general

[gray sonnet]

happened to me twice...first time it was under warranty, second time it wasn't, so I didn't bother getting it fixed

[crude stump]

Awsome

[gray sonnet]

my wifi card failed

[sand trench]

wide people falling on laptops bricks them permanently.... more at 8 o clock

[silver sky]

I fell on mine

[gray sonnet]

Breh

[loud marlin]

shocking lol hehe

[silver sky]

Slipped on a fence, landed on it in my backpack

[gray sonnet]

well I don't have a laptop anymore (new one kinda blew up), so I don't have to worry about falling on mine haha

[silver sky]

Reminder to not trust metal fences in the rain

[shy bough]

What's the most 'applicable' certificate i can get to prove my education if i was to look for jobs in cybersec

like how best to prove experience

[gray sonnet]

OSCP

OSWP

[loud marlin]

i get it and after 5ish days usbC failed. then after 3 weeks they changed mbo, then gpu, then screen 2x in row

[gray sonnet]

any other laptop >>>>>>> 360 laptops

[sand trench]

https://www.youtube.com/watch?v=j18-yfOSJ_M

[loud marlin]

then they return money... and i guess due to miss comunication they send back laptop as "failed" and i turn it on after soem days and he works

[gray sonnet]

lmfao

I didn't even get my money back

[shy bough]

thank you

[twin ridge]

Gave +1 Rep to @gray sonnet (current: #107 - 63)

[loud marlin]

taking hostages can solve problems

[shy bough]

and these are exams you pay to take, if passing getting certification

[gray sonnet]

yup

you also get training material, so you can study from there

you can pay for labs to practice before taking the exam

[shy bough]

Would thm prepare me well enough to take these, of course i'd need to study further but as a base

[gray sonnet]

it'll get your foot in the door, but you NEED to take their training for the exam

you'll get it anyway if you purchase the exam 🤷‍♂️

[coarse moth]

Why are AWS Rooms so expensive?

[shy bough]

Ok thank you for helping me

[gray sonnet]

uhhh...cause they're made for companies that want to train their employees??

[loud marlin]

looks nice

[shy bough]

how much do you pay for gigabit ?

[gray sonnet]

is your...browser translucent 👀👀👀👀👀

[loud marlin]

fiber,tv = 65e cca

[shy bough]

kinda expensive no

in london its 43 euro

can get cheaper

[eternal timber]

hot

[loud marlin]

yes

[gray sonnet]

Awesome!

[sick lance]

Damn right.

[loud marlin]

wifi or cable ? i did on wifi

[sick lance]

That's WiFi.

[loud marlin]

nice nice

[sick lance]

Got like 9-13 Ms for ping.

[shy bough]

ah i cant share mine

[loud marlin]

that is nice yea

[loud marlin]

https://tenor.com/view/come-at-me-bro-mlp-gif-11188874

[robust shoal]

hey ]

I need help with two questions. Sometimes security policies can't be followed because of business needs. What avenue does a security engineer have to fulfil business needs in these cases?

What philosophy, if followed, provides the most Return on Investment (ROI)?

[loud marlin]

where that q comes from? THM room ?

[coarse moth]

How important is upload speed for gaming?

[loud marlin]

depend on game

[mellow pulsar]

Not that imporant

[sick lance]

You should be having a lower ping than anything.

However with my speed all my layers got CoD get downloaded OK while I play

[clear jackal]

What is this from? Is it THM content?

[robust shoal]

its from TryHackMe, Security Engineer Intro lession

lesson

[clear jackal]

Ah OK, for help with THM content, #room-help is the best place to receive assistance

[pale swift]

yo

wazzup

[loud marlin]

sky

[pale swift]

what

[loud marlin]

sky is up\

[pale swift]

nice joke

ive used this many times

[loud marlin]

cool

[shy bough]

how do i get verified here?

[royal dragon]

Jabba, mind if I DM?

..or any mod..

[crude stump]

Well looky here, you came to the right place Mr

[sharp citrus]

I could not find an article, please try again.

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 29, 2024, 7:48 PM

[crude stump]

HAHAHA

[loud marlin]

dheck lol

[crude stump]

Seems like the bot likes me more 🤷‍♂️

Don’t hate the player hate the bot

[shy bough]

d

[shy bough]

thank you

[twin ridge]

Gave +1 Rep to @crude stump (current: #80 - 84)

[crude stump]

[shy bough]

[mossy river]

sure

[boreal scarab]

Shoulder is kiiiilling me

Move my arm backwards, nothing but pain.... I hate getting old

I dunno

[shy bough]

have you tried rotator cuff stretches

with a band

[boreal scarab]

I have not. But just tried to move my arm like that again and it was fine. Heard a pop in my shoulder, like when you crakc your knuckles, after that. It's fine

[sick lance]

What's up?

Ah Jabba got em

[royal dragon]

All good, thanks Scrubz

[shy bough]

i'm not a physical therapist but i think you'd prevent that becoming a problem again if you strengthen your rotator cuffs and the lateral head of your shoulder

the stretches are really easy

https://www.youtube.com/watch?v=T_WCU7wjn4Y

if you don't have access to a gym you can use those big rubber bands

against a pole orsomething

[boreal scarab]

I do mainly use that arm to carry heavy boxes. I won't go into detail, but that arm also has less muscle... so it could've not been stretched properly, and when I went to move it once, just, wanted to put pain

I didn't mean that kinda muscle, both arms are equal in muscle... I meant like the ACTUAL muscle

[shy bough]

i understand, if the muscle isn't properly warmed up its alot more susceptible to tearing when it goes from carrying nothing to heavy weight. its going to feel painful or even just a bit uncomfortable then go away but if the tears aren't fully healed by the time you do it again

then your muscle will rip right off your bone

[jagged otter]

does thm have more on learning linux commands?

[shy bough]

and you'll have a black bruise covering your entire torso for months

[fleet turtle]

i believe so

[boreal scarab]

Lets just say this... arm + car crash = No fun

Muscle go bye

[molten sky]

shouldn't have crashed

[shy bough]

life go bye sometimes too

[molten sky]

obv

^ not at t1 lol

[boreal scarab]

Wasn't my fault, bitch tboned me when I was sitting at a red light

[fleet turtle]

are there any christmas CTFs or something?

im not too sure what advent of cyber is

[boreal scarab]

Spleen went kaboom, rib went crack, and muscle went bye bye

[molten sky]

idk should've expected it and moved out of the way

[shy bough]

anyway i hope you take care of yourself i had a little scare like that a while ago and the ouchy be ouchy

[molten sky]

either that or cyclist's fault

[fleet turtle]

spleen? yikes

[boreal scarab]

Yep, I'm spleenless

[molten sky]

when was this anyways

[boreal scarab]

No India trips for me... or any place with Malaria

I go there, I go take a dirt nap

[fleet turtle]

i dont think i would go to places with malaria even though i have a spleen

[boreal scarab]

Aaaaaaaaand changing subject cause getting dark

[fleet turtle]

ohhh thank goodness there is a metasploit module

[boreal scarab]

https://tenor.com/view/weee-gif-22113548

[fleet turtle]

there is a module for everything

[molten sky]

even malaria?

damn

[boreal scarab]

Many years ago

[shy bough]

defnitely try stretch something and get a little blood in your arms before lifting again

[molten sky]

ah so you're fine now then, not recent

still alive

[boreal scarab]

@royal dragon I saw you. You can't hide from us

[molten sky]

still breathing for the most part

[crude stump]

Hm must be a ghost

[molten sky]

@royal dragon x2

[royal dragon]

Was just checking something..

I'm not really here

👻

[jagged otter]

maybe i need to look at the fundamentals again and see if it has more on linux commands

[fleet turtle]

ive seen a few linux ones

but experience is honestly the best, for learning linux

[boreal scarab]

Yah, still some residual pain but nothing like "Omg I can't do X because of x" ribs, there's one section where I refuse people to hug me, cause it's still tender/ painful

Other than that. I'm all good in da hood

[solar skiff]

hi who speaking spanish

[boreal scarab]

This is a English only server. Better for moderation

[jagged otter]

thanks, yeah i know the basic stuff

[twin ridge]

Gave +1 Rep to @fleet turtle (current: #880 - 4)

[fleet turtle]

wooo rep

[jagged otter]

lol

had to give ya rep! lol

[fleet turtle]

lol

+rep @jagged otter

[twin ridge]

Gave +1 Rep to @jagged otter (current: #510 - 9)

[jagged otter]

thanks!

[boreal scarab]

Still feels weird that @royal dragon doesn't have a HTB Ambassador rank, but Emma does 🤔

That's a fake G0blin!

[royal dragon]

Just here to hang, like other servers I've joined recently

[solar skiff]

What are they doing on this server?

[fleet turtle]

man i was thinking of doing the offensive security path before jr pentester but now that i look, it seems like the offensive security path is more to reinforce learning

[jagged otter]

after 2 of the ones i went through, i went into jr pentester

[boreal scarab]

Learning ethical hacking on https://TryHackMe.com

[royal dragon]

stops self from typing something similar

😅

[jagged otter]

im like a hair away from lvl 6

[solar skiff]

I can learn to make a virus here?

[royal dragon]

(I wouldn't, just trying to hang in other communities regarding infosec)

[normal fable]

My Internet is down... 😂

[fleet turtle]

i feel like i might need to subscribe before i can get to 0x4

[sick lance]

That's for our advanced channels.

[jagged otter]

how did you make it that far without subscribing?

[normal fable]

Tree cutters broke the line.

[fleet turtle]

doing the free bits of a few paths

[sick lance]

61% of the website is free.

[jagged otter]

advanced channels?

[shy bough]

surprised you got that far

without paying

i couldnt finish my module so i caved

[fleet turtle]

is there a way to filter modules by just, free and not free? 😅

[fleet turtle]

throw money at it and the problem goes away lmao

[shy bough]

solves all

[sharp citrus]

@jagged otter

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Jul 29, 2024, 8:16 PM

[fleet turtle]

do you need to get a specific rank to reach advanced channels?

[boreal scarab]

Have you tried cheering it up?

[fleet turtle]

oh yeah 0xD

[boreal scarab]

https://tenor.com/view/ill-be-here-all-week-thank-you-stand-up-comedian-i-got-jokes-comedy-gif-24431238

[fleet turtle]

so there is even more of a wealth of content on this website, i just dont have access to it yet

[normal fable]

I tried consoling it.. held it in my arms even.

[fleet turtle]

wow, i can really learn everything there is to ethical hacking on this site

[boreal scarab]

Aha.. I get it... cause console... server.....

[fleet turtle]

ah wait i misinterperted

[shy bough]

where do you check your progress till the next level

i found it once and i cant find it again

[boreal scarab]

Dashboard

[sick lance]

Still the same place.

[shy bough]

thank you

i was looking at my profile

[normal fable]

Wasn't my intention.. but.. works. Lol

[boreal scarab]

[shy bough]

no pun intended

[coarse moth]

what is your thm profile name

[boreal scarab]

Fuck if I remember. Haven't been on in a hot minute lol

[sick lance]

I can tell you.

[boreal scarab]

Scrubz, no. I gotta change my name anyways lol

[jagged otter]

bet it starts with a D

[fleet turtle]

lmao are you ashamed of it by any chance?

[pine stratus]

Where is fluff me 😭 ?

[boreal scarab]

Nah, been wanting to change it for awhile

[fleet turtle]

i see i see

[jagged otter]

i should've made mine turdhead

[fleet turtle]

can always change it

[boreal scarab]

https://tryhackme.com/p/Beerrise

Behold, my account that I have not been on in a hot minute!

[jagged otter]

beer eyes?

[boreal scarab]

Beer rise

[jagged otter]

oh ok likein cheers or skol

[boreal scarab]

In HTB

[pine stratus]

why

[boreal scarab]

Skål!

[boreal scarab]

[fleet turtle]

i cant really imagine leaving THM for HTB lol, to each their own i suppose

[jagged otter]

dang scrubz

prolly reading books

[umbral bay]

Incorrect account. 😉

[jagged otter]

im so close to lvl 6 it's crazy

[mossy river]

Usernames are case sensitive

[sick lance]

Tim knows.

[coarse moth]

Hi tim

[jagged otter]

please take the hippie heart flower off me PLEASE

[sick lance]

My thm name is .Scrubz

[sick lance]

?

[remote jewel]

any1 run into this problem on mac?

[jagged otter]

the flower

by this name

looks like a heart

[umbral bay]

Only time can heal that.

[remote jewel]

they can't, it shows ur new to discord

[jagged otter]

blah

time is on my side...yes it is

[remote jewel]

any1 on mac with this problem ?checked github but not finding the answers i need

[jagged otter]

ios or android?

[coarse moth]

mi THM profile is https://admin.tryhackme.com/p/middlerider

[boreal scarab]

https://tryhackme.com/p/timtaylor look at this handsome gentleman

[remote jewel]

Fixed it

we back baby

[jagged otter]

i have respect for Tim, that guy did some bad stuff and became a toolman

[remote jewel]

had to stop the process, seemed to be frozen

[thin vigil]

Has anyone had any luck writing app armor / SeLinux with llama 3 8b?

[jagged otter]

from smuggler to tv . i dunno how he did it

[fleet turtle]

i dont know much about tim but he is helpful

[jagged otter]

oh im talking bout the famous guy

from the tv show

[fleet turtle]

well the thing is i dont know ANY tim 😆

be it from shows or, anything like that

[jagged otter]

tim the toolman taylor

he ran drugs n guns got caught went to prison then got into movies

i don't know how he did it

but great turn around

[thin vigil]

For safety I would be doing this over a VM that supplements Pop os snvironment

[coarse moth]

I did say that that face looked familiar to me, is it really the same one?

[jagged otter]

that's the one im talking bout face

but i don't think its him

but i do respect that guy

i am way to sleepy to search for flags

[jagged otter]

i doubt it's really him

[coarse moth]

I think it's actually him

[jagged otter]

i dunno

[urban ravine]

Hellooo

[jagged otter]

i'll say this, i think most of us have a past and sometimes we just try to keep those things where they belong, in the past

[urban ravine]

Hows everyone?

[jagged otter]

tired

[urban ravine]

Ah same

[wide quarry]

Hi

[urban ravine]

Pretty sleepy right now but sleep is a real struggle

[jagged otter]

its close to 4pm i been up a long time

united states

[urban ravine]

Its 10pm here

[rapid merlin]

hello

[urban ravine]

England

sadly 🥲

aha

[fleet turtle]

starting my first attackbox

[jagged otter]

imma bout to attack my bed and look at my eye lids

[fleet turtle]

real

[jagged otter]

see all of you later

[coarse moth]

seyu lata

[rapid merlin]

https://tenor.com/view/1111-gif-27421331

[oak river]

Any tips on how to refresh the knowledge on the paths that I haven't looked at for al ong time

But covered a lot of material and did a lot of tasks?

I usually just restart my studies, but it's so agonizing

[golden oxide]

Hi, you can delete your account and start fresh, that is just one option

[fleet turtle]

probably not very... practical

[oak river]

I can just reset all of my progress?

Why delete account

There is such an option

[fleet turtle]

i would just re-read the material and identify what category it falls into, and reinforce it with a room that matches that category

i dont believe there is a way to reset progress without entirely deleting your account

[oak river]

There is

Wait

Let me re-check

Yes, I have to reset hand by hand

I cant completely do it

[fleet turtle]

yikes

[oak river]

Yeah, that would be a potentially nice feature

To reset progress

[crude stump]

Did you make notes

[crude stump]

Horrible idea

[golden oxide]

Just an option, jeez

[fleet turtle]

lmao

[crude stump]

Also if you don’t want to redo a whole room you could also look at a write up.

[crude stump]

Yeah let me just delete my whole account because I forgot one room

[golden oxide]

I gave a suggestion, not an instruction to do so

[languid gate]

Work harder not smarter 💪

[crude stump]

Eh I guess

[golden oxide]

You guess 😄

[crude stump]

I guess 😞☹️😢

[mellow pulsar]

How do you guys handle passwords? I am lazy and have been using the same two three passwords since I was about 14 (30 now) and I know that several or all passwords are leaked but for my most important stuff I have 2-way authentication.

Do you guys use password vaults or such or how do you handle it?

[wild rose]

You could use BitWarden or KeePassXC Password Managers

[mellow pulsar]

Ok, I have started using bitwarden. Just need to start using it more I guess 😄

https://haveibeenpwned.com/ considered safe to check passwords?

[eternal timber]

or just set passwords that you forget and have to reset constantly

[mellow pulsar]

Read about their method and it seems safe enough..

[copper locust]

am göt

[wild rose]

Have I Been Pwned is a legit site to check for data breaches, but the most you'll get from it is to change your password and use MFA whenever possible.

[mellow pulsar]

Luckily the passwords I use for secure stuff hasnt been leaked, fingers crossed...

[oak river]

Yeah, but gave my laptop to my father and decided to not save them

But nvm

I'll handle somehow

[crude stump]

Rip

[wild rose]

It's up to the companies that hold your data to cross their fingers. Anything you supply them could be potentially leaked online some day.

[vagrant bison]

PM from ngrok here. Just so you know, we do autoban anyone using those tools to phish with ngrok. we also put an interstitial page in front of all free accounts to help protect users from phishing attacks.

[gray sonnet]

I don't believe you're ngrok

@mossy river

I smell something phishy here /s P.S sorry for the ping

[mossy river]

If they want to verify themself, they can drop me a DM 🙂

[blazing granite]

VainXploits 👋 how are you?

[sick lance]

English only in this server, I've already told you tonight.

[blazing granite]

Scrubz!!! how are you?

[outer rivet]

https://tenor.com/view/peepokc-kcpeepo-kcorp-peepo-pepew-gif-24524339

Life be like

[sand trench]

2 hours of control ultimate edition played today
what shadow learnt so far: they suck at dodging enemies attacks

[devout palm]

https://tenor.com/view/cat-chat-cat-fall-hello-chat-cat-gif-24961178

[sand trench]

ello ello heap

[eternal timber]

did too much THM today

[sand trench]

anyone know why windows relies on file extensions still for figuring out the file type???

and why they hide the extension by default??

[boreal scarab]

Test

[fleet turtle]

0x4 congrats

[crude stump]

Longest 🦗

[lone thistle]

I imagine it's a design choice for the average user. Yes we're in cybersec and we know that proposed file extensions aren't reliable, but we are in a minority alas

[crude stump]

Let me just break the silence rq

[fleet turtle]

i wish CTFs played out like they do in Mr. robot

[sand trench]

well magic bytes could make it a lot more obvious what kinda file something is and it could be marked better in windows explorer

[lone thistle]

I agree

[sand trench]

then again microsoft keeps chasing weird things

[slender scaffold]

[rare cargo]

hi i have a problem and i have to help me

[indigo palm]

morning

been a while since I dopped into THM, forgot my name was that

[devout palm]

Hi boss

[indigo palm]

ey up!

[fleet turtle]

go on

[devout palm]

☕ ?

[indigo palm]

would love a cuppa

[rare cargo]

i Keep getting disconnected but in the same time the openvpn still conacting

thanks bro

[twin ridge]

Gave +1 Rep to @fervent meteor (current: #354 - 14)

[sharp citrus]

Q&A: Common questions after connecting to the VPN

Article Link

https://help.tryhackme.com/en/articles/8991559-q-a-common-questions-after-connecting-to-the-vpn

Jul 29, 2024, 11:47 PM

[devout palm]

After brekkie

[twin ridge]

Gave 1 Rep to gh0st8yte (current: #2157 - 1)

[indigo palm]

nearly 10AM, it'll be brunch soon, not brekkie

[devout palm]

You get up early mate

[indigo palm]

working

[devout palm]

I see.

[indigo palm]

plus I get to clock off earlier if I start earlier

[wooden spruce]

i cant acces vpn on windows 11 it says connection time out any idea how can i fix it?

[fleet turtle]

anyone have a good room for learning/identifying hashing algos?

[pearl raven]

https://tryhackme.com/r/room/crackthehash

There a few different ones.

[fleet turtle]

not quite what im looking for, unfortunately, this is something i would use to reinforce my learning once i do find what im looking for

[pearl raven]

Ah sorry, I didn't realize lemme look for another.

[sand trench]

crypto 101 hashing
crack the hash level 2

[pearl raven]

^ and maybe Hashing - Crypto 101

[fleet turtle]

i will do Hashing - Crypto 101 once i get a subscription

[pearl raven]

Fml, sorry I forgot about the subscription

[fleet turtle]

lmfao

[sand trench]

oh right....

[fleet turtle]

i thought it was a free room until i clicked on it and wasnt able to view the contents

[sand trench]

keep forgetting to check those parts

[fleet turtle]

but i do want to re-learn whatever SOC 1 taught me about MD5 and SHA2

since i dont remember much about those, and i dont know any other hashing algos

oh wait

[sand trench]

https://tryhackme.com/r/room/crackthehashlevel2

this helps a lot and is free

[fleet turtle]

the cryptography module should be sufficent when i get a subscription, right?

[sand trench]

yeah

[pearl raven]

It'll be a solid start, sure.

[fleet turtle]

works for me

so i will keep that and Crack The Hash 1-2 in my back pocket

[sand trench]

crack the hash level 2 goes into detail on how to idenitfy hashes and how to crack them and make custom wordlists

i.e it is more of a walkthrough rooms with hash cracking challenge at the end

[fleet turtle]

right, ill take a look sometime, thanks

+rep @pearl raven

[twin ridge]

Gave +1 Rep to @pearl raven (current: #137 - 52)

[fleet turtle]

+rep @sand trench

oh cooldown

[pearl raven]

No need to fire rep my way dude, happy to help.

[sand trench]

anyways shadow is now gonna go for the meep moop sleep sloop to the beep boop

[pearl raven]

Night, shadow.

[devout palm]

Nighty night

[bold umbra]

Are you able to read files on SMB? If so, how

[devout palm]

You need to download (get) it first

[bold umbra]

Yeah, I'm in a lab atm, I used SMBclient to access a share, now a task is asking that I read a file

But I'm not too familiar

[fleet turtle]

im surprise that the red team path only has intro to c2, does anyone know any paths that go more in detail about c2/persistence?

[boreal scarab]

Hmmmmm

[crude stump]

This. The lab doesn’t tell you but you have to use the less command to read files. I had the same problems stuck on the lab

[buoyant tree]

hullo

[bold umbra]

Figured it out, thank you guys

[buoyant tree]

Isn't it better to just convert it to text since that still ends up with some garbage

[stray tapir]

fr

[civic locust]

hey im new to cyber sec but i was wondering if anyone would like to try working on a bug bounty together to learn of each other and earn money at the same time fair warning im new and not that great.

[stray tapir]

Good luck

I'm pretty sure bug bounties are quite advanced for someone new

[devout palm]

How do you read a file in smbclient session directly?

[buoyant tree]

You don't, you have to "get" it then open it on your local machine

[alpine herald]

Am I missing something - what do I have to do to be able to have access to the KOTH channel? Thanks!

[sharp citrus]

@alpine herald

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 30, 2024, 12:44 AM

[alpine herald]

Thank you!

[eternal timber]

ty

[twin ridge]

Gave +1 Rep to @fleet turtle (current: #750 - 5)

[buoyant tree]

Hmm, didn't know that. Always used get then cat

fair

oscp has a few weird rules

[civic locust]

@stray tapir im still fairly competent i have found at least 1 already although it was just a simple idor its still something i just mean ive only recently started as of this year

@fervent meteor lit just shoot me a dm if you ever want to then

[coarse moth]

same

I'll take a look at that idea

thank you

and do you know if those ethernet to usb adapters really work?

??

[eternal timber]

level 5 tmw

🦅

[stray tapir]

They do, I used one on my home server temporarily bc I didn't have an extra nic at the time

[coarse moth]

big issue

[stray tapir]

Yeah I only just replaced it recently. USB to Ethernet is quite slow 😅

[normal fable]

Usb Ethernet adapters are handy. I always carry one in my bag.

[stray tapir]

Fr

[normal fable]

And a USB to USB-C adapter... Lol

[coarse moth]

from ethernet to power cable💀

[stray tapir]

Actually

[buoyant tree]

Don't most laptop's have one?

[stray tapir]

I think there is something called power over lan

[buoyant tree]

Only seen chromebooks without one

[stray tapir]

https://en.wikipedia.org/wiki/Power_over_Ethernet

[normal fable]

Not anymore..

[buoyant tree]

Isn't that protocol prone to interference / performance loss

[stray tapir]

Idk I'm not a poe expert

[normal fable]

My Dell XPS only has USB-c and no adapters..

[buoyant tree]

that hurts

I'm already tired of laptop's having less ports and having to use a USB hub at times

[normal fable]

Had to buy one for work.. of course on the work Amazon account. Lol

[molten sky]

is sad

[molten sky]

double sad for no adapter inc

thinkpad/framework all the things

[normal fable]

They don't pack them anymore at all.. used to.

[molten sky]

it was a requirement before to be taken more than 3% seriously

now they can get away with screwing everyone cause nobody cares

[normal fable]

And now... No serious..

At least. Dell...

[buoyant tree]

oi @molten sky , need a few stupid yet smart ideas, currently sick and too tired to game right now and need some entertainment

[normal fable]

My Asus came with.. all the ports. 🤣

[molten sky]

contribute to OSS

(specifically, mine)

[buoyant tree]

Asus did

[molten sky]

is pain i mean it's fun

[buoyant tree]

I was just about to write in brackets that don't recommend writing regex or working on your thingies

[stray tapir]

My Asus has a headphone jack 😎

[buoyant tree]

I know you're recruiting babies straight from the hospital

[molten sky]

i knew you would, that's why i even said it, lol

[buoyant tree]

Phone or laptop

[stray tapir]

Laptop

[molten sky]

@buoyant tree double-quarter life

[buoyant tree]

I haven't seen a laptop without a headphone jack yet

[molten sky]

don't give apple any ideas

[buoyant tree]

Huh?

[buoyant tree]

lol

[molten sky]

go back to playing half life

[normal fable]

Double quarter pounder with bacon and cheese?

[buoyant tree]

Too hard, I'm tired. (102F fever)

[normal fable]

Tylenol and rest.. high fever..

[buoyant tree]

Yeah just been waiting for it to come down lol

[stray tapir]

No more all nighters for you

Gotta sleep

[normal fable]

Keep an eye on it. 104f is ice bath time..

[buoyant tree]

Slept a lot already

[normal fable]

Or hospital..

[buoyant tree]

Yeah I know, have had that experience when I was younger sadly

[normal fable]

Me too

Tylenol is supposed to help with fever

[buoyant tree]

Nothing serious, already went to doctor. Just the Flu or some common thing which only solution is to feel like crap for a few days and rest

[normal fable]

At least that's what doctors tell me.

Ah.. been there.. not for a while but I still remember....

[molten sky]

i need a beer or three

[stray tapir]

This is unrelated to anything.

But I recently found out that you can use udisksctl to mount storage devices without root

Pretty useful

Saves me from having to type my password in 100 times

[molten sky]

me 3

[sinful moon]

If you mount to a directory that doesn't require root, then your mount command won't require it either

but glad you found another solution

I just got back from the theater for the new Deadpool movie since my Dad is in town, had movie theater beer for the first time. Was an odd experience

been at least 5 years since I've been to the theaters

sure didn't have beer, assigned seating and VIP seating my last time lol

Yeah movie was a decent time, not quite as good as Deadpool 1 and 2 but it had a ton more ground to cover, and as Kojima put it, it is "fifth wall breaking" lolol, in that it's refercing multiple movie studios and actors by name instead of just 4th wall breaking the MCU

Good movie

[sinful moon]

Could have sworn that was the case but fair enough

Just never been that big of an issue for me, typically just plop them in /mnt, but it's infrequent I need to manually mount

[stray tapir]

no its a fair assumtion

[sinful moon]

nice qemu based hostname btw lol

[stray tapir]

if you specify it in /etc/fstab you can let people mount drives without root

[sinful moon]

Makes sense, although yeah typicallty that's where I put stuff like temp /mnt/usb and similar requiring root anyways

I guess more properly /mnt/Windows when I have one lol

[stray tapir]

yup i run discord in a vm

[buoyant tree]

no spoilers btw

[sinful moon]

that's as much as you'll get lol

[buoyant tree]

thanks, been trying to avoid spoilers ever since it came out

[stray tapir]

i dont trust spyware on my host os.

[sinful moon]

Totally fair, I have a good bit of experience with qemu/kvm, and have been having fun with UTM (with JIT) on iPad as of late

[stray tapir]

I'm actually learning how to use libvirt on my server rn

using virsh and all to manage them

[sinful moon]

Proxmox or straight up?... ah okay

[stray tapir]

ik theres easier ways to do it

[sinful moon]

Yeah I used the virt-manager GUI to get my start, but frequently dipped down to raw qemu for PowerPC emulation needs and similar, only a bit of experience interacting with virtsh and libvirt raw

Proxmox is what I ran for a while before building my VMware ESXi server... just in time for them to crap the bed lol

but Proxmox is an equivlant solutino to ESXi and vSphere in terms of full on VM server

[stray tapir]

I havent touched vmware yet

maybe i should just to get some experience

[sinful moon]

Virtual PC > awful time with Virtualbox > VMware Workstation Pro > virt-manager > Proxmox > back to VMware with ESXi server was my very rough timeline from the mid 00s to now

VMware is nice but they really messed things up with the Broadcom deal, or rather Broadcom messed it all up

but hey, VMware Workstation Pro is now free for personal use 🙃

It's still good experience since plenty of orgs running ESXi servers to host their on-prem or datacenter infra still

All of our Windows server enviroments for our clients at work are just hosted by an ESXi server, a cluster of them for our largest

But Proxmox also has clustering, just not quite as widely used in business vs homelab, but that's been changing

[fleet turtle]

when i first got into any virtualization software i was pretty young so whatever experience i got, i assumed everything would be like that, i had first used kali linux with virtualbox and it was very laggy, so i assumed it was a problem with kali linux, and didnt use it in any virtualization software for a while, until someone convinced me to try vmware, which was fantastic

[sinful moon]

They're both level 2 hypervisors which doesn't help, (although virtualbox can leverage kvm on Linux, but we don't speak of Oracle software in this hosehold)

[stray tapir]

I mostly got into virtualization because I wanted to do a gpu pci passthrough for windows vm gaming on linux

[sinful moon]

But yeah VMware is generally the better supported and more robust, especially in terms of running retro OSes which is a big focus for me

[stray tapir]

I never gamed thought bc it was laggy

[fleet turtle]

i got into it from being young and thinking i knew everything after watching a network chuck video lmao

[stray tapir]

better to use proton and linux than a windows vm lol

[sinful moon]

You can get PCI passthrough going quite well, but yeah, you beat me to that statement

No real reason to anymore

wanna see my complete overkill home server? lol

[stray tapir]

sure bro

[sinful moon]

I got this beast, not rackmount (at least atm) because we don't really have the space lol

[stray tapir]

dang

[sinful moon]

PowerEdge T430 with both Xeons socketed

[stray tapir]

mine is just a used office computer off of ebay

[fleet turtle]

what would one even use that for, i mean i want one, but i dont know what i would use it for

[stray tapir]

you can have redundant storage in case of failure

[sinful moon]

Yeah I went kinda overkill but it's a VM server and is doing frequent video encoding and ripping for our blu-ray ripping pipeline

so it does get a good bit of performance thrashing

[stray tapir]

what do you self host?

[sinful moon]

also yeah kind of a secondary large bit of storage after our NAS which is really our main media library and etc, but no issues with gigabit between them

[stray tapir]

I do jellyfin, a nginx site, libreddit, searxng, and minecraft (in the past).

[sinful moon]

ESXi/vSphere to host, Plex/Jellyfin most importantly, multiple encoding/ripping VMs, many weird VMs I have just for fun. Honestly I have a ton of plans for self hosted projects on there but I've not used it as much as I had hoped

mhmm the SO uses it to host game servers quite often as well

[fleet turtle]

i mean, i have no idea what i would store on there, and i cant imagine what anyone else would

unless they host a site

[stray tapir]

I quit hosting minecraft because no one was playing + I didn't want to have a security hole sitting on my system

[sinful moon]

I do have a good bit of experience with docker, self hosting and more but I'm often too wiped out from my IT job to focus on more lol

[stray tapir]

I use a bit of docker but I perfer podman

i like their idea of rootless containers

[sinful moon]

Totally fair, I'm just more using it due to being ideal for work and etc

[stray tapir]

I use debian for my host distro

[buoyant tree]

Didn't podman try and disguise it self as docker at some point

[stray tapir]

idk. I'm intrested enlighten me

[sinful moon]

Boss tells me he wants to host three websites for legacy clients who are too cheap to move to our recommended vendor

Slapped this together as one of my first real Docker projects of my own

I’d go with Trafik vs Nginix Proxy Manager these days tho after more experience however

[molten sky]

i tried to adopt podman but i encountered so many weird things that weren't fleshed out enough yet and had to switch back

love the rootless vs rootful switch but it's got some work to do

[stray tapir]

yeah podman is weird when it comes to some containers

[sinful moon]

Yeah and there are some ways to do rootless Docker but it looks like a big pain, but for sure a concen of mine

I'm just happy our EDR at work is actually a bit over eager about container escape scenerios lol

had to exclude a good bit of known good stuff after False Positives

[molten sky]

containterize your containers just in case someone escapes one

[sinful moon]

lolol

[stray tapir]

thats literally what im doing rn

[sinful moon]

Interesting my EDR actually has a k8s option, but as you can see above, yeah I don't need to scale lol

I hope you are joking lol

[stray tapir]

using libvirt to run a vm to host podman containers

[sinful moon]

No that's normal

Reflects actual production workloads

the above Docker Compose setup is just a Virtual Private Server setup at DigitalOcean and as far as I can tell they're using qemu/kvm

and this is just a piddly little project I made quick

I will also say k8s is super interesting but I have less than 0 use for it at work or at home without the need to scale

I've gotten some basic experience but yeah none of my containers need load balancing and etc

[stray tapir]

yeah I didn't even know the purpose of kubernetes until i asked chatgpt

this is all a hobby for me so wrapping my head around it took some time, cuz I don't have the same needs as a massive organization

[sinful moon]

Totally fair and yeah same vibes where, we do have such ourselves at work and for our largest client with load balancing VMs via vSphere but those are full on server VMs moving from one host to another as resources allow vs just microservices

[fleet turtle]

one of the greatest feelings is slowly understanding terminology and tools that you previously found complex

[sinful moon]

mhmm

[stray tapir]

i can relate and not relate

when I learn new stuff it just leads to more questions

lmao

[sinful moon]

btw I will again highly recommend UTM if you have an iPad, been having great fun with this (can’t even fit all my OSes on one screen)

[fleet turtle]

any good answer OR question should leave you with more questions

that is something i was told, and have grown to incorporate into my everyday life

[sinful moon]

lol at most I had 68 OSes on my most expansive VM setup

Mostly just retro computing and operating system archieology than need

[stray tapir]

bro thinks he's mutahar

[sinful moon]

Never heard of them

[stray tapir]

someordinarygamers

[sinful moon]

I got that pic somewhere

[fleet turtle]

yes

many people use it for that

nope

not if you choose the right drives and partition right

[sinful moon]

lol here it is

Quite an old screenshot at this point but yeah

[stray tapir]

BRO

YOU EVEN HAVE PLAN 9 FROM BELL LABS

[sinful moon]

heck yeah c:

I'm huge on odd and interesting OSes and the history of such

[fleet turtle]

you have to take many more steps to overwrite your main OS, install the .iso for the OS you want to virtualize and go from there, make sure you search a tutorial just to be safe, i havent used Vbox in a while

[fleet turtle]

templeOS where?

[sinful moon]

I've tried it plenty, have you seen ShrineOS?

Adds TCP/IP stack and package management heh

[fleet turtle]

plan 9 is a badass name

[fleet turtle]

never before, im not big on that stuff

[stray tapir]

plan 9 is actually pretty intresting

[sinful moon]

Do you know the reference?

[fleet turtle]

the most "unique" OS ive ever tried was endeavor

[fleet turtle]

nope, but it sounds badass, which is enough to get me interested

[sinful moon]

It's for Ed Wood's Plan 9 from Outer Space, an infamously bad B-Movie

So instead this is Plan 9 from Bell Labs lol

[fleet turtle]

i see i see

[sinful moon]

Good time if you want some so bad it's good media

[vocal skiff]

https://media.discordapp.net/attachments/1152366330255790100/1158536679884324884/uncaption.gif

[sinful moon]

Mhmm, takes "everything is a file" even further than Unix does, quite neat

[swift kite]

hi

gn

[sinful moon]

Heya and goodnight?

[swift kite]

good time to be alive

[sinful moon]

lol indeed

[stray tapir]

Have you gotten chrome os flex in a vm?

I did it a week ago but it runs so janky

[sinful moon]

I have not and that was long been a goal of mine, prior to Google buying them up I did attempt CloudReadyOS or whatever it was called but didn't have much success

[stray tapir]

When you do it on libvirt you have to select UEFI instead of BIOS for the firmware or else it bootloops

[sinful moon]

Yep, that would be critical for ChromeOS

[stray tapir]

and the mouse is buggy af

[sinful moon]

completely different firmware that's mostly UEFI based

oh heck, have you tried NeXTSTEP and etc without proper guest mouse support?

It's a mess to an extreme degree lol, at least in VMware

[stray tapir]

I havent touched nextstep, iirc its a bsd based os?

[sinful moon]

but there's community VMware guest drivers for mouse and display and etc

[stray tapir]

im pretty sure im wrong

[sinful moon]

Yeah it's mainly BSD and obvs foundaton for OS X with that being Job's next company after Apple

Quite a bit of custom sause on top of BSD to make it all happen

I'm pretty sure I still have some old screenshots I took

Huh guess not, just Apple Rhaposdy DR2 (last x86 before PowerPC only) and Mac OS X DR3 which is emulated via PowerPC as seen here

but yeah what NeXTSTEP became, just some shots I had handy on my iPad without much digging

[fleet turtle]

is there any chance you have tried qubes or tails?

[sinful moon]

Rhaposdy DR2 is very much still NeXTSTEP but just with MacOS 8 "skin"

[stray tapir]

i use tails

[sinful moon]

I'm familiar with both but had no reason to try either

[fleet turtle]

i mean i would think with that much storage for virtualization and what not curiosity might be enough of a reason

tails isnt that special i dont think, but qubes looks pretty neat

[fleet turtle]

ultra paranoid?

or just for fun?

[stray tapir]

no I use it when I have to do stuff

[fleet turtle]

what stuff gets you to use tails

[sinful moon]

Qubes is a neat concept, but again most of my use case is already trying out odd OSes in VMs for fun, I don't need to try an OS with nested VMs and etc

Tails I don't use public workstations ever these days so I have very little need for it

[stray tapir]

Yeah I should really try out qubes, but I dont need to be using tor on a daily basis lol

[fleet turtle]

yeah i mean, who does? besides like, the 0.1% of cybercriminals lmao

[stray tapir]

downloading free information 😎

[sinful moon]

Qubes is indeed more about the sandboxing with VMs, but at that point we have kinda come far with our modern Linux container formats

Yeah not the same kind of security/sandboxing but still

[stray tapir]

do you catch my drift

[sinful moon]

lol we do

[fleet turtle]

does anyone know if sandboxing in anyrun is as simple as just, uploading something, i am curious and would like to know, because im too lazy to try myself

[sinful moon]

btw random Solaris screenshot of mine sicne it's still up in my search sidebar

CDE is

[stray tapir]

bro is logged in as root 😭

[sinful moon]

lol default setup

I basically just wanted to poke around with CDE, but yeah you would have created normal users after logging into this

[fleet turtle]

once i get done with the jr pentester, offensive pentesting, and the red teamer paths, i really need to do some of the malware analysis modules, the room that had a couple anyrun questions was pretty neat

i cant imagine malware analysis being very fun unless it was something like a ransomware, since those are pretty crazy, but i do want to learn about it after that anyrun room, not sure if this is something for the advanced channels or not

[sinful moon]

Nah it's fine to talk about here, malware development and implimentation is more what is limited to advanced rooms. Or reversing known bad malware as well

[fleet turtle]

oh i see i see

the 0x3 and 0xD colors are almost identical, im an imposter 0xD

[sinful moon]

Either way, there's no rush, tons of amazing content on THM and it's good to be well rounded

yeah they looked very similar on the OLED I'm on, I had to double check lol

[fleet turtle]

ill keep that in my back pocket, ive been looking for reasons to try learning Ghidra and utilize anyrun or any other sandboxing software for that matter

[sinful moon]

Oh yeah so much great content from Startch Press, they often have Humble Bundle sales

[fleet turtle]

i would like pentesting to be something im very well rounded in, and i will focus on that, but malware analysis is definitely something i will learn for fun, it looks handy and neat

[sinful moon]

Good bit of crossover there if you have any interest in game modding and reversing

big crossover area for me being huge in retro gaming

[fleet turtle]

yeah malware analysis i can see being applicable in so many scenarios, it will definitely be a neat thing to have experience in

[sinful moon]

mhmm

[pale swift]

hello

[sinful moon]

Hello and welcome 👋

[fleet turtle]

OHHH i dont have the "im new here, say hi" badge anymore

thank goodness

[pale swift]

how long do u think it will take before AI takes over cybersec

[fleet turtle]

ohh thats great

[sinful moon]

not happening

[fleet turtle]

i dont think any LLM will in the near future, thats for sure

cybersec requires innovation and creativity that AI doesnt have nor can it replicate

[sinful moon]

We already have to cover for "AI" features not doing our job well enough lol

[pale swift]

oh wow

[sinful moon]

Agreed, as D466 says, we really need creativity, linking multiple discrete datasets and more which AI can't fathom atm

[buoyant tree]

exactly how

[fleet turtle]

the only ai that will be taking over is purely just for looks, most people use it for the bonus points that using any buzzword gets you for like a week

[sinful moon]

False Positives in EDR are a good example

[pale swift]

i didnt know that

[fleet turtle]

and i hope it never does gain the capability to fathom it, lmao

[pale swift]

unless it gains consience, it never will

[sinful moon]

I'd rather have False Positives than undetected Positives, but plenty of my time is addressing just "AI" suspicious execution

[pale swift]

i saw a washing machine the had "AI" all over it

[buoyant tree]

yeah but they also existed in basic match statement's. Did AI somehow increase that

[fleet turtle]

"generative AI" "revolutionary AI" "industry leading AI"

i have grown to loathe the word and the concept of AI

[sinful moon]

Modern EDR is significantly more capable than just matching known blacklists

[buoyant tree]

Oh I understand that, Malwarebytes keeps thinking that anything I write is malware so I just turned off it's AI feature and it's been working perfectly

[pale swift]

whats EDR?

[fleet turtle]

the word AI can be stamped onto practically anything at this point

[pale swift]

lol

[sinful moon]

Extended Detection and Response

[pale swift]

sounds like smth u would learn in SOC

[buoyant tree]

AI window blinds

[sinful moon]

our fancy word for an advanced anti-virus that works at API level and more

[fleet turtle]

i believe it is

[sinful moon]

SentinelOne being yet another

[pale swift]

AI fridge

[sinful moon]

EDR will detect if an app makes too many suspicious API calls that align with TPP evasion and etc, even if it was never detected before

[fleet turtle]

AI toaster, AI coffee machine, AI doorbell, its everywhere

[pale swift]

it makes 0 sense

[fleet turtle]

hell, get me an AI doormat

[sinful moon]

also Defender has an EDR product called Microsft Defender for Endpoint

[fleet turtle]

i dont quite understand why toaster companies think adding a display will change the world or make their product any more appealing, but they do

[sinful moon]

with basic Defender you're just getting a traditional AV with some extra bells and whistles but not full EDR without paying for a better license lol

[buoyant tree]

Was cloudstrike's thing a EDR?

[sinful moon]

yes, it was stated above

that's part of why it had a kernel mode driver

to intercept API calls of all apps

[pale swift]

which reminds me
Nvidia is allegedly making GPU chips out of stem cells

[sinful moon]

at the most agressive, EDR actually injects its self into most processes to see what they're up to beyond just intercepting API calls

[fleet turtle]

that is the stupidest thing ive ever heard

wait until the stem cells try surviving me running crysis

[pale swift]

lol

[sinful moon]

Yeah I have some major doubts on that claim lol

[fleet turtle]

so i guess the next buzzword is gonna be something to do with AI & Biotech integrating, and i loathe that concept

the idea of any technology having living, biological, components, is terrible

i cant see any application that doesnt only work for statistics

[buoyant tree]

Somewhat makes sense though, if they manage to make it more accessible and safe from contamination

[pale swift]

the title AI itself is misleading

[buoyant tree]

DNA contains a lot of data

[sinful moon]

It's okay the fintech people are only just catching onto the fact that AI is actually unprofitable lol

[fleet turtle]

it is, its very vague, it can be boiled down to "hello world" really

[pale swift]

exactly

[sinful moon]

We don't have any marketing strat for it, besides being "shiny new thing"

there's no real return on investment, even with subs

[fleet turtle]

it is VERY hard to be feasible, keeping it at livable temperatures, humidity, keeping nutrition levels proper, whatnot, is all very difficult

[pale swift]

the reality is these CEO's will do anything to try and increase profit margins

[buoyant tree]

Aren't most AI companies in direct loss mainly but keep going on due to investments

[fleet turtle]

and i cant see any outcome where that much work is worth anything

[buoyant tree]

Yeah I know, but if they somehow make it happen, it's gonna be freaking cool

[fleet turtle]

also i dont know why browsers keep adding AI, the only browser AI i like is brave's leo, it is actually helpful at times

[pale swift]

it will become like pacific rim

[sinful moon]

Pretty much, the big players have enough padding that they expect to ride the loss... to a new profit center which will never come

[fleet turtle]

cool, but not much more than that

[pale swift]

edge's copilot is also cool

[sinful moon]

Just look at Amazon deploying their AI for free and lol it's really weird

[pale swift]

its like buying stock when ur at a loss thinking it will go up

[buoyant tree]

There was a research paper a couple months using DNA as micro storage

[pale swift]

ye i rmbr

[fleet turtle]

i cant stand edge, i hate how integrated it is into windows, after i switched from ubuntu back to windows, for simplicity's sake, i took forever to manage to get rid of edge

[sinful moon]

Want to ask some programming questions to an AI? Skip ChatGPT and etc, just ask Amazon's AI about it instead of the shopping questions they were hoping for lol

[buoyant tree]

We shall have to disagree heavily

[pale swift]

does it use gpt-4o

?

[fleet turtle]

in theory it can hold lots of data yes, but its not easy to read, and microsoft's glass storage concept seems more feasible and more promising, honestly

[buoyant tree]

Since when does Amazon have AI on it's shopping platform as a chatbot. Last I checked it was just to route you to the proper dept

[sinful moon]

Simplicities' sake? You chose the more obfuscated OS lol

[pale swift]

i havent had to use it much
so im saying that based on my experience

[buoyant tree]

Glass does make sense but let's talk super long term

[sinful moon]

It's live in North America at least, it's not a chatbot, it's free AI prompts

[pale swift]

why do ppl reccomend downloading linux on an old laptop?

[buoyant tree]

The amount of data that is ingested keeps increasing every year

[buoyant tree]

Linux is lightweight and can basically run off a potato if you tried

[sinful moon]

because it will perform significantly better than modern Windows

[buoyant tree]

You tried claude yet

[sinful moon]

I don't think so, idk. Hard to keep up with some of the silly names

[fleet turtle]

well the thing is, i have a gaming PC, with NVIDIA GPUs and MSI CPU fans, with corsair front fans, the software for all that and for my motherboard were very.. hesistant, to work on ubuntu, and i still do like gaming, and i dont have any reason to use ubuntu other than my stuff on THM, so i just switched back to windows, plus at the time i was unwilling to go through the effort to get it all to work even if there was a way

[pale swift]

but isnt it extremely ez to delete important files from the OS

[sinful moon]

I went to the movies today for the first time in 5 years and saw no less than four seperate AI tech adds for three different vendors

[pale swift]

lmao

[fleet turtle]

speaking of which i probably shouldnt have mentioned the MSI stuff given the whole firmware thing, but im not that serious abuot my opsec right now

[sinful moon]

Uh it's eaiser to fuck up Windows than Linux

[pale swift]

oh wow

[sinful moon]

maybe don't sudo delete important files

vs Windows which just gives you a UAC prompt real quick which you're trained to click through

[buoyant tree]

Well if you know what you're doing that is

[pale swift]

linux was portrayed as some extremely difficult OS to manage for begginers

[buoyant tree]

Windows usually hides the critical files in obscure directories

[fleet turtle]

it depends on the distro really

[sinful moon]

lol there's a reason our Windows users at work are not admins of their machines

[buoyant tree]

It's not that hard, it's just that I wouldn't recommend it for my grandma

[pale swift]

type of linux?

[fleet turtle]

i mean, you can view it as that

[sinful moon]

Yes to some extent the easy of use is tied to the choice of distro, but there's many factors going on there

Linux generally isn't one size fits all, and you just have to find the distros that are ideal for your use case

[fleet turtle]

linux mint is very user friendly, same with ubuntu, and the ubuntu gnome interface is very inviting

[pale swift]

like how kali is best suited for hackers?

[sinful moon]

I would personally recommend highly against GNOME 3 but that's just me

sure

[fleet turtle]

i mean, not really

[buoyant tree]

uh... that's highly funny as I'm thinking about it

[sinful moon]

But many distros can be made to do the same

[fleet turtle]

kali is just a bunch of tools in a nice brand gift wrap

^

you can do the same hacking on ubuntu or mint as you can on kali, too

[pale swift]

oh

[sinful moon]

My pentesting VPS is based on Arch just due to it also having all the same tools and my personal comfort zone with the distro

[fleet turtle]

no OS is one size fits all, in most cases you have to make it fit your case

[buoyant tree]

Well with a lot of pain

[pale swift]

by installing packages and stuff?

[fleet turtle]

yep

make it something you are comfortable with navigating

[crude stump]

Kali has all the tools that “hackers” use basically

[pale swift]

ahh

[sinful moon]

Also I know I said the Arch word, don't use it just because it's "cool" only use it if you know rolling release and etc and setting things up from scratch is your vibe

[buoyant tree]

• if you have a habit of breaking your distro and need a distro for hacking in a vm only then it's perfect

[pale swift]

so it is good for hackers
but it isnt the only linux distro with those features

[fleet turtle]

even if arch gave me the same high as heroin i wouldnt get near it with a ten foot pole lmao

[crude stump]

This too

[sinful moon]

Most users will be served by a different distro

[buoyant tree]

"I use arch btw" foreshadowing

[crude stump]

Pretty much. Only thing is you might have to download all the tools you need

[fleet turtle]

yeah lmao, the stereotypes are rough

[pale swift]

in other distros?

[sinful moon]

Totally fair but for me personally using it for 16 years I have no complaints

[crude stump]

Yes

[pale swift]

i c

[sinful moon]

But that is also not an endorsement, just is perfect for me

[pale swift]

i downloaded a vm for THM

[stray tapir]

arch is fine, I use it.

[crude stump]

But it depends on the distro

[fleet turtle]

16 years of experience makes perfect sense, that much experience would make it fit like a glove

[pale swift]

but i havent been able to use it with THM

[crude stump]

Why not?

[pale swift]

idk

[sinful moon]

I mean it's literally sudo openvpn Username.ovpn

[crude stump]

Pretty much lol

[pale swift]

i am extremely new to this

why not?

[sinful moon]

That's a joke

[fleet turtle]

WOW i just found out anyrun has a graph feature, thats neat

[sinful moon]

the THM web interface for the attackbox is also a VM

[sharp citrus]

Why do I need OpenVPN?

Article Link

https://help.tryhackme.com/en/articles/6498312-why-do-i-need-openvpn

Jul 30, 2024, 3:12 AM

[sinful moon]

VMs are the perfect use case for your own custom "attack box"

[crude stump]

That doc doesn’t help smh

Wrong person

[fleet turtle]

(i believe that this was the file from the Pyramid of Pain room, i dont recall which room)

[pale swift]

so ur saying the VM isnt necessary

?

[sinful moon]

Yeah the Attackbox is 100% just qemu/kvm tho iirc

may be xen though

Although I think AWS is mainly qemu/kvm

[crude stump]

Welllll yes and no. If you want to be able to use your own vm without having to wait 1 hour(if you haven’t subscribed) then it is necessary

[sinful moon]

Indeed but you're describing the OS not the virtulization framework as I am

[crude stump]

That happens you just gotta give it a minute

If it doesn’t change reset it

[pale swift]

ok

[pale swift]

in the VBox app?

[stray tapir]

wait you can use your own vm?

[fleet turtle]

jesus anyrun is so informative, it makes understanding the processes and whatnot of malicious files very easy

[crude stump]

Yes 🙌

[stray tapir]

does it require a subscription

[crude stump]

Close out and retry

[sinful moon]

yeah qemu is just the PC emulator that supports multiple architectures and then KVM, the Kernel Virtual Machine in Linux is what powers the x86_64 virtualizaiton. No worries

[crude stump]

Sometimes it hangs when it’s trying to open up Kali

[sinful moon]

It just means that thanks to kvm we have a level 1 hypervisor that runs at kernel level vs typical use case of Virtualbox and VMware Workstation Pro which are level 2 hypervisors what run at userland

much better performance

[crude stump]

https://help.tryhackme.com/en/articles/6611809-getting-started-with-openvpn

[twin ridge]

Gave +1 Rep to @sinful moon (current: #38 - 203)

[pale swift]

it worked

[crude stump]

Great

[crude stump]

Btw

[fleet turtle]

does anyrun take a screenshot everytime something happens or are they taken by whoever submitted it?

[crude stump]

Closing out of the ovpn session stops the openvpn connection. So make sure to leave the terminal that’s running it open

[fleet turtle]

some of these screenshots detail every single event, others are completely unhelpful

[pale swift]

i c

[sinful moon]

They're taken when a significant change is detected in the on screen content

[fleet turtle]

i see i see, thanks

[twin ridge]

Gave +1 Rep to @sinful moon (current: #37 - 204)

[fleet turtle]

204 jesus christ

[crude stump]

But some of them are straight buns

[sinful moon]

Yeah lol, it's not always perfect by any means lol

[fleet turtle]

im looking at wannacry in anyrun to get better with anyrun and just mess around it

[pale swift]

now how do i integrate it with THM?

[crude stump]

You already have a ovpn file no?

[fleet turtle]

thats the only one that has a sufficently spooky interface that i can think of

[pale swift]

ye

[crude stump]

Use this

Cmd in the terminal

And keep it open

[pale swift]

ive done it

[fleet turtle]

any idea what COM is in this context?

[pale swift]

ive also pinged 10.10.10.10

[crude stump]

Don’t close it once it says “sequence something”

[pale swift]

what kind of UI is that?

[molten sky]

@buoyant tree what was the verdict

[fleet turtle]

this is the anyrun graph for wannacry

[molten sky]

wyd

[crude stump]

Com?

[molten sky]

wy did

[pale swift]

ok got it

now what

[crude stump]

Hm

[crude stump]

That’s it

Can you ping 10.10.10.10

[pale swift]

.

im getting the packet replys

[crude stump]

Good

You are connected

Now you can do rooms without the attackbox

Tried looking it up lol and nothing

[fleet turtle]

i see

[crude stump]

But I think you are right

[pale swift]

whichever rooms use attackbox i dont need to use that VM now right

[crude stump]

Depends

If it’s giving you a vm it’s prolly wanting you to use it

[pale swift]

oh

[crude stump]

Think it’s the zip file of the executables

[fleet turtle]

i have no clue, im doing this to get familiar with anyrun lmao, but i do believe it is what was used to open the file, i can send the anyrun link to you if you want

[sinful moon]

I don't see the COM file but those are classic MS-DOS executables

[crude stump]

What I love about anyrun is it basically puts you in the mind of malware. Not that it has a mind but yk what I mean

[sinful moon]

Oh right I see, it's because it was launched from an interactive MS-DOS session/terminal which spawns from command.com

[fleet turtle]

and what does this mean?

[pale swift]

in the mainframe u mean>

[fleet turtle]

yeah i love that about it too

[crude stump]

Google says COM++ is a binary interface technology software

[molten sky]

what's a good website i can test against that always has an annoying cloudflare captcha

my old sites have all switched away

[fleet turtle]

well yeah i wasnt viewing it as a file, i was just seeing what it means

[sinful moon]

COM++ is a C++ object which you can use to interact with these classic frameworks

[fleet turtle]

trying to familiarize myself

[sinful moon]

also has bindings for C# which I'm seeing in this random StackOverflow post

But C# is trivial to reverse

[fleet turtle]

so, the file was launched via terminal?

[crude stump]

Not really. Mainframes are bulk computers that companies use

[sinful moon]

It was what executed it, even if not an interactive session, just my reading of that at a glance

[crude stump]

Like bulk data processing

[fleet turtle]

that makes sense for this context

[sinful moon]

Mainframes in the classical sense don't really exist anymore

[crude stump]

Now it’s data centers right?

Or “servers”

[sinful moon]

these were room size down to fidge sized computers which were multi-user connected, and then you'd use dumb terminals to connect to the mainframe and do your computing that way

[boreal scarab]

https://youtu.be/5EE80b73QVw?si=nxzQX-L-DOzzYigS

[crude stump]

Oh that’s cool

[sinful moon]

that's why terminal emulators are terminal emulators they are emulating those dumb hardware terminals attached to mainframes

[fleet turtle]

mental outlaw is great to stay updated

[molten sky]

did i just see a timtaylor typing

or am i hallucinating

[boreal scarab]

Amen

[sinful moon]

Just in this case our "mainframe" is a single Linux home computer since Unix does have that legacy back to the 60s

[spare remnant]

Why I am not allowed to msg in koth section of this server

[hoary lotus]

the voice channel?

[sinful moon]

tty is literally short for teletype terminal (although that phrase is technicaly copywritten and can't be used), back when those dumb terminals didn't even have screens and were just printers with a keyboard

[fleet turtle]

okay, thats enough of familiarizing myself with anyrun for today

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jul 30, 2024, 3:33 AM

[fleet turtle]

i will say, from the tools/software ive seen from THM, anyrun is one of the coolest so far

[crude stump]

Yes

[molten sky]

saw a guy on youtube do it properly on modern linux

[crude stump]

Technically would it really be considered a tool?

[fleet turtle]

i mean anything that provides utility is a tool, really

[sinful moon]

Idk DNSDumpster, PhishTool and URLScan.io have gotten more use from me from my real job in infosec

but thats also due to AnyRun's limitations

[crude stump]

True