general

[chilly veldt]

gosh I feel old

so tired after the party yesterday 😓

[deep rampart]

how you doin guys

[slow cloud]

Pretty gooood wbu?

[deep rampart]

doing pretty well aswell

[rapid merlin]

I did the breaching ad and enumerating ad networks from THM but I didn't get it as a whole, I don't know where I am lacking. can you guys suggest me some good course on AD pentesting.

Best resources for learning OWASP top 10 with Burp?

[sick lance]

Probably portswigger if not THM.

[rapid merlin]

Thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2843)

[rapid merlin]

THM has been great but need some more practical experience for advanced topics

[rustic cloak]

or you could try Rana Khalil on youtube. she has a practical video series for the portswigger labs

[rapid merlin]

I don't learn very well from following along

been there done that

[rustic cloak]

damn. found her stuff really insightful

but, fairs

[naive violet]

Do some webdev then

[rapid merlin]

I find yt vids good for resources/reference

but not for actually instilling info in my brain

[rustic cloak]

cause i self study, i find yt videos (especially from a well known creator) helpful

documentation for a lot of this might be overwhelming

[rapid merlin]

yeah this is the main issue for me

like a couple years ago when I was learning javascript, i ended up in tutorial hell for months

then when i started learning python, i tried book learning

and it worked far better

tutorial hell is the WORST

[naive violet]

Portswigger academy is the development of a book

Webapp hackers handbook

[rapid merlin]

funnily enough, I've recently started this one

page 112 currently 😄

[rustic cloak]

oh, “one man’s food is another man’s poison “ ahh beat

but, ultimately, do what works for you

[rapid merlin]

yeah I'm sure some people find yt vids work very well for them

[rustic cloak]

yeah, i don’t mind any though, but reading through a 700page manual can be tedious

[rapid merlin]

agreed

for me, knowing it's one of the only ways I can learn, helps motivate me

[rapid merlin]

I Will check this out thanks

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2191)

[soft vortex]

hello hackersploit

[signal hatch]

Damn I just read about the hacker who hacked into nasa and found vulnerabilities and they sent him a letter of appreciation.

[halcyon dune]

I somehow become really better by doing stuff in practical way, even when I probably read a lot of resources and watch videos it isn't too much helpful.

[signal hatch]

Imagine his resume career highlights " succefully hacked nasa and found vulnerabilitys"

Ethical hackers are God's

[frank iron]

Hi Im doing a web pentest project and I want the web_shell to connect to my vm, there Is no vpn and such.
do any of you know how to open a listener with external ip?

[loud marlin]

do you have permission to do so ?

[rapid merlin]

yeah everyone gave me permission

'everyone' " yeah thats right"

[loud marlin]

that does not help. you renting space/server from host company ?

[frank iron]

you asked me?

[rapid merlin]

i was making a joke but i had a VPS also but it isnt renewed

[loud marlin]

if you doing pentest on any website/server thatyou do not own. you need loegal permission to do any of testing

[rapid merlin]

www.epal.gg

these are the computer hackers you need

theyre high level

why are you already judging them, when you only JUST found that website?

[loud marlin]

to do any pentest you also need legal permission

[rapid merlin]

if I never told you, you probaby wouldnt

so why be so ready to go ahah nah this site is for simps!

seemns very prepreared

they're making more money than you probably from doing whispering streams

I mean, is it cringe? perhaops

[loud marlin]

cos you not own server. you rent it

[rapid merlin]

is it functional, definitely

what are "skills for the real world"

[loud marlin]

knowledge

[rapid merlin]

knowledge is knowledge

not a skill

[signal hatch]

important corporations with important data open themselves up to this, and have somewhere on their site or in their TOS that if you ARE able to hack into their systems, if you explain how you did so to the company they usually give you some form of payment or reward.

[rapid merlin]

but im saying in his consideration

[loud marlin]

you do not own... you rent it... there is legal area in all of that

[rapid merlin]

like "vital life skills" seems like a phrase EVERYONE is goign to argue on

and be subjective

so to say that egirls dont have it, but he does, whilst he's trying to find free webtesters to break his online real made up not totally coded scrfipt/website;/etc

bit ironic

[loud marlin]

you need to have legal permission from owner of infrastructure, the hardware servers and soi

or you can get in big big trouble

[rapid merlin]

what market, what skills, how do you define what is honest there

I mean like

[signal hatch]

In 2016 (or around then) some dude told the NFL “uh hey your security is really bad, want me to fix it?” The NFL said “nah we’re good” and the dude then managed to get into like 27 of the team’s official social media accounts, posted on 1 or 2 as an example, and then immediately got a job doing cybersecurity for the NFL lmao

[rapid merlin]

you also dont get to define what is "0 skills" or a good job, if you are framing like everything through the tech world and are like "haha see dfumb egirls cant even land assembly programing jobs !"

then that would be stupid

[loud marlin]

you need to contact them.

[rapid merlin]

but so far youve made no skill comparison or instantion or evaluation or any sort of whatever

[loud marlin]

don't do stupid things

[rapid merlin]

ok so you're goigng for the absoluite extremes to the most paying jiobs lmao

no one thinks that feet shower is a legit job

it does make cash yep

[loud marlin]

there is not terms and cond. there is law's and other things

[rapid merlin]

are you saying that mcdonalds worker isnt valid or is

[loud marlin]

If you do not have legal permission from company and lawyers and other parties, you doing illegal things

[tawny ruin]

TBH some actors have pretty lax terms on this. E.g., AWS allows for testing your own services pretty freely as long as you don't attack the infrastructure services.

[pine nacelle]

I'm with @loud marlin here. You should contact them and make sure they give you written legal permission, otherwise it could be that it seems you are allowed because it isn't stated specifically or clearly however you could still get in trouble @rugged shoal

[loud marlin]

there is things called RoE and other things that need to be defined in any pentest. you do not touch keyboard until all rules are defined and legally allowed. that's just start

company define what they wish you to do. what you are not allowed and what is ok. and much more. what tools and technicks you can or can't do/use. what is out of scope also

so... don't get you self in legal trouble. that kind of things can define you future in cyber sec area. you future employer will do background check

[pine nacelle]

Facts 💯 ^

[exotic flame]

is this somewhere were i can get help with mobile phones? like hacking wise?

[rapid merlin]

Respectfully a real hacker/pentester would not be interested in targeting a site with no resources/data.

Your site is also hosted with a free service

[naive violet]

No, that would be a crime

[grim sparrow]

@rugged shoal has been warned.

[grim sparrow]

[WARNING] I cannot DM that user.

[naive violet]

If this is for work, please consult a senior
If this is for a CTF, please don't ask here
If this is illegal activty, please absolutely do not ask here

[chilly veldt]

sooo tired

[rapid merlin]

☕ or 😴 ?

[chilly veldt]

long night yesterday

[rapid merlin]

ah, recovery day

[chilly veldt]

yeeee

[twin cipher]

both

[rapid merlin]

haha, I considered that as an answer 😄

[twin cipher]

https://cdn.discordapp.com/attachments/1276443031481876542/1276459093443215411/image0.gif

https://media.discordapp.net/attachments/988634493973839883/1109652527605100585/togif-4.gif

[high mulch]

Boing boing

[rapid merlin]

who s familir with pyrat

[chilly veldt]

depends

[rapid merlin]

this room

pyrat

i dont know whata is the objectif

https://tryhackme.com/r/room/pyrat

[chilly veldt]

ah #room-help

[loud marlin]

#1291097749701529630

[chilly veldt]

or that yes

[wispy pivot]

hi

do yk where I can find ctf teams?

[chilly veldt]

what kind of teams

[wispy pivot]

teams that participate in ctfs together

ill see on ctftime

[chilly veldt]

ask in CTF servers, many people look for teammates there

[wispy pivot]

alright

[cedar harness]

l

[boreal scarab]

https://tenor.com/view/cat-dry-hump-bunny-nope-get-off-me-gif-8511623

[loud marlin]

so... you get abused by rabbit ?

[rapid merlin]

hi

[boreal scarab]

Rabbit/ Jabba started it!

[rapid merlin]

rabbits are cute

[prisma zenith]

Hey

[loud marlin]

yes yes... ofc you blame someone else 🙂

[twin cipher]

http://openguessr/?join=647113se Come play!

[rapid merlin]

hru

[chilly veldt]

hmmmm, shall I go to car meet, or shall I stay home

[loud marlin]

did you wash you dishes ?

[chilly veldt]

yes

[loud marlin]

then you can go 🙂

[prisma zenith]

I m good

Anyone up to watch a move together

[tawny ruin]

only if it's an electric car meet.

[loud marlin]

https://tenor.com/view/slap-gif-25249881

[tawny ruin]

What. They're without argument better in all ways 😉

[loud marlin]

aham... you are right...

[chilly veldt]

it's rolling microwaves

[loud marlin]

on baterries 🙂

[rapid merlin]

@tawny ruin funny you should mention electric cars. My friend asked me if this vehicle looked environmentally friendly yesterday https://www.youtube.com/watch?v=PNBEO4udS58

😄

[pearl raven]

Seems like an American daily driver: Source: Am American.

[tawny ruin]

I'd say no vehicle is environmentally friendly. Some are just a bit less harmful.

[crude stump]

Rip the dude who drives that

[tawny ruin]

My American coworker once apologized for their car and that it's so small. It was a huge SUV on European standards.

[pearl raven]

The difference of vehicles between the US and when I lived in Scotland is nuts.

[tawny ruin]

And I guess it varies somewhat by region. New England cars didn't seem to be that big, and neither did those in San Francisco area.

[pearl raven]

Predominantly more trucks and SUVs around me. But I'm in a fairly rural area

[kind narwhal]

Hello, can I ask something about hardware?

[shut hawk]

Ok

You've lost me

Is what yours?

[kind narwhal]

I cannot send my computer to support. Can I practice well with tryhackme premium on a low-level computer?

[shut hawk]

what would you define as low-level

[kind narwhal]

pc components

[shut hawk]

Could you be more specific?

[pearl raven]

If you get premium you can use the attackbox which would be tryhackmes hardware.

[kind narwhal]

Processor.
DATA STORE.
Graphics Card
Power supply
motherboard.

[kind narwhal]

Yes, I understand, but my other computer that I will use is bad.

My computer is good, should go to support

[shut hawk]

Not quite what I meant, what specifications would you say are low level? For example, "4GB of RAM"

[kind narwhal]

all

😄

[shut hawk]

Yes, but what are the specs exactly?

[kind narwhal]

I don't know

[shut hawk]

Then how do you know it's low level?

[kind narwhal]

but it's not bad but it's not bad

[loud marlin]

just write spec you have...

[kind narwhal]

I used it and it's slow

I think it had 4 or 8 ram

I don't remember ram or processor

Does the premium operating system provide better performance?

[shut hawk]

What premium operating system?

[loud marlin]

premium on THM?

[kind narwhal]

yea

[shut hawk]

The attack box?

[kind narwhal]

yep

[shut hawk]

It's alright

[loud marlin]

you get some extra resources and so.

your own pc is another things

[kind narwhal]

I can hack Attack Box on a low budget computer by purchasing TryHackme Premium. I understand correctly, it's practical.

[shut hawk]

You can try it for free for an hour a day

[kind narwhal]

naaa

[loud marlin]

you can use attack box for longer time and things.

[kind narwhal]

My question is, can I hack (practice) without causing any problems on a low-end computer that I will buy premium?

( atack box )

web

[loud marlin]

define low-end pc

[kind narwhal]

10/4

[loud marlin]

what?

[rapid merlin]

the nice part is you can use tryhackme for free initially to test the performance

[wooden totem]

10 out of 4?

[rapid merlin]

integer overflow detected 😄

[kind narwhal]

never mind

[wooden totem]

@rapid merlin why do you have dummy text in your bio

[rapid merlin]

oh it was just placeholder, I should use ipsum 😄

[wooden totem]

It's never been my responsibility to glaze the donuts.

[pearl raven]

No, no. Grape jelly is leaking from the hole in the roof. Perfection.

[rapid merlin]

hah!

[finite basalt]

https://tenor.com/view/music-my-jam-joy-ride-gif-14804449

[frosty turret]

hi guys

[finite basalt]

hello 🙂

[frosty turret]

are the applications for the job still open??

[finite basalt]

I believe it was actually applications for personalised help with first jobs

but I believe that closed 5 hours ago

[frosty turret]

oh tough luck then, thanks anyway!

[rapid merlin]

hi hackers

pls don’t hack me

[rapid merlin]

What’s the best extension for a browser such as brave ? ADGuard, No script, uMatrix, uBlock Origins??

[coarse plover]

why openvpn stops working after a short period? its annoying

[rapid merlin]

@primal kestrel

dm please

[loud marlin]

openvpn as service or active connection?

[coarse plover]

like it works but after a few minutes it stops working

[loud marlin]

again... service or active vpn connection ?

[coarse plover]

2

[loud marlin]

?

[coarse plover]

active vpn conn

[loud marlin]

you get any error when stops or ?

[coarse plover]

nothing

[loud marlin]

you run connection via terminal ?

[coarse plover]

sure by sudo openvpn path file ovpn

after that im checking by curl 10.10.10.10 whoami

[loud marlin]

that is ok. so no errors when stops work

[coarse plover]

it shows me virtual ip but after few minutes its not replying

but why it stops automatically or how can i change the limit of work time

[rapid merlin]

ralexander

can u help me with smtg

[loud marlin]

do you have any other vpn active

[devout palm]

Hiya people

[loud marlin]

ask

[rapid merlin]

idk how to use metasploit

[coarse plover]

Noo, only openvpn in kali

[rapid merlin]

searching for the specific payloads

[loud marlin]

https://tryhackme.com/r/hacktivities/search?page=1&kind=all&searchText=metasploit might help

[loud marlin]

strange... never had that issue

[coarse plover]

by the way, what are the utun1,2,3,4,5?

[coarse plover]

also had on macos

works for 2 minutes and automatically stops

[outer rivet]

Is purple challenge new something ?

[coarse plover]

trying to down them but it seems like its useless

sudo ifconfig utun delete and down

nothing helps

[rapid merlin]

did u download the config file

[loud marlin]

what mpu is set for you

[coarse plover]

sure 2 times

[coarse plover]

mpu?

?

i guess issue with macos as it has utun things in terminal

i red that this thing related with vpn

[loud marlin]

in terminal ip a and in vpn connection check mtu

[coarse plover]

wait a sec

eth0 lo?

with vpn tun0

[rapid merlin]

relaxander do u know how to search for http python

[loud marlin]

hmm... in kali linux when vpn connection is active it need be in that part

[rapid merlin]

i did search but i m actually

lost

[loud marlin]

do it again

[coarse plover]

tun0 u mean?

did it

[rapid merlin]

yeah tun0 for vpn

[loud marlin]

what mtu part is number

[coarse plover]

1500

[loud marlin]

that's ok. then try google more. idk what issue is if logs not show it

[coarse plover]

thanks

[loud marlin]

might start vpn connection and add -vv on end

[coarse plover]

-vv what is it used for?

[loud marlin]

verbose mode

more verbose more info

[coarse plover]

oh got it

thx

how to delete this utuns, sudo ifconfig utun delete/down has no effect, useless

[loud marlin]

try reboot

[coarse plover]

only utun5 disappeared

after rebooting

utun0-4 still working

[loud marlin]

weird... rly not sure

[rapid merlin]

check 10.10.10.10 to see if you're connected

and make sure any website THM is asking you to use for the task, is strictly http

https wont work

I had this issue once because I had https only enable in settings

[brittle lynx]

Is there a way to use responder on an interface that the target has but u dont have access to? I already tried with ligolo and it doesnt work

[rapid merlin]

come on

pls need help metasploit

[loud marlin]

❤️

[naive violet]

Yes, by running it directly on the target

[naive violet]

What do you mean?

[rapid merlin]

i m searching for a exploit

but i can t find the specific one

[naive violet]

For what?

[rapid merlin]

reverse shell

[naive violet]

Is this for a tryhackme room?

[rapid merlin]

yeah

[naive violet]

Please ask in #room-help and provide details of the room and what you're stuck on.
Please don't send unsolicited friend requests, get permission first.

[rapid merlin]

i m new in

metasploit

[naive violet]

Perhaps you should start with the content that teaches you metasploit then

[rapid merlin]

sry

just kidding i m not sorry

[brittle lynx]

I understand that but I am trying to learn how to use it without intrusively putting it on the target. Also sometimes there is a AV or something so its more better to know how without putting it onto the target.

Do u know how to do this?

[rapid merlin]

[-] Exploit failed: TypeError true can't be coerced into Integer

this error

[naive violet]

Please use #room-help

[rapid merlin]

use ChatGPT

or google

sry

or whta James said

[brittle lynx]

Asalamulaikum brother. did u google or chat gpt it

[rapid merlin]

How is everyone ?

[naive violet]

It needs significant access to the network adapter on the target, all the layer 2 multicast traffic

[loud marlin]

lazy

[rapid merlin]

Fair enough

[brittle lynx]

But sir Ligolo is layer 2 ... So why wont it work ?

[naive violet]

Ligolo or Ligolo-NG?
What makes you think it's layer 2?

[brittle lynx]

ligolo-ng and I know this because when I used the vpn connection of the lab I couldnt do anything because it is a layer 3 connection. Then i used ligolo and I can do everything EXCEPT for responder ...

[naive violet]

That's TCP (This is for the original Ligolo)
What OSI layer is TCP?

What layer is a TUN interface?

[sick lance]

#site-support for VPN

[brittle lynx]

Thanks for the help. I got misinformation from chat gpt ...

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2192)

[loud marlin]

btw @rapid merlin here is my forest of shrooms, that glow in dark

[rapid merlin]

@naive violet thankst bro i found out my metasploit is out of date

[naive violet]

Remember - it is a misinformation machine

The more specialist the information you need, the more it hallucinates

[twin ridge]

➕ Gave the role Sec+ to novarics

[rapid merlin]

it s using Reinforcement Learning

it learns from us

but still dumb

[naive violet]

It predicts the most likely words to come next

There's not really "learning"

[rapid merlin]

oww i suck at ML

[naive violet]

As with all computer systems, garbage in garbage out still applies as well.

[loud marlin]

much better...

[devout palm]

You a hacker?

[rapid merlin]

u made amultitool

nice

is it just design

?

[loud marlin]

its arch linux

[rapid merlin]

no offense

oww

[devout palm]

I'm having a seizure

Jokes aside, which would be the lightweight (not too much default packages), stable and easy to install linux based OS? (I don't want to configure everything from scratch when i re-install my system)

Might go for the mint

[half girder]

debian, or more userfriendly, mint

[rapid merlin]

they say it s easy though

[devout palm]

That's what i want

[half girder]

ive been running it for quite some time on my main machine, was all good, til i figured there was no way to do my taxes on linux 🙈

[full aspen]

hmm

[half girder]

well yes, virtualbox + windows etc

[crude stump]

Pop is a good easy os too

[loud marlin]

arch when installed is installed with almost all the things.

[rapid merlin]

oh wow this is beautiful!

[loud marlin]

thanks

[twin ridge]

Gave +1 Rep to @weary badger (current: #2257 - 1)

[rapid merlin]

really liked it

[boreal scarab]

Ralex is growing shrooms?!

[loud marlin]

it's 3d print u dumbo

[boreal scarab]

https://tenor.com/view/dumbo-sure-excited-gif-15304675

[slow cloud]

https://tenor.com/view/superman-joke-gif-7319521

[faint harness]

Hi everyone

[polar grove]

holyyyy that looks clean clean

how have you made the nvidia drivers work in arch?

[loud marlin]

like how i made it work or ?

[polar grove]

yea yea

sry

[loud marlin]

the arch-install offered me to downlaod/install and i selected

[polar grove]

hm I thought nvidia drivers gave headaches in arch

[loud marlin]

it does. as in general nvidia on linux

[polar grove]

hahaha I see

do you do gaming there or just for fun?

[loud marlin]

no gaming

just main os with hyprland and things for it

[rapid merlin]

guys

a general question

how can i update exploits available?

[loud marlin]

did you try google that question ?

[rapid merlin]

yep

and chatgpt

i m learning lol

i did

sudo apt install metasploit-framework

and it did update but

i dont find all exploits

[loud marlin]

try msfupdate

[rapid merlin]

msfupdate is no longer supported when Metasploit is part of the operating
system. Please use 'apt update; apt install metasploit-framework'

[shut hawk]

I wonder what to do next :P

[rapid merlin]

i told u i did it

hello

[rapid merlin]

.

[rapid merlin]

me too 😛

[shut hawk]

did you run apt update ?

[rapid merlin]

ok ok

wait

Thanks @shut hawk

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 570)

[rapid merlin]

Gave -1 Rep

[shut hawk]

thank the terminal for giving you the answer!

[twin ridge]

Gave +1 Rep to @tawdry robin (current: #2257 - 1)

[rapid merlin]

thank u

hhhhhhhhhh

free rep

[loud marlin]

@graceful thistle =/
https://www.youtube.com/watch?v=V8-IlmBG3hM

[boreal scarab]

But Dolphin is on Keys

[loud marlin]

close enough

[boreal scarab]

@loud marlin @graceful thistle

[silent cypress]

goood morning every one

[boreal scarab]

https://tenor.com/view/meowdy-howdy-cat-howdy-cat-in-a-hat-cat-in-the-ten-gallon-hat-gif-27347110

[silent cypress]

ha ha

that's morning maybe is for china

[rapid merlin]

https://tenor.com/view/bubu-dancing-dance-happy-dance-bubu-cat-gif-9406698208260770694

[silent cypress]

china?

[rapid merlin]

I just saw the dancing. https://www.youtube.com/watch?v=NF-kLy44Hls

[winged summit]

hello people of the internet 🙂

[rapid merlin]

Sup

[winged summit]

just taking a break before i get back to setting up my new attack box. how about you?

[rapid merlin]

I was watching a movie and now I’m thinking about some stuff

[winged summit]

oh, that's cool. what you thinking about?

[rapid merlin]

@rapid merlin which movie?

[winged summit]

lol, double question

haha

[rapid merlin]

@winged summit we have all the social engineering covered 😉

[winged summit]

hahaha

oh man

i don't know about that, but i'll go with it haha

how are you sandwich?

[rapid merlin]

not bad, enjoying a relaxing chill weekend

[winged summit]

nice

sounds good

[rapid merlin]

how is your weekend thus far?

[winged summit]

it's great man. internet has been a bit off and on, but overall, life is good, ha

[rapid merlin]

right on 👍

[winged summit]

yeah

[boreal scarab]

Intranet? Sorry, I don't know your network. Who are you? How did you get out to the internet?

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[wooden totem]

Why so serious

[winged summit]

brain, computing....

failure

lol

me and the internet are close buds. but me and intranet go way back

[boreal scarab]

IntERnet, intRAnet

[rapid merlin]

the dark knight was such a great film

[winged summit]

yeah, i gotcha man haha

[boreal scarab]

[graceful thistle]

Yeah this is where my name comes from

[winged summit]

LAN WAN MAN CAN BAN

[rapid merlin]

not to make stuff complicated but... extranet 😮

[winged summit]

lol

[boreal scarab]

LANWAN MAN CAN BAN?!

WHEN DID THEY HIRE LANWAN?!

[winged summit]

i think i made that last one up... .local, wide, metro, ... CAN actually might be made up too. i dunno... i went off of vague recollection lol

[rapid merlin]

this channel is so great 😄

[winged summit]

haha for sure man

Matt is such a spaz, but i love him lol

[boreal scarab]

https://cdn.discordapp.com/attachments/1276443031481876542/1276459093443215411/image0.gif

https://media.discordapp.net/attachments/988634493973839883/1109652527605100585/togif-4.gif

[winged summit]

lol, brain.....

puzzle

must compute

captcha

lol

[boreal scarab]

https://tenor.com/view/im-not-robot-gif-20719960

[winged summit]

LOL

holy smokes man

that's wild

[boreal scarab]

https://tenor.com/view/cat-sneaking-mountain-gif-master-gif-11204510

[winged summit]

lol indeed

dude, that cat is either really tall and immune to lack of oxygen, or really close

[cerulean oriole]

hey guys im having an issue, thm says i can only have 3VMs open. i dont have any open or vpn connected. is there a way to close machines?

[boreal scarab]

https://tenor.com/view/theworldmayneverknow-idk-goodquestion-gif-5415227

[rapid merlin]

it drank coca leaf tea

[crude stump]

When a wompa stomp and a plomba mop walk yk what I mean?

[wooden totem]

Yall still on Internet? Get on outernet

[rapid merlin]

I know this question! 3

[winged summit]

lol throwback! haha i remember that one!

oh noes... gray text in discord.... internet halps.

[winged summit]

yeah, figure out which ones you recently started, navigate to the page, and manually shut them off. i think that should solve it.

[boreal scarab]

#site-support

[boreal scarab]

I remember when I was a kid, I was so determined to get the answer to that question.... then I gave up and just sucked the chocolate lollipop till it was finished lol

[winged summit]

haha, yeah man. that ad is accurate. i can suck on those things for like... a minute max then i'm biting into it lol

[rapid merlin]

@boreal scarab I feel like it was a floating point answer from 1.0 to 0.0

[boreal scarab]

https://tenor.com/view/spongebob-patrick-brain-dead-drool-bored-gif-7233020

[winged summit]

lol, oh, my brain had to adjust. to the tootsie pop question haha

the answer is Pi lol

or the square root of 17 or something lol

[boreal scarab]

3.1415!

I KNOW PI!

[winged summit]

indeed.... i think..... can't remember more than 3.14

lazy lol

[boreal scarab]

https://tenor.com/view/homer-smart-simpsons-flames-gif-12447941

[winged summit]

lol

indeed

[rapid merlin]

maybe I did too much OpenGL 🥦

[winged summit]

i was telling a friend recently that i'm like Ned Flanders because i'm so polite then he said that i'm gonna snap one day lol

[boreal scarab]

You ate too much broccoli?!

[rapid merlin]

more matrix math than I ever wanted to know

[winged summit]

lol. yeah man, in the words of Hunter S Thompson's attorney, "you took too much man, took too much, too much..." lol

[wooden totem]

whats the difference between a broccoli and a tree

[winged summit]

yeah, that tracks

[rapid merlin]

the glScale?

[winged summit]

my brain still hurts from Linear Algebra

lol

[rapid merlin]

I hear ya

[winged summit]

haha, but discrete destroyed me lol

[boreal scarab]

One barks. One you eat.

[rapid merlin]

😄

[boreal scarab]

https://tenor.com/view/rip-meme-dog-no-bark-gif-25909809

[winged summit]

holy moly lol

[wooden totem]

https://tenor.com/view/chinese-the-rock-gif-24035745

[winged summit]

i wish i had like a syringe that i could stick into my monitor and absorb energy from Matt's gifs lol

maybe i need more coffee haha

[boreal scarab]

https://tenor.com/view/run-over-guitar-playing-jamming-gif-14332434

[winged summit]

LOL

[boreal scarab]

WEEEEEEEE

[winged summit]

hey, i gotta go. just got a DM. be back later people. nice chatting 🙂

[rapid merlin]

that concert needs security

@winged summit 👋

[boreal scarab]

Chattering? But I'm not cold

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[sand trench]

kaboom???

[rapid merlin]

those kids did very limited threat intelligence prior to their performance

[proven quartz]

I got fired from my job at the keyboard factory...

They said I wasn't putting in enough shifts

[sand trench]

meep moops it is time for the sleep sloops to the beep boops

[proven quartz]

Goodnight shadow

[rapid merlin]

have you ever swapped the keycaps on a persons keyboard while they were away on vacation? specifically the 'M' and 'N' keys

[proven quartz]

Yeah we did that all the time back in one place I worked. The I and O or the JKL in a weird order

[rapid merlin]

🙂

[proven quartz]

My ex dumped me cos I didn't give her enough privacy...

At least that's what she said in her diary

[rapid merlin]

classic

I love jokes

The "S" in "IoT" stands for security

[loud marlin]

my gf told me that she need some space and time...
she must be calculate velocity

[rapid merlin]

😄

I used to tell jokes about the UDP protocol, but people never got it

[wooden totem]

I wouldnt even notice cus I never look

[rapid merlin]

blank keycaps ftw!

https://mechanicalkeyboards.com/collections/blank-keycaps

[wooden totem]

idk why you would have blanks

[rapid merlin]

I only ever met 1 programmer who had those

[wooden totem]

everyone still looks at certain keys they dont know the exact position

dont get me started on ctrl combos

[loud marlin]

or you can make own looking letters

on them

[rapid merlin]

that can be fun

learning to touch type is one of the most valuable things I ever did in my teens

hi all

hope you have a good day

you all looking good today

just hacked ur camera

[loud marlin]

tbh i'm looking for split keyboard... and also thinking to take blanks. cos i have laser engraver and can do custom

[wooden totem]

I dont even have a camera or mic connected so I dont got such worries

[rapid merlin]

I attend an openhack event where someone has one of those, they look awesome

[rapid merlin]

i’m hacking your walls

the moonlander split keyboard is nice, just can't justifiy the price tag

for something super controversial 😄 https://www.youtube.com/watch?v=R5a2hapPVMk

[rapid merlin]

i need that to argue with @loud marlin

[wooden totem]

this is 10 years old

[rapid merlin]

does that invalidate it?

[loud marlin]

with laser engraver you can engrave anything. so keycaps will be extra cool to have custom looking

[rapid merlin]

kinda excited about a new mech keyboard

I really should get one

my last was a wasdkeyboard

I like ducky keyboards, that's what I tend to stick to

those are great

guys how can i make the website dark mode

[loud marlin]

thm ?

[rapid merlin]

ye

good question, I'm not sure you can

might be worth asking in #site-support

[loud marlin]

for now there is no offical dark mode

[rapid merlin]

you can download the dark reader extension it forces the website to be in dark mode

works on every website

[wooden totem]

man my back hurts af today, didnt even realize I was sitting for hours in this position

[rapid merlin]

ty bro

[twin ridge]

Gave +1 Rep to @weary badger (current: #1495 - 2)

[rapid merlin]

happy to help😁

changed my browser color setting and made it super dark 😮

i think you can configure some things in the extension itself

[violet dock]

So, SANS has announced their Holiday Hack Cybersecurity Challenge 2024. Will there be THM Advent of Cyber 2024? I enjoyed it a lot last year.

[halcyon copper]

classic

[crude stump]

Prolly

[rapid merlin]

sounds really fun, I hope so

https://www.sans.org/mlp/holiday-hack-challenge-2024/

guys how can i brute force vigenere for a competition

if anyone wants to help i have this : "xbvfjizf zzy efhjwz hzz yvvlac ptc" and i have to decode it

[loud marlin]

we can't help in other projects

[cerulean hornet]

What's a good lock to learn lock picking with

I have this black master lock and trying to get through it seems impossible

[pine nacelle]

@loud marlin Hey, how are you doing?

[boreal scarab]

May I introduce you to LockPickersUnited?

I'm a blue belt there, picked a yellow, orange, and blue lock. Picked an American 1100 when it was still classified as Blue

DO NOT BUY THOSE CRAPPY CLEAR LOCKS!

[cerulean hornet]

Ooh this seems very intriguing, thank you

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #28 - 304)

[loud marlin]

doing nice

[cerulean hornet]

Yeah that seems to defeat the whole purpose

[pine nacelle]

That’s good to hear

[boreal scarab]

You're welcome!

https://lpubelts.com/#/locks

@cerulean hornet

https://lpubelts.com/#/safelocks You can also learn safe cracking.... but, that one requires A LOT of skill, and talent

I suggest getting to black belt, THEN going safe cracking... been on blue belt for like... 4 years now? Haven't had time/ too lazy to go purple lol

[cerulean hornet]

Yeah that seems like a milestone, for now my goal is to be consistent-ish

[winged summit]

nmap -T4 for the win. thought i'd simplify with no timing switch for a box..... yeeahhh, lol no bueno

[jovial wave]

Yea those scans take a fat minute

[winged summit]

dude, for sure! lol

73% right now... all ports, but TCP, so thank goodness haha

love the verbose flag

see ports as they come up

sneak peek lol

aaaaand we got ourselves a DC 🙂 figures ha

Anyone know why they call the nmap -oG greppable? i mean, the output is all on one line, pretty much +_+ ha

i guess i could grep -o

[rapid merlin]

I can’t sleep

😖

[loud marlin]

count sheeps

[runic cliff]

guys is there any way to get more freezes for THM, im in a middle of midterm week and scared i might miss a day.

[loud marlin]

don't think so...

[runic cliff]

[rapid merlin]

Me: Let’s finger paint
paint: HUH
let’s: im scared
scared: no im scared
no: hi scared

[boreal scarab]

My friend weed helps me with that

[ruby sand]

i maintain obama's campaign slogan should have been "yes we cannabis"

[rapid merlin]

Instructions unclear, ended up in wales.

[rapid merlin]

👀 That cat emoji giving me nightmares

[little compass]

🤣

[rapid merlin]

I see some of you still awake there, hiding in the shadows 😶

It’s already Sunday

[chilly veldt]

👀

[boreal scarab]

In Snoop we Trust

[boreal scarab]

https://tenor.com/view/mink-hajnakis-gif-24149313

[ruby sand]

https://youtu.be/khkE17A5d7Y?si=1GmRihKX9spqRO59

i'm dead... this is the wildest thing i've ever heard.

[rare karma]

hi, anyone can help me to decrypt o identified this econding 2Wb26i/nvfVcMol9OalWn3J2J0NcSucLmULHPsiWg7WoN2DtN7UDXw==

[rapid merlin]

That’s such a tune, I would believe anything if snoop said it

[boreal scarab]

What's this for?

[pearl raven]

There is a video out there of a school teacher and students singing along with this, it's rather wholesome.

[spare salmon]

Hi, I want to ask. Is there any resources that I can start in Networking?

[blazing granite]

Professor Messer YT channel all the videos about net+, also David Bombal YT and courses

[rapid merlin]

I need to do more networking, it’s my least favourite subject though 🥹

[spare salmon]

Thank you. Another question, are there any sites that I need to practice or apply the knowledge?

[twin ridge]

Gave +1 Rep to @blazing granite (current: #69 - 111)

[wooden totem]

Man all AI tools are just a tiny amount out of budget, like I would've gotten it but the price doesnt fit in my "this is worth it" purchase cus i don't use it nearly enough for it to be a necessity

[warm scarab]

THM is a good place for you to practice networking. They have rooms for networking

[blazing granite]

you can use packet tracer to build networks and simulate situations 🙂

Also there are a few rooms about networks in THM

[spare salmon]

Thank you 🙏

[twin ridge]

Gave +1 Rep to @warm scarab (current: #2258 - 1)

[spare salmon]

Thank you 🙏

[eternal timber]

Just got two bottles of vodka

[warm scarab]

[rapid merlin]

Throw one at me, to me. Either one please

🙌

[eternal timber]

Planning to drink both 😣

[rapid merlin]

Damn

[rapid merlin]

How do you find teams

[eternal timber]

Rip

[rough barn]

Why can't I nmap my own network?

[rigid cypress]

Does anyone play the game together

[pearl raven]

Sometimes it's helpful when you can just be someone to talk to or bounce ideas off.

[neat tusk]

Hey, it’s been a minute. Glad to see I’m still muted on KOTH. how’s everyone been?

[pearl raven]

lol

Good _milk, currently trying to catch up on Blue Lock.

[woeful rock]

😄

[granite hinge]

Is ther any moderator in #koth channel ?

Who is available for helping usere

[pearl raven]

Most mods / staff are UK based, they are likely asleep.

It's likely that the mods have all channels active.

[granite hinge]

ooh sorry i forgot that so i will ping later at night in india

[molten sky]

pondering ways to simulate ransomware to test some EDR stuffs --- came across a thread discussing it --- the number one suggestions was "just wait for crowdstrike to push an update"

[flat fiber]

Need help with something. So I have a linux server and I want to have a vpn running on that server and be able to ssh and or vnc into it. Every time I start the vpn service thru openvpn I get disconnected so I followed a few stackoverflow qs, tried setting up iptable rules, etc etc and nothing works... still get disconnected as soon as the vpn starts on the server and unable to connect thru ssh/vnc

(Also sorry ik its not related to tryhackme just thought id ask here since you guys might know a bit more)

[molten sky]

"disconnected" as in the tunnel and interface closes, "disconnected" as in the interface is up and connected, you can ping the server, but can't reach the greater internet, "disconnected" as in some other state?

[flat fiber]

Sorry should've clarified yes the tunnel and interface closes

[molten sky]

does the interface on both ends go down or just on the client/server

[flat fiber]

Just on the client I think, I believe the vpn service is running on the server as it shows a connection before it kicks me off or leaves me in a hang state in vnc

I'm unable to connect/ping the server IP once the vpn is started on that server

[copper current]

Who want to write a script??and nind it to apk??

Will pay cassshh

Money

[rigid cypress]

Boring Sunday

[forest phoenix]

hello can anyone help me?

my pc aint booting up

but gets turn on

[rapid merlin]

wdym isnt booting up

[forest phoenix]

everything i working fine yesterday till 2pm

[slender scaffold]

👀

[forest phoenix]

then i went to gym and when i back and turn it on it wont boot up

only cpu fans running

[slender scaffold]

hi zumi!

Multiple cpu fans 🤔

[forest phoenix]

no only 1 cpu fan

[rapid merlin]

wdym isnt booting up dude

[slender scaffold]

Is the board talking to you or making beep boop

[rapid merlin]

boop beep

[forest phoenix]

i turn on the switch cpu is running gpu is running lights are on but keyboard,mouse and display is not showing

[rapid merlin]

check the

[forest phoenix]

im on my pc right now i just somehow make it boot once

[rapid merlin]

thingy

uhh

where they are connected

through the usb

and hdmi

[slender scaffold]

I’m confused now.. is it or is it not working lol

[rapid merlin]

onto the motherboard

[sick lance]

Do you have an integrated GPU alongside an independent one?

[slender scaffold]

need to know if any beep boops

[forest phoenix]

i can screen share everthing is working good i can play anygame on max setting

no voltage problem

[rapid merlin]

no it if was that it wont turn on

[forest phoenix]

but if i turn it off it wont boot next time

i have to put out cmos and ram

[rapid merlin]

punch the motherboard(don't)

[forest phoenix]

wait is ill tell u my built

no bottleneck etc using since 1.5yr everything under warranty

[rapid merlin]

i really dont think its the case here

[forest phoenix]

ryzen 7, 3060 12gb,ddr4 gskill ripjaws ram 3200mhz 8x2,256 nvme (im poor cant afford much) ,500 seagate 2014yr hdd, 600w pylon psu, cooler master cooler

[rapid merlin]

600 w is good

for all that

[slender scaffold]

I don’t think knowing parts is gonna help much if something is faulty

[rapid merlin]

true

but hey, atleast he knows them!!

[forest phoenix]

like u guys look much better than me so i just share to you

[rapid merlin]

i have a low end laptop lol

[forest phoenix]

[rapid merlin]

and i still managed to hack all this years lol

[slender scaffold]

How did you figure pulling out cmos and memory fixes it?

[forest phoenix]

help me guys ask ur expert friends i dont have anyone to help me

[rapid merlin]

im like the guru of low end settings

[forest phoenix]

some one tells me online

pull out cmos

if it wont work

pull out ram

[rapid merlin]

ok then ur ram is faulty

u need new ones

[slender scaffold]

So do you need both or just one

[forest phoenix]

nah

[rapid merlin]

did you overclocked them

[forest phoenix]

i put them individually it works

[rapid merlin]

uhh

[forest phoenix]

even though im using it right now i can stream valo

[rapid merlin]

did you put each one individual

like

u have to 2 rams

right?

or 4?

how many

[slender scaffold]

I think when they say put they mean pull

[rapid merlin]

i mean its a dual channel problem bcz of .. ??

[slender scaffold]

When the computer doesn’t “turn on” do you get the single beep as if it finished POST?

[rapid merlin]

POST reminds me of curl

haha

[slender scaffold]

Heh

Their emoji was deleted I wonder if they got muted lol

[rapid merlin]

me too

oh no i think he dm'ed me

yeah

dm + friend req

[grave hawk]

Hello

[rapid merlin]

hi

[rigid cypress]

Does anyone play the game together

So boring

[leaden jungle]

solid morning session

[rapid merlin]

good job

[coarse plover]

anyone had an issue with openvpn when it always stops working after 1-2 minutes?

[sick lance]

#site-support

[sick lance]

Yup.

[south egret]

guys im having gui problems with my kali linux vm, does this suggest that a file got corrupted and i have to just scrap this vm make a new one

cant see the taskbar, doesnt have exit button on the terminal, cant alt tab

[naive violet]

Are you logged in as root?

[south egret]

no

i just switched user

[mortal pendant]

trying to learn grep sed and awk a bit better to do more log reviews .. any particular rooms that help with such tools ??

[near hawk]

I’m not sure what the limit is or if there even is limit but the friends is buggy

[rigid cypress]

Will adding friends ban the account?

[naive violet]

Why would it?

[torpid furnace]

hahashahahahahah

bro

obviously not

unless u add to many ppl at once

and discord suspects suspicious activity and locks ur account

[rapid merlin]

Morning 😶

[devout palm]

Morning

[slender aspen]

I am Aryan Verma, currently studying at the Indian Institute of Technology (IIT) Bhilai.I am studying cybersecuirty for the past one year specifically in offensive secuirty. I am aiming to secure a foreign internship in cybersecurity within the next seven months and would greatly appreciate any advice on how I can prepare to meet the requirements for such an opportunity. Specifically, I would like guidance on the skills and certifications that would increase my chances of being accepted into a reputable internship program abroad.
I am also the coordinator of cyber security club in IIT Bhilai and my club comes under OWASP student chapter.

[mighty quartz]

morning guys

[near hawk]

No, it’s a feature to add friends

[rapid merlin]

Not enough tea for the day

I’m so tired

🙃

[rugged iron]

Hello, I would like to know how you learn. Indeed, I don't know how to go about it, and on the internet, I only find generic advice... How do you organize yourself to take notes, where do you store them (software, etc.)? How do you memorize without spending hours on it? And how do you avoid being alone in this learning process because, personally, no one around me has any interest in either IT or continuous learning...

[wooden totem]

Diagrams, 100 million diagrams

I like diagrams, makes me remember everything 300% more efficiently. Diagrams

[humble forum]

any free alternative to cpanel for hosting websites

[half girder]

actually easy... just play along and write down unknown commands.. my favo is obsidian for that, but everyone uses something else. insiderphd has some good yts about that topic

[ruby sand]

Second obsidian... My strategy is to start with outlines of topics I want to learn (using professor messer videos for the comptia certs now), then as topics come up I'm not familiar with I link a new note to the outline. It helps me to use my own words to explain new topics.

[half girder]

also a nice way, guess its contingent on for what the note taking is, whether its for really learning towards a goal (cert etc) or just for yourself. my notes for certs are quite detailed chapter by chapter, for general stuff it rather goes a bit ... lazy mode xD

[ruby sand]

Lol that's fair. My notes for thm are much more relaxed than my notes for certs too, but I still always try to make note of every command in a room and every step... I refer back all the time to find which flags I used on a command or whatever

[wooden totem]

Note for every single command and step? That sounds very tedious

[ruby sand]

Eh, I do the same thing with osint and with software installs and such... If you can't reproduce your work, what's the point?

[wooden furnace]

Do you guys know any open soruce browser extension analyzer for permissions and vulnerabilities Chrome Firefox Edge

[south egret]

test

[void zodiac]

I have an issue with Kali OS

I run the official kali .ova machine in VirtualBox

The issue is, after 3-4 times I'm afk and Kali logs out and when I log in again, the system freezes :/

I have no idea what causes it

[naive violet]

I personally find the ISO (even for a VM) causes less issues

[cedar swan]

hi ninjajc01

james

[void zodiac]

Well, I have never had the issue I mentioned before

[royal skiff]

Has anyone here heard of dropshipping?

[void zodiac]

No.

Please, no

[royal skiff]

Where are you from?

[naive violet]

Try it

[brittle lynx]

hey guys i have thid "Disk0" virtual disk I made for dual boot linux... How to remove it and get all the free storage back to my windows?

[naive violet]

Click "OK"
It will wipe the disk and let you use it in Windows

[brittle lynx]

it didnt do that it jusdt make it "online"

[static sierra]

when is the monthly hacker badge awarded its oct now

[naive violet]

Now create a partition on it

[static sierra]

james may u respond to my question?

[naive violet]

I don't work for THM

[sinful moon]

What's up gamers lol

[brittle lynx]

Thanks it work

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2193)

[sinful moon]

Agreed with James, .OVA images are honestly more of a pain then they are worth. Plus you miss out on the cool setup/install process

[mystic trench]

.

[sinful moon]

..

[chilly veldt]

soooooo tired

[torpid furnace]

can someone help me with a ctf comp. its not for money its just practice

[chilly veldt]

which ctf

[torpid furnace]

https://cyberxbytes.lol

rn im top 13 but i just mess up with everything left

[sinful moon]

Unfortuantely we can't quite assist with third party CTFs, especially not knowing what their rules are in terms of third party assistance

[torpid furnace]

its a practice one

[sinful moon]

plus you're already #1 on the leaderboard lol

[torpid furnace]

?

im 13

[sinful moon]

Oh nevermind, that's another 0x username

[torpid furnace]

thats bad out of 138 ppl

[sick lance]

Is it active?

[torpid furnace]

never was i dont think theres only 138 ppl

0 prizes no discord

[sick lance]

It's not about the prizes though.

[sinful moon]

I mean it's like 10th percentile which isn't doing too bad

[naive violet]

We don't do help with active CTFs here

[gloomy hamlet]

why there isnt an option to see how much you got points this month

[sick lance]

Leaderboards > monthly.

Does that tell you?

Or is it just top 50?

[gloomy hamlet]

ah ok it tells the place kk didnt see

[brittle lynx]

hey guys. The more I do this AD stuff, the more I realize that it might be essential to have a linux machine access in the target company because you cannot get layer 2 communication elsewise ... Kerbrute not work properly, Responder not work properly, and others if you dont have linux target access ...

[naive violet]

There are equivalents of those tools for Windows too

Responder is the only one of those that needs Layer 2

[brittle lynx]

So why my kerbrute not work either ? When I start kerbrute from my remote kali, it completely breaks the connection and I can no longer ping the DC ...

[naive violet]

I don't know why your specific case doesn't work.

[brittle lynx]

What u think the certs I need for pentesting job ? Only in one year span ?

[naive violet]

1000% percent depends on where you are
What do you mean by "Only in one year span"?

[brittle lynx]

1. I am in Canada but I also want to work in the middle east

2. I mean I only have 2 years until I graduate, so I want to spend that time getting the best certs for cyber jobs ...

2 years not 1 year

[naive violet]

Have a look at job postings for where you want to work.
Look what certifications, experience, and skills they are looking for.

[brittle lynx]

ok thanks. I see a lot of CISP but that cert it doesnt even have hands on ...

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2194)

[south egret]

bruh took me forever to find where to download vmware on broadcom's scuffed website

[fiery temple]

Good day everyone. I have a question, I want to get started on cryptography. What's a good entry for someone that did the pre-security learning path?

I seen the "easy" labeled crack the hash rooms but I want to understand more about the hows and whys as well

[tribal topaz]

where do you download it at

[high mulch]

https://youtube.com/@cryptographyforeverybody?si=TPWCr3qCSsY-RL4p

[fiery temple]

Awesome, gonna give it a look. They cover everything from old cryptography to the modern stuff then?

[high mulch]

I think so, he’s posted old cryptography content in the FB group I’m at, so he probably has it on his YouTube channel

[fiery temple]

Seems to be yeah. It's quite a goldmine

[high mulch]

Group is called cryptography, very original Ik, lol. I haven’t been there in YEARS. So I don’t know too much about the flow of info there.

[fiery temple]

Fair point, lol

[high mulch]

It’s a public group, so even better.

It has a blue digital lock as banner

[fiery temple]

I'm not on FB myself so I'll comb through the youtube for now, but thanks for both

This seems to have a lot of stuff

[sick lance]

Didn't you just use the search?

[soft vortex]

how to prevent other computer to find my computer through nmap scan even on stealth scan

[naive violet]

Unplug the computer

[high mulch]

I found this in the group as well

https://youtube.com/@introductiontocryptography4223?si=O7MDKmKqsTIiYURm

@fiery temple

[soft vortex]

why?

[naive violet]

Being able to scan the device with nmap is not a vulnerability.
It may help an attacker identify vulnerabilities though.
Simply do not have vulnerabilities and do not care about portscans

[naive violet]

Why? Can't have open ports on a box that's fully off and unplugged

[fiery temple]

Nice, thats going in the critical research folder too

[soft vortex]

ok

i am doing some research

[brittle lynx]

But if u hide your ports, change them to be not default for ur services, change the service name, etc. it will provide a layer of obscurity so the attacker who is stupid doesnt attack

2. If you make fake ports and ports for honey pots that is advanced defense tactics ...

So ...

[naive violet]

This is vastly inferior to simple patching and hardening

Don't do nonsense. Just do the basics correctly.

[brittle lynx]

But no punishment for it so Maybe i will do it in addition to hardening

[naive violet]

Security by obscurity is laughed at for a reason

[naive violet]

It takes time that you should spend doing it right

[jade ocean]

And yet obscurity is a very strong part of very good security, It's only bad when it is the only part of it.

Especially when the thing you are trying to protect is private (ie not gov)

[naive violet]

I don't think "obscurity" is the correct word

You are searching for "confidentiality"

[soft vortex]

I agree with GHop. He is absolutely correct

[jade ocean]

That is definitely a part of obscurity, but what I mean when I say obscurity is everything from confidentiality to obsf code to close sourcing - pretty much everything that would make someone trying to exploit a product / system feel like it isn't worth their time or effort.

[soft vortex]

yes

[naive violet]

So... increasing confidentiality

Got it.

[jade ocean]

So how do confidentiality and obscurity differ?

[naive violet]

https://en.wikipedia.org/wiki/Kerckhoffs's_principle
Adhere to this, beyond crypto.

[jade ocean]

I mean, that doesn't help with the differentiation of the two, just a parallel definition / statement of "security by obscurity is bad"

[naive violet]

Scroll down.

[winged summit]

GHoP, you're an interesting dude. I used to be in the "only security, no obscurity" camp, but then evolved my perspective to be more nuanced. Obscurity definitely helps provide confidentiality. I get James' argument too, but I definitely fall under the "use whatever you can" camp....

[jade ocean]

I have read the whole thing, and at no point does it help me know how you believe confidentiality and obscurity differ in this context..

[brittle lynx]

But who here actually works in the field and can provide experience of real things they did in the matter?

[naive violet]

Me?

[brittle lynx]

Can u attest to abscurity techniques posing a difficulty for your IT team to manage infrastructure?

[shadow wing]

Hi

[naive violet]

I can say it's nonsense compared to basic hardening that people still don't do

Apply CIS L1 at a minimum

Deception etc like honeypots is for once you have the basics down

Have a look at the UK's Cyber Essentials Plus program for a baseline

[brittle lynx]

Ok thx

[jagged flint]

Another repost .. until I find what I'm looking for

Is anyone willing and looking to mentor at all? I'm so lost on my path to offensive cyber security, working to finish my degree and getting my Net+ and SEC+. While I'm doing those I feel they aren't helping to my overall skills in offensive cyber, also do CTFs when I can. Don't know where to start with programming after watching countless python guides. Considered bug hunting but generally have no idea what I'm doing. Have a unique opportunity to do offensive cyber in the military, but while waiting to get accepted feel like I'm not progressing.

[simple valve]

It feels like you’re stuck in an endless loop of beginner courses

[naive violet]

...did you sign up on tryhackme and start on the content?

[jagged flint]

I have premium

I guess mainly I want to load the code portion.

It's like yeah sure, I can learn burpesuite but I know fuck all about writing and uploading my own packages

Or creating those same situations on my own machines to learn more

[wooden totem]

"Only high school math is required"
idk what high school maths yall be having but type shit I had was not under the definition of "only"

also, cryptography my beloved

[jagged flint]

I attempted to write my own C2 server and hit a hard wall

[naive violet]

Programming and offensive cyber are related but there's not as much crossover as you might think

Mostly it'll be scripting, very small bits of code to automate tasks or process little bits of data

[jagged flint]

There's nothing that teaches that though?

[fiery temple]

Are there rooms/learning paths on THM teaching it?

[wooden totem]

not enough

I think theres like 1

[naive violet]

Maybe not on THM, but there's so much else to learn

[naive violet]

There's the two cryptography 101 rooms, but they're not that in-depth

[high mulch]

Probably I had it, since we would often been thrown some hard level stuff in hs in LatAm “you’re gonna see this in uni” and we never see that in uni

[fiery temple]

Hmm kind of wondering how I should go about it then, I dont want my knowledge to end at loading up hashcat

[naive violet]

Sysadmin stuff?
Learn the theory behind what you're doing.

[fiery temple]

The youtube links gov posted are cool but theres so much its a lil overwhelming

[simple valve]

CryptoHack !!!

for crypto

[drifting mural]

hi guys

[simple valve]

but also, you need some solid math fundamentals as they dont rly teach you that in depth

[drifting mural]

how do I hack Monoalphabetic cipher

I don;t get it

[high mulch]

Go for the cryptography Wikipedia site, I have seen some concepts that might help

[drifting mural]

but Wiki is fake?

[wooden totem]

I would use the term decode or decipher

[simple valve]

Not sure I get you, but bottom-line is you want to learn programming?

[naive violet]

No, wikipedia is well researched and has references and citations to support it.

[drifting mural]

ok I go to search

[wooden totem]

my only problem with wikipedia is that on some subjects it doesnt provide enough info so its more confusing than on certain other source

[naive violet]

That's one thing about having the citations

[high mulch]

I sited Wikipedia just for grabbing some basic concepts behind some methods in cryptography.

[naive violet]

You click into those and read those

[fiery temple]

If you would entertain the questions of a greenling some more, of how much use is understanding the inner workings of hash ciphers

Perhaps I should call them CHFs

[wooden totem]

undefined

[wraith fjord]

Yellow

[mental geyser]

how come that when I search for retro with difficulty all it shows it but when I search for it with difficulty selected hard it's not showing up ? Is this a bug ?

and even if I manually check each page for retro after selecting the hard difficulty it's no longer there

[atomic abyss]

syn

[sick lance]

Try uppercase R

[gray sonnet]

Hello there 👀

[rapid merlin]

hi how you feeling

heard you were in hospital or something right?

[mental geyser]

slightly different results but still no Retro

[sick lance]

#site-bugs please

[rapid merlin]

Will try hack me ever make an app you think

Mobile app

[sick lance]

There one in production was at some point, not sure if that was community driven though, but I'd hazard a guess and say no, and the website isn't optimised for mobile/tablet devices.

[rapid merlin]

how’s it’s in production and it’s a no at same time

ban scrubz guys

[sick lance]

What?

[rapid merlin]

you said the app in production right

then you said i guess no

[naive violet]

was

[amber pawn]

i was wondering what would be the best resource to learn computer networking as a beginner in cyber