general

[mossy river]

addiction to save my bank account

[rapid merlin]

fair

[umbral kiln]

ew

you drink that

[mossy river]

I inhale it through my lungs

[shut pewter]

butt-chugg ftw

[rapid merlin]

dayummnn

Do you have a redbull vape?

Bad for you

[crude stump]

Breath air!

[brisk tree]

Jealous

[simple bone]

Thats a Wolverhampton bus chair pattern

[mossy river]

I think you mean west midlands bestie

[simple bone]

That'll do too

[mossy river]

I’m in coventry

[simple bone]

Wanna see how I found that?

[mossy river]

You are also on a bus

[simple bone]

SOme dude uploaded a photo to ebay xD

[mossy river]

😂😂

[mossy river]

Ah their chair looks much cleaner

I guess he couldn’t wait to get home to post it to ebay?? 😭

[simple bone]

Just don't pat it i guess, a moving eBay office.

[umbral kiln]

even worse

[umbral kiln]

ewwww

[mossy river]

This isn’t by choice, just going to the gym

I live in a much nicer area

[umbral kiln]

around coventry? impossible

too close to birmingham

[mossy river]

Brum is a different breed

[jagged moon]

Our public transit sells clothes with their pattern

For lulz

[mossy river]

That would be sick for a party with a theme

“I’m a west midlands bus seat”

[rapid merlin]

Dutch away football kit looks like a bus seat

[dense plover]

hey guys

[timid prism]

reminds me of indigo somehow

[dense plover]

whats the best way to land a cybersec internship?
I'm in college rn (Grade 12 by US standards) and am doing my A Levels rn.
Unfortunately, our coursework barely touches upon cybersec related stuff, and I really want to get some experience..

do tryhackme courses work?

[simple bone]

My THM experience helped me land a job. The skills I learnt from the platform have been invaluable.

[dense plover]

does it count on your resume?

[shut hawk]

TryHackMe and networking with others

[simple bone]

Its on my CV yeah

[shut hawk]

That's how I got my internship that led to a job, as a year 12 student

[simple bone]

"Cyber" is what you make it, if you want a job and want to do it. Do it to the best of your ability.

[dense plover]

which courses did u take?

[simple bone]

The field is bloomin huge, get stuck in and do as much as possible. e.g.

• Network with people
• write blogs
• start projects
• learn how android/ios/windows/linux/w.e works
• Learn how to program
• Learn BT/RT
• Work with others
• Help a community
• Bug Bounties
• Hack stuff!

etc etc the list goes on

[dense plover]

Does my academic performance count? I happen to be a reasonably good student, especially in computer science

I know how to code, and know reasonably well about linux

[simple bone]

Depends on the field you want to go into and on ur degree. I'm biased with academia, so best not to ask me (i dislike it)

[dense plover]

am typing from linux rn as a matter of fact (endeavoros btw)

[shut hawk]

FM, maths, comp science, physics

[dense plover]

I dislike it too. My parents are adamant about me getting a degree though ;/

[dense plover]

pretty much the same as yours, except FM. took chem for some reason

[shut hawk]

rip

[dense plover]

whic courses did u do on tryhackme?

im assuming you meant further math by FM?

[shut hawk]

Did the red pathways and just learnt rooms that interested me

[rapid merlin]

You could do the paths in this order

But its a bit preference

Only red, only blue, both

[dense plover]

thank you!

[rapid merlin]

Glad i could help

[mossy river]

Trying to workout with an injury is the worst

I have to go so light out of fear of worsening

[simple bone]

working out is the worst

[mossy river]

I love working out

Gym time is me time

[pallid lotus]

Is it really working out if you don't feel half dead by the end of it though?

[mossy river]

Depends.

If I’m doing chest and my legs hurt then I’m doing something wrong

I generally come out of the gym quite energetic

[crude stump]

Working out releases dopamine

I mean if you think about it, it makes sense. You go to the gym to better yourself

Feel accomplished after

[shut hawk]

inf energy strat

[mossy river]

Yeah until I sit down then honk mimimi

[wide cradle]

Hi

anyone here using tryhackme with wsl

[shut hawk]

yeah

but it's not recommended

[wide cradle]

hmmm why

but things like reverse shell, does it work?

[mossy river]

WSL 1 had routing issues

If your system can run a hypervisor like Vbox or VMware you might as well use them

[wide cradle]

iirc, wsl have its own networking stuff, maybe seperate to the windows host, will that affect reverse shells

[shut hawk]

spot on

[wide cradle]

hmmm, i'll check, thanks

[simple bone]

Most Armies do that nowadays

Wanna see somethign hillarous?

https://jobs.army.mod.uk/roles/royal-signals/cyber-engineer/

[worn thorn]

fancy buzzwords

[simple bone]

Why u touching harris radios?

*coughs in Bowman*

[worn thorn]

all three I guess

[warm bear]

hiiiiiiiiiiiii

[simple bone]

I see cyber as cne imo either using them or defending

Mil is always messy, they just have a lot of wonga

I do like how the US have their good cyber guys as officers and not sprogs

Oh thats crap, from what I saw most of the good ones were officers and had training galore.

[pallid lotus]

[simple bone]

Yeah cause they're always the best xD

The grass is defo greener on the other side tbf 😉

U lot get SANs thrown at u too, those things are crazy expensive

Sounds like it'll keep u busy like

[rapid merlin]

what should I do if I have a Thailand hacker on my pc

demanding a ransom

[tired peak]

wipe your pc

[rapid merlin]

what does that do

[hardy mica]

Ask him if he is a masterhacker

[rapid merlin]

Wanna see the email he sent me lmao

[tired peak]

no

[rapid merlin]

it looked proffessional asf

[simple bone]

If he was on ur PC why would he email you?

[tired peak]

if you think your computer has been compromised, I would do a full wipe and reinstall

[rapid merlin]

idk gang Idk what this shit is he said he was on my pc and came to a understanding as to who I am

[tired peak]

just because they said they were on your PC doesn't mean they were

[rapid merlin]

Nah shit's fake. 99% chance he is not on your pc. But to be sure, reinstall Windows

he sent me 3 passwords

(Assuming you use windows)

[hardy mica]

so a Thailand hacker is in your pc . First question : HOW?

[rapid merlin]

that I use

[rapid merlin]

Could be from breaches

Leaked passwords

so definitley a scare tactic gotcha my bad I really looked everywhere on what to do, I just got a pc

Change all your passwords, change the password of your email. Reinstall windows. And ur good to go 🙂

Yeah I made 2 new emails on a vpn and switched everything accordingly to those new emails

[simple bone]

I'd use the opportunity to get a password manager and change them all. Set up 2FA/MFA where ever you can.
(a password manager isn't a person)

[rapid merlin]

yeah I put 2fa on everything i care ab

Did you change your passwords?

yes

[tired peak]

2fa is not a password manager

[rapid merlin]

he also sent me screenshots of me playing a game, in tab on youtube

Then, reinstall windows

[tired peak]

wipe completely then reinstall

[rapid merlin]

Format your drive

I ran malware bytes tho and it says it removed 22 PUPS and 1 Trojan but I read on quora there is probably something hidden still, if thats the case Ill reinstall rn

[tired peak]

malware bytes won't catch everything

[rapid merlin]

^^

[rapid merlin]

Yeah just do that

Windows installation media stick, format the drive

[shut hawk]

Btw quroa is a load of crap don't take any advice from it

[rapid merlin]

Sometimes they have wise things to say

oh ok gotcha thanks Ill keep that noted

[simple bone]

WikiHow?

[worn thorn]

There are definitely some scummy services which provide that.

[rapid merlin]

Back in my days, I just called my password manager

what is that

[shut hawk]

Exception, not the rule

[finite basalt]

Like most of the internet, it's great if you don't mind fact checking stuff

[shut hawk]

Yep, just pretend it's April 1st all the time

[finite basalt]

😂😂

[rapid merlin]

Math exam tomorrow

yay

W

[crude sable]

[worn thorn]

My pc had a heart attack after it saw the kali iso. I though I was yet again outplayed.

[rapid merlin]

Windows Defender or?

[worn thorn]

yea

[rapid merlin]

Mine doesnt get heart attacks from that lol

[worn thorn]

weird...

[rapid merlin]

Yeah agreed

[worn thorn]

I had it mounted for whatever reason.

[normal fable]

You mounted the ISO?

[worn thorn]

yea fat fingered it prolly.

[normal fable]

That'll freak out defender

[rapid merlin]

I have that too. And when I tried to delete the iso from my previous vm. The VM broke permanently

[worn thorn]

it indeed does.

[rapid merlin]

Grub rescue!

[worn thorn]

grub is cursed

[normal fable]

Get a bunch of warnings about 'hacking tools'?

[worn thorn]

defender tried to send bloodhound deb for analysis

[normal fable]

Early and still mostly one-handed. Please excuse my errors in typing.

[hardy mica]

i have an uncommon question

doesnì't reverse shell knowledge belong to BASIC knowledge?

[worn thorn]

a BASIC revshell is new to me

[hardy mica]

im readying an apply for a job and they wrote : Advanced knowledge required : Reverse shell

[normal fable]

I'm not sure what you mean by this.

[hardy mica]

just what reverse shell knowledge is considered

is it not a basic thing?

[normal fable]

BASIC programming lang?

[hardy mica]

no basic "tool" to use

[normal fable]

Depends... There are simple and complex revshells.

Speaking of defender... lol

[boreal scarab]

https://tenor.com/view/unstable-insane-clinically-insane-were-clinically-insane-gif-26170011

[worn thorn]

yea

[hardy mica]

indeed what is an "Advanced revshell"?

[boreal scarab]

https://tenor.com/view/stabbyduck-stabby-duck-twitch-youtube-gif-25246243

[normal fable]

Possibly a revshell that's designed to evade AV, hide traffic in some way..

[mossy river]

[boreal scarab]

[normal fable]

Jabba! Hi. 🙂

[hardy mica]

hmmm could make sense.
But tbh im still confused , i read :
Basics : TCP/IP Exploitation, port swigging , network connections , etc.
Intermediate : WinRM exploitation , SMB scannering , msfconsole , etc.
Advanced : Reverse shell , bash scripting , antivirus evasion, etc.

[mossy river]

Hello Alt Ez | moo

[hardy mica]

so

sorry i had to translate from italian to english

but im still very confused

[worn thorn]

greetings jabba

[mossy river]

Greetings to you Vedrfolnia

[rapid merlin]

Greetings everyone!

[normal fable]

Is that for a class description?

[hardy mica]

no for a job apply , under "Requirements"

[normal fable]

Apply. 🙂

[south egret]

Real

[hardy mica]

i already have a work , one of my friend just sent this to me

[boreal scarab]

Hey Jabba

[rapid merlin]

Wowow real world friends who are interested in cyber sec

[normal fable]

If I saw a description like that here, my first thought would be "I own this job now"

[whole yew]

IIRC BASIC doesn't have any kind of network library. You'd have to write that first

[worn thorn]

sadly not existant in my circles

[worn thorn]

forgor the /s

[boreal scarab]

Surprisingly they are for mine

[rapid merlin]

Yeah in mine neither

[boreal scarab]

some totally not from THM, noooo

[hardy mica]

not even close , he was a java developer

[rapid merlin]

ahh

[worn thorn]

mine don't really care about any of that.

thm is a safe space with likeminded lifeforms

[hardy mica]

this job is for : Security Engeneer

seems like all this skills are completely useless for the job you are applaying in

[normal fable]

The description looks very watered down.

[boreal scarab]

@hot cairn are you a lifeform? 🤔

[junior wraith]

some form at least

[loud marlin]

@boreal scarab you try PETG fillament ? what temp you have ?

[boreal scarab]

No, only PLA, 210

[normal fable]

We are all lifeforms of some sort... I would hope...

[loud marlin]

a ok. then esqy was =/

[worn thorn]

bit creatures currently

[boreal scarab]

https://tenor.com/view/robot-loki-marvel-tva-mobius-gif-22075497

[junior wraith]

you just cant tell anymore these days. you might all be deepfakes

[hardy mica]

watered down is just another way to say sheet

[normal fable]

I hadn't thought of that.

[junior wraith]

sorry for the confusion

chatgpt thing

[boreal scarab]

@normal fable https://youtube.com/shorts/g2DR2K5skzk?si=ds2wFf830voig-tN

IF this is in Vegas, we're going.

[normal fable]

Ya know.. there is a shoot every year.. lol

[boreal scarab]

At Defcon?

[normal fable]

Last year it was like $30ish to register.

[junior wraith]

you would expect a bit more backlash

[boreal scarab]

https://tenor.com/view/cat-cats-what-wut-crazy-gif-20900490

And you didn't say anything?!?!?!?!?! WE'RE GOING THIS YEAR

[normal fable]

Ima dm cuz I'm not sure it's appropriate for THM chat.

[hot cairn]

idk, i exist

somehow

[sand trench]

@willow iron and @willow basalt shadows profile picture was a commission shadow paid for... the user that made it no longer makes commission art pieces

@rapid merlin yes shadow has had nitro for a long time on discord....

also generally don't send random dm:s on this discord

[willow basalt]

thanks for answering! was kinda hoping they would still be open for commissions, too bad. srry if dming was inappropriate

[sand trench]

nah it is fine

also refering to shadow in second person is fine.... shadow themselves will of course refer to themselves in third person though

[willow basalt]

ty for clarifying!

[worn thorn]

gotta love wasting 2 hours writing reports just for someone to look at it for a few seconds and sign it. Almost like it's unnecessary work to begin with...

[bold dawn]

only until it has more storage

[willow iron]

Sry for sending dm + ty for info ❤️

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1719)

[rapid merlin]

chat.

[raw grove]

my c++ port scanner scan all 65535 ports faster than nmap 😎

[atomic stream]

Nice work 😎

[raw grove]

thx

[normal fable]

Did you build in an option to throttle?

[raw grove]

what do you mean

[sick lance]

Is it faster than RustScan?

[normal fable]

Option to limit packets sent/time.

[hazy plover]

hello

I am solving hack smarter security

[normal fable]

Or is it just 'you get fast. That is all'

[hazy plover]

room

and i am stuck at the exploit part

can anyone here help me

[normal fable]

#room-help for help with THM rooms.

[sick lance]

You've been asked far too many times to use room help for help in rooms.

[hazy plover]

okay

[raw grove]

no

[normal fable]

That could be important in some cases. I've had to limit speed on some THM boxes.

[sick lance]

@rapid merlin please interact with the community more before self promotion

[normal fable]

Caller: May I speak to <my name>?
Me: May I ask what the call is regarding?
Caller: Absolutely. (hangs up)
🤣

[whole yew]

definitely scammers testing that the number is valid

[crude stump]

No wonder I keep getting telemarketing calls. I pick them up waiting until I finally get a actual call center scammer so I can waste there time but they hang up. Bummer

Prolly sold my number

Or is using a spoofing call bot

[normal fable]

Sometimes I just use my best bot voice and say 'hello' every few seconds. lol

Kali 2024.1 sure does take a while to install..

Should I get two 4tb NVMe drives? Hmm..

[rapid merlin]

sending much love from Moldova 🇲🇩❤️

[oak river]

Is there anyone here who works as a SOC analyst

Im asking cause Id ask what their job is like

How does their day usually go

[normal fable]

https://www.youtube.com/watch?v=SeLRdgono9E

[oak river]

Yeah, just wanted to chat with someone directly

[chilly veldt]

I do

[oak river]

So what is it like?

[chilly veldt]

I work part time SOC in the weekends

[oak river]

You just like top/htop Linux systems and check how the machines work and check log files?

Tickets?

[normal fable]

I should look for a part time SOC job..

[chilly veldt]

in what way, for me it's been pretty chill, weekends are typically low alarms like 3-4 that I investigate when they come in

[oak river]

What does an investigation include?

Diving into servers/PCs event manager/log files?

Using some tools like wireshark?

[chilly veldt]

figuring out if the alarm was triggered because something malicious or not, if it is, see what have happened, do we have to do something to mitigate and fix the issue or was it blocked after it was found

[wild rose]

When I was an analyst. First thing is the shift turnover, check alerts/tickets, see what needs to be escalated, and answer emails.

[chilly veldt]

I use microsoft tools only for now

we use tools that work from event logs to make it more readable and in one place, sitting in a SIEM

[wild rose]

Next check the recent intel of new attacks, apply blocks for those, and then it's SIEM for most of the day depending on what is critical.

Lunch, check emails, more tickets and alerts, write up reports, more documentation on incidents that need to be resolved and finally shift turnover.

[chilly veldt]

I personally does engineering on the side when there isn't alerts

[oak river]

But mostly your job is observational, consulting and communicating with Incident Response etc.?

And customers*

[wild rose]

yes

[chilly veldt]

I don't talk with IR cause I am IR

I do all from monitoring to analysing to responding

[onyx geyser]

Any help to get TCP flag from borderlands room?

[wild rose]

If you're a tier 1 or 2 SOC analyst, you operate as Security Helpdesk and do a bit of everything.

[chilly veldt]

I watch my email where I get notified

[oak river]

I wonder if I should apply as SOC tier 1

Just kind of worried

[sand trench]

go for it

[oak river]

Maybe I should do the SOC tier 1 beforehand

[sand trench]

the worst they can tell you is no

[oak river]

Path on THM

True, but I am afraid that I might not do my job well enough

I mean I work mostly well without pressure

[wild rose]

as a tier 1, you're expectation isn't as high as an engineer, who will often have more technical knowledge.

Like I said, you operate as a "Security Helpdesk" moving tickets around to the right teams, watch the dashboards to escalate alerts, and do investigations on your free time to better yourself to be a fit for teir 2.

[naive violet]

#room-help #room-hints

[hardy mica]

how points in room works? I see people getting more points than other ? why ? ths

[loud marlin]

first blood... and so

[hardy mica]

i usually do a lot of networking security + wireshark checks. Most of the time there are low profiles attacks

[hardy mica]

ok then we have all the same points , so its not based on time?

[oak river]

You mean something like a customer support account attack or?

[true bay]

Yeah if you apply and they hire you then you obviously have some value

[loud marlin]

if some solve first gets more points. prob 2nd and 3rd person

[hardy mica]

you usually checks for strange packets , sometimes some idiots try an active recon but nothing more . Most of the time the "worst" attack are pishing mails that people working in your office open

[wild rose]

Apply, apply, apply for jobs, like shadow said. You'll have to start somewhere and a tier 1 SOC analyst is a nice position.

[oak river]

I'm just kind of worried. You see, my last job involved tackling a lot of customers on a daily basis

I was a Junior network engineer

[hardy mica]

the work is very chill , the boring part is the networking part. Usually NOC should solve it , but most of the time the requires SOC intervent

[oak river]

They didn't fire me, I left by my own volition

[hardy mica]

I am a SOC analyst as my 1st job

[oak river]

No less, I was a JNE for a VERY big corporation

[hardy mica]

nothing to worry about trust me

[oak river]

And I kind of have something like a proffesional trauma because of that

[hardy mica]

if you are completying room in THM you are way more ovequalificated for the jov

[oak river]

How many tickets or customers do you usually have?

Once I had active 25-30+ tickets which was insane for me

[loud marlin]

@hardy mica https://tryhackme.com/r/resources/blog/updates-to-points-leaderboard-ranks

[hardy mica]

depens on days tbh. In Friday you have the big requests. Most of customers call you for strange shit

[oak river]

Strange stuff", like what? 😂

[wild rose]

You'll have those days where you'll get a lot of tickets/alerts

[hardy mica]

Most of the time in scale :
-Pishing
-Low Profile malware
-"My antivirus doesn't go"

[oak river]

How do you spot malformed packets though, you obviously must know how normal ones look? Did they teach you that or you knew/had to teach that yourself?

[hardy mica]

what you want , networking security strange or soc strange? Your choice and i'll tell

[oak river]

I know we have one such room about wireshark on THM

[sick lance]

Mine was pretty quick.

[oak river]

I have completed it but still

[oak river]

Both?

[hardy mica]

tbh you know how a normal packet is too man

if you see a fragmented one you know something is happen

[oak river]

I mean obviously I could look at some normal traffic

[hardy mica]

it's enough

[oak river]

To make comparisons

[hardy mica]

if you find a TCP SYN without SYN ACK , you already know that there's something strange

[normal fable]

I don't know why it's taking so long.. I gave it 8gb RAM, 4 cores and its on a fast NVMe drive..

Installing from ISO

[wild rose]

having a networking background will definitely help you.

[hardy mica]

Networking :
One guy thought it was smart to create an access list with only his own ip , so he could complete his work faster . Guess how it ended

[oak river]

By others from his team/company not being able to access his or the company's resources?

[normal fable]

Disk IO is super slow rn.. 11M max so far...

[oak river]

This access list was done on a router or he just modified file permissions?

[hardy mica]

SOC .
One guy , tbh one sysadmin decide to download a "ACTIVE DIRECTORY MENAGER" from internet . Moral of the story was a simil noescape.exe, all we had to do was backuping back the system

[oak river]

Yeah, the three-way handshake

[oak river]

Is that ransomware?

[hardy mica]

as NOC and SOC you have access to it

[hardy mica]

a very low profile one

[wanton schooner]

hey guys whatsapp

whatsupp

[hardy mica]

Most difficult as SOC , was a guy who opened an email that had an image with a code injection in it. Took us almost 8hrs to understand whats going on.

[wanton schooner]

exactly it is so difficult

[hardy mica]

you just rollback a backupfile

its not so difficult tbh

[oak river]

Low-profile means low-privilege account or what do you mean?

[hardy mica]

they have autobackup daily

[hardy mica]

very bad ones

[oak river]

Steganography?

[hardy mica]

no one ensure it manually. Not becouse you can't but becouse you need to much time and you need your system back asap

[hardy mica]

yep, but trust me , it's an unique event you see it

[oak river]

I still don't understand, they tried to hack low-privilege user profiles on the network or?

[shut hawk]

what image viewer had the vuln of executing malicious code in it?

[hardy mica]

they sent an email with a banner of the company

the banner had the code in

[rapid merlin]

so I found out its a Sextortion thing happening to me, he sent another email and the ransom doubled

[hardy mica]

they encrypt the file in the system

[rapid merlin]

pretty sure he just tryna to scare me now

[oak river]

Oh, so they encrypted uninportant files that had privileges that most users could access?

[shut hawk]

right but just that by it self doesn't do anything, whatever's loading the image must have executed the code - I'm just curious as to what it was

[dense plover]

hey guys im applying at montclair state uni

[oak river]

By low-privilege you mean files that most people can access and high-privilege is data that few can access?

[oak river]

Good luck!

[rapid merlin]

some fucker from thailand he said he has full control over my pc but he is emailing me why doesnt he just leave a text document on my desktop?

[dense plover]

they have a general CS program and a combined MS/BS program for cybersecurity

which program should I shoose?

*choose

[sick lance]

One that suits you.

[oak river]

What OS are you running?

[rapid merlin]

How do I check

[oak river]

Run a full-scan on your PC from Windows Defender and/or anti-virus suite that you have.

[rapid merlin]

I did that, got 22 PUPS

and quarantined

in the email he contained 3 of my passwords and a screenshot of me looking at a mod menu website

[oak river]

Oh.

[rapid merlin]

he sounded so proffessional in the email

[oak river]

What does he want, money?

[dense plover]

I really dunno what would suit me...I'd like to pursue a career in cybersec but i dunno much about what degree employers would preer

[hardy mica]

im struggling explaing it in english. This virus encrypt some unimportant sheet on your pc , disable task menager and create a lot of files on your OS.
To solve it you licterally find the "disable" file in systems file , delete all the files , delete all the process and delete all the new users

[rapid merlin]

and very nice

[hardy mica]

but backup is way faster

[rapid merlin]

he was super nice, yeah he wants 1000btc or hes releasing all info he could "possibly obtain" to the public

[hardy mica]

it was an ip grabber who try to grab every ip you interact too

[oak river]

Contact your police/digital police department.

[rapid merlin]

I did

Ic3

[hardy mica]

trust me , difficult to find , stupid to delete

[rapid merlin]

Sent them his btc address and email address

[hardy mica]

low profile = sheet one

[oak river]

If you would like to prevent that or are worried, the best solution would be to turn-off your PC and Unplug the HDD/SSD and get a new one with a re-installation

[shut hawk]

ah right, so it was just a URL to the malicious server that logged the IP of who tried to load it

[oak river]

What are the pups?

Trojans?

[hardy mica]

a very bad work tbh , but on the moment we were :"wtf is going on?" so you always think the worst scenario

[rapid merlin]

some people say hes just trying to scare me because why would he email me but some are saying that he might just be bragging about this stuff and be some kind of egotistical "black hat"

[hardy mica]

and it was a mistacke

[rapid merlin]

Potentially Unwanted ProgramS

[oak river]

He wants money, that is extortion.

[rapid merlin]

So he def has everything he says he does?

[shut hawk]

that makes sense, better safe than sorry

[rapid merlin]

I changed my emails and passwords and enabled 2fa

[oak river]

Extortion - When someone holds something yours that they should not hold/possess and use it against you.

Potentially unwanted programs.

[shut hawk]

If you have an upload pfp functionality and it lets you use custom URLs, that's one way of seeing who views your profile

[oak river]

What have you been doing? When did these pups appear or what did you download/visit?

[rapid merlin]

If I was to get into CS, would I be able to combat this in the future or is there nothing you can do? And the only time I accidentally opened an email saying I won a giveaway because I mistook it for a game giveaway I entered in

[hardy mica]

surely more interesting than "i disabled my antivirus how i reactivate it?"

[shut hawk]

just any URL pointing to the the attackers server

you could also try for a CSRF/OSRF if it supports actions via a GET request

as thats how the image is loaded

[hardy mica]

nono , its an URL pointed to attackers server. Every loaded IP was sent to them

[rapid merlin]

he said in his message "I tell you if you want to avoid this learn internet safety rules and steer clear of dubious sites" word for word

[dense plover]

please help if you can :/

[shut hawk]

#resources message
this is a live demonstration of abusing it to perform actions on site

[hardy mica]

and tbh is way easier to create than you think

[sick lance]

Bare in mind any sort of hacking back is illegal.

[hardy mica]

yeah its interesting to know for sure

[rapid merlin]

really?

Not even if he has information you cant like hack back to delete your info?

[sick lance]

Yes, it's blackhat material.

[rapid merlin]

noice so Im fucked just because I accidentally clicked a fake email

[shut hawk]

Did you download/run anything or just browse to a site?

[rapid merlin]

browsed to a site

[shut hawk]

then you are probably fine (provided you have an up-to-date browser), unless you inputted any sensitive information obviously

[rapid merlin]

i downloaded a mod menu a week ago but when downloading it it didnt say anything was wrong with it, usually on any site i go to my antivirus flags like crazy but this time it didnt

thats only other time I did something fishy

I had pics of id and ssn in my google photots

[sick lance]

Mod for what?

[rapid merlin]

how would I know if he is using my information? like start getting called by police or randomly get swatted?

Mod menu for some game I think

I forget the game

[shut hawk]

guessing random emails/numbers is something that does happen, i'd just block them tbh

if they start/continue to harass you, then contact local police

[rapid merlin]

Can I send you a small bit of what he said like the part that worries me? its not a link you click on im sending a prntscreen

[unborn cosmos]

maybe a zero day (99% its not ) but who knows these days

[hardy mica]

nah , no way

[rapid merlin]

am I able to put prntscreens in this chat or will I be banned

[sick lance]

Are the E-mailing you from your own e-mail?

[rapid merlin]

my friend looked at it he said it looked fake af but ive never seen it before and it looks wild

no, its from some Dorthea

[shut hawk]

if scrubz approves 🤷‍♂️

[hardy mica]

wait im no getting it , a guy is sending you email where he treathen you?

[rapid merlin]

yes but he also in the email sent me a picture of me on a website of my screen, and 3 passwords I regularly use

[sick lance]

Ideally, I'd rather not members send each other such content.

Just incase.

[rapid merlin]

What If I copy and pasted or typed word for word?

[unborn cosmos]

some APT member was bored

[hardy mica]

a picture of you on a website of your screen. So your personal photo?

[shut hawk]

Not in this server then, @rapid merlin if you want to you can DM me it

[hardy mica]

or the screen of your pc?

[rapid merlin]

the screen of my pc

looks like as if I was in a discord sharing my screen on a website

he got from the taskbar to the tabs

[hardy mica]

so , hipotetically this guy as a meterpreter session in your pc , right?

no becouse 2 are the things :

1. you installed a trojan
2. this guy exploited you

now3

[gray sonnet]

Was about to sat something dumb but nvm

[gray sonnet]

Trojan makes more sense

[hardy mica]

kinda strange someone use a reverse shell on you and open a meterpeter session . 1 ) becouse its difficult af doing it on new OS 2) becouse : "who get so much effort for a random guy?"

so you installed a trojan

you go on your task menager >>> you click Active >>> you close suspicious process.
You reinstall Windows and you change your passwords.
Et voila , you are safe.
Then you take these screenshots with email he is using and you took it to police

@rapid merlin

simple and effective

[rapid merlin]

ok thank you

Ill get to this right away

[hardy mica]

no problem man

ah man

buy a good Antivirus , becouse Trojan in 2024 , soso

[rapid merlin]

is it possible he found my email off a data breach and he only has passwords to my emails?

and hes using to scare me?

[hardy mica]

and how he get the screenshot of your pc?

[glass nest]

Change passwords, but beforehand double-check that the recovery-email hasn't been changed, and turn on 2fa wherever you can

[rapid merlin]

maybe when I opened the website something autoinstalled and tooka picture

[hardy mica]

he found your email in some shitty dictionary , and did some useless bruteforce

[rapid merlin]

like scsys whatever its called

[hardy mica]

surely you have it saved in something and you forgot about it

its 99% a trojan

but for real man , do steps i wrote

AND BUY AN ANTIVIRUS

trojan in 2024 shouldn't exists

[rapid merlin]

That will just make me safer in the future, if he has my info like social security i need to focus on getting that back

[sick lance]

XSS shouldn't exist in 2024, but here we are 🤷

[hardy mica]

sure but atleas XSS requires some knowledge , trojan can be blocked by every antivirus

[sick lance]

People will always try piracy and get infected this way by trojans, it still works because it's people will still try and grab stuff for free.

[sick lance]

An Anti-Virus is only as it's good as it's database...

[hardy mica]

how you get that back ? if he saw it he has it. Just go to police and nothing happen , simple

[rapid merlin]

so this isnt that serious?

[hardy mica]

Most probably he is a 12 years old who downloaded :"BEST TROJAN.EXE"

[glass nest]

I like how you assume it's a he 😄

[rapid merlin]

I barely use the internet and this happens

[hardy mica]

follow steps , go to police and gg

[sick lance]

By your logic, this shouldn't happen.

[rapid merlin]

Im 22 not 12

I dont use the internet all like that

[hardy mica]

a 12 years old girl usually its more mature

[hardy mica]

by my logic not everyone has an antivirus

unfortunally

[glass nest]

girls are all smarter than guys.

[sick lance]

Windows Defender would like a word with you.

[hardy mica]

im not talking about you , but about him

[rapid merlin]

oh oh my bad

[hardy mica]

im talking about real antivirus

[rapid merlin]

I thought you saying im dumb for whatever i visited which I agree I am dumb for not being more careful

[sick lance]

Windows Defender of today isn't the Defender of years ago.

[rapid merlin]

I know hes from thailand though

thats all I know he accessed a steam account of mine from a thailand ip

[whole yew]

There honestly isn't anything you can do to "get that back." contact LEO, and if you are underage, let your parents know.

[hardy mica]

yeah but windows defender its not norton. If windows defender allow a trojan of a guy "WHO EMAIL YOU BACK"

well

no more to say

[rapid merlin]

What is LEO

[whole yew]

Change the account passwords, go through the platform recovery, and dont' re-use passwords. That's basically all you can do if you get hacked.

[hardy mica]

surely not the best hacker in the field

[vocal gale]

I use Bitdefender and it expires soon so I'll renew that or something else

[sick lance]

Norton is worse than Defender.

Do you have any sources to back all this up?

[glass nest]

I'm surprised that word isnt censored on here 😄

[worn thorn]

norton itself is a pup

[rapid merlin]

after reinstalling windows I can log back into all my stuff? its fucking creepy he can take pictures somehow

[hardy mica]

Noroton is not worse than Defender. My source is :" this guy have a trojan on his pc sent by another guy who emailed him back". I mean

idk

[sick lance]

My Malware-Bytes ends in 30 day(s), that's when I upgrade to include the VPN etc.

[hardy mica]

this says it all

[rapid merlin]

Im staying logged out of everything on my pc

[sick lance]

Not a valid source.

[sick lance]

It's an isolated instance.

[hardy mica]

Isolated but real. An Antivirus in 2024 can't let this happen in any way

[sick lance]

Unless you know, it's not in the database.

An anti virus is nothing without it.

[hardy mica]

if a trojan is not in the database means its created by someone who actually know very well what is doing. That one guy , surely doesn't email you back. For obv reasons

[worn thorn]

you'll never know.

[sick lance]

You're certain it's a trojan.

[hardy mica]

its a meterpreter session?

[sick lance]

Have you seen it?

[hardy mica]

what are the odds a guy who emailed him back performed a real hack?

[hardy mica]

no but i use logic to go by exclusion

[sick lance]

So youre providing nothing but opinions then?

[chilly veldt]

lmaooooo

[hardy mica]

its like the dumbest guy in your class wins a nobel

possible , but what are the odds

[hardy mica]

im trying to fix the poblem , this is what im doing

[rapid merlin]

what is LEO

[unborn cosmos]

Maybe VNC viewer ? Logged into a free wifi network with a weak password which could get brute forced .

[boreal scarab]

Plays Fallout 4
Hacks into computer
Character:

https://tenor.com/view/breezy-hacker-im-in-matrix-laptop-gif-22983973

[sick lance]

I mean, you think you are...

[clear jackal]

Law Enforcement Officer/Organization

aka the Police

[rapid merlin]

and I should only worry if he sends another email>?

[boreal scarab]

I swear, everytime I play Fallout 4, everyone and their grandma is pinging me on discord, on steam, pigeon carriers......

[worn thorn]

hehe

[sick lance]

Right click > mute.

[hardy mica]

with the information he provided to us there are 3 possible ways :

1. It's a trojan
2. it's a meterpreter session
3. its a 0 day.
   Now , what are the odds a guy , who email you back telling you :"i have your password" , created a 0 day or a meterpreter session?
   So , im going for the most obv one.
   After i said him how to solve the most obv one i said him to go to police and provid them his proofs

it's enough to fix problem , i think 🙂

[boreal scarab]

https://tenor.com/view/angry-ping-pissed-kill-xd-gif-13919523

[hardy mica]

then if this guy actually created a 0 day or a meterpreter session , well , unique cases exist

maybe he was a genius then he broke his head and become an idiot , who knows. Still better go for the most obv one

[rapid merlin]

I dont try to be annoying when I ask this but off the info I shared is it sound like he is trying to scare me into paying or if he actually has info and knows what hes doing

[hardy mica]

Have you ever seen a thief come back to you and say :"hey look , i stoled your necklace?"
Same thing. Stay chill , do steps i said and GO TO POLICE

Police will fix your problem anyways and take this idiot

[worn thorn]

occams razor. The screenshot was probably shared with some online tool and the email in a databreach some time ago.

no need to dig deep.

[chilly veldt]

oooooorrrr
4. A scare tactic

[sick lance]

IKR!

How many of them have we seen?

[chilly veldt]

500

in my inbox right now

😄

[unborn cosmos]

or or or
5. VNC viewer

[rapid merlin]

looks like mine too?

[sick lance]

What sort of images do they have of you?

[boreal scarab]

The best one is "I caught you on camera doing X" That's great.......... I don't have any cameras connected to either my desktop, nor does my laptop have a camera

[rapid merlin]

if you have emails that have a screenshot and some old passwords and you know they are fake i wont care anymore

[hardy mica]

If he actually has a screenshot of his windows session, they should got it someway

[rapid merlin]

its a picture of me on a website

can I send you prntscreen ?

[hardy mica]

that is a scare tactic is for sure , i mean this guy emailed him back

not the sharpest knife

[sick lance]

I have pics of you > Is this E-mail active

Reply > yes

[hardy mica]

he said he showed him the picture

[rapid merlin]

he said in his email he doesnt reply and wont monitor replies

[hardy mica]

if he just wrote :" i have picture of you" , for sure , its a scare tactic

[rapid merlin]

he said the only way to resolve this is to pay him 1000$ btc

he sent a picture of my computer

not me

[unborn cosmos]

The sad thing is that some people fall for this trick

[hardy mica]

@sick lance

a scare tactic is :" i have picture of your computer " not actually having it

[sick lance]

So they sent you an E-mail to try and get something out of you. but they don't monitor replies?

[sick lance]

If they don't monitor replies, how did they reply to your initial e-mail?

[rapid merlin]

yeah he said only way to remove this is to pay him 1000$ BTC wallet, gave me his bitcoin address and said after the money comes through he will delete saved information on me

they didnt reply

[glass nest]

Usually it's 'I have a video of you ... having a personal moment... on webcam, and I'll email it to your contact list'

[rapid merlin]

They sent me an email at 4 am

when did I say they replied to me

[sick lance]

Timezones.

[hardy mica]

more professional

[sick lance]

This makes less sense as I ask more questions.

This is a classic spray and pray, hopefully somebody panics and sends me bit coin.

[rapid merlin]

I will explain from the start in as few words possible so it isnt confusing

[hardy mica]

wait im starting not getting it

[loud marlin]

@glass nest what temp you have on PETG ?

[hardy mica]

they have a real picture of your pc or they said they have?

[unborn cosmos]

bro's yapping

[whole yew]

Don't send money. Ever. Disconnect it from the internet, reinstall your OS.

Usually compromises like this happen from pirating software and media.

[rapid merlin]

I wake up this mornign at 4 am to a email from dortheacorelizo, I open it up, 2 attatchments, one is a picture of me surfing the web, the other is a document telling me his demands, in his demands he says he doesnt monitor replies, says dont bother going to police because he "cant be found" and he is "the best in his field"

[sick lance]

They did say they downloaded a mod tool for a game they can't seem to quite to remember.

[rapid merlin]

and above the attatchments was 3 passwords I use on a daytoday basis

[hardy mica]

https://tenor.com/view/facepalm-really-stressed-mad-angry-gif-16109475

[sick lance]

This is either scam baiting too far.

Or it's a troll.

That's my opnion.

[glass nest]

250, but it was a bit stringy with that

[smoky lark]

hey guys. I was on this room Data Exfiltration and could not get ICMP data exfiltration to work on msf6 auxiliary/server/icmp_exfil. Tried sending packets to myself (both on VM and native OS) on interface tun0 from attackbox and from room's dedicated machine but no BOF packet get received. Strange enough, when I send a BOF packet to the AttackBox and listen on interface ens5 on msf5 on AttackBox, everything is working fine. Tried tcpdump to see if packets are reaching me and they do, but msf6 does not seem to catch them.
Did anyone encounter problems on Metasploit Framework 6 using auxiliary/server/icmp_exfil ?

[whole yew]

Seriously, take it off the internet, backup your photos and actually important documents, then reinstall the OS.

[sick lance]

#room-help please.

[loud marlin]

you have coasting and jerk set on ? and/or outer wall wipe distance ?

[sick lance]

Scan the files before you transfer them back over to a new installed OS.

[hardy mica]

@rapid merlin as we are saying from 5 hrs. Reinstall windows , change passwords

end

[rapid merlin]

i changed passwords and emails, and removed virus

[hardy mica]

ok

reinstall windows

gg

you are free

go jogging

[rapid merlin]

lol

you dont think this will only piss him off and encourage him to keep following me?

[hardy mica]

following you with what?

[rapid merlin]

idk hacker mans things

[glass nest]

https://tenor.com/view/hacker-hackerman-kung-fury-gif-7953536

[hardy mica]

you watched too much films

[rapid merlin]

lmao

from my understanding I thought hes on my pc surfing it like the web

[hardy mica]

to bruteforce a very good password you should wait 978 years just to see : "no password match"

[loud marlin]

@glass nest btw send me your k1 profile file... cura or creality 🙂

[hardy mica]

you downloaded some shitty file and this is the result. Follow the steps we reapeated you and go chill

An hacker who email you back : it's not an hacker , is dumb as fuck

so chill , you are not in contact with Arkdata or Mitnick for sure

[karmic hill]

why isn't it working?

[unborn cosmos]

RIP mitnick

[rapid merlin]

He didn't email me back, he sent the first email

[hardy mica]

😦

[sick lance]

#room-help

[rapid merlin]

And he only sent one and one only email

[hardy mica]

enough for being dumb

[sick lance]

Ignore it.

[shut hawk]

Your phone is not rooted, you cannot do that

[rapid merlin]

Ok bet

[karmic hill]

oh so enum doesn't work without root permission?

[rapid merlin]

Thank you guys for the help and reassurance

It really means alot

[shut hawk]

basically

[karmic hill]

thanks

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 505)

[sick lance]

Please don't use that word here. 🙂

[rapid merlin]

Oh I'm sorry what did I say

[sick lance]

The r word, it's not welcome 🙂

[rapid merlin]

I was just saying what people called me but I understand wont happen again

Wild

[shut hawk]

@sick lance

[grim sparrow]

:hammer: dt.skii#0 has been banned.

[mossy river]

Thanks Juun

Mobile is so slow sigh

[rapid merlin]

Is Thailand have alot of bad hackers or people that try to look like hacker?

[whole yew]

just happened to take a break from work at the right (wrong?) time

[normal fable]

I happened to look at chat at the wrong time too.

[unborn cosmos]

Same

[rapid merlin]

I deleted the email he emailed me on so he gone he is the hacker you see on the goofy movies you know 😂😂

[mossy river]

So I forgot I was making rice

That could have gone really bad

[unborn cosmos]

I have a Question :
how in the world there can be kids as old as 15,16,17 that are exposing security vulnerabilitys in huge tech enterprises. while some people learn for several years but still do not reach something comparable

[normal fable]

You need a rice cooker?

[mossy river]

I think I need someone to just keep reminding me of things

But a rice cooker also works

I’d much rather purchase a razer tkl mechanical gaming keyboard tbh

[shut hawk]

luck and a lot of work

[sand trench]

some people get stuck in tutorial hell thinking they can not do something or are not good enough to do something as they have only done tutorials

[normal fable]

Priorities...

[sand trench]

where shadows money for new computer???

[shut hawk]

(source: me)

[mossy river]

I’m actually torn to be honest. My headset works fine but I’d like a new one

Whereas my keyboard has physical damage and I should probably replace it first…

I also just spent £300 on a new CPU so it’s like do I really need to…

[sand trench]

shadows headphones work near flawlessly

[normal fable]

I'll send you a dollar 😁

[sand trench]

but they need a cleaning

[shut hawk]

SteelSeries

[sand trench]

shadows patreon only takes euros.... but good luck

[unborn cosmos]

hopping for that luck too

[mossy river]

I’m 90% sure my nightmare last night involved steel series

[sand trench]

did it involve steel???

and also did it involve a series of nightmares

[unborn cosmos]

litteraly discribing me but cant find the way out of it

[rapid merlin]

Is it worth learning cs as a beginner in 2024?

[mossy river]

Counter strike?

[rapid merlin]

I abbreviation a lot I'm sorry

[sand trench]

help desk customer service???

[rapid merlin]

It's cyber security

[mossy river]

My question to you is why wouldn’t it be?

No right or wrong answers

[sand trench]

according to shadow life is all about learning and teaching others

[pine stratus]

Maybe ww3 will happen and there is no internet or servers anymore

[ashen blade]

hey guys does anyone know the issue in #subs-room-help thank you 😄

[pine stratus]

so its not worth it

[unborn cosmos]

the only thing why it wouldnt be worth it is when you just do it for the money

[molten sky]

cs also often refers to computer science, as in the degree program

very vague initialism lol

[sand trench]

CS == customer service

[molten sky]

what room is that? you're an 0x7 with no cert or special role and the room says No Access ,-,

[mossy river]

Yummy chicken

[sand trench]

subs-room-help @molten sky

[molten sky]

ahhh right i'm not subbed anymore lmao

[rapid merlin]

I only want to learn to learn to protect myself from this BS or future possibly worse attack I don't want money

I dont want to deal with this ever again

[unborn cosmos]

ok than its realy not worth it

[molten sky]

if that's what you mean, then that'd be like "should i learn to change my own tire?"

,,,,yes?

[pine stratus]

Welcome to discord

[rapid merlin]

I keep to myself I don't talk shit I don't do this to others and randomly to me it comes

[ashen blade]

no worries it is the subs room help but I think I have the solution now

[molten sky]

nothing wrong with learning the basics of security to keep yourself secure, and anyone who says otherwise is just dumb

there's a reason hunter2 is a meme

cause people don't know the first thing about basic security and then are all surprised when they lose access to their accounts

[unborn cosmos]

Fr just chilling infront of my PC an laughing myself to death

[karmic hill]

I'm lvl 5 now

[worn thorn]

*oh no I subscribed to every site imaginable and use the same password on all of them. How did I possibly lose it all *

[crude stump]

Yo yo yo

[molten sky]

like you can call AAA and wait 3 hours for them to come meet you in the middle of the sticks somewhere or you could just learn the basics of it and do it yourself

[rapid merlin]

I used 6 passwords to 10 different site

[molten sky]

https://tenor.com/view/thats-literally-impossible-not-happening-no-way-pass-not-interested-gif-16838005

[crude stump]

Well 6/10

[rapid merlin]

I changed them all and changed all account I own to 2 new emails

[crude stump]

Ideally you would want 10/10

Probability

[molten sky]

like i have passwords i reuse
you're not gonna be 100%
but those reused passwords are on dumb shit that i don't care about whatsoever and just wanna poke around on real quick

[unborn cosmos]

just use Google Passwort manager

[rapid merlin]

Oh well the 48 hour deadline when I find out if he's trolling lmao

[rapid merlin]

I did now

[molten sky]

https://tenor.com/view/david-rose-gif-3214199033367100027

[worn thorn]

use something other than online solutions if you plan to never sync.

[unborn cosmos]

Nahh it´s good as long as you never put in, the same password as your google emal adresses password there wont be a problem at all.(Its free)

[worn thorn]

and google owned

[molten sky]

eeehhhhhh

[crude stump]

I hate google

[molten sky]

it's definitely better than NOT using one for most people

[crude stump]

But I still use there products smh you can’t escape em

[molten sky]

but browser based password keepers are known for being..questionably secure

firefox has gotten a lot better with theirs, but google i'm still not too sure about

[worn thorn]

I don't use any google products directly.

[unborn cosmos]

i mean its google. right? .... RIGHT?

[molten sky]

it's often just not held anywhere close to the same standards as standalone solutions -- it's an afterthought and a random bolt on for a separate product

[naive violet]

To the extent that they're DPAPI

If someone has access to your DPAPI keys that's a real bjg problem

[naive violet]

Definitely not. Look into the implementation.

[clear jackal]

That's not nice

[molten sky]

.NET is like a completely foreign thing to me lol but yeah google no good

[crude stump]

Oh shoot

[naive violet]

It's not dotnet, it's a windows api

[crude stump]

I love google 😀

[molten sky]

thought dpapi was .net but you're right -- .net just has access to it

[crude stump]

Thoughts on DuckDuckGo?

[molten sky]

google password keeper would be barely a step above using Notepad as far as i'm concerned, lol

[unborn cosmos]

bruh, why only the link loaded?

[molten sky]

eh. it used to be good, but they went a bit downhil imo

I still have them as defaults in some places cause lazy but I find myself having to look elsewhere sometimes

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Apr 23, 2024, 7:59 PM

[molten sky]

embeds are only a thing after verification

[molten sky]

https://tenor.com/view/image-perms-flex-gif-22350600

[unborn cosmos]

😢 🔫

[crude stump]

I just wonder how much they stick to there word of privacy

Wow

[molten sky]

i just got a message on linkedin and i have like 20 tabs of it open doing research and it just went beepeepepeppprepepepepewaoaewt as they all notified

[unborn cosmos]

hahahhaha i am feeling you

[crude stump]

Pause

[molten sky]

https://tenor.com/view/break-it-down-mc-hammer-gif-10412568

[unborn cosmos]

Linkedin allways spamming me like shit.

[rapid merlin]

Yeah and they are emailing me some recruiter sent me a message

Like idc

I dont want an email for that

[molten sky]

you know you can turn that off..right

[rapid merlin]

Yeah but they still do that

[unborn cosmos]

Yeah same probleam just unsuscribed recentaly

[molten sky]

i never get emails cause mine are disabled in settings 🤷‍♂️

[rapid merlin]

They make it like you need to uncheck 100's

[unborn cosmos]

Did you guys also put way to much information about yourself into your linkedin account ?

[molten sky]

mine literally just says Company A Company B Company C

[rapid merlin]

Nah only the place i work at

[molten sky]

uni and certs and are actually listed tho

no dates on the uni part

[unborn cosmos]

shit

[rapid merlin]

Problem is, my work does some page with pictures of all employees

But im not on that :))

[molten sky]

was gonna say, not part of my JD so nope

not getting paid to be paraded

not your marketing piece

[rapid merlin]

Yeah

[unborn cosmos]

Yeah ok this is the difference i am still like searching for oppurtunitis

[molten sky]

so am i

I still get recruiters and headhunters in my inbox despite it being vague

some good ones too

[unborn cosmos]

how much expirince do you have ?

[molten sky]

on linkedin specifically, just 4 or 5

[rapid merlin]

I was talking to my manager today, and said like I am going to look more at the pentesting field. They said like, ah maybe we can create that as a new service here

lol

[molten sky]

spread across idk how many domains tho, very all over the place from software to kernel eng to security etc

[rapid merlin]

2 years already. Since im 14 lol

time flies

[unborn cosmos]

dont forget your discored bro that you exchanged today some messages with

[clear jackal]

How can you legally work?

[unborn cosmos]

did not get it you are 16???

[rapid merlin]

yee

[rapid merlin]

Idk, its possible in my country

[molten sky]

i mean, i was helping around construction sites in the middle of the prairie at like 12 and 13

[rapid merlin]

Im currently SOC

[shut hawk]

I worked at 14 for a swimming job

[unborn cosmos]

you are a high value individum in this field

[rapid merlin]

wdym?

[clear jackal]

And that's illegal lol. Construction is considered hazardous work in the US.

[unborn cosmos]

if you are someday a hiring manager

[clear jackal]

Yeah, I did too but there were massive restrictions.

[molten sky]

in this industry? fuck no, lmao
my level is very over-saturated

[rapid merlin]

ahhh xd

[molten sky]

tbf that was in canada

[unborn cosmos]

Only expirence in years matters

[molten sky]

nope, not at all

depends on the company

[clear jackal]

I just looked it up, still illegal in Canada.

[unborn cosmos]

over here in germany it is like that in most companies and govermant jobs

[molten sky]

it's difficult to interview as a generalist a lot of times as well, since many companies want people who are specialized unless you're getting paid pennies on the dollar

when you're not specialized or siloed, companies are often going to defer to someone who is actually specialized in the thing they want

[shut hawk]

This was for an indoor pool with multiple other adult instructors so was pretty safe

[molten sky]

it's a short sighted way of doing things, but it's the way they're done

[unborn cosmos]

yes your right but here we dont even have people that are generaly educated (not everytime but this is considerd the standard today)

[molten sky]

not sure if it'd qualify as "construction" since you weren't actually doing the construction, same way that an office worker on a construction site isn't a construction worker
but either way, cash in hand in the middle of nowhere so 🤷‍♂️

got pulled off site a few times to beat out brush fires with a shovel

was a good time ngl

[clear jackal]

Yeah, I'm not saying it wasn't allowed. Just that unrestricted work for anyone under 18 is pretty uncommon in countries with established labor laws or are otherwise "first world."

[molten sky]

osha/ccohs be damned

[molten sky]

yeah over here it's a bit different

right up around nyc

[shut hawk]

Agreed

[molten sky]

a lot of the jobs that AREN'T saturated want 4 or 5 days onsite in nyc rather than true hybrid or remote, which isn't the most feasible for me at my new spot

[unborn cosmos]

This guy is 16 working since 2 years that is CRAZY

[rapid merlin]

I lied, 1 year and 10 months

[unborn cosmos]

same thing

[molten sky]

pretty uncommon in countries with established labor laws or are otherwise "first world."
lmfao
you must live in the wealthier areas

white picket fences everywhere

[glossy portal]

How did you end up getting it?

[clear jackal]

What do you do, if you don't mind me asking? I guess I'm more curious how everything works in, I think you said Germany, and how that works with legal documents. Do you have to get your parents to sign off?

[rapid merlin]

I knew one of the managers. (Didnt apply through him btw)

[clear jackal]

Nah, grew up in a rural farming community. It's just that the state took minors working very seriously.

[rapid merlin]

Nah my parents didnt had to sign. I had to get a Declaration of good conduct and sign myself.

But the Netherlands

[molten sky]

ngl i've also never seen a farm town where the kids weren't involved

[glossy portal]

Certs?

[rapid merlin]

Nope

Just knowledge i already had

And they wanted to give me the chance (im the cheapest employee for them)

[hardy mica]

AI trolling me

[molten sky]

but it's less about the State giving permission and more about "who cares what the State says" in these cases
if they cared what the state said, they wouldn't be handing them cash off the books 🤷‍♂️

[glossy portal]

This will likely help a lot in the long term, this is pretty good

[rapid merlin]

Yeah

[buoyant tree]

Cute cat

[molten sky]

it does, that's for sure

i assume @rapid merlin is customer facing as well?

[unborn cosmos]

hope ' ll find something similar

[hardy mica]

😦

[rapid merlin]

Yes

[blazing granite]

specially Wile E. Coyote 😉 😂

[unborn cosmos]

yappadapadu

[molten sky]

fuck having a mil draft, we need a customer service draft. everyone should work customer service for a few years, lol

[blazing granite]

different cartoon completly 😂

[unborn cosmos]

mip mip

[molten sky]

https://tenor.com/view/wil-e-coyote-falling-gif-12969005

[molten sky]

wrong animal but right cartoon

[glossy portal]

This guy doesn't have a sound effect

Mostly dynamites

and trying to kill the mip mip

[unborn cosmos]

[hardy mica]

poor Willy

[molten sky]

not a single person here has spelled his name right yet, lol

[hardy mica]

Willie?

[glossy portal]

Wile

[molten sky]

wile e coyote

[hardy mica]

better willy

[blazing granite]

Wile E. Coyote I edited my msg 😂

[unborn cosmos]

How is the name of mip mip

[molten sky]

that's just the roadrunner

(which is an actual bird irl)

[blazing granite]

the onomatopoeia was meep meep or beep beep

despends of the episode

[blazing granite]

it doesn't look like the cartoon 😂

[molten sky]

when the tail is raised it has some more resemblance

[unborn cosmos]

is someone of you allready married ?

[molten sky]

thankfully not myself lmao

i got other shit to worry about

[blazing granite]

Single, never married, no kids. I have enough problems in my life to keep adding 😂

[unborn cosmos]

true

[graceful thistle]

relationships can be a happy thing too ya know

[molten sky]

i barely have time to think, let alone involve someone else, lol

nothing to do with happiness --- literally don't have the bandwidth for it

[lyric escarp]

Guys i don't want to interrupt but is this discord also for newbies like me? I mean, is it possible to find help with some things? Or is this server more for people with experience

[unborn cosmos]

to be honest i just wanna have kids

[graceful thistle]

have them and raise them?

[molten sky]

~~ you aren't allowed to use discord until you have OSCE3 ~~ yea ofc you're welcome here

[unborn cosmos]

yes like it is so beutiful

[molten sky]

he uses discord. that's impossible.

[unborn cosmos]

look at my profile

[blazing granite]

certainly they can, but you have to look really hard not everybody is lucky and get it on the first try. I really don't have the strength I only had 3 major relationships in my life, after that it was a string of dates and very casual relationships.

[lyric escarp]

Okay thanks cause i would really need some help with literally everything, not now ofc , im just so bad at this stuff

[twin ridge]

Gave +1 Rep to @molten sky (current: #75 - 82)

[shut hawk]

of course 😄

[graceful thistle]

Im not saying you MUST be. Just providing a little balance in the 'fuck no' responses

[molten sky]

yup everyone's here to learn just the same

well most people are

[lyric escarp]

But tell me, is it hard to get good at this with 0 background in programming or cyber security?

[molten sky]

nobody (except myself) was born knowing everything

gotta start somewhere

[unborn cosmos]

dont you wanna raise some very good penetration testers? you can build for them the way since they wear little kids? as long as they want ofc

[bitter quiver]

Knowing everything would be the worst burden imaginable

No point hacking anymore, or playing a game, watching a movie, or going on a date.

[molten sky]

knowing things is lame, knowing people is how you get paid

[bitter quiver]

It would defeat life itself

The pursuit of the unknown is the thrill

[blazing granite]

depends on how much time you put into, how much passion you have and how bad want to be good 🙂

[molten sky]

don't burn yourself out tho

[blissful plume]

hello everyone

[bitter quiver]

Tons of success stories. But they all passionately enjoy it

[molten sky]

lmao

saw that pop up

[lyric escarp]

And the last question, is learning how to legally hack or anything involved in this is hard on TryHackMe without premium subscription?

[unborn cosmos]

100%

[molten sky]

most of the site is free tbh

[buoyant tree]

eh not until you have hacked into every major company in the world twice

[molten sky]

do the free stuff first and if you still enjoy it, throw a few bucks to thm and do the premium ones

[molten sky]

wait, you only needed to do it twice? shit, i got ripped off then

[blazing granite]

80% the site is free so start get the feel and then if you really like it, you can buy the sub, but it's not required to learn

[unborn cosmos]

for most certificates you need premium but if you just wanna learn than this site is perfect

[lyric escarp]

okay this is probably my last question, Where should i start? is there some path that i should follow? Some courses that are really important?

[molten sky]

#start-here

[unborn cosmos]

normaly the site suggests a path which is the best suitable for you

[lyric escarp]

yeah but i did the first 3 lessons i think and after that i needed premium to proceed with next ones

[molten sky]

nvm i thought #start-here had more info

[molten sky]

the site isn't the most obvious about it tbh. it's a business after all, so they kinda wanna encourage people to pay
if you go into the Search tab a lot more is visible

and you can filter free only

[blissful plume]

tommoro i will go to hard exam of cybersecirity and i dont understand anything about reverse engineering i want someone to help me to answer any qustion i send

[unborn cosmos]

just buy premium it realy is a good price for what you get

[molten sky]

hit up @graceful thistle or @sick lance they're normally avail

[unborn cosmos]

🤣

[lyric escarp]

yeah i guess but im not really able to spend $14 monthly on this, i know how it sounds but yeah im kinda broke

[graceful thistle]

we can't help you with this. You need to properly study your coursework and do the exam based on what you learned and know. Good luck, study hard.

[lyric escarp]

yeah so do you have any sugestions where should i start? Or just to click random free courses and learn with them

[unborn cosmos]

if you are a studnt its only 12.60

[molten sky]

if he can't afford 14 he can't afford 12.60 lol

[lyric escarp]

For real xD

[normal fable]

If you can't afford it, then just enjoy the thousands of hours of free content.

[midnight hazel]

GUYS

MY STREAK

IT ENDED

[lyric escarp]

Especially that i don't know if im going to like it or even understand it

[midnight hazel]

BRUHHHHH

WHAT DO I DO