general

[primal kestrel]

the new profile update feels very snappy

[tulip heath]

Hey, I just got the payment back @sick lance !

: )

Should I resubscribe TryHackMe?

[sick lance]

I have no idea if the same thing will happen or not, your choice. ¯_(ツ)_/¯

[wet lark]

@jagged yarrow Hey, I think there might be a problem embedding the new badge frame through <iframe> it returns {"status":"error","message":"Unauthorized"}

[sick lance]

Please post in #site-bugs and don't ping Skidy. 🙂

[wet lark]

Alright, sorry for that

[sick lance]

Appreciated.

[sinful moon]

lol XSS protection and etc go burrr

[slow cloud]

anyone here familiar with opencti? and can answer some questions if things are possible within opencti?

[sick lance]

Is this for THM?

[slow cloud]

no

otherwise i wouldve gone to the help channels 😄

or do i need to go to #infosec-general ?

[sick lance]

I've not seen you type in here as much, so I'm just making sure.

Either is fine, but just one. 🙂

[slow cloud]

noooo ive not been around in this channel alot mostly in the help channels and ofcourse only 1 channel 😂 im not gonna go around and spam it

[fading perch]

yo whatsapp guys

[slow cloud]

sup

[fading perch]

how to hack nasa

[south egret]

🤣

[sinful moon]

they just wanna hack the planet you see lol

[sick lance]

not anymore, they've left.

[sinful moon]

lol

[south egret]

every new member: guys how can i hack the fbi

[high mulch]

play with their html

[sinful moon]

NASA is actually on HackerOne with sites and more in scope for pentesting

[fading perch]

i have skill : cd, ls, pwd, mkdir

[sinful moon]

lol niceu

[jagged yarrow]

Its not!

[fading perch]

is that enough to hack nasa

[sick lance]

Well you sure showed me.

[sinful moon]

Very nice! That is for sure highly anticipated

[sick lance]

Looks so much cleaner than DarkReader.

[sinful moon]

I make do with a browser extension but yeah not quite the same

yep exactly

[sick lance]

Just incase anyone asks if it's ever coming.

[tawny ruin]

It got more than 1 like, so it's not coming.

[sick lance]

Happy Xmas to you.

[shut hawk]

Big gains

[fading perch]

if i use microsoft surface and change the os to linux, does the laptop become a linux surface

[sick lance]

Now that is a welcomed change.

[shut hawk]

nice

[sinful moon]

That is nice but the yellow instead of lightest green is slightly cursed lol

[winter badger]

Need help

[sick lance]

With what, exactly?

[winter badger]

I cant post picture to explain

[rapid merlin]

new update

[winter badger]

Is about a task

[sick lance]

#room-help

/doc verify

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 7, 2024, 1:48 PM

[winter badger]

Done

I verify my token

[sick lance]

Now you can attach screenshots, pleae do so in #room-help for THM help.

[winter badger]

Ok thanks

[primal kestrel]

powershell scripting is very annoying. how does anyone remember any of the built in functions?

[shut hawk]

cheatsheet and reference pages

[cosmic pendant]

Good Day THM!

[sinful moon]

also iirc there’s literally Get-Help which is the equivalent to man pages

[tawny ruin]

I might not have logged in to THM for a while.

[sinful moon]

Yes the syntax is kind of insane, but it’s designed to be verbose and “self documenting” to an extent

[sick lance]

I think the date is when it was created, not when it was posted.

[primal kestrel]

https://learn.microsoft.com/en-us/powershell/scripting/learn/ps101/09-functions?view=powershell-7.4#naming it's very funny to me there's a list of approved function verbs

[sick lance]

But then, my date differs.

[tawny ruin]

I think this was the first login in two years or so.

That date pretty closely matches when I created my account though

[sinful moon]

Invoke-Laugh

[elder ravine]

Is TryHackMe Okey Right Now?

[sick lance]

I've browsed around without noticing any issues,

[elder ravine]

But I'm, Even After Couple Of Refresh!

@sick lance Here!!

[sick lance]

Probably best in #site-support

[elder ravine]

Sure!!

[eager marsh]

Yuh

Red Team Capstone Challenge is a bit silly

[sick lance]

How so?

[eager marsh]

I can’t seem to remember my password for the challenge portal

Lmao

[sick lance]

You mean you didn't write it down?

Or copy/paste?

[eager marsh]

I did but when my computer went full psychopath and erased everything I lost it

So feeling a bit bad rn

[sick lance]

Ruh Roh.

[eager marsh]

Uhh can site support help out or am I fucked

[sick lance]

Fucked, the creator didn't impliment a recovery solution.

[eager marsh]

Wait why do I even need my THM username for?

[sick lance]

It doesn't need to be your THM username, it can be any username.

IT just helps identify you.

[eager marsh]

Oh

Then I’m good then

Lmao

This time I’ll write it down

Got it written down

[loud tangle]

This one Youtuber I was watching just now was messing around with an windows XP machine and didn't connect to the internet as a safety concern but is there anyway people would know he's running a vulnerable machine without him visiting a dodgy website?

[static sierra]

Anyone here experienced with assembly and malware analysis?

[sick lance]

Malware analysis is restricted to our advanced channels out with THM content.

[timber galleon]

hello guys

do any of you know how to exploit queuejumper for rce?

[static sierra]

im just tryna find someone in this field to get resources and get into it

btw @sick lance when the monthly hacker is awarded its been 7 days into oct

[sick lance]

Please ask support, I'm not an employee.

Afaik, it's manually awarded

[sick lance]

What for?

Sorry, English only.

[rapid merlin]

hello hackers 👋

how is @sick lance today?

[eager marsh]

Hydra is so slow dude

im starting to wish I hadnt done that shit

[narrow meteor]

mb

that was not the message that i want to text here

I am having a problem and there are sites that do not let me enter, unless I enter through tor, it is in my daily use machine not in the vm. I thought it was only with that one, but I tried to enter optifne and it gave me the same thing. I checked the windows hosts file and there is nothing. I also changed the dns to cloudflare's and nothing.

[sand trench]

https://tryhackme-badges.s3.amazonaws.com/shadowabsorber.png

[chilly veldt]

https://tryhackme-badges.s3.amazonaws.com/KyootyBella.png

[timber galleon]

microsof port 1801 messagequeueing

[static sierra]

where is the support?

[eager marsh]

Could use some friends to do KOTH

[karmic geyser]

https://tryhackme-badges.s3.amazonaws.com/0xPentester.png

[sand trench]

neat

[karmic geyser]

Thanks

[sand trench]

but something tells shadow that the image is unescarrily blurry

[karmic geyser]

https://tryhackme-badges.s3.amazonaws.com/jaxafed.png

💯

[eager marsh]

I just took a screenshot lmao

[karmic geyser]

lol

https://tryhackme-badges.s3.amazonaws.com/0xVader.png

[eager marsh]

That’s not it

My username is diffrent

It’s totallinkdom

My badge for some reason says guru and another says I’m a god

[sand trench]

the static ones need to be updated by pressing a button

[eager marsh]

That makes sense

[rocky mulch]

Hi, someone know what hardware you need for a home lab ?

[polar spoke]

"need" is probably a strong word there

you can build a lab with just about anything

it depends on what you want to do in/with it

[ruby sand]

I'm just using an old tower, upgraded the ram and installed proxmox on it.

[rocky mulch]

Thx, i just want to reverse malware and stuff so it's more about isolating the network etc

[eager marsh]

Here's the new one

[ruby sand]

I mean, you can just do that in a VM, provided you know what you're doing with virtual networking to isolate it. There are a million guides on YouTube.

[rocky mulch]

I want to build a dedicated machine with a network monitoring siem too ^^

[autumn phoenix]

Heyy guys i am getting error during connecting to the ovpn file for the active directory enumeration network room .....

2024-10-07 21:28:41 Error: problem with tun vs. tap setting
2024-10-07 21:28:41 Exiting due to fatal error

[chilly veldt]

#site-support

[ruby sand]

That's the kind of stuff I use my proxmox server for

[eager marsh]

hydra intensifies

[sand trench]

would recommend against going into malware stuff without having 100% sure knowledge of how to do so without screwing over your computers or network

[eager marsh]

I do have a few setups on an unrealted note

I could share em

[sand trench]

well vader please keep that in the advanced channels

[eager marsh]

Of course

[sand trench]

the malware part that is

if you are talking about AD labs or server labs go for it here

[eager marsh]

Well yes, but it's more of a setup guide

[sand trench]

wants a cisco router or switch for home labbing

eh for now the packet tracer program is good enough

or going to schools lab and sitting there for a few hours testing things

[rocky mulch]

Thumbs up all

[eager marsh]

fr

had no idea that thm had a discord

[sharp citrus]

@static sierra

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 7, 2024, 4:06 PM

[sick lance]

I have some Fortinet equipment I've to attack

I switched my hons project.

[sand trench]

oooh fortinet firewall???

[sand trench]

yeah took a bit for shadow to realise too... but the token in the manage account page was what made shadow figure it out

[sick lance]

Firewall, switch and router

[eager marsh]

Honestly same

[chilly veldt]

I still need to get my server home from school

might just say fuck it and carry it on my motorcycle

[rapid merlin]

fun wardriving setup

[chilly veldt]

yeah, just a whole server on the top of my fuel tank

[sick lance]

Quite like the idea of my end report being published.

[naive violet]

Honestly they can be pretty cheap, especially if you settle for older kit

[rich shoal]

I went from almost top %1 to almost top 2% with the new update 💀

[sand trench]

yeah would need a console cable and maybe something to connect some ethernet ports too

probably cheaper to just go lab in the lab room in uni

as we can book the lab pods whenever we want basically

but if we abuse the tech we can get barred from entering but yeah shadow is not gonna do that

someone from the last year student group inserted some erasers into switch ports and got barred/banned from entering the lab room for good reason

[clear jackal]

I will add, take volume into consideration. Older kit is jet engine loud. If it's next to you, maybe procure some form of noise isolation

[sand trench]

hahaha yeah switches and routers and other 1-3u stuff can be stupid loud

noticed that easily during lab moments

[clear jackal]

You also can't go too new, because licensing becomes an issue

[naive violet]

👀 Hi moose

[clear jackal]

Hi

I am alive. Sorry for the unannounced absence

[sand trench]

well it is not our job to make sure you are okay or keep chatting... that is entirely up to you shadow would assume

[clear jackal]

It's been eat, sleep, work, repeat for the past couple of weeks

[sand trench]

here it has been eat sleep study

[naive violet]

I have ham projects approaching completion
Some satcom, some HF. Opposite ends.

[clear jackal]

Noice

[sand trench]

neat

[wild rose]

Same been busy with life.

[sand trench]

would love to get into ham radio stuff but neck deep in uni stuffs

[clear jackal]

I took down my pihole and haven't had time to put up the new one

I thought it was going to be a drop in replacement, but it wasn't

[sand trench]

yeah it can be like that

[clear jackal]

But back to Cisco equipment, not too old and not too new. Old will be loud, potentially lacking Gbit connections, and running ancient versions of Cisco IOS. Too new and the price will increase exponentially, your GUIs may be locked to extra services, and you will run into licensing issues.

[sand trench]

yeah not gonna go out and buy one for a while

just knowing it is an option

[restive harness]

never actually noticed how many commands these nmap got 😭

[sand trench]

yeah there is a lot of nmap stuffs

[restive harness]

hard to remember

[sand trench]

and even that module does not cover everything

[restive harness]

lol

[sand trench]

note taking or teach your rubber ducky how to nmap scan things

[restive harness]

bruh

[restive harness]

well its interesting at the same time and kind of i would say not hard neither easy

but yes i am learning a lot actually

[sand trench]

note taking note taking note taking

write down stuffs

helps you organise your thoughts and make stuff stick better

[pearl raven]

I'm inclined to agree, the stuff that I put together for my home lab in the beginning lacked a lot of features, some of the stuff I was learning in class didn't translate directly over even though I had purchased the same switches. I then realized that I had purchased a different model of the same switch.

[sick lance]

Have you seen the size of the book?

[restive harness]

😭 dont tell me nmap has a book now

[sick lance]

Wdym now?

[pearl raven]

Only 434 pages...

[restive harness]

bruh

[primal kestrel]

it's a good read

[pearl raven]

Unless there is a newer version out?

[sand trench]

yeah there is a free ebook for nmap

or you can buy it in physical format

or stick to the manual page

[sick lance]

Nope, the book was released in 2008/09

[pearl raven]

Ah okay, that's the one I was looking at.

[restive harness]

later i will have a look my 3rd semester maths consuming my most of time

harder than anything

[sand trench]

shadow is doing a lot of subnetting in head right now

gotta make it stick

[pliant cairn]

i bricked my kali vm trying to expand the disk size

[sand trench]

GG

[pliant cairn]

😆

well there goes all my scripts and notes

[sand trench]

you were storing your notes on your vm??? also you don't back up your notes using git or other service to some server somewhere???

because both of those seems like bad practice to shadow

[pliant cairn]

most of them on git some wip notes and scripts i keep it local

[sand trench]

ah well less of a setback then

still can hurt

[pliant cairn]

yup, a bit of annoyance but more practice for me end of the day

and i wanted to have a clean sweep which i was procrastinating. so, its a win win

[sand trench]

beep beep VROOOOOM

[sick lance]

You learned to write IP's?

Go you! /s

[rapid merlin]

hi am stuck at a question

[sand trench]

haha

[sand trench]

which question???

[sand trench]

if the prefixes were not obvious it is subnet calculations

[pliant cairn]

is this trellium?

[sand trench]

nope obsidian

swapped of trilium to have more plugins and better neovim support

[rapid merlin]

is at the begining at Web Application Security

[sand trench]

generally use obsidian mostly for note viewing and writing them in neovim

[sick lance]

Ya, class B.

172.16.1.0/24

[rapid merlin]

is the last question

[pliant cairn]

172. class b yes

[sand trench]

well the 10.1.0.0 subnetting is further down in there

[sick lance]

172.16

[sand trench]

we got a 172.16.1.0 /16 and got to subnet it into 4 subnets with 40 hosts each

hence we get a /26

[sick lance]

How do you calculate it, binary?

[sand trench]

yeah mostly binary

the /prefix is how many ones is in the network part of the subnet mask

https://subnetipv4.com/ have used this a lot to train in the past

but shadow is rusty

[rapid merlin]

Hallo! How can i remove friends from my friendlist? Im trying to add a new friend but it hit me with the "Max amount", can't find the way to remove friends

[sick lance]

There's a little x, if you hover the name.

I can't even show you.

[rapid merlin]

Oh yeah i see

It overlaps with the navbar so i couldn't see it

Thanks you so much!

172.16.0.0/12 https://datatracker.ietf.org/doc/html/rfc1918

[sand trench]

this one: What do you need to access a web application? ????

[mental geyser]

Yo guys how difficult is the WindCorp series ? I was planning of giving it a shot as there are not many hard windows machines anyway. Would what I learned with THM paths + CPTS course + some research be enough to overcome them ?

[sand trench]

probably

you could try retro too

retro is the challenge room for a windows exploit

blaster is the walkthrough of the same box

[mental geyser]

coincidentally this was the last one I did few minutes ago 😂

[sand trench]

haha okay then

[sick lance]

There is two points in the Windcorps that make it harder for members to solve

[clear jackal]

For help with THM content, #room-help is the best place to receive assistance

[sand trench]

they moved there and got their answer already but yeah agree

[mental geyser]

also is this intended or some overlooked html error ?

[sick lance]

Probably formatting error when the room was changed

website*

[sand trench]

YAY

[rapid merlin]

netblock calculators! 🙂

[sand trench]

well calculators wont be allowed on the finals

but yes generally shadow will use calculators for this after getting the manual stuff to stick

[eager marsh]

That first flag was tough

Red Team Capstone is no joke

[scarlet gazelle]

Bro Whats this?

[sand trench]

ipv4 subnetting

[sick lance]

Did you know there is over 300 attack vectors,

[sand trench]

https://subnetipv4.com/ here is the website for this

[scarlet gazelle]

Whats it's use. I'm a noob

[eager marsh]

Looks like I should take a break then

[rapid merlin]

nice site

[sick lance]

You can bruteforce, phish, osint, it's great.

[sand trench]

to segment a network into smaller networks for computer and devices to communicate without killing the media by sending to many broadcasts

[scarlet gazelle]

Oh

[eager marsh]

It's like breaking up a network into pieces rather than having one big network

[sand trench]

*feels like they lost most people with that sentence

[scarlet gazelle]

This is more easy to understand

[sand trench]

big networks have a problem of data being transfered can be slowed down by devices on the network asking how to reach each other over and over again

[eager marsh]

So like you can have one small network for HR, one small network for the IT people, and one small network for the Management people

[sand trench]

and a super small one for the 2 routers connecting the IT and Management networks

[eager marsh]

Exactly

[grim sparrow]

:hammer: haqch#0 has been banned.

[scarlet gazelle]

Oh yeah I get it basically you're breaking it into it's own nest rather than one big complex one

[sand trench]

yuups

[eager marsh]

See you get it!

[scarlet gazelle]

Can I DM either of you I got some doubts regarding pentesting to clear

[eager marsh]

of course dm away!

[sand trench]

subnetting gets even crazier when you get into variable length subnet mask/VLSM

where you split a subnet into smaller subnets to get even more networks and smaller host/computer/devices on each subnet

[scarlet gazelle]

You're not accepting friend req

Ig my dm will reach you?

[sinful moon]

lol there’s always the joy of NAT as well if you wanna get really crazy

[sick lance]

Why don't you ask in here, instead of DM's, you'll get some answers from people who're actual pentesters too possibly.

[sinful moon]

Indeed, just stating your question clearly would be a good start c:

[eager marsh]

Yeah I second this

[sand trench]

we not gotten into how NAT works fully yet

[sinful moon]

lol probably for the best

NAT is kinda cursed

[eager marsh]

It really is

[sand trench]

well yeah but it definitely saved a lot of time to swap towards ipv6

[naive violet]

It's a good hack for a big problem

But it's definitely a hack

[sinful moon]

lol indeed

[sand trench]

the art of the bodge???

[sinful moon]

But yeah, practically, you will see it most for VM networks as one of the options

NAT is usually the default

[eager marsh]

I think it’s VirtualBoxes default option as well

[sinful moon]

mhmm I just meant all VM software

[boreal scarab]

AHHHHHHHHHHHHHHHHHHHH NETWORKING!

https://tenor.com/view/cat-hide-sofa-gif-5892045

[eager marsh]

Looks like we scared someone

Come on man, networking ain’t scary

[sand trench]

sipcalc is amazing

but gotta stay away from using it for now

[boreal scarab]

If you were in my networking night class at college.... you wouldn't be saying that.

I was great with Cisco Packet Tracer... but Hex to decimal to subnet... or however the fuck it went, I hated it

[sinful moon]

lol I just always look up “CIDR caluclator” and just go from there or tables in results

[pearl raven]

https://tenor.com/view/windows00-windows2000-simpler-times-screensaver-pipes-gif-14530365

[eager marsh]

I’ve legit done that kind of thing before

[pearl raven]

The internet, circa 1995.

[sinful moon]

Yes that is the screensaver I use on every Win 9x machine

[eager marsh]

Packet Tracer ain’t bad once you figure out it’s little tricks

[pearl raven]

lol

[sand trench]

decimal to binary
binary to decimal

assuming you did not subnet ipv6 which if yes it is not that bad

[sinful moon]

It’s also running way too fast, that’s in a VM

[boreal scarab]

Totally didn't cheat on my final with my partner next to me, while I did the cisco packet tracer, he did the subnet crap

[pearl raven]

"Team Work"

[sand trench]

[eager marsh]

Trust me part of my old job at my comunity college was setting up Cisco routers and devices

[boreal scarab]

https://tenor.com/view/national-dog-day-team-teamwork-team-work-high-five-gif-6039642593588168059

[outer rivet]

@seadris

Bruh gone

[eager marsh]

So I might have a bit of a bias

[boreal scarab]

He's in Info Sec Prep!

[eager marsh]

Wrong server pallie you want HTB

[boreal scarab]

He's gone in there too

[outer rivet]

His my server

His mod

[wooden totem]

first time seeing pallie in the wild

[boreal scarab]

hexadecimal to binary to IPv4

https://tenor.com/view/kill-neil-patrick-harris-barney-kill-yourself-finger-gun-gif-16929199

[eager marsh]

https://tenor.com/view/liar-anakin-gif-21992662

[sand trench]

b-b-b-but hexadecimal has near 0 use for ipv4

[eager marsh]

YOURE WITH HIM

[sinful moon]

there’s no reason why you can’t do straight hex to decimal notation

[eager marsh]

Anyone else wanna suffer through red team capstone challenge with me?

[sand trench]

can't

already finished it

[eager marsh]

Damn

[boreal scarab]

Tell my old professor that

[eager marsh]

Rip to me I guess

[sand trench]

tried hard to finish it with the help from tons of people when it released and was planned to get shoved in a hiden box forever

[boreal scarab]

That's why I hate networking...... I can get networks wire up just fine, get that whole layout... VPN's, VLAN's... crap like that. But tell me to subnet mask, and your ass is getting 255.255.255.0

[pearl raven]

lol

[boreal scarab]

Fuck you, you're stuck with 192.168.0.1

[sand trench]

nah you only get 255.255.255.248 from shadow

[eager marsh]

https://tenor.com/view/that-one-gif-ultra-instinct-gif-9474784792190223574

[winged summit]

haha class C for lyf lol

[boreal scarab]

Amen!

[winged summit]

lol

[boreal scarab]

If it works, it works!

[winged summit]

indeed

haha

[eager marsh]

I wish they had THM when I was a kid

[winged summit]

dude, right?

me too

[sinful moon]

Get out of here with your 192.168.1.x, I’m about that 10.10.10.x life

[winged summit]

LOL 10.X life is legit!

[eager marsh]

Kinda wasted my whole teenage years on linuxzoo

[winged summit]

class A lol

[sand trench]

guess beerrise can't use tryhackme as they use a 10.0.0.0/8

[winged summit]

what's linuxzoo?

[eager marsh]

I wonder if it’s still around

[eager marsh]

Platform that would teach you like Kali Linux and other shit

[winged summit]

oh, nice

[boreal scarab]

Naaaaaaah, I'm bout that 192.168.50.0 life

[sinful moon]

Can’t say I’ve heard of it either, ah

yeah I got started with infosec in the 00s before Kali existed I’m pretty sure

[eager marsh]

BRUH ITS STILL ARROUND

[winged summit]

i learned my stuff back in the day before there were even online platforms... just nerds that would meet up in person and talk about computers lol

[sinful moon]

I think it was Backtrack then or whatever

[sand trench]

https://cmdchallenge.com/ have fun

[boreal scarab]

I haven't leveled up in ages..... so yah, no THM, bad THM, no 10 network

[winged summit]

i remember backtrack @sinful moon ! ha

[sinful moon]

Oh I’ve done that before I’m pretty sure

[sand trench]

haha shadow remembers backtrack

[eager marsh]

I just found out 0xD is the highest you can go

[sinful moon]

and Ophcrack and such, yes those were the days lol

[sand trench]

back when cracking wpa2 keys was easy

[eager marsh]

I also remember backtrack

Good times

[winged summit]

just WPA, right? not 2?

[boreal scarab]

Gen Alpha: yOu WeRe HaCkInG bEfOrE i WaS bOrN!

[winged summit]

lmfao

[sinful moon]

they’re probably thinking just WEP

[winged summit]

get off my lawn! lol

[eager marsh]

I was 12 when I started

[sand trench]

yes but we called it making a bird house

[sinful moon]

WPA was never much fun to crack

[winged summit]

yeah, you're right

[boreal scarab]

Still is

[boreal scarab]

I was......... How old am I now?

[eager marsh]

It was weird starting out at a young age right?

[winged summit]

@sinful moon i remember something about de-auth and IV's, but that's about it. haha

[sinful moon]

yeah lol

[winged summit]

haha

[boreal scarab]

BIRDIES!

[eager marsh]

Because while people were out playing football I was in my room learning about this new thing called “Ubuntu”

[sand trench]

computer gaming into modding into minecraft modding is shadows journey into deep computer world start

[pearl raven]

laughs in pwnagotchi

[sinful moon]

you gotta spoof the MAC of the router and send enough deauth to capture the handshakes, you need a sizable network to make it not take forever

[sand trench]

shadow started using linux first in 2013

[sinful moon]

about 2007 for me using it full time, but I tried it ealier

[eager marsh]

That’s a few years before I started lmao

[naive violet]

You fully don't have to deauth, it's nifty

[sinful moon]

mhmm

just enough for the handshake

[sand trench]

and now here is shadow with an tiling window manager on an arch based linux distro

[pliant cairn]

mine started with port forwarding so that me and my friends could play minecraft. back in 2014 i guess

[sand trench]

^ had that part too

[naive violet]

Not even that.
On a busy network, there's enough clients going in and out of range that you'll get some anyway

[sand trench]

but started with modding before the port forwarding

[sinful moon]

lol I used to go all out with just bare WMs but no I’m back to full DEs

[sand trench]

java was not super easy for a kid to learn

[winged summit]

haha, nice. i always forget what a tiling windows manager is. I know what a window manager is. I personally use XFCE in my lab VM on Debian, but KDE Plasma on Debian for my host OS 🙂

[naive violet]

Deauth = DoS, best avoided

[eager marsh]

So my dad is part of the old gen of people who used Linux

And he insists upon not using desktop Linux

[pliant cairn]

yeah tried some... i remember barely

[sand trench]

windows uses a floating window manager that lets you place things on top of each other

[eager marsh]

I legit had to tell him to stop

[pliant cairn]

coding in java not knowing anything about it

[winged summit]

ah, gotcha. i'll have to do more research when i get a chance 🙂

[pliant cairn]

yeah fr i feel like most of us started in a very similar way

[winged summit]

hey guys/gals. i recently created my own attack box. i'm pretty stoked about it! it's Debian in a VM and has all the tools I need. No bloat whatsoever 🙂

[sinful moon]

dwm is about the only tiling WM I really took to, but yeah i3 is what the kids use these days

Nice, yeah I have the same with a VPS host that I run Arch on

[pliant cairn]

have fun!

[sand trench]

congratz... you have now learned tons about setting up tools and fun stuff with linux

[winged summit]

thanks. don't worry, fun has already been had! haha

[twin ridge]

Gave +1 Rep to @pliant cairn (current: #572 - 8)

[winged summit]

yep! haha

[sinful moon]

Do learn ssh tunneling so you can funnel web or RDP traffic through your pentesting server

[sand trench]

i3wm for x11
hyprland or sway for wayland

[sinful moon]

that trick is always lovely

[naive violet]

You tried Ligolo-NG for that btw?

Way nicer than proxychains etc if you need a better tunnel

[sinful moon]

Nope, just plain old ssh commands for the tunneling tbh

I have terminal aliases for them lol

[sick lance]

That is the third time I've seen that mentioned in as many days.

[naive violet]

It's neat

[winged summit]

btw, i learned some new tools last night 🙂 i'm booting up my lab VM to get my notes. can share the tools... just want to verify the names 🙂

[sinful moon]

I just say hostname-web for Burp powered web proxing with ssh, and hostname-rdp for… well you get the point

[eager marsh]

I just realized that Hammond is on here for some reason

[sand trench]

yeah we have a decent bit of infosec youtubers and streamers on here

[winged summit]

so, ldapnomnom was one of the tools for ldap enum... pretty cool stuff

[sand trench]

john joins in in conversations now and again

[winged summit]

then... let's see here. let me find the other tool....

[sand trench]

so is 0day/ryan which made pentester.com and revshells.com

[sinful moon]

it does still always feel a bit magic though when my server is connected to THM via OpenVPN, I’m connected via SSH, but SSH is tunneling the RDP all the way back to THM

[winged summit]

that's super cool!

much respect!

[sinful moon]

Yeah nice stuff for a pentesting server, I’d for sure recommend you giving it a try with yours

babysteps to babby’s first C2 server

[winged summit]

yeah, def

[karmic geyser]

@eager marsh how far you in the Capstone challenge?

[winged summit]

ha

[sinful moon]

lol indeed, that’s what I’d describe mine as

[karmic geyser]

Wait, Hi Noir.

[sinful moon]

Heya!

[karmic geyser]

haven't seen yea in a while.

[sinful moon]

Probably because I’m usually working… like I am now lol

[karmic geyser]

you writing one?

[sick lance]

"Some reason" lol

[winged summit]

haha

[sinful moon]

nah, I just meant infrastructure wise

[karmic geyser]

Oh yeah, last time saw you in htb.

[sick lance]

John has worked on some THM content, streams AoC annually.

[eager marsh]

I got permiter breach

[sinful moon]

Yeah I’ve chatted with John Hammond here actually, was neat

[karmic geyser]

cool

Neat

[eager marsh]

Jesus that was way harder than I bargained for

[sinful moon]

I think my friend has interacted with him in a professional capacity while they were working with Huntress actually

[winged summit]

John seems like a great dude

[sinful moon]

friend is DFIR manager for a major financial institution

[winged summit]

really friendly

[sinful moon]

yeah for sure, he’s chill and down to earth

[winged summit]

yep

always smiling and lighthearted... super nice guy

(in his videos is all i see, but he seems genuine)

[eager marsh]

So it seems

[winged summit]

lol

[karmic geyser]

Vader, Capstone is a fully Red Team challenge. 😄

John is the most chill dude.

https://cdn.discordapp.com/attachments/773132561693409290/1291497079213916180/image.png?ex=6704ed22&is=67039ba2&hm=1f6a4035452c3d03389d4ef8f7fb04d3ed41a025e3cc3de052112a310af29757&

Bro is so chill

[eager marsh]

I know what I’m getting into

Mark my words the empire will take this machine

[sinful moon]

lol I still remember when I thought I encountered an account impersonating a retro gaming YouTuber, in the process I was like “You should have impersonated a better YouTuber tho”…

And it ended up literally being that YouTuber

was ouch lol

[winged summit]

oof, that sucks! lol

well, you had good intentions

that's all that matters in a trivial case like that

[sinful moon]

lol mostly, I don’t much like that channel but sorry for the offhand remark my dude

[karmic geyser]

Yeah Empire C2.

[eager marsh]

Unironically

I think I’ll end up using that

[winged summit]

oh, weird.... why would you try to help a channel you don't like?

[boreal scarab]

https://giphy.com/gifs/skid-car-tDcQBtUX78JWoas9oM

[karmic geyser]

https://cdn.discordapp.com/attachments/1207563336091439145/1238981375491706880/ApplicationFrameHost_BAsLDLxk10.gif

[winged summit]

are we hating on 0day now? is that the latest trend?... lol damn

[karmic geyser]

Wreath is such a good network.

[karmic geyser]

?

and approved by ryan. 😂

[winged summit]

the gifs seem to mock him, that's the only reason i made the joke

gotcha

[eager marsh]

I saved em

[karmic geyser]

Bro, both gifs are on his fav gifs. 😂

[winged summit]

that's cool man

[karmic geyser]

Always look at both sides.

[boreal scarab]

@hasty sand Keeps finding ways into my two FAR DIFFERENT youtube accounts.... fucker keeps showing up in my Shorts feed

[karmic geyser]

• / -

[sinful moon]

lol because I was a mod of that Discord and was talking to an account that I thought was sus

[karmic geyser]

👀

[boreal scarab]

No matter what... his channel, his many interviews

Doesn't matter, he hacked his way into my feeds lol

[karmic geyser]

He da Goat.

[winged summit]

gotcha.....

[hushed knoll]

shut up skid give me your feed

[pliant cairn]

yall ever just watch 'chills' videos before sleeping? i just watch them cause of his voice

[boreal scarab]

https://tenor.com/view/zero-day-gif-21206422

[winged summit]

lol

[sinful moon]

bitch please, get on my level, I have the n-1 day exploits

[hasty sand]

lol reading this as “myself” is funny.

[karmic geyser]

🤣

[eager marsh]

Number 15

[karmic geyser]

Thanks for the idea.

[twin ridge]

Gave +1 Rep to @hushed knoll (current: #1497 - 2)

[karmic geyser]

Hi Ryan. 👋🏻

[hasty sand]

Thank you @winged summit for sticking up for me (although the haters that made the GIFs just made me laugh)

[twin ridge]

Gave +1 Rep to @winged summit (current: #110 - 66)

[hasty sand]

Everyone here is great 🙏❤️🚀

[winged summit]

yeah man, anytime

[sick lance]

Drama-llama in another place? 👀

[rapid merlin]

Guys, where can I practice for eJPT (apart from INE labs)

[hasty sand]

Yep, “com kids”. The most annoying kind.

[sick lance]

The worst.

[winged summit]

yeah man, THM is awesome. good community overall

[karmic geyser]

iircc, the 1st gif was made by them. (com kids)

2nd was made by kiyomi. 😄

when we were on VC in HackNexus

[hasty sand]

Oh yeah, I like Kiyomi — they are nice and I met him at defcon 🙏

[worn sleet]

Can someone put me through😓🤦

[sinful moon]

lol what do you mean by that, also welcome!

[karmic geyser]

Awesome, he is great. So yeah we love you more then com kids hate you. Me and kiyo made the 2nd gif you in Tesla. 🤣

[boreal scarab]

Think about it. You're now forever engraved into a GIF!

https://tenor.com/view/winner-hereyougo-going-back-gif-12530432

[worn sleet]

Can I message you?

[karmic geyser]

LOL

[worn sleet]

Thanks btw

[twin ridge]

Gave +1 Rep to @sinful moon (current: #38 - 225)

[sinful moon]

It would be best if we just kept this here lol

You haven’t even said what the issue is

[worn sleet]

I'm still a learner

[boreal scarab]

My Compuper isn't working

[karmic geyser]

W

Matt, can you BSOD my PC?

[boreal scarab]

Is ti windows?

[sinful moon]

That’s fine, but what is your issue lol, you still haven’t said

[boreal scarab]

Windows 10 specifically? lol

[karmic geyser]

Active Linux

go to linux.com

that what it says

[boreal scarab]

Lemme go through my resume....

[worn sleet]

Want to learn how to hack..

[clear jackal]

If you ask your questions here, the responses can benefit the community

[boreal scarab]

Windows 10: 70+
Windows 11: 3
Windows 7: 3
CentOS: 2
Kali: 3
Arch: 3
Mint: 2
Jabba's Spotify: 1

Yup, looks like I broke a couple of linux's in my time

[sinful moon]

see #start-here to get started

TryHackMe (the website) is all about teaching you this info

[eager marsh]

What’s that last one

[worn sleet]

Okay thanks

[boreal scarab]

Jabba's Spotify

[karmic geyser]

The one I have sir is from MS.

[boreal scarab]

I sent him a link to a song and it crashed his Spotify

[eager marsh]

You made that one up

[boreal scarab]

https://tenor.com/view/happy-catto-cats-gif-2693509101423175460

[boreal scarab]

I did not!

[sick lance]

Coincidence

[boreal scarab]

#general message

[boreal scarab]

Still counting it!

[sour dirge]

Is 0day too busy to reply in dms now?

[karmic geyser]

https://cdn.discordapp.com/attachments/1175382046688952426/1292914259000426597/image.png?ex=670577bc&is=6704263c&hm=83fd1f0b23856cadec1067941f41c5b7e86761e37487b46d360335d73a922899&

Dude this is So COOL

[sick lance]

Did you send them a DM without asking?

[karmic geyser]

He busy with work. 😄 might reply if you ask them for it.

[sick lance]

THM reaching out to me via email. 👐

[sour dirge]

Ya

[sour dirge]

Ohh

[slow stump]

is this premium ?

[karmic geyser]

Getting a new role? 👀 ||Staff Ig?||

[karmic geyser]

It's new UI. 😄

[sick lance]

Probably missed it then in their other folder

for breaking a rule

[sick lance]

Not at all.

[karmic geyser]

Oh

[slow stump]

oh cool

[karmic geyser]

Yea

some coool updates

[sour dirge]

We used to talk 2 yrs ago

[karmic geyser]

UI is CLEEEEEEAN

[sour dirge]

😃

[crude stump]

Pretty sure you have to actually work for thm to get the staff role

[eager marsh]

Yup

[rapid merlin]

I was gonna make a joke about wizards

[sick lance]

I mean, the stuff I do for THM, and how much I know and can't disclose, at this point I may aswell be staff

[sick lance]

https://tenor.com/view/youre-a-wizard-hagrid-afirmation-magic-magical-gif-16533730

[rapid merlin]

It’s because they said staff role

[sand trench]

a wub wizard

https://www.youtube.com/watch?v=R_NtokmVAgw

[eager marsh]

I’m a what

[primal kestrel]

what's y'all's favorite threat modeling framework

[sick lance]

Kill chain by Lockheed Martin,

Or PASTA (Process for Attack Simulation and Threat Analysis) if I'm hungry.

[primal kestrel]

i think i'm an owasp 10 andy

[sand trench]

wait we are supposed to have favourites???

[naive violet]

STRIDE makes me think

[naive violet]

Owasp top ten? That's not threat modelling?

[sick lance]

I may use Stride for my project.

[mossy river]

Very likely 😅

[primal kestrel]

i think in a loose sense owasp can be a threat modeling technology while not necessarily be a methodology

[naive violet]

OWASP is an organisation

[sour dirge]

Hmm

[naive violet]

They have actual threat modelling stuff

[sand trench]

if shadows dm:s are to busy to respond to most shadow bets 0days is worse

[primal kestrel]

i mean top ten

when i said owasp 10 i meant top ten

[sick lance]

That's not really a threat model though.

It's just a list of commonly found vulns in web apps.

[naive violet]

And nowhere near exhaustive

[primal kestrel]

it's not a methodology like PASTA but it's still a threat modeling technology

[boreal scarab]

Anyone know when Proton usually does their sales?

cough @ruby sand cough

[rocky mulch]

THM is using IA generated images for their content (question) ? Their interfaces and stuff are even more clean each days

[boreal scarab]

Awww fuck... that means I have to fix some back end crap....

AHHHHHH

[sick lance]

Black Friday soon, no?

[boreal scarab]

November 29th... I could wait for that

Planning to get the unlimited plan rather than just the VPN plan

[rocky mulch]

I'm waiting for proton sales too xD

[boreal scarab]

Got the funds.... but hey, if I can save money, I'm all for it

[sick lance]

I get 50% off.

[boreal scarab]

50% off the USD $191 for 2 years?

[sick lance]

Student discount, innit.

[boreal scarab]

Awwwwwww

Wish I still had an active .edu account

[strong gull]

oh

that was unexpected

[sick lance]

@strong gull please engage with the community before self promotion

[strong gull]

well sure, wasnt intending to promote but oke

[boreal scarab]

$95.88 for 2 years sounds sooooo damn nice

[primal kestrel]

what happens when your proton sub expires? do you lose your extra addresses?

[sick lance]

If you don't renew, yeah

[boreal scarab]

I can speak for the VPN.... they try and charge you again, and if it doesn't go through, they give you 7 days free, then end it

Found that out when I booted up my laptop and it said the subscription ran out lol

[primal kestrel]

idk if this is opsec compromising but how many addresses do y'all use with proton? i use 4 and i kind of think of them as kernel rings

[strong gull]

hmm would it be cheaper to set up your own VPN?

[sick lance]

I use Malware-Bytes.

£25 for a year.

[boreal scarab]

"Get 40% off* when you buy a 24-month subscription during our Black Friday sale. This deal is billed at $172.56 upfront for 24 months"

This was from 2022

Making sure you were still here

[sick lance]

@inland obsidian it you're advertising a job, can you please still reach out to admin team

[boreal scarab]

It was for content creation and digital marketing

Don't think, and don't quote me, the admin team would approve that for THM

[sick lance]

Abertay students look like they have some cool projects @pallid lotus 👀

[rapid merlin]

I used malwarebytes for a very long time

[sick lance]

used ?

[rapid merlin]

When I had a computer

I broke it apart due to the madness inside me

[pallid lotus]

Which ones?

[rapid merlin]

Tonight I found a super cute shop

I bought a new writing book

Should I use it for cyber notes maybe

[sick lance]

I seen one where they pitched a top 10 owasp learning tool for NatWest.

[pearl raven]

If you like the old school method, and the tactile response from pen/pencil on paper, go for it!

[sick lance]

The Madness Strut.

[pallid lotus]

Where the heck is that getting leaked

But yeah, we provided a few projects this year

[sick lance]

🤐

I know people. 😄

[boreal scarab]

https://tenor.com/view/question-mark-cat-confused-gif-16041903182640445268

[ruby sand]

I am all about physical books (i have an MFA in Book Arts and have worked in multiple libraries restoring old books), but i find there's really something to be said for having easily searchable and linkable notes.... I use obsidian for my journal and all of my notes, and can't say enough good things about it. (i know i'll get hate because it's not open source, but shrug)

[pearl raven]

No hate here, I also use Obsidian.

[boreal scarab]

MS PAINT!

[pearl raven]

THIS IS THE WAY

[boreal scarab]

https://tenor.com/view/book-of-boba-fett-the-mandalorian-this-is-the-way-the-book-of-boba-fett-mandalorian-gif-24825263

[rapid merlin]

I do love physical books, I’ll have a look into obsidian ☺️thank you

[pearl raven]

I'm still blown away by the fact you can use paint like an Etch A Sketch...

[ruby sand]

obsidian is great if you put the time in to build it to your use case... happy to chat about my daily, weekly, monthly, quarterly notes, people notes, book notes, and cert study notes... i have a pretty extensive system that works really well for me. My masters thesis was about physical journaling and keeping a journal, so i've taken a lot of that and adopted it to my digital needs.

[rapid merlin]

You can send screen shots if you want

[finite rock]

What happened to profile Update??

[boreal scarab]

Beautiful

[pearl raven]

Perfection

[sick lance]

Wdym?

[rapid merlin]

Mb I replied to you without replying to you

[finite rock]

it has been changed again, it used to be better I thought

[sick lance]

It looks better now.

[finite rock]

It’s same 😭😭

[sick lance]

You looking on mobile or something?

[finite rock]

Nothing has changed for me. On mobile too

Keep refreshing the result is same

[sand trench]

hmmmm would think this is not an A/B test but oh well

[sick lance]

Might need to be non mobile

Or it's been changed back?

[finite rock]

Im on PC ))::

[near hawk]

Yea, it's been changed back for time being

[finite rock]

Oh, okaay

[eager marsh]

After a long hiatus I’m gonna come back to THM king of the hill

[sick lance]

More like King of the rootkits, amirite.

[naive violet]

Heh worked for me in mobile

Shame they've reverted it

[acoustic vault]

Hey u guys planning on bringing the videos as a replacement for theory stuff or what?

[sick lance]

Yeah, new design looks better

[naive violet]

I'm more happy that created rooms finally worked

[sick lance]

Oh yeah, all your rooms will be properly credited to the authors

[lone thistle]

[sand trench]

https://www.youtube.com/watch?v=gzLPa6NbcrE

very very very informative video

with tips on things we can do to make it less problematic

[karmic geyser]

refresh...

[sand trench]

and with that this shadow whadows goes for meepity moopity beep boops to sleep sloops too

[wooden totem]

Quite a few mental and physical health problems can cause feeling tired all the time. Didnt watch the video but im assuming its not about that

[sand trench]

it is about how our brain has not evolved much past the cave man state and how all the decissions we make in daily life drains our energy
and some tips and tricks to help you be less tired

like taking a siesta

or coffee naps

or planning out what to wear each day and what to eat each day in advance on a set day in the week

[strong gull]

hmm interesting, I noticed productivity and tiredness are also heavily related to emotions too

[rapid merlin]

https://www.who.int/news/item/28-05-2019-burn-out-an-occupational-phenomenon-international-classification-of-diseases

[umbral bay]

The new version will be back soon.™️

[molten pagoda]

hey, i have a suite of "LS0tLi0t" words arranged by groups of 4 letters

the only words that i see repeated are

LS0t

Li0t

LS0K

LS0g

does that remember anyone any sort of code?

[chilly veldt]

best not to spam chat

[molten pagoda]

sorry didnt mean to

[naive violet]

Yep, but is this from a CTF? Tryhackme or elsewhere?

[molten pagoda]

yeah this is from a ctf

i peeked at the correction

[naive violet]

Please don't ask for help with active CTFs here

[molten pagoda]

oh ok sorry

[rocky mulch]

what are CTFs ?

[wooden totem]

capture the flag

[eager marsh]

Oh boy do I have a story for you

[molten pagoda]

lmao this starts well

[rocky mulch]

we can play that in tryhackme ? 🙂

[eager marsh]

Yup

[eager marsh]

They grow up so fast

[wooden totem]

the story of a guy who purchased nitro

[eager marsh]

I didn’t

Someone got it for me

Also there’s no need to be hostile, we’re all friends here

[rocky mulch]

how do you play CTFs guys ? 🤔

[molten pagoda]

It's always hard to see them get their first flag on their own...
but we have to let them go dont we?

[eager marsh]

Yes we do

[eager marsh]

You can always look on ctftime to find stuff on

[molten pagoda]

you go into room search, you can sort it by either ctf or walkthrough

or other websites

guys i think i did something bad... I found some easy rooms

[eager marsh]

Yuh huh?

[molten pagoda]

so long story short, i am arriving in top 1% in something like 15 mins

[eager marsh]

Congratulations

[molten pagoda]

it's not fairly earned, i was at 16k6 points 3 hours ago

i am now at 18k

[rocky mulch]

👍

[eager marsh]

Well damn now I gotta catch up

[molten pagoda]

lmao

you must be so fart away

[eager marsh]

I’m sitting at arround 20k

[molten pagoda]

nice

how long have you been here?

[eager marsh]

Uhh I just joined this server

But I’ve been doing THM for a while now

[molten pagoda]

yeah yeah i meant thm

how long? more like 1 year or 1 month?

[eager marsh]

Like a year or so

[molten pagoda]

ok that's nice

u doing more ctfs?

[eager marsh]

I hope so

[molten pagoda]

it's quite cool i think

plus you come to a point where u already did most of the lessons at one point

[eager marsh]

I got super tired of THM boxes

And I wanted something new

But this red team capstone challenge reignited my fire

[opal crest]

Is this a place to ask if anyone knows good places that sell Warzone esp?

[molten pagoda]

what challenge?

[molten pagoda]

i kind of understand

but i think if you stay focused u just dont see the time pass

[sick lance]

No, it's not.

[molten pagoda]

during summer i was tired of it too but i got back to it and i got nice again

[eager marsh]

You banned em didn’t you🤣

[crude stump]

Prolly left

[north badger]

That was hands down my favourite thing to do with my sub, shame my uni doesn’t provide one 🥲

[molten pagoda]

what was the capstone challenge?

*red team capstone

[north badger]

If you have premium it’s a network you can work your way through with is almost a bit like a corporate type network with some basic AV to test your skills

[eager marsh]

It’s a great box

Sorry network

[molten pagoda]

oh damn

im having a hard time on simple networks, i think its too hard for me yet

[quasi hedge]

Does anybody else see the updated profile in THM #announcements

Mine's the old layout

[boreal scarab]

@sand trench are you eepy seepy deepy weepy?

Oh yah... 2 hours ago

[thorny fulcrum]

made a list to all rooms for the different badges hope it helps someone
https://www.reddit.com/r/tryhackme/comments/1fyknsi/links_to_all_badges_rooms/

[rapid merlin]

@quasi hedge I saw the updated profile earlier, now it appears back to the original style

[quasi hedge]

Weird

[rapid merlin]

the new look seems quite nice

[molten sky]

whoever runs the thm linkedin should announce that it's canceled because 1,263 is in fact =/= to 1

[karmic geyser]

https://media.discordapp.net/attachments/680459914828972076/1292843928403312761/image.png?ex=6705363c&is=6703e4bc&hm=b0c450e2dc628cf454fc8626267244a8852219d5820c1976aa3062ea7c45cc8e&=&format=webp&quality=lossless&width=858&height=671

[molten sky]

👀

[crude stump]

No way

Gotta be lying

[karmic geyser]

That's skidy's screenshot.

[arctic ruin]

I’m a beginner in cybersecurity. Please someone help me understand better

[distant gazelle]

have you been doing rooms

[karmic geyser]

#general message

Start that way on THM.

[arctic ruin]

I just joined discord for this

[sharp citrus]

TryHackMe's Website

You should know our website by now!

​

https://tryhackme.com/

TryHackMe Socials · Oct 7, 2024, 11:23 PM

[karmic geyser]

check this out then.

Register on the site and start learning. 🙂

[arctic ruin]

I’m registered already

[rapid merlin]

#start-here

[boreal scarab]

When you got a laptop stand for your lap... then a laptop fan cooler sitting ontop of that, then your gaming laptop.....

https://tenor.com/view/stonks-up-stongs-meme-stocks-gif-15715298

[arctic ruin]

How do I change my computer to Linux operating system

[rapid merlin]

@arctic ruin you might not need to https://help.tryhackme.com/en/articles/6721845-the-attackbox-explained

[crude stump]

You don’t need to. Tryhackme has already made VMs with all that. It’s called the attackbox

It’s generally not a good idea to do stuff on your main computer because you can mess it up or accidentally infect it depending on what you are doing

[wooden totem]

I remembered something lol. Once (years ago) I downloaded like 4 tools with the same name from different random sources and the last one was the actual tool. The first ones just opened black screen and closed after a second when I tried running them. I have no idea what that did

[rapid merlin]

a good reason to verify signatures on binaries prior to install

or pulling code to build, that the tag is signed

[crude stump]

When the cmd line opens for a split second ☠️

[wooden totem]

Thats completely normal, it happens every time I start my pc

[rapid merlin]

when the system fan speeds up to 100% upon inserting an unknown USB device 😄

[wooden totem]

(it's for checking updates of my startup apps, forgot which ones shows the actual window i think its powertoys)

[wooden totem]

Its installing drivers

https://cdn.discordapp.com/emojis/1110599222098657291.webp?size=48&quality=lossless&name=Whitewclueless

[wooden totem]

nvm its for an app that uses github to update

[molten sky]

calculator opens

[crude stump]

ah shi..

[molten sky]

how dare someone put math on my computer

[crude stump]

Damn calculator

[rapid merlin]

lol

[teal wharf]

i dont think is the best emplacement ..

[boreal scarab]

@blazing granite Cheers

[molten sky]

wat dat

[boreal scarab]

Whiskey!

Maple Whiskey!

[molten sky]

ya dont say

[teal wharf]

Stronger with you

[boreal scarab]

[molten sky]

i thought it was orange juice

[boreal scarab]

Coule be if you believe in it!

[molten sky]

what whiskey

[boreal scarab]

Maple whiskey

[molten sky]

crown?

[boreal scarab]

That's a DM kinda question for this particular bottle

[molten sky]

based on maple im guessing crown

[boreal scarab]

You'd be so wrong

I'm DMing

[molten sky]

Rule 7!

8 *

mods pls ban

[boreal scarab]

https://tenor.com/view/banduk-dikhana-aparshakti-khurana-dhokha-round-d-corner-trigger-ghumana-goli-maarne-ki-tayari-gif-26626619

[wooden totem]

is this a reference to win 7 dll exploit

[molten sky]

my memory is only good for about 2 and a half weeks so idk what one you're referring to ---- but mostly alluding to just generic process injection

using legitimate processes to hide yourself

[wooden totem]

yeah I think its that one then

[crude stump]

Evil calculator 😈

When the calculator is spicy

[wooden totem]

https://tenor.com/view/cat-side-eye-disappointed-disgusted-kitten-gif-8893462376520600758

[crude stump]

😭

[molten sky]

mods asleep? 👀

[crude stump]

Party time 🥳 🎈

[rapid merlin]

we are unsupervised? 🙈

[blazing granite]

What is it?

[boreal scarab]

Whiskey

[molten sky]

avacado mash

[blazing granite]

I figured that much by the colour, but what kind 🙂

[boreal scarab]

Maple whiskey

[boreal scarab]

No silly. It's broccoli cheddar soup

[blazing granite]

Maple Bird Dog Whiskey?

[blazing granite]

you healthy nut 😛

[boreal scarab]

Oh you'll never get it

[molten sky]

looking into stock prices to build a new desk

black walnut or white oak if one of the two? the walnut is always nice but wondering if I should go light for the space

[blazing granite]

I'm dark by nature so I'd go with black walnut 😂

[molten sky]

i'm leaning hard in that direction

kinda wanna do a live edge but also don't wanna spend the extra money for this one

[distant gazelle]

so um

no?

[umbral bay]

🤔

[eager marsh]

When the

[south egret]

Test

[rough barn]

New social engineering attack just dropped

[umbral bay]

admin:notadmin

[gritty fern]

if(admin){
admin
}

[halcyon dune]

🤔

[fading perch]

what is bug bounty platform?

[clear jackal]

Have you conducted a query utilizing your favorite search engine?

[wooden totem]

MoolyFTW

[tulip heath]

I faced the same error and I can't generate ticket! 😭😭

I need my money back!

[versed veldt]

hey guys, quick question...I was just wanting to practice what I learned on a real machine. Can I attack my own host pc if I'm using same machine as a VM to attack from?

[sick lance]

It's not a great idea to attack your host ....

[tulip heath]

@sick lance , I sent email to support team of TryHackMe. I couldn't generate ticket and I faced the same issue.

[chilly veldt]

Morning

[fading perch]

hi guys, can you explaning to me, how to ssh works?

[fading perch]

I don't understand the function of public key, private key and authorized key

[simple valve]

Private and public keys are a broader concept

[rough barn]

I'm not entirely sure but for CTF it seems to be id_rsa you need

and id_rsa.pub can be looked in to find username

[simple valve]

An issue with symmetric keys (think Caesar cipher, SHA256, etc.) is that the key is the same for encryption and decryption. So when you give others the same key to decrypt your data, it becomes an issue because then others can decrypt data for other people. So what if we make symmetric keys, one for each person we talk to? Then you have the issue of handling so many keys.

Public key cryptography tries to make a solution here by using the idea of public and private keys.

[rough barn]

The virgin GUI file explorer: "W-what is a .pub? Nothing is installed that can open microsoft publisher files!".

The Chad terminal cat: "Here is the contents of that file".

[wooden totem]

public keys shared with anyone, encrypt messages/verify signatures
private keys kept hidden, decrypt messages or create signatures
authorized keys is list of public keys stored on a server that grants access and stuff without password

is this good answer, someone comment

[simple valve]

With public key, you have two keys. The private and public key. Let’s say you have Bob and Alice.

Bob wants to encrypt data to send to Alice. What Bob can do is encrypt it with Alice’s public key. Once Alice receives the data, they can use their own private key to decrypt it.

[fading perch]

So if the public key has been added to the ssh server, the client does not need to enter the username and password?

[wooden totem]

yes

[simple valve]

The way this fixes the issue of key maintenance is that you can provide your public key which is entirely safe and using your own private key for decryption.

[fading perch]

what happens in 1 server has 2 of the same public keys, for example user1 and root have the same pub key

[wooden totem]

how did you come up with bob and alice lmao

[simple valve]

It’s a commonly used scenario and names when explaining asymmetric encryption

[fading perch]

what user will be used by the client?

[wooden totem]

I just say user 1 or user 2, easier to keep track

idk maybe i have adhd lol

[fading perch]

client login using random user?

[wooden totem]

I just usually say user and then "number" to refer to end/start of connections cus I visualize numbers more

[fading perch]

it seems like the system is complicated

[wooden totem]

omg it is, I was looking at some example diagrams just now and saw a bunch of alices, I never noticed before

[naive violet]

Alice, Bob, A and B

[naive violet]

You do have to specify the username.

[wooden totem]

even a and b is kinda throwing me off, I like numbers

[wooden totem]

oh mb i missed a question, ty ninja

[fading perch]

if the client does not enter a username and just executes the command "ssh [hostname]"

[naive violet]

Then it takes your current username on the box you're running the command on

[chilly veldt]

root

[rigid cypress]

picturesque

[rugged iron]

Hey, what time of day are you most productive?

[rough barn]

Evening

Actually let me rephrase. What possible interview could bro have got that will ask this when he has zero clue.

[sick lance]

Common for entry Pentesting positions.

I've faced 1 or 2 of 'em.

But I am removin' the screenshot due to the command in it