#general
1 messages ยท Page 454 of 1
You're doing great, I believe in you
I missed that! Congrats Zumi!!
Nice! Just keep a general sense of curiosity and you'll do good!
congrats! hope you like the job!
dumb question, but how would you get colored roles here?
Verify.doc
@rapid merlin
Get a rank and ^
ty!
Cool. Here its not allowed. If you work in a company and do a part time job in the same field, ur main company could fire you.
dang man, you couldn't just be happy for him
cause of conflict of interest?
Wut? Im ofc happy for him ๐คจ . Just mentioned it.
maybe, I read it outta context
By here he's mentioning his physical location, where that applies
Yeah thats also a reason here. To prevent conflict of interests. But hey, i would do it tho if i could ๐๐ฅณ . So its great that is possible for you ๐๐
๐
everywhere is gonna have different laws , policies, ect, and all for different reasons tho
This is a large issue for info sec.
Sry. Overread you question. Yes, exactly.
Its tooo early for doin anything ๐ฅฑ
I would argue that it is now too late. Good night Friends.
Time travel ^^. Good night ๐
lol. Thank you.
welterusten!
Zumi speaks really good Dutch too
well thats a coincidence lmao
do we know what the next learning path is going to be?
start scrubbing
are you Dutch though Goth? bit late / early to be awake?
yeah you do
dont yap
Spreek je Nederlands?
he does (just a heads up cause I dont want to be the cause of you getting in trouble, but the server is English only)
ooh my bad
sure
I do speak Dutch fr though ๐
Nah sleep is for the weak, embrace sleep deprivedness 
Hey guys, does anyone here have worked with SOAR automation tool ?
dutch is just fake german tho
no u
unusual for me to be here at this time lately
What are these emojis
You said it yourself. They're emojis
Hi anyone experienced in CTF challenges of different Categories lik3 forensics, steganography, RE , Networking etc
Please dm I need some help
You named almost all the categories I suck in
Same
๐ฅต ๐ฆ ๐ฅค
๐ซ
what

Love that
Trampoline car
Trampoline cat clan?
Wahoo
real
Good morning to everyone who woke up and have great day
๐
what about the people that didnt wake up, what about them?
imagine threatening someone while pretending to be about peace, love and acceptance. like ming the mercyless, all will make merry under pain of death
Well hard truth is theyโll never see this message but you can still send them prayers๐คทโโ๏ธ
yea i can confirm i didnt wake up. what about me
I don't think they'd be able to read that.
Is it just me or has this generation become.. too irrational? Some jokingly act it but some really arenโt joking. Hard to tell.
Heyyyy whoโs up
Anybody know of a good room to touch up on finding data within downloaded images? Tried some learning on my own but would like to see what tryhackme has !
what do you mean? you not part of this generation?
Actually no Iโm actually from the time it was transcending into this one.
Intro to digital forensics
Or Madness which is a CTF.
what is so different about your generation. I see people in their 60s 70s behaving like the newer generations
Then I guess youโre seeing disturbed people then, which all generations have, but this one has more effect on disturbing others.
Thank you (-:
This happened the other day when I was messing with it โ so I just kinda
Closed my laptop and called it a day๐คฃ
Gave +1 Rep to @sick lance (current: #1 - 2822)
yes it is becoming more disturbing. initially it seemed false, the s*it eating grin that went with self hating false attitudes has been absorbed by the youth as genuine
Iโm not gonna go too deep into this or else my psychology mode will be activated lol and I have no intention of getting on here only to talk about irrelevant topics in this space
you mean it triggers you?
Both of you just stop fr itโs silly
Also I like the background thing on your server profile @merry swan
np ๐
Hello guys how are y'all? Hope erryone is having a great day
should i create a a dir and make it default when i enter terminal?
mkdir .randomshit
move all the mess there
No dangerous commands in chat @twin cipher
Is it true combining ngrok and nginx I can host my django websites on my pc without needing to expose my ip or port forwarding
Or create directories, move all relevant stuff to each directory, or delete the files manually
when i was getting started
someone recommended that
and i actually did it ๐
it was luckily my ec2
big oof
Itโs possible, whatโs your Django use case?
Portfolio websites
I am confused should I pay for ngrok subscription or is buying a domain and using ngrok will work fine?
not sure why ngrok has to be involved at all for what you want to do
Morning
Why do you need it to be Django?
I need to port forwarding if I don't use ngrok and host webserver on my old pc?
I am not sure prettty new
If its a portfolio website, HTML, CSS, and JS can be enough
Yea it contain some full stack projects
100% recommend this
Github pages or netlify for hosting too
Yea but mb i didn't mention what kind of projects it includes a ecommerce site and stuff like that
Would recommend getting proper hosting for that
Especially with regards to the GDPR and similar regs
For static sites, GitHub or GitLab pages 100%
it sounds to me like cyan wants to just be able to spin it up on their localhost for free in a job interview or similar when required, in which case all the extra configuration tbh is mostly unnecessary. but if you wanted you could do so in a VM with no NAT / bridge so it doesn't have any access to gateway, or configure it to only be reachable via loopback
they want to demonstrate their ability to build the backend with django so just using static sites isn't sufficient
but yeah, i agree that using a VPS would be best demonstration, configuring a live server would only add to the skillset on display
VPS or other but yeah
I wouldn't make anything internet facing unless you're certain the security is absolutely rock solid
I certainly wouldn't run it on my desktop.
You can spin that up on demand as well
you can get an extremely cheap vps from some services, or use something like Google firebase or heroku where you can get some minimal free app hosting
It's my first time with hosting so i thought of using my old pc lying around for it. I thought the process was straight forward. I don't need to forward my ip address so thought of using ngrok.
I don't know whether buying a domain solve my issue too
Buying a domain will help if you're on a static ip
Otherwise you'll need to update the record each time it changes
My ISP provides a domain name to reach my IP and I just mapped a cname to that but my ISP is very tech friendly
Oh mine is not they even changed the router admin page password
I can't even login to admin page
Just to chime in, you can probably skip hosting your own web server and just upload your projects to Github instead
Hm but am applying for backend developer roles. They do prefer live websites right
For a portfolio that's a good idea, but you won't get the final render
Shouldn't been too expensive to dockerize everything and host on a vps
Backend devs like to see code
I will check that ig. And try hosting on local pc once I get more experienced
Make sure your code is clean and impeccable though
Yea ok
Host on local is for dev
Never host prod on local ๐
I mean network
Aye
And public
You'll be exposing your network to the net, which is a terrible idea
Let someone else's net get attacked
๐
Try to mimic prod locally as closely as possible to debug, but host elsewhere
K8s might be fun but is probably overkill ^_^
Also having a domain is a good look
just get a VPS and play around with it and learn.
don't worry about ngrok. but learn to configure nginx for sure
Yea i do that I was just concerned about my old pc laying around
what do you mean concerned about
Preprod
Set it up to be as close an environment to the VPS as possible
NetworkMiner room where we have to Use case2.pcap, the VM can barely hold it at the Images tab, been restarting it a few times now, I can't even complete my progress because of constant freezes 
if you don't have access to your router's admin panel you likely wouldn't have permission to be hosting web services on your network anyway.
You can test deployment
but I thought something like ngrok or even buying a domain solve that I am not sure
If you use GitLab, you can probably set up a runner on it
nope
is it even your network? are you a student in student accomodation or something?
does anybody know of popular OSINT tools?
It's my home network
Yeah, I agree. If its possible, dockerize the app so you can spin it up whenever and wherever
Everyone has a testing environment
Some people are lucky enough to have an entirely separate environment to run production in!
Hi
Any of you lot get burn out from just reading a screen for hours?
That's true enough
Take breaks, your eyes will thank you. Also bad bot
Gave +1 Rep to @dusky bone (current: #1119 - 3)
bad bot?
Giving rep where none is intended
I dont know what htat means
I knew the bot was going to be silly
ok?
Nevermind
thank you
Gave +1 Rep to @dusky bone (current: #913 - 4)
yeah your welcome, I think
that was a demonstration of the thing you were saying "i don't know what that means" about.
i gave you rep where none was intended
if you do that too much the bot might pick it up as spam and mute
weird reaction but ok
was trying to be helpful to you
oh, why did you give me rep
ah okay :)
O.T.G
anyone here from UK and has sky as an ISP? can you shoot me a message
I've tried to do what it says but the port still isn't working
Am I allowed to @ someone who I was talking to about it here?
As long as you donโt spam them, that should be fine, I think.
No idea how to fix this
we ping seadris everyday in multiple servers so its should be fine
Not in this server.
Usually a hardware issue
Make sure the ports are clean, haven't got wet etc
hey guys, has anyone here worked with Shuffle, which is the SOAR tool ?
I need some help with its installation part
Hey people how are you all doing today?
Just ran the Hardware troubleshooter that I ran last night to no avail, run it tonight and it fixed it ๐
Finally can use my keyboard, mouise and headset again
That was a very long couple days not using this lol
Hi
Goood wbu!
๐
fr?
expected
thats sad
even YouTube works bad .
Learned something new today, apparently newer versions of Chromium do not like CORS requests from public resources to private resources if its not via HTTPS
Thatโs cool lol
I thought most things private to public and vice versa went under HTTPS?
nearly forgot the l in one of those words ๐คญ ๐ณ
hi
Not an expert so donโt take my word for it and fact check me but thatโs not necessarily true. Most of the controls you know like that are usually employed by browsers.
hello
can i get a tutor
Probably. Have look on places like upwork or fiverr
What Esqy said
I donโt think someone would tutor without being paid
hmm ok
Luckily, TryHackMe.com enables you to self-learn, and the addition of a very active community - Seems like a decent way to take ownership of your own learning
The website is basically your tutor
and the world is your gym
Are razer mouse braided?
Neither am I, I just think I remember reading it
I hate having a fucking cold\
\Feeling better than yesterday. But still don't wanna move
Yesterday was the worst I've felt in like... 4 years, no it wasn't Covid. But today, still low on energy, but can still function
sure it wasnt the evil covid?
yep... 2-3 days and you are gone ๐
send me all the hak5 stuff, and send priter to esqy
Why not :)
woah woah woah.. Whats wrong with my lovely printer?
nothing... one more is not bad idea ๐
I think james could do with a printer
@mossy river
Hi
what's everyones plans for today?
lol
๐ nice one Jabba
wow 2x times
Tidy house, then tidy garage. periodically mock Berrise' illness
Which sort?
a 3rd dimension one
interesting
Eh I'd 100% prefer laser cutter or CNC or router
Much more suited to my projects
Or a ginormous satellite
I've got parts on order to talk back to them now
btw @glass nest check this one. soon out. K1 series but not glass/panels what lover the price
https://www.creality.com/products/creality-k1-se-3d-printer?spm=..page_1967279.products_display_1.1&spm_prev=..index.header_1.1
Should arrive Monday
Want bricked Pineapple?
true. just not so much ppl use filaments that need enclosed system ๐
bricked ? wtf did you do ?
He just acted as he normally does, I assume
yea...
hihihihihijhih
Today is flying by
You're right
Hdhdhd
shzm
Good mornin north america
Real
GFuel baby. Low on energy. Needs da GFuel
1 plus side to having a gaming laptop... gaming.
1 downside to having a gaming laptop... can't play games on lap. It gets burning hot
What the hell is he guarding?
Local gas station
He needs all that for a gas station?
this is a social engineering attack do not fall for it
It's not!
They really took it down!
and instead we host it!
is this true?
Yeah, go see.
Guys, this works.
Password is. ||Tryhackme123||
Why'd you post the password! Skidy is not gonna be happy!
Skidy, please don't ban me.
Quick question, when using EDB does X mean any version within that range? e.g: 2.4.X
I've always guessed that but not entirely sure.
hi zumi yumi*
My brother was starting uni and my mates lived in town over so planned drinks with em and the car broke down near my brother's campus ๐ฅฒ
Getting train to my mates while my family get breakdown cover sorted
oofers
ooooooooooh pretty
who exactly is Fluff ?
FluffMe is an old Community mentor and mod of Thm.
where's he now ๐ค
Fluff is a giant ball of fluff.
Fluff better get his ass to Scotland soon.
He's been before, but that was before we spoke.
my worst nightmare
@sand trench finally made nvim automatic change/follow pywal colorscheme when i change it
@fervent meteor Niceo ๐ i hope i get some thm task fulfilled tho.
nice
Oh that's pretty.
thanks mac... was doing some arch and hyprand rice ๐
Gave +1 Rep to @valid mauve (current: #69 - 111)
That's a coincidence. SSRF is part of my final project (which is still far off). I'd like to implement a program in our company that intercepts these requests and possibly redirects them to another server. For now, though, it's just brainstorming.
@fervent meteor test
lol
Damn trees anyway...
guys why cant i connect thm using ovpn
?
does it even work
could u help?
ok
does ovpn even work?
Yeah you just don't know how to use it lol
nah brother i did all steps
wdym i did install the pkg
done
How are my parents still healthy bro. They regularly matter of fact daily just dont care about food safety. For example leave meat out to thaw for hours, just on the counter, leave leftovers out on the counter then eaten few hours later, leaving refrigerated stuff out of the fridge for long periods then put back inside, raw food contaminations, 100 year old cooking equipment... how
That aint right
who is this dude talkin to?
hes venting like you
Is doing writeups a good way to showcase my skills & knowledge?
i did not give you permission to post this video of me
No. But to improve them
Imo no.
Who's to say you're not copying from another write-up
there seem to be a lot of writeup youtube videos of people just asking ChatGPT for the answers, which it has cribbed and hallucinated from existing writeups already lol
@sick lance Opinion on this hex editor?
Oh colourful.
The UI looks nice and clean and each thing looks perfectly identifiable
@shell nova do you know how to pass auth cookie in clairyvoyance
thats why it was not working
For someone who doesn't normaly do anything with Hex, right now, I quite like the design as well. Easy for me to see what's going on with the color codedness.
https://github.com/WerWolv/ImHex You can run it on Arch, Fedora, MacOS, AlmaLinux, Ubuntu, and Windows. Quite nice, I love it
This is pretty gibberish to me
Same here
hello everyone
Hey
Please email support@tryhackme.com for legal issues:)
hellooo
@mossy river how long does it take for my level ups to be reflected on my discord roles?
hru
good, hby ?
24 hours, or you can reverify to force it to update:)
i'm doing fine
thank you for asking
Gave +1 Rep to @jovial tapir (current: #683 - 6)
gotchu
thanks
whats this
It's a reputation system, when you thank someone the bot gives a reputation point.
Can you buy a car with reps
You could buy the idea of a car..?
@sand trench guess what ๐ i also made cava follor colors. might not best select of gradient colors, but it works...
neat
You usually pass cookies in the http header
need
can't make more smooth transition in gradient. max gradinet is 8 colors =/
In the clairvoyance tool
There's -h flag but idk the exact format to pass the argument of 2 cookies
Csrfd and auth
can i setup virtualbox instances as subnetwork? like three virtualbox instances in my ubuntu. those instances will act as subnetwork . so i can find them with arp request
Ah there's a format for that....try passing the request through burp and the web?
got dotfile or can share config ?
https://github.com/shadow-absorber/dotfiles @loud marlin
anyone knows?
i think issue is due to kinda rnd colors that is generated by pywal that do not close to each other in color range, so that make difference. idk how to explain. but will try some things
it can't be defined more that 8 ? if you know
I have the burp req
And error based suggestions are on in gql server
I can't replicate it in Clair
GAHDAYUMN
ha ?
I'M learning about snort today
I'm trying to hit that level 7 today dawg ya feel me
โก๏ธ โฅ๏ธ
what does everyone do while waiting?
most lightweight debian based linux distro?
probably this https://www.bunsenlabs.org/
oki lets test it.
apparently there's also a version of Puppy with a debian base which is also going to be extremely lightweight https://puppylinux-woof-ce.github.io/
777mb iso lol
hannah montana linux FTW
When you only know how to integrate functions and not how to integrate into society ๐
Yo guys can an individual reach the level of hardware independency 
like building a hardware from 0 :(
not an individual a country or a group of people
Made it for the last train home with about 30 seconds ๐ฎโ๐จ
lubuntu is pretty light
@soft vortex SparkyLinux too
go watch youtube and come back 30 mins later realizing i had a THM room to complete
Yeah same here but I'm watching tiktok
i'd say "even worse" if it was a few years ago, but youtube and tiktok are twins now
it's pretty bad I have to disable TikTok notifications at work or it's just non top stealing my attention.
pretty bad having it installed
even the more bad is some phone comes with pre installed tiktok app =/
I love tiktok
I delete it one week then next month download it again lol
meep moops time for the sleepy sloopy sleep sloop to the beepiest boopiest beep boops
Night Shadow.
how much deditated wam to server her??????
I have TikTok deleted
Watching some of the people I work with doomscroll for hours really soured me on it.
Instagram reels is kinda worse
That's pretty sad.
Itโs just racism and sexism
my two most favrit fings
???
JOWP you know what i was talking about yeah, with the wam and the serve her
Hey please keep all images appropriate. This is an infosec learning community
oh really
i thought it was a picture of dick van dyke and me stating my love for him
so what is with the "fuck society" pic above?
fuck is an offensive word, why is that allowed
Swearing is perfectly fine as long as itโs not excessive
what was wrong with my pic
Fun Fact: PG-13 movies can say the word "Fuck" once.

its strange what you people are allowing and not allowing, things seem to be changing somewhat
Your image is called a double entendre. This is where something has two interpretations, one often being inappropriate ๐
Come on.. I haven't peanilsed or restricted you. Just informed you that it was inappropriate:)
I like decency and indecency. Although, like all things, it has a time and place for it.
Itโs just common sense.
THM needs to do better when it comes to celebrating achievements shared in social medias... I see a bunch of people sharing their pre-security room completion on LinkedIn, and TryHackMe reacts and comments. Another dude shared his 500 days of login/solving tasks - No reaction whatsoever. THM was tagged and credited. I did the same on 365 days, and nothing. Was at least expecting something when I see these pre-security nonsense almost every day ๐ Both me and that 500 day-dude canceled our subscriptions. Me for other reasons, while he made a rant post about it 
You think people are online 24/7 ready to react?
It's weeks ago
They get spammed with a bunch of tags every day, and respond to whatever they can, then yeah sure some important fall in the cracks
ppl react or not. same as fair amount of ppl in cyber, do not spend time on social media,. at last not as regular ppl who react on all the things... idk
Dude - Pre-security 1 hour nonsense over 500 days of paying and contributing ๐
Yeah, as I said, some fall in-between the cracks
Imagine having to answer 300+ pings every day
I picked up on it because Florian Walters reacted and commented - Making a shitstorm out of it
They probably get way more than 300 pings a day with these pre-security clowns posting
If they instead spent the time wasted on congratulating pre-security people, looking into more important tags, it could actually be good
So you don't celebrate small victories in your life?
Actually, maybe its small for you, but big for them
It might be midnight but I'm bout to get home ๐
Yeah sure you spent 365 days, but that one particular path might have taken them a month, because they are slowly learning, only using an hour of their free time cause they are busy with job etc, but want to get into cybersec, they do it for passion, so yeah, it'll take them longer time, but it should still be celebrated
Even though it's "easy" for you, doesn't mean it's easy for everyone
All learning and interest should be encouraged ๐ซก
Why are you skipping my whole point? Where did I say learning is bad?
I joined half way through
But I don't think learning pace is important if you're doing it in your free time
๐
You talk down on people passing the pre-security path and called them clowns for celebrating that
Unfortunately it'd be unreasonable to manually comment and celebrate every accomplishment for a platform as big as thm
I see it more this way, those that are just started on the pathway require more padding for their confidence. Those that are more advanced don't require so much? If that makes sense?
Iirc the discord alone is at roughly >2 million members last I looked
221k
There we go
3.5m total users
Ah that's it
Exactly, so why do they put effort in commenting and reacting to pre-security 1 hour bullshit when people putting down 500 days of effort and money gets nothing
Because people getting started need the most encouragement potentially
They're still early on and things like that can be make or break for someone starting off
Encouragement early on is especially important to continuing
It's a boost of confidence
I understand we should celebrate everyone's achievements but it's not possible with such a large user base
Well, the 500 day dude quit. The 365 day me quit. The pre-security guy was probably in a free tier๐
Can't finish a path if you're free tier
And making it accessible for everyone
So don't play the profit bullshit
Sure. Encourage the 500 dude as well, and Florian Walters wouldn't be shitting publicly on THM
Sure, they also encourage those too, but you're not entitled to a response
You posting something doesn't make you entitled to everyone having to comment on said post
I passed the pre sec and thought, NICE! now i can fight raiden on the snow topped mountain...and win! It is an acheivemnet either way, paid or not. I have paid for a month and now burnt out.
Hello Ludde, you doing good bud!
End of discussion. THM lost two subscribers. Florian Walthers pickes up on it. Pre security nonsense is getting attention, lol. That's how it rolls - I get it. Encourage the newbies! Good night!
It might feel nice for you to get a comment, but they comment in their free time/the time they have to look through everything
You can apply to be a social media person for thm and make a difference then if you're so mad about it
Lots of opportunities
Yeah burnt out from staring at the screen too much, bed time!! Speak again Ludde! PAYCE!!!
Out of curiosity do you run a business with 3 million users?
Oh well, clock is ticking, bed time is reached, tattoo time tomorrow
Good luck man, no rush, take it easy and hope you get back into it ๐
I heard that it was one guy riding a three legged donkey out in the desert somewhere, I have no idea how he gets an internet connection though
Thanks James!!!
๐๐๐
Starlink
any here know awk/sed commands ?
nah nobody not a soul
Yes
great... just a sec to explain
impossible
who even uses awk/sed ??
i have text like in pic, and wish to replace the hsl and all things within and so with word {color0}
..sedward....
Speaking of encouragement, I just finished an easy box with the help of a writeup. I had to use it because I got stuck a couple times either because I used the wrong tool (gobuster instead of dirsearch), or because of very random things to look for (swapped JPG header for a PNG header).
How do you even approach such things without reading the writeup when you don't know about them?
I get that the writeup is there so I can learn, but with the many possible ways of hiding things, couldn't it just turn into at least one new thing to learn from each writeup, making solving the next box (at least seem) impossible without that knowledge?
I can't even imagine hard difficulty boxes tbh ๐ฅฒ
thats why u need to learn as much basics as possible before jumping into ctfs
where to find the cities.txt for crack the hash 2 wordlistctl is giving a 404 error
lolz
You know you're cooked when you cant complete a forensics ctf (which you thought was easy) ๐ฆ
I did one by accident thinking it was a walk through, and I was like DAMN why is this hard asf.
Took me two days
It happens to everyone at some point. There are often times where I need to take a step back and give myself some time to think.
There was one room I did I want down every rabbit hole for a username. Turns out I missed the username in the page source ๐
Internet is Fuck*d here in pakistan
๐
hello
test
Is there such a thing in linux as a file having fake permissions and fake size?
So when you ls -lh it gives wrong info?
The only thing ik is about fake bits. In malware for example โ๏ธ
interesting
Tattoo time in 2 hours!
So I'm doing a CTF and I was told "The flag is in the 1024 size file that is non executable" but all 20 files in the folder are 4096 size and have an x flag so are executable.
I dont wanna extend it in general chat but did you try ls -a tho?
Is this from TryHackMe?
OTW?
I hate my life
I need to live somewhere tropical where there are no winters 
can anyone explain what is happening here
yes
the flag is not in the directory you're in. look at the find manpage and you'll see how to granularly control what you're looking for
but how?
alright thanks
Get ready for winter๐ซก
4096 size sounds like a folder.
This is an activity you probably want to use "find" for
i use the same mouse pointer but in white
do you like white theme?
Winter isnt bad but it comes every year so unexpected... like christmas ๐
good, hand back summer to us
can't wait till I get down spain and get 25C weather again
oh lol, why is that?
i think summer was better than winter
ah yes, a screenshot of a google search was all i needed.
well, thats how people answer each other's questions (mostly*)
i'd have asked google than asking here if thats what i was looking for. spoiler alert: i tried the former option.
what about chatgpt and other random gpt's which is based on chatgpt
im not asking what arp spoofing is. i wanna know how the above SS shows arp spoofing.
it started generating FP incorrect filters
Lucky one. I need a winter residence ๐๐ถโ๐ซ๏ธ
Asian area preferred bc of the food 
Is anyone here good at finding modules and exploits in metasploit???
Indeed, I am grabbing a week in Malaga
me too, thats why Im happy its starting for us down here, hehehe
well, spring first
I keep forgetting you have summer Christmas
๐ ๐
Oh well, time for chopping block
@chilly veldt are u doing buckeye ctf
I was
why did u stop
Yaz, a warm place during the cold days would be great and spain isnt that far ๐ค๐
cause it does. ask your fav search engine to show an example
hey all
Hii
are u form india yuvam
Yeah
Vc
Come private call
not now
ok
Please no friend request or dms without asking and or interaction before. Thank you.
Gave +1 Rep to @vagrant dust (current: #2242 - 1)
Drop your question here, a lot more people can help that way.
ฤฐ have many questions i am an exam ejpt :((
I thought I was ready, but there are things I don't understand
Sorry we do not help with cheating.
ฤฐ also dont want cheat
@shell nova or @sick lance
Someone just show me a way for solve solution
Because i cant find information anything
Sorry, again we do not help with cheating. Especially if youโre doing a certification exam.
hello
there are exams in TryHackMe to get certifications?
No
as mentioned, we will not help with exams
Its for ine
Okay okay sorry
hi
they are meant to test your knowledge, not ours ๐


seadris mentioned
Shitty website
Hii
Hi?
I wanna learn some stuff
@simple valve new PFP I see ๐
made it a long time ago I think, just found the password 

you never did something on THM right?
I think I did
good point, thanks ๐
Gave +1 Rep to @teal wharf (current: #1120 - 3)
0x6 is a rank I think?
Haha thanks, getting into the JJK fan moments
Gave +1 Rep to @gray sonnet (current: #87 - 79)
hi
Season 2 is not for free here ๐ข
Leg day on sunday wasnt a good idea
Idea for a room name and theme: Jojo's Bizarre AD-venture
can any one tell how to host a web
hello
oooh, that's a nice anime ๐
can anyone help me on win privesc
I recommend asking in #room-help ^_^
hey everyone
I have to say that the new update for the soc analyst pathway is top tier
I remember almost finishing up the whole old path way back in June/July
but to my surprise, THM added more challenges
and I got to say... it is FANTASTIC
the first boogeyman capstone challenge really gives you the SOC Analyst experience lol
also the Tempest room
great to hear that you're enjoying the update! Thanks for the kind feedback. I will share it with my team 
Gave +1 Rep to @slim atlas (current: #2242 - 1)
Hey guys, I wanna create a website to showcase my skills, and my learning path. Do I have to do videos or can I just write blogs, which one is better. Thanks
ik'
So I'm back after a long time
my skill matrix looks like this
what would be your suggestion about me proceeding further?
anyone whod like to work on tryhackmes new breakme ctf with me ๐ฉ
You're welcome!
Already
what
Break me is good
Fundemantats
is overthewire suddenly broken?
I was playing it for a few hours at work on a windows machine, but at home on linux I just get this
PS C:\Users\Jacob\Documents> ssh bandit.labs.overthewire.org -p 2220
The authenticity of host '[bandit.labs.overthewire.org]:2220 ([16.16.163.126]:2220)' can't be established.
ED25519 key fingerprint is SHA256:C2ihUBV7ihnV1wUXRb4RrEcLfXC5CXlhmAAM/urerLY.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '[bandit.labs.overthewire.org]:2220' (ED25519) to the list of known hosts.
_ _ _ _
| |__ __ _ _ __ __| (_) |_
| '_ \ / _` | '_ \ / _` | | __|
| |_) | (_| | | | | (_| | | |_
|_.__/ \__,_|_| |_|\__,_|_|\__|
works on my machine
But.. it's Over The Wire. It's been there since... the dawn of the internet
what's wrong with my command?
I've tried changing it up putting the -p flag at different positions but I keep getting connection closed
The word 'bandit' changes aswell
how did you do it without specifying the user?
Yeah.. try it without the username
I copied the exact command above
does your nmap scan show an open port?
oh mac (openSSH) your username is replaced if you dont specify a user
did you change the network on your vm?
I'm not in a vm
Tavis - Your pfp is... funny and creepy at the same time ๐
I'm doing it direct in terminal from linux mint
cmon man. epitome of handsomeness and you call it creepy? ๐
Shrekstache
try pinging the host and an nmap scan on port 2220
with an ahh of Steve Harvey ๐
Steve harvey isnt really all that big here in UK
Like.. i know of him, and that he presented family fued, and comedy shows mention his purple suits..
How am I on discord right now
try pinging something else, like google.com
good point
Over the wire might have blocked you
Or something else on the path might have
I've never been able to ping google
lmao yeah he's famous for that last thing
bro what kinda commands did you run on OTW? ๐
ping overthewire.org
oh lmao
I thought I was in terminal there
Yeah I can ping them
Hol up let me try switching to my access point that isn't running a proxy tunnel
That'll be it...
what level are you on right now
level 6 -> 7
nice.
I started today in my lunch at work
Yeah why are you running a proxy tunnel?
Well why not? lots of people like proxies and vpns
users do ๐
And it's to bypass government censorship tbh
Run a VPN sure, but a proxy tunnel is just making your experience worse
As this is usually illegal. Don't do this.
Well you did ask. I would be happy not to talk about it
James - have you seen Kaos on netflix?
man, pushing rank is so HARD rn
Nope
I recommend it. basically Greek myths in the modern world. Also has Jeff Goldblum as Zeus
hey can anyone help me ?
Depends, with what
Usually easier to know if we can help if we know what to help with
And what you've already tried
bascially i am new to cyber and need some money to upgrade devices
bro if i get some dollars of bitcoin as per your choice then it will be great
Working at Mcdonalds pays better than any get rich scheme on the internet tbh.
anon gotta be trolling man
I had so many free burgers when I worked at KFC 
?
Apparently in Japan, KFC is a popular christmas meal. Like, you have to order it a month in advance
supposedly its also a pain in the ass
Lmao
Kentukeyu Fried Christamassu
Cmon brd. Lets not be that person
Bread
This is not an appropriate place to beg for money.
If I took every hour I worked on youtube, to work at mcdonalds I'd have a lot more money tbh 
Is this the bread reference
Shrug. If I worked minimum wage for every hour I was in my workshop, I'd be a millionaire. or at least a thousandaire
what person? Kentakkฤซ furaido kurisumasu is the transliteration of "Kentucky Fried Christmas" in japanese https://translate.google.com/?sl=auto&tl=ja&text=kentucky fried christmas&op=translate
10 fun + 0 money
or
2 money + 0 fun
It's every time I read brd's name
Or 5 money + 5 fun
Me working
I love the job I have and I get to have fun at the same time
Plus it pays for my tattoos
Hopefully it pays for living also
Yeah, tattoos is funny money I have afterwards
same
I have tats that also need finishing
hi five
What's it like to like your job I've never experienced it. 
its high five
trying to keep it PG13
Mine is done in like an hour
And then plan to start a new one the 24th
This one is semi large
I didnt know slapping someone's open hand above the head is considered R-rated
Shudder, the UAC section on windows fundamentals just made me remember what UAC was like on Windows Vista
9 hours of inking, 2 hours of designing
did you design it?
No, artist did
it is if you're on drugs about it.
Yes I would like to wait 10 minutes while you dim the screen and bring up a dialog box asking if I'm sure instead of just doing what I ask.
does this mean anything, is this a reference or something? Do I not get it?
Getting high
how is high five equal to getting high
there is no word play it has its own meaning
the word play is that "hi" and "high" are homophones, with the latter having an alternate meaning upon which I did make a joke. It's okay, no offense was intended.
You pointed out my spelling error (I don't know why you felt the need to but it's okay I'm not judging), so I riffed on that in good faith for fun.
are you referring to this, that this was the joke and not a correction?
yes
I've been using windows for 28 years and I have never seen this before 
thank you
there was another level to the joke also which is that I have been previously told off in this server for making non-PG13 jokes that did not seem like they were anything remotely adult/non-pg13, so I was also joking about the abstract / arbitrary boundaries of what constitutes a PG13 joke :)
all in good faith!
I was under the impression that there was no joke and thus was confused
that's the spirit
me when pwnable.kr
Youโre telling me shrimp fried this rice??
bazinga
hello
Hi
All over again then I guess?
@jolly echo
can anyone give me some work so that i can get paid in return
any work related in filed of IT
Have you tried your services in fiverr
no actually i am a minor
just want to do something to earn independently
i am too intrested in field of ethical hacking
Please stop begging here. If you continue, you'll receive a mute and formal warning
For sure

actually i am just asking for work that sit sorry for the mistake
That's the same thing to be honest.
Please stop, regardless.
ok
okay thank you
Gave +1 Rep to @finite rock (current: #425 - 12)
say
audio by @War_Thunder283
Decal + Gaijin Store 3% Discount Link: https://store.gaijin.net/catalog.php?category=WarThunder&partner=Zenturion7&partner_val=tmx898cr
Join the discord if you want to
https://discord.gg/Bq2Am7uXUX
Join here if you want to be a YOUTUBE supporter
https://www.youtube.com/channel/UCc0j-JGHDR64bDpP6tW0iBQ/join
Join he...
The first thing I'm buying after getting a job
Rinz - It's odd seeing you not yellow ๐
I want a blog page in my website, but without using a backend, so I was looking into the Blogger and its API but you need a key for it, does anyone know whether that key being public information is a security risk? If it is, is there a way to parse the blogger blog posts from a fetch in the js?
or is there some other way I can implement blog posts?
creative website design?
wdym
As long as the api got a read operation implemented, which it probably does ... Otherwise it wouldn't be called an api
Well a blog API is basically just.. templates, really. So create a page that looks blog-like. Comments section is a bit more tricky, as you'll NEED something behind it.
(obviously the API does more, but y'know, at its core..)
yeah ik preferably id just have a backend for it but my client doesnt want one
ig i will just have to go through the painful task of parsing this for the actual information i need https://rufflesteels.blogspot.com/feeds/posts/default?alt=rss
You'll have to manually add the html code everytime you wanna add a blog if you do it without backend I suppose
Then show them how to copy/paste a webpage template, which they can then update
no cuz that link shows all the blog posts from a user
Or you can have js in the html code if you're okay exposing ops
with no back end, you are looking at a series of static webpages
True
yeah
and thats your line to the client.
Have a js file for the "add blogpost". It won't load but update the index.html itself
Yay I finally finished pre-security 
Good work RCE. now you can get into the fun stuff ๐
Still having free pizza?..
This rings alarm bells
It does
It was a bit of a slog. Took me 9 hours.
a) can be worked around probably
b) that's a valid concern yes
Hello peeps!
I am new here
It can't be worked around.
You can't have client side code edit the server-side HTML file
RCE - when I did it, I found that it was more of a refresh of stuff I knew, with a few new things I didn't. it's a good path
Hmm looks like I'll have to look more into that part
How you been James?
Guys is there any chance that Osintgram still works ?
I learned a lot tbh I've been using a computer for over 20 years but never looked into how stuff actually works
as long as the video game ran fine
JS runs clientside (other than nodeJS)
It's also sandboxed so it can't access OS features etc when it's in the browser
A really good intro to a range of stuff is to work through the old Advent of Cyber rooms. Fully guuided, and touches on loads of cyber aspects
What are you trying to do with it?
I was just surfing the GitHub when I found it


