general

[crude stump]

Well

So

Then

Glad to help

[wide marten]

There's programs called hex editors. People who use them will see a lot of hex numbers.
Depends on what you're doing.

[amber kestrel]

:0000000000

[mossy river]

@wide marten Mind if I DM?

[wide marten]

Shoot

[mossy river]

Ty 🙂

[wide marten]

Is that an emoji I don't know?

[crude stump]

I think it’s supposed to mean like a really wide open mouth 😮

[tribal ice]

good evening

how are y'all doing

been a while

[chilly veldt]

me thinking that I can finish fixing my bike today

Gets hit with too small nut

[sick lance]

I hate using LMG's in MWIII

[chilly veldt]

I can technically ride my bike now properly

Buuuut

It's not road legal

[lone thistle]

Oh nice!!!! GL. Scratch up on your road theory, listen on the day and always look where you wanna go 🙂 and you'll be fine

[chilly veldt]

You riding too Ben?

[lone thistle]

Used too. Don't have a bike atm

[chilly veldt]

Ah fair

[lone thistle]

soon™️

[chilly veldt]

Yeeee

[lone thistle]

need to get outta london first

[chilly veldt]

Been riding mine 3 times now

[lone thistle]

how is it

[chilly veldt]

Just finally got the full motor working

And it feels amazing

[lone thistle]

poggggg

first bike?

[chilly veldt]

Yuuuup

[lone thistle]

nice!

[chilly veldt]

Only issues with it has or is being fixed

Vacuum line that was dead and a spark plug not fully plugged in

Now just the back blinkers that are changed out to some retro style ones

[lone thistle]

sounds good 😎 you'l have to send some pics when it's all up and running!

[chilly veldt]

For sure!

[crude stump]

Yall have country roads right?

[chilly veldt]

0-100km/h in 3.4s
Top speed 205km/h

[lone thistle]

yeye but it just doesn't make sense for me atm to have a vehicle. It usually takes longer to drive anywhere than public transport. Plus don't have anywhere secure to store it at home, bike theft is unfortunately pretty big here

Anything two wheeled it's gone before you know it 🤣 i've had two bicycles nicked in a year so i've given up on that as well

[near hawk]

Yep that’s the issue and london drivers are the worst

[lone thistle]

plus everywhere is 20mph. I mean if I had a bike i'm not a speed demon but i'd like to get it out of first gear LOL

[uneven oasis]

Is there a place here to discuss rooms without asking for help? Would that be best placed in this channel or maybe in room help?

[near hawk]

Best bet would probably be room help if you need clarification on a room

[uneven oasis]

not really clarification, just discussing it in general.
questions such as, how useful is this skill in actual pentesting, did you guys enjoy this part/find it is easy, and so on

[near hawk]

I just wanna bike to also skip traffic

[high mulch]

Any big city drivers, are just the worst, from what I've observed over the years.

[uneven oasis]

I'm always super nervous when I'm on a bike around traffic, I have no trust for most of the drivers in the area

[uneven oasis]

I'm in a small place and it's awful too, so many accidents.
People know exactly where all the cops are and all traffic laws are made up if the cops arent around

[high mulch]

Oof

[near hawk]

Still probably best for #room-help 😀

[uneven oasis]

thank you

[twin ridge]

Gave +1 Rep to @near hawk (current: #53 - 135)

[granite field]

elder brother of my friend died from a bike accident. he went out for bike racing and till to this day we couldnt find his body

[uneven oasis]

Wow, I'm really sorry to hear that

[granite field]

drive carefully

[uneven oasis]

yeah for sure, There are some places around where I have to bike on a road where cars drive 90 and the shoulder of the road is pretty small. It's scary

[sand trench]

YAWN

[uneven oasis]

tired?

[sand trench]

yeah

[granite field]

thats scary

[magic sable]

guys

I was hacked laast night

[clear jackal]

KMPH? 90 MPH, if you're in the US, is speeding in every state and on restricted roadways which don't allow cycling.

[uneven oasis]

oh yeah, kmph

[clear jackal]

Change your passwords

[magic sable]

Isnt there anything else I need to do

guy had total access to my pc

I think I gave him my network access or something

[clear jackal]

You can reimage the PC then

[magic sable]

Am not experienced

[clear jackal]

I guess my question would be how do you know you're hacked?

[boreal scarab]

[gray sonnet]

https://tenor.com/view/ree-pepe-triggered-angry-ahhhh-gif-13627544

[proven quartz]

We can't really do much more to assist you. Follow the guidance you've been given and if you think a crime's been committed, you can contact law enforcement

[magic sable]

Lost all my cryptos

[granite field]

im not from US, so in our country in the hilly areas often there are arrangment of illigal racing competition,

[magic sable]

But isnt there any tricks I could try to check if my network is safe now

[proven quartz]

Change your passwords and make sure devices you don't own aren't connected to your router. You can call your ISP or use their instruction manual to figure out how to do that

[boreal scarab]

NJ drivers summed up in 1 short.

https://youtube.com/shorts/jRLKqc1JLVI?si=AZohkOlKaVeTz3D_

@molten sky

And if y'all think "Oh that's just 3 people in 1 short"

No, that's every. Single. Day. Of. Every. Second.

[granite field]

😭

[round escarp]

hello guys i need help

[near hawk]

What you need help with?

[round escarp]

i need to put 2 wireless devices on the same dongle

i tried "unifying" but it doesnt work

[obsidian stag]

hii. so when i have started thm i can able to share room completion on my linkedin. but right now i just solved the new launched ios room, when i try to share it on linkedin it is showing cyber security training as an logo. why i can't able to share the original logo. or is it the default on for that room?

[rotund jacinth]

running archinstall!!!

yea not about do it manually

[clear jackal]

As in you're trying to share your main computers connection with another device? Share the host connection with a VM?

[clear jackal]

I assume you're talking about bridging?

[ashen condor]

hello thmcord

[round escarp]

heuu i want to combine a wireless mouse and a wireless keyboard on the same dongle

[clear jackal]

That only works if the manufacturer of the mouse and keyboard supports it, afaik

[ashen condor]

are they by the same manufacturer?

[elfin tiger]

Hi all!

[ashen condor]

hiya

[rotund jacinth]

i think that should be pretty easy if u use logitech with unifying

[round escarp]

yes yes

[rotund jacinth]

there is a logitech unifying software

https://support.logi.com/hc/en-us/articles/360025297913-Unifying-Software

[elfin tiger]

If I use my university email address, and once my studies are finished, can I re-change the email address back to my personal email?

[rotund jacinth]

just follow the instructions

i think you can have up to six conneted to one dongle

[round escarp]

yes i tried but the software does not detect the dongle

[rotund jacinth]

probably

[elfin tiger]

Well, makes sense. But can anyone please confirm?

[clear jackal]

Is the model of dongle supported?

[lone thistle]

yes you can change the email whenever you like, but naturally, you will lose the student discount

[round escarp]

yes

[rotund jacinth]

try buying a new dongle?

[elfin tiger]

Well, after uni, I probably wouldn't be eligible for the student discount (imo)

[lone thistle]

aye:)

[rotund jacinth]

they're, like, 12 bucks

[elfin tiger]

yeah

[rotund jacinth]

(on a 49% discount tho)

[elfin tiger]

nah

[rotund jacinth]

for me?

[elfin tiger]

14 USD per month

10 USD per month if paid anually

[lone thistle]

but all in one lump sum if done annually just to clarify^

[rotund jacinth]

mb i meant that the unifying recievvers are $12

[lone thistle]

ah 😄

[elfin tiger]

lol i misunderstood ya

[rotund jacinth]

lol

[pliant beacon]

hey i am doing the new ios room and im stuck on the last 2 questions. can anyone point me to the right direction

please

[rotund jacinth]

im new here but i think u should use the room help channel

[pliant beacon]

my bad i thought i was there haha thanks

[rotund jacinth]

no prob!

[wild rose]

#1253001803822399669

[loud marlin]

@boreal scarab
https://www.reddit.com/r/ender3v2/comments/n3clew/ender_3v2_422427_board_tmc_uart_mods/ might be cool for you

[chilly veldt]

@lone thistle just on a trip right now, Damm she feels amazing after getting the motor to run 100% it's so smooth

A bit scared about the acceleration, but need to get used to that

[minor valley]

does anyone know how someone was able to put up a seo backlink to the following url?

https://alaronastudio.com

[errant fossil]

was just trying capture the flag on thm, and it had different things to translate into like hex and base. and i dont really know what any of those things mean as i am not there yet so does anyone have a resource where it lists all these and thier meanings and when to use them?

[sand trench]

hexadecimal
base64

is more or less just math

hexadecimal is used because it handles conversion to binary easier

[errant fossil]

im terrible in math

[sand trench]

well maybe

[errant fossil]

anywebsite or source that has all these listed?

[sand trench]

well no as technically there is infinite number bases

i.e as many natural postive numbers that exist you can turn into number bases

though would think there is a lot of math resources on google or youtube if you search for number bases math

[errant fossil]

so what are these called and how do i identify if this is hex or this is base or ik morse

[sand trench]

hexadecimal uses 16 symbols to represent numbers from 0-15

base64 uses 64 symbols to represent numbers from 0-63

binary uses 2 symbols to represent numbers 0-1

those are the most common outside of base 10

technically there is octal too but has been ages since shadow saw that used

[errant fossil]

Alr so imma just note this down

[sand trench]

octal being 8 symbols from 0-7

[sand trench]

go for it

[errant fossil]

And when and where did you learn this ?

is it on thm?

[sand trench]

math classes in year 8 in school

[errant fossil]

lol i did not pay any attention back then

[sand trench]

fair enoughs

think that briliant.com might have good math resources on this topic but not sure

[errant fossil]

guess its time to learn the math again

[sand trench]

yeah

[errant fossil]

alr imma give that a try

Thanks a ton

[sand trench]

no problem

enjoy learning math

[errant fossil]

ill try

[pine stratus]

is learning number bases important in infosec ?

[sand trench]

depends but it tends to help with things like intergers and encoding formats

and booleans

[buoyant tree]

stoppp teaching..

[wide marten]

Anything between "never touching them" and "working with them daily" is possible

[sand trench]

why???

[buoyant tree]

Although don't think b64 has 64 symbols

[wild rose]

get good

[buoyant tree]

It's more fun

too tired

[buoyant tree]

Doesn't b64 use = and a-z

[sand trench]

0-9 + a-z + A-Z + 2 others

[wide marten]

From RFC4648

[wild rose]

you just need to recognize the difference between the encoding and which one is used where.

[buoyant tree]

forgot b64 had numbers and +/

[elfin tiger]

Can someone please tell me the best way to begin the hacking study part after doing the foundational studies?

Ping me pls

[buoyant tree]

usually identify it by trailing = or ==

[buoyant tree]

#start-here And you can follow the pathways

[wild rose]

yup

[buoyant tree]

.

[sand trench]

if you want weird look at base32 encoded data

[boreal scarab]

The amount of stupidness I see on youtube shorts

[sand trench]

A-Z 2-7

[sand trench]

fun stupidness???

[boreal scarab]

Fun OSINT stupidness

Guy decided "Hey, let me show you my badge.... with my name on it" Then another video "Hey, let me show you where I work"

https://tenor.com/view/bruh-meme-gif-26978290

[high mulch]

Hi, I'm hacker. proceeds to do some basic OSINT

[buoyant tree]

Hey, let me show you my home.

[wild rose]

MTV Cribs

[sand trench]

'ey let shadow show you their hospital

[boreal scarab]

No doubt there is a short.

Of course, this is all for fun, y'all aint getting the video, the name, or anything from me.

[sand trench]

oh wait it is illegal to record in here

[boreal scarab]

oof

[sand trench]

why oof??? it is a good thingy you no record in hospital

[wide marten]

A German youtuber managed to sneak into the opening game of the euro 2024. Among other sources he looked for badges on social media.

[boreal scarab]

But I can't do OSINT on you, I cry. Nah, jk lol

[high mulch]

Yeah, the amount of people I receive at work (I work in a customer service job) that give me their social and they don't even notice it... omg... how do they make it to this point in life... How are they alive?

Mind you, the procedure I'm charge of, doesn't require social, just ID.

[boreal scarab]

Welp, got their instagram. jesus, guy is making it too easy for me

[sand trench]

but you already knows shadows home town beeris

[boreal scarab]

True

[blazing granite]

@boreal scarab OSINT again? 😂

[boreal scarab]

https://tenor.com/view/robert-downey-jr-tony-stark-gif-26471287

Already got his age, address, where he works, ....... like JFC do people not care about that?

[sand trench]

always ask HR where the nearest resturant that the workers go to is

makes it easy to clone near field communication badges

[errant fossil]

btw what is this topic called?

[boreal scarab]

I'm just at a loss of words how simple it was to get it just from 2 shorts

I can't even speak.... this is just..... wtf

[sand trench]

not complety sure but something alined to number bases

[errant fossil]

Thats the word i was looking for, Thanks again

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1777)

[uneven oasis]

Is learning the same for you guys as well where any new concept is strange and confusing at first, then frustrating and infuriating when trying to execute it and then when you finally figure it out it's greatly satisfying

or is it just that I'm always getting it wrong and first and getting super annoyed

[errant fossil]

that is the best part about learning

[uneven oasis]

yeah it's real good when it finally clicks

[errant fossil]

https://tenor.com/view/noice-nice-click-gif-8843762

[shadow loom]

only for things I don't want to learn or that I am told that I need to learn but have no drive to learn

[uneven oasis]

So you never find it frustrating when things aren't working as you think they should?

here in infosec and tryhackme that is

[granite field]

Is it too late to start for a high school grader to start their journey on this field(cyber security)

[wide marten]

No

[granite field]

When did you guys started your journey

[uneven oasis]

maybe a week ago

[rotund jacinth]

ofc not

ik a lot of ppl who were in different fields for around 20 years before switching to it or cyber

[terse edge]

I had to share that

[granite field]

That's nice

[rotund jacinth]

💀

[uneven oasis]

It's a dome on top and bottom on the flat earth so the air is in a sphere /sarcasm

[rotund jacinth]

there should be a programmer meme channel

[terse edge]

So if the Earth was Flat, you should be able to see from one end to the other end using a really powerful telescope. why can't we?

[rotund jacinth]

uhhh

[granite field]

Yea

[rotund jacinth]

bc earth isn't flat?

[uneven oasis]

Trees are in the way

[terse edge]

What about the ocean

Why can't you see england from nyc using a telescope?

no trees there

[uneven oasis]

because no 1 willingly looks at the british

[terse edge]

good point.

[shut hawk]

ow

[rotund jacinth]

💀 💀

[uneven oasis]

I feel like I should apologize to the brits but then I'd have to talk to them and I wouldn't want that

[rotund jacinth]

💀 💀 💀

[uneven oasis]

(jokes aside i've been to england a few times and had a great time, beautiful country and lovely people)

[shut hawk]

https://tenor.com/view/british-gif-26077384

[wide marten]

I was wondering whether that would be possible on a flat earth. It's close. Ireland in the way of most of England.

[terse edge]

Ok pick Ireland

[uneven oasis]

Isnt there an issue with trying to see too far over water? iirc at least scientific experiments using lasers or optics above water has issues due to refraction

[terse edge]

You can't see Ireland from NYC

[shut hawk]

yes u can

[terse edge]

Prove it. Show me a picture

[shut hawk]

boom

[terse edge]

facepalm

[shut hawk]

https://www.forbes.com/sites/conormurray/2024/05/19/the-viral-dublin-new-york-portal-reopens-after-6-day-shutdown-over-flashing-inappropriate-behavior/

[uneven oasis]

didnt they turn that off after the topless incident?

[wild rose]

lolz

[uneven oasis]

oh nvm, you answered before I even asked the question lol

[wild rose]

It's reopened. They placed a queue rope and a security guard there.

[wide marten]

Can't have nice things...

[near hawk]

@mossy river ^^

[mossy flower]

apologies sir

[shell nova]

Clearly, the earth is a large disk, sitting on the backs of 4 giant elephants, which in turn stand on the back of the Great A'tuin, the World Turtle.

[terse edge]

Reminds me of Shaman from Year One movie

When the turtle climbed out of the sea with the Earth on its back.

https://www.youtube.com/watch?v=mQOjAki8TLk

[near hawk]

I dislike how much my room gets insulated

Gets too hot

[shell nova]

Was about to ask which one, but physical, gotcha

[high mulch]

I had the same thought.

[shell nova]

Well that one went whoosh...oh well

[terse edge]

It was a fun movie.

[shell nova]

Might I interest you in the works of our Lord and Saviour, Sir Terry Pratchett?

[lone thistle]

not at all. a very good time to get into it. it's only going to grow and grow

[shell nova]

I started about 6 years ago when I was 34

Though I had a good start as a développer before then

[near hawk]

Bedroom, especially with UK heat

[granite field]

Thanks for the inspiration

[rapid merlin]

How do i install BEEF on Kali. And dont send me a link haha.

[shell nova]

Heh, I was melting at the office today

[shell nova]

Isn't it already there? Also isn't it terribly obsolete and borderline useless these days? Also also, what do you actually want to do with it?

[rapid merlin]

No. I thought it allows you to access a computer thorugh a malicious link. If im wrong, please correct. I have no idea haha.

[shadow loom]

is there an actual mentor program at THM or is it just a vanity role on Discord for smart people?

[shell nova]

Mostly recognition for those who like to help a lot

[shadow loom]

cool

[molten sky]

I like birb's definition tho

[shell nova]

If you intend to go through with that, then I must warn you that accessing a machine you do not own without the express legally binding consent of the owner is illegal and can be sanctioned with stiff fines and/or jail time

[rapid merlin]

oh

[shadow loom]

vanity role for smart people?

[rapid merlin]

mb

[shell nova]

I mean....

[crude stump]

Yall ever check the stocks of cybersecurity companies during a time of war. It’s crazy how much wars increase the market

[molten sky]

ww2 brought us out of the great depression, so yeah

[shadow loom]

I'm the kind of smart that 50/50 shares knowledge and just has fun (memes around)... I'd never get that

some people go "how do i nmap my toaster" and the always-serious-helpers-with-vanity-roles do their best to explain what nmap does and why a toaster cannot possibly respond to a port sweep

[shell nova]

Depends on the toaster these days tbf

[shadow loom]

me? I'd give them a command to try to run over IPoAC

true true

[shell nova]

I'm sure there's a smart toaster around

[shadow loom]

100%

[shell nova]

Avian carrier?

[shadow loom]

and if that was the case I'd be 1000% invested in helping them hack it

[shell nova]

Airborne crust?

[shadow loom]

correct

High data volume, high latency

No packet guarantees

[sick lance]

https://england-gb.desertcart.com/products/591108157-revolution-r180b-high-speed-touchscreen-toaster-2-slice-smart-toaster-with-patented-instaglo-technology-panini-mode?gad_source=1&gclid=CjwKCAjwg8qzBhAoEiwAWagLrLX-7Hv6f8k1Pe4nnBW3DRAXI_ocZw657usDNPP2M7y-UBzCcujBFBoCmd8QAvD_BwE

[shadow loom]

https://datatracker.ietf.org/doc/html/rfc1149

it's a thing

[shell nova]

Just gotta remember to stay on the legal/ethical side of things, and also that newbies will tend to take you seriously even when we all know it's meant to be a joke

[near hawk]

This is where it starts to get real

[shell nova]

There was a successful experiment a while back

[rapid merlin]

i hate chatgpt 🤷‍♂️

[shell nova]

That one definitely has too many ports open

[shell nova]

I'm sorry

[sick lance]

Putting bread in the toaster so you can start via Wi-fi on the ride home to save you 30 seconds

[shell nova]

But can it run Doom?

[south sonnet]

just wait until it starts advertising itself as the DHCP server

[shell nova]

Imagine running doom at 90.seconds per frame via images in burnt toast

[shadow loom]

people have run doom on .. was it a pregnancy test? or a toothbrush? both?

so why not

[wide marten]

Geoguessr?

[near hawk]

Yep

[shell nova]

And by the rules of the internets, someone somewhere has done this

[near hawk]

I lost 😦

[sick lance]

What haven't people tried to run Doom on?

[near hawk]

I need to refresh my memory on geotips

[shell nova]

Was going to say an ultrasound machine but that's been done

[sick lance]

You use that tool 0day shared a while ago?

[shadow loom]

don't tempt them.. I'm sure there's Doom running on one of the buttons of a Streamdeck somewhere

[wide marten]

Lost its appeal for me with everyone studying meta instead of real geo knowledge.

[shadow loom]

HAHAHAHA

[near hawk]

Yea, it kinda has gone down hill especially as you need a subscription to play

[shell nova]

Look up HTCPCP

Can't remember the RFC number off hand

[shadow loom]

god that's so dumb

[near hawk]

Geospy?

[sick lance]

Ye

[rapid merlin]

i wonder if lockheed martin will make an ad about an f35 pilot playing doom on the interactive panel

[near hawk]

I use it time to time but not for Geoguessr

[shell nova]

RFC 2324

[near hawk]

Tryna become the next rainbolt

[shell nova]

Extended by RFC 7168

[boreal scarab]

I should expose Telnet to the internet 🤔

[south sonnet]

the release date perfectly matches what i was expecting

[shell nova]

That reminds me I need to get The Java Machine back on track

[shell nova]

Please don't

Unless it's a honeypot

[boreal scarab]

[wide marten]

RFC4824

[shell nova]

Isn't IP a binary protocol though

[south sonnet]

https://datatracker.ietf.org/doc/html/rfc2549

[shell nova]

Suppose you can base64 first

[boreal scarab]

Don't worry. I exposed something far better. FTP!

/j

[hot cairn]

you mean ssh

lol

[shell nova]

You're asking for trouble, try harder

[boreal scarab]

That beautiful data

[shell nova]

FTP is too easy

[hot cairn]

your internet is slow

or honestly, the peering is bad

is most likely shitty peering

[boreal scarab]

Are you going to complain about my router again? XD

[wooden totem]

I got a random idea just now about a learning app that looks at your screen the whole time and you can ask it stuff with the voice and the AI whatever app would show on screen instructions or tips in real time as you do something so you learn quickly idk. Just a random thought

[shell nova]

Isn't that plagued by the same issues recall is?

[wooden totem]

I'm not familiar with recall

[boreal scarab]

Well, Recall got recalled

[wide marten]

From the same rfc 😂

[south sonnet]

windows recall which was recalled due to how pissed people were

[boreal scarab]

https://www.wired.com/story/microsoft-recall-off-default-security-concerns/

[wooden totem]

isnt that just a recorder with extra steps

[south sonnet]

basically what you suggested take screenshots analyze and store them. Lookup when user asks for info

[rapid merlin]

guys i cant join koth it says

Uh-oh! Only intermediate and advanced experienced leveled users can play King of the Hill.

does anyone have idea

[sick lance]

Need to edit your profile

[rapid merlin]

how

[sharp citrus]

KOTH: Creating a game

Article Link

https://help.tryhackme.com/en/articles/6495991-koth-creating-a-game

Jun 19, 2024, 9:17 PM

[rapid merlin]

add full name?

[wooden totem]

I was more thinking the app guiding you than the app just remembering the stuff that you do

[sick lance]

No, there is a part where your level

[rapid merlin]

im lvl 4

but my friend says 1 lvl can join to

and i even have premium

[shell nova]

Also is weakly stored and can be remotely viewed by unauthorized third parties

[shell nova]

Experience level, not thm level

[rapid merlin]

where can i see my experience level

[sick lance]

This part.

[shell nova]

Should be on your profile

[boreal scarab]

https://tenor.com/view/flashbang-flash-cat-betterttv-gif-10690574645280585754

[shell nova]

That part yeah, thanks scrubz

On mobile, hard to fetch things

[sick lance]

I'm on mobile

[rapid merlin]

OH GOD THANKS

❤️

[shell nova]

Yeah but I don't have my 2fa key on me right now

[rapid merlin]

thanks so much guys

[sick lance]

You'll need to verify to join #koth

[rapid merlin]

i did it now i can join

god thanks

im so happy rn

[shell nova]

Glhf

[sick lance]

I meant the channel on discord.

[wooden totem]

I bet something similar is coming in a few years, the concept just sounds so cool

[shell nova]

Sounds bloody spooky to me

[sick lance]

Sort of can do this with the metaverse 3.

DIY while looking at the manual as you build.

[shell nova]

Ugh I hate that name for that concept

[sick lance]

Vmware and critical, name me a more iconic duo.

https://www.helpnetsecurity.com/2024/06/18/cve-2024-37079-cve-2024-37080/

[wild rose]

I've been dealing with this since Monday. Most servers are patched now.

[acoustic ingot]

hi

[shut hawk]

oh no

I just got my first google generative AI response...

I thought this was US only...guess they've branched out

[silent gulch]

hello , im new here , im new to cybersecurity , i just started , and during my first session , the one named intro to offensive security , in the task number 2 , i have to submit the amount of money i have in my fake bank account after hacking bank named fakebank , its clearly 767.68 , but when i write it like that , it tells me its wrong , i dont see where the mistake is , pls somebody help ? thank you

[sick lance]

It's not looking for a total, but a flag.

[somber oxide]

is there any challenge room about moodle on tryhackme?

[silent gulch]

a flag ?

[hot cairn]

Adding non toxic glue to pizza?

[wide marten]

A bit of text, probably starts with THM{

[crude stump]

A flag is like a hidden message that you find after you successfully hacked into or just hacked

Something

[errant fossil]

Hello

[shut hawk]

kek no was asking about some DHCP stuff

[silent gulch]

oh alright ill try the flag tnx

[wide marten]

So the LLM answer only summarizes one classical search result?

[shut hawk]

for that specific query looks like it

[buoyant tree]

that does seem accurate

[crude stump]

Duckduckgos LLM only summarizes Wikipedia pages. Pretty stupid

[floral abyss]

should be able to change terminal settings, or else save the output to a file.

[shut hawk]

Honestly would prefer this over random sites

[mossy river]

Smart*

[crude stump]

Bruh

[shut hawk]

Why is it stupid?

[crude stump]

Cus it’s Wikipedia

[shut hawk]

???

[mossy river]

HUH?

[shut hawk]

You're not serious, right?

[crude stump]

How accurate is Wikipedia to a actual resarch page

[mossy river]

wut.

[buoyant tree]

Wikipedia is accurate

[shut hawk]

1. Wikipedia literally takes information from research articles, and cites it all at the bottom
2. How accurate are random sites compared to Wikipedia?

[crude stump]

It shouldn’t be random. It should be actual creditable sites

That I do agree with

[lone thistle]

accuracy can be argued with. For example, in uni here in the UK it's frowned upon as using that as sources

[south sonnet]

I always just tee that to a file so i can look into it later.
But usually terminals also have a option to increase the scrollback buffer

[crude stump]

Same with us schooling systems

[floral abyss]

But the source listed in the references are fine.
edit: Mostly

[lone thistle]

aye yes

well, if you read them and are reputable

but directly quoting from wikipedia & referencing is not good. but generally for info wikipedia is alright in my experience. But won't beat actually finding papers and reading them ofc

[crude stump]

It all really comes down to researching the resources you are using

[mossy river]

Mhm but what isn't frownd upon is finding the primary sources that Wikipedia cited hehe

[shell nova]

It's surprising good, especially as a jump point

[lone thistle]

no that's fine

[shut hawk]

I still fail to see how summarising the wikipedia articles is stupid?

[lone thistle]

at masters it's a bit more "you need to be finding them"

[crude stump]

Primary sources are the best of t he best

[lone thistle]

not stupid per se, but it's better academically speaking to go to the direct source and summarise yourself rather than using someone elses summarisation for example

[crude stump]

How do you know the llm is summarizing a actual good (accurate) wiki page

[proven quartz]

You're free to conduct your own research and composite your own answers, no matter how wrong they are, without expert assistance

[shell nova]

Everyone is going to be using gpt these days, smh

[shut hawk]

I agree with that, but the original argument was about DDG LLM using it as the source as opposed to other sites

[floral abyss]

Doesnt the internet work like when you post something thats wrong instantly 1000 people will jump on it to correct you. Thats wikipedia nowadays?

[lone thistle]

oh fair. idk sorry I just joined in the convo very late and saw about using wikipedia as sources haha

[proven quartz]

It looks like ChatGPT use tends to slow dramatically as soon as school semesters end, so that seems to be the prime use for it

[shut hawk]

npnp, btw signing up for the FREC3 course 👀

[lone thistle]

OH NICE

[rapid merlin]

hello guys

i just have a question about Internet Protocols

[proven quartz]

While you wouldn't reference wikipedia, you can explore and reference their sources

[lone thistle]

you doing a combined course or over weekends etc?

[rapid merlin]

why do we have IPV6?
why dont we just stick with IPV4?

[floral abyss]

running out of combinations

[shut hawk]

uhhh the 5 day one, not too sure about specifics rn

[crude stump]

Damn it

[crude stump]

You beat me

[floral abyss]

Now i can change my expertise to intermediate on profile.

[proven quartz]

IPv4 was hitting its limits before someone decided that NAT could serve most peoples' needs

But there is only just over 4 billion addresses and about 3 billion useful ones

[umbral bay]

Surprised? 😄

[rapid merlin]

oh wow

[lone thistle]

yeah fair fair. 5 days is the general duration of it but you have ways of say doing a week course or over say 3 weekends depending on the provider. GL and lemme know if you have any questions 😄

[shut hawk]

Aah I see now, I do - how intense did you find it?

[proven quartz]

No, the limitations have been making themselves real like some in the AI field predicted years ago

[whole yew]

Wikipedia is a good place to start, but since it's community edited, do not trust it to be completely accurate if you care about correctness. Use wikipedia as a starting place, not as the primary reference.

[crude stump]

How close are we to actually using all of them

[whole yew]

Citing wikipedia for an academic paper is almost always a terrible idea

[proven quartz]

That's why you need a 10.x.x.x or a 172.16.x.x or a 192.168.x.x address range in your home or company a lot of the time

[crude stump]

Yeah that’s what I’ve been taught

[umbral bay]

I like to see some robust implementations of Qualitative AI that actually "learns" 😄

[rapid merlin]

are those just a list of ranges for local ips'?

[lone thistle]

a lotta info dump. Experience helps ofc. Common sense and listening wiith good note taking

[umbral bay]

Air-quotes very appropriate when mentioning "AI".™️

[lone thistle]

the tricky thing for me was more the theory than the practical elements especially for the assessment

[proven quartz]

Well it's difficult to say. All the usable ones are at least under control of companies or goverrnment organisations but they can lease small subnets

[proven quartz]

They're considered reserved network ranges that you can use in private networks not directly connected to the internet

[lone thistle]

Is that the SJA one you booked, Jayy?

[rapid merlin]

mhm i see
also another question sorry
do both protocols change from time to time or are they both static (IPV4/IPV6)?

[crude stump]

Theoretically we did use all IPv4 ips and there wasn’t a back up plan like ipv6. What would happen?

[shut hawk]

Should I be making flashcards to memorise as much as possible? Or focus more on trying to understand why?

[umbral bay]

I'm waiting for the day when one AI charges another AI for algorithmic plagiarism. 😉

[shut hawk]

Affirm

In London

[buoyant tree]

AIception

[proven quartz]

We're now at the stage where someone has proposed just skipping over the next big goal for AGI and going full belt for Superintelligence... Like yes, let's use a black hole as a power source before we've figured out how to fly that far

[umbral bay]

Let's start really small .... skip .... unlimited power.

[terse edge]

https://tenor.com/view/unlimited-power-star-wars-gif-10270127

[shut hawk]

Ooh is this the uhm cracked team?

[proven quartz]

Most of what you'll see is IPv4. IPv6 is a different protocol stack and they're not directly compatible. A computer can participate in both networks simultaneously (capacity pending)

[terse edge]

dual stack

Or tunnel/encapsulate one within another

[wide marten]

Nothing dramatic at first. ISPs and other companies couldn't be assigned new addresses anymore. It would slow down growth. AFAIK that's been the case for years already.

[lone thistle]

It's a lot of knowledge test & decision making generally for FREC3. The practical assesments are more ensuring you don't do it wrong if that makes sense?

[lone thistle]

nice nice. LMK how it goes. It's basically brand new to SJA so should be good.

[proven quartz]

Yeah, let's jump an impossible technology with no theoretical objectives and go to the thing it could turn into. We'll just need all the fuel and building resources, and lots more compute

[shut hawk]

Feel like I'll be the youngest there 😆

[crude stump]

That’s nice

[proven quartz]

Yeah, it's just more bull before the bubble pops from what I can tell

[lone thistle]

Plus LAS are changing their roles quite a bit. More info in DMs if you'd like but good opportunities coming up

[lone thistle]

Probably. Though it is June so you'll have some coming in preping for the uni pathway i.e. paramedic science

[rapid merlin]

i see
thank you for your time
also im just starting ethical hacking and i dont know alot about some computer facts
you also have other sources i could use from + TryHackMe website

[twin ridge]

Gave +1 Rep to @proven quartz (current: #21 - 390)

[buoyant tree]

Ben, how many rewatches of the x-files are you on

[boreal scarab]

IPv6 stinky

[lone thistle]

3

[buoyant tree]

Debating starting my 3rd, rewatched it in December only

[lone thistle]

halfway through 4

[proven quartz]

There's lots of stuff about Linux and Windows and Networks to get you started. Search for them in the Walkthroughs section

[shut hawk]

Oh good point

[blazing granite]

a necessary evil 😂

[rapid merlin]

ya,man
that's what scares me
just SO much stuff to learn but i hope i'll do it
Thanks have a good day!

[proven quartz]

Best of luck and have fun

[wide marten]

`Reserved IPv4 address blocks in IANA (Internet Assigned Numbers Authority) ran out on February 3, 2011. And the free pool of IPv4 addresses held by APNIC which is RIR in the Asia Pacific region ran out on April 15, 2011. In addition, the free pool of IPv4 addresses ran out in RIPE NCC (September 14, 2012), LACNIC(June 10, 2014) and ARIN(September 24, 2015).

This does not mean we will not be able to use the existing IPv4 Internet after the address pool runs out, but there are no more unallocated IPv4 addresses available from the Regional Internet Registries.` https://www.nic.ad.jp/en/ip/ipv4pool/

[buoyant tree]

Oi @blazing granite , mind shooting me some lingustics books in DM, like why language evolved and how it even works on the low level for beginners

[rapid merlin]

hey man you mind if i add you?

[boreal scarab]

Cant tell. which device is using the most data?

[buoyant tree]

probably the green one

is that pihole

[umbral bay]

Maybe they should resolve the measurement bias first, instead of loading up on quantity.

[blazing granite]

without the reference color chart definetely you can't 😉 😂

[proven quartz]

Well you can ask any questions in the appropriate channels. I'm not always available but there's lots of helpful people in the Discord. There's also a lot of discussions of various topics if you use the search feature. You should verify your account

[boreal scarab]

Does this help?

https://tenor.com/view/failure-boo-simpsons-zero-gif-17012756229140509599

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jun 19, 2024, 10:24 PM

[buoyant tree]

How does SSH take that much bandwidth unless you were using scp

[blazing granite]

ssh? 😂

[boreal scarab]

https://tenor.com/view/magic-gif-26166638

[boreal scarab]

Gotta move files around

[buoyant tree]

https://tenor.com/view/stop-it-get-some-help-stop-gif-15995092

[clear jackal]

It doesn't work if you're in a web browser on mobile, Subtlety. If that's how you're using discord currently

[buoyant tree]

wonder if it's feasable to move that amount of data directly over ssh in text

[boreal scarab]

[buoyant tree]

encode a ubuntu desktop iso in base64, copy it over the shell session and see if it breaks

[clear jackal]

Otherwise it's now a /docs search: verify

[proven quartz]

Oh they've got all the data humans can produce. They've reached a stage where there's no new data to farm, just a lot of repetition of previous stuff, so they're thinking they can have the ML algos generate the data (the same as how AlphaGo played more games than humans in thousands of years of history) and that that combined with lots more compute will solve most of the issues and lead to the machines eventually solving themselves

[boreal scarab]

I just touch it and it breaks

[whole yew]

if you have an actual job opportunity to offer, please contact one of the Discord Admins to verify your recruiter status to post to #jobs-board

[buoyant tree]

attempting encoding a 20 gb file in base64 then copying it over the shell session

[proven quartz]

Ah I didn't realise they'd changed it 🙂 Thanks for the info

[twin ridge]

Gave +1 Rep to @clear jackal (current: #19 - 409)

[boreal scarab]

https://tenor.com/view/skillissue-skill-issue-gif-22125481

[proven quartz]

We can't all crash systems with your flare tho 😛

[boreal scarab]

[sand trench]

huh apparently fzf has shell intergrations

for things like ctrl + r history browsing

[high mulch]

[south sonnet]

yeah i've been wanting to try it out. fuzzy finding is history is really useful

[umbral bay]

We need the Data Discernment Protocol™️, to solve the outdated data problem. 😄

[sand trench]

install fzf
run source <(fzf --bash) or source <(fzf --zsh)
make sure to have a history ammount and append set in rc file

i.e it is not hard

[south sonnet]

yeah it's just that I forget to do that when I'm on the VM.

[sand trench]

ah fair enoughs

shadow is more questioning if they should use it on their daily driver

[south sonnet]

couldn't hurt I mostly daily drive windows due to various reasons so don't really have a use for it on that

[sand trench]

to each their own

[south sonnet]

on windows barely run like 10 command so the regular that are easily accessible by regular history search

[sand trench]

linux simply does everything shadow needs and at a faster and nicer pace then windows 10 and not touching windows 11 with recall

[vital arrow]

I have a question about the site..

[sand trench]

scratches head why cewl is still borked

[south sonnet]

what part though? I don't see any active issues on their repo that would suggest it's broken

[vital arrow]

Why can’t I see my machine that is started when in a room? There is also no option for split screen.

[sand trench]

every time shadow tries to run it it complains about no existing json bundle for ruby

could be because shadows ruby verison is significantly newer then the one used by cewl

[sand trench]

some target machines don't launch split views and you are meant to attack them in other ways

[boreal scarab]

@umbral bay I'm doing THM rooms again, are you proud? 🥺

[hardy mica]

You can still disable recall

[sand trench]

if you don't wanna spin up your own kali linux vm the route forward is hitting the start attackbox button

[south sonnet]

The one problem i usually have with ruby stuff is that it doesn't install dependencies automatically I usually have to go manually install them.

Now i wonder if there is a pipx like program for ruby

[sand trench]

gem

by default installs ruby packages as more or less standalone and only in user space instead of system space

[south sonnet]

does it isolate the environ though. I honestly have no idea how ruby deals with dependency hell. But gem pretty much always has failed to install dependdecies. Probably due to me doing somehting wrong

[sand trench]

not sure

[south sonnet]

yeah I guess I had to use bundle instead of gem

reading the documentation helps who knew 🤷‍♂️

[proven quartz]

I don't think there's enough poorly paid people in third world countries to make that work...

[sand trench]

feels like the amount of poorly paid people in third world countries decreases by multiple promil every few months

[buoyant tree]

Does this seem stupid to me or is it really.
Sending a password in plain text via HTTPS to a api that hashes the password in MD5
then the second request sends the password hashed with the response from first request then another request for the username

[sand trench]

well yeah that sounds like a security risk

[buoyant tree]

What would the security risk be except the plain text password

[sand trench]

plaint text means that if anyone can sniff the connect they can impersonate users or admins by login into the user

the second part is using md5 which is no longer considered good enough for password hash storage

the third is sending user data to an api that could potentially be exploited if you send it the right data as the password variable

the third one is hard to know if it exists or not so maybe scratch that depending on senario or info

[high mulch]

||Are you a vulnerability? Because I want to exploit you. ||

This actualised slay.exe ⚠️

[hardy mica]

https://tenor.com/view/shocked-surprised-gasp-what-cat-shock-gif-635629308990545194

[crude stump]

Brotha

I think “exploit” is the wrong word here

[buoyant tree]

Thanks, sending a email to my bank right now.

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 1779)

[buoyant tree]

First felt a lot off due to the highly weird implementation

[sand trench]

yeah banks are generally weird

and can be security nightmares

[hardy mica]

your bank use MD5?

[sand trench]

also their bug bounties is a mess

[hardy mica]

wut

[sand trench]

can get you into a lot of trouble

[buoyant tree]

It's a third world country

What can you expect

The website UI was last updated in 2014

[hardy mica]

wait a sec

my dog is barking at other dogs

[high mulch]

noice

[wild rose]

I would move your money first, so they don't lock your account in retaliation, etc.

[crude stump]

Sounds about right

[hardy mica]

not at 2am

he wake up just to bark

i mean , bah

[buoyant tree]

The balance is pretty low. so no worries there

[hardy mica]

well you outsmarted them with this move

You can't steal me if im poor

[sand trench]

spooky scary skeletons

[boreal scarab]

@sand trench I has mozzarella sticks!

[sand trench]

nice

fried or none fried-???

[hardy mica]

nono . He wake up , he bark at another dog , he goes back to sleep.
Dumb Dog

[boreal scarab]

Fried

[buoyant tree]

Baked one's are meh

[hardy mica]

https://tenor.com/view/cat-meme-face-cat-meme-cat-puke-cat-vomit-cat-coughing-meme-gif-22332765

[wild rose]

I thought non-fried are regular sting cheese?

[hardy mica]

i go back studying NTDS.dit attack , see you later guyz

[hardy mica]

yes tbh

[high mulch]

sounds/seems like a magnificent life.
lol

[hardy mica]

nah, it's magnificent life when you don't want dog food and my mom gives you steak

that is a magnificent life

or when you are a dog but you have a memory form bed

i should have taken a chiwawa , it'd have been less cringe

[rotund jacinth]

frfr

[crude stump]

i wonder if the internet engineering taskforce is still a thing

[hardy mica]

@sand trench someone said me you are one of the best C# programmer in the world. Is this true?

[sand trench]

???

[spare pawn]

How dare you prefer the literal demonic imps over literally any dog
Hate filled creatures, them

[high mulch]

I hate chihuahuas.
And yes, I meant for the dog. Who wouldn't just get up, bark some sh-t up, and go back to sleep. lol

[sand trench]

you mean microsoft java???? :P

[uneven hedge]

Hey guys, took a small hiatus because of summer college courses (Biology major intended course + cyberSec hobby = very rough time)

[crude stump]

shadow does emma do c#

[uneven hedge]

I got the linux cybersec book though im gonna start reading it

[hardy mica]

me too , but seeing a chuhuahua sitting on a memory form bed is less cringe than see a pitbull

[hardy mica]

Are you one of the best microsoft java develpor in the world?

[high mulch]

Let the doggo rest like a king.

[sand trench]

not really

[hardy mica]

C#?

[sand trench]

nah shadow has not touched c# or java in ages

[crude stump]

could you be thinking of emma

[hardy mica]

i think you can be the best if you want

you just need to start

maybe starting answering some questions in the programming discussion

https://tenor.com/view/corgi-smirk-dog-gif-6147330867794407822

[uneven hedge]

Oh yeah, I got a badge for Microsoft access

This guy is (Barely) Certified 😁

[hardy mica]

[boreal scarab]

I gotta ask. Y'all ever had your teachers say "This is the worst class I have ever had?"

[hardy mica]

naturally

if they don't say that they got fired

[gleaming quiver]

i need help and was wondering if sm1 could help me

[boreal scarab]

I swear, they use that line as psychological warfare.

[hardy mica]

let's be honest , no student care

[hardy mica]

for?

[boreal scarab]

Oh no, but the good ones would feel guilty inside like they did something wrong when they didn't lol

[strange sparrow]

It's fine, you'll find a point where you can say "this is the worst class I'VE ever had". For me it was malware analysis at university, assignment completed week 1 with full marks.

[hardy mica]

imo good ones have some kinda of problem. TBH bad ones have surely more , but yeah

[gleaming quiver]

i was wondering is it possible to track a phone number i have been getting harassed and the person is impersonating sm1 i know

[boreal scarab]

I haven't been in school in a hot minute. I'm just thinking back to my high school days lol

[hardy mica]

@sick lance

[boreal scarab]

[gleaming quiver]

it us nothing to do with this people in this server

just to clarify that

[gleaming quiver]

so it's impossible?

[hardy mica]

how do you know it's not @boreal scarab ?

maybe he is harrassing you

[high mulch]

wow wow, this went from 0 to 100 lol

[clever shard]

@shell novahydra would help

[boreal scarab]

We just wont help as that would be considered unethical.

[mossy river]

You need to report it to your local authorities

Vigilantism is unethical and against our community rules

[boreal scarab]

https://tenor.com/view/plead-the-fif-quiet-gif-7194514

[hardy mica]

that guy started a discussion that went for over 4 hours. It's devil himself

[gleaming quiver]

yeah i just wanted to know if it was someone i knew before i took it any furter

[boreal scarab]

All I said was study OSINT

[mossy river]

Yes the police will know

[hardy mica]

I mean at major reason , if it's someone you know , report him

[high mulch]

I thought it said "I plead the FIFI"

[boreal scarab]

It does lol

[gleaming quiver]

its not really serious serious its just a constant annoyance

[hardy mica]

it's a crime. Report it

[gleaming quiver]

the worst part about it is the acting of sm1 ik

[hardy mica]

second crime

[gleaming quiver]

yeah i said that

[hardy mica]

we are already at 2, just report it

[crude stump]

Can’t you block phone numbers

[high mulch]

report it. Block the number, it's probably a continuous scam scheme. The same happened to me, when a family member got their phone stolen (they forgot the phone in a supermarket, when they went back, no phone was found). They based the scam call based on the details found on the phone.

Based on the occurred, I simply cussed them out, blocked them, and continued with my life.

[mossy river]

This conversation doesn’t need to continue

[crude stump]

Why not block them

[gleaming quiver]

i have

[gleaming quiver]

no this person knows personal details about me and relation ships of mine

[mossy river]

^

[hardy mica]

Why no one ever harrass me?

https://tenor.com/view/troll-forever-alone-cry-gif-13238608

[boreal scarab]

https://tenor.com/view/listen-here-you-little-shit-bird-meme-bird-listen-here-you-little-shit-gif-19221308

[hardy mica]

that's not harrassing

[boreal scarab]

[hardy mica]

that's giving me more gif to use

[boreal scarab]

Oh don't get me started, Jabba would yell at me lol

[hardy mica]

im a gif addict too , so yeah

[boreal scarab]

@sand trench I FOUND A GIF OF YOU!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

https://tenor.com/view/nazrin-nyn-rat-mouse-gif-23917556

[mossy river]

Just makes me sound bad, thanks

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #30 - 265)

[boreal scarab]

Free rep, gracias 😄

[sand trench]

to not get your fingers bitten off drop the cheese @boreal scarab

[high mulch]

Oooh, cheese! I want! (:

[crude stump]

Your true colors are showing

[twin ridge]

You're still on cooldown

[mossy river]

Crazy

[crude stump]

Nooo

Ah ha

Oh wait

[hardy mica]

Triggered

[boreal scarab]

We still love ya. I know I can spam a lot of gifs lmao. I try and take it easy, but come on, its fun!

[crude stump]

That’s not for me

That’s good

[boreal scarab]

Oh hell no you aint taking that rep!

[mossy river]

You just have to be mindful of how comments make community members seem to people viewing.

There has been a lot of “mod hate” recently in the discord server and it’s not appreciated - not saying that you are the one hating

[crude stump]

Who’s hating on jabba

Smh

[boreal scarab]

A hater

[hardy mica]

[boreal scarab]

[solar bramble]

Hi

[crude stump]

Hi

[boreal scarab]

[mossy river]

Mod hate, people can hate on me, but when volunteers are spending their free time protecting and growing the community, only to be hated on, it’s sad to see 🙂

[hardy mica]

so we can hate you?

[mossy river]

Time and a place homie

[cosmic pendant]

Jabba is the best

[boreal scarab]

I always make fun of @cosmic pendant burning crap

[cosmic pendant]

I knew that was coming

[crude stump]

Bet that smells bad

[boreal scarab]

[sand trench]

we heat bread just for the cwunchy texture

we are weird

[boreal scarab]

Always busting Toaster's chops, with all the beep beeps too

[hardy mica]

But who hate mods in a discord server?

[boreal scarab]

https://tenor.com/view/unstable-insane-clinically-insane-were-clinically-insane-gif-26170011

[crude stump]

People who go against the rules

They hate being told no

[hardy mica]

pfffffff

[crude stump]

That’s with every discord server tho

[wild rose]

We heat cheese just for the melty texture.
It is delicious.

[hardy mica]

i have a dark humor joke , but i'll pass on this one

[wild rose]

yeah best to pass.

[sand trench]

and times for the whimes of the bimes where shadow goes to sleeps for the sloops to the beeps of the boops while meepity moopity meep moop

[wild rose]

Goodnight Moon

[unreal solar]

https://tenor.com/view/r2d2-same-tired-star-wars-gif-13888503

[glossy swan]

hi

[umbral bay]

LowBatteryD2.™️

[blazing granite]

R0D2 😉

[jovial musk]

anyone up for a KOTH

il spectate

[chilly cove]

Hello everyone, is there a way I can change to pay for the subscription with US $ instead of GBP? I don't see an option to do that.

Or will it automatically convert with Paypal/Debit card?

[wide marten]

It will automatically convert. Possibly not at a favorable rate, but afaik that's your only option. I misremembered then. Or I was thinking EUR

[clear jackal]

https://tryhackme.com/r/pricing you can select USD at the top. It's $14 a month if you do it month by month.

[chilly cove]

I don't remember seeing that option (and I'm pretty sure I looked), but either way I'm set up now.

[jovial musk]

if the null byte is fixed by php 5.3.4 does that make file inclution impossible?

or does it just reduce the things that it can do

[wide marten]

It does not make it impossible. Only that particular method.

[jovial musk]

what other method can you use to make it not add a ".php" and stuff

cuz THM does not tell you the new one

also @wide marten i sent you a friend req 🙂

[wide marten]

You can find loads of other techniques here: https://book.hacktricks.xyz/pentesting-web/file-inclusion

[jovial musk]

thanks!

[wide marten]

I know, but since you earlier mentioned you're 15 and I don't know if your parents would appreciate you being "friends" with a stranger twice your age, I declined.

[jovial musk]

oh they know, but i comprehend

i hope i can still dm you if i have questions

[hot cairn]

@wide marten CKS is such a pain compared to CKA

lol

KCSA also sucks even harder

[wide marten]

still working on the jacket 😄

[hot cairn]

Yup

i got vouchers for KCSA and CKS

which only leaves KCNA and CKAD

[jovial musk]

what are some good websites

like cheatsheets?

[wide marten]

Why? I assumed it's easier

[hot cairn]

I just dont like the multiple choice format of it

and there isnt as much info / material to prepare

[jovial musk]

@hot cairn @wide marten how'd you guys gain the hacker intuition?

like, i see THM taking conclusions from error msges that i never would have seen

[hot cairn]

Pattern matching / repetition

[jovial musk]

got it

so practice?

also sry for not asking to ping i didnt see ure bio

[wide marten]

Ask me once I passed the OSCP 😄

[jovial musk]

ok

[hot cairn]

Opposite of not asking to ping

its asking to ping before dm'ing

[wide marten]

Example?

[hot cairn]

Pretty much

you learn to pickup on things

and while usually it doesnt exactly apply

being able to pickup on things similar you've seen before and apply that concept

[jovial musk]

you morph it right?

ye

[hot cairn]

Learning to learn is important aswell

[jovial musk]

you get that "deadeye"

[hot cairn]

things always change, so being able to pickup on things and adapt is key

[pearl lagoon]

Hello

:blobheart

Hru?

[terse edge]

excllent, thank you

yourself?

[pearl lagoon]

Im ok thanks sir

I have a question

[fierce marten]

which room do we ask for help

[pearl lagoon]

Its not a room

Its about ethics

[jovial musk]

go ahead

spill

[pearl lagoon]

But its kinda creepy

[jovial musk]

go ahead

[pearl lagoon]

[fierce marten]

No, im asking for me. I just joined and I'm stuck on a THM exercise

[jovial musk]

room-help

#room-help

[fierce marten]

awesome thank you

[pearl lagoon]

Will it be illegal if i had the password for every user in a school webpage?

[molten sky]

that's very vague

[jovial musk]

yeah

will or would

do you have them or do you plan on having them

[pearl lagoon]

Im not planing on having them

[rapid merlin]

I need help configuring my pc to wake up up from rest. Pc wakes up but monitors are still off

[pearl lagoon]

Im just questioning if the police will knock on my door

[jovial musk]

so you have them

[molten sky]

go into the monitor settings and set to to sleep rather than turn off

[boreal scarab]

Loved repping THM at Defcon

[pearl lagoon]

Dms

[jovial musk]

sure

[clear jackal]

How did you aquire them? It doesn't need to be illegal for expulsion.

[jovial musk]

everyone had the same pass

he didnt like sqli or sum

thats what he told me

[clear jackal]

Also, I would recommend you report it to your school administration

[jovial musk]

.

[boreal scarab]

I would do school IT

[pearl lagoon]

I got out of that school a long time ago

[jovial musk]

wha

then

[pearl lagoon]

I just had my profile still active

[molten sky]

fyi school admin and IT are often not the brightest and can accuse you of doing dumb shit if you report, as well

[jovial musk]

yes

ik

[molten sky]

so if you aren't able to articulate yourself, silence is sometimes easiest

[clear jackal]

So you're using passwords on systems you're no longer permitted to use?

[jovial musk]

i found a XSS wordpress in my schools website

and cant report it

cuz they'll blame me for random stuff

[pearl lagoon]

No

I was a student

[jovial musk]

extension is like 5 years old lmfao

[clear jackal]

Do they have a bug bounty? If not, you shouldn't have been poking around.

[boreal scarab]

@blazing granite I hope they have this again this year lol

[pearl lagoon]

But i tried logging into my friends users and it got through

[jovial musk]

[pearl lagoon]

[jovial musk]

wait poking around is frowned upon?

[boreal scarab]

and I know it's not actual wine, it's the app

[molten sky]

what type of wine goes best with wannacry

[jovial musk]

i didnt do anything i just ran wscan

wpscan*

[clear jackal]

In the United States, it's illegal without authorization.

[boreal scarab]

The cheapest bottle to cry into when you got wannacryed

[jovial musk]

im on mexico

but yeah mb

[clear jackal]

And it's unethical otherwise

[jovial musk]

aight i wont do it again

you have my word

[mossy river]

Running automated scans can break things. You don’t do it on things you don’t own. You break it, you break computer misuse and suffer the consequences

[blazing granite]

sounds great

[jovial musk]

i did not know that mb

wont do it again ong

[boreal scarab]

I hate kids today's lingo

[pearl lagoon]

Lol

[boreal scarab]

https://tenor.com/view/diekatzlei-katzlei-die-katzlei-jesus-jesus-christ-gif-10902343626484577449

[jovial musk]

sry english is not my first langauge

i just use what i see

[boreal scarab]

I'm just old as hell, and hate the whole "on god, skibbidi....." whatever else cringe shit there is

https://tenor.com/view/throw-up-dry-heave-vomit-gross-eww-gif-23254765

[jovial musk]

nah you cant group me up with that for using "ong"

thats like grouping a hacker with a war crimminal

i hate that 2

[blazing granite]

you sounded like 100 there 😂

[jovial musk]

you guys wanna do a KOTH

il be the comentator

[molten sky]

ong

[wide marten]

Ong is not a misspelled omg?

[molten sky]

(but actually tho i agree)

[tepid furnace]

no

ong = on god

[jovial musk]

on god

[tepid furnace]

anyways

[boreal scarab]

https://tenor.com/view/the-office-john-krasinski-jim-halpert-no-comment-gif-4812541

[tepid furnace]

diamond is unbreakable

[jovial musk]

beat ya to it

[wide marten]

TIL

[boreal scarab]

[tepid furnace]

https://tenor.com/view/jjba-jojos-bizarre-adventure-jojo-pose-jojo-josuke-pose-gif-24195879

man I love jojo

[jovial musk]

uhm can @wide marten and @molten sky go to #subscriber for a second

please

[tepid furnace]

that's so mean

[molten sky]

i can not

[tepid furnace]

productivity cant go there

[molten sky]

i assume that's # subscribed

me no hav no mo

[jovial musk]

il dm you

[tepid furnace]

alex I think that

[molten sky]

🤨

[tepid furnace]

you should contact the moderators

instead

:)

[blazing granite]

diamonds are incredibly hard and resistant to scratching, this does not mean they are unbreakable

[tepid furnace]

https://tenor.com/view/tonio-trussardi-jojo-jjba-trendy-gif-15367354764138966677

so true

[pearl lagoon]

Lol

[jovial musk]

yall wanna do a KOTH

i really wanna watch it live

[rapid merlin]

How can I turn it on now to change those settings so I don’t lose my notes from restarting it ;-;

[rapid merlin]

^

[jovial musk]

#room-help

wait, no

[pearl lagoon]

What is koth?

[jovial musk]

nvrmind

[jovial musk]

king of the hill

[pearl lagoon]

Whats that?

[jovial musk]

i SO BADLy wanna watch it live

[pearl lagoon]

Lol

[jovial musk]

@clear jackal read his username

[pearl lagoon]

?

[jovial musk]

read the username

[pearl lagoon]

Coconut water in spanish

[jovial musk]

no

[pearl lagoon]

[jovial musk]

the person i pinged

i mean, did you google?

[pearl lagoon]

No

I will

Sprry

*sorry

[jovial musk]

nw

[pearl lagoon]

I will come here with the result of my search

[blazing granite]

is not