general

[normal vessel]

okay

[pallid lotus]

I shall give it a look!

[sand trench]

Sigh shadows rss/feed reader is not getting updated for 8 months and there is tons of new pull requests shadow wants the features from

guess it is make a fork and merge the pull request themselves time

[wide marten]

Congratulations by the way

[normal vessel]

thanks 😄

[sand trench]

yes.... think @sick lance can help with that

[sick lance]

They're waiting for verifitcation.

[sand trench]

*hopes it does not require the senior moderators

oh

[sick lance]

Nah, I can add and remove roles. (with the exception of CM, Mod and Infosec devoloper)

[loud marlin]

...

[sand trench]

well if shadow recalls ninja james statement some of the higher level certs need to be verified by someone who also has those certs or similar statement

i.e mostly the ones that would give access to #advanced-general

[shadow loom]

Not enough Doritos. 7/10

[loud marlin]

on wall? thoes are not doritos =/

[sick lance]

Nah, I can do OSCP

[shadow loom]

Doritos, the snack 😅

[sand trench]

oki

[loud marlin]

yep... def not them heh

[sand trench]

nice to know scrubz

[mossy river]

@sick lance They left my package a whole block away at a random house lol

[sick lance]

FFS, can't be arsed to find your address?

[sand trench]

yeah that sounds like a policy break of some sort jabba

[shadow loom]

"You were not home during the delivery attempt."

[buoyant tree]

Does this feature seem actually practical?

[sand trench]

naaah not currently

[near hawk]

Was it evri?

[sick lance]

Yeah

[near hawk]

Always evri

[mossy river]

Apparently not. I put a sign on the door clearly with the address and instructions lol

[sand trench]

https://www.youtube.com/shorts/gbgjGm9o2h8

[polar wraith]

anyone know any good privacy blogs?

[buoyant tree]

Eh shouldn't it be bigger

[sand trench]

[lavish star]

@naive violet can I dm you?

[arctic cradle]

day 4, just finished network fundamentals from Pre Security, will try to pass the whole module tomorrow

[buoyant tree]

Congrats.

oi @boreal scarab mind if I dm?

[boreal scarab]

🫡

[loud marlin]

@boreal scarab also get this nozzle to try

[boreal scarab]

Try it yet?

How about now?

Now?

[loud marlin]

not for now

[boreal scarab]

Sadge

[sick lance]

What about now?

[rich nacelle]

Hey!

anyone knows a way to make a virtual controller? For exemple to spawn another local player in rocket league (Split Screen)

[loud marlin]

w8... nop... also not for now

[sick lance]

Probably not...

[boreal scarab]

@chilly veldt

[chilly veldt]

Yeah, it was cool

[crude stump]

Yeah by buying another controller for your friend to play with

[shut hawk]

wut

[glossy swan]

hi

[shut hawk]

https://github.com/yannbouteiller/vgamepad

Here you go

[glossy swan]

can someone help me hack into the mainframe

so i can get gigabit speeds

😔

[sand trench]

@sick lance or @naive violet can help with that

[glossy swan]

i mean

i was partially joking...

[proven quartz]

If you're interested in learning cybersecurity and ethical hacking, you can #start-here and learn from beginner level

[sand trench]

shadow can be proud that they hacked the gibson in hacknet

[glossy swan]

downloading a game

and trying to use discord

is pain

on 100mbps

[wide marten]

Discord uses an insane amount of bandwidth for a text chat.

[glossy swan]

i wanted to use my vpn

but

would be slower

[wide marten]

I've had situations where I could load whole websites on mobile data but discord messages wouldn't go out.

[modest elk]

What are your guys thought on Cve 2024 30078

[clever shard]

rough week for microsoft ngl

[glossy swan]

whats that

[rapid merlin]

a vulnerability

[glossy swan]

how bad is it

[wide marten]

AFAIK there's no information public how it actually works and who/what is at risk under which conditions. But it's been patched a week ago.

[rapid merlin]

google it

[proven quartz]

It's fixed once you install your updates

[shut hawk]

It's a lot more than just a text chat, but if you wanted to reduce bandwith you could change your settings so the users pfp doesn't show (less media)

[glossy swan]

does core isolation help

nvm its a wifi thing

[clear jackal]

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30078

Looks pretty obscure

And requires the attacker to be within range of the device

[wide marten]

Unless someone shares media in that very moment, it functions as a text chat. If it was well designed it would prioritize sending/receiving text in the currently displayed channel when on a slow connection, and let everything happening in other channels wait.
Then text messages would immediately go out despite being on 2-3 mbit/s. And not be stuck for sometimes minutes.
Thanks for the tip though.

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 534)

[wide marten]

Couldn't find any detailed info on it.

[proven quartz]

Core isolation is a system that secures an area of memory for a particular process to limit the extent of malware in certain situations

[glossy swan]

the website is bugged and wants me to enable javascript

so i cant look

[proven quartz]

Seems to work just fine

[glossy swan]

so

question

since ppl seem to shit on this stuff

does core isolation, TPM 2.0 and memory integrity

actually help anything?

[sand trench]

https://frame.work/es/en/blog/introducing-a-new-risc-v-mainboard-from-deepcomputing

[glossy swan]

nvm it works

[clear jackal]

Seems like that's a you thing, Microsoft's website is currently working.

[glossy swan]

it fixed on its own

:p

[sand trench]

lots of websites break if you disable javascript

nothing new about it

[sweet ore]

reminds me of when i was young and i would go on that inspect thing

[sand trench]

shadow reads a tons of websites source code just to find the rss links

[boreal scarab]

I love quick naps

[wide marten]

Hated as child, valued later.

[boreal scarab]

Amen

So nice to lay down and get a quick nap in before going out

[crude stump]

Inspect element

[autumn solar]

Back to getting forced into attackboxes even though I'm connected to OpenVPN

[wide marten]

What do you mean by "forced?

[autumn solar]

I mean when I click on any room, even on rooms that should function just fine without them, the split screen instantly pops up

[crude stump]

Close it then

[shut hawk]

What room does this appear on?

[crude stump]

Well unless it is making you use the attached vm

Even then only a few really do that

[autumn solar]

I've clicked on the green bubble and it isn't closing. I've already tried restarting VPN and logging out

[sick lance]

#site-support please.

[autumn solar]

Ok

[crude stump]

There should be a “close split screen” on the very top

[sweet ore]

yeah and i would click random buttons to find out their purpose

i used to think you could hack using inspect element

but its just the UI tbh

[shut hawk]

You can for client side based hacks

[crude stump]

I though there was a room like in thm where you changed the login screen so it shows what ever you want on it. I swear that used inspect element

Ooo it was html injection

Nvm

[wooden totem]

Why is my internet speed under 2mb/s today what. Its normally around 100

Just on pc too

The ping is the same, 22ms

[tepid furnace]

the general vc is popping off??

thm gamenight when

[crude stump]

3 people = popping off

[tepid furnace]

there were 4

[lavish star]

3 times more than usual

[tepid furnace]

that's what im saying

normalize people in vc

[lavish star]

@tepid furnace Just saw your discord background

Made me crack a smile gotta admit

[tepid furnace]

I got lots of cats

I don't remember the name of the cat in my background though

:c

[wild rose]

looks like my ashton

[crude stump]

Flame point Siamese?

Nvm

Or regular Siamese

Flame points got like orange on em

[wild rose]

Just my Ash-ole

[sick lance]

#koth

[errant fossil]

Gn guys

[sand trench]

ni ni sal

[wide marten]

Night

[cunning veldt]

night!

[sand trench]

and here we are

shadow now has an "updated" fluent-reader source code copy

[tender pulsar]

I have a question for those more knowledgeable than myself. Is there a way when running linpeas on a machine that I can save the output into a file and have it safe the color scheme so I can download it onto my attack machine and add it to my notes so I can refer back to it instead of rerunning linpeas all the time? keeping the colors is key so I know whats what.

[sand trench]

well to keep the color data is tricky

though you can run it from a shell established in tmux and then have a huge scroll back number set

[tender pulsar]

thats kind of what I have been doing with terminator until its just to far to keep scrolling. Is there a way I can copy and paste it into a file of some sort on the attack machine and open it with s text editor or some other program? I feel like I am missing some obvious solution haha

[sand trench]

well generally shadow just pipes things into tee to save a file of standard out

but think it does not save the color sooooo yeah

[shut hawk]

# Output to file
./linpeas.sh -a > /dev/shm/linpeas.txt #Victim
less -r /dev/shm/linpeas.txt #Read with colors

This is from the linepeas page, does that help?

[tender pulsar]

Thanks I will give it a try. Seems to me if I recall right I have tried that in the past but had some type of issue possible after copying the file onto my attack machine for future use. But I cha give it a try again and see what I can do. Thank you.

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 535)

[sand trench]

oooh so the -a flag is to save it with colors???

[wide marten]

-a (all checks except regex) - This will execute also the check of processes during 1 min, will search more possible hashes inside files, and brute-force each user using su with the top2000 passwords.

[sand trench]

never mind then

and after checking that less -r command makes you able to read the output after using tee too

[wide marten]

dead again

[sand trench]

nooo don't be dead

be alive

[wispy sparrow]

will there be a ticket event soon ?

[sand trench]

¯_(ツ)_/¯

[boreal scarab]

https://tenor.com/view/funny-turkey-homer-simpson-rage-gif-12952224

[wide marten]

I meant the channel but yeah...

[wild rose]

I thought you meant inside

[crude stump]

I hope

[hot cairn]

@boreal scarab mind testing quad9’s terrible infra again?

[boreal scarab]

I will when I get home, pit at a bar right now

[hot cairn]

Kk lol

[sand trench]

wait what is terrible about quad9 infra????

[hot cairn]

~35% of the time for my domain they return NXDomain

the rest of the time the proper domain

It literally makes no sense

like

[hot cairn]

for 1 in {1..100}; dig mirror.0xem.ma @9.9.9.10 | grep SOA

you can see it for yourself

[sand trench]

??? why the 10 at the end???

[hot cairn]

same thing on 9.9.9.9

[sand trench]

so far 0 errors

[hot cairn]

iir, 9.9.9.10 has ECS on

[hot cairn]

try 9.9.9.10

im seeing it on both

@boreal scarab was too

and a few others in the US

[hot cairn]

https://images.0xem.ma/u/WK89Lg.png

31% error

[sand trench]

0 errors related to S0A

[hot cairn]

its sOa

not s0a

[sand trench]

ah

well none of those either

[hot cairn]

TL;DR it either returns the A record, or the SOA record

[sand trench]

shadow copy pasted the command

[hot cairn]

must only be the us locations then

[sand trench]

welp bad crop

[hot cairn]

that really looks like a 0

lol

[sand trench]

yeah until shadow checked and saw the real 0

as that has a slash through it

crazy how shadow forgot the font they use destinguish those crazily good

[hot cairn]

Whatever is, atleast their US location is screwy

same w/germany

[sand trench]

probably marked red because grep failed to find things

[hot cairn]

weird

[sand trench]

yuup marked red because grep failed to find things

[hot cairn]

i yelled at them over email so

[sand trench]

it is marked green if shadow uses grep A

[hot cairn]

hopefully they fix it

[sand trench]

if they can fix it

depends on server provider in the states after all

[hot cairn]

its only quad9 with this issue

and some of their servers are clealy working

bc it returns the valid record the most of the time

[sand trench]

not saying that quad9 is not at fault

it could just be they chose a crappy hosting service in the usa for their nodes

[hot cairn]

could be a million things in the end

but in the end its just them

[sand trench]

shadow don't have to care as they use a nextdns instance

[hot cairn]

i have my own issues with nextDNS lol

They dont respect the local DNS rules i setup

[sand trench]

well yeah but yours and shadows use cases are hopefully different

anyways it is sleep sloop to the beep boop for the meep moop times

[boreal scarab]

My PiHole does

Still at the bar

[molten sky]

i just run an open dns resolver so i can use my pihole from everywhere

@mossy river we got another one

these just started coming out of nowhere again

[rapid merlin]

https://tenor.com/qAqU63ipneF.gif

[boreal scarab]

@hot cairn Not at home, this is termux on data

[molten sky]

does the malware blocking of .9 sinkhole or just fail to resolve with NX?

cause that would be the main difference between those two queries 🤷‍♂️

[hot cairn]

its random

about 35% of the time it fails

for 1 in {1..100}; dig mirror.0xem.ma @9.9.9.10 | grep SOA

[molten sky]

interesting that they don't just do one or the other

[hot cairn]

if you wanna test

[molten sky]

wonder what the rationale is

[hot cairn]

i sent them an angry email so

[molten sky]

doesn't make sense to NX intentionally but companies do stupid things sometimes

[hot cairn]

im not on their blocklists, either

its just so weird its random

[molten sky]

oh it's yours?

that's even weirder

[hot cairn]

mirror.0xem.ma?

yeah

thats mine lmao

[molten sky]

Kubernetes n Things
lol

[grim sparrow]

Done!

[crude stump]

my homie tcp loves handshakes

yall should meet him

[high mulch]

[boreal scarab]

My homie Matt loves milkshakes

yall should meet him

[crude stump]

Favorite type?

[boreal scarab]

Coffee!

[molten sky]

never knew you could be that wrong about a preference

coffee is good and all but definitely shouldn't be a favorite

[wide marten]

frapuccino ftpw

[molten sky]

store bought? tiger stripe, which is hard to find now, then mint choc chip (the green one).
actually good ice cream? like the thicker actually creamy kind? simple chocolate.

[boreal scarab]

Fine..... Rum Raisan

You caught me

[molten sky]

getting "my favorite pizza is hawaiian" vibes

[boreal scarab]

Nah, that's Penne Vodka. See a patern?

[molten sky]

of bad preferences?

that's a tourist slice

benny slice

[boreal scarab]

[molten sky]

https://tenor.com/view/hoodie-benny-hoodie-boomstick-gif-18654692

we need those bumper stickers and signs to come back

[wide marten]

@molten sky was it we playing chess the other day?

[molten sky]

if i won then yes if you won then no it was beerrise

[wide marten]

'twas you

[molten sky]

yeah looks like beerrise

was using my account

[wide marten]

Seriously now or messing with me? oO

[molten sky]

nah that was me

[wide marten]

ok

I shall propose a rematch then. With bord, without, idk

[molten sky]

i played a live 960 tourney the other day (first on the new account) and one of the guys was like 1570 or something. the guy was AFK and timed out. was like +370 just for a timeout lol

[wide marten]

imagine 960 blindfold 😄

[molten sky]

pls no

i forgot what 960 was and when the first game loaded i was like wtf is this what's happening

[wide marten]

e4

[boreal scarab]

https://tenor.com/view/mr-krabs-mr-krabs-meme-spongebob-spongebob-meme-spongebob-squarepants-gif-25910574

[crude stump]

How do yall like chess

[molten sky]

@wide marten use chess[.]com?

[wide marten]

I can make an account, 1 min...

[molten sky]

"tryhackme community" in clubs

lets get a small group going (is new & empty)

i'd share a link but my clipboard is apparently broken

[grim sparrow]

Done!

[wide marten]

$50/day 😄

[molten sky]

50/day is insane in the east

pennies

[wide marten]

joined

[molten sky]

H&u8hfw473fh back at you

[clear jackal]

It's insane for pretty much anywhere except North America, Europe, and AUS/NZ

[wide marten]

challenged you

[molten sky]

im blind so i returned the challenge

[clear jackal]

iirc, you only need to make ~$30,000 a year to be in the top 1% globally

[wide marten]

15|10 oO it's 5am here

[molten sky]

eh it may as well be 5 here as well

just being annoying to ride it out at this point lol

[south walrus]

Can anyone provide guidance on how to send emails without revealing the sender's identity?

[crude stump]

What’s this for

[molten sky]

okay is time for more whiskey and snacks

i think i have some burrito stuff left over 😶

[wide marten]

Go and tell mummy and daddy you got checkmated by a pawn. Doesn't happen every day

[molten sky]

hold on lemme link you a game

agh

god damnit discord

i can't paste here

go to the third most recent on my profile against epwibsomething

right before yours from yesterday

another chicanery game

60 moves and half of them are just running the K back and forth lol

wait was it that one or the 63 move against mark

[crude stump]

Why don’t yall just dm

[molten sky]

it was the 63 move game against mark

[molten sky]

no

less fun

[crude stump]

Ok

[molten sky]

cause pasting is broken ,-,

[wide marten]

saw it. And learned a new word, chicanery

[wide marten]

why don't you just learn how to play

[molten sky]

technically used wrong but it's a funny word so 🤷‍♂️

[wide marten]

🐔

probably not related to chicken

[molten sky]

chickenery

[wide marten]

I recommend you don't play that as white. Everyone >1500 has seen it a thousand times and you're immediately in a worse position with an exposed king

[molten sky]

oh yeah i plan on changing things, but on a new account it was fun being able to ruy lopez every second player lol

normally people (unreated at the first lvls) would play Nf6 to mirror before queens night

monkey see monkey copy

[jovial musk]

Hello! anyone willing to hop on a call to explain some begginer stuff to me?

[molten sky]

if you verify you can get access to the voice channels (not always active, but they exist) @jovial musk

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 19, 2024, 3:40 AM

[wide marten]

if you wanna go crazy look into danish gambit, stafford gambit and alien gambit

[jovial musk]

got it

im on

[molten sky]

i've been looking for new things to pick up so i'ma add these to my list

forgotten quite a few of my old ones after not playing for a year

[jovial musk]

any pros here wanna get on a room?

[wide marten]

all objectively worse against someone who knows what to do but in practice you're gonna win a lot, until a certain level

[wide marten]

sorry I don't do voice but I'm fast at typing so if you have a question...

[jovial musk]

hop on gen voice

so u can hear me

[molten sky]

cow opening.

[wide marten]

anna cramling

[molten sky]

like the simple name lol

[jovial musk]

@wide marten could you hop on general voice for a min

[molten sky]

what was the nonsense called with two bissops and two pawns or whatever?

the r/AC one....

[wide marten]

sorry i'm in a room with a sleeping mrs. cyberterms and without headphones, can't do that

[wide marten]

no idea

[jovial musk]

ah

anyone willing to hop on vc to help me?

[wide marten]

but maybe we should really move that to a separate channel when people come back online 😄

[molten sky]

found it. il vaticano it was called

people were posting online about how they were trying to use it in actual games and it wasn't letting them lol

two pawns flanked by two bishops capturing both inward pawns and swapping places

[graceful thistle]

you are more likely to get some answer if you just type it

[wide marten]

https://www.youtube.com/watch?v=nH_fiqlLp2U
https://www.youtube.com/watch?v=16Q6Po-s6Gs

[molten sky]

woah

[jovial musk]

yeah but i gotta explain the whole thing

[molten sky]

wait

dolphin

why no rank

[graceful thistle]

I have ranks, just not the green one 😉

[jovial musk]

the thing is, how do you actaully apply things you learn in paths to real life pentesting

[wide marten]

#community-announcements message

[molten sky]

my god, i restarted discord and everything about the interface is different now

even how ranks present

[jovial musk]

im currently taking Jr Penetration Tester as a begginer (begginer pentester, good at programming)

so i guess my question is, am i on the right track?

[molten sky]

house centipedes can climb walls?

[jovial musk]

what

[graceful thistle]

ofc!

random question

[molten sky]

just had a small one climb up the wall

[wide marten]

I'd say the next step after THM paths would be solving CTF machines without help and instructions, applying your knowledge, expanding it, gaining experience and intuition. A couple of dozen and you might pass the OSCP.
But then real life is a whole different story. Many things you do during a CTF would get you fired in real life, potentially worse. You're gonna have legal documents telling you what you can and can't do on which machines/networks, how you have to react if you find a vulnerability, who to call if discover sensitive data on a server etc. Much more regulated, organized. You're working on real systems that if dispruted could cause massive financial losses. Not sure if that answers your question.

[south walrus]

to hide sender's identity

[jovial musk]

OSCP?

i think an important context thing is that im a kid .-.

im 15

[wide marten]

The gold standard entry level (some will argue it's not entry level) penetration testing certification. Consists of a 2x 24h exam and costs a lot of money: https://www.offsec.com/courses/pen-200/

[jovial musk]

im currently also subscribed to codecademy.com, so im also taking courses in css, jss, and html

[crude stump]

Sometimes your job will pay or it

[jovial musk]

idk if both things go together

[wide marten]

Then just keep learning, start doing CTFs, here or on competitor platforms, watch youtube, read blogs, get better. Maybe you can turn it into a career. You have years to find out. Don't pressure yourself.

[jovial musk]

yeah but if i dont turn it into a carrear didnt i just waste my time?

[molten sky]

important clarification ---
OSCP is an entry level penetration testing certification.
It is NOT an entry level cybersecurity certification.

[jovial musk]

dont get me wrong, i enjoy it a lot

but like, should i do codecademy.com or tryhackme.com or both

do both things go together?

[molten sky]

different domains

just do what you enjoy

don't burn yourself by doing too much either

[wide marten]

1. Most people have hobbies they don't make money with. That's enjoying life, not wasting time
2. Even if you don't turn this into a career, the skills you learn along the way will help you in any computer-related job

[molten sky]

"if I don't become a mechanic am i just wasting my time" --- no enthusiast ever

[crude stump]

Well code academy is for uh code. Definitely helps tho

[jovial musk]

fair enough

[graceful thistle]

I dont think you really waste time if you are learning things, even if you end up doing something else entirely. You're only 15 too 🙂 you'll be doing lots of that!

[jovial musk]

also, you know those CTF where you have an ip address but no website

what does that simulate?

being near the machine?

cuz ik attacking a website simulates... atacking a website

[molten sky]

not all servers host websites

[jovial musk]

but what does the other things simulate

[ancient plover]

^

[molten sky]

active directory isn't a website, databases aren't websites, CDNs aren't websites...etc

[ember solar]

^

[jovial musk]

explain like im a 5yr old

[ember solar]

chat gpt moment

[wide marten]

Often it's not supposed to simulate any real life scenario, then it's just a game. Depends on the box. An active directory domain is not a website but you'll find it in every large company.

[jovial musk]

been getting to used to that

[ember solar]

oh youre new here?

[molten sky]

webwebsites and webapps make up a minority of services. these websites have to get their information from somewhere as well, and that somewhere will be other servers that aren't websites

[jovial musk]

yes

[ancient plover]

websites are hosted on servers. servers are computers. computers have ip addresses.

[jovial musk]

gotcha

[ancient plover]

thats the best way i could explain it

[molten sky]

APIs aren't websites but they are a critical component of modern web apps, mobile apps, and connected hardware

[jovial musk]

now you are speaking on my level

btw, do you guys think Jr pentester is a good start?

cuz ive been understanding but am i getting ahead of myself?

[molten sky]

can be. if it's too hard, you can always step back. if it's too easy, you can always step up.

[jovial musk]

i took cs50

[ember solar]

nope

[molten sky]

you aren't buying anything so you aren't locked in

feel things out

[wide marten]

Great choice

[ember solar]

you probably gonna start with a blue team

[jovial musk]

i have the subscription

[graceful thistle]

https://discordapp.com/channels/521382216299839518/680459914828972076/1165745966155046952

this is an order that lots of people like / use

[ember solar]

and learn how to protect stuff

[molten sky]

i mean it's not like you're being a specific course for tons of money, you can always switch pathways within thm if one doesn't feel quite right

[jovial musk]

ive been feeling greate on jr pentester

[molten sky]

then keep it up

Jr Pen is an enjoyable pathway imo

[ember solar]

fr

[jovial musk]

i mean, i dont know how to use nmap and stuff (only basic) but i feel like im not supposed to know more than i do

[ember solar]

do what you enjoy the most

[jovial musk]

also got my schools chromebook to run kali linux

[molten sky]

it doesn't hold your hand nearly as much as the earlier ones but it also doesn't throw you right into the deep end

[jovial musk]

so i use openvpn

[ancient plover]

something i noticed is trying to figure out what someone should "do first" is a terrible way of approaching the field. Look around at the boxes and find stuff that seems interesting to you, because if not you will feel overwhelmed

[jovial musk]

i LOVE web exploiting

more than all the other stuff

[wide marten]

Then you wanna know more about OWASP

[ancient plover]

then keep pwning boxes relating to that

[wide marten]

And get into using Burp Suite

[jovial musk]

im not that deep into

is there any begginer pwning boxes?

like, step by step boxes?

or should i save them

[molten sky]

(community version is fine -- don't pay for it unless you know you need to and you know why you need to)

[wide marten]

OWASP Juice Shop. Not sure how beginner friendly, but it's a webapp designed to be broken in various ways, using different techniques

[ancient plover]

there is nothing wrong with using write ups to understand boxes you dont quite get yet

[unreal solar]

Search for walkthroughs

[jovial musk]

ive done it i think

sqli right?

[ember solar]

ctf?

[jovial musk]

nah its a playground isnt it?

answer was SQLI

[wide marten]

This one: https://tryhackme.com/r/room/owaspjuiceshop
But in general juice shop is an open source application you can download and self-host as well.

https://owasp.org/www-project-juice-shop/

[ancient plover]

that is a fun beginner box

[jovial musk]

bet ima do it rn

are there mutliple ways in?

[unreal solar]

several

[wide marten]

As long as you don't hack like @molten sky plays chess you have nothing to worry about

[graceful thistle]

oof

[jovial musk]

ok il keep you guys updated

[graceful thistle]

glhf

[jovial musk]

thanks

i wish i could share screen but im doing it from my chromebook

i havent done burpsuite basics though

[wide marten]

And don't get stupid ideas like hacking the school website. There's no wifi in prison.

[jovial musk]

thats fine right?

[unreal solar]

You will be using it a LOT in juice shop, i'd say get familiar with it at least

[jovial musk]

ok so ive been watchin my John Hammond

ik i gotta nmap

whats the differences between -T5

like, why would you want to be sneaky

also, why does nmap describe it as "not being rude" when using a higher volume

[worn thorn]

you don't want to wake the detection systems put in.

[jovial musk]

yeah i was going to ask

[wide marten]

The more aggressive you scan the higher the chances of getting detected. And you're causing network load and (potentially) use ressources on the target. Not much, but still.

[jovial musk]

i found a vulnerability in a wordpress site but it redirects me to worddefence

so is that vulnerablility obsolete? or is it just harder to apply

[wide marten]

Whose wordpress site?

[jovial musk]

mine .-.

i put wordpress and tried to hack into it

so is the vulnerability obsolete

does something like wordpress make the website immune

[wide marten]

No. Vulnerabilities get discovered in wordpress and wordpress plugins all the time

[jovial musk]

yeah but if worddefence blocks all attacks

like, isnt that just op

[worn thorn]

not really as it can't defend against everything

[wide marten]

If you run a public server with wordpress you're gonna see constant scans in the logs, looking for unpatched vulnerabilities

[jovial musk]

btw i run nikto on juiceshop and everything returns a "might be interesting" idk why

[jovial musk]

gotcha

[half badge]

Chat

[molten sky]

woah now

i have no rebuttal but woah now

[half badge]

I joined rootme room with the open vpn file provided and run scans with nmap, but now that I spawned a new machine on the same room it doesn't work

The host is down

And I spawned two new ips while being connected to the same vpn

Help anyone?

[unreal solar]

#room-help

[half badge]

Damn

[molten sky]

that was also only like 2 minutes and at the quietest part of the evening

gotta give it a min sometimes for someone who's able

just an fyi but the mods don't like when you say the actual thing
they don't want someone who doesn't know better to actually run it and do damage

( i know cause i said it )

[half badge]

I did although no one's gonna answer 🗣️

[graceful thistle]

I didnt want to say it but... there ya go :p

[molten sky]

i don't like not green dolphin

we need a special color role if not mod

[graceful thistle]

but I have this blue purple now

[molten sky]

blurple

[graceful thistle]

blueberry role

[molten sky]

also that's new aint it

[graceful thistle]

yeah pretty recent

[molten sky]

anyone else have it yet?

[graceful thistle]

yes

all the ex mods etc.

[molten sky]

lol

"we don't need emiritus"

*makes not emiritus emiritus*

[wooden totem]

A dolphin is here

[jovial musk]

why is using nikto frowned upon?

[wide marten]

just kidding. We're much closer in strength than I am to an IM

[molten sky]

..it is?

[graceful thistle]

hello 😄 how are you?

[jovial musk]

i heard

[wooden totem]

Greetings! I am good and well. (I'm talking to a dolphin)

[graceful thistle]

excellent

[molten sky]

obviously play some very casual stuff at night cause bored but tryna get back into proper real games as well---tryna get rated for once so i can see where we stand and build up

fide is a pain but uscf is easy enough locally

[wide marten]

I've never played a rated game in my life 😄

[molten sky]

genuinely curious where i stand when actually trying

nothing notable ofc but it gives a reference point

[jovial musk]

well guys

igtg to sleep

thanks for the help

[molten sky]

curious where........ not something i see every day but never heard of it being discouraged. maybe it was a contextual thing? 🤷‍♂️

[wooden totem]

I like chess, it is a simple yet complex game

[molten sky]

peace

chess is easy

just don't lose

[wide marten]

I always play well

until I blunder

[ember solar]

anyone plays osu?

[unreal solar]

Hello dolphin. playing any DMC recently ?

[graceful thistle]

every day

I platinumed this weekend 😄

[unreal solar]

Nice, i got the vergil OG sking but my controller broke down 😠

[graceful thistle]

aww

[unreal solar]

Not very hard isn't it ? The V missions on Hell and Hell are a pain tough

[graceful thistle]

I thought it was pretty hard, haha

but I did it with Vergil, so no official achievement anyway. Next up is Nero and the gang

[unreal solar]

DeadWeight !

[graceful thistle]

S ranked Bloody Palace too

[unreal solar]

I haven't played with them in so long i'm scared to try it

[unreal solar]

Taunts for the S rank are nice

specially the Dante one <3

[graceful thistle]

haha, Im looking to git gud with Dante but it will be a lot of work. Took me a long time to get good with Vergil, so Dante is gonna be some work

did you hear about the Capcom super elections recently? DMC won 1st and 2nd place, with some luck we might get a new installment after all 🙂

[unreal solar]

No i didn't hear it, let me check it out real quick

[unreal solar]

Dante's gameplay can be complicated at first, 3 styles lots of weapons and guns, it's all about how you chain attacks together while doing block/evasion with royalguard/trickster

the SDT 'hack' when on SSS is a real life saver

[graceful thistle]

uhuh, Ive been playing for a long time. But style switching real time wasnt an option back then heheehe

[uneven oasis]

God it feels bad when you spend way too long trying to figure out why a room isnt working and you can't even access the site before you realize that you're not connected to the VPN

[unreal solar]

Get used to fat finger it and get git by stupid jobbers when going for no damage runs

[graceful thistle]

jobbers?

[unreal solar]

Yeah the small time enemies

[unreal solar]

Just saw it, pizza man got 1st !!! Capcom really did it with 5 .... I really wished that was more content to the game rather than just the usual

[graceful thistle]

yeah the style switching is throwing me off. Already deeply focused on doing and remembering the combo sequences................. im too old for this. I end up defaulting to just use trickster and swordmaster 🥲

[graceful thistle]

yeah I really hope they realise now that we really want new DMC content, hehe. And actually act on it. Even just remakes like they are doing with RE would be amazing tbh

DMC1 and 3 with a modern look and updated combat system 💯 hell yeah

[graceful thistle]

if you are interested in the story itself, I can recommend Visions of V

[unreal solar]

I really hope they remaster 3, it will be the end of my social life if that game is launched

[graceful thistle]

yep

[unreal solar]

Did you read the mangas ?

[graceful thistle]

yeah 🙂

[unreal solar]

The dmc3 prequel

[graceful thistle]

yeah that was crap though

but I really liked Visions of V and looking forward to whatever Netflix is gonna do

[unreal solar]

Wait, what ????

Don't say it

[graceful thistle]

jackpot?

[unreal solar]

netflix

They had the dmc anime some time ago

they're doing something new ?

[graceful thistle]

yes

the old anime is like 500 yrs old

https://www.youtube.com/watch?v=MZXy5P4Pqz4&ab_channel=Netflix

this was announced last year and supposed to release this year, but there hasn't been any news on it at all

it looks like it may be DMC3 prequel stuff, thats kind of what people have theorised through these 5 seconds of preview 😂

[unreal solar]

Yeah definately dmc3 prequel

i hope they don't screw it up

[graceful thistle]

its not going to be cannon though

[unreal solar]

Netflix has a nasty habit of doing bad adaptations

[graceful thistle]

its a bootleg universe thing. But the director is a fan and Itsuno is involved too, so it will probably be fun 🙂

[unreal solar]

That's better

[graceful thistle]

yeah Im OK with that

[unreal solar]

They should def do a dmc3 remaster though

re4 was a huge success

[graceful thistle]

💯 and then a Sparda prequel pls capcom, thx

[graceful thistle]

honestly I was very surprised by the election results. I thought DMC was going to get drowned out by RE and all hope for new DMC games was gonna be lost forever, so I was very excited when the results came out 😂

[unreal solar]

There is definitely a new game coming, i just hope it doesn't take several years to launch like the previous ones

[graceful thistle]

it will probably

unless they let someone other than Itsuno take it

but he kinda implied he was done with the franchise? The DMC team is also the Dragons Dogma team, so they just wrapped up a new DD. They probably havent been working on a new DMC

[unreal solar]

Vote Dante 666 for president ✅

[graceful thistle]

dmc fanbase is motivated

[unreal solar]

I heard good things from the DD gameplay

overall combat etc...

[graceful thistle]

as I would expect from this team yeah 🙂 but the game has some performance issues I heard? One of my friends ragequit it for that reason 🥲

I havent tried it myself

[unreal solar]

If only i had a PS5 ...

[timid prism]

thats what i thought during lockdown, then i grew up and realised the reality in the job market (10%)

the lets start early moto. realised the early was super late 😂

[brittle compass]

I'm using a subscription can somebody tell me how to add more hours to attackbox not the target machine

anybody???

[rapid merlin]

does anybody know the correct channel for asking about metasploit payloads?

[simple valve]

#room-help

[prisma void]

Hi guys, I've got a question regarding setting up a honey pot on a static site, as I know I can only do that through setting up logging with apache and creating custom code, however, I am running on GitHub so there is no viable way other than client server side scripting.

Now here comes the problem. From my understanding you cannot run nginx commands through Gh pages, now what can I do?

PS (I know I can selfhost , setup fail2ban and server side scripts, but I trust the protection of a trillion dollar company with teams that monitor stuff, rather than myself)

[naive violet]

You'll need to change platform yes

[sick lance]

Is it for TryHackMe?

[naive violet]

A lot of the bots won't even run JS so no client side code either

[prisma void]

The thing is I know it can be done, some Russian guy on an obscure forum did it, but I cannot find the post.

[naive violet]

The internet is full of people making wild claims that aren't true.

[sick lance]

#general message

[rapid merlin]

no 😔

[sick lance]

Then what's it for?

[rapid merlin]

for.......... helping my grandma

[unreal solar]

[rapid merlin]

mb

[sick lance]

What is it it really for?

[rapid merlin]

uh...

my dying grandma asked me to make her a payload

her deathwish ig 🤷‍♂️

[sick lance]

Ok.

I'm going to assume you're either trolling, and/or you're doing something illegal.

We will not help you In the server 🙂

[rapid merlin]

nono it's not illegal

im only trying it out for myself

[sick lance]

It's your word against your actions.

[rapid merlin]

like I won't spread it or anythig

[sick lance]

Your actions win.

[rapid merlin]

damn okay

nice community tho!

its way better than other ones

they threatened me when I asked about it

[sick lance]

No threats here, we just don't assist with anything that is illegal/unethical.

[rapid merlin]

alright I understand, thank you for your time

[prisma void]

@sick lance I've always wondered, do you guys apply international law, or do you guys just use USA law to decide what is illegal; some countries do not have stringent Cyber Security laws, or would you just ignore the question altogether?

[sick lance]

California and UK law.

[prisma void]

Ah gotcha

[naive violet]

Justification is that THM is a UK company and California is the jurisdiction that your ToS agreement with discord sits in

[sick lance]

I was about to write that part. Lol

[molten sky]

was wondering about the cali part. makes sense.

[brisk tree]

morning

[wide marten]

Did you in the meantime manage to actually read the law you linked to yesterday as source for your claim?

Specifically the part a couple of paragraphs below the title where it explicitly states intercepting by any person who is "party to the communication" is "not unlawful"?

It's crucial to read sources before relying on them, or you risk being confidently incorrect 👍

[sick lance]

Are you actually rehashing a debate because you're bored?

[wide marten]

I wanted to know if you found time to read the law you used as a source. Yesterday you hadn't. Pure curiosity.

[sick lance]

I think it's strange you think about me, but there we go.

[molten sky]

don't worry scrubz i think about you too

[brisk tree]

😂

[subtle radish]

hlo evryone

[molten sky]

hlo

[sick lance]

Welcome.

[stuck otter]

I got into the finals for the ctf for Cyber battle Australia. However, im wondering where to look to sharpen my skills for forensics.

There were questions for finding info in wav files, converting pixels to RGB numbers and then decoding a message from that. Along with this star puzzle i still have not figured out and finding the difference between two pictures that look exactly the same or so it seems

[sick lance]

Has this ended?

[stuck otter]

This ended last week on the friday or so

[wide marten]

I got a friend request from a minor. I don't want to accept it because it's a minor but I hate being rude to a young upcoming ethical hacker who id like to encourage to learn as well...

😕

[wide marten]

If the pictures are bitmaps with same resolution you could import them to gimp or Photoshop as layers and play around with different algorithms for merging the layers. "Difference" sounds promising.

[sick lance]

Not really a dilemma.

Refuse and move on.

[stuck otter]

I didnt take a picture of the question sadly, i just saved the files which was provided in two zip files

Both are the same jpg it appears on the surface, but i can try the gimp option

[sick lance]

Have you searched if somebody has done a writeup?

[wide marten]

Might be more subtle and require mathematics, but shouldn't take more than a minute to try.

[wide marten]

For the record: that's what I'm doing.

[stuck otter]

I could prob just ask the discord that hosted it. The event managers havent given any writeups and two teams solved that question

But who knows, i did get the answer for the .wav file one and figured out to use the sonic visualiser tool

[wide marten]

Would be interested to learn what it was if you find it out. Specifically the photo difference thing.

[sick lance]

Is there something hidden in the picture?

I'm no where near my vm.

And I'm not sure if Discord will change anything when you send the picture here.

[stuck otter]

Thats a good point. here is the exact original files that were provided

[wide marten]

Random .zips are always kinda problematic.. personally I don't download and open them on my machine

[naive violet]

Overlay images, change overlay mode to show differences

[naive violet]

Because of zip bombs or what?

Not really any different to most file types

[wide marten]

Because of zips having often been used for malicious purposes in the past. I might be over cautious, just my personal judgment.

[naive violet]

You need a better AV then

[stuck otter]

One of the questions were to find a hidden flag within a .wav file

[sick lance]

Did you get it?

[stuck otter]

That was a fun one, i learnt after the event that i had to use the sonic visualiser tool

Looked like this

[wide marten]

I didn't say I had personally been the victim. Haven't had malware problems in 20 years. Whether that's because it's so rare or I'm so hesitant... idk

[sick lance]

There is a room on THM that had a similar challenge.

[naive violet]

I didn't say you had either. It's a risk mitigation and reduction step.

And goddamn, 20 years is cyber is a whole landscape shift. Get with the times...

[wide marten]

Fun challenge: write a tool in a language of your choice that encodes text in this way

[naive violet]

Just chuck the file into virustotal anyway

[wide marten]

Are polls possible here?

I got the message, thanks all

All being one person.

[sick lance]

I don't even have to check who sent them all.

[molten sky]

it was a demonstration of a discord poll

[wide marten]

I hate the use of "file system" in Linux. ext4 is a "file system", /proc is a "file system", the whole Linux directory tree is "the file system". All different things.

And now I want to coherently explain to somebody what a file system is without being technically incorrect in some way

[wide marten]

I take it you are known to be somewhat of a joker on this server?

[molten sky]

i don't know that word

[wide marten]

Chicanery

[molten sky]

i wonder when my last thm related Q was

[wide marten]

Are you gonna invite more people to the chess[.]com group? Maybe it's enough for a server tournament one day

[pallid lotus]

Already been done, iirc

[molten sky]

the only one i saw had 5 members and was banned

[pallid lotus]

@gray sonnet -- did you not organise one a couple of years back?

[molten sky]

anyone who's around --- only set to private so non thm people don't join, but anyone is welcome

[gray sonnet]

what

Oh

yes

[pallid lotus]

During my time, and I didn't ban it 🤷‍♂️

[gray sonnet]

it just didn't gain enough traction haha

[molten sky]

no, chess[.]com banned it

[pallid lotus]

Oh, lmao

[wide marten]

Because?

[gray sonnet]

does the chess thread still exist?

[molten sky]

not sure of the actual reason but the bio seemed to imply your account being "in play" as well for lack of a better word

[molten sky]

yes

[rapid merlin]

You ranking up 👀 !

[gray sonnet]

yeah lmfao

[rapid merlin]

Oh?, did you get the same color some where else too?

Elite Boi!

[gray sonnet]

I think

[rapid merlin]

Fluff Clan.

[gray sonnet]

hahaha

[rapid merlin]

How many rooms so far?

[gray sonnet]

I honestly don't know lol

[sick lance]

Thread is still there.

[pure ridge]

Yo is anyone familiar with CI/CD pipelines? I have a lil problem

[rapid merlin]

@rapid merlin Hi 👀

@gray sonnet you up?

[gray sonnet]

kinda

sup

[chilly veldt]

morning

[rapid merlin]

I have a joke for you !

[rapid merlin]

Morning Kyooty!

[gray sonnet]

what is it 👀

[rapid merlin]

let me dm.

[gray sonnet]

aight

[chilly veldt]

I should go get ready 😅

[rapid merlin]

what you askin'?

[molten sky]

problem tldr;?

[rapid merlin]

😄

[chilly veldt]

I have a dentist appointment in 2 hours, and it takes 54 minutes to drive there

[rapid merlin]

Hmm, You are Red Teamer. and mod.

you should know.

[sick lance]

#ci-cd-and-build-security if it's the THM room.

Please leave Owlsec stuff to Owlsec.

No drama in here please.

[rapid merlin]

@rapid merlin ^^^^

Thank you Scrubz. ❤️

[pure ridge]

I think there is no problem at all lmao, so I made a pipeline to deploy my code to my server whenever I do a commit/push to master branch on Github (So I can automatically git pull whenever an update happens to master branch), the problem I thought I had is with the authentication(because when I did it manually I had to authenticate via a PAT because I was pulling the code from Github to my server via HTTPS and not SSH) but in this pipeline since I'm connecting to the server via SSH and via Github actions from my repo I don't need to authenticate with a PAT (I guess?)

[pure ridge]

Thanks for telling me But I don't think its related (hope its not way too off-topic from general tho)

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2420)

[sick lance]

It's not related, but it's not off-topic. 🙂

[glossy swan]

hi

[sick lance]

Hello

[glossy swan]

y'all need to make the windows security icon

the mod icon

[sick lance]

Blue shield looks better imo.

[glossy swan]

ugh

🙄

[molten sky]

lets not give windows more than it has

[brisk tree]

the intros for original superman are so long

[tight imp]

@hot cairn

eep

I've been spotted

[graceful thistle]

what are you doing here in this timezone

[tight imp]

can't sleep because anxiety, decided to harass Emma as it's been a while

[graceful thistle]

sensible

[tight imp]

Also it's been a while since I've popped in here

[graceful thistle]

indeed

[gray sonnet]

Eyy Dolphin! Long time!

[graceful thistle]

Hello hello 😄

[gray sonnet]

How are you doing?

[graceful thistle]

how are you doing

good good

[gray sonnet]

I'm doing great 😄 Finally have some time to myself haha

[glossy swan]

putting on glasses after sleeping feels like switching from 144p to 1440p

[tight imp]

Vain, tbh, I'm surprised you're not God level yet

[graceful thistle]

he just upgraded like, yesterday or something?

[gray sonnet]

Nekat! Hai, yeah haha, haven't been doing lot of THM lately

[gray sonnet]

yup, getting back on the THM grind to get god lol

[graceful thistle]

still getting used to blue vain

[gray sonnet]

hahaha, been green for over 2 years haha

[graceful thistle]

ahh great 🙂

[tight imp]

is true, or even like going from fully groggy to splashing some water in your face and rubbing the sleep out of your eyes

[sick lance]

Getting used to a none green dolphin is worse.

[sweet ore]

is cyber sec the reason you wear glasses

[glossy swan]

nah bro I'm just blind af

[sweet ore]

oh

[glossy swan]

-4 on both

[sweet ore]

WHAT

-4 is insane

[glossy swan]

yeahh

but

[gray sonnet]

same here 👀

[glossy swan]

my lens are very thin

cuz I pay the extra

[tight imp]

Hold up, when did community legend become a thing? How long have I been gone for

[graceful thistle]

only a recent thing but it has been 2 centuries at least since you were here last

[glossy swan]

I thought I was -3

[gray sonnet]

a couple years

[sweet ore]

is it reversable in your case

[tight imp]

I'm not... that.... old.... okay I'm old

[glossy swan]

idk

[sweet ore]

have you ever tried not wearing glasses for a long time

[glossy swan]

I have been taking care of my eyes way more than before so it should either slow down the process or improve something

[glossy swan]

yeah

[sweet ore]

how did that go

[glossy swan]

um

blurry

I couldn't see a thing

good thing I have good sense of direction and good memory

it doesn't hurt

wearing glasses doesn't hurt either

[tight imp]

Until you run into something

then it hurts a bit

[slow sail]

Waaaaaa......

[glossy swan]

I broke my glasses once

so

I was blind for a while

then I got quality and strong Oakley glasses

[tight imp]

dayum

[glossy swan]

yeah

they were

expensive

[tight imp]

quality, strong, and $$$$$$

[glossy swan]

but they feel so nice

[glossy swan]

I have one complaint about them

the handles or whatever they are called

are sharp because premium materials

so they dig into the corner of my ear

[graceful thistle]

ow you should get that adjusted

[glossy swan]

noo

it's a normal thing

search up Oakley Pitchman R

u will see

[graceful thistle]

but they can adjust it for you in the shop, why would you choose to stay in discomfort?

[glossy swan]

the handles are adjustable but it doesn't help

[graceful thistle]

hm

[glossy swan]

it's normal tho

[glossy swan]

look at it in images

[graceful thistle]

well.. idk, I had the same problem, got them adjusted. All was good, worth a try Id say

[tight imp]

maybe a bit of sandpaper, or some 3D printed caps?

[glossy swan]

they don't DIG

they just

dig in when I have been wearing them the whole day

just slightly

[tight imp]

yeah it looks like they press

sort of stay on your head by compression sort of deal

[glossy swan]

they stay on your head by hugging your head

[graceful thistle]

put some padding around it? Glasses socks 😄

[glossy swan]

they don't go over the ear

[tight imp]

+1 for glasses socks

[molten sky]

i no like

[tight imp]

We need to start a social movement, #makeDolphinGreenAgain

[graceful thistle]

oh its the other yellow user who doesnt belong in this timezone 8)

[molten sky]

TIL people call it PAT (makes sense tho)

[molten sky]

shush

[arctic cradle]

good morning, new day, new powers to learn cyber security on THM

[pure ridge]

yo there is actually a problem lol

[pure ridge]

        run: |
          mkdir -p ~/.ssh/
          echo "$SSH_PRIVATE_KEY" > ~/.ssh/github
          chmod 600 ~/.ssh/github
          cat >>~/.ssh/config <<END
          Host target
            HostName $SSH_HOST
            User $SSH_USER
            IdentityFile ~/.ssh/github
            LogLevel ERROR
            StrictHostKeyChecking no
          END

      - name: Run deploy
        run: |
          ssh target "cd my_repo/ && docker-compose down && git pull && docker-compose build && docker-compose up -d --force-recreate"

when It reaches the git pull it says Could not read from remote repository. Please make sure you have the correct access rights and the repository exists.

That shouldn't be happenin since I'm connecting via ssh :/

[lament tendon]

Damn, Dolphin to Devil May Cry Man.

What a transformation.

[stray wing]

2024-06-19 16:45:22 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
2024-06-19 16:45:22 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2024-06-19 16:45:22 Note: '--allow-compression' is not set to 'no', disabling data channel offload.
2024-06-19 16:45:22 OpenVPN 2.6.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-06-19 16:45:22 library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
2024-06-19 16:45:22 DCO version: N/A
2024-06-19 16:45:22 TCP/UDP: Preserving recently used remote address: [AF_INET]34.253.19.14:1194
2024-06-19 16:45:22 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-06-19 16:45:22 UDPv4 link local: (not bound)

2024-06-19 16:45:22 UDPv4 link remote: [AF_INET]34.253.19.14:1194
2024-06-19 16:45:23 TLS: Initial packet from [AF_INET]34.253.19.14:1194, sid=19ecff65 7d1f2ff8
2024-06-19 16:45:23 VERIFY OK: depth=1, CN=ChangeMe
2024-06-19 16:45:23 VERIFY KU OK
2024-06-19 16:45:23 Validating certificate extended key usage
2024-06-19 16:45:23 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2024-06-19 16:45:23 VERIFY EKU OK
2024-06-19 16:45:23 VERIFY OK: depth=0, CN=server
2024-06-19 16:45:24 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 253 bits X25519
2024-06-19 16:45:24 [server] Peer Connection Initiated with [AF_INET]34.253.19.14:1194
2024-06-19 16:45:24 TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1
2024-06-19 16:45:24 TLS: tls_multi_process: initial untrusted session promoted to trusted
2024-06-19 16:45:25 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
2024-06-19 16:45:25 PUSH: Received control message: 'PUSH_REPLY,route 10.10.0.0 255.255.0.0,route-metric 1000,route-gateway 10.11.0.1,topology subnet,ping 5,ping-restart 120,ifconfig

10.11.92.231 255.255.0.0,peer-id 109'
2024-06-19 16:45:25 OPTIONS IMPORT: --ifconfig/up options modified
2024-06-19 16:45:25 OPTIONS IMPORT: route options modified
2024-06-19 16:45:25 OPTIONS IMPORT: route-related options modified
2024-06-19 16:45:25 Using peer cipher 'AES-256-CBC'
2024-06-19 16:45:25 net_route_v4_best_gw query: dst 0.0.0.0
2024-06-19 16:45:25 net_route_v4_best_gw result: via 10.0.2.2 dev enp0s3
2024-06-19 16:45:25 ROUTE_GATEWAY 10.0.2.2/255.255.255.0 IFACE=enp0s3 HWADDR=08:00:27:ad:78:47
2024-06-19 16:45:25 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1)
2024-06-19 16:45:25 Exiting due to fatal error

could anyone help me with this error in OPENVPN

it was working fine yesterday. Now, even the autofill(tab) doesn't work with the command 'openvpn'

[graceful thistle]

damn

[devout palm]

Try running it with the "sudo"

[graceful thistle]

lmao

[stray wing]

oh....

[devout palm]

If this doesn't solve it, come #site-support

[stray wing]

sh**

i might be high today

[devout palm]

Lol no worries it happens

[stray wing]

thx

bruh me,

[devout palm]

Ey hi dolph

🐬

[graceful thistle]

hello 😄

how are you

[devout palm]

Great. Just chilling

What about you?

[graceful thistle]

good good

winding down, going to bed in about 30

[devout palm]

how was your day

[graceful thistle]

not too bad, finished up some long running tickets

how about yours, or is it just starting?

[devout palm]

Yep. with a coffee

[graceful thistle]

nice

im already looking forward to my coffee tomorrow morning 😂

[devout palm]

Oh, must be tiring

[devout palm]

Yay. Do you put milk in your coffee?

[graceful thistle]

ah not really, I requested this ticket so I'm happy they gave me the time and space to do it 🙂

nah just black

[devout palm]

I don't like bitter so i do put some milk

[graceful thistle]

fair enough

Im not a fan of milk in general, or icecream type of food. It's the consistency or something, im not sure 🤔

[devout palm]

Oh yeah, you are a vegan right

I forgor

[graceful thistle]

ah I mean vegan milks also

haha

[devout palm]

Oh okay

My sleep schedule is beeped up

[graceful thistle]

how about sugar in your coffee/

[devout palm]

Yes

Both usually

[graceful thistle]

I see I see

[graceful thistle]

how come

[devout palm]

I woke up at 12 PM lol

Need to fix it asap

[graceful thistle]

yeah.. how did that happen

hehe

[devout palm]

It's the reversing challenge

[graceful thistle]

ahhh

[devout palm]

I can't sleep without solving

[graceful thistle]

well, did you learn lots? Have fun? May be worth a little bit of a messed up sleep schedule for a bit 🙂

[devout palm]

Yea it definitely worth it

I wouldn't if it was otherwise

[graceful thistle]

smart

[devout palm]

Well, not intentionally

Depression is an exception

let me not hold you, have a good night

🌕

[graceful thistle]

aww, dw, haha. You take care of yourself!

[rapid merlin]

Why does it look like cheese a bit

[glossy swan]

hi

[sick lance]

@mellow patrol can you dm me please.

I'm not removing the mute until you do so.

[chilly veldt]

Holy fawk, my body is dead after riding for over an hour

Just drove 85km

[glossy swan]

.

my mind is dirty

wow

[sick lance]

Can I take the time to remind you this is a PG13 environment.

[glossy swan]

YEAH I KNOW

im sorr

y

[pallid lotus]

Well that's not at all creepy

[glossy swan]

im

sorry

[sick lance]

Not the first thing I've seen today that is creepy.

[glossy swan]

hm

when can i post embeds

[errant fossil]

im not fully sure but i think its when you verify yourself

[glossy swan]

oh

[errant fossil]

yeah you can from here https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[potent gazelle]

Hello

[errant fossil]

Hi

[potent gazelle]

How often is the discord API updated? Idk where best to ask

[glossy swan]

never