just reattached to tmux to see i never actually started the thing i wanted to start

[sinful moon]

Google and Yahoo, “you need SPF and DKIM”… yo, you all have it and are sending out so much phishing lol

[molten sky]

come again?

[sinful moon]

Many challenges

[molten sky]

wait do you mean just don't use a relay at all

[sinful moon]

They mean full email stack

[molten sky]

you'd still need an smtp relay or 90% of your outgoing is getting dumped by google/ms/etc

managing a mail server nowadays is a massive time suck and a huge PITA

[sinful moon]

It’s hard to build good reputation on your email, especially if it’s a weird VPS host

[molten sky]

digitalocean gave you a sus ip? oh well, no mail for you

[sinful moon]

send it to something that’s at least half respectable

[molten sky]

speaking of which i should check my droplet's ip rep

uugghhhhhhhh

[sinful moon]

lol DigitalOcean I actually hugely respect for their anti phishing. I have seen one single DigitalOcean VPS as the web mail host of phishing in my three years of work

[molten sky]

spamhaus and barracuda

[sinful moon]

seen them as lofi c2, but only just the once for phishing

If it’s a big VPS name, it’ll always be OVH to a fault

[molten sky]

lol, right on spamhaus's removal page

[sinful moon]

Yeah they have a 25 day waitlist at the very least

SMTP is about as much as they’d like you to do ideally

[molten sky]

not even gonna bother

i'm probably moving it to hetzner again anyways so idc

[sinful moon]

They say you can, but have a whole page on why self hosting email is not ideal lol

lol I do see them in phishing as well but fair enough

[molten sky]

google and microsoft have ruined self hosted email

[sinful moon]

lol maybe not completely wrong, but yeah things with email reputation are much more difficult these days

boss tried to get me to build a self hosted email sever for some low key stuff (full stack). Mentioned how difficult this would be. After a while he checked up on my progress and remakred, “just using a service would be more expedient”…

Yeah lol it would have, as I possibly recommended from the start

[molten sky]

cheaper to spend a couple bucks a month of licenses than it would be in the man hours just to maintain the thing

[sinful moon]

For real lol

at least my low key Linux Docker hosts need barely any maintenance. Even have RMM now which is nice c:

[molten sky]

hm.

i wonder how dockerize postfix is

[sinful moon]

It’s for sure doable, one of the full stacks I was looking at basically Dockerized all of the standard Linux tooling for mailservers. I’m just not sure how down to the component that was

one sec

Darn it, wanted to dig into their docker-compose.yml but too much digging for me rn. This is just a nice full stack you may be able to pick apart for only what you want: https://mailu.io/2.0/

Quick search of DockerHub shows just custom/community postfix containers however, unfortunately

But it’s not too hard to build a DockerFile for something like this

Anyways, back to my classic TV shows and dozing off, nice chatting with you all!

[molten sky]

will dig into that a bit

and cya

oh shit i gots an appt in the morn

[stuck otter]

I saw openai new addition of sora. Creating short videos from prompts. They look decently good

[chilly veldt]

Morning

[molten sky]

m

[chilly veldt]

I feel dead

[molten sky]

same

[rapid merlin]

Any free resources for preparation of btl1 certificate?

[molten sky]

honestly i found the course itself pretty good

unusual that i think that's the case

[rapid merlin]

I can't actually buy it yet. And I can't access course material unless I buy it. Can I?

So that's why I was asking if there are any resources?

[molten sky]

Unfortunately I think that's correct --- course and cert are sold hand in hand
SBT (the people who run the cert) also run SBT Online or something with a similar name, and it probably has a lot of the same topics

from what I can tell, it looks like the rooms are (likely) structured pretty similar

had the name wrong -- it's Blue Team Labs Online (BTLO)

i think they have some free sections but I haven't used btlo myself

@chilly veldt are you able to confirm? not sure if you've tried their labs

[chilly veldt]

They have a free option, if not then there's also letsdefend.io who also makes labs like that

[rapid merlin]

"Letsdefend.io" does this one provide free labs?

[chilly veldt]

Yeah, it does

[rapid merlin]

Alr thanks 😉

[sick lance]

https://twitter.com/vxunderground/status/1759732862335504773?t=HBeTYcUApLoATinloh6hFw&s=19

Hahaha ha!

vx-underground (@vxunderground) on X

Lockbit ransomware group administration claims that law enforcement agencies compromised them by exploiting CVE-2023-3824

More information: https://t.co/28v1Yz4L7t

Twitter · Feb 20, 2024, 12:13 AM

[devout palm]

😭

[naive violet]

Honestly? Lmao

[sick lance]

Seems like it, I know the website was taken last night

[naive violet]

There's a lot of misinfo already going around about it

VXUG are solid as ever though

[sick lance]

One of the very few places I trust.

[sacred pasture]

is anyone here good with silver bullet? just starting out

[chilly veldt]

From what I have read some places is that they only got access to servers running php, and not backend stuff
https://twitter.com/vxunderground/status/1759703708785365068

vx-underground (@vxunderground) on X

Lockbit ransomware group has issued a message to individuals on Tox.

"ФБР уебали сервера через PHP, резервные сервера без PHP не тронуты"

"The FBI fucked up servers using PHP, backup servers without PHP are not touched"

Twitter · Feb 19, 2024, 10:17 PM

[trail sequoia]

why this command not working for me

[rapid merlin]

#room-help

Ill give the answer there :p

[trail sequoia]

what ?

[rapid merlin]

In that channel

#room-help

[rapid merlin]

Did you get it?

[glossy portal]

Hi, is a mod available? if so, can I DM you regarding the feedback meeting?

[glass nest]

It's 9am in UK... Probably in a couple of hours, I'd imagine?

[glossy portal]

Thought you could schedule it? Also 1:1?

[glass nest]

Oh, I didn't know that 😄

Guess I've been away longer than I realised 😄

[graceful thistle]

feedback meeting?

[glossy portal]

15 minute thm product feedback meeting

[graceful thistle]

oh thats unrelated to mods

you have to get in touch with THM staff

[glossy portal]

Alright

I'd have to write stuff if it's 1:1, hopefully I can avoid talking if it's a big conference...

[graceful thistle]

I'm not sure if I know what exactly you are talking about :p

[glass nest]

I thought Dolphins knew everything...

[glossy portal]

All good, I'll figure it out

[glass nest]

You got this, shei 😄

To be fair, all the THM folk I've spoken to have been cool, so theres nothing to be nervous about

[devout palm]

Morning

[glossy portal]

that makes sense, but I gotta at-least try to leave an impression I'm getting free vouchers in exchange xD

[glass nest]

😮

[glossy portal]

So I'm assuming I have to put in some effort on my side too, like a bulletin "here's what you can improve"

Integrated dark mode!

[glass nest]

Thats been suggested so many times. It's a meme at this point

[flint sluice]

Since day 1.

Most requested feature.

Right next to fixing shiba1

[glass nest]

And Eternal Blue. oh wait...

's not broken...

[flint sluice]

I once got the perfect bot response on that one. Should still be in #764491023127674910 somewhere.

[glass nest]

Ah, the wild days of youth

I assume it's also on your CV aswell

[sick lance]

It is

[flint sluice]

Along with gems like this

[glass nest]

Haha, oh Fawaz. what a legend.

[buoyant widget]

What can i use instead of Ncat on Linux (Ubuntu), or i can install ncat on it?

[hollow pivot]

You can install Netcat on Ubuntu

https://packages.ubuntu.com/search?keywords=netcat

[sick lance]

This one was the best.

[buoyant widget]

Thanks

[twin ridge]

Gave +1 Rep to @hollow pivot (current: #51 - 131)

[glossy portal]

Is the attackbox dependent on your computer's speed?

[chilly veldt]

No, it's specific amount of resources it gets, it might seem slow because of your internet connection

[shell nova]

Shouldn't be, but it may be affected by your network

[night prairie]

what ever happened to nanaisu

haven't seen them in the server for a while

unless they changed name

they gave me 3 months of thm premium when I first started out

[grizzled crystal]

they're still around

check the offsec server

[sick lance]

Left the server.

I don't want to join a server to talk to them, but I have some questions for 'em.

So I'll email them.

[grizzled crystal]

That works

[karmic furnace]

I want to punch my vm.

and possibly kali

[shell nova]

Oh dear

[rapid merlin]

Kinda desperate here, what's wrong with this filter? Syntax seems to be fine

"AND is unexpected in this context" but that's where it should be I believe

[shut hawk]

is it lowercase and?

[rapid merlin]

jesus christ

[shut hawk]

😆

[devout palm]

&& would work too

[shut hawk]

here

[shell nova]

Gonna steal that

[karmic furnace]

its only because Kali hates me..

[rapid merlin]

Thanks man, the examples on the room are not precisely correct

[twin ridge]

Gave +1 Rep to @shut hawk (current: #13 - 477)

[shut hawk]

Huh, link the room

[shell nova]

Sounds normal

[rapid merlin]

https://tryhackme.com/room/wiresharkpacketoperations - Task 4

[near hawk]

Muiri said the other day that when he resigned the admins changed his rooms to THM, I think that was the reason why

[shut hawk]

reported thanks

[twin ridge]

Gave +1 Rep to @gritty marten (current: #998 - 3)

[shut hawk]

If you find any others, feel free to put them in #room-bugs

[rapid merlin]

Absolutely!

[sterile dagger]

all hello curious for those who have climbed the ranks of leaderboard did that ever result in receiving better job offers?

[rapid merlin]

Does anyone know how to create a gmail account without verification?

[near hawk]

You still need to verify the account with a phone number or email address

[dusky sorrel]

hello guys, I have some doubts to clear, when I apply for entry level opening in cybersecurity like analyst roles, most of the job description includes we have to aware with frameworks like ISO 27001 like that, so we have to achieve any kind of certifications on these in order to add these on the resume? or is it just about the knowledge, sorry if this is a blunder question.

[rapid merlin]

Iso 27001 is a certification for a company. Not for an individual. You just have to understand what it is and what it means.

|| @dusky sorrel ||

[dusky sorrel]

Okay, thanks mate @rapid merlin I am just confused whether I can add it on my resume or not, so I think I have to learn a bit more about these standards.

[twin ridge]

Gave +1 Rep to @icy epoch (current: #551 - 7)

[night prairie]

hmm

wonder why they did that

[scarlet nimbus]

If you want to work for cyber in EU i suggest to learn about the new directives

[mint palm]

You can become an ISO27001 certified auditor

And if you’re a lead auditor you might find a lot of new opportunities in some European countries

[dusky sorrel]

got it.

[deft bobcat]

Bot

[sick lance]

Do you want hacked?

This is how you get hacked.

[nova pollen]

You affected by the hack?

[sick lance]

Lmao.

No.

[scarlet nimbus]

litteraly he posted it in every channel

[near hawk]

Yep, I pinged the mods so one of them will remove it

[sick lance]

Needsleep asked about the picture I posted.

Not the Adobe crack.

[nova pollen]

I think it was just a comment on the adobe because it was posted in every channel.

[scarlet nimbus]

my fault, I misunderstood

[scarlet nimbus]

I know that someone is talking about an affiliate unhappy

[sick lance]

Yup

It'd around lhnch time for some mods, so it will be gone soon.

Lunch*

[rapid merlin]

Yeah. But that's a lot more advanced than a "normal" security analist

But it's good for further in your career

[mint palm]

I wouldn’t say that’s more advanced, it is mostly legal, not that deep in the technical stuff

If you’re a lawyer it’s easier than if you have some technical experience tbf

[rapid merlin]

Ah

[wanton furnace]

https://tryhackme.com/room/whatisnetworking
i found some differ differ course on this
Any systematic course in networking for free

[sick lance]

https://www.bleepingcomputer.com/news/security/police-arrests-lockbit-ransomware-members-release-decryptor-in-global-crackdown/

[chilly veldt]

my brain not braining today

[blazing granite]

Also https://skillsforall.com/career-path/network-technician?courseLang=en-US it's a web run by Cisco and it's free

[sick lance]

2 people arrested, 34 servers taken down 200 cryptocurrency accounts frozen.

[chilly veldt]

reeee, I have to boot into my windows partition because of having to print

[blazing granite]

can't you print without windows?

[hot tide]

how to get burpsuite professional for free?

[sick lance]

You can't.

[chilly veldt]

The printer breaks the print if I print from Linux

[blazing granite]

shut

[chilly veldt]

Yeah, like I just get numbers on the side of the paper nothing else

[blazing granite]

Is it like a special print?

[chilly veldt]

It's just a pdf

Made from LaTeX

But even the test page breaks

[blazing granite]

weird

[chilly veldt]

Drivers man I'm telling you it's the spawn of no good

[wanton furnace]

field in networking without networking

[gritty zephyr]

My pc juked me regarding the update and now ive been staring at the percentage counter go up 1% every half hour

Windows hates me

[mossy river]

Do you have a HDD

[loud marlin]

cad no. have onshape

[hollow pivot]

@paper delta Hey, can I dm?

[paper delta]

Sure

[gritty zephyr]

Old one at that lol, prob 5-6 years old

So i know where the problem lies, but update time is so boring because of it lol

[dim dirge]

is just me or THM is having some problems? any time I try to connect or im doing a box, the machine be going extra slow

[mossy river]

Honestly, L.

[mossy river]

#site-support

[gritty zephyr]

Sadly dont have the money for quick upgrade, as priorities lie elsewhere for the things i earn atm haha

[mossy river]

I have a spending problem tbh

@lament tendon were talking about you today

[lament tendon]

Eyyyy, izz meeee.

[mossy river]

Honestly I saw that and immediately thought why it looked so familiar lmfao

[gritty zephyr]

Hahaha

[rapid merlin]

How do you define a cybersecurity framework?

[mossy river]

Context?

[mossy river]

I forgot my lab password

Looks like I’m going home, can’t do the lab now

[hollow pivot]

weak sauce

[proven quartz]

My old college IT guy used to change passwords to 'forgetful' if you needed a change 😛

[mossy river]

It’s because of Windows’ password expiry

I have to change my password every now and then but because I don’t ever use the lab I forget it

[proven quartz]

Yeah it happens.
Lab... sits there

[delicate reef]

yo guys

im searching a youtuber

for ccna Switching, Routing, and Wireless Essentials

ccna2

anyone recommends one?

[grim ether]

You discovered that the login page allows an unlimited number of login attempts without trying to slow down the user or lock the account. What is the category of this security risk?

need help plz

[proven quartz]

Is this for a THM room? #room-hints or #room-help

[tired peak]

if this isn't for a THM room, I'd look at OWASP top 10 https://owasp.org/www-project-top-ten/

[tired peak]

I don't know if he is a youtuber but Neil Anderson has a good course on Udemy

[boreal scarab]

Morning!

[loud marlin]

you again... 🙂

[delicate reef]

ill check it out, im already taking the cisco thing in uni, i finished ccna1, we did half of ccna2 so far and then we got ccna3 left

[wanton furnace]

field in hacking without networking

[near hawk]

You're looking for a field within networking without having to do networking?

[wanton furnace]

Because Networking Seem Boring

Without Networking

[chilly veldt]

Networking is the basics of how everything talks together, if they can't talk together how can you hack it?

[wanton furnace]

Ok I think

but any interesting resources for it

[chilly veldt]

Tryhackme!

[wanton furnace]

Tried

But Not A systemetic Course on basic networking

[lament tendon]

N ▵ N = Ø

[proven quartz]

You need to understand TCP/IP and the other protocols in the stack. You need to know what IP addresses are and why every machine needs their own ones, what ports are and what protocols typically use what ports, and what applications use those protocols. You need to know lots more about how networks connect and talk and how networks can be used to facilitate and prevent communication in various ways

[chilly veldt]

Speaking of networking, just finished the interview I had an hour ago, went really well and they seem really interested

[wanton furnace]

This is all about topics are use in hacking networking

[proven quartz]

You can search for networking rooms on THM but there's also courses like Network+ and CCNA
https://tryhackme.com/hacktivities?tab=search&page=1&free=all&order=most-popular&difficulty=all&type=all&searchTxt=network

[lament tendon]

Oh, they edited their message, now my joke does not work anymore…

[near hawk]

David Bombal is a good person to watch for networking

[proven quartz]

People who do hacking/pentesting need to know lots about networks and systems engineering and administration, operating systems, software and how it all works together

[wanton furnace]

ok I try Hard

By

Wait

Can you make a List for Me to do networking stuff for hacking field

Take Your Time

[chilly veldt]

No one is the same, we don't know what you know and what you need to learn, so research is key

[rapid merlin]

CCT can cover the basics, it's free to learn at Cisco Netacad and it's pretty expanded, you can then choose to do CCNA if you'd like

[wanton furnace]

ohhhh

[chilly veldt]

@proven quartz this was the thing I was talking about ^^

[lament tendon]

No, you‘re probably just shy.
But nothing keeps you from just staying inside.

¯_(ツ)_/¯

[proven quartz]

Ooh! That's awesome! You found out a bit more about what they're up to?

[rapid merlin]

Do you guys think 16 GB RAM is enough to run 2 VMs at once?

[chilly veldt]

Yeah, it's really cool!

[wanton furnace]

Yep

[chilly veldt]

Plenty, I ran 4 VMs on that at the same time before, depends on the VMs but 4gb ram is enough

(Linux is 2gb enough)

[rapid merlin]

Id like to run one Windows and one Kali so i can pentest the windows using the kali

[chilly veldt]

Yeah, 4gb ram for windows and 8 for kali

Should be plenty

[proven quartz]

Seems like somewhere you'd like to get stuck into then?

[rapid merlin]

Alright thanks

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 811)

[wanton furnace]

8 is not mandatory

[chilly veldt]

Yeah! Plenty of learning on top of it, and moving around internally

The role is basically a direct upgrade from my current

[proven quartz]

Sounds like a great opportunity and a step up in a lot of ways

[chilly veldt]

I know, but just an easy number to throw at it

[marble light]

just a noobie question, can i make a exploit in msfconsole or msfvenom and save it externally to execute it manually via server

and not use the default process through msf

[rapid merlin]

I'm looking for the cheapest laptop that can smoothly run 1 Windows VM and 1 Kali VM

Any idea how what specs I should aim for?

[chilly veldt]

Yeah, seems like they are really interested in me too, they got some more of my contact information and is taking contract and salary internally now

[proven quartz]

That's really cool! I hope you'll be heading that way really soon then 🙂

[chilly veldt]

Thank you! Now to talk with my current part time job about the change😅😅

(I'll first do that when I have a contract in hand)

[timid prism]

you can still have lockdown for yourself

[proven quartz]

Metasploit is a tool for developing and executing exploit code. It's quite normal to use exploit code without using metasploit when exploiting a vulnerability. You should check out the Metasploit content in THM

[rapid merlin]

Can a Free version of Windows VMs have the latest updates so you can try to bypass the latest Windows Defender?

Or do I have to pay to have the fully patched Windows in the VM?

[marble light]

on tht only, but wanted to know how to export the created exploit

[proven quartz]

😄 Yeah the change will be good for you and your current job will just have to fill in when you've departed 🙂

[chilly veldt]

It should have the latest updates still, but not some features

[chilly veldt]

Yeah, plus I am not mandated that I have to sit in the office to work😅

But I'll probably work March out at my current job and then leave, if the contract is signed by then

[crude stump]

https://tenor.com/view/good-tuesday-morning-gif-13776570852269768396

[proven quartz]

Microsoft releases ISOs you can use for testing but I think they only get critical updates and there may be a time limit on usability. If you're going to use it long term, you'll need to get a licence

[chilly veldt]

Bwehhhh, I have to cook when I come home

[proven quartz]

Yeah it's great if you can work from home to get things done. Would make it more comfortable and easier

[nova pollen]

There are free windows vms? I thought you need to license everything

[rapid merlin]

So how do I practice bypassing the latest Windows security systems?

Do I get a license for my VM?

[proven quartz]

I just had last night's leftover pizza but I defrosted some chicken the other day I think I need to cook tonight or it will go off

[chilly veldt]

Yeah, I have to cook it today

Have to make 2 weeks worth of honey sesame chicken

[chilly veldt]

Yup, it's a nice role

Plus I get all the training and certs I need, meaning I'll probably go through all Microsoft cloud certs😅😅

[proven quartz]

Oh I love that stuff! Such a tasty meal!

[proven quartz]

Ooh sounds like you'll be keeping busy 😛 You'll be the local expert 🙂

[chilly veldt]

Everyone else also has them, so just gotta join the ranks 🤣

[brisk tree]

hey

[rapid merlin]

👋

[proven quartz]

You'll fit right in so 😛

[proven quartz]

Heya

[chilly veldt]

Yeah, everyone else there is all technical and doesn't really have that practical knowledge of low level SOC stuff which is where I come in

Plus my friend works in another department

[proven quartz]

So you'll be able to teach them a thing or two 🙂

[proven quartz]

Well typically you should get a licence for any software you intend using long term. Or you could use the cloud and practice in there, as long as you comply with the provider's terms

[chilly veldt]

Yeah, I'll be helping in training some of the new people later on

[proven quartz]

And then sending them off on BTL training sessions to make sure they're doing things how you like em 😄

[chilly veldt]

Who knows

[rapid merlin]

Hello

[proven quartz]

Setting the standards in the place 🙂

[rapid merlin]

BROS

[chilly veldt]

Let's see now, it's waiting time

[proven quartz]

Til then, back to the hack 😛

[rapid merlin]

hey anyone know hacking

here

?

or this is just show off

?

[proven quartz]

This is the Discord for Try Hack Me, which teaches ethical hacking and cybersecurity

[chilly veldt]

Back to making food* 🤣

And probably work out

Who am I kidding, I am too tired for that

Food and then relax

[rapid merlin]

Have you learned any haking from here

[proven quartz]

😛 good options, but yeah get fed and take it easy 😛

[proven quartz]

You can learn ethical hacking. Go to #start-here to get started

[brisk tree]

what food you making

[chilly veldt]

Yeah, need to make all my chicken into honey sesame chicken and then make 5 portions of rice

[chilly veldt]

^

Meal prep

[brisk tree]

nice

[proven quartz]

Sounds like lots of fun! I do love to cook. Got a 16 inch pizza last night though so working through it

[chilly veldt]

But before I have to make food, I have to clean my whole kitchen

[loud marlin]

is that chicken in fridge?
you know, the frozen one that is dead... 🙂

[chilly veldt]

Yeah, I bought me 3.2kg of chicken breast at the start of February, and been slowly working on that, and this is the rest that is left now

[chilly veldt]

Yup, threw it in the fridge when I decided not to make food yesterday

[loud marlin]

good good... kip is good food

kip = chicken

[proven quartz]

Oh cool! Normally I use a 340g portion of chicken breast each time I stir-fry, usually some peppers/onions and other veg and spices if I have them

Occasionally more, like 500 or so

[chilly veldt]

Nice! Yeah, been using 1.9kg the last 2 weeks, so I have 1.3kg left, which will easily go into that mixture nicely and hold for 2 weeks

I do portions of like 80-100g chicken per portion

Might want to pull out my wok for this chicken today due to the amount

[proven quartz]

Yeah I usually manage 3 biggish plates with rice or pasta when I'm cooking something. It's coming into lamb season so there'll be lots of fresh lamb in the local butchers. Will be making spicy madras curries

[chilly veldt]

Sounds amazing

[proven quartz]

And yeah I always use the wok and high heat, cos you never know what you'll need to get in there 😛

[chilly veldt]

Yeah, sadly it's a flat bottomed wok, so I can't use it that well on open fire stoves 😦

[proven quartz]

Yeah I have an electric stove but would love a gas one. And a round bottom wok. I love making big meals that way; check #873642346762350592 for more of my work 😛

[chilly veldt]

Same, and will do!

[unborn creek]

Chicken breast is the best when you brine it beforehand. Makes it come out so juicy no matter what you do with it after

[proven quartz]

I don't generally add salt to my food

[delicate reef]

dont talk about food pls im hating the bulk

i dont wanna eat anymore

[chilly veldt]

Oh yeah, my speakers arrived today

[sick lance]

Only from chip shops, I have salt.

[chilly veldt]

I add salt if the recipe says so

[night prairie]

i had the dryest chicken breast earlier

overcooked it

infact it was slightly burnt

[sick lance]

Yuk

[proven quartz]

I love to change and play with recipes 🙂 I learned to cook by figuring it out myself as a kid when the parents were out working

Pretty sure I'd be pretty terrible at baking a cake though 😛

[boreal scarab]

Yall ever feel like you wanna do something but don't know what to do?

[unborn creek]

Instant pot is where it's at. I use mine all the time everything cooks so fast and I always make enough for a few lunches or dinners

[buoyant tree]

hullo

[crude stump]

🦗

[proven quartz]

I know exactly what I should be doing, but shortly after I somehow find myself here or in the pub 😛

[crude stump]

What’s your go too drink

[boreal scarab]

I'm sitting here, wanting to go out driving for the fun of it, but don't know where to go, or what to do

[proven quartz]

Some kinda beer or whiskey depending on the mood

[buoyant tree]

a weird gif

[proven quartz]

All roads lead to Vegas

[boreal scarab]

Yah.... 3 days later

8 hours to Canada was brutal

[proven quartz]

https://tenor.com/view/hang-over-squad-goal-bradley-cooper-zach-galifianakis-ed-helms-gif-9050629

[boreal scarab]

Try driving that, alone. No one but your music

I had to call some people so I would have someone to chat to XD

[thorny walrus]

less distractions

[proven quartz]

https://tenor.com/view/but-i-would-walk-500miles-himym-how-i-met-your-mother-gif-15323011

[boreal scarab]

Besides my music at max volume XD

[boreal scarab]

https://tenor.com/view/zoolander-benstiller-derek-joyride-roadtrip-gif-3337211696511074016

[thorny walrus]

Less visual distractions I should say then

[proven quartz]

Ok, gonna rewatch the defcon documentary later in the week

[chilly veldt]

I do that too when I don't focus on my micronutrients

[boreal scarab]

You coming to DC32?

[sick lance]

From a classic movie.

[chilly veldt]

And due to my weight-loss journey I am really focused on what I eat

[proven quartz]

It's very important to get all those in 🙂

[proven quartz]

Definitely gonna try. It's been kicked out of Caesars though

[buoyant tree]

classic?

uhm which one is it

[sick lance]

Yes man

[boreal scarab]

Yah, sad, dunno why. But Sadge

You going to pre reg? Or linecon?

[proven quartz]

I'm going to getajobcon, hopefully before the local bsides 😛

[boreal scarab]

Yaaaaaaah, I need to join you at getajobcon

[proven quartz]

Well I'm gonna hit my course pretty heavy the next few weeks and really try get the cert

[boreal scarab]

No cert here, just years of experience

Especially when it comes to C levels 😄

[night prairie]

Anti corruption bureau using the justice fund to buy spyware to use against political enemies 😭😭😭

https://www.bbc.co.uk/news/world-europe-68343026

[proven quartz]

Well I have years of experience, just also years of not working and having fun/studying

[buoyant tree]

oo I think I watched that one

where hes a lawyer right

that was a long long long time ago I watched that

[boreal scarab]

I have months of not working, but still "working" with IT shtuff

[proven quartz]

Have worked in cybersec before and have plenty of connections. I just want to get my cert done. So much work in it 😛

[buoyant tree]

A lil sad malwarebytes isn't detecting anything atm

[boreal scarab]

That reminds me: https://www.youtube.com/watch?v=lOHw_tJe7fs

[night prairie]

oh yeah i heard of that, didnt look into it tho, lemme see this vid

[buoyant tree]

There's a good nickname for it also: The tiktok stupidity ban

Leading theory is that the canadian's saw tiktok's which showed flippers unlocking cars

[night prairie]

had to replay those first few seconds to make sure i didnt forget english

still no clue what he said

[boreal scarab]

I've worked in Desktop Support/ Technician before, no info sec. But got connections waaaaaay up in C level territory. Hell. I have a 2 reference letters, one from CFO, one from CEO

[naive violet]

I'll be careful what I say about car hacking, but the attacks that the flipper can do have been mitigated for a long time on car keys

You can also use cheaper hardware to do the same thing better

All the flipper does is make a pretty UI

[boreal scarab]

Flipper can't even handle it though, unless you use other equipment to block the key fob signal, and shit, that whole "Flipper zero bad" is a joke

[proven quartz]

Connections are the most important thing you can go with

[boreal scarab]

Linus even brought up the Kia Brothers thing...... like that was on Kia for not having basic security implemented in their cars

It had NOTHING to do with Flipper capabilities

[boreal scarab]

Ooooooh yah

[naive violet]

The radio module, the CC1101, they're stupid cheap

[boreal scarab]

Some French politician in Canada

[buoyant tree]

although a lil thing that we have in third world countries, just stealing the keys

its quite common

[naive violet]

There's different levels of sophistication

As with all crime

[buoyant tree]

yea

[boreal scarab]

I think Linus brought up a point in the way the law was written, it basically was like "Yah, so we ban phones, and laptops now?"

[naive violet]

This is why you should fight for technology representation in your legislative bodies

[boreal scarab]

Right to Repair!

[night prairie]

oh 😭

[boreal scarab]

https://www.whitehouse.gov/briefing-room/statements-releases/2023/10/25/readout-of-the-white-house-convening-on-right-to-repair/

Cool

[royal smelt]

I am trying to finish Linux Fundamentals step 3

However on the log part where it has me trying to access apache2 logs

its encrypted in yellow

I dont think its supposed to be..

no permissions granted everytime i try to interact with log

[boreal scarab]

#room-help

[loud marlin]

#room-help might be better place

[royal smelt]

thanks! hopefully i can figure it out

hit a wall now and cant progress lol

[proven quartz]

So your fingerprints can be recreated from the sound you make swiping a screen
https://www.independent.co.uk/tech/fingerprint-clone-hack-security-printlistener-b2499111.html

And the paper is free here
https://www.ndss-symposium.org/ndss-paper/printlistener-uncovering-the-vulnerability-of-fingerprint-authentication-via-the-finger-friction-sound/

[bitter quiver]

I mean tech is gettng crazy

[wintry garnet]

every day gets more dystopian

[bitter quiver]

It's natural evolution

It's only dystopian if we abuse it or fail to advance as a species/culture.

Which luckily humans never have done

[dense cedar]

Welcome, I want to study the basics of operating systems course. What is the best course you recommend to me??👍🏻

[bitter quiver]

[dense cedar]

On YouTube

[bitter quiver]

As in how an OS works? Specific OS like Windows/Linux?

[proven quartz]

It all obeys the laws of physics. Stay off the internet, go to the pub

[bitter quiver]

That used to be what I did, until I took a medication prescription to the knee that makes drinking not wise.

[dense cedar]

inux

linux

[boreal scarab]

https://tenor.com/view/arch-linux-arch-linux-gif-25380879

[dense cedar]

hhh

[proven quartz]

Sorry for your troubles

[dense cedar]

😎

[bitter quiver]

FreeCodeCamps Linux Introduction course is a very solid one.

[proven quartz]

No, nobody said that. I've never seen an Arch user who looked like that either

[bitter quiver]

[dense cedar]

Free ?

[bitter quiver]

FreeCodeCamp is a site/youtube channel, they have an intro course for Linux. "Free" is just part of their name.

THM has a solid Linux portion as well, but it's not going to go as in depth

Primes you for the next steps

[proven quartz]

There's tonnes of free Linux tutorials on the internet. There's even free Linux tutorials on Try Hack Me https://tryhackme.com/hacktivities?tab=search&page=1&free=free&order=most-popular&difficulty=all&type=all&searchTxt=linux

[bitter quiver]

I love the term hacktivities

[dense cedar]

Can I learn and become a professional in Linux without paying?

[proven quartz]

Almost tempted to explain that 'hacktivities' is a portmanteau of 'hack' and 'activities', but I wouldn't do that 😛

[wintry garnet]

cs162, many free lectures online too

[bitter quiver]

You can reach the level of a professional for free quite easily. To break into it it really depends on what you mean. Working in IT as helpdesk? Working in a NOC? There are simple certs as well for it.

[wintry garnet]

linux basics for hackers, short book. Find it as a pdf for free online

[bitter quiver]

Professional in Linux is honestly just being a professional digital librarian from the era of the Dewey Decimal System.

[wintry garnet]

or just try and install gentoo,

[dense cedar]

Primes you for the next stepsCan you send it to me, brother? Thank you

[twin ridge]

Gave +1 Rep to @wintry garnet (current: #2000 - 1)

[loud marlin]

internet is big place. lot's of free resource.

[wintry garnet]

send the book?

[bitter quiver]

Google my man

[mossy river]

You’re aware that’s piracy right?

[bitter quiver]

No one here going to send you anything paid for free lol

[dense cedar]

🫡

[bitter quiver]

Just google learn linux

[wintry garnet]

😲

[proven quartz]

Honestly not. Linux is quite a modern os, it's the most widely deployed operating system on two planets in the solar system

[desert shuttle]

whats linux?

[loud marlin]

videos in YT and so are nice source. since show you command and results that you might expect

[dense cedar]

[bitter quiver]

100%, however it's still functional as a tiered system of logic

As opposed to M$ or Mac

[wintry garnet]

[grim sparrow]

@wintry garnet has been warned.

[sand trench]

a BSD clone

[wintry garnet]

😲

[sand trench]

./joke

well tons of good videos on youtube to learn linux

[bitter quiver]

Oh dang. It got real here

[sand trench]

but for the best learning hands on experience by using it in a vm or on baremetal is the best

[bitter quiver]

[dense cedar]

I am just a beginner in operating systems and I want to get into cybersecurity. Should I learn Windows or should I focus more on Linux?

[sand trench]

would recommend linux mint for that

[bitter quiver]

Both.

[proven quartz]

After you've done all the Linux rooms on THM, you can do OverTheWire

[dense cedar]

To me, some people say that Windows is important

[chilly veldt]

you can hear on my new speakers that it's really cheap plastic ones, but I don't mind 😄

[mossy river]

https://tryhackme.com/

We provide basic training to users who are new to the field, check it out

[dense cedar]

[bitter quiver]

You can learn pretty much all of that on THM though. It's cheap to sub honestly.

[sand trench]

booo poor quality speakers...... booo

[proven quartz]

You should learn both. You need a good grasp of Windows, Linux, Networks and other technologies you'll learn as you progress

[sand trench]

shadow wanna have best audio quality possible for the price of under 300 usd

[bitter quiver]

Wait till you realize how many different network hardwares you will end up learning besides Cisco.

[chilly veldt]

I needed just something that I could have so I could hear what my coworkers says in meetings when I work from home or just have a random youtube video playing

[bitter quiver]

Wait does THM have vender specefics. I never checked

No they dont

But that makes sense

Avoids uh...inter-company issues

[bitter quiver]

Just enjoy it.

It's not a race. If you enjoy it you will be passionate about it, and that shows when you actually try to get into the field

That rule applies to any field

[iron salmon]

i really liked the uploadvulns thingy it was fun

[boreal scarab]

But Arch is love, Arch is life!

I use Arch btw.

So nice to connect my flipper to my laptop, clean up some non working apps and updating the firmare

[proven quartz]

You can have whatever os you like 🙂 I do love my Linux Mint, even though I've been using Linux since the 90s

[sand trench]

shadow loves their current install of endeavour os

but that is maybe not the best place to start your linux journey

[boreal scarab]

I love my Arch, using Win11 right now, because things, but when I need to work on my servers, or just general things, Arch.

[proven quartz]

Might have to try it sometime

[bitter quiver]

Mint is always solid.

It's the one I recommend to people if they have a less than tech capable family memeber that needs their systems wiped and they can't afford windows.

It's honestly perfect for normal use

Nowhere near as resource heavy as Ubuntu

[lament mantle]

Not really. Metasploit exploits are Ruby files that have to be saved into Metasploit's exploits/ directory to be then be ran via msfconsole. You don't develop exploits in msfconsole, you write them using a text editor. You can find plenty of PoC exploits that are standalone Python/Ruby/whatever scripts or C/Go/Rust/whatever program that you compile on GitHub or exploit-db.com. If you want something that is in between a standalone PoC script and a full blown exploit framework, checkout ronin-exploits. It can generate boilerplate exploit files that can be ran as executable scripts (ex ./myexploit.rb -p host=.... -p port=...); so long as ronin-exploits is installed.

[proven quartz]

It works on my hardware (mostly) and I get to play with other distros in VMs

[steady crescent]

anyone from india having cyberecurity related whatsapp groups??

can you please share the links!
Or from anywhere from the world just needs to be in english

[sand trench]

it is an arch based distro that is nearly vanilla arch.... there is just a single added none arch repo that has some helpful scripts and programs to make the experience more smooth

also graphical installer

[bitter quiver]

Man so many Indians in here, it's a great place to be considering I'm there in 6 weeks lol

[sand trench]

shadow is one of the rare swedish people

shadow is a statistical outlier

[glass nest]

Get some travel tips!

[bitter quiver]

Taking my Indian wife as a guide. I am 100% bringing flannel shirts, blue jeans, and a cowboy hat to ham it up in the small towns.

[proven quartz]

Sounds interesting for sure

[dense cedar]

🤝

[sand trench]

it works wonders as shadows daily driver

and has been for a while

[boreal scarab]

I broke Linux Mint, VERY easily. So not going back to it

[sand trench]

ppa:s???

because yeah ppa:s can kill your system

[bitter quiver]

I found I can break any distro easily

Usually at the worst time

[glass nest]

you'll get along with beerise famously

[dense cedar]

Everything is in God's hands, brother

[dense cedar]

https://youtube.com/playlist?list=PLBlnK6fEyqRiVhbXDGLXDk_OQAeuVcp2O&si=qNEPC4d7OMMNExkh . What do you think of this course?

[proven quartz]

You'd blue screen a tea spoon when stirring tea

[boreal scarab]

https://tenor.com/view/taken-set-of-skills-particular-gif-24468765

I think I broke my SMB share...

Yup, I did

https://tenor.com/view/yeah-its-a-gift-gift-reward-present-happy-gif-14135233

[proven quartz]

Priceless. You're hired.

[boreal scarab]

Fixed it. Turned it off and on again

[buoyant tree]

@boreal scarabCan u recreate ur breaking skills

[boreal scarab]

I touch, it breaks

[buoyant tree]

Now a days when I break stuff now I figure out what causes it

[loud marlin]

he wish. even he don't know how he doing it lol

[buoyant tree]

yk there's a actual job for it

[buoyant tree]

sometimes happens to me

[loud marlin]

just hope he will never drive a place

[buoyant tree]

but Matt atleast knows how to fix stuff

when I broke WSL he instantly knew a fix

[grizzled crystal]

always works! (except when it doesn't)

but hey it always works

[boreal scarab]

I still hate Microsoft XD

[boreal scarab]

https://tenor.com/view/it-crowd-chris-o-dowd-roy-have-you-tried-turning-it-off-and-on-again-off-gif-4711577

[sick lance]

2 more arrests, this is fun.

[boreal scarab]

TF you do?

[grizzled crystal]

For a second I thought Microsoft had released their own variant of Adobe XD and i was very confused

[sick lance]

Sadly, nothing.

I'm refering to Operation Cronos.

[boreal scarab]

ooh

[boreal scarab]

Screw Adobe, Use Gimp, or PDFGear

FOSS all the way! (PDFGear is not open source, just free)

[grizzled crystal]

Figma

[boreal scarab]

That's a name....

[grizzled crystal]

Gimp isn't really a good replacement for Adobe XD

I'm unaware of a good FOSS variant of figma

[boreal scarab]

I was about to say, thats looks paid

https://itsfoss.com/figma-alternatives/

[grizzled crystal]

it used to be free..before they got bought

still free but with limited functionality :/

[boreal scarab]

Oh I hate those

"Freemium" bs

[grizzled crystal]

yeah, i do use it quite a bit still

free tier is enough for my use-case

[jade arch]

this link that is on "walking the application" on tryhackme, does it still work for anyone, it doesn't work for me. this is the link https://lab_web_url.p.thmlabs.com/

[sick lance]

You need to start the machine.

[jade arch]

it always show error

[sharp citrus]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Feb 20, 2024, 6:50 PM

[sick lance]

If you need further support, please use #site-support and somebody will assist you.

[jade arch]

even when I start the machine, it doesn't work. my daily subscription is finished now but if I try tomorrow it will still show the same thing

[sick lance]

The URL won't work in the attackbox, as that's a public facing URL.

[jade arch]

thank you

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 1986)

[iron salmon]

question why is the extend time thingy not worky for me and why cant i get a new ip or restart the target without loging out and in again?

[jade arch]

I don't use it on the attack box. I use it on my browser

[sick lance]

If you started the correct machine, it would have updated.

The correct machine is a green start machine button, not the attackbox.

The attackbox is a seperate machine 🙂

[jade arch]

You know you start the attackbox then start the machine. I did that the timer started, I was given an IP. I waited 2 minutes and same thing. I even tried using my VMware but it's still same issue

[boreal scarab]

Glass of wine, contemplating my life choices over Discord, lovely day

[iron salmon]

it works for me i just went there

[proven quartz]

I've just tried it and it deploys for me just fine and can access the URL from my Kali VM using the VPN and from the AttackBox. The URL changed to one with the IP of the target as follows within seconds of the machine getting an IP address:
https://10-10-48-148.p.thmlabs.com

[naive violet]

After two minutes if the URL hasn't changed then try a refresh

[iron salmon]

hmem its worky

[sand trench]

......

welp shadows game luck is not good

[proven quartz]

Make sure you're not going to the https version of the site

[desert shuttle]

always

[buoyant tree]

Anybody got a room with HTTP verb tampering

[sand trench]

@shell nova or @mossy river

[buoyant tree]

getting a itch reading this but knowing its against rules can't talk a lot about it arghh

[desert shuttle]

i just look

[grim sparrow]

@sick delta has been warned.

[sand trench]

thank you james

[shell nova]

That's an old attack

[buoyant tree]

been doing a few Portswigger lab's and kinda like it

[shell nova]

Don't have any in mind, unfortunately

[buoyant tree]

yea searched across THM barely any

[shell nova]

There was one exercise on rootme if memory serves

[sand trench]

feel free to make one

[buoyant tree]

I think rootme had a

[royal whale]

swear to god man, if u ever need help from an admin from tryhackme just forget about it

[sand trench]

???

[royal whale]

dudes are so stupid that is not worth spending any time here

just go to freakin google or somethin

im removing my positive review of this platform after this fontaene ahole

treat me like crap

fuck this man

im out

[rapid merlin]

What happened @royal whale

[desert shuttle]

https://tenor.com/view/popcorn-gif-14980450905264007240

[grim sparrow]

:mute: renozion#0 has been muted.

[sick lance]

😅

[sand trench]

that was awkward

[sick lance]

They were even more awkward in my DM's

[sand trench]

also scrubz... shadow still not got their drop

[sick lance]

Oaft.

[sand trench]

ooh YAY finally got the last common drop from the quest that was not a dupe

that took a long time for some weird whacko reason

now only the rare drop left

[reef dust]

0x8 😎

[sand trench]

welcome to the named levels

[reef dust]

Thank you lol

[naive violet]

Same one as yesterday?

[sand trench]

same quest as yesterday and the day before yes

[sick lance]

https://tenor.com/view/its-been84years-titanic-rose-dawson-gif-5372593

[sand trench]

have done around 100 runs now and the drop rate of the rare is probably around 1%

[shut hawk]

What game?

[sand trench]

dragonfable

[shut hawk]

Nice, looks cool

[sand trench]

it is fun and has a very good story

[solemn ravine]

Do you make notes when completing rooms?

[sand trench]

most of the time yes

[solemn ravine]

What kind of notes, the ones that explain differences and other stuff or commonly used commands?

[sand trench]

method
order of commands
details of what the room is explaining if an info room

[solemn ravine]

Is making notes digitally safe tho

[naive violet]

How do you mean?

[solemn ravine]

For example, to be sued lol or to have my account suspended. Some things like that?

[naive violet]

Account suspended unlikely, but possible. Host your own notes.
Sued? Why would you get sued?

[solemn ravine]

But since everything is for the purpose of testing and ethical training, I guess nothing will happen.

Maybe they’ll think that what I am doing is dangerous

¯_(ツ)_/¯

[sand trench]

depends on where and how you store the notes

for example with trilium notes as the app you will have your notes basically only on your machine... unless you rent a vps and setup a backup to said vps which shadow does

[solemn ravine]

I’ll use Notion. And write things that bothered me and a brief description of the program, what it does and its purpose. With some example commands

[sand trench]

probably fine then too

though dunno what notions policies are

[solemn ravine]

Writing on paper is gonna take a lot of time

[past sparrow]

What does it mean?

[bitter quiver]

As safe as you want to make it?

Paper notes are traditionally considered one of cyber securities first line of failures lol. Someone writes down a password or important info and then leaves their notebook somewhere.

[sand trench]

in the case of a house fire paper and offline storage is about equal

[burnt palm]

Hello, is that possible to get a TryHackMe openvpn configuration for TCP 443

[bitter quiver]

In management(not CyberSec related) I always wrote in specialized shorthand because I've had my pad misplaced a few times.

[sand trench]

currently NO

[bitter quiver]

I only use truly cold storage anymore for non-important backup. Like a Kamen Rider show or something.

[sand trench]

did not mean cold storage only meant offline storage

[burnt palm]

My country block internet and all UDP port

[sand trench]

i.e attached to your computer but not backed up over the internet

[spring edge]

sup guys anyone willing to study with me eCTHP i have the course and everything but watin for someone to study with me

[burnt palm]

So I need an TCP config for TryHackMe

[sand trench]

your only option is the attackbox....

[solemn ravine]

The only thing I know is that I am only logging through my own pc or I’ll do live boot. Last time I got hacked bcs of Keylogger

[bitter quiver]

I mostly use the attackbox only. Used to use a pi with kali but I've been moving about too much

[burnt palm]

I don't like that, coz I have my Kali

[bitter quiver]

Physical keylogger?

Or malware

[solemn ravine]

School pc, friend installed keylogger and I didn’t know

[past sparrow]

Looks interesting, what kind of pre-existing knowledge is expected?

[bitter quiver]

Never, ever, use public computers for ANYTHING but wikipedia lol

IMO

[naive violet]

We can't help you break your country's laws

[burnt palm]

Intéressant

[spring edge]

ejpt ecppt

• am in last bachelor dgree of cybersecurity

[bitter quiver]

Just use the attackbox. It IS Kali and won't lead you into trouble

[blazing granite]

sadly sometimes, it's not about what we like but what we have available

[solemn ravine]

The problem is that teacher asks us to do things in Google classroom. School didn’t want to make edu mails so we were forced to use our main ones

[burnt palm]

That's not breaking law. I just need a TCP vpn config instead of UDP

[naive violet]

attackbox isn't kali btw

[bitter quiver]

Protonmail, or just a spare gmail my man...

[bitter quiver]

Fair

[past sparrow]

I have neither, however I have active GDAT, would that be sufficient?

[glass nest]

Too heavy to lug around? 😄

[bitter quiver]

I have like 4 proton mails, 3 gmails, 2 outlook(hotmails) lol

[grim sparrow]

@burnt palm has been warned.

[bitter quiver]

No but though the pi is tiny it's cumbersome for all the cabling + peripherals.

I run back an forth between two states lol

I like jus tlogging onto THM and going zoom

[solemn ravine]

Back then I didn’t care but now I do

[spring edge]

Do u have the basics of cybersecurity like
python + linux etc ?

[hollow pivot]

Interesting interview from a former NSO employee https://www.youtube.com/watch?v=NC4uzV-syIw&list=PLwoiB_pSA_EiqY30euNBmxoJMj2IoEiUh&index=2&t=716s

[bitter quiver]

Then you have grown! It was nothing more than a lesson.

[burnt palm]

@naive violet ?? 👀 what I did to be warned bro ?

[glass nest]

👀

[bitter quiver]

Warner Bros

https://tenor.com/view/frog-crazy-dancing-kick-gif-15053705

[solemn ravine]

Is there any way to auto remove accounts from mail address on sites that I don’t use anymore?

[past sparrow]

Yes

[naive violet]

@burnt palm You asked for help breaking laws. The warning says this.
This isn't up for argument, so I suggest that you stop.

[bitter quiver]

Auto not really. But you can sit down and go through them and just update to a new email + password

[glass nest]

dunno, vaske. intersting question though

[bitter quiver]

Periodically doing a checkup on your digital hygeine manually isn't a horrible thing

[spring edge]

then anything else is easy

[hollow pivot]

There are, let me try find them

[glass nest]

Digital Hygeine - never heard that term before

[burnt palm]

Sorry, I think you guys just didn't understand my bad english. So forgive me

[solemn ravine]

Ehh, I'm just wondering if companies keep my data when I delete my account

[glass nest]

Course they do.

[past sparrow]

Alright

[glass nest]

probably not the emails themselves, but certainly some metadata from the account

[mint thicket]

So, hey everyone--just hopped over here from reddit. Curious how you all are liking TryHackMe? Seriously considering it for some upskilling for a career pivot--but is this entire group of individuals all 20 somethings? Are there any mid-life adults around? Nothing against the younger folks--truly. Just, looking for my tribe.

[bitter quiver]

90% do, but some offer the option to request it deleted, And you can always manually submit a request to delete it. One of the best things to do is update all your info to incorrect stuff before deleting lol

[spring edge]

wanna txt priv ?

[naive violet]

To some extent.
If you're in Europe, you can invoke the right to be forgotten

[glass nest]

All those ages and more, elizadoo

[past sparrow]

Sure, hit me up

[proven quartz]

There are people of various age ranges from young to older

[bitter quiver]

37 bud

I'm old

[glass nest]

Legend has it theres even an Irishman here, but I think thats just a scary campfire story

[solemn ravine]

Do they still store mail:user:pass combinations? That is a great idea, let’s just hope they don’t store info before edit

[bitter quiver]

If I sneeze too hard I fart and make my knees hurt

[whole yew]

FWIW I didn't finish my Bachelor's in CompSci until I was into my 30s, and I didn't get my first job in Cybersecurity until I was almost 40.

[bitter quiver]

You shouldn't be reusing passwords anyways

[sand trench]

in europe you have:
the right to be forgotten
GDPR

gdpr can be used to find out exactly all the data a company has on you
and also generally helps with the right to be forgotten if you want said data removed

[mint thicket]

not old at 37! I'm 44. but THANK you for raising your hand--I'm so old school I walked uphill both way in the snow...

[twin ridge]

Gave +1 Rep to @bitter quiver (current: #2000 - 1)

[naive violet]

Most sites don't store passwords

[chilly veldt]

I made sesame chicken

[proven quartz]

turns on Hollywood Irish OOh look at mee!! I'm a leprechaun! turns on regular Irish accent not really, I'd never wear a green suit 😛 And I have no lucky charms

[iron salmon]

but it is smarter to not get you data deleted if in europe get the data deactivated like an active directory user

[bitter quiver]

My life in the physical labor markets before I got into offices added 10 years to my actual age

[solemn ravine]

It would be great if, for example, there was a site where you enter your email address and you can see which sites you have account on

[naive violet]

Think about the potential for abuse.

[mint thicket]

fair. I've been in energy for a while now and te poor bastards out in the field are SUFFERING by 37

[solemn ravine]

Yes, that makes sense too :/

[whole yew]

I would not want that, in general. Think about all the data that would have be shared and available from all services for that to be a thing.

[glass nest]

James - EMF kinda clashes 😦 I have an event the weekend after, So 2 weekends in a row is pushing it for me

[naive violet]

Boo

It's every two years

[glass nest]

Fingers crossed for 2026

[iron salmon]

reason beeing is.. they could claim to have gotten your info from somewhere else after the deleting again and can send you commercial stuff if you get it deactivated they are done.

[bitter quiver]

Torn meniscus surgery in one knee, tendinitis in both achillese tendons from my 20s, torn UCL right thumb, several tears in my left thumb currently actually. Frozen shoulder at one point, spine rotated 180 degrees from a sports accident late 20s. etc, etc, etc.

Tylenol, Ice, and Ethical Hacking. My new Podcast.

[naive violet]

Last batch of tickets goes up at 9pm today

[hollow pivot]

this one is paid though https://joindeleteme.com/?utm_source=influencer&utm_campaign=DD20&coupon=DD20, there is another one with a free offer, but need to remember what it's called

[solemn ravine]

I have a problem that this is a very old email and when I was younger I logged in everywhere and left information. I should start cleaning it all up because my main mail is too full of nonsense

[whole yew]

They actually have to demonstrate in court that they did reacquire that information through purchasing or other agreements, once you've made the request

[glass nest]

are you going as a group with people, or solo mission, James?

[bitter quiver]

I've contemplated one of those erasure companies but wasn't there a situation where someone working for them blackmailed a person?

Or is that just fanfic in myhead

[naive violet]

Who said I was going? 👀

[mint thicket]

I'd listen to that podcast

[glass nest]

It was an assumption - Just the radio stuff alone 😄

[hollow pivot]

Didn't know you were that old Juun

[solemn ravine]

Maybe this one?

https://www.optery.com

[bitter quiver]

Age is just how refined we are. Life is one long process of mental fermintation

[whole yew]

kek, i wasn't the oldest person at the table for lunch, but it was close

[glass nest]

Juun was around when THM was a BBS 😄

[bitter quiver]

Ouch

[whole yew]

kek

[bitter quiver]

Low blow

[whole yew]

I actually used the BBS system back in the day

[hollow pivot]

Never heard of this one

[iron salmon]

yeah.. after you showed proof that you requested it... and then they and then.. sounds like a lot of work time and maybe money. i am sure most will delete it because if they fail to do so in the first place they get problems hmem

[whole yew]

on a 9600baud modem

[glass nest]

It's ok, Cipher - I'm 41. In the old-folks club 😄

[bitter quiver]

Back in my day mom had to write down the command to navigate MS-DOS to launch my games by command line. And we had no mouse

[whole yew]

Mostly if it's a CA identity or GDPR issue, yeah. But there are companies that explicitly don't do business in those regions specifically so they can avoid the law

[proven quartz]

I was that age when I dun got my cataract surgery 😛

[naive violet]

I need to get my modem going

[glass nest]

Cipher - Pretty much. First computer I used was a Commodre64

[devout palm]

Esqy, you are almost the same age as my dad

And juun as well

[iron salmon]

true

[whole yew]

one of my younger nephews asked me what a modem was used for - which lead to a fun discussion of baud vs bps and why overhead counts against bandwidth

[quasi hedge]

Does anyone here have experience in reporting a word-press plugin vulnerability?, if so
Which Partner I should report the vulnerability to.

[glass nest]

Biggest thing I've learned... don't be in a rush to grow up. I've had any amount of DMs from folk asking how to get in the workplace at 14 and 15... It's like.. Cmon. Enjoy your youth! Work sucks!

[bitter quiver]

I missed that era mostly. I love watching 8-Bit Guy and RetroRecipes for that content though

[naive violet]

I like modems thanks to RF stuff.
Lots of modulation involved

[twin ridge]

Gave +1 Rep to @whole yew (current: #10 - 731)

[bitter quiver]

Same reason I enjoy playing Comet 64