general

[wintry sluice]

tried the manual? (man sh)

[cerulean nest]

dont undertand it well

[oblique hearth]

Unfortunately, there isn't a built-in feature to pause or temporarily suspend an active voucher. can contact to TryHackMe support to see if they can provide any assistance.

[cerulean nest]

i told u i dont really understand what it means

[wintry sluice]

sounds like it tries to start a root privileged shell

[rapid merlin]

no there isnt

[oblique hearth]

Oh!

[sturdy needle]

can anyone help me with a reverse shell issue? i have opened a python http server then an nc listener with teh exact port in the reverse shell php file but yet i recieve no connection

[rapid merlin]

#room-help i guess

[boreal scarab]

@blazing granite I'm losing braincells.... Youtuber shoots cybertruck with 9mm "Let's try some bigger ammunition"
Proceeds to shoot .22
Um.... that's smaller

[rapid merlin]

Jerryrigseverything

or whats it named

[boreal scarab]

Yup, him

[rapid merlin]

Its a fun vid to watch btw

[gray sonnet]

looks like he rigged it

[wild rose]

He was in the military, which is odd that he would mix that up... /shrug

[boreal scarab]

"It probably won't go through?"

No, it won't go through, period. It'll leave a tiny dent

[gray sonnet]

Matt, check your other DM 👀

[boreal scarab]

I'M TRYING TO PLAY MY GAME

[gray sonnet]

nu

[boreal scarab]

https://tenor.com/view/sailor-moon-strangle-gif-11648713

[wild rose]

What game? Gonna get HD2 later this week.

[rapid merlin]

Is there any website or platform specifically for digital forensics labs?

[sick lance]

Blueteamlabs online possibly.

[blazing granite]

beat me to the punch I was about to say Blue teams labs 😂

[rapid merlin]

Is this free?

[sick lance]

No, they will have paid content.

[blazing granite]

the old ones might be free

[sick lance]

Type faster smh.

I learned to type faster with James around 🤣😂

[chilly veldt]

letsdefend.io

[wild rose]

haven't heard of these places but I'll check them out thx

[floral wing]

letsdefend.io is really good especially if ur aiming for a soc role…..lots of hands on practice in there

[blazing granite]

blue labs I did a few rooms, letsdefend I discover it like 2 years ago, I created an account and I never used it 😂

[wild rose]

Thanks for the motivation Rex

[twin ridge]

Gave +1 Rep to @blazing granite (current: #134 - 49)

[blazing granite]

happy to help 😂

@wild rose the site it's great and I've heard good things about letsdefend, just life got in the way 😂

[wild rose]

Why do we have to pay bills and taxes anyways. Why can't we go back to being in school with all of these awesome resources. I miss spring break.

[blazing granite]

https://tenor.com/view/spring-break-forever-spring-break-gif-5701809

[rapid merlin]

Young people want to be old, old people want to be young

[wild rose]

https://tenor.com/view/multiversx-srb-egld-cryptocurrency-criptomoneda-gif-10016730488450013409

[rapid merlin]

😏

[blazing granite]

Daytona Beach :🥳

[wild rose]

Miami was my jam

[rapid merlin]

I told the support on it but they didnt. However i wish it was reolve. But they are saying it wont. Not sure. 🤔 Who is fix? Are they?

[blazing granite]

I'm lost 😂

[rapid merlin]

^

above

[blazing granite]

just have a whisky 😂

[wild rose]

Gonna add that to my coffee

[rapid merlin]

not a drink. I smoke 🌲

sometimes snort white

[blazing granite]

irish coffee 😂

[tired peak]

#rules we don't allow discussion of illegal subjects here even if it is legal in some countries

[sick lance]

@ashen wadi Let's keep the gifs to a PG13, thanks!

[twin ridge]

Gave +1 Rep to @ashen wadi (current: #817 - 4)

[chilly veldt]

Apparently my Spotify thinks it's 80s and 90s music time

[ashen wadi]

I only snort white monster zero

[wintry sluice]

sounds good

[wild rose]

Not a bad time thn

[chilly veldt]

Nope, good mood to be in on my way home from work

[rapid merlin]

[blazing granite]

it's always 80s music, 80s musics rules!!!! 😂

[tired peak]

Kyooty probably asked for oldies 🤣

[sick lance]

We don't allow the sale of subs, vouhcers etc in here.

[blazing granite]

but goodies 😂

[chilly veldt]

I was listening to suddenly I see, and then Spotify be putting "you make my dreams come true" afterwards

[shut hawk]

OoohOooohohohoh, were where you 🎵

[blazing granite]

I wouldn't mind if somebody make my dreams come true 😂

[carmine sedge]

I really hope Spotify hasn't decided that 80's and 90's qualify as oldies yet........

[blazing granite]

it's not oldies but darn good music

[chilly veldt]

It do be oldies though

From when my parents were young

[wintry sluice]

seems legit

[blazing granite]

I grew up listen to that music 😂

[wild rose]

cries that oldies are now my jam... 🥲

[carmine sedge]

All I know is that Bowling for Soup needs to give us the remake we all deserve

[sick lance]

No they don't.

[blazing granite]

where is esqy when I need it 😂 I feel outnumbered 😛

[sick lance]

Not seen esqy around for a week or two.

[rapid merlin]

damn his last message is 11 days ago

[blazing granite]

so it wasn't me, I haven't seen him either, but I thought it was my change of time zone 🙂

[sick lance]

Probably on holiday or something.

[half shale]

How does KoTH work? I see no other players

[normal fable]

#koth is a good place to find players.

[half shale]

ohh thanks

[sharp citrus]

KOTH: Creating a game

Article Link

https://help.tryhackme.com/en/articles/6495991-koth-creating-a-game

Mar 19, 2024, 3:39 PM

[rapid merlin]

oh wrong article

go read the pinned messages in #koth :p

[sick lance]

(You'll need to verify to speak in it though)

[normal fable]

I think it's /docs verify now.

[rapid merlin]

yeah

i was curious if the ! would still work

[normal fable]

It's been gone for a while. 😦

[rapid merlin]

it was better 😦

[sick lance]

Nah, / commands are easier to see.

[rapid merlin]

Scrubz i have a question for you

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 19, 2024, 3:42 PM

[rapid merlin]

If you mention with the bot

You cant mention everyone right?

Im not gonna try lol

[sick lance]

You can't use everyone or here or you're muted.

[rapid merlin]

But the bot can mention people you know

When using /docs verify mention

[crude stump]

Hm

Interesting

[sharp citrus]

@sick lance

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 19, 2024, 3:44 PM

[rapid merlin]

Like this

[half shale]

got the verification

thanks

[sick lance]

Yeah, you can't mention everyone.

[rapid merlin]

Alright nice

[sick lance]

You'll be linked with the closest matching account.

[rapid merlin]

Ah so roles cant be tagged

nice

[rapid merlin]

Oh yeah

[sick lance]

you can post roles, but they won't tag them.

[brisk tree]

😂

[near hawk]

From the rooms being released I imagine theres gonna be a DFIR learning path soon

[past sparrow]

Awesome! Looking forward to it

[chilly veldt]

@sick lance

[near hawk]

@sick lance

[chilly veldt]

Too slow

[sick lance]

Please interact with the community before self promotion, thanks!

[twin ridge]

Gave +1 Rep to @exotic grail (current: #817 - 4)

[near hawk]

[sick lance]

Oh stupid robocop 😂

I'll rep you both soon 🙂

[chilly veldt]

It's fine

[sick lance]

All the mods have ran and left me /s

Mods, this is a joke 😛

[wild rose]

Real life emoji

I was wondering where they were. They must be on a break.

[sick lance]

https://tenor.com/view/heroes-gif-27671687

Never fear, Scrubz is here.

[gray sonnet]

invisible mod man

[crude stump]

Well tim is watching

Sneaking around

[sick lance]

Yeah, but time is also working. 🙂

I suppose, right now I am too. (the mod position isn't the job)

[rapid merlin]

You forgot xd

[twin ridge]

Gave 1 Rep to kyootybella (current: #8 - 820)

[sick lance]

I did not. 🙂

[rapid merlin]

Should i do blackout?

[sick lance]

If you like, i can later.

[twin ridge]

Gave 1 Rep to blackout8210 (current: #71 - 83)

[rapid merlin]

:))

[wintry sluice]

rep aboose!!!

[heady nova]

Sup

[wintry sluice]

Sky

[heady nova]

Got me there

[ashen wadi]

What kind?

[sick lance]

A game where you play games other create.

[mossy river]

It’s kind of like lego except it runs on a LUA engine so developers can make their own creations

[wintry sluice]

kinda like garrysmod and plasma?

[mossy river]

Umm

Not really

You’d have to Google it to see what I mean, I don’t really know how to explain it.

It’s like a game engine and then there’s a ton of games created by community members you play

[twilit grove]

hola amigos
i'm currently doing
Attacktive Directory room but stuck at the enumeration process because kerbrute is not working. whenever i try to enumerate for accounts, my system freezes and have to force shutdown. I tried the second repo of kerb but the problem is still there. Where should i head now?

[shell nova]

Sorry, was in a meeting

[sick lance]

😦 I was joking, lol

[whole yew]

more like a giant engine to extract money from parents on a consistent and regular basis... like live-service subscriptions, except it's a marketplace where community content can be purchased with gift card money

[sick lance]

Not to mention a phishing/hacking paradise.

[clear jackal]

Yeah, that's the "above board" side of the business

[shut hawk]

A massive platform on which you can play games created by users, trade items, customise your character, socialise with other users etc

Unfortunately a lot of shady things happen on the platform and its especially dangerous towards the player base considering how young they are

[hollow pivot]

There is a cool Darknet Diaries episode that discusses Roblox https://darknetdiaries.com/episode/112/

[shut hawk]

https://www.youtube.com/watch?v=_gXlauRB1EQ

[mental geyser]

hello, which path I should start with, if I am mainly interested in pentesting ?

[shut hawk]

ooh, will take a look thanks

[shell nova]

You appear to have answered your own question there

[mental geyser]

i mean there are plenty and some topics in each overlap, so unsure

[shut hawk]

Here's a good order made by one of the community members

[shell nova]

Pick and choose

Does it really matter in the end?

[shut hawk]

Always good to have a wide spectrum of knowledge

[shell nova]

Ye

[mental geyser]

excellent, thank you

[twin ridge]

Gave +1 Rep to @shut hawk (current: #13 - 490)

[boreal scarab]

Spin the wheel!

[dense cedar]

https://tenor.com/view/anonimous-hacker-gif-25488931

[dense cedar]

Oh brother Ramadan

[sand trench]

https://oops.cmdchallenge.com/
wow this one was fun

[boreal scarab]

Hotdog with cheese, Chili and Oniona

[gray sonnet]

Hey Shadow

[sand trench]

using only built in bash utils to figure stuffs out

ello vain

[dense cedar]

Very delicious, brother

[gray sonnet]

how're you feeling today?

[wintry sluice]

ah yes, genuine cheese product

[sand trench]

a lot better

[dense cedar]

Please feed me

[boreal scarab]

Only the best

https://tenor.com/view/children-funny-challenge-cheese-say-cheese-gif-13617696

[gray sonnet]

aye

[wild rose]

https://tenor.com/view/cats-cheese-slap-gif-8839458

[gray sonnet]

https://tenor.com/view/cheese-challenge-cat-fall-off-table-taking-a-tumble-cheese-on-head-gif-14154057

[wintry sluice]

"oh no, my one weakness: cheese singles!!"

[heady nova]

Ey peeps

[dense cedar]

Can you hack a Facebook account?

[sick lance]

Are you aware this is illegal?

[heady nova]

Scrubz on roll

How you doin scrubz

[sick lance]

I'm good, yourself?

[dense cedar]

just question

Find ways

[heady nova]

Contemplating my life decisions as I struggle to finish this book on compilers so I can friggin build one for myself

[sick lance]

Usually those questions move from "Can you" to "Will you?"

[dense cedar]

Only a Facebook account, not a bank account !!

[wintry sluice]

"only a mailbox, not a safe deposit box"

[sick lance]

It doesn't matter if it's facebook, E-mail.

Attacking a system/device/account you don't own is illegal.

[wintry sluice]

it still belongs to someone else

[dense cedar]

Fucking man haha

[heady nova]

Alotta questions

[sick lance]

Yup, and we don't do blackhat stuff here anyway

[dense cedar]

I'm asking legal questions here and no one has answered me

[sick lance]

What was your legal question?

[wintry sluice]

lots of people have answered you:
Q: can you hack facebook?
A: no, its illegal

[sick lance]

Thanks, but I've got it... 🙂

[twin ridge]

Gave +1 Rep to @wintry sluice (current: #240 - 21)

[dense cedar]

Okay, I'm sorry guys

I will ask legal questions🤝

https://tenor.com/view/law-layer-das-dasrechtsschutz-versicherung-gif-22990097

[boreal scarab]

https://tenor.com/view/bigormac-triple-cheese-cat-cheese-bigorneau-chat-gif-26336184

[sand trench]

today on useful commands
echo "$(<file.txt)"

[boreal scarab]

Yo dem dogs are fucking FIRE

[sand trench]

for when there is no cat binary on the system

[wintry sluice]

why do people like putting cheese singles on cats?

[sand trench]

not cheese

cheese product

very different

[boreal scarab]

https://tenor.com/view/cat-fail-cat-fail-cheese-challenge-cheese-gif-17748665

[wild rose]

https://tenor.com/view/you-can-has-cheesburger-cat-cheese-burger-here-kitty-kitty-gif-3135869387599352255

cheese melts, cheese product no melt

[devout palm]

Car

[kindred apex]

hi

[dense cedar]

Guys, let's talk about the dark web

[dense cedar]

how are you

[naive violet]

By the way, have you read the discord rules?

[dense cedar]

oki, i'm sory

[sick lance]

You again?

[naive violet]

Have you read the rules though?

And you're sorry for what?

[mossy river]

Madness of a day at Alton

[sick lance]

YOU'RE AT ALTON TOWERS!?

[mossy river]

Went on everything

[dense cedar]

okay i will read

[mossy river]

We were, it closes early today 4pm. Stopped for some food and now we’re on the way home

[sick lance]

Oh man, I was this close to going!

[mossy river]

Damnnn! Only if 😄

[sick lance]

opted for the May week (hopefully)

How is the Nemesis Reborn!?

[mossy river]

My brother has a pass so we skipped all the queues

[dense cedar]

What time is it now in your country?

[mossy river]

Pretty much the same ahah

[mossy river]

6pm

Dungeon was wicked! Last time I went Alton was 4-6 years

[dense cedar]

Me too

[sick lance]

I can't wait to go back, we go at Scarefest where it's amazing.

[naive violet]

In future, you should really read things before you agree to them.
You ticked a box to say you had read and accepted the discord rules.

It's dangerous to go around agreeing to everything

[dense cedar]

Really, brother

[mossy river]

My brother does that! I can’t always guarantee I will be able to get down.

I went to scarefest something around 6-8 years ago!

[naive violet]

Yes, agreeing to contracts without reading them is foolish and will cause trouble for you

[wintry sluice]

https://www.youtube.com/watch?v=ITa4WhxCoQ8

[sick lance]

Gloomy Wood in Alton Towers is my all time happy place, the atmosphere and the music.

[mossy river]

Thirteen is always the best ride. Also tried the new Nemesis ride with the live actors

[mossy river]

You’re definitely Scottish

The amount of rides that closed and opened today was exhausting

[naive violet]

Surprisingly SFW south park clip wow

[wintry sluice]

yh, I was impressed

[dense cedar]

You know how to talk, champ

[wintry sluice]

especially given the rest of that episode

[naive violet]

Yes, it's usual for people to learn how to talk.
I just actually use punctuation in messages.

[dense cedar]

teach me how hhh

[naive violet]

Jabba, do you have plain food tastes?

[sick lance]

Yeah, I've seen people post on IG.

[mossy river]

Umm, what do you mean by that?

[mossy river]

Yeah my brother was one of them ahah

[naive violet]

Like, not very adventurous? I need to decide what 2 pizza toppings I want

[wintry sluice]

adds to osint profile

[dense cedar]

Hey guys, I have now finished the Network+ course, what next??

[wintry sluice]

cheese product and more cheese product

[mossy river]

I’d say I’m quite adventurous but I do like to stick to what I know.

Peppers are always a nice add to pizza. Usually I just go meat feast

[sick lance]

Chicken and red pepper.

Assuming you're having cheese too.

[naive violet]

Wait they took chicken off the pizza hut toppings menu, noooo

[mossy river]

Good luck, my brother and I have different household names, different skin and hair colour and we live hours away from each other… we also don’t follow each other on IG 🤣

[naive violet]

oh wait scrolling

[dense cedar]

..

[shut hawk]

so long as it isn't pineapple
https://github.com/rust-lang/rust/pull/70645

[wild rose]

As a kid I thought cheese wasn't a default on pizza, so I always order extra cheese. XP

[mossy river]

First thought was Ham and Pineapple ahah

[sand trench]

mmmmm hawiian pizza

[normal fable]

Extra cheese should always be default on pizza.. extra extra cheese should cost more. lol

[sand trench]

Print all files with a .bin extension in the current directory that are different than the file named base.bin.
welp shadow is stuck again

[normal fable]

Makes me wonder if I could make a pizza on a disk of fried cheese..

[sand trench]

nothing left beef pizza anyone???

^ probably kinda obscure

[wintry sluice]

spicy beef is tasty on pizza

[chilly veldt]

I need to go shopping for breakfast

[naive violet]

I got hawaiian

[blazing granite]

beef pizza no, but once in Italy I had pizza with chips and sausages, it's a pizza they make for kids but it good 🙂

[sand trench]

wonders if shadow should grab the picture to elaborate

[wintry sluice]

italian pizza is really tasty

[blazing granite]

I lived 2 years in Italy food and wine there are amazing

[wintry sluice]

?

[sand trench]

yuups that is it

[lone thistle]

it's not what you know but who you know etc etc 😄

[blazing granite]

I was picturing something completly different

[wild rose]

so many question about that pizza...

[sand trench]

it was due to a campaign where you could design your own pizza with toppings and the user asked what would be the most evil pizza to order and the poll came up with this

where the employees of said pizza place are probably distraught now

[blazing granite]

The only question that I have about pizza is how long is going to take to get here😂

[sick lance]

Pizzas are round...

[wintry sluice]

square pizzas are great

[blazing granite]

not always, in rome you have pizza rossa that it rectangular 🙂

[mossy river]

Exactly, I don’t think we waited in a single queue!

[wild rose]

pizza transcends all including shapes

[chilly veldt]

hmmm, imma go work out and then shop

[wintry sluice]

wonders in hyper-pizza

[naive violet]

https://cuberule.com/

[wintry sluice]

https://tenor.com/view/perfection-perfect-michael-fassbender-magneto-x-men-first-class-gif-2260686001358167676

[proven quartz]

Since they originally used French bread, they are clearly eclairs

[blazing granite]

savory eclairs 😂

[wintry sluice]

I suddenly have a craving for marmite doughnuts....

[rapid merlin]

Savory Salmon 🍣

[rapid merlin]

chicken wings

[lone thistle]

had this randomly pop in my head today https://www.youtube.com/watch?v=xhlUVyDBusg

the NOSTALGIA

first video I ever saw on youtube

[rapid merlin]

so hot

Ben 10

[lone thistle]

ben 10 was basically all I ever knew when I was younger. So sad when I turned 11 😦

[buoyant tree]

Heya ben

[rapid merlin]

Send me a message

[lone thistle]

Why?

[modern creek]

does anyone here have expeirence with hosting servers using colocation hosting?

[rapid merlin]

No. I know some good bulletproof hosting providers though if that would work instead. Not colocation though

Are you needing bulletproof hosting so you can be a criminal with less chance of getting shutdown?

[modern creek]

ah kk, no all good, im trying to host my own servers in a DC but i am very new to the whole thing

[modern creek]

uhhhh no?..

[rapid merlin]

ok just asking

my bad bud

[modern creek]

sorry, you just caught me off guard xD

[blazing granite]

so ben not 10 😂

[rapid merlin]

Ben 13

[grim sparrow]

:mute: mtwosixtysix#0 has been muted.

[buoyant tree]

What's the site where you can report a scam url

[crude stump]

Are you asking?

[glossy wigeon]

yes

[sick lance]

Do you know this is illegal?

[crude stump]

Oh then scrubs is here

[sick lance]

Phishing E-mail?

[crude stump]

Was just bouta ping you scrubs

[buoyant tree]

eh a website

[crude stump]

You can report websites to google

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[buoyant tree]

time to report the site and its redirects

[sick lance]

I use phishtank for phishing, and the NCSC for Scam websites

[crude stump]

Yeah I would use a government agency instead of google. Google is sketchy kinda

They prolly won’t even take it down

[buoyant tree]

hmm, Its a information harvesting fake giveaway kinda thin

[wintry sluice]

sounds like most social media sites

[buoyant tree]

time to report instagram.com

[bitter quiver]

Man I'm in one of those periods where you don't want to study or do anything anymore. Been like that for a few days and it's driving me nuts

[craggy needle]

[modern creek]

i feel that

[bitter quiver]

It sucks lol. Need to do a seratonin detox/meditation cycle to get that sense of reward back

The confetti at the end of a module doesn

n't hit like it did

https://tenor.com/view/confetti-style-gif-19616552

[shut hawk]

Woahh, rainbolt did a video on tryhackme https://youtu.be/oD10LyQvhq0?si=51VR3tjentxkbBMa

[sand trench]

WOOOHOOOO

[wild rose]

nice i only did a 1/3

[crude stump]

Cia test?

[undone dragon]

hey anybody can suggest me how i can hack any body whatsapp

[crude stump]

@sick lance

He can

[shut hawk]

yeah very clickbaity

but still cool nonetheless

[shut hawk]

What's this?

[sick lance]

And why do you want to do something that is illegal?

[crude stump]

A practice Linux cmd game

Or sort of like a challenge

[sick lance]

Isn't CMD challenges?

[crude stump]

Instead of a game

[crude stump]

Yes

[shut hawk]

https://cmdchallenge.com/
Found it

Cool!

[undone dragon]

I needed currently , If you suggest me any tool which i can use it to do this.

[sand trench]

yuup it is cool and fun

[buoyant tree]

@sick lance

[sick lance]

Are you really sure you wish to do this, despite knowing it's illegal?

[undone dragon]

I just want to get its access

[undone dragon]

ya

[crude stump]

😨

[grim sparrow]

:hammer: rajsingh_#0 has been banned.

[crude stump]

How hard does it get shadow

[sand trench]

very hard... but at least the have a list of answers to all the questions you can check

[wild rose]

it can be frustrating. I got up to grep last night.

[sand trench]

here is the beginner one from same site: https://12days.cmdchallenge.com

christmas themed

with learn and answer sections

[wild rose]

lots of different answers, which is pretty cool to look at a problem from a different POV.

[wintry sluice]

the oops one is insane

[sand trench]

hahahahaaaaa yeah

at least that one is short

[charred forum]

new room is cool

[coarse moth]

Hello, does anyone know how I can use a Windows ecosystem in attackbox? I need to use cmd and powershell

[wintry sluice]

is this for a specific room?

[buoyant tree]

powershells already on the attackbox if i am not mistaken

[coarse moth]

windows privilege escalation

[wild rose]

the windows machine should be the "Start Machine", you might need to use remina to RDP into the windows machine.

[naive violet]

You use those on the target, no?

[coarse moth]

yay

[woeful rock]

😄

[coarse moth]

how can i do that?

join there with RDP

[naive violet]

The AttackBox is the Ubuntu machine you deploy to perform attacks from. It is separate from the target.

The attackbox has the tooling on it for RDP

[coarse moth]

i know that

[naive violet]

Ok, so yes use remmina or something to RDP in

[sick lance]

I like Remmina, it's my favourite RDP client.

[coarse moth]

thanks

[sick lance]

Fujitsu found malware in their systems 👀

[sand trench]

who???

[wild rose]

same goes for CISA, they had to take a few down too.

[near hawk]

NHS Dumfries and Galloway had a data breach

Sorry not data breach

cyber attack

[sick lance]

No, you were right, patients details were allegedly stolen.

[floral wing]

Anybody watchin pirate software on the apex case live ryt now ? Just found out he had direct access to hals system

[wild rose]

did they say wheither it was EAC or EA?

[sand trench]

yuups

[near hawk]

It was EAC

[crude stump]

https://youtu.be/bDJb8WOJYdA?si=4rxWjZLEV8nPz5Xi

For anyone who read this is how they told me the world ends

[wild rose]

That's a big yikes cuz it works of the kernel.

[sand trench]

be careful in stating things like this without proof please

[wintry sluice]

with thunderous applause?

[wild rose]

how good is the talk, cuz it's 35mins long... TLDR or TLDW

[clear jackal]

https://youtu.be/-1zxjGxpnqA?si=ezxl83M0_oggOB03

[crude stump]

Thing is lol I’m like 10 minutes in

[sand trench]

thank you moose

[twin ridge]

Gave +1 Rep to @clear jackal (current: #20 - 379)

[crude stump]

But it’s very interesting

[clear jackal]

Not sure this has been proven yet

Unless I'm missing info

[sand trench]

as far as shadow has seen nope it is not proven that EAC is the reason

[near hawk]

Hasn't? Must have misread somewhere then

[umbral bay]

Was a great presentation, no one in the audience took up the QR code "challenge". 😄

[wild rose]

If tim recommends it then I'll have a listen.

[buoyant tree]

had this tab open since its released but am yet to watch it

[sand trench]

https://www.twitch.tv/piratesoftware

current discussion on the same topic

[floral wing]

Yup pretty lit

[wild rose]

If it is EAC then it's in over 30 other games. If it's EA, they need to need to do a full review.

[sand trench]

if it is EAC it would already be worse then it currently is

much more likely that it is just apex legends

[wintry sluice]

is it confirmed that there is a hack? only just started the video and they are talking about accidental cheat activation

[wild rose]

Right? But maybe the hacker wanted the public coverage, because Apex is their largest IP that was being publicized in a live tournament.

[sand trench]

moddified client or some way to tell the server to do stuff it is not supposed to... with requirement of server id
inbound connection on port 135 on one of the hacked peoples pcs from known malcious ip

[clear jackal]

keep watching, Thor doesn't have all the info at the start

[sand trench]

and not nescarilly accidental bans due to "cheat"... could just be taking down the accounts that have evidence related

[wintry sluice]

is thor the guy off camera?

[shadow sundial]

so I did the intro to offensive security fakebank thing and it's saying -u: command not found

[sand trench]

thor is the name of the person also known as piratesoftware

i.e the person whos stream shadow linked

[wintry sluice]

now I wonder if there was a backdoor in a cheat program that multiple people downloaded

[sand trench]

could potentially be trojan malwares yes...

[wild rose]

I can't access twitch from work, but have they confirmed that there was cheats on his machine?

[sand trench]

there is a confirmation of rpc connection over port 135

[sand trench]

NO they have not confirmed that there was cheats on Hal machine

[crude stump]

What’s that short for

[sand trench]

easy anti cheat

[crude stump]

Oh

[sand trench]

and we already debunked blackouts claim there

[wild rose]

aka anti-cheat software

[crude stump]

The one apex runs off of right

[wild rose]

yup

[sand trench]

yuups and tons of other games too

[crude stump]

Did they even comment on this matter?

[sand trench]

yes

[crude stump]

What they say

[sand trench]

epic games the creator of easy anti cheat commented on it

[crude stump]

Oh

[sand trench]

https://www.pcgamer.com/games/battle-royale/easy-anti-cheat-washes-its-hands-of-the-apex-legends-hacking-disaster-that-saw-streamer-accounts-hijacked-live-there-is-no-rce-vulnerability-within-eac/

if you want an article

[crude stump]

Thanks

[wild rose]

yeah but EAC was really really quick to stake their claim that it's not them.

[sand trench]

though take things with grains of salt in not panicking and not claiming we know everything yet

[sand trench]

yeah but as far as we can see their statement is true

[crude stump]

I mean they were at the heart of the accusations

[sand trench]

please no jump to conclusions

[crude stump]

True

[sand trench]

also for hal and the others to be hacked the hacker needed the SERVER ID which is a good piece of information

[wintry sluice]

an just as easily be said that the individual players are at the heart of the accusations, or the game is at the heart of the accusations.

[wild rose]

But it's all up in the air until forensics team can get their hands on the system and server images.

[sand trench]

yeah... would bet that the FBI is already contacted

[wintry sluice]

absolutely.

[sand trench]

yes FBI handles stuffs like this

[buoyant tree]

what's the command

its called something like spoiltsearch

[sand trench]

???

[sick lance]

Searchsploit

[buoyant tree]

ah k

thanks

[wild rose]

the offline exploit DB, right?

[sick lance]

python

-.-

[sick lance]

Yeah.

[wintry sluice]

so close 😢

[sand trench]

expect a new video from piratesoftware on the apex legend story soonish after the stream ends

also known as SOON TM

[wintry sluice]

valve time?

[sand trench]

nah

[wild rose]

then you're looking at never...

[buoyant tree]

Had a rev shell and accidently pressed ctrl c instead of ctrl shift c

thats real pain

[sand trench]

that is why you stabilise shells

[wild rose]

ouch that's like a money shift in a car.

[buoyant tree]

was adding a msfvenom payload

[naive violet]

Control insert, shift insert to copy/paste respectively

[sand trench]

oh you were starting to stabilise

well GG then

[lament tendon]

Catch your revshell with the exploit/multi/handler module in metasploit and runsessions -u <session id> instead, much easier. In my opinion, at least.

[sand trench]

this assuming they have a keyboard with the insert button

[devout palm]

Thank you lmao

[buoyant tree]

what's the insert button tho

[sick lance]

I like to use pwncat.

[naive violet]

I use macros for FN+C and FN+V

[sand trench]

the button labeled ins in the home cluster

[wintry sluice]

mines next to delete

[buoyant tree]

nah my keyboard's smaller than that

[rapid merlin]

The most attacked website/company is not nvidia cisco etc. it's acme IT support 😂

[devout palm]

When i just want to cancel the command that i am writing, i do CTRL + C and lose the shell

[naive violet]

Use rlwrap for better line editing too

[sick lance]

To exit the pwncat shell you need to type exit

[rapid merlin]

nano > vim

[lament tendon]

vim > nano

[devout palm]

Again

[sand trench]

nvim > nano > vim

[lament tendon]

Again.

[naive violet]

Y'all think I leave editors installed?

[blazing granite]

vim FTW!!

[lament tendon]

Well yes, but actually no.
nvim > vim > vi > nano.

[sand trench]

you only use echo???

[devout palm]

https://tenor.com/view/kakashi-naruto-vim-neovim-gif-15040619347138510066

[lament tendon]

Actually tho.

The keybinds are insane.

[sand trench]

emacs is a whole operating system

[naive violet]

I troll people by not installing editors

[lament tendon]

Insta-create macros bound to @<some letter>. :)

[blazing granite]

I used vi a long time ago, on my Unix era 😂

[sand trench]

so no sed or awk or cat then???

[tired wadi]

no cap its powerfull

[naive violet]

Only those

[wintry sluice]

no editors, less risk of sudo/suid exploits

[devout palm]

If i want to quickly edit something, i use nano. If i want to code or something, i use vim (rare)

[sand trench]

echo "$(<file.txt)"

[devout palm]

I pretty much use VSCode for all stuff

[sand trench]

yes it is a fun echo command

[floral wing]

So “destroyer 2009” is a movie bruhh XD

[crude stump]

What’s the movie about

Nvm let me look it up lol

[wintry sluice]

does the < do the inverse of >?
(ie >: take thing on left, stick it in thing on right)

[sand trench]

more or less yeah rswallen

[lament tendon]

Yes.

Idk about the example you made tho.

Oh, you mean bash.

[sand trench]

the fun thing with using echo to print out the contents of a file is that echo is built into the shell in most instances

[wintry sluice]

sounds like the euler identity of bash.

[sand trench]

meaning you can't easily remove it

[lament tendon]

# Input file contents into command
cat < file.txt

# Output command contents into file
echo "Hello World" > outfile.txt

# Put contents from file a into file b
cat < a > b

[floral wing]

Dk but it must have something to do with this whole situation…the guy knows what he is doin & havin fun with it

[sand trench]

# output contents of file to standard out
echo "$(<file.txt)"

[spiral scaffold]

Such a long timee

Hi everyone

[sand trench]

ello ello inf

[sick lance]

echo "The date today is $(date)"

[wintry sluice]

output file contents to variable, then echo the variable

[spiral scaffold]

How have u been shadow

[wintry sluice]

poetry

[lament tendon]

Wait, this guy is still alive?

Damn.

[spiral scaffold]

Yoooo

[lament tendon]

Now I wonder whether I even had the tag I currently use at the time you left.

Discord was still using the #<number> usernames at the time, lmao.

[spiral scaffold]

Nope ,but the owl is definitely what reminded me

[lament tendon]

Whaha

[sick lance]

echo -e "\e[1;31mThis is red text\e[0m"

[spiral scaffold]

How's life going

[wintry sluice]

nah, its clearly cyan

[sick lance]

Wow, last message in 9/2023.

[lament tendon]

echo -e "\e[1mHow bold of you\e[0m"

[tired wadi]

curl parrot.live

[rapid merlin]

its possible to make reverse shell here? im trying to do it but it's doesnt working (its not part of the task but i want to test it)

[lament tendon]

By the way, use \e[A and \e[K to manipulate your cursor position in the terminal.

[sick lance]

Yeah, I can get a reverse shell on that room.

[rapid merlin]

nice

[sick lance]

I fyou would like help on it, #room-help

[rapid merlin]

I did it! thank you!! Next time i need to use reverse shell generator not copying code from github lmao.

any hidden flags are here?

[wintry sluice]

have a look. explore

[naive violet]

Please make sure you use #room-help for help with tryhackme rooms

[rapid merlin]

Ok sorry

[buoyant tree]

What type of command do I usually have to append in a file to get root if the files a crontab

[sand trench]

if you can edit the crontab or the scripts it runs rev shell commands or making a suid binary is the more common ways

[buoyant tree]

thanks, used the rev shell

[sand trench]

because shadow finds stabilising shells annoying they generally just set the command to run chmod +s /bin/bash as then shadow can have a root shell using bash and from there do basically whatever

[buoyant tree]

good idea

I just have 4 msf sessions open right now

for the same device cuz am trying a couple dozen different exploits

[shut hawk]

I like that idea, although would probably change /bin/bash to /bin/sh in case its something like busybox where bash isn't installed

[sand trench]

oh yeah but at that point shadow most likely knows what shells are available

in most linux instances now sh is a symlink to bash that bash treats specially

[shell nova]

assuming your cron runs as root

[shell nova]

yeah but not on Alpine 😉

[prisma kiln]

Guys, ridiculously, I don't know where the file I downloaded is. Is there any command for this? Otherwise I'll have to search everywhere one by one lol

I downloaded it via github command line

[wintry sluice]

do you still have the command line open?

[prisma kiln]

sorry no

[wintry sluice]

could try doing the same steps again.
I sometimes forget which folder my internet browser is downloading files to (I sometimes change it when doing multiple downloads), so just start another download to see where it defaults to saving new downloads

[prisma kiln]

thank you, I will try

[chilly breach]

I am slowly learning to program python. Do you guys think its smart to tackle fine tuning llms immediatly as a beginner?

[buoyant tree]

nop

[chilly breach]

any suggestions what i should go for?

[buoyant tree]

depend's what are you learning python for

[crude stump]

creating software/?

[wintry sluice]

that probably depends a fair bit on your understanding of fine tuning llms on top of a decent understanding of python.

[chilly breach]

i'd say in a room of 100 people i'd be number 98 on the list to give it a shot.

[crude stump]

thats the spirit

never know until you try

[chilly breach]

https://tenor.com/view/never-give-up-fist-pump-motivation-motivational-gif-4892451

[oblique hearth]

ha ha , ofcourse

[crude stump]

bro the copy in the attackbox is so bad

when you try to copy somthing sometimes the blue line stays and sometimes it just disapears

and sometimes it wont even highlight it

[crude stump]

how are you doing icon

[blazing granite]

Like in anything you learn, get the basics hammer down, and then practice, practice, practice and then practice some more 🙂

[crude stump]

can somone explain to me why scanning traffic with snort or any other ids/ips would help a analyst?

like what makes somthing bad traffic

im having a hard time understanding it

[wild rose]

IDS has virus and malicious signatures to send an alert to an analyst.

[crude stump]

so the malware has its own ip?

[wild rose]

While IPS would automatically block this malicious traffic.

A domain/ip can be malicious. yes

[crude stump]

or is it like artefacts left behind sort of

ooo

thanks

that makes more sense

[wild rose]

np any other questions?

[crude stump]

if its scanning domains and ips how is a domain trying to access what ever system the ids is. or is it like if somone is using a software, that software has its own ip address and when they try to use it on the system that has the ids on, it flags it?

am i thinking right?

[wild rose]

IDS can be both on the host/system or a network appliance like a firewall, so a company's network traffic flows through it.

It won't be the software, but the system itself that has it's own IP address.

[crude stump]

so the system would have to have been infected or is malicous for it to flag

[wild rose]

so if you go to a site and it redirects you to a known malicious IP in it's signatures an IDS would flag it.

An IPS would automatically drop the malicious traffic from entering the network.

[crude stump]

wait i think i understand it now. its mostly for the people whos on the network that the ids/ips is on. if they click on a bad domain it flags it and the ips would block/drop i thus basically saving the network

[wild rose]

keyword here is that the IP or domain would need to be in the signatures for it to work.

yup

[crude stump]

that makes so much sense now

[crude stump]

is that why they have to be constantly updated with new rules and stuff

[wild rose]

yup

[crude stump]

better understanding then the room lmao. thank you

or maybe its just me

could be just me

[wild rose]

depends on the business and the IPS company to update and install the new signatures.

Naw it's just a new concept for you to learn. It took me a long time to understand firewalls.

[crude stump]

its fascinating

[wild rose]

and what the difference between firewalls and IDS do.

[crude stump]

dont firewalls block and ids just alerts?

[wild rose]

like New Generation Firewalls can do both if you set it up that way.

[crude stump]

hm

thats cool

[wild rose]

but yeah to keep it simple that's right.

[crude stump]

wait so because snort is only in a simulated machine when your doing the snort room. How would somone go about having it activated 24/7 alerting

like for the simulation your given the traffic script

[wild rose]

you can set it up as a host based IDS and it'll give you alerts to when you're visiting a malicious site.

traffic script is just simulated network traffic.

[crude stump]

i thought so yeah

because it only works for a little bit of a time

once you exit it stops completly and you gotta run it again

[wild rose]

right, just like AV it needs to be running in the background for it to pick malicious stuff up.

[crude stump]

well thank you dex

[wild rose]

np

[oblique hearth]

Nothing bro

Just learning

[crude stump]

Keep learning

[rapid merlin]

enjoying the site 🙏🏻

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[rapid merlin]

[wild rose]

https://tenor.com/view/gates-open-moo-cow-running-gif-15420220

[oblique loom]

Interesting read! If anyone checks it out let me know what your thoughts are I'm curious.

And yes it's a public doc, Google it and it's like the first few links.

[wild rose]

old news, it's from 2004.

[crude stump]

That says 2024

[wild rose]

looks like feb 5 2004 to me.

[sand trench]

Goes to sleep sloops meep moop time for beep boop

[wild rose]

Goodnight Moon

[oblique loom]

Night night o/

[wild rose]

looks like 04 to me

[oblique hearth]

Ah!

[winged summit]

Very interesting. That’s about what I would have guessed just based on following trends in the news. But just FYI, the mods might say this discussion is too political.

In any case, it doesn’t bother me, and I’m not a mod.

[oblique loom]

(Mods, you can delete it if an issue.)

I'm being serious lol

[winged summit]

Interesting document though. I wasn’t aware that info was public. Very cool

[oblique loom]

Yeah! Same

Apparently they have been making these every year for awhile.

[winged summit]

That’s pretty cool. I’m not a policymaker so I don’t have too much use for it. I don’t have much power beyond my votes or any sort of community involvement, so if I read it it would be purely for interest

But it’s interesting seeing the big picture

Especially since people in our field get lost in the weeds

Like, why are we chasing all these TTPs, etc. what meaning does it have in reality

[ocean harbor]

who from venezuela, that wants to team up 😄 ?

[winged summit]

I’m from U.S. and not currently seeking a training partner. Best of luck. Maybe someone else will reply

[ocean harbor]

i just want to have some friends to just do boxes together. Sometimes, I get really boring...

[ocean harbor]

thanks!

[twin ridge]

Gave +1 Rep to @winged summit (current: #106 - 60)

[winged summit]

Hang around here long enough and I’m sure you’ll meet some people

[winged summit]

No problem

[ocean harbor]

I will def do that, thanks !

[upper bison]

Quick question: Is it normal that I can't add my username to the king.txt as a root in KOTH?

That's weird...

[upper bison]

Pretty reactive and helpful server...as always

[buoyant tree]

@blazing granite u here?

[buoyant tree]

#koth

[loud marlin]

https://tenor.com/view/rabbit-eating-gif-23238008

[blazing granite]

I’m here

[rapid merlin]

I wanna take pnpt but I’m scared I’ll learn what I alr know

I did junior pentester red teaming and offensive pentesting paths

[simple valve]

Their course curriculum is still nice

Gets you an intro to python programming and linux

[buoyant tree]

question, is eating a chocolate mousse cake with lemon juice a crime according to you

[shadow hill]

[fresh cobalt]

I'm almost done on ComptTIA Pentest+ path, is it enough to be prepared to pass the exam ? It was a great path but i feel it maybe not selfsufficent for the cert. Do you have any opinion ?

[loud marlin]

crime against humanity 🙂

[brisk tree]

Morning

[loud marlin]

morn

[sick lance]

Hello hello 👋

[loud marlin]

0611 here 🙂

[sick lance]

0511

[fresh cobalt]

22:12

[loud marlin]

alien 🙂

[fresh cobalt]

you are in the futur 🙂

[loud marlin]

ofc. and warnning from future... madam webb is dumb ass movie lol

[devout palm]

Morning

8 AM

[sick lance]

So far the future is wet.

[fresh cobalt]

london ?

[sick lance]

Nah, Scotland.

[lime trellis]

is anyone using snort in kali linux after 2024 kali linux update ?

[sick lance]

Nah I seen they brought it back with the update.

[craggy wadi]

any staff around that can help add me to the creators lounge and perhaps help with a cert role? cheers

[runic garnet]

does anyone know where the red kali linux wallpaper is like i think it might be fan made but it looked like a gundam kinda

[oblique hearth]

Bro in install snort maually successfully

Yes i use snort

[humble monolith]

Hi everyone is there any hacker?

[near hawk]

There’s a lot here

[sick lance]

You'd like the creators lounge?

I could try, not sure if I can do it.

[twin ridge]

➕ Gave the role Creators-Lounge to ocdc

[sick lance]

Oh I can.

@craggy wadi you have the creator-lounge role, I'll wait until a mod is on and they can either assign you the cert, or walk me through it. 😄

[craggy wadi]

I see you figured it out. Awesome!
Yeah I have an idea in mind and I hoped the channel could provide some useful insight.
Appreciate the help.

[worn thorn]

ethical ones yea

[humble monolith]

If anyone is there let me know fast

[worn thorn]

just ask mate

[sick lance]

What do you need help with?

[gleaming hare]

Hi, is UDP 40 bytes faster than TCP in a single packet?

[sick lance]

I wouldn't say that.

[chilly veldt]

just buy access and don't pirate

[sick lance]

This isn't the sort of service we offer here.

[old moth]

Okey thanks

[random owl]

I’m kinda curious what’s the most common languages among hackers second to English? I want to learn a language and connect with other hackers so I’m curious if it would be like Chinese or maybe Russian?

[chilly breach]

I just randomly thought of the SETI program. Is that still running?

[lament tendon]

I‘m currently learning Russian because it is a surprisingly common language in general. Plus, a lot of online content is written with it as well.

[random owl]

That’s kinda what I was thinking it seems pretty common in the cyber sec circles

[thick tundra]

Hi, can anybody give me any suggestions for doing advanced pointer scanning

like going deep into it, more than just CE

basically wanted to do more than that in game hacking

also looking for dll injecting (process hacker)

and ||wireshark||

[grizzled roost]

hey guys i have a question i am working on this school project and i have gained the shell but its in the url like
view-source:http://192.168.0.103/capstone/assets/48.php?cmd=whoami
but what if i want to have it in my terminal like the shell you get after running the pentest monkey script?

[sick lance]

We can't help with school projects, that would be cheating.

You should ask your lecturer or peers.

[grizzled roost]

tbh the project ends here i have got the rce exploit

but i am curious like like how do i get this in my terminal

[sick lance]

It's still school work.

[grizzled roost]

please

[sick lance]

Have a read of the rules, number 5.

These are the kind of things you agree you've read.

[grizzled roost]

a hint would be great

[grim sparrow]

:mute: cyclotecx#0 has been muted.

[chilly veldt]

Insurances be weird

Been called up by insurance companies the last 3 days because I bought a new car

[thick tundra]

can you help me though ?

[sick lance]

With what?

[shell nova]

what are you trying to do?

[thick tundra]

here

basically game hacking

[chilly veldt]

[shell nova]

any game in particular?

we don't condone cheating, especially in online games

[thick tundra]

well there's various, most are in same language and engine though

[thick tundra]

I know, in these games the mods are literally offered by the devs

not asking for online games

[dusky lintel]

I just started, he asked me to start the machine and scan with the gobuster. I ran the scan, then accessed the admin money transfer panel. He asked me to transfer $2000 from another account to his account. So that's what I did, my account went from -1,232.32 to $767.68. I wrote the answer, I wrote it in different formats, I know it is not a site error, it is probably my fault, but I said there is a site error. You can come and help me quicker.

[thick tundra]

the wireshark thing was for co-op (wireless LAN party), not online

[sick lance]

#room-help for this please.

(It's not the balance it's looking for)

[chilly veldt]

I miss google CTF finals

That was pure game hacking

[shell nova]

eh?

ah

[chilly veldt]

We had a couple of months with the source code and had to develop our own hacks, and then play football tournament mode against each other

[prisma moth]

I want to do my eJPT, and I know its on this site: https://ine.com/ But they have a lot of subscriptions and courses so I'm confused about which one I need. Off course in the most expensive one I can get it, but I'm looking for cheaper alternatives 😅 Anyone here with experience?

[chilly veldt]

skip eJPT

that's my advice

[humble monolith]

Any hacker here ?

[chilly veldt]

it's not worth it

[chilly veldt]

what do you need?

we are ethical hackers here

[humble monolith]

Dm me

I have a project

[chilly veldt]

@shell nova

[plush needle]

About what?

[ashen wadi]

Would we consider greyhat to be ethical?

https://tenor.com/view/gandalf-gif-10689881

[sick lance]

No?

[humble monolith]

Sure

[ashen wadi]

How come,at the end he helps people?

[prisma moth]

well my employer sais its the best starter certificate for when you're new to cybersecurity and pentesting

[humble monolith]

Great

[chilly veldt]

it teaches you nothing tbh, and is wayy too expensive for what you get out of it

[plush needle]

So, about what is your project? @humble monolith

[ashen wadi]

If your boss is paying,go for it. Then for real entry level pentest cert,go for OSCP then OSEP.

[sick lance]

He's a wizard, not a hacker.

Greedy Gandalf sent the party away so he could steal all the XP from the Balrog.

[ashen wadi]

[prisma moth]

even when you know very little to nothing? my boss is indeed paying for it (if it's not the 750 dollar subscription version i think)

[chilly veldt]

it is the 750 dollar subscription if you want to get access to the training machines

and yes, even when you know very little to nothing, I did mine before I even knew what TryHackMe is, and I did it in 7 hours

[prisma moth]

ouch

[ashen wadi]

Damn wasnt training for ejpt free and exam voucher 200$ 😮

[chilly veldt]

it was, before they changed it

due to eJPTv2

[prisma moth]

I'm almost finished with the Jr Pentesting path here on THM and want to get a certificate

[ashen wadi]

Then tell your boss to pay for your HTB:Academy cubes and voucher,for CPTS.

Its like 120$ for all modules and labs,plus 220$ for 2xvoucher

And is on pair with OSCP which is like 1600$.

[chilly veldt]

I would recommend PJPT instead

[prisma moth]

so my the experienced guys with my employer advised me to start with eJPT to also not get overwhelmed

[ashen wadi]

What do you mean by not having experience for pentesting? Are we speaking only about pentesting or also your unexperience for basics of network,security,scripting..etc?

[chilly veldt]

PJPT would be better for you in this case, yes your employer might pay for it, but the value you get is nothing from the eJPT, where as PJPT gives you more value in knowledge

[prisma moth]

im a test automation engineer working with python, so i know some stuff, but im not familiar with networking and the real pentesting

[chilly veldt]

bring up what I have said to your employer then and ask about PJPT instead

[ashen wadi]

I would say go with HTB:Academy,really up to date stuff and quite cheap

cybermentor is kinda basic

[prisma moth]

thanks for all the advice 🙂

[shell nova]

might be able to ask for a THM sub 😉

[chilly veldt]

Why are dell serialnumbers soo long

[wintry sluice]

same reason IP addresses are long

[chilly veldt]

they are like 28 chars long

[sick lance]

Ip aren't that long.

[hidden dagger]

zap > burp

[sick lance]

Paid burp > zap.

[sick lance]

Which cert did you want assigned?

[chilly veldt]

the serial numbers are* 😅

[wintry sluice]

IPv4 addresses aren't that long.
IPv6 addresses, however...

[chilly veldt]

aren't that long either

[ashen wadi]

What does Zap have that Burp doesnt? Alsothere is caido,with pretty neat ui.

[sharp sail]

Only 32 bits 😅

[sick lance]

There is a few things Zap does that are in the paid burp.

Nooo, not Greggs

[hidden dagger]

just pay cash ?

[wintry sluice]

won't someone think of the snackers of savoury snacks

[thick tundra]

anyways someone sent me some really important dm using this https://www.base64decode.org/, what does it mean and why's it used ?

[wintry sluice]

card tends to be faster, as there is no faffing about to make change

[sick lance]

Who knows?

It was probably encoded to obfuscate what it was.

[hidden dagger]

but cash is more anonymous

[sick lance]

If I want to be anonymous paying for a drink, sausage roll and a yum yum in Greggs, I need to re-think my life priorities.

[thick tundra]

ok but he literally sent me some random text, asked me to put it in and a link showed up, he could've sent me the link in open text too

long story

but my main question was why's it used in general

[ashen wadi]

https://tenor.com/view/simpsons-halloween-bart-simpson-gif-10913686

[shell nova]

being free helps 😉

[sick lance]

Did you click the link?

It's a good way to distribute links containing malware.

[thick tundra]

like for what exactly

[thick tundra]

nope, never

ot yet

[sick lance]

Obfuscation...

[thick tundra]

I'd prolly open it up in tor though

samdboxed tor

[shell nova]

probably to get around some discord denylists

[wintry sluice]

it also tends to make the data shorter in length i think

[ashen wadi]

https://tenor.com/view/funny-vampire-grandpa-gif-19840183

[shell nova]

@ashen wadi you ok, mate?

[thick tundra]

yes, that's the purpose it serves, thanks for telling but I meant like what activity
like... illegal ? or legal cybersecurity practice etc

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 2074)

[chilly veldt]

both

to distribute data in an easier way

it's called encoding

[thick tundra]

I'd look at the cybersecurity thing, could you help me in understanding it easily though please ?

[sick lance]

You can set a link to be on the deny list, so it's sent, it will be blocked,

If you encode it with base64, then tell someone to decode it, it can send.

[thick tundra]

oh ok, but I couldn't really understand why not share the normal link

[chilly veldt]

cause it might be blocked by discord

[shell nova]

normal link may be blocked

[thick tundra]

oh ok, so he wanted to share something which discord wouldn't see

[thick tundra]

bruh, so it was indeed something not quite right cuz we aint doin do cyber practice

[sick lance]

If anybody wanted to know what it was, they'd need to decode it.

[thick tundra]

hmmmm wierd

Ok, thanks for letting me know

[wintry sluice]

it might not be him sending it. his account may have been compromised

[chilly veldt]

we use base64 in normal cybersec practices too

[thick tundra]

it'll be a bit of a mystery

[thick tundra]

yeah but what exactly?

[chilly veldt]

to send data

or encode data so it can be sent

[thick tundra]

yup

ok, thanks for helping out guys

I'll let everyone know wut it contains when I do open it in my laptop tomorrow

[chilly veldt]

https://www.base64encoder.io/learn/

[thick tundra]

until then it's a bit of a mystery

[thick tundra]

👍

[shell nova]

I'd advise against that

[thick tundra]

well in tor

[wintry sluice]

if you can, check with your friend through something other than discord to check that he actually sent it

[thick tundra]

browser

[shell nova]

even with TOR, that won't stop you getting hit by whatever malware is behind that link

[sick lance]

Sandboxed or not.

[thick tundra]

you're right, what about using sandboxie

[thick tundra]

oh, ok

[sick lance]

It will stay in the sandbox if it detonates

[shell nova]

you can probably copy-paste it in virustotal or something

[thick tundra]

well how do you suggest me I be as safe as possible then ?

[sick lance]

Don't click links.

[chilly veldt]

don't click anything

[sick lance]

Especially if you have to decode something for it.

[shell nova]

don't click dodgy links

[thick tundra]

well but it's tempting, I want to see it

[wintry sluice]

for ultimate safety, disconnect the internet

[thick tundra]

how can I be the most safe while seeing it

[covert zephyr]

hello, I've searched the chat history but can't find some concrete numbers... anyone knows a reputable source of info regarding salary range in security ?

[chilly veldt]

how can they access the link then

[shell nova]

depends on location, experience, job, etc

[chilly veldt]

by not touching the link

[shell nova]

magic?

[chilly veldt]

I need to make a room exploiting magic

[thick tundra]

ok

[shell nova]

do it

also DOOOOM!

😉

[chilly veldt]

and I still need to finish my other room

[thick tundra]

can we create a VPS and do it together lol ?

[chilly veldt]

and test that room

[shell nova]

^_^

[chilly veldt]

there's soo much to do

[shell nova]

I know

[covert zephyr]

sure but it depends within a range... like programming, goes from 60k -120k

[shell nova]

I need to finish my slides 😦

[craggy wadi]

sec+ pls.

[chilly veldt]

and new job that starts this or next week

[sick lance]

[chilly veldt]

and cybersec talk to create

[shell nova]

again, depends on location as well

[covert zephyr]

remote ?

[chilly veldt]

I have to make a learning session for the company I work for

[thick tundra]

ok, would be super fun though

[sick lance]

Distributing dodgy links may not be a great way to start in here,

[thick tundra]

yes I know, I never did that lol

I'd prolly be banned

or everyone would be hacked

[wintry sluice]

getting infected, on the other hand, would not be.

[lunar gale]

.

[thick tundra]

well viruses cant attack hardware rightz they're limited to software

[chilly veldt]

no?

they can infect hardware

[sharp sail]

[chilly veldt]

well firmware specifically

[thick tundra]

I mean they can be stored there, as code, but they can't damage it

unless it's indirect

[chilly veldt]

they can though

but that's #advanced-general

[sharp sail]

Bella's right

[sick lance]

I've asked Hydra to show me the ropes

[wintry sluice]

they can change how the hardware runs (ignoring temperature limits), causing actual damage

[sharp sail]

Sir double Windsor knot is the best looking way to tie a tie

[sick lance]

When you're free, can you DM?

[sharp sail]

Stuxnet hmmm

Centrifuges go brrrtt