general

[spice adder]

Maybe a bad link, I see ios app mentioned in that

[golden timber]

It worked

[spice adder]

Sweet :D

[golden timber]

Awesome dude, yeah I always enjoy getting to know more people in the space

[spice adder]

Always great to find like-minded folk

[golden timber]

Yeah and idk if this is the case for you but, locally, so hard to find anyone

that's likeminded

at least, the tech peeps like to hide

[spice adder]

Yeaaaa, that’s where uni has helped a shit ton. I’ve networked a whole lot through it. Especially since working there, I make friends from people in all years and even staff 😂

[golden timber]

Oh yeah I can imagine

[chilly veldt]

best part about being back to school is being allowed to sit in the nice cold datacenter and just relax while setting up infrastructure

[golden timber]

There's a local uni nearby me that I don't attend, but I casually joined their cyber club discord lol, they were friendly.

[golden timber]

Ooo that sounds nice

[chilly veldt]

it really is

[spice adder]

Hell yeah. They got a cyber clinic you could attend or nah?

[chilly veldt]

just hardstyle in your headphones, aircon above you and commands in your terminal

[spice adder]

Also day, just realised how sick your username is. The payloads one :o

[spice adder]

Air cooled students

Not even water cooled smh

[golden timber]

See, Idk since I don't necessarily have anything affiliated to them. If I work there, I get education free. My brother in law works there and his brother. They're also friends with the sysadmin so, I definitely have connections. But their hiring has been messy it sounds like, internally

I called about an application and they said they got it, I applied 3 months ago lol

no update. just in the void I guess

[spice adder]

Free education is one hell of a bonus. For the certifications more than anything - pretty sure most university content sucks ass and is as dated as ec council 😂

[spice adder]

Damn man, there’s places to be filled tho?

[golden timber]

Yeah that's the only thing that's keeping me away from the WGU idea but, I figure WGU would probably cost $4k or so max

[golden timber]

Yeah the sysadmin told me they're always hiring apparently

and we're friends now so he's in my interest for getting something, they bring it up a lot

[silver rampart]

There is an opening in the VAPT domain, if anyone is interested they can go through this post.

[golden timber]

Interesting

[mossy river]

@silver rampart Please don't self promote here

[spice adder]

I wonder why linkedin GET requests urls include device type when sharing from master device

If it’s accessible to any device

[golden timber]

I sort of have a moral code to not pursue jobs from recruiters based in India

[silver rampart]

I am not promoting myself there is an opening in my organisation, so I am just informing everyone, if anyone is interested then it will be helpful for them

[mossy river]

If you would like to post job openings, you will need the recruiter role. Please email [e-mail] from your company email to receive this role.

What you posted was directly to a LinkedIn post you made, not an official job posting

[latent island]

Isn't that the definition of a promotion 😝

[rapid merlin]

Do you guys prefer attack box or normal kali?

[fringe iris]

hi is 0xB master high ranks guys ?

my friend got it so uh

i don't frequenly use tryhackme soidk

[lethal fog]

Do all wifi adapters look like spiders? Is that normal?

[karmic furnace]

I need more motivation.

[mossy river]

Is there any reason why not?

[sick lance]

I prefer my own Kali, as it'd set up for my convenience.

Howe I do use the attackbox now and then.

[mossy river]

Not sure if the original user is referring to a VM or the site Kali Linux

[shell nova]

I have my kali set up with vagrant with a share on the host for persistent files and ansible to provision

But I'm probably not entirely sane

[sick lance]

I had a look at Vagrant, might need to set that up to give it a bash

[shell nova]

Makes things easier

Imo

Less permanent though

[mossy river]

Lagging can be a ton of reasons

It usually not the machine itself, might be your connection

[shell nova]

Probably their network tbh

But it's still a UX issue, even if it's not directly thm's fault

[mossy river]

Hm?

[shell nova]

It has its uses, notably for corporate networks where a VPN won't be allowed

Or certain countries where VPNs are difficult

Or for those who want a decent experience out of the box without having to set up their machine

[mossy river]

Users who don’t have a good enough machine to do CTFs, users who can’t use a VM (using host is not recommended), it’s great for users who are on the go and don’t have a dedicated machine, it also comes prepared with all the tools and room requirements

[shell nova]

Or want to try before they commit

I mean the persistence is the only real downside tbh

[spice adder]

VPN connection only. Tried attackbox a couple of times and has been more of an inconvenience than anything personally haha

Tend to run a lot of CTF’s through my exegol docker anyways now so vpn is a must

[shell nova]

You should be able to ssh into the attackbox as well if the web UI is an issue

Over the VPN though

So yeah ok strike that

[spice adder]

Good to know, thanks for that

[twin ridge]

Gave +1 Rep to @shell nova (current: #12 - 548)

[spice adder]

Still useful info

[mossy river]

Any reason?

This is purely me trying to understand why, there’s no wrong answers 😄

[spice adder]

Reason against attackbox or for using exegol?

[mossy river]

AttackBox

[spice adder]

WebUI just seems slow. Possibly my own connection during the times I’d tried it. But just find it as another vector to rely on working right - when i could just vpn in and work in a standalone environment. Plus, any tools or docs I pick up from a box are persistent. Building my methodology and toolkit :)

[mossy river]

I know how we can fix the webui being slow part

[spice adder]

All in all, seems to be added steps to my usual testing

[mossy river]

I’ll pass on the feedback, danke

[spice adder]

Great to hear! Danke shoen

[mossy river]

Bitte

[karmic furnace]

Am I having a stroke?

[mossy river]

Yes

[spice adder]

Precisely

[karmic furnace]

Oh good, I thought I was gonna live.

[mossy river]

What’s going on

[karmic furnace]

Stress mainly.

A significant amount of work stress.

[mossy river]

Not sure if I’m allowed to discuss it externally but you’ll likely see it on the website

[karmic furnace]

probation finishes in 2 days.

[mossy river]

Last stretch 💪

[karmic furnace]

or 3.

[shell nova]

Glhfdd

[karmic furnace]

then I'm gonna be asking for a 10k raise.

because I am overworked and underpaid.

[mossy river]

GL.

[mossy river]

dd 😭

[karmic furnace]

significantly, especially considering my work load as I have taken tech coordinator, as well as support for my job

[shell nova]

Ugh I don't like coordination jobs

[karmic furnace]

There's only me, and one other person who do it

For the whole of Australia for the company I work for..

it ain't the best.

[spice adder]

Wow. Praises for keeping your head attached so far

[mossy river]

Off topic, did your username used to be Bob?

[karmic furnace]

Some of the days can be 10-11 hours long.. then depending on the technician we have..

[karmic furnace]

No Jabba, it was always unreal.

[mossy river]

Unreal Bob?

[karmic furnace]

Blob.

[mossy river]

Aaaah okay

[karmic furnace]

[mossy river]

That’s makes sense

[karmic furnace]

Is what I used to post a lot of.

I miss Blobby

[mossy river]

Thought I was going to be crazy

[karmic furnace]

No, no its me, not you.

[mossy river]

Ma1ware left without saying goodbye

Smh

[karmic furnace]

Blobby helped me a lot when i was starting out

[mossy river]

@near hawk hi mind if I DM

[mossy river]

The CM?

[karmic furnace]

Yeah, They were back in the day

I think?

[mossy river]

Yuh

So unfortunate

[bright pine]

Hey I don't know if I need to ask or not this question

I lost my WhatsApp data completely i have an iPhone can I take backup is there any guidance

[karmic furnace]

They moved somewhere and just disappeared.

[karmic furnace]

if you have an icloud, you might be able to back it up from there?

[mossy river]

You can only backup before you lose access to the data

[karmic furnace]

guess it depends.

[lethal fog]

How to find the ip address of a website?

[mossy river]

There’s a native function within WhatsApp to backup to iCloud if you can still see the data

[mossy river]

Why

[lethal fog]

I'm curious about it

[bright pine]

I don't have much idea about it could you please guide me

[karmic furnace]

don't even need a DNS.

[lethal fog]

Yes, this is what I mean

[karmic furnace]

there's many ways to find out the IP of a website.

[mossy river]

What for though

[lethal fog]

For example, I can access amazon through this link: https://amazon.com, but what would be the ip address of amazon?

[mossy river]

You're not meant to know the IP address in most cases

it's a fake IP address

[karmic furnace]

that's the whole point of DNS's..

[mossy river]

https://faq.whatsapp.com/iphone/chats/how-to-back-up-to-icloud?lang=sv#:~:text=Tap Chats > Chat Backup > Back Up Now.

[lethal fog]

But I've learnt that behind every url, there is actually an ip address

[karmic furnace]

not necessarily.

[mossy river]

Correct, but most services don't expose the real IP address for security reasons

[lethal fog]

So there is no way to get it?

[mossy river]

Of course, but you're a level 1, I'm not telling you how

[sharp citrus]

@lethal fog

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Feb 26, 2024, 11:34 AM

[mossy river]

I got to where I am by studying, you need to research.

@lethal fog Sprechen sie Detusch?

Please don’t help them right after I told them they’re not getting help sigh

[lethal fog]

Yes, I do. Where would you know that from?

[karmic furnace]

that just ruins the point of research.

Google!

Always google.

[mossy river]

#general message

[karmic furnace]

Ah man, Offspring puts me in the best mood.

I wish I could be in this mood all the time.

but nooooo.

[lethal fog]

What did I even do, so that you claim these?

[mossy river]

You were trying to attack machines on a network

[mossy river]

You can influence your mood through listening to specific music when you are feeling a certain way 😎

When you're happy, listen to one playlist.

When you are sad, listen to a different one.

When you are sad, listen to the happy playlist

[lethal fog]

No, I wanted to figure out how to sniff my own home network. In addition to that, I do not even belong a wifi adapter, which lets me get all the devices ...

[karmic furnace]

well, I need to do this at work.

[mossy river]

you know the router that you're connected to, did that come from your internet service provider?

I don't really have any public playlists on spotify atm, music is in shambles

[lethal fog]

Yes, obviously

[mossy river]

Are you aware that you are actually renting that piece of hardware and you don't actually own it

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1174)

[mossy river]

Which means anything you do on that router may be in violation of your ISP's terms of service

[lethal fog]

Yes, for sure

[twin ridge]

Blacklisted from receiving points

[mossy river]

And even worse, it could violate some laws.

[lethal fog]

But there are all these ethical hacking videos on YouTube about sniffing the own network...

[mossy river]

If your friend told you to jump off a cliff, would you?

Don't trust everything you see on the internet, they are not responsible for your actions, you are.

In court you can't turn around and say well he did it

[lethal fog]

What specific network can I sniff then?

[mossy river]

Buy your own router, set it up, connect devices you own to it

[lethal fog]

What do you mean with own router? Do you have any examples?

[lethal fog]

Would I have to pay monthly fees for it?

[mossy river]

No

[lethal fog]

And why wouldn't have anyone this kind of router?

[mossy river]

Because most people don't need their own router

So you rent one from your ISP

[lethal fog]

What are advantages and disadvantages of choosing this kind of router?

[sick lance]

"Just because you can, doesn't mean you should."

[mossy river]

Not committing crimes?

You don't need to connect it to a WAN

Just have your own local area network you hack on

[lethal fog]

Do you have such a router?

[mossy river]

Yes

[sick lance]

Might need to verify.

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 26, 2024, 11:47 AM

[glass nest]

Still talking about this, Puv? Wow. You know, if you'd spent the last couple of days learning the fundamentals instead of laser focusing on 'hacking your own network' you'd likely know all this by now.

[shell nova]

I mean, I have my own WLAN equipment because the ISP's router is terrible and can't reach beyond the wall

[sick lance]

My isp router isn't terrible, my connection to the house on the other hand....

[shell nova]

Oh I have fibre

[glass nest]

You also have a slower typing speed than me 😄

[mossy river]

We have virgin media business and it’s amazing

[sick lance]

Me too.

Still can't get past 50 mbps

[shell nova]

Shoved a cable to a switch in the office and get 1 gbps

[sick lance]

Where I live we have the choice of 2 isps 😦

[shell nova]

Well I have the choice of...2 if I want fibre, and dsl sucks

[glass nest]

I get around 90 odd at home. Had maybe... 4 outages in the last 5 years. All but one were sorted in an hour though.

[mossy river]

I’ve the router running into a switch and then into two APs at either end of the house

[twin ridge]

Gave 1 Rep to jabba.sh (current: #6 - 1175)

[shell nova]

Yeah I have 3 repeaters

[glass nest]

So all that data flows through you personally?

[mossy river]

Unify APs here

[shell nova]

I'm not that rich

[mossy river]

I know people hah

We’re a student house with better networking than most schools

[twin ridge]

You're still on cooldown

[drowsy spade]

i ate kids

[shell nova]

Just gotta wait a bit

[shell nova]

Umm, ok?

[drowsy spade]

bro mod

sorry

you should go and rest

no weirdo gonna break the rules

bye-bye

[shell nova]

That was odd

[drowsy spade]

can i

uhm

Be myself

[shell nova]

Within the #rules

[drowsy spade]

aw

😦

[lethal fog]

How can I escape here without terminating the entire process?

[mossy river]

Google it.

[glass nest]

It's weird how so many aspects of our identity are reduces to a mere string of numbers. Phone number, Bank account, national ID, membership numbers

[drowsy spade]

massage your keyboard

[mossy river]

@drowsy spade If you're going to troll, please leave

[lethal fog]

I did, it told me Ctrl + C, which is wrong

[drowsy spade]

what's trolling 😦

i just say weird stuff sometimes

that's all

[mossy river]

I copied and pasted your question and found the answer

[coral dagger]

i have posted a question in room-help

[sharp citrus]

@coral dagger

<#651923438524432404>

Rule 2 - Keep Discussions Relevant

Please keep discussion relevant to the channel topic.

TryHackMe Rules · Feb 26, 2024, 12:02 PM

[drowsy spade]

/rule

[coral dagger]

excuse me

[lethal fog]

I couldn't find it

[coral dagger]

what rule did i break 😄

this is general chat

its a genralized statement

[mossy river]

Trying to get people to go to the channel you just posted in is impatient. Most helpers are volunteers 🙂

[wintry sluice]

id it weird? all those things need to be unique but easily accessible

[bright flicker]

hiya

[lethal fog]

You guys are not being helpful. Whenever, I ask something, people respond withgoogle it!

[coral dagger]

i did not trhy anything

try *^

[bright flicker]

hru

[coral dagger]

gm

[mossy river]

We're only saying it to you because you aren't Googling easy questions.

[coral dagger]

everyone

[bright flicker]

gmmm

[coral dagger]

nice sunflower

makes the day brighter

[lethal fog]

I googled, but nothing worked for me so far, which is why I come for help

[bright flicker]

even though it's officially afternoon my time lol

[bright flicker]

thanks lol

[twin ridge]

Gave +1 Rep to @coral dagger (current: #2009 - 1)

[coral dagger]

now i am making someone happy with a compliment

😄

[mossy river]

https://unix.stackexchange.com/questions/152347/is-there-a-way-to-escape-a-process-in-bash-with-out-quitting-it

[lethal fog]

This is obviously not what I'm looking for:

[bright flicker]

good just working on a project but my remote desktop isnt turning on for some reason LOL

[wintry sluice]

give a man a fish and he will eat for a day. teach him to fish and he will leave you alone

[mossy river]

the answer is literally in the title of that post

[chilly veldt]

ctrl+z

[drowsy spade]

kerr blackhole

[coral dagger]

what does this do @_@

[glass nest]

Puvude - Honestly thats what we do. Most of us always have some sort of google search on the go. Plus, the questions you are asking are kinda basic. Not saying they're not important but if you followed the advice already given multiple times and start learning at the basics, you wouldnt have these questions

[bright flicker]

windows ☠️

[drowsy spade]

url

[coral dagger]

so am i gucci or what

[bright flicker]

ive been meaning to swap to linux but yeah 😵‍💫

[drowsy spade]

belanciaga

[lethal fog]

I typed Ctrl + Z and it didn't work for me

[glass nest]

Sunflower - Try it out inside a VM. There is a learning curve, but with the likes of Ubuntu, it's not steep at all

[chilly veldt]

you have to press not type

[drowsy spade]

sweet

[nova pollen]

Step 1 Google
Step 2 read google results
Step 3 rethink your google query
Step 4 ask here 😅

[coral dagger]

so are we answering questions in here if we got

[drowsy spade]

i wiped my code and it didn't come back with ctrl+z

[coral dagger]

now im thrown

[drowsy spade]

uh

[lethal fog]

?

I only get this: ^Z

[chilly veldt]

Ctrl+shift+Z

[glass nest]

Windows is good because many everyday programs/games are written for it. Love it or hate it, for everyday use, it just works. Some techy folk look down on it because... well, they like to delve into underlying code and stuff which windows doesnt like

[drowsy spade]

e^(i*pi) + 1 = 0

e^(i*pi) = -1

[glass nest]

G'morning Bella 🙂

[mossy river]

Please don't help them after I tell them off for not researching

[chilly veldt]

esqy plz save me

[chilly veldt]

oh, sorry, I didn't see that

just arrived in chat 😅

[glass nest]

Sending the Domino's Helicopter now for immediate Evac.

[chilly veldt]

I am literally doing this the next 3 weeks

[shut hawk]

DomiCopter

[lethal fog]

Can anyone tell me what I have to do in order to escape the line without interrupting the process?

[glass nest]

Is that the Solo CTF you mentioned?

Or is this work?

[chilly veldt]

no, it's CCNP

it's school

[glass nest]

Ahhh

[drowsy spade]

booty

[glass nest]

Well... Update your Packet tracer for a start 😄

[chilly veldt]

we have to do the things on real life devices and not packet tracer 😄

[drowsy spade]

england FelL

[glass nest]

Sounds like more fun that way, Bella

[drowsy spade]

𝒆𝝅𝒊 + 𝟏 = 𝟎

𝒆𝝅𝒊 = -1

log

[glass nest]

To be honest, you should breeze through CCNA

[lethal fog]

But it does not work

[chilly veldt]

I have already finished CCNA

[glass nest]

😄

You are a confusing person, Bella

[chilly veldt]

I could take the exam if I wanted to

[glass nest]

Is this just a random lab, or an assignment?

[chilly veldt]

this is the learning material for my next 3 weeks of classes

and that's CCNP not CCNA 😄

[glass nest]

Ok, I'm confusing myself now.

[lethal fog]

It's more like this:

[chilly veldt]

no worries, how can I straighten it up? (won't be of any help, since I ain't straight)

[lethal fog]

No, this will terminate everything completely!

[glass nest]

Just keep being your fabulous self, I'll work out my confusion

[drowsy spade]

immoral

[chilly veldt]

@mossy river

[drowsy spade]

scary

[atomic aurora]

can we get this money guy outta here? 0 useful contribution to the chat

[lethal fog]

Application > Social Engineering Tools > social engineering toolkit

[drowsy spade]

i like megumi

[glass nest]

Puvude - What are you trying to do now?

[atomic aurora]

scratch that guys he’s cool

[grim sparrow]

:hammer: puvude#0 has been banned.

[drowsy spade]

haha.. Thanks

[twin ridge]

Gave +1 Rep to @atomic aurora (current: #1002 - 3)

[mossy river]

Almost banned you Esqy, luckily I double checked lmfao

[loud marlin]

do it for the laugh 🙂

[glass nest]

All part of Bellas evil plan

[karmic furnace]

I do love the SET application though

[glass nest]

Haluka - Go to bed, man!

[karmic furnace]

its only 11:20.

pm.

[glass nest]

Oh, I though it was 12hrs difference. Damn daylight savings.

[karmic furnace]

then it would be 10:20PM.

so you'd still be wrong

[drowsy spade]

jared

[glass nest]

Nah, Spring forward, Fall back.

[karmic furnace]

I do have to work tomorrowwwww.. BUTTT I'm really loving the tunes i got going

no, you're wrong Esqy

[rapid merlin]

Hello

[glass nest]

Theres a first time for everything 😄

[karmic furnace]

+1 hour in DST.

[rapid merlin]

any good guides to get introduced to linux in general (command line, file structure.. etc)

[karmic furnace]

-1 hour in EST

[loud marlin]

@graceful thistle i promise it's last one 🙂

[karmic furnace]

there's no way dolphin is awake

[drowsy spade]

creative

[loud marlin]

true...

[karmic furnace]

and if they are, they should definitely be asleep.

its like 3AM there

wait, 2AM?

[glass nest]

Thats nice 🙂

[karmic furnace]

I'm now getting confused.

[atomic aurora]

Thm has a very good module in their pre security course

[loud marlin]

yea... she prob sleep for sure

[karmic furnace]

i'm probably gonna go to sleep soon..

but i wanna root a box before i go to sleep.

soooo stop mentioning me so i can focus

[glass nest]

@karmic furnace Ok

[drowsy spade]

m

[nova pollen]

Be careful. Worst case it’s 8 am in the morning you still not root and didn’t sleep. Not that this ever happened to me.

[karmic furnace]

if it's 8AM, I'd be calling work.

[spice adder]

Anyone here got advice on intellectual property? Got a tool I’ve developed that has opportunities for funding support through my university - however the IP itself will mean that they maintain rights over the product and a take of inward revenue. I’m new to this side of stuff so looking for any guidance from anyone that may be a little more experienced. Ty :)

Just wanna make sure I don’t get screwed

[glass nest]

Ooh, thats a good one. I'd think maybe Bee, but they've not been around much lately

[mossy river]

Do you want to keep the rights of the product?

[spice adder]

I think that is out of the option if I use the university, at least partly. However funding support would be a huge help so trying to weigh up the option to make sure my own monetary interests are covered and I’ve at least got an escape clause if its needed

[vapid grove]

hey im new

what can i learn here?

[nova pollen]

Hey new

[vapid grove]

cmon >.<

[mossy river]

https://tryhackme.com/

[vapid grove]

have you seen bilo?

[golden timber]

netcat

[mossy river]

If you're accepting the funding and giving up your rights to the product, anything you do with the product will be fully owned by them. Nothing you can do about it.

[nova pollen]

Nope what is it 😅

[mossy river]

Which is why I'm asking, do you want to keep the rights of the product?

[vapid grove]

https://tenor.com/view/bosnov-my-brother-bilo-bilo-borat-gif-13678872150352120584

[mossy river]

You also need a contract @spice adder
Get it written, review it with a lawyer

[vapid grove]

web hacking seems interesting

[sick lance]

Uni Is so warm!

[glass nest]

Yeah but its full of.... students 🤢

And it is! THM has a lot of Webhacking content. Look at OWASP top 10 task, and the Juice Shop room.

[vapid grove]

have you tried it alr?

as a beginner with no prior experience/knowledge would i be able to complete it without banging my head on the wall?

[glass nest]

There will be a wall/head interaction regardless.

[sick lance]

Only downside.

[karmic furnace]

You'll always bang your head in the wall

[glass nest]

Goes with the territory, But THM is designed around going from total beginner to experienced

[vapid grove]

ouch

[spice adder]

Just had a meeting with a supervisor to discuss it further but the details around the IP still seem too vague for my liking - wish for this to go forward but idk how confident i am with the current offering

Hopefully i can get something in writing, danke

[vapid grove]

Would someone who knows web development be able to learn web hacking quicker?

[spice adder]

Understanding the architecture of a web server and its development definitely help

[glass nest]

Of course. If you already know a lot of the core conepts and how websites work and deal with info.

[vapid grove]

i only know http and https

[mossy river]

Usually someone who is proficient in web development mostly understands the vulns associated with it

[bitter quiver]

HTML5 and CSS?

[wintry sluice]

I had no prior knowledge of web hacking prior to using THM. Only been doing it 2 weeks, but found the stuff relatively straight forward. When I had problems, I just used the discord search, but you can also ask for help in the learning path channels

[spice adder]

These are both protocols, its a start to understanding - but look into actual development frameworks and web server architecture

[vapid grove]

frameworks such as react/angular/php?

that stuff?

wait, those might be libraries

[spice adder]

Yeah, exactly. PHP, NodeJS, etc. In learning, you'll encounter PHP a lot. Focus on doing some THM rooms, you'll build from the ground up

[vapid grove]

oh ive never touched php

[sick lance]

php should burn

[golden timber]

33 applicants in 26 mins what is this.

[bitter quiver]

SIte makes it easy

[vapid grove]

fix the ppl at the help desk

lmao

[bitter quiver]

Customer Service Reps desperate to make the jump to IT as it's touted as the solution to lives problems

[golden timber]

I'm better off applying for mid roles

[golden timber]

literally. I'm better off applying to mid roles

that normies dont know about

[bitter quiver]

If you already have experience yeah.

Or TIer 2/3

[golden timber]

yeah

[spice adder]

There's a way start to everything - i have limited php development experience however you build your knowledgebase of identifying vulnerabilities through time. Through practice you get a decent understanding of how they work, even without developing them first hand

[golden timber]

I mean my experience isn't traditional helpdesk but I've been the lead audio engineer at a place I volunteer for 4 years and I've slowly got into IT networking stuff

[vapid grove]

i thought web hacking would be easy, just run a software/npm package and just let the software/package do its thing

[bitter quiver]

Honestly anyone can do IT is my view. So I actually encourage CS reps to transition if they have solid soft skills. The only growth in Customer Service is either management or account management.

[golden timber]

but, I can volunteer for 4 years but that doesn't provide for my future :(

[wintry sluice]

start with the Pre security and intro to cybersec paths. both are excellent and provide a good foundation for the other stuff
https://tryhackme.com/path-action/introtocyber/
https://tryhackme.com/path-action/presecurity/

[bitter quiver]

If you have soft skills and transition into IT, you will go far compared to technical folks with n o soft skills

[golden timber]

yeah

[sick lance]

Blind applicants.

[golden timber]

yeah probably, since it's easy apply

go figure

but also advertising $60-65k

[sick lance]

Then find out at the interview, its not a position you want.

[bitter quiver]

The job I have now I wasn't qualified for lol. I applied anyways.

[golden timber]

Yeah I need to just do that

[bitter quiver]

100%

[golden timber]

I get scared but

[vapid grove]

yall got jobs?

im only 18 wandering here

[mossy river]

I don't have a job

[golden timber]

If I could volunteer at the organization I'm at forever, I would, but I don't make money

[mossy river]

[mossy river]

I was hired by THM at 17 💪

[spice adder]

The difficulty of pentesting a testing a web server is subjective to the application itself. Sometimes it's as plug and play as you mention but without proper reconnaissance you wont find what exploit you need. Refer to the cyber kill chain; reconnaissance, weaponisation and exploitation etc.

[bitter quiver]

If you interview well you can trump people who look better on paper. And after having done probably over a thousand interviews for hiring folks, I often don't care about degrees or other listed skills as much as I do how they react/respond to specific questions.

[spice adder]

Gain the methodology to pentest against web and it becomes easier - much like a lot of things in life :)

[sick lance]

I volunteer mostly.

Looking for a summer position.

[vapid grove]

youve got a great portfolio even though i didnt understand any of the projects

[spice adder]

It's not hard to start, thm have great starting content

[bitter quiver]

And fun.

[spice adder]

Hehe thank you :) you been on my website?

[twin ridge]

Gave +1 Rep to @vapid grove (current: #2009 - 1)

[vapid grove]

yh

[spice adder]

Apart from blind sql room

[vapid grove]

dont tell me u got my isp, etc.

[bitter quiver]

Haven't done that one yet.

Though I am learning SQL in tandem with Python

Just in case I swing full data science

Since my job has become basically that at work...without the pay

[spice adder]

Nah, just all those funny numbers on the back of your card (jk)

[vapid grove]

😂

[spice adder]

I mean it's good to know the manual workings of blind sql but goddammmm it can be awkward

[vapid grove]

could you tell me more about ReconnAI

seems very interesting

[spice adder]

i usually indentify a sql vuln then spin up sqlmap

[spice adder]

ayy aight 2 secs

[bitter quiver]

You guys see the new remote drone combat vehicle the U.S. just tested out?

Hackers are going to be legit on the field operatives soon lol

Need to drink coffee so I can spell

[spice adder]

ReconnAI is a tool im working on at the minute to integrate AI into the reconnaissance phase of penetration testing. Allows you to perform an automated scan using any tool you'd like then receive an analysis of the findings from AI. All in the terminal - and unix based currently

@vapid grove

It's in a production state, just waiting to finish my dissertation to start any form of release

it's my dissertation project

[vapid grove]

WOAHHHHH

[bitter quiver]

Imagine as part of pentesting if you perfect that and load it onto a specialized OS on a drone you can just fly on top of your contracted building to test out if they(as they often do) have wifi bleed

And just let it run while you sip a latte

stuub playing 4d chess

[vapid grove]

some words here still arent on my dictionary

[spice adder]

thats a scope of the product i had never thought of 🤣 flying reconnai - i like it

[vapid grove]

recon with ai sounds brutal already

flying recon ai

[spice adder]

[bitter quiver]

I've been playing mostly with drone concepts myself. Specifically long term information gathering/slow processes using solar recharge and low drain components. Also playing with the same tech for snake cams to see if you could push a cable through a vent.

[spice adder]

Got a lil demo of it i used for investors if you guys are interested in hearing my voice

[spice adder]

Thats pretty dope man - you got any prototypes in the working? Using existing tools or building your own? Just strap a rasp pi w ontop of it and let it go hehe

[bitter quiver]

Tweaking existing drones. Rasp pi was going to be the board but I'm switching to bananapi for cost effeciency

I mean same thing but still

[spice adder]

Here's a lil demo for those interested in seeing the tool :) https://www.youtube.com/watch?v=A8V_7_vyFjA&t=2s

[spice adder]

Hell yeah man - lemme know if you wanna integrate my tool as a prototype

I'd be honoured

to have my software fly

[mossy river]

I am okay with you mentioning your tool but can we make sure it's not becoming too excessive and boarderline just self promotion please :)

[bitter quiver]

That's a long ways off but yeah lol.

[spice adder]

Yeah of course man, its not in a release state so no distribution of it, if thats any consolation :)

[bitter quiver]

Right now I'm just happy I haven't fried a thousand bucks worth of gear. Yet.

[mossy river]

This is just a friendly message, you haven't done anything wrong 🙂

[glass nest]

Cipher - It's only 1pm. You still have a few hours to go 😄

[bitter quiver]

1pm. It's 8am here

[mossy river]

timezones don't exist

[wintry sluice]

its 1 oclock and its time for lunch

[mossy river]

it's uk only, everywhere else is a myth

[bitter quiver]

timezones are gubment lie

[sick lance]

Time doesn't exist.

[glass nest]

Oh. You have the whole day ahead of you. Couple of g's should be easy

[sick lance]

It's an illusion.

The night sky is a video stuck on record.

[bitter quiver]

gubment planted the thought of timezones using the fillings in our teeth as transceivers

[gritty zephyr]

British Museum also claiming time i see

[bitter quiver]

LOL

My wife, being Indian, has thoughts about the BRits

[golden timber]

how was that interview though

[wintry sluice]

we should all just use UTC. life would be so much simpler

[gritty zephyr]

Heya hackers 🙂

[bitter quiver]

Easy. 3 interviews in a row across 3 days. Hiring Manager, HR Manager, Director.

Just sold myself on the transferrable skills that matched what they needed.

[golden timber]

so, even though you weren't necessarily "qualified", you were able to perform well in the interview?

[bitter quiver]

Yes

[golden timber]

Amazing

[lament tendon]

He lived.

[rapid merlin]

My rasp pi stuff comes this week, woop woop

[golden timber]

Cipher, did you use anything to interview prep?

[mossy river]

Jabba Museum

[gritty zephyr]

Barely, fueled by spite of not wanting to sleep

[lament tendon]

Whahahaha

As long as it‘s nothing worse. ^_^

Might actually go to the Netherlands end of March, by the way.

[bitter quiver]

Most job postings are filled out by HR/ Recruiter to include the perfect candidates items.

The perfect candidate really doesn't exist, and especially not for the ....salary 90% of companies are offering.

You WILL meet 70%+ of what is being asked probably in some transferrable way. Focus on selling the skills you have as the solution to their need, and that you areactively interested and studying some of the missing components.

[bitter quiver]

Downlaoded and practiced some software I never used before and watched some training videos on LinkedIn Premium so I could speak to it

[golden timber]

awesome

[gritty zephyr]

Nope, all good otherwise

[bitter quiver]

And did the whole get tense panic attack thing for ~5 minutes before I slap myself a few times and say "showtime".

[rapid merlin]

What role did you land my friend?

[golden timber]

dang yeah

that adds up lol

[gritty zephyr]

Went to a concert of nothing but thieves to this Saturday, was freaking amazing

[bitter quiver]

Higher management role in a different field than I had experience in moving my from a more labor intensive field to corporate office in logistics lol

[lament tendon]

Damn, neat stuff.

[gritty zephyr]

Mhm mhm

[lament tendon]

I‘m hella bored at the moment. 😅

Weekend was pretty meh.

[bitter quiver]

Never heard of them

[gritty zephyr]

Better than bad 🙂

[bitter quiver]

Now I have to listen

[gritty zephyr]

Great stuff

[bitter quiver]

What song would you recommend as intro

[lament tendon]

Hah. It was not good, but it‘s a bit personal. Ain‘t gonna cry about it.

[native flax]

can someone hack my friend

[bitter quiver]

Early 90s vibes

[gritty zephyr]

Hope you are alright

[bitter quiver]

[native flax]

please

[gritty zephyr]

@mossy river can

[native flax]

really

[mossy river]

Why what did they do

[native flax]

id love to

hes cheqting on me

[cosmic swallow]

guys, can anyone help with my school project?

[native flax]

no

[bitter quiver]

cheqting? Is that like texting and chex mix combined

[mossy river]

Do you have a monogamous friendship

[native flax]

no hes my boyfriend

[bitter quiver]

https://tenor.com/view/su-lee-ill-just-dance-sweater-beats-remix-snack-gif-21524657

[sick lance]

No, that would be cheating.

[sharp citrus]

@cosmic swallow

<#651923438524432404>

Rule 5 - No Cheating

Cheating of any form is not allowed. This is not limited to asking for help with assessed schoolwork or exams.

TryHackMe Rules · Feb 26, 2024, 1:10 PM

[native flax]

exactly

[gritty zephyr]

Google the word monogamous

[cosmic swallow]

🥲

[native flax]

exactly

but pleasies

[mossy river]

You’re aware this is illegal and can get you in a lot of trouble right? @native flax

[wintry sluice]

you sure? it might be cheqting

[mossy river]

Just have to make sure you do first

[native flax]

why

[rapid merlin]

Logistics, interesting

[sick lance]

Uh, are you ok?

[native flax]

how can i get in trouble

[mossy river]

It’s against computer misuse.

[native flax]

oh really

[mossy river]

If I’m going down, I’m bringing you with me

[native flax]

logging into someones account??

[mossy river]

Yes

Unauthorised access

[native flax]

oh

[mossy river]

Look it up

[native flax]

but wait

will he see that u logged in

[mossy river]

If the service has software that does ye

[gritty zephyr]

I love this stuff

[spice adder]

Even if HE doesn't, the service will

[mossy river]

Drop me a DM with their account name

[spice adder]

the internet police will come in your sleep

[bitter quiver]

Easiet field to do well in, in my opinon. Massive, becoming more complex, they lack technically competent people. Logistics includes a great deal of IT expertise that goes unfilled. If you get into some reverse logistics fields like ITAD, they need enginners and programmers more than anything else lol.

[gritty zephyr]

Sandman 2.0

[bitter quiver]

Still need to read that comic

[spice adder]

when it comes to sleep, i prefer the hatman >:)

[wintry sluice]

reminds of that scene in hackers

[gritty zephyr]

I was refering to the sleep man myth

[spice adder]

i still havent watched that movie man, i need to

[gritty zephyr]

Is that like the failed Batman

[bitter quiver]

No, just Batman with a hat

[spice adder]

pretty much, batman for drug addicts

[rapid merlin]

I did a job for an ITAD company, shittiest place ever

[bitter quiver]

They can be. All the smaller ones are just...shady

[gritty zephyr]

Hatbatman

[bitter quiver]

Slightly overweight batman with a fedora "Me lady"

[spice adder]

https://tenor.com/view/fedora-gif-4928654

the true hatman

[bitter quiver]

AHAHAH

JINX

[rapid merlin]

I tell you they are, our one took away all our chairs from the work benches to "not damage the floor" (it was a painted concrete floor)

[spice adder]

BRO HAHAHA

[rapid merlin]

And paid everyone a different wage in the same room

[wintry sluice]

O frabjous day! Callooh! Callay!

[spice adder]

this means i cant talk now, right? D:

how will i survive without yapping

[bitter quiver]

Typing isn't talking

[vapid grove]

has anyone tried web defacing?

[bitter quiver]

But you are good to talk

[bitter quiver]

Wait

[rapid merlin]

And overall was just a boring job to be honest, didn't want to progress you in any skills or nothing

[bitter quiver]

Can I DM you a question?

[rapid merlin]

Yes

[gritty zephyr]

Why exactly do you ask

[vapid grove]

just concerned

[wintry sluice]

this was the moment they found they worked for the same company at the same time

[spice adder]

what about all capitals, this surely is reaching a higher sound level despite being funny 1's and 0's

[spice adder]

web defacing is a thing - if you have write access to a web server

used to be a big thing back in the "anon" days

the days of thousands of anonymous skype and IRC groups

[gritty zephyr]

Those days were fun as a kid

[spice adder]

hell yea man

Low orbit ion cannon loading

[gritty zephyr]

XD

[wintry sluice]

like, online graffitti?

[spice adder]

darkcomet listening

i did some stupid shit for a 13-15 year old lmao

suppose they're the years to do it

[gritty fractal]

Hey anyone here that will give me a recommendation about computers?

[spice adder]

thinkpad. end of story

[gritty fractal]

Buying a new one and im stuck between which offer to choose lol

[spice adder]

you wanting a desktop or laptop?

[gritty zephyr]

Preferably one from 1990 or older

[gritty fractal]

I already have 2 options, desktop

[spice adder]

i cheated, i got a gen 11 :')

its fucking great tho

[gritty fractal]

I just want recommendations on which one to get

[gritty zephyr]

Watch out with cheating, mqybe theyll ask a discord server to hack you

[spice adder]

i'd usually say to avoid prebuilds like the plague but for pen testing specifically, you dont necesarilly need an amazing machine

Whats ur options catsuo

[gritty fractal]

Tbf not for pentesting i just want it for gaming lmao

[spice adder]

avoid prebuilds

do research and build your own. it's a lot easier people think

[gritty zephyr]

It has ease of use though

[wintry sluice]

can even pay people to build it for you

[gritty fractal]

First one is i5-12400F rx5600xt 6gb with 16gb ram 512gb ssd and 600W +80 psu which comes with a 27inch monitor

Costs 2200 in total

Oh and 1TB HDD

[gritty zephyr]

Like sure people overpay like hell but its easy

[simple valve]

is that $ or euro or what?

[gritty fractal]

Second one is same shit just with rtx 2070 super 8gb and without monitor

[wintry sluice]

yen 🤞

[gritty fractal]

Its in ₾

[simple valve]

what is that currency

[gritty fractal]

Gel

[spice adder]

The problem with prebuilds is that you usually get some good "selling-point" components like CPU, GPU and sometimes MBD. But everything else around it is a cheap excuse that i wouldn't trust my build with

[rapid merlin]

No way you are gonna 2200 euros for that

[gritty fractal]

Its not euros

Its in gel

Which is like

800 euros

At max i think

[rapid merlin]

ah

that sounds better xd

[glass nest]

Ooh, I never met anyone from Georgia before

[gritty fractal]

Yeah so which one sounds better?

[gritty fractal]

Not a big country lol

[simple valve]

the one with the monitor

5600xt is super old though

[gritty fractal]

Yeah second one has rtx 2070 super but no monitor

[glass nest]

Aye, I always like talking to folk from countries I don't know about 😄

[bitter quiver]

How hard is it to get tech in Georgia?

[spice adder]

yeah monitors are useful

[gritty zephyr]

Me with my 1550 mini

[gritty fractal]

And its for 2250

[simple valve]

so i dont think you're getting your money's worth

[gritty fractal]

I already have a monitor lol

I just need a case

[spice adder]

the size dont matter 🤥

[gritty fractal]

Im still in school

[rapid merlin]

This one for the gpu's https://gpu.userbenchmark.com/Compare/Nvidia-RTX-2070S-Super-vs-AMD-RX-5600-XT/4048vs4062

[bitter quiver]

For ~900-1000 bucks(compared to you r800 Euro) I'd expect modern components

[gritty fractal]

Yeah i did that research

[gritty zephyr]

I got it for a pack of cigs tho

Best deal i ever got

[gritty fractal]

Did the bottleneck too

First one has 0 second has 23%

[rapid merlin]

that gpu's wont bottleneck a 12400f, so no worries

[spice adder]

wtf do you have any contact info for the seller lmao

i got a pocket full of old receipts if they take them as payment too

[gritty fractal]

I think then i should go with the 2070 no?

[gritty zephyr]

Was an old mate of mine

[gritty fractal]

Already have a monitor

[cosmic pendant]

@wind lake https://twitter.com/jorgeorchilles/status/1762097365731717215

Jorge Orchilles (@jorgeorchilles) on X

Same for Red Team! There, I said it

Twitter · Feb 26, 2024, 12:48 PM

[spice adder]

hell yeah thats super cool. i just buy all my shit then hand the old stuff down to my little brother

[gritty zephyr]

But yeah my desktop is outdated as hell, but if i wanna upgrade i need to upgrade cpu gpu and motherboard all in one go

[rapid merlin]

look at the other circumstances, is the seller relable? What are you going to do with the pc?

[gritty fractal]

Mostly gaming

And im buying from a store

[rapid merlin]

And what games?

[gritty fractal]

Lol

[spice adder]

yeaahh, a lot of the time its just worth upgrading mbd so you've got flexibility to support other components

[bitter quiver]

Surviving on a ~7 year old desktop myself. 1080 ftw though. This thing trucks.

[gritty fractal]

Max ill use it for elden ring

Mostly rocket league and

Mid tier

Games

[mossy river]

Rocket league fell off

[gritty fractal]

Kinda

[wintry sluice]

not RAM?

[gritty fractal]

But still awesome

[bitter quiver]

Rocket league was the Overwatch of sports fans

[gritty zephyr]

Oh yeah, might as well get a new pc without a case lol

[mossy river]

the ranking system is silly sometimes

[gritty zephyr]

But can always download ram

[sick lance]

Is not, I'm number one

[rapid merlin]

Just buy a case too then, just for the feeling xD

[gritty zephyr]

Exactly, shes handled alot and i mostly just play offline anyway

[crude stump]

What game?

[gritty zephyr]

But this full tower one is my baby

[sick lance]

Every game.

[spice adder]

mordhau still remains my most addictive time-sink of a video game. its so perfect

top 5% in the world (2500 players )

[crude stump]

I knew you got it in you

[bitter quiver]

I play fighting games a lot, and some chill shit. Too old for the hyper competitive shooters

[gritty zephyr]

Same, simracing for me

And shit like civ and hoi4

[spice adder]

assetto?

[bitter quiver]

Only exception being Hunt Showdown. Something about the dark atmosphere

[gritty zephyr]

Yup

[bitter quiver]

Games like that and Bloodborne bring my soul peace

[rapid merlin]

I dont play games

[spice adder]

my man. i spent a lot of time on there until my wheel broke :'(

[bitter quiver]

Nightmareish realities are peaceful

[spice adder]

i had the Shutoku revival project track mapped in my head lmao

[bitter quiver]

I've never loved a racing game like I did Gran Turismo 4

[spice adder]

Grand turismo is a fanastic series

my childhood sweetheart is the 2005 NFS most wanted

[bitter quiver]

Ah

[spice adder]

That, NFS UG2 and smack down vs raw were the pinnacle of my game experience as a child

[bitter quiver]

I can still hear the menu music for NFS

For underground

3 6 9

[spice adder]

To the windooooowww

To the waalllll

[sick lance]

NFS Carbon had the best OST for an NFS game.

[bitter quiver]

Learned the words for window and wall in Hindi yesterday and first thing I asked my wife, because it's all that came to my mind, was how to sing the lyrics in Hindi now

[spice adder]

Most wanted for me. The nu metal soundtracks in tht game was the catalyst of my music taste today

[mossy river]

Please do not conduct moderation activities or enforce rules. If you think someone is breaking the rules, ping a moderator.

[grim sparrow]

:mute: lifeemerald#0 has been muted.

[spice adder]

[bitter quiver]

I remember playing the older NFS games on PC in the 90s. Like NFS Hot Pursuit, but being poor I had to use keyboard controls

Driving games on keyboard. Painful

[spice adder]

Hot pursuit was also absolutely slept on

[sick lance]

[spice adder]

Yeaaa just like me trying to drive my car with welded diff. It’s either skidding or not moving lmao

[sick lance]

Check the context of my previous message. 🙂

[spice adder]

Can’t be worse than those that use keyboard to drive in multiplayer driving sims

[bitter quiver]

Let's use a guitar hero controller instead

I think someone beat Dark Souls using that

Streamed it

[sick lance]

They did.

[spice adder]

Just use it as an actual steering wheel for a car at this point

[bitter quiver]

Nooooo. Someone is going to wire this up to a Tesla now

[spice adder]

Someone’s already made a collection of videos having random items as a steering wheel lmao. I’m sure one of them was a clothes iron

[gritty zephyr]

Im probably gonna set up an ai race on pc2 on lemans, multiclass lmp2, lmp1, gte, and just vibe

[bitter quiver]

See, the reason he crashed causing 13 fatalities is because he didn't hold the whammy bar for the full grind thus the traction control system didn't keep working for the full turn

[spice adder]

Whammy bar as a handbrake is the best idea I’ve ever heard

[sick lance]

I think I need to join the Offsec server just to chat to Spooky

[near hawk]

They're also in David Bombal discord as they're a mod there

[mossy river]

they're a mod in nc too, right?

[bitter quiver]

David Bombal, I enjot his stuff. Network Chuck is who got me Deep into tech vs surface

[near hawk]

Yep, last time I checked anyway

[bitter quiver]

But then chuck got boring because he is more of a tech shoutcaster....

Just my op

[spice adder]

Bombal has some great stuff

Helped me learn quite a bit around physical pen testing - building rasp pi stuff, hackrf etc

Sn0ren has some great RF content too

[bitter quiver]

I'm in his and Hammonds

[spice adder]

Hammond is fantastic, really like his work

[bitter quiver]

It's a glorious time to be a learner in not only the tech industry, but the security side of it.

[spice adder]

0day ever show up in chat here?

[spice adder]

Totally! Information Age

[bitter quiver]

The most fascinating things to learn though is the old tech

Instructors who have old war stories are great

Analogue cyber sec days

[spice adder]

Learning about older cyb sec methodologies makes me envious about how insecure applications were on a mass scale

Everything on a easy box difficulty

[gritty zephyr]

You are, thats dope

[cosmic pendant]

Did things change that much?

[nova pollen]

Pretty sure (never tried / looked for obvious reasons) that if you look at privat ppls stuff or smaller companies everything is still very insecure.

[spice adder]

End-point security? totally. Users, not so much

[nova pollen]

IMO Everything moves to a single point of failure -> clouds.

[spice adder]

The more i learn about RF the more i realise how insecure that it remained over the years

[heady nova]

Ello

[spice adder]

Yeah, but on an application level large cloud services are security aware at least

[bitter quiver]

Tons from a technical perspective

[bitter quiver]

Same old issues

Humans

[nova pollen]

Yeah totally way more secure compared to everybody needs to take care of it themselves. But if they mess up. It could be very bad for a lot of companies.

[spice adder]

maybe peoples ai takeover conspiracy doesnt seem to bad after all

[spice adder]

Supply chain attacks are no joke

[heady nova]

No.....

Another tank?...

[bitter quiver]

Tonks are love, tonks are life

[spice adder]

your banner tank has one quick loading crew

[bitter quiver]

It's on repeat, Abrams can't fire that fast XD

Hopever

THe Japanese Type 10 does boast a 4 second reload

With autoloader

[spice adder]

nah i like to believe they're just hacking, leave me to my delusions

Abrams undetected infinite ammo rapidfire cheat

[bitter quiver]

That's just called functional logistics

[spice adder]

i wonder what ghidra would think of an abrams

[bitter quiver]

Abrams, where we protect crew from the ammo. The most dangerous thing inside the tank. As opposed to someone else who seats the ammo right below the crew so that when it cooks off they become cosmonauts

[spice adder]

Yeah ive played enough war thunder to see this for myself However, it's usually me that does the cosmos travelling

[bitter quiver]

Fellow Warthunder player!

GOt my Germany to ~6.7 atm

Japan 5.7

One grind away from the first leopard

[spice adder]

hell yeah! Im an aviation main, up to 10.0 US and around 6 on USSR

want that goddam mig29

[bitter quiver]

I havev some premium jets, but my German Aviation tree isonly about ~5.7

[spice adder]

That's honestly the sweet spot of aviation

however, XP-50 is a problem around there iirc

[bitter quiver]

I own that lol

I enjoy air arcade for 1.0-5.7

At 8+ I do realistic

Using the Tornado IDS premium for grinding

IF I can even reach a base to bomb

https://tenor.com/view/tornado-panavia-jet-street-road-gif-8979708728903804819

[spice adder]

its always fun to go into 1.0 biplanes and ruin new players

[bitter quiver]

Brother is a Marine(out now) so he ground American air up to top

And his American ground is about 6.7

I'm a Naval enjoy

One of like 10

No love for us who enjoy those behemoths of the sea

And I don't mean curvy mermaids

[rapid merlin]

Taylor Swift

[bitter quiver]

You aren't wrong. How else do you snag breakfast from Starbucks if not by a jet?

[granite hornet]

Hi everyone, i work at a small IT company interested in implementing an SIEM in order to monitor our clients.
Does anyone recomend a siem that fits for a small company, also what would the price be if you know

[lone thistle]

ELK. Open source, you can run for free on a fairly reasonable box (2cpu and say 4gb ram but i'd recommend 8gb ram if you're ingesting & indexing a reasonable amount).

ELK is well documented and extendatable, also, free from a licensing PoV if you're willing to run it yourself

[granite hornet]

Thanks, you know how much storage they allow?

[lone thistle]

unlimited. It's down to whatever you can provision as the box. If you're running a lower amount of HDD, make sure your log rotation is good. But there's a lot of variables i.e. how many logs you're taking and how long you need to contain them for

you can have a 1cpu and 4gb ram ELK stack with 30gb or a 32cpu with 128gb ram (plus) with 2TB on the community. There're no limits

[granite hornet]

Thanks

Thanks a lot for the help, i will look into it

[lone thistle]

Splunk too. My personal preference is ELK but y'know. Different strokes 'n all

[granite hornet]

I told my company we should try splunk

But they said "too expensive for portuguese clients"

XD

[lone thistle]

probably. I think Splunk push more for their commercial editions and courses/certs. ELK is completely open source, extensible, and just my personal fave especially in a "smaller" environment

[flat hamlet]

Hey @lone thistle hope you are doing well, finally caught u online at the same time as i am lol, any idea if we could get the generated Password for the attackbox/ Kali ? i sometimes lock myself out of Root, Thank you !

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 813)

[simple valve]

helo Ben, have you worked with k8s, specifically on security side

[boreal scarab]

@hot cairn someone needs a K8s master

[lone thistle]

the passwords are auto-gennerated on deploy of the machine. You can retrieve this by pressing i on the split-screen view. For root specifically, I think this is auto-generrated to be the same as kali, if not, you can just sudo passwd root to reset the pass.

I would be a bit hesitant to give out default passwords as I use these for internal dev, but, let me know how you get on with the above and I will see what I can do. Just remember that the machine boots from a template when you deploy it, so any changes you make since then, will be lost on a new deploy

[granite hornet]

Its the elastic security right @lone thistle ?

[lone thistle]

https://www.elastic.co/ the open source version is somewhere on there or github, but yeah, elastic

[granite hornet]

thank you

[boreal scarab]

@lone thistle #general message also this

[lone thistle]

gimmie a chance 😅

[boreal scarab]

Never!

[flat hamlet]

That perfectly answers my question, Thanks a lot

[lone thistle]

I've used k8s yes, security......ehhh. I can maybe give some tips though depending on the question

[boreal scarab]

Sorry, didn't know if you saw it since you weren't tagged

[storm garden]

did yo course videos contain only women too?

[simple valve]

i am working on a security baseline and have been reading CISA's hardening guide but i guess my question is, what are quick wins for K8s in terms of security

[lone thistle]

CISA hardening is good. For k8s, make sure you implement role based access (RBAC), secret management (general good practice), and pod security policies for reducing your attack surface for your pods

[flat hamlet]

@lone thistle Last question while you are here, for the room "Command Injection", in the Practical, i was trying to pop a shell on it and thanks to the awesome help of @sick lance he was able to teach me how to use a PHP reverse shell script, when i tried again to teach a friend whos doing THM with me, it didnt work, was it patched or is it just an issue on my end ?

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 814)

[lone thistle]

and the general standard things like auditing images, implementing vulnerability scanning frameworks like Trivy and make sure you're patched

[lone thistle]

wouldn't be patched. I would just make sure that the friend's connection to THM is okay (can they access 10.10.10.10) and they are modifying the php reverse shell to match the details with their device on the THM VPN (curl http://10.10.10.10/whoami) and that the reverse shell is connecting on the same port as the listener (I.e. 4444)

[flat hamlet]

Okay that confirms that the issue is on our end, will be trying again later, Thanks a lot man have a good one

[lone thistle]

No worries 🙂

[simple valve]

amazing, thanks. i think ill list those as high priority

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 815)

[simple valve]

been wanting this but been thinking about how i can integrate trivy to the existing infra. in your case, was it seamless or was there a lot of debugging involved?

[lone thistle]

Pretty trivial. But then it depends on org policy etc...can you just install some tooling/framework on the k8s host. Trivy is simple to use, the "politics"/"policy" for getting it on might be a bit more ... involved

[simple valve]

yeah definitely. esp. with senior management hating the word open source

[grizzled wing]

John Oliver has episode about Pig Butchering scam

[simple valve]

i'll try to make a PoC with trivy to try to pitch it

[lone thistle]

also no reason as to why you can't install things like trivy on a dev box and copy/build the images that the k8s uses on your dev box if you have issues installing it on the k8s host. Ideally, you want things like that in your dev / CI/CD pipeline

[chilly veldt]

today has become a sad day 😦

[glass nest]

Oh no!

Sorry to hear that, Bella.

[chilly veldt]

I have decided that I have to sell my car

[glass nest]

Ironically, I just took delivery of a new company car. Audi Q5 quattro S

[boreal scarab]

https://youtube.com/shorts/jyTH0Gmy8nE?si=FoBarrWC9qn4I4Ma

Yo, this bird brings back REALLY fond memories

[boreal scarab]

Nooooooooooo!

Why?

[chilly veldt]

rust

[boreal scarab]

Oh on the frame?

[rapid merlin]

Nice one btw

[glass nest]

Or the car programming is only in Rust?

Thanks Acme. It's not mine, its for my brother (director)

I'm happy with my 2005 van 😄

[rapid merlin]

xD

Thats something different yeah

[bitter quiver]

I haven't heard that bird in eons

[glass nest]

And it's mine. The other folk in the office all get Mercs and Audis on leases. They're nice, but nah.

[boreal scarab]

Seriously, It's rare u hear it now

[bitter quiver]

Probably one of the things we killed off.

Remember the last time you seen a red lady bug?

THose orange ones ate them all

[rapid merlin]

Yeah, as long as you are happy with it, all good 😄

[glass nest]

Happy... for now. Until it breaks down again :p Luckily most of the things are stuff I can fix myself

[bitter quiver]

I would comment that it's crazy that the exact same bug with a slightly different colored shell would wipe out another one, then I remembered humans

[glass nest]

Next semi-big job is replacing the hadbrake cable. Looked a bit frayed when I was under the van a couple of weeks back

[boreal scarab]

So someone commented there, that we've been hearing them less because they have been hunted

https://youtu.be/7oNljd7R1f8?si=ZGM1djK2Iz3QqOCa

But here's the bird and some noises lol

[bitter quiver]

Slightly terrifying

[bitter quiver]

Why hunt them?

[glass nest]

Eh. Leave in 1st gear and a couple of choc blocks.. it'll be fiiiiine

[boreal scarab]

Yah, when I was a kid laying down in the TV room and one flew in on me

[bitter quiver]

Are they good eating or thje sort?

[boreal scarab]

Dunno

[rapid merlin]

In our country we have a website that has a camera on a birds nest every year

[boreal scarab]

That's cool!

[glass nest]

I remember seeing an Owl cam like that

[sick lance]

A number of countries do that.

[rapid merlin]

I can send an URL?

[bitter quiver]

We have cameras on some Bald Eagle nests

[glass nest]

Was really cute seeing the Owlets (Learned that term on here :D)

[rapid merlin]

https://www.vogelbescherming.nl/beleefdelente/steenuil

This one 😄

[glass nest]

Sure

[bitter quiver]

Owls are amazing creatures

[rapid merlin]

You might have to translate the website xd

[glass nest]

I'll just learn whatever language it's in.

[bitter quiver]

^

Just German

[rapid merlin]

If you click on BINNEN2 you can see the inside

[rapid merlin]

Dutch

[bitter quiver]

So Germany with an accent

[rapid merlin]

Damn...

[bitter quiver]

[rapid merlin]

Yeah i remember watching the cams on sunday afternoons

[bitter quiver]

I keed. I'm not that much of an expert, I just know they are heavily involved

[glass nest]

Are Netherlands in the Euros?

[rapid merlin]

Yess

[bitter quiver]

All I know is even saying nice things in German sounds angry

[glass nest]

Whats their group like?

[bitter quiver]

German can compliment me and I'm scared

[rapid merlin]

Mhh?

Group?

[sick lance]

For the Euros?

[glass nest]

In the Euros

[rapid merlin]

oh

Football?

or

[glass nest]

Haha, did you think I meant in the EU 😄

[bitter quiver]

Why they do the German like that

[rapid merlin]

yeah xd

[bitter quiver]

I'm intrigued to learn the differences now

[glass nest]

You got... Austria, France and a wildcard

[rapid merlin]

But yes, in euro 2024 yes

[rapid merlin]

they can become second

[glass nest]

@mossy river

[rapid merlin]

damn that one was 0xD

[bitter quiver]

Dutch is far softer sounding on the ears

[sick lance]

People are suckers for free software it seems.

[boreal scarab]

FOSS! Don't pirate shit, find an alternative!

[rapid merlin]

Esqy is your country in Euro 2024?

[glass nest]

Ireland, Nope. But England are

[boreal scarab]

Speaking of Ireland... https://youtube.com/shorts/Y0gMiYDoP1E?si=VSZtuNhXALE4Jehj

[glass nest]

Might have been a compromised account

[boreal scarab]

1 more day 👀

[rapid merlin]

Ah, they have a decent chance, but as always, France will win

[sick lance]

Yeah, it was.