general

[oak river]

And check your sources

[chilly veldt]

it's a 87 lined create view statement

[oak river]

deb https : // http.kali.org/kali kali-rolling main non-free contrib
deb - src https : // http.kali.org/kali kali-rolling main non-free contrib
must be in the sources.list

apt-get update && apt-get upgrade - try this as well

@steel aspen

[zenith forge]

Hi

[sick lance]

'ello

[oak river]

Anyone else a fan of Rooibos tea?

[rapid merlin]

Im sorry but no

[oak river]

You should try it

[rapid merlin]

My mother drinks that

[oak river]

It smells fruity and its nice

Or maybe you dont like it given that fact...

I guess?

[rapid merlin]

Nah idk

Just

[oak river]

Honestly, I swear that OneNote is the best thing that Corporate work has taught me

[steel aspen]

Is it meant to have a ~ at the end of file name

[rapid merlin]

Im an OneNote enjoyer, yes

[oak river]

Uhh

let me check myself

Oh wait, my kali can't do that too

[steel aspen]

This is stupid

[oak river]

It looks like this right now

[steel aspen]

Mine has the ~ at end of file name and if I change it, it's no longer dark green

[warm latch]

It's been a long time since I hopped on THM until the other day. I forgot I was already level 8

[oak river]

Well

I juts fixed problem

My problem

I mean

I could not do that(Update my kali)

Now I can

But it wasn't a problem I actually was searching the solution to

[oak river]

Give me a screenshot

[warm latch]

OneNote is pretty great. A few years ago I discovered Obsidian though, and man oh man, it's incredible

[oak river]

Give me a screenshot of the sources directory

If I can ill help you

[oak river]

Yeah I have obsidian too

But OneNote is just like

Copy paste screenshots

Modify text like in MoS word

While obsidian can't do that I think?

[warm latch]

yup, much more visual

[oak river]

Try Windows logo + Shift + S on your keyboard

[warm latch]

Obsidian can embed images, but text formatting takes some CSS screwery, and you don't have as many options out of the box with regards to images and stuff. But they serve slightly different purposes

[oak river]

cat /etc/apt/sources.list - do this

ah oke

That works too

Let me look at it

do nano /etc/apt/sources.list

nano /etc/apt/sources.list <- do this

And give me a screenshot of what you see

[rapid merlin]

Thanks, im gonna try that too

[twin ridge]

Gave +1 Rep to @warm latch (current: #2054 - 1)

[steel aspen]

I feel dumb

[oak river]

let me help you

@steel aspen

Do this: nano /etc/apt/sources.list

[idle mica]

Put a new job REQ up for my team, if anyone is interested

[oak river]

What is it about?

[idle mica]

You'd be working alongside me, for better or worse

[idle mica]

Infosec engineer II on the cybersecurity defense team

[tawny magnet]

Oh hey weet

[oak river]

Is it Intern/Junior level?

[idle mica]

Oh shoot, hey Spore!

[whole yew]

Be careful about including non-kali repos in your apt sources list. It's a really great way to break your system

[steel aspen]

After that?

[oak river]

Press Windows logo + left shoft = s on your keyboard

[whole yew]

This applies to all debian-derived distros (ubuntu, kali, et al) https://wiki.debian.org/DontBreakDebian

[oak river]

And give me a screenshot

[idle mica]

Noooo unfortunately. Gotta have some level of experience. But even if you don't have a ton of cyber experience, if you are driven and hungry to learn, throw your hat in the ring anyway

[steel aspen]

Go buster won't install

[oak river]

I am interested

[oak river]

You see the deb repositories right?

[steel aspen]

Just goes to save it

[queen flare]

greetings everyone!
nice to meet y'all
i'm new over here
started tryhackme since two days and i'm considering switiching to premium

[oak river]

My resource list looks like this:

# See https://www.kali.org/docs/general-use/kali-linux-sources-list-repositories/
deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

# Additional line for source packages
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware
# deb https://http.kali.org/kali kali-rolling main non-free contrib
# deb-src https://http.kali.org/kali kali-rolling main non-free contrib ```

[thick basin]

Umm... the new AWS cloud learning is £100 per month??? Is it made of gold?

[crude stump]

What the

[oak river]

Oops

[rapid merlin]

No, of AWS. AWS isnt free yk

[oak river]

Let me fix that

[sick lance]

Do you know how much AWS costs to run?

[crude stump]

Awsome #start-here

[whole yew]

Please edit this to be a source code block instead of using the markdown......
```bash
content goes here
```

[thick basin]

Yep, still not sure the cost is justified though surely

[queen flare]

on tryhackme?

[oak river]

Yes, just did that. Apologies, I have rarely done it

[sick lance]

So you'll know why THM have set the price as they have

[idle mica]

I can only imagine THM and HTB's AWS bill. I know for the SANS SEC565 class I did, our labs were probably $600/student for the week

[thick basin]

https://tryhackme.com/r/attacking-and-defending-aws

[oak river]

@steel aspen

Did you do it?

[near hawk]

What? it's still £329

[queen flare]

it says 329 for me

[queen flare]

yep 329

[thick basin]

For 3 months access

Or 100 per month, billed annually

[near hawk]

No that's per seat

[thick basin]

I only want one seat

[near hawk]

It's only for business the annual

[queen flare]

okay, so i don't get access to everything if i get the 12 pound per month premium subscription?

[crude stump]

I mean it is Amazon

[sick lance]

Only the AWS path is exempt.

[oak river]

@steel aspen
In case you come later to check instruction:

1. sudo nano /etc/apt/sources.txt

2. Make sure the below code is present inside sources.txt:

# See https://www.kali.org/docs/general-use/kali-linux-sources-list-repositories/
deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

# Additional line for source packages
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware
# deb https://http.kali.org/kali kali-rolling main non-free contrib
# deb-src https://http.kali.org/kali kali-rolling main non-free contrib

3. Ctrl + O <- Saves what you inserted into the file
4. Ctrl + X <- Exit file
5. sudo apt-get update

[crude stump]

What is the aws path even about

What makes it special

[queen flare]

so i'll get access to everything else apart from the aws?

[sick lance]

You can look at the path.

[crude stump]

Yes

[sick lance]

Ok, AWS, business and educational rooms are exempt.

[thick basin]

I have been a long time supporter of THM, but I'd need to see some value before I spend that kind of money on it

[oak river]

Imma go grab a hotdog

Brb

[crude stump]

Nobody’s saying you have too baro.

[sick lance]

On the flip side, nobody is expecting you to pay for it, it's an optional purchase.

[steel aspen]

Okay it's letting me update properly now

Hopefully machine doesn't break lol

[thick basin]

I understand I don't HAVE to, but I wanted to lol

[crude stump]

Hm interesting

[queen flare]

what are inside business and educational rooms?

[crude stump]

Thank you

[twin ridge]

Gave +1 Rep to @near hawk (current: #67 - 96)

[sick lance]

Rooms excluside to that business or school.

Some business and schools have rooms create don THM.

[rapid merlin]

But they are private rooms right?

[sick lance]

For you users, yes.

[rapid merlin]

Or does every business have access to every business room?

[sick lance]

No.

[rapid merlin]

Like are there public rooms for only businesses?

[steel aspen]

Does that mean I can install go buster via cli now

[sick lance]

No, they're private.

[rapid merlin]

ah yeah

[steel aspen]

Cos the tar gz files are annoying

[queen flare]

i suppose if i'm planning to be a pentester in future, just a premium subscription would do for learning everything i need?

[sick lance]

Yeah, bare in mind, 75-80 % of THM is actually free.

[steel aspen]

Thank you, worked

[twin ridge]

Gave +1 Rep to @oak river (current: #826 - 4)

[thick basin]

Premium is definitely worth it man, best investment you could make for your career

[steel aspen]

Scrubz can you confirm the file up top with the Kali stuff? Does it all look good?

[oak river]

I'm glad I could help you

Community Service is important

[sick lance]

I've just shut all my machines down. lol

[steel aspen]

Well I guess it's working good enough for me 🤣

[rapid merlin]

If it breaks, it breaks

[oak river]

Yeah

By breaking we learn

As long as whatever breaks is not critical or important to us

A virtualbox image - Go ahead and break it as much as you want

[queen flare]

@sick lance thanks bruv
why did the bot flag me for spam lol?

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2148)

[whole yew]

It's fine. The changes is to edit the channels available for the kali repo. it's not bringing anything crazy in. I would still advise you to do some reading on the debian upstream about how apt works though.

[jaunty prairie]

anyone see this error before? trying to brute force a pop3 password in hydra. after ~2 minutes this error starts spewing. I was thinking hydra was broken so I found the actual password, and put it in a smaller word list and it worked. im assuming the error is coming from dovecot, but not sure what I need to alter in hydra to fix it.

POP3 PLAIN AUTH : -ERR Disconnected for inactivity during authentication.

[queen flare]

thanks for the feedback
would you say tryhackme is enough in providing with all the learning to begin in a career of cybersecurity or at least land a job as a pen tester or smth?
or would i need extra stuff along with it

[steel aspen]

Yeah I need to learn about the different package naangers n what they do

[sick lance]

Possibly being a new account an posting multiple times.

[steel aspen]

Recommend any blogs?

[whole yew]

The official docs would be good.

[steel aspen]

That's probably a good idea lol

[whole yew]

https://www.debian.org/doc/manuals/apt-guide/index.en.html

[queen flare]

whoops!

[polar spoke]

Not always 🙂

[thick basin]

I wouldn't say it's enough, but it's the most concise platform available for specialised knowledge. You'll still need some practical experience, so try building a home lab and get yourself into any IT job to handle real world situations

[queen flare]

one of the things i noticed about thm is that there's a lack of programming tutorials on it
(i know it's focused on hacking/cybersecurity mainly, but isn't programming an important part in that field as well?)
so that arises the question, how much programming do i need to learn from other sources and to what extent?

[thick basin]

Python scripts yes, coding not so much unless you want to become a security engineer

[queen flare]

for pentesting?

[rapid merlin]

I think its mainly scripting thats prevalent in the industry

unless you're getting into maldev / rev engineering

[thick basin]

Pentesting is mostly scripting.

[scenic bobcat]

Yea unless you wanna write your own tools or so

[queen flare]

i'm a bit out of depth here
how does scripting differ from programming?
(i used to think it's the same thing until 2 seconds ago (i'm a beginner in computer science stuff))

[thick basin]

Scripting is just building a small program to automate tasks, whereas programming would be building out a whole application

[rapid merlin]

scripting is usually done with higher level languages to automate tasks

[queen flare]

got it!

[thick basin]

Start with the beginner stuff and see how you like it

[queen flare]

i'm just doing B.Tech CSE (1st year) at the moment

[rapid merlin]

That new room seems fun

[thick basin]

Nice. Yeah, build a strong foundation. Cyber security is a never-ending life of learning

[undone sorrel]

hello can someone explain this better to me

unsigned char new_bytes[3] = { 0xDD, 0xD8, 0x90 };
for (int i = 0; i < sizeof(new_bytes); i++)

i understand that if i is smaller than the sizeof new bytes add a 1 to i loop kind of but i don't understand the new_byes[3] = { 0xDD, 0xD8, 0x90 };

can someone explain this better if they have the time please? Thanks in advance 😄

[queen flare]

are you familiar with arrays in C? @undone sorrel

[undone sorrel]

i understand a tiny bit of arrays with python and stuff, but it still confuses me a bit

i read the array in learncpp but this one confuses me

[queen flare]

i think i've got some notes on array from my college
if you don't mind me dming it, i'll be happy to take pictures of it and send it to you

[undone sorrel]

if you could, that would be amazing 😄

thank you so much brother ❤️

[queen flare]

no worries
gimme a few mins

[undone sorrel]

take your time pal

[queen flare]

that line basically declares an array called new_bytes with the data type 'unsigned char'
you should be able to understand what an array it, if you can go through my notes

[undone sorrel]

so if for example
new bytes had 4 values in it like it would have to be
unsigned char new_bytes[4] = { 0xDD, 0xD8, 0x90, 0xDC };

[queen flare]

yeah

[gritty fern]

I just figured out how to get linux on my school computer

[boreal scarab]

How so?

[queen flare]

why do u even want to install linux on your school computer

[gritty fern]

i dont, i just could if i wanted

[whole yew]

I would advise you to not make changes like that to your school issued equipment and hardware. I know of a couple of students who were expelled for hacking their chromebooks.

[gritty fern]

Yep thats not allowed under our tech usage policy and risks expulsion

[boreal scarab]

@gritty fern and PLEASE do all the school technicians a favor, and DONT drop your chromebook. We will be pissed off that people treat chromebooks like a toy, and their property.

Not saying you do that, just saying my peace lol

[gritty fern]

I see people throwing them all the time at my school

[boreal scarab]

Ontop of that. NO STICKERS!

[gritty fern]

2 day detention for stickers at my school

[boreal scarab]

Those kids have a special place in my heart..... the burning depths, I hated those kids

[gritty fern]

lmao

[boreal scarab]

https://tenor.com/view/newspaper-gif-18150652

[gritty fern]

😭

[boreal scarab]

Not at you, those kids lol

[gritty fern]

yeah ik

[rapid merlin]

poor cat

:(

[gritty fern]

He threw his chromebook

[sick lance]

Piece*

[gritty fern]

peece

[boreal scarab]

Tomato tomaato.

I'm over here trying to figure out how I'm going to setup a cell service booster in the basement...

[gritty fern]

Valid

Some basements get no cell at all

[boreal scarab]

Yah, headache, good news is. Nearest cell tower is in the back

Bad news is, multi million dollar house, so no drilling

[gritty fern]

And you need a booster still?

[boreal scarab]

Nah, got a booster. Demanding instructions, so no idea how they want it setup

[gritty fern]

I see i see

[boreal scarab]

The booster needs to be at least 2 feet away from the indoor antenna, and the outdoor antenna needs to be 50 feet horizontal or 20 feet vertical from inside antenna

[gritty fern]

lol

[boreal scarab]

Welcome to my dilemma

[wintry sluice]

then use a sledgehammer

[boreal scarab]

https://tenor.com/view/mansion-game-playing-video-games-games-gif-13568082

^me routing a cable

[crude stump]

Mr bat wants to play

[sand trench]

https://www.youtube.com/shorts/G5q0VvTCYEI

[worn thorn]

that is pretty neat

[spice adder]

wow kiterunner is great

[boreal scarab]

Mr Bat doesn't play nice

@crude stump

[crude stump]

He doesn’t

Mean Mr bat

Wait berries did you work in IT for the school?

[boreal scarab]

Very short amount of time

[crude stump]

How was it

Bet you it kept you occupied tho

With all the broken stuff

[rapid merlin]

hiii!

[boreal scarab]

Dude.... the amount of chromebooks I got back with like "I just dropped it" and it was OBVIOUSLY thrown

[crude stump]

💀

[rapid merlin]

im now Level 9, how can i update my role on the discord?

[crude stump]

I think the leveling up is still glitched

But you can try

Try to re verify with /verify

[rapid merlin]

still glitched i think yeah

i'll try tomorrow or in some hours

xd

[sick lance]

0x8 is a nice colour anyway

[sand trench]

but scrubz you green now

[sick lance]

I know. 🙂

0x9 isn't a nice colour imo

[sand trench]

aaaaaaand one of the room test rooms for this week completed

[rapid merlin]

hello

[sand trench]

ello ello brobot

[rapid merlin]

trademarked

[sand trench]

unless brobot can prove they have a trademark shadow is not gonna honor it

[crude stump]

Hey y’all I’m BroBot

[molten sky]

🤨

[sick lance]

Oh no, you've conviced me otherwise

https://tenor.com/view/not-gif-4797021

[molten sky]

there were a couple nice ones in the low ranks ngl

[gritty fern]

That looks like that one panda pokemon

[molten sky]

looks like it'd grill up nice

[gritty fern]

😭

[gritty fern]

All he saw was me failing to use sql

[boreal scarab]

Ahhh, back to coordinating with my old boss for this client

[gritty fern]

Sneaky guy

[sand trench]

so many roo things

but none are kangaroo:S

[tawny magnet]

[rapid merlin]

Top 5 Sinco

[boreal scarab]

Pulling a muscle in your chest hurts like a son of a bitch

Like right under your ribs on thr right side. Painful as hell

[wooden totem]

how do you even do that

[sand trench]

you sure you did not break your diaphragman

[wooden totem]

that would effect breathing i think

[buoyant tree]

gotta love custom fan speeds and modes

[oak river]

When I was training for a marathon and decided to go from 21k to 30kilometers

I though I had a heart problem

It was that much of a pain or an odd pain

[wooden totem]

#room-hints 💯

[tropic stratus]

Is it normal for the terminal to be a bit laggy when typing commands once you've established an ssh connection?

I thought like when I type a command it's "typed" on my end, and only when I hit enter is it sent and executed, so I don't understand why there's "terminal lag"

it's not unbearable but there's about a half second delay or so and I'm just curious what the reason is

[naive violet]

@fallen cairn Hey that's a private room, please don't ask for help for it here.
Contact the room creator or whoever gave you access

[delicate reef]

Yall

Msi G244F Esports E2 Gaming Monitor 24″ 180Hz IPS no HDR

Or

Acer Nitro VG240YSbmiipx 23.8 inch 165hz HDR IPS

[buoyant tree]

not enough information

what resolution are they

[delicate reef]

Both are FHD

Getting FHD cz

I'm leaving this country in a year so I'm leaving it here

So I'm going budget

[naive violet]

You got a monitor now? I'd just live with that for a year

[delicate reef]

No I'm asking which is better to get to live with it for a year

Cz like

One got HDR the other doesn't but idk if that matters

[buoyant tree]

Where are the Impacket things on the thm attackbox

[buoyant tree]

eh HDR is worth it

[sick lance]

locate impacket

[buoyant tree]

eh too many results to filter through

[oak river]

Where do the files fo when I use get through smbclient?

[wintry sluice]

should be the working directory (directory the terminal was in when you started smbclient)

[oak river]

I will check, thanks

[gritty fern]

Hello

[rapid merlin]

👋🏻

[oak river]

The problem was that I only used get [file], without doing get [file] [name of file on our machine]

[outer rivet]

Bro online

[rapid merlin]

I'm online from 6pm-1pm : )

[wintry sluice]

19hrs? damn

[simple kernel]

hey guys

i am recruiting for a uni project

and i need participants

[sick lance]

No, we don't help with that here.

[simple kernel]

i mean this is recruitments

for assignment

not very formal tho

[sick lance]

For protection of our members, Unless you have permission by our admin team.

[simple kernel]

ohh i see i see

sorry then i just need some participants hahaha nothing else

[sick lance]

Then ask your people in your uni. 🙂

[rapid merlin]

Yes.

[simple kernel]

i am, i just have some specific criterias and i wanted to widen the pool of participants

[naive violet]

Hey, Scrubz said that we don't do that here. Please respect that.

[simple kernel]

don't worry, i am just responding, i am not negotiating :P

[crude stump]

Yuuur

Wsp

[wooden totem]

master hacker

[sick lance]

When updog doesn't want to install...

[crude stump]

What’s up dog

Get it

[sick lance]

An alternative to python server.

[crude stump]

what’s ⬆️ dog

[crude stump]

O

[solemn ravine]

So there was a Data breach from one website. My physical address phone number email was leaked. Any tips what to do?

[crude stump]

Python server like discord? Or a actual server that hosts python

[naive violet]

Be aware of increased phishing attacks

Scrubz I've been snookered by maths

[sick lance]

Like the http.server on Linux etc

[wintry sluice]

ie python -m http.server

[crude stump]

Can’t you change your phone number

[sick lance]

How did that happen?

[crude stump]

Like calling up your phone company

[naive violet]

Building something, struggling to get the maths working

[solemn ravine]

I will change it tho. And also change my email address

[sick lance]

Not that's not like you, you're human after all!

Is this Radio work?

[naive violet]

Yep, nothing is linear

[wintry sluice]

algebra? calculas? addition?

[wooden totem]

You have to order Hoover Max Extract Pressure Pro Model 60 dust filter and move to Netherlands

[crude stump]

Yes definitely

That’s kinda all you can do. I have a scam shield that is amazing

[sick lance]

I can't even behin to imagine how I could help

[keen forge]

Quick question about the rooms. I noticed that some rooms seem to be hard to Search for? For example, one of the THM blogs has a link to the CompTIA PenTest+ course, but when I go to search for it by name, nothing pops up. Is there a trick I'm not aware of?

[crude stump]

Ohhh

[sick lance]

It's a path.

[sick lance]

https://tryhackme.com/path/outline/pentestplus

[naive violet]

I've done the algebra
I basically have to find the closest fraction to a value, with constraints on the numerator and denominator

[boreal scarab]

https://tenor.com/view/skeleton-dead-inside-happy-gif-9245119

[crude stump]

https://tryhackme.com/path/outline/pentestplus

[keen forge]

Thank you for the links! How do you find these paths?

[boreal scarab]

@naive violet oh, the universal booster we were using, it works

[naive violet]

Huh, neat

[crude stump]

If you click the learn

[sick lance]

Go to learn on the dashboard

[solemn ravine]

Thats why I am getting a lot of spam messages on Whatsapp

[crude stump]

Tbh is there even a app that blocks text message scams?

I only seen one for calls

[boreal scarab]

Yah, not the one I showed you, we found one called WeBoost, very nice quality

[naive violet]

Google Messages does

[keen forge]

Oh, I see, there aren't that many paths to search through. Thank you!

[sick lance]

Samsung phones have a setting too

[crude stump]

There always one step ahead

iPhone doesn’t unless I just don’t know about it

[crude stump]

It’s more of what’s inside of them

[keen forge]

Gotcha! Thank you

[twin ridge]

Gave +1 Rep to @crude stump (current: #126 - 51)

[crude stump]

You’re welcome. Also just a fyi some of the paths are subscriber only paths, so if you don’t have access just search up the topic of that path. There should be other rooms that are similar and free

[keen forge]

I'm a subscriber, fortunately. I've been a bit of a bum, admittedly, just sitting on a subscription without doing anything with it, but I'm trying to get serious now that my "summer vacation" I gave myself is over. Currently doing the "complete beginner" path just as a brush up from what I learned in my degree

[wintry sluice]

I thought it was the case that all paths contain some subscriber only content

[crude stump]

That’s awesome

[crude stump]

Hm

If that’s the case “all the rooms or only some”

Matty are you leaning towards red team or blue team

[keen forge]

Uncertain at this point. I don't feel like I've gotten a lot of exposure yet to make a determination, but I feel like I enjoy forensics...though that could simply be because it was the last class I took. Red team is super interesting, but I'm not a youngin' anymore and I don't feel like I have the technical expertise to be the tip of the spear quite now

[crude stump]

Yeah forensics is definitely fun

[oak river]

SMB was a bit hard to dig up in the last stages for an easy learning path

Had to sneak into a writeup

[chilly veldt]

Forensics is amazing!

[oak river]

I love it, but I feel like they should have told me what to do

In this case I did not what to do

And it's a learning room

Otherwise Im happy with the process

I mean turn the heat up, once I've learned how to cook at least

[keen forge]

I'm optimistic about it, but like I said, I don't really have a lot of experience with anything, so it's hard for me to know what field I'm most interested in

[chilly veldt]

I am a "forensics expert" and Security Analyst/Sepcialist
So of course I love forensics

[keen forge]

I'd love to get some perspective sometime! Or even just some tips on good ways to dip my toes in

[oak river]

AAAAH

You work as that?

[primal thorn]

hi

[chilly veldt]

yeah, I just changed job to be a SOC employee, where I analyze alarms, set up/tune detections and manage/respond to incidents

[molten sky]

@chilly veldt thought we had a thread at some point but ~ apparently not ~

[chilly veldt]

a thread for what?

[molten sky]

DM I mean. Went to message and it was empty lol

[primal thorn]

can anyone help me for ctf ;/ i stuck on it

[chilly veldt]

oh lmao

[primal thorn]

just a little bit help, after 2 years i lost my skills

[molten sky]

was it you that I was talking about sherlock w before? i thought it was noir but apparently that was wrong

[chilly veldt]

I know about sherlock yes

used it a lot before

[molten sky]

probably was then
saw your name pop up here and it just came back together

[chilly veldt]

yeee

[molten sky]

was talking to noir about a PR I was dealing with and was met with strong confusion

[chilly veldt]

ahh, yee

[mossy river]

Spotify are trying to limit my power

[molten sky]

discord has tabs?

[mossy river]

This is Google Chrome

[molten sky]

do you just have 17 different chrome tabs with spotify open

[primal thorn]

pff i can't anyone here for help

[near hawk]

huh?

[molten sky]

is it a thm room @primal thorn

[mossy river]

How dare you think so low of me

[near hawk]

Why you need so many?

[mossy river]

M u s i c

[molten sky]

does each tab make it louder

[primal thorn]

nope from 2017 random ctftime ctf

[near hawk]

You having a remix party or something?

[mossy river]

Was creating a playlist ahah

[shut hawk]

WAIT HOLUP

everybody type +:star: rq

[mossy river]

Add a reaction?

[shut hawk]

I genuinely did not know about this

[naive violet]

⭐

[mossy river]

This is why I'm discord admin and you're not

[naive violet]

That's an emote

[molten sky]

shou've been me

[shut hawk]

u forgot the + u noob

[naive violet]

Heh

[mossy river]

It has very limited use-cases.
As soon as another message is sent, you cannot react to the one above it

[molten sky]

come again

[naive violet]

Jayy I have to rewrite a bunch of python code to c++

[whole yew]

nice

[shut hawk]

L

[whole yew]

get that performance

[mossy river]

It would be cool if you could do +<number>:emoji: for accessiblity

[molten sky]

tf are you both on about with this + thing

[shut hawk]

lose your sanity

[molten sky]

oh my god

[chilly veldt]

that was written with +:emote;

+3

[molten sky]

why did nobody tell me this years ago

[mossy river]

Message 1: Hello!
Message 2: Hi

If I type +⭐, it will react to Message 2, there is no possible way for me to add a reaction to Message 1 using the feature.

[shut hawk]

c++ kept telling me of for using too much memory ☹️

[chilly veldt]

oh well, the numbers doesn't work

[molten sky]

this is completely new to me

[chilly veldt]

but the different emojies does

[naive violet]

It's microcontroller code
Library support for a peripheral chip is way better with arduino c++ than the micropython/circuitpython libs
Difficult maths problem to solve otherwise

[whole yew]

C++ doesn't do that. Your OS will if you leave danglng pointers, though.

[whole yew]

checks out, are you using mbed?

[shut hawk]

It was when I was programming an Arduino, I think something to do with the array size being to large for it

[chilly veldt]

Juun I found out why my stuff broke with my SQL calls

there was a count added into my SELECT statement

[whole yew]

That's not C++ telling you it doesn't work, it's the IDE telling you that you don't enough memory on the chip for the code.

[shut hawk]

ahh okay, sorry c++ for the slander

[primal thorn]

i stuck on nosql inj ctf can anyone have time for help please?

[mossy river]

My friend showed me a joke today which involved the punchline of "Because he can't C#!", and my friend asked me "What on Earth does he can't see hashtag mean" LMAO

[shut hawk]

This is cool though, what's the project for?

[whole yew]

I've done some algorithms that took a 4GB array as an input, so I really doubht it's C++ itself failing to understand data that size

[mossy river]

Have you tried checking the write-ups now that the CTF is no longer active?

[primal thorn]

i could't find any writeup about it

[naive violet]

Pi pico. Peripheral is an si5351, i2c clock generator
The maths problem suuuuucks.
For a given decimal value, find the best approximation a/b
15≤a≤90
3≤b≤2049

[mossy river]

What's the CTF called?

[primal thorn]

it was very simple but i trying about 3 hours :D

[primal thorn]

https://kslweb3.spb.ctf.su/2-7/ here the link the vuln was nosql

[whole yew]

oooof. yeah, optimization like that is not going to be super simple

[shut hawk]

How many dp?

[mossy river]

Can you send me the CTFtime posting instead?

[naive violet]

You're already working at 1e-3 minimum
I can already guesstimate precision is gonna be awful, not sure how they're doing it smartly

Oh, no, accuracy will be awful
Precision maybe ok

[primal thorn]

its called "SPbCTF" but i can't find it task in events, i found it from teams and after from the team's site

[wise moat]

Hey guys. Whatweb is not running in my kali linux, because of my windows firewall. Anyone have idea how to fix that?

[shut hawk]

Good luck, I always find division nasty to work with

Meanwhile I've got around ~month till my exams 😢

[mossy river]

And what's the challenge called?

[whole yew]

it's been so long since i've used something like that, i can't suggest anything thatm ight be helpful

[naive violet]

Yeah I mean I just have poc code to handle a rotary encoder, an oled, and had a tiny bit for the si5351
It's not a biiiig deal to rewrite once my tooling is sorted

[primal thorn]

it have't any descrption its so simple mongodb injection but after 2 years rest i lose my skills

[chilly veldt]

oh well, I should sleep, it's EID tomorrow

[mossy river]

Are you sure the challenge is still online..? lol

[primal thorn]

yep

i reconised from them

[mossy river]

What do you mean?

[cosmic pendant]

rotary encoders are dope

[primal thorn]

the platform of the challenge

[mossy river]

I cannot access the challenge link you sent so I have very little information to go off.

I would probably recommend checking out more recent challenges? They should have write-ups too:)

[primal thorn]

how

[mossy river]

It might be country restricted, are you located in Russia?

[chilly veldt]

looks like that is the specific challenge

[primal thorn]

ohh i finally found it challenge platform

but there are also not writeup lol

[crude stump]

Is it true it’s always rainy in Britain

[wintry sluice]

no, just mostly

[shut hawk]

it kinda depends on where you are

but most of the time yes

[crude stump]

I wonder why

[wintry sluice]

the atlantic

and gulf streams iirc

[sick lance]

Mountains also.

[fallen pendant]

Thank you for having me in this awesome community.i am new here and I just joined the Tryhackme to learn some skills. Please I am new in IT and I want to get into cybersecurity. Can this Tryhackme help me to get the skills I want and for me to get a job with this skills am learning on Tryhackme. Thank you

[devout palm]

Yes absolutely, THM has a lot of content. And approximately 70% of them is free!

Welcome (:

[fallen pendant]

Thank you

[twin ridge]

Gave +1 Rep to @devout palm (current: #27 - 289)

[naive violet]

VFO!

[fallen pendant]

So I can go ahead and study it right?

[buoyant tree]

Anybody got a idea of what I should even be searching for, something like to inventory it
Need to implement a QR code system which I will put on PC's then be able to scan them and get their relevent information such as id, specs and stuff

[devout palm]

Yep! #general message Here is the recommended path by shadow

[fallen pendant]

Thank you

[twin ridge]

Gave +1 Rep to @devout palm (current: #27 - 290)

[cosmic pendant]

just keep spinning and spinning, and you can't break nothing!

[rapid merlin]

👋🏻

[rapid merlin]

wasp heap.

[oak river]

The Network services are a bit hardcore in some aspects

I hate myself for looking writeups, but the machines simply dont do what is expected

A netcat shell ran on a telnet connection gives some error

But oh well

[lone gust]

how do I upload an image here? I have a question

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 9, 2024, 10:21 PM

[molten sky]

^

( need to verify to embed )

[rapid merlin]

reaction time sub 80 second

atleast

270wpm

[lone gust]

thank you

[rapid merlin]

typing

[molten sky]

https://tenor.com/view/crocodile-attack-surprise-attack-jump-up-here-i-come-the-pet-collective-gif-14154072

[rapid merlin]

i type 1 letter on my keyboard

and then

boom

youve already

ndfdfjngfd

sorry im drunk

[molten sky]

that'll be both of us soon hopefully

[rapid merlin]

drinking is bad for you

!!

[crude stump]

Jsjdhirishshd

[oak river]

Reached you AceS

Finally 0x7 too

[molten sky]

if you drink enough to forget it's bad for you is it still bad for you

[crude stump]

1 more rank

I’m actually 8

[oak river]

Oh

Well

Gon get yo

[crude stump]

Hats off to you

Wow they added a new command thing

[oak river]

Grinding that knowledge

Okay but I need some advice

[crude stump]

Oh wait

Apps and cmmands

[oak river]

The easy paths usually until now have been very precise and beginner friendly

[rapid merlin]

./nimscan.nim

[crude stump]

Pretty unnecessary on discords part in my opinion

[oak river]

There are some easy rooms that throw in some things that I have not met until now and do not explain the a lot

Like netcat and msfvenom

In this case should I check for msfvenom rooms and netcat rooms

Or do my own online research

[crude stump]

Yeah it’s usually like that because they want to hit that it’s prolly in the next room

[rapid merlin]

i can attest to that

[oak river]

The next room is Burpsuite

Has nothing like that

[crude stump]

Never know it could be

[oak river]

Thankfully

There is a reverse shell easy room

https://tryhackme.com/r/room/introtoshells

Guess I'll take it in a bit

But im done for today

[lone gust]

I am trying to do the network security room and I keep getting this error with the nmap command. Does anyone know why?

[oak river]

yes

[unreal solar]

MACHINE_IP

[oak river]

nmap and put the IP

[rapid merlin]

[unreal solar]

Start the machine

Get the IP address

scan

[oak river]

Click on start the machine in your browser

Wait for the IP to appear

Copy IP

Replace MACHINE_IP with the IP of the machine from your browser on the page

[lone gust]

oh snap.. thank you alot

i was getting frustrated

[oak river]

Were all here for you mate

No problem

When you see something similar in other commands

Except nmap

Know that it's a dummy word

[rapid merlin]

[oak river]

I'm also a beginner so I would appreciate some basic feedback

So during enumeration stage

We mostly use nmap right?

After we discover open ports, we try to connect:

Often I guess we would try an ftp, ssh or telnet connection?

[sleek viper]

Definitely low hanging fruit but NMAP can be super loud if you run the wrong scan.

[wintry sluice]

you can also use the service info that is returned to lookup exploits

[sleek viper]

https://www.exploit-db.com/documentation/Offsec-SearchSploit.pdf

You can use exploitdb's offline database and just keep it updated

[oak river]

You mean security measures would detect and block me?

Like IDS/IPS/Firewall?

Or a human resource that is sitting and observing the system?

Or what do you mean by that? I mean why would I care that I am loud if the machine does not have any security measures preconfigured?

[scenic bobcat]

Most likely if its a loud enough scan- best example is my isp they will detect it if you're doing a aggressive port scan and boot you off lol

I think thats under IPS if i learned that correctly

[scenic bobcat]

Practice machines most likely dont have such stuff setup except like the harder ones probably

[sleek viper]

Talking about a real life scenario, but yeah either an IPS will detect malicious scanning based on a signature of your behavior, and your actions will be logged, or your origin IP could be blocked by a fire wall rule with a program like fail2ban

Could end up in a SIEM and flagged as high risk and then investigated

[sick violet]

you weigh 400lb's??????

bulllshit

[sleek viper]

But more than likely depending on the target your ip would be black listed for a time

What weighs 400lb and lives in their mom's basement?

Reference from popular culture.

[sick violet]

gotta squat yo ass

[thorny walrus]

Wow just discovered you can add domains as a profile connection on discord

[sand trench]

shadows old crt tv

[sleek viper]

Interesting

[sick violet]

gotta lift your ass on the bench press fr

jkjk

[sleek viper]

Not really fat it's a reference from popular culture lol

https://tenor.com/view/cat-fat-fat-cat-standing-cat-standing-gif-10735767612654393346

[wintry sluice]

https://tenor.com/view/shrek-puss-in-boots-feed-me-if-you-dare-feed-me-hungry-gif-18327021

[sleek viper]

lol

[sick lance]

#room-help for things like this please

[wooden totem]

181.44m2 of Stachybotrys chartarum

[crude stump]

?

[rapid merlin]

taxi holding point alpha one via golf lima alpha

🤔

[crude stump]

Oh

I thought that always been like that

[thorny walrus]

idk tbh

[rapid merlin]

it's not new lol.

[thorny walrus]

Figured

either way its new to me

[rapid merlin]

that's the point.

: )

you learning!

[thorny walrus]

🤷‍♂️

[desert shuttle]

https://tenor.com/view/popcorn-gif-14980450905264007240

[umbral bay]

Learning 🥳

[silver sky]

How you do it?

[sand trench]

meep moops time for shadow whadow to go for sleep sloops to the beepity booppity beep boops

[silver sky]

It's not a GIF I'm looking for.

[rapid merlin]

what gif you looking for?

[silver sky]

If you look at what I was replying to. I was wondering how you connect a domain as a connection on your profile

[rapid merlin]

oh oh, my bad.

[rapid merlin]

thanks, I was about to do it

[twin ridge]

Gave +1 Rep to @buoyant tree (current: #151 - 44)

[buoyant tree]

np

[thorny walrus]

thanks 😆

[twin ridge]

Gave +1 Rep to @buoyant tree (current: #150 - 45)

[tropic stratus]

Question, I noticed MSF venom payloads for the reverse shell use the nc command, does that mean the target PC has to have netcat installed on it for it to work?

[slender scaffold]

netcat is typically on the system yeah

[tropic stratus]

nevermind, there's other reverse shell commands too

is netcat on most linux systems in actual pentesting?

[slender scaffold]

iirc yeah

[tropic stratus]

I googled netcat and it turns out it's almost 30 years old

I thought it was relatively new, 2010-ish

[slender scaffold]

I’m so discouraged I just wanna go home and sleep

But I have to do taxes

Gawd and I have to wash my car cause the birds hath much blessings upon it! >_<

[rapid merlin]

so happy i'm not a grown up

taxes are so scary

a

[tropic zenith]

For the room Windows Privilege Escalation, Abusing Service Misconfigurations, windows defender will stop you from completing task 5

I've never seen windows defender do something useful before. 😂

[slender scaffold]

Naw it’s alright

[gritty fern]

What do we think about cybersecurity memes in here?

[crude stump]

Love em

[slender scaffold]

Just don’t spam :3

Putting them in conversation context is fun too lol

[outer rivet]

[cosmic pendant]

I thought Rust was a magic security fixed coding langugage!: https://www.bleepingcomputer.com/news/security/critical-rust-flaw-enables-windows-command-injection-attacks/

[crude stump]

Tbh you can never rely on something that’s considered “safe” somehow people find out how to abuse it

[crude stump]

I’m not very versed in the rust language but is it saying if the person didn’t properly escape the batch or exe, the attacker can inject arbitrary code into it?

[sleek viper]

Ncat is by the NMAP devs

[boreal scarab]

@vocal gale Why aren't ya coming to Defcon this year?

[molten sky]

defcon should be free so i can go

[visual terrace]

[polar spoke]

netcat is how all kinds of stuff got done on old systems haha

[molten sky]

hot singles are in your area

[crude stump]

💀

[molten sky]

gonna start a roofing company called hot shingles

[crude stump]

Yooo

That’s smart

[gritty fern]

I mean thats not what would happen but sure lol

[molten sky]

i'm not even that old and what you just said aged tf outa me

[gritty fern]

How so?

[molten sky]

not familiar with all the hot singles ads?

that was an interweb staple

[gritty fern]

Nah i know that

[molten sky]

ah sounded like you didn't ---- we good then

[gritty fern]

Thats just not what ILOVEYOU.txt.vbs did

[molten sky]

was like there's no fucking way it's been dead for that long

my god vbs

[gritty fern]

Yeah lol ive used it despite being very new to the computer scene

[buoyant tree]

heya Verum

[gritty fern]

You do know what that’s referring to right?

[molten sky]

https://tenor.com/view/hi-gif-5545306308765291118

[buoyant tree]

You going to watch the fallout tv series tmrw?

[molten sky]

i assume some high value collector one dollar bills are at the auction house

[molten sky]

i didn't even know that existed until now

[buoyant tree]

Hmm, its got a lotta hype with it

All the reporters who got early viewing have had positive impressions

[gritty fern]

Nah ILOVEYOU.txt.vbs was an exploit way back when that used a vulnerability in VBS that allowed it to execute system commands, therefore allowing it to infect, it travelled mostly by attaching itself to sent emails and masquerading as a love letter

[molten sky]

relevant xkcd : geoIP hot singles https://xkcd.com/713/

[vocal gale]

Got a couple personal things and a surgery so won't be able to this year

[molten sky]

oh shit i thought you were referring to the msg i replied to 😂

[vocal gale]

@boreal scarab next year for sure hopefully

[gritty fern]

Ohhh lmao

[molten sky]

vbs was such a fun lil thing to mess with back in the day

haven't actually read a line of it in years

[gritty fern]

I was surprised you didnt know cuz it was kinda a huge exploit

[buoyant tree]

just openedd my laptop

and now debating

[molten sky]

wait i have a fix for this

[buoyant tree]

eh I am okay with updates

just thinking If I should do it now or later

[gritty fern]

Nah itll still be updating in ~235 years

[molten sky]

here you go

[buoyant tree]

Never

[gritty fern]

why hyperlink

[buoyant tree]

jk, its on another laptop

Although not my gaming one/main one

[molten sky]

cause it runs hyperland

[gritty fern]

Ig i just get instantly suspicious when people send hyperlinks lol

[molten sky]

normally i agree but discord actually tells you what it is before it does anything

[crude stump]

That was one of the most dangerous malware

[gritty fern]

Yeah i accidentally clicked it and it showed fedora project

[molten sky]

only time it's valuable is when somebody whitelists youtube.com on their client so it doesn't warn them before sending them to rick astley

never whitelist youtube

[gritty fern]

Why would you whitelist anything tbh

Just a possible security issue imo

[crude stump]

Too lazy to hit allow

Prolly

[molten sky]

eh i get it -- like if you're here helping with thm rooms all day some people might not wanna get prompted for every single tryhackme url

[gritty fern]

Ig

Maybe for THM id whitelist but prolly not

[crude stump]

Personally I would never turn it off but to each is own

[gritty fern]

Im extremely secure

[molten sky]

yeah i don't bother

i don't mind the extra click

[gritty fern]

Same

[molten sky]

i do appreciate the option existing tho

[crude stump]

Also saves you from accidentally clicking on a link

[molten sky]

cause screw devs who don't give options

[gritty fern]

real

speaking of options actually

I made a command line tool that cracks hashes!

very proud

It does them systematically though so anything more than 4 characters is unviable

[lavish shell]

Nice job, nit a bad program to havw

[gritty fern]

and you can input either a hash or a plaintext password with switches

[polar spoke]

neat 🙂

[molten sky]

is it a brute force approach or a more granular(?) technique?

[gritty fern]

Thank yee

[twin ridge]

Gave +1 Rep to @polar spoke (current: #158 - 41)

[lavish shell]

But four characters is extremely limited

[molten sky]

building your own tools is always pretty fun.

[gritty fern]

Brute force

Completely

[molten sky]

working on expanding a foss tool rn just waiting for some PRs to get merged

[gritty fern]

working on a better algorithm though to search only the most command format of pws

[crude stump]

No wonder you say neat. Hash cat dev

[molten sky]

it's nice when you can see something come out of your work

[lavish shell]

Is it dictionary based?

[polar spoke]

¯_(ツ)_/¯

[crude stump]

Hydrogen did you make this on C

[molten sky]

that's me. i made hashcat. || don't ask to verify tho i don't do that ||

[polar spoke]

lol

[crude stump]

?

Really?

[molten sky]

the hashcat dev was actually on here, but i forget who it is

[crude stump]

You pulling my leg

[molten sky]

i would never

[crude stump]

Chicken

He’s the lead dev

[polar spoke]

Chicken

[molten sky]

that's right

[polar spoke]

well, not lead technically

[buoyant tree]

Given the inherent stochastic nature of the cryptographic hash functions utilized by the hashcat password recovery tool, and considering the computationally intensive process of iterating through the vast permutational space of potential password candidates within the context of a brute-force attack, how might one go about optimizing the time-space trade-off in relation to the granularity of the character set employed, while simultaneously mitigating the potential for collisions arising from the pseudo-random distribution of hash values across the range of possible digest outputs, and what implications might this have on the theoretical complexity bounds of the underlying algorithms in light of the asymptotic behavior of the hash functions under various input conditions, particularly with respect to the avalanche effect and its impact on the non-linearity of the resulting digest mappings?

[polar spoke]

just one of the core team

[molten sky]

mah lawd

[crude stump]

I see

[buoyant tree]

I was waiting to ask the creator of hashcat that, now I finnaly found the person who can solve the question

[lavish shell]

I can tell when I'm not wanted lol. See you all later

[molten sky]

my eyes just glazed way tf over

i know every single one of those words

[polar spoke]

as jargon filled as this is, it does actually ask a question i can answer lol

[molten sky]

in that order? fuck if i know may as well be swedish

[crude stump]

Mind if I ask what language you made it with?

[molten sky]

i just realized you answered as well lol

[polar spoke]

😛

[buoyant tree]

I don't even know what the question is, but props to you
Just gave Claude a prompt for creating this

[polar spoke]

it loosely asks "how can you optimize bruteforce and what impact does that have on collisions due to the nature of common hash functions"

the whole second half can be answered as "we don't care at all about the mappings/collision rate in the vast majority of cases"

[molten sky]

also you weren't even talking before
do you just sit there, staring, waiting for someone to mention hashes or cracking or hashcat

[polar spoke]

the first half has a more nuanced range of answers

[polar spoke]

I'm everywhere all at once and nowhere at all 🙂

[buoyant tree]

hmmm

[gritty fern]

Nope it guesses everything possible combination

[gritty fern]

C++, first language i actually technically learned

[crude stump]

That’s sick

[molten sky]

brb gonna go open a pr on hashcat that just adds my name to the readme

is that still a thing that happens?

[polar spoke]

LOL we had some stupid ones recently like that

[molten sky]

recently 🙄

[crude stump]

Ima learn C anyone know basic security programs I could make?

[buoyant tree]

Did you accept them???

[polar spoke]

obv not

[buoyant tree]

Password manager

[crude stump]

Oo

[crude stump]

Ima definitely write that one down

Thanks

[gritty fern]

Anti-priv esc? Maybe possible and if it is seems relatively easy to pull off

[molten sky]

a maintainer just replied to me apologetic like so so sorry for taking so long to approve (it's been like 2 days) and the first thing i thought of was like my god people suck if you gotta apologize for that being too slow

[crude stump]

I’ll have to look more into it

Write that one down too

[gritty fern]

Chat-GPT says its possible

[buoyant tree]

I propose that we all now call "Chat-GPT" now be "Chat-Gibbidy"

[crude stump]

Yea

[molten sky]

spotted the prime watcher

[crude stump]

Yes

[gritty fern]

All in favor say “Aye”

[buoyant tree]

Aye

[gritty fern]

Aye

[crude stump]

Ay

[buoyant tree]

We be following the pirates rules

[buoyant tree]

Didn't get the reference

[crude stump]

AYEEEE CAPTAIN

[molten sky]

wait, really?

[buoyant tree]

nop

[molten sky]

he calls it chat gipity all the time on his videos lol

[buoyant tree]

who?

[molten sky]

idk i think he's literally called the prime or something

[buoyant tree]

Captain Jack be our captain

[molten sky]

(now fmr.) netflix software guy

90% of his videos are practically rants

[buoyant tree]

I can't find him

[gritty fern]

camman18

[molten sky]

ThePrimeTime.

https://www.youtube.com/@ThePrimeTimeagen

[buoyant tree]

Minecarts should be faster

[gritty fern]

AH BIRCH

[buoyant tree]

Birch is the best wood type

[gritty fern]

Only for stripped logs

[buoyant tree]

Oh, I have seen him once or twice

[molten sky]

@polar spoke i just opened up your Issues page and i stg it's like a foreign language

[gritty fern]

I wanna code a custom tool rn but i dont have a computer and idk what to code

[buoyant tree]

repl.it if you really wanna code and are on a phone

[gritty fern]

Im not that desperate jeez

[molten sky]

you got a pen?

[buoyant tree]

Chickenman is on a different level of intelligence

[buoyant tree]

Why so modern

[gritty fern]

I use a quill and thin tree bark

[buoyant tree]

Write on a rock with a hammer

[gritty fern]

In dirt with finger

[gritty fern]

I would rather use a chisel

[buoyant tree]

eh use bones

[gritty fern]

Fingernail

TEETH

[polar spoke]

lol

[buoyant tree]

thats where I draw the limit

[crude stump]

Replit is fun

[gritty fern]

Just use repeated friction by rubbing your nose on it hundreds or times for one line

[molten sky]

my god

i have a shoutbox open in the background from earlier

it's configured to say "staff" on my speakers if a certain word is said

[crude stump]

Whaa

[molten sky]

it just said STAFF loud af in a bri'ish accent and it's 11pm and i did not expect it

[crude stump]

What word

[gritty fern]

Actually 10:55🤓

[molten sky]

literally just staff and support

this aint shout tho so we good

you can't hurt me

[crude stump]

AHHHH

[molten sky]

no comment

[gritty fern]

But you just commented saying ‘no comment’

[crude stump]

He’s in Britain

[molten sky]

that was actually a reply

[gritty fern]

Dang

[crude stump]

Prolly different then in the states

And even then we got time zones

[molten sky]

why is there a t there? weird.

[gritty fern]

briain

[molten sky]

bri'in

[crude stump]

Bri ain

[molten sky]

i do like "briain" tho lol

[crude stump]

Brill

[gritty fern]

Whatchu meen in thee states lad? Im australian (not really)

Wait thats scottish

shit

[crude stump]

Waa

Your American now

Welcome aboard

[gritty fern]

You’re

[crude stump]

😨

[crude stump]

yoar

Cmon man

[molten sky]

• your're

[gritty fern]

yeeor

Yourer’re

[molten sky]

mods are asleep?

WAIT

I forgot

i have a new data dump i can parse

[crude stump]

Good job comrade

[gritty fern]

whats that

[molten sky]

in this case it's just pemiblanc. i was lazy and didn't source it til a few days ago

[gritty fern]

This feels like half the attack rooms lol

[molten sky]

that's some mobile apps i've tested

[gritty fern]

Whats pemiblanc…

[molten sky]

wait that reminds me

one of my bounty targets has a new asset to hit

i gotta do dat

[gritty fern]

Ookee

[molten sky]

ehm--some french thing that got breached a while back

https://www.troyhunt.com/the-111-million-pemiblanc-credential-stuffing-list/

[gritty fern]

Istg i always see your name and think “oh a terminal let me run ls”

like i actually type out ls in the message box

[molten sky]

~~ don't forget to remove the french language pack ~~

[gritty fern]

Anyway whats everyones favorite koth machine?

[molten sky]

blue

[gritty fern]

I like space jam

[molten sky]

also red

[gritty fern]

I can pwn it in like under 3 minutes

[molten sky]

weird. HIBP shows a particular user as being included in pemiblanc but it's not in my dump. Everything else is validated fine.

[gritty fern]

What does that mean?

[molten sky]

what part

hibp?

[crude stump]

Productivity are you really 0xGod

[molten sky]

referring to the website have i been pwned (ran by the guy i linked to before, troy hunt)

[molten sky]

i actually own thm

undercover boss

[crude stump]

Wow

Never knew

Your amazing 🤩

[molten sky]

yoar*

[gritty fern]

yeeor

[gritty fern]

Yeah

[crude stump]

[gritty fern]

HiBP

[tawny magnet]

[molten sky]

yeah that's https://haveibeenpwned.com/

[gritty fern]

Ive been pwned!

Well my main email has

[molten sky]

quick lets find 0xhy's everywhere-password

[gritty fern]

🤯

Youll never guess

[molten sky]

************?

[gritty fern]

Its extremely secure

[molten sky]

weird

************

[gritty fern]

Took me a minute to figure out that you meant me lol

[molten sky]

noticed the thinking pause in typing lol

[gritty fern]

Not used to people shortening my name

only my bf has ever done that i think

[molten sky]

but yeah anything notable from your hibp? i have a few on my old main from back in the day, mostly on shit that doesn't matter

ider what mine were cause i hid them from HIBP searches lol

i need to verify to see them

[gritty fern]

Lol

[molten sky]

actually i remember chegg was one, although that was a secondary email

[gritty fern]

My email and password(as SHA-1 ) is out in a 2019 breach

[crude stump]

Imagine if we could harness black holes and use it to get rid of trash

[gritty fern]

Ive changed it since then tho

[molten sky]

we do, that's called a burn barrel out back

[crude stump]

💀

[gritty fern]

We probably could it would just be super duper costly

[molten sky]

sha1 is probably fine tho. you'd be surprised how many are plain still or like basic md5

also tons of SSNs and such