general

[tepid furnace]

every ip

T1

[tribal ice]

by the head of cybersecurity

[wild thunder]

I just sent a message to support, thanks!

[old void]

frame rates yes XD

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #30 - 267)

[sharp zealot]

That's the reason if they are attacking windows then that's even bigger issue and if av or defender is on then you are lucky if it only takes a week

[pallid lotus]

Then that's who you should be asking for assistance

[tribal ice]

who is indeed... my super visor

[boreal scarab]

You're welcome!

[pallid lotus]

Bollocks lmfao

[loud marlin]

tell me that is private range pls?

[tribal ice]

had a meeting today, and it is normal he says

it does take some time

[pallid lotus]

Then there you go 🤷‍♂️

[tepid furnace]

it's not on your own personal machine is it?

[tribal ice]

interesting

[sick lance]

Oh boy.

[pallid lotus]

It's not interesting, it's outright incorrect lmao

[sick lance]

General is on one today.

[pallid lotus]

When is it not?

[tribal ice]

all on a virtualbox, kali machine, connected to the company ovpn file

before doing anything

[polar spoke]

Sounds about right

[tepid furnace]

it's not crunching up too many resources is it?

[tribal ice]

sorry what is incorrect here? maybe I misunderstood

[sharp zealot]

You need to be more specific about the ips and ports you define try just discovery scans first then go for flags and version info

[tribal ice]

ummm..... umm......

It freezes from sometimes

[tepid furnace]

is it running off your main desktop / device?

[tribal ice]

yes of course, pasted the scope in a txt file and then ran a discovery scan to check which hosts are active. spot on.

[tepid furnace]

or a device for cybersec in general

[sick lance]

It's honestly like the blind, leading the blind...

[tribal ice]

aint that the truth

[pallid lotus]

Windows may be bloatware, but specific vulnerabilities aside it's not inherently a security issue... very fortunately given that it powers both the user and server estates for a significant majority of large orgs on the planet.
Targeted malware will also breeze past consumer grade AV like Defender, a scattergun approach will usually get picked up by AV, and "will be hacked in 5 days if you're lucky" is just laughable

In other words, there was literally nothing correct in that message

Windows may be bloatware, but specific vulnerabilities aside it's not inherently a security issue
Not, admittedly, for lack of trying with recent "features" released...

[polar spoke]

I don’t even want to like, jump in on any of this….

[sick lance]

I wonder which av they refered to in

av or defender

[tribal ice]

wdym?

[pallid lotus]

Probably sensible...

[tepid furnace]

do you have a computer that you use for personal use and leisure and running vm's, or do you have 2 devices, one for leisure/personal use and one for vm's/work

[sick lance]

In other words.

[sharp zealot]

What do you mean i have literally encountered hundred scenerios where switching off AV and defender incresed the speed of my scans and scanning windows network takes way more time them debian whats wrong with that sir

[sick lance]

Do you BYOD.

[tepid furnace]

better way of phrasing it lol, thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2435)

[tepid furnace]

just couldnt remember the right phrase

[high mulch]

Good morning/afternoon/evening everyone (:

[sick lance]

I'd assume any decent org will give you a device that you should use for work related stuff.

[tepid furnace]

I'd hope so

I would be upset if I was expected to run intensive things off my personal device without warning lol

especially overnight things

[sick lance]

I'd refuse.

[tepid furnace]

exactly

I mean unless they wanna buy me a new gpu and cpu :)

and while they're at it throw in a mobo and case

[polar spoke]

Here I am just hoping my jobs want me to run intensive stuff

[tepid furnace]

then they can have their own dedicated rig!

at my house

:3

[whole yew]

Yo! I get to do password audits!

[pallid lotus]

Scanning a network entirely filled with Windows devices may take longer if they're configured to treat it as a public network (thus blocking ICMP echo and forcing you to use -Pn). AV is unlikely to make a significant difference there. The host-based firewall might.

[sick lance]

I forgot you were looking for a new job.

[polar spoke]

I got one 🙂

[sick lance]

nice, 😎

Wait long?

[polar spoke]

Sweet! Let me know if you want to automate it 😛

[polar spoke]

Took a while for the company formation to go through but otherwise not really

[silver sky]

Don't forget most corporate networks will have a IPS/IDS on it.

AV won't detect a scan but they will

[tribal ice]

so far I found only 1 IP that has a ton of open tcp ports, 445 and 3389 being two of the ports. If I can just obtain creds from smb, then surely i can use that to login via rdp. BA BOOM! job done. But, that one IP also has the possibility of being a honeypot set by the client (according to my supervisor). in the last 4 months they got 3 pentests done, so they are well aware.

[pallid lotus]

"Most" is a strong word

[sharp zealot]

Ya that's basic knowledge that's why i said to be precise about the hosts you target and the ports you scan and the AV part was from my personal experience in an assesment

[tribal ice]

okay time for sunset prayers...

[pallid lotus]

And your suggestion was to turn AV off..?

[silver sky]

My employer still uses plaintext passwords on a system... We probably don't have a IPS/IDS.

[pallid lotus]

But yes, trying to scan a full subnet will always take a while compared to a targeted scan, obviously

Cheers autocorrect...

[pallid lotus]

Configuration also plays a big part. No point in deploying network monitoring if it's not being parsed or alerted on properly

[normal fable]

You work for the US Gov?

[whole yew]

if you have any docs or papers on better wordlist selection that you can share.... that's my first step, i think

[silver sky]

Yeah IT are useless.

They've just adopted our systems. We are gonna go back to unadoption because they've already broken our software

[sinful radish]

guys

[pallid lotus]

Also, thanks for the edits here. That makes a lot more sense as a point. I read it originally as "Windows is a problem and you'll be lucky if you don't get hacked within 5 days assuming you have AV active" 😆

[twin ridge]

Gave +1 Rep to @sharp zealot (current: #2103 - 1)

[polar spoke]

oof, that's kind of a hard topic actually

i was actually joking about automation because i now sell a product for that lol

[sinful radish]

im using 100mbps (download speed) plan for my home internet.. it seems really slow and takes too much time to download a game

do you think it'd help to connect LAN to my computer, instead of using wifi 6 that's on my motherboard?

[polar spoke]

that would be because it's slow and games are large

at least, by today's standards

[silver sky]

A wired connection is always better than wireless

[polar spoke]

actually, not so much on modern wireless solutions

[boreal scarab]

Way to drop your product in chat

[polar spoke]

you're 5ghz 802.11ac will pull like 1.7Gbps 2x2

which is higher than most people's internal wired networks will do

[pallid lotus]

is this an option?

[sinful radish]

do you think it'd help by a lot?

[polar spoke]

not that that speed helps at all

when your WAN is 100Mbps

[polar spoke]

yeah i actually wont be doing that lol

[pallid lotus]

Depends what you've got on your LAN tbf

[sinful radish]

man ppl say 100Mbps would be enough for gaming and watching stuff but noope

[polar spoke]

true

[pallid lotus]

Still worth it if you're doing a lot of huge file transfers to a local NAS or something

[whole yew]

unfortunately pipewrench is not allowed in scope for internal processes 🙂 maybe if i do an onsite with our european 24hr contractor though......

[boreal scarab]

If I was in a place that I would require that, coming straight to you first before anyone else

[silver sky]

Not massively. It depends on so many things. Game files are massive and you are also limited by the network you are downloading from. (i e steam servers etc)

[pallid lotus]

Hey, as far as I'm concerned it's thinking outside the box and taking initiative!

[polar spoke]

yeah, but shilling my companies products comes second to giving out decent info and helping people haha

[whole yew]

max speed of modern wifi is 400mbps. If your ISP provides 100mbps, there is no way for you to get around that limitation, other than get a new ISP.

[pallid lotus]

"You never said I couldn't kidnap your project manager and hit them with a wrench until they gave up the password!"

[sick lance]

I can't say this enough. I can't wait to I move

Going from 38-40 Mbps to 9550 is going to be insane.

[polar spoke]

you'll be eating it on every host upstream from you over 1Gbps, trust me

[whole yew]

be careful about the caps in the abbreviation. Huge difference between Mbps and MBps

[normal fable]

I gamed and streamed on 20mbps internete.. for years.. so if 100mbps isn't enough then it's likely not the speed.

[pallid lotus]

A 10G WAN connection? (Or near abouts)

[sick lance]

very true!

[pallid lotus]

How tf did you pull that off?

[sinful radish]

How about 250Mbps download speed?

[boreal scarab]

Love waiting on Security Onion 2.4 to load. I just wanna have fun and see what 2 offers over 1. Even though it's been like 3 years since 1 went EOL

[gray sonnet]

Huh???

what did I walk into

[whole yew]

step 1: identify the bottleneck

[sick lance]

Me?

[polar spoke]

i have 5Gbps and soon 20Gbps options available around me

so its not unheard of

[pallid lotus]

A spot of light torture. Nothing to worry about

[warm terrace]

damn i hope me too

[pallid lotus]

Christ alive. I thought I was doing well at 1Gbps WAN

[boreal scarab]

Gib! Best I got is 2 GBps

[polar spoke]

i'm only running 1Gbps right now

[silver sky]

I'm not even running on that 😂

[polar spoke]

haven't upgraded internal to 10Gbps

[whole yew]

in what world is scope not both white and black listing?

[sick lance]

eating it?

[polar spoke]

so i see no need for larger WAN

[gray sonnet]

I'm running 90Mbps on LAN...

[pallid lotus]

Sssssshhhhhhhhhhhh

[boreal scarab]

1Gbps here

[sick lance]

I have so many devices on this network it's terrible.

[silver sky]

See this is why contracts and proper scopes are important!

[boreal scarab]

10g only from server to desktops on LAN

[gray sonnet]

figures why I take so long to join a game of phasmo @boreal scarab

[sinful radish]

man i'd be happy to just have 1Gbps lol

[polar spoke]

losing speed

[boreal scarab]

https://tenor.com/view/luluwpp-gif-25648350

[sick lance]

It will be much better than what I'm getting just now.

[polar spoke]

oh for sure

anything is better than what you have now lol

Starlink would be better, save for some latency

[sick lance]

The joys of having nothing but farms around me.

[polar spoke]

find nearby dark fiber, get it drug over to you, buy service contract through a big ISP

[sinful radish]

lol is Starlink worth getting?

[sand trench]

starlink will cause nighttime photography of the sky be bad

[boreal scarab]

Hey, that would be a dream for @naive violet and all his radio/ ADS-B equipment!

[sand trench]

and recently there was people looking into if starlink could hurt the ozone layer

[polar spoke]

for as much as i agree, i think the issue is being overstated a bit much

[tepid furnace]

how will it hurt the ozone

I fail to see the logic

[sinful radish]

how does that work?

[polar spoke]

it will certainly be a thing, but it's not a new issue and dealing with it won't be impossible, just more intensive for some

[sand trench]

https://futurism.com/the-byte/spacex-starlink-ozone-healing

[sinful radish]

Idk how a network connection can hurt Ozone

[polar spoke]

uhhhhhhh

that seems... odd

" injecting harmful pollutants such as aluminum oxides into the upper atmosphere as they burn up during reentry."

weren't we just considering doing this

for weather engineering

[tepid furnace]

isnt futurism not credible on lots of things iirc

[sick lance]

Isn't it related to the reactions with chlorine?

[normal fable]

I just cleaned off my desk.. and it's already a wreck again... lol

[whole yew]

honestly, i'm less worried about latency than i am saturation. so far, starlink has been fairly reliable in terms of throughput, but as user base increases, i could see it becoming much less reliable

[polar spoke]

hence they're 4x more sats plan

[sinful radish]

So it's byproducts from satelites that cause ozone damage?

[polar spoke]

but i agree

[polar spoke]

newly, according to the above

previously it was our usage of certain hydrocarbons

[sand trench]

the burning up of the no longer in service satelites to hold the starlink network up could cause problems

[polar spoke]

but we've curbed that so well that the ozone layer has been healing

[sand trench]

myabe

[whole yew]

for worldwide market, i don't think that will be enough - at some point, it has to make money, and more investment means longer to be profitable

[sand trench]

nah not the same chemicals and metals

if you wanna cool the earth you can shoot sulfur into the atmosphere but then you get other bad effects

[polar spoke]

starlink is cash positive as of this year iirc

[polar spoke]

most recent venture wants to use calcium carbonate apparently

[wild rose]

The air was really refreshing when we had an actual 2 week lockdown for covid.

[polar spoke]

which makes sense

[sick lance]

God One UI 6.1 is annoying me already.

[sand trench]

wait what??? what are you doing on that ancient version of android scrubz???

[sinful radish]

that's so deep another rabbit hole lol

[whole yew]

until they launch 4x satellites 🙂 i would be interested to see the financials, do you know if it's publicly traded?

[polar spoke]

i dont think it is

also mass to orbit is only getting cheaper

[whole yew]

it's a subsidiary of spacex, which is not publicly traded

[sand trench]

well when you are sending multiple thousands of satelites into the atmosphere just from starlink it is a valid concern and needs research

[polar spoke]

they are betting on starship to like, 1/10th their cost to launch sats

[sinful radish]

I just wish i bought nvidia a year ago

[chilly veldt]

1-1 first half with Denmark and England

[sick lance]

Fixed it.

[rapid merlin]

hello guys
do any of yall know how to connect my VM on virtualbox to WIFI? (kali is my VM)

[whole yew]

i'm not convinced that elon isn't playing money games to make starlink look profitable when it really isn't - it will be interesting to see what the next 5 years holds

[sick lance]

Set it to nat.

[sick lance]

you might need to choose your adapter.

[polar spoke]

its possible

[rapid merlin]

in the advanced section?

[polar spoke]

tbh, for as much as i dont like the stuff he gets into a lot, spacex has been wildly successful

[sick lance]

No idea, I don't use it.

[sand trench]

shadow actually hopes it is not profitable and that starlink gets shut down for actual fiber optic instead

[polar spoke]

and starship is looking like it'll be launching sats much sooner than i would have expected

[sick lance]

You might need to google, or hope somebody in here can help.

[sinful radish]

Yooooo can we land on the moon in 5 years

[whole yew]

falconx started out extremely optimistic as well, and didn't it take 2-3x longer than expected to successfully launch and land?

[prisma void]

This partnership with Snyk is exceptional

[polar spoke]

well, i had tempered expectations already

so sooner than 2030 is doing well imo

[prisma void]

One of my most favorite devsecops tools to use

[polar spoke]

especially with all the nonsense spacex is going through with contracts for its use

[sick lance]

No, we've been there before and haven't went back since, something is there that doesn't want us there. /s

[deft cloak]

Partnering with Synk is a good move.. 😄

[sinful radish]

obviously it's aliens

[polar spoke]

according to micheal bay, i think its alien Robots

[sand trench]

why building kitchen take so much time

the moon is a giant egg

and you can't prove otherwise

[polar spoke]

most recently, wasnt it an alien space ship

or like, proto human space ship

or something dumb

[normal fable]

https://tenor.com/view/nerd-well-actually-as-a-matter-of-fact-gif-27665011

j/k.. but we all know it's a big cheese. 😛

[polar spoke]

i think moonfall was the most recent "the moon is not what it seems" movie ive seen

[sand trench]

if ez can prove otherwise shadow would be impressed

[polar spoke]

and its..... bad

[arctic cradle]

just read this, I myself had a laughter as someone who is also not a huge fan of AI, how do you guys find the article yourself?

[sand trench]

lots of apocalyptic movies are badf

[normal fable]

I cannot prove.. I can only state what I've been told. Nobody knows for sure. 😉

[boreal scarab]

Pog

[sinful radish]

hahahahaha complimentary chiropractic adjustment

[boreal scarab]

It uses DNF.....

[polar spoke]

im on the author's side here, but in a more pedantic way

calling it AI in general is part of the problem imo

[arctic cradle]

that's the thing, it's not AI at all, it's just a program that scraps data and spits it out to you, sometimes, even being false

[sinful moss]

Nerds

[polar spoke]

we're not creating intelligence because we have a very hard time defining intelligence, but we are creating some interestingly powerful and somewhat useful statistical models capable of some very cool stuff

[arctic cradle]

that sounds about right, well said

[polar spoke]

i think attributing much more than that to it is... poor understanding

lots of "it can reason!!!!" going around that makes literally no sense when you know how transformers work

[sinful radish]

I think AI is simply a wikipedia

[clear jackal]

Like in your home?

[polar spoke]

like, lets step back a bit and define what it means to reason thoroughly before we say it can or cant

[clear jackal]

tbh, I'm going function over form when I get to build my kitchen

[sand trench]

yes,....

[clear jackal]

You've got to plan, schedule contractors if you're not going it yourself, then materials have to be ordered, then work begins, then as you're working you have to crosscheck to make sure the written/draft plans are actually going to work, etc etc

[sinful radish]

it can give you information to its best knowledge that's available out there on internet and with users' input but it cannot create its own things

[wintry sluice]

yh, not just intelligence. consciousness, the concept of the self. do these things actually exist? are they just emergent properties of complex systems? do you exist, or are you just a lie that you believe so completely as to think it is true without question?

[polar spoke]

actually, this is sorta backwards

[polar spoke]

exactly, we can't easily quantify these things so how can we attribute them

[tidal sequoia]

Is there any way to know how many users have finished a room?

[sick lance]

Only via the API

[boreal scarab]

Security Onion 2 is giving me a headache, it was Ubuntu, then they moved it to Oracle Linux which is Fedora.......

jfc

[whole yew]

AFAIK these are open questions for researching evolutionary biologists and neurobiologists. We do know what conciousness is not though, and AI is not conciousness.

[whole yew]

It's not. Oracle linux is a fork of centos, not fedora

[boreal scarab]

Oh my bad, when I opened the browser, went straight to FedoraProject

[whole yew]

rather, it was a fork of centos. Since RH started centos stream, i don't know where oracle pulls their builds from.

Seriously? I'm surprised the browser didn't default to security onion or oracle to be honest.

[boreal scarab]

Yah, that's why I thought it was Fedora

[cold jungle]

Who else thinks that THM should have a dark theme as well its not really comfortable to learn for hours on THM website...

[wintry sluice]

yh, but its works fine with darkreader

[sick lance]

Soon™️

[shut hawk]

Been around 4~ years now, so anytime soon hopefully...

[high mulch]

I've used dark reader, but it often breaks the machines or simple pages from split views. So I have been using it light mode.

[cold jungle]

Just installed after facing seveir head ache

[glossy swan]

hi

[unkempt dust]

bro that is literaly the only negative aspect of thm

[high mulch]

I used to use another extension, a json something, don't remember the name, it was from the authors github I got it. was good in the beginning, but the same issue as dark reader.
Hopefully they implement it natively in the website (:

[glossy swan]

hi

[wintry sluice]

hi

[cold jungle]

Exactly after paying so much for the subscription... Its feels so bad to install another extension just for THM

[wintry sluice]

I mean, you could use the extension other places too

😛

[shut hawk]

still doesn't change the fact you have to do it ☹️

[loud marlin]

@boreal scarab welp... this is disaster...

[boreal scarab]

ewwwwwwwwwwwwwwwwwww

[wild bolt]

Hey, as someone new to cybersecurity looking to improve on the skills I'm learning from tryhackme, I've been wondering something about lab boxes;
Are containers a viable alternative to having a physical lab box for practicing on? (I ask even though I realize that this entire site is very likely comprised of containers for the modules)

[whole yew]

depends on what you're trying to practice. Web stuff? absolutely. Database? Yes. AD/Kerberos? probably, but certain products are 'heavy' enough that they would probably work better as a vm than a container.

Another thing to consider with containers vs vms, how much segmentation do you need or want in your practice lab? Escaping from a container can give very different access than you expect, and escaping from a vm is extremely difficult

[wild bolt]

Much appreciated juun, thank you. That makes a lot of sense. Being only 3 weeks in, I'm still working on the basics. I can see for the time being that a container probably makes sense but a vm is just as easy to get going. I'll give the vm route a try. Thank you

[tepid furnace]

bro

no thunderstorm today :c

[sand trench]

you wanted a thunderdome????

[tepid furnace]

no I like thunderstorms

like weather

[wintry sluice]

storm chaser?

[tepid furnace]

nah I just like the noise

no need to chase storms when they usually pass within 1-2 miles

so I can see them from my window / porch

[tame drift]

can anyone help me get my X account back

it was suspended

[wintry sluice]

contact twitter support

[gray sonnet]

??? why

[buoyant tree]

Anybody here ever switched everything from wireless (battery operated) to wired

Tired of my batteries dying in a year or two

[gray sonnet]

Keyboard - wired, Mouse - wired, Headphones - wired

[sand trench]

microphone wired

computer wired

monitor wired

[gray sonnet]

[tepid furnace]

wym it's cool

sound of rain is cool too

[wintry sluice]

brain - wired

[gray sonnet]

I like the smell and feel and all, but we have powercuts when ther's a thunderstorm haha

[tepid furnace]

ahh

[gray sonnet]

cause all the electrical wiring is above ground and they can't risk anyone dying

[tepid furnace]

you gotta get your city to fix their grid :p

[buoyant tree]

I got a wireless mouse (battery life degraded 70% in a year and a half), wireless earbuds (battery life degraded 80% in less than a year), gopro battery (degraded to 0%)

[tepid furnace]

where I live we never have outagaes

[gray sonnet]

The entire country is like this

[buoyant tree]

so mad right now

[tepid furnace]

the only outage we had was some goof not calling before he dug

and he cut the main fiber trunk

for 4 states

[gray sonnet]

4 states????

[tepid furnace]

yep

[gray sonnet]

was he punished???

[tepid furnace]

no clue

I assume so

[gray sonnet]

well lmfao

[tepid furnace]

big fiber company vs contractor

fiber company will win

[buoyant tree]

not always, there was a scenario over here where a old guy or women cut off some fiber lines near a train track a couple years ago

[boreal scarab]

"Linux
If you use Linux and don’t already know how to use GPG, stop using Linux immediately - you simply aren’t worthy!"

[buoyant tree]

nothing happened because they couldn't find them

[tepid furnace]

incredible

[mossy river]

@chilly veldt gg, England was a shambles

[sick lance]

3rd party gopro or official?

[polar spoke]

sheesh

not doing any battery management?

that's like, 100 -> 0 -> 100 rate of degradation

[sand trench]

we had a lot of thunderstorms this year

last year we barely had any

[polar spoke]

US/north america based?

if so, that'd be because of this

[sick lance]

My GO batteries have been perfect, never degraded.

But then I use official ones.

[tepid furnace]

not necessairly

[polar spoke]

well, strongly correlated at least

[tepid furnace]

2011 was the worst tornado / storm season

in recent history anyways

[polar spoke]

yeah, it's not a perfect predictor, it's only one piece of the puzzle

[tepid furnace]

what u gotta look out for was the flip that occured a few days ago

yee

[polar spoke]

patterns from up north cause major storms too, like polar vortex years

[tepid furnace]

yes but the real indicator would the jetstream

where the 2 fronts would theoretically mix

[polar spoke]

right

[tepid furnace]

gulf + canadas polar air

what helps is when the gulf air and polar air mix in the northwest of the united states

then get stuck in the midwest

[polar spoke]

all of our recent wetness (texas) has been pretty lined up with El Nino/La Nina

[tepid furnace]

yep

[boreal scarab]

Drink all the booze!

[sick lance]

All this storm talk and Shadow is in Sweden

[polar spoke]

lol

hence my lead with "if you're over here"

[tepid furnace]

https://tenor.com/view/cat-cat-blink-cat-blinking-cat-cute-cat-funny-gif-9710335640959949058

[sick lance]

Yeah.

@mossy river

The cat cafe I went to had kittens!

Two of the British shorthaired cats had kitters.

[buoyant tree]

offical's blew up literally

[sand trench]

well sweden is close to the golf stream

[buoyant tree]

3rd party right now

[buoyant tree]

that seems high, but then again I do use my tech daily

[sick lance]

What do you use the GoPro daily for?

And which model?

[polar spoke]

Do you chew through the battery from full charge to nothing and back?

[buoyant tree]

gopro not exactly daily but atleast twice a week for timelapses or doing some stupid stuff

[buoyant tree]

Yes

[polar spoke]

that will rapidly degrade them

lithium batters want to be between 50-70%

really 20-90% is the usable range

but 90-100 and 0-20 are doing damage to the battery

[buoyant tree]

I usually keep my phone's in the 60% range and laptop in 80% but I can't really keep track of the small tech item's batteries

[polar spoke]

some batteries over provision to avoid this to some degree

but many don't

on cameras especially, they are likely to run kinda hot too

[sick lance]

I always leave my laptop plugged in.

[polar spoke]

if you do that, enable some of the "Smart" battery stuff

to keep it at 70%

helps keep the battery safe

[buoyant tree]

hero 8

[buoyant tree]

Any precautions I should take for something without a active battery indicator

[polar spoke]

well, you can guesstimate battery percentages based on runtimes and starting from full

[buoyant tree]

brb 5 min

[polar spoke]

but really, on small devices like a gopro, its likely that those are just consumables if you are running them flat

buy more, buy better

[sick lance]

I have 3 batteries for my GP.

Getting around the same time on each battery, just depends on how I shoot.

[barren delta]

Hellooooooooi

[sick lance]

Hello.

[barren delta]

I can’t believe I’m at 2 months working in IT now

[loud marlin]

what position?

@stone lynx OSCP ?

[sick lance]

@pallid lotus how long did OSWE take you?

[boreal scarab]

10/10 Will stretch again

[tepid furnace]

can still read

stretch more

[mossy river]

Omg what!!!!

I want to see kittens ;(

[sick lance]

Yeah, they brought them out just before we left, and one kitten came to say hi.

[rapid merlin]

if I wanna create a github.io page for my portfolio is Jekyll the best option ?

[pallid lotus]

What, the exam or the course?

[sick lance]

Exam.

[clear jackal]

It took a time

[sick lance]

-.-

[covert stag]

is there a dark mode

[sick lance]

DarkReader.

[mossy river]

Not yet

[boreal scarab]

mmmmmmmmmmmm almost used up 32 GB with just 2 VM's running. Yummy

[sick lance]

But Soon™️

[covert stag]

im finna go blind

[clear jackal]

DarkReader

[mossy river]

Turn on the light in your bedroom

[clear jackal]

Or lights, if you have them. Yeah

[covert stag]

oh damn it worked

my g

[pallid lotus]

To get passing points? About 24 hours total (including sleep, etc) iirc.
I kept going after that though.

[sick lance]

Damn.

I wonder how fluff is doing.

[pallid lotus]

Knowing Fluff? Spectacularly I'm sure

[sick lance]

Ya

[wintry sluice]

do they really need that much?

[sick lance]

Probably trying to mimic a computer on a VM.

[clear jackal]

Main OS is probably using 8 GB

[mossy river]

Someone asking me where the train is going like I’m not also thinking the same 😭

[sick lance]

Forward, trains go forward.

[clear jackal]

So each is probably allocated ~10 GB. It also depends if "expand" was set or not

I forget the actual term

[mossy river]

Trains have seats that go both ways though so it depends on where you’re sitting bestie

[sick lance]

No, the train is still moving in a forward direction as that's where the driver is 😛

[shut hawk]

Remember, north is always the direction you're facing! vibes

[clear jackal]

Sounds like runscape lol

[shut hawk]

https://www.volunteeramnestyday.net/
Make sure to look after yourself folks

[clear jackal]

I always have to play top down with north facing the top of the screen

Otherwise I get lost

[shut hawk]

Lmao

[wintry sluice]

that could actually be the premise of a cool story.
constantly on the run from governments of the world who want to assassinate them, because they make global navigation a nightmare.

[loud marlin]

https://tenor.com/view/boing-gif-6037249

[quasi hedge]

Is it worth learning the new DevSecOps module, I don't have a interest in DevSecOps but wouldn't mind learning if there's a general usage of the knowledge.

[boreal scarab]

Yes, yes they do

[chilly veldt]

Bike is now 100% working and road legal

And paperwork should be done tomorrow

[normal fable]

Awesome Bella! 🙂 🏍️

Reminds me.. I gotta get new tabs for my pos bike..

[chilly veldt]

Just did the blinkers today

[normal fable]

I have new blinkers for my bike.. and I have to fix my headlight. Only things that really got damaged in my accident.. besides me.. lol

[chilly veldt]

Lmao

My right rear blinker was broken when I bought it

Buuuuut, when the paperwork is over then it's fun stuff time

[boreal scarab]

Burrito!

[normal fable]

Burrrrriiitttooooo! ❤️

[boreal scarab]

[boreal scarab]

@mossy river I know it's not in #873642346762350592, but look! Burrito!

[chilly veldt]

enie minie, mynie idk

[mossy river]

I’ve eaten too much food, I can’t look at food rn

[cunning igloo]

Is there somebody else who has issues connecting to the VMs?

[boreal scarab]

Are you the same way as me? If you feel full you can't even talk about food?

[mossy river]

Mhm

[boreal scarab]

[mossy river]

Went to a buffet

[boreal scarab]

Oooooooh

Whatcha get?

[chilly veldt]

maaaaattt

which one

should I choose

[boreal scarab]

hmmm

I like the bunny!

[clear jackal]

These are legal?

[chilly veldt]

well "legal"

they are legal until you do something illegal and then you can get fined for them

[boreal scarab]

https://www.youtube.com/watch?v=BamdEQ8wi5Q#ddg-play

[mossy river]

Lots and lots of chicken

[boreal scarab]

[mossy river]

I mean they don’t obstruct the rider so they’re fine, I haven’t heard of anyone getting into trouble for them

[quartz fog]

I am back. Now with Gigabit Internet 🙂

[chilly veldt]

yeah, by itself it's not illegal, they can obstruct the view, but if the cops have a bad day or you do something dumb, they can add it to the fine

[mossy river]

Idk how that would hold in court tbf

[clear jackal]

They're slip covers, at speed they can slide up and jam the helmet or cover the visor. In the US it's state dependent, but EU/your side of the pond is a bit stricter on this sort of stuff so I was curious.

[boreal scarab]

Bor it toe done

[chilly veldt]

they are also adviced not to use in high speed

[clear jackal]

Yeah if you're going to do it, add some double sided tape to secure it

[chilly veldt]

yup, it'll only be used in city driving

[blazing granite]

@muted rock no unsolicited friend request please

[gray sonnet]

REX!

Hi

[quartz fog]

nice, more upstream on those lines, I rarely get more than 10Mbps up. So even 100 is a big upgrade for me

[gray sonnet]

long time, how're you doing?

[blazing granite]

I'm sick at the moment, first day without fever since 2 or 3 days I didn't recognise you with the new colour. Do we need to call you master now? 😉 😂

[gray sonnet]

not needed

get well soon

[blazing granite]

how are you?

[boreal scarab]

Oh, we having a speedtest competition?

[gray sonnet]

Doing good 😄

[cunning igloo]

Amateurs

[gray sonnet]

Wow, that's not fake at all 👀

how much do you pay for internet?

[crisp flare]

looks good

[errant fossil]

around 35 pounds for 250mbps

is it bad

[gray sonnet]

not bad at all

if you compare it to here, it's not bad at all actually

[errant fossil]

i mean i came from 20mbps to 250 and the change has been awsome

[crisp flare]

I have ADSL in my apartment

[cunning igloo]

39€ == 41$ for 1000mbps

[errant fossil]

what isp is that?

for me its virgin

which is just bad

[cunning igloo]

Somebody in the woods in france

[dull portal]

promised 100mbps

gets 60

i love plusnet

[crisp flare]

It must be because of the density

[cunning igloo]

probable the provider use 1 cable with 400 different providers and thats why its that low lol

[shell nova]

Zergling bestling

[dull portal]

https://tenor.com/view/uk-police-officer-screaming-no-noo-gif-3163377484734570206

[chilly veldt]

👀

[crisp flare]

change isp

[dull portal]

my parents refuse to lol

[errant fossil]

how much are they charging you

the isp

[shell nova]

noobs

[errant fossil]

dammm

[dull portal]

https://tenor.com/view/giveittome-gif-21927068

[shell nova]

I'm actually limited by my NIC

[errant fossil]

thats fast

[shell nova]

and the switch

[crisp flare]

tell your parents isp is scammer

[dull portal]

i think about 30 pound

[shell nova]

ouch

I pay about that much

[errant fossil]

damm they robbing you

[crisp flare]

they will change it immediately

[errant fossil]

uk?

[shell nova]

nah

equivalent

[dull portal]

my estimate might be wrong

[errant fossil]

oh alr

[blazing granite]

I usually get 310, but I'm streaming

pretty good for this part of the world 😂

[errant fossil]

i would tell your parents that they are getting scammed by thier isp

[shell nova]

my ISP claims 5 Gbps

[crisp flare]

yo i get 16 download 0.7 upload that's good for ya

[dull portal]

wow

[shell nova]

just means I can max out the ethernet without affecting anyone

[crisp flare]

I live actually inside the earth's crust

[shell nova]

pretty sure we all do 😉

[dull portal]

lol

[shell nova]

gravity is still a thing

[dull portal]

i live in the centre actually

[blazing granite]

must be hot in there 😉

[shell nova]

of the earth?

sounds squishy and toasty yeah

[errant fossil]

people say that nasa wifi is blazing fast, is it actually true? cause i heard it when i was small

[shell nova]

who knows?

probably decent though

[errant fossil]

ex employees probably

HOLYYYYY 91 gigabits a second

[dull portal]

whatttt

91

[crisp flare]

a company with a trillion budget it should be like that i think

[errant fossil]

yeah

[errant fossil]

yeah 91 gigs dammm

[dull portal]

11375

[clear jackal]

Wifi where? NASA has a ton of offices.

[crisp flare]

holy

[dull portal]

megabytes

[clear jackal]

NASA is neither a company nor do they have a trillion dollar budget lol

[errant fossil]

idk probably their main office they use for launch grounds

[boreal scarab]

https://www.livescience.com/technology/communications/fiber-optic-data-transfer-speeds-hit-a-rapid-301-tbps-12-million-times-faster-than-your-home-broadband-connection

[clear jackal]

They have many launch grounds lol

[crisp flare]

writing randomly

[errant fossil]

who is using that lol

[boreal scarab]

Who wouldn't?

[errant fossil]

tell them to donate some mbps to me

[marble totem]

Better to me

[clear jackal]

But their speeds are likely similar to other government facilities, meaning limited wifi due to being in old buildings and average wired speeds

[crisp flare]

[barren delta]

helpdesker

[marble totem]

Actually, it's my parents internet

[errant fossil]

first time hearing that one, i will use it next time lol

[jovial musk]

where could i get help for a bug bounty?

[blazing granite]

Didn't you ask that yesterday and got a few resources?

[shadow loom]

Anyone else's desktop discord crashed?

[jovial musk]

i mean pple

geez

[rapid merlin]

what to do thou

should I study for a test

or

do some tryhacckme

this is so confusing

[clear jackal]

Probably study for the test

[clear jackal]

If you have questions, ask in #bug-bounty

[sick lance]

Test is more important.

[blazing granite]

I don't know anybody who didn't study for a test and pass, so if you want to pass you know what you need to do 😂

[rapid merlin]

2 options

1. Yes, study
2. Hire a witch to do some black magic or just pray

[blazing granite]

3. skip option two and go strait to number 1 😂

[granite field]

Lmao

Relatable

[blazing granite]

what is confusing is what do you find confusing 😂

[granite field]

I have upcoming physics and chem tests man.

[wraith fjord]

sqlmap slow as

oh hi all

[blazing granite]

physics it's OK, but I love chemistry

[errant fossil]

Chem, Really? your brain must be made of steel to manage that lol

[granite field]

2

[lunar shadow]

Sorry my internet was a bit slow didn't see the NASA speed until now

[blazing granite]

I did a science orientation in my high school, I had subjects like microbiology, neuroscience, bio chemistry, etc

[marble totem]

I like both

[errant fossil]

see now what you said there"microbiology, neurosicence" i could not understand at all .

[granite field]

Oh intellectual people are here😭

[errant fossil]

dont tell me that we need science in cybersecurity

im cooked if we do

[marble totem]

math

calculating time for cracking passwords

[errant fossil]

i hate math with a passion, but started learning yesterday again of hexadeciemls and other things

i only got an A in english lol

[granite field]

Atleast we don't need calculus

[errant fossil]

cant we use a stopwatch on phones for that?

[granite field]

What on earth is hexadecimal,

[errant fossil]

thats what i said yesterday

its used for encryption ig

you can try it in the capture the flag room

[granite field]

😭

[marble totem]

I mean time needed to bruteforce all combinations, just an example

[rapid merlin]

we actually need

[errant fossil]

Ohh Alr

[errant fossil]

https://tryhackme.com/r/room/c4ptur3th3fl4g yeah this room uses it

and a bunch more

[blazing granite]

micro comes from the Greek small, study of microorganisms or small organism 🙂 neuroscience study the nervous system, its functions and disorders

[marble totem]

encoding

[granite field]

Thank you 🫶

[twin ridge]

Gave +1 Rep to @errant fossil (current: #857 - 4)

[rapid merlin]

we need a "why the fuck" science and scientists that can tell us why OT owners most of the time dont give a fuck about cybersecurity

[clear jackal]

That's just not true

[errant fossil]

Ohhhhhhh yeah lol now i get it now yeah ig the words neurscience and microorganisms sounds to advance for me lol, Thanks for the information

[twin ridge]

Gave +1 Rep to @blazing granite (current: #75 - 84)

[blazing granite]

you don't need to know math or use math but if you do, you can understand things better, for example hash functions comes to mind

[clear jackal]

In a lot of cases, they cannot just replace components as new security features come out. If they did introduce a replacement, it could require the entire process to be reworked. Which can be upwards of millions, if not billions, of dollars.

[errant fossil]

i think i will need to look into hash functions tmrw

Thanks for the suggestion

[blazing granite]

https://brilliant.org/ maybe can help you with math

[clear jackal]

There's also potential governmental policy in place restricting changes as well

[errant fossil]

this is what i just started doing since yesterday lol, yeah it has made it easier to learn compared to my old school teacher

[rapid merlin]

But if they eventually get hacked - the consequences would be worse, and might take lives. No?

[clear jackal]

Have you looked at the purdue model?

[blazing granite]

great site, I understand math is not complicated or something to be fearful of, it's depends who teaches. There are a lot of rubbish math teacher out there that scared people for life 😂

[rapid merlin]

a bit yeah

[errant fossil]

exactly what has happened to me lol, in lockdown i had an amazing teacher but when we came back to school she left lol and some random teacher took over and they did not care at all

[shut hawk]

Brilliant is brilliant

[blazing granite]

there is not better name for the site 🙂

[shut hawk]

Got an annual subscription 50% of because of black Friday, and it's been 100% worth it

[clear jackal]

OK so on that model, your level 0-2 items are typically all of your "unsecure" devices like PLCs and other operational devices. They should never, and really aren't if the org is competent, connected to an outside network.

[blazing granite]

that's good math 😉

[clear jackal]

Yes, those devices on paper don't have modern security and they realistically don't* if you're segmented correctly. However, a change there typically means needing to recertify the process, if not the whole environment.

[errant fossil]

They do it every Black Friday?

[shut hawk]

Not sure

[blazing granite]

keep your eyes peel for next year 🙂

[errant fossil]

i 100% will do

might just get it fully now

[rapid merlin]

by recertify you mean to start the whole testing process again?

[clear jackal]

It's a lot more complex than, "throw xyz security measure on it" because a) that can actually kill people, b) it can disrupt processes, and c) have unintended consequences

[clear jackal]

Look up factory certification or look on Robert Lee's website. I think he might have some stuff on there

[narrow lark]

hello

[boreal scarab]

https://www.patrick-breyer.de/en/council-to-greenlight-chat-control-take-action-now/

TF is this?

(Stole from someone from HTB)

[clear jackal]

The factory get certified to run in a specific configuration and changes require change management

[rapid merlin]

Okay, thank you! I'll do some googling

[twin ridge]

Gave +1 Rep to @clear jackal (current: #19 - 410)

[lunar shadow]

The council postponed the vote

[errant fossil]

Hi

[sonic plume]

so som guy got remote access to my computer an was playing scary music and shii i hard reses my computer and re installed win is there any way i can get him back?

[rapid merlin]

lol

[sonic plume]

was thinking about using a email phiser

cause ii have the idiots email

and ip

[clear jackal]

Someone will be by to assist you with your goals in a moment

[sonic plume]

used tcpveiw and took a pic

i just need help using a phisser

[sick lance]

Report and move on

[sonic plume]

@sick lanceyes daddy

[sand trench]

it multiple orders of magnitude faster then you doing manual enumration

[sick lance]

Please no

[sonic plume]

@sick lancelol

[boreal scarab]

https://tenor.com/view/wow-gif-20411229

[rapid merlin]

studied

this is crazy

model checking is so interesting yet so not usful which is crazy

[rapid merlin]

you are not with the right people

if in the university u didn't go to sleep praying a subject wouldn't come up in a test becuase you didn't cover it

U didn't really live

[gleaming gorge]

If I was stuck on a room and needed help, what channel should I go to?

[rapid merlin]

first of all look it up on google, there might be a writeup if you didn't find refrences to solve it

but you can ask here

[gleaming gorge]

Would that be #room-help

[rapid merlin]

also you could go to room help in support, there might help you

[pliant cairn]

I just completed the python playground room. And i have to admit. This was very fun.

It felt rather easy except last flag which totaly is a very unique priv esc thanks for the room

[blazing granite]

you mean the wrong people if you left thing out and didn't study, also you should be surprise how much I lived and my life experiences. You're making a wrong assumption and you know what people say about assuming 😂

[rapid merlin]

neah, the wrong people are the ones who aren't creative enough, this is what cyber is about creativity, if you follow the box, you might know tools and usage, butg creativity, comes from the place we are not sure about

this is why challanging urself is important

and I see it as a challange

but

it is different for each one

[pallid lotus]

Eh?
That's just poor preparation on your part.
If you went to bed praying a subject wouldn't come up in a test because you didn't cover it then that's a failure on you, not on others for being better prepared.

[rapid merlin]

so I won't be jugding you

[pallid lotus]

And that had nothing to do with creativity

You can be creative and perfectly organised

[rapid merlin]

I'm not saying it isn't on me, im saying that the best solution comes from the places we are not sure about

for me, the part where I'm not complete is where i'm most thriving

this is just my two cent

[blazing granite]

in order to be creative, you need foundation and knowledge, it's hard to get that if you don't study. In order to be creative in cyber you need to know where to stand and what you can and can't do.

[rapid merlin]

and first and second year I was organised, but now i'm why more creative

[pallid lotus]

Yeah, you don't work in offensive cyber do you?

[rapid merlin]

I am

[pallid lotus]

Exactly this.
Being able to research, experiment, and learn, are crucial for security testing. Having no foundation in a topic is just downright dangerous

[rapid merlin]

I respect it, for me it doesn't work like that, think about it like this, we are learning reverse shell, so we read th basic, and that is all you need, the rules, when you know the rules, you can develop your own rules, which are way cooler.

[pallid lotus]

What rules have you developed for reverse shells, dare I ask..?

[rapid merlin]

let's say you write a program, I would spend more time knowing what do you do, how do you code etc, then learning toolsthat would help me beat your app

[devout palm]

Better not to leave them to luck. I have math exam next week and i haven't studied yet kek

Do what I say, not what I do lol

[rapid merlin]

good luck man, you got it, think about it as 7 days of hell for 60 days of heaven

[devout palm]

Meanwhile physics:

https://tenor.com/view/guerra-war-ready-to-fight-gear-up-arnold-schwarzenegger-gif-13809686

[blazing granite]

think you can make your own rules it's pretty dangerous in this field you can end up on the wrong side in a sec

[rapid merlin]

for me, I connect asm and python to have better control over a TCP connection I opened with remote shell, in a nutshell, I would love to expand, but I don't think I can that much

[pallid lotus]

It's crucial to know where the limits are

[rapid merlin]

I'm not disagreeing with you, just saying what works for me, to each is own

[pallid lotus]

Right, okay, so that's not creating new rules for the topic, that's experimenting with new shellcode. Apples and oranges there

[rapid merlin]

you are right, I think if you know how to build a right env for it you could try and experimenting

[pallid lotus]

Yeah, my way is unlikely to land me in prison though

[rapid merlin]

I'm not doing it in an illigeal manner, I'm learning in a local env so I could gresp a better understanding

that's just how I learn things, see the basic then move forward

[pallid lotus]

I think there's been a crossed wire here. Are you purely talking about learning a basic concept then experimenting in a lab, or (per the original analogy), are you talking about not bothering to learn the expected behaviours for security testing?

[rapid merlin]

yep, we didn;t understand eachother

lol

but it's alright

you know what they say

[pallid lotus]

Because yes, learning in a lab is ideal

[fading portal]

To anyone with a voucher and will love to give it away , I am kindly asking for it, so I could continue my learning .

[blazing granite]

@pallid lotus 👋 how are you?

[pallid lotus]

👋
Nae bad, and you?

[upper bison]

Question: is it normal that some rooms are "locked"?

[blazing granite]

bit sick ATM but I'll live 😂

[shut hawk]

Locked how?

[blazing granite]

if you don't want people to get into those that's a way to go 😉

[upper bison]

There are some links in tasks where it leads to a locked room

I remember it was one about AD

[upper bison]

Then what's the use of publishing a room and say it's locked... lol

[shut hawk]

Do you mean private?

Could you provide a link?

[upper bison]

Yeah hold on

[umbral bay]

👋

[devout palm]

A wild tim appeared

on Friday

kek

[upper bison]

You're mine! throws a pokeball

[normal fable]

It's not Friday yet... 😛

[devout palm]

It is for me

[normal fable]

pffft.. then you live in the future! Let me know how the weather is tomorrow.

[blazing granite]

loto numbers? 😂

[devout palm]

Weather is nice tomorrow

[normal fable]

I'm gonna ask about the super bowl this year.. @devout palm, you better have the score for me! lol

[upper bison]

https://tryhackme.com/r/room/activedirectorybasics

There you go

It says the room is locked

[devout palm]

Scores will be represented in numbers

[blazing granite]

if I'm not mistaken there some are free and some are premium rooms

[upper bison]

I have a premium account though

[normal fable]

That one shows locked for me too.

[upper bison]

You see that?

[normal fable]

Locked by creator it looks like.

[upper bison]

Damn I needed to review some AD basics

[normal fable]

The room owner has locked this room, which means you cannot view any task content.

[upper bison]

Lemme talk to the manager to get the creator open the room

[wild rose]

Try this room instead. It follows the AD module. https://tryhackme.com/r/room/winadbasics

[upper bison]

Oh yeah I already completed this one

Thanks

[umbral bay]

Hello, this is a retired room and replaced by winadbasics. 🙂

[upper bison]

Perfect, thanks!

[blazing granite]

great everybody deserve retirement 😉

[normal fable]

Oh no.. what updated on Breaching AD?? It shows 100% but looks like my progress was reset..
Guess I'll have to do it again...

[umbral bay]

That or the Eternal Glory. 🌞

[umbral bay]

Let me check for you.

[umbral bay]

Join the room.

[normal fable]

Interesting! Thanks @umbral bay

[twin ridge]

Gave +1 Rep to @umbral bay (current: #16 - 454)

[devout palm]

"Eternal isn't broken"

[normal fable]

Speaking of "Eternal".. I've never had an issue with Blue.. ever.. always works the first time for me. lol

[umbral bay]

It appears as if you didn't finish the room before joining. 😄

[normal fable]

How did I finish it if I didn't join? 🤣

[velvet ice]

hello all i have a question about my next step in the jorney to becoming a cyber security beast. lol\

[umbral bay]

It is a network room, so it rotates out (unjoins) users after a certain amount of days, to keep the network seat allocation to "active users" who are still working on the network.

[normal fable]

oh lol. Didn't know that. Well.. I guess I'm taking a seat on the room now. 😦

[umbral bay]

No worries. 😄

[velvet ice]

i just finished my introduction to the fundameltals where shoould i go next. im trying to do the investigating windows and its hard.

[normal fable]

I just like seeing that green check when I search say "Active Directory". lol

[umbral bay]

Have you tried the new Navbar search?

[normal fable]

I have and I like it! Excellent add.

[umbral bay]

Wait until you see the new Dashboard. 😉

[normal fable]

what's the dev site so I can get a sneak peek?? 🤔

[graceful thistle]

is dark mode finally here?

[molten sky]

soon ™️

[graceful thistle]

🥲

I'll do it for free

[devout palm]

soon ™️

[buoyant tree]

@graceful thistleDid you stop being a mod to focus on DMC 24/7?

[graceful thistle]

hey I do have a job

outside of that........

😉

[boreal scarab]

First time using Ghidra. Send help @sick lance

[wild rose]

prayers... but u can do it!

[boreal scarab]

[wild rose]

what do you need help on?

[boreal scarab]

Well, it's for a HTB Challenge, have to look through the source code to find the flag

[wild rose]

i c

[cosmic pendant]

Run DMC?

[boreal scarab]

My head hurts looking at this

[buoyant tree]

DMC = Devil may cry

[wild rose]

Yeah it can be a lot to look at as a whole. Understand what you need to find and use what search tool is necessary.

[buoyant tree]

I think I bypassed a challenge like that using strings

[worn copper]

Hello everyone, I just join this server and I need help in solving one of my task on nmap. Specifically task 11 second question which requires me to read within the script and state what it depends on.

[buoyant tree]

#room-help

[boreal scarab]

cries in no ctrl f

[high mulch]

so DMZ = is Devil May Zoink?

A'ight... I'll see myself out

[umbral bay]

Not in prod. 😉

[graceful thistle]

but soon?

😄

[buoyant tree]

HOW SOON

[graceful thistle]

haha

[umbral bay]

Soon.™️

[high mulch]

[buoyant tree]

https://tenor.com/view/its-been84years-titanic-rose-dawson-gif-5372593

[wild rose]

Haven't used Ghidra in awhile. Maybe this will help. https://tryhackme.com/r/room/advancedstaticanalysis

[devout palm]

https://tenor.com/view/i-cant-wait-forever-lord-huron-wait-by-the-river-i-wished-youre-here-come-to-me-soon-gif-17948831

[devout palm]

Subscriber room 😔

[blazing granite]

https://tenor.com/view/star-wars-yoda-patience-gif-21069694

[worn copper]

Thanks, I did posted my question on there, hopefully I get help.

[twin ridge]

Gave +1 Rep to @buoyant tree (current: #115 - 57)

[high mulch]

[wild rose]

ngl the subscriber rooms is where I learned the most or at least put it in practice.

[boreal scarab]

I said fuck Ghidra.... I just went into IDA64 and found it

[wild rose]

that'll work too. lol

[cosmic pendant]

ewww

Ghidra is soo much better than Ida

[boreal scarab]

Yah but IDA gave me the answer in a hex dump than Ghidra's mess of a UI

[cosmic pendant]

Ghidra has mulitplayer 😄

[devout palm]

Decompiler is annoying sometimes

[cosmic pendant]

just set your symbols/fucntion pointer and your're gold

[devout palm]

I like ghidra more than IDA but

We have binja now

[cosmic pendant]

that's pay right?

[devout palm]

No i use free

[clear jackal]

If those Discord Updates DMs are legit, idk if I like that

[buoyant tree]

they actually are

[wild rose]

i got 1 awhile ago.

[hushed apex]

hello

[crude stump]

Bruh

One of my moderators got his discord account hacked 💀

Revoked his mod before he can do anything bad

Luckily

[woven frost]

what a skid shitter

[crude stump]

well a skid is a person who uses software with no knowledge of how it works, how do you use it properly, and just uses it for harm. atleast from my understanding

[woven frost]

it’s just a joke

[crude stump]

?

[woven frost]

?

[crude stump]

how is "what is" a joke

[woven frost]

have a nice day

[crude stump]

ight

[tepid furnace]

The what?

[crude stump]

I got a discord dm that discord is not available on PS

Now

[tepid furnace]

sony probably wanted everyone to link a psn acc

[wooden totem]

Yall receive discord dms?

[crude stump]

yuh

bro i dont get it. how in the world am i supposed to get root privlages in the nmap room.

thought root is only for when you ssh

like every scan i do it says "The scan you requested needs root privileges" WHAT

actually i think i need to install root login for kali

[shadow loom]

Sudo?

sudo nmap blabla

[crude stump]

oh

let me try that

[shadow loom]

[crude stump]

that would make more sense cus i was trying to su

[shadow loom]

Ah

[crude stump]

now that i think is for ssh right

[shadow loom]

sudo su - should work

SSH just let's you log in remotely

(And more, but like... 😂)

[crude stump]

thanks that worked

[twin ridge]

Gave +1 Rep to @shadow loom (current: #496 - 9)

[shadow loom]

Slowly climbing the ladder

[stone lynx]

It ends in 8 hours, it looks like I'll fail

[shadow loom]

Look forward to when you get to port forwarding and proxying with ssh, that's some fun trickery

[crude stump]

dont give up

8 hours is 8 hours

[shadow loom]

My mistake at OSCP was that I knew what I had to do but I followed my process blindly

Like if I knew that "in all labs, gobuster gives me the path after at most 60% completion", so I would stop it early

Well guess what... This time it wasn't until the last few pct I found the right gold nugget

I wrote a blog post about "trusting my methodology but not following it blindly" - you most likely know what to do, it's just not budging for one or the other tiny reason

[quartz fog]

Is CyberLens room intended to be completed without using any stego or EXIF Data ?

it sounds like thats where they want you to look, but i was able to complete it before that came up 😛

[shadow loom]

Ever since translating morse code embedded in a photo with stego I stay clear of that stuff personally...

[jovial musk]

found a bug bounty website running wordpress

gift from above

[crude stump]

what makes wordpress bad

[jovial musk]

i ran wpscan and it has old pluggins

OMG theres a file traversal and a xss

thats at least a medium bounty right?

theres php object injection 2

[quartz fog]

sounds like they don't pay for bounties 😛

[round kiln]

What does it mean when they say a "machine has been retired"?

[jovial musk]

they do though?

[misty crag]

hi

[jovial musk]

its on a website that does the whole exchange

[quartz fog]

verify the findings manually, see if the httpd account can access anything sensitive

[crude stump]

the timer ran out

[round kiln]

What does that mean?

[clear jackal]

Meaning you opened/tried to access a room and it's not there? If so, it's no longer available.

[round kiln]

Im more asking, why do machines get categorized as being retired?

[clear jackal]

I don't know what room you're referencing, but it could have been superceded by a newer room.

YouTube recommended the Gawr Gura stream to me, honestly kind of impressive on the numbers. 70k viewers right now and was only 50k 15 minutes ago

[hot cairn]

Stego is amazing

[clear jackal]

That's got to be the most efficient stream. According to YouTube they went live for 45 minutes, got 72k concurrent viewers, a ton of donos, and then dipped

[leaden socket]

Do you guys recommend going for bachelor cybersecurity

If not then what degree should I pick in university?

[cold sparrow]

The Snyk news is good. More vendors should put their tools on THM.

[cold sparrow]

What do you want to do when you grow up?

[leaden socket]

Specific job or career?

I find cyber security interesting

But I'm still a newbie so I'm not sure what job to pick

[buoyant tree]

Go computer science if you're unsure

Also what has the world come to, Banna at top 1#

[cold sparrow]

It depends on where you are in life. If you are in HS, Computer Science is a goo way to go. You can choose your path in college. That path could be cyber, AI, cyber public policy, programming, or something else. But it will give you a good foundation.

@buoyant tree is right

[leaden socket]

So go computer science if your unsure and cyber security if you are sure?

Alr

I guess I'll go for CS to see everything

[buoyant tree]

yea

you can still go into cybersec if you got a CS degree

[cold sparrow]

You want flexiibility. So CS with a specialty or courses in cyber

[leaden socket]

You can choose specialty in master degree righ

4 years bachelor CS then 2 years cyber

[cold sparrow]

And if AI or something else grabs your attention, then do that. (Hardware programming, OS development, firmware programming, basic IT, etc.)

[cold sparrow]

Usually, a masters is specific. Though CS in a masters can also take you many directions.

Someone I know has a kid that had to make the same choice. She picked the bachelors in CS with a speciality in cyber at Rutgers in the US

[clear jackal]

If you have no professional experience, don't get a masters right away. It prices you out of entry level roles typically.

Computer Security degrees are hit or miss on quality. Computer Science is fairly standardized and offers flexibility.

[cold sparrow]

Counterpoint: A masters gives you an advantage in job searches where you will be competing with other masters students for entry level work.

[clear jackal]

There really is no counterpoint. The company isn't going to choose you because you're too expensive/they know you'll leave shortly after getting that initial experience.

[leaden socket]

Oh wait so while studying CS you can choose specialize?

[clear jackal]

This conversation is for #cyber-and-careers anyway

[cold sparrow]

Not necessarily. Companies are willing to bring on the best talent available and grow them. That includes salary. Obviously, these are generalizatoins and YMMV. I've hired great bachelor students over master students.

[cold sparrow]

In some schools, yes.

Another option, I believe Brown University lets you start general and pick your courses. You can take a little more time to feel it out.

@leaden socket what do you want to do in cybersecurity? https://www.cyberseek.org/

[leaden socket]

I'll try it later cause I'm busy rn

Thanks

And sorry

[rapid merlin]

anyone know how malicious links works

like diagram

[humble fulcrum]

Be ready to sell your soul before to get into Brown

[cold sparrow]

Can you be more specific?

[buoyant tree]

Elaborate on prices you out of entry level roles

Like does getting a master's over qualify you?

[cold sparrow]

My opinion, no

[rapid merlin]

like how malicious code load into their system

suppose u clicked a link it just download in that system not able to run

[cold sparrow]

Go to any cyber job on LinkedIn and look at the percentages of applicants by degree. Masters is usually the plurality.

[woven frost]

isn’t it a lot of undergrad degrees tho?

[clear jackal]

Yes, that is what I meant by "prices you out." Salary requirements are higher and the company doesn't want to invest in you when you're going to leave for greener pastures as soon as you get some experience.

Again, this stuff is best discussed in #cyber-and-careers

[cold sparrow]

Yes. And they can break through. Many masters cyber students don't have a CS background and struggle in interviews. Degrees and certs are marketing tools.