general

[shut hawk]

@strange gazelle Latitudes are good

[shell nova]

frameworks are nice, but still have some issues with Linux apparently

[molten sky]

does the lil trackpoint work ootb?

[shell nova]

on Fedora it does

[molten sky]

fedora ftw

[shell nova]

pretty solid, yeah

[strange gazelle]

My requirements are good keyboard n screen. And like mid performance is fine

Don't strictly need any GPU

[molten sky]

if you get one with a gpu i recommend avoiding nvidia

unless you like russian roulette

[shell nova]

should be able to find a decent second hand lenovo

[strange gazelle]

I can wrestle nvidia into Linux that's fine

[shell nova]

AMD is probably better GPU-less

[strange gazelle]

Done it so many times atp it's second nature

[strange gazelle]

Oo good suggestion thnx

[shell nova]

integrated GPU will run pretty much any indie

I mean I can technically play BG3 on mine, though FPS will suffer at times

[buoyant tree]

15 fps?

My CPU managed to run helldivers 2 on 15-20 fps

[vital snow]

[boreal scarab]

@shell nova how was the Drinks with the boys? Have you also found a vulnerable version of Keycloak?

[fierce mulch]

anyone who can help me with a router ?

[shell nova]

15 to 50 depending on zone

[fierce mulch]

i have a ZTE wifi/router i forgot it's default gateway password and username, also the reset option is not working anymore and the company support is saying they can't help with it any way to get access of it ? although it serves no purpose so i was wondering if i can just make it a extender kind of thing.

[shell nova]

not yet, brain is fried 😉

[shell nova]

tbf defaults are probably documented in the manual

[buoyant tree]

nice

tailscale is cool

UDP Hole punching seems fun

[fierce mulch]

let me know if anything comes to mind I tried brute force my common passwords attacks by making a list didn't work

[fierce mulch]

but i changed it a long time ago after that I got a new connection and new wifi too so it was just a waste box now I wonder if i can use it somehow

[shell nova]

factory reset procedure should also be documented

[fierce mulch]

i tried to use the reset button but reset doesn't work and also i don't have any manual to see the default password even if it does reset

[shell nova]

online?

[buoyant tree]

eh for the reset button its probably stuck

just get your screws out

and then just manually press the button

[shell nova]

usually need to hold it for 30 seconds to a minute

[fierce mulch]

couldn't find it, tried to reach out to the company they just said " sorry we only deal with companies and can't give any info on default passwords"

[buoyant tree]

Hmm, always just had single click ones with tp link

[buoyant tree]

what's the model no

[shell nova]

for factory reset?

[buoyant tree]

yea

[shell nova]

that's dangerous

[buoyant tree]

eh u had to get a paperclip out to press the button

[fierce mulch]

tried didn't work tried to use a screw driver to manually connect the connections

[buoyant tree]

hmm

[fierce mulch]

that's why needed some more brilliant minds help kinda stuck on this thing over 3 weeks

[shell nova]

not much we can legally suggest tbh

Google may help

[fierce mulch]

i was wondering if it's possible to reprogram it but that's kinda hard too i guess as i don't know the hardware configuration and never programmed such a thing before

[shell nova]

probably not easily

and not without knowing the password

you'll need to access the firmware update features for that

[fierce mulch]

i mean what i was thinking was like just getting a firmware from their site and try to flash the memory/ storage chip somehow and reinstall everything

[buoyant tree]

should I stall on updating due to the windows bug which breaks VPN's

or just risk it

[fierce mulch]

it's kinda easy in theory but wayyy difficult practically

[buoyant tree]

probably a little too complex for a simple thing

[shell nova]

you won't be able to flash without the password

[blazing granite]

if you see which breaks in the sentence next to update, the answer is always not to update unless you're looking for trouble

[buoyant tree]

Heya @blazing granite , had a question for you regarding Greek mythology

[shell nova]

would be a gaping security hole otherwise

[buoyant tree]

probably

[buoyant tree]

Why was there SO much accidental blood murder

[blazing granite]

DM when you like 🙂

[fierce mulch]

that's a big issue

[blazing granite]

culture and time simple answer 😂

[buoyant tree]

Like I understand the intentional ones

But like accidental is like wayy too much to be a coincidence

[blazing granite]

https://tenor.com/view/the-cat-in-the-hat-ill-get-you-mike-myers-bloody-accident-annoyed-gif-21119686

😉

that's the whole point of Greek mythology everything is fate, even if it looks like an accident 🙂

[sand trench]

unfortunaly Zeus was horny

[shell nova]

that too

[prisma kiln]

It took years, months, days, hours, but I finally understood how the internet works

[molten sky]

it's all just tubes

[blazing granite]

@buoyant tree Greek mythology as figures as the Moirai AKA The Fates, those are 3 sister that manage all the events of the mankind and some times gods itself, nobody escape fate

[devout palm]

https://tenor.com/view/man-surfing-mouse-web-internet-gif-8280953

[sharp parrot]

Hi skids

[clever shard]

@mossy river

[shell nova]

¯_(ツ)_/¯

[mossy river]

Yes?

[sharp parrot]

Shhh skids

[clever shard]

"hi skids?

[shell nova]

They're just being silly

[clever shard]

i dont think so, having doxbin logo on his profile explains his attitude

[shell nova]

Least for now

[clever shard]

¯_(ツ)_/¯

[oak river]

Hydragyrum I didn't know you were part of the periodic table

I thought you were a pokemon

[sand trench]

nah the profile picture of hydragyrum is a zergling

[pastel verge]

hey little question , what is the best distro for cybserceurity ? if there's one

[molten sky]

ambiguous question, but like all things, it depends

[pastel verge]

because i use kali

and idk if i try like black arch or something else

[whole yew]

like all things linux, the best distro is the one that makes your job easier.

[sand trench]

if you want preinstalled tools:
kali or parrot os
if you want the industry standard:
kali
if you play a lot of hackthebox:
parrot
if you want a general daily driver:
basically anything that is not kali or parrot
if you wanna learn how to install tools:
basically any distro here too

[whole yew]

Sometimes that's fedora; sometimes, it's ubuntu or debian or, more rarely, arch or gentoo.

use case for a daily driver is very different than a sandbox or a security toolbox.

[pastel verge]

Oh ok in the industry it's kali

[whole yew]

Not necessarily.

[molten sky]

"What's the best car"
it depends

[whole yew]

Pentesting is one of the things I do for my role, and I use Ubuntu 24.04 as my base.

I standardize my tools with ansible, and build and install on a clean image for each engagement.

[sand trench]

kali is the hacking distro that has been around the longest and with the most documentation for blue and red teaming

[molten sky]

..blue?

[whole yew]

Kali is great for learning, and if your environment is willing to approve it.

For me and my environment, it's easier to bring in individual tools for Ubuntu than it is an entirely new distro.

[molten sky]

never seen kali used in a blue env but I suppose it can have a place there

[sand trench]

for shadow their daily driver is their hacking os

which currently is endeavour os

[whole yew]

kali has a 'purple' version that has a lot of blue team tools as well

[shut hawk]

albeit very new

[molten sky]

true. haven't messed with purple yet

[loud marlin]

today i had chance to drive electric forklift... and who ever thinked that is "cool" to make it electric is an idiot...

[sand trench]

noise less forklift???

[loud marlin]

and that also is crap... no one know where is forklift... can't hear it and ppl cant orientate them self, so to say. when you hear ormal forklift that is working at last you know you need pay atention

[sand trench]

yeah sounds like a safety hazzard ralex

[boreal scarab]

Everyone: "We must camouflage ourselves to hide from the enemy"

Me: Haha, Sherman go brrrrrr

[loud marlin]

in this case, for us, indeed. since we deal with chemicals there is quite strong need of atention if some drive forklift with chemicals. idea of having incident is no no

[loud marlin]

https://tenor.com/view/dotm-bumblebee-gif-18133956

[molten sky]

CoD camos be like

[sand trench]

making it make more sounds could work but eh

[loud marlin]

the 20ish ppl who use forklift in this area needed 3h to decide we will not replace old ones with normal engine 🙂

[sand trench]

also YAY hit monkey season 2 is releasing this summer

[fast inlet]

Want to access free online training from the creators of Burp Suite?
Get started with the Web Security Academy now to take your skills to the next level. 190 interactive labs etc.

did anyone do this?

"sign up with your email to get access"

[naive violet]

PortSwigger academy is very good, yeah

[fast inlet]

so i just need to sign up with my email/account and i can use it, basically?

[naive violet]

It's free if that's what you're asking

[fast inlet]

190 labs sounds like a lot of material also

[fast inlet]

yeah, that's gret then

great

[raw vigil]

I must be doing something wrong, I’m getting hit by the paywall trying to do the pre security path

[shut hawk]

Some of the rooms on the path are subscriber only, you're not doing anything wrong

[raw vigil]

ahh okok do i just skip them then?

[shut hawk]

Yep

[raw vigil]

tyty

[boreal scarab]

What could possibly go wrong?

[fast inlet]

checking it out now and they got a lot of stuff, just wish they had a dark mode lol

[loud marlin]

@boreal scarab @buoyant tree It works....

26 letters per wheel's. 5 wheels = 11881376 combination 🙂

[sand trench]

aw you only printed the smol version

[loud marlin]

for first yea. ik now what to pay more atention. need more slow on prints that include mechanism. needed some sanding to make it work smooth

[loud marlin]

also @grizzled crystal ...

[shut hawk]

What do you mean by that?

[shell nova]

o.O

[loud marlin]

@whole yew @mossy river

oh

[shell nova]

gonna second Jayy here 🙂

[loud marlin]

hydra from the shadow...

[whole yew]

would you care to elaborate on this?

[shell nova]

ninjas

[whole yew]

yeah? you want to maybe talk about what's bugging you, or are you going to do blackhat shit?

[loud marlin]

tell us more...

[whole yew]

You know better. Cool off.

[shell nova]

lets please stay out of the moderating bit 🙂

[grim sparrow]

:mute: ralexander87#0 has been muted.

[shell nova]

you do realize it's entirely up to you

[whole yew]

so you are doing blackhat stuff, and you know that it's illegal?

[grim sparrow]

:hammer: errghrterjjhrt#0 has been banned.

[mossy river]

Not entertaining people threatening community members

[shell nova]

eh, they were getting to the fun bit before we were gonna ban them

oh well

[upper wing]

what happened here 😄

[shell nova]

somebody stirring shit up, nothing to see here

[upper wing]

I feel like I missed something fun

[shell nova]

nah

just an idiot being an idiot

[rapid merlin]

was bout to say

[grizzled crystal]

Woahh sick!!

[loud marlin]

next one is 10 wheels one

[grizzled crystal]

Good luck!

[loud marlin]

how much you wish to make it for you. as we talk lasnight

5 is minnimum

[cosmic pendant]

Very cool

[cosmic pendant]

HI POKIE

[loud marlin]

thanks. kinda nice to have 🙂

[twin ridge]

Gave +1 Rep to @cosmic pendant (current: #37 - 200)

[cosmic pendant]

That looks like a statute I saw one time 😄

[loud marlin]

is that thing from movie. nice made. and ofc you can set own letter for each wheel

[near hawk]

Jammy dodger has to be the best shot

[loud marlin]

when i set printer for ABS will be from it that will be much stronger. at last if wish to destroy it. and will be nice to have that if you miss few times that thing will be destroyed inside

[shut hawk]

I'm literally having one rn

[near hawk]

Noice

Also had baby guiness, tequilla and a jager bomb

Next is the skittlebomb

[grizzled crystal]

Omg hi toaster!!

It's been awhile

How are you doing, busy?

[cosmic pendant]

oh my yes

[grizzled crystal]

I bet

[lean furnace]

hi i am trying to connect my kali linux on the tryhackme room. i already downloaded the access file, open a terminal in the download dir and established the connection with my vpn, but when i tried to cconnectt to the room, the password wont work

[loud marlin]

as much i wish to make this.... not sure how stupid it will be, but ain't smart ❤️
https://www.printables.com/model/63456-puzzle-box

[lean furnace]

i used ssh tryhackme@room ipthen it prompt me for password and it says permission denied try again

[loud marlin]

not all room/ctf can use ssh or so. if need more info post in #room-help

[lean furnace]

oh okhow do i know which works and which doesnt work?

[loud marlin]

post room link in #room-help and what you do and so, and some will jump in

[wooden totem]

Ummm guys

I turned on my pc today, and this is the screen I got

[loud marlin]

try continue

[wooden totem]

I didn't do anything differently

[loud marlin]

looks some boot issue

[buoyant tree]

aye

[wooden totem]

Ive never even seen this screen before

[loud marlin]

you dual boot or smth ?

[mossy river]

Any TypeScript developers that want to join a project, drop me a DM 🙂

[wooden totem]

I literally didnt do anything different, just pressed the turn on button for pc

[loud marlin]

it can happen for some unknown reason... so no dual boot? you have only one OS as main ?

[wooden totem]

Yea win10

[loud marlin]

yea... might be some update thing that mess it up... try just press enter and prob will be ok

[wooden totem]

It was indeed ok

[loud marlin]

might be smart to make backup... just in case 🙂

[wooden totem]

My last backup is 4 years ago

[loud marlin]

=/

I don't need backup, and other lies that i tell my self...

[wooden totem]

Im pretty sure im good

[fast inlet]

u could also check event viewer to see if some hardware is failing

just in case

otherwise yolo

[wooden totem]

Everything I have is cloud based, no important files on my pc

[loud marlin]

you know the best. i once totaly forgot my LUKS password... if i didnt backup it will be rly bad for me

[shut hawk]

Oh wait you meant a drink

[near hawk]

Yeaa it’s a shot 😂

[spare echo]

how i can leave a workspace i was using simple mail alias it joined me in automatically ? when trying to leave show buying plan etc options

[shut hawk]

Lmfaooo I was talking about the biscuits 😂😂

[raw vigil]

how do i link my epic levle

[near hawk]

Ohh, they do actual shots as them

[sharp citrus]

@raw vigil

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 3, 2024, 11:12 PM

[loud marlin]

https://tenor.com/view/goose-honk-inhale-inhales-untitled-gif-16237480

[raw vigil]

ty!

lets goo

[wooden totem]

it seems like there was a memory leak

on startup

[worn thorn]

https://tenor.com/view/honkboi-gif-27609879

[loud marlin]

https://tenor.com/view/missile-target-shoot-boom-minecraft-gif-13863142

[blazing granite]

good evening people!!!

[loud marlin]

ello gnu

[blazing granite]

I completed the transaction

How are you ralex

[loud marlin]

great... i finish my puzzle box print

#general message

[blazing granite]

yes, the davince code one 🙂 I remember the other day we were talking about that 🙂

[loud marlin]

yea... it's done. ill make one with 10 rings and i tink ill scale it up 20% cca

[earnest bolt]

guys

i need a little help

[blazing granite]

I'm puting the last finishing touches on my box, I've been almost the whole day working on in. I moved from Kubuntu to Fedora. Actually I come back to Fedora, because I used Fedora in the past

[earnest bolt]

ive nevr coded before and i wanna write a macro to click and hold certain keys and interchange between the keys on a timer

[loud marlin]

i also need to install 24.04

[earnest bolt]

im also on a mac os

any advise?

[loud marlin]

#programming might be place

[earnest bolt]

dead channel 😭

[loud marlin]

patient... some will jump in in time...

[blazing granite]

got tired of the effing snaps 😂

[loud marlin]

i use flatpak mostly

[radiant oasis]

https://youtu.be/sjO2z14mcDY?si=dC-NVCO0-ZRdMlzd

[blazing granite]

Before I move to Fedora I updated to kubuntu 24.04 I would recommend you to wait a bit, it's still a bit green, if you don't have a reason like hardware issue that you would resolve with the update I'd hold the update for a while

[loud marlin]

im on ubuntu budgie. rly like it and is nice look =). uing it for years

[blazing granite]

My personal opinion I'd wait

22.04 has a few year left

[loud marlin]

for sure yes

[blazing granite]

24.04 looks more a beta than a lts that's why I would wait

like I said before if you don't have any hardware pressing issues

[boreal scarab]

mindlessly grinding War Thunder

[loud marlin]

is tank printed ?

[molten sky]

|| fedora > ||

[boreal scarab]

Been printed, hasn't been glued

[sand trench]

bogos binted???

meep moops shadows is now going to the realm of sleep sloop to the beep boops for the meepity moops moopity meeps

[normal fable]

I made it through surgery. 😁

[naive dock]

congrats

[boreal scarab]

Seems ok... 🤣

[loud marlin]

of?

[normal fable]

Plate and screws in my wrist

[loud marlin]

i see no issue

[blazing granite]

at least didn't ask for your car and house key and security number 😉 😂

[loud marlin]

oh... sounds bad...

[normal fable]

Hopefully it'll be fine in a few weeks.

[loud marlin]

titanium plate and so?

[normal fable]

I'm sure some metal of that sort. Maybe lead. 🤣

[loud marlin]

hehe. prob titanium. god damn great metal...

[normal fable]

Airports will be fun from now on..

[loud marlin]

it will be ok...

[normal fable]

Very difficult to weld though..

[loud marlin]

diffucult to work on in general. main metal for space craft things

can absorb lot's of heat without loosing integrity. great surface hardness

on side of lead... if you have tungsten will be nice 🙂

[normal fable]

Tungsten carbide so I can smash steel. 🤣

[loud marlin]

yea 🙂

quite expensive smasher 🙂

[blazing granite]

https://tenor.com/view/walking-by-adam-smasher-cyberpunk2077-walking-past-running-past-you-gif-26926773

[normal fable]

I had to pay $1300 out of pocket too.. lol

[loud marlin]

jesus christ...

[normal fable]

Broken bones are expensive...

In the US...

[loud marlin]

quite yes

[sharp tendon]

anyone here make neon signs

[loud marlin]

this might not be best place to ask for that kind of things 🙂

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[wooden totem]

There was a loud pop from my laptop, I think this thing is gonna die soon

[loud marlin]

how old it is ?

[wooden totem]

about 4 years

[loud marlin]

might open it and check

[wooden totem]

5 tons of dust;

[loud marlin]

2 dead rat's

[molten sky]

loud pop could be anything from a blown cap to a roach in the psu to your imagination

[summer wraith]

anyone experienced the same issue before? not being able to subscribe back using the same card I utilize previously?

THM support havent replied to me and my certification is fast approaching last week this month 😦

need to practice asap

[wooden totem]

is there a possibility that it was thermal expansion cus the temps were at 90C

never happened before tho

[molten sky]

assuming you mean your cpu temp, in which case 90c is well within tolerances for most modern ones

thermal expansion is a thing that exists, but it's not gonna cause any popping like a pan in the oven

well, maybe unless you've got some aliexpress special for your rad

[cosmic pendant]

other things could happen because of it

could be a short, because things are closer than they should be

90C is hot too, but that's just about and little below the failure point of most things

(don't recommendit i though, that sounds like something I would do ) 😄

[wooden totem]

90C is max for this laptop, it slows down if it reaches those temps

[molten sky]

90c isn't concerning in itself

unless something else is wrong, it should throttle itself before causing any damage, as betta says (although many chips can throttle in the 95-110 range)

[cosmic pendant]

*depending what it is

You should never rely on thermal throttling a method protection, it's a last ditch thing

That's like letting you car ride agasint' the guardrail

[molten sky]

depending on what it is, 50c might be too hot. could go "it depends" all day, but that's the norm

[cosmic pendant]

Huge difference between 50C and 90C don't you think?

[molten sky]

that was far from my point there

[wooden totem]

I try to keep it around 80, sometimes I forget to close everything when starting a game though so it reaches 90 for some time

[cosmic pendant]

Well it was exactly mine

[molten sky]

okay running at 80-90 nonstop is a bit hard on it tho

[cosmic pendant]

Hey ChatGPT, show me I'm right, OKay ``` 50°C (122°F): Devices are likely to function normally, assuming they are designed for consumer or industrial use. However, certain components might still have a higher-than-average failure rate due to heat.

90°C (194°F): This temperature is extremely high for most electronics, with only specialized industrial or military-grade devices being rated for such environments. For consumer electronics, prolonged exposure to this temperature can cause significant failure rates due to accelerated aging of components and potential thermal expansion damage.```

[wooden totem]

what 8gb of ram does to a mf

[molten sky]

i don't think i could function with only 8gb nowadays

[cosmic pendant]

But anyway, don't rely on thermal throttling. Laptops, often need an external cooler which is ironic.

"get a smaller form factor", then you need this cooling block fan setup....

[molten sky]

well, yeah, thermal throttling is to protect against damage, not to actively cool

glares at mac

[cosmic pendant]

Fix the underlying condition, not the symptom 😄

[wooden totem]

I have extra fans on max under the laptop at all times

[cosmic pendant]

I knew I needed one, I didn't order it, I killed my laptop

I've killed alot of devices......

[molten sky]

honestly laptops in general are often pretty damn poor in the temps department

[wooden totem]

cramp spaces get hot faster

[molten sky]

manufacturers value form factor over longevity or performance

[wooden totem]

I have around 60C when not in any game

[cosmic pendant]

We live in a throw it away society, companies aren't responsible, they are greedy and we pay the price, figuratively and literally.

Oh it failed, buy another one.

Did you see the samsung video the repairmen cutting the screen? trying to void the warranty?

[molten sky]

honestly i don't blame samsung itself for that one, that screams asshole employee tryna go home early and not actually do their job at your expense

( samsung has done other not so great things tho, they aren't innocent )

[cosmic pendant]

oh, yeah.... I think it was abit more than that, considering the amount of effort put forth in trying to hide that video

[molten sky]

oh yeah it was handled horribly

[wooden totem]

reddit for the win

[molten sky]

samsung probably streisand tf outa that

[cosmic pendant]

ATT is finally sending out data breach letters to a breach they were notified 5 times over the past 3.5 years

Time to start putting a-holes in jail

[molten sky]

saw a post earlier about a guy who got his breach letter from att and it wasn't even sealed, which was pretty humorous

[boreal scarab]

https://tenor.com/view/lizzo-its-about-damn-time-its-about-time-about-time-time-gif-26332372

[cosmic pendant]

Beep Beep!

[boreal scarab]

Meep meep!

[loud marlin]

i need better table for printers...

[boreal scarab]

(THIS IS FOR WAR THUNDER ISREAL TREE, NOT THE WAR!!!!)

I swear, I hate this generation with how they speak.

[cosmic pendant]

@naive violet All the Cool UK folks, what do you think of https://www.gov.uk/government/publications/the-uk-product-security-and-telecommunications-infrastructure-product-security-regime ?

is it like epic, or more headache?

Easier link: https://www.legislation.gov.uk/ukpga/2022/46/contents/enacted

[wooden totem]

It's become a joke, nobody actually speaks like this

[willow jungle]

Hi guys, I need help to do Application security testing on .exe file does anyone know any automated tool to scan the .exe file

[loud marlin]

scan for what ?

you need to verify you self on thm discord

[gritty fern]

Whats up every one

Just got back from a track meet

The mile

ok?

[gritty fern]

Linuxtus

[loud marlin]

https://tenor.com/view/rabbit-eating-gif-23238008

[rapid merlin]

How hard would it be to start your own cyber security company

[loud marlin]

if you are in field and know the market... prob not extra hard

[wooden totem]

If you are rich, not that hard

[molten sky]

this HAS to break some rule, right? we can't have this being posted here

[outer rivet]

https://tenor.com/view/bunny-bunny-rabbit-eating-gif-13641972

[rapid merlin]

I'd imagine it's a regulated business or something but maybe any joe with an LCC can perform penetration tests as long as the business is dumb enough to sign a contract

[whole yew]

i'd be very careful about that advice. big difference between "a contract" and the appropriate protections a pentester needs

cybersecurity law is very specialist, would not engage a business without a good retainer

[rapid merlin]

Not really handing out advice

But what youre basically saying is lawyer up

[desert shuttle]

Oh boy

[whole yew]

yep

security work involves working with liability and risk, it's not a thing to approach without a solid legal plan

[wooden totem]

a small oopsie is a big oopsie

[worthy zodiac]

hello can somebody help me with hydra to solve a ctf idk why it is not working properly?

[boreal scarab]

I don't understand War Thunder sometimes... why is the M4A1 at 3.3 but M4 is at 3.7? A1 has a TINY bit more hull armor, same armament, just different vertical guidance, but I don't think calling it 3.7 is smart...

[scenic dust]

Hi

[mighty token]

Good Morninig

[molten sky]

my god, imagine doing a proper full on pentest without those shields in place

no insurance, no corporate veil, nothin

[sick lance]

Which ctf?

[worthy zodiac]

portswigger lab sorry

[molten sky]

heh. i thought you meant the rifle. ""why tf does the m4 have armor???""

[leaden flicker]

guys, does anyone know good secure code review tools for java programming language ?

[shell nova]

Sonarqube

Probably a few sasts on the market too

[whole yew]

spotbugs not a thing anymore?

[shell nova]

Might be, integrates with sonar though

Never really got it working on enterprise codebases

[hollow flower]

can some one help me out whit this task im having troble whit it it from (Try Hack Me Simple CTF) .....................sudo python inject -u htpp://10.10.175.201/inject --crack -w /usr/share/seclists/Passwords/Leaked-Databases/rockyou.txt
[sudo] password for kali:
File "/home/kali/inject", line 26
print "[+] Specify an url target"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print(...)?

[sick lance]

#room-help please

[hollow flower]

ok thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2213)

[queen yacht]

thanks

[lone thistle]

yeah I saw 😦 knew it was coming but booooo

[lone thistle]

this trend of games on steam just becoming a launcher to a launcher sucks 😦

the whole point of steam was to ... stop needing to have like launchers

[drowsy estuary]

oh my god!

You're cmnatic!!

I've done so many of your rooms

they're really good!

[lone thistle]

hey! thank you:)

[drowsy estuary]

wowww. I'm like starstruck or something

[lone thistle]

haha don't be. What was your favourite?

[drowsy estuary]

I think I did like 300 Active Directory ones. They're kind of a blur. I need to get back into doing rooms again. I had other IRL stuff to do

The AD stuff is so hard to remember

[lone thistle]

😄 yeah I understand

[drowsy estuary]

Is there any way to remember it easier?

I guess just practice

[lone thistle]

Practice and notes. Can’t remember everything. I find creating my own “cheat sheets” for topics like payloads, indicators of vulnerability, next steps, etc to be pretty useful as a quick reference guide

[drowsy estuary]

thanks! good tips! I did make some cheat sheets of them

so cool to meet you! Are you trying to play Warcraft right now?

[lone thistle]

Yeah likewise:)

And meh just sitting around in dungeon finder, so no, least not at the moment 😁

[drowsy estuary]

awesome! well my husband is pestering me to make supper haha. Have a good one!!!

[lone thistle]

ahh. Yeah you too! Nice to meet you

[brisk tree]

At a gaming expo and tried a game cube for the first town

Time

[sick lance]

Gamecubes were amazing for their time.

What game did you play?

OG RE4?

[deft cloak]

Happy May the Forth Be With You ❤️

[sick lance]

More excited for revenge of the fifth to be honest.

[shell nova]

Oh is that today?

[deft cloak]

More excited for Return of the Sixth XD

[shell nova]

Someone needs to tell me that downloading 20 GB over a mobile connection is a bad idea

[deft cloak]

Yes and I waited for 12 13 hours for this to wish my American friends 🙂

[shell nova]

Never was into star wars tbh

[deft cloak]

https://tenor.com/view/star-wars-anakin-skywalker-if-youre-not-with-me-then-youre-my-enemy-hayden-christensen-gif-18489728

[hot cairn]

Nah

20gb is nothing

[shell nova]

Yeah but its slooooooow

[graceful thistle]

no, today is May 4 😄

its already taken, sorry

[sick lance]

Nah, og 3 yeah,.anything after that is a steep decline.

[deft cloak]

Star Wars = God George Lucas made && != Disney shit

[hot cairn]

Fair

[shell nova]

Devil May 4?

[graceful thistle]

Its been dmc week all week!

[wraith fjord]

Hello

[gray sonnet]

https://tenor.com/view/baby-yoda-baby-yoda-happy-laughing-smile-happy-gif-17096396

Morning everyone

[tropic glade]

hi guys i am trying to simulate a buffer overflow but i have problems with gdb can someone help will explain the problem in dms

[sick lance]

Is this for TryHackMe?

[tropic glade]

no, trying to grasp the basics just thought people here will know

[sick lance]

They will, be it seems a little sus you just want to discuss it on Dm's.

Like, THM can teach you the basics.

[tropic glade]

well nothing to worry about, i am asking for dms because i dont want to flood with messages this place

[deft cloak]

https://tenor.com/view/star-wars-darth-vader-dance-party-work-it-gif-14063175

[gray sonnet]

https://tryhackme.com/r/room/bufferoverflowprep

[tropic glade]

it is about putting break points at a specific address and after running it says i it cant access the specific a address

[shell nova]

Given the rest of the content here 😉

[shell nova]

ASLR issues?

[tropic glade]

i did set randomize_va_space to 0

[tropic glade]

is this for premium

[gray sonnet]

nope

it's completely free

[shell nova]

Ok

[brisk tree]

Mario kart

[sick lance]

Double dash?

[polar wraith]

Is the SNOW/OFF badge still awarded?

Or was it only awarded to those who completed all side quests in the given time frame

[sick lance]

IIRC it's still going.

[polar wraith]

ah okay

[sick lance]

Let me check.

You can still get the The Return of the Yeti badge.

So I assume you can still get the snow/off

[chrome plover]

How do I find my KoH discord

[sick lance]

Wat?

[chrome plover]

I was joining KoH room, and there was a join to the team discord button, it`s vanished now and instead there is an input for the flag

[sick lance]

Iirc it would take you to this Discord

[chrome plover]

Oh, I was expecting a private group channel

[hushed adder]

hey

Is there anyone know How I can upload a gif to my try hack me profile picture.

[sick lance]

They disabled that feature 😉

Or thm teaches you. 😉

[hushed adder]

dammit

[hushed adder]

how

[sick lance]

Have a look around. You've probably done the room without realising.

[hushed adder]

can I put a gif in my profile photo if I make a room?

[sick lance]

No.

[hushed adder]

which room I need to complate for gif

[shut hawk]

Maybe have a look at the upload vulns room

[hushed adder]

damnnnnnn

thanksssss

[hushed adder]

thanks for heads up. I just remembered

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 512)

[hushed adder]

And thanks for the tip

[timid prism]

a very bad idea to just wake up and start listing what u didnt do within 1 sec

[barren cedar]

i somehow can't get the openvpn work for THM on Win10 while the same ovpn file works fine on Linux

it's just timing out, i'm about to take a packet capture but wondered if somebody has a quick fix 🙂

[umbral bay]

Gouda morning 🌅

[sick lance]

You need to use the Communities OpenVPN client, need anymore help please use #site-support

[barren cedar]

oh my gosh you are so right i guess

it works. thanks a ton.

[grim sparrow]

Done!

[sick lance]

https://tenor.com/view/hades-hercules-blow-finger-gun-gif-7206232

Fastest banspam in the West.

[charred vine]

is the Badge Freeze I get from 7 streak a 1 time use? [aka 1 day forgiven and thats it]?

[sick lance]

Yeah.

But you get more with 45 day, 90 day etc.

[charred vine]

can I buy some somehow?

[sick lance]

And there is the chance to win them at events.

No. 🙂

However if you have a reason to miss the streak (ie internet done down,) you can E-mail support who might reset it back (providing you can remember the number and not just guess like 140-something)

[charred vine]

ummm

would it be too much for me to ask for few streaks through the email? I will pay for em as well.
I'm gonna be gone 1 day a week due to chemotherapy and I dont want to lose the streak 😦

I guess I will try, no harm in doing so

[sick lance]

In this cause, I'd suggest contacting support after you lose it, they can re-instate it for you 🙂

[charred vine]

Thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2215)

[sick lance]

Sorry I can't do more, I'm a community moderator, I'm not employed by TryHackMe.

I wish you well, and a speedy recovery.

[sharp citrus]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 4, 2024, 11:40 AM

[sick lance]

Is the E-mail.

[charred vine]

You are good, your input was helpful

[polar wraith]

100 rooms i did it

on my way to take down 0day

also just me or is there no flag for ireland

[umbral bay]

Hello, it is a known issue. Thank you for reporting. 🙂

[twin ridge]

Gave +1 Rep to @polar wraith (current: #318 - 15)

[polar wraith]

ah okay

[rapid merlin]

hi

can anyone help me

can anyone hack my Gmail acount

[sick lance]

Hello, this would be illegal.

We don't allow unethical and illegal topics in this server.

[rapid merlin]

||asshole||

[sick lance]

Excuse me?

[rapid merlin]

you heard me

[sick lance]

Please allow me to deal with this.

[sick lance]

I didn't, you didn't speak, I read it though.

[rapid merlin]

STFU

[grim sparrow]

:hammer: jasonx1526#0 has been banned.

[shut hawk]

Oh dear

[sick lance]

Don't worry about it. I know where you've coming from, but in times like this it's best to leave it to mods, so it's not escalated further, and we just have to take in face value that the account in question was theirs to begin with. (which I doubt).

[wheat cove]

Hello everyone

[sick lance]

Hiya

[hot cairn]

@shut hawk 👁️

[shut hawk]

HI 👋

Did you see that MEE6 AI rubbish?

[hot cairn]

How goes it

[hot cairn]

Unfortunately

They keep adding in features you can’t opt out of

[shut hawk]

Try not to make the bot worse challenge (impossible)

[shut hawk]

Not bad, I've got a couple weeks till my final exams and then I'm free from education! (for now)

[hot cairn]

Better then the NFT grift they did

[shut hawk]

Hoping to finish the other exams for my PPL and get my driving license too

[hot cairn]

Nice!

[shut hawk]

And possibly a CVE 👀

What about you?

[hot cairn]

Get ur PPL first, it’s a flex

[shut hawk]

🫡

[hot cairn]

Decent, SO is flying for the first time today so helping her through that

[shut hawk]

I practiced on the car for a bit as I have my provisional and I kept forgetting that the pedals do something fairly important and aren't rudder controls

[shut hawk]

Ahh, wish it goes well - regional flight or local?

[hot cairn]

Int’l

[shut hawk]

Wow, that must be scary for your first time

[hot cairn]

I mean idk if US -> Canada is international proper but

Transborder

[shut hawk]

Well, still a fair distance

[hot cairn]

Add in a extra spicy 1h connection in Denver and it’s fun.

[shut hawk]

A connection on your first go? 😭

[hot cairn]

There is no direct

[shut hawk]

I've only ever done one connection and hated it

That sucks

[hot cairn]

I’ve done the route too many times at the very least

[shut hawk]

Yeah you always seem to be doing that lmao

probably able to do it in your sleep

[hot cairn]

Honestly, with how tired I’ve been before I’d say I have 😂

Went to sleep as soon as I sat down in my seat many a time

[shut hawk]

Do you know the crew on first name basis as well ahaha

Sometimes when I go to Slovakia because I do that often in the holidays, it'll be the exact same crew

[hot cairn]

I used to!

[shut hawk]

Oh they changed? :(

[hot cairn]

Back before I moved

Cause it was a small airport with a smaller set of crew

Now that I fly mainline air Canada, it’s always new

Lounge usually the same folk though

[shut hawk]

ah fair enough

[hot cairn]

At the old airport they all knew me

Cause I was doing weird routes

But bigger airport you loose that

[shut hawk]

must be a lot busier?

[hot cairn]

Def

Not having to connect every flight is nice though

Especially bc during covid there was like 2 flights a day

Early am, late evening

The layovers where long

[shut hawk]

did you fly often during covid?

[hot cairn]

Most of my flying was tbh

I’ve settled down now mostly

I don’t enjoy it as much as I used to

No place like home in the end

[shut hawk]

true that

good to relax

[hot cairn]

I should sleep soon lol

[shut hawk]

yess, well hf on your travels! and hope your SO doesn't worry to much

[crude stump]

[worn thorn]

little bit of looting.

[steel aspen]

Tried to do a few challenge rooms but they were too easy. Now I'm into a straight ftp one and I've no idea how to get around (not asking for help cos I'm going to look into it) but I love the challenges on THM. Makes the learning side more entertaining to be able to use what you learn in a close enough to real world scenario

[hardy mica]

go for Osiris one. Use your box and not the attackbox one

[steel aspen]

Ftp and ssh

I always use my own anyway

What difficulty is that lol

[hardy mica]

i was joking , its insane difficulty. Still stuck in it after 2 days

[steel aspen]

Oh fun lol

No write ups lol

What's it about? What do you have to do for it?

[hardy mica]

its difficult even explain it xD

[steel aspen]

Ah yeah lol

3 flags hmm

[sick lance]

Is osires the fiest box of 3?

[near hawk]

Last of the 4

Ra Ra2 set and osiris

[crude stump]

blackout mind if i ask what you do at thm

[hardy mica]

the last , and the most difficult one

and tbh it gives some problems if you run it on attackbox

[near hawk]

Work in the suport team

[crude stump]

oh fun

i couldnt handle it tbh

[mossy river]

Straight up forgot to scan my items at the checkout and started bagging them lol

Mind was elsewhere

[raw spindle]

any release of R1 rabbit ai?

[apk]

[polar wraith]

i found the 3 millionth user https://tryhackme.com/p/sushandahal10101

[shut hawk]

how do you know? 👀

[hardy mica]

[near hawk]

Done that a few times

[mossy river]

I don’t think it’s possible to know lol

[naive violet]

Hey, that's new to me
Congratulations!

[near hawk]

Thank you 😄

[bold dawn]

I'm the 3 millionth user actually

[polar wraith]

badge id

[boreal scarab]

https://tenor.com/view/pusheen-animated-pusheen-bread-gif-13262229634868436649

[polar wraith]

i replaced mine with 3000000 and it worked

[pallid lotus]

There are a few APIs that return it. The badge is one, yeah

Did discuss the numerical ID thing with Skidy a few years ago but there's no impact to it 🤷‍♂️

[mossy river]

Weird I thought it would be offset by deleted accounts

[gray sonnet]

Morning

[shut hawk]

@pallid lotus Know how to export trilium notes with the CSS being included? Being driving me up a wall for the past couple hours trying to export it - can't believe it's not an included feature

[boreal scarab]

From ChatGPT:

``Exporting Trilium Notes with CSS intact can be a bit tricky due to the way Trilium handles its data. Trilium Notes primarily uses Markdown with some HTML, and while you can export your notes, the CSS styles won't be included by default.

One way to include CSS when exporting your notes from Trilium is to manually copy the CSS styles and embed them into the exported HTML file. Here's a general guide on how you can do this:

Export Your Notes: In Trilium, export your notes as HTML. You can do this by selecting the notes you want to export, then go to Export > Export selected notes as HTML.
Retrieve CSS Styles: Open the Trilium Notes application directory on your computer. Navigate to the resources folder. In this folder, you'll find a file named styles.css. This file contains the CSS styles used by Trilium.
Copy CSS Styles: Open the styles.css file and copy all the CSS styles from it.
Embed CSS Styles: Open the exported HTML file in a text editor. Look for the <head> section within the HTML file. Paste the CSS styles you copied from the styles.css file within <style> tags in the <head> section.
Save Changes: Save the changes you made to the HTML file.
By following these steps, you should have your Trilium Notes exported with the CSS styles included. Keep in mind that if you're exporting a large number of notes, you'll need to repeat this process for each exported HTML file.

Remember to test the exported HTML file to ensure that the CSS styles are applied correctly and that the notes are displayed as expected.``

Sorry for wall of text lol

[pallid lotus]

Afaik it doesn't decrement when accounts are deleted, but not sure I've checked that.

i.e., the 3,000,000th user will be the 3,000,000th sign up

Not something I've looked into for several years

[pallid lotus]

Uhhhhh. Haven't tried that

[shut hawk]

It has the right idea but wrong execution, there's no resource folder with a singular style.css file. It references a whole different bunch of style sheets. I'd have to program something to export all the <links> to style sheets from inspect element and then put them into the HTML which I've exported. I really really wanted to avoid doing this because it's a lot of effort but it seems its the only way.

I installed a chrome extension SnipCSS that did this for me, albiet took for ages and combined it into one file to use. Which did work. I just surley thought there would be an easier way

But thanks for asking for me anyway

Pain in the arse

[boreal scarab]

No problem!

[timid prism]

sleep

[shut hawk]

I will just have to stick with this without much style

[sick lance]

ChatGPT 🤢🤮

[gray sonnet]

1 more exam left boii

[gray sonnet]

I love complex numbers

[shut hawk]

yeah they're nice

not bad compared to...other topics

[gray sonnet]

@timid prism guess what %ile I got in my second attempt?

[gray sonnet]

exactly

[shut hawk]

Oh and it also doesn't include any of the JS as well, so had to manually include the katex scripts and then add a polyfill because wkhtmltopdf apparently is to old for it

[loud marlin]

dear lord... windows sux

[devout palm]

Any tips to write a professional pentest report?

[sick lance]

Don't paste a wall of text and then a wall of images without references.

[shut hawk]

@naive violet

would know

[sick lance]

@pallid lotus too

Sure they've got an example in Wreath

[shut hawk]

May the 4th be with you everyone

[gray sonnet]

https://tenor.com/view/may-the-force-be-with-you-star-wars-film-the-force-awakens-may-the-fourth-be-with-you-gif-16713979

[pallid lotus]

Does your company not have a branded template?

[devout palm]

It's actually for an internship. They want me to write a pentest report for the machine i have solved on their platform

[mossy river]

We don’t help with internships here

Same goes with schoolwork/ employee assignments

[naive violet]

https://github.com/juliocesarfort/public-pentesting-reports
I like Wreath and Hip Flask as well from Muiri

[devout palm]

No like, it is for an internship application

I'm not an intern yet

[mossy river]

Purpose of the application is to test whether or not you are a good applicant for the role

[devout palm]

True but tips and tricks are cheating?

[devout palm]

Thanks

[mossy river]

It’s just a blanket ban because we can’t assess every internship/ schoolwork/ employee assignment for rules on what you can and can’t do

[devout palm]

I see

I'm just worried about my first report

[warped crane]

Good evening beautiful people

[normal fable]

Do your best Heap. I'm sure you'll do fine. Good luck!

[warped crane]

So i was learning some of linux fundmentals and i wanted to ask about something

[devout palm]

Thanks!

[warped crane]

To create a file i can use the echo command for example echo password123 > password list

And >> to not over write it

But what if I want to create a whole list of 1000 words

Ofc I can't be writing the entire 1k words

Is there some way to make it automatically generates the 1k words

For example password1
Till password1000

[shut hawk]

You would utilise a for loop

[warped crane]

Echo password1 to password1000 > passwordlist

[normal fable]

Learn more Linux. It's possible. 😉

[warped crane]

I am that's why i am asking 🤣

[warped crane]

What do you mean?

[shut hawk]

I can't remember bash syntax of the top of my head, but something like

for num in 1...1000 {
    echo password+$num >> passwordlist
}

[warped crane]

Oh so like mixing 2 commands?

[devout palm]

seq 1 1000 | awk '{print "password" $0}' > wordlist.txt

[warped crane]

Dope but i didn't understand anything 😂😂 now that's advanced

[normal fable]

There's probably 1000 ways to do it. Lol

[warped crane]

Copying it for learning

[sand trench]

t minus 3 days

[shut hawk]

Yeah there's tons of ways to do it

You'll learn some as you progress through more rooms

[naive violet]

You doing this for work?

Hopefully your colleagues will help

[warped crane]

Thx guys

[buoyant tree]

seq prints 1 to 1000 then awk formats it then its written to wordlist?

[devout palm]

Nope. I'm a student and i applied for a volunteer internship

[sick lance]

I can't wait for my pentest report mark to come back.

Would like to see how I've done.

[shut hawk]

For uni or something else?

[sick lance]

Uni, yeah

[shut hawk]

O nice

[devout palm]

The process is like
Step 1: QUIZ I needed to do 75% score
Step 2: Write a blog about a certain topic
Step 3: Solve the given machine and write a pentest report
Step 4: Interview

[rapid verge]

Out of curiousity, when you guys are learning and doing rooms, do you guys take notes on paper or do you prefer a note taking app?

[sick lance]

App.

[near hawk]

Obsidian

[sick lance]

I'll rarely have notebook with me,.but I mostly have my laptop 24/7

[rapid verge]

Oh neat, I had always used stuff like notepad or just paper but that wasn't getting very far in the long term honestly

[normal fable]

Trilium is good too for notes.

[near hawk]

You would most likely struggle with paper unless there just very small notes

[pallid lotus]

Also has the added advantage of not allowing AV to yeet your maldev notes into the nearest black hole

[normal fable]

Can't screenshot on paper. 🤣

[pallid lotus]

Isn't that right @boreal wing

[rapid verge]

takes notes on taking notes

[pallid lotus]

If you think that's bad I have a fricken' blog post on taking notes

[normal fable]

Plenty of info and opinions on how to take notes. Whatever app you use, as long as you use it, it's the right app.

[shut hawk]

Apparently not for exporting them though

[near hawk]

Yep

[pallid lotus]

Put it this way. I'll take Trilium export over Cherry tree export any day

[devout palm]

I do use my own

[normal fable]

Linky plz?

[pallid lotus]

Cue manually copying 600 notes into Trilium

[devout palm]

Wait

What

Nooo

[shut hawk]

Never used cherry tree, looked to old for me lol

[near hawk]

https://muirlandoracle.co.uk/2020/02/23/note-taking-and-write-ups/

[pallid lotus]

Goddamn you found that fast lmfao

[normal fable]

Ty!

[pallid lotus]

Caveat: that is a very old post now

I can't remember enough of it to tell you how much my methodology has changed since then

Really should start blogging again

[shut hawk]

Flameshot
Flameshot is, in my opinion, the best screenshot software around.
💯

[near hawk]

I just typed muriland notes and first link 😄

[shut hawk]

I'm about to release another blog post!

[devout palm]

Absolutely

Looking forward to learn more from you

[pallid lotus]

CherryTree is awesome for little things. I use a Cherry tree notebook per project at work, for example

For single file notebooks it's incredible. Only issue is it really struggles with big notebooks. Started crashing when my original notebook hit about 40Mb

[pallid lotus]

Also I tend to use Greenshot now because I'm usually on Windows. Still got Flameshot on my Kali though

[shut hawk]

Why? Flameshot works just as fine on windows, in fact I'm using it right now

[pallid lotus]

1password if you're happy with something reliable but SaaS.
Bitwarden if you want something self-hosted.
KeePass if you want something local.

I like 1password personally.

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #9 - 756)

[shut hawk]

Ouch, that including image assets?

[pallid lotus]

Just fits really neatly into my workflow. I have the shortcut bound to a macro button on my mouse. I can have evidence captured, highlighted / edited / etc, and pasted into notes in literally seconds.

I'm sure I could do that with Flameshot for Windows as well. Just haven't

I didn't like the flame shot integrated editor as much either

[pallid lotus]

Yeah. Was about 600 nodes including embedded images.

[shut hawk]

Fair enough, greenshots editor seems a bit more fledged out but I enjoy the simplicity behind flameshots one

[pallid lotus]

My trilium notebook is literally 10x the size and includes things like embedded PDFs

[shut hawk]

Being able to embed pdfs and other files is suuuperb

[pallid lotus]

Yeah

[shut hawk]

And having your own JS snippets because the note is all HTML is also quite nice

[pallid lotus]

Aye. I really like Trilium for my main notebook. My tools of the trade.

[sick lance]

You get a year of the 1password premium free with github student.

[sick lance]

Can you stick ascinema in trillium?

[pallid lotus]

For little things though -- individual engagements, or development projects -- which rarely go more than a few Mb, Cherry Tree is just really really neat

I much rather having a single file per project which I can archive along with logs / Burp project / whatever.

[loud marlin]

@boreal scarab you also have bowder extruder/tube ?

[pallid lotus]

I would be astounded if you couldn't. I haven't done it personally, but you can include JS plugins so I see absolutely no reason why not.

[pallid lotus]

Also, there's a free version of 1password still? Lmfao

[sand trench]

keepassxc all the way for shadows passwords

[buoyant tree]

Why not obsidian for notes? (Haven't read the entire context)

[shut hawk]

Nah, you get the sub paid for as a student

[sick lance]

I haven't set it up yet for my notes, going to wait until I have a free week, took 3 or 4 days to sort out my bookmarks

[brisk tree]

obsidian is soooo good

[buoyant tree]

its simple and it works

[shut hawk]

I think due to the plain text markdown storage

[pallid lotus]

Because as soon as you start doing anything vaguely malicious and put the notebook on Windows, parts of it go missing

The simplicity of plain text markdown is good in many ways, but not security

[buoyant tree]

eh I exclude the directory in AV

any other reason for Trillium except AV?

[pallid lotus]

Yeah, okay, so now you've just had to poke a hole in your own security in order to get the software working.
A small hole, sure, but the principle is ridiculous

[normal fable]

Well written Wuiri. Seems we have similar taste in note taking.

[pallid lotus]

Built in synchronisation 🤷‍♂️
Pure hierarchical structure
Etc etc

[sick lance]

So an access point for hackers?

What a thing to broadcast in a server filled with hackers.

[buoyant tree]

feel free to add stuff in my notes directory

[pallid lotus]

I mean, the chances of it actually coming to that are slim. Although yes, it's basically free reign if they were targeted lmao

[sick lance]

Chances are slim, but never 0.

[pallid lotus]

How about an unobfuscated meterpreter exe, just to add insult to injury?

[sand trench]

shadows home dirs ctf dir is full of nasties

mostly nasties shadow has made themselves using metasploit but still

some mimikatz too

[buoyant tree]

aye feel free, although not a good professional practice but am just learning for now and don't have that good security

Just bitlocker & a strong password for now

[pallid lotus]

Like, not trying to convert you -- if it works for you, then awesome.
Also to reiterate, chances of it ever becoming an issue are slim. It's more the principle than anything else.

[buoyant tree]

Yeah may switch one day if I somehow like the software UI more

[pallid lotus]

NGL the obsidian UI is pretty slick.
But then, so is the Trilium UI 🤷‍♂️

[buoyant tree]

but for now its just simplicity and it works

[sand trench]

if you do what shadow does with hacking you should probably know the risks

[devout palm]

They might do the thing before that day. That's why we need to prepare ourselves to a possible threat

[normal fable]

I'm gonna dl Kali iso on my windows machine, mount it and see how bad defender freaks out. Lol

[pallid lotus]

What, store a bunch of payloads you generated yourself, which point at your own infrastructure, in your home dir?

[pallid lotus]

Don't even need to mount it -- bloody thing scans the ISO

[sand trench]

yeah and connecting their daily driver host to the tryhackme network

[normal fable]

Orly! Never had that happen before.

[devout palm]

I like Obsidian. Haven't tried Trilium

[hollow pivot]

I've made that mistake once (full scan), and ended up spending a lot of time removing the threats. I wouldn't recommend it

[buoyant tree]

eh Trillum's UI feels more outdated somehow

[sand trench]

foss vs closed source

[buoyant tree]

bad bad bad idea

bad bad bad

[pallid lotus]

I freaked out a while back when I switched back to defender from malwarebytes and ended up with about a hundred detections lmao

[sand trench]

hahah

[normal fable]

Trilium is similar to Cherry tree structure wise
I like it I think better than obsidian.

[hollow pivot]

I wasn't able to figure out how to remove all of them at once, so had to do them one by one, and I think there were more than 100 😦

[pallid lotus]

Yeah, hierarchical structure is best imo. I know other people prefer other structures though, and that's fine.

[sand trench]

use what works for you basically

[pallid lotus]

I just deleted the ISO lmao

[normal fable]

Opinions are like... I know there's a saying there.. lol

[sand trench]

which means shadow needs to figure out what works for them

[pallid lotus]

I think the saying is "You are very welcome to your incorrect opinion"

[sick lance]

Talking about poking holes.

I need to renew malware-bytes.

My free 5 year key RBS gave me finishes soon.

[pallid lotus]

Out of interest, does it hook into AMSI for you?

[hollow pivot]

For me, it was all of my Kali VMs files, which, at the time, I didn't want to delete, but that might've been the easiest solution. Lesson learned

[buoyant tree]

eh its highly cheap for what it offers

[pallid lotus]

Not sure if my installation was borked or if the whole damn thing was borked, but that's why I switched back to Defender -- it wasn't doing in memory scanning.

That and defender is both free and one of the best

[sick lance]

Yeah, it does.

[sick lance]

I get it for cheaper, being a student and all.

[normal fable]

Defender has gotten really good...

[buoyant tree]

but but but its Microsoft

[normal fable]

*for windows rigs...

[sick lance]

Defender isn't the Defender of yesteryear.

[sand trench]

hey chat how do shadow install windows defender on linux??? specifically arch linux???

[loud marlin]

black magic

[mossy river]

Not hungry but need to eat 😢

[pallid lotus]

Yeah, which means it hooks better into the Windows OS than virtually any of the others.

[normal fable]

You mean "Windows Pretender"?

[pallid lotus]

It used to be crap, years ago, but these days it's pretty much the gold standard for consumer grade AV

[buoyant tree]

eh I use windows for a main os then linux for remote or vm's

[mossy river]

Defender is subscription based now isn’t it?

[sand trench]

;-; where is shadows money for new gaming pc

[shut hawk]

The maths isnt mathing

[buoyant tree]

so there' a lil % missin

[sick lance]

Do you know any of NW's SoC?

[devout palm]

Stalemate?

[shut hawk]

Not a win

Learnt that the hard way at a local tourney ☹️

[devout palm]

Hm

[shut hawk]

These % are so weird

[shell nova]

Guess they need to leave room for magic

[shell nova]

Asking myself the same question

[pallid lotus]

Aye. Work with (and get yelled at by) them quite frequently. Why?

[sand trench]

just noticed that shadow can basically not play any dx12 games using proton due to a 1070 not working very well for it

[buoyant tree]

Also Jayy, in Chess is it normal for not going for a checkmate but going to kill all the opponents pieces before a checkmate?

Realized that yesterday when playing with a friend

[devout palm]

9.3% Knocked over the table

[shell nova]

Heh, try with an AMD integrated GPU 😦

[sand trench]

fair enoughs

[shut hawk]

I guess if you wanna be mean you can do that

[buoyant tree]

Got that reaction from my friend

[pallid lotus]

Normal? No.
Amusing? Yes

[buoyant tree]

but checked my game history's and its how I play all games

never realized that before and thought that was normal

[shut hawk]

mhm gotta show them who's boss

[normal fable]

Typically people who just take all your pieces are just being mean..

[pallid lotus]

Had that once in secondary school. Got challenged by someone who had played once or twice back when I was playing daily.
Took every piece without losing any myself

[shut hawk]

tbf its quite funny if they won't resign and you end up promoting all your pawns to get 6 queens

[buoyant tree]

I have done that

[buoyant tree]

Now thats talent, I usually lose like 4-5 pieces at minimum

[shut hawk]

Pawns as well?

[pallid lotus]

Not really talent tbh. They knew the rules but not much else.

[buoyant tree]

Including pawns

[sand trench]

it is harder to do then you think to get 9 queens without going into checkmate

[pallid lotus]

It was mean to accept the game.

[buoyant tree]

Oh

[shut hawk]

Pieces don't tend to include pawns

You can do it with the scholars mate

[pallid lotus]

To clarify, I include pawns in that btw

[sand trench]

amounts of chess openings shadow knows == 0

[shut hawk]

I did this with my friend once, great reaction 😂

[normal fable]

I personally would have taught them as we played.. but I like teaching people new skills.

[buoyant tree]

Had it done to me by an AI

I was highly mad

[shut hawk]

bots 👎

[sand trench]

*wonders how scammy it would be to set up a go fund me or similar to get shadow a new computer

[buoyant tree]

Eh I usually play against bots unless I am sure I have the time to play while being focused

[shut hawk]

Good grief

[normal fable]

🤖 huh?

[buoyant tree]

Shadow, IDEA, how's latency of geforce now

[buoyant tree]

I did my work in that also

[sand trench]

how do you think shadow should run that on linux???

[shut hawk]

https://tenor.com/view/meep-morp-zeep-robot-captain-engage-jake-peralta-jake-peralta-gif-16242963

[buoyant tree]

it's on steam deck

u can probably do some of that shadow magic and get it runnin

[devout palm]

https://tenor.com/view/gmhikaru-hikaru-hikaru-nakamura-twitch-streamer-smile-gif-26536025

[buoyant tree]

Also geforce now can run in browser

[sand trench]

if shadow did this they would mark it as the get shadow a new computer go fundme or

[normal fable]

Lutris maybe?

[sand trench]

something similar that clearly states what it is

[pallid lotus]

Why would anyone donate..?

[buoyant tree]

failed a captcha 8 times in a row

[sand trench]

that is something shadow does not know either muiri

[hardy mica]

http://buyacomputerforshadow.org

[sand trench]

hence why shadow has not done it yet

[shut hawk]

Kindness of their hearts

[normal fable]

I'll donate some jelly beans.

[pallid lotus]

... We're talking about humans with internet anonymity lmfao

[shut hawk]

https://tenor.com/view/light-peace-please-penguin-hope-gif-10880066090316969269

[buoyant tree]

eh AIO has donated a lot of old tech to people he knows irl but never to internet anonymity

@sand trench try out geforce now and xbox game pass ultimate both

[hardy mica]

@sand trench just go on a roblox server saying you are a girl. You'll get at least 2 4k bucks computers

[buoyant tree]

for some temp

[boreal scarab]

I have a bowden tube, yes. The one that came with my printer

[boreal scarab]

Hoomans? What dat? I'm a bot! 🤖

[loud marlin]

what's you retradction settings

[buoyant tree]

You haven't failed a captcha 8 times in a row

[sand trench]

beep boop beepity boop boop boopity beep beep

[boreal scarab]

Yes I have 👀

[buoyant tree]

then installed a AI captcha solver extension which solved it for me

[boreal scarab]

Boop boop beep boop beep beep boop

[devout palm]

Knew it

[buoyant tree]

fellow robot beep borp boop

[boreal scarab]

Beepity!

[loud marlin]

captcha is not just click on box or so. captcha look at you mouse movement, even browser history and some things.

[buoyant tree]

yeah but I failed too many times when manually

[loud marlin]

looking for natural things

[buoyant tree]

so I'm unnatural

[loud marlin]

dumb ass 🙂

[loud marlin]

skill 🙂

[sand trench]

shadow gets a lot of captchas

vpn plus firefox resist fingerprinting makes things go SLPÄORUGH

[cosmic sierra]

hi

[sand trench]

ello

[cosmic sierra]

am new in this IT thing and i wish someone could guide me or at least tell me with what to start and what to do ??

[sand trench]

register on https://tryhackme.com/
then follow the path order here #general message

[cosmic sierra]

payable

sadly LOL

[sand trench]

ah you need something that is free???

[cosmic sierra]

no

like

someone to tell me

[boreal scarab]

Answer is 2

[loud marlin]

@boreal scarab the linear advance thing i told you. the z-seam is practical non exist any more

[cosmic sierra]

like i should learn (for exempl) KALI then i should learn HTML or idk like the process ?

[devout palm]

^

[sand trench]

the path order recommend goes you through in what order to learn things from basic IT to soc analyst and pentesting

[cosmic sierra]

ooh alr

ty

[dry abyss]

so i made a room, and accidently banned myself from the room trying to remove me from the room's graph after testing.
when i try to access the room manage. it tells me i am banned from my own room. is there anything i can do?
https://i.imgur.com/IV4zSKT.png

[boreal scarab]

👀👀👀👀

[hollow pivot]

Hey, you can email support: [e-mail]; try not to ban yourself next time

[dry abyss]

i see, im suprised there would even be a reason to allow the creator to ban themselves
thank you anyway !

[twin ridge]

Gave +1 Rep to @hollow pivot (current: #42 - 175)

[hollow pivot]

Yeah it can be confusing, it happens sometimes.

[hollow pivot]

Actually, can you DM me the room URL? Can maybe sort it out for you tonight/tomorrow

[loud marlin]

it's a fracking great thing

[shut hawk]

@pallid lotus didn't you do this?

[boreal scarab]

https://tenor.com/view/press-f-salute-respect-team-fortress-pay-respects-gif-14913775

[near hawk]

Scrubz as well if i’m not mistaken lol

Need to remove that feature of banning yourself 😂

[loud marlin]

btw @boreal scarab i can make you that print file. i make you printer profile and send you .gcode if you wish test. since is calibration test it over-write default setting you use

[boreal scarab]

I had to re-read that whole sentence twice lol

[loud marlin]

skill

for linear thing shit

[boreal scarab]

Engwish

[loud marlin]

i can make that .gcode file for your printer. just i make profile and slicer make custom code that ower write default settings you use

[boreal scarab]

Ah

Sure

[loud marlin]

what printer you have btw

[deft cloak]

Can anyone explain me Question #1..

Inspect ARP Tables
------------------
Inspect the ARP tables on the Metasploitable virtual machine by running this
command:
         msfadmin@metasploitable:~$ sudo arp -a

Compare the state of the ARP tables on the Metasploitable server before
and after the ARP spoofing attack. Do you notice any differences? If so,
which entries have changed?```

[loud marlin]

ik is ender... just which one exactly