general

[crude stump]

💰

[shut hawk]

Yeah although the only "new" feature is the way the members are displayed (as in, you can achieve everything else with a well configured bot)

Actually thinking about it, you can also display the members very similar with a bot to

But nice to have it native I guess

[mossy river]

With roles, yes, but you won't be able to party up with them.
And you can't create shared activities with a bot

Applications can be achieved with a bot but it will be incredibly janky. Mostly the fact that the system for reviewing and accepting will have to be stored somewhere and won't be as clean as just opening a section and reading through it.

Furthermore, it requires users to click a button to trigger the modal, and finally it requires competence to write a Discord bot and a server to run it

We used to do this ages ago with GMOD servers; spin up a simple website using a forum template tool and you would create a threat to write an application. They probably still use it now, it's better than doing it in Discord

Mist forums iirc

[shut hawk]

Forgot about the shared activities part, that's probably what I'm most looking forward to actually

[mossy river]

Time to figure out how to port the AttackBox to a Discord shared activity

[shut hawk]

🔥

Yeah, it's certainly a lot more nicer to have the features built into discord but definitely nothing completely innovating

[grizzled crystal]

this is cool af, i feel like this would be great for writing too. brainstorming ideas and all that

expensive :(

do you find it worth it? @shut hawk

[shut hawk]

Yep and allows you to insert your own media, highlights, flashcards, tasks, kaban board etc

[grizzled crystal]

Yes, that seems really nice

Lots of language learning potential

[shut hawk]

I'd say so considering how much I use it, it's around £6 a month

Also didn't realize how useful it is to have a mobile app

And the development on it is quite active, get updates weekly

[grizzled crystal]

Very nice

I'm happy with my current setup for notes, but the features here might be really nice for specific usecases

[proud osprey]

Hello kindly tell me password for ssh into a machine tryhackme is showing incorrect

[crude stump]

which room

[proud osprey]

Snort

[mossy river]

#room-help

[shut hawk]

Obviously the downside to it is that it's not just a simple .md plain text

[grizzled crystal]

yeah for sure

i love the idea of fancy note apps but i tend to find them super overwhelming

[crude stump]

i use a good ole composition notebook

[mossy river]

I much prefer writing by hand but I can't write for extended periods of time

[shut hawk]

yeah it did take some time getting used to it

and even now I'm still learning about all the things you can do

[bitter quiver]

I need paper to practive math and language

Something about doing it on paper helps so much

[crude stump]

yes

[bitter quiver]

Especially Hindi script or Japanese Hirigana/Katakana/Kanji

[mossy river]

AI generated aa picture

[bitter quiver]

Both the pics in my profile are AI generated atm

Dall E

[crude stump]

there sick ngl

[bitter quiver]

AI is too fun

[mossy river]

They're

[crude stump]

😡

[mossy river]

It's cool but AI imagery is getting easier to spot

[crude stump]

got the keyboard wrong

the G got wiped away

[mossy river]

If G is on the bottom row of your keyboard, you're keyboarding wrong

[crude stump]

or its a new way to keyboard

[crude stump]

it is fun especially the wacky pictures you can make

[grizzled crystal]

when I used to be able to write handwritten notes it was really nice for comprehension, but a hassle for referencing

I like my CTRL+G (search), CTRL+C CTRL+V for quick command references

[mossy river]

Writing them down and converting them to digital notes is a really good way to convert them to long term memory

[grizzled crystal]

yes

[mossy river]

Writing is the young man's game 🥱

[grizzled crystal]

I remember my handwriting days 🧓 i was but a grasshopper

[zealous harness]

Cool

Anyone here analyze of wifi hacking?

[mossy river]

My handwriting used to be so illegible that I would get in trouble at school, only if they knew

[mossy river]

More specific?

[naive violet]

Yeah look for deauth packets and new clients that shouldn't be there

[grizzled crystal]

is it any better now, or have you just gotten better at reading it?

[mossy river]

It has gotten better.
In order to improve my writing, I have to increase my strength, which was quite difficult when I was younger.

I write in capitals when filling out forms for improved legibility, but it can be very tiresome and time consuming writing in capitals all the time.

I don't have to write in exams but I usually choose to because written exams really suck when you're trying to do it on a computer. Furthermore, Math exams are impossible to do on computers

[grizzled crystal]

Hmm yeah, no cursive? cursive tends to eliminate a lot of writing fatigue, and it's fairly legible if you're careful about being neat

[mossy river]

Wasn't taught cursive

[grizzled crystal]

Ohh look into it! It may save you some hurt

It's not hard to learn, just takes a bit of time

[mossy river]

I stopped researching and practicing writing after Secondary School because I wasn't required to given that I moved to an IT course

[grizzled crystal]

imo worth it if you want to avoid wrist issues down the line

[mossy river]

Unfortunately, my joins over extend so the pain is completely inavoidable

[grizzled crystal]

oh yeah i hear you

writing be like that

[royal hawk]

Guys

[willow garnet]

what is your favorite tool to analyze WAV files?

[glass nest]

Audacity maybe?

[willow garnet]

i'm fairly new to this so dummy proof tools are prefered 🙂

[royal hawk]

I need some help I have a problem in a question

[willow garnet]

to find hidden info as well?

[royal hawk]

cant answer it while I know the answer is Local cache

[glass nest]

Depends where you are looking for it. sometimes stuff is hidden in waveforms and stuff. If it's in the actual sounds, Thats different. If it's inside the file itself, then a hex editor or something

[willow garnet]

so let's suppose it's hidden in waveform

[naive violet]

@royal hawk #room-help if it is a tryhackme room

[tawny birch]

Then Audacity

[wind lake]

Hihi

[spice adder]

Does anyone have any info on how meterpreters process migration works? I understand its used for persistence but more-so trying to think on a code level. Is it some sort of new shell through process injection?

[gray sonnet]

I remember the days when THM VC was populated

[near hawk]

Yea thise were the days

[glass nest]

Communities like this are community driven. You want the VC poulated? then populate the VC

You want people to join? Give them a reason to.

[mossy river]

Yes, it finds a process and spawns a thread from that process

[spice adder]

Sick thank you for that :) Wonder if there's any docs on its implementation. Curious to see the payload. Wonder if it's .dll or a direct process to process hook injection

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1183)

[mossy river]

dll or memory injection

https://jlajara.gitlab.io/process-migration this looks good

[spice adder]

The dll would still do memory injection too tho wouldn't it?

[mossy river]

yes

[spice adder]

god i love the msdn for letting this be so easily possible

[brisk tree]

That’s rough 😂

[mossy river]

That sounds like a crime ✨

[loud marlin]

100% DDoS secured

[mossy river]

Technically that is a DoS attack 😁

DDoS if multiple people were involved

[wintry sluice]

I dunno .its kinda distributed across a number of ports

[loud marlin]

even matt can't brake it =/

[mossy river]

Who said DDoS is port exclusive?

[loud marlin]

there are rest of cables

[gritty zephyr]

Good morning peeps, i am now 22

🙂

[loud marlin]

woohoo 🙂

[gritty zephyr]

Cake dayyyy

[brisk tree]

😂

[lament tendon]

Happy birthday, horrible OPSEC. 🥳 🎉

[mossy river]

👴

[gritty zephyr]

Eh i trust most peeps here enough lol

[spice adder]

Hbd :)

[lament tendon]

Wholesome.

I don't.

[spice adder]

Dw ill keep this information safe in my document of growing private record for you. Just incase you ever forget

[mossy river]

Random question @gritty zephyr what is your mother's maiden name? /s (for legal reasons, this is a joke)

[spice adder]

Has there ever been funny little numbers on the back of your credit card? make sure to send me those!

[lament tendon]

356

[gritty zephyr]

Oh sure its updog

[mossy river]

What's updog?

https://tenor.com/view/hysterical-laughter-laughing-gif-25735842

[spice adder]

https://tenor.com/view/hug-gif-27703442

[loud marlin]

i still remember my first teacher name... was helena... what's your first teacher name

[gritty zephyr]

Nothing much, thanks for asking 🙃

[gritty zephyr]

Of troy????

[loud marlin]

of what ?

[wintry sluice]

troy. they're asking if the teacher was a trojan

[gritty zephyr]

Helena of troy

[loud marlin]

ah that lol

[gritty zephyr]

Hahaha

[spice adder]

Do you remember the town you grew up in? lets reminisce, starting with the name of it

[gritty zephyr]

Whoville

[desert shuttle]

Tomato town

[boreal terrace]

hello

in kali linux

in tryhackme vnc where is the reverse shell ?

[loud marlin]

ha?

[boreal terrace]

i am connected in vnc kali linux cannot find reverse shell

.php file

where ?

[mossy river]

#room-help

If you are using the web kali machine, it will be in the default kali directory

[boreal terrace]

ok where ?

in share i dont find it

[chilly veldt]

Jabba, please call me dumb

[mossy river]

What's me dumb's phone number?

[chilly veldt]

It's "mykneeeshurting"

[wintry sluice]

pretty sure that isn't a number

[chilly veldt]

Well stega not

[naive violet]

The attack box is not Kali

[willow garnet]

guys, i have some wav files to investigate for hidden data, how to deal with that? no experience whatsover so any help is welcome

[lament tendon]

Look up steganography.

[willow garnet]

i did some binwalk on the file and it displays 'certificate in DER format ...' but i can't extract it

[willow garnet]

i figured that

[glass nest]

That sounds familiar...

[naive violet]

@willow garnet if this is for an active CTF, please stop asking here

[willow garnet]

euhhmm not it's not

[glass nest]

Somthing is tickling my brain about this - binwalk and DER format...

[naive violet]

What's it for?

[willow garnet]

a challenge i'm trying to complete elsewhere, but nothing like live CTF

[mossy river]

Link?

[glass nest]

James, although our hobbies are awesome and glamourous... Literally spent the last hour carving out a template with a craft knif, in order to use it to make another template to actually make something. We never share the tedious parts usually 😄

[mossy river]

I'm almost over the word count and I'm two sections out of 5 in

[naive violet]

I seem to spend time doing metalwork

[glass nest]

You do like to drone on, Jabba 😄

[naive violet]

I'm terrible at metalwork

[cosmic pendant]

Welding seems cool

[glass nest]

Can't believe you are out-manly-ing me, James 😄

[mossy river]

I am including unnecessary information but I hate assignments where you don't have to explain what you are using.
My lecturer said only justify but it feels weird that I am justifying given the parameters of the assignment

[rapid merlin]

Hi ppls

[glass nest]

Haha, justification = 'Because it was in the Assignment brief'

[rapid merlin]

look we got toaster here

[naive violet]

It's just drilling holes in end panels

[glass nest]

What metal you using? Alum?

[naive violet]

Uhhhh

Apparently

[lament tendon]

Heavy metal.

[glass nest]

At least thats fairly soft.

[naive violet]

Also yes

[glass nest]

Lost so many drill bits to Stainless until I caved and bought Cobalt bits

[loud marlin]

try get tungsten drills

[naive violet]

I need some very thin sheet steel but that seems difficult

[loud marlin]

maded from tungsten ofc

[glass nest]

B&Q? or is that not thin enough?

[loud marlin]

how thin ?

[glass nest]

Usually for work we just go to a fabrication place. They cut it all in seconds

[naive violet]

Like a half a millimeter

[glass nest]

Ah. ok, Maybe not then.

that like 1 step up from foil 😄

[naive violet]

0.8 seems about as thin as you can easily get

[loud marlin]

do it need be from stain steel or ?

[naive violet]

But I also don't want to spend lots of money

It absolutely cannot be stainless

[glass nest]

tryna think of something you could salvage

[loud marlin]

hmm... what is thicknes of steel that is on microwave housing

i think is for sure less than 1mm

[glass nest]

Maybe a hard-drive enclosure, or a mount for internal computer things

[naive violet]

@cloud summit That looks like a spam video so I'm going to remove that

[glass nest]

Or casing for a cheap chinese PSU?

[cloud summit]

Ugh it's not spam

[loud marlin]

and what dimesion need to be? @naive violet

[glass nest]

In fact anything from Ali Express with a metal casing

It's like a metal veneer

[loud marlin]

it this fit ?

[naive violet]

Tiny, I need to make a 20mm x 20mm x like 10mm box out of it

0.80mm is thick

[loud marlin]

1/32" = 0.79...

need a link to it?

[glass nest]

Ooh yeah Shim plates. Maybe a lockpicking place?

Or a coke can?

[naive violet]

Can't solder to alu easily

[mossy river]

Their whole channel looks like a content farm tbf

[naive violet]

Hence spam

[rapid merlin]

What are some resources you guys used to study for the a+ any suggestions?

[glass nest]

Fore real james, What about a beverage can, or similar?

I'm sure Jabba has a few laying around 😄

[mossy river]

I have 5 sprite cans and two monster cans

[glass nest]

That would make James preject look ghetto (and awesome) AF

[naive violet]

Alu

[loud marlin]

@naive violet does that pic fit you. since 1/32" is 0.8mm thicknes. jsut is 12"x12"

[glass nest]

Ahh.. ok.

[naive violet]

Too thick

[loud marlin]

ok. might find thinner

[glass nest]

https://www.ebay.co.uk/itm/174301829016

[naive violet]

It's available from china etc with a wait

[naive violet]

Again, can't solder to alu

Needs to be non-stainless steel or copper

[glass nest]

I got mixed up with the conversation 😄

[near hawk]

Playing top golf and somehow a feasant has got onto the course

[cosmic pendant]

You can duck tape to almost anything though. just make metal duct tape!

[rapid merlin]

Anyone?

[naive violet]

Copper sheet actually seems reasonable if I get a tiny bit

[loud marlin]

@naive violet

[glass nest]

https://www.ebay.co.uk/itm/403640390616 - Too thin?

https://www.ebay.co.uk/itm/224934677496

There we go.

[naive violet]

Ah excellent

[glass nest]

and it's UK based

Might be worth a call, The might cut it to the size you want

[glass nest]

Damn caps lock

[loud marlin]

my cards for engraving are 0.5. you can get alu or stain steel

[naive violet]

I've gone for 0.3mm

I want to be able to bend it to right angles with no hassle

[loud marlin]

oh that might be bit tricky

[naive violet]

I have tools

[loud marlin]

also you can heat it to make more smoother benk with out be sradced to brake it

[naive violet]

0.3 should be fine

[sand trench]

wobble wobble wobble back to neovim configuration nightmare fuel shadow goes

[peak nova]

Is there any way to bypass network access controls?

[glass nest]

Thats a loaded question

[peak nova]

Broadband smart hub ban thing

[naive violet]

Yeah

Go talk to your parents

[peak nova]

That won't work

[glass nest]

It's like a 6th sense at this point, James 😄

[naive violet]

They pay the bill @peak nova

[peak nova]

Ok?

[naive violet]

So it's their decision to cut you off

[peak nova]

Ok

[naive violet]

And you just have to live with that

[peak nova]

But I'm asking how to bypass

[naive violet]

That's unethical

[peak nova]

I haven't had WiFi for 3 weeks

[naive violet]

You're talking to us now

[peak nova]

Yeah on a hotspot

[naive violet]

Sounds like you're fine then

[peak nova]

Nope im not home

No WiFi when I get home

[naive violet]

It's unethical to bypass that block. You understand that right?

[peak nova]

No

How is it

No harm to anybody

[whole yew]

You don't own it

[naive violet]

Because it's your parents decision to cut you off.

[wintry sluice]

You don't have consent of the owner

[peak nova]

K

I'll ask somewhere else

[whole yew]

If you are blocked on it, you clearly do not have authorization to access it. Accessing that wifi without permission is very likely to be a violation of local laws regarding computer and network misuse

[wintry sluice]

plus, if your parents find out, you could be without wifi for longer.

[grim sparrow]

:hammer: sugg3st10n0124#0 has been banned.

[naive violet]

Seeya.

[sand trench]

whacka whacka whacka

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[lethal yoke]

I got a question for anyone who can help, what can u do with a ip address

[cosmic pendant]

oh boy

[glass nest]

Look at it. Admire the history and technology behind it.

[lethal yoke]

If you were to (ethically and with consent) try to hack them

[chilly veldt]

then you know what to do 😛

[glass nest]

Well, I'd first make sure I had full written permission from them

[naive violet]

For most people? Nothing at all

[loud marlin]

well if ip is 192.168.0.1 then most like nothing

[lethal yoke]

I just got an ip of a virtual machine i created, so if i did wanna get into it what would i need, (it doesn’t need to be with an ip)

[naive violet]

Go to the console and enter the username and password

[loud marlin]

well... i might be close with guessing the ip lol

[wintry sluice]

127.0.0.1? I've seen some really suspicious activity coming from that IP

[boreal terrace]

linpeas.sh

where i will find this

in kali linux

[chilly veldt]

google

[boreal terrace]

no no

in tryhackme machine

[naive violet]

It might not already be on there

The tryhackme attackbox is NOT kali.

[sand trench]

lots of stuffs happening in here today

[shut hawk]

Ooooh new UI

[glass nest]

Could say the same about you, Jayyy 😄

[valid mauve]

@chilly veldt check #873642346762350592

[wintry sluice]

only seems to be certain rooms though

[spice adder]

Woah new UI is HOT

[spice adder]

Yeah i just went from linux priv esc room to a different one and only then did it change

[cyan cave]

is capstone red team good additonal practice for OSEP?

[pine stratus]

how from a Public ip adress , get inside a ,, network 🥺

[lament tendon]

Depends very heavily on the involved services, operating systems, users, protocols, security measures and the versions of each of those.

Plus some more stuff that I forgot to type out.

[boreal scarab]

For what purpose?

[pine stratus]

checking network security (ethically)

[shut hawk]

Could you give some more context?

What network is it?

[pine stratus]

i'm still confusing , abt many things (in networking) , my question is just to make things clear for me : lets suppose i scan a public ip and i found some vulnerable service runing on some open port , by exploiting this service can you see whats behind this network ; and see other hosts ?

[chilly veldt]

nice

[dusk sphinx]

hey guys

i got stuck in a question

this is the question,Using NVD, how many CVEs were published in July 2021?

and the room is vulnerability 101

[outer rivet]

Google

?

[shut hawk]

Depends if that host is connected to other hosts, and if you are able to exploit it to be able to pivot to said hosts

[sharp citrus]

TryHackMe's Website

You should know our website by now!

​

https://tryhackme.com/

TryHackMe Socials · Mar 3, 2024, 7:16 PM

[dusk sphinx]

i did that , i didnt get the answer

[shut hawk]

Here's a great site for learning

#room-help is the best channel to ask this in

[pine stratus]

my level now is x8 , and still confusing

anyways thank you

:))

[shut hawk]

Level doesn't really correlate to your skill level

[pine stratus]

Yes , i know

[wintry sluice]

this is true. I am level 8 (9 on the site), have only done the foundation paths + jr. pentester.

[spice adder]

ive found a shortcut to root in a box and now ive missed a question from the room

FAK

[hot cairn]

@shut hawk

[shut hawk]

Tiny!

[royal dock]

[spice adder]

Ayy finally got to OMNI. Good weeks worth of content

[devout palm]

Congratz

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[shell nova]

you ok?

[bitter quiver]

Look at the bright, side, at least they are getting away from the fire.

[loud marlin]

and he is going to land on his feet at last

[worn crystal]

hi guys, im having trouble trying to connect into the tryhackme vpn, getting the same error everytime. Can someone help me please? 🙂 (Sorry for bad English, im from Brazil.)

[clear jackal]

#site-support

[desert shuttle]

You guys think the dell percision 7530 will be good enough for labs on the go

[worn crystal]

thnks

[clear jackal]

That's a heavy laptop for being on the go

We run 7550s at my current job, I believe 7730s at my former, and they're 6lbs minimum

[grim sparrow]

Done!

[mossy river]

NOOO

[clear jackal]

They're very big

[mossy river]

Fuck

[clear jackal]

Something like a Dell Latitude will probably work better for being more mobile

[grim sparrow]

Done!

[desert shuttle]

Hmm that’s true I didn’t really think about that when looking a laptop. I was just looking at specs. I will see if I can find one near me hopefully

[clear jackal]

The 7000 series also gets extremely hot, you literally can't use it in your lap

[mossy river]

Just pressed "don't setup passkey" on Amazon and it set up a passkey ffs

[clear jackal]

Noice

[mossy river]

I've had gift cards from December I forgot to redeem, which means all the money I just spent on Amazon was a waste 🤣

[sick lance]

Have the expired?

[mossy river]

No

Just redeemed them

But I ordered some stuff on Amazon this morning and I could have used the gift cards instead

[proven quartz]

This is fairly cool
https://www.youtube.com/watch?v=9pEqyr_uT-k

[crude stump]

https://tenor.com/view/drone-smiley-gif-10494026

[spice adder]

gg if it's against UK

what will win? hyper drone faster than f1 car, or DEATH BEAM

[glass nest]

Final template cut. Damn, that was tedious

Next stage: Glue these to hardboard, and cut the actual templates.

[bitter quiver]

Can you pop the attack box out in a completely seperate window or is it always going to be split view

[glass nest]

But it's gone 9:30pm and I don't wanna annoy the naighbours

[mossy river]

Yes, press the full screen button

[spice adder]

What you crafting, esqy?

[bitter quiver]

Forgive me, where abouts is it?

[mossy river]

]

[naive violet]

Esqy that's very good to your neighbors

[glass nest]

Making some foldable wood chairs, to sell at a festival event thing. So all this work now will hopfully save a ton of time later

[bitter quiver]

nvm

[glass nest]

Eh.. I try to stop using powertools around 8pm

[mossy river]

Literally me up till 4am screaming at a video game

[spice adder]

My neighbours love my guitar at ungodly hours!

[bitter quiver]

Thank you lol. For some reason my brain was only remembering the "ready in x seconds" portion of that

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1184)

[glass nest]

C'mon Cipher - Get in the mindset! Click stuff and see what happens!

[crude stump]

What scary is they had to use a special filter to see if

[spice adder]

deleted account, help D:

[spice adder]

woah :O i never knew that

[atomic aurora]

How do I update my 0x level

on Discord

[bitter quiver]

I normally do that lol.

[spice adder]

do /verify

[mossy river]

verify again or wait 24 hours

[atomic aurora]

k ty

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 3, 2024, 9:35 PM

[spice adder]

They put a filter on the camera, or a filter on the laser?

[crude stump]

Filter on the camera

[spice adder]

jesus

where does one acquire said filter

[blazing granite]

If you're verified when you level up in the site it will reflect also here, AFAIK

[mossy river]

Takes 24 hours assuming the bot isn't being rate limited

[crude stump]

Bots a little slow

Slow in it’s programmed mind

[mossy river]

It's as fast as Discord allows it unfortunately. I would like to replace this with webhooks in the future

[sand trench]

YAY quick nvim setups

[clear jackal]

Ugh, I need to cycle but I'm stuck on the couch

[sand trench]

what cycle are you cycling to make the next thingy happen in the cycle???

or did shadow got that wrong???

[bitter quiver]

Mine has been outdated for a day or two

But I'm in no rush to update

I'm just here to jam to music and d oTHM and practice Python/SQL and reward myself with a Helldiver match or two every few modules

[clear jackal]

My mountain bike attached to a trainer

[atomic aurora]

I doubt that, It has been days since I leveled up and I was still 0x3. But its fixed now by manually verifying again. Thanks tho!

[twin ridge]

Gave +1 Rep to @blazing granite (current: #147 - 45)

[sand trench]

ah so not something like the water to cloud life cycle

but biking

[gritty zephyr]

i really need to treat ctf's as something i can earn in the future from instead of now chasing cents playing stupid web3 games for mere cents

anyhow, how are you guys

[devout palm]

Listening to classical music, what about you?

[gritty zephyr]

stressing about all things that need to get done that i paralyze myself and so not being able to get them done

[simple valve]

nice

[devout palm]

You can try listening to classical music too

[gritty zephyr]

yeah its peak life enjoyment

[gritty zephyr]

not exactly into it, but music might help ya

[devout palm]

Sure. Just a reminder, you got this.

[gritty zephyr]

thank you 🙂

[sly tinsel]

Is it possible to download vm that I uploaded on thm?

I don't have vm on my pc anymore and vm on thm is my only backup

[sick lance]

I don't think so.

[grizzled crystal]

I like playing ctfs in the sense of solving a puzzle. Only huge organised teams usually win, so it's hard when you're trying to compete as one person

It's just a gamefied way to learn something new

[simple valve]

I’d try to do all the tasks that are downloadable

Then do it when the writeups come out

[hazy flume]

hello i am new, i just finished the "introduction to cyber secuirty"

any tips which one to do next? and in general about the platform?

thanks

just a straight forward question, can i get a job in IT without being good at mathematics?

[crude stump]

Tbh unless your creating software idk how big math is really in the industry. Prolly just your basic math. I could be wrong tho if anyone would elaborate

[boreal scarab]

@cosmic pendant back in NYC

[cosmic pendant]

Beep Beep!

[crude stump]

Toaster what is your thoughts

[hazy flume]

anygot a job in IT company and can share his journey?

lets say i learned all 14 paths in the home page, could i get a job with that?

[crude stump]

It’s more about the real world experience

[cosmic pendant]

Umm. the best people know and use math

Everyone that doesn't use math, pretty much have to listen to the people that due

"Data Science"

All bleeping math

soooooooooooooooo

[boreal scarab]

Too many beep beeps

@hot cairn personal chauffer here

[hot cairn]

NY driving is so fun

16 minutes for 0.7mi

[boreal scarab]

https://tenor.com/view/taxi-elf-gif-4714302

[crude stump]

I’m short, depends on what you do

In

[fast inlet]

wth, i downloaded aircrack-ng for windows, and windows defender classifies it as a threat

not sure if that's supposed to happen

the download is the zip from their website

[boreal scarab]

God I love NYC

[crude stump]

Never heard of that vpn

Ah hides your ip address from mass surveillance

[boreal scarab]

Mullvad, Proton and IVPN are the reccomded VPN's here

[sinful thunder]

Probably happens due to the signatures applied, I think you can just put it in a directory and mark said directory as “safe”

[crude stump]

What about nord. Is Nord not good

Or Norton what ever it’s called

[boreal scarab]

https://tenor.com/view/bender-futurama-laugh-sarcastic-fun-gif-12163274

[crude stump]

Hm

I’m guessing that’s a no

[sinful thunder]

No VPN will be 100%, but I suggest getting a good VPS and running your own OpenVPN through it if you’re just looking for extra security

[nova pollen]

can you explain?

[sinful thunder]

Mullvad looks to be if you’re attempting to do something sketchy @crude stump

[lavish shell]

I was thinking the same lol

[crude stump]

I mean they can all be abused by bad people so I don’t think it really matters

[nova pollen]

why is nordvpn considered bad? asking for a friend 😛

[sinful thunder]

Depends on where the company is located. Some nations have laws to give a law enforcement agency access to specific data

Something like Mullvad may not be in a western nation and can be “more secure” because it falls outside those rules, even if they’re using the same encryption

[lavish shell]

That sounds like a hint if I ever heard one 😂

[sinful thunder]

It’s all just research brother man 🤷‍♂️

[spice adder]

I just still hold a grudge against using Nord for their 2019 data breach 😂

[sinful thunder]

No VPN is good or bad, just a tool to use. Depending on your intent with said VPN, there’s better and worse options.

[spice adder]

Found it quite comical that they were dumping a hell of a lot into ads at that time, you’d see an ad claiming ultimate privacy and protection and they’d still be recovering from a data breach lol

meh, trust no one - sell everything. live a Fargo life, in a remote shack

[shut hawk]

All a VPN does is just shift the point of trust

[boreal scarab]

Fuck Nord cause. . NORD and apart of 14 eyes.

[sinful thunder]

14 Eyes? 🤣

[lavish shell]

There's nothing that keeps you 100% anonymous, all a vpn does is stores your current IP in it a "box" while replacing it with a "disconfigured clone". When you stop vpn, the clone vanishes and your real IP is released from the box During this time, your clone IP can be traced by to a provider like Nord, then they can see which IP was assigned to that specific clone ip

[boreal scarab]

Yah, 14 eyes. Look it up.

[sinful thunder]

Im aware of what it is, just not sure how NORD plays in

[fast inlet]

it also classifies it as a "Tool:AndroidOS/Multiverze" threat

idk really weird

[sinful thunder]

That was the point I was making above in terms of Nord

[spice adder]

Yea a quick google search implies nord is outside 14 eyes

[fast inlet]

yeah nordvpn promotions on youtube are everywhere

even on random small youtubers

[nova pollen]

currently reading through the mullvad page 😄 never heard of it before.

[slender pivot]

Hey everyone! 😄

[fast inlet]

dont think they pay well either, probably those ppl/small youtubers have no other company willing to be sponsored by them

[sinful thunder]

But it’s their big break, they got noticed by a company 🤣

[fast inlet]

but yeah i guess it's a strategy that works

[spice adder]

There’s always Raid shadow legends amiright

[fast inlet]

cause i'm sure NordVPN ain't losing money

[shut hawk]

Matt, are you sure it's apart of 14 eyes?

*Sorry, my mistake for my terrible comprehension

[whole yew]

big difference between apart and 'a part'

[spice adder]

He was giving a point of why not to use it, I think in that context it’s been taken he meant ‘a part’

[shut hawk]

I'm confused, wouldn't be that a for argument to use it?

[vast zinc]

https://tenor.com/view/max-verstappen-spade-epic-star-platinum-gif-11475980664847684296

[whole yew]

'a part' means 'a component of'. 'apart' means 'separate from'

[vast zinc]

du dududu

[shut hawk]

Yeupp, I'm aware now

[whole yew]

it's one of the fun grammatical corners of english

don't make the same mistake in a pentest report

[fast inlet]

i love it also when vpn ads are like "your connection isn't private!!! You're currently connection from [insert city here]" and it's not even the city you reside in roflmao

[nova pollen]

but besides the databreach from 2019 i can't find anything concerning regarding nordvpn.

[whole yew]

nord gets breached about once a year

arguably, your data is more at risk using nord than by trusting your ISP

[shut hawk]

im quite glad I made the mistake here and not somewhere more important tbh thanks lmao

[twin ridge]

Gave +1 Rep to @whole yew (current: #10 - 735)

[fast inlet]

thought it was based on some sketchy country but it's based in Sweden lol

[whole yew]

english isn't quite like some other languages, where you can skip spaces and have the same meaning - you have to think in terms not only of contextual use, but where the root of the word comes from - greek, latin or german. If you combine a greek root with a latin prefix or suffix, you may not be saying what you think you are.

[lavish shell]

For added protection you could also implement proxychains using termunal before setting up a vpn connection

[nova pollen]

english is a funny language, like when you add "in" to a word:
in - competend -> oposite
in - valuable -> more valuable
in - flameable -> means the same.
just random.

[fast inlet]

I guess Sweden is where piratebay was created...

[shut hawk]

Yeah, and I should really know that having grown up in the country for 17 years

[whole yew]

"in" is a prefix from both greek AND latin - it's meaning is dependent on the origin of the root you attach it to

blame the medieval scholars that came up with this bullshit, honestly

[sand trench]

vpn talk again???

nordvpn failed to secure their servers so some hackers had potential to mess with their servers and do bad things is nubmer one problem with them
problem number 2 is they are focusing more on marketing instead of actually providing a good product that works

mullvad is generally trustworthy and setup in such a way to minimise the data they have on you.... same with ivpn but ivpn takes it a few steps further in shadows eyes

protonvpn is decent and can be bought in a bundle with protonmail and protondrive( or whatever it is called )

[bitter quiver]

I've often used Windscribe for the minor stuff I need it for

[sand trench]

windscribe is also trustworthy if shadow recalls correctly

[sinful thunder]

Neutrality can have benefits 🤷‍♂️

[chrome marsh]

How about Private Internet Access vpn?

[slender pivot]

Does the average internet user need a VPN?

[crude stump]

What about Norton vpn

[sand trench]

wellllll

[slender pivot]

I'm in classes for my AAS in Cybersecurity, and we haven't really touched on VPN's yet

[sand trench]

similar problem to nordvpn in focusing on marketing instead of good product.... not to mention they also require a lot of info from you to get an account

[crude stump]

Was that to me?

[sand trench]

depends on policies around trusting isps or not

[boreal scarab]

Think they classify it as "Ultimate"

[sand trench]

well norton antivirus and products are a mixed bag of stuffs

[slender pivot]

I don't do much besides game and surf the web. School too, obviously

Only time I ever heard a recommendation for a VPN was when I torrented movies and what not years and years ago lol

[sand trench]

assuming you use gog or steam for games you are probably fine with windows defender and skipping a vpn then

[whole yew]

No

[slender pivot]

Yeah just Steam mainly

[whole yew]

Most people who do use VPNs also use them poorly, so the security 'benefits' of the VPN are not actually in use

[slender pivot]

Origin here and there. Epic too for some of the free games they give away

[nova pollen]

i get the point that nordvpn invests a lot in marketing, but so far i was not able to find any info about it doesn't what it is promising, besides the breach in 2019.
you have any source i am missing?

[crude stump]

Wait so then why would somones need a vpn.

[sand trench]

there is also a problem with antivirus programs merging and becoming one singular massive company nowadays

[bitter quiver]

Depends really. On average no, but it can be useful for if you like shows from other nations. I'm a Tokusatsu fan for example, and enjoy some Japanese games.

But most people don't, it's nice to have a basic one just in case you need it.

Also it's fun to switch counties, go to google, then search news

[whole yew]

Paranoia, legitimate security activities, region locked stream content that doesn't have a TOS clause saying your traffic has to originate from your location, etc

[slender pivot]

Yeah I've heard that too, to get around region locks it can be useful

What's a nice basic one then?

In case I decide to go that route

[whole yew]

Proton is reasonable, and makes payment easy.

[sinful thunder]

Multiple reasons, I suggest looking into site to site VPNs if you wanna wrap your head around it as a tool. In most people’s cases though, they want an encrypted tunnel to access the internet through

[nova pollen]

yeah good way to escape your regional info bubble...

[sand trench]

well could start of listing all the people that try to get around content region restriction and how that is breaking tos and that nordvpn markets towards that..... though don't have a lot of info as shadow don't trust nordvpn due to the ammount of data they collect on you to give you their service on top of said problem with focusing on marketing....

a good product should not need to market it self as heavily as nordvpn

[whole yew]

The thing about using a VPN, is that if you don't understand OPSEC and how to manage your traffic, you're going to leak data. I have heard of people using a VPN (poorly) and getting busted by Netflix and the like for TOS breech

[bitter quiver]

Really is honestly. You can see what is the trending thoughts of an area. I trust news at face value about as much as I trust a dog with shaving cream on it's mouth.

[sand trench]

shadow has mostly used corporate and school vpns

i.e for connecting their local home device to a remote network to access machines on said networks

another example with that would be to point straight at the tryhackme vpn

[whole yew]

Using a VPN for company business is very different use case than for personal

[sand trench]

yuups

[whole yew]

Typically the corpo vpn is to provide access to network-secured devices and assets that should not or cannot be made public

[sand trench]

but it is one of the main uses for vpns and their intended purposes in most instances... though now people are using vpns to get around stuff or group their ip with other users using the same outgoing vpn server

[winged summit]

What's up people...

[whole yew]

Making oxtail today

and Chili Verde

[crude stump]

People are people

[winged summit]

sounds interesting

[sand trench]

shadow just finished avatar the last airbender

[winged summit]

movie?

[sand trench]

can now return the blu rays to friened

[bitter quiver]

OG Cartoon?

[sand trench]

hahahhahahahaaaa nope... the original cartoon

[winged summit]

ah, i see

[bitter quiver]

The only Avatar there is

[crude stump]

No there’s a movie avatar

[bitter quiver]

Everything else is blasphemy

[sand trench]

incorrect... there is also legend of korra

[bitter quiver]

Heresy

[crude stump]

Nooo

[bitter quiver]

That counts too. I was just taking shots at the live actions

[winged summit]

i'm listening to classical piano and was going through some old photos. some things are better left in the past, ha. happy to be alone, in my room, with good online people....

[sand trench]

it was good and really enjoyable

[bitter quiver]

Uncle Iroh is the man I hope to be as I age.

Minus the tragedy

[sand trench]

also for the people still here questioning if they need a vpn... here you go: https://www.ivpn.net/blog/why-you-dont-need-a-vpn/

[sand trench]

so the best tea shop owner in the country???

[winged summit]

need a VPN for what? (i'm probably unearthing a dead horse right now, haha)

[bitter quiver]

Luckily I'm not people. I'm a people substitute

[bitter quiver]

Wise and caring in advising the youth.

But yeah, I'd love to rock a tea shop

[winged summit]

yeah, i would assume. it sounds like i entered the chat just after they had a conversation about it

[bitter quiver]

Man Python is really telling me I need to learn math again...

Algebra I haven't touched in 20 years is saying hello

[winged summit]

i used to run VPNs, but then realized i didn't need to based on my use cases. in any case, i think they're just another tool with pros and cons

[sand trench]

hahahahhaaaa privacy is a good luck if you rely soly on a vpn

privacy needs a lot more steps and thoughts to work out and not just a vpn

and for some threat models a vpn just makes the problem stagnate or sometimes even worse

[nova pollen]

with all that VPN talk i need to look up some things this week. Thanks @sand trench

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1652)

[bitter quiver]

And then you get into tor networks

[winged summit]

yeah, exactly. like if you just want to hide your traffic from your ISP, etc.

yep, exactly

[nova pollen]

i watched a defcon talk the other day exactly about that topic 😄 using a VPN alone gets you on a list, because you could hide something.

[winged summit]

it gets you on a list? in what country?

[sand trench]

shadow is already on at least 3 lists for 3 letter orgs

one for downloading tails

another for downloading tor

and a third for downloading i2p

[winged summit]

man, then i guess i'm on the lists too.... LOL. I downloaded and ran Qubes for 8 months, so yeah... (i can feel juun coming in to scold me for mentioning that i ran qubes, btw)

[nova pollen]

probably any gov agency which can get their hands on this kind of information.
beeing on a list is not a bad thing. the bad thing is if the list is short 😛

[nova pollen]

yeah me too

[winged summit]

okay, so the talk didn't have any hard evidence, it's just a a guess?

[nova pollen]

let me just double check that before answering that 🙂

[winged summit]

just curious. because as soon as the government starts making lists, i get freaked out. but i suppose i already know they've made numerous lists in the past, but this is treading on politics, so i'm gonna back out now, LOL (switching topics, hahaha)

[winged summit]

no worries man, don't worry about it. it's not a huge deal

[sand trench]

not sure if they have a way to get you added to a list if you download or use qubes

but tor and tails have ties to NSA so they have setup lists for it

though keeping the game of throwing more and more and more stuff on a list to know interesting peoples is kinda funny

it is like looking for a needly in a hay stack and throwing more hay on the stack

yeah tor is better for anonymity and by extension privacy then a comerical vpn... though at that point you will find a lot of interesting issues

so you telling shadow it was a bad idea to search for second hand old chemists books???

now know how to make explosives at home but obviously never tried

[nova pollen]

slides about leaked documents from different agencies are in the slides so i think that is proof enough 🙂 if you are interessted the talk was called "Zoz dont fuck it up"

[winged summit]

thanks man. you didn't have to do that, but i appreciate it

[twin ridge]

Gave +1 Rep to @nova pollen (current: #258 - 19)

[winged summit]

i might check out the talk later

i'm kinda' tired, gonna step away

[nova pollen]

just realized it is getting late here, i should catch my remaining 4 hours sleep before work starts 😄

[sand trench]

#911757840887197756

also exists

had to do that to unarchive it

[nova pollen]

The aoc channels were pretty active in December

[lavish shell]

It'd be slick as hell, if THM did layouts of practice sessions that could transition levels. Like, if we did the red teaming exercise room, if after completing it, maybe it'll ransition into a blue team type challenge. Where you started off as attacker but had to adapt quickly adapt to defend your own system.

[sand trench]

sounds like king of the hill to shadow

also known as koth

where you compete againt other people on here to hack into a server and defend it

[frigid fable]

Can someone help me with my lab, please?

[crude stump]

For what?

School?

[frigid fable]

For school, I needed to do a lab on tryhackme, but I am stuck on how to start.

[lavish shell]

Kinda yeah, but except where you try your best to remain undetected as a solo hacker, and the moment your detected you'd have triggered a "self defense script" that would analyze your behavior and attack you as well. Sounds like KOH, i know. I can't find words to describe it exactly

[sand trench]

we are not allowed to help with school work as it could be considered cheating... ask your fellow student or your teachers if you need guidance

[whole yew]

if it's for school, you should ask the instructor

many of the rooms for school customers are custom, and are different enough that the public room doesn't really match up

[frigid fable]

Thank you

[lavish shell]

I guess I would kinda want it set up like you were an aspiring hacker who got contacted to complete a legit and legal penetration test. Unknowingly, you were caught in a phishing attempt by an "unknown group" like "crabkank" (crabanak) and were paid in Bitcoin to complete tasks, but they turn against you and forge forensics against you. So now, you switch to defense mode and have to try to prove your innocence

[sand trench]

that sounds more like you wanna have a game instead of normal hacking stuffs but fair enoughs

[lavish shell]

Honestly kinda the point right? To target younger audiences, offer more of a "quest like" gaming experience to train those starting out? Instead of increasing machine time, have an unlimited instance. In where your starting point is based on your experience.

[sand trench]

hope you do realise what a huge project creating that would be

[lavish shell]

Do you realize what a huge project tryhackme was? And how many people at the time also thought it to be a waste of time?

[boreal terrace]

search for a rockyou.txt

what is the command

[sinful thunder]

Isn’t that what THM is?

[boreal terrace]

i wanna search it in my linux i am using attackbox

[sand trench]

yeah not saying it is impossible.... just that you will have to break it down a lot and chip at it for a long time to get it where you want it... tryhackme did not spring up over night so to say

[lavish shell]

Tockyou.txt is a list of passwords that tools like johnebthe ripper use

[boreal terrace]

i wanna use rockyou

[sand trench]

to find the file on your computer??? find / -iname "*rockyou.txt*" 2>/dev/null

[boreal terrace]

ty

[sand trench]

alternativly locate rockyou.txt

[slender pivot]

Installing Ubuntu on my fiancees old school laptop

[sand trench]

though that could fail if the database of files is not updated recently

[slender pivot]

Wish me luck

[sinful thunder]

It’s a good teaching platform but definitely different than the wild and closer to a game

[sand trench]

oh.... wanna have an explaination of the find command???

[lavish shell]

yoa to define the directory of rockyou.txt. if it isn't installed in your system or saved as a .txt you will need to fix that

[sand trench]

redirect standard error

so it sends all the errors to the void

meaning if you are not root your list of files do not get spammed by errors

[lavish shell]

you have to define, sorry using my phone an I'm a bit tipsy. Stupid small screen and double letters

[sand trench]

if it is not installed you probably know where rockyou.txt is after downloading it

ah tipsy would explain why you are planning out such a huge undertaking in chat here

[lavish shell]

Honest opinoon, would that be, in your opinion, a feat to pursue?

[boreal scarab]

@cosmic pendant I do NOT miss NYC

Fucking idiots

[cosmic pendant]

lol

[lavish shell]

I know lol, revealing a million dollar idea I'm gonna have to sue someone over later 😂

[boreal scarab]

@hot cairn is my witness, idiotic driver's, person trying to get into my car. And the pedestrians....

[sand trench]

they are "drunk"

[boreal scarab]

Crossing when not supposed to, I laid on my horn while going through an intersection because people are idiots

[lavish shell]

They are both, I'll shut up now

[sand trench]

come to swe swo instead

[boreal scarab]

Swe swo?

[sand trench]

¯_(ツ)_/¯

[boreal scarab]

Ah gotcha, swe swo

[sand trench]

swe == shorthand for sweden

dunno what swo was meant to mean

it just sounded funny to say

[boreal scarab]

Ee er

Swe swo

[lavish shell]

Sorry, guys. Just trying to have fun and be creative.

[buoyant tree]

me tired

400 KM travel today

[sand trench]

no problem... you are not hurting anyone

except maybe your own dream when you wake up later but lets not focus on that

[lavish shell]

Lol, not even god created everything in one single day, it took him 3 days, so based on that, maybe I can have my project up and going in a month or two 😂😂 Jk by the way

[acoustic garnet]

Been learning python for a couple weeks for my college courses and man

Man is it a headache to remember

[lavish shell]

Personally recommend python, it's a pretty common language

[sand trench]

note taking note taking note taking

[acoustic garnet]

Bad at note taking but I have a cheat cheat saved on my phone for coding

[acoustic garnet]

Don’t get me wrong it’s cool, but man, I suck at it lol. The math is what gets me

[fresh ivy]

what is the differecne between 7 day streak freeze and 30 day streak freeze?

[mossy river]

They're the same

Once is received at a 7 day streak and the other at a 30 day streak

[fresh ivy]

i got 7 day streak badge... if i reach 10 day streak and don't open thm for 3 months.. will my streak remain same?

[mossy river]

No it only freezes for 1 day

[fresh ivy]

if i miss one day, will it reset to 0 or 7?

[mossy river]

Whatever value your streak is at the time

[sharp citrus]

@fresh ivy

Streak freeze

Article Link

https://help.tryhackme.com/en/articles/7843540-streak-freeze

Mar 4, 2024, 1:08 AM

[fresh ivy]

i already read this.. still it is not clear there.

[tawny birch]

How do you guys order your notes?

[fresh ivy]

whatever value means.

[bitter quiver]

0

[mossy river]

no, that's only if you don't have a streak freeze.

[bitter quiver]

Right but he said go away for 3 months

[mossy river]

@fresh ivy https://www.youtube.com/watch?v=3RxMJc0anIM same concept

[mossy river]

Responding to earlier messages only makes it more confusingf

[sand trench]

wait there is streak freezes on duolingo and tryhackme???

[bitter quiver]

I was replying to his latest... but I'll just leave it be

[fresh ivy]

on completing 7 days streak, they rewarded badge, streak freeze and access to network... what does it mean by "access to network"??

[bitter quiver]

Yes. It's saved my but on duolingo a few times.

[sand trench]

access to the free network rooms as a none subscriber

[mossy river]

Are you fr?

[fresh ivy]

thanks

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1653)

[sand trench]

anyways before shadow headdesks on this desk they are gonna go meep moop sleep sloop to the beep boops..... also +rep @mossy river

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1185)

[fresh ivy]

thanks

[sand trench]

sorry you can only give a single rep point every 5 mins

[woeful rock]

😄

[slender pivot]

Well uh

I just dual-booted my laptop for school lol

Installed Ubuntu alongside Windows

[molten sky]

ew, windows

[spice adder]

yea ew windows (i have w11 dual booted)

[molten sky]

it won't be long til you're fully indoctrinated and toss windows out for good

[molten sky]

my guy

at least use 10

[spice adder]

came preinstalled bro dont blame me

[molten sky]

we're holding out still, lol

hoping 12 is released before 10 EOL

[slender pivot]

I can see why people prefer Linux

But I personally don't have issues with Windows lol

I really only game and do school on it, but now I have this to do school on

Which is better anyway, cause I'm in a Linux class lol

[molten sky]

yeah whatever works --- i'm just always gonna shit on microsoft when i get the chance, lol

[slender pivot]

I don't blame you lmfao

[molten sky]

not even too fond of ubuntu, myself

[slender pivot]

What flavor is your go to?

[molten sky]

somewhat anti-consumer, but nowhere near the same degree as microsoft

i bounce around but lately Fedora KDE for the desktop and Alma for servers

(both RHEL family)

[slender pivot]

My teacher uses Fedora, yeah.

I'm just learning the basics of Linux, so I opted for Ubuntu since lots of people say it's very user friendly

[molten sky]

honestly haven't used it (fedora) in years and just tested it on a whim, and it happened to be the best out of the box experience i've had in years so i kept it

you can get the same "feel" with other distos, as long as they use gnome/unity/whatever, but so much of the documentation online covers ubuntu cause that's what people default to 🤷‍♂️

more documentation is always good

[slender pivot]

I will have to play around with other distros

[molten sky]

mint is also fairly common on the beginner side, and has the added benefit of less Canonical-crap and Snaps and such

not my style but very common

[spare ridge]

+1 for Linux Mint, it works well for the average user who doesn't want to mess with the terminal so much

[buoyant tree]

what about kubuntu

with a windows like feel

[molten sky]

kde yes ubuntu same negative feelings

also oddly enough i've always had weird issues with kubuntu when using dedicated graphics

[ocean kite]

to be a cybersecurity analyst do you need to be a good programmer?

[buoyant tree]

nop

[molten sky]

you should be competent with technology in general though

but yeah programming isn't a major requirement for an analyst normally

[ocean kite]

Im majoring in CS with a concentration in cybersecurity and data assurance. I feel this is more IT than CS fr

[molten sky]

CS is often lower level, but some unis are weird with it

(lower level = higher complexity/more detailed)

[ocean kite]

FR I am competent in python but I want to use linux and powershell more because that would probably benefit me a lot in this industry.

[molten sky]

i mean, there's nothing really stopping you

i didn't learn a damn thing from uni

gotta learn to learn [on your own] at some point

[ocean kite]

thats what all my peers told me too

our degree just teaches us theory

not as much practical stuff which sucks

[spare ridge]

Uni can be good for making connections and improving your networking skills, other than the free benefits you could claim as a student (Github Student Dev Pack)

[molten sky]

absolutely. there are benefits. i just didn't learn anything from those classes, lol

networking is a big one, as long as you talk to people

[keen osprey]

i dont go to college, but im work at isp company, very grateful

[thick jewel]

The website was updated a few minutes ago 😮

[molten sky]

wdym

[thick jewel]

Well, it was updated but looks like it either reverted or I just got onto another host and don't see the new layout anymore 😮

all the answer buttons were different... and there was a new view from the top of the rooms where you could reset progress.... 😮

[molten sky]

wonder what they're cookin up

[thick jewel]

it looked quite good.... But had a bug that it opened the split screen view all the time when starting and stopping machines... Which was quite annoying... So I gave the feedback and maybe that caused the rollback? 😄

hmm... Or maybe it was just the room https://tryhackme.com/r/room/activerecon ?

[chilly veldt]

Morning

[molten sky]

m

[chilly veldt]

It's only some rooms that has been hit with the new UI due to a rolling update

[thick jewel]

I really hope the split screen bug gets fixed though....

[chilly veldt]

It will!
Thanks for reporting

[molten sky]

so tired i forgot what dns stood for for a second there

[fresh cobalt]

Someone know that and can give insight ? https://flipperzero.one

[thick jewel]

I have two sitting on my desk... 🐬 🙊

[chilly veldt]

Give what insight

[fresh cobalt]

Is it worth 165$ ? Does it works ? Idk ..

[chilly veldt]

Depends on what you want to do I guess

[thick jewel]

It works perfectly as a mouse jiggler 🙂

But $165 for a mouse jiggler might be a bit overpriced 😄

[chilly veldt]

Probably doesn't work for putting a nail in a wall

As it's just plastic

[molten sky]

thm: subscribe and your machines will deploy quicker!

*still makes you wait the entire minute*

[chilly veldt]

.... That's how long a VM boots up and starts the connection setup, tell that to AWS

[molten sky]

i get why ofc, just never realized the site claimed that til now 😶

[thick jewel]

it does? 😮

[molten sky]

been subscribed 90% of the time until now so never got the msg

[fresh cobalt]

Hmm i see !

[chilly veldt]

So yeah, what do you want to do, since you're looking into getting it

We can't give insights if we don't know what you want to use it for

[fresh cobalt]

That’s ok don’t worry , by insight I meant interesting personnal experience that can give me reason to try it as a curious geek guy. But yeah don’t worry , maybe I was not clear enough and it’s not a big deal at the end. Thanks by the way

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 816)

[thick jewel]

I tried to clone my garage door key, which didn't work....

I tried to clone the key for my apartment building door, which worked.... Always good to have a backup 😄

[molten sky]

oh hey

i've got the new view up

big improvement

[fresh cobalt]

Ah ah that’s interesting 😉 I’d love to have a backup of everything 😉

[naive violet]

Boots quicker

Also apparently it was some major aws bug

[molten sky]

but you have to wait a minute regardless 😶

didn't realize there was a bug tho. just used to them being slow sometimes

[naive violet]

Yep and they usually take about that long to boot

Or longer

[molten sky]

would be interesting to see the backend.

[nova pollen]

Just hit the button when you start reading it will be done before you 😄

[molten sky]

what if you can't read

asking for a friend

[nova pollen]

Use a screen reader

[wintry sluice]

ask chat-gpt to read it for you

[sick lance]

I enjoyed testing the new UI layout.

[blazing wasp]

Hi everyone.

[gritty zephyr]

Helloooooo

[spare ridge]

but I'm too lazy to read the ChatGPT output!

[shell nova]

Saw some rooms with it, looks like it's in canary mode for now

[sick lance]

Yeah. There is a small list just now, I've only seen one or two.

[shell nova]

Oh right that reminds me I need to update a couple things on my room

[gritty zephyr]

Do you still have the funky thing with GitHub from that one room hydra?

[full crystal]

Hey If I could get a mods assists with something I would greatly appreciate it. I recently lost access to an old discord account, that had already been linked with my discord token. I am trying to link this new account but the token needs to be removed.

[gritty zephyr]

So youre trying to link your new discord for the server and remove the old account?

[full crystal]

yeah

[shell nova]

Eh?

Oh I should remake that VM one of these days ..

[gritty zephyr]

You told me that the girhub room you made does some funky things with your account during the exploit

[shell nova]

Yeah it still locks out my gitlab account from time to time

Thanks autocorrect....

[gritty zephyr]

Hahaha, it made sense still

[shell nova]

Well it only locks out if a given tool is used

Mostly because it's bloody aggressive

It won't ever get into my account because it's locked behind a hardware token

And I invalidated the token used

[lament tendon]

How silly.

[shell nova]

Indeed

[plush needle]

Could you DM me about it for some more details 🙂 ?

[verbal dawn]

morning all.. I'm looking for a room that has the latest version of webgoat/webwolf. Is there one available?

[near hawk]

There isn't one on THM as that room was made 4 years ago, however there is a github repo where you can run it locally with docker and seems to still get updated as it was updated in Dec 2023

https://github.com/WebGoat/WebGoat

[verbal dawn]

thanks @near hawk I was looking for a THM room so to avoid installing anything on the laptop.

[twin ridge]

Gave +1 Rep to @near hawk (current: #74 - 80)

[shell nova]

You can always make one

[verbal dawn]

is it easy to create a room?

not sure what distro to use for webgoat/webwolf

[spice adder]

Easy is subjective. But yes. It can be

If you install Debian builds up to 2022 you have instant access to polkit local priv esc, so that’s a start 😂

Unless they’ve been manually upgraded

DVWA is another OG for home labs. Used it a lot during university

[verbal dawn]

[rapid merlin]

@near hawk Hey Wasp. man

[near hawk]

👋

[azure lake]

[rapid merlin]

you have done throw back

[rapid merlin]

[azure lake]

||Yes... Why?||

[rapid merlin]

Mashallah

obsession with anonymous is horrendous

[azure lake]

of course, but i just liked not doing 🙂

[rapid merlin]

👍🏻

[azure lake]

“….so whenever guidance comes to you from Me, then whoever follows my guidance, then there will neither be any fear on them nor will they grieve.” Baqarah Ayat 38

[rapid merlin]

[bitter quiver]

I think younger folk idealize anonymous due to the sense of belonging to a greater cause

[azure lake]

why did you think that? any reasons?

[bitter quiver]

Couple decades of leading young people in their late teens/early 20s in a variety of ways and their tendency to seek out purpose through something that assigns value to their existence as a way to cope with the existential terror that creeps around the back of their mind that the universe is on a one way track of entropy and they are merely here for an infinitely small nanosecond of the trip rendering their very existence moot.

Don't get me wrong, I encourage them to follow any non-self destructive path they seek. But internally that is my observation.

A sense of purpose does wonders for their mental health.

[azure lake]

Hmm I agree with you

[bitter quiver]

Main problem with it is, there are a ton of predatorial individuals out there who capitalize on it.

[mossy river]

As someone who did, no, it was "omg I am super cool hacker that everyone fears omg omg omg"

[azure lake]

And they are engaged in cyber crime

[bitter quiver]

And did you want to be them?

[mossy river]

Of course

It wasn't exclusive to me either, some of my friends did too

Only difference was I had the mindset to go out and learn how to

[bitter quiver]

I mean some, but that observation is across the entirety of civilization. World is full of takers who use others. Be the person out there who raises others up, if you truly want purpose.

[bitter quiver]

Same way someone wants to become a pro-football player right?

[azure lake]

I liked it.

[bitter quiver]

You watch Joe Montana in the 90s you grow up wanting to be the star QB

still a 49ers fan, DAMN YOU CHIEFS

[azure lake]

[mossy river]

Hmm. I guess so, yes.

I would say it is similar to how someone who likes football has an interest and and a few other factors.

Similarly, I always had an interest in hacking and Anonymous were what I saw as my ideal occupation. I don't think the interest would have as much impact on someone who wasn't interested in technology or programming

[bitter quiver]

Agreed

My sentiment is along the lines that folk seek out a tribe, generally based on their personal interests yes.

We are after all social creatures

[mossy river]

A buddy of mine in the army was investigated for potentially being apart of the Anonymous hacking group because of the anonymous stuff he posted when he was younger ahah

[bitter quiver]

Yeah, they will do that.

Had friends get clearance and they REALLY investigate you for secret and above

[sick lance]

I've already had my social media checked by a friend in the force who may be able to get me a job.

[bitter quiver]

God knows the stupid crap I posted when I was young

[sick lance]

I know the stupid crap I did haha.

[mossy river]

This was only for basic training, he was 16. Hilarious though

[bitter quiver]

Whaaaaty

That's silly of em

[mossy river]

Yup, they conducted a background check for some reason.

[bitter quiver]

Bored bureaucratic positions in the military

Need to be doing something I suppose.

Meanwhile every time you turn around you see news that someone else in the military leaked secret documents on the Warthunder video game forums to settle a debate about military specs and you face palm knowing someone just got themselves locked up for a long time for a video game.

It's a meme at this point

[wintry sluice]

does that mean the us military is scraping this discord right now?
hallo, US Military 😄

[sick lance]

Army will be looking at getting civilians in for "Ethical hacking".

[bitter quiver]

They do. Also they recruit heavily for drone operators

[mossy river]

WHaaaaat 😭

[karmic furnace]

how do I make kali show the ip of tun0 in the top right agin?

[sick lance]

Mine does It automatically...

[karmic furnace]

mine use to..

i may or may not have removed it accidentally.

[wintry sluice]

mine still does

[sick lance]

Did you remove it from the panel?

[wintry sluice]

just need to be connected

[karmic furnace]

I can assure you I am connected.

;D

you know, if i googled it, I would know the answer.

[sick lance]

sh -c 'ip a | awk "/tun0\$/{gsub(/\/.*/, \"\"); print \$2}"'

[karmic furnace]

❤️

thanks, I also just found that myself.

[azure lake]

what is that mean?

[karmic furnace]

it gets the tun0 ip when you're connected to the vpn and prints it out

[sick lance]

Adds your tun0, to your Kali when you're connected to a VPN.

[bitter quiver]

When using windscribe in linux in command line I hate the fact I can't actively view that it's connected and instead have to either manually check or have a script periodically display it

[azure lake]

okay

[silver sky]

That's the bike serviced

https://tenor.com/view/friends-phoebe-rachel-excited-yay-gif-6166752637746503456

[azure lake]

what programming languages should I know if I am an ethical hacker?

[sick lance]

Python isn't essential, but it helps.

[azure lake]

yeah. but C or JavaScript needed?

[bitter quiver]

They all have a use

JavaScript will let you better understand and take advantage of web vulnerabilities

Python though for scripting and other uses is probably one of the best languages to learn overall

[azure lake]

yeah, it's helps most with scripting

[bitter quiver]

I'm doing it now

It's made me go back to relearn a lot of fundamental college level math through as I'm doing it for data science reasons and boy I am rusty

[azure lake]

Is Python basic enough?

[bitter quiver]

It's considered by many to be the easiest to learn

[azure lake]

-Thanks

[nova pollen]

A lot of languages have their benefits. For ethical hacking python is probably the easiest one with the most benefits.

[bitter quiver]

For example some have a very, very niche use case. Like COBOL

[silver sky]

Just crossed the 1000 mile mark

[bitter quiver]

Nice bike

[desert shuttle]

Noice

[nova pollen]

I was always told “why use your feet if you have 4 healthy wheels”

[silver sky]

I have two healthy wheels

[bitter quiver]

I need to rehab my knee again so I can ride bikes

Would be good for me

[nova pollen]

And still need to use your feet 😂

[sick lance]

My quads don't work today, I had my Hyrox race yesterday,

[bitter quiver]

Jello legs