general

[spice sandal]

they posted this on their LinkedIn

Yea but it's like 7€/year or something

[devout palm]

Namecheap is good

[crude stump]

What hosting service do you use

Tho tbh idk what I would do with a domain

[molten sky]

ew

[spice sandal]

Cloudflare Pages and a VPS

I use Namecheap but I kinda want to try Cloudflare domains

[sick lance]

Are you a student?

[crude stump]

Hm ima look into it

[crude stump]

As in

Uni?

[molten sky]

i'm imagining that his clickjacking bug was actually on some random static hugo portfolio

[crude stump]

No

I’m not

[sick lance]

College/school with an educational email?

[crude stump]

I’m in school yes

[spice sandal]

I got a free .ninja domain for a year

with Github Student pack

[molten sky]

cloudflare is aight. i use them and route53

[sick lance]

AWS?

[molten sky]

they give you a free domain now????

[molten sky]

Ja

[crude stump]

Scrubs is there something you wanted to ask?

[spice sandal]

Yea, from Name.com

[molten sky]

Interesting. I had no idea

[sick lance]

I was going to suggest the Github student pack, you get cheap/free domains for a year with them

[crude stump]

Oo

Bet

[sick lance]

If you have an educational email

[shut hawk]

You don't even need an educational email, just some form of proof

For example I used a report card

[sick lance]

Oh yeah!

I forget about that alot.

[spice sandal]

I used a screenshot of my grades

[quasi oracle]

One message removed from a suspended account.

[crude stump]

Wait is that how people make those super cool looking blogs with its own domain

[sick lance]

Most times yeah.

[molten sky]

well, sometimes at least

[sick lance]

I wish Azure would add more software and stuff.

[molten sky]

ew

azure

[sick lance]

Although getting Microsoft Project and Visio for free is good

[molten sky]

i have a serious dislike for azure lol

they make everything so needlessly annoying

wanna see what you're actually paying for?

well guess what

gotta use powershell for that

[crude stump]

What could you do with a domain. Ik a blog is one of them

Website maybe?

[molten sky]

can't even see a proper invoice without using fucking powershell for some reason, unless you want it abstracted af

[spice sandal]

I use my domain for my email. It's pretty cool!

[molten sky]

@crude stump i mean, a blog is a type of website
but anything, really

i use it for email, portfolio, labs, personal cloud services...

[devout palm]

I bought a domain from namecheap and connected it to cloudflare. I bought a VPS that i frequently use nowadays

[crude stump]

Oh wow

[molten sky]

i have an ipv6 range that goes ...:beef:beef:beef:beef:..

[devout palm]

Wow

deadbeef

[molten sky]

hm

could do that

[crude stump]

Wow this student pack is crazy

There’s so much

[spice sandal]

And you get app Jetbrains products for free, which is great

[crude stump]

English

[sick lance]

English only in this server please @rapid merlin

[spice sandal]

I only know how to say table and lathe in Italian, sorry :(

[molten sky]

no hablo italiano

[spice sandal]

Tornio

[molten sky]

spinny wood

[sick lance]

two good deals on the github student

[molten sky]

is it pick one or the other or both

cause those are far from equal lol

[sick lance]

Can get free .tech or .live domains

[sick lance]

No, you cna choose as many as you want

[molten sky]

that's pretty damn good then

[spice sandal]

You also get $100 for Azure

[molten sky]

not worth the pain of using azure

[sick lance]

free for a year too

[sand trench]

@sick lance congratz on having the most reputation on the server now

[spice sandal]

yea I'm a happy person (not a Microsoft user)

[sick lance]

Thank you!

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1703)

[molten sky]

ironic ^

[spice sandal]

Hey Shadow! Do you still post about cheeses?

[sand trench]

yeas

[sick lance]

I haven't looked at the student github in ages, there's new things added.

[shut hawk]

I use this!

[sharp sail]

[sharp sail]

Me being a secret century college student just for the benefits

[rapid merlin]

Just amazing social engineering if I'm right

[crude stump]

What what is the price of the student developer pack. It doesn’t say on there website

Or I mean what is the after 1 year price

[spice sandal]

For the domain?

[crude stump]

Yeah

And for the whole student pack

[spice sandal]

The student pack is free

The domain cost depends, usually below 15€/year

[crude stump]

Oh bet

[spice sandal]

what? 😭

I'm the only Steam Deck user?

[crude stump]

I’m one of the 5 PlayStations

[rapid merlin]

I have a Ps3

[buoyant tree]

did you try air?

[rapid merlin]

In 68 votes, this not stranger

[unreal solar]

My dualshock controller is dying on me

why are those things so fragile

[crude stump]

Gotta be the rage

[unreal solar]

Yeah

Crapy sony controller can't handle demon slaying on Devil May Cry

[crude stump]

For what recent things?

[molten sky]

the top comment

[spice sandal]

the patch is available on debian.org ;)

[molten sky]

don't you mean https://fedoraproject.org/

[crude stump]

Wow

[spice sandal]

Nope, Debian.org is right

-- sent from openSUSE Tumbleweed

[rapid merlin]

This is very popular, I have friends text me to send them a modded apk

[spice sandal]

I need to try Fedora more, I switched to openSUSE and haven't had issues since so I don't feel like switching distros now

[buoyant tree]

Windows, the window to your future in security
Imagine that in a commercial voice

[crude stump]

https://tenor.com/view/kenobi-kenobaay-maul-darth-maul-kenoobi-gif-16056672

[reef creek]

Hey, is anyone able to assist me? I joined TryHackMe and realised I had the incorrect name on my profile (spelt wrong) and it gave me a cert in that name. How do I get it to update?

[shut hawk]

Unfortunately you can't regenerate certs

[reef creek]

😐 So now that I updated my account with the right spelling, if I pass another path will it show the right name?

[sand trench]

yes the other paths certs will show the right name but this old cert will not

[reef creek]

Proof that employer investment in that platform is being used by me, thats all.

[sand trench]

use photoshop

[reef creek]

I know the certs are not like a CISSP or Comtpia etc.

No probs, thanks all! Anyone know the font name?

[sand trench]

or deal with the cert being wrong and explain to employer

[molten sky]

(certiciation =/= certificate of completion)

[molten sky]

this is a good reason tho

[rapid merlin]

If only they had knowledge of what could happen..

[reef creek]

ill just slap it in ChatGPT and ask it to find the font 😄
Thanks all and have a good one.

Literally all I joined for haha.

[sand trench]

have you ever been in a business environment with windows machines??? they have extra "drives" as D-Z which are network drives... this is similar

oof

[sick lance]

#room-help please.

[buoyant tree]

Anybody got recommendations for TV shows that aren't that good but good enough to keep running in background to not get bored while doing something else

[jaunty prairie]

not dead yet

[reef creek]

Alex Rider

[sand trench]

vetenskapens värld....

[buoyant tree]

Alex Rider got a tv show???????????

oh now I remember

[reef creek]

Yup, on prime

[buoyant tree]

I used to be all about his books when I was in 6th grade

[gentle osprey]

hello 0day

[buoyant tree]

engelska tack

[sand trench]

the world of science... but it is the swedish tv program by svt

[buoyant tree]

And 39 seasons, daymn

[sand trench]

alternatively if you like murder mysteries midsummer murders is good

and has a huge amount of seasons

assuming you can find some place to stream it.....

for shadow just watches it on tv when it airs in sweden during summer

[buoyant tree]

How are the last 2 seasons

Watched the first one when it released I think

[reef creek]

Okay however I did what you mentioned and had it in the background whilst doing some study 😄

[buoyant tree]

aye did the same

for the first season

[shut hawk]

im literally watching the last season

as we speak

not as good as the first two imo

which is a shame

[simple kernel]

guys, excuse me, i am using a VM and some tools are only found in the attackbox

[buoyant tree]

https://tenor.com/view/coincidence-i-think-not-coincidence-i-think-not-the-incredibles-gif-5096707

[simple kernel]

such as the word lists

is there any public access to those so i can download it?

[buoyant tree]

https://github.com/danielmiessler/SecLists

[reef creek]

Connect via VPN?

[simple kernel]

i see i see

that's great!

thank you!

[simple kernel]

!

[buoyant tree]

np

[sand trench]

yeah seclists is the most commonly used package of wordlists

there is of course also wordlistctl

[rapid merlin]

Guys, Who Play Free Fire?

[rapid merlin]

You can find a lot in Github

Like this one, From the first search on Google
https://github.com/kkrypt0nn/wordlists
Looks useful

[sand tree]

can you hack someones ip on chromebook?

[sharp sail]

#rules

[devout palm]

@sick lance

[tawny magnet]

https://tenor.com/view/hacker-gif-19996909

[jaunty prairie]

dudes got more hands then goro got

[buoyant tree]

He left, although how does someone hack a IP, if so what would the result even look like

[tawny magnet]

just Hack IP, not that hard.

/s

[jaunty prairie]

I wanted to ask so bad, but scrubz got upset last time I tried to engage them lol

[tawny magnet]

also, i dont think he left, he still shows as sharing this server for me.

[lusty island]

hack the IP so there is no IP 😵‍💫

[tawny magnet]

^ has hacked the IPv5 and got away with it.

[sharp sail]

I need to pick that guys brain

[buoyant tree]

IPv69?

[lusty island]

my ip is super solidified offically unhackable as it is ipv5

[sharp sail]

We'll never be able to live through that

[sharp sail]

Nah ipv3 better

[tawny magnet]

https://networkengineering.stackexchange.com/questions/28413/what-happened-to-ipv5

[lusty island]

The Extraterrestrial took it so we never could

https://tenor.com/view/television-tv-tv-shows-exterminate-doctor-who-gif-18824276

[civic crow]

perfectly alligned

[blazing granite]

Where's the Doctor??? Exterminate

[thick tundra]

https://null-byte.wonderhowto.com/collection/cyber-weapons-lab/
is this a good source ?

[lusty island]

looks good to me

[shut hawk]

eh, it's full of questionable advice

[clear jackal]

Null Byte? They seem to have reasonable advice on their YouTube

At least when I watched it years ago

[shut hawk]

A lot of it is quite shady/unethical tho

[proven quartz]

That's a terrible site. If you don't agree to their cookie policy they don't let you use the site... Also they can't spell gadget. So I wouldn't spend any time on that site.

[clear jackal]

Yeah, like I said, it's been years for me. I did take a look at the first page and there is really only one that stands out as blatantly unethical, the rest kind of fall in the category that I would expect a physical access red team to have in their arsenal

[rapid merlin]

Kody is an amazing resource without a doubt

[thick tundra]

tf is kody ?

bruh this is null byte

[thick tundra]

noice

[clear jackal]

Kody is the name of the guy on the NullByte youtube channel iirc

[thick tundra]

oh, can you give any examples please ?

[thick tundra]

good, that's wut I want tbh

[rapid merlin]

the guy's name is "kody"

[thick tundra]

alr lol

[thick tundra]

ok so this is the most unethical hacking resource online, right ?

[thick tundra]

alr, so one guy write it all lol

[thick tundra]

ohk

[lusty island]

my bad, I have no clue haha i just went on and saw some stuff thought would be interesting to explore , shady stuff too but thought be good to know about it atleast

[thick tundra]

ok so it's probably really good, more than I thought

cuz it's questionable, shady and unethical

I love it

[rapid merlin]

I'm sorry he hasn't been posting videos for Two years ago on his channel
But I see that he is active on other channels, He do live every week Seemingly

[sick lance]

Ah they left.

[gritty zephyr]

finally done with the dreaming room, took me like 6-7 hours

fun getting backl into it 🙂

[sick lance]

Why is that good?

[thick tundra]

well it'll help us navigate and differentiate between bad and good advice

like unethical and ethical

[unreal solar]

It's nice to have a sandman themed room

[thick tundra]

so we know our limits

and don't get into any legal problems

[unreal solar]

really liked it too

[sick lance]

Unethical stuff isn't welcome here though

[thick tundra]

yeah I didn't share any article or ask anybody to do anything lol, I just asked if the website is good or not

[gritty zephyr]

yeah it really challenged me

[thick tundra]

the shady and unethical thing is bad though

the "questional" part is fine

cuz it'll help us navigate the ocean of hacking ourself and discover things through hit and trial
instead of straight steps and instructions

that's what I meant

[thick tundra]

bad as in unwanted

[gritty zephyr]

unwanted is an understatement, most of the time unethical in these cases means straight up illegal

[thick tundra]

yeah like highly unwanted

unwanted in the society

in the world

unwanted legally

[thick tundra]

as I stated here

the website itself isn't illegal though, I believe
as the guys stated, it's questionable
if it was illegal it would probably have been closed by now

[sick lance]

Unwanted in this server as Discord can just delete the server.

[thick tundra]

bruh

[sonic python]

i just started the tryhackme course and something isnt working

the gobuster thing

it wont run the code

i open the command prompt and it doesnt recognise the command gobuster

C:\Users\Win10>gobuster -u http://fakebank.com -w wordlist.txt dir
'gobuster' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\Win10>

thats whait it says

[molten sky]

ouch, windows

[sonic python]

ikr

[molten sky]

go has an interpretor for windows right?

do you have that

[sonic python]

no?

i just started

idk what to do

[molten sky]

how did you get gobuster? straight from github?

[sonic python]

i didnt have it so i searched for the download and fount their websitte and got it there

idk how github works btw

[molten sky]

i dont remember any gobuster website so ima guess git

hold on a sec

[sonic python]

on curse forge

i just went to see where i got it

[molten sky]

Go to https://go.dev/ and hit get started or download or whatever --- that's the first step

you'll need go itself for anything based on go

[molten sky]

aaahhhh that makes sense. curseforge is used as a mirror for a lot of tools

[sonic python]

so its the problem?

[molten sky]

yes/no. in this case you can actually delete the files you downloaded from sourceforge and ima get you set up the more standard way

just lmk when you have go installed form the link above

[unreal solar]

Shouldn't you be using the machine associated with this task instead of Windows ?

[sonic python]

i dont have a mac 😛

nor a linux device

[molten sky]

are you replying to sickb0y or me there

[sonic python]

ok i downloaded the thing u sent

[molten sky]

ah sickb0y

[unreal solar]

Click the "Start Machine" button. Once loaded in Split View in your browser, you will have access to a machine you'll use to hack a fake bank application called FakeBank. If you don't see the machine appear, use the blue Show Split View button on the top-right of this page.

[sonic python]

him

[shut hawk]

please dont use your host machine

follow the instructions, you dont need to be doing any of this

[sonic python]

where is the buitton?

[shut hawk]

THM has setup a ready to go environment for you

[sonic python]

i didnt see that button

thx btw

[molten sky]

aight now that you have go, you can install gobuster with this command

go install github.com/OJ/gobuster/v3@latest

you may be able to do it in the command prompt but powershell would probably work regardless

[sonic python]

C:\Users\Win10>go install github.com/OJ/gobuster/v3@latest
'go' is not recognized as an internal or external command,
operable program or batch file.

whats powershell

[molten sky]

what @shut hawk said is also valid tho. The Start Machine button he posted a picture of is for the target, but there's also a button to start an "Attack Box" which is just kali in your browser

[sonic python]

im confusen ngl

[shut hawk]

@sonic python you are not going to get this working if you continue to try and use it on your host machine...please just follow the instructions

[sonic python]

okie

[shut hawk]

click the "start machine" button

[sonic python]

ok

ok its loading ig

[molten sky]

is this room one of the fully self contained ones

[sonic python]

and that means?

sorry guys im such a newbie

never done anything like this before

[shut hawk]

not a problem, just follow the steps

[sonic python]

okie :3

[molten sky]

no worries. do what Jayy's sayin here, it's the easier way for the other rooms too

[sonic python]

ok

[shut hawk]

yes, and its the first room you do so the environment is setup to be as easy as possible including the DNS entry being put in

[sonic python]

thx for helping both of u :3

[shut hawk]

here's what it should look like

[molten sky]

ahh thought it was one of the normal vpn-able ones. been a while.

[shut hawk]

np

[sonic python]

its working

[molten sky]

@shut hawk don't know if we've spoken much tbh. what do you have the infosec dev role from?

anything i'd know or have seen

sth it looks like

[shut hawk]

Hashing tools!

Yep that's the one

[sonic python]

thank you guys for helping im gonna go continue my course now love yall ❤️

[molten sky]

interesting. think i've seen it pop up in places but haven't actually tested it out yet

[shut hawk]

it's still surprisingly working, haven't given it much love lately

My plan is to rewrite it in rust for the speeeed

[molten sky]

> lately

* last commit one year ago *

rust would be interesting

been looking for a reason to learn rust myself but haven't found one yet

[shut hawk]

and that's from somebody else hahaha

[molten sky]

lmao it is

3 years ago it looks like

[shut hawk]

I was 14 then

[molten sky]

yeah i was still being a piece of shit at that age

[crude stump]

Oh

[lusty island]

question when people talk about creating their own networks / servers etc (maybe stupid) but I have always thought well a)does this mean they buy loads of expensive equipment b)do they still use an ISP to access the internet , c) how do they like decide the IP addresses and know whatsavailable.. like how does it acc work. My professor meantioned recently about creating a whoke entwork using pyhton and a rasberry pi and im just confuzled. any resurced would b cool to understnd sorry if this is off topic lol

probs won't do it anytime soon just curious , guess it would give u mroe security?

many typos

[molten sky]

a) some people do, some people do it all virtually, some use cheap 15 year old hardware

b) yes

[lusty island]

I appreciate a and b answers thank you haha

[molten sky]

c) when considering ipv4, bogon (ip addresses reserved for local networks only) is 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. IP addresses in these subnets will never collide with ones on the greater internet

10. is normally used in larger environments or mroe custom ones, 192 normally in homes, and 172 in legacy or virtual, but that's not a rule in the slightest just where they're most commonly seen by default (completely interchangeable)

[lusty island]

so if you use an IPv4 within the private address range , they do not collide as in, if someone was using the same IPv4 elsewhere it wouldn't matter?

[shell nova]

They're usually behind a nat

And can't be used on the public space

[silk leaf]

😩

[lusty island]

ok thank you

clarifification succeeded

[shut hawk]

(This is what NAT is https://www.comptia.org/content/guides/what-is-network-address-translation)

Lol does compTIA block discord embeds

[lusty island]

So the only option really is to use private IP home addresses, unless ur making a huge network then I guess you'd have to purchase some idk

yeah I know NAT , just not great at pieacing it all together sometimes

just near the end of my cisco practical networks part 2 atm and its good , I think i'd like to try and create a small network if i can in la future haha just so i know i can

[sand trench]

https://blog.documentfoundation.org/blog/2024/04/04/german-state-moving-30000-pcs-to-libreoffice/

wheee

[flat hamlet]

Is it normal that in order to achieve this task you have to "chmod u+x ./backup.sh", if i understood right, all the files in the /etc/crontab are already executable and work already, why did i have to manually make it executable for it to work ? i got stuck like 2 hours wondering why the script wasnt running lol

[sand trench]

yes it is normal... the script is not executable by default... and not even root can run none excutable permissions file

[flat hamlet]

In a real life scenario, if you were to find a shell script, and can leverage this vector, isnt it supposed to be an "already" running script, meaning already executable ?

[flat hamlet]

btw thanks for the answer

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1706)

[sand trench]

not really.. a lot of times you set up something temporary like a backup script... and when you no longer need it delete or make the script not executable and forgetting about the cron job running it

[devout palm]

[sand trench]

i.e it can happen in real life senarios a lot more often then you think

[fresh cobalt]

Do you know a good room to test payload through windows defender ?

[sand trench]

sure some of the time it will be an already running script that you change to get control

[flat hamlet]

Okay got it 😄 , thanks again !

[sand trench]

no problem

[sand trench]

hmmm not really... any of the recent windows ctf rooms would probably do it good enough

the problem is in real life senarios the windows machines have internet access which can help make them even more resistant to malware using windows defender.... so the rooms versions are slightly ham stringed

if you wanna play with amsi bypasses and that part of windows security shadow will point you towards holo though

assuming you can get a working vpn file and working network

[devout palm]

A wild Muiri appeared!

[pallid lotus]

That's not a good method for testing AV bypasses because the definitions on any THM machine will always be out of date. By how long depends on the machine in question

Download an evaluation ISO if you need to test against defender

[sand trench]

muiri comes in and saves the day and explains that the windows rooms are outdated by definition that shadow did not think to formulate in that way

[pallid lotus]

You also won't get to test the cloud protection -- not, admittedly, that you want to test that until you're sure it evades anyway

[sand trench]

+rep @pallid lotus

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #9 - 755)

[fresh cobalt]

Thanks both ! You’re right especially for the version. I’ll fire my virtual box. Actually I wanted to test custom payload encoded multiple time to test evasion .. I’ll build the lab .

[blazing granite]

And again @pallid lotus saves the day 😉

[devout palm]

Muiri saves the THM machines

[pallid lotus]

Muiri has just finished building the initialisation system for the most complex CTF he's ever worked on, dropped in for 2 minutes, and is now going to bed

216 lines of docker compose and 10 containers, all for one bloody API lmfao

[sand trench]

yeah that sounds painful

[pallid lotus]

👋

[sand trench]

good nighty nights muiri

[blazing granite]

Muiri should have the superman symbol instead of the top hat 😂

[devout palm]

Wonder how many rabbit holes you put in it kek

[pallid lotus]

It's for work. The training manager would murder me if I made it too sadistic

He's already talked me out of the original idea... that was all graphql and websockets

[devout palm]

Well, seems like we will know if you don't ever come again here

Nighty night

[gritty fern]

Does anyone have a sleuthkit-4.9.0.jar they could send me? Ive tried everything including asking friends and chat gpt but it just wont install

[clear jackal]

Have you conducted a query utilizing your favorite search engine?

I found a similar issue on their forums and it seems like people walked through it and gave good advice.

[molten sky]

https://tenor.com/view/dancing-duck-dance-duck-duck-ooontz-dance-gif-10943740227711557279

[blazing granite]

if everything fails read the manual, right? 😂

[clear jackal]

Pretty much

[sand trench]

always read the friendly manual

shortened to ARTFM

anyways it is now time for this shadow whadow to go to the sleepity sloopity meep moop to the beep boop sleep sloop

[winged summit]

ARTFM.... so soft.... sooooo soft lol. hi people 🙂

RTFM!!!!! O_O lol j/k (i grew up on this version, the trauma inducing one, lol. that would make you go crying to the manual.... haha)

[devout palm]

I thought it was read the f...ing manual

[blazing granite]

RTFM= Read The Fine Material 😉

[winged summit]

haha, nice i like it! classy lol

[cosmic pendant]

isn't it free and on their website?

[gritty fern]

Not the jar istelf

Just the installer

And thats whats not working

[blazing granite]

That the first answer I ever received when I asked something in a Linux mailing list. They told me read this and that, and if you have any questions come back, but just show your work, example, I did this and I got this msg, etc.

[winged summit]

yeah, the nerds were serious back then, hahaha (i say that with admiration, i'm also a nerd, lol)

but i think it's great that people have actually lightened up. it's opened a lot more doors for people

but i admire the tenacity of the original hacker spirit

[blazing granite]

they were hard core, but they always pushed you to learn more, that mind set is almost lost, people nowadays ask very general questions and expect a point by point troubleshooting and a lot of hand holding.

[winged summit]

yeah, i wholeheartedly agree

i think these days, you have to learn how to do things on your own still, mostly, but only at the upper-levels. muiri was actually talking about that the other day. basically, when there isn't google results for what you want to learn, lol

[blazing granite]

my point is that people nowadays not even google, just ask the question and expect a do a, b, and c kind of answer. I always say that today's mindset is "It's easier ask than do some research" 😂

[winged summit]

yeah, 100%

it's a mentality shift

in the culture

[blazing granite]

I'm more a do your own research and point you in the right direction kind of guy

[normal fable]

Google 'how to Google'.

[blazing granite]

Even if I know the answer, I'm not going to tell you, I'll point you in the right direction so you can find the answer, because in that journey you'll learn much more than if I would give you the answer, that how I was taught

[normal fable]

I won at poker night. 😁
Good luck to offset my bad luck/stupidly.. then have my winnings to the hostess. She worked her butt off setting up. Was a beautiful setup and an awesome night.

[blazing granite]

I love poker, but I haven't play in a while, my poker group dissolved people with other commitments, some moved away

[normal fable]

I'm hoping she makes it a thing. I do love seeing all my friends from that area.

[clear jackal]

Also, don't install it as root

[clear jackal]

Yes, forum post I saw said something was missing from the .deb though. Then said how to fix it.

[cosmic pendant]

Yeah Ben!!!! Lets go, you know that's true 😄

[rapid merlin]

Hello guys, I want to ask if I found trust ID and account id and agent id and license key, does this pose a threat to the site?

[mint vortex]

I'm looking to begin bug hunting and have some knowledge in bug bounty, but I'm still a beginner. If anyone is interested in collaborating with me to kickstart this journey, feel free to reach out!

[lone thistle]

😄 how's it going toast?

[cosmic pendant]

Ehhhh, busy as junk... you know you know 😄

I know you're kicking butt though

[clear jackal]

You can utilize #bug-bounty for bug bounty specifically. To gain more knowledge in the space generally, #start-here is a good place to begin.

[clear jackal]

Is this in a THM room? What site are you talking about specifically?

[gritty fern]

Did you google is a funny name

[clear jackal]

It is it is

I have another "hacker" name that was bestowed upon me, but it's a little too close to home to share on here

[lone thistle]

business as usual then 😄

[gritty fern]

Fair enough

[desert shuttle]

O

[cold sparrow]

https://tenor.com/view/status-tired-dead-haggard-gif-11733031

[molten sky]

https://tenor.com/view/hacker-hackerman-kung-fury-gif-7953536

[boreal scarab]

@hot cairn @vocal gale @normal fable https://youtube.com/shorts/dhAP_X3Q-yc?si=cZ92RTtQqrz-NG6s

[hot cairn]

nice

[boreal scarab]

We needa go

[molten sky]

boils are good af but seing LV in the title makes me regret it existing before even seeing it

[boreal scarab]

Yo, I've been craving crawfish recently!

[molten sky]

haven't had a good craw boil in years

i used to have them when up in AB but i just haven't recently --- always meats when i'm up there lately

being [primarily] on the easy coast now it's hard to turn down AB bbq

[clear jackal]

Same, it's nowhere near the ocean or a large body of water that can support what they're serving.

[tawny magnet]

@gritty fern I just saw your reddit post lmao

[gritty fern]

On programmer humour?

[tawny magnet]

yea

[gritty fern]

probably then lmao

Youre in it

The orange markup

[desert shuttle]

man o man

[vocal gale]

Went to one here in canada, it was deadlyyy

[buoyant tree]

Heya @blazing granite u ever tried out a carolina reaper burger

tried one out today

[gritty fern]

I had a ghost pepper one that was kinda spicy

not unmanageable tho

[simple kernel]

guys i have a question hahaha, if i did a PR scan then i saw other machines, are those machines other people who are using THM?

if so, that feels creepy but cool hahaha

because i noticed those IPs are coming and disappearing

comes and go, not always on

[buoyant tree]

An almost frightening 1.4 million to 2.2 million SHU making it the world's hottest pepper on the Scoville scale. That's nearly double the ghost pepper. Yikes! The Carolina Reaper is currently the world's hottest chili pepper.Aug 25, 2021

[gritty fern]

Yeah i remember that lol

I think Pepper X should surpass it now though

[buoyant tree]

Yup, I tried the ghost pepper out before, handled it with ease, didn't expect the carolina reaper was that hot in contrast

waas tottaly wrong

[molten sky]

where in can

[buoyant tree]

Eh I ain't trying that yet no matter what

[worn thorn]

you might have scanned the thm network instead of the machine.

[molten sky]

all you need is a lake, really, but vegas vegasfies everything and ruins it

[gritty fern]

How to catch on fire in one easy step:

[gritty fern]

Id say server communication but idk for sure what ur doing

[simple kernel]

i just used a /24 on the machine that they give in the website

just a -PR -sn scan

an arp scan

[gritty fern]

Never used an arp scanner tbh

So idk

Unless nmap is an arp scanner

[simple kernel]

i mean -PR is an arp scan

[gritty fern]

never used that switch

[buoyant tree]

well @shell nova can probably best answer
that

[gritty fern]

Nighty night everyone

[wooden totem]

how safe is this

I've never saved any, should I start saving them to google?

[simple kernel]

it's the web thing

right?

[chilly veldt]

Not safe

[wooden totem]

it saves passwords to browser

[chilly veldt]

Please don't

It's so easy to read from😭

[wooden totem]

yeah but like why not

[chilly veldt]

It's not stored properly in terms of encryption and can easily get accessed

Use something like bitwarden instead

[wooden totem]

delightful

[buoyant tree]

Eh another reason(unrelated but funny), some people I encountered use google's password manager then print out thier passwords on a monthly basis

And then store the printed version on thier desks all the time where anyone can see them

[rugged estuary]

in the Forensics room. If I was able to match the MD5 hash, but dont have a clue where to extract the OS from the downloaded file, where should i go back to in order to learn this?

Also, why does it download the file to my pc rather than the vm it has me open?

[buoyant tree]

#room-help

[rugged estuary]

ah thank you

[chilly veldt]

Morning

[buoyant tree]

Mornin'

[lunar linden]

not very safe use a offline password manager like keepassxc where it encrypted

[leaden fiber]

not safe because they're stored in plain text and can easily be obtained by collecting browser data

[lunar linden]

you can easily find them in plain text in your file manager

[chilly veldt]

Not plaintext, but decrypted easily

[leaden fiber]

md5 or something?

[chilly veldt]

They are stored with encryption, but they decrypt when logged in

[chilly veldt]

Md5 is not an encryption but a hash

[wooden totem]

off topic, does anyone have a keyboard recommendation, I need a new one

[chilly veldt]

What size

[buoyant tree]

oo @gritty fern ur on r/ProgrammerHumor so is this server
https://www.reddit.com/r/ProgrammerHumor/comments/1c49y4y/guysineedbankhackerscript/

[lunar linden]

Hashed passwords work for the site authenticating you. They are not an option for password managers. Many will encrypt the data locally, but the key will also be stored locally unless you have a master password setup. basically if your computer unlocked or a cookie/browser Credentials

[lunar linden]

mechanical?

also what your budget

[wooden totem]

100 or 80, tactile if possible

[wooden totem]

my budget is whatever if its worth it

[leaden fiber]

ah i see

[lunar linden]

number pad?

[wooden totem]

dont really mind if its there or not

[lunar linden]

check this out https://www.amazon.com/dp/B09YNQCQKR/ref=twister_B09YNR1MFW?_encoding=UTF8

[chilly veldt]

Hmmm, Logitech g512 is pretty good, I got that at home and then I have a keychron k6 pro for 65%

[lunar linden]

i got some random 100% keyboard lol

[wooden totem]

g512 what switches

[chilly veldt]

Gx brown iirc

Either brown or red, can't remember

[lunar linden]

im bored sooo, what browser do yall use?

i use brave lol, been using it for about 2 years now

[wooden totem]

edge

[chilly veldt]

Chrome at home, Firefox at work

[lunar linden]

nice, i use brave for the adblocking and the semi good fingerprint blocking

[wooden totem]

that was a joke btw, nobody ever used edge for standard browsing. I only use it for this

[gentle cove]

i actually use edge for standar browsing for a couple of years now 😄

way better than chrome

[wooden totem]

you are not real

[chilly veldt]

I also use edge at my other job

[gentle cove]

uses less resources, has greater features

it's not perfect but compared to chrome i find it way better

[chilly veldt]

Especially when you're so integrated with Microsoft products

[gentle cove]

exactly

[chilly veldt]

Has some good built in browser add-ons, but they can be a mess

[lunar linden]

lmaoo, cant u just use gpt 3.5 or something

[gentle cove]

yeah true but also some great features like read aloud and split view which are really great

vertical tabs nativaly created for it etc

[wooden totem]

bing has free 4.0

[lunar linden]

i used egde like back in 2020 for a bit because it was faster then chrome then i was switching though browser and starting firefox to now using brave

[lunar linden]

LoL

[gentle cove]

i have firefox also as a backup

[wooden totem]

didnt even know that existed, I just use powertoys

[gentle cove]

yeah its natively integrated in it and works great

[lunar linden]

the only thing i use microsoft for is windows and minecraft

[gentle cove]

😄

[lunar linden]

for my laptop i refused to login into microsoft account and it keeps telling me i need to login

[chilly veldt]

I don't even use windows most of the time, had to use it this weekend cause my Linux distro kernel panics

Speaking of, have to fix that

[gentle cove]

i'm a main windows kind of man, i know they had and have issues but i also think their OS and systems in general are part of the tech history so idk

[wooden totem]

speaking of browsers, which one should I use as my main one? I'm tired of chrome. Give me pros and cons

[gentle cove]

i never actually understood the "hate" on them

[lunar linden]

i went back to windows like 3 months ago because when i got this laptop linix broke twice, first time was my fault and the second time none of my function keys would work

[wooden totem]

I actually dont know anything about other browsers so yeah, help?

[chilly veldt]

I just don't like it taking up 15% of my harddisk🤣

[gentle cove]

😄

[lunar linden]

but i been think of going back to linux because of how much windows takes up on resources

[gentle cove]

that's why i paid for another year of tryhackme because i felt something was missing, it's forcing me to use linux more

so yeah 😄

[wooden totem]

can firefox be customized

[lunar linden]

i do find it funny that windows made a blog article about how to install linux

[gentle cove]

yeah sure it can @wooden totem

[lunar linden]

yea they have themes

i find it funny that my state allowing ai to grade our work

[gentle cove]

lol

that's kind of odd i wonder if it's actually that evolved and capable of grading correctly

[lunar linden]

im sorta scared because if the ai mess up we fail the year

and who stoping it from someone typing in the essay part something to control the ai and it messes it up

[gentle cove]

when you think of it, it can't have preferences, mood swings like a real teacher could have while viewing your work, etc

so it clearly has positive outcomes but i'm sure there are negative ones also

[gentle cove]

like this for example yes

[lunar linden]

there doing to save money, there looking up to 15M-20M

[gentle cove]

yeah it's mostly used for this at least now, just to save money, they went to th AI wagon @lunar linden i know

what can we do, we need to adapt

[lunar linden]

and chat gpt is still being trained

[lunar linden]

i can so see ai teachers

[gentle cove]

yeah we are gonna end up there also not so soon i guess but yeah

[lunar linden]

yea it'll take time

[gentle cove]

the more digitalized and evolved the country is, the sooner it will be

luckily for me i'm from an eastern european country and things here arrive with 100 years delay

i'm joking

50

[lunar linden]

lol

[wooden totem]

if ai was grading me I would fail the last class cus I passed by 1 point which the teacher gave me

[gentle cove]

haha

real teachers have their perks also yeah

[lunar linden]

yea

[gentle cove]

an AI wouldn't understand that the 1 point could destroy your life, career, etc

[lunar linden]

yea unless someone trained it too lol

[wooden totem]

"spin to win"

[gentle cove]

event then it could be tricked

but so could a human also so yeah

tricky

[lunar linden]

random topic that popped in my head- what linux os do you prefer

[gentle cove]

unfortunately i don't have that much experience with them as i said i am a windows main kind of guy

used ubuntu and kali

that's kind of it

so kali i guess got used to it

[lunar linden]

ahhh, i used windows most my life since windows 7, but in like the last 1-2 years ive gotten into linux first ditro i used was tails and i was so confused then later i went to linux mint stop using windows and had my ins and outs i used ubuntu, kail, linux mint / debian edition, tails. and mess just a very little with arch

[gentle cove]

i used tails also for tor but have limited experience with it also

[lunar linden]

mainly for tor ive used tails for

[gentle cove]

want to try more distros anyways because it can be useful for work also will dive in more deeper this year

[lunar linden]

yea, but with my luck i ended up breakin something

[gentle cove]

i always break something that's how i actually learn 😄

i remember now the frustration when i first joined tryhackme, got a little lost in kali and everything

and had some experience with linux from the past and a lot of general technology and IT experience but still found my self a little lost haha

[lunar linden]

i was a little confused but a messed around with a bit of stuff before hand

[gentle cove]

yeah that's how we learn, we break and fix it, deleted 10 VM's until i got it right 😄

[lunar linden]

dont get me started on vm 🤣 i always break them somehow

[wooden totem]

what are these captchas

also it took me 20 sec to solve it cus I thought the cow ears were wings

[lunar linden]

it the eagel 👍

[chilly veldt]

So I just bought some clothes for riding motorcycle in right, I just looked at my emails I got confirming they just packed my order, and it looks like they have messed up, let's see if I get double the clothes that I ordered

[lunar linden]

that be funny, i wanna learn how to ride one but i dont got 6K

[chilly veldt]

It would be, cause it's 2 different sets, would be nice, one is with a black base color and the other is a white base color

[lunar linden]

brb lol

[gentle cove]

yeah me also i said i'm goonna wake up login to work and sleep a little more after but here i am 😄

[lunar linden]

im back gotta wait for the oven to preheat

imma have ai make 10 topics

ai is useless lol

i told gpt 3.5 to give me "10 convo starter" and it gave me this lol

Sure, here are ten conversation starters:

1. "What's something new and exciting you've learned recently?"
2. "If you could live in any era of history, which one would you choose and why?"
3. "What's your favorite thing to do on a lazy Sunday afternoon?"
4. "If you could instantly master any skill, what would it be?"
5. "What's the most memorable trip you've ever taken?"
6. "Do you have any hobbies or interests that you're particularly passionate about?"
7. "What's a movie or book that has had a big impact on you?"
8. "If you could have dinner with any fictional character, who would it be?"
9. "What's something you've always wanted to try but haven't had the chance to yet?"
10. "What's the best piece of advice you've ever received?"

i wouldnt mind building a pwnagotchi

[scenic void]

is it just me or this looks so wrong

[lunar linden]

bro my laptop never gave me issue and now it slow windows is trash tbh

[glossy portal]

Elaborate further

[karmic hill]

which to room to do after pre security?

[wooden totem]

finish other paths that you dipped your toe in such as complete beginner, intro, web fundamentals.

[wooden totem]

oh nice, I enjoy answering questions

1. literally nothing, does basics of linux count? not that exciting
2. I would assume future isn't allowed, so current
3. I have no idea which day it is now, so Idk what specific for sunday
4. Cryptography
5. No travel for me, forgot every other
6. I like solving complex puzzles I guess, no passions
7. What does that mean, do normal people have a change of life if they watch a cool movie or something
8. I like dining alone, thank you though
9. Travel I guess, its too expensive though
10. "Don't overthink", goes without saying

[twin ridge]

Gave +1 Rep to @lunar linden (current: #2059 - 1)

[scenic void]

its not centered properly/aligned

this would look better

[grim patio]

Hi i am a THM user i am completing my jr pentester lab but i want to ask my answer is right instead of that its giving me error what should i do
Can anyone help me

[scenic void]

which room, which question

[karmic hill]

ok let's do complete beginner

[mighty ivy]

i have an IT interview tmrw, wish me luck!

[karmic hill]

good luck

[grim patio]

Vulnerability 101 question is using nvd how many cves were publish in july 2021 task 4

[near hawk]

#room-help

[glossy portal]

Makes sense, I don't notice it much

[wooden totem]

I am currently wishing you luck

[lunar linden]

me lol

1. nothing much
2. the late 1800s
   3 sit and do nothing all day
3. pentesting
4. idk, dont travel
5. not much im into tech that it lol
6. that hard ive watch alot of movies
7. idk actually
8. uhh that a great question
9. ohh depends on what if i can remember

[grim patio]

No response guys my subscription about to expire thats why i wanna know can anyone tell me

[lunar linden]

good luck

[sick lance]

Just be patient, somebody will help you soon.

[grim patio]

Yeah i have patience alright waiting

[brisk tree]

Morning

[sick lance]

Morning

[chilly veldt]

first day in the office with new haircolor is always interesting

[jaunty prairie]

mornin

[jaunty prairie]

ohh what color?

[chilly veldt]

Pink

[jaunty prairie]

sick. I love bright hair colors.

[karmic hill]

here everyone is going for corporate job instead of freelance nd bug hunting why?

[worn thorn]

its not sustainable

[jaunty prairie]

my guess is a forsure payday

[worn thorn]

bug hunting is kind of a gamble as you poke around a program hoping to find something.

[karmic hill]

so in bug hunting u don't get bug every day?

[worn thorn]

not at all.

some take weeks or months to find something

[jaunty prairie]

then you got to wait for it to be verified to get paid.

[karmic hill]

that doesn't sound cool.

[karmic hill]

how long it takes to get verified

thanks for the information

I'm wishing to do bug hunting as a part time income source

[jaunty prairie]

depends on how many bounties they need to shift through. I have even heard stories where the same bug was found but a day earlier so now it doesn't even count/

[karmic hill]

myb 100 or 200$ a month enough for me

[sick lance]

Bug bounty isn't a viable income.

You could go months without finding anything.

[jaunty prairie]

if you're not looking to live off it, its a fun thing to do

[near hawk]

You could potentially also get dupes which your report will just get closed out

[sick lance]

Yeah.

Bug bounty is best done in spare time.

[karmic hill]

I wish to do freelance in fiverr n upwork and bug bounty at the same time hoping any of those works.

Bcz I personally don't like jobs bcz there are boses there.

and you have to listen to everything they say

just being myself

do as I wish

that's why I prefer freelance

[tropic zenith]

Hello all!

If a web server is trying, but failing, to convert a string into a long (Java), and prints back the string that's failing to parse, can this indicate a vulnerability?

If so, what resources could I look up to understand if there is a possible vulnerability here? I still feel ignorant, as if I'm missing important pieces of the puzzle.

Example of output:
Failed to convert value of type 'java.lang.String' to required type 'long'; nested exception is java.lang.NumberFormatException: For input string: \"../path\"","status":"error"

Completed the Jr Pen Test, going though web fundamentals and red team next. Maybe I'll understand more after completing these.

From my understanding so far, these types of failures to parse could indicate improper input validation.

[karmic hill]

by the way I'm just getting started I almost completed the pre security module help me with your suggestions and wish me luck.

[chilly veldt]

then you also have to remember you're the one doing all the taxes and everything too, making sure you're compliant, is trust worthy and build up a proper customer base

I will not use w11 I hate it ngl

[wooden totem]

idk whats bad about it

[chilly veldt]

the UI changes

[wooden totem]

reading online, a bunch of people saying its better and a bunch of people saying its a complete dookie

[sick lance]

W10 will have a subscription when it's EoL

[naive violet]

It's a verbose error. There's not really anything more to it than that

[shell nova]

It's not giving anything other than what you provided tbf

[shell nova]

Yeah it's pretty bad

[atomic aurora]

How relevant is getting the AWS Cloud Practictioner certification in cybersecurity?

[chilly veldt]

depends on if you work with AWS or not

[atomic aurora]

Let’s say you’re not, isn’t it still somewhat good to have this knowledge or would you not recommend this?

In case you need to work with AWS in the future of your career*

[near hawk]

I wouldn’t say it’s needed if you don’t plan to go into cloud engineering but it’s good to learn it

Amazon has a whole how to guide on how to use it

[atomic aurora]

Alright, thanks for the help guys!

[wooden totem]

A little basics of everything is generally cool to have

[spice adder]

Saddest reality. I’ve seen cases of dupes that weren’t even actually a dupe. Scope is also an issue. Low hanging fruit is almost impossible to get on tight scopes, meaning a lot of time needs to be put in to find good vulns. VDP’s are a bit less competitive, but only reward is reputation and bragging rights lol

[atomic aurora]

Right!

[spice adder]

BBP/VDP’s are great fun though and pretty decent experience. I’ve learnt a lot from it, getting much greater hands on experience with XSS which we don’t see much in CTF’s for obvious reasons

[near hawk]

VDPs are cool if they offer swag tho

I’ll take swag any day if they offer it

[spice adder]

I’m yet to receive swags D:

I’m in Siemens hall of thanks tho, that’s cool

[wooden totem]

Are marketing clothings popular?

[spice adder]

Did you see the subdomain takeover report to openai that got rejected because they “didn’t see the impact” as it was exploited on the testers subdomain lol

[worn thorn]

Same logic as you took over the admin account on our development server. It's no problem on prod.

[sick lance]

Anyone watched Fallout?

It's not realistic, there no bugs or anything.

[worn thorn]

haven't watched it. I assume the story varies too much.

[shut hawk]

imagine the actor just starts noclipping lol

[worn thorn]

Just checked the actors. all them are pretty unknown to me except Moises Arias (Ender's Game)

[mossy river]

So sad the subway worker said my usual and I said no 😔

[wooden totem]

Why not

[mossy river]

Having meatballs instead

[hollow pivot]

It's good to get out of your comfort zone ❤️

[mossy river]

I can’t tell if it’s sweet that they know my order or sad that I come here often enough for them to know

[hollow pivot]

latter

[mossy river]

It’s just awkward because they don’t speak English so I have to try and explain a whole new sandwich 😓

[hollow pivot]

I'm confused, aren't they trained for these situaitons?

[mossy river]

Yes but I feel awkward having to repeat myself 😆

[simple valve]

I got a challenge coin from a recent certification

[devout palm]

Wow

Cool

[chilly veldt]

I only got an email

[wooden totem]

casual flex

[sharp sail]

Congratz!!!

[karmic hill]

do you mean creating a solid profile with certificates?

Can any one share the structured path from basic to pro from tryhack me premium

[bitter quiver]

Well being in India I accidentally lost my streak due to forgetting time frames and being busy lol

[bold dawn]

you can email support and request they reinstate it

[steel aspen]

Do the Linux fundamental rooms allow me to ssh into the machine on my own system instead of the attack box?

[bitter quiver]

Didn't realize that was possible!

[gritty fern]

Yeah i made that post lol

[wheat pecan]

Yo wassup

[chilly veldt]

thankz, 3rd year in a row

[left trellis]

You need to download config file from access

[wheat pecan]

Are networking rooms on try hack me ask subscription to access them?

[sharp sail]

Ohhhh slaying!!! Keep it up 💪

[chilly veldt]

yeee, probably not going to bootcamp again this year, but we'll see!

[sharp sail]

If they present you with the option to subscribe, that means said room/ network is exclusive for premium members

[wheat pecan]

So could I skip them?

[sharp sail]

Meh not persee, you just can't access them if you're a non premium member

[wheat pecan]

Ok

[sharp sail]

Also

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 15, 2024, 11:11 AM

[sick lance]

1 doesn't, 2+3 does.

[chilly veldt]

you know that moment when you work on something and test it and it actually works the way you thought

[steel aspen]

Yeah I've done that lol. I'm restarting. I'm gonna use attack box but now it's saying I've 3 machines opened even though I terminated them all

[sick lance]

https://tryhackme.com/api/vm/running

[steel aspen]

Active: False

Wth it was running but I did terminate it lol

[karmic hill]

I'm from Bangladesh your neighbour country

[bitter quiver]

Can you take some of this 106-108f temp over there?

This is the hottest place I've visited lol

[mossy bone]

North India right now ☠️

[karmic hill]

Our country is also hot now

[sick lance]

Nuce and cool 7°C here.

[rigid ridge]

forecast is 70 and sunny for today

[bitter quiver]

Celsius

So far I prefer Kolkata to Jamshedpur

[mossy river]

@sand trench Mind if I dm?

[sick lance]

Jabba trying tog et in as many dm's as possible /s

[mossy river]

I'm forming my own clan of 1337 hackers

[sick lance]

😎 Hope I make the cut.

[mossy river]

Hmm, I think I left your invitation in /dev/null ?

If you want to check, I won't wait up

[rigid ridge]

you what they say "if you have to ask"

[sick lance]

😦 we could have been friends.

[sick lance]

Maybe 😦

[rigid ridge]

you now you love me already

[sick lance]

https://tenor.com/view/george-lopez-confused-unsure-eh-meh-gif-9297878

[karmic hill]

in which lvl of cyber security you are currently?

[rigid ridge]

ill take that, still think about loving me

[bitter quiver]

8?

8 or 9

[rigid ridge]

me I'm -2

[simple wave]

Interview in 2.25 hrs :/

[mossy river]

Relax, breathe, you got this 😎

[rigid ridge]

for what?

[mossy river]

While you're here @simple wave mind if I dm?

[simple wave]

Reverse engineering

[simple wave]

Feel free to 🙂

[sick lance]

Good luck!

Be the best you can beee, unless you can be a cat, be a cat.

[simple wave]

I only know porpoise

[sick lance]

That's "somefin" atleast.

[simple wave]

🙂

[rigid ridge]

Fun, remember 90% of the interview is about soft skills, sell yourself! make them know why they need to hire you! skills are great, but the sell will land that job every time. You got this. you are your best cheerleader, but we are all cheering too! Go Porpoise!

[simple wave]

Thank you!

[sick lance]

Remember, you're also interviewing them.

[simple wave]

The “application” process was a CTF with write-ups so I guess they already know my skills… they had a hiring committee review my work then decided to interview me. I think the interview is to make sure I’m not a gremlin.

[sick lance]

Gizmo is quite cute though.

https://tenor.com/view/gremlins_film-1984_films-gremlin_stripe-mogwai-cute-gif-27683100

[simple wave]

Yeah I have a few questions to ask. I’ve studied the site and LinkedIn to see what they’re about.

[rigid ridge]

I cant wait till I can post pics...I have great ones too

[sick lance]

You need to verify your account with the THM bot.

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 15, 2024, 11:52 AM

[simple wave]

They also required a clearance for the role which I have so… I think the odds are in my favor if I can be personable with the interviewer.

[oak river]

Good day, wonderful server.

[sick lance]

There we go!

[rigid ridge]

so @sick lance I was updating my profile while i was there, and it says my website url is not a valid url, any ideas what it is made about

[sick lance]

Is this on the TryHackMe account page?

[rigid ridge]

yes

for personal website

[sick lance]

I'm not sure, as as far as I know that part of the profile is going over a fix? That's not accurate, sometimes you need to fill in the rest of the field with "dummy" data.

[sick lance]

try https://www.[personalsite].dev

[rigid ridge]

it did not like the slash...lol

[rapid merlin]

So in a matter of time its JabbaClan vs FluffClan?

[hazy plover]

can anyone tell me I found this vulnerbility in the server cve 2020 14760 where i get the exploit or payload script and how can i patch this vulnerbility

[rapid merlin]

Is that about a tryhackme room sir?

[rigid ridge]

I want Jabba just for the name

[rapid merlin]

Jabba the hutt

:))

[oak river]

[near hawk]

Wrong jabba

[tiny dagger]

Hello everyone

[near hawk]

Hello

[crude stump]

[tiny dagger]

Can someone guide me to cybersec journey

where to start

i have development exp

[crude stump]

#start-here

[tiny dagger]

mainly php, python

[crude stump]

Aw man the tryhackme bot updated my profile automatically

[rapid merlin]

what did it update?

[crude stump]

My level

[rapid merlin]

Ahh

the pink colour is nice imo

[crude stump]

I wanted to get a high level and it be a surprise

But it ruined me

[near hawk]

Yea it auto updates after a day

[bold dawn]

is there a way to disconnect a discord account from the bot? I wonder if you could've done that

but you gave yourself away at this point lol

[crude stump]

Yeah

That’s alright

I like the pink too

[near hawk]

You can’t disconnect it once verified, only a mod can

Which only time a token is usually removed is when someone wants to swap their token to a different account

[bold dawn]

heh, I beat a client to their office this morning

[spice adder]

Just tested payload execution through dns queries in txt records, my mind is blown

[bold dawn]

downside is I have to pee pretty bad, and I'm locked out right now lol

[sick lance]

Bot catch you? Mwahaha.

[crude stump]

Yes 😢

[rigid ridge]

did you stay the night in the parking lot? only way I would ever beat someone to the office

[bold dawn]

lmao

no I'm just an early bird

I usually get to work and start about 45 minutes before I have to

but in exchange, they let me work on some further education and certification courses on the clock when it's slow enough

[rigid ridge]

I am usually brushing my hair as I log into to zoom meetings

[solemn radish]

My coffee has gone cold doing an Easy room - This is unexpected

[bold dawn]

now when I work from home, I sleep in as late as I can

[solemn radish]

(Although 4 hours with no completions is a very odd "Easy"...)

[bold dawn]

I was on call this weekend and probably put in 20+ hours of extra work from it

[sick lance]

The baby will change that

[rigid ridge]

I was never good at 8am, I hope I never have to go back to the office

[bold dawn]

yeah, I'm sure it will lol

I usually get to the office around 7:15 right now

and get off at 5

[rigid ridge]

oooh I got a color

[timid prism]

rejoining

[sick lance]

Yeah, you're 0x2 rank on the website.

[bold dawn]

nope

I've done that times in the past

[sick lance]

That won't disconnect the token.

[solemn radish]

I've had the same color for ages :<

[timid prism]

it does for me

[rigid ridge]

see I knew I was -2

[bold dawn]

same lol

like 2 years

[sick lance]

Nah you can't use a new token.

[bold dawn]

I've just left and rejoined a lot

[sick lance]

If you remain unverified the bot will catch your current token an apply it.

[bold dawn]

I leave to force myself to take a break

[timid prism]

la

[oak river]

Just noticed bot was fixed today

[solemn radish]

When you're not sure if you're going down an overly complicated rabbit hole since the "Easy" room has 0 completions after multiple hours :p

[sick lance]

The new 3 mill room?

[solemn radish]

One of them - Yes

[sick lance]

I haven't entered my flags. 😛

[solemn radish]

I'm just wondering how some people skipped task 5 ._.

[bold dawn]

7:40 am and I've had 85g protein

nice

[rigid ridge]

I hate the word answers, some are hard

[sick lance]

Tasks don't have to be entered in the set order.

[solemn radish]

Yes - But when task 6 pretty much requires the answer for task 5, it's a bit odd :p

[timid prism]

its gonna rain!!!

[near hawk]

I wasn’t expecting the module to release ewrly and managed to guess some of them

[sick lance]

Is this you going to use a new token?

[near hawk]

As only on mobile atm

[timid prism]

nah im not using any token

[sick lance]

Saturday?

[timid prism]

i rejoined. bot hasnt reverifined me yet

[solemn radish]

That... Was quite the guess o_O

[sick lance]

You waiting for the bot to catch you and apply the token then?

[timid prism]

nope

[near hawk]

Well I knew they were coming out but didn’t expect them to release at like 10 today with no announcement

[timid prism]

it doesnt matter if i get verified or not

[near hawk]

Whenever they were released

[solemn radish]

THM rooms frequently come out quite some time before they're announced.....

[sick lance]

Announcement soon™️

[timid prism]

let me try to verifiy a new token

of my very old acc
nvm doesnt change

[near hawk]

They’ve always been on time for me before

[solemn radish]

Anyways - Back to try and complete Task 5 since it has 0 solves so far :p

[solemn radish]

By the time you get the Discord announcement, it's already been at least an hour :p

[sick lance]

The announcements are manual, so that's why the Friday night announcements happen on Time.

[near hawk]

I thought the rooms would have been with the announcements that’s why I was confused and surprised

[sick lance]

I suspect it will be Skidy doing the 3 mill announcement though.

[near hawk]

Yea most likely

[solemn radish]

I remember awhile back people were polling the API every 10 minutes to get access to new rooms faster because the announcements were so late ;D

[near hawk]

Challenges are every friday at 19:00 UK time

[sick lance]

Ah messing with the API was a good way to answer questions.

[near hawk]

Walkthroughs tend to be random

[sick lance]

Told you.

[solemn radish]

API (Hidden Room Desc: CVE-BLAH-BLAH)

[solemn radish]

Oh? That's news to me, and I've been here for..... Awhile :p

[sick lance]

I had to stop as I was giving a friendly wanting to cease or get banned from the website.

Warning*

[hazy plover]

...

[sick lance]

Where did you find it?

[hazy plover]

in the server

[sick lance]

Which server?

[solemn radish]

The thing that let you find it might have more info on how to deal with it

(And given that vulnerable version of SQL was patched 4 years ago, you might want to re-evaluate your maintenance cycle)

[oak river]

Just asking, has anyone done the Willi Wonka Chocolate factory room?

[oak river]

[solemn radish]

Have I done it? Yes. Do I remember doing it? Not specifically :p

[sick lance]

Please,.let a mod deal with it, we don't know what they're scanning. 😎

[rapid merlin]

Scrubz how you doin'

[solemn radish]

OMG AT LAST

[near hawk]

You got first flag?

[solemn radish]

.... NOOO - I found something I already had - Nevermind...

[sick lance]

OK, you?

[wooden totem]

200 OK

[rapid merlin]

Nice, im fine too, thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2168)

[crude stump]

False rep

[rapid merlin]

Oh yeah the reps

im sorry AceS xd

[crude stump]

[solemn radish]

MFW you're the first to finish a room and come second :p

[rapid merlin]

But

Did you do the first 4 questions first too?

[solemn radish]

Nope - Iggy beat me on those, so they had more 80's than me, so even if they answer nothing more, they're still first

[rapid merlin]

Ah yeah

[crude stump]

Damn

[rapid merlin]

That should be why

[solemn radish]

When Task 5 took 5 hours to complete on an Easy room... :p

[rigid ridge]

Well I was up all night trying to figure out some labs for a new cohort, so I am off to bed until my 11am stand up, nice to meet all of you, nice community, I will be around more

[solemn radish]

@near hawk since you have an 80 you're also guaranteed tied second

[rapid merlin]

Damnnn

[near hawk]

Yea, depends what time i get back from the office and can do it in time

[solemn radish]

Just weird that you can complete it 6 months later and still be second :p

[near hawk]

That was a lucky guess i was on about

[rapid merlin]

Which room btw Reelix?

[solemn radish]

Yea - I had to do a lot of research to get that based off the answer of the previous one ._.

[solemn radish]

https://tryhackme.com/r/room/tryhack3mbricksheist

[rapid merlin]

Nice nice

Do you know why it hasn't got an announcement (yet)?

[sick lance]

I think Skidy will be doing it, as it's 3 Mill celebration.

[rapid merlin]

Ahh

[cedar scaffold]

[solemn radish]

I stumbled on it completely by accident - Went to the dashboard, saw it in the new rooms above "subscribe"

[sick lance]

Yeah, you can find it at the bottom of Modules

[rapid merlin]

But congrats with being the first who finished it :))

Reelix time has come to do the other ones! xd

https://tenor.com/view/the-time-has-come-michael-scott-the-office-pt_initial-angry-gif-12014939

[solemn radish]

Tell me if this makes any sort of logical sense (Scoring wise) :p

[rapid merlin]

Reelix you can still be fist in this one: https://tryhackme.com/r/room/tryhack3mencryptionchallenge

[solemn radish]

I'm a free user :p

[rapid merlin]

Ahhh shiii

[solemn radish]

Besides - I suck at crypto

[solemn radish]

I was first in my country - Then they spam released some sub rooms, now I'm third by 4k points ;D

[rapid merlin]

Pain