general

[sinful moon]

Not sure about other distros but yeah on Arch I just launch updog in the correct directory and I'm set

[dire crane]

Are you using Arch on a regular basis?

[sinful moon]

I have for 17 years, yes

Part of the reason my remote pentesting server is Arch, although maintianing postgresql for the sake of Metasploit is a pain in the butt

Major postgresql updates are a whole thing with database migration to the new version. I rarely store much in my Metasploit DBs so sometimes I just wipe it all away lol. This is mostly for my use with THM and HTB

[dire crane]

i have heard again and again that it is more cool as a "tinkering system" because it is already a hard number for regular use. but i also don't have 17 years of Linux experience lel

[sinful moon]

I like it because I can set things up exactly per my specifications and not an inch more, but yeah I'm a power user. I wouldn't recommend it for a majority of even Linux users by any means

also great package coverage of infosec concerns, stuff like seclists, updog above, and so much more are either in the repos or the AUR

[dire crane]

yes, there's nothing better if you want everything customized, but it's just super high-maintenance, isn't it?

[sinful moon]

Nah, besides me making problems for myself with metasploit it's pretty low maintance once you learn how things work

It's just easy to break if you don't know what you're doing is the actual complaint

[dire crane]

i see

[sinful moon]

Heck even on my pentesting server, I am specifically holding postgresql packages back until I'm ready to update them myself, due to knowing how much of a pain that is lol.

[tawny magnet]

[sinful moon]

and that's just postgresql things more than Arch things

[dire crane]

Maybe I'll give it another chance, because it's really sexy ^^

[sinful moon]

Modern archinstall script makes it pretty easy, and tbh when I started Arch it also had an a similar installer, but if you do learn, it's good to go full manual as intended. You learn so much low level Linux fundimetnials that it's eye opening

[grizzled wing]

did anyone see this, Kali Linux are vulnerable
https://www.theregister.com/2024/03/29/malicious_backdoor_xz/

[sinful moon]

Yes it's been talked about a good bit and why I checked in today specifically

[grizzled wing]

ok

[dire crane]

I think my last contact with Arch was 4 years ago, I don't even know if it existed back then.

[grizzled wing]

hi Elizabeth

[sinful moon]

Arch was patched out of caution, but the backdoor only targeted .deb and .rpm compiled packages

Heya veggies c:

[grizzled wing]

gotta spend time updating all of my VMs

[sinful moon]

Kinda ironic sinice Arch packages are .xz compressed lol

Keep in mind this really only impacts rolling release distros

And 5.6.0 was released in Jan (iirc) of this year, which contained the first bits of the backdoor

[grizzled wing]

ya, article says bleeding edge

[sinful moon]

but this individual has been contributing to open source projects since 2021

so investigations are ongoing

[grizzled wing]

insider being bad

[sinful moon]

There's some evidence of them negatively impacting the security of libarchive back in 2021, but that was just making a printf like a print basically. Been a minute since I checked in on the current research

[grizzled wing]

thats no fun

[sinful moon]

Good live blogging overview: https://boehs.org/node/everything-i-know-about-the-xz-backdoor

The initial discovery: https://www.openwall.com/lists/oss-security/2024/03/29/4

I do not envy the people checking over all this individual's commits to date since 2021 🙃

[dire crane]

fml 🙃

[grizzled wing]

too bad it doesnt spell bad or mal for foreshadowing

[sinful moon]

Yeah they built up trust enough to be a core contributor of xz

Live blog above spells it out well

We just have so few people who dedicate enough time to these projects, and not enough corporate interest to fund developers to work on a low key but very fundimental tech like xz compression

[blazing granite]

🥦

[grizzled wing]

https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27
also goes into details (i scanned the link with virustotal

🦖

[sinful moon]

lol not sure if that's for veggies, or "eat your broccoli" but I agree on both counts in this case c:

[grizzled wing]

haha

🦖 and 🥦

[blazing granite]

How are you? 🥦 long time no see

[grizzled wing]

im doing well, prepping for an interview, also wont have much time for my won 1 month voucher

how is Argentina?

[sinful moon]

Good luck on the interview!

[grizzled wing]

thanks

[blazing granite]

A mess 😂 not fun living here, but I need to be here

[grizzled wing]

Elizabeth, do you know the YouTube channel LGR ?

retro computers

[grizzled wing]

yea, i understand you;re there for a reason

[blazing granite]

yes, I bet I did something terrible in my previous life 😂

[wooden totem]

This time has to indicate what the speedrun record is lol, I dont think anyone reads the whole thing, does the tasks and answers in 18 minutes, casually

[grizzled wing]

how is the 🍷 ?

[blazing granite]

Still good, but expensive for somebody who lives here 😂

[grizzled wing]

that is surprising to me but i dont know wine

i know how to wine haha

[blazing granite]

That's the only wine I don't like the Linux wine 😂

[grizzled wing]

haha

sudo apt update wine

[blazing granite]

sudo apt install malbec

😂

[grizzled wing]

that is a type of wine, think i tried it 1x

[blazing granite]

Is the wine that Argentina is world-wide known for

[grizzled wing]

oh not world length known

🥁

[candid pagoda]

watched a movie

lost my mind

[wintry sluice]

ah, so that's why there are so many bottles of the stuff in the hitman vineyard map

[blazing granite]

I have no idea what are you talking about

[wintry sluice]

https://hitman.fandom.com/wiki/Mendoza

[blazing granite]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[blazing granite]

Too tired to read now, I guess it's a game or a film that's why I didn't know

[wintry sluice]

yh, its a game.

[blazing granite]

that explain I'm not a gamer, I only play Spider Solitaire and mahjongg 😂

[sharp citrus]

TryHackMe's Discord

Looking to invite people to the Discord server?

​

https://discord.com/invite/tryhackme

TryHackMe Socials · Mar 30, 2024, 3:39 AM

[visual pecan]

What was the command to look at discord ranks?

[sharp citrus]

Points Explained

Article Link

https://help.tryhackme.com/en/articles/6563910-points-explained

Mar 30, 2024, 3:41 AM

What are levels on TryHackMe?

Article Link

https://help.tryhackme.com/en/articles/6496044-what-are-levels-on-tryhackme

Mar 30, 2024, 3:44 AM

[fluid walrus]

hello?

[tawny magnet]

oh, he left

[karmic furnace]

This just makes me think of the simpsons

[blazing granite]

No ads please

[wintry sluice]

@shell nova

[wooden totem]

$300?? 🤑 🙌 300 cash money per week! Bouta be rich af fam, no cap no cap we talkin big buck with that paper yo 🙏

personal assistant lol, I think butlers for rich families don't get that much

[gray sonnet]

@naive violet or @mossy river

[wooden totem]

ngl i wanna dm now, im that bored

[midnight hazel]

Do koths not give points towards levles

[wooden totem]

nope

[wraith fjord]

Lmao same, just wanna know the scope of work and hours of work

[teal nexus]

https://tenor.com/view/sus-bro-is-sus-gif-5031868463492442198

[wooden totem]

among us gif in 2024?

thats rare

[teal nexus]

Its one of the first sus gifs that came up lol

[wooden totem]

if this was any other server you would be done, on the spot

[teal nexus]

Didn't know lol what servers ban gifs that aren't new?

[wooden totem]

Its a joke on the topic of trending = quality, not necessarily enforced anywhere but your reputation would take a big hit due to fact that outdated trending "memes" are only posted by kids

[tawny magnet]

How often do the levels refresh, approaching 0x4, and its not seeming to update on user profiles

[wooden totem]

i takes some time to update, you can also do it manually by verifying again

maybe there is also a bug with the updating, I had to manually verify again to update it because my user was stuck with 0x1 role for a week after I was leveled up

[wintry sluice]

pretty sure they are supposed to update once per day. though as betta points out, you can re-verify to force an update on yourself

[glossy portal]

nice

[rapid merlin]

[thorny walrus]

idk why people care about internet reputation so much 😭

[wooden totem]

3-4 hours (didn't mention 3-4 hours per what...week i guess?)
Also It didnt lead anywhere, said the work is to do shopping and documenting, then asked me for all my identification before continuing. The classic. I was hoping there was more info or whatever but nah, got straight to the point that he needs all my government info lol

[wooden totem]

Isn't that what we all are. Names with reputation

[thorny walrus]

I get if you're being a (insert word) online and ruining your rep within a community but why should someone care if they post an "outdated" meme?

Humour is subjective anyway

it's such a silly thing to think about

If you're an influencer with a decent following I'd understand for the brand image but the average person should not be invested in whether people think theyre funny or outdated on the internet

🤷‍♂️

(I'm saying this purely because I've seen so many people be invested in their online image when it's not that important)

[wooden totem]

I kinda said that out of the context of the outdated meme example. Of course posting that once wouldn't do much, even many times. It does change your reputation by just a bit though, different amount per person but every single action does effect it. How you are seen by other people

[noble shuttle]

hello i need help for openvpn error. Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

[thorny walrus]

I see

[sick lance]

#site-support please

[formal magnet]

Is there a channel here to work on CTFs with others? I’m working on the new Clocky room and have made progress but would love to collaborate somewhere

[sick lance]

Usually the channels of the rooms, but as clocky is just new, we don't allow hints for the first 72 hours

[formal magnet]

Oh got it, thanks!

[wraith fjord]

still a broad scope. What shopping and documenting? Do i buy cars? and can i ship them to my place? XD

[wooden totem]

didn't answer when I asked, just that it will be provided when I give him my info. So basically he doesn't have any info

low quality scams!

[rapid merlin]

morning there everyone

[jaunty prairie]

☕ ☕ morning Zero

[rapid merlin]

morning wiz

how are you all doing in this sunny saturday?

[jaunty prairie]

im good. waking and baking here

[rapid merlin]

that good

[sick lance]

Let's keep out the drug talk please.

[jaunty prairie]

sorry. im making hot cross buns 🙂

[wooden totem]

(He's baking bread)

[sick lance]

Mhm, I'm sure.

[mossy river]

PureGym asked my friend and I to leave 😟

All for a policy that doesn’t exist 😕

[sick lance]

Really, what policy?

[mossy river]

Apparently electric skateboards are not allowed.

But the policy does not say electric skateboards, it says E-scooters and bikes.

I have sent a very long message to their contact email confirming that this is correct

I travelled a whole hour, woke up at 6:30am only to get back on the bus to go home

[wintry sluice]

sounds like spirit vs letter of the policy

[sick lance]

They wouldn't let him bring it insise to atore?

[karmic furnace]

sounds like the store was being stupid.

[mossy river]

They said it wasn’t allowed and he couldn’t leave it outside because he didn’t have anything to lock it up

It is classed as an “electric transporter” under UK law which doesn’t fall under the E-Scooter category

[karmic furnace]

they literally wouldn't him carry it?

[mossy river]

You can’t leave it on the gym floor and they wouldn’t let him put it in the lockers

I’d like to make this aware that we have been going there for around 8 months

[wintry sluice]

have they let him store the skateboard in the past?

[mossy river]

Mhm

Nobody mentioned it

[wintry sluice]

that's kinda messed up

[mossy river]

Nearest gym to me other than PureGym is £40 a month with a 12 month contract

For students

[sick lance]

That's bad.

[umbral kiln]

i know where you live now

[mossy river]

🥶

I’m so scared aah!

[umbral kiln]

https://tenor.com/view/me-when-i-fucking-get-you-neko-atsume-me-when-me-when-i-get-you-mrtheyes-gif-4157721420697656658

you should be

[rapid merlin]

spooky

[sick lance]

Jabba, is that you with your MQ3?

[umbral kiln]

@mossy river beat this

[shell nova]

Nah

[mossy river]

Bet

[shell nova]

so, ffuf works pretty well on localhost >.<

[wide yarrow]

hi

Is having premium of this website Tryhackme is necessary

can any one help me regarding this i am an begineer and i want to learn

[mossy river]

No 🙂

[wide yarrow]

oh but most of it is not acess able without premium

[mossy river]

We don’t use that word here @potent grove

[wide yarrow]

@potent grove ?

[potent grove]

so sorry

[umbral kiln]

lmao

[potent grove]

yo bro

[wide yarrow]

yoo

[potent grove]

come to dm

[shell nova]

Most of the rooms are accessible without premium, but some of the rooms in a path require it.

[potent grove]

this lol how much req

[shell nova]

many of the challenges are free

[shell nova]

all of them.

[fluid ember]

What is going on....I have been hearing about XZ

[shell nova]

someone snuck a backdoor in binary test data

it seems

[crystal kayak]

hi ,everyone

[jaunty prairie]

hey Zoe

[potent grove]

[polar wraith]

why does mullvad assign me an ip with a subnet mask of 255.255.255.255?

why not something like 255.255.0.0 or 255.0.0.0

[naive violet]

Single IP, a /32

[polar wraith]

why not a host tho

[naive violet]

wat

[polar wraith]

shouldnt connecting to a host within their network also work? why assign a separate network

idk how to explain this

[shell nova]

They don't want you able to connect to others in the subnet

[polar wraith]

like why does mullvad have to assign a single ip for every user, why cant it assign an ip such as 10.136.3.32 for one user and 10.136.3.33 for another

[shell nova]

Makes sense that you get assigned a single ip

[polar wraith]

oh

[shell nova]

They probably do tbh

[naive violet]

They do I'm sure, but they assign it as a /32

[jaunty prairie]

Carrier Grade NAT

[naive violet]

I mean, kind of

It's not an official CGNAT range and it's just what VPN servers tend to do

[royal hawk]

guys if I pay for the monthly premium experience (14$) I can get the certificates ?

[naive violet]

Yes

[royal hawk]

all of them ?

[naive violet]

Except the AWS path

[royal hawk]

Okeyy thank you

[naive violet]

Just make sure you set your real name in your profile if you want that on the certificates

It will otherwise generate the certificates with your username and you can't regenerate them later

[polar wraith]

ah yes that makes sense

thanks hydra and james ;)

[royal hawk]

Thank you for the advice

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2109)

[shell nova]

Cheers

[fluid ember]

Can someone change it's name Incase

On the profile

[naive violet]

You can change your name in your profile yes

But once a certificate is generated, that's it. It will forever say what it said when it was generated. It will not change.

[crude stump]

https://tenor.com/view/cat-wsg-kitten-hi-funny-gif-23192190

[rapid merlin]

wsp

[boreal gull]

wassszuppppp

[chilly veldt]

Morning

[crisp mica]

hello when using rdp in a domain how do you go about it

[midnight grove]

Hello

I stayed at task 6 of the pyramid of pain. can someone help? I can't write the mozilla search engine used correctly in the answers.

[blazing granite]

Morning Bella

[rapid merlin]

Good afternoon yall

Making a html website costs much time damn

[gritty zephyr]

2 day on the job, need to be trained but the trainer is sick, been sitting here for an hour getting paid to sip coffee

Its gonna be another 20 min or so

[lament tendon]

It will get boring fast enough. ^_^

[gritty zephyr]

It already is

Lol

[lament tendon]

I like the idea of coffee tho.

Anyways.

What job did you land?

[gritty zephyr]

Go get one

[gritty zephyr]

Orderpicking at a distribution center for a big supermarket

[lament tendon]

Huh.

So you manage what stuff gets ordered?

[gritty zephyr]

Its temporary lol

[lament tendon]

I said "huh" because I don't really know what you do in that position. 😅

Job's a job.

[gritty zephyr]

Nah i just get the orders on the containers that they will put into trucks for transport

[lament tendon]

Oooohhhh.

Will you be forklift certified?

[gritty zephyr]

No but i do drive in a forklift kinda thing

[lament tendon]

Unfortunate, that would have been very memeable.

[gritty zephyr]

These things

[gritty zephyr]

Hagahahaha

[lament tendon]

Oh, a tfilkrof.

[gritty zephyr]

German man, smh

[lament tendon]

It is definitely not German. xD

[gritty zephyr]

I honestly dont know what theyre called in dutch

[lament tendon]

Read it again.

[gritty zephyr]

Brain aint braining

[lament tendon]

Read it backwards.

[gritty zephyr]

.... Goddamnit

[lament tendon]

xD

eNCrypTiOn

[gritty zephyr]

Yeah but they dont go that high, just to get the containers of the ground

Like a normal pumpenwagen 🙂

If google translate is corrext lol

[lament tendon]

Pumpenwagen translates to "Truck with a pump".

[gritty zephyr]

These 10 more minutes are killing me lmao

Pompfwagen?

Idfk

XD

[lament tendon]

Mmhmm, I get that feeling.
Pretty glad I got two other people my age at the office. xD

[lament tendon]

While that does sound very funny, "Pompf" is not a waord. ;)

[gritty zephyr]

These things, a bit longer and electric

They go as high as that

[gritty zephyr]

It is to me, funny germans

[lament tendon]

Palettenheber.

[gritty zephyr]

Yeah all these people here are polish lol

[gritty zephyr]

Ahh no that makes sense

Palette lifter

[lament tendon]

Mmhmm, if in doubt, just append german words together to describe something and it will probably be correct. Whaha.

[gritty zephyr]

Hahahaha

[rapid merlin]

Hi

[amber sigil]

hi

is premium compulsory to complete rooms here?

or exception

🤔

[lament tendon]

Exception.

You will need it to 100% most paths tho.

[amber sigil]

true

[ripe crater]

hi guys

is there anyone here good with CI/CD stuff?

#general

[amber sigil]

kinda

[ripe crater]

can I mention you where I posted a question in another channel?

[amber sigil]

rn m grinding

later

[ripe crater]

ok ty, feel free to answer when you can

[unique stag]

www

how much i need time to learn hacking guys ?

[umbral kiln]

a lot

hth

[naive violet]

You never stop learning

So... infinite time?

[wintry sluice]

weeks/months to learn the principles
a lifetime to master

[unique stag]

oh

nic

e

[crude stump]

Over the years do you guys start to remember a lot of stuff your taught. Because I will do a room and remember what stuff means but then the next day, I just forgot

[near hawk]

I usually alway refer back to my notes, if I ever forget something

or just search it up for clarification

[quaint meadow]

Which of the following information about a file is NOT stored by default using extended attributes in the context of the macOS operating system?

a. The path of the file

b. The source from where it was downloaded

c. If it is a screenshot taken on that device

d. If it is protected by System Integrity Protection
does anyone know the answer?

[near hawk]

Is this for a TryHackMe room?

[crude stump]

Like if your talking to someone and there super technical and has much more experience then you, what do you do when it’s one of the most simple things but you forgot what it men’t

[umbral kiln]

depends what, rooms/boxes/challenges are often forgettable but what i still remember is techniques/tools related to whatever the thing revolved around

[worn thorn]

I haven't touched kali in a months Guess it's note reading time...

[shut hawk]

make sure you dont have the backdoored version

[worn thorn]

damn yea that is a thing

no internet for you vm

[wintry sluice]

just explain that you are still kinda new to all this, or invoke the right to have the occasional brain-fart

[bitter quiver]

WHen I was young we had a walkie like that I

I'd sit on it and and ride it

By young I mean an idiotic 20 year old at a warehouse

[shut hawk]

nothing wrong with admitting you can't remember something

[crude stump]

Yeah you right

[half girder]

Flurförderfahrzeug 😉

[worn thorn]

Stabelgabler

[bitter quiver]

Memorization of information is far less useful than functional wisdom of how to apply information when it is present. You can always google something, but not everyone can implement the info found.

[pearl lagoon]

hi

[bitter quiver]

Howdy

[worn thorn]

greetings

[bitter quiver]

What is your profile pic. I thought it was eggs but now I'm confused

[pearl lagoon]

hello MrVedrfolnia

[pearl lagoon]

coconut

[bitter quiver]

Ah

[pearl lagoon]

its just yellow

[pearl lagoon]

what does your name mean btw

[crude stump]

That’s the wisest thing I heard

[worn thorn]

It's from norse mythology with the last letter changed so I can use it everywhere

[pearl lagoon]

whats the last letter

[worn thorn]

Vedrfolnir

[pearl lagoon]

ooohh

[wintry sluice]

monster? norse god? jotun?

[bitter quiver]

Told my wife I want a Nordic style funeral when I bite the dust

[wintry sluice]

you want her to throw herself on your funeral pyre? oof

[bitter quiver]

She gets angry when I talk about death, but I think the fact it is the only thing guaranteed to us we should think upon it for it will come.

[bitter quiver]

Nah, just the push me out into a lake and set me ablaze part

[pearl lagoon]

ur married?

[bitter quiver]

My buddy who is the mountain man who taught me how to throw a tomahawk and shoot a bow would gladly do light it from afar

[bitter quiver]

Yes.

[worn thorn]

Hawk on top of Yggdrasil

[pearl lagoon]

[bitter quiver]

I took an arrow to the knee

[bitter quiver]

Pretty cool imagery to pick from

[pearl lagoon]

then you must be old lol

[worn thorn]

yea. I wanted something unique and well I love the norse mythology.

[bitter quiver]

I like ravens thanks to Norse mythology

Plus Ravens/Crows are so brilliant it's scary

[pearl lagoon]

the only creature I know is the lynel lol

[bitter quiver]

Depends. Universally I've yet to exist, but by our standard measurements I'm almost 50% of the way through my journey in this corporeal vessel

[pearl lagoon]

ur 40?

[bitter quiver]

Almost. 3 shy

[blazing granite]

judging for your answer you must be 12 or 13 😂

[pearl lagoon]

[pearl lagoon]

Im 78

[blazing granite]

I like the poem the raven, from Edgard Alan Poe 🙂

[bitter quiver]

I enhoy the Tell-Tale Heart quite a bit

[blazing granite]

Congrats grampa on getting on with technology 😂

[pearl lagoon]

yeah I like this hacking stuff

[worn thorn]

Also Valheim was a gift for me and my mates to play. We even sailed to the edge of the world which funnily enough is a disk

[bitter quiver]

No one hacks here

[tawny magnet]

I hack trees

[pearl lagoon]

lol

[pearl lagoon]

I do https://hackertyper.net/

I hacked the us government

[blazing granite]

I'm a big fan of Poe, I just mention the raven because it was a match for the topic 🙂

[bitter quiver]

Man, Discworld series by Sir Terry Pratchett is amazing. If you haven't watched The Hogfather, do so. Death in it is one of my favorite characters ever dreamt.

I use his quote anytime someone argues right and wrong on something lol

[worn thorn]

will do. I ran out of rewatch movies a long time ago.

[blazing granite]

It's amazing since it wasn't easy to get your hands on computer when you were younger, unless you work with mainframes 🙂

[naive violet]

@pearl lagoon We're not a huge fan of trolling here by the way

[bitter quiver]

Growing up MS-DOS was safe from me breaking as I only knew how to enter the commands my mom/dad wrote down for games. But boy did I obliterate our Windows 95/98 machines learning the ins and outs of computers lol

I started playing the Steam game Comet 64 because it's basically solving problems on a screen that looks like the old Commodore 64 style, and you essentially use Basic programming

Thanks to 8-Bit Guy for getting me into retro PCs in 2020 when I was locked inside my house lol

[worn thorn]

Retro PCs do be fancy.

[blazing granite]

My first computer was a TI99 it was in my dad's business, my first PC at home was a XT 8086 with a CPU NEC V20

[jaunty prairie]

ah man. I remember how much trouble I was in the first time I messed up the family computer. I don't recall what I did, but i followed some guys advice in IRC for another problem lol.

[bitter quiver]

IRC days, jeeeeeze

Anyone remembering hitting up a cute girl from school on AIM?

Oh lord

[worn thorn]

damn you're ancient

[jaunty prairie]

back when I would get my free copy of Amarican online in my cereal box

[bitter quiver]

I'm not ancient, I'm vintage

[blazing granite]

Do you remember the door sound when somebody signed in? 😂

[bitter quiver]

I'm worth more now

[worn thorn]

that sounds better

aged like good wine

[bitter quiver]

You mean the razor discs me and my brother would stacck up and run around tossing at eachother like ninja stars

[jaunty prairie]

the best sounds came from ICQ

[tribal ice]

how is everyone doing?

good evening

[jaunty prairie]

HAHAHA. imagine the malware these days from a box of frosted flakes

[worn thorn]

evening

[bitter quiver]

I have to say your profile pic just makes me think of Perry the Platypus but with a nordic goose voice doing Viking shenanigans

[blazing granite]

I love ICQ it was developed by a couple of young Israelies then they sold the soft to AOL, they were millionaires by the time they hit 19 😂

[jaunty prairie]

the wild days of the internet. Look what Parker did with Napster

[worn thorn]

hehe that fits too well.

also you're one of the few people to recognise it as a goose. Most assume I'm a duck.

[gritty zephyr]

Sounds like fun times

[bitter quiver]

Ducks are chill, that thing has glowing red eyes and a knife. If I've ever seen a goose, that description fits a goose

At one of my jobs geese would come up to our tables by the pond I used to meditate at. One time a goose bit my weenus(elbow skin)

[jaunty prairie]

here in canada the gooses are chill as can be...its like as soon as they head to the US they become a holes

[bitter quiver]

After that, I ensured geese kept their distance lol

I'll be jogging and go through their flock and they leave me alone now around the pond

Well, after our first 1 or 2 encounters

[worn thorn]

you're a marked person now.

[bitter quiver]

I don't fear anything with a long neck that is light enough to be turned into a nunchuck against it's peers

Geese are jerks because people panic around em lol

I hiss back when they hiss

[jaunty prairie]

I just pictured Michelangelo from TMNT with geese

[bitter quiver]

I'm neither large nor muscular

It's just I am really not afraid of a goose, and I have no interest in them. So they kind of ignore me once they realize any attempt to bully is counter productive lol

[worn thorn]

I never really had an encounter with a goose before. Swans on the other hand... They are just bigger geese in disguise

[bitter quiver]

Never met a swan

But I love ducks

[worn thorn]

ducks are great

[bitter quiver]

I like to feed them

Ducks are swell

And they remember you

And can be affectionate

[pearl lagoon]

and?

[bitter quiver]

oof

[tribal ice]

I had pet ducklings myself. cute.

[worn thorn]

and here we see the last minutes of the cononut man

[torpid notch]

hello anyone help me

[bitter quiver]

Whats up bud

[mossy river]

That's a moderators way of gently informing you that your behaviour may be inappropriate 🙂

[jaunty prairie]

Its not worth being a jerk. just dont

[pearl lagoon]

oh ok

[bitter quiver]

I swear they also poop somewhere else than all over the sidewalk.

[pearl lagoon]

ok

sorry mod

[bitter quiver]

Geese I feel choose to purposely poop in your way

[blazing granite]

me neither, but I ate foi gras and pâté de foie a few times 😂

[worn thorn]

geese will remember that

[naive violet]

@tribal ice Who pooped in your cereal this morning? Chill.

[wintry sluice]

duck is tasty. goose too.

[bitter quiver]

Never had.

[torpid notch]

hello anyone

help me

[mossy river]

Shredded duck is so good but I feel so bad for eating it 😭

[jaunty prairie]

whats up @torpid notch

[torpid notch]

what is man linux

[worn thorn]

[jaunty prairie]

man is a command in linux to see the manual page of a binary

[wintry sluice]

never understood the appeal of foi gras.
plus, not a fan of how they produce it.

[blazing granite]

duck a l'orange was a popular dish, I remember my mother making it

[torpid notch]

how do i see it

[jaunty prairie]

man ls
man cat
man <cmd>

[bitter quiver]

Yeah no, I dislike the concept of foi gras

[pearl lagoon]

the man page is like the guide lo a command

[bitter quiver]

I'll eat almost anything...but don't be a literal arsehole to it to produce it please

[pearl lagoon]

man ls

man history

man cat

[torpid notch]

ok

only in linux right

?

[pearl lagoon]

yes

[mossy river]

Unix

[torpid notch]

ok

[blazing granite]

it's not even in my top 50 of favourite food, it's not a food I'd buy or think to eat, but I had it a few times in other people's homes

[pearl lagoon]

I eat ducks

[pearl lagoon]

👄 🦆

[naive violet]

Precisely, now please bear this in mind.

[pearl lagoon]

ok

[blazing granite]

Duck it's not an easy meat to cook, it's very unforgiving, can go dry in a sec, and dry duck is as good as cardboard

[pearl lagoon]

dude had beef with the duck community

[tribal ice]

i raised my male duckling just to make duck curry. yum.

with tatos

[wintry sluice]

beef avec duck? an unconventional pairing, but I'll allow

[tribal ice]

avec... interesting choice of word

[pearl lagoon]

lol ur right

[wintry sluice]

french for 'with'.
cos fancy food talk requires french

[pearl lagoon]

bonjuor

[wintry sluice]

https://tenor.com/view/gollum-whats-taters-precious-lord-of-the-rings-gif-16013459

[pearl lagoon]

comment vas-tu ?

[naive violet]

@pearl lagoon Please keep it in English only here, this is in the #rules

[pearl lagoon]

ok

I actualy dont know french

[rapid merlin]

I been learning about osi for whole 3 hours but now I finally understand

[worn thorn]

also layer 8?

[tawny magnet]

all my homies hate layer 8

(they drank the coffee)

[clever shard]

isn't the osi model based on 7 layers?

[worn thorn]

it is.

[clever shard]

ah I didn't get the joke

xD

[worn thorn]

[sick lance]

Layer 8 is joked to be the user layer.

[wintry sluice]

layer 9 will be unveiled in 5 hrs

[tawny magnet]

would that make it a soul? oh no..

[royal hawk]

guys how to hide activity of tryhackme in my profile ?

[mystic vale]

Define encapsulation and its significance in the OSI model. 🤡

[sick lance]

Hide activity?

[royal hawk]

yes we can't ?

Yearly activity (in our profile)

[sick lance]

I don't think you can hide it, why do you want to?

[royal hawk]

just by curiosity xd

[rapid merlin]

its hard to keep all that info in my real memory but maybe its normal then you start learning something I do keep writing notes tho

[quaint sand]

Anyone know any academic paper for cyrptography?

[clever shard]

https://www.instagram.com/p/C4vmmJMt0fw/

letsdefend

You can be directed to THM when you’re searching for a recipe 🥴

#cybersecurity #letsdefend #cybersecuritytraining #fyp

Likes

221

Instagram

is this true?

[mystic vale]

chill bro just askin' for fun. I know when you start learning new thing it's not easy to keep remember at once

[rapid merlin]

no I'm just asking if anyone else also kept forgetting at start in thm but now remembers

[mystic vale]

it happens to all humans bro XD

[rapid merlin]

wait I'm human?

[mystic vale]

if not then you are a robot XD XD

[naive violet]

No, someone forgot that you can buy a domain and make it redirect wherever you want.

[normal fable]

Morning.

[naive violet]

I could buy malisio.com and make it redirect to walmart, that wouldn't mean walmart bought it

[mystic vale]

no you are not a human. you are a devin Xd XD Xd

[normal fable]

Afternoon people on the other side. 😁

[rapid merlin]

bruh everyone keeps talking about devin

[mystic vale]

yaa 😂

[rapid merlin]

my whole youtube is filled with "DEVIN WILL STEAL OUR JOBS 😭 STOP AI"

[mystic vale]

fuck this. it will never

but yaa a person with a well knowledge of AI (like how to use it etc...) can XD

[naive violet]

Ai is just the current buzzword, like blockchain was before it

[mystic vale]

hmm

[naive violet]

Blockchain mostly went away, the same will happen

[clever shard]

yeah I see thnks

[rapid merlin]

ai is using the logic and creativity of a human

[naive violet]

Lacking, not using

[sick lance]

Letsdefend are taking this on a whole new level

[wintry sluice]

its debatable how to what extent humans possess those qualities any way

[naive violet]

Learn to use AI and ML for what it's good for

[mystic vale]

child tries hard as it can but never can become a god brooo

[naive violet]

Pattern recognition

[grizzled wing]

NLP

[naive violet]

It's an industry full of trolls

[mystic vale]

we are the creatorss

[wintry sluice]

whois gives no useful info on letsdefend.com

could be anyone

could even be letsdefend themselves

[naive violet]

Easily could be. Causes drama, causes publicity

[outer rivet]

@rapid merlin

[candid pagoda]

woah

[outer rivet]

https://tenor.com/view/monkey-funee-monkee-gif-18829253

[candid pagoda]

wheres my new roles

..

[mystic vale]

where's my role XD

[wintry sluice]

and everyone loves david standing up to goliath

[tawny magnet]

need to /verify

[candid pagoda]

it hasnt updated yet

[mystic vale]

I see

[wintry sluice]

just use verify again

[candid pagoda]

sss

not yet

i did

[wild rose]

The website is having some issues on updating roles, but the team is working on it.

[candid pagoda]

ohhh

[rapid merlin]

yes?

[rapid merlin]

hi alex

[mystic vale]

Hii

[rapid merlin]

nice to see here

[mystic vale]

thanks

[rapid merlin]

👍🏻

[candid pagoda]

interesting🤔

[mossy river]

It's a bug, we are investigating 🙂

[mystic vale]

what type of game you are playing btw? I mean if you can explain. I like to play

[rapid merlin]

Hehehe i have to make a webpage for school

And my teacher is getting rickrolled

[candid pagoda]

good luck

[candid pagoda]

put that as admin page lol

[rapid merlin]

My teacher is def falling for that

[rapid merlin]

Thats even better

[candid pagoda]

lmao click for free money got me rolling

[grizzled wing]

just read that there is Snoopgod Linux for pentesting

[candid pagoda]

new room?

[rapid merlin]

Yeah it seems good

[rapid merlin]

it's RPC

[grizzled wing]

no, a distro

https://news.itsfoss.com/snoopgod-linux/

[rapid merlin]

Yea I know about it

what about it

[grizzled wing]

just it is news to me, that's all,

something to do while i update my VMs

[rapid merlin]

I'll use it on HyperV

[mystic vale]

remote procedure call???

[rapid merlin]

Skidy, how are you?

[rapid merlin]

Rich presences

[tribal ice]

108 new messages since 6:50 PM

[candid pagoda]

what time is it now

[tribal ice]

7:40 PM

depends on where ur living

[rapid merlin]

you are fucking legened dude 🫡

Nice PFP EVER

is this true?

https://hackaday.com/2024/03/29/security-alert-potential-ssh-backdoor-via-liblzma/

Bruh

[candid pagoda]

chat is this real

[grim sparrow]

There are no URLs in that message.

[tribal ice]

CVE-2024-3094

[mystic vale]

played well XD

[rapid merlin]

well I hate it

[sick lance]

Yes

[plush mesa]

Anyone know which rooms the Crackme files belong to? Searching for crackmes on THM results in nothing. Please forgive me for that awful screenshot

They are in the attackbox

[rapid merlin]

LeePha, seems like I heard that name

[rapid merlin]

these are patched or not?

[plush mesa]

i dont know any jason todd

[sick lance]

Right now the patch is downgrade.

[rapid merlin]

I have too many names : )

Jasons real name is John Doe

hehehe

[plush mesa]

aha

[rapid merlin]

don't tell 😎

[plush mesa]

now youre making me live in paranoia

[rapid merlin]

you have the best name

xd thankyou

[rapid merlin]

well, I change my name too much

Jason are you Batman?

yea

[tawny magnet]

[rapid merlin]

Btw what is that "game" you are playing?

Some ctf or?

[candid pagoda]

[rapid merlin]

me?

it's our own server

@pearl heron this is my bud

the owner

Ah interesting

Really nice website btw

[sick lance]

https://tryhackme.com/r/room/reverseengineering

[rapid merlin]

Thanks ❤️

[twin ridge]

Gave +1 Rep to @icy epoch (current: #261 - 19)

[sick lance]

It's 1900+ days old, so there is a strong chance it may be private now.

[rapid merlin]

is pentest007 room is private?

[sick lance]

Nothing on search, so it looks like it.

[rapid merlin]

Yup the room you linked is

[plush mesa]

Thanks :) Yeah it sadly is private now

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2111)

[sick lance]

I wonder if it still pops up if you try the CTF builder.. 🤔

[rapid merlin]

after 2000days room goes private?

[sick lance]

Depends on the room.

[vital snow]

[rapid merlin]

✵

[plush mesa]

Sadly there isn't that many reversing/crackme rooms on THM

[naive violet]

No, just new content gets made that might replace it

[sick lance]

Yeah.

The crackme.zip shows up when you create a CTF builder.

[rapid merlin]

he is working on a discord bot and site

[sick lance]

Unsure if THM would like me to share the password.

[rapid merlin]

help full

[plush mesa]

Dont think i've got access to the CTF builder

[sick lance]

Nah, it's part of the business plan.

[plush mesa]

Oh well it's ok, still got some other rooms I can do. Was just curious because I saw them in the attackbox but not on the site

[rapid merlin]

@rapid merlin btw if you like to, try BlueDucky

[candid pagoda]

ls

[rapid merlin]

Mhh seems nice

But i have no android device

[rapid merlin]

Pi3 or 4?

[sick lance]

Discord: ls: command not found.

[rapid merlin]

-rbash:

[candid pagoda]

i legit thought i was in attackbox terminal

[rapid merlin]

To me that looks very different

[sick lance]

Good job it wasn't a password.

[rapid merlin]

Who fills his password in the attackbox? xd

[candid pagoda]

could happen

[sick lance]

Password could be for anything, ssh, smb, ftp.

[rapid merlin]

Yeah THM related passwords

[sick lance]

Still a password.

[rapid merlin]

True

[candid pagoda]

👀

nvm

once my friend accidently sent his SIEM pwd in teams chat

i saved it

[rapid merlin]

wis don't post flag here

[candid pagoda]

actually

[wintry sluice]

this is also not the answer box, @candid pagoda

[candid pagoda]

yeh

[wintry sluice]

they didn't. that clearly wasn't a flag

[candid pagoda]

could be tho

[rapid merlin]

well lack of humor not, my problem

[candid pagoda]

chill boys

we hackers calm innit

but im not a hacker

https://tenor.com/view/family-guy-woah-wow-omg-no-way-gif-11795962

[rapid merlin]

So he changed it now right??

I don't know what a SQLi i s

[candid pagoda]

no its still working lmao

[rapid merlin]

https://tenor.com/view/eww-meme-eww-gif-eww-brother-eww-eww-brother-gif-4303100356772739930

[sick lance]

It's a company.

[rapid merlin]

how can I get a job, I'm Prisma user

[sick lance]

Normally to get a job people apply.

[rapid merlin]

Imam got famous

[sick lance]

However if we're here to troll...

[rapid merlin]

: )

🙂

[candid pagoda]

SQL intruder

[wintry sluice]

💉

[candid pagoda]

SQL interpreter

[candid pagoda]

SQL syringe

[rapid merlin]

https://tenor.com/bjIwq.gif

Tell me you use burp without telling my u use burp

[candid pagoda]

i intercept

[rapid merlin]

what is intruder?

[wintry sluice]

nothing wrong with using burp

[rapid merlin]

i didnt say that

[wintry sluice]

that guy behind you? that's an intruder

(made you look)

[rapid merlin]

https://tenor.com/bipZp.gif

[rapid merlin]

I never looked

[candid pagoda]

https://tenor.com/view/give-me-my-roles-back-reddit-chungus-reddit-wholesome-reddit-memes-gif-22499136

[wintry sluice]

https://tenor.com/view/willy-wonka-and-the-chocolate-factory-gene-wilder-nothing-to-lose-good-day-you-lose-gif-3480625

[candid pagoda]

https://tenor.com/view/stop-moderator-discord-mod-angry-hero-gif-13188802967821124136

[sick lance]

Let's not spam gif's in chat. 🙂

[wintry sluice]

time to get out the pngs

[candid pagoda]

rm all

clear

done🫡

[rapid merlin]

nice

[brisk tree]

Think my keyboard is broken ahaha

[sick lance]

That's the only keys you're allowed to use.

[crude stump]

That’s the new design

[brisk tree]

It wasn’t like rhay before 😂

That

[sick lance]

Excuse me?

[plush mesa]

hes referring to her using edge

[sick lance]

Probably a nicer way to ask, Not that it matters if she is, or not

[rapid merlin]

I think I have talked to you before

I changed my name tho

[candid pagoda]

how it sounds when u type

[sick lance]

If you're going to be rude to users, you'll lose the ability to speak in here.

[candid pagoda]

oka

okay

[paper osprey]

hello im new in the server and i need help

[crude stump]

#room-help

[near hawk]

What you need help with

[wintry sluice]

hello, new to the server

[crude stump]

Or here

[grim sparrow]

:mute: cawashaki#0 has been muted.

[brisk tree]

This one sounds like a typewriter 😂

[rapid merlin]

Hi Mad Scottish Burd

[wintry sluice]

I just got a new one that looks a bit like that (slightly different keys)
blackwidow v3

[brisk tree]

I hate edge it just defaults that for a google meets call and can’t be bothered to change it

I use Firefox

[wintry sluice]

do love the sound of mechanical switches

[sick lance]

How's that internship?

[brisk tree]

It can get annoying ahaha

[brisk tree]

Good 40 odd people were threatened to be kicked out cause they didn’t submit most of the work

[sick lance]

😂

how lazy.

[boreal scarab]

https://tenor.com/view/fox-hi-wave-knock-hello-gif-25896482

[paper osprey]

so my other discord account was logged in my phone but i changed phone and with that i lose the codes of google authenticator i tryed to send an email to discord and they couldnt help me but i have acess to the email that the account has

[sick lance]

As I said in room help, Discord won't do much if you don't have your codes.

[plush mesa]

dont got your recovery codes either?

[paper osprey]

when i installed the google authenticator in my other phone nothing was saved

[plush mesa]

Do you still have your other phone

[paper osprey]

yes

[plush mesa]

You can export all yoru codes

[paper osprey]

ok i gonna try

[rare shore]

good

[naive violet]

Works quite well but there's some bugs

[plush mesa]

go to the authenticator and then top left transfer account

[brisk tree]

hi

[boreal scarab]

[gray sonnet]

https://tenor.com/view/bear-hello-gif-15520803452060354187

[paper osprey]

ok

[grim sparrow]

:hammer: cawashaki#0 has been banned.

[wild rose]

https://tenor.com/view/hi-babybeans-babybeansdesigns-cat-hi-cat-hello-gif-11694844958654797346

[wild rose]

man I slept wrong and now my neck is killing me.

[brisk tree]

how are you

[sick lance]

https://social.hackerspace.pl/@q3k/112184695043115759

[boreal scarab]

Pretty good, little tired and thinking bout getting some Chai tea from a coffee shop.

Also my EFF merch is almost here

@brisk tree ^

[candid pagoda]

oo

[normal fable]

There's something wrong with me.. I'm hungry before noon..

[brisk tree]

aww nice. is Chai nice never had it

[normal fable]

Chai latte is good.

[brisk tree]

i once asked for a spanish latte got a matcha and was sad cause it tasted like i was drinking grass

[rare shore]

[candid pagoda]

is that tryhackme logo

[sick lance]

Yeah.

[fast inlet]

Did the website UI change?

[sick lance]

Also yes.

[fast inlet]

dark mode?

[sick lance]

https://tryhackme.com/r/resources/blog/tryhackme-improvements

soon™️

[scenic bobcat]

ohh cool

[normal fable]

Dark mode!

Soon..ish. lol

[brisk tree]

dark mode is the best mode

i get blinded with every other mode

[fast inlet]

https://tenor.com/view/soon-cat-peeking-gif-8420673

[normal fable]

I like to call it the "non eye hurty mode"

[fast inlet]

some people still like to suffer and use discord in light mode

crazy

[normal fable]

Funny that the bright sun doesn't hurt my eyes.. but light mode does..

[boreal scarab]

You've never had Chai? 👀

[brisk tree]

no ahaahahaahhahaah

[fast inlet]

bruh

https://tenor.com/view/reaction-my-eyes-cant-unsee-burn-gif-7225082

[brisk tree]

whyyyyyyyyyyyyyyyyyyyyyyyyyyy

[wild rose]

and Scrubz has his brightness up to 110%

[shut hawk]

> enable
> take ss
> disable

[normal fable]

Ow

[candid pagoda]

light mode

[sick lance]

You're all welcome.

I use it as a desk light 🙂

[candid pagoda]

[rapid merlin]

I do that for real

[proven quartz]

That's horrific! I'll have to switch channels a while til that goes

[shut hawk]

Quick, send GIFs to move it on!

https://tenor.com/view/ok-shades-on-gif-20056963

[sick lance]

I deleted them.

[plush mesa]

https://tenor.com/view/kanye-west-stare-staring-funny-gif-13590085

[wild rose]

https://tenor.com/view/patterns-swirl-trippy-gif-11416957

[rapid merlin]

woaaa

[scenic bobcat]

They say, for programming, light mode attracts bugs.. so wouldnt you want to have light mode for cybersec so you can exploit the bugs it attracts?

[normal fable]

Scribz gonna /b us all for gif spam. 😂

[candid pagoda]

good idea

[gray sonnet]

[rapid merlin]

https://tenor.com/view/thats-what-smart-people-do-creepy-jason-ink-master-s14e3-they-know-what-theyre-doing-gif-26755504

[hot cairn]

@shut hawk 👀

[shut hawk]

hii how's it going

[hot cairn]

Vibin in KORD bored af

U?

Flying my least favourite airline of united today

[normal fable]

Not spirit?

[hot cairn]

Never taken spirit.

Can’t be worse than RYR though

[normal fable]

I hear it's horrible

[hot cairn]

For full service* UA is my least favourite lol

[whole yew]

Spirit is absolutely the worst I've flown within the US

worse than frontier

[hot cairn]

Wb Southwest ooc?

I keep seeing them everywhere

[wild rose]

My company uses Southwest.

[normal fable]

American was pretty bad.

[whole yew]

southwest is way better spirit and frontier

[hot cairn]

They don’t fly to Canada though sadly

[whole yew]

american is actually upper-middle of the pack of airlines

[hot cairn]

Air Canada is my personal fav lol

[whole yew]

american is comparable to united

[hot cairn]

Though I also have status with AC so

[normal fable]

Delta is what I usually fly. I hear Alaskan is pretty good too.

[brisk tree]

as long as they dont use boeing

[hot cairn]

I was on a 737 max this morning

[hot cairn]

Delta fucked over their FF’s

Tons going to Alaska

[brisk tree]

i dont trust them after a past pilot tried to expose them then died 6 days later

[normal fable]

I haven't flown since DC.

[hot cairn]

I personally don’t worry that much tbh

Cars are more dangerous

[brisk tree]

i worry too much

[hot cairn]

Just don’t make the news

When planes doing minor things make news

[hot cairn]

Makes sense

[shut hawk]

Not to bad, just broken up for the holidays and working on a fun security project, finding some vulns

[hot cairn]

‘Twas down on a farm in Kansas lol

[shut hawk]

How was the hour connector flight?

[hot cairn]

Decent, 737 on UA

[brisk tree]

where i live they drive like maniacs and under take and go from the last lane of a motorway and fly through 4 lanes to get to their exit

[hot cairn]

got a E175 coming up here, UA aswell

[wild rose]

Rip boats, my friend who works at the port of baltimore, might have to find another job until the port is reopened.

[normal fable]

Oh. My lady sent me a vid of a semi hanging off the second street bridge in Louisville..

[shut hawk]

Ah boeing, they're going through a lot lmao

[normal fable]

Neighbor works at Boeing..

[hot cairn]

Yeahhhhhh, I personally don’t mind flying them still

[brisk tree]

id rather not take the risk

[wild rose]

Boeing's CEO is retiring along with some of the board.

[shut hawk]

So long as it isn't the max

[brisk tree]

since they are the ones whi have crashed the most

[hot cairn]

Honestly anything but the max is fine

And even the max isn’t that bad

[shut hawk]

Absolute plane wreck

[normal fable]

It's just poor maintenance iirc.

[hot cairn]

There’s also way more 737’s in service then most other things

Southwest is all 737

[brisk tree]

whenever im going on a plane all i see online are plane crashes

[whole yew]

which lousiville? there's something like a half-dozen in the US alone

[normal fable]

KY

[hot cairn]

Plane crashes make news, car crashes don’t 🙂

[normal fable]

WDRB did a story on it.

[hot cairn]

Your generally fine on any plane these days

Unless maybe Aeroflot

[shut hawk]

The only troubles I have flying is with the leg room ☹️

[brisk tree]

recently im on either wizz or etihad

[whole yew]

didn't they just finish a giant maintenance/repair project on that bridge?

[hot cairn]

It’s gotten so much worse these days

[normal fable]

Takeoff and landing are the two most dangerous parts of flying.

[shut hawk]

Gotta cram as many people on ig

[brisk tree]

i once went for flying lessons was fun

[boreal scarab]

@blazing granite https://youtube.com/shorts/j_o71ePj62Y?si=00lcAKxD7R6p7i4p

[wintry sluice]

yeah, classic problem of the news.
they never bother to report all the planes that don't crash.

[normal fable]

I'm not sure but they reopened after inspection.

[hot cairn]

It’s still nice on the US regionals due to the contracts they have in place

That cap passengers

[shut hawk]

ahh nice

[candid pagoda]

wsg chat

[hot cairn]

It’s not great, but better lol

[woven shoal]

Hello there!

Anyone doing clocky ?

[hot cairn]

Scary = clicks = money

[simple valve]

#1223346371550117898

[steep hare]

hii

im new to discord

where do i ask if i want general help related to exploiting a cve

[wintry sluice]

is it for a thm room?

[steep hare]

im using the code that thm room uses but trying to exploit it on on my own virtual machines

does that make sense ahah?

[simple valve]

What exploit

and what room

[steep hare]

CVE-2022-26923

https://tryhackme.com/r/room/cve202226923

this but i want to exploit it using a windows machine and kali linux!

i appreciate any help i am pretty new to this stuff!

[lone thistle]

well the windows machine needs to be a windows server running active directory & ad cs

and if you recently installed it, you'll likely find that it's been patched by windows updates

[scenic bobcat]

Not every machine is vulnerable to it, are you sure your vm that you're testing it on is vulnerable?

[blazing granite]

the kind of wine I like you can't make it into a fountain 🙂

[steep hare]

yes the vm i am using is windows 10

[naive violet]

If it reassures you, you're more likely to die in a car accident on your way to the airport

[steep hare]

is that okay?

im sorry im really new to this stuff

[wintry sluice]

the kind that is not an emulator?

[lone thistle]

windows 10 won't work

[steep hare]

then what should i try?

[lone thistle]

AD & ADCS are windows server roles/features

[steep hare]

yes

technically i can exploit it using any machine what would u reccomend i use?

ive been trying for a week but everything is so confusing!

[naive violet]

What do you mean?

[steep hare]

like i can us anythign else toooo

what would u reccomend i do

use

[lone thistle]

technically yes...kali is fine i.e. to use to exploit it. But in your case, it sounds like you don't have the right environment setup for the vulnerability in the first place (i.e. no ad & adcs)

[simple valve]

Just drove my first long ride, 10 km. Holy hell the amount of drivers that don’t follow normal traffic rules.

[scenic bobcat]

maybe try starting with something a little easier?

[whole yew]

Unrelated to the CVE talk: James, this week i made chimichurri sauce and used it as a marinade and glaze for some strip streaks. Absolute top tier, highly recommend.

[steep hare]

i can do the setup for the vulnerability

the sauce sounds so nice too omg..

[naive violet]

Is this for a class or something?

[steep hare]

nope

[naive violet]

I would recommend signing up on tryhackme and working through the beginner content before attempting to build your own labs

Fundamentals are very important

[steep hare]

that makes sense

[boreal scarab]

@vocal gale @silent heart https://youtube.com/shorts/0Dust6PIiDI?si=3i0UMPdPGBFcE1Dq

[naive violet]

A fully up to date Windows 10 machine isn't going to have CVEs

[boreal scarab]

Sure you can!

[steep hare]

hmm

so where would i be able to exploit this?

apart from thm

[whole yew]

AD and certificate generation is not a topic i would recommend for beginners to cybersecurity, let alone to IT

[timid prism]

why does ev cars have such a different design

[mossy river]

@naive violet did you send me this song?

[wintry sluice]

why though? why spend $51 on a meal when you can get 3 course dinner at a restaurant for less

[steep hare]

wait i forgot to mention i meant my windows is a server vm

[lone thistle]

there might be a vulnhub box you can download. IDK. Setting up vulnerable environments, ironically, can be hard. Afterall, that's like 50% of my job 😅

[timid prism]

just saw a kia ev6 and it looked so different compared to any other normal car versions

[naive violet]

Don't think so

[whole yew]

Would recommend you go back to fundamental system admin stuff, and learn how local windows policy works, and how fundamental roles and permissions work in linux

[boreal scarab]

Grabs windows 10 1507 iso

[mossy river]

Damn, I've been listening it for a few days, obssessed with it. I was under the impression you sent it to me lol, I don't know where I found it

[naive violet]

Spotify daylist is excellent for small artists

[boreal scarab]

Because MEAT SWORDS!

[timid prism]

2 days will require less money for 2-3 people

[mossy river]

I'm in a 'all music is boring' crisis atm.
Can't find anything

[naive violet]

Metal time

[whole yew]

Spiritbox is pretty good, Jabba

Jinjer as well

[wintry sluice]

but its always metal time

[naive violet]

Lol I didn't have you figured for a metalhead juun

[mossy river]

I will check them out

[whole yew]

if you crave even more variety, you could give flatbush zombies and erick the architect a go

[steep hare]

so i cant exploit it on a windows 10 server vm or virtual box ??

i love metal too!!

[whole yew]

this makes no sense... how many music recommendations have i given that were new wave punk, hardcore punk or early metal? Powerslave is one of my favorite albums of all time.....