general

[molten sky]

not great

[gritty fern]

Actually you could compress the trash into a black hole at which point hawking radiation will shoot the matter back out as a single element

[restive thorn]

respect @gritty fern

[molten sky]

we actually do have like a hot-tub sized metal pit out by the cabin that gets some roarin burns going during deer week

[gritty fern]

u too man

[molten sky]

pallets on pallets on pallets make the garbage no more

i try not to breathe it too much tho

[restive thorn]

thanks @gritty fern

[twin ridge]

Gave +1 Rep to @gritty fern (current: #826 - 4)

[gritty fern]

Guys we should hash password hashes

[crude stump]

Hm

[gritty fern]

They would be like 100s of times more secure right?

[molten sky]

guys don't tell em

[gritty fern]

Tell me what

[molten sky]

nobody tell em that some algos already do that

[gritty fern]

So do it three times

[restive thorn]

i just exploited XXE in less than a minute for a job interview box n im so happy i have 20 mins left XD

[molten sky]

nobody tell em that some algos do it more than three times

[gritty fern]

For things like checking a password you dont need speed

[gritty fern]

FIFTEEN

[restive thorn]

20 mins ...final question JWT shit...can it be done XD

feels possible

[molten sky]

double des does 16 by default and it's like stone age

[gritty fern]

Jesus christ is cant be beat

[molten sky]

sha-2 apparently does either 64 or 80 rounds

[gritty fern]

i*

What about 256

[molten sky]

sha256 set between 1000 and 1B-1

[gritty fern]

Alright im making SHA-2048 it runs it through 10 trillion times then runs it through 256 then 128 and so on until 1

[molten sky]

you kid but that's actually effectiveish unless the algo itself is broken

all about making things slower

[gritty fern]

Ill be dead by the time it finishes prolly lmao

Joking itd probably take atleast a year though

[molten sky]

adding different algos can add weakpoints in some ways tho

[gritty fern]

Even if i add all of them?

[molten sky]

depends on the situation but say one algo is more prone to collisions than another

[gritty fern]

But thats the whole point of using all of them

Just makes it like 5 billion times harder to crack

[molten sky]

man i need sleep

[gritty fern]

Sleep then

Its like 11:30 for you?

[molten sky]

https://tenor.com/view/youre-not-my-dad-not-my-real-dad-daddy-not-my-dad-yell-gif-7517701

[gritty fern]

Go to sleep my guy

I should sleep actually

I have ACT practice testing tmrw

[molten sky]

lol tests

[gritty fern]

I hate tests

[molten sky]

lol x2 ACT

[gritty fern]

question

[molten sky]

answer

[gritty fern]

my user is an actual memory adress right?

Cuz i dont fully understand memory addresses like idk if theres range limits or such

[molten sky]

man i haven't done anything with memory since uni, outside of the odd 15 minute BOF session

[gritty fern]

Ok lol

[molten sky]

couldn't tell ya

[gritty fern]

Well nighty night

sleep well everyone

[molten sky]

good timing cause discord just crashed on my desktop

as usual

fuckin discord

https://tenor.com/view/goodbye-chat-gif-22150141

[gritty fern]

One last thing before sleep

(relevant cuz 0day)

[tawny widget]

God morning

[brisk pier]

Morning

[south egret]

https://tenor.com/view/cool-fun-white-cat-dance-cool-and-fun-times-gif-16435335956387921912

[buoyant tree]

eh Nile or 0day are probably the most dangerous, even more in a combination

[chilly veldt]

You know you're good when you win a CTF with only 1 point

[buoyant tree]

..., the guy hacked the CTF?

[chilly veldt]

No, we got so many points the CTF backend shows our points wrong

[buoyant tree]

Daymn

Congrats

[chilly veldt]

Thanks, it was a meme challenge that did it for us

[buoyant tree]

meme challenge?

[chilly veldt]

Yeah, they had a meme challenge called guessctf, aka guess the solutions, aka figure out 31 different challenges in 1 challenge, aka figure out the password to 31 zip files

[shadow sundial]

beginner bug bounty hunter here, what are some places where I can find the latest news and vulnerabilities?

[charred forum]

eid mubarek

[chilly veldt]

eid mubarak!

[worn thorn]

nile do be a secret villain making food.

[near hawk]

You have sites such as hackernews, hackread, bleeping computer for news

Exploit-db you can find CVEs with the PoC

[hearty gull]

is there a room for learning reverse engineering with ghidra or some other tools?

[sick lance]

Search Ghidra.

[chilly veldt]

I just fixed my script!

this looks easy to finish now

[brisk tree]

hey

[shadow sundial]

thanks, I'll check them out

[twin ridge]

Gave +1 Rep to @near hawk (current: #67 - 97)

[loud marlin]

https://tenor.com/view/coffee-koala-coffee-time-cute-caffeine-gif-20268883

[twin ridge]

Gave 1 Rep to .scrubz. (current: #1 - 2149)

[rapid merlin]

What's the best way to transfer information from short term memory to long term memory?

[tawny widget]

Notes

[lean cove]

somebody had a problem with the pyramid of pain practical not working?

[sick lance]

Yeah, it's broken, that's what you don't need the flag to progress.

[lean cove]

ok thanks

[fickle token]

Hi all. I'm trying to find info on Google Cloud security vs Azure security in terms of cloud tooling, learning material, and general attitude toward security.

Why I'm interested in this: I've noticed Microsoft catching some heat lately, and I'm weighing whether I should pursue more certifications for GCP or Azure. I'm particularly interested in specializing in a platform that is suitable for small businesses and new startups. Google seems to be very proactive and engaged with security, and I have been impressed with their learning material, so I am leaning that way.

[hollow pivot]

https://tryhackme.com/r/room/advancedstaticanalysis

[hearty gull]

yeah saw that right now doing some x64dbg

[neon river]

hello everyone

is it just me or are there a lot more bots in the VirusTotal comments/community section than there were say 3-4 years ago

[chilly veldt]

it's not really bots

it's more like automation due to detection via honeypots or something alike

[neon river]

wish there was a way to filter them lol

[rapid merlin]

How is everyone

[sick lance]

Ah, set up my new kali box and forgot to get the wallpaper from the attackbox.

[brisk tree]

not bad how about you

[fallen lion]

yo hi

[shell nova]

Zzz

[gilded stump]

Hi

[sick lance]

Are we boring you!?

[left kindle]

Hi

[fallen lion]

i want to dm TryHackMe admins

[left kindle]

Where can I use Discord token?

[sick lance]

Admin required or can a mod do?

[gilded stump]

Why

[shell nova]

How the hell does it take 2 hours for a mechanic to change 4 wheels?

[sharp citrus]

@left kindle

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 10, 2024, 9:58 AM

[fallen lion]

i built a machine and i want to know how to upload a room and i want to know if they pay for room creators or not

[sick lance]

I need to replace my 4 tyres too 😦

[mossy river]

We do not

[gilded stump]

Okay

[shell nova]

They don't for the latter question.

[fallen lion]

any one who have knowledge about room creation will be more than enough

[sharp citrus]

Room creation overview

Article Link

https://help.tryhackme.com/en/articles/6495805-room-creation-overview

Apr 10, 2024, 9:59 AM

[sick lance]

Jabba just answered you, abd Hydra linked the docs 🙂

[shell nova]

Enjoy

[fallen lion]

i wanna DM the admin to see the attack path is it good or not

[shell nova]

Don't need an admin for that

[sick lance]

QA will decide that when they review your room 🙂

[shell nova]

The room will go through several rounds of internal and UAT testing

[fallen lion]

ah okay

[shell nova]

If something's up, you'll be asked to make changes and resubmit

[fallen lion]

okay all good thanks

[twin ridge]

Gave +1 Rep to @shell nova (current: #11 - 564)

[shell nova]

Cheers

Oh gods WSL just updated and it brutally nuked all my sessions >.<

[sick lance]

RIP.

[shell nova]

Yeah considering that ansible was provisioning a vm

Hooray for idempotency?

[chilly veldt]

gotta love fixing an issue and then finding a whole new one

[brisk tree]

Damn ahaha

[chilly veldt]

oop

[near hawk]

That’s pretty good pay

[brisk tree]

Ot is

It

[shut hawk]

Ooo

[sick lance]

mostly remote work...

Incase you didn't see it.

[brisk tree]

I saw

That could mean anything. Some have you meet up like 1 a month or could be once or twice a week

Wish they would specify

[sick lance]

"How was your commute"

"It was ok, no traffic in the sky"

[brisk tree]

Ahahahahaha

Talking about flying. Dubai will soon have air taxis. So excited

[plush sierra]

Hello

[brisk tree]

Imaging flying to work in a flying taxi 🤣

[shut hawk]

you mean a plane?

[brisk tree]

No a flying car

[sick lance]

Or a helicopter.

[rapid merlin]

Im doing alright currently studying hbu

[sick lance]

https://www.iotworldtoday.com/flying-vehicles/flying-taxi-startup-cleared-for-mass-production-pilotless-travel

[brisk tree]

Just relaxing before I get my project for my internship

[plush sierra]

...
Hello sudoeurs teams

[shut hawk]

By 2026 apparently

[sick lance]

Dropped off at work by drone.

[brisk tree]

Ahaha would be so fun

[rapid merlin]

What kind of internship

[brisk tree]

Pen testing

[rapid merlin]

How is that going?

[brisk tree]

Ahahaha that's what I want to work towards 🤣

[brisk tree]

Really good. We'll be doing a live pen test on a client I think

[rapid merlin]

Whats your background in pen testing? Any background knowledge?

[brisk tree]

No this is my first lot of experience in it

[sick lance]

I just finished my group report for Pentest, we're going to over it once or twice until we hand it in.]

[brisk tree]

Aww nice. I did enjoy doing it. The dream is to tell people there security is crap 🤣

[rapid merlin]

I want to get into pen testing but have almost no experience in anything tech related jobs so learning from scratch

[brisk tree]

A few companies in India are doing remote pen testing internships

[sick lance]

@steel aspen did you get your a new kali box set up?

This is Gnome, you'll want that.

[boreal gull]

vmware vs virtualbox for windows

[boreal gull]

oh i like qa

[near hawk]

Hyper V

[boreal gull]

ah i meant for windows iso

but ty

i'll check out hyper v

[near hawk]

I’ve always found it the most stable imo

[sick lance]

Vmware 1000000%

[rapid merlin]

Sadly I’m not a student so I can’t do internships

[brisk tree]

are they good

[boreal gull]

courses are good their sales is horrible

[brisk tree]

ah do you think youll ever study it

[brisk tree]

oh

[sick lance]

all my malware stuff is in vmware with windows.

[rapid merlin]

Im trying to go back to school for it but for now using thm to learn

[brisk tree]

thats giid

good

[rapid merlin]

Just wish I had a teacher bc online and videos get me lost if I’m not dead focus on it, like eyes wide and glued to the screen XD it also helps if I have questions in that instance

[boreal gull]

i need to take a pcap of something, what do u do to make windows shut up 💀

[chilly veldt]

all my vms are also in vmware

I hated virtualbox when I worked with it and never went back

qemu or vmware

[hollow pivot]

Any specific reason why you hated it?

[chilly veldt]

the UI

and how messy it was in total

(mind you, this was several years ago)

[near hawk]

I started off with virtualbox then got annoyed at, went to vmware but for some reason my CPU in my kali kept spiking and now moved to hyper-v everything smooth

[rapid merlin]

Did anyone get interested in hacking bc of anime? Just curious

[hollow pivot]

Maybe I don't use them enough to notice a big difference between both

[chilly veldt]

yeah, this was like 4 years for me

[boreal gull]

no i did it bc i was gay

[chilly veldt]

me too

ngl

[rapid merlin]

Which one was it

[mossy river]

Movies, specifically Ferris Bueller’s day off

[near hawk]

Good movie, had to watch that like 4 times in film studies

[rapid merlin]

Never seen it yet

Might watch it later tonight

[bold dawn]

i like star wars

irrelevant, but still good

[brisk tree]

Jeez this is going to cause an uproar

[mossy river]

Hopefully not in here though

[vagrant sonnet]

Yooo which kali linux should i download theres like 8 of them

[gritty fern]

Whatre you using it for?

VM or booting

[vagrant sonnet]

Hackin

[vagrant sonnet]

Umm, what are those?

Sorry I'm completely new...

[gritty fern]

Lol ok you need to watch a YT video on USB booting and virtual machines first

[vagrant sonnet]

oh

whats the difference

[gritty fern]

And from there you can decide which kali to download

[gritty fern]

VM resets everytime and Dual Booting doesnt

Both have ups and downs

[chilly veldt]

VM doesn't reset everytime?

then you have a broken vm at least

[jaunty prairie]

Thats not true, unless your running a live boot in VM

[vagrant sonnet]

whats vm

[chilly veldt]

virtual machine

[gritty fern]

I dont think i run live boot but maybe ig

[vagrant sonnet]

and uh whats that

Sorry, I could be asking really dumb questions

But we all were new to this stuff once

[jaunty prairie]

virtual machine is like running a computer inside your computer.

[gritty fern]

No such thing

[chilly veldt]

it's a "computer" that runs inside your own computer, it's virtualized to make it look like a real computer

[vagrant sonnet]

Oh what

[vagrant sonnet]

oh

I think that will have many cons, leme search it up rq

[gritty fern]

Not really

[chilly veldt]

not that many cons

[jaunty prairie]

depends on your hardware.

[chilly veldt]

most servers today is virtualised

[vagrant sonnet]

I don't mind whichever one, as long as my pc is safe and I should be able to play video games on good graphics like the way I do rn 😭

[gritty fern]

Just use a VM

[jaunty prairie]

then you definitely want a VM.

[vagrant sonnet]

Oh okay

Whats the othero ne

[gritty fern]

Dual booting

[vagrant sonnet]

What's the other one? Going to research bout it.

[gritty fern]

way harder to set up

[vagrant sonnet]

Thanks.

[gritty fern]

But i prefer it personally

[vagrant sonnet]

data loss and glitches are the cons of dual booting

yeah ill stick to the first one, VM.

[gritty fern]

data loss?

[vagrant sonnet]

Why cant i attach dam images

[jaunty prairie]

I have a dedicated laptop that runs kali, but I only pull it out when I am pen-testing wifi or using some other kind of peripheral USB device

[gritty fern]

you have to verify

with / verify no space

[vagrant sonnet]

I've...

[sharp citrus]

@vagrant sonnet

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 10, 2024, 11:39 AM

[vagrant sonnet]

yay done

thaks!

thanks!

[jaunty prairie]

so your best bet IMO is to download oracle virtual box, and the Kali virtual box appliance

[gritty fern]

yep

[gritty fern]

Anytime

[vagrant sonnet]

Okay, now which one...

[vagrant sonnet]

oh

[gritty fern]

Yeah there should be a VM one specifically

[vagrant sonnet]

https://www.youtube.com/watch?v=MPkni85O9JA&t=292s

thats what that guy suggests as well

[jaunty prairie]

^^ yes david bombal has great content

[gritty fern]

David is a great source

[vagrant sonnet]

okay

[vagrant sonnet]

So which one here is virtual box

i cant seem to find it

[jaunty prairie]

david bombal
network chuck
rona kahlil
john hammond

will all teach great stuff...many others even, but those are my personal fav

[vagrant sonnet]

btw which one here is virtual box

[shut hawk]

None of them

[vagrant sonnet]

Oh

So where do I download it?

[vagrant sonnet]

ohhhh

[vagrant sonnet]

Now which one

[vagrant sonnet]

Oh dam your a fast guy

but didnt the other 2 ppl said "VM"

[shut hawk]

VM is an acronym for "Virtual Machine"

[vagrant sonnet]

dam how large is this file gonna take a while....

[vagrant sonnet]

Yeah, shouldn't we be downloadin the first one?

[sick lance]

Don't you mean abbreviation?

[shut hawk]

It's a whole operating system, it's fairly large

[shut hawk]

Yes, thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2150)

[vagrant sonnet]

Ay so you guys must be some professionals of hacking

Prob mastered hacking by now

[shut hawk]

Not sure what you mean?

[vagrant sonnet]

Because the ppl i met earlier said get Virtual Machine which was the first option in the list but we got the second one, virtual box.

[shut hawk]

Virtual Box is within the Virtual Machine category

[vagrant sonnet]

oh alright

[jaunty prairie]

jack of all trades, master of none lol

[vagrant sonnet]

oh

lol

[halcyon mantle]

do u guys have this error too ?

"Wed Apr 10 13:52:05 2024 VERIFY ERROR: depth=1, error=self-signed certificate in certificate chain: CN=ChangeMe, serial=425397202556807641543660048237946304772097879576
Wed Apr 10 13:52:05 2024 Sent fatal SSL alert: unknown CA
Wed Apr 10 13:52:05 2024 OpenSSL: error:0A000086:SSL routines::certificate verify failed:
Wed Apr 10 13:52:05 2024 TLS_ERROR: BIO read tls_read_plaintext error
Wed Apr 10 13:52:05 2024 TLS Error: TLS object -> incoming plaintext read error
Wed Apr 10 13:52:05 2024 TLS Error: TLS handshake failed"

[vagrant sonnet]

Joined all these servers around 30 minutes ago, found this one the most helpful tbh.

Ay that flipper zero and usb killer gadgets are expensive

[sick lance]

#site-support

[jaunty prairie]

those are just toys for fun IMO. toys to screw around with, in the bar with friends. "hey chuck, if i can change the TV channel you gotta buy me a beer"

[sick lance]

I used to have a watch that done that.

[jaunty prairie]

haha yeah, I had that watch too.

[rapid merlin]

https://null-byte.wonderhowto.com/how-to/hack-wi-fi-cracking-wpa2-psk-passwords-with-cowpatty-0148423/

In step 6, what is the reason of mentioned the SSID!!
In bruteforce, We only need the hash, is not it!!
Even when searching, I did not understand what the purpose was
Isn't the hash is the hash of the password? So what does the SSID have to do with the hash of the password?

Why we mentioned SSID, why we just dump the handshake file! And start the bruteforce.
Like most tutorials on Internet. this is my first time I see someone mentioned the SSID on bruteforce, So what mentioned SSID change?

Using for example airgeddon or aircrack-ng, we don't need the SSID to found the plaintext password , We just need the handshake file, isn't?

Isn't the process of the WPA bruteforce is trying to find the plaintext of the WPA hash password, by Converting a word to a hash and comparing it to the WPA hash until we find that match it, So why we need the SSID!! 🤷‍♂️

[sick lance]

Why do you think you need the SSID?

[rapid merlin]

I talk about the guy on the tutorial, the "traditional" way to do WPA bruteforce, There is no need to mentioned SSID

So what SSID mentioned change on the process!

[worn thorn]

think about it. What is a SSID? That will answer your question.

[vagrant sonnet]

YO

It DOwnloadeED

do i click on the folder

[worn thorn]

It's like having all the keys in the world but you don't know which lock it fits.

[vagrant sonnet]

Ay im never trusting github again i downloaded this hacking tool called builder bat and it gave me some virus thing idk what it was so deleted it

[worn thorn]

Always check the content you download beforehand

[sick lance]

Why hypervisor are you using?

[chilly veldt]

what*

[vagrant sonnet]

what is that

[vagrant sonnet]

i thought github is safe

[worn thorn]

I had three seperate people ask me to playtest for them and 3 out of 3 were malware.

[worn thorn]

not always.

[rapid merlin]

But why can we find the password without the SSID then, for example using aircrack-ng

[sick lance]

You need a hypervisor to run a vm

Virtualbox is good.for starters

[worn thorn]

you need to target a router first to capture the handshake

so you need to have the ssid of it.

which it happily screams if not suppressed.

[chilly veldt]

when you want to program but you can't cause you have to talk to a person about what they want this to do, but the person is unavailable for a talk

[worn thorn]

pain

[chilly veldt]

I have 3 different ways to solve this issue, but I need to hear what my colleague wants it to do, and that is different for each 3 solutions

so I am waiting for them to be able to have a small call so I can talk with them about the solutions and ask what their intent is with this program

[vagrant sonnet]

oh

[vagrant sonnet]

oh

[worn thorn]

the good old chain of command... Talking to 6 people to answer a simple question

[chilly veldt]

yuuuuup

[rapid merlin]

We're talking about what's next captured the handshake, We of course need to specify the AP to capture the desired handshake, But when doing Bruteforce, do we need the SSID, if yes why?

[worn thorn]

during bruteforce, no. You already have everything you need.

[rapid merlin]

But In the tutorial, i see he have the handshake, and he mentioned the SSID! 🙆‍♂️

[worn thorn]

maybe they didn't mentioned it before and just slid it in 🤷‍♀️

Some tutorials aren't really that great.

[chilly veldt]

cause it's a seed

read the text

[rapid merlin]

Look, he select the handshake and select the wordlist and select he handshake

[worn thorn]

with context it makes more sense

[rapid merlin]

We talk about null byte

[worn thorn]

also typo in the article

[rapid merlin]

This is the whole of topic, what this mean!

[worn thorn]

haven't really lookes at nullbytes for a long time but they were a reason for me to start the journey.

[chilly veldt]

google 😛

[worn thorn]

It's time to dust kali off and not hibernate again. Hope I still remenber how to linux ...

[rapid merlin]

I say "Even when searching i did not understand what the purpose was", Why did i come here if i found the answer of my question on google! 🙂

[sick lance]

Because you come here for alot of things when you could easily google.

[rapid merlin]

Previously I was, Not Now on most case lets say

[rapid merlin]

In all cases, the AP is not logically identified via the SSID, because it is possible that there are two APs with the same name

[hollow pivot]

If you google something and don't understand it, that is fine, it happens to everyone. But then you need to be more specific with your question:

" I read about X in this article, and when the author talks about Y, I don't understand what he means by Z. I did some more research, and I am having trouble connecting the dots between Y and Z. My understanding is that Y and Z... Is that correct?"

[worn thorn]

I'm not really that versed in WiFi Security and how to differentiate between two devices having the same ssid.

[chilly veldt]

uhm, the SSID is the network name, not the AP

SSID is the name of a wifi which stands for Service Set Identifier

[fleet finch]

guys can anybody tell me if it is necessary to add spaces to SQL injections? I see that many times I need the trailing space, therefore it is not enough to make something like

admin' or 1=1--

but I need

admin' or 1=1-- -

but I see in wordlists like wfuzz that I use with burp that there is no trailing space... is this bad?

[shell nova]

Depends on the backend usually

You'll probably want the semicolon as well. Also the -- - formulation includes the space after the comment token

[fleet finch]

yes but when I look into SQL wordlists like here

https://github.com/xmendez/wfuzz/blob/master/wordlist/Injections/SQL.txt

there is no -- - but only --

isnt this failing a lot of cases because -- - works everytime (because the single - is commented out anyways) but the normal "--" could miss

[shell nova]

Could be

The space is technically not necessary

[simple valve]

Depends also on how wfuzz sends it. Could be url encoded. So you see -- but its actually sending --%20

[fleet finch]

i think the space is technically necessary because i had many cases where inject is not working because mysql really wants a space. for example
select * from users; --comment without space
select * from users; -- comment with space

the comment without space will give sql error because "--" NEED a space afterwards so the injection will also fail

[simple valve]

Only necessary if its MySQL

Off the top of my head, I don't know other RDBMS that requires a whitespace.

[fleet finch]

so basically I dont break anything if I replace all "--" with "-- -" in the wordlists, because mysql needs it and others just ignore the additional "-"

[simple valve]

Yeah. You can also use --+ , --%20 , -- x, etc.

[jagged moon]

-- - is also important

With trailing space, as hydra mentioned

[rapid merlin]

I know of course, Maybe I will replace the Word "identified" to "specified", I am weak in English Language 🫠

[rapid merlin]

Anyway, Can you help me about my question if You understand my issue

[fleet finch]

why? if I have "-- - " with trailing space the single "-" after the double "--" is a comment and ignored anyways... so whats the difference in having a comment that is ignored by the interpreter having additional space?

[jagged moon]

You thinking about it in terms of sql syntax

When how web app processes user input is no less important

It's all added to protect the trailing space, basically

[chilly veldt]

I do not help with wifi bruteforcing as a principal sorry

[jagged moon]

Bet it's used in some obscure dbms too

[cosmic pendant]

WHere?

😄

[devout palm]

Eid mubarak

[rapid merlin]

Just by doing a Scan, and choosing the AP number

[delicate reef]

hey yall anye1 here knows any good mic for like under 50 bucks?

40$ 50?

i know theres solocast hyperx

[rapid merlin]

Eid Mubarak to all
Is Eid today in all religions?

[delicate reef]

eid mubakar is for muslims bro

[rapid merlin]

Ah, Fortunately, I am Muslim 😀

[delicate reef]

eid mubakar bro

[worn thorn]

that is quite obvious but how does the program achieve it. This is what I meant by my statement.

[rapid merlin]

Thank you, Eid Mubarak Too

[twin ridge]

Gave +1 Rep to @delicate reef (current: #1024 - 3)

[chilly veldt]

Alaynaa wa alaykum!

[rapid merlin]

Oh, I understand you.
But in the problem I faced, we don't deserve to see the program from the programmer's point of view. All I want to know is why we specify the SSID.
Anyway as you said, we just need to handshake after captured it.

[worn thorn]

There are two sides of this. Knowing how a program works and just using it without thinking about what it does.

You can always check the docs of it to learn more.

[chilly veldt]

Read about the PBKDF2 algorithm

[brisk tree]

To relatable 🤣

[worn thorn]

damn

[tropic stratus]

Since it seems on a SSH connection it sends every letter you type even before you hit enter to execute the command, does that mean blueteam gets to see my awful typing skills? 🤣

Like, having to backspace because I typed a flag wrong, or used the wrong capitalization, etc

[astral nova]

guys i installed linux on an external flash drive can you suggest any good course for ethical hacking because i am thinking of learning ethical hacking then go for cyber security to have a good base

free

[mossy river]

#start-here

[astral nova]

i m litterly 16 so please

[jagged moon]

The first S in SSH is Secure

[patent hinge]

The first F in SSH is Friends :)

[jagged moon]

Comms are encrypted

[astral nova]

i completed the free ones but i don't have money digitally to buy the annual subdscription

[mossy river]

There are tons of free rooms

Like 80% of the platform is free

[patent hinge]

Bro did all the free ones

[mossy river]

And don’t forget to check out the networks

[rapid merlin]

he is masterclass hacker

now

[patent hinge]

1337

[astral nova]

i started from the introduction then midway it said this room is for premium users

[tropic stratus]

https://tryhackme.com/r/resources/blog/free_path

[mossy river]

Yes, you can skip it

[tropic stratus]

here's a bunch more free rooms

[mossy river]

Just move onto the next free room on that path

[astral nova]

i didn't know you can skip them

[mossy river]

Just click on the next room

[patent hinge]

true hacker mindset 😉

[rapid merlin]

bypassing the system!

1337

[astral nova]

thanks

[worn thorn]

Talked to the monkeys (my IT department) again. They still refuse to enable the use of hardware keys for the work microsoft account and force me to use the closed-source authenticator The only place where I can use the key is the windows login...

[patent hinge]

https://tenor.com/view/disappointed-disappointed-fan-seriously-what-are-you-doing-judging-you-gif-17485289

[worn thorn]

really like the consistency.

[astral nova]

everyone thank you i got dumb for a couple minutes turns out you can thanks

[devout palm]

lmao

[brisk tree]

It's how I feel trying to get in 🤣🤣🤣🤣

[worn thorn]

That will be me after I'm gone from my current job.

[brisk tree]

I'm nearly out of money and still can't find a job 🤣

[fleet finch]

can anybody tell me how to find out the target in responder? I am in a network and responder grabs some SMB NTLM hashes with infos like
Client: xxxxxx
[SMB] NTLM-v2-HASH: xxxxxx

but I cannot see WHICH smb server should be reached. I want to pass the hash now but need to know on which server

[umbral kiln]

responder won't tell you that, it can only tell you what authenticated to you
you need to figure out a target yourself by for example spraying the credential over the machines in the network or enumerating gpo's on the domain

[devout palm]

literally me in 6 years

[jagged moon]

Boop yer nose

[umbral kiln]

[jagged moon]

[steel aspen]

Any good resources to learn about AI?

[carmine sedge]

if you are brand new, then TryHackMe is the right place. It is truthfully the best learning resource I have found for beginners

[mossy river]

Please do not recruit here

[pallid void]

where can i post

[carmine sedge]

what are wanting to learn regarding AI

[mossy river]

If it were an official job offer for a company, #jobs-board

Otherwise, not here unfortunately 🙂

[pallid void]

okay thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1217)

[steel aspen]

Just general knowledge

[undone sorrel]

can someone assist me on a crackme using asm?

[carmine sedge]

I may get some hate for this lol, but if you are wanting structured learning, Udemy has always been a decent resource for me. Outside of like Youtube videos and Google. But I am sure someone in this discord is going to have a better answer @steel aspen

[worn thorn]

is it for a ongoing ctf?

[undone sorrel]

no mate, it's a website called crackmes i picked the easiest one and just don't get it at all

[worn thorn]

I recommend doing some guided rooms to learn the basics.

[warm bear]

^^

[worn thorn]

crackmes difficulties are wild sometimes

[undone sorrel]

is this for tryhackme?

[worn thorn]

yea

[undone sorrel]

mate, i watched a few videos been learning asm and i thought "surely i can do a level 1 difficult"

bro it makes no sense

[undone sorrel]

thank you, i'll have a look now

[twin ridge]

Gave +1 Rep to @worn thorn (current: #142 - 48)

[worn thorn]

you're welcome.

[undone sorrel]

i can send you the crackme if you want guy even put 'easiest one i could make'

kinda bugged me i can't do it

[worn thorn]

naw I'm good.

[undone sorrel]

no worries mate 😄

[worn thorn]

[undone sorrel]

if you don't mind me asking where are the guided rooms?

[worn thorn]

you can search by type "walkthroughs" and keyword like reverse engineering

[undone sorrel]

mate this is amazing this website

would you say it's a benefit to go premium?

[worn thorn]

There are some benefits but I'd start free to get a hang of it first.

[astral nova]

thanks i arleady found what i want

[twin ridge]

Gave +1 Rep to @carmine sedge (current: #2054 - 1)

[worn thorn]

You have 500+ free rooms to pick from so you have a lot to choose from.

[carmine sedge]

I agree with Vedrfolnia, free is good to get the hang of it, but the premium is worth it in my opinion should you decide this platform is for you

[undone sorrel]

bro this website is amazing

[worn thorn]

It indeed is

[undone sorrel]

and the write ups are the explanation to that specific room?

[scenic bobcat]

Have you ever done RE or similar? there's some x86 architecture and assembly basics rooms on THM that will help tho

[undone sorrel]

what is re? 😆 i'm that much of a noob mate

[scenic bobcat]

"Reverse Engineering"

[worn thorn]

you could say so yea.

[undone sorrel]

erm, i did re to like do silly things like instead of take away health it adds health

[scenic bobcat]

I've done a few crackmes so i can help if you're stuck but you do need some assembly and architecture knowledge 😅

[carmine sedge]

the writeup rooms are good, but luckily the community around THM is so large, you can always find very detailed writeup on medium

I have had to reference those more than I would like to admit when I get stuck lmao

[undone sorrel]

may i ask, what did you do to learn it ?

[undone sorrel]

everyone probably does tbf aha 😆

[crude stump]

Yur

[scenic bobcat]

LiveOverflow's video on Binary Exploitation helped a lot for me, along with i already had some knowledge of C so assembly wasnt the biggest leap its just very annoying to read
outside of that its just having good tools, i like iaito for static and gdb-gef for dynamic testing

[undone sorrel]

could you explain the difference between static and dynamic testing please ? i know i could look it up but i learn a bit better if someone explains

[fleet finch]

guys when I grap NTLM hash with responder and it looks like this:

user::SOMETHING:1111111111111111:22222222222222222222222222222222:<VERY LONG STRING>

what is the NTLM hash? the 32-char long 22222 or the 16-char long 1111111? When I look at tutorials it sais that when I pass hases to impacket they want hashes like
hash1:hash2
and hash1 and hash2 look like the same length. but they arent in my case. I also see something like 0000000000000000000:222222222222222222

what exactly do I pass as hash now?

[carmine sedge]

Annoying doesn't even begin to describe it.. in my opinion its mind numbing and I am absolutely awful at it

[undone sorrel]

also, would linux or windows be the best system to use? or does it just depend on the ctf i'm attempting to do etc

[undone sorrel]

i absolutely agree with you mate

[worn thorn]

iirc the 2's.

[mossy river]

Windows host with both a Linux and Windows VM

[undone sorrel]

i want to learn like cpp but it seems like for what i want to do , i need to learn asm but after 5 minutes of looking at it, just gives me a headache

[scenic bobcat]

Depends, sometimes its a linux binary, other times its a windows one having VMs of both is handy

[carmine sedge]

As soon as I get to reverse engineering at any ctf, I go ahead and head over to medium because I know I am gonna need it

[fleet finch]

iirc?

[undone sorrel]

mate these questions make so much sense idk why i don't think of them 🤣

[worn thorn]

If I recall correctly

[scenic bobcat]

static is just looking at the disassembled code as is, dynamic is looking at it while the program is "running" and going through it setting breakpoints to see what everything does etc.

[undone sorrel]

should you always run in a vm to ensure you don't get anything or does tryhackme make sure there's nothing malicious?

[fleet finch]

so I do not pass something like 111111:22222222222 or 00000000000000:22222222222222222 but only the 22222222222222

like impacket-smbexec --hash 2222222222222222222222

[undone sorrel]

ahhhh okay, so static is like ida and dynamic is like x64dbg/32 ?

[scenic bobcat]

Best practice is VM either way, THM should be safe untill you get the malware stuff etc. but yea just try to keep it to VMs 😅

[carmine sedge]

other way around. Dynamic is like anyrun, static is dbg @undone sorrel

[undone sorrel]

ahhh i understand, thank you ❤️

and, is there a limit to how many rooms i can join?

[sick lance]

Nope.

[scenic bobcat]

Oh guess i learned that wrong?

[undone sorrel]

mate, this website

seems perfect

[carmine sedge]

For what its worth, the people in this room are so much more knowledgeable than me, I start second guessing my own name lmao

[sick lance]

Right now I'm currently in

[scenic bobcat]

Static analysis is a test of the internal structure of the application, rather than functional testing. Dynamic analysis adopts the opposite approach and is executed while a program is in operation.```

[worn thorn]

yea. Look at the definition of a ntlm hash. The 1's part is empty. I haven't seen one where it differed before.

[undone sorrel]

bloody hell 🤣

[undone sorrel]

ahhhh right okay

[scenic bobcat]

This one should be a good start:
https://tryhackme.com/r/room/x8664arch

[undone sorrel]

mate, this discord is so welcoming also if i go anywhere else to explain my issues, i just get shutdown

[carmine sedge]

yeah, anyrun, joesandbox are a couple of good ones for dynamic

[undone sorrel]

will get reading, thank you a lot everyone

[twin ridge]

Gave +1 Rep to @scenic bobcat (current: #311 - 15)

[sick lance]

This was one of the best Ghidra rooms, but it's private now for new members.

I'm loving the blue windows boxes we're getting these days.

And it's one from Arabel so it's going to be good.

[shut hawk]

appreciate that the sub/free release rate is balanced, (3 sub then 3 free then 3 sub etc)

[buoyant tree]

somebody tell me the first movie to watch today

[carmine sedge]

batman begins

[worn thorn]

matrix

[sick lance]

I wanted to see the new Bill & Ted, but it feels like Keanu forgot how to act as his character.

[worn thorn]

always a good one.

[mossy river]

My mother wanted to take me to see it but we never got round to doing it

[buoyant tree]

That's a later movie

Today about 3-4 movies

It's EID

[near hawk]

Defo can smell a DFIR path coming after all rooms are released

[buoyant tree]

Going to watch matrixx first prolly

[worn thorn]

have fun.

[sick lance]

Sure it will be streaming soon.

[carmine sedge]

has anyone watched the new fallout show on prime video

[mossy river]

It’s about the memory and the experience smh

You millennials and your tiktok netflix prime

[sick lance]

Millennials

I still have my Blockbuster card.

[worn thorn]

damn millennials

[crystal wren]

jesus

[noble knoll]

Back in my days there was no such thing as secure protocol

[worn thorn]

Pre 2k be like

[crystal wren]

Ouch ): that comment made my knees hurt

[shut hawk]

Ayee new Alex Rider season out

[chilly veldt]

me who has a dfir room laying in QA queue

[near hawk]

👀

[chilly veldt]

[near hawk]

8k more users til 3 mil

[sick lance]

Or atleast a capstone project eh @eternal roost 👀

[near hawk]

3 mil will be this weekend

[sand trench]

grrrr it is still there and annoying shadow

[sick lance]

It's new for me.

[narrow pewter]

Guys, I need help! I have no idea why, but my kali machine, baremetal, updated and upgraded 2 days ago, now gives me an error like this:

Reading package lists...
E: Could not get lock /var/lib/apt/lists/lock. It is held by process 4362 (apt)

What should I do?

Is it safe to just kill process 4362?

[sick lance]

sudo kill 4362

ps aux | grep apt

Check what's running.

If they won't work, you can remove the lock manually.

sudo rm /var/lib/apt/lists/lock

[narrow pewter]

I just wanted to be sure it's safe...

[sick lance]

I don't know what's running on the process.

This is a quick example on why it's bad to run Kali baremetal, you'll be doing this, alot

[narrow pewter]

Yap, now I know to not do this again...

I will try killing and see what happens

It did not work...

I will shutitdown and try reboting...

[shell nova]

Already?

[whole yew]

Restart it. Typically the lock will clear when the software updater completes checking for updates in the background

[shell nova]

Reboot should work

[narrow pewter]

I just shuted it down for now, that's all I can do remotly for now. Once I get home again I'll try starting and see.

Thank for the help anyway

[oak river]

Yes, but this is in terms of pentesting I guess?

A Null, Fin or UDP scan are stealthy enough?

[simple valve]

No, just as loud

Modern systems have detections for them

But its all up to the SOC if its actionable or not

[oak river]

Yeah, but in this case I am just learning

Moreover the complete beginner path

And I am training for SOC entry position so

It shouldn't matter in this case?

[simple valve]

Yes, if you're just doing machines in TryHackMe

[shell nova]

I'd assume a weird scan is more interesting than a slower TCP scan

[oak river]

So how do you do stealthy scanning then?

irl?

[shell nova]

Go slowly enough that they forget you 😉

Though a proper Siem would still be able to alert

[oak river]

[simple valve]

definitely but with a lot of firewall logs i might check for better IoCs like ssh logins, etc.

[devout palm]

Or be a needle in a haystack

[shell nova]

True

There are so many scans on the internet that you'll probably get lost in the noise

[gritty fern]

You could use decoys and silent maybe

[oak river]

I guess physical human resource pentesting is the best option then

[shell nova]

Least until you actually do something

[oak river]

Can't resist my demands, when I hold his browser history as a hostage

[shell nova]

If you want to be stealthy you'll want to make your traffic look as normal as possible, but that's my opinion

[devout palm]

Yeah ^

[glacial bone]

Hello, I am a beginner in cybersecurity and I am planning to subscribe to TryHackMe, but I am afraid of getting lost. Is it correct to start with the 'beginner path' first and then move on to the 'jr penetration tester,' considering that I am interested in pentesting?

[devout palm]

Try to make it as identical as possible with regular packets

[clever shard]

shouldn't a proxy/vpn should be enough to hide your traffic?

[gritty fern]

probably

[shell nova]

It'll hide the origin in the immediate

[simple valve]

depends on the network setup tbh

[oak river]

Well as a scrub I still don't know how to do that

[devout palm]

Hide your traffic from what?

[oak river]

I just know how to use nmap for enumeration and gobuster

For now

[shell nova]

Heh

Limit the scan to the ports you want to actually attack

[simple valve]

i started as a wee lad who blasted nmap -A on every machine tryhackme had

[clever shard]

yeah that my point the proxy server's ip would be disblaed in the logs

[devout palm]

Then run a scan on labs and check Wireshark

That might give you some ideas

[clever shard]

from the server

[shell nova]

That's not how proxies work?

[oak river]

Yeah, maybe only the ports that I would want and no others

[glacial bone]

But it says 'intermediate,' is it for people who have a good foundation, or did they write that to indicate that it might be complicated?

[oak river]

Wireshark became fun once I did the wireshark room though

Maybe I still don't undersatnd some things, but I guess I'll get the hang of it

Good that I do OneNote

[simple valve]

you need some foundational knowledge before jumping into those paths.

[devout palm]

Hey, in my honest opinion. I would take a look at free ones first. To get an idea on how i should proceed

[gritty fern]

You should be fine since it guides you as long as you know plenty about computers

[glacial bone]

starting beginner is better ?

[oak river]

You can jump to any path that you like, however don't get shocked that you don't understand anything or forget everything within a week.

[glacial bone]

starting beginner path is ok ?

[devout palm]

But definitely, subscription is worth it

[oak river]

Do the easy rooms and gradually progress

[simple valve]

I'd do #pre-security-legacy-path -> #974406074444685322 -> #web-fundamentals-path -> #junior-pentester-path

if you wanna follow paths

[clever shard]

well correct me if I'm wrong but proxies hide the ip origin shouldn't be enough to hide your traffic? with some severeal proxies?

[devout palm]

#general message
Here's a recommended order of paths by shadow.

You can skip the ones that require subscription

[gritty fern]

I use 3 when trying to not get blocked

[devout palm]

It would mask your IP, yes. But can be tracked by contacting the ISP.

[glacial bone]

Ok thanks you, but i didnt started jr penetration tester, i just started beginner path

[twin ridge]

Gave +1 Rep to @devout palm (current: #27 - 291)

[dusky sorrel]

guys..I hope there will be at least one person focusing on soc areas.
I have been focusing on offensive side for a few months and still I am not good in that but I want to try learn some from a defensive perspective and trying to SOC, i Found it interesting but at the same time it find it hard to learn so that it is more theory when compared to offensive(accrdng to me). so how could i get on with this guys and i really like bash scripting, i mean i just need a proper path to follow.

[devout palm]

So there's no "hiding traffic"

[glacial bone]

But in reality, I don't know where to start. I just started the beginner path, but then I'm not sure what to do next. Do you have any paths to recommend to me to assimilate well?

[simple valve]

The SOC paths are good

[devout palm]

SOC is fun, unless you take care of the logs! ™️

[glacial bone]

What do you think I should start with?

[clever shard]

that the point of proxy

[simple valve]

#general message

[clever shard]

hiding your traffic

[devout palm]

Pre-Security Pathway

[clever shard]

how in the world your isp can track it?

[glacial bone]

Ok before pre security pathway should i make beginner path ?

[simple valve]

You -> ISP -> Proxy -> Server

[sick lance]

You can see where it's going, you might not get to see what is sent.

Or is that VPN.

[devout palm]

You can follow the list 🙂

[sick lance]

Probably VPN.

[devout palm]

Yeah

[clever shard]

yeah I see now thanks!

[twin ridge]

Gave +1 Rep to @simple valve (current: #22 - 362)

[devout palm]

VPN -> Encrypted packets

[clever shard]

proxies

[devout palm]

Proxy -> Not encrypted

[sick lance]

Not always.

[devout palm]

Generally speaking

[clever shard]

proxies packets aren't encrypted right?

[sick lance]

Depends what sort of VPN you're using.

[sick lance]

Some of them add on https.

[dusky sorrel]

i have just started it, but was in a little bit of confusion there, do I need to go through all theory(obviously I am a lazy man), wish more practical lessons are there when compared to offensive. I guess I have to continue on the path.. just learning step by step.

[dusky sorrel]

[shut hawk]

Pretty much all Morden VPN protocols use some sort of encryption. Unless you are super old and using something like L2TP which doesn't provide encryption

[naive violet]

@clever shard not an appropriate joke to make here

[simple valve]

Yes, theory is good. It helps you understand why we do stuff.

[dusky sorrel]

@simple valve sometimes, I just need a push, thanks mate✌️

[twin ridge]

Gave +1 Rep to @simple valve (current: #22 - 363)

[devout palm]

I mean, you can practice by

• Intercepting packets with Wireshark
• Building a home lab and setting up an EDR
• Messing with SIEMs

[dusky sorrel]

gotcha..!!!

[devout palm]

It's actually fun, when you learn offensive security to defend

Defensive security to attack

Theory serves as a guide for practical application. Keep up with the study (:

There's theory in general cyber security, not only defensive side

[dusky sorrel]

thanks for all the say guys, got me motivated✌️ time to go, have a great one everyone, peace..

[sleek viper]

After a 27 year career in IT Operations and Cyber security I can validate this.

[clever shard]

sorry but how is it inappropriate? it doesn't seem to go against the #rules but idk

[sleek viper]

As a defender you should know how an attacker works, and as an attacker you should know how you can be detected or investigated.

[naive violet]

It's illegal, so it is against the rules

[sleek viper]

Do pre-security then complete beginner, even if you have experience.

[clever shard]

how I said to stay anonymous. I didn't say to do illegal stuff and for me anonymity isn't always related to bad/harmfull actions.

but still you right

[mossy river]

What’s up party people

[naive violet]

Using your neighbor's wifi? Yeah that's unauthorized access. Textbook illegal.

[clever shard]

with peremission?

[summer carbon]

how to see how many points I have earned

[clever shard]

and their conest?

[devout palm]

Dashboard

[naive violet]

Nah mate. Nice try.
Don't make those sorts of jokes here.

[summer carbon]

Thank you soo much

[twin ridge]

Gave +1 Rep to @devout palm (current: #27 - 292)

[summer carbon]

my level isn't updating on my profile anyone knows why

[devout palm]

It's a known issue. Staff is going to handle it

[clever shard]

alr bud

👍

[summer carbon]

Thank you bro , I thought it's a issue of mine

[sleek viper]

Sox4-5 proxies are encrypted as are https proxies. Http proxies are clear text.

@clever shard check out proxychains tool

[clever shard]

@sleek viperNo money to get proxies

broke

[summer carbon]

who need to buy it while you can get it for free

[clever shard]

wdym free proxies?

[sleek viper]

you can find lists of free open proxies

[clever shard]

💀 if something is free then you're the product

[sleek viper]

Smart man 😉

but you can still chain between multiple proxies

[summer carbon]

if explain your need I could provide some

[sleek viper]

They might dump your traffic though

hehehe

[clever shard]

they keep logs and they're willing to give it to anyone with power

[summer carbon]

yeah but tor proxy solutions could solve much of that

[normal fable]

🍿 hi

[sleek viper]

keep in mind that mini Tor exit nodes are dumping traffic

*many

[devout palm]

Hai

[clever shard]

wake up lil bud

[sleek viper]

there are ways to enumerate people over TOR

[normal fable]

How's the Heap? 🙂

[summer carbon]

that's true , but you can configure with strict security

[devout palm]

Great. What about yourself?

[normal fable]

Just working. Stopped and looked at chat. lol

[sleek viper]

My point is nothing is foolproof. it comes down to a series of practices and just like defending security is a layered approach even when you're attacking or trying to remain private 😉

[clever shard]

@sleek viperwake up lil bud tor isn't that secure

[devout palm]

Breaks are nice

[sleek viper]

pretty sure I just said you could be enumerated over Tor

lol

but it gives you another layer of obfuscation

[normal fable]

About to go out and look at the ducks in the lake. 🙂 🦆

[clever shard]

I guess anonymity is a illusion

[summer carbon]

Actually for learning , it's not a big deal , anonymity need when you need to play the evil

[devout palm]

What are you aiming to accomplish? You don't require paranoid anonymity unless you're a criminal.

[sleek viper]

telling people you're committing a federal crime in multiple countries and making jokes about hacking your neighbor's Wi-Fi is less secure 😉

[sleek viper]

I think that this is a fallacy that privacy should be considered evil or somehow shady

[devout palm]

Fun fun

[clever shard]

i would like you to tag me in the text I said anything related to that

[devout palm]

[sleek viper]

lol

[clever shard]

I'm not trying to accomplish anything illegal

[summer carbon]

I agree with you , anyone knows what's protocols actual structure or core of networking , all we know are what they have tought us . IETF and other organizations know actually what's going on

[sleek viper]

And yes, anonymity is an illusion depending on where your location is, how you're hiding your traffic and what country you reside in

[clever shard]

• I'm not trying to accomplish a such thing

[sleek viper]

depending on what you do with that anonymity just remember it's going to come down to how many resources someone is willing to spend to locate you or investigate your activity

[clever shard]

it just scratched that part of my mind could anonymity be a thing?

[summer carbon]

when giant agencies needed , anonymity is nothing

[sleek viper]

another fallacy that people who seek privacy are criminals. many times they are dissidents or they are trying to avoid the reach of over-aggressive or dangerous government entities

Tor was developed by the US Navy to protect a dissidence in many countries, freedom of speech does not exist

dissdents

[mossy river]

Alright

I think it’s too political now

[sleek viper]

hacking is political

It's only too political when it hurts your brain

[mossy river]

This discord server is not political 🙂 please keep it out of here

[clever shard]

@sleek viper I dissagre with you

hacking isn't political

[sleek viper]

thinking outside the box is always political

but you're entitled to your own opinion

And literally saying that people who seek privacy are criminals is a political statement and it's based on an opinion

[summer carbon]

All I know is we all are puppets who work with some CLI and GUI tools with knowledge of RFC documentation , DOD know what's the truth is .

[sleek viper]

absolutely! and this comes down to what exactly you're doing and how many resources someone is willing to spend to investigate your activity or location

[mossy river]

This conversation needs to stop or everyone involved will be temporarily muted. This is your final warning.

[sleek viper]

okay, I will abide by your terms and agreements. moderator

[summer carbon]

I'm done , take it easy we all wonder what is behind this thing call network , no one knows

[clever shard]

finnaly someone took action

[sleek viper]

not trying to cause problems, just trying to get people to think about their activity

lol

[devout palm]

So, what did you folks learn today?

[clever shard]

how to drink water the proper way

[summer carbon]

no free speeches in this room , and stay away from reality

[patent hinge]

:(

https://tenor.com/view/chinese-beaver-angry-speaking-talking-gif-13087513985662880786

[devout palm]

Jeez, i meant about cyber security

[hollow pivot]

really?

[patent hinge]

the code is real lmao the statement less

[whole yew]

Yeah, lets not say actually wrong things.

[clever shard]

coding in C

and u?

[whole yew]

Keep in mind this discord is intended to be a good place for security and IT learners to start out

[summer carbon]

VPN , even GForce Now servers blocked me when I connected using nord VPN 😂😂

[devout palm]

Code is invalid

[whole yew]

Also removed the code, because that's technically self-promotion.

[patent hinge]

damn

[summer carbon]

what have been violated

[whole yew]

Don't worry about it, keep doing your thing

[clever shard]

for kernel exploits?

[summer carbon]

my level isn't updating can you take a look please

[devout palm]

Nice! I've been doing some challenges on TryHackMe lately

[patent hinge]

use code genericYoutube69420 at checkout

[patent hinge]

ez

[whole yew]

I don't have anything to do with that. Not a dev for the bot, and not a THM employee.

[patent hinge]

Also literally 1984

[boreal scarab]

This is my opinion, and some here have the same view. Stay away from Nord, move to like ProtonVPN, IVPN, or Mullvad VPN.

[summer carbon]

Ohh I thought as a moderator you can help me with that

[whole yew]

Sorry, not a thing most of the mods have control over. You can try to re-verify with the bot, but it should auto update daily.

[devout palm]

I personally use Mullvad

[summer carbon]

OK

[clever shard]

heard Mullvad having disaccounts

is that true?

[sleek viper]

All VPN services can dump your traffic. you should host your own VPN at a friendly VPS provider of your choice. wire garden open VPN are extremely easy to set up.

[boreal scarab]

Moderators just moderate discord, or some do reddit.

If you see "THM Staff" tag, they work for THM, in different departments. But most will tell you to email support.

[whole yew]

I've never seen a mullvad sale; that doesn't mean they haven't existed or won't exist, but the price has been basically the same since the service started

[patent hinge]

I don't like Nord myself, I use ProtonVPN, used Mull in the past

[summer carbon]

Forget about VPN what about DPN

[boreal scarab]

I use Proton here as well

[patent hinge]

B)

[worn thorn]

fellow proton users

[sleek viper]

Just rent a vps and setup open vpn, I run a ton of vpns all over the world, Don't use third-party services that are managing your endpoint. that's bad advice

[boreal scarab]

https://tenor.com/view/emperor-palpatine-stormtrooper-gif-13058119

[sleek viper]

I started replacing all my vpns with wire guard recently and I like it better

[patent hinge]

Dude spends more money on VPS than on his bill

[boreal scarab]

"My Lord"
"Proton User"

[sleek viper]

vps is like a couple bucks

lol

[worn thorn]

heh

[jaunty prairie]

I feel if a 3 letter agency is going to ask questions my VPN provider is a lot safer then my VPS provider.

[sleek viper]

Way cheaper than paying for VPN service

[patent hinge]

so is a vpn sub with more servers

Easier to blend in

[sleek viper]

That's why you don't log on your own VPS where you control the end point

[whole yew]

.... Wireguard is a VPN product. That's the literal definition of what Wireguard does.

[sleek viper]

It's not a provider. it's a product

[boreal scarab]

Just build your own ISP... done.

[sleek viper]

You can host it yourself

Yeah, building your own VPN on a $3 VPS is way easier than hosting your own provider

but go ahead. just keep paying third parties to host your VPN endpoint. have fun

[patent hinge]

I will and I do

[sleek viper]

well, if you don't care about your own privacy, that's your prerogative. what can I say? I'm just offering advice to people who care about that kind of thing

[worn thorn]

use your neighbors /s

[sleek viper]

That's one way of building your own ISP LOL

[boreal scarab]

https://tenor.com/view/critical-ops-we-do-a-little-trolling-trolling-hacking-hack-gif-20964053

[patent hinge]

For me just masking my IP and DNS is good enough

[shell nova]

Eh, wireguard is nice, but I have no illusions about data privacy with that

[summer carbon]

Decentralized VPN(DPN)

[sleek viper]

most of those vpn services are probably using wire guard or openvpn

[patent hinge]

VPS provider logging connections

[sleek viper]

You're just paying them for the endpoint

[sleek viper]

100%

[patent hinge]

And the hosting for the server

[boreal scarab]

Wait, it's starting to get on this level

https://tenor.com/view/oakdice-runescape-gif-18004007

[sleek viper]

your basic lol

[boreal scarab]

You're*

[sleek viper]

your are

noob shit

[worn thorn]

oi

[boreal scarab]

You know discord isn't E2EE, right?

[sleek viper]

I'm not saying anything that requires anonymity

just trying to give the masses better advice

And if you want to work in security, you should probably learn to run your own VPN rather than use a third-party service

It's not that hard

[shell nova]

Weren't you just asked to be nice?

[shut hawk]

I'd love to know where they got the pricing of $150 per year for a VPN

[sleek viper]

I guess it's just me then huh?

[summer carbon]

where would this annonymous conversation leads

[boreal scarab]

nord

[shell nova]

Anything with web 3.0 is a big nope from me

[sleek viper]

low end box is good

I like vultr too

or linode

[shut hawk]

Lifetime fee as well is a bit sus to me

[sleek viper]

Yeah that is pretty suspect

lol

[brisk tree]

Yeah that is sus

[shell nova]

I have a wireguard going to my home network, works well enough for hotel wifi

[summer carbon]

how about IPV6 only decentralized , and heavily secured network device , that's why I love deeper.network

[sleek viper]

I'm doing the same thing and I have my network split into three segments and my employ ees also use my wire guard that's hosted at my home for business purposes. we have a whole test Network.

It's especially great when I travel outside the country and I want to watch my regular media

[shell nova]

That last part might be against local regulations, fyi

[boreal scarab]

When at Defcon, I just rocked Proton with a kill switch, even on data.

[sleek viper]

My ISP is cool with it

[crisp patio]

anyone had any experience with vmware running like complete garbage unless ran as an admin? got a new laptop and done the normal disabling of hyper-v and device gaurd but it still runs like shit unless run under admin

[boreal scarab]

https://tenor.com/view/it-crowd-chris-o-dowd-roy-have-you-tried-turning-it-off-and-on-again-off-gif-4711577

[grim sparrow]

URL Scan Report

Report for https://tenor.com/view/it-crowd-chris-o-dowd-roy-have-you-tried-turning-it-off-and-on-again-off-gif-4711577

Malicious?

false

[sleek viper]

vmware has some very complicated licensing and some very serious hardware requirements

try using proxmox at home or just virtualbox

[lavish sparrow]

ups missclicked

[shut hawk]

Vmware has worked great for me

[sleek viper]

I thought they ended VMware player

[crisp patio]

I have ran Vmware for years and the laptop is brand new with 32gb ram, ultra 9 and a 4080 that's not the problem

[sleek viper]

I use VMware in the Enterprise

[crisp patio]

I also have a valid license for pro

[shut hawk]

How much resources have you allocated the VM?

[sleek viper]

okay, well if you have a license that's different and you're meeting all the regular minimum requirements?

[crisp patio]

yes

[sleek viper]

maybe try using a tool like "latencymon" if your on Windows

is it the hypervisor itself that's running slow or is it your VMS??

[boreal scarab]

I love my recruiter. Read my email wrong, and he writes back to me: takes another sip of coffee

When recruiters can joke, I'm all for it.

[sleek viper]

I think your hard drive, bus and memory speeds are going to come into play here as well.

[summer carbon]

The advent of quantum computing is poised to revolutionize our information infrastructure due to its potential for vastly superior security capabilities. Even now, the NSA has acknowledged the future risks associated with quantum technology. It’s conceivable that a quantum network could mitigate some of these challenges. However, looking back from that advanced standpoint, our current conversations might seem quite quaint! 😄 LOL

[sleek viper]

Yeah, quantum computing is going to turn this industry on its head

[boreal scarab]

VM stuff is on in bios?

[sleek viper]

It's going to make things much more secure and it's going to introduce a whole new level of threats, especially when it comes to cracking encryption

[sick lance]

Vmware workstation Pro has been fantastic for me.

[summer carbon]

I use latest one with factory default settings , no issues , what is the OS

[boreal scarab]

Lemme put my help desk glasses on

[sleek viper]

You have to enable a setting in BIOS if you want to be able to run a hypervisor on most modern machines

[brisk tree]

This is wild ahaha

[sleek viper]

I'll have to try it. I do like VMware

[summer carbon]

Workstation Pro is amaizing

[crisp patio]

windows on a brand new Asus Zephruys. Hardware should blow away my old laptop that runs it fine. Vmware is bogging down the whole system as soon as I start it

apparently they may be some issues with 17.5

[sleek viper]

could also be the drives you're using

[boreal scarab]

Hyper-V off? Virtual Machine Platform on?

[sleek viper]

I've had horrible latency from using cheap nvme drives

[crisp patio]

yes

first thing I did

and virtualization security is off

[summer carbon]

Processor isn't sufficient for both OS or RAM isn't sufficient , nothing to worry about a bug .

[boreal scarab]

How much resource did you give the VM? Enough cores and ram? Is it running off an HDD?

[sleek viper]

try that program latencymon

[boreal scarab]

You turned the memory something protection off?

Can't remember the exact name

[crisp patio]

running off SSD with 4 cores and 8gb of ram for windows host

[summer carbon]

it would be great if we get visual screenshot of specs of your pc

[sleek viper]

What is the brand and type of SSD? what is the bus speed??

[boreal scarab]

2.5 or m.2?

[crisp patio]

it's an intel Ultra 9 it's definitely sufficient

[crisp patio]

m.2

[sleek viper]

sufficient for an end user maybe not for a hypervisor, depending on the load you're putting on it

[crisp patio]

it's definitely sufficient for a vm lol

[boreal scarab]

But the memory protection crap from windows is off?

I say crap, for this instance...

[crisp patio]

yeah

[sand trench]

well there is plenty of problems here too as the cheap vps:s generally mean the vps provider has full access to reading everything going on in the vm

[sleek viper]

I mean that's kind of a blanket statement. it depends on how many resources you have are located to the VM in what you're trying to do with it. what types of calculations or software you're running.

[sand trench]

depends on what the hypervisor is

[summer carbon]

maybe your m.2 had been corupted , once it happened to me , when I work on something large it is struck in

[sleek viper]

And that is a very important point to consider when renting any kind of service from anywhere.

[crisp patio]

possibly. It's brand new so I would hope not but I could alwys wipe it and see

[sand trench]

yuup yuup

[summer carbon]

specs of pc and windows version please

[sand trench]

together with knowing that email as a protocol is insecure in EVERY way

[sleek viper]

I had an Alienware r3 13, I was getting all kinds of system side latency and it turned out to be my Toshiba M2 drive such garbage. I replaced it with a Samsung Evo+ It was a game changer

[crisp patio]

It's a windows 11 pro with 32gb rams, a 1tb m.2, and intel Ultra 9 with a 4080. Hardware is more then adequate

[boreal scarab]

Wtf is that app yuou can test disk speed with

[sleek viper]

I keep telling that to people in the Enterprise.....

[boreal scarab]

CrystalDiskMark

Run that, see what speeds you're getting

Should be up in 7k with gen 4x4

[sleek viper]

That's a good call

[boreal scarab]

Gen 3x4 would be 3k

[sleek viper]

Can you give us any indication what type of load you're running?

[sand trench]

laughs in no crystaldiskmark for linux

[sleek viper]

is it one of your VMS is being slow or the whole platform??

[summer carbon]

did you cheked your PC for malware or intrution

[boreal scarab]

laughs at Shadow's misfortune

[sleek viper]

This is where latencymon might come into play

[sand trench]

shadow can find benchmarking tools for linux if they need them but so far it is not a necessity

[sleek viper]

It's not always easy with the out of the box tools to see what's taking up resources on Windows. might need a couple extra utilities to drill a little bit deeper

[boreal scarab]

Time for food. Left overs, or should I buy something?