general

[pliant cairn]

so, its shared with the host IP

[storm snow]

Correct

[pliant cairn]

same goes with containers. You can configure the NIC or assign seperate cards.

so good luck

[sand trench]

yeah because those are generally more fun and run better on linux

[pliant cairn]

suggest me a good indie game im bored of nioh

[storm snow]

Lol thank you, I'll need it

[twin ridge]

Gave +1 Rep to @pliant cairn (current: #653 - 6)

[supple tangle]

gunpoint

its very short though

or mark of the ninja

[sand trench]

price range???

[pliant cairn]

cant be as short as cyberpunk. i felt it ended even before it started.

[supple tangle]

hmm i dont know how long that is

[pliant cairn]

im fine with a bit of overspending too. i played inside, stardew, hotline miami

[storm snow]

I appreciate the help! For now I can do my practicing on the same host and try to figure out how to connect them via separate laptops in my free time. I'll look into configuring the NIC

[pearl raven]

My favorite "indie" game is factorio...

[storm snow]

Later everyone!

[pearl raven]

Cya.

[pliant cairn]

laters have fun

[pseudo wyvern]

factorio is great

[shut hawk]

space expansion soon

[supple tangle]

shapez is fun and very cheap right now

[shut hawk]

https://tenor.com/view/hype-party-gif-23560775

[supple tangle]

stacklands is fun and has cute artstyle

[sand trench]

noita feels fun

[pliant cairn]

is that kinda circuit building?

[pseudo wyvern]

Ultrakill and Shadows of Doubt are also great indie games

[shut hawk]

nah, card game

[supple tangle]

no more like putting together pieces to make specific shapes

[pearl raven]

Another few months of my life gone...

[sand trench]

shadow finds paint the town red fun as a break here or there game

[supple tangle]

stacklands is cards, shapez isnt

[sand trench]

against great darkness is in early access and feels great to play too

it is a rougelite with brick breaker shoot them up style

[pliant cairn]

paint the town red is funny

[shut hawk]

i missread

[pliant cairn]

oh and worms man. its funny as hell

[shut hawk]

@mossy river token reset please

[sand trench]

could recommend inmost and eastward too

though not fully played either yet

[mossy river]

Que

[sand trench]

eastward octopia is also amazingly feel good game

[sand trench]

oh yeah bought a bundle with the worms games ages ago

did not regret

[shut hawk]

https://discord.com/channels/521382216299839518/742894185186590720

[tidal quartz]

Someone leaked their thm token

[pliant cairn]

eastward octopia is stardew-ish first impressions

damn inmost looks good. wishlisted.

[sand trench]

yuups and it is fun and relaxing

shadow actually had an NDA with chucklefish to go playtest eastward octopia

[pliant cairn]

oh nice

[sand trench]

found a complete hardlocking yourself so you need to quit the game without it saving bug during said playtest

which got fixed before launch

[supple tangle]

nicely done

[pliant cairn]

apparently steam says eastward, cyberpunk and witcher 3 are similar.

the math aint mathing

[sand trench]

it is based on the user tags

which is a bit of a mess yeah

shadow longs for the day when developer tags become a thing on steam

oh also if you liked the gameboy advance advance wars series shadow could recommend wargroove

[pliant cairn]

hahaha you are expecting a lot from valve

[sand trench]

eh they keep making stuff to keep their platform better while keeping all the good stuffs

[buoyant tree]

valve doesn't do a lotta of the bad stuff thier competitors keep pumping out

[sand trench]

exactly

stay winning by only making minor stuffs

and shadow don't want them to remove user tags

just want the developers to have an option to add their own tags

[supple tangle]

wtf

[buoyant tree]

uh

[pliant cairn]

hmmm

interesting

[sand trench]

looked like a wrong window paste there

[buoyant tree]

was that a phishing log

[tidal quartz]

No

https://www.fakenamegenerator.com/

[sand trench]

could be google chrome form data pasted into wrong window

[buoyant tree]

oh k

[tidal quartz]

Wanted to make a prank leak

[sand trench]

oooh

you messing with fake info generators

[tidal quartz]

Yeah

[supple tangle]

learnin osint 🙂

[tidal quartz]

Got to make it more convincing

[sand trench]

still not a good idea to post stuff like that here as the moderation team would have a hard time monitoring and moderating it

@sick lance can probably explain that better

[pliant cairn]

i felt bad for kenneth something something lol

i take a lot of time trying to decide what to play and endup playing nioh or warhammer or switch off my brain and play bf2042

[sand trench]

yeah know that feeling

kinda got stuck in chatting on discord and watching live streams

so hard to find "time" to game now

[pliant cairn]

yeah fr

[supple tangle]

yeah i haven't played anything in a month. just watching twitch instead

[sand trench]

12 hour streams with piratesoftware thor and woo where did the time go

[high mulch]

I feel that, this past week after a mild burn out, I decided to play some games, ended up going back to final fantasy online, which got me busy. Definitely understood some of the dynamics of the game, since last time I played it I was still with the WoW fever, hence, I didn't invest too much time on ff online.

[sand trench]

https://www.youtube.com/watch?v=AXbycRBb-6E

ah the irony of shadow watching this when they just bought a new computer and gpu

[pliant cairn]

lol

i miss new world. i stopped playing it cause i got a burn out playing that game lol

and ofcourse due to the fact that there is like almost no content in the game since, forever.

[high mulch]

I felt tempted to get into that game, but I decided to give it time, and it flopped. lol

[sand trench]

yeah new world had a great launch and then went downhill from there

[supple tangle]

i was grinding eve online and then started learning c# in that time instead and just didn't go back to games yet

[pliant cairn]

yeah give it another 27 years game will be good trust me.

[pliant cairn]

Great choice lol

[high mulch]

Some mmo I usually go back from time to time is warframe, and that's just because I did invest too much money on it, I feel like I need to at least take advantage of it. lol

But the recent content has been good imo.

[lone thistle]

I used to put crazy hours into EVE Online

[supple tangle]

yeah eve is a huge timesink

[shut hawk]

I've recently been playing no mans sky

Beautiful graphics

[pliant cairn]

yup. and the expansion was meh and pricey. and despite no SEA servers i still spent money on that game cause i loved it and here we are. i wanted to support devs and so i did. well all my rupees are gone now lol

[lone thistle]

i picked it up on the sale played a bit today for the first time

the UI is so frustrating

[crude stump]

Game got boring

[lone thistle]

and building things

[sand trench]

yeah the new update pushed that hard

[shut hawk]

hmm how so?

[pliant cairn]

really? im considering to get it

[shut hawk]

it's a bit of change but I got used to it

[shut hawk]

they've released a lot of stuff

[pliant cairn]

if you played nioh with keyboard any ui and menus would feel clean and neat.

lol

[shut hawk]

oh LOL, does jetpacking above work?

that's funky

[lone thistle]

I got it in the end had to go outside the building and snipe an angle for it to snap 😭 will try jetpack next time tho

and it's like

[high mulch]

I played that game with Keyboard, and then I tried with controller since some friends were "Uh, souls-like games are better with controller".

I couldn't with the controller. I already had everything mapped with the keyboard, it felt smoother.

[lone thistle]

WHY do I have to hold down buttons to confirm the simplest of actions in the UI

[crude stump]

For me. Once you get a good ship you just don’t know what to do

[shut hawk]

What ship did you get?

[buoyant tree]

Factorio?

[pliant cairn]

a fellow nioh enjoyer on keyboard.

[lone thistle]

no man's sky

[shut hawk]

fair point

I wonder if there's a setting for that

[pliant cairn]

ahh...what about that expeditions and stuff?

[pliant cairn]

cant wait to get myself beaten up the 20th million time lol

[crude stump]

S class solar sail

[sand trench]

BOOO not showing the colorscheme/theme BOOOO

[pliant cairn]

looks good. what theme is it?

[loud marlin]

soon™️

[shut hawk]

oh i think u can get way bigger ship then that fwiw

[loud marlin]

its hyprland with things

[lone thistle]

if it was just "hold down to destroy something" sure but having to hold down to open something, confirm dialogue, hold down for visor, hold down for so many reptitive things qq

[loud marlin]

all the info

[sand trench]

see easy to see theme

[sand trench]

yuups

[high mulch]

lmao, yuppp. But sometimes I simply use a trainer for those games. Although I simply try to keep my character leveled up enough I can still die if I don't pay attention to healing/attacking timing.

[crude stump]

I might get back into it

I still got the game just haven’t touched it in a while

[pliant cairn]

wasn't fastfetch discountined or something?

[loud marlin]

neof

[sand trench]

neofetch was yes not fastfetch

[pliant cairn]

oh right

i felt bad lol

[sand trench]

nah understand the missunderstanding

went for fastfetch as it is faster and currently maintained

[shut hawk]

ok yeah the building is annoying 🤣

[lone thistle]

yeah 😅 other wise it was great fun so far

quit and went on satisfactory instead

[opaque zodiac]

Good choice

[lone thistle]

3D factorio is not something I realised I needed

[pliant cairn]

anyways off to sleep. Nighty night heckerpeople

[lone thistle]

gnight 👋

[shut hawk]

1.0 RELEASE SOOOON

So hyped for it

And factorio DLC

[opaque zodiac]

Nighty night

[shut hawk]

What a year

[lone thistle]

september! but wow expansion is gonna be having me in a chokehold when that comes out in august

[shut hawk]

October is factorio and September is satisfactory right?

[lone thistle]

I believe so aye

gonna have to micromanage my time between like 5 games

MFS 2024 in November. Craazy

[shut hawk]

WAIT FR?

Not another one man

[lone thistle]

YEAH

oh Jayy you need to watch the trailer

[shut hawk]

I'm starting uni in September

[lone thistle]

https://www.youtube.com/watch?v=p3xp-SnZDoY

I'm SO excited

[shut hawk]

I'll put it on the back hold

MFS more important

[lone thistle]

defer a year 😛

[buoyant tree]

Playing Microsoft Flight Simulator on PC is a much much better experience than Xbox lol.

[shut hawk]

Tbf....how hard can the first year be anyway 🤣

[shut hawk]

HYPE

The air ambulance omg

🔥

[molten pagoda]

Hey. Does any one of you earn money from bug bounty or cyber assessments online?

I have a few questions

I'm curious about some things

[chilly veldt]

Ask away

[tepid furnace]

dcs > mfs

[shut hawk]

BOOO

https://tenor.com/view/boo-gif-19787475173016375

[tepid furnace]

you just fear the aim 120c

[shut hawk]

you just can't beat the MFS graphics

[loud marlin]

here you go @sand trench

[molten pagoda]

Thx

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 859)

[tepid furnace]

on some aspects yes

[molten pagoda]

What kind of level does it require?

[tepid furnace]

some dcs instrument models look nicer and feel nicer

but overall terrain mfs > dcs

[sand trench]

YAY found the guide again: https://www.youtube.com/watch?v=6rZxeyILYmo

[molten pagoda]

I mean is it way harder than what we do on tryhackme or is it almost the same...?

[tepid furnace]

well

[shut hawk]

beautiful!

[tepid furnace]

doing bug bounties is different then thm persay

places like thm and htb just give you the tools to do the job

and even then it's still not an exhaustive list

it's a lot of trial and error and just learning what to look for

[crude stump]

Also you have to take into consideration the scope

[molten pagoda]

Wdym

[tepid furnace]

not to mention people who have been doing bounties years longer then you will have taken all the low hanging fruit

[shut hawk]

honestly completely random, some people just come across leaked API tokens - no skill in that. On the other end of the scale you get very complicated exploits that require more knowledge then just from THM

[tepid furnace]

do you know what a scope is?

[molten pagoda]

Is it your case or do you have the occasion to get some nice bounties?

[tepid furnace]

what do you mean

[crude stump]

Bug bounty’s have a set of rules you have too follow so you don’t disrupt or cause problems with the website you are doing the bug bounty.

[tepid furnace]

that's just how it is in the bug bounty industry

some people do it as a fulltime job

thus those people who have been doing it for years have years of experience looking for bugs

[molten pagoda]

Yeah i see what is the scope. I just asked what you meant but i guess you just said about what is required

[tepid furnace]

and most likely have automated lots of the low hanging fruit

[molten pagoda]

Ok i see

And you guys happen to do some bug bounty?

[shut hawk]

By all means though, go for it - bb is a good learning opportunity

I've done some bug bounty before

[tepid furnace]

I dont do it personally since it doesnt seem like something I wanna do rn

but before attempting bug bounties be sure to stop by the owasp room

or even just read the owasp top 10

[molten pagoda]

Well that's why i was asking

[fleet turtle]

It requires experience, lots, just try and learn

[tepid furnace]

portswigger academy will also be a good resource since most bug bounties are web based

[molten pagoda]

I like doing some cybersecurity but rn i'm starting to need to get money. I was wondering if i could manage to get a couple hundread bucks a months just doing that

[tepid furnace]

no

not soon anyways

[shut hawk]

My advice would be to go into it with the mindset of learning something new, not as a money source

[crude stump]

Oh. What I ment by take into consideration is you have to have knowledge on the tools you are using so you don’t accidentally ruin something and now the company is after 🫵

[molten pagoda]

Yeah sure, i did it, it was nice

[tepid furnace]

do not start doing bug bounties for some money

you will not see any money in the first few months

unless you already have lots of experience

[shut hawk]

It's not a reliable source. You can get lucky and hit a big jackpot but then you might go for months without anything

[tepid furnace]

do bounties to learn instead

[molten pagoda]

Oh ok i see. Yeah that's another problem

[molten pagoda]

Ok i see

[molten pagoda]

Yeah it does seem great for learning

[tepid furnace]

and also remember when doing bounties

if you have to ask yourself

"is this allowed"

it probably isnt

[molten pagoda]

Lmao

[tepid furnace]

always read through the scope throughly

and document everything you do lol

[molten pagoda]

Are there a lot of things forbidden?

[crude stump]

And do research on why it isn’t so you know even better for the next time

[tepid furnace]

it varies bounty to bounty

but 99.99% of scopes do not allow disruptive methods

like dosing etc

[molten pagoda]

Dosing?

I'm not doing advanced stuff rn

[crude stump]

Denial of service

[molten pagoda]

Oh yeah sure

[tepid furnace]

I encourage you to look into web servers and services first

and then attempt a bounty or two

[molten pagoda]

I've done almost every offensive path in thm for now

I'm finishing the last one

Then i'm gonna finish more rooms until top 1%

[tepid furnace]

you should most likely link your thm account then

[molten pagoda]

I was thinking of bb to survive but i guess i'll have to work like everyone else

[molten pagoda]

With discord?

[tepid furnace]

and I hope you've been taking good notes

yes

it's how you see peoples ranks

it's just a neat little thing

[molten pagoda]

I'll look into it, see how to tomorrow

[molten pagoda]

Well that's another thing. I've taken some notes for the lessons rooms but not recently as i have been doing more practical rooms or as i thought i'd not look into my notes later soo... I've been taking less notes

[tepid furnace]

it wouldnt hurt to look over what you have and update it then

a good knowledge base goes far

nobody can remember all the syntax and commands

[molten pagoda]

Oh so you note what commands and syntax you used on an assessment?

[tepid furnace]

yup

and then an example of the output

[sharp citrus]

@molten pagoda

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 27, 2024, 9:48 PM

[molten pagoda]

Thx. I was exactly on it

[tepid furnace]

you should also have access to a few other channels now

[molten pagoda]

From discord, how do you see one's account?

[molten pagoda]

Oh

True

[tepid furnace]

there's a whole bug bounty channel

[molten pagoda]

Oh neat. I'm gonna take a look

[tepid furnace]

be sure to check out the resources channel too

[molten pagoda]

But if what u said is true i guess i'll wait before doing some

[tepid furnace]

you can try them now if you want

but just dont expect money

[molten pagoda]

Thx

[twin ridge]

Gave +1 Rep to @tepid furnace (current: #1081 - 3)

[tepid furnace]

np gangster

[sturdy mesa]

I also wanted to ask the same questions as @molten pagoda regarding when to start looking at bug bounties

[molten pagoda]

Yeah well, time is a little against me rn

[sturdy mesa]

Thanks for the info

[tepid furnace]

yee

and unfortunately having a fulltime / parttime job while studying is just a way of life :c

would be awesome to dedicate 100% of time to studying lol

[molten pagoda]

Yeah, it would be

But i have to get a part time job, study too, and then the time left is for tryhackme soo....

[tepid furnace]

just part of the grind

[sand trench]

WOOOHOOOOO

[rapid merlin]

good afternoon

[chilly veldt]

Good midnight

[sand trench]

good beep boop for the meep moop to the sleep sloop

[north raptor]

hey, you guys think CySA+ is worth it?

[boreal scarab]

@idle mica CySA+ Input needed 😄

I think that's the only person with CySA+ in here, that is atleast online/ in the right pane

[solar echo]

Hello.

I got my first ever "You have been hacked" email!

Almost 19 years on the internet, this my first. 😄

[wild rose]

It's a level above Sec+, so if you have some security experience, I would go for it over Sec+. @north raptor

[crude stump]

Classic scare tactic

[solar echo]

It's the best phishing I've seen yet, the remetent sent it from my own email... **apparently

[idle mica]

Depends on what you're going for. Sec+ covers a lot of general topics, but CySA+ goes more in depth with threat intelligence, SIEM stuff, TVM, incident response, etc. It was pretty dry, but ultimately good information if you're going to work in a SOC

[crude stump]

Interesting

[solar echo]

Yeah, I am trying to figure out how they did that.

[idle mica]

I wouldn't "go for it since it is higher than sec+" arbitrarily. There are potentially better certifications out there, depending on what you wanna do

[crude stump]

You should scan your email for a data breach

[wild rose]

well if you want to keep up for Comptia certs then go for it, but yeah depending on experience there are other certs to go after.

[solar echo]

The classic CTRL+V phishing copypasta made me believe it was just an attempt. Not an actual hack.

And that specific email has been breached before several times but I obviously took care of it since then lol.

[crude stump]

Is that all they said “you have been hacked” or did they leave a attachment too

[solar echo]

My opsec with my own email is becoming so complicated that I almost lost access to it once.

[idle mica]

CompTIA certs are mediocre and the only reason I'll ever recommend them is because of HR

[solar echo]

Nothing factual, just a pure ol' copypasta asking for money in LTC.

[idle mica]

Otherwise, they can all go burn in a hole

[crude stump]

Ah definitely a scam then

[solar echo]

But why is it my actual email though?

[boreal scarab]

Has 4 CompTIA cert tags

[solar echo]

Hey guys I possibly have been actually hacked LMFAOOOOOO

[boreal scarab]

[idle mica]

I hold all of CompTIA's cyber certs lol

[boreal scarab]

https://tenor.com/view/were-not-worthy-waynes-world-gif-9201571

[crude stump]

Spoofed it maybe?

[idle mica]

CASP+ was somewhat decent and the SecurityX exam content was decent, but the exam itself was straight booty cheeks

Especially compared to GIAC

[crude stump]

They prolly spoofed your email

[solar echo]

Yeah, I am thinking that's the case too.

[idle mica]

They hired a toddler with MS paint to make the PBQ graphics

[solar echo]

Bruh help me out, stop flexin' on us.

[idle mica]

My point was that I'm familiar with the exams and training content

[crude stump]

But it’s stupid that they would send you a email with your email. It could be to pushed the “you have been hacked” even more

[solar echo]

I know, baby, I am just kidding.

[crude stump]

I’m sure someone who isn’t familiar with scams saw that their own email was texting them.

[idle mica]

I'm shit at reading tone online

[solar echo]

Yeah, they said they hacked me on my Microsoft online.

[solar echo]

We are hackers, we are (almost) all on the spectrum. We get you.

[wild rose]

Working on AWS security cert rn which is just long winded.

[crude stump]

What I find funny is when I get scam messages or calls of stuff I don’t even use

[solar echo]

I do use my Microsoft email, though.

It's most likely spoofing but... to what extent and how, exactly?

[crude stump]

https://www.cloudflare.com/learning/email-security/what-is-email-spoofing/

[idle mica]

I heard the AWS stuff is a lot. I've gotta take the GRTP by August 5th and I've been slacking on reviewing kerberos 😭

[wild rose]

Good Luck

[solar echo]

Yeah, I know, but how did they do that with Outlook?

Aren't they supposed to be over with this kind of thing at Microsoft?

Imagine building LLMs and not using them to train to filter out phishing emails.

[crude stump]

https://support.microsoft.com/en-us/office/phishing-and-suspicious-behavior-in-outlook-0d882ea5-eedc-4bed-aebc-079ffa1105a3

[solar echo]

Yeah, what I initially thought. I am not going to explain it here because it could teach some folks how to perform a wild and (apparently) new spoofing method.

Wowzies, they are getting smart.

[clear jackal]

If you think about it, people would probably get upset...

[solar echo]

Hm?

[crude stump]

Not only that but wouldn’t you be filtering out alot of non scam emails too

[solar echo]

Question (for mods, specifically): is it ethical to track cyberwallet information? cause some are public, right?

[crystal mirage]

uhm is this normal?

[shut hawk]

What's wrong with it?

[crystal mirage]

no ip

[solar echo]

Screencap the entire browser/application.

[crystal mirage]

we already reseted

[shut hawk]

The machine takes some time to deploy

I'd wait a bit

[crystal mirage]

Oh okay, previously it did instantly so I thoughts its a bug

[shut hawk]

I mean, it may be a bug - but I'd wait just in case

[solar echo]

Specially if your specs are a bit older, mine are mid at best and I had some issues deploying the machines before.

[crude stump]

Mr did you google stopped texting

Aw man

[shut hawk]

Nothing to do with your specs, all the machines are deployed on AWS infrastructure

[clear jackal]

"hi Microsoft here, in order to protect you and your safety, we're going to scan and feed all of your emails to an AI/LLM."

[crude stump]

I was wrong

[solar echo]

There has to be a least a little bit something with the specs because once my Attackbox lagged so much that I had to take a break.

[clear jackal]

It more than likely wouldn't go over well, in the US at least, tbh

[fleet turtle]

this is hilarious to read through

[solar echo]

I am pretty sure that they already do that but.

[shut hawk]

For deploying, no. For accessing, your network connection would come into play

[clear jackal]

And is probably a GDPR nightmare

[fleet turtle]

is it a puny code email or what?

[solar echo]

Spoofed email, my very first one ever.

[fleet turtle]

oh interesting

so its just an imitation?

[mossy river]

We don’t use the n-word here @solar echo

[solar echo]

Outlook is very limited so, when I clicked the Contact info, it only showed my actual own information, even my LinkedIn.

[solar echo]

Fair enough, Jabs.

[fleet turtle]

oh, it being outlook explains a lot lmao

havent heard a single good thing about outlook... or any other microsoft product

[solar echo]

I use it for normal purposes. My cysec email is on Protonmail. Which is just ~le hacker email provider.

[fleet turtle]

i use tutanota

after the french protester + proton thing i kinda dropped it

[solar echo]

I don't like Proton either, there are some things we do just for the aesthetics because people are more likely to trust things that are aesthetically cohesive with the premises of whatever they are looking for.

If you read Proton's ToS you are going to piss yourself laughing too.

[fleet turtle]

trying to find one non-rounded corner in a proton product is difficult, i like back when they advertised themselves with the black and green format, when proton VPN felt like some cheesy hacker movie command center or something, it was sweet

tutanota doesnt look pretty, but you can have it be greenish and black, which is pretty enough for me, and from what ive heard its pretty secure, i havent heard the big scandals i have heard of with proton mail

[solar echo]

I hate the fact that we as a culture have this idea of necessity of being ahead of everything before it even gets anywhere.

Everything gets destroyed so fast, it's so exhausting to be jumping from one thing to another.

I am pretty sure I am late to the party when it comes to VPNs too, I am still using Mullvad.

[fleet turtle]

ive heard great things about mullvad, i only use proton because its free and i cant get an income yet, once i can without a doubt i would be paying for mullvad

[clear jackal]

What other scandals were there, besides being forced to provide a public IP address by the Swiss Authorities under threat of company closure?

[molten sky]

mullvad was awesome

i feel like their ip rep has gone down tho

coincidentally, the ip rep [seems to be] worse now than when they allowed port forwarding

[clear jackal]

A VPN fixes the issue too

[solar echo]

Swiss Authorities

Have you heard about the thing with the .ch domain? I am pretty sure most people here are familiar with that genius scam of theirs, right?

[fleet turtle]

from what i heard they had to hand over the emails the french protester sent that were in any way involved, i remember shortly after there was a second scandal and everyone was saying "they never change" or something, i didnt look into it much, even though i dont have anything to hide, its not something i want to deal with

[solar echo]

My hacker friend who happens to be extremely talented and much more knowledgeable than me gave me Mullvad for free and told me it was good.

[fleet turtle]

oh i see, so they handed over data of a french activist and participated with the FBI to hand over information, the FBI thing was the second scandal, just had to google a bit

[solar echo]

But I question everything as we all probably/should do, right? so I was like, isn't there a better option?

[rapid merlin]

hi

[solar echo]

Basically, any VPN providing company which has diplomatic ties to the United States is forced to provide information as requested by both the CIA and the FBI.

That's why, even though they have incredible reputation, most high-level unethical hackers don't trust VPN servers which are hosted in Iceland.

[fleet turtle]

apparently they havent and dont hand over VPN data because swiss laws dont make them, but swiss laws do make them hand over the email stuff

thats what ive heard, im not swiss and wouldnt know otherwise

[mossy river]

?

[rapid merlin]

ohh proton

i used to love proton

before they started handing data out lmao

[fleet turtle]

thats what we are talking about

the mail stuff

[solar echo]

The folks are answering for me.

[rapid merlin]

yeah i used to use them until all of that happened

[fleet turtle]

also does anyone remember what kaspersky got banned for?

[solar echo]

[molten sky]

russian

[fleet turtle]

i remember it was because of NSA having the like, 300th lapse in opsec, but i mean i really liked kaspersky

[solar echo]

No, I think it was because the FBI bought them?

[clear jackal]

You heard incorrectly as far as I can tell, it was just an IP address. https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/

[solar echo]

I forgot, which VPN company did the FBI buy?

[fleet turtle]

all the sandboxing videos of it against viruses i watched showed it outperform other top notch antivirus by a decent margin

[solar echo]

UNBELIVABLE LMAO

[rapid merlin]

ties with russian intelligence

[fleet turtle]

oh, thats fair then i guess

[solar echo]

Every VPN company has govt. ties, but they're handled by specific countries.

[fleet turtle]

the best antivirus is common sense, though

[molten sky]

just looked up their wiki page --
that's a sick office ngl

[rapid merlin]

same way an american vpn company that had ties with american intelligence would be unusable in russia tho lol

[solar echo]

One of them is Russia with equal-level ties with China, North Korea and Cuba (and I am forgetting probably two or three small nations in central america and Africa). The other is the US.

[fleet turtle]

hollly they have the holywood overhead screen ring

i would kill to work there

[solar echo]

Proton's issue.

[solar echo]

I might correct myself. Mullvad is probably just existing LMFAO.

[molten sky]

check the back glass

the frosted window

[rapid merlin]

tbf in protons privacy policy it does state they cant transmit data to foreign authorities but may be legally required to disclose user information to swiss authorities if swiss law is broken

oh wait

they gave the info to spanish police?

[clear jackal]

Which is what happened with the French case, they told the French to buzz off

[solar echo]

The info has leaked.

And now everyone has it.

Which was supposed to be TOP SECRET because VPN.

[clear jackal]

From what I've read, the Swiss are getting notifications through EuroPol and making determinations on what they're requiring Proton to provide based on Swiss law

[rapid merlin]

if im reading this article properly the guy or lady connected their apple account as a recovery email on proton

lmao

[fleet turtle]

are there any THM modules for malware, not black-hat just for pentesting/offsec

[solar echo]

mfw Switzerland's cybersecurity laws

[fleet turtle]

they have a pretty neat office

[crude stump]

Looks like every other hq

[clear jackal]

I'm not really sure what you're going on about fwnction, but do you have any sources for what you're saying?

Not really sure why you're reacting to my messages either

[fleet turtle]

then every other hq is pretty neat

¯_(ツ)_/¯

[rapid merlin]

a spokesperson for proton said in a statement "Note, Proton does not require adding a recovery address as this information can in theory be turned over under Swiss court order, as terrorism is against the law in Switzerland." and "Proton provides privacy by default and not anonymity by default because anonymity requires certain user actions to ensure proper OpSec, such as not adding your Apple account as an optional recovery method."

[solar echo]

Gotta love the semantics.

[rapid merlin]

real asf for it though

[vapid widget]

This Retracted room.🫨 🤯

[fleet turtle]

wow the KT drama in korea is wild

[umbral bay]

Is it a good challenge for you?

[pine matrix]

morning all

🙂

[solar echo]

In a scale of 0 to a 100, how embarassing would you say your CGPT's history is?

Mine is probably like 20.

I just asked it "what is a breadbasket failure"

[fleet turtle]

there is a learning path on THM for DevSecOps? this is sweet

[solar echo]

I would reconsider taking it if I were you.

A DevSecOps professional here mentioned that it is 90% non-updated and had straight up errors in it.

And that the reported it and that some staff members were working on refining it and fixing the errors he reported.

[pale swift]

yoooo

[solar echo]

"90% of the beginning half"

[pale swift]

wazzup

[fleet turtle]

well once its updated ill have to look into it, id like to learn how security is implimented into applications

[solar echo]

Hi, youngling.

[pale swift]

theres a problem in one of the rooms
idk if its a bug or its a problem on my end

[fleet turtle]

are there any paths for how pentesters make malware? (moderators i swear to god this is purely because im curious about it in a whitehat context)

[pale swift]

bro had to clarify

lol

[solar echo]

Pentesters don't make malware particularly.

[pale swift]

fwnction

[solar echo]

And malware is a restricted subject here so you have to be like, something special to have a convo about it.

[pale swift]

.

[solar echo]

What's up, youth?

[solar echo]

#room-help #site-bugs

[fleet turtle]

well whats the name for malware that isnt malicious, but is in the good faith of pentesting?

[pale swift]

sure

[solar echo]

Just a pentesting software.

[fleet turtle]

well are there any paths that go into that?

[solar echo]

I don't think red-teamers use malware, lol.

[fleet turtle]

i know there was a programming for pentesters one

[solar echo]

They probably code their own, that's as much as I can say as I am in a thin line with every mod here.

[solar echo]

No.

[fleet turtle]

red teaming and pentesting are two different things im pretty sure

[fleet turtle]

i think that may be sufficent

[fleet turtle]

so ive seen lmao

[pale swift]

they r

[fleet turtle]

oh it was scripting for pentesters

powershell and python

[solar echo]

Red teams coexist with blue and purple teams within the pentesting umbrella. They would be the ones creating "malware" in your case scenario.

[umbral bay]

Exploit development. Also completely okay to try out the DevSecOps path if you're interested in it.

[fleet turtle]

much appreciated

[solar echo]

https://tenor.com/view/voxterego-voxed-jodie-foster-rozed-gif-19662726

[pale swift]

dudes

[fleet turtle]

i will add it to my cart

[solar echo]

Jodie so based.

[pale swift]

my attackbox isnt working

[solar echo]

#room-help

and #site-bugs, my friend.

[pale swift]

theres no one there

can u try and help pls?

[fleet turtle]

so would the scripting for pentesters path be sufficent for exploit development?

i need to summon an 0xD or something

[solar echo]

One thing you gotta learn is just explain your situation already don't preface it with something that's not going to help us understand any of what you are going through.

[pale swift]

sure

[solar echo]

I think you have to be either 0xD or something else within the community for these.

I don't have access to the malware rooms.

[pale swift]

when i type whois facebook.com in my attackbox
it says network is unreachble

[fleet turtle]

for exploit development?

i didnt know that rooms are rank locked

[solar echo]

At least within the THM community, yes.

[fleet turtle]

is there that much of a wealth of content?

[molten sky]

internet connection only available to subscribers iirc

[fleet turtle]

i mean that seems reasonable to me

[molten sky]

rooms solveable without internet so not required

[pale swift]

but its not working tho

[solar echo]

There's a locked/restricted channel here for it, so I assume the same logic applies to the rooms.

[molten sky]

did you subscribe? you don't have the role here yet

[fleet turtle]

i was just curious about it because no matter how much i learn not making my own tools feels like a skid move

[pale swift]

i didnt

[crude stump]

It’s not

[molten sky]

exactly

[pale swift]

but this room is free

so why is the attackbox feature not free?

[molten sky]

the attackbox is free

the attackbox just does't have an internet connection (when free)

[solar echo]

It is, but accessibility to some specific stuff on the website isn't.

[pale swift]

bruh

[fleet turtle]

so the scripting for pentesters module should be sufficent for me lmao

[molten sky]

honestly in my (albeit limited) use of the attackbox and online kali box, I have never needed the internet for more than maybe pulling a file from my local once or twice

[solar echo]

I studied 96h in a 144h period of time (?)

Jarvis, is that possible?

[pale swift]

ill send the ss

[solar echo]

Ayo, just say screenshot.

[molten sky]

nah ss 100%

[pale swift]

ong

[crude stump]

Making your own tools doesn’t make you a better hacker. It’s how you use those tools. Does it make you a worse mechanic if you use machine made tools that you yourself didn’t make? No it does not.

[solar echo]

The political implications might get the kid in trouble with moderation.

[molten sky]

yeah because you're not a subscriber
what room is this for?

[pale swift]

introductory networking

[fleet turtle]

once i become a subscriber i will do Jr pentester > security engineer > SOC level 2 > offensive security > scripting for pentesters > red teaming > dev sec ops and then do some reinforcement

[molten sky]

i think you're the only person who thought that lmao

[solar echo]

Yeah, what room is it and I'll test it for you.

[solar echo]

Link, child, link.

[pale swift]

omg

[fleet turtle]

that is a helpful way to think of it

[solar echo]

Bruh, I have been SILENCED for less, so, youknow.

[pale swift]

https://tryhackme.com/r/room/introtonetworking

[solar echo]

I'll get back to you in a second.

[graceful thistle]

reinventing the wheel is definitely not always a good idea yeah. Devs often want to build their own tools too which will take lots of time and effort, while there may already be a fine product available

[molten sky]

lmao that's a bit of an oversight i guess

[pale swift]

sure

[pale swift]

how

oh right

[molten sky]

because this one does require internet

[pale swift]

lol

[molten sky]

all of these you can run locally on your own pc tho, which is good

[pale swift]

but how?

[solar echo]

The child is learning, don't make things more complicated.

[molten sky]

are you on windows or nix/mac

[pale swift]

windows

i dont got linux

[solar echo]

Don't worry, you don't need to learn pip and sudo apt-get install yet.

[molten sky]

not really, no vm needed for this Q, just pop open a shell

[pale swift]

its one of the commands taught in that room tho

[graceful thistle]

yeah I cant say I havent done it myself either, haha. Its fun so its fine, but professionally its good to know where to draw the line 💯

[pale swift]

not pip

[solar echo]

coomands
Ew.

[solar echo]

Pip is for Windows/Python.

[umbral bay]

In Task 7 it mentions for you: 🙏
For Free Users using the AttackBox, there is a web version of the whois tool.

[solar echo]

But yes, learn how to properly apply your sudo commands RESPONSIBLY.

[molten sky]

in that case i unfortunately can't guide 😂 if it was linux i'd just say run the same command as shown, whois xyz.com

[solar echo]

Fine, we will let the child cheat. whois.com is a thing. @pale swift. Click on Whois on top-right side of the website too.

[molten sky]

idk if windows includes an equiv outside fo sysintenernals, which is a separate pack

[pale swift]

thank u my good sir

[twin ridge]

Gave +1 Rep to @solar echo (current: #470 - 10)

[crude stump]

Yes

[molten sky]

ah nice that was thought of when making it

[solar echo]

https://www.whois.com/whois/

[molten sky]

completely different info

not really close imo

[pale swift]

[molten sky]

you can get domain info by mailing a letter to the registrar as well

[solar echo]

I took down an illegal pornographic website with Whois once, BASED!

Got some rep from one of the scariest countries on the planet for it.

[fleet turtle]

im not even gonna ask how

[pale swift]

yo thats sick dude

[pale swift]

which country?

[solar echo]

https://tenor.com/view/winnie-the-pooh-hungry-dinner-gif-14590837

[molten sky]

perma notif

[crude stump]

Ikr

It’s annoying

[pale swift]

i dont get it

[solar echo]

One of which was dark mode.

[molten sky]

dark mode 👀

[solar echo]

They recently said they're still working on it... since 2022.

[molten sky]

yeah i thought it was still TBA

[fleet turtle]

does anyone have any suggestions for a CTF i could do once i finish the jr pentester path that i should be able to do? im looking at the stuxCTF and Mr robot CTF but, i dont think i would be able to do those based off the jr pentester path, would i?

[crude stump]

Seens like a crazy hard task ngl

[fleet turtle]

actually i didnt realize the jr pentester path was so in depth

[solar echo]

Mr. Robot CTF

[fleet turtle]

first CTF i saw

[solar echo]

Have you seen the show?

[fleet turtle]

watched a bit of it and when it got into the drug spiral i got bored

[solar echo]

You're a 0x2 too, a baby, I wouldn't recommend the Mr. Robot CTF yet.

[fleet turtle]

i said when i finish the jr pentester path

aka once i get a subscription lmao

its hard to find any that i could do as "a baby"

which is why im asking for suggestions

[solar echo]

Just go for the introductory learning paths.

[fleet turtle]

well once i use those up, what is something i can do to reinforce whatever i learn

[naive cave]

so quick question basically the gobuster tool is limited when it comes to real world situation right?

[fleet turtle]

i mean it does what its meant for from what ive heard

[solar echo]

After that, go Security Engineer.

[umbral bay]

How serious do you want to complete it, or did you just start the learning path?

[fleet turtle]

i think if a website is faulty like the fakebank thing, it would work the same way it does in that room

[fleet turtle]

could you elaborate?

[umbral bay]

Did you try the free rooms in the learning path?

[naive cave]

ohh buh in real world cases real web app banks with 80% or 100% security thier are other tools that comes in handy right?

[fleet turtle]

yes, i got up to the pentesting fundamentals room

[mossy river]

Yeah that sound like you broke a law

[naive cave]

he broke the law in a good way

[mossy river]

It’s against the community rules here

[solar echo]

It didn't, I worked with the country's intelligence agency and security bureau, I recently got the news that the hosting providing company shut down and some folks were arrested. 😄

I just don't talk about it here because people mocked me the first time I did it because it's hard to prove it.

[mossy river]

Do you have-

Yeah…

[solar echo]

Without, you know, breaking NDAs XD.

[mossy river]

Probably shouldn’t talk about it if you risk breaking an NDA

[solar echo]

I am pretty aware of it.

[naive cave]

if you say so

[mossy river]

If you haven’t already, I would read the community rules :)

[umbral bay]

There should be more free rooms in the learning path, I know it is unfortunately not self-apparent which rooms are free on either the outline page nor on the enrolled path page. 🙂

[fleet turtle]

would they be sufficent for my first CTF?

[umbral bay]

It depends on personal foundation, it is a good start as a general introduction for offensive security.

[fleet turtle]

any suggestions? i dont have much of a foundation which is why im doing the paths

[umbral bay]

If it is challenging and many things don't make sense, might be an idea to start with Complete Beginner learning path.

[fleet turtle]

i understand most of what ive done so far without issue, im just looking for a simple CTF to reinforce it

[umbral bay]

Super search 😄
https://tryhackme.com/r/hacktivities/search?page=1&order=most-popular&difficulty=easy&roomType=challenge&status=not-completed&contentSubType=free

[fleet turtle]

should these be doable after i finish jr pentester?

comprehensible?

[solar echo]

Bro, just do it.

Make your dreams come true.

I genuinely believe you are capable.

Tim can I get a rep for that?

[pale swift]

dude

[fleet turtle]

standing ovation

genuinely good advice

[pale swift]

what age do u guys think is the optimal age for a person to start learning cybersec

[chilly veldt]

At any age

It doesn't matter

[solar echo]

LMFAO any age, bruh.

I hacked my first CCTV at age 6.

[pale swift]

uh huh

[solar echo]

But I learned cybersecurity like 3 months ago.

[umbral bay]

Probably, but there are usually write-ups when you get stuck. In the Write-ups tab on the room page for challenges. @fleet turtle

[pale swift]

u started or completed learning?

[chilly veldt]

Not the best idea to say that you've done illegal activity

[solar echo]

Started.

[solar echo]

It wasn't illegal.

[graceful thistle]

😴 💤 ?

[fleet turtle]

was it hacking or one of the ones that you just search the ip and it opens up?

[chilly veldt]

Out celebrating my friends birthday

[pale swift]

u completed the learning paths?

[fleet turtle]

ive seen far too many like those

[graceful thistle]

have fun 😄

how did work go yesterday?

[fleet turtle]

you never finish learning, really

[solar echo]

Yes, it's called Google dorking and it's that easy.

I just recently learned that you can properly hack big stuff with that.

I just did that when I was a baby and got scared for my life.

[fleet turtle]

i remember figuring it out and it felt too much like liveleak to not be unsettling

[chilly veldt]

Thank you, they are all tired, and therefore it's discord time

[twin ridge]

Gave +1 Rep to @graceful thistle (current: #23 - 367)

[chilly veldt]

Too many other things to do, so I didn't get to rewrite

[solar echo]

Today I know that it wasn't illegal because it was a public cam for a factory in the artic circle.

[pale swift]

what was on the the CCTV?

[fleet turtle]

now that is pretty sick actually

[fleet turtle]

thanks, good to know

[twin ridge]

Gave +1 Rep to @umbral bay (current: #16 - 464)

[pale swift]

real

[solar echo]

It was a factory in a very cold country. I could see some workers in uniforms, some trucks coming in and a BUNCH of snow.

[fleet turtle]

did it happen to be a seed vault?

[pale swift]

what field do u plan on going into?

[pale swift]

theres only 1 right?

[solar echo]

I'm Brazilian, Liveleak was not on my computer, it was my outside

[fleet turtle]

theres many, the one in iceland is just the most well known

[solar echo]

I already am a Cybersecurity Engineer.

[pale swift]

oh sick

[fleet turtle]

that makes sense

[solar echo]

I shifted from AI engineering to Cybersec and now I am an engineer in both.

[pale swift]

oh wow

[solar echo]

I'll go to uni for biology so I can become a computational neuroscientist. I think that's ultimately what I want to be.

[pale swift]

did u design the AI's or just use the prompts

[solar echo]

XD

I program the AI models, yes.

[pale swift]

noice
pretty sick

ive still got a long way before uni

[solar echo]

So, you're a baby baby, huh?

[pale swift]

bruh, no

[solar echo]

It's pretty cool that you are already taking your first steps into what you want to do.

[pale swift]

im in highschool

[solar echo]

That's not too long from uni.

That's like 3 years?

[pale swift]

this much info at once is quite daunting tho

[pale swift]

3-4 years

[solar echo]

You'll learn to deconstruct your perfectionism with time.

You will be crushed by any area of study if you look at them with an overview of what they can possibly be.

[pale swift]

its already been deconstructed

[solar echo]

But don't mind it and just go for whatever you are interested in and keep going.

[pale swift]

looking at all the paths at once

[fleet turtle]

its very nice that sites like tryhackme and hackthebox make hacking an accessible topic even for young people

[pale swift]

ye

completely off topic

but did u know theres a lizard that shoots acid out of its eyes?

[solar echo]

Yes.

It's not acid, it's blood.

[pale swift]

oh

[fleet turtle]

i know there a beetle that shoots basically fire

[graceful thistle]

that was random 🥲

[fleet turtle]

some people just like chatting

¯_(ツ)_/¯

[graceful thistle]

I have no complaints

[fleet turtle]

i cant blame anybody for it

[pale swift]

theres also an ant species that has almost completely taken the insect world

[fleet turtle]

the one that takes slaves?

[solar echo]

I will counteract with that fact with a crazier yet similar one: there are venomous birds.

[pale swift]

oh wow

[fleet turtle]

hell from above

[solar echo]

https://en.wikipedia.org/wiki/Toxic_bird

[pale swift]

somehow australia isnt mentioned

[chilly veldt]

Guess I am not going to sleep tonight

I am in reversing mode

[solar echo]

It's in Papua New Guinea, close enough.

But neither Brazil or Madagascar are mentioned, that's what's different.

[pale swift]

those birds are most prolly being used by the cartels

[graceful thistle]

crazy animal facts always welcome in the Great outdoors thread

[fleet turtle]

malicious version of a carrier pigeon

[pale swift]

a pigeon with weapons

[fleet turtle]

the pigeon mailing equivalent of malware

[chilly veldt]

Dolphin, it's new project time!

[graceful thistle]

nice, what are you up to

[chilly veldt]

Reversing some stuff

And then making some project out of that

Open source of course

[graceful thistle]

awesome 😄 gl,hf!

I forgot my laundry... 😦 damn.

[boreal scarab]

Need a break from RoN..... traps keep killing me even though I peak, and there's 0 traps... just materialize outta nowhere

[chilly veldt]

Thankz, have some friends who works on the closed source project, but they were like "just reverse it"

[fleet turtle]

what is RoN?

[chilly veldt]

So took it as a challenge

[boreal scarab]

Ready Or Not

[fleet turtle]

oh i see

[chilly veldt]

Skill issue

[boreal scarab]

You got RoN?

[chilly veldt]

No

[hearty patio]

Game looks intense man

[boreal scarab]

Then shhhhhhhh lol

[chilly veldt]

I can still say skill issue

[boreal scarab]

Oh it is, it very much is, all CQB

[boreal scarab]

Not till you tried it 😄

[chilly veldt]

Yes I can, cause I know how the game works

[boreal scarab]

https://tenor.com/view/oh-sure-john-candy-ok-gif-15377612

I wanna play RoN again......... but ugh

[fleet turtle]

i would if it wasnt like 40 bucks

even if i did have 40, i will put it into 2 months of THM lmao

[naive cave]

just finished the intro to defensive security room any advice

[sonic dust]

Just buy a 1 year sub

It was like 100 bucks during Xmas sale I think

[fleet turtle]

i cant, that is a massive payment for the stage im at in life

im unable to be legally employed

a subscription is more sustainable for me

[graceful thistle]

Im not sure if you already know this but there are occasional giveaways you can partake in (like https://discordapp.com/channels/521382216299839518/773968374870966292/1258862647043166309 )

just a heads up, keep an eye on that channel!

[clever shard]

@pallid lotus I loved the dirty pipe room well explained well and forces the reader to search stuff.

+rep @pallid lotus

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #9 - 782)

[fleet turtle]

i will definitely have to partake

+rep @graceful thistle

[twin ridge]

Gave +1 Rep to @graceful thistle (current: #23 - 368)

[fleet turtle]

+rep @solar echo

im assuming there is a cooldown

[graceful thistle]

yeah

5 mins iirc

yw 🙂

[fleet turtle]

let me try again now

+rep @solar echo

[twin ridge]

Gave +1 Rep to @solar echo (current: #438 - 11)

[fleet turtle]

there we go

[jagged otter]

Hi

How's it going?

[graceful thistle]

Hello

rainy sunday chilling, hbu? how was the movie? 😄

[jagged otter]

The movie was alright

I'm in bed but can't sleep

[graceful thistle]

thats annoying

[jagged otter]

Keep thinking about studying

It's like I'm hooked

[graceful thistle]

on a feeeeeliiiing 🎵

[jagged otter]

LoL

Ive been trying to figure if all security paths are blue team directed. Which one for red team and ones for blue team

Paths I mean

[fleet turtle]

not really

theres a red teaming and a pentesting path

theres just more SOC and DefSec paths, but there are plenty of pentesting/red team modules

[jagged otter]

Yes I know, but from beginner to advanced

Offensive paths and defensive paths

Like to stick with one and move to the other

Even though I'm sure they intertwine

Just saying total beginner learned basics and now wanting to do strictly offensive studying

Up to red team

[fleet turtle]

its hard to do strictly offensive when you dont quite know how the defensive process works, what SOC looks for and what not, i do feel the same temptation to get to the good juicy red teaming and pentesting stuff

i think at least doing SOC 1, then doing the offensive security/jr pentester path, might be optimal

SOC 1 mentions a lot of the stuff the SOC look for when trying to detect a hacker and stop them from escalating, which is good info to have as a red teamer

i would assume

[jagged otter]

Of course, I was planning on doing both. I just wanted to keep them split up

Just my way of learning

[fleet turtle]

yeah, reasonably so

[jagged otter]

Offensive or defensive doesn't matter which is first

[fleet turtle]

in any case, if red teaming is your end goal, i think it would be best to start of with the defensive aspect, to know what your up against and better evade the tactics they use to detect, respond, and recover

its what im doing atm

red teaming and shredding up CTFs is my goal so right now im on SOC 1

[jagged otter]

Yup, you ever read the art of war?

[fleet turtle]

isnt that by sun tzu?

[jagged otter]

Yes

[fleet turtle]

never read it but ive seen plenty of memes

[jagged otter]

It can be used in many aspects of life

[fleet turtle]

mhm

[jagged otter]

I didn't want to cross over too much while studying, that's all. I feel it would mess up my rhythm

[fleet turtle]

yeah, completely relatable

[jagged otter]

Thanks

@fleet turtle thanks hope this gives you a rep

[twin ridge]

Gave +1 Rep to @fleet turtle (current: #2155 - 1)

[fleet turtle]

my first rep

hell yeah

+rep @jagged otter

[twin ridge]

Gave +1 Rep to @jagged otter (current: #653 - 6)

[jagged otter]

Thanks!

I know when I wake up everything is going to be closed except for Whataburger.

[jagged otter]

@graceful thistle how was that imposter gumbo?

[graceful thistle]

oh I didn't get that

[jagged otter]

Could've been creole gumbo

[graceful thistle]

it was not suitable for my dietary preferences 8)

[jagged otter]

Creole uses tomato

Oh ok

I ate miso soup that had tofu in it

[graceful thistle]

Miso is good

[jagged otter]

It was good

Love japanese food

[graceful thistle]

Now I want some miso

[jagged otter]

LoL

Don't they have the instant miso soup?

[graceful thistle]

Yeah we probably have some

And miso paste

[jagged otter]

Probably not the same

[graceful thistle]

Might prep some later

[jagged otter]

Who watched Mr robot? Cause I didn't quite get the ending. Was it that the hacker was another personality?

Just can't figure out the ending

[fleet turtle]

that show makes me have a headache

its all very random and quite confusing

especially the drug arc, it felt a bit too abstract

[jagged otter]

I still say they stole it from fight club and put it as hackers

[fleet turtle]

lmao

[storm snow]

Heyo everyone! Have another quick noob question. I want to dual boot Ubuntu 24.04 on my Lenovo Thinkpad which is currently running Windows 11. I already went into the BIOS and changed the boot order to search for USB drive first before the built in Windows, and I just finished successfully using balenaEtcher to flash it to my 128GB USB stick. Here's my concern:

I have VMWare workstation 17 installed with 2 VMs; Kali Linux and Metasploitable 2. Both VMs work perfect and I've been practicing with them. I have not tried dual booting yet, but I want to, I'm just afraid of possibly overwriting my VMWare/Kali/Metasploitable2 😅. Am I overthinking this, or do I need to be careful 'cause I could potentially overwrite them and other files?

[fleet turtle]

i came for the hacking, left when i was met with like 2 episodes of a bunch of drugs and no other development

[jagged otter]

Oh yeah he was on drugs

[molten sky]

does your drive have space // do you have a second empty drive

[storm snow]

Not a huge deal, I literally bought this laptop specifically for doing this and practicing hacking lol so nothing important is on it, it just took a bit to get both VMs setup and I want to avoid going through it again if possible lol

[molten sky]

also you're more likely to accidentally erase your linux partition by a rogue windows update than the other way around imo --- windows is a pos and likes to wipe things for no reason

[jagged otter]

Dual boot ?

[fleet turtle]

too often for me to find it enjoyable

[storm snow]

Yes it has space. I don't have a second empty drive though unless you're considering my 128GB USB stick lol

[jagged otter]

Yeah I did like that Leon character

[molten sky]

let me rephrase my last Q -- does your drive have non partitioned space --- or just empty space on windows?

[clear jackal]

If you're already running VMs, why dual boot?

[molten sky]

stepping stones to converting 🤷‍♂️

[jagged otter]

I'd put Ubuntu on a USB flash drive and boot up from USB

[clear jackal]

But you can do that with VMs

[jagged otter]

It is

[storm snow]

Haha totally fair, I use a MacBook Pro with 32GB M1 and I love it. I just got this Windows laptop to mess around with. And yep exactly, just learning. Never dual booted before, but I want to try it

[jagged otter]

They stole fight club

[molten sky]

can you? sure. does it feel the same as a new user? not really 🤷‍♂️

[jagged otter]

The sister was annoying

[storm snow]

Ah I see, honestly I'm not sure. I will check it out. Just started messing around with this laptop

[molten sky]

oh it's still pretty unused? that's easier than otherwise

[clear jackal]

If you don't have anything of importance, sure, but it sounds like you have some VMs you want to keep? I would make a backup if that's the case.

[jagged otter]

Put Ubuntu on a flash drive and boot up from USB

[storm snow]

Yeah it's pretty much new. I mean it's not the newest version or anything, but it's new to me lol just got it for learning

[molten sky]

y'all he wants to try it just let em lol

nothing wrong with dual booting

[storm snow]

That's what I'm trying lol

[jagged otter]

Or vm and get a second monitor

[clear jackal]

Provisioned correctly you can get near if not basically native performance.

[jagged otter]

Oh wow. Id love to eat that

[storm snow]

This is purely for learning y'all lmao, I bought this laptop 'cause I've got the extra $ to spend so I don't care if I brick it. Just want to save myself a headache of having to reinstall and configure everything if possible

[molten sky]

@storm snow the drive will likely be completely taken up by Windows by default, but if you have enough space, you can likely shrink the partition and make space for the linux partition. shrinking partitions gets a bit tricky though. how big is your drive // what is the maximum amount of space you've ever used on it? (even if it's less space used right now)

[storm snow]

Got 3 curved monitors and 2 flat monitors lol covered. Not all connected, but so I can have dual monitors for two separate laptops at once

[molten sky]

performance wise yes, UX wise, you're still clearly in a vm

[jagged otter]

I installed Manjaro on a USB then on Manjaro I added VM and installed Kali and windows 10. I basically had a computer in my pocket

[molten sky]

manjaro?

pls tell me this was like 8 years ago

[jagged otter]

Yes

It was a long time ago

[molten sky]

okay then nvm lol

i used to run it as well but no way in hell nowadays

[jagged otter]

Think around when Kali was getting all hype

[molten sky]

that's just always been kali

since backtrack and before

[idle mica]

I miss Backtrack 4 and 5 lol

[molten sky]

have you ever exceeded that quarter ish mark?

[storm snow]

Nope, I haven't

[jagged otter]

@storm snow shouldn't done that now gonna get hacked

Just joking

[storm snow]

lol

[jagged otter]

This phone sux. I need a new one

[molten sky]

in that case it's probably much easier to shrink your parition. if you had filled up the drive and deleted a bunch of data, now you're fragmented all over the place and can't get a clean shrink
but in this case, shouldn't be a big deal

[clear jackal]

Disk Management is going to be the tool you want to use to decrease the partition size

[jagged otter]

As long as it's not apple

[fleet turtle]

honestly im thinking of switching over to graphene OS or ubuntu touch

[molten sky]

I think Disk Management has a shrink option built in nowadays doesn't it?

[clear jackal]

Windows + x, it's like middle selection

[jagged otter]

Parrot os

[clear jackal]

Yeah, that's why I was bringing it up. It will do it for you

[fleet turtle]

parrot OS is neat but imo it just looks like reskined kali

[storm snow]

Nice, thank you for all the help with this too. I will try this out and shrink it

[twin ridge]

Gave +1 Rep to @molten sky (current: #60 - 120)

[storm snow]

And thanks for suggesting this!

[molten sky]

ref: https://learn.microsoft.com/en-us/windows-server/storage/disk-management/shrink-a-basic-volume @storm snow (use the disk management method if you can, not the command line ones)

[fleet turtle]

i dont know why people think both kali and parrot are for skids, most people use it just so they dont have to install all the tools and all them are already there

both OS are very convenient for security professionals, using it doesnt make you a skid, and it isnt just for skids

[clear jackal]

I'm not sure most people do

[fleet turtle]

i have seen too many people see kali and immediately assume its a skid

[jagged otter]

I dont think you'd even use all the tools

[storm snow]

Jw, why would you advise against the command line ones? That's usually my go to lol GUI is cool too though

[fleet turtle]

yeah which is why most just do ubuntu and add their tools but sometimes having it all is more convenient

[jagged otter]

But I do want forensic tools

[molten sky]

if you're comfortable with it then 100% i just have no idea how comfortable people are over discord

i would use diskpart myself

[clear jackal]

The reason why people roll their own is because they want to know what's broken when something isn't working

With Kali there are too many variables

But using kali doesn't make a person a skid

[molten sky]

roll** i was pretty confused

[storm snow]

Fair enough, that definitely makes sense lol just wanted to make sure there wasn't something specific to be aware of with cmd or something

[molten sky]

ew pls no

[clear jackal]

Auto corrected

[molten sky]

not ubuntu

think of the children!

[fleet turtle]

oh no, please dont tell me you are a distro extremist 😭

[molten sky]

nah just anti canonical

[fleet turtle]

i quite like ubuntu, its intuitive, the snap downloads are hell though

[molten sky]

ubuntu lost my trust years ago

[fleet turtle]

for what?

[molten sky]

and with their constant user hostile decision making, it won't come back

[jagged otter]

I take it red hat isn't good

[molten sky]

particularly going back to their amazon spyware nonsense

[storm snow]

Just for fun... I'm curious to know. Has anyone in here ever completely wiped Windows from a laptop and ran some form or another of Linux on the bare metal? 👀