general

[mossy river]

I started hyper fixing on it and completely forgot what I was doing

[chilly veldt]

Yuuuup

[umbral kiln]

nerd

[chilly veldt]

Heard the whole speal

[umbral kiln]

both ecsc and after

[chilly veldt]

Yeah, I got direct updates from the Norwegian team

[umbral kiln]

everything around the ctf was nicely organized (minus food during the ctf)

but the ctf itself was a disaster

[chilly veldt]

Torino is a chill city, it'll be fun this year

Yeah, big time

[umbral kiln]

and it's good orgs

AND Torino hosted the 2006 winter olympics!

[chilly veldt]

Torino is pwnthemole area

[umbral kiln]

just like Hamar hosted the 1988 winter olympics

[chilly veldt]

They also host molecon in Torino

[umbral kiln]

yep

[chilly veldt]

Did molecon finals last year

Cause I couldn't go to ecsc

I got to bootcamp and then wasn't chosen

And now I am in senior, so I am f'ed in being able to go

[umbral kiln]

too many seniors in dk?

[chilly veldt]

Too many good seniors

[umbral kiln]

haha wish we had that problem

[chilly veldt]

Luckily lyak isn't playing

[umbral kiln]

2022 we had 3 good seniors retire, then 2023 we had 3 more retired and we're left with 2 of us

• 2 juniors that played some ctfs before and 3 that didn't play much

so

team pl is

[chilly veldt]

I should get a new citizenship is what you're saying

[umbral kiln]

[chilly veldt]

Tbh I ain't playing much CTF either

Only hitting a couple of the high rated ones with Kalmar

And of course google and Defcon

[umbral kiln]

i play most of the ones jctf plays

plus some with two smaller teams im in

[hot cairn]

Szy 👀

[umbral kiln]

go away emma

[hot cairn]

[umbral kiln]

do your job

[hot cairn]

I am currently lighting fires

[umbral kiln]

sucks we didn't qualify to google finals last year

[chilly veldt]

Fire?

[hot cairn]

Yes fire

[chilly veldt]

Google finals was amazing

I played it from home

It was fun sitting at 3 am right after finishing a 17 hour shift and just hack away

[umbral kiln]

the ones in london were the best in-person finals i was on

[chilly veldt]

Why?

Wish I can go next/this year

[umbral kiln]

would've been on the team in tokyo if we qualified but didn't :(

[chilly veldt]

Yeahhh, Tokyo seemed amazing

[umbral kiln]

did you have many people working on the game remotely?
when we played in '22 it was basically the 4 of us that went onsite

[chilly veldt]

I will not be able to go to Defcon this year, except if I get trip sponsored

[chilly veldt]

It was me and 4 onsite people

And then 3 others looking in real quick, but didn't do much

[umbral kiln]

we had some people join in for the final match but they were behind on all the stuff we've added during the matches days before and even semis so they couldn't help much realistically

[crude stump]

can you pentest on your own router jabba?

[chilly veldt]

We dynamically updated our GitHub when something got added

[umbral kiln]

well same

[chilly veldt]

But holy last year's game was interesting

[umbral kiln]

but just tracking code changes vs knowing what patches/features you've done and why is different

[chilly veldt]

Yeahh

[umbral kiln]

i heard some stuff from WTL about it

[chilly veldt]

We sadly got knocked out as first team

But the games we played was tight

[umbral kiln]

they got our tooling but the engine was very different and while you could get the base ported most of the utilities couldn't be ported easily or at all

[mossy river]

Do you mean will society let me or will my skill let me?

[chilly veldt]

Yeah, we wrote it all from scratch

[umbral kiln]

justCatTheFishWare best

[crude stump]

society.

[chilly veldt]

Only used like 3 weeks in total which was a reason why ours wasn't the best

[umbral kiln]

we hastily implemented a watermark on the screen before the last match of day 2 for getting into semis

[chilly veldt]

We had so many issues

[umbral kiln]

we did ours in <2 weeks, mostly 1 person working on it until few days before flying to london

[chilly veldt]

Yeahhh, exactly our situation

[umbral kiln]

madman coded an entire replay system himself

[fair raptor]

ecsc mentioned

[chilly veldt]

The issues of working and doing CTF

[umbral kiln]

and another madman coded the pathfinding in an evening before day1 when we were in london

[chilly veldt]

Tf

Wow

[umbral kiln]

https://fxtwitter.com/justCatTheFish/status/1568609472968364034

this was the last game of the day that determined if we got into semis

[mossy river]

On the main router no because I we are renting it from the ISP.
But, on my networking access points, yes because they're mine

[umbral kiln]

indeed

[chilly veldt]

Nice, love the watermark lol

[fair raptor]

are you team europe??

[chilly veldt]

Yuup

[crude stump]

because i got this not in service router and i was wondering if i set it up and start pentesting on it is it aloud

[umbral kiln]

im in the initial group yeah

[fair raptor]

im team usa LOL

[umbral kiln]

noice

hope i get onto the actual team 😄

[fair raptor]

ohhhhh

[mossy river]

You'll need to check your contract

[fair raptor]

yall havent done final selections yet

[umbral kiln]

nah

[fair raptor]

we do ours hella early

[crude stump]

ight

thanks jabba

[chilly veldt]

I was close to qualify for team USA without being a US citizen

[fair raptor]

it was top 120 that got taken on to the private round

[grizzled wing]

🫑

[chilly veldt]

Yeah, I couldn't talk my way out of no citizenship, so I didn't qualify

[umbral kiln]

just steal one ezpz

[chilly veldt]

Yeah, that's what I thought too

But nooo

[fair raptor]

are you european too?

[chilly veldt]

Yup

Not on the Europe team though

Close to getting on the Danish team last year

[fair raptor]

oh wow y'all have like country teams

i mean i guess im on a country team

[umbral kiln]

for ecsc yeah

[fair raptor]

but we just compete as a whole body

this is my first year

[umbral kiln]

wouldn't you be playing ecsc as a guest this year too?

[fair raptor]

so idrk some of it

yeee

[umbral kiln]

unless something changed you would

same for canada

[chilly veldt]

We compete country vs country for ecsc and then top players at ecsc get on the European team

[umbral kiln]

not necessarily top ecsc players

[fair raptor]

that's p dope

[chilly veldt]

Well in the countries eyes

[umbral kiln]

depends on the country

[chilly veldt]

Who would be best for the team right

Yeahhh

[umbral kiln]

for us its who actually wants to, which last year was one person

[chilly veldt]

Reminds me of my bootcamp in Estonia last year

[umbral kiln]

this year it was 3 and all three got in because 2 of the initial country picks and one from openecsc

[umbral kiln]

we do pl qualifiers too late to do any of the practice rounds between country teams

we're one of the last if not the last countries to pick our team

well i say "pick" but it's just a single ctf qual round

[chilly veldt]

We already have Danish qualifiers and soon have the regional finals

And then in may we have national finals

[umbral kiln]

too complicated

[chilly veldt]

3 rounds and a bootcamp to get chosen for the team in Denmark

[fair raptor]

jeez

[chilly veldt]

We have 700+ people who qualify

[fair raptor]

we have big open ctf, then top 120 go to the combine, then top 30 get picked for the team

[chilly veldt]

We have qualifications where everyone can qualify, then regionals which is top 5 in regions and top 50 in total, and then nationals which is top 10 of senior and junior, and then bootcamp where it's 5 seniors and 5 juniors picked

[fair raptor]

what are "seniors" and "juniors" in this context?

[umbral kiln]

team eu is countries put out 1/2 picks (+ extra if someone got in via openecsc), there are bootcamps for the entire group then there's a qualifier round from which the team gets picked

[umbral kiln]

15-20, 21-25

since ecsc is <25

[chilly veldt]

Yup

[fair raptor]

huh i guess thats smart

[umbral kiln]

some countries do funny qualifiers that result in the teams mostly changing every year like germany

[chilly veldt]

You're only allowed 5 juniors and 5 seniors on the country team

[umbral kiln]

but then you also have some that just have simple quals like us

[umbral kiln]

with an asterisk if your country is small enough, you can be permitted to break the limits then on a case by case basis

[fair raptor]

yall got some tiny ass countries over there

[chilly veldt]

Yeahhh

[fair raptor]

the european mind cannot comprehend the distance i drive to still be in the same state

[chilly veldt]

Oh well, I am almost home from work, and gotta eat breakfast before I sleep

[umbral kiln]

there's not that many that can't put out a larger team though, i think every team had 8+ people in norway?

in prague iirc slovakia had 3 people

played as an observer because of it

[chilly veldt]

Yeah, there was also a team who had a junior forget his laptop at home

[umbral kiln]

we had a junior that decided to not show up to day2 in vienna because of the whole hackinglab situation

[chilly veldt]

Oh lol?
What happened there

[umbral kiln]

tldr hackinglab had weird creepy osint challs and also stole some challs from ctfs which was noticed by people from the team they stole the challenge from

[chilly veldt]

Ahhh yeah that

[umbral kiln]

canada had some dicegang people and they noticed that some of the challs were just theirs with small changes that didn't change the challenge itself

best one was some crypto that was 1:1 from a diff ctf but with variable names changed

[chilly veldt]

Looool

[umbral kiln]

someone from team geramy ended up making a "this challenge does not exist" with randomly generated vars and that challenge source

[chilly veldt]

Wasn't there also a "crack this hash" challenge at some point?

[umbral kiln]

also ecsc chats are always just

[umbral kiln]

dunno, maybe

[chilly veldt]

Or was that openecsc

I think that was open

[umbral kiln]

openecsc was super cursed last year so prob that

[chilly veldt]

Yeeee, it was the flag hashed

And we had to crack it

Basically "impossible"

[umbral kiln]

idk didnt play openecsc, only saw my teammate lose his mind over some of the challs while simultaneously playing plaidctf iirc

[chilly veldt]

Yeeee

[hot cairn]

Canada mentioned

[umbral kiln]

go away

[chilly veldt]

Did you play KalmarCTF though?

[umbral kiln]

yeah

[chilly veldt]

Good

[umbral kiln]

well, team played

[chilly veldt]

Your thoughts?

[umbral kiln]

i wasn't planningo n playing and only really looked at one chall

but overall it was good

funny how some people voted it low because it was too hard

[chilly veldt]

Yeahhhh

[umbral kiln]

def deserves higher weight

[chilly veldt]

And then also all the ctftime issues because we didn't get the proper weighting factor

[umbral kiln]

that got solved relatively quickly though thankfully

would've taken longer if vos wasn't on discord

the slack is basically dead

[chilly veldt]

Yup

[crude stump]

did they update the attackbox or somthing

i swear its different

[sand trench]

meeps moops times for shadows timey whimey sleepy sloopy sleepity sloopity sleep sloop to the amazing beepity beep boopity boops

[sand trench]

they do do that every now and again... most of the time the changes are barely noticeable

[scenic bobcat]

the way ISN is explained in the "Packets&Frames" is so confusing 😅 - i think i got it now with a friend explaining it and looking at it in Wireshark, researching is fun

[chilly veldt]

I just found out I have a gold wedding the same day as regional finals, so I have 6.5 hours to qualify

(the competition is 10 hours long)

[umbral kiln]

past two years our qualifiers were running the same time as a bsides i attend in the uk, so i've qualified the two last years drunk and hung over

[chilly veldt]

Lol

I have half the competition to qualify, maybe a couple of minutes in-between foods

[umbral kiln]

just whip out the laptop mid ceremony

i'd do that

free travel

can't argue with that

[chilly veldt]

Yeahhh, it's my grandparents gold wedding

[cosmic pendant]

hey Szy!

[slender pivot]

Scheduled my Network+ exam

Still nervous though

[umbral kiln]

Hello

[loud marlin]

frack...

[crude stump]

Ralex!

[primal schooner]

HAHAHAHA

[mossy river]

Hey can you remove the forkbomb from your bio, please?

[primal schooner]

why?

[mossy river]

Rule 4

[primal schooner]

Ohhh ok ok

[mossy river]

Thank you 🙌

[primal schooner]

no problem 😁

[warped willow]

Is learning path in tryhackme is free or paid ?

[dire crane]

Depends

[dire crane]

Some free some not

[warped willow]

What all can I learn in free path ?

[dire crane]

It is marked for each path on the website

[warped willow]

Okay thanks @dire crane

[twin ridge]

Gave +1 Rep to @dire crane (current: #1350 - 2)

[crude stump]

Though I answered your question 😢

[warped willow]

Thanks @crude stump

[dire crane]

No problem, and if you can afford it, I can recommend the subscription to learn. It's a good investment in yourself.

Could you please explain to me how a Setuid file works? @primal schooner

[rapid merlin]

I saw there is a room for vim but I use nvim I know nvim is like a version with more things of vim so those this means all the things I can do in vim I do it in nvim

[dire crane]

yeah its a fork of vim i think

[rapid merlin]

fork ?

[dire crane]

when a project is forked, it typically means that a group of developers has taken the source code of an existing project and started their own development efforts

[dire crane]

for example more features or something like this

[rapid merlin]

alright but maybe they did delete or change some stuff from the original code

and there is features from vim no more available on nvim

[dire crane]

also possible

[rapid merlin]

alright

thanks

[dire crane]

no problem

[wooden totem]

I wonder what exploits were in the mailing systems before email

[dire crane]

good old mail thefts

[wooden totem]

Interception of mail was either more or less difficult

[dire crane]

Is still common practice in social engineering

but i'm not sure if the topic violates rule 4

[wooden totem]

What is that equivalent to today

I meant like real life compared to digital

[visual pecan]

Think it's called onpath now?

[sonic dust]

The cpts course is very fun

[visual pecan]

Stealing mail.

[sonic dust]

Yeah the term in Comptia and everywhere else is on path attack

[visual pecan]

No cap

[sonic dust]

Here I come hecking ur smtp

[visual pecan]

Can't tell if they change it for inclusivity or just because it didn't fit the interception methods anymore.

[sonic dust]

Maybe they were “on path” to a mitm and said screw it this is the new name im tired of the old world

[hoary basin]

if some1 can help me in #room-help

[brisk tree]

morning

[mossy river]

👋

What time is it for you burd?

[buoyant tree]

https://tenor.com/view/top-top-of-the-mornin-to-ya-cats-gif-9436667

[brisk tree]

08:57

[mossy river]

gosh

[brisk tree]

ahahaha yeah

what time is it for you

[brisk tree]

ahahaha

[hoary basin]

does tryhackme count hours if youre on a different tab/window?

[gray sonnet]

here it's 11:01 AM

[mossy river]

5am

[uncut cove]

have you seen the leaked Facebook mitm "approach" papers?

where they were moving their victims traffic through their servers and decyphering it

[brisk tree]

Nice

[brisk tree]

Damn thays warlt

Early

[uncut cove]

yeah, but I think they might be using their ads platform the same way

[rapid merlin]

Allah 🙏

[plush mesa]

Pretty funny, im watching a video on it right now: https://www.youtube.com/watch?v=WkLvpxImRGw&t=432

[mossy river]

It’s just really really late…

[plush mesa]

But honestly if you use a vpn from facebook its your own fault

[brisk tree]

You’ve been up all night?

[mossy river]

Potentially

[buoyant tree]

facebook made a vpn?

[plush mesa]

Years ago. They bought one

Onavo

[random quartz]

Just wanted to say to everyone who helped yestarday thanks 🙂
you helped me dodge a huge bullet by not trying somthing on my own

I'm currently having to sign some stuff in order to do what I've asked you yestarday how to do

[plush mesa]

Nvim has better plugin support so even if theres something no longer in nvim which was in vim, which i havent noticed yet, theres probably a plugin for it

[north raptor]

does anyone have an idea about the Cybersecurity job market in Canada here?

[chilly veldt]

on my way to the office
Gets team message
"I am not at xx today, the meeting is online"
Turns around to go back home

[worn thorn]

lucky you.

[chilly veldt]

Eh, it's a public holiday today, so I'll still be working on a holiday, but at least I can do it from home

[mellow trout]

hi

[chilly veldt]

It's one of those everything is shut down holidays too😭

[naive violet]

Yeah we got easter this weekend, 4 day weekend but everything is on sunday hours or closed

[wintry sluice]

damn you, sunday trading laws

[sick lance]

The way my Uni days falls I'm not back until next Friday 😎

[naive violet]

They're antiquated

[chilly veldt]

Same here, Thursday till Monday

Gotta work today, tomorrow and Saturday anyway

But that holiday pay

[polar wraith]

@molten sky ure learning german?

i just realised ure in my server

[rapid merlin]

I just saw that video

No surprise there

Big corporation using child companies to illegally use your data, then get a slap on the wrist for it

[modest elk]

During CTF while taking notes of cmd and output should I copy and paste or I need to take ss

[worn thorn]

depends on how you like to take notes

[modest elk]

But what is the preferred way

[sick lance]

The way that suits for you.

Everybody is different

[rapid merlin]

Morning

[icy cedar]

morning

[errant umbra]

That comes post painting for me 😅

[valid mauve]

Coffee...

[wintry sluice]

nah, tea 😋

[sick lance]

DIY evil.

[sly wagon]

https://tenor.com/view/sleepy-cat-gif-12971458

morning

[past sparrow]

Morning

[ripe crater]

hi guys, any idea of what does 4 days of access left mean?

is it going to be closed or what?

#general

[sick lance]

No, after the 4 days are up you're removed to save resources, you can add yourself back in after

[ripe crater]

ty @sick lance

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 2104)

[night creek]

Is the ISC2 "free" cert actually free?

Like, it says free but, reading medium article it says it's not entiely free
(And I can't read more becuase paywallks ☠️)

Meaning

[sick lance]

You can get the cert, but it expires after a year if you don't pay the sub IIRC.

[chilly veldt]

It's free but it costs money to maintain

[night creek]

Oh that's fine then, I honestly just wanna see if I'm capable of getting it

[simple valve]

ISC2 CC?

its $50 for the annual fee

but iirc, thats the annual fee for all their certs

[outer rivet]

https://tenor.com/view/cat-kitty-eepy-cat-eepy-kitten-eepy-gif-8186911474993351997

Waky waky is time for school

[rain folio]

is the lack of SMTP AUTH considered a vulnerability when interacting with an SMTP server ?

[limber geyser]

nah bro alread time for bed

[outer rivet]

No is time for school wake up

You gone be late

[polar wraith]

ye

it can give way to email spoofing

[rain folio]

yea, but is it normal that many companies don't implement it? like for example google

I'm pentesting a company where i managed to send an email from their smtp server but they have another security layer (fortimail) that blocks it

[rapid merlin]

Guys registry explorer isn't loading hive in windows forensics 1. Anyone knows what could be the problem?

[sick lance]

#room-help please.

[polar wraith]

nope, most reputable email service providers implememt smtp authentication

[gray sonnet]

someone needs to update this 👀

iirc OSCP doesn't have bufferoverflow anymore

[polar wraith]

whats with the new ui

didnt notice

[sick lance]

#feedback-and-ideas or #room-bugs

[umbral kiln]

removed the best part

[sick lance]

Welcome back!

[umbral kiln]

hello

[sick lance]

How are things?

[umbral kiln]

im alive still

so good

continuing the usual: work/travel/ctfs/cherry coke

[sick lance]

Sounds good!

[worn thorn]

ayy greetings

[umbral kiln]

👋

[rain folio]

does the SMTP AUTH prevent you just from using MAIL FROM commands or all of the commands, such as (STARTTLS, DSN, DELIVERYBY, etc.)

[polar wraith]

that i do not know, sorry

[lament tendon]

🎉 We did it, all buffer overflows are patched. 🎉

[sick lance]

These are the sort of things you can ask in your company, not our sourcing work on a public Discord server.

[karmic furnace]

And even though I know the answer to your question, I'm still not going to help you.

@sick lance ❤️

[sick lance]

Hello to you too.

[sly wagon]

i dont get it

[karmic furnace]

what a dayyyy.

[sick lance]

What's not to get?

[sly wagon]

how is asking a general question "outsourcing"?

[sick lance]

It's not a general question.

[sick lance]

They're currently doing a pentest on a company and they're having an issue.

I'm more than 99% positive they're is a confidentiality clause in their contract.

[simple valve]

yikes

[rain folio]

do you really think i didn't do that before comming here?

[sick lance]

I'm not sure what you done to be honest.

But my point doesn't change.

We don't help with work or education.

[rain folio]

it's alright, boomers like you exist everywhere anyway

[chilly veldt]

Ahahahahahaha

[simple valve]

damn

[sick lance]

Now you're being rude.

[simple valve]

helo bella! how have you been

how's the podcast renovation going?

[rain folio]

weren't you when you were quick to judge ?

[sick lance]

I wasn't judging you, I was telling you what you can't do in this server as per our rules.

[chilly veldt]

It's finished

[rain folio]

I might be talking to a kid for all i know

[chilly veldt]

Now I will go to sleep

[rain folio]

bye

[sick lance]

See you 👋

[chilly veldt]

Just finished an hour and a half of meetings

And now it's sleep time

Cause I had to wake up at 7 am this morning and I got home at 2 am due to work

[wintry sluice]

there's someone... off... about asking volunteers on a learning platform to help you solve a problem that you're getting paid for.

[sick lance]

And then taking a huff when you don't get the answer.

But it's dealt with.

[wintry sluice]

👍

[simple valve]

almost there

so far CRTO has been good, cobalt strike is rly nice to use

[night creek]

cobalt strike is a absoloutely lovely piece of software

[rain folio]

I'm sorry mister I know everything about Cybersecurity

[simple valve]

ur like scrubz

[sick lance]

As I said, it's dealt with, however if you're going to be rude to users, you'll lose your right to speak temporarily.

[rain folio]

let me help you by leaving the server

[sick lance]

If that's your wish.

[umbral kiln]

its a pita to use

[sick lance]

They're not wrong though..

[simple valve]

both your pfps are all transparent

[simple valve]

how so? 😮

plus, follow up question: whats ur preferred C2 right now

[umbral kiln]

clunky, can't navigate through it quickly

at work it has to be CS but for labs i'd use sliver or no c2

[umbral kiln]

also sleep is a cursed scripting lang

[simple valve]

is this for making a malleable c2? i have not touched that yet. only thing i know is sleep 0 turns it interactive

[umbral kiln]

malleable c2 is a profile config, different stuff
sleep is the language aggressor scripts are written in and it's... awful

just a random example: https://github.com/harleyQu1nn/AggressorScripts/blob/master/CertUtilWebDelivery.cna

[karmic furnace]

why does my body hurt.

[simple valve]

this looks so freaking weird

[karmic furnace]

also szymex being a new user is so confusing.

[simple valve]

why did they choose this language...

[umbral kiln]

they didn't choose it, rsmudge made the language for scripting of another project of his and just integrated it into armitage/cs for the same purpose

[karmic furnace]

isn't armitage just a GUI for metasploit?

[umbral kiln]

yes

[sick lance]

And God awful

[karmic furnace]

yeah, its rough..

whoever thought about putting the lighting around boxes..

needs to be demoted.

[sick lance]

I use it only for the network diagram

[umbral kiln]

http://sleep.dashnine.org/manual/ 😟

[grizzled crystal]

keep it up! you're doing good

[simple valve]

thank you poki 😄

[twin ridge]

Gave +1 Rep to @grizzled crystal (current: #117 - 53)

[grizzled crystal]

how's it going so far?

[umbral kiln]

how so

[simple valve]

this sleep language looks god awful just reading the sample docs or i might just be a python elitist that hates on anything not remotely resembling python's easy syntax

[grizzled crystal]

szymex is a beginner! look at the little leaf next to their name /s

[umbral kiln]

wish there was an easy way of integrating anything else instead of sleep/aggressor but it's a pain

[grizzled crystal]

no it's quite terrible to use lol

[karmic furnace]

well, you're not new. I remember you from years ago.

[umbral kiln]

nah nah, im new here

[simple valve]

its kind of... weird i'd say. its unlike the PEN-200 course where they have mini labs that helps you do it.

[karmic furnace]

pls don't gaslight me ;D

[simple valve]

its like youre walking through the whole forest while learning the attacks

[umbral kiln]

discord doesn't lie!

[simple valve]

for CRTO

[grizzled crystal]

oh yes, you can't really do that here. my approach is notes first, then do the whole lab going through the course material

[karmic furnace]

i haven't been able to do any notes..

because its just word spaghetti.

[grizzled crystal]

it'll help with persistence since you'll need to do the lab over multiple days minimum

[grizzled crystal]

notes my beloved

you just gotta pick a system that works for u

[simple valve]

right now, im still at WKSTN-2 with a pivot to WEB but so far have not pushed forward as im following the course

[grizzled crystal]

cool cool

[simple valve]

did you also create your own network diagram?

[karmic furnace]

thats the hardest hardest part for me, because I just can't find anything that works for how my brain seems to work.

[grizzled crystal]

i don't remember the lab very well but it covers everything

[simple valve]

im thinking if I should do that also and add it to my notes

[grizzled crystal]

nope, cobalt kind of does it for you?

what do you mean by network diagram?

[simple valve]

i guess a network diagram of the lab i guess

[grizzled crystal]

once you do all the machines in the lab you should already have a clear diagram in CS

[grizzled crystal]

what do you struggle with exactly?

[simple valve]

not as a pwn as you go but something to keep your mind about i guess. i just realized yesterday that WEB doesnt have outside access

but i will keep that in mind

by the end of the course, i am assuming you will successfully compromise the lab, yea?

[karmic furnace]

I dunno honestly, structure?

[grizzled crystal]

oh maybe, it could help if you want to visualise the network

[grizzled crystal]

yep

[simple valve]

nice, something i can look forward to then

[grizzled crystal]

I have it set up in a "website" format. With links to other pages

this works for me

it's a bit messy but i know where things are

[karmic furnace]

i can never layout mine well enough.

[grizzled crystal]

You don't need to worry about layout too much imo. Once you start writing notes a structure will sort of naturally form

[craggy wadi]

looks great imo

[karmic furnace]

i also can never force myself to write notes..

[craggy wadi]

icons are so nice

[karmic furnace]

i really like the icons imo.

[grizzled crystal]

thanks! i would be dead w/o my notes

[sick lance]

Notes. Are. King.

[grizzled crystal]

speaking of death i should back mine up

it's been a minute

[craggy wadi]

what app is that? im currently using trilium. its pretty nice

[grizzled crystal]

it's trillium

[craggy wadi]

huh. wow

[karmic furnace]

I was using.. uhhh.. obsidian

[grizzled crystal]

i use an obsidian theme

[craggy wadi]

ahh

[grizzled crystal]

https://github.com/greengeek/trilium-obsidian-theme

i like the purple haha

[craggy wadi]

oh man. thank you

[sick lance]

I need to transfer all my notes on to one big platform, I have notes here there and everywhere.

[grizzled crystal]

i swear there will come a point where it will be easier to write them than not

you just need to get over that hump

[craggy wadi]

so worth the work

[karmic furnace]

maybe its because I have to write notes all day for work.

[grizzled crystal]

although i know people in infosec who barely write notes! and they do fine

it's not mandatory

I just have a terrible memory so it helps me

[karmic furnace]

well, the comptia certs were a breeze, and i didn't have notes for those (Except for the network one)

[grizzled crystal]

yeah no that makes sense

cool! maybe you're just not a notes person

[karmic furnace]

it is likely.. I just.. remember?

[grizzled crystal]

crazy

[karmic furnace]

i don't know why i do but i do.

[grizzled crystal]

superpower type shit

[karmic furnace]

its likely why work makes me go do installs and stuff for hw roll outs.

[buoyant tree]

Aquilo, have you watched strange new worlds?

[grizzled crystal]

i have not yet, i want to though

i love the musical episodes (ive seen bits of that one)

[past sparrow]

I wonder if there are any good note-taking templates for physical notes

[grizzled crystal]

Cornell template

[past sparrow]

something that could be printed out to make notes more efficient, like categorization or something

hmmm, let me look into it

[buoyant tree]

didn't know that was possible

[past sparrow]

Hmm, that looks interesting

I usually write my notes in YAML style

[grizzled crystal]

rastamouse, the creator of CRTO, doesn't take notes apparently

[sick lance]

Rasta is a different breed though.

Even if he is unhelpful.

[grizzled crystal]

eh i dunno

[grizzled crystal]

he's only human

[grizzled crystal]

he's unhelpful?

[craggy wadi]

Got it all set up. Looks great. Thanks man

[grizzled crystal]

no worries!

[sick lance]

I bought one of his courses with my student email, my college closed the account and I asked if I could have it changed to my main account.

He told me no, because I can't prove the E-mail is mine.

Despite I had the receipt, the card and my name matched the emails.

[craggy wadi]

gonna be messing with icons for the next few days i guess haha

[uncut cove]

Satan🙏

[past sparrow]

Rennet 🙏

[sick lance]

Let's not.

[grizzled crystal]

ah, that's unfortunate. I kind of get why though, i suppose you could fake pretty much all of that

Still sucks you lost your account. Which course did you have?

[sick lance]

his bug bounty one.

[grizzled crystal]

rasta does not have a bug bounty course iirc

[sick lance]

He does. 🙂

[grizzled crystal]

what's it called?

[sick lance]

I'm looking for it

[grizzled crystal]

there's another guy with a similar name who has a bunch of bug bounty courses

i think you're thinking of him

[karmic furnace]

why is burnout so common with everything.

maybe i'm just having some depression.

[simple valve]

the xss rat?

[sick lance]

Yeah

[grizzled crystal]

yes ty

[twin ridge]

Gave +1 Rep to @simple valve (current: #22 - 360)

[grizzled crystal]

different guy

[sick lance]

Hm, my mistake then

Ok

xss rat is unhelpful. 😄

[next coyote]

probably being blind here but - how can I retrieve my achievement link for a previously completed room ?

[polar wraith]

hi guys, can i get a comptia certification being 16 years old?

[karmic furnace]

yes.

[polar wraith]

:0

[karmic furnace]

but your parents have to be a guardian for you

[polar wraith]

oh right

thanks!!

[karmic furnace]

its okay.

[polar wraith]

thats a lot of certs dude

[karmic furnace]

still doing the CEH one atm.

[polar wraith]

good luck!!!!

[karmic furnace]

but eh, that's not that many.

I intend to get more.

i think after i get CEH, I'll go for CFA as well.

[polar wraith]

what ab network+

pretty well known

[karmic furnace]

I've got it.

[polar wraith]

oh alr

[pale crystal]

Is there a cert for the CDSA? 👀

[karmic furnace]

that's what Net+ is

[polar wraith]

oh ye didnt notice

are there only mcqs btw?

[karmic furnace]

technically only on HTB

[karmic furnace]

No, there are some PBQ as well.

[pale crystal]

Yeah, i was asking about tagging me with pretty one here..

[karmic furnace]

Ask one of the mods, maybe?

[past sparrow]

Certs are fun

[karmic furnace]

I enjoy the stress of the exams tbh.

[pale crystal]

For sure, let me reach one

[past sparrow]

I don't, I do enjoy the process of learning though

[pale crystal]

@mossy river Can i Dm you?

[mossy river]

Go for it

[karmic furnace]

the stress of the exams were more fun for me than the learning ;D

[past sparrow]

Not very excited for my next cert exam, whenever I choose that to be

Likely summer

[karmic furnace]

which cert?

[simple valve]

my goal

[past sparrow]

GCFA

[karmic furnace]

That's a solid goal.

EXP-301 looks like a pita tho

[simple valve]

true

[karmic furnace]

the price..

holy moly.

[simple valve]

i dont like exploit development 😄

oh yea, the price would be 1650 x 3 i think

[karmic furnace]

I loveeeeeee BOF stuff tbh

[past sparrow]

I want to get into exploit development next

[karmic furnace]

My company doesn't want me to do any sort of secure code reviews for their software.. which is quite frankly frightening because I've seen BOFs in minidumps..

[simple valve]

i might buy a lifetime sub to maldev academy if i finally get the money

you know, overprepare as always

[simple valve]

aww that sucks :/

but also, it might be additional burden on you if you do manual code reviews

[karmic furnace]

like i would do it manually..

i'm not the dev team, I'm support so it ain't my problem.

[buoyant tree]

is the platform good?

[karmic furnace]

i'm gonna vanish for a bit..

[sly gull]

hello

[simple valve]

ive heard great stuff aboiut it

[sly gull]

how do we start for a mac

[karmic furnace]

been a long two or three days, and i feel like i've not slept in weeks.

[buoyant tree]

heard mixed reviews but mainly just its over priced

[simple valve]

do you think its overpriced?

[buoyant tree]

hven't used it personally

[hollow pivot]

Do you know if they offer any trials or something similar? Couldn't find any free options on their website

[odd crow]

should I pay for the other part of "Network Fundamentals"

in the pre-security path

[sick lance]

I got two Maldev courses

[real compass]

Most of it goes over TCP/IP and OSI model, if you’re familiar with those then you’re good

[simple valve]

AFAIK no 😦

the pricing structure is pretty weird too, i'd say the $499 is the best bet

[odd crow]

alr what abt the other sections

are they paid too?

[hollow pivot]

That depends on you, do you want to complete that module and path? To clarify, a premium subscription gives you access to all paid rooms, not just the ones in that module/path

[real compass]

Don’t know what’s not paid, I’m premium

[hollow pivot]

Yeah, but that is a big investment without even knowing if you like their teaching style. Will have a look at their refund policy

[odd crow]

well i pay to learn something new so why not

any active coupons?

[sick lance]

Only student discount currently

[odd crow]

bruh

[real compass]

Honestly the $14 or $15 a month that you pay is a insanely good deal for the amount of information you get

[hollow pivot]

which ones?

[odd crow]

ur right

[sick lance]

Not even sure, I grabbed them off LinkedIn ages ago then forgot about em till now.

[real compass]

I try to spend about 2 hours on tryhackme a night with YouTube on in the background, definitely beats Netflix in terms of cost to return lol

So just weigh what you’re willing to spend, like is this something you’re just interested or something you’re passionate about? If the answer is the latter maybe it’s time to buy the subscription, if you’re just interested maybe do some more research before

[polar wraith]

do yk any maldev alternatives?

[real compass]

Sounds like piracy?

[crude stump]

Do you own this app

[buoyant tree]

@sick lance probably can help you out a lot

[crude stump]

@sick lance

Oop

Wrong person

[real compass]

lol it’s good

[crude stump]

My bad goth

[real compass]

Mmmmm are you sure about that?

[mossy river]

What’s the app

That doesn’t make it not piracy

[real compass]

I smell vengeance

[grim sparrow]

:hammer: hessi3700#0 has been banned.

[real compass]

This reeks of cyber-vigilantism

[mossy river]

Please don’t interact with rule breakers 🙂

[pallid lotus]

Have y'all added the minimoddimg rule back yet?

Nope. Wonderful

[real compass]

Didn’t mean to in a way that encourages him, was just trying to get him to spill the beans on what he was actually trying to do so someone could see and ban him. I’ll remember for the future

[umbral kiln]

nerd

[pallid lotus]

Cutie

[umbral kiln]

[mossy river]

Please leave that up to the moderators, they are trained specifically to do this :)

I appreciate your help otherwise

[pallid lotus]

Wait

There's training now?

[wintry sluice]

hydra said there is even a test

[crude stump]

Apparently

[mossy river]

It’s a 100 hour intense course wherein we sit in VC and I just vent about things that have occurred in the last week

[pallid lotus]

Yeah, we've been making that joke for years 😄

[real compass]

Copy that, my apologies

[pallid lotus]

Valid

[crude stump]

I KNEW It

Thought y’all were serious

Would’ve been cool tho

Kinda contradicted myself there

[mossy river]

You’re all being secretly assessed, that’s the test

[crude stump]

Oo

[shut hawk]

Muiri has to say that, can't let the secret out

[crude stump]

It’s all propaganda

[wintry sluice]

https://tenor.com/view/always-has-been-among-us-astronaut-space-betrayal-gif-23836476

[brisk tree]

hey

[rapid merlin]

Allah 🙏

[crude stump]

https://www.amazon.com/dp/B0B8D8XD3R/ref=sspa_mw_detail_0?ie=UTF8&psc=1&sp_csd=d2lkZ2V0TmFtZT1zcF9waG9uZV9kZXRhaWwp13NParams

Wonder how useful this would be

[uncut cove]

no

[wintry sluice]

might be better to get a wall poster of it.
kinda pointless as a mouse pad if you need to move keyboard/mouse off anytime you need to lookup something

[crude stump]

Oh yeah

That’s kinda stupid

[rustic brook]

hello, i need help with to understand pwn writeup. which channel do i use?

[sick lance]

Tryhackme?

#room-help

[boreal scarab]

Morning!

https://youtu.be/SpMFnKTdUXg

Running Hashcat in WSL2... at that point, just use your host

[blazing granite]

Morning!!

[sick lance]

Afternoon

[sick lance]

Please don't.

[rapid merlin]

Sorry 🙏

[sick lance]

(they've been not to also, I'm not just picking you out)

Why are the channels so small!?

[blazing granite]

Maybe because the font is small 🙂

[proven quartz]

Did you put yours in the dryer? 😛 Have you zoomed?

[sick lance]

It's not, it's the only text that is small

[shut hawk]

Your discord is really weird

[sick lance]

Ikr!

It happened after I changed my PFP.

[shut hawk]

Try kill the process and then reload potentially?

[proven quartz]

change the font scaling and space between message groups to 12 or 16 px

[sick lance]

That makes my chat text really big, lol.

Does increase the channel size, but it's still not proportioned correctly.

[rapid merlin]

Guys, I'm a little new to Metasploit, also I'm not good at English, what is this error?

[sick lance]

Bad-config

[proven quartz]

That's really weird. Are you in an app or browser? Tried logging out/in or clearing cookies?

[sick lance]

App, that does nothing 😄

[rapid merlin]

I think everything I put is correct!

[shut hawk]

I'd look into what this says

[blazing granite]

if you could write the previous sentence, certainly can understand bad config 😂

[proven quartz]

I'm in browser so settings are slightly different

[rapid merlin]

I didn't understand what it was

[shut hawk]

See if its the same in the web version, if its not - remove the discord %appdata% folder to force a re-install

[blazing granite]

https://tenor.com/view/it-problem-phone-call-have-you-tried-turning-it-off-and-on-again-gif-17823069

😂

[shut hawk]

yeah ur app is borked lol

[rapid merlin]

Frankly, I am speaking in translation now, but I understood what Bad Config means, but I am sure that everything is put in the correct way, but the words after this sentence I did not understand even with translation.

[shut hawk]

Is this a TryHackMe room?

[keen mica]

hi

[upper badge]

whats up

[sick lance]

Stranger.

[rapid merlin]

I really like these new UI changes

I like the estimated room time completion too

[upper badge]

Hey I had a question about vpns and using tor on a mac

[wintry sluice]

is the snort room only applicable to a specific version of snort?

[sick lance]

Shoot?

[sick lance]

"applicable" ?

[upper badge]

im just curious how VPN's work and if vpns from the appstore with the same as downloadable vpns

and in regards to tor on mac whether anyone knows for sure if it works?

[fallen beacon]

To disable the DefangedMode option in Metasploit, you can follow these steps:

Load the desired module in Metasploit. For example, if you’re using the smb_doublepulsar_rce module, you would enter:
use exploit/windows/smb/smb_doublepulsar_rce

Set the DefangedMode option to false:
set DefangedMode false

Run the module:
run

Please note that you should only disable DefangedMode if you’re sure you want to proceed, as it enables module functionality. Always ensure you have the proper authorization before proceeding with any actions in Metasploit.

[rapid merlin]

https://youtu.be/b6ZWC-wQjL0?si=RSIt39YLAM-CnRED

[upper badge]

And I guess my biggest question in general is how to protect yourself to the highest degree from a laptop

[rapid merlin]

What do you mean by this?

[upper badge]

Protect is interchangable with Untracable lol

[sick lance]

I have no idea what you mean by this, but ok 🙂

[wintry sluice]

the commands from the room don't appear to work with the version I install in kali through apt

[shut hawk]

tl;dr a VPN works by shifting the point of trust to the VPN provider instead of your ISP. all of your traffic going through the VPN gets encrypted and sent to the VPN servers which then decrypts it, makes the request, and then sends the response back to you also encrypted

however, w/ modern standards today using HTTPs/SSL, practically all your traffic is encrypted to sites and back

[fallen beacon]

I'm here to listen and learn from others so usually, I don't comment during chat

[shut hawk]

as it enables module functionality123
could you please explain what is functionality123

[sick lance]

Ah, maybe the version updated they've changed the syntax.

[rapid merlin]

Thank you, I fix it Since few, I forgot advanced settings, I get another error, I will try to disable the firewall

[twin ridge]

Gave +1 Rep to @fallen beacon (current: #2040 - 1)

[shut hawk]

@rapid merlin The exploit failed, firstly, is the target actully vulernable? And what are you running this against?

[fallen beacon]

Spare me please, I'm not a Pentester

[shut hawk]

maybe you should check what you post first before directly copying and pasting from GPT

[rapid merlin]

I didnt check if it is vulernable, i go to the exploit before doing that,

but i check this before doing update to the pc,

[sick lance]

I told you yesterday, you need to check if the things you're running against is vulnerable or not.

It will save you alot of time and effort.

there is no sense getting an exploit, and then checking if it's vulnerable, only to find out it's not.

Because of reason x,y and z

[shut hawk]

You're also avoiding the question of what it is you are trying to attack?

[rapid merlin]

yeah, right, you are right
i will do

[sick lance]

I suspect their own router

They were asking about it yesterday.

[rapid merlin]

no sorry, i forget to reply, this target is my own computer

[rapid merlin]

Even if you interchange the words it makes no sense

No device is truly untraceable

[rapid merlin]

yeah

Just depends on who you're up against

[wild rose]

If you updated your PC in the last couple of years, it's protected from that old attack vector.

[fallen beacon]

I don't know what functionality123 is. Can you teach me, please?

[rapid merlin]

And also goes to the NSA

Through Cloudflare

:3

[rapid merlin]

yeah it is on the last update, without wasting time then uh

[shut hawk]

https://tenor.com/view/thumbs-up-conspiracy-tin-foil-hat-gif-20017163

lol ok

[wintry sluice]

wtf

[rapid merlin]

I try MS08–067 vuln yesterday, The exploit succeeded, But in an old computer that is not up to date, I think the last update for this windows xp was twenty years ago

[mossy river]

Can we make sure we are posting data from verified resources, please?

[rapid merlin]

My bad, link: https://www.businessinsider.com/snowden-leaks-timeline-2016-9?op=1

[blazing granite]

indeed it, microsoft withdrew support on April 2014, I don't remember the exact that, my memory is not that great, so yes probably a few days shot of 20 years, in computer time it's like millons of years 😂

[rapid merlin]

I thought this was already known for years now

@sick lance yeah, it is not vulnerable, But before the update it was vulnerable, but when exploited, the connection fails

[sick lance]

That update would have fixed the vuln.

[whole yew]

for encryped channels, the VPN doesn't have full visibility into the actual traffic, just the destination.

[fallen beacon]

Please refer to https://docs.metasploit.com/docs/pentesting/metasploit-guide-smb.html Also, can you share your screenshot of the target PC you're trying to exploit?

[whole yew]

also, please use #room-help or #room-hints for questions and help about THM rooms

[blazing granite]

A film? I remember a documentary and a book I guess not everybody moved on. Last time I heard Snowden still in Rusia and Assange is in Ecuador, right?

[sick lance]

@rapid merlin isn't doing THM, this is on their host.

[rapid merlin]

Yeah, Windows 8.1

[whole yew]

ah, ok

[wintry sluice]

assange is in the uk iirc. he was in the Ecuadorian embassy, but got arrested somehow

[outer rivet]

[whole yew]

you are being safe and running the victim windows in a vm right?

you aren't trying to exploit the host from the guest?

[blazing granite]

I guess it didn't work out for him escaping to Ecuador 😂

[rapid merlin]

No, the target isnt a vm, but what this not safe!

[shut hawk]

yup been here for 5 years, currently fighting extradition to the US

[fallen beacon]

I could have sent you the vulnerable Windows 10 image for the VMware player/ VBox which has Ubuntu-enabled CLI for practising exploits. However, I'm not allowed to redistribute as it is licenced by the author.

[haughty geyser]

Hello,
Just commenting here to let the dev know that
The new UI is sick

Loved the interface

[rapid merlin]

Documentary and book is enough imo😂 I just find it surprising that people are unaware about what actually got leaked

[boreal scarab]

https://youtube.com/shorts/2ebb65zXavY?si=RrvSt3zlhdiPpY4M

Yah bad actor social engineering is going to go fucking BRRRRRR

[rapid merlin]

How can you say you care about information security but you haven't read the book or at least browsed some of the crazy shit snowden leaked smh

[simple valve]

why is that your basis

[rapid merlin]

I have previously tried exploiting this vulnerability from THM room and it worked

[wintry sluice]

some people may not be a fan of how he leaked it, regardless of what he leaked

[sick lance]

Because the THM room was set up so it would work.

Thus going back to my comment of "Checking the version is vulnerable"

Otherwise you're just wasting time.

[rapid merlin]

Because some people call you a tin foil when you mention things from the leaks and I find it funny

@simple valve

[sick lance]

It's not the information, it was the source.

How do we know the image you posted was from a reliable source.

[uncut cove]

how can you say you care about hacking if you haven't watched Mr. Robot

[rapid merlin]

Very true

[rapid merlin]

I know that the THM room was made specifically for exploit this vuln, I did not mean to ask about how the vulnerability was successfully exploited in THM room and how it failed for me

[rapid merlin]

So true

[sick lance]

Because it's a fictional drama.

[rapid merlin]

I agree

[umbral bay]

Enterprises are determined to act/mitigate actual credible threats to their security posture, and not focus on perceived threats they have deemed not applicable or prioritized in their threat mitigation strategy. 🙂

[uncut cove]

(it was a joke)

[fallen beacon]

I'm using a Home lab. You can always ask the THM technical team. They are super helpful if you're ever stuck in any of the rooms. My knowledge is limited. Good Luck friend. 😇

[blazing granite]

with his position, he didn't think about the damage that could cause, and who may get hurt in the cross fire, getting all vigilante is never the answer it, no matter how good your intentions are. Not in vain people say that the road to hell is paved with good intentions

[rapid merlin]

Again so true mr tim, isn't it boring to only care about your enterprise environment though? The snowden situation was absolutely huge, I'd even say it was historical.

[crude stump]

I never ever watched Mr robot

[scenic bobcat]

Can recommend, it's great

also nice to see a more realistic-ish take on 'hacking'

[blazing granite]

At the end of the day it doesn't really matter what info was leaked, the important part it's that was leaked and the info wasn't his to leaked

[rapid merlin]

I personally am very grateful he took that risk to expose that information, just imagine what they can do now

[crude stump]

Imagine a horror movie about a killer hacker

[rapid merlin]

Doesn't really fit a hackers archetype imo

[shut hawk]

This ^ @rapid merlin

[rapid merlin]

I thought you would have already read some of those leaks Jayy, glad I could provide the link for you ^_^

[rapid merlin]

My whole room is full of his pictures

[whole yew]

Disrupting the stabilitiy of your host is not recommended. Strongly recommend you lab stuff up using VMs instead of potentially breaking your host OS.

[umbral bay]

Given the threat landscape and the velocity of newly occurring threats, I'd be surprised to find many enterprises who have the luxury to be bored. 😄

[uncut cove]

why

[rapid merlin]

even if I did not send any commands?

[whole yew]

It's not really "historical", it's a violation of the oaths he took as a government employee. There are 'proper' ways to be a whistleblower and do it legally, what he did was outside the protection of the law

[whole yew]

This sounds like you don't actually have any experience working within a security domain

[wintry sluice]

I think Its safe to call it historical. whether it was right or wrong is another matter entirely

[blazing granite]

Indeed, never a dull moment 😂

[rapid merlin]

Because I liked the serie, Especially him

[rapid merlin]

You don't have hobbies outside of work?

[whole yew]

I think in another 20 years, snowden won't even be a footnote

but that's just my opinion

I have lots of hobbies, many of them are completely removed from the tech work I do for my day job.

One of my hobbies is moderating this discord

[rapid merlin]

Yeah so you clearly have time to ponder and think and engage in other things

[uncut cove]

Tim, will there be a learning path to become a Runner from Matrix?

[simple valve]

if im paid to worry about them, i will definitely

[whole yew]

How is that related? If you think that enterprise infosec is boring and that we have time on the clock to read wikileaks, clearly you don't understand what infosec engineers and analysts actually do

[rapid merlin]

My bad for assuming info sec guys would be interested in an info sec event juun

That's all I was saying

I never said it's boring either? I just thought more people knew about some of the things that got leaked, cloudflare / google being one of the things :p

[wintry sluice]

was it really an infosec event tho?
my understanding was that someone with physical access copied stuff then gave that to the press.

[rapid merlin]

Did it breach information security? Yes

[blazing granite]

it's not that people aren't interested in, it's just old news, infosec landscape moves quickly, move with them or it will run you over 😂

[rapid merlin]

Yeah I get that, my original point was I got called a tinfoil for the statement and I just wanted to prove it was infact a thing that got leaked so it was most likely true

[odd crow]

do you guys take notes while learning?

just asking

[sick lance]

Yes

[rapid merlin]

Yes i use obsidian.md

[sick lance]

Written notes, a recording of my terminal and screenshots/recordings

[odd crow]

huh

[shut hawk]

https://github.com/Notselwyn/CVE-2024-1086 👀
@lone thistle would be great to see a room on this

[sick lance]

This is what my fourth year project is on

[sick lance]

Is this also you're first time seeing this? 🤔

[shut hawk]

Yeah, the blog post was only published 2 days ago

[sick lance]

The author posted it in #exploit-and-mal-studies

[blazing granite]

You missed the point, it doesn't matter if it was true or not. There is a right way and a wrong way to do it. He chose the wrong way

[rapid merlin]

https://obsidian.md

[shut hawk]

Oo didn't see that, don't often check those channels

[rapid merlin]

No rex you joined this conversation late, that was the original point. Whether the picture I posted was true or not and I should provide a source, source being snowden leak etc etc

[scenic bobcat]

Yes, Obsidian for taking notes and GPT to help me summarize it when i struggle to do so - i got a lot of em on my github

[sick lance]

Ah, my bad 😅

Also this PoC has a tendancy to freeze on root after 4-5 seconds.

[upper bison]

Quick question:
Is it a good thing to go to a job interview with 2 printed resumes to give the HR?
Even if they have my resume on a PDF document

[blazing granite]

OK, I'm steping down, I feel we're going on circles and I got bored, have a nice day 🙂

[odd crow]

i will try obsidian

[uncut cove]

gonna start my practical lessons with school folk

writing the entry assessment atm, not sure what to begin my lessons with tho

[odd crow]

it looks very useful

[rapid merlin]

There's no circle you just misunderstood, no ego, you too my friend

[uncut cove]

Theory? too boring. going for labs straight away looks like a good option

[outer rivet]

Is crazy that ninja has a cancer

[upper bison]

Ninja? The streamer?

[outer rivet]

Yeah

[upper bison]

Too much fortnite

[outer rivet]

Probably

I mean he was getting super skinny

[echo steeple]

ugh, still have to wait 40 minutes till i can drive home for 30 minutes, go grocery shopping, spend like 10 minutes with my cats (mostly feeding them) and then i can go play some magic for a couple of hours until my country forbids me to have fun for the next 24 hours

[sick lance]

What a an incredibly silly thing to say.

[rapid merlin]

I believe it was skin cancer, hopefully he can get well soon and his condition doesn't worsen. Cancer sucks.

[outer rivet]

Well only thing we can do is pray I kind feel bad

[uncut cove]

what would be a good meta-path in thm for purple team

[blazing granite]

tough crowd 😂

[rapid merlin]

What's going on with your country?

[outer rivet]

Focus on blue first and then red

[echo steeple]

not seperation of church and state, that's for sure
It's Karfreitag (i believe it's "Good Friday" or "Easter Friday" in english? supposedly the day jesus died on the cross) and in my country on that day there are a ton of restrictions. Theoretically, you are not even allowed to dance in your own home. But any festivities, events and most famously dancing are basically forbidden on that day

[uncut cove]

oof, got it other way round

jr pentester into security engineer. soc paths seem so boring tho

[wintry sluice]

but its thursday

[rapid merlin]

That sounds absolutely crazy. Would you mind disclosing your country? That concept sounds bizarre to me. I hope you have a good weekend anyhow.

[sick lance]

They're talking about the next day.

[echo steeple]

yeah, that's why i still have a couple of hours i'm allowed to have fun

[wintry sluice]

oh, its for tomorrow. right

[echo steeple]

germany

[outer rivet]

Then how you want be purple

[timid prism]

how do u not become tough on urself

[rapid merlin]

I wanted to say germany from the dialect but really? The state doesn't like festivities on good friday?

How have I never heard about that, interesting

[blazing granite]

you didn't get Germany from Karfreitag? 🙂

[rapid merlin]

"I wanted to say germany from the dialect" in message right above yours buddy

[blazing granite]

when yours appeard my was already sent 😂

I guess discord lagging

[sharp citrus]

Pong!

API Latency

119ms

Client Ping

211ms

Mar 28, 2024, 3:29 PM

[wintry sluice]

are we talking something like sunday trading laws, but for easter specifically?

[rapid merlin]

@wintry sluice The restrictions do vary from state to state, but the intention is to restrict any activities which 'contradict the character' of the day. This means it is illegal to dance in public for the full day in 12 out of the 16 states in Germany, with the other four enforcing a partial ban during the day. "All non-public entertaining events outside of homes" may be banned in some states.

Src: https://www.officeholidays.com/holidays/germany/good-friday

Very interesting

Are there any other normal things you cannot do on good friday?

[echo steeple]

yep. because we all are supposed to mourn jesus on that day. It's usually referred to as "Tanzverbot" (ban on dancing, which is only partially the problem on that day). A couple of organisations have tried to fight this by claiming religious freedom and start events on that day. sometimes even successfully. But as I said, in general, anything that is fun is forbidden on that day. That's why the store i'm going to tonight to play some magic officially stops the event at 23:59 (though i suspect we will continue in "closed society")

[rapid merlin]

Haha that is very interesting. I'm guessing lots of people circumvent that rule. I bet there's a group of kids doing a hidden rave somewhere.

I will have to go back to germany at some point, I want to go to phantasia land again

[normal fable]

What I got out of this is that you play Magic. I play Magic. 🙂

[echo steeple]

well, officially we also have "Nachtruhe" for the whole day (usually, nachruhe only is during night and on sundays so that you do not annoy the people around you, but also on pretty much every holiday) which forbids us to maw our lawn, put on our dishwasher or the washing machine or anything else that might be too loud and can distrub your neighbours, like vaccuming in you appartment if you live in an appartment where that can be heared by your neighbours.

[echo steeple]

commander only nowadays, but yes lmfao

[normal fable]

I've only played commander once..

That was a couple weeks ago. lol

I'm still trying to understand how it's significantly different than standard.

[echo steeple]

it's a fun format with a lot of possibilities when it comes to deck building, which is fun. It's also easier playing commander at a store without having to be super competitive than any other format (except maybe sealed during a pre-release) in my opinion.

[rapid merlin]

Are dishwashers or washing machines really that loud though? Very bizarre whoever decided to come up with those rules

[normal fable]

I'll have to get a pre-built deck and make some changes. It seems interesting.

[wintry sluice]

washing machines are kinda loud on the spin cycle, yes

[echo steeple]

well, for one...you have a commander. you are not allowed to use the same card twice in a deck, you have no sideboard, pretty much every card in magics history is allowed vs only the last couple of sets and you have a library of exactly 99 cards vs 60+ cards

[normal fable]

and 40 life vs 20..

[echo steeple]

they can be. i think they aren't anymore, but they used to be very noticable in the past if i'm not mistaken. at least in germany, where the possibility that you live in a house that was built 200 years ago is not that small. Hell, i live in an appartment that is under monument protection it's that old.

[normal fable]

Old dishwashers are loud and washing machines are as well. Older..

[echo steeple]

and you usually play against 2-3 people. which allows for politics. and politics is fun

[wintry sluice]

like alliances, backstabbery and shenanigans?

[echo steeple]

yes

but backstabbing is uncommon. because if you are a backstabber, people tend to not make deals with you anymore. though if you are smart, you can make deals that hugely benefit you. i once made a deal with someone that they won't attack me until someone else was out and i will not touch their board until then. little did he know i didn't need to even go into combat to win the game.

[odd crow]

how to move notes freely up and down

in obsidian.md

[near hawk]

You should just be able to drag and drop them where you want

[normal fable]

I think I'm gonna play this weekend if my friends don't have plans Saturday.

[wintry sluice]

I think they are sorted alphabetically by default, but you can change that

[rapid merlin]

Hello

[echo steeple]

maybe one of them has a spare commander deck (i for sure usually do for anyone who needs one) and you can try out some more commander

anyway, gotta go now. happy hacking to y'all

[normal fable]

They do. I'll get a pre built tho. Gotta learn. 😁

[crude stump]

Idk the hate on pre builds

[normal fable]

I personally like pre-built decks. but customize them to my play style usually.

[strange kestrel]

who has bloons td 6

[shut hawk]

I do

[bitter quiver]

Man I used to play that a lot, even streamed it a bit which drew a unique crowd

[mossy river]

I became obsessed with that game for two weeks straight

[normal fable]

Is it really that good?

[mossy river]

no

[normal fable]

I used to stream PUBG, Fortnite and EFT.. and 7days..

[clear jackal]

ngl, I may go back and play Minecraft with Distant Horizons, Tectonic, and maybe something like FTB

[normal fable]

I like playing Minecraft solo.. don't know why.. just relaxing thing for me I guess.

[sonic dust]

hell divers

when

[clear jackal]

Distant Horizons just got a huge update iirc

[boreal scarab]

GMOD!

[clear jackal]

Never, because they use a super invasive Anti-cheat

[normal fable]

Wow.. it's been years since I played GMOD..

I should reinstall Portal and do some more speedrunning. lol

[wild rose]

I'll get to HD2 sometime soon. Still trying to finish FF7 Rebirth.

[simple valve]

HD2 so funnnn

[normal fable]

I missy my PS2. lol

[whole yew]

The only game I really miss from the old days is FFT

The OG PS1 version

[wintry sluice]

I liked buildcraft and all that industrial stuff back in the day

[normal fable]

Ghost Recon was a good game on PS2...

I never even had a PS1. Went from Atari 2600 to NES to PS2.. PC inbetween. lol

[night needle]

Hey anyone i need help.
On my ubuntu laptop i connected a second monitor but its resolution option is grayed out and i can't make it 1920x1080, anyone knows a fix for this?

[whole yew]

Sounds like a driver issue for the display.

[normal fable]

Probably a driver issue.

[night needle]

Ohh

[whole yew]

Your best bet is to figure out how to get the logs, and ask the ubuntu community.

[night needle]

Btw its showing "unknown display" too instead of its name

[whole yew]

Right

You should ask the Ubuntu community

[fluid ember]

What is the actual age for someone attending the CTF competition?

Is it an 18+

[night needle]

Hmm I'll try but it looks complex🥲

[whole yew]

Depends on the competition.

There are many competitions that are geared towards middle school and high school students

[fluid ember]

Is CTF just about hacking?

[whole yew]

Why would it be less complex to ask a cybersecurity community than one dedicated to the product you are actually using

[night needle]

I hv a ctf team and there are 3-4 players of age 15-17, they are better than us haha

[whole yew]

Depends on the CTF. Do you have a specific one in mind? You might try searching the internet for "CTF competition <subject> in <country>"

[night needle]

Bcz i think they have no active community like this one, I'll check tho

[fluid ember]

Because I was watching a video I saw children doing CTF

[sick lance]

Perhaps it was aimed at a school?