general

[sick lance]

W10 22H1 is June this year.

[rapid merlin]

Are updates important?

[sick lance]

Yes.

Updates can sort out known vulns and bugs in software.

[chilly veldt]

[astral crest]

cool pfp choso

[rapid merlin]

Thx sm i grayed manga panel

[twin ridge]

Gave +1 Rep to @astral crest (current: #2025 - 1)

[astral crest]

thts cool

[hazy flume]

i installed kali today with a great tutorial, he covers 2 options i went through option 1, do you want the link?

[gray sonnet]

Nah it's cool, I already know how to install it haha

[hazy flume]

i also installed it like 4 times and had problems with network

[sudden copper]

Help

[sudden copper]

Ayo Vain !

wassup?

[gray sonnet]

YOOOOO

CODE!!!

Long time!

[sudden copper]

Yessir

[gray sonnet]

finished my finals today haha

[sudden copper]

Lessgoo

[gray sonnet]

figuring out what's wrong with my VMWare

[sudden copper]

hope u did fine in them

[gray sonnet]

or trying to

[gray sonnet]

I had food poisoning for 2 of them...

we had 6 in total...

[sudden copper]

im solving SQL challenge on THM

[gray sonnet]

Eyy! nice!

[sudden copper]

Does anyone know how to extract table names from Orcale database?

[steel aspen]

I hate SQL

Select * from table? Idk lol

[sudden copper]

hmm, i used all_tables, DBS_tables, user_tables.. nothing worked out

[grizzled crystal]

You should check Google

[sudden copper]

those tables doesn't exist

[sudden copper]

it's a challenge specific thing

the only thing i can do is to extract the table names blindly using Substring

which idk if that's a thing or not

idk if that would workout

[steel aspen]

Select table_name from dba_tables?

[grizzled crystal]

Is it a blind SQL injection?

[sudden copper]

yes

[sudden copper]

the table dba_tables doesn't exist because this doesn't return anything

[grizzled crystal]

You're going to have to extract the name then yes. Portswigger should be a good reference

[sudden copper]

i done portswigger

[steel aspen]

Maybe from Oracle or the name of the fake DB

[sudden copper]

never seen a Database without built-in tables

[steel aspen]

Idk anything about SQL aside from it's a pain lol

Sqli even worse

[sudden copper]

https://tryhackme.com/room/sqhell

[hazy flume]

hi shadow

[sudden copper]

im trying to solve this one

[grizzled crystal]

I'm not sure what you mean by that. Check portswigger in terms of payloads you can use

[steel aspen]

It'd have to have built in tables

[sudden copper]

yeah i know, i have tried what i learnt from it, nothing worked

[steel aspen]

Have you checked every resource? You haven't missed something?

[grizzled crystal]

You may have an easier time using sqlmap, although it's still a good idea to know how to exploit it manually

[steel aspen]

Double check over everything

[sudden copper]

see

[steel aspen]

Sqlmap basically gives the answer right?

[grizzled crystal]

We should probably move to #room-help

[sudden copper]

i have to learn it manually cuz in CTFs we can't use SQLmap besides it being so bad at finding SQLi actually lol

[gray sonnet]

Hey Poki 👋

[grizzled crystal]

Where did you get all_tables from?

Hi Vain

How goes it

[sudden copper]

all_tables is the built in one for Orcale DB

[steel aspen]

Anything else from Google.

[gray sonnet]

finished my finals today :D

how're you?

[sick lance]

Fantastic!

[gray sonnet]

Oh yeah, definitely, more hacking for me now hehehehehe

[steel aspen]

Each time I update my phone I end up with some form of bug for a week lol

[grizzled crystal]

But you still have to extract the actual table names. all_tables is a relational table, it's not going to have what you're looking for

[sudden copper]

so, have you got an idea on how to extract the table name?

[grizzled crystal]

Nice! I'm not too bad, I'm sick so just rotting in bed haha

[gray sonnet]

get rest and drink lots of hot soup 😄

[grizzled crystal]

I don't want to give the answer away. I think you should check Portswigger again

[gray sonnet]

helps me everytime haha

[grizzled crystal]

Yes! Lots of tea is being drunk

[steel aspen]

I cri evritym

[gray sonnet]

YES!

Get well soon 😄

[grizzled crystal]

Thank you!

[steel aspen]

I'm Samsung user and don't like iPhone or anything apple related but it's getting tempting to switch to the dark side 😂

[sick lance]

I use Samsung.

I owned the very first iPhone, I didn't like it that much I actually went back to Blackberry.

[steel aspen]

Although iPhone doesn't seem much better refsrds to that

Regards

I miss the blackberry

I miss button phones lol

Samsung is definitely better

[shell nova]

😢

[steel aspen]

Any decent resources/videos to learn basic python?

[sudden copper]

@grizzled crystal i literally tried everything, nothing is working 🥲

[wintry sluice]

humble has a coding book bundle atm. that has some python stuff.
https://www.humblebundle.com/books/learn-you-some-code-no-starch-books

[whole moss]

I missed the t9 phones. I have a big thumbs and qwerty on phone is a challenge

[sick lance]

Got ptsd from that?

[shell nova]

Maybe

[steel aspen]

Sony Ericsson lol

[whole moss]

Nokia baby

[steel aspen]

Can't beat the bricks

Someone making a case for the 3310 🤣😎

[sick lance]

I had the Samsung D500.

That thing survived two washing machine spins.

[sick lance]

Had to protect the floor somehow.

[wintry sluice]

nokia do good basic phones (for those who want to avoid smart phones cos of the distraction)

[sick lance]

If I cba with my phone I put it in ultra battery save mode

Only allows texts and phone calls, calender etc.

The essentials

[steel aspen]

Very true.

[steel aspen]

Drilling companies are a bit inefficient tbh

All they gotta do is drop the Nokia

[wintry sluice]

lunchtime?

[steel aspen]

Arch btw

[brisk tree]

Just had my best interview yet

[steel aspen]

That's good

I really wanna breakthrough into this field but I'm dreading the social aspects 😎

[wintry sluice]

ditto. social anxiety is a pain

[marsh shuttle]

Guys I found the perfect video to send to someone when they ask what is a ddos

https://youtu.be/r3bEjsv9JFw?si=g6RtccotRnZKgyJf

[steel aspen]

Yeah it ain't great. Holds back everything lol.

[marsh shuttle]

Thumbnail already gonna let y'all know it goes crazy

[steel aspen]

Attackers looking pretty sus fr

[worn thorn]

humans 👀

[steel aspen]

Grossss 😂

[marsh shuttle]

Why human when can computer

[steel aspen]

Yes exactly

What is accessible-coconut

Sounds interesting

Maybe my next VM

[sick lance]

Fantastic!

[coarse moth]

im trying to create a listener in netcat but when I execute the command (pressing enter) it does not give me any response and lets me continue writing: sudo nc -lnp 8081

[ebon dragon]

hey peeps i was writimg a report on the picklerick room and was wondering if the webserver is vulnerable to LFI, path traversal or command injection?

[sick lance]

Can you perform any of those attacks on the machine?

[sick lance]

Is this also homework? 👀

[steel aspen]

Are you allowed to attack rooms in an otherwise unintended way to how it is laid out?

[ebon dragon]

yea refer this articlr for an idea
https://medium.com/@JAlblas/tryhackme-pickle-rick-walkthrough-5f79716a86dc

[ebon dragon]

what homework?👀

[sick lance]

Have you done the room?

Can you do the attacks you listed on the room? If so, there is your answer really.

[mental sandal]

Sorry to disturb ya guys but as someone who wants to get into the field of software engineering/ cyber security where should I start if you dont mind me giving me a few hints

[grizzled crystal]

If its blind, you have to do error based sql injection letter by letter. Either that or sqlmap

Sqlmap automates it for you

[rapid merlin]

You can take a look in #start-here

[rapid merlin]

If you can I don’t see an issue

If you can I don’t see an issue

[sick lance]

It depends on the room.

You wouldn't use an attacks that disrupt the network for the network based rooms.

When QA test a room, one of the things they do is search for any unintended methods of attack.

[ebon dragon]

well im not able to differentiate/identify which one of those attacks was performed by me

[rapid merlin]

Fair, I assumed it would be like htb where other methods of exploitation usually become part of the walkthrough

But makes sense

[wintry sluice]

if its a walkthrough room, its best to stick to the script, as the aim is to learn that method of attack.

[sick lance]

Then I suggest you re-do the room, and think about what attack you're using.

I could tell you the picklerick room has an Idor and you could add it.

[sudden copper]

it's not blind after all

it confused me that MySQL had a table called Dual

i thought it only exists on Orcale

[grizzled crystal]

https://stackoverflow.com/questions/33378732/whats-the-best-mysql-alternative-to-dual it's a dummy table

it's omitable in MySQL

[frosty lava]

Hey y'all!

So I remembered I was helping a buddy of mine build up his cyber security company for five years. I made cold calls, set up appts, and even caught McAfee's attention as they wanted to negotiate a contract with us.

Unfortunately that small company went under after the pandemic.

I was wondering how I can use that experience to my advantage in this rough job market.

I didn't do anything technical; no pentesting or anything like that, just more administrative work. Although my buddy did educate me a lot on the technical side of IT security.

Any ideas on how I can use this on my resume? I don't want to embellish my experience, but at the same time I really need to start adding anything that can get me some attention.

[brisk tree]

I used to be the same but then I realised they are just people. They are probably just as nervous. I told myself I’m an actress and I’m playing the part of confident Michelle. Told the negative voice in my head to F off and then got on with it and did the best. Even managed to quiet the heart thumping in my ear

[wintry sluice]

that kinda reminds of psychonauts

[rapid merlin]

What interview you got hired?

[blazing granite]

so, how did go for confident Michelle? 😂

[lone thistle]

might be worth posting this in #cyber-and-careers so that it isn't lost in #general and also there are definitely people who frequent there who'll be able to give some advice:)

[frosty lava]

Awe sweet, thank you.

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 822)

[hazy flume]

why it shows that im still connected to the vpn if the vm is off?

[brisk tree]

I answered 99% of the questions without hesitation

At times I did ask if they could give me a sensation or reword it but I answeref

[blazing granite]

I hope you get it 🙂

[wintry sluice]

did you kill the openvpn process before turning off the vm?

[hazy flume]

yes

[brisk tree]

Whatever happen happens. I’m happy about the small wins

[hazy flume]

oh nowit shows not connected,just took time

[blazing granite]

Confident Michelle FTW 😂

[brisk tree]

Yes

My pc screensaver is a pic of a lambo and a yatch and rhe words I can and I will ahaha

[ashen wadi]

What job position?

[brisk tree]

Security operations analyst dlp

[ashen wadi]

Nice. I start working in SOC at the end of march. Had 3 interviews and one technical homework.. But i managed to impress them,so much they wanna pay for my SANS certs (which i dont wanna do..Gimme OffSec blood)

[brisk tree]

Aww that’s good

They asked me if I was doing any courses and I said I had started the isc2 cc cert

[ashen wadi]

Use them to pay your all future certs and ascend as hackerman!!

[loud marlin]

https://tenor.com/view/rabbit-eating-gif-23238008

[gray sonnet]

HEY! Don't dox me

[loud marlin]

he ?

[gray sonnet]

You just doxed me

you found a picture of me eating leafs

well a gif

[loud marlin]

well... you ahve 2x size bigger eyes 🙂

[wintry sluice]

lol. look at the size of them ears.

||so tiny||

[loud marlin]

google: flemish rabbit

[wintry sluice]

cmon. they already asked you not to dox them.

[loud marlin]

i want problems all the time 🙂

[past sparrow]

Which one you are going to get first?

[timid prism]

long time no see

[gray sonnet]

yup

[timid prism]

u saw the new creta?

[wind lake]

ial;ehgioeahglk my card is declining thm premium

[sharp citrus]

Information

Discord Slash Commands

https://support.discord.com/hc/en-us/articles/1500000368501-Slash-Commands-FAQ

Mar 14, 2024, 2:56 PM

[sick lance]

That's not good.

Your bank than it's bad?

[wind lake]

probably

and now the paypal option wont show up smh

[sick lance]

Kick It.

[boreal scarab]

https://tenor.com/view/good-morning-gif-22444678

[wind lake]

you kick it im not a mod

[sick lance]

Your bank lol.

[dense cedar]

I have a question, what is the difference between a host and a client?

[timid prism]

did repl change its free hosting

[dense cedar]

؟

[past sparrow]

host is general term for both clients and servers

[gray sonnet]

Hey there Jazz 👋

[timid prism]

vain

[gray sonnet]

nope, been under a rock for the past 2 weeks haha

[timid prism]

in pain

[gray sonnet]

well yeah

[timid prism]

how much time left?

[dense cedar]

This means that the worker is me and you are the user

[wintry sluice]

craaaaaawling iiiiiiiiiiin my skiiiiiiiiin?

[timid prism]

i realised the big cars have the same price range 😱

[ashen wadi]

Im gonna start with OSWE,then OSEP and last OSED. I have to ascend

[past sparrow]

What?

[past sparrow]

But those are not SANS ...

[ashen wadi]

Yeah those are from OffensiveSecurity. I dont wanna do SANS,they are so pricy that i will concince my firm to pay for offsec instead.

[dense cedar]

This means that the agent is the user

[ashen wadi]

💸 🫡

[wintry sluice]

You're not SANS

[past sparrow]

A lot of companies actually can get price off from SANS

You might have hard time convincing them if your work is in SOC

[past sparrow]

What?

[wintry sluice]

if they're willing to pay for the more expensive cert, why not take it?

[past sparrow]

If they hired you to SOC then they likely expect you to do SOC work not offensive security work, there is no point really hiring someone into SOC if you are training for them to leave this environment, it doesn't make sense from the business side

[hazy flume]

I HAVE A JOB INTERVIEW ON MUNDAY

monday

[rapid merlin]

noice

for what position?

[past sparrow]

Good luck

[past sparrow]

I am not sure I follow what you are saying

[hazy flume]

its in a company called C security, they train you for 4 months before the work

and it will be devops or cyber job depends on that

[dense cedar]

My brother is dressed

[past sparrow]

okay

[gray sonnet]

yeah, but what position?

[dense cedar]

Artificial intelligence will replace developers

[hazy flume]

i dont know

[gray sonnet]

ok 👍

[sick lance]

Do you have proof of this? 👀

[gray sonnet]

?

[past sparrow]

AI will replace artists

[gray sonnet]

how can you not know what position you're interviewing for?

[hazy flume]

she said on phone the position is based on the 4 months course and it will be subjeced to devops or cyber after that, thats what i know

[gray sonnet]

Ah, I see

[past sparrow]

spray CVs everywhere

[dense cedar]

Didn't you see what GPT Chat is doing?

[hazy flume]

i send 2 days ago to 5 companies and they answered me

[sick lance]

Being confidently wrong multiple times?

[wintry sluice]

chatgpt is like one million monkeys randomly typing on typewriters

[normal fable]

Morning. Happy Pi Day. 🙂

[hollow pivot]

ChatGPT makes so many mistakes

[coarse moth]

please can help me with linux privilege escalation task 5?

[hazy flume]

what is this?

[hollow pivot]

You can ask in #room-help

[past sparrow]

happy 14/03!

[dense cedar]

This was said by the CEO of a company

[normal fable]

Must just be a US thing because of how e do dates.. lol

[dense cedar]

ai

[sick lance]

Damn mobile.

[hollow pivot]

Oh, then he must be right ^^

[dense cedar]

Yes, for sure

But cybersecurity has a future in artificial intelligence

[timid prism]

this is what my friend sent me

[mossy river]

There is a new ‘AI’ which is much better at developing software but I don’t think it will replace developers

Only make it easier to write code

[wintry sluice]

it has a future everywhere. but the future is infinite in length

[hollow pivot]

Which one? Some french company released their AI recently and apparently it's much better than GPT

[mossy river]

https://www.youtube.com/watch?v=L8C7_X2PD-Q&ab_channel=TheAIGRID

[wintry sluice]

AGI? doubt

[dense cedar]

This is what we hope for 🤓

[mossy river]

I take no credit for finding this video, this was shared by an employee

[sick lance]

Co-Pilot are releasing a a security version in April 1st too.

[wintry sluice]

april 1st...

sus

[dense cedar]

I think that it will even replace film producers and actors 27%

[rapid merlin]

Blackbox?

or

[sick lance]

AI is certainly going to busy.

[wintry sluice]

again, the question isn't if. it's when and to what extent. we're probably talking years if not decades for that level of sophistication

[mossy river]

It’s on the video :)

[rapid merlin]

oh xd

[dense cedar]

Yes it will be busy Penny

[dense cedar]

Yes, I think in the future

[shut hawk]

I posted another one yesterday in #1096897654962786434" if you want to see more)

[rapid merlin]

Deep inside, i hope AI is going to be a flop

[dense cedar]

https://tenor.com/view/sleepy-sleepycat-sleepycar-cat-car-gif-314119685102089835

[shut hawk]

Why?

[rapid merlin]

I think Human Intelligence is decreasing from it

[wintry sluice]

in what way?

[dense cedar]

How do i do gif ؟؟

[rapid merlin]

People are becoming too much dependent on ai.

[shut hawk]

I think, used and made in the right way, it can be a massive benefit and fantastic tool to utilise

[rapid merlin]

Maybe yes

But i hope the big tech companies dont take it too far

[cedar scaffold]

id assume you need to verify

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 14, 2024, 3:36 PM

[dense cedar]

hard thing

[rapid merlin]

Verifying?

[normal fable]

It's super simple to verify... lol

[rapid merlin]

Max Fosh

[simple trellis]

^ You can either do it here, or message it to the bot, just go to you THM profile and find the discord token, you type /verify [token here with no brackets]

[rapid merlin]

oops

wrong chat

[upper wing]

Not to be confused with Walter Frosch

[dense cedar]

https://tenor.com/view/hffgf-gif-22453222

[fluid ember]

Hello guys 🙂

[dense cedar]

How are you, man?

[fluid ember]

Am good

I have decided to make here my community and to learn from you guys. I have decided that I don't want to go into certifications, i Want to gain more skills and get experience which is the most important

So I want to continue with my Tryhackme course

[rapid merlin]

Did you leave the server?

Because ur not verified anymore

[fluid ember]

No I didn't....my phone got spoilt

I had to get a new one

[rapid merlin]

Ah, and you forgot your discord login details?

[fluid ember]

So everything wipe out

[fluid ember]

I couldn't remember it

Which was bad for me 🤦🏼‍♂️

So how will I become verified?

[dense cedar]

Welcome, man 🫡

[fluid ember]

Thank you ❤️

[twin ridge]

Gave +1 Rep to @dense cedar (current: #2025 - 1)

[dense cedar]

what do you study

[fluid ember]

Bsc computer science

[dense cedar]

That's good, keep learning

[fluid ember]

Thank you

[dense cedar]

Where are you from

[fluid ember]

I want to go into cybersecurity am a Newbie 🙂

[fluid ember]

Nigeria

[dense cedar]

This is nice and cybersecurity is really fun

[dense cedar]

Hello, we are neighbors 😁

[fluid ember]

Yeah and I found Tryhackme as the best place to learn 🙂

[fluid ember]

Where are you from?

[dense cedar]

I have a nature that many people find in me

[dense cedar]

Morocco

[fluid ember]

Wow that's nice

What did you study?

[dense cedar]

Hahaha do you like Morocco?

[fluid ember]

A lot 🙂

[dense cedar]

offincef securtu

[fluid ember]

Wow awesome

So where are you now in the Tryhackme?

[dense cedar]

Have you ever come to Morocco?

[dense cedar]

yees

[fluid ember]

No but I heard a lot of good things about them

[dense cedar]

Welcome

[fluid ember]

I just started the pre security and you?

[dense cedar]

1 year 6 months ago

[fluid ember]

Wow you have gone far 🙂

[rapid merlin]

What paths did you do?

[dense cedar]

i love this field

[dense cedar]

He studied A+, Network+, Linux+, Security, and many more, but research skills are one of the most important things

[rapid merlin]

And tryhackme paths?

[dense cedar]

Yes, some of them

and you, man

[rapid merlin]

Uh

jr pentester

complete beginner

Nearly finished the pentest+

[fluid ember]

On Tryhackme?

[rapid merlin]

Yeah

[fluid ember]

Wow

[rapid merlin]

Currently doing the Active Directory module

Btw, is this the new GUI or the old one?

[wild rose]

new

[rapid merlin]

Ah

it looks... different

[hollow pivot]

Great observation

[rose oxide]

what's happend with GraphQL room ?

[loud marlin]

@hasty sand ppl says 3rd charm work... if you here let me know if i can DM due to last convo we had 🙂

[rose oxide]

because i was try to find and i didn't see

[wild rose]

I don't see it either so it may have been retired would be my guess.

[rose oxide]

😦

[fair fable]

Guys anyone have Tryhackme subscription

[fair fable]

😔😔

[gleaming fractal]

f

[shut hawk]

A lot of people are subscribed to THM

[cursive lion]

who have a video how to setup burp with foxyproxy

[fair fable]

I want to learn SOC L1 and L2 and junior pentesting i am not in that state to purchase new one 😞

[shut hawk]

So sometimes giveaways are held here, but most of the rooms are free

[wild rose]

Burp and foxyproxy are already setup in kali.

[cursive lion]

like with extensions

[fair fable]

Yes you are right but those are.just basics soc L1 need subscription

[north shell]

@shut hawk i joined THM right now with my acc on proton mail id . Is it fine to have proton acc instead of gmail? if yes i'll take subscription

[shut hawk]

Uh, I don't see any reasons why having a proton email would be not ok

You should be able to get a sub on it just fine#

[shut hawk]

I've just checked and a lot of the rooms on there don't need a sub

[fair fable]

SOC L1 does not i have checked

[north shell]

ok thanks , one more doubt, the certificate issued will be on name added there or the username ? i want it on name

[twin ridge]

Gave +1 Rep to @shut hawk (current: #13 - 486)

[shut hawk]

It does...

[shut hawk]

If you've put your name, it'll use your name - otherwise it'll use your username

[north shell]

Okay

[sick lance]

Where did you get it? 🙂

[wintry sluice]

looks like base64 with the trailing ==

[fair fable]

Tried all but not able to crack

[fair fable]

My friend has sent me this

[sick lance]

And where did they get it from? 👀

[fair fable]

Let me ask him

[sick lance]

Ideally, in this server we don't help people with external active ctf's or applications as this would be cheating.

Which against the server rules.

[wintry sluice]

perhaps its been ciphered multiple times

[normal fable]

that's a flag.. it's a challenge.

[fair fable]

Okk i will delete this

[coarse moth]

please help me

[shut hawk]

looks to be potentially from PicoCTF

[fair fable]

Its from Pico

[sick lance]

You were right. 🙂

[shut hawk]

called it 😎

[near hawk]

Must be the ongoing CTF there doing then

[sick lance]

@fair fable please don't ask in here for help on an active CTF.

[loud marlin]

@boreal scarab dont use spray for hot bed stick prints. zt last on large prints... can't unstick it =/

[fair fable]

Okk sorry

[sick lance]

Thanks.

[twin ridge]

Gave +1 Rep to @fair fable (current: #2025 - 1)

[fair fable]

What is robocop @sick lance

[near hawk]

A discord bot, that uss a rep system

[boreal scarab]

Don't worry, I used glue on a GLASS bed, and had a large print that had a lot of points touching the bed..... that day I cut up my hand so many times just trying to get it off XD

Don't worry, I'm fine, no hospital or anything, small cuts

[loud marlin]

i used spray thing... mother of god... lol

[boreal scarab]

Now, what should I do for lunch?

[sick lance]

Eat food.

[boreal scarab]

https://tenor.com/view/no-shit-stranger-things-gaten-matarazzo-dustin-henderson-no-shit-sherlock-gif-17949381

[loud marlin]

https://tenor.com/view/skittles-nathan-barnatt-trash-trale-lewous-garbage-gif-20211368

[boreal scarab]

[loud marlin]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[fair fable]

What is rep system

[loud marlin]

nothing aside for fun and that admin can see how much some user is "nice" 🙂

[fair fable]

[fair fable]

How to join fluff clan

[loud marlin]

it's cult

[fair fable]

It not security group ?

[wild rose]

It's too late.... We couldn't save him.

[wintry sluice]

one of them.
one of them.
one of them.
one of them.

[loud marlin]

it's cult fot fun THM users or so

[fair fable]

Okk 👍

[wild rose]

We managed to save one.

[loud marlin]

progress progress

[near hawk]

Fluff clan seemed to take out the cooctus clan

[wintry sluice]

someone was saved?
what from?

[wild rose]

from the ... Nooooo!

[loud marlin]

from bad influence...

time pass from saved user of fluff cult: <t:1710435506:R>

[dense cedar]

Who is enjoying the Ramadan atmosphere here?

[jagged yarrow]

What are your thoughts on the new look?

[wintry sluice]

omg, THE skidy

[sick lance]

Good evening Skidy

[jagged yarrow]

Hi all!

[wild rose]

Hey Skidy. The look needs a few tweaks due to the contrast, but looks good.

[north sundial]

Hello!
Not sure if this is the correct chat room, but
I was wondering about how to do the CTF boxes that correspond to the learning path?
For example, I just finished web enumeration, is there any method to search for it(linked to the learning path/modules)?

[wild rose]

I'm sure you'll get the bugs worked out.

[chilly veldt]

sup sup

[wintry sluice]

will the new look have dark mode?

[sand trench]

not yet.... apparently

[mossy river]

It will, you can find the changes in our improvement blog

[sick lance]

You can search for tags in the search box.

[mossy river]

https://tryhackme.com/r/resources/blog/tryhackme-improvements

[chilly veldt]

time to break fast

[sand trench]

thanks jabba... that is harder to find without your link then shadow would like to admit

[boreal scarab]

Clan!

[sick lance]

😄

[loud marlin]

lie!!!

[boreal scarab]

No lies!

I still have no idea what I want to do for lunch

[mossy river]

It should be in the notifications section of any of the updated pages 🙂

[sand trench]

still probably gonna use dark reader as it has colour themes option

[boreal scarab]

Jabbbbbba. What should I have for lunch?

[mossy river]

Salad

[north sundial]

Can we/you link the CTF boxes to the modules/learning paths in the future?
After you finish the Introduction to Web Hacking section in the Web Fundamentals learning path, you should do these CTF boxes to practise and such?
And thanks for the heads-up

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 2053)

[boreal scarab]

Alright not Jabba..... Shadow 😆

[shut hawk]

Does anybody read this as 5treak required?

[sand trench]

pasta alfredo

[sick lance]

Yeah.

[sand trench]

that seems like a typo or a bad font choice or some clipping

[sick lance]

I seen steak first though, I'm making dinner as I'm hungry.

[north sundial]

I can do the box without the streak required

[shut hawk]

Not a typo, it's an s but I think the font could be a bit better imo

[boreal scarab]

[sick lance]

Sub overrides streak.

[sand trench]

is that a good or a bad thingy???

[boreal scarab]

Good, I just realized he looks sad XD

[wintry sluice]

I can now that you mention it.

[boreal scarab]

Maybe I'll do that for dinner

[shut hawk]

@whole yew You seen the new finals season?

[sand trench]

eugh shadow feels spent... but they have more room testing to do....

[wild rose]

but thank you for your hard work

[sand trench]

could take a break but then this room will not be as heavily tested as it could be

[frank cradle]

hello there!

[sick lance]

Hello!

[sand trench]

ello ello

[chilly veldt]

General kenobi!

[floral wing]

General Kenobi?

[chilly veldt]

https://tenor.com/view/hello-there-obi-wan-general-kenobi-obi-wan-kenobi-star-wars-gif-13024140

https://tenor.com/view/general-kenobi-general-grievous-revenge-of-the-sith-star-wars-gif-26397323

[floral wing]

Ohh damn ok XD

[frank cradle]

what's it ?

[chilly veldt]

Star wars!

[frank cradle]

oh, i'm not that much familiar with it

[chilly veldt]

you should, it's good

[frank cradle]

okay, i'll try

[sand trench]

shadow knows a person that has not watched the following:
star wars
lord of the rings
star trek
harry potter

[wintry sluice]

not watching lotr is unforgivable

[floral wing]

Anime anyone ? Ive been watchin solo leveling…super epic

[frank cradle]

yeah, i'm here

[sand trench]

not watched any anime since cells at work season 1

[hollow pivot]

Last I watched was chainsaw man

[frank cradle]

i didn't watch any of them yet : )

[chilly veldt]

love anime

[floral wing]

U should watch solo leveling…we r just at 8 episodes

[sand trench]

meh

[floral wing]

Oo yea i watched a bit of that…the theme song was bangin

[sand trench]

getting anime is hard and expensive

[floral wing]

Wym ?

[frank cradle]

i've covered 2 episodes only

[coarse moth]

thank you @wintry sluice

[twin ridge]

Gave +1 Rep to @wintry sluice (current: #269 - 18)

[frank cradle]

due to academic pressure, it's quite tough to manage time for watching anime

[floral wing]

Understandable

[frank cradle]

: (

[wintry sluice]

aanime is weird. seems to have a weird obsession with power levels.

[loud marlin]

@shut hawk RM2 go to my sister... =/... i prob need get new one...

[frank cradle]

@wintry sluice yeah, its not for kid

[sand trench]

technically just finished avatar the last airbender but would not call that anime

[floral wing]

Yea deffo not XD

[wintry sluice]

atla is awesome. try the dragon prince (made by the same people)

[sand trench]

was thinking about asking to borrow the avatar the legend of korra blu rays from friend too ¯_(ツ)_/¯

[frank cradle]

how was that ?

i heard that its quite interesting

[rapid merlin]

Monster. This anime is on another level

[drifting patrol]

Kenzo Tenma

[sand trench]

it was really really really good

it ranks very high even on imdb for any animated series

it is ranked 12th on imdb:s most popular tv shows

[shut hawk]

just the reason to get one! 😛

[sand trench]

yes not only in animated ones but for all tv shows ever

[loud marlin]

tru tru

[frank cradle]

i need to watch it then

[sand trench]

ah yes monster

somehow shadow failed to finish the last 10 or so episodes of said series

[frank cradle]

@rapid merlin is light your favorite anime mc ?

[shut hawk]

https://www.youtube.com/watch?v=aolI_Rz0ZqY

[sand trench]

ah yes that video

which is still not watched by shadow

[rapid merlin]

I only love these three anime's monster, death note and baki

Johan and light are just super cool. They are my idols.

[graceful thistle]

Light as an idol? 😬

[frank cradle]

light is my most favorite mc in anime

yeah, i don't see anything wrong in light's ideology

[sand trench]

guess someone has not yet watched the movies of death note series

[rapid merlin]

Ugh movies ain't that well

[frank cradle]

yeah, i think so

[rapid merlin]

If you like light. You gonna love Johan too

[graceful thistle]

Cant tell if sarcasm, haha. Anyway, was also a big DN fan but defo on team L. Light was a great villain tho. Read the manga many many times

[frank cradle]

i don't know about Johan but i'd prefer to take light as my idol too

[sand trench]

searching for places to watch kara no kyoukai again*

[rapid merlin]

He's from monster. You will love this series bro

[frank cradle]

i think so! i'm going to watch it soon after my midterm then

[brisk tree]

😂

[floral wing]

Insta comments r wild

Wish insta had a public group thing

[frank cradle]

thanks for your suggestion @rapid merlin

[twin ridge]

Gave +1 Rep to @warm pier (current: #2025 - 1)

[graceful thistle]

Naoki Urasawa is great in general. If you like Monster, recommend to check out his other work

[boreal gull]

poooh ty

[twin ridge]

Gave +1 Rep to @shut hawk (current: #13 - 487)

[boreal gull]

looks good

oooh*

[buoyant tree]

u forgot chefs

[brisk tree]

😂😂

[charred forum]

[sand trench]

hey you are more then half way there lepiz

[safe jacinth]

Would it be against TOS if I stream THM content?

[buoyant tree]

Just be sure to not stream the new THM THM challenge rooms before 72h

You can ping Jabba if you have more questions

[ashen wadi]

Director of soc was impressed by my enthusiasm for ethical hacking and he already confirmed that i will eventually get to work with their small team of pentester experts Let me cook brooo

[past sparrow]

I see, that's nice, maybe they let you also get red team sans then 👀

[rapid bobcat]

And if they do always remember "sharing is caring"🙂

[sick lance]

Hello Android.

[safe jacinth]

👍

[sick lance]

Been along time.

[past sparrow]

I am no hacker, I am just good at being persistently annoying 😔

[hasty palm]

good evening all

[past sparrow]

Good evening

Is it me or the discord CDN is broke again

[sick lance]

GIF is taking ages to load.

[hasty palm]

listening lectures is boring as fk

[past sparrow]

Yeah, might be discord issue then

[past sparrow]

start taking colorful notes to make it interesting

[hasty palm]

that is actually good idea

tnx

[past sparrow]

No problem

[ashen wadi]

How many posts till i can upload some hackerman gifs?!

🪺

[past sparrow]

I think you just need to verify your thm account

[ashen wadi]

https://tenor.com/view/genshimaro-gif-26536407

[sick lance]

There's a few gifs taking time to load.

[buoyant tree]

I thought it was just me

yup its a global discord issue

[ashen wadi]

But mine loaded perfectly fine

[sick lance]

Might be a good idea not to send gifs if they don't load, best not to spam up chat.

[sick lance]

Boo all you want.

I'd rather not have general flooded with gifs that don't load, it looks as bad as a giant wall of text that's been spammed.

That won't look good whilst I'm on trial Or in general

[mossy river]

It's a Discord issue, they have registered it on their status page

[rapid bobcat]

Lol how did u saw boo

[sick lance]

I copied the link and pasted it in a URL which showed me what it was.

[sick lance]

Yeah, I thought so.

Good job I'm not a wrestler then Android.

[boreal scarab]

I love when it's so nice out, grab a nice fruity adult beverage, relax.

[buoyant tree]

has it affected attachments or just gif's

[mossy river]

All media upload

[sick lance]

Yeah, I've uploaded a few things to my Unis discord and it won't accept them.

[rapid bobcat]

Rip gif

[sick lance]

Black Mirror returning 2025.

[wild rose]

nice

[sick lance]

People who use earpods, or wireless ear buds.

Is it just mine where one loses battery faster than the other?

[spice adder]

Making my own CTF today, so damn fun watching it all come together

[mossy river]

Depends on what you're listening to

[lone thistle]

yes. depends on the model/obvs product, but I know with airpods at least with how they work, one ear pod (assuming you are using both) is responsible for communicating with the phone and then sending that to the other airpod. It depletes quicker because it's doing more than the other

[boreal scarab]

@naive violet my ADS-B is getting 300 messages/ sec, same spot as it's always been, haven't moved it from the ground level. Need to plan out where I wanna permanently put it.

[sick lance]

Huh, wow, I did not know that.

[shut hawk]

No, but I only wear one earpod at a time so

[sick lance]

I use a crappy pair from Amazon.

[shut hawk]

I do have a problem where my right earpod is a lot louder than my left one ☹️

[boreal scarab]

Sometimes when I have my galaxy buds in and I want to listen to music but also talk to people, I keep only 1 in. I know you can have them to where it passes outside sound in, but it sounds too weird to me

[lone thistle]

plus iirc only one at a time gets designated as the microphone, so if you're on a call or summit, that'll contribute. IDK if noise cancelling uses both or just one mic but that might have something to do with it as well

[naive violet]

I got an LNA and I've had satellite up and running

Got a bit more software to set up for it though

[boreal scarab]

Make it yourself, or bought it?

[naive violet]

LNAs are hard to make yourself IMO

Active components, lots of factors

I got another RTL too, so that I can run satellite independently

[boreal scarab]

RTL SDR v4?

[naive violet]

Nooelec again

[boreal scarab]

Oh nice, I know @normal fable Is in the market for an SDR

[naive violet]

V4 doesn't offer much considering I have a SpyVerter for proper HF coverage

[boreal scarab]

I know v4 has something built in. Doesn't the v4 have noise filtering built in?

[naive violet]

Upconverter?

[normal fable]

I'm kinda looking at the Radioberry..

[boreal scarab]

Is that what is in v4?

[normal fable]

Don't know if it does all I want.. but maybe..

[naive violet]

Yeah some filtering and an upconverter, I have the spyverter as an external upconverter. More modular.

[naive violet]

You going for TX too then?

[normal fable]

v4 looks pretty good for the RTL-SDR

Yeah

[chilly veldt]

currently debating which company I want to take my MC drivers license with

[naive violet]

I kind of want a Lime SDR and if I get one I'll do some more QO100

[normal fable]

I'll probably get a Radioberry and do a full breakdown. lol

[boreal scarab]

Yup, upconverter, had to look it up.

[boreal scarab]

Your minecraft? 👀

[chilly veldt]

Motorcycle 😄

[normal fable]

2 wheel?

I have a 2 wheel endorsement.

BRC was good. I'd recommend anyone take the course. (Basic Rider Course)

[ashen wadi]

Whats the theme of challenge?

[boreal scarab]

https://v3.airspy.us/product/upu-fp1090s/

I still have have this between my radarbox ADSB SDR and my antenna

Helped A TON with message rate and some extra miles in range

[naive violet]

The issue I have at the moment is that I want a filter with like 10% bandwidth

Which is a LOT for most filter constructions

Either that or I just need a very sharp high pass

[spice adder]

Aimed towards more beginner level CTF players. It's Broken Authentication and RCE on the web server, then to multi level privilege escalation with different methods up towards root :)

Can check it out here if ur curious, ive just dropped it on my github.

*FYI: Only the Docker version is available to get to root *

https://github.com/stuub/doombox

Spins up in a single python script, was initially made for playing around making a OWASP inspired vulnerable web app but then turned into a full pwn box lol

[boreal scarab]

Anyway to construct something easily for that use case? Or is it a very niche issue that's hard to find a suitable device to accomplish that?

[naive violet]

Yes you can do it, but it needs kit I don't have

Or spending like... $60+tax

https://www.minicircuits.com/WebStore/dashboard.html?model=ZABP-450-S%2B This'd be ideal but cost

[daring gull]

hey guys quick question
when you create a CTF and want to do a networking challenge using a foreign protocol, how do you fake it?

[clear jackal]

Not sure what you mean by foreign protocols. What protocol are you trying to incorporate? Protocols are usually defined by an org, an I am currently blanking on the name of it. IEEE?

No, that's not right

[daring gull]

JetDirect

not really foreign but still

[clear jackal]

I'd look to see if you can find documentation on the protocol

Looks like it's also called AppSocket

[daring gull]

yeah i has multiple names

[daring gull]

wdym? It's being used in a lot of printers

[clear jackal]

Like technical documentation for how it works, because you want to implement it

[past sparrow]

Would you say making your own room / challenge is also a good way to learn the topic itself?

[daring gull]

I have to implement it in order to use it?

sounds odd

[clear jackal]

You need it to be doing stuff for people in the CTF to find, don't you?

Otherwise it looks like it runs on port 9100

[daring gull]

yeah but couldn't I just record the data which my flag is in? The idea is to show that the procol isn't secure at all

it on tcp

its basically sending a page description language file to 9100

[shut hawk]

https://github.com/kenyapcomau/p910nd
Looks similar

[spice adder]

Short answer? Yes. Long answer? I’d say it depends how much effort you want to put in. I found a lot of the methods I’d initially thought of are things I’d already known. But there’s nuances about almost every part of setting a box up so flattening those out to get it to follow a path that you want it to is definitely a learning experience.

I definitely got good docker experience, spent half my day in the dockerfile 😂

[shut hawk]

@mossy river

[past sparrow]

Yeah my question was more root of - Should I start making rooms of something I already know well, or something I can learn on the way

[sick lance]

@misty frost please don't sell vouchers here.

[daring gull]

looks cool, ill check it out
thanks!

[twin ridge]

Gave +1 Rep to @shut hawk (current: #13 - 488)

[spice adder]

Honestly pick something you think sounds fun, you’ll learn even the hardest stuff as long as you’re passionate and willing to take the time to learn it.

For me the project started as a simple login form that I gave a demo on to my cyber clinic yesterday to present packet sniffing over http. Then today I’ve just been adding bit by bit, but only because I enjoyed it :)

[sand trench]

PI DAY

[buoyant tree]

PI DAY/

?

[sand trench]

2024-03-14

03.14 is pi

[buoyant tree]

hmm

[shut hawk]

it only works where you have a weird format 😔

[buoyant tree]

its steam sale today also

[sand trench]

you calling iso 8601 weird???

[buoyant tree]

Should I buy or not

[ashen wadi]

Nice! Im also plannin on creating series of 2-4 challenges,all connected together with story and comic book,made by me. Its work in progress cause im i barely started doing storyboard. This is gonna be new take on CTF!

[ashen wadi]

Sekiro is my favorite game of all time,if you love hard games and blade of immortal,get it!

[tawny aurora]

I would easily do that only for the price of Sekiro

Sekiro is a freaking awesome game!

[ashen wadi]

Also best death screen "HESITATION IS DEFEAT!"

https://tenor.com/view/isshin-ashina-sekiro-sword-saint-gif-18951335

[buoyant tree]

hmm

[tawny aurora]

please, dont remind me....

XD

[ashen wadi]

Hei at least he didnt trow shit at you like monkeboi..

[buoyant tree]

how many thousand times did yall die?

[ashen wadi]

Weall died about fiddy times yo

[tawny aurora]

A couple of thousand times, including 2 keyboards died....

[buoyant tree]

...

Well imma commit and just buy the games

[tawny aurora]

Just the average gaming experience of souls games - still easily worth it ( :

[tawny aurora]

Noice!

[buoyant tree]

hmm its only 13 gigs

[ashen wadi]

My Lord, I Have Come For You. ...

https://tenor.com/view/sekiro-samurai-gif-19272786

[rapid merlin]

Fucking finally

[ashen wadi]

They reused some stuff but overall its really impressive. Lazy devs should wathc and learn from FromSoftware.. THere is no need games to be over 25-35 gb

[rapid merlin]

Make it quick

[buoyant tree]

lets make it 2tb

[ashen wadi]

I dont believe you played agmes in 2007 but that was the year of Crysis and the game was new graphical benchmark for about 5-6 years. And it was only 6-7gb lol

[rapid merlin]

Thanks

@twin ridge thanks

Thanks @twin ridge

[chilly veldt]

it won't work

[rapid merlin]

[sand trench]

every time a crysis game releases the video game world does a flip

[rapid merlin]

Thanks

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 818)

[ashen wadi]

Well only first one is good lol

[spice adder]

That’d be so sick! I kinda wish I did a theme to mine now. Especially given I’ve called it doombox - could be some huge doomguy references in there 😂

[normal fable]

... All I need is to buy more games that I'll not play. Lol

[ashen wadi]

Remastered..

[buoyant tree]

rermastered has better graphics

[ashen wadi]

GET OUT OF HERE

[spice adder]

You mind giving it a go sometime? Trying to get some feedback considering it’s my first official box I’ve created

[ashen wadi]

Against fully modded Crysis 1? no sir.

[buoyant tree]

... no comment

[ashen wadi]

Im kinda newbish to give feedback,i never did any CTF rooms.

In terms of creating them.

[spice adder]

Oh that’s fine! I just mean trying to complete the ctf. I’m wondering what the paths to root is like for someone that doesn’t know the box haha

I’m kinda biased since I created it

[sick lance]

Is it for THM?

[spice adder]

It was initially for my cyber clinic but I’ve turned it into a full CTF. I can always submit it to THM tho :D

[sick lance]

If you want to submit it to thm QA ask you don't give it out.

And we don't allow advertisements of ctf external that you've created.

[spice adder]

The intention wasn’t to advertise, I was asked about it. But I get what you’re saying.

[sick lance]

Much appreciated.

[spice adder]

Who do I ask about submissions?

[chilly veldt]

you just submit it on the website

[rapid merlin]

It looks good to me 😄

Only the Access Machines button looks a bit strange to me, idk why

[sick lance]

You just make the room public and it goes in to a QA queue

[echo steeple]

dang it. just saw most of the devsecops path is behind the paywall. guess i have to buy a THM subscription again.

[rapid merlin]

That isnt a bad thing btw :p

[spice adder]

Is there a specific format required for submissions? Currently set up as a docker

[mossy river]

Text looks lower than the red circle?

[mossy river]

Has to be submittable to the uploads page

[sharp citrus]

Creating your first room

Article Link

https://help.tryhackme.com/en/articles/6633511-creating-your-first-room

Mar 14, 2024, 8:36 PM

[spice adder]

Danke, shall have a look when I get home

[loud marlin]

super glue and neodymium magneets make hell of combination =/ (in not good way)

[normal fable]

That sounds like a sticky situation

[echo steeple]

btw, anyone know any good pluralsight courses? I still want to get something out of the company subscription while i'm legally allowed to access it.

[rapid merlin]

Yeah but thats with the old one too

But idk

[loud marlin]

more alike shitty situation

[normal fable]

🔨 it. 😉

[hasty palm]

there is no point to buy games, i dont have time to play those that i have atm

[normal fable]

I want to find a good game to get into.. but I keep getting back to Minecraft. lol

[modest elk]

I'm having issues connecting to my VM on thm

I'm using openvpn in regular and also tried other servers but the result same

[hasty palm]

i have few too many

[sick lance]

#site-support please 🙂

[bitter quiver]

[buoyant tree]

...

[rapid merlin]

everything

[buoyant tree]

wayy down the list I think

[buoyant tree]

how's callisto protocol

[rapid merlin]

idk, i didnt play it lol

[buoyant tree]

read somewhere the facial expressions in the game are next gen

[sick lance]

Shows you how little I use Steam.

[normal fable]

My favorite game on Steam so far is Sheepy. lol

[rapid merlin]

lol, where can i see that?

[devout palm]

Happy pi day

[sick lance]

I go to Profile > Games in the browser.

[rapid merlin]

Alright lemmie change my steam to english

decent

[hasty palm]

I blame it/programming and cyber-security, it has ruined me - i used to have fun any play games like 20-30h a week now its only 5ish per week. and most of the time i study.

[rapid merlin]

Yep, me too

I have 1000's of hours in minecraft

[hasty palm]

worst part i find it interesting also

[bitter quiver]

Jesus

[hasty palm]

those are steam hours

[rapid merlin]

You know what is a nice game? Shadow of the tomb raider.

[sand trench]

[bitter quiver]

That's 300 days of play

[hasty palm]

10 years or bit more

[bitter quiver]

I don't have that much across all games

[rapid merlin]

Same i think

[hasty palm]

i know ppl who are like at 10k +h

some streamers 15k, 20k +hours

[rapid merlin]

but for how many years did you play it?

[bitter quiver]

Diff for streamer

That's work to them

I have 15k hours in work

[hasty palm]

for me about 10or 11 years,

[sick lance]

I'm not a big pc gamer anymore.

My mobile workstation has a T500, but I only use that for hashcat. (It's not great, but it's better than nothing).

[rapid merlin]

Me using my 6750xt only for hashcat 😄

[hasty palm]

im happy that i reallised last summer that i must start studying, and investing to the future, it took me from python to (all over the place) jupiter notebook, nlp, javascript, backend, data science, etc like 6-7 months, to find that i like security part the most.

8+h a day study

tryhackme is really nice place 9th day atm

[past sparrow]

Do it other way, blame games for starting only now

[hasty palm]

😄

i dont regret nothing,

i would not be here if it wasnt for games.

[past sparrow]

I am glad I stopped Dota, who knows where I would be now ...

[humble sundial]

https://www.youtube.com/watch?v=0zVQzGZExBg

[rapid merlin]

In fact, my curiousity in cyber sec is because of Minecraft

[naive violet]

Heh

[bitter quiver]

My brotha

I just got my Type 90 Fuji pack

[past sparrow]

Got my first SQL injections done there

cracked servers with plugin based authentications were the best 🥲

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[crude stump]

Warthunder isn’t bad

[buoyant tree]

u always send this meme, always confused about its meaning

[hasty palm]

as background music i like Hip Hop Lofi Beats ,

[shut hawk]

I don't think its a meme 😆

[buoyant tree]

gif*

[wild rose]

It's just so happy and carefree

[fathom hull]

windows web server is a nightmare for me

[normal fable]

IIS?

[fathom hull]

the thing is it should be easier because most part of the time windows web servers comes with system privileges xd

[fathom hull]

ye

but its ok i just be like "what should i do now?" when it comes to windows server xd

[normal fable]

I love IIS.. it's so.. easy to make do what I want it to. 🤣

[fathom hull]

when its linus i already know what i should do and what to look for

but when it comes to windows its like my brain fails

brain panic xD

[fathom hull]

i just have a question how u get rdp on windows? i mean do u find the credentials to login or u have to crack the hash?

[normal fable]

I actually haven't hit IIS for a looong time.. I need to dig into it agian some time.

[fathom hull]

every time i get into a win box i dont know what to do after having a web shell or something lol

haha

[bitter quiver]

Lofi hiphop and retro/synthwave

Here lately though I got into darksynth

No idea how

Feels primordial

[normal fable]

If you get a shell, then you're pretty much golden. Especially if you get a system shell.

[fathom hull]

ye

[normal fable]

There are tricks to do. Check out the AD rooms. 😉

[fathom hull]

but how do u escalate that shell to rdp?

[fathom hull]

alright ill check thanks

[twin ridge]

Gave +1 Rep to @normal fable (current: #60 - 112)

[normal fable]

I'm not sure we're supposed to go into detail about things like that in general. May be more of an advanced topic.

[fathom hull]

i really have to work on my windows networking and admin skills

[loud marlin]

it's relaxing deer jump on lake... 🙂

[wild rose]

Always makes me 🙂

[normal fable]

Spanglish lesson done for the day. 🤣

[naive violet]

Usually you don't need to

[past sparrow]

Windows is entirely different world but linux, but I highly recommend learning them

[fathom hull]

not even when doing red team ops?

[fathom hull]

ye i really need too ... because i feel like my windows admin / networking skills are pretty bad

[past sparrow]

In windows, shell and rdp are slightly different than in linux

Especially in AD environment

since you have AD accounts and local accounts, and both function slightly different from each other

[naive violet]

What do you need a GUI for?

[fathom hull]

yes plus UAC, register and etc

[fathom hull]

in case i needed to have more control of the environment im on

[normal fable]

GUI is not for me.. and if you have system, you are the computer. lol

[past sparrow]

Yeah, those things and many more

[naive violet]

More control? That's what a terminal is for

[sand trench]

need gui to see the post it notes sticked to the monitor

[fathom hull]

not for me either xd so in this case should be more effective to understand more about admin etc using the command line

[fathom hull]

LOL

[past sparrow]

Have done my fair share of windows, honestly if you are past automatic exploitations, you can be quite satisfied with yourself

not easy stage to get to

[normal fable]

Under the keyboard... 😛

[past sparrow]

Most windows rooms be like "use this metasploit module"

[fathom hull]

usually i have to search up stuff because i usually forget some commands

need to make a cheatsheet just in case

[fathom hull]

ye thats true

[wild rose]

have to take notes on everything, just not a cheatsheet.

[past sparrow]

I don't think its necessary to learn commands by heart, just learn to recognize them, eventually you remember them by heart if you write them enough

powershell .NET style can be quite unusual to get hang of

[fathom hull]

ye thats what i do

[fathom hull]

i dont make good use of powershell

just in case i need to run post exploitation scripts or something

[past sparrow]

Which powershell could easily do

[normal fable]

Powershell is way better than GUI..

[past sparrow]

in CTF-s you often could find powershell to be the exact thing that gives you the privilege escalation

[fathom hull]

alright then

now i have some idea on what i have to improve on

thanks guys

[past sparrow]

Though usually its just some process that has way too many permissions 😄

no problem, good luck

[hazy flume]

any recomended virtual box for mac?
oracle isnt supported

[wild rose]

fusion by vmware

[hazy flume]

thanks

[normal fable]

VirtualBox should work on Mac..

[hazy flume]

its not free?

[hazy flume]

it says unsupported hardware architecture

[sick lance]

Which chipset you got?

[normal fable]

M1 or M2 chip?

[hazy flume]

m1 pro

[normal fable]

Parallels or fusion would probably be best bet then.. Not sure though. I don't run Mac hardware that new. lol

[hazy flume]

can i ask a question

[normal fable]

Might be able to get kvm running on it??

[hasty palm]

how many monitors u guys have ?

[hazy flume]

i have kali on my desktop but my nic doesnt support monitor mode and i cant complete the wifi cracking room, so im trying to do it from the mac, will my mac support it?

[normal fable]

2.5

[coarse moth]

Hi, Could someone explain to me why find is at the end of the command?: sudo LD_PRELOAD=/home/user/ldpreload/shell.so find

[sick lance]

More than likely no.

Google it, you may need to have a USB Nic card though

[naive violet]

Find is the program being ran

[hasty palm]

i have 3 but i with i had 4. do i have a problem ?

[hazy flume]

i did, i followed many solutions it isnt supported

[normal fable]

Yeah. You're down one monitor. 🤣

I have a 24" and an ultra-wide monitor.. then my work laptop..

and a very messy desk at the moment...

[lone thistle]

good eve

[hazy flume]

sscrubz could you reccomed a wireless adaptor to buy to add to my desktop to make it work?

[past sparrow]

Argument

[past sparrow]

2 😎

[lone thistle]

Look at UTM if you're looking for free. Fusion is slowly getting better, but yes, that requires a license, similar with Parallels (though parallels would be your best bet in terms of performance and compatability)

[hazy flume]

thanks, ill try both

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 823)

[coarse moth]

but the argument can be any executable and the result will be the same? finally the find does nothing because it will return a shell with privileges

[past sparrow]

It absolutely can

[lone thistle]

Have the OS be ARM64 if you can - it runs basically native. x86_64 kinda ... sucks on UTM at least in my experience as it's "emulated". Getting better slowly...but everything like that needs time to catch-up

[past sparrow]

It returns it with privileges because its preloaded with sudo

[noble knoll]

https://tenor.com/view/scared-dog-wtf-is-going-on-gif-23151003

[past sparrow]

Ah, sharing screen with friends

[normal fable]

https://tenor.com/view/jon-stewart-eat-eating-popcorn-watching-gif-3094746547306242594

[coarse moth]

thank you

[twin ridge]

Gave +1 Rep to @past sparrow (current: #509 - 8)

[stone osprey]

Hello, I want to get OSCP but I'm new to cybersecurity. Should I register TryHackMe first to learn or go straight with Offsec OSCP?

[noble knoll]

learn stuff first

[wild rose]

Would suggest THM first, so you're not wasting your money if you don't finish oscp

[noble knoll]

which you will not finish for sure

[stone osprey]

Got it. Thank you for your advice.

[past sparrow]

Learn A LOT of stuff first

It's not a thing you just jump into without any knowledge

[hazy flume]

if my wireless adapter doesnt support monitor mode, so i cant use tools like Aircrack-ng, will there be more limitations to similar tools?

[stone osprey]

Thanks mate.

[twin ridge]

Gave +1 Rep to @past sparrow (current: #474 - 9)

[normal fable]

You can get a USB wifi adapter that supports monitor mode. Alpha makes them. Not sure on the model anymore.. I have one somewhere..

I'm sure there are smaller ones by other companies too.. but not sure how well they work.

[robust ridge]

To use Aircrack-ng u need a wifi card that supports monitor mode (Most laptops do that), however to send packets (Which is what u do when wifi hacking), u need a wifi card that also is capable of sending packets. (U can usally get one on amazon for like $15)

[robust ridge]

Idk your computer knowledge, but there's lots of things u need to know before u can get a job in cyber security.
(1) Learning computer science (How a computer works).
(2) Learning the fundamentals of windows, and Linux.
(3) On THM I recommended learning every course that says (easy) as though teach u more fundamentals of computers.

Theres more, but im to tired to think of any.

[stone osprey]

Yes, I know that cos I'm graduated in IT.

[robust ridge]

Awsome

[stone osprey]

I just considering of OSCP fee and course with THM.

[buoyant tree]

@mossy river can vote

[robust ridge]

If I'm thinking of the roght thing it's around 1500 usd to take the OSPC exam.

[frank cradle]

what's ojos rojos ?

[buoyant tree]

Don't pay for the OSCP yourself, get a job and get your employer to do it

[robust ridge]

@stone osprey was wondering.

[robust ridge]

Also, smart.

[buoyant tree]

oh k

which game should I play right now

[frank cradle]

yeah, that's a good choice

[robust ridge]

helldivers

[normal fable]

Sheepy. 😛

[buoyant tree]

well time to launch helldivers until I crash it

[stone osprey]

U know what? I just moved from Cambodia to Australia. Im work at KPMG as IT Auditor but after arrive in Australia I can't get a job because of not yet become resident.