general

[fleet delta]

I was wondering how many of you have certs + degrees, and how many of you don't and still work in industry. I don't have any certs or degree but my coworkers do.

[untold burrow]

and are there regional pricing for it

[late lantern]

So many things, its worth it

[late lantern]

It’s probably universal at 14$/month

[wraith fjord]

me have few certs, a degree and some industry experience under my belt

[naive violet]

I started without a cert or degree (part time) but then finished my degree and went full time, then got more certs

[late lantern]

I have certs, but no degrees, i would consider tryhackme as a practical addition to the resume. But like going all out on tryhackme as a primary source of certs, idk about that.

[whole yew]

I have degrees, and expired certs. Current role doesn't require that I maintain any, so I haven't spent the money to keep them up on my own dime. Certs are for business demonstration, not for individuals.

[fleet delta]

I have 10 years of development/IT experience. So I'm in a unique situation tbh. I also already have 5 years of experience working for IL5 networks, websites.

[boreal scarab]

Round 3, cheers!

[whole yew]

"practical addition" is fine, IMO, so long as it isn't included as work experience. "Personal Interest" or "Hobbies" is much more appropraite

[untold burrow]

is this beer

[boreal scarab]

Tis is

[untold burrow]

isnt chat is pg13 lol

😂

[whole yew]

from my perspective of being on/running panel interviewers on behalf of my department and the hiring manager

[fleet delta]

Networkk + is probably an easy cert for me to get, but fuck it's expensive lol. I'm hoping just adding bug bounties and tryhackme certs will keep me going lol. I also have splunk certs, not sure if those count though lol

[boreal scarab]

[sturdy lark]

I graduated from something like a community college，cringe

[whole yew]

alchoholic beverages are frequently showi in PG-13 shows and movies

[late lantern]

Thats great, yeah id say like in student eras go for like thm practical experience, before college or upon college go for like the google cybersec prof cert (its a good base for beginners landing a job), then get comptia A+, comptia Sec+, comptia Network+, and then CISSP. Some people like to do these together amidst getting a computer science degree. (cs is a huge boost on the resume, but i think its a bit of a waste on 4years for a cybersec field)

[coarse moth]

bro have infinite money

[fleet delta]

yeah, that's what I was thinking. I'll just add it to my portfolio page, not my resume.

[late lantern]

Yeah thats on point, like thm would help you land that job, it wont land you that job, iykwim.

[boreal scarab]

I got drawn away from Networking because of my networking class in college. The whole Binary to hex to IP confused the hell outta me

[late lantern]

Yeah def if you’re up for time and got like the most demanded certs already, then for sure go for it.

[whole yew]

I wouldn't even say that, to be honest. THM is great for introductory material to many areas of cyber, but it won't actually teach you what you need for a particular role; that can only come from being on the job

[boreal scarab]

I'm comfortable. Wouldn't say I have tons, I'm just comfortable.

[fleet delta]

yeah, I'm already working in cyber. I guess having these will beef up the resume lol

[late lantern]

Yeah, that’s why organizations demand experience as a priority in cybersecurity.

[fleet delta]

I just want to make sure i do everything I can except spend time in college lmao

[sturdy lark]

I'm dreaming for a CCIE

[tender kraken]

That's a great dream

go for it

[late lantern]

You got comptia A+, Sec+ , network+ and CISSP?

[wraith fjord]

I mean, i have a CS degree....It made me understand how things work, why is it the way is it or if i need to develop something on my own and an added advantage of "getting it" quickly.
Plus an added advantage if you wanna just play around roles, i can be hackerman/ sec dev man.

But yeah, GRC, TPRA, Audits ..... for just this a 4 year CS degree seems like a waste of time.

[fleet delta]

there's tools for this, don't worry about it.

[boreal scarab]

@naive violet You would've loved hardware hacking village!

[naive violet]

I have a course for it coming up

Should be good

[fleet delta]

nope. I have development experience in gov role, and cyber experience in one of the big software security companies though.

[tender kraken]

Is THM good for learning pentesting?

[naive violet]

Yes

[boreal scarab]

Can you tell my old professor that? He mandated we do it by hand

[sturdy lark]

Once I fail the test, money got burn out

[fleet delta]

old people are why I dropped out. I didn't have time for all that lmao

[late lantern]

Dont get me wrong CS is good, but its leaning more to dev “work”, for a solid understanding of computers and softwares def, but that 4 years…

[tender kraken]

It will benefit you for security either way

[boreal scarab]

Imma be honest. I cheated on my final. IN MY DEFENSE, I did all the packet tracer part that my friend couldn't do, and he did all the Binary to Hex to IP, which I couldn't do, so we worked together.

[late lantern]

id say if you get the ones i told you, youd be earning annually like 150k

[fossil crystal]

hy guys i need some help here

[wraith fjord]

Oh i feel ya def

[fleet delta]

really? They hold that much weight?

[tender kraken]

Yes

[wraith fjord]

@tender lynx - I wonder if hes around!

[fleet delta]

That's wild..

[whole yew]

CISSP is good, but it requires 5 years work experience, or 4 years + degree.

[tender kraken]

Especially CISSP

[sturdy lark]

I consider that the "CS" is only for the Ultra level hackers.

[boreal scarab]

I still love my Ethical Hacking professor who kinda nudged us to do OSINT, without telling us it was OSINT. Loved that professor, he got me into OSINT.

[late lantern]

Yes, check linkedin, and indeed, and zip recruiter, those are like a must have.

[fleet delta]

yeah, I qualify for that and PMP. I guess I need to get some certs..

[whole yew]

I'll also say, salaries are very region dependent in the US.

[boreal scarab]

5 years in Info sec, or just 5 years in IT?

[tender kraken]

You get a lot of leads from Dice.com too.

[fleet delta]

They're so basic. I'm surprised tbh.

[late lantern]

Yeah but getting them would boost the standardization. So its a win win

[fleet delta]

who cares, start an LLC 😛

[whole yew]

I don't make 150k, but I live in an area that's considerably less expensive than, say, SF or NYC. If I were to move to those areas to maintain my current quality of life, I would need to at minimum 2.5x my salary

[tender kraken]

hey nothing beats having your own business that's for sure.

[fleet delta]

yeah, you'd need way more.

[whole yew]

5 years with 1 or more of the 8 domains listed in the CISSP.

[tender kraken]

Just stay on the grind and time will pass 🙂

[fleet delta]

Is there a way to get discounts on these besides signing up/ paying for courses.

[boreal scarab]

If you had the choice, don't work in NYC, it's not worth it. The prices of meals, commute, cost of living, it's insane.

[fossil crystal]

when i access the Lateral Movement and Pivoting room, it ask me to configer the dns via lateralmovement adapter on the attack box and when i do ifconfig to retrive the listed adapters the lateralmovement wouldn't show up ,what should i do here ??

[fleet delta]

• traffic + rudeAF out there

and your house will be a shoebox fr

[boreal scarab]

Hi, I worked in NYC for many years. I'm one of those assholes

[late lantern]

I think the google cybersec prof cert gives like a small discount if you continue onto comptia sec+, you can def contact sales though and negotiate with them.

[tender kraken]

LMAO

[fleet delta]

Hi Asshole, I'm Goku.

[tender kraken]

AH

[boreal scarab]

Hi goku, I'm asshole.

[tender kraken]

hahaha

[fleet delta]

it's a pleasure.

[boreal scarab]

[sturdy lark]

there's another OpenVPN conf file you need

[fossil crystal]

on the attackbox you mean ? or the local machine

[fleet delta]

Thanks, I'll make sure to work on these then. I always thought certs were silly. But I'm starting to think, Maybe I've been wrong all these years. I've seen this one, it's so basic lol, it was mindnumbing so I gave up lmao

[twin ridge]

Gave +1 Rep to @late lantern (current: #1451 - 2)

[errant blade]

respect

[fleet delta]

[sturdy lark]

I guess the attackbox got everything prepared. For the local machine, you need to download the extra openvpn conf file, from the "network" section.

[whole yew]

Certs are business shit, not required for your career. If your current job is enhanced by a cert, you can make the case for the business to pay for it. But in reality, certs don't benefit you so much as they benefit your employer.

[late lantern]

Actually certificates are silly. They are, for like 90% of major jobs. But cybersecurity got that unique taste to it, it doesnt heavily depend on degrees, it primarily depends on certifications. It’s the opposite of all other jobs in terms of education. Its kinda unique though.

[errant blade]

👍 (._.)👍

[boreal scarab]

I will say. If you're going to take pictures of buildings, for the love of God, don't be right in the middle of the side walk. I would have no problem shouldering people if they're in my way.

Also WATCH THE DAMN WALK SYMBOLS! I had so many people walk across the street when they're not supposed to. Had to honk at people so many times

[fleet delta]

it's hard to know. Al my coworkers have degrees, certs. I just broke in from freelancing lol.

[late lantern]

Yes, but cybersecurity has a unique taste, certs are vital, we humans, familiarized ourselves with an understatement of certs to shed the light of university education.

[simple valve]

I would say it primarily depends on experience

[boreal scarab]

If you are going to go against the walking sign, RUN!

We got places to be, people to see.

[late lantern]

You got time, keep working, you will get to the end point, eventually.

[fleet delta]

ahh, okay, so for cyber these are actually helpful for our career then?

[late lantern]

Assuming you have no experience and you’re landing your first job. Certs are way too vital. You wont have experience in your pockets to show them what you have gotten.

[fossil crystal]

for the local machine i do everything u mention and the attackbox doesn't have the adapter we could connent to so here im stuck

[fleet delta]

they become less important as you gain experience though.

[late lantern]

Yes, with your experience, you should easily land a high paying job. Assuming you have them with 10+ years of experience. The 150-200k annual salary is on the way.

[fleet delta]

I sure hope so. I'm tired of dev, but this pay cut I took to get into cyber is a mf fr

[sturdy lark]

I believe the only purpose of a certification is to prove that you're not an amateur, especially if you don't have a degree or are switching from another industry. It's more effective to show interviewers that you have hands-on experience, like tinyprojects on GitHub

[late lantern]

Those are the basic foundations of a high paying jobs, you can try. Your experience would get you somewhere, but getting those is def a boost with your experience .

[fossil crystal]

after the local machine configrations there is no connections

[fleet delta]

Pretty sure my portfolio/GH got me my current cyber job lol

[late lantern]

whats your annual salary?

[fleet delta]

I'm making pennies rn like 40k, should double when I start on call.

[whole yew]

I wouldn't say that. Having just finished interviewing candidates for our SOC, we focused on knowledge and demonstrated ability rather than certs.

We didn't have a business requirement for certs, ergo we did not hire based on certs.

[late lantern]

Yeah, well depending on your region, that could be very bad, especially with 10years of experience, ask for a raise asap.

[fleet delta]

I've been freelancing to bridge the gap, but I just finished a contrat, so now I'm studying my ass off for bounties lol

[tender kraken]

I thought cyber jobs started at 65k the lowest.

[fleet delta]

I work like 2 hours a day, but yeah I agree. I'm looking for my next role ASAP. I'm applying every day, and studying daily to move on.

[whole yew]

if you're in the US, 40k for a security job is extremely underpaid for any state. That's like entry level support/help desk 1 positions.

2 hours a day and 40k? that's...... actually amazing.

[late lantern]

I am statistically talking, as ive seen what people are recruiting for. Experience is a must, demanded certs are a must. You can go ahead and see recruiters. You might get an exception here and there, im generally speaking.

[fleet delta]

yeah, it's pretty good considering lol

[late lantern]

You gotta layer up multiple organizations together if the terms and policies accept such.

[fleet delta]

I had an interview last week, the questions were pretty basic tbh.. it was like what is a waf, tell me about a time you had issues with a client, explain how firewalls work, etc. that was for a soc anaylst.. I was amazed how easy the interview was lol

[whole yew]

i'd consider those to be entry level softball questions

[sturdy lark]

the employers are various. Some well-trained interviewers in tech, they're considering hands-on experience seriously

[whole yew]

recruiters are also largely clueless about the actual job role, they take a job req from the hiring manager then add shit they see other recruiters add, or baseline it from usg

usg requirements are substantially different than private sector, because usg has had more problems with unqualified candidates

[sturdy lark]

classic

[fleet delta]

yeah, I want more oppurtunities. My experience is obviously impressive and more then most soc anaylsts in their first roles, however I don't need HR up my A@@ because of some silly cert I didn't take.

[tender kraken]

Bro, I use to be the same way lol

[fleet delta]

yeah, it was entry level, but it was the technical interview! lmao

[whole yew]

realistically, if the hiring manager gives you the go ahead, HR can't really do much aside from say you need to get a certain cert (that they pay for) within 90 days

[tender kraken]

I'm talking about what you're saying about certs

[fleet delta]

yeah, for sure.

[tender kraken]

I was so anti cert... why are you pushing me to get this cert if my skills speak for themself

[whole yew]

entry level soc analyst usually requires 2-5 years in other IT roles, helpdesk, sysadmin, etc

[fleet delta]

haaa, dude it's a hard mindset to get out of.

[tender kraken]

yes, trust - get the cert bro

[fleet delta]

@whole yew should I aim higher?

like mid level or senior soc?

or get jr soc for a year, then aim for sr soc?

[whole yew]

business reasons. it may be that the company has a contractual or regulatory requirement that the person filling that slot has a specific cert, certs, or degree

[fleet delta]

jr soc is like a walk in the park for me tbh

[sturdy lark]

It's like when you hire a plumber or a contractor—you don't want an amateur to completely mess up your house

[tender kraken]

go for security engineer and you'll be there for a good minute until you're ready to bounce to leadership roles

[whole yew]

rate your skill and dedication at watching a SIEM, 1-10

[fleet delta]

uhh probably like a 6 tbh, I could use more experience to be quick and more efficient ofc.

[whole yew]

that's jr to associate level SOC analyst. The hard part about putting people in that slot is 1) either they don't know what to look for, or 2) they are too good at it and outgrow the role ahead of the replacement schedule

[simple valve]

Its also easy to get lost in all the logs

[whole yew]

remember that hiring for a role also needs the person to remain in that role for a period of time to 'break even' on the spin up and learning required to do the role

[fleet delta]

ughh, i'm always in some weird mid level bs lmao

[tender kraken]

because you refuse to get the cert lol

[fleet delta]

definately say that in the interview lmao

[simple valve]

Ive seen companies that log EVERYTHING and it just kills the SOC team bc theres so much logs to sift through

[fleet delta]

lol, fml, I think I'm sold

[whole yew]

logging everything isn't bad

[tender kraken]

hahahahah

[whole yew]

if the SOC is getting killed because too many logs, the SOC engineer doing the tuning for the SIEM has hecked up by not tuning the alerts correctly

[fleet delta]

logging everything isn't bad if it's filtered properly...

[tender kraken]

A mentor finally told me. Get the cert and don't give anyone room to talk.

[simple valve]

Yes thats my point

[fleet delta]

but ideally, why would you log EVERYTHING?

[naive violet]

"don't give anyone room to talk." - not so sure about that one...

[fleet delta]

I like that.

[tender kraken]

Log everything for investigations only.

[fleet delta]

Get the cert, and remove the uphill battle.

[tender kraken]

Yes bro

[whole yew]

..... that's exactly how i just said certs don't work

[tender kraken]

You'll be bombarded with emails for job leads.

Always keep learning.

[sturdy lark]

It would be a nightmare facing a tons of expired certs

[whole yew]

i've interviewed plenty of people with relevant certs who were actually clueless

[tender kraken]

that sucks

lol

[fleet delta]

*glares at my coworkers

[tender kraken]

You need experience too obviously

[fleet delta]

idk, you could just get a va to do it.

[tepid furnace]

so the windows option to reset a pc is a lie

lesson learned

time to make a usb lol

[tender kraken]

lol

[whole yew]

does the PC have a recovery partition? that's exactly like the USB

[tepid furnace]

no this was an older pc that I decided to wipe and repurpose for school use

[whole yew]

it's possible but unlikely. I've interviewed roughtly 100 people for 15 roles over the past 6 years

[tepid furnace]

No way to access a recovery partition / nonexistant

It used to be my daily driver until I built a new one

I should've made a recovery image or something but I just trusted windows for some reason

"Wipe all files" sure doesnt wipe all files

[sturdy lark]

Too eager for certs, as like dating girls, would never get to the end

[tepid furnace]

It remembered the userlogon / password too

incredible work windows

https://tenor.com/view/aplausos-clapped-leonardo-dicaprio-clap-slow-clap-gif-12389001

[fleet delta]

depends how screwed up the dir is lol

[fleet delta]

older pc might not run a current os. Try an older one.

[errant blade]

should i use vmware or vm virtual box

coz i have a problem on virtual box it's to slow man

[tepid furnace]

Well

"Older" prebuilt from 2019

2060 + 9th gen i5

[errant blade]

[tepid furnace]

Would be just fine for schoolwork/school projects

Was used and kept current upto 2023

[sturdy lark]

upgrade ur RAM could be more effective

[errant blade]

16 ram enough ?

[tepid furnace]

Im gonna try and safe boot it

See what happens

[lunar totem]

how much did you allocate?

[tepid furnace]

The userlogon service is throwing the error

[errant blade]

for the vm 8ram

[fleet delta]

I'll take your word for it vs CaTFisH lol

[tepid furnace]

Ladies and gentlemen we got it

but uh

[lunar totem]

8000 mb?

[tepid furnace]

def not a 100% filewipe

Nor a 100% clean install

It still has every 3rd party driver I ever installed

[errant blade]

yea

[fleet delta]

That should be good. check disk health, and maybe force the wipe in the command line

[tepid furnace]

I mean I know it's fine

[fleet delta]

lol that's windows

[tepid furnace]

Im just dissapointed in windows

[fleet delta]

how?

[tepid furnace]

I had the option to overrwrite every partion to make the data unrecoverable

It took 5 hours

[fleet delta]

Windows has never been anything but a dissapointment.

[tepid furnace]

And lo and behild

behold*

[lunar totem]

in virtualbox system settings, what does it say for base memory and processors

[tepid furnace]

60% of the files can be recovered

[errant blade]

should i set the cpu 4 ?

it was on 3

[sturdy lark]

If you only have a few virtual machines, 16GB of RAM should be sufficient. However, if you're attempting virtualization projects like vSphere/ESXi, you need to ensure that your CPU has more than 8 cores. The key is whether your virtual machines will be running simultaneously or if you'll be activating them one by one as needed

[errant blade]

[errant blade]

i wanna use only 1

[lunar totem]

yeah not sure, my vm runs fine with 4096 MB allocated

[errant blade]

can i see ur settings if u don't mind ?

[sturdy lark]

even a simgle host running vsphere/Vcenter, it still consume lots resources

[errant blade]

wbt the processor

[lunar totem]

set at 6
what makes yours slow? just opening stuff or are you talking about running scans?

[errant blade]

using the firefox there

but th cmd is okey

[sturdy lark]

As far as I know, loaded multiple GUI desktops simultaneously on Linux will significantly reduce the speed

[tepid furnace]

cli ontop

[sturdy lark]

I don't know too much about GUI like kde、gnome or some shit

[coarse moth]

KDE is the best flavor

[sturdy lark]

I always remain the default GUI setting

Once I try to switch to another, everything got fxxk up

[pearl raven]

Did you mean to say, leave no room for questions?

[fleet delta]

yeah, he's obviously saying, it just removes doubt to a degree. basically poises as reduced risk.

but that's why technical interviews exist.

[pearl raven]

The wording was odd, I just wanted to clarify.

[fleet delta]

twas

[misty frost]

hello someone got subscription to thm i have a qst please

[wraith fjord]

yea

[sick lance]

Just ask 😄

[loud marlin]

where to download VMware. the link is 503 for me =/

[sick lance]

Broadcom.

https://support.broadcom.com/group/ecx/productdownloads?subfamily=VMware+Workstation+Pro

[loud marlin]

i need to make acc?

[sick lance]

Yeah

[loud marlin]

https://tenor.com/view/goose-honk-inhale-inhales-untitled-gif-16237480

[solar echo]

Anyone willing to teach me practical OSPF and BGP applications?

[valid sleet]

Guys what are the best kali linux alternatives
Is it just Parrot OS or theres something else

[glass nest]

Any of them. It's an age-old discussion on here.

[clear jackal]

Run/make your own if you want

[glass nest]

Many people use parrot and kali, as many tools are already installed

[solar echo]

If you are newer, then use Kali because it has a bunch of pre installed stuff and also a larger community to discuss issues and developments.

If you are comfortable enough with Linux then you can go for Parrot.

It's completely up to you at the end of the day too.

[glass nest]

In my opinion, Rum Raisin is the best ice-cream. doesnt mean other ice-creams aren't good or wont do the job.

[silver sky]

ESQY

[glass nest]

Hiya Hex 🙂

[silver sky]

You okay?

[loud marlin]

and ofc is not work on arch =/

[glass nest]

not bad. Been fairly immobile today as I think i got a touch of food poisoning 😦 Other than that, all good. How are your many business hustles going?

[valid sleet]

😂 I'll think on this one

[glass nest]

Rondo - 0day uses windows. One could say it's more of a challenge, as you need to find other ways and tools to complete a task

[valid sleet]

Like using wsl??

[glass nest]

Yeah, thats one solution

[valid sleet]

Just that certain things just flat out don't work on WSL
Like Hashcat
I don't know if it's because of WSL or because my PC is AMD

[glass nest]

Yep. So you find other solutions that are compatible with windows

If theres no way around it, you can always fire up a VM for that one task

[silver sky]

Take a wild guess

[shut hawk]

Usually you use your host for GPU intensive tasks such as hashcat

Also hey Esqy, hope you get better soon 👋

[glass nest]

Ouch. Sorry to hear that man

Thanks Jayyyy 🙂 I think at this point is a large part that I've not eaten today. A risk I don't want to take :p

[valid sleet]

True
The reason I was asking is because my PC crashed recently while my VM was running and it wouldnt launch and kept saying the vm was already running, then I deleted the lck files then it launched but now it wont connect to openvpn whatsoever
So I thought I probably had to set it up all over again and wanted to hear other opinions and maybe try something new

[glass nest]

that sounds like an issue with the VM, not the flavour of linux

Try a different VM program - The two big ones are Virtual box and VMware workstation

[shut hawk]

Aha fair enough, I'm sure you're looking forward to your next meal tho!

[valid sleet]

Thank you

[twin ridge]

Gave +1 Rep to @glass nest (current: #18 - 413)

[glass nest]

You have no idea! thinking of treating myself to Sushi tomorrow 😄

[shut hawk]

Go for it 😎

You've deserved it with all that waiting

I got into my uni btw! Starting October

[eternal timber]

Nice

[glass nest]

ooh, with all of your botting stuff, have you seen any that auto-translate well? The ones i've played with look a bit... I dunno, just not very smooth

[silver sky]

@glass nest How to accountant? I've got to file a return

[glass nest]

oh awesome! Congrats man!

Hex - Get alphabetti spaghetti, mix up all the numbers and spill it over a page. Thats basically accounting. That or maybe use a gig service if it's a one-off

[silver sky]

I think the alphabet spaghetti is the solution

My business partner is meant to do this stuff

[glass nest]

'Dear HMRC - the spaghetti has spoken. You owe me £50k'

[shut hawk]

Unfortunately not, is there any one that uses DeepL? I've had the best results with them

[silver sky]

I wish

[glass nest]

Possibly, Jayy - i'll have another delve into it. Basically, I play a mobile game with people from all over and there is a 'instant translate' button on the chat function, at it really helps with talking. So I tasked myself with making a Discord that does the same thing.

I have a pretty janky solution in place though - 3 channels (so far) when you post in (say english) one, it translates and posts in german one and french one.

To be honest, the tranlastion itself doesnt need to be perfect, I think we all have enough common sense to work out what a message is if its not exact, y'know

My solution: 3 channels

Posted in 'English':

This appears in 'French':

[steep flame]

ARe there plans to add any new Ranks? Seems a lot of people now are [0xD][GOD]?

[chilly veldt]

Gotta love teamspeak

[loud marlin]

memory leak ?

[chilly veldt]

Nope, their way of loading things

[loud marlin]

oh

[boreal scarab]

Shitcord. Love it!

[chilly veldt]

https://x.com/da_wamwoowam/status/1824872498363523537

Wam ✨🌈 (@da_wamwoowam) on X

hey @discord wtf are you doing here

Twitter · Aug 17, 2024, 6:14 PM

[rapid merlin]

https://x.com/da_wamwoowam/status/1824901484019958227?s=46

Wam ✨🌈 (@da_wamwoowam) on X

@rockibfdi @discord TL;DR discord is using a library to fetch system information that works in damn near the least efficient way possible on windows, it's very fragile, it's very slow, and it happens basically every time you launch discord

Twitter · Aug 17, 2024, 8:09 PM

[glass nest]

Is this an insult war between Discord and Teamspeak?

[rapid merlin]

I'm going to follow this post for a while

[near hawk]

Teamspeak still a thing?

[rapid merlin]

Could be interesting

[glass nest]

Ooh blackout - You back up to full power now?

[rapid merlin]

Lmaooo "crypto don't mine themselves"

[near hawk]

Yep, fully healed about 3 months ago now i believe

Just a massive 10 inch long scar 😄

[glass nest]

Brilliant, Happy to to hear that man. And thats ok, Girls/guys dig scars 😄

[shut hawk]

Thats an awesome idea!

[glass nest]

Well, if THM taught me anything, its to think outside the box

[shut hawk]

https://www.deepl.com/en/pro-api
What I'd do is signup for this API, and then have an on-message event to pass it through

[glass nest]

Ooh. That link is saved, Thanks Jayy

[shut hawk]

and https://fallendeity.github.io/discord.py-masterclass/ is fantastic for learning how to quickly make a discord bot

Lemme write a quick poc

[glass nest]

you don't need to do that, man 🙂

Pointing me in the right direction is perfect

[shut hawk]

import os

import discord
from discord.ext import commands
from dotenv import load_dotenv

load_dotenv()

TOKEN = os.getenv("TOKEN")

intents = discord.Intents.default()
intents.message_content = True
bot = commands.Bot(command_prefix=commands.when_mentioned_or("!"), intents=intents)  # commands.when_mentioned_or("!") is used to make the bot respond to !ping and @bot ping

@bot.event
async def on_ready() -> None:  # This event is called when the bot is ready
    print(f"Logged in as {bot.user}")

@bot.event
async def on_message(message: discord.Message) -> None:  # This event is called when a message is sent
    if message.author.bot:  # If the message is sent by a bot, return
        return

    translated = deepl.translate(message.content)
    for chan in [fr, en, gd]... etc:
        await chan.send(translate)

@bot.command()
async def ping(ctx: commands.Context) -> None:  
    await ctx.send(f"> Pong! {round(bot.latency * 1000)}ms")

bot.run(TOKEN)

[shut hawk]

its not a problem, I just took that from here

[glass nest]

Ah ok, cool cool

[shut hawk]

but that should be enough as a boilerplate, I'm certain you'll be able to go from there

[glass nest]

It does seem straighforward

Thanks man 🙂

[shut hawk]

anytime

[cosmic pendant]

@glass nestHey there!

[glass nest]

g'd evening, Toaster 🙂

[cosmic pendant]

Your new NY Style Pizza is pretty good

But that Garlic Cheese stick thing, was one of the best things i ever ate

[glass nest]

Must not be a UK thing 😦

[cosmic pendant]

oh, you're in for a treat, it's awesome

[glass nest]

Our next thing is korean pulled chicken, i think?

So.. If they are doing NY style, with the also do Chicago Style - to prevent a war

[cosmic pendant]

Chicago 'pizza' isn't pizza

that's a casserole

[glass nest]

Haha, love it

[pearl raven]

Lol, I can't argue with that logic.

[glass nest]

Well, Dr Toaster knows his baked products

[cosmic pendant]

😄

[glass nest]

https://m.media-amazon.com/images/I/71RMVdzZ10L.jpg

[silver sky]

https://tenor.com/view/monkey-calculate-silly-count-gif-7714714

me right now

[glass nest]

For real man, might just be worth finding someone on upwork or something to do it for you

[tender lynx]

yep still here. inactive tho

[silver sky]

My business partner is working it out with me

[tender lynx]

oh wow esqy long time

[glass nest]

hiya leggy, Yeh man its been literal years!

[tender lynx]

yep i just opened the server because got a notification today. but pleasantly surprised to see you tho

[glass nest]

I guess we just kept missing each other whenever we popped on

[tender lynx]

yeah. oh wow jabba is discord admin now? congrats!

[lone thistle]

I have had a day and a half of linux networking and obsecure stupid policies from server providers

[glass nest]

The ultimate social engineering 😄

[lone thistle]

16 hours

of tomfoolery

[glass nest]

What sort of policies?

[tender lynx]

after 16 hours did it get solved?

[lone thistle]

a very TLDR:

• One MAC address per IP

I am currently dealing with a workload of about 200 VMs and you bet sure as hell I ain't paying for 204 ipv4s

[pearl raven]

jeebus.

[glass nest]

👀

[lone thistle]

yes

after having to nuke this box about 22 times

I have a working method

It's a combination of SNAT, 3 ipv4s and gosh I don't even know

just tomfoolery

[glass nest]

Ah, box nuking. a very 'Elf' response 😄

[pearl raven]

https://tenor.com/view/sister-michael-fecks-same-gif-14816263

That sounds miserable.

[lone thistle]

aye. And i'm likely going to have setup another hypervisor or two to increase the workload to 500 next week.

😅 ayeyayeyayeyayeyae

[tender lynx]

lol nuke another 30 times it will sort itself out

[fleet delta]

Lol I found cissp practice book at my local library. This is so much more elementary then I thought.

[lone thistle]

this is one third of the interfaces file that I finally wrote that worked. If you get something wrong gg boot from rescue

    up ip route add -net 148.251.XX.XXX netmask 255.255.255.224 gw 148.251.XX.XXX vmbr0
    up sysctl -w net.ipv4.ip_forward=1
    up sysctl -w net.ipv4.conf.enp0s31f6.send_redirects=0
    up sysctl -w net.ipv6.conf.all.forwarding=1
    up ip route add 148.251.XX.XXX dev enp0s31f6

    up ip route add 192.168.0.0/16 via 148.251.XX.XXX dev vmbr0
    up ip route add 172.16.0.0/12 via 148.251.XX.XXX dev vmbr0
    up ip route add 10.0.0.0/8 via 148.251.XX.XXX dev vmbr0

auto vmbr0
iface vmbr0 inet static
    address  148.251.XX.XXX
    netmask  255.255.255.224
    gateway  148.251.XX.XXX
    broadcast  148.251.XX.XXX
    bridge-ports enp0s31f6
    bridge-stp off
    bridge-fd 0
    pointopoint 148.251.XX.XX
#MAIN IP 245

auto vmbr1
iface vmbr1 inet static
    address 148.251.XX.XXX
    netmask 255.255.255.224
    bridge_ports none
    bridge_stp off
    bridge_fd 0
    hwaddress ether 00:50:56:XX:XX:XX
#WAN 222

never again

😭

i'm working on a trackpad and a tiny screen

[cosmic pendant]

Sorcerer!

[lone thistle]

I have like 8 sublime texts & too many network diagrams open

lMFAO

[glass nest]

Treat yourself to a mouse

[fleet delta]

Lol I found cissp practice book at my local library. This is so much more elementary then I thought. @whole yew

[lone thistle]

Provider wanted £250 a month for 73 ipv4s

[cosmic pendant]

oof

[cosmic pendant]

The point isn't that it's complex, it's that it's orthogonal to technology. it's bascially business/tech glue

[lone thistle]

oh I have many. Just left the USB-C to USB-A or w/e the regular one is at my house in london

[fleet delta]

So it's for managers, Sr engineers?

[cosmic pendant]

Everyone that wants to have an impact

CISSP was the single most important cert of my career

[glass nest]

honestly, using a trackpad for.. well anything is one of my personal tortures

[fleet delta]

Bruh

Lol You will maximize your earning potential. The average CISSP earns US$131,030 a year. This reflects a number of aspects that are core to the CISSP, including extensive knowledge of cybersecurity, hands-on cybersecurity experience of at least four years’ paid employment in the industry and a commitment to a strong code of ethics. Employers value and respect the CISSP certification and, as a result, this commands a premium in terms of your salary.

[glass nest]

So, CMN - respect points have been added 😄

[fleet delta]

This is wild

I could've did this test ten years ago with my eyes closed..

I've been leaving money on the table 😦

This is insane..

[glass nest]

Maybe, but I doubt you could demand a giant wage rise just for getting a cert

[fleet delta]

Don't underestimate my gangster

[glass nest]

that price you quote is going to be very circumstantial

[fleet delta]

A bump is a bump

[flint lintel]

how do I connect my discord account with my tryhackme account ? I have my discord token btw

[fleet delta]

& THIS IS WAY EASIER THEN DEV..

[glass nest]

true, but if you go get the cert the employer doesnt HAVE to give you a raise if they didn't ask you to get it. You'd likely need to find another job that requires it

[fleet delta]

Of course.

I'm just baffled tbh..

Amazed by how rudimentary these certs are.. I've never really looked at them.

[glass nest]

Well, The whole point of certs is that an employer doesnt need to take your word that you know something. a cert shows that you have enough knowledge for it

[fleet delta]

Yeah. My resume does that lol

[glass nest]

So even if it's rudimentry, then the employer doesnt need to go through any sort of disconnected portfolio/job history to be confident that you can do the job

But your CV is just you saying it.

[fleet delta]

Yeah, I've been playing the game on hard mode.

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 17, 2024, 10:28 PM

[glass nest]

Just remember though, a cert isn't necessarily a golden ticket to greatness - It's just a quicker way to verify skills, especially through a HR filter. (obviously that doesnt apply to some of the more advanced certs)

[flint lintel]

thank you zumi yumi

[twin ridge]

Gave +1 Rep to @fervent meteor (current: #161 - 44)

[glass nest]

Yeah, it really is a minefield

[lone thistle]

ahahaha. aye. not out of choice though unfortunately 😄

[whole yew]

Any linux distro works - the advantage to kali or parrot is that their are (often outdated, but they exist) binaries for common tools. The alternative is to figure out the tooling you want, and then install the tools that you'll actually use instead of 4GB of what amounts to bloatware

[glass nest]

CMN - So where you at, if not in London (innit)?

[whole yew]

nginx reverse proxy, would they even know?

[fleet delta]

For sure. Thanks.

[twin ridge]

Gave +1 Rep to @glass nest (current: #18 - 414)

[lone thistle]

It's layer 2 😦

[lone thistle]

MK currently at my parents. Been here and there the last few days; Bristol, Cambridge, MK and back to London tomorrow

Then i'm doing medical cover @ reading festival for a week next tuesday

busy bee

[glass nest]

Well, don't forget to give me a shout if you are in my neck of the woods

[lone thistle]

is that where I still remember? I think i'm there in september for a bit

[whole yew]

on the public side? are they charging that much for unroutable addresses?

[glass nest]

plymouth, yah

[lone thistle]

yahyah

[glass nest]

you'll be the first THMer to claim their free pizza 😄

[lone thistle]

IDK. I just know it's one MAC per IP. And if you have say 600 vms like I currently do with this, ofc every VM needs its own MAC address. 😅

[whole yew]

https://tenor.com/view/dumpster-fire-gif-7182596

dumpster fire so hot the paint catches fire

[lone thistle]

could probably nginx proxy on the server that's acting as the WAN & LAN, but then it's just easier to run a router and pf/etc accordingly

LMAO

yeah

[clear jackal]

Is this in Kickstart or ifcfg? Or ip? The machine should still boot if you get it wrong in the latter.

[lone thistle]

The hypervisor is debian so /network/interfaces, but yeah ifcfg (I think that's redhat?)

And aye...it'd probably time out but I have no IDRAC nor alternative means outside of SSH to the hv

[clear jackal]

ifcfg is deprecated and not Red Hat specific iirc, but I was thinking of network-scripts

networkd is a bit different

[lone thistle]

only way to get back in was adjust FWing, boot into rescue, clear ssh known hosts, ssh in with a new pass, mount the partitions, change the interfaces file, and it was one-time rescue so if you rebooted it'd just proceed into normal and rinse and repeat...rofl

i'm not sure either way tbh. It's HV is debian 12. Networkd perhaps?

[whole yew]

deb12 uses network-manager as the default

[clear jackal]

Systemd is default, so yes unless it's been changed

Ah

[whole yew]

you can use other network stacks with systemd, network-manager is just the one that plays best

in that sandbox

[lone thistle]

ahh okay

yeah it would've been w/e was OOB on a debian 12 install

just was a right pain not having any other access than SSH, without installing their VNC image

which in hindsight might've been useful, but it was a routing problem, so I don't think even the VNC would've been accessible

Unless I ticket them and ask someone to attach a session to the box

cloud sucks

on prem for life

[clear jackal]

Yeah, I was doing all my Linux networking on prem. I was a bit reckless lol

[whole yew]

i kind of want to know who the host owner is so i can definitely not do business with them

[clear jackal]

Lol

[lone thistle]

Hetzner

[whole yew]

i thought they were supposed to be a good provider

[lone thistle]

look in terms of pricing and specs & CS very happy customer

it's just when you uh

not align with their specifics esp. on the networks side

for this box they built it very quickly & affordable in comparison to others

but g'ad damn

just gimmie a blade or two innit

but no it was insisted it was cloud

[honest grove]

i tried using exiftool on a photo sent through mail from my android phone, with gps on, didn't get gps location from metadata, anyone know why?

[hard fable]

Hello folks, I’m curious on going into Cyber security field. Currently on the google certification and going to start using TryHackMe but was curious on any advice or suggestions in the field.

[lone thistle]

could've been a few things i.e.:

1. the photo didn't have any gps data to begin with
2. the email service could've stripped this. IIRC for example, if you're an exchange admin on O365, You can set taht
3. also depends on the device. For example, a lot of metadata stores directly on the phone (i.e. recent iOS) itself and not necessarily ships when attaching a photo

[lone thistle]

without sounding biast, THM has a lot of hands-on material to practice on, and a lot of free content 🙂

[crude stump]

Facts

Also take notes

[hard fable]

Nothing Bias about it haha I was suggested here from a few friends in the field but I was more so curious on any suggestions or ideas of which certifications are also good to get!

Currently taking the google entry level cyber security course as it’s very cheap

[glass nest]

Depends on the jobs you are aiming for, I guess.

[crude stump]

Sec+ is very popular

[hard fable]

Honestly open to any field. I’m in Canada and I know there isn’t a ton of people doing it here.

I also heard Comp+ is good

Our government just got breached not long ago got me wanting to get into the field ngl

[lone thistle]

ah fair:) I'm not sure how "recognised" it is as it's a fairly new cert, but somethings like comptia Sec+ etc are good standard entry level certs that are recognised. It does depend on your country and such. I'd look at junior roles in your region and see what the requirements generally look like.

For example, in the UK, CREST are pretty much the standard. That probably wouldn't apply too much in the US, where OSCP, etc, are sought after. There are also certs based on the job role, i.e. digital forensics, pentesting, SOC,etc, all have their own certs

[glass nest]

Well, if you don't mind what role you are going for, then it doesnt matter which certs you get 🙂

[glass nest]

Or india where its shudder CEH

[hard fable]

Yeah I’ll have to take a look at what they look for in Canada

[lone thistle]

aye 😅

[hard fable]

Thanks for the input!

[glass nest]

IIRC Canada has a few solid areas for tech stuff

[hard fable]

I’m in BC

[crude stump]

Bc means what

[silver sky]

British Colombia

[crude stump]

Oh

[glass nest]

Heh. My best friend is on a work secondment in Vancouver

He's an engineer, so no hot tech job tips from him

[lone thistle]

hex 👋

bed time i think

gn thm 👋

[hard fable]

I’ll look into it thank you!

[twin ridge]

Gave +1 Rep to @fervent meteor (current: #160 - 45)

[silver sky]

👋

[lone thistle]

and like two ships sailing past one another - adios 😄

[sand trench]

soooo much info

so much keyboard

so many layers

so many tap dances

so many combos

[elfin gyro]

hi

[sand trench]

ello ello zumi

[rapid merlin]

Hello peeps ✌🏻

It’s too toasty to sleep 😴

[inland stone]

a toasty day indeed

[sand trench]

meep meep moop moop time for sleep sloop to the beep boop

[high mulch]

beep boop, goodnight friendly user, boop beep bewp.

[pearl raven]

Night Shadow.

[coarse moth]

whats going on

[winged summit]

hey, just taking a break from some hacking. how about you?

[high mulch]

getting Ubuntu on baremetal how about ya?

[winged summit]

nice. server or workstation? i'm working on DVWA right now. testing some web hacking stuff

[high mulch]

for my personal computer (:
Kinda tired of windows tbf

[winged summit]

heck yeah man, welcome to the fold. i run debian as my daily

[high mulch]

tyty :)

[winged summit]

yep. it's kind of a pain when you're starting out. bit of a learning curve when certain issues come up, even with ubuntu, but stick with it, and you'll like it over time i think. zero telemetry if properly configured, which is fantastic.

[high mulch]

I've used it before, wsl2, and on vms.

But yeah, it'll be definitely a new experience nonetheless.

[winged summit]

ah, right on. yeah. daily driver is a bit different, because when you need something to work for your host OS, the urgency goes way up for fixing things haha

like, "why can't i screenshare on discord?!" turns out discord screensharing only works for me using X11, not wayland window manager(?)

haha

[high mulch]

lolol

[ruby sand]

YESSSS.... JOIN US! I switched a few months ago, currently only have windows on my gaming pc, and every time i boot that machine up i cuss. Linux is love.

I might have gone a little over the top.... pop OS on my daily driver, 3 ubuntu servers on my proxmox server, 2 other laptops running kali and dragonOS... (and unfortunately still a mbp for work, because.. work.)

[high mulch]

That's cool! :D lol

[ruby sand]

it's been fun... totally replaced gaming for me. Now i just tinker and play tryhackme.

[high mulch]

That's me lol. Although these days I've been playing FFXIV online, but I'm trying to get back into studying more time than these past few days.

[ruby sand]

I set up check boxes on my daily obsidian notes for studying, CTFs, and python.... tracking my progress has been super motivating.

[high mulch]

Nice! I'm plan on getting back into coding, I was learning C#, but I might get back into it, or perhaps undust my JS a little bit. lol

[ruby sand]

right on... I need to learn C#, feel like it would be helpful for hardware stuff, but figured i'd start with python as it's A. useful, and B. pretty easy to learn.

[high mulch]

Python was my intro language to programming, then after one month or so, I decided to get into web dev, so, I got into JS, of course I started with HTML5, and CSS, because all I knew was from long time ago. This was like 2019 or 2020.

[ruby sand]

makes sense. for context I am just getting into programming, I've been around computers all my life but in the last 6 months I've spent a loooot of time learning how stuff really works under the hood. about to take my A+ 1101 in the next few weeks, and looking to try to change careers and get into the industry in some capacity. I studied philosophy and art in college and grad school, so python seemed like a pretty friendly place to start. Kind of reminds me of symbolic logic.

[high mulch]

Cool, yeah, I used to play instruments, and before taking this path, I was going for sound engineering or a related career. I had one year of using softwares to make music or covers of songs, I even had my MIDI player, and MIDI adapter for my piano, which I think I still have somewhere. Today I don't have the MIDI player, I sold it, I still have my instruments though. lol

[rapid merlin]

Quick question, I'm new to the cyber field is it possible I could buy a raspberry Pi and put Kali on it and use it as my vm instead? Rather than using the webased vm

[ruby sand]

oh no kidding... I work in audio for Reality TV, and do some music recording and mixing on the side.

[ruby sand]

yes. I have a ras pi 5 that is running kali right now... i never use it since i also have a thinkpad with kali on it, but it would be a very suitable place to start.

[rapid merlin]

I might invest in one

[high mulch]

Nice! I still have my license for this software, Serato Studio, that was the one I used to use. And I think I have one clip I edited with Filmora Wondershare. lol It was a getlucky cover.

[rapid merlin]

Do you run tryhackme solely on your Pi?

[ruby sand]

right on.... i used to use serato way back in the day when i was DJing... we use pro tools and the izotope suite at work and in my boss's studio.

[rapid merlin]

Not sure if you do CTF's or what

[ruby sand]

You can for sure.... I just use a laptop anymore because it's more convenient, but kali is pretty good on the ras pi 5 in my experience.

[rapid merlin]

Word

[ruby sand]

i wouldn't try to run multiple VMs on it to do locally hosted CTF's, you probably need beefier hardware for that, but you can definitely do THM, HTB, PicoCTF, etc....

[rapid merlin]

I see I'm still on the learning paths in THM at the moment but I've been doing some research and quite a few people recommend using your own vm hence why I'm asking I would probably use it to participate in CTF's but not host one

Looking into a cheap ideapad or Ras

[ruby sand]

yeah that should be fine... tho you also shouldn't discount the value of VM's... virtualbox or vmware are awesome... you might be able to save the $$ and just use a virtual machine on your current rig.

[rapid merlin]

I see would you recommend any Kali VM's?

[high mulch]

You can install Kali on oracle VM.

[ruby sand]

you should just download the optimized VM build for kali for either oracle or vmware... if you're on PC or Mac i recommend vmware, as they just made the previously paid version free. i'm on linux so use virtualbox. Just make sure to take snapshots so you can roll it back when you inevitably bork it.

[high mulch]

I read it wouldn't be as good as dual boot, because of some stuff I cannot remember.

But I reckon Oracle has parrot

[ruby sand]

any modern machine shouldn't have too much of a problem.... except if you want to pass thru a graphics card for cracking hashes. That's my (probably very surface level) understanding.

[rapid merlin]

Fortunately my pc is a beast so I'm not worried about the hardware

[ruby sand]

so then, forget about a pi.... just set up either a live boot thumb drive or a vmware kali setup

[molten sky]

vmware workstation > vbox imo

[ruby sand]

I agree, i just use vbox in linux because it plays nicer and i got frustrated trying to get vmware to even work at all.

[rapid merlin]

Okay yeah after considering it im gonna go with vmware

Thank you everyone!

[solar echo]

Hello.

[ruby sand]

good call! always happy to help. I'm not nearly as knowledgeable as most of the folks here, but always happy to nerd out!

[rapid merlin]

I'm currently in school for this and have fallen in love with it pretty fast definitely overwhelming at times but its worth it

[molten sky]

kvm > tho

[solar echo]

It's never overwhelming if you understand your learning pace and consider it before everything else, it just becomes pleasing.

[loud marlin]

it works

[high mulch]

Yeah, I remember when I was a kid, I used to get more overwhelmed, I think that's why I didn't follow up later on in life until years ago. Although I'm not new to the whole cybersec space, I'm definitely new to taking it responsibly. lol

[molten sky]

real hackers use HML, not kali

[loud marlin]

indeed

[solar echo]

If it is Debian based then you can actually make it turn it into Kaliana Montana OS

[loud marlin]

for this case. it will be extra hard. its out of date and cant even update

[tender kraken]

whats HML?

[buoyant tree]

Oi @molten sky Any ideas to expose a web server to the internet without opening a port for free

[solar echo]

Hannah Montana Linux.

[molten sky]

for yourself or for the world

[ruby sand]

Not productivity but i use cloudflared tunnels for that purpose

[buoyant tree]

for myself

[molten sky]

literally my suggestion

[buoyant tree]

do they have a bandwidth limit

[molten sky]

i haven't used them for that purpose but i always hear good things

[tender kraken]

LMFAO - Oh you that's hella hacker right there

[buoyant tree]

?

[ruby sand]

I believe the TOS prevent you from streaming video through their servers for bandwidth reasons, tho they might have dropped that as an explicit term.

[tender kraken]

HML OS

[stray tapir]

I just port forward and use cloudflare cdn

not the best solution but works for me

[molten sky]

glorious hml >

hannah montana linux should've been the year of the linux desktop but the world wasn't ready for it yet

before its time

[tender kraken]

Yeah way ahead bro

lol

[stray tapir]

https://tenor.com/view/mundo-feliz-onetreehsll-world-if-gif-14071235670792471304

the world if hanna montana linux:

[brittle lynx]

Hello. Is there a way to turn on that I can see how long a response took for a request in BurpSuite? I want to try Time Based Injections...

[finite rock]

[blazing granite]

did you check BurpSuite documentation?

[chrome vapor]

Hello, is anyone having any problems with the Lateral Movement modules?

[buoyant tree]

oi @blazing granite mind checking DM's

[winged summit]

It looks like in Repeater, it's pretty straightforward (but I didn't realize this, haha. it took a lot of research, then my eyes caught up ;)). Check the lower-right corner (should show milliseconds). However, unfortunately, when it comes to Intruder, I searched for how to get the response time / latency pretty hard. most sources point to enabling the "Response received" and "Response completed" columns. However, I'm confused how those columns are measured. It's not just stating in milliseconds, etc. Anyway, you might want to do more digging with web search, Burp forums, etc. But I had a hard time finding any additional information. It might be a feature of Pro, but I couldn't even see if that was the case.

that was a great question btw, i never thought about that

i haven't done much time-based stuff

[amber summit]

i just realized that like firewalls , stateful and stateless people are also stateful and stateless

this is so crazy

[autumn solar]

Cop cars are scarecrows for people

[chrome iris]

I'd think that's the point~
Impose dominance like the Government's T-posing.

[blazing granite]

I wouldn't say for people, I'd say for an oppress country

[crisp edge]

Iam a biginner can anybody help with this

[sturdy lark]

what do you guys think the main focus of the CISSP content is? I know a significant portion of it covers policies and day-to-day management, but I'm more interested in the technical aspects

[clear jackal]

CISSP isn't a technical certification. It's purpose is to show/translate how cyber integrates with the business unit.

[tender kraken]

It’s more high level.

[clear jackal]

From a technical perspective, yes.

[tender kraken]

CISO type of decisions so you have to take off the technical hat off

[clear jackal]

It's "in the weeds" from the management perspective, if that makes sense

[sturdy lark]

oooooh I just read dozens of pages about CISSP and get sleepy

[tender kraken]

Lmao get use to it

That’s called the grind and you have to take as many questions as possible. None of them will be on the test lol.

But once you pass - it’s the best feeling ever. 😉

[sturdy lark]

I believe every cert would bring good feelings

[ruby sand]

https://tenor.com/view/monty-python-surprise-meaning-of-life-every-sperm-is-sacred-crianças-gif-11694597

every cert is sacred.

[sturdy lark]

When needed , I would pick up some sections from CISSP

[sinful moon]

lol imagine putting that top on your Roomba and watching the cats freak out

Gif is a bit much repeating such tho lol

[coarse moth]

It would be very fun

[molten sky]

well

idk about all

CEH still exists

[rapid merlin]

Quick question how does one link their discord and THM account

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Aug 18, 2024, 4:49 AM

[rapid merlin]

Ty

Done!

[wraith fjord]

ah yes CEH

[coarse moth]

35 days streak

[pale swift]

hey guys

i need help in exploiting smb

[junior wraith]

thats pretty general, what do you want to know?

[pale swift]

im not able to access a secret file in smb client

[naive violet]

Is this for a tryhackme room?

[pale swift]

yes

network services 1

[naive violet]

Please use #room-help for help with tryhackme rooms

[pale swift]

theres no one there

i alr tried

[naive violet]

Please ask there and be patient - please don't move here if you don't get an answer. THat's not how it works

[sturdy lark]

shit I'm taking snus overdose

[sullen hearth]

Hi, hi. Hope you all doin great 👋🥳

[molten sky]

i've just uncovered the best way to reheat a pizza

@boreal scarab any guesses?

[weak plaza]

I have a doubt. I am testing my metasploitable 2 vm . Used searchsploit to locate a vulnerability in a ISC bind which is present in metasploit framework. But idk to find that exact exploit in msfconsole. How can i search the file i got in searchploit in msfconsole ?

[tranquil osprey]

In msfconsole, use search foo bar to get matching results

[wraith fjord]

stealing this for research purposes

[molten sky]

i've gotten so far down the rabbit hole that chatgpt is suggesting chatgpt as an alternative solution

[weak plaza]

sry i dont understand.
The command i used :

searchsploit 9.4.2

BIND 9.4.1 < 9.4.2 - Remote DNS Cache Poisoning (Metasploit) |multiple/remote/6122.rb

Now how can i load this 6122.rb or find this exact name of exploit in msfconsole

[tranquil osprey]

You can examine the exploit to find some info with:

searchsploit -x remote/6122.rb

If it's a Metasploit exploit, it should have some information about the author, vulnerability and stuff
You can use that to search in msfconsole

FYI, it's this ||use auxiliary/spoof/dns/bailiwicked_domain||

[icy mesa]

any of you have recommendations for a good entry level 3d printer?

[lost patio]

Hi, do any one know how to fix it in openvpn kalilinux

Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.

Note: '--allow-compression' is not set to 'no', disabling data channel offload.

[icy mesa]

go to #site-support or #room-help

[sick lance]

vpn is site support

[chilly stream]

hello guys

[sick lance]

Hello hello

[rough widget]

Hello

[molten sky]

Hello hello hello

[sullen hearth]

@loud marlin gave me good advice for it. I've had the same question. 👍

[weak plaza]

Thanks ❤️

[twin ridge]

Gave +1 Rep to @tranquil osprey (current: #39 - 203)

[rapid merlin]

getting rickrolled by thm room is one of the best experience 🥲

[worthy gate]

hello

[icy mesa]

https://tenor.com/view/my-sweet-summer-child-sweet-summer-child-game-of-thrones-gif-19977020

[digital flame]

hi

[icy mesa]

can i ask what did he recommend? i was bothering him couple past days about something else and i dont want to do it again

[slender scaffold]

Good morning?

I don’t even know the time here

[icy mesa]

its different for everyone

[burnt halo]

tru

[icy mesa]

its called timezones

[sick lance]

I think she meant where she is...

Not in general.

[molten sky]

7:32

[graceful thistle]

lmao

[burnt halo]

smartass🙏🙏✅

[slender scaffold]

dolphin!!! ❤️

[pale swift]

bruh

[graceful thistle]

Hello feathers 😄 how are you?

[pale swift]

hello dolphin

[graceful thistle]

and where are you at? Holidays?

[slender scaffold]

I’m good!!! I won a defcon contest and got second in another! It’s been a good year 😂

[slender scaffold]

No I think I’m just adjusting to being back ;_;

[graceful thistle]

awesome!! I would have expected so after last year 8)

[molten sky]

fuuuuuck

[burnt halo]

where are you guys from

[sick lance]

The Earth.

[molten sky]

you ever press the up arrow in a terminal and press enter and forget you ran exist in another shell so now you exit the terminal you WANTED to keep

[pale swift]

bro

[burnt halo]

default answer ✅

[molten sky]

this is like the seventh time today

[slender scaffold]

https://tenor.com/view/falcon-sam-wilson-outta-line-but-gif-22091662

[pale swift]

u need to slow down then

[molten sky]

no

[pale swift]

dont be too hasty

[molten sky]

can't

never

[graceful thistle]

grats on the wins 🙂 🙂 🙂

you need to keep it up every year

undefeated champion

[burnt halo]

try vaseline on ur fingers 🙏

[pale swift]

what is defcon?

[burnt halo]

meetup for geeks and shi

[pale swift]

ik the US version of defcon

[naive violet]

You know about control r btw?

[slender scaffold]

Too hard!! But I might join a team next year to try something new. And also run a contest possibly

[molten sky]

Si

[slender scaffold]

It’s the convention in Vegas that just ended last weekend

[molten sky]

i also use zsh so recursive hist search is kinda like just part of typing

pretty convenient

[molten sky]

wat m8

wouldn't that just go faster

[sick lance]

Def Con, is the US version of Def Con?

[molten sky]

i mean, it's not wrong

[sick lance]

That reminds of Yungblud on Nevermind the Buzzcocks...

[molten sky]

defcon is the american version of blackhat

blackhat is also the american version of defcon

[slender scaffold]

Nuuu it’s the after party of blackhat USA

[burnt halo]

faster with better friction which would prevent misinput 🤨

[slender scaffold]

Sticky though :< bleh

[burnt halo]

well that just might be a bonus to some particular human beings

[slender scaffold]

This 86% humidity is bad enough as it is

[naive violet]

The less corpo version

[burnt halo]

sounds like florida bruh

[slender scaffold]

I had to turn away when DualD was stripping on the scav hunt table 🙈

[graceful thistle]

I fully believe in you

😄

[naive violet]

Featherz, are you still doing electronics stuff for work?

[slender scaffold]

Kinda. I’m testing software right now. Things keep changing. That RF is on hold

[worthy gate]

any body made VDP?

[naive violet]

Like started one?

[naive violet]

I'm still aggressively trying to learn electrical engineering

[slender scaffold]

I don’t think I can properly learn it unless I go to formal schooling

[sick lance]

Is that how you learn best?

[slender scaffold]

But from what my friend talks to me about, he’s got the EE, I have the gist of it. I want to learn FPGA properly though

[burnt halo]

my homie is out there getting a masters

[slender scaffold]

Yeah ;_;

[naive violet]

Nah, I don't have the luxury of being formally taught

[burnt halo]

but from what i’ve seen, my personal suggestion would be to definitely try and get formally taught

[slender scaffold]

THM is actually formal enough. It has a method and I can take notes properly. That’s all I need. But it’s nice to have a mentor

[worthy gate]

Oi Oi Oi anyboday done VDP

[naive violet]

Tbf I'm doing pretty good without, I have all the maths foundations and access to all the material I need. After all, it's the 21st century. The internet is (sort of) great?

[naive violet]

Just ask your question directly

[sick lance]

We seen the first time, nobody answered.

So I'm going to assume no.

[burnt halo]

the math part is exceptionally hard from my experience

[worthy gate]

lol thanks for replying

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2637)

[worthy gate]

Done i am out!

[burnt halo]

calculus II III and IV? i think

goes really deep into math

[icy mesa]

that could be better question for #quiet-conversation cuzbit gets burried here

[slender scaffold]

I was thinking of knocking out a bachelors in comp sci as a fast track just to be a resume filler… but finding the time is hard. Though they did reject my calculus from years ago, so I took an accredited course and passed it in less than a week so they can stop saying I don’t have it lol

I only passed up to calculus 2. Never tried higher

[burnt halo]

wow

[pale swift]

hi

[pliant cairn]

now rinse and repeat. You found the world's exploit.

[naive violet]

Complex numbers mostly, for impedance
Probably some integration and differentiation but that's nbd really

[icy mesa]

sup trymph

[pale swift]

how u doin?

[icy mesa]

ok

[worthy gate]

Done

[slender scaffold]

Only reason I’m doing it is I already have the job… just not the bachelors :/ which is a resume auto reject issue

[burnt halo]

what exactly would u want ee for?

[naive violet]

RF design and matching

[burnt halo]

broken system in a broken world

[naive violet]

Digital is easy

[burnt halo]

i think you can learn that without a college ! So you’re good

[pale swift]

most of the ppl in this server have jobs or are in uni

right?

[burnt halo]

Try electrical engineer simulator xd

[icy mesa]

probably not

[worthy gate]

No job

just playing CTF in THM lol

[burnt halo]

self employed ✅

[pale swift]

nice

[sick lance]

Their question was fine in here, doing things like this is just a minor term of mini-modding.

[molten sky]

mostly bounties but same thing at the end of the day, why do you ask

[icy mesa]

yeah...i just said it gets burried very fast

i just want to help nothing else

[chilly veldt]

Morning

[sick lance]

If there was a more suitable channel to switch it to it would probably be #bug-bounty anyway.

[rapid merlin]

complex numbers because shrodinger

[naive violet]

I mean no

[worthy gate]

Done

[naive violet]

Complex numbers because you have resistance and reactance

[molten sky]

i'm preferential towards using #community-art

[burnt halo]

✅

[molten sky]

oh my god lol so many ban messages in that channel

[worthy gate]

what oh no i made a message in that channel

[worthy gate]

Hope today is my farewell day lol

[rapid merlin]

deep down into electrical engineering you have shrodinger

[pale swift]

farewell

?

[naive violet]

Nah that's quantum physics

[rapid merlin]

is it ?

[naive violet]

Different discipline

[rapid merlin]

i was never good at physics

but i just know shrodinger is there

somewhere

with some law that uses i(sqrt(-1))

[naive violet]

Electrical engineering principles stop working when you start talking about quanta

[rapid merlin]

i know that, my professor told me once when you go learn quantum physics you have to forget everything you know about physics

because those do not apply there

[burnt halo]

that’s quantum physics principal

[burnt halo]

it’s all theoretical js learn it as a fiction story lmao

[rapid merlin]

i wont

i hate it

[burnt halo]

fun stuff if u get into it tbh

i started learning it as a kid for fun

right after the multiplication table 😂

[rapid merlin]

i bet it was a fascinating experience

[burnt halo]

yea like using heroin after trying cigarettes for the first time

[rapid merlin]

bet

i am very good at math

[grand quiver]

hm

[tranquil osprey]

lol, lost into the matrix/field

[rapid merlin]

but i hate physics

[burnt halo]

i’m the other way around tbh

[burnt halo]

😜

[rapid merlin]

happens.

[tranquil osprey]

It's fascinating while you can grasp the concepts, otherwise it's just a big rabbit hole😆

[burnt halo]

at some point it goes beyond human’s ability to handle the information :>

[hot current]

[boreal scarab]

Fire spit, or oven

[molten sky]

grill.

[burnt halo]

overkill

[molten sky]

commercial pizza ovens get hot, residential ovens not as readily.
grab a flat pan, throw it in the grill, crank it up for a few minutes, and you'll already be at the 650 range even on a cheap one. and quicker than it'd take to use the oven.

heats it up fast the same way the shop would.

if you have flour on hand not a bad idea to put some on the pan so it doesn't stick (don't throw it on the grill tho for obvious reasons)

[molten sky]

nah. quicker, just as easy, and better end result.

[burnt halo]

i ate pineapple on pizza for the first time two days ago

now all pizza i eat from now on is going to have pineapple on it

[molten sky]

https://tenor.com/view/get-out-leave-gif-5785321051025239919

[burnt halo]

nuh uh

[molten sky]

https://tenor.com/view/pineapple-pizza-food-throw-trash-gif-17492841

[burnt halo]

nuh uh

its good

[molten sky]

https://tenor.com/view/ginos-of-williston-park-ginospizzawp1979-williston-park-pizzeria-tiny-vs-pineapple-pizza-eater-gif-2237430012784568317

[burnt halo]

a lil sweetness is just what i’ve been missing

[twilit thorn]

italians are gonna love this

for sure

[icy mesa]

https://tenor.com/view/enough-of-this-blasphemy-south-park-stop-it-enough-no-more-gif-21054233

[brittle lynx]

Good morning hackers
Today I'm reviewing File Inclusions. Any tips for me?

[naive violet]

Make sure you can explain the difference between LFI and arbitrary file read/directory traversal

[brittle lynx]

Can u explain? I thought thats the same

[naive violet]

@loud marlin https://hackaday.com/2024/08/17/laser-art-inspired-by-the-ford-motor-company/

[naive violet]

The name "inclusion" comes from the PHP function "include()"
Inclusion is where it runs the code that it reads
Arbitrary file read / directory traversal are just reads, not execute

[brittle lynx]

Oh okay. So if I can do RCE then it is an inclusion?

[naive violet]

If it's being passed to include() then it's inclusion

There's a small handful of languages other than PHP that can do it

[brittle lynx]

So I need to check the code of my hacked target to put the right vulnerability name in the report?

[naive violet]

No?

[brittle lynx]

THen how to know

[naive violet]

If you redo the content on THM, it should be clear IMO

[brittle lynx]

Sir can u please give me a brief explanation on how to confirm which one it is?

[karmic furnace]

man, I hated the jack box

why did it lag and take so long for me

[tepid citrus]

Has anyone used the BCS ATS for CVs? How good is it? Any recommendations for a better one?

[loud marlin]

oooh nice. that is thing about laser/cnc. creation by destruction. but yea nice idea

@naive violet i ordered the scratch paper, like that tollery tickets thinh, under is color and covered with thin liek foil layer. also laser and you cet nice pics

[stable venture]

is there currently a problem with THM rooms? I have been unable to configure DNS in CompTIA Peristing Active Directory for a few days now.

[sick lance]

#room-help or #persisting-ad

Network rooms are designed differently to normal ones.

[brittle lynx]

Hey guys. If a parameter doesnt work for one vector i.e. LFI, how long should I spend on it to try all the bypasses; filters, verb tampering, etc.

If it is like 1 hour to attack 1 parameter, and there are 20 parameters, I am going through a lot of rabbit holes and will not have any time left to finish the exam ...

[sick lance]

Which exam?

[brittle lynx]

The exams; CBBH, CPTS, OSCP etc.

[sick lance]

Ah, you made it sound like you were doing an exam just now.

[naive violet]

You have to think about what that parameter does when the app is being used legitimately

[brittle lynx]

Nop Im just prepping

[naive violet]

And how it could be abused

[brittle lynx]

I see. This is a next level awareness that I haven't been taught yet. I only roughly use it in my methodolgy: when I map out the web app -> list all page and script and api dynamics

[naive violet]

I'd argue the first step of mapping out the web application is the "happy path"

[brittle lynx]

But so far no module or course has told me how to thoroughly analyze how a parameter is interacting with the server or rest of the website

[brittle lynx]

Care to explain the happy path?

[naive violet]

You just have to think about what's in the parameter now

[naive violet]

Use the app without trying to hack it. Be a normal person

Find out what it does

[brittle lynx]

Thanks. Added to my list of "remember to do"

[glass nest]

a normal... person? thats crazy talk!

[naive violet]

A parameter like ?post=my-first-post.php would be something to dig into very hard

[glass nest]

i mean, yeah - James is right. One of your first enumeration tasks would be to just click on stuff in the website

[brittle lynx]

My current list of remembers for web hacking:

1. Try multiple times — Things don’t always work right away
2. Try all methods — Different actions have different methods
3. Experiments may lead to beneficial unintended reactions — Don’t assume that it wont work
4. Do not manually go through long code & text — Use search filters & chat GPT to read text for you
5. Don’t skip manual passive enumeration — Act how a normal user would

[shut hawk]

I like that

Also, intuition comes with experience - as you spend more time working on webapps, you're able to get a sense for when something feels right

[boreal scarab]

..............

[boreal scarab]

You're banished from ever stepping foot in New Jersey or New York City and State

https://tenor.com/view/mickey-mouse-mouse-club-house-pee-pee-nono-gif-5418943084841289627

[glass nest]

Nuo Joysey

[sick lance]

I'm sure they're relieved.

[boreal scarab]

@molten sky Do we really sound like this? Lmfao

Can't play a Sims game without a few qol mods

[shadow loom]

sup nerds

[glass nest]

I still can't play a Sims game.

Well, more 'wont'

[sick lance]

I played The Sims when it first came out, and decided... Never Again.

These days I'd rather just sit and play Diablo or CoD.

Until SH comes out.

[glass nest]

My current game is star trek online (nerd)

humble also had an escape room bundle. Was fun, but I smached through most of the games quickly.

[rough widget]

what is difference between sublime text free version and paid version ?

[sick lance]

Sounds like an excellent question for google, or their website...

[rough widget]

bro tell me man

[boreal scarab]

Whaaa?!

[glass nest]

Bro and man? Someon is a cool cat!

[sick lance]

Sister, sometimes you gotta research.

[sick lance]

I got you, you on a desktop?

[rough widget]

dude im male

[boreal scarab]

I like my Skyrim and other games, like any other person. But sims, just has that nastolgic feel (Grew up playing it) and relaxing. Like you can do anything, add mods to do even more

[sick lance]

I know. 😮

[rough widget]

how do you know

[sick lance]

Look, you don't even have to type it.

[glossy wedge]

I just now learned you can do this

oh shit

[glass nest]

you're gonna google so many things!

[misty frost]

thanks man : ) i wanted to know if it 's still possible to choose the "PANDA" room in King Of the Hills if we have a subscription ? i want to check if the room is still there

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2639)

[misty frost]

thank you so much !

[sick lance]

KoTH is F2P, not sure if that applied to private games?

[misty frost]

yes it's free but you can't choose the room

it's random

[sick lance]

Oh for public games?

[misty frost]

same i think

[rough widget]

how to remove pirated windows key

[sick lance]

You're pirating windows?

[sick lance]

You can choose the machine for private games.

[rough widget]

i added random windows key from git hub man

now i got original key

[sick lance]

Do you know how to remove it.

Pay for it.

[sick lance]

Which is the only way.

[rough widget]

removed

[sick lance]

You bought a key?

[rough widget]

my friend carder

gave me

[sick lance]

Carder?

[rough widget]

yes

[sick lance]

That's their name, or what they do?

[rough widget]

they do carding

i got contacts on telegram

[sick lance]

More illegal stuff...

[rough widget]

legal or illegal we have live life man its hard with out illegal

[crude stump]

Bro I hate how guest additions doesn’t come pre installed with some os

[sick lance]

No, everything should be done legally.

[rough widget]

r u doing job bro?

[crude stump]

It won’t let me insert a guest addition cd for windows 10

[sick lance]

No, I'm a student.

[loud marlin]

agree... on my job/work life i do things that im glad are illegal. on that side i do thoes things only when gov ask us to do stuff to know what is deal with it and so on

[sick lance]

Remove the current installation CD.

[rough widget]

bro whenever i touch windows local persistance room i lost interest in tryhackme man

really

this is third time i got that feeling

[sick lance]

Anyway, I gave you enough chances...

[rough widget]

what chances

[crude stump]

I’m guessing that would be the vbox guest additions right?

[sick lance]

No, on the computer on the OS.

[crude stump]

Oh

Got it

[sick lance]

It will think the installer file is in the drive.

[boreal scarab]

TIL.... never knew they added that

[crude stump]

It worked thanks scrubz