general

[naive violet]

There are things you can do

[blazing granite]

it's a nice show, but it won't be beneficial for the wine. That's OK for people who like show more than wine, I like more wine than show, I'll keep my wine in a bottle where it should be 😉 🙂

[naive violet]

I don't remember any music recs from you, that might be it

[mossy river]

I feel like any other time I would be so down to this but I genuinely can't get into it, same with Jinjer

[lone thistle]

lemme dig out some playlists for you later jabba

[steep hare]

like? may u please assist me if its not a lot to ask

[whole yew]

Let me check my archive, are you looking for something faster or slower?

[wintry sluice]

may all your corks develop holes

[naive violet]

So, you exploit a vulnerability to deliver a payload.
A fully updated Windows box isn't going to have known vulnerabilities for the most part

So you'll be looking at weak passwords etc

[whole yew]

@icy cosmos I really like the rhythm and melody, but there's something about that vocalist that doesn't quite click with me

[naive violet]

In a default configuration, there's not going to be much you can do

[steep hare]

then what shall i do? my virtual box has kali and windows 10

[errant plover]

Hey guys, I hope you are doing great! I am trying to do "Crack the hash" the room but last 2 task of Level seems impossible to crack it even though I followed the some guys and did the exact same thing but I cannot get the result, did someone do this room? If so, I appreciate anyone who will ping me about that..

[naive violet]

This is still my recommendation @steep hare

[scenic bobcat]

Having Kali is nice and all but its not super helpfull if you dont know what you're doing with it 😅

[mossy river]

I genuinely don't know.
I have been through tons of genres and I just can't find a style to stick with.

As someone who does everything with music, it hurts my soul

[scenic bobcat]

so try learning more fundamentals and figure out the tools (which all are explained on THM) and then try again? once you understand how and why these things work?

[steep hare]

i agree!! i want to learn tho!!

[blazing granite]

????

[mossy river]

❤️ I have your DNB playlist everywhere lol, I even moved it to Apple Music before my subscription expired ahah

[steep hare]

that sounds very helpful i will def try that out

and if i run into issues i will ask! is that ok

[whole yew]

got a new PC, have to re-import my library into foobar

it'll be a few minutes before i have everything indexed again

[boreal scarab]

Yah. But it's airating (however the hell you spell that) itself!

[wintry sluice]

this way, you will be forced to drink it, or watch it spoil

[lone thistle]

I have about 30 hours of dnb & techno on my usb for my dj decks. Need to transfer it onto spotify at some point

[wintry sluice]

ask away. people here are great.
friendly and super helpful

[blazing granite]

again too much show for my taste, that's not for a profesional or even a serious wine lover

[mossy river]

that's probably my lifetime of dnb and techno listening 🤣

[steep hare]

i can tell! u all seem great!

[scenic bobcat]

Thats fine, but do try to explain your issue and what you've tried when you do

[steep hare]

thank u for being patient

[buoyant tree]

hullo

[blazing granite]

if you want somebody to be force to drink wine, obviously you don't know anything about the subject.

[steep hare]

yes! i will thank u once again!

[twin ridge]

Gave +1 Rep to @scenic bobcat (current: #559 - 7)

[steep hare]

will be back

[mossy river]

Listening to playlists I made years ago can either be a absolute goldmine of nostalgia or the most upsetting memories ever 🤣

[lone thistle]

Hehe. I mean that USB is 64gb and it’s full. 64Gb is a LOT a lot of songs of various genres

[blazing granite]

what's up?

[lone thistle]

Garage, house, techno, dnb, etc

But for now: trains

I’m playing TS3 over the cloud

[sick lance]

No cringe!?

[lone thistle]

Working beautifully

[wild rose]

I was really into jungle as a kid

[lone thistle]

Jungle is massive 😁

[mossy river]

I'd argue that's in the "most upsetting memories" category

[blazing granite]

that's why the lion got lost in the forest, because jungle is massive 😉

[buoyant tree]

nothing at the moment

trying to decide what to do tonight

[wintry sluice]

nothing? not even atmosphere!?

[buoyant tree]

AI finetuning, HTB Academy, THM

Or just watching a movie or playing a game

[blazing granite]

party 🥳 😂

[buoyant tree]

too much energy required

[wintry sluice]

https://tenor.com/view/the-road-to-el-dorado-both-both-is-good-gif-8304204

[buoyant tree]

tired after running while fasting

Was out for 4 hours in a charity drive

[boreal scarab]

Oh, so what you're really saying is, I need yo travel to you, get a fountain and pour wine into it for your house decoration, got it

[blazing granite]

not wine fountain for me thanks 🙂

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #31 - 235)

[boreal scarab]

Ez rep

[wraith fjord]

I need to get a new game. Palword is boring after few weeks

Or a few hours

[vocal gale]

My next goal

[boreal scarab]

Gmod, Police Simulator Patrol Officers, Cyberpunk 2077!

[wintry sluice]

spread managed democracy

[boreal scarab]

Yah? Come back to Vegas! Cause ya don't got any Texas De Brazil up in Canada, eh

[vocal gale]

We got a place called pampas

All you can eat

[blazing granite]

The Pampas are fertile part of Argentine provinces of Buenos Aires 🙂

[buoyant tree]

Uncharted 4

[blazing granite]

waters?

[obtuse falcon]

hi guys

Has anyone seen the clock room?

[sick lance]

Yeah, its a good room.

[obtuse falcon]

I got stuck on this machine lol, I'll redo it to see where I went wrong.

[scenic bobcat]

oh right, i havent seen any yet or mby just missed it but is there anything that goes over Reverse engineering etc. in thm?

[wild rose]

There's a malware analysis module.

[scenic bobcat]

ohh, i'll look into that sometime
I've done a few simple things from 'crackmes' but always get stuck at anything past the very easy things 😅

[plush mesa]

theres a few if you type in "reverse" into the search

[bold dawn]

https://tenor.com/view/kto-lbow-hi-hello-hi-there-gif-25347432

[tawny magnet]

[unique stag]

Em

[buoyant tree]

Heya

[bold dawn]

Howdy

[bold dawn]

Howdy

[sick lance]

Look who's back 👀

[hazy flume]

heyyy scrubz

[sick lance]

👋

[hazy flume]

i wanted to ask you

i did the wifi hacking room

i could hack my home wifi and iphone wifi now

but

[naive violet]

But?

(I made that room)

[sick lance]

Yeah, ask the creator 😄

[hazy flume]

oh wow

good to have you

i am finding some wifi in my house

that is greater than my own wifi

how is it possible

[crude stump]

Aye he’s back

[naive violet]

Higher transmit power, better antennas, better propogation

[hazy flume]

no, i suspect its my own wifi, and its a limitation by my internet company

because i didnt get the highest package

[naive violet]

What do you mean by "greater"?

[hazy flume]

can i send here a screen shot from wifite?

what is the info i need to delete from the screen shot?

[hazy flume]

my wifi is 66db and the greater one is 99db

[naive violet]

There's a minus in front of that, right?

-66dBm and -99dBm ?

[hazy flume]

my wifi is dina100

[naive violet]

Wow that's some bad software

It's negative, and in decibel millivolts

[hazy flume]

what does it mean?

[naive violet]

-66 is more signal than -99

[hazy flume]

oh

[naive violet]

33dB more signal, which is a HUGE amount

[hazy flume]

but it doesnt show it as negative does it

is the 26db one faster than my home wifi then?

[naive violet]

Because it's bad software

[naive violet]

No, it doesn't mean faster.

[hazy flume]

honestly i didnt finish your room

[naive violet]

Honestly I'd use better software

wifite is overly automated and you don't learn anything

[hazy flume]

true, i tried with airodomp-ng and it didnt work tho, i need get back and see why

i constantly got an error about the channe

no matter what i did

i was actually searcing for you if you exist here on discord few days ago

probably missed you

[naive violet]

Stronger signal doesn't mean faster

[hazy flume]

can i send you pm?

[naive violet]

What for?

[hazy flume]

to ask you questions

[naive violet]

Regarding?

[shut hawk]

Damn, It's 6 years old (wifite )

[rapid merlin]

.

[naive violet]

All the cool kids are using hcxtools now

[hazy flume]

regarding solutions of why some networks do not work

[naive violet]

Are you attacking networks that aren't yours?

[hazy flume]

and about solution of the desirable password cracking i want is like 23434349734 pherabyte

[hazy flume]

no, all networks here are mine

[shut hawk]

2434349734 pherabyte
?!

[hazy flume]

i inserted it to generate all passwords from 8 to 63 characters, using abcdefghijklmnopqrstABCDEFGHIJKLMNOPQRST0123456789

the size of the file is scrazy

[naive violet]

That's way too much

[hazy flume]

and i obviosuly stoped crunch

[plush mesa]

lol

[hazy flume]

dont know where it even saved that file will have to look it

[shut hawk]

you aren't gonna bruteforce a 63 character password anytime soon lol

[hazy flume]

what else can you crack hard passwords?

[naive violet]

So...

[hazy flume]

what else can you do for cracking hard passwords*

[naive violet]

You know what makes the passwords "hard"?
Yeah that's right - they're not possible to crack

[wintry sluice]

ofc it is.there are something like 63^62 possible permutations

[blazing granite]

I believe that what comes after terabyte is petabyte

[buoyant tree]

Well its possible but not plausible

[plush mesa]

also the probability of a ! or ? Nulling your entire wordlist is pretty high

[hazy flume]

i inseted my password into the 10mpasswords file, it didnt contain it

[hazy flume]

yeai didnt remember the name well i guess

remembered the p tho

[hazy flume]

true i was thinking about that

so how can a password that is lets say @#GH^%$DFDFGDSFGS%392987fsdfsV be cracked?

[shut hawk]

cough cough

[wintry sluice]

realistically, it can't.

[hazy flume]

ok good to know

there must be super big computer than can do that tho right?

[naive violet]

No

[wintry sluice]

not a single computer

[naive violet]

By that point it's much easier to just walk into your house and hit you with a big hammer until you give me the password though

[hazy flume]

but what i say isnt possible? to try ALL passwords?

[wintry sluice]

perhaps if we tasked every computer on earth to work on the problem for a million years, we might get the answer

[naive violet]

That would take so long that the sun would engulf the earth

[hazy flume]

but in a theoretical situation lets say that putin wants to build a computer that is strong enough to calculate any pass, can he?

[wintry sluice]

no

[jovial cypress]

can you realistically count every star or every sand grain?

[naive violet]

I don't think you understood what I said

read up about exponential growth

[hazy flume]

i understood, but my pc is normal i thought there should be some 1000000000000000000000000000000x stronger machines who can do this

[naive violet]

So you knock 30 zeroes off. The number is still too big to process before the sun explodes.

[wintry sluice]

the number of permutations is several orders of magnitude larger than that

[hazy flume]

its like being limited to physics law, digitally

[wintry sluice]

its a limitation of resources, both physical and temporal (time)

[naive violet]

It's just how big numbers work

They're such big numbers that you can't really think about them or contextualise them

[plush mesa]

Look at the rock you wordlist or any other big one and check how many passwords in contains ans then check its file size. Then think about how many words a text file needs to be in the peta byte size

[hazy flume]

i asked becuse my 10m passwords file finishes in about a minute, and i inserted my password there to be the last one

[naive violet]

10 million is 10 000 000
That's not a lot.

14 characters is beyond our reach for wifi at the moment.

[sick lance]

Can I have that wordlist? 👀

[hazy flume]

so i guess smart password files is a better solution

[hazy flume]

my wifi password is THANKYOUSCRUBZ

feel free to login if you are around

i mean, the password file i have seen are poor. they dont even contain all possibilites of date of birth password

how big does a file containing all dates of birth of all people in the last 100 years?

[naive violet]

This is quite easy to calculate

[hazy flume]

lets say i was borin in 3 of march 1990, so the password is 03031990

all dates can be inserted

[naive violet]

Even ignoring date format, assume it's YYMMDD, YYYYMMDD
so 6 or 8 digits, 10 digits possible in each.

10^6 or 10^8

[hazy flume]

and can be 331990 as well and stuff like that

[naive violet]

10 mil or 100 mil

[hazy flume]

you are good in math are you

[naive violet]

So sub 200 million

[prisma kiln]

using the beef technique, can we control all the files of the computer on which we attack, apart from multiple web attacks?

[naive violet]

I studied maths but this isn't difficult maths

[wintry sluice]

if 10m (10^6) passwords take 10 mins,
10bn (10^9) passwords take 10000 mins (~7days)
10tn (10^12) passwords take 10million minutes (~19 years)
10quadrillion (10^15) passwords take 10billion minutes (19,000 years)
etc etc etc

for a password that can be 63 chars long and contain a-z,A-Z,0-9, we are talking something like 6^63 passwords.

[naive violet]

Do you understand what XSS is?

[sick lance]

BeEF 💀

[hazy flume]

make sense

[prisma kiln]

I am trying to understand

[hazy flume]

ok ninja bro i will continue with your room and ill continue to ask more questions later

i like challenging rooms

[shut hawk]

you can also reduce that removing invalid dates (like 00 as the day/month) and only up to 31 for days, 12 for months etc

[placid totem]

Hi anyone completed clocky room

[jovial cypress]

also include february dates

[wintry sluice]

for comparison, the universe is only about 4.36x10^17 seconds old atm.

[shut hawk]

that would be included in the up to 31 days part

[jovial cypress]

yeah just realised, my bad

[plush mesa]

no way youve been counting

[naive violet]

It makes so little difference, and then you lose out on forward vs reverse formats

[shut hawk]

good point

[hazy flume]

i think you can just include all dates of february like it has 31 days instead of descluding 28 29 30 31

ninja, on my desktop everything works fine , but on my macbook with fusion player and kali, and the same network adapter, kali finds the USB, it shows when i list usbs, but doesnt show with iwconfig

maybe do you know why

[wintry sluice]

https://tenor.com/view/jumanji-robin-williams-nightmare-seen-things-gif-17585973

[naive violet]

I don't use a mac, too expensive for the poor design and specs

I'm sure it's broken USB passthrough, but Workstation and VirtualBox just work for me

[lone thistle]

trains!!! over the cloud!!

class 395 baby cant beat it

[shut hawk]

what version?

of TSW

[lone thistle]

this is tsw3

[chilly veldt]

I can't walk, this is fun

[shut hawk]

nicee

[bold dawn]

Dang Jay, congrats on the role

[shut hawk]

it seems like theres a new release every year 💀

[lone thistle]

I was playing tsw4 on xbox game pass but it's sooo basic and I was prepared to spend like £50 on more routes

[shut hawk]

Ty! Nice to see you back :)

[bold dawn]

that means Ben got a demotion from lead bot dev

[chilly veldt]

Just did a new squat PR

[devout palm]

Sup Derek

[lone thistle]

so just forked for tsw3 as I plan to play this when I get back home, rented a VPS that has a GPU and it's exactly like playing locally performance wise. it's mad

[shut hawk]

nah nah we're a team

managed democracy - hd2

[bold dawn]

thanks! I needed a break from some higher activity discords, this being the most active lol

[lone thistle]

welcome back Derek:)

[buoyant tree]

that may be a little too much for tsw3

[lone thistle]

nice to see you

[chilly veldt]

Yeee welcome back Derek, been missed

[lone thistle]

probably, but the only thing I can play on is a macbook air m2 chip. Parallels or crossover wouldn't work

[shut hawk]

respect, I only lasted a week w/ out

[bold dawn]

I got some servers spun up on a new network running a secure web host. Got a SIEM running with regular vuln scanning. I plan to rent out web hosting from it eventually

also with daily backups

[buoyant tree]

why are you on a macbook?

[shut hawk]

oo cloud gaming

[lone thistle]

so I had to get something that was x64. Currently paying for a server that is 16gb RAM, x8 cores xeon @ 3.00ghz and a NVIDIA T5 at about 0.85$ dollar per hour that I run it

[bold dawn]

ran on a separate server

[lone thistle]

visiting family for easter/holidays. no desktop for me 😦

[devout palm]

Servers are savior

[bold dawn]

so, that's what's new with me

[shut hawk]

geez, do you have a contract?

[devout palm]

But sometimes costy

[lone thistle]

well, no x64_86x device anyways

[shut hawk]

ooo, any random internet bots say hello?

[lone thistle]

naaah just top up your account with credit 👍

[bold dawn]

also:

[lone thistle]

stop/start whenever you're charged per hour for run time

[buoyant tree]

perhaps try out geforce now

that may be cheaper

[wintry sluice]

pay as you go?

[bold dawn]

only about 2500 a day

[buoyant tree]

congrats

[bold dawn]

lol

[lone thistle]

I did aye but it doesn't support the games im looking for. At least with this provider they just give you a whole server that you can install whatever on

[shut hawk]

whens the big day? 👀

[bold dawn]

They actually gave us a range since my wife is high risk

[shut hawk]

huh thats preaty neat, how much control do you have over it? root ssh access or just click game and play?

[bold dawn]

Beginning of July to August 1st

[lone thistle]

pure admin baby

it runs on AWS kekw

[shut hawk]

https://tenor.com/view/no-money-wallet-empty-cashless-gif-16030892

[devout palm]

When you forget to turn off your server

And look at the bill in the morning

[lone thistle]

i could probably run it myself on AWS for cheaper, but they integrate things nicely, and they've automated clients such as moonlight and parsec which is 10000000% better than RDP

[shut hawk]

ah, hoping it all goes well ❤️

[lone thistle]

I'm gonna be running parsec > RDP where I can. This ting is mad. It's like I'm running it exactly on my laptop. Uses like 6mpbs a sec though lMFAO

[shut hawk]

yeah i don't think my internet could cope with cloud gaming lmao

[naive violet]

Honestly RDP is really nice for things that aren't games, as long as it's the MS client and MS server

[wintry sluice]

what's the latency like?

[lone thistle]

I have a timer on my phone to track plus as it's all credit that you add to your account, ultimately, if you forget to turn it off, it'll only use up the credit you applied which sucks but at least it's not like 100£+

[devout palm]

You better have it or you will become po

[lone thistle]

oh yeah big advocate for RDP. I mean, I usually have like 4 different RDPs a day concurrently at minimum a day

Put parsec has been the only thing that can parse through controller input, render at 4k on my macbook, and render the game at 2k @ 60fps without that much latency

[naive violet]

Yeah for gaming it sounds nice

I've heard good things a while ago, never tried it

[lone thistle]

yeah seems pretty cool. free tier is basically connecting to one device

for me that's perfect

[rapid merlin]

cool

[devout palm]

Aren't the servers with graphics card expensive

[lone thistle]

full desktop

[lone thistle]

yes

this tier is designed to train AI models lmfao which is all that was available at the time

it's like a nvidia t5 which compares to a nvidia 1080ti in terms of gaming

[twin mist]

guys how i donwload a certificate in pdf extension?

[lone thistle]

the need to play ts3 >>>

I put on £30 for ts3 & helldivers 2, gives me about 24 hours run time (though obvs you bring the games i.e. steam and BYOL for windows)

you can get this provider to license it but it's like 3x the cost per hour

[devout palm]

Damn

£30 to play game, i think i am going to keep up with tetris

[lone thistle]

but yeah defo need a good internet connection. My parsec is using about 6/7mbps constant over wiif

[wintry sluice]

https://tenor.com/view/loading-buffering-gif-8820437

[lone thistle]

eh, only cause I want to. I own the games, my desktop at home is perfectly cabaple, but I just want to play them while i'm visiting family in my spare time loooooooool which I'm stuck to a macbook M2

which is arm:(

[devout palm]

Arm is annoying

When i want to debug a x64 elf binary

[shut hawk]

my ping

[lone thistle]

that is peak what are you testing it on

[devout palm]

Oh yeah?

[lone thistle]

how can you have those speeds but that ping dafuq

[shut hawk]

pi connected wired to the router

Idk my internet is so weird

[lone thistle]

ahhhhhhhhhh

that expalins it all

[shut hawk]

My download speed is like ~500Mbps consistent

but my upload + ping is so bad

like when I'm on call I have a 5 second delay for when I speak

[wintry sluice]

the pi thinks in entish, but responds in binary

[lone thistle]

pis for throughput or duplex speeds suuuuck at least from pi3

combination of interface speed & cpu

[shut hawk]

oh its the same on any device

[lone thistle]

peeeeeeeak

[shut hawk]

@boreal gull can confirm how bad it is on call

[devout palm]

Lmao that's weird

[lone thistle]

I mean ISPs esp. in UK for residential prio download > upload. At my house I was on 500mbps with 450mbps down & 30mbps upload

[naive violet]

The NIC was usb, pain

[lone thistle]

since we got 1gb it's 950mbps down, 50mbps up lmfao

[shut hawk]

yeah I find it odd

[lone thistle]

unless we upgrade to business where we can tell them hey I want more upload

[shut hawk]

makes backing up large files really annoying

[lone thistle]

eh yeah sucks...but I guess your average joe doesn't need mad uploads

[shut hawk]

true

[blazing granite]

I'm at my mum house so I can't complain, but it could be a lot worse 😂

[devout palm]

Have you seen mine?

[shut hawk]

my cloud sync can never catch up

[devout palm]

I'm writing from the future

[blazing granite]

are you with dial up? 😂

[shut hawk]

this is nuts, and I thought mine was bad

[devout palm]

I can't even screenshare on discord

[split ore]

eh, even for a city bandwidth it's not that bad, believe me, in our country if somebody's living outside of town his internet speeds are lower than 50mbps ususally

[devout palm]

Damn

[split ore]

the main problem is that the servers won't keep up with the speed hah

[blazing granite]

Yes, my connection it much higher, but I'm not there now 😂

[wintry sluice]

😳

[split ore]

what do you need to download at your mum's house if 200mbps is not enough xD

bro is downloading nsa database

[blazing granite]

yep, the connection is always set at the lowest one, so you have to pick your server carefully 😂

[blazing granite]

It's OK, but I'm not used to so sometime I complain because look slow to me 😂

[split ore]

the best speed I've seen during downloads is on google drive, most sites don't like people with unnliimitedd powaaa

[wintry sluice]

sites have limited bandwidth too

[split ore]

oh yeah it hits bad when sites load 500ms slower, and I'm not even joking rn

when I'm outside of my home it feels like my cpu isn't doing its job, feels so slow

[shut hawk]

steam games go pretty fast

[split ore]

oh yeah, they've upgraded their servers a while ago

but my hdd isn't that fast 😂

[wintry sluice]

covid kinda forced them to.

[blazing granite]

At home I have fiber the whole way, I believe here they have fiber until the big box outside and from there to the apartment they use coaxil.

[split ore]

mm fiber

[wintry sluice]

FTTP

fibre to the pavement

[blazing granite]

in this case is fiber to the apartment 😂

[blazing granite]

indeed so when you're used to that everything else is slow 😂

[split ore]

true

and then you go to your friend's house and he's used to 100mbps, it's unreal

[blazing granite]

I'll be here for a bit so I have to get used to 😂 but like I said it could be much worse, actually I was worried about internet speed, and I was surprise 🙂

I thought it was going to much, much worse 😂

[raven pewter]

Your machine is initializing...

Use the AttackBox to attack machines you start on tasks

Loading ( -15009% )

hi guys! Do you have any ideas what is this?

My internet is fast, idk, it just doesn't loading

[wild rose]

As long as it loads with a few minutes you're good.

just says some crazy stuff when it first starts.

[blazing granite]

try in #site-support

[raven pewter]

alright, thanks guys

may be i need to wait

[wild rose]

yeah rooms can take like 2-5 minutes starting up, depending on the room.

[blazing granite]

Patience is a virtue 😉 😂

[raven pewter]

absolutely🤓

[wild rose]

I snapped my neck and now it feels like my neck is supporting a bowling ball.

getting to that age...

[raven pewter]

it's all your computer

hahahahah

[violet pollen]

do any of u play world of haiku, is it worth buying, it seems interesting way to practice hacking

[wild rose]

From scanning their website, it looks like they're just starting out. Don't know if $100/yr is worth the limited content, when you have THM with hundreds of rooms of content.

but Carnegie Mellon Uni is a great school.

[obtuse falcon]

https://tenor.com/view/guy-arguing-guy-talking-to-wall-talking-brick-wall-gif-18667615

[wild rose]

on steam, the reviews say that the game is discontinued.

[blazing granite]

Indeed, I believe it's a bit ambitious to charge that amount of money for not that much content, when there are more season site that provided much more content for same or similar amount of money. They should know their places in the market

[chilly veldt]

Lol, just found out I can use my iPhone as a powerbank for my android

Finally a proper use case for an iPhone

[wild rose]

I mean facetime is pretty nice. If I ever am forced to pay for youtube premium, I'll probably switch.

[shut hawk]

YT premium is actually a great sub

[chilly veldt]

I don't use YouTube on my phone

[blazing granite]

I don't use yt that much on any device

[boreal scarab]

STICKERS!!!!!

I got more stickers, and even a bumper sticker

[blazing granite]

congrats

[prisma kiln]

I haven't been able to progress in cyber security for days because of the error I encountered.

The funny part is that I still can't find what the error is

[shut hawk]

🤨

[real compass]

Irl how common are SMB misconfigurations that would allow an attacker in? I would imagine it would take realistically two things 1. SMB misconfiguration and 2. Having default passwords

[shut hawk]

misconfigurations and default passwords are very common issues

(imo)

[naive violet]

SMB shares open to any user or even anonymous happens all the time, and then people write scripts with passwords in etc etc etc

Really really bad

It's how Uber got hacked

[real compass]

I work for a very large “company” I couldn’t imagine having that on any of our systems… can’t really believe that would be a large issue

[shut hawk]

I mean, ubers large and it happened to them

[real compass]

Mmm, way bigger

[plush mesa]

With the large company you just dont know youve got it

the problem is often that the company doesnt know what systems its got running

[sand trench]

xz backdoors can happen to everyone too

[real compass]

Anyway, just seems so simple. So I guess it’s common then? Would you then say it’s in my best interest to memorize the SMB commands?

[sand trench]

though the dev that commited that did a poor job of not looking involved

[shut hawk]

memorize the SMB commands?
that's what cheat sheets and google is there*? for

its better to understand what they are doing

instead of memorising the syntax

[real compass]

Fair

[naive violet]

smbclient -L is 50% of what you need

And if you're on Windows then net view and stuff

[real compass]

I’m on Kali

[prisma kiln]

A question for you, when I use service apache and open my localhost via Kali, I can see my files. But when I open the same from virtual box windows (example: 10.0.5.8/index.html), the site gives an error. (ip addresses are the same)

[naive violet]

You won't always be.

[naive violet]

What error?

[sand trench]

and for sudo ..... sudo -l is most of what you need

[random quartz]

Hey there 🙂 I've got another question if anyone here knows

[devout palm]

Go ahead

[random quartz]

Has anyone used proxyscrape and can give me an honest feedback?

[naive violet]

Watcha scraping?

[real compass]

That’s a good point, tbh I feel dumb cause I never really thought of that

[devout palm]

Meh, not too bad

[prisma kiln]

(this site cannot be reached)

[devout palm]

Enough for testing

Paid ones, idk. I haven't purchased it

[random quartz]

I'm trying to create a tweeter bot and I keep getting blocked

[naive violet]

Sign up for their API plan

[real compass]

I think you need to use their API

[random quartz]

it's just so it could send me a SMS whenever there is somthing I will find "DANK"

[random quartz]

I cant really work their api so i tried just using proxy and scraping instead for now

[real compass]

I cant really work their api

Wdym?

[shut hawk]

sounds like something against their tos

[severe wing]

Who has an idea for a hacktwon website ??

[random quartz]

if it is I wont do it

[naive violet]

That's a breach of their ToS and therefore against the rules here

If you're being blocked, it's for a reason

[random quartz]

I'm just building a bot for finding dank memes

alright

wont do it

I didnt know and don't want to get blocked due to it

[trail merlin]

can someone help pls when im try to connect to openvpn i have this error message :

2024-03-30 17:42:41 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-03-30 17:42:41 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-03-30 17:42:41 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-03-30 17:42:41 OpenVPN 2.6.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-03-30 17:42:41 library versions: OpenSSL 3.1.4 24 Oct 2023, LZO 2.10
2024-03-30 17:42:41 DCO version: N/A
2024-03-30 17:42:41 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2024-03-30 17:42:41 OpenSSL: error:0A080009:SSL routines::PEM lib:
2024-03-30 17:42:41 Cannot load inline certificate file
2024-03-30 17:42:41 Exiting due to fatal error

[random quartz]

@naive violet Can I DM you for a sec since you are a senior mod?

[naive violet]

About what?

[random quartz]

saying I'm sorry and new for not getting the rules and I should have been more carefull

[naive violet]

It's fine, just bear them in mind in the future

[random quartz]

alright

thanks so much

[wintry sluice]

which server are you trying to connect to?

[trail merlin]

im try to connect to try hack me machines

[naive violet]

@trail merlin please ask in #site-support

[trail merlin]

ok

[umbral bay]

Hacker level 9000.™️

[wintry sluice]

moar THM stickers?

[blazing granite]

like hal9000? 😉

[rapid merlin]

you got worse one

[real compass]

THM{Hello World!} would be a cool hommage as a sticker

[tropic stratus]

Some trivia I learned is apparently the "Burp" in Burp Suite stands for/means nothing, just the creator would name his tools random things when creating them, and "burp" was the name he chose for that particular tool, and the name stuck

"John The Ripper" was also originally called "Cracker John" (parody of CrackerJack) but the creators brother I think convinced him John The Ripper sounded cooler

Just thought that was interesting. Also IIRC the Code Red worm got it's name because the people who discovered it were drinking mtn dew at the time

[scenic bobcat]

[tropic stratus]

Yeah I was wondering why it had that name, I mean Nmap is pretty explanatory (it "maps" networks) and so is some of the other tools but I had no clue what Burp Suite was

then when I found out what it is I was even more confused by the name

[naive violet]

How about Hashcat?

[tropic stratus]

Isn't hashcat something that breaks password hashes like John The Ripper?

[tawny magnet]

I could ask chicken the origins of it if you guys want

[tropic stratus]

Sure

Personally I prefer John over hashcat

I'm old school like that, John's been around since the late 90's IIRC

[tawny magnet]

asked, now we wait.

[scenic bobcat]

yup

[naive violet]

Yes, just wondering if you'd found anything on the history of the name

[naive violet]

You got a gaming GPU? Hashcat tears through hashes then

[scenic bobcat]

fr tho i was initially trying it on my VM for one of the rooms here and it was like "1 hour" left - i ended up installing it on my host with GPU support

down to like 5min~ cause GPU

[tropic stratus]

1080ti but my Kali VM is on virtualbox which doesn't use the GPU very well. Also I just think John The Ripper has a cooler name lol

[boreal scarab]

https://tenor.com/view/sa-tis-c-gif-23553997

[naive violet]

Hashcat runs great on WIndows

[scenic bobcat]

Yeaa

[naive violet]

It's just a zip file, run it from powershell/cmd

[scenic bobcat]

just install only the cracking thing on host and copy the hash over if you need to- keeping the rest on the VM

speeds up a loot

Hash speed on VM vs Host machine; it was quite funny seeing just how big that difference was

[young egret]

def doing this

[shut hawk]

Does windows AV pickup hashcat?

[muted rock]

I think so, I'm not sure

[scenic bobcat]

ehm, i dont recall it giving me issues

[naive violet]

No

[muted rock]

virtual machine you can't use your gpu try my recommendation install john/hashcat on your main system

[sand trench]

welp shadow just spent about 3 minutes on something crazy nonsencical thingy

rick astleys never gonna give you up but the lyrics is sorted alphabetically

[scenic bobcat]

a friend of mine is also quite busy with Rick Astley's song

[lone thistle]

big ups pars

i still talk to him here and there maybe once a week

what a character

[naive violet]

👀

[sand trench]

the paralympics????

[lone thistle]

maybe swafox? he's an og

[sick lance]

Paradox

Or paras?

[lone thistle]

paradox

aka pars

[sand trench]

is paradox part of the paralympics???

[lone thistle]

nah just a character of THM

similar to elf

gone but not forgotten. very good times with them

[sand trench]

well have most likely done some rooms they contributed

[lone thistle]

pars probably yes

[sand trench]

though can't just pull it out of shadows mind which

[sick lance]

Got a good few created rooms

[blazing granite]

I guess the paradox is when the Paralympics gets an standing ovation 😉 😂

[sand trench]

some company or business has also started what they call the enhanced olympics or something similar

where all types of doping will be okay but you have doctors testing you to make sure you no fall over

[noble heath]

hey guys, anyone knows if in the new kali linux version auth.log is in another folder or with another name, because i downloaded the lastest version and i cant find this archive

[wintry sluice]

they should call it the Überlympics

or perhaps the doperlypmics

[blazing granite]

did you check Kali's website or visit its discord? That probably the best place to ask

Google it's a great resource too

[bold dawn]

anyone ever deal with ethernet over power? does it work well? is it very reliable?

specifically looking at TP Link

[blazing granite]

I haven't have the pleasure 😂

[noble heath]

nothing on google but i'll try visit its discord, tks

[shut hawk]

Is that like WoL?

[pallid lotus]

No, Power over Ethernet (PoE). Basically one cable to provide both power and connectivity

[shut hawk]

Oh that's pretty neat

I wonder how much power it can give

[pallid lotus]

Can be quite finicky by all accounts. If you get components which work together, and make sure that the switch / injector / whatever is definitely rated to provide the amount of power you need, it should be okay

[whole yew]

EoP would be slightly different, and I do have a former co-worker who used the power circuits in the house for networking transmission. It did not work well, co-worker went back to the previous wireless network within a week.

[pallid lotus]

Wait, what

You can do it the other way around?

[wintry sluice]

I've found that extension cables can cause issues. where possible, plug it directly into a wall socket. further, if possible have both adapters on the same ring circuit; can work if they are on separate rings, but its temperamental

powerline adapters

[whole yew]

https://www.amazon.com/Powerline-Computer-Network-Adapters

[pallid lotus]

TIL

Thanks for that 😆
Why is that remotely attractive?

[whole yew]

older houses where running ethernet is not viable

or rentals where the one is not allowed to make those changes

[shut hawk]

☹️

[pallid lotus]

Fair

[wintry sluice]

or where wireless just doesn't work because too many walls

[pallid lotus]

That's the first I've heard of that. Fun.

[tribal ice]

Is this still working?

[tropic stratus]

Also question about John. John's been around since like 1996 right? MD5 hashes came in 1991. So if cracking a hash via brute force takes ages on modern hardware....how did people do it in 1996? Was the dictionary attack the main "point" of John and the incremental brute force more of a proof of concept?

[wintry sluice]

https://www.amazon.com/s?k=powerline+adapter

[crude stump]

Yo yo yo yo

[shut hawk]

Wait that's actually kinda useful

[crude stump]

It’s a party in the house tonight

[shut hawk]

Wonder how viable it is

[naive violet]

Powerline (ethernet over power) is ass

[shut hawk]

oh

[buoyant tree]

Hmm, it seems like a interesting concept although the few reviews I saw either made it a great placement for long distances or with concrete walls while you are going to get limited speeds usually 20mbps and high latency it

[naive violet]

I mean also the fact it turns your house into a giant antenna

[buoyant tree]

Elaborate

[naive violet]

Interferes massively with a lot of radio stuff

[buoyant tree]

Hmm, how does it do that though, isn't it using the cables for transmitting the connection (sorry if that may sound stupid)

[naive violet]

Changing electrical currents in a wire makes an antenna

[buoyant tree]

But wouldn't the effect be minimal since its not pointed or uniform

[naive violet]

Inverse square law so it's distance

And no, it's not minimal. Radio reception is based on incredibly small signals. A nearby weak signal can often overpower a distant strong

[buoyant tree]

Reminds me of my physics class

[buoyant tree]

Hmm, any book you recommend on the topic

About radios in general

[naive violet]

Not really, outside of studying for a ham license

[buoyant tree]

Is it possible to get a ham licence outside of the UK

[naive violet]

Yes?

What country are you in?

[wintry sluice]

it will be called different things in different places. just means amateur radio

[buoyant tree]

Pakistan

[shut hawk]

https://pakhams.com/index.php?option=com_content&view=article&id=75&Itemid=92

[naive violet]

https://www.pakhams.com/

[buoyant tree]

Hmmm

[buoyant tree]

I think I met the guy who wrote the article

[buoyant tree]

bookmarked it for later

[hazy flume]

hey ninja when i enable the monitor mode, the new interface name is wlan0 but that isnt the formwar answer, can i get a hit?

[naive violet]

This is a google question, like most of the rest of the room

#room-hints for room hints

[clear jackal]

You've got MOCA too

Not sure if you've heard of that

Ethernet over COAX

[sand trench]

yeah ethernet over coax is whacky

also if you want crazy wifi networks shadow could point you in the direction of a few hospitals in sweden

the networking that goes on to let the wifi cover all the areas it needs and also all the ethernet/cat cables to connnect devices

it is a huge undertaking

still it was neatly done in the hospital that shadow had their internship at

wifi gets tricky with all the walls and long coridors of hospitals

not to mention the cafeteria microwaves

[bold dawn]

ah, I meant PoE

[bold dawn]

Good to know. Any other options outside of hardwired

[sand trench]

end of procedure???

oh ethernet over power... so powerline......

but you correct yourself to power over ethernet

well power over ethernet is generally just plug and play if your source for the network connection can handle the power draw

[solemn moth]

Guys I need help
my vmware workshop eth0 wont assign an ip address from the dhc and I looked in the internet for solutions but couldnt find any that work
nd everytime I try to ping 8.8.8.8 it gives me " ping: connect: Network is unreachable"
can someone help me plz

[naive violet]

It's neat, but sadly not common outside the US

I have coax ran to every room of my apartment from a cupboard, but sadly not ethernet.
I bought a pair of MOCA adapters to use that, it worked

[sand trench]

which moca???

Science and technology

Moca (genus), a genus of moths
MOCA (protein), a protein involved in cell signaling
Moca, a nickname for Andira inermis
MOCA, an application runtime environment and programming language by Blue Yonder
Minimum obstacle clearance altitude
Multimedia over Coax Alliance (MoCA), an industry group which develops specifications for home networking over residential coaxial cable
4,4'-Methylenebis(2-chloroaniline), a compound used as a curing agent in polyurethane production
Molybdenum cofactor cytidylyltransferase, an enzyme

[naive violet]

I wonder which one specifies running networking over coax, shadow

[sand trench]

sh

ah

[sand trench]

obviously the moths plus the protein

[chilly veldt]

👀

[hazy flume]

hey ninja

[long stump]

bitte um Hilfe eine kleine WhatsApp Attacke auszuführen

[hazy flume]

i honestly dont understand why the answer is W, when i use --help it shows w another thing

[naive violet]

Please keep it in English only.
Attacking whatsapp would be illegal and therefore against the rules here

[naive violet]

#room-help

[sand trench]

good evening bella

[chilly veldt]

Evening

I am bored at work

[sand trench]

think the answer is mostly pig butts but who knows....

[long stump]

This attack would be legal because it was agreed upon and is only valid as evidence

[sand trench]

check the network settings that you set in vmware
try and make the device connect to dhcp of the router if you are running in bridged mode....

[naive violet]

Attacking whatsapp is not legal because you do not have a signed contract from whatsapp

[tribal ice]

black hats on the other hand......

[naive violet]

What about them?

[long stump]

I have a bet with a friend that only one message should appear

[sand trench]

also would assume people who have a signed contract with whatsapp would not ask for help here....

[tribal ice]

Sir, I was just hinting that black hats would do the opposite, hack whatsapp regardless.

[grim sparrow]

:hammer: cygro_#0 has been banned.

[naive violet]

Yes, I'm aware. We don't tolerate blackhats here.

[dire crane]

I think you have to be very brave here as a mod. haha

[sand trench]

thanks ninja james

one less bad actor to worry about here

[naive violet]

Blackhat hacking is illegal/unethical hacking. By definition, performing illegal actions makes you a blackhat.

[tribal ice]

Yes, I'm aware.

[naive violet]

So why did you feel the need to point it out?

[sand trench]

could sail out to international sea and declare a small nation on their boat and then make it illegal to stub their toe???

[thorny walrus]

Rated worst actor on rotten tomatoes

[solemn moth]

It worked thanks a lot

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1683)

[tribal ice]

You won't get it.

[naive violet]

Becoming a micronation is very difficult

[chilly veldt]

I had an amazing workout today, and now my legs don't work like they used to before

[sand trench]

yeah it can't be as easy as they make it out to be in tv series and movies for jokes

[naive violet]

So why even ping me with it?
Stating the obvious? Not a valuable use of your time

[tribal ice]

perhaps adding a GIF to my reply would have been more appropriate.

[thorny walrus]

damn

[tribal ice]

Chill out.

[dire crane]

I think I like this Ninja Dude, he seems efficient to me

[thorny walrus]

I paid 130 dollars for top resume to write me a resume and after running it through an ATS i feel scammed 😭

Got a solid score of 38

[sand trench]

scoring systems for resumes seems weird but have a feeling a lot of companies use some internal system for it to filter out a huge bunch of requests

[bold dawn]

yeah, looking to see if there is a more reliable alternative to running a hardwire

[tribal ice]

You can just use overleaf

[tribal ice]

https://www.overleaf.com/latex/templates/rover-resume/bpzqtssvfgsn

@thorny walrus you might have to learn bibtex commands but just use chatgippity for that.

[jaunty prairie]

curious what you guys use as apose to dirb or dirbuster for directory/file enumeration. I have always liked them, but seem slow during KoTH

[tribal ice]

ffuf or wfuzz

[jaunty prairie]

ahhh! ffuf i used it before, completely forgot about it. Its going in the toolbox now. I dont think I have used wfuzz tho - will look into it

thanks alot

[tribal ice]

It was your choice to interact with me anyways. you couldve just ignored.simple as.

[tribal ice]

no worries mate, anyway I can help.

[jaunty prairie]

would it just be as simple as filtering out the 200 OKs or should I be thinking deeper into it?

[chilly veldt]

It's summer time!

[naive violet]

If you can get away with it, running a cable is the best. You can get some neat ones that are easy to run along the floor etc without becoming a trip hazard

[tribal ice]

with ffuf..... I think I had a way to filter out the 200 OKs, but I forgot the options for it. haha

[jaunty prairie]

its cool. Ill read the man page. looks like its a simple -mc 200 but ill read a bit more

thanks again!

[tribal ice]

no probs.

[crude stump]

Spring?

[chilly veldt]

Well, the clocks

[jaunty prairie]

Its snowing where I am at lol

[bold dawn]

yeah, just trying to avoid stuff like that while in a rental. I'll probably go for that and just run it across the corner of the ceiling

[chilly veldt]

Yeah, but we just turned over to CEST

[naive violet]

I ran ethernet everywhere in my last rental

[crude stump]

Darek you start your google job yet?

[naive violet]

Just... over the ceiling

[chilly veldt]

You could say, it ran over your head

Sorry, I'll see myself out

[jaunty prairie]

hehe

[chilly veldt]

So bored at work that I am just driving around on a segway

[bold dawn]

Not yet. I am in charge of websec at my current company

tho

[crude stump]

Oh nice

[bold dawn]

they haven't decided on a title though lol

and the pay bump is practically nonexistent

but resume boost for the future lol

other words, probably being taken advantage of

[crude stump]

Damn

Not surprised from google tho

[bold dawn]

nono not google

[crude stump]

Oh

Your current company

[bold dawn]

that position hasn't opened yet

[crude stump]

?

[bold dawn]

yeah

[crude stump]

Dang

[bold dawn]

I don't mind too much right now

[chilly veldt]

I love how my phone was like "your alarm at 3 am is ringing soon" and I look at the clock being like "it's 10 minutes till 2 am, that's not soon" and then realising that we are skipping 2 am tonight

[bold dawn]

do yall have a different day that the time switches?

[crude stump]

Looking at your security archive website, what do you mean it’s to perform penetration tests. Also it’s a very neat idea

[chilly veldt]

Today the CET turns into CEST

[blazing granite]

Wow, every minute is important at this time of the year, I hope the change of clock doesn't/didn't interfere with Suhur

[chilly veldt]

Suhoor is pushed an hour back, so it's at 4 am and not 3 am

Cause the sun rises an hour later

meaning that iftar is also an hour later

[cold sparrow]

Having THM go directly to /paths is annoying

[tribal ice]

Adhaan just gave now for me

[chilly veldt]

Nice, Ramadan Mubarak

[tribal ice]

To you same sis

[chilly veldt]

Thank you

[bold dawn]

not full pentests, just web security assessments. That way it can only be used for consulting, and not compliance. Saves me some extra work. And the project isn't meant to do that. It's more to showcase my abilities in web sec, and to have a project I can improve my skills on

[crude stump]

Oh that’s cool

[bold dawn]

and also made some side income to support the little one on the way

[chilly veldt]

I am hungry though, so I will go make food even though suhoor is in 2 hours

[crude stump]

Priority’s

[chilly veldt]

Can't even sleep afterwards, cause I got work till 8 am😭

[sand trench]

meep moops shadows is finally timey whimey beepy boopy beep boop to the sleep sloop for meep moops time

[blazing granite]

gn shadow

[tribal ice]

Do I have the permission to DM you?

[tribal ice]

And you as well?

[blazing granite]

dm away 🙂

[chilly veldt]

Sure

[blazing granite]

I'm going to sleep, you can DM me and I'll answer you tomorrow when I wake up, good night

Bye people!! 💤

[scenic bobcat]

good night

Oh, odd~ i thought re-verifying updated the level 😅

[bold dawn]

it should?

[scenic bobcat]

idk it did last time i tried it

[wild rose]

It usually does but there's a bug and the team is working on it.

[scenic bobcat]

Ohh alright

[pale belfry]

Hey

I need help recovering a TikTok account

[wild rose]

Can't help ya man. You'll have to ask tiktok to recover your account.

[mossy river]

Please ping a moderator^ 🙂

[wild rose]

Was going to if he pushed the issue, but will do.

[pale belfry]

It’s not my account !!

[dire crane]

🙃

[naive violet]

You know that's illegal right?

[pale belfry]

It’s for a friend

I have consent to

[naive violet]

You don't have permission from TikTok though

So you can't attack tiktok

[pale belfry]

Not even brute force ?

[naive violet]

Correct, not even brute force.

[pale belfry]

Ah ok thank you anyways !

[chilly veldt]

I should go test my room

[wild rose]

I should get some sleep

[pallid lotus]

I had not, although at the very least that's two data transfer cables which instinctively makes more sense... Although whether the same applies in practice is another matter

[keen flax]

whoa you're here

[scenic bobcat]

[tribal ice]

lmaoooo

[worldly dagger]

Excuse my ignorance please, i made a transaction on the Optimism network through my OKX wallet and it has 18700 block confirmations, should i be worried? I didn't get my money yet

[rapid merlin]

idk about blockchains sorry dude all I know it's I have 20mins left until it's the end of my birthday

[worldly dagger]

Happy birthday buddy

[rapid merlin]

thanks man

[scenic bobcat]

aww Happy Birthday

[rapid merlin]

thank you

nothing better to celebrate than to do some smtp and mysql exploitation

[scenic bobcat]

niceu. I'm learning LFI ~ on the very final one now for RCE

[worldly dagger]

I cant get past the last challenge of Pwn101 😭😭😭😭😭

I'm too stewPID

[scenic bobcat]

Ohh i didnt even know they had Pwn on here

but I also wanna get all the basics down first 😅

[modern dock]

Hey, can someone recommend a cheap 20-50 wifi adapter that has packet injection, monitor mode and ap mode. I did find the TP Link AC600, but I'm not entirely sure if it whats I need

I've been researching for hours and can't find anything

[normal fable]

Alpha makes some good ones iirc. 30-50 I think..

[chilly veldt]

Technically not

[modern dock]

Think I found a wifi adapter, just unsure if it supports ap mode. I got no idea how do find out if it does, any ideas? (ALFA Network AWUS036ACS)

[wooden totem]

ping

[modern dock]

well I don't own it, I can only google it

[tawny magnet]

TIP: for devices that emit radio frequencies, and if you are in the US, you can use https://fccid.io/ to get detailed information about the device. even if you are not in the us, sometimes it still shows.

[normal fable]

Just do research. That's like 70-90% of cybersec...

[modern dock]

I just gave up. I'm buying the expensive one

expeniveish

[normal fable]

Expensive is a state of mind. 🤣

[modern dock]

Alfa AWUS036NHA, everyone says good things about it and its recommended everywhere

yeah, you're like screw this, I'll just get it

[thin dawn]

Hello Everyone,

I am facing issues in connecting with tryhackme and getting error. it will be great help if anyone will help me to resolve it

[scenic bobcat]

Try one of the other servers available on the website if you're having issues with the VPN - also #site-support

[crystal kayak]

hi everyone

[elder peak]

Hi

[cerulean sluice]

I use an alfa model

[modern dock]

which one?

[cerulean sluice]

alfa awus036nha

[modern dock]

i was looking at that one

only problem was no 5g

[cerulean sluice]

Ahh

[modern dock]

does it have ap, packet infection and monitor?

[candid pagoda]

roles aint fixed yet

[normal fable]

They on it. Give them a break.

Also.. moo

[chilly veldt]

Weird feeling knowing I just responded to my last alarm, analysed the last logs, did my last manual threat hunting and logged off the SIEM for the last time at my now old job

Yes

They are working on it

[warm lava]

ahh kk thxx

[rapid merlin]

hi

[normal fable]

Moo

[rapid merlin]

catgirl

[normal fable]

Sky kitties and robots in here.

Owl spelled backwards is moo. 🤣🤣

[wintry sluice]

lwo

moo

nah, pull the other one. its got bells on.

[normal fable]

Moo moo moo?

https://tenor.com/view/mew-cat-kitten-kitty-cute-gif-17624380

[wintry sluice]

moo too

https://tenor.com/view/mewth-gif-10061982

[edgy ferry]

sorry for the awfully late reply, had pings off, but yeah @teal nexus essentially at BTV we focus on defensive security (as the name suggests), got a bunch of really cool talks, workshops (tracks), and events that we run throughout defcon. if you end up making it this year, feel free to come by and say hi :)

[normal fable]

Y'all.. drop the #gang tag. Clan describes it enough. Lol

[teal nexus]

Sounds good. I might need to make a trip even if its alone haha

[candid pagoda]

ahhh

[worldly dagger]

What do I need to know before connecting to Pwn101 machines? Somehow pwntools always fails to connect

Maybe I'm doing something wrong

[brisk tree]

morning

[candid pagoda]

morning

[jaunty prairie]

morning

[worldly dagger]

Good morning 🙂

[brisk tree]

hows everyone

[oblique hearth]

Good evening

[mystic badger]

Hi

Guys which one do you recommend for computer engineering, Mac or Windows? and Why?

[normal fable]

Research

Whatever you choose.. learn.

Best path.

[brisk tree]

Tempted to get the pnpt and just add it to my PayPal credit

Before it goes up in price

[normal fable]

Get?

Liquid today...

[brisk tree]

?

[sick lance]

How much is it?

[brisk tree]

333

i dont have enough credit left ffs

[dire crane]

The question makes little sense. Can you define computer engineering? It's a huge field that is only partially related to the os.

[forest forge]

@sick lance

i wanna know where can i find the rooms with max points

[sick lance]

Recently released ctf's

[forest forge]

i just found an old one with 600 point XD

and it is just meduim

[candid pagoda]

what is it

[hushed adder]

Morning

[flat sandal]

Happy Easter for all.

[gilded tangle]

Happy Easter !

Also anyone wanna be hacking budd ?

[sick lance]

UK clocks went forward last night, that means the Friday night rooms will release at 8PM GMT.

[exotic nebula]

yo

[candid pagoda]

[exotic nebula]

how do i fix restart pause when i try to connect through openvpn?

oh

thanks

[worldly tulip]

i just started with my first task and its hacking ur first machine and it says ''Click the "Start Machine" button. Once loaded in Split View in your browser'' how do i split view my browser?

[exotic nebula]

#site-support

[sick lance]

There's a blue butto at the top that says Show split screen

[worldly tulip]

THANKS

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2113)

[night creek]

Does THM reward room creators like HTB does?

Also, is there a difficulty limit?

I've got some insane box ideas but not sure if they'd be better fit for THM or HTB

[naive violet]

Not outside of comissioned content

[night creek]

Aww

[mossy river]

No :)

[sick lance]

Looks like it's custom made.

Contact the author of that video, they might tell you how created it.

[grizzled sand]

hey, when I finish a CTF/ general room, you get a popup with an option to share the achievement, but the link to share on linkedin is broken, is there a fix or a planned fix for that? been checking for a few days so far

[candid pagoda]

is level not updating thing fixed yet?

[bold dawn]

congrats on mod

[sick lance]

Thank you!

[twin ridge]

Gave +1 Rep to @bold dawn (current: #75 - 79)

[bold dawn]

no problem! must not have noticed yesterday

[wraith fjord]

OH GOD ITS MONDAY SOON

[sick lance]

Bank Holiday Monday, so it's cool.

[crude stump]

https://tenor.com/view/húsvét-gif-8857285816241999688

[bold dawn]

heh

the last 24 hours

most the authentications are communications with the backup server

[worn thorn]

somebody had fun spraying

[crude stump]

This your website?

[stable dragon]

HELLO

[crude stump]

Helllo

[pallid lotus]

I drop in sometimes 😄

[bold dawn]

That's between my whole web server, and backup server, and SIEM server

[crude stump]

Somebody was going wild wth

[bold dawn]

Built a new standing/sitting electric desk yesterday

need to move the painting over to line up

[crude stump]

That’s lit

You can control how high it is

[bold dawn]

yep

makes me more productive, and makes me feel less sedentary

[crude stump]

I bet

[shut hawk]

where is your mousepad

[bold dawn]

heh

don't have one

not by choice

just by the fact I haven't had time or money, as it's not a priority

[crude stump]

I don’t use a mousepad

[bold dawn]

My mouse is also a nice little $5 I found

I'd like to get one of the logitech mouses with all the macros

[tawny magnet]

[crude stump]

hello spore

[shut hawk]

ah fair

yeah logitech are great

[worn thorn]

join the G502 club

[sick lance]

I don't have a mouse pad either, table works well.

[worn thorn]

My table developed a smooth spot where I use my mouse.

[cosmic pendant]

https://discord.com/safety/doxxing-policy-explainer

This is new?

[ornate sequoia]

hi

anyone know where do password are stocked on ms-dos ?

[cosmic pendant]

yep

[ornate sequoia]

basically, it's been 8 years I haven't use ms-dos and I forgot my password on a dental software that is now discontinued, and I wondered if it's possible to retrieve my password of this software?

[cosmic pendant]

Depends. but if it's dental software, you have an IT Team?

[ornate sequoia]

I worked on a dental company 10 years ago, and I lost contact with the software's developer

[cosmic pendant]

Probably need to reach out to someone to help that's a professional. I think there are too many gray zone things.

[ornate sequoia]

alr, because in this case the password isn't stocked in ms dos, but on the software

[crude stump]

You could always call up the dental company and ask for the developers name

Eh they might push you away tho

[bold dawn]

i either have a 502 or 503

[bold dawn]

yoyoyo sporeo

have you blessed THM with salem's presence yet?

[shut hawk]

Yep. They've updated a lot of their policies, being in place for 15th April iirc

[crude stump]

good

[tawny magnet]

Not yet

[crude stump]

Gato

anyone know a great resource where i can make my own behavior graph

[sick lance]

What sort of Behaviour?

[crude stump]

malware analysis

like the ones you see in any run

[sick lance]

Eh, I haven't looked in to how they do it.

[near hawk]

Not sure if these might help but theres one called gephi or you got cytoscape

[crude stump]

oo thank you

[twin ridge]

Gave +1 Rep to @near hawk (current: #70 - 87)

[crude stump]

gephi looks good

[cosmic pendant]

like a call graph?

like in Ghidra?

[crude stump]

yeah

[cosmic pendant]

Ghidra, always 😄

[rapid merlin]

@chilly veldt hi, as you've done BTL1. I wanted to ask if I'll need to study from external resources or the course is enough itself?

[boreal scarab]

https://tenor.com/view/cat-confused-gif-7441776660901104597

[outer rivet]

https://tenor.com/view/cat-cat-meme-funnt-cat-black-cat-sleepy-cat-gif-16409614852005252877

[boreal scarab]

https://tenor.com/view/cat-kitty-blep-blehhb-silly-gif-4711505992572152292

[south egret]

https://tenor.com/view/cool-fun-white-cat-dance-cool-and-fun-times-gif-16435335956387921912

[outer rivet]

https://tenor.com/view/hodhodaa-gif-21969781

[rapid merlin]

Happy easter everyone may jesus bless yall ❤️

[crude stump]

You too

[rapid merlin]

Thanks!

[twin ridge]

Gave +1 Rep to @crude stump (current: #162 - 38)

[chilly veldt]

Hi, I only used the study material that was in it, plus my knowledge I have outside of it all

[modest elk]

In the Networks section on learning which module is best starting point

[sick lance]

Wreath or Breaching AD

[boreal scarab]

When your clam scan results are in a very weird directory path... thanks TrueNAS

[cosmic pendant]

Do you know how routing works?

[modest elk]

Nope

[cosmic pendant]

https://tryhackme.com/module/network-fundamentals

[modest elk]

I have done this module

[cosmic pendant]

hmmm.

Did you take notes?

[modest elk]

Yes

On obsidian

[shut hawk]

Follow the paths

[modest elk]

Currently at red team path

[uncut cove]

Check out TCP/IP Network Administration book for better understanding. It's partly outdated, but contains extensive fundamental knowledge + you can find it on github

[jaunty prairie]

+1 for that book. great content

[modest elk]

This

???

[uncut cove]

yes

[sick lance]

Isn't that piracy?

[uncut cove]

I don't know

it's licensed by github if it's there and they don't remove it. but if it is, I can remove my advice

[sick lance]

Whoever uploaded it is infringing copyright.

I doubt it's licensed by Github.

[wintry sluice]

not necessarily. they might be unaware of its presence.

[umbral kiln]

Just because a repository has a license doesn't mean the contents are actually under that license

[lament tendon]

True. Only the copyright holder can assign a license to something.

[uncut cove]

ok, got it

[versed coral]

Hey everyone, Question. Do you find it easier to have a list of tasks to complete when pentesting a site or program that usually follows a structure ofc,
Reconnaissance
Enumeration/Scanning
Gaining Access
Privilege Escalation
Covering Tracks
Reporting

but more in line with programs to run ect

[lament tendon]

I have a checklist, but hacking is a lot about trying stuff that nobody would try normally, so don't rely on that stuff too much.

Having a structural approach to it will help tho!

[wild rose]

https://tenor.com/view/easter-hunt-basket-happyeaster-eastersunday-gif-8448432374594382966

[naive violet]

Yes you work to a methodology