general

[rough barn]

But like how did he get an interview for a pentester without knowing anything

[sick lance]

You don't need to know x,y,z to apply for the position.

You'd be surprised how many people blindly apply to jobs on LinkedIn.

[frigid geyser]

Good morning guys

[rough barn]

Surely he should have been filtered out at the application stage

[tawny ruin]

It could also be a generic security related software engineering position

Or they might have thought it’s one

[arctic cradle]

was the new profile update reverted for some reason?

the dashboard page of the user on THM website is what I refer to

[rapid merlin]

Morning 🙂

[rough barn]

My dashboard has always been the same

Oh I saw they changed the icons for the learning paths tho

[arctic cradle]

that's weird, yesterday I had the new UI layout

today it's back to the old one

[rough barn]

nah I mean I never got a new one, I've seen the same one all this time

[arctic cradle]

oh

[rough barn]

One thing I've been wondering about since I signed up for the paid tier is my "premium roadmap" is missing

[arctic cradle]

premium roadmap?

the only roadmap I followed was @sand trench her roadmap is one of the best and well constructed imo

you can check it in the pinned posts

[rough barn]

So before I signed up there were two roadmaps under "learning roadmap" "free" and "premium" now I only have free

So I've been doing the "learning paths" instead

[arctic cradle]

hmm, I may be wrong but I think you're referring to free/premium rooms

paths include both free and premium rooms so now that you're a subscriber, the premium one don't show but are included in your account

but take my information with a grain of salt

[rough barn]

I've done pre-security, and introduction to cyber security, I'm now doing complete beginner

Yeah if you don't sub you can't fully finish pre-security

I don't think anyway, cause some rooms aint free

[arctic cradle]

I think you can but it's just the free rooms that you complete

don't know how the cerficiate thing works as a free member

but the premium is so worth it and it's not that expensive as well

[rough barn]

Other places that were teaching this were selling their courses for several hundred dollars. 14 dollars a month is a good price

[arctic cradle]

definitely, yup

guys, Scrubz is offline

https://media.discordapp.net/attachments/300431835979055104/1181518489710768178/ezgif-4-6e8e986715-1.gif

nah I'm kidding, don't do that

I just like the gif

[rough barn]

Yeah like I first thought this might be something fun to learn when I saw stuff from Occupytheweb. And bought his book. But damn several hundred dollars to sub to his site.

I don't think tryhackme teaches scada hacking though. But is that a skill you really need?

[rancid sky]

https://wearelegion.medium.com/the-rise-and-fall-of-alphabay-a-tale-of-the-dark-web-4204e0f8ed2f

[slender scaffold]

🤔

[sick lance]

Yeah.

[arctic cradle]

that's sad, it was looking really neat, is the reason public why it's been reverted? if not, are we going to see it ever again? I really enjoyed the new layout

[sick lance]

It's going to be refined slightly, I think.

[arctic cradle]

sweet

[rigid cypress]

Someone to chat with

😆

[median swift]

hello guys, i have a question that id like to ask?!

[devout palm]

Just ask (:

[slender scaffold]

https://tenor.com/view/luluwpp-gif-25648350

[sturdy oar]

ayo, dose anyone have any interesting 'hacktivities' like meetups, cyber spaces, open CTF's at amsterdam this week?

[slender scaffold]

This is such a quiet time

[loud marlin]

oh no wrong one

[steel aspen]

Are there any good CTF videos to watch

[blissful mirage]

hi guys, new to tryhackme and discord. I have a question regarding the Cyber Kill Chain room - task 5. The question says - Can you provide the name for a cyberattack targeting a software vulnerability that is unknown to the antivirus or software vendors? - The answer is "Zero-day Exploit" right? it keeps saying it is incorrect?

[pliant cairn]

my shift ended like 15 min ago but still have people scheduling calls till an hr later

[chilly veldt]

oof

[pliant cairn]

i know a few who schedule post my shift hours after asking my shift end time

[atomic kernel]

Anybody up

[slender scaffold]

I am trying to finish a report

[pliant cairn]

annoying fr

[atomic kernel]

Need a lil help

[slender scaffold]

So I can sleep

Ask and maybe ye shall receive

[atomic kernel]

I wanna play koth but every time I try to join it says koth are for intermediate level

What rooms should I complete to play koth

[slender scaffold]

Try checking the asterisks that show characters needed for the answer and if it matches up. Otherwise #room-help

[blissful mirage]

you're a star feath3rz - thanks

[slender scaffold]

Anyone can play that has an experience level of intermediate or advanced ( an option you can update on your profile )

Tbf I never played with the option. But that might be a way to start finding answers

[pliant cairn]

i thought it was level cap

[slender scaffold]

It might. I’m just saying what the faq says 🙂 so time to find out when can you update your experience level.

Or if anyone can update it no matter their exp

[pliant cairn]

im getting exhausted :/ not feeling like doing anything

and bored.

[slender scaffold]

I’m avoiding my report

I shouldn’t do this

[pliant cairn]

yea even im avoiding my work.

i want to go for a vacation tbh

[tired moth]

getting a job in cybersecurity would be easy if blackhats didnt suck at phishing

[pliant cairn]

blackhats dont phish. scammers phish.

[tired moth]

@outer rivet is a scammer

[pliant cairn]

we only have good ppl in thm

[tired moth]

he asked me if i wanted nitro for free

[slender scaffold]

Advise a mod.

[outer rivet]

Bing bongos wizard

[slender scaffold]

https://tenor.com/view/reality-real-what-is-happening-gif-14099466

[glacial oasis]

yo guyz

[tired moth]

thm is easy man i did this in 1 week top1%

[glacial oasis]

this website tryhackme has many courses
and i wanna learn the basic networking for managing a ubuntu server and make it secure
Which one should i opt for??

[slender scaffold]

;_; I suck at networking… I dunno the answer

[glacial oasis]

i just want to know the best course for me

[outer rivet]

For real

?

[glacial oasis]

thnx bro

can i do these all in a vm of kali linux?

[tired moth]

no lol

[tired moth]

correct

[glacial oasis]

ok thnx bro

[tired moth]

goodluck with your journey bro

[slender scaffold]

love this bro atmosphere

[outer rivet]

Look at Simon @karmic geyser

God level

[tired moth]

gg simon

[slender scaffold]

yay god level

[chilly veldt]

👀

[tired moth]

im top 1% on htb academy

[karmic geyser]

GGs

[slender scaffold]

Nice job

[tired moth]

thats offensive!

[karmic geyser]

I love you bing.

[slender scaffold]

=_=

[karmic geyser]

Sorry, I forgot I was in thm.

[tired moth]

is thischat always full of bullies

[karmic geyser]

Thanks, but wru?

[twin ridge]

Gave +1 Rep to @outer rivet (current: #492 - 10)

[karmic geyser]

No, that's htb.

[slender scaffold]

!8ball should I finish this report?

[chilly veldt]

yes

[slender scaffold]

Magical Bella

[tired moth]

https://cdn.discordapp.com/attachments/1276443031481876542/1276459093443215411/image0.gif

https://media.discordapp.net/attachments/988634493973839883/1109652527605100585/togif-4.gif

[chilly veldt]

cause I need to do the same

[twin ridge]

Should I finish this report?
:8ball: Without a doubt

[slender scaffold]

Gawd Robocop

[steel aspen]

I really don't like SQL

[tired moth]

https://tenor.com/view/reasonsimbroke-samuel-l-jackson-samuel-jackson-jurassic-park-hacker-gif-24139258

[chilly veldt]

have you tried noSQL instead?

[slender scaffold]

Yesssss nosql

[steel aspen]

information schema, group concat .schemata and table column enumeration is annoying to learn lol

[chilly veldt]

@jagged yarrow wish I could join, but I am flying to spain the 15th 😄

and also from Denmark

[glacial oasis]

yo guyz

i have a issue in vm

where can i ask?

[pliant cairn]

google

[chilly veldt]

what kind of issue

[lone thistle]

I will be there 👀 #announcements message

[tired moth]

https://tenor.com/view/anonymous-кот-котанонимус-cat-anonymus-gif-25989295

[steel aspen]

Wheres an easy way to learn SQL? Both SQL rooms and I'm still not there with it

[chilly veldt]

f you, now I really want to join

[steel aspen]

Even watched a John Hammond video

[slender scaffold]

I want to be there

[tired moth]

youre gonna need much more than just a few rooms 💀

[slender scaffold]

Sql is good with practice

[ashen parrot]

Hi guys

[restive harness]

yo

[slender scaffold]

o/

[south egret]

\o

[restive harness]

|o|

[slender scaffold]

orz

[steel aspen]

I feel like I've done a lot of rooms on it but still can't get it

Just a few of the command syntax I don't get

[boreal scarab]

@slender scaffold BOOPS!

https://tenor.com/view/boop-gif-19921685

[slender scaffold]

Why are you awake!!!

[steel aspen]

Ones above I mentioned being the main ones

[boreal scarab]

It's 7 AM

[sick lance]

I might go to London

[boreal scarab]

Why are YOU awake?

[boreal scarab]

For free pizza?

[slender scaffold]

I’m doing a report I was supposed to finish before boss wake ups

[steel aspen]

It's the magnificent seven
Ring ring, it's 7am

[boreal scarab]

https://tenor.com/view/wow-gif-20411229

[slender scaffold]

Though I might put in my two weeks this week

[boreal scarab]

Can I go back to bed? Reeee

[boreal scarab]

👀

[slender scaffold]

I got a job offer as a Threat Analyst ❤️

[steel aspen]

Surely you understand the reference

[boreal scarab]

Get up and everything is cracking

[sick lance]

That's one reason

[boreal scarab]

🥳🥳🥳🥳🥳🥳🥳🥳

[slender scaffold]

No more software engineering!!! \o/

[steel aspen]

I mean free pizza is free pizzza c'mon

[boreal scarab]

Too early, no coffee

[steel aspen]

I'd go to it but I'm literally halfway around the world

[tender lynx]

free pizza

[steel aspen]

It's from a song by The Clash

[slender scaffold]

What ;_;

Is it cause of Milton?

Nuuu

[tired moth]

https://cdn.discordapp.com/emojis/1290181355182751746.webp?size=128&quality=lossless

[slender scaffold]

Yeah it looks terrible

[steel aspen]

I'm stalking Ben CMNatic, not a bad song bro listening to

[sick lance]

Although, my project has shifted...

It's now more red teamed

[slender scaffold]

Yikes

[vagrant terrace]

I want to ask about the basic policy of Wirewall

[slender scaffold]

The brick needs new

[pliant cairn]

firewall?

[tired moth]

did your hous get hacked

[vagrant terrace]

May I?

no no

I'm working as a Vulnerability Assessment Consultant

[tired moth]

brutforce vuln

[steel aspen]

Has someone seen heck's profile on this server? Is his bio thing his or legit??

Hopefully not a physical firewall

[steel aspen]

He's 0xGod, green

[floral turtle]

Hi guys! Do you know where or how to get started on decoding a message in base 16 string?

[steel aspen]

I feel like one of the mods should be seeing this

[steel aspen]

Is it CTF?

[vagrant terrace]

The inbound policy is set to 'deny all,' and shouldn't the outbound policy allow traffic from a specified IP to any destination IP?

[tired moth]

https://tenor.com/view/levar-burton-reading-rainbow-google-that-shit-google-gif-15062945

[floral turtle]

It's a file dump, a friend aent it to me

[pliant cairn]

cyberchef if you are more of quick solution. or just do the math on the bytes

[boreal scarab]

I booped the snoot!

[steel aspen]

Then yeah Google lol plenty of resources

[tired moth]

you what

[steel aspen]

I forget how to do that

[boreal scarab]

Booped the snoot

[vagrant terrace]

Can I get the anwer?

[floral turtle]

I did google and it didn't help

[tired moth]

do you want to get banned

[boreal scarab]

https://tenor.com/view/boop-snoot-boop-the-snoot-nose-boop-nose-gif-17934128

[steel aspen]

You're not a mod right?

[boreal scarab]

I am a booster

[steel aspen]

Oh true yeah

[pliant cairn]

its entirely upto the default config. I work with a lot of firewalls. which firewall are you talking about?

[tired moth]

and a meme stealer!!!!!!

[errant fossil]

https://tenor.com/view/boost-shiba-gif-19079752

[pliant cairn]

me too now that i think about it. lol

[boreal scarab]

https://tenor.com/view/steal-this-is-mine-run-gif-15431338

[vagrant terrace]

For the general Firewall

policy.

[tired moth]

beerise is a meme stealer

[vagrant terrace]

At home

[tired moth]

[vagrant terrace]

or at comapy

company

[tired moth]

https://cdn.discordapp.com/emojis/1292120866703806514.gif?size=128&quality=lossless

[slender scaffold]

Sending syn and not getting acks lol

[steel aspen]

hecks profile says something weird like suspected to be a part of something bad

[boreal scarab]

NO SNACKS?!?!?!?!?!

[steel aspen]

UDP? kinda..

[slender scaffold]

No snacks!!

[vagrant terrace]

If the inbound is set to 'deny all' and the outbound policy allows internal IPs to reach any destination IP, won't that enable communication with the outside?

[tired moth]

If the inbound is set to 'deny all' and the outbound policy allows internal IPs to reach any destination IP, won't that enable communication with the outside?

[drifting mural]

Hi rise

[pliant cairn]

generally if the firewall has multiple interfaces that has for datapath, Natting etc., then the inbound datapath interface(or pool) has deny all by default. And for outbound it should have application default. Im talking wrt pfsense or palo alto as an example.

[steel aspen]

Can a mod reply? I'm confused on a user

[eager marsh]

Good day

[tired moth]

IM A MOD WHAT CAN I DO FOR U

[eager marsh]

I’m not a mod

And neither is he

[pliant cairn]

yes, egress only. not ingress

[drifting mural]

Hi vader

[eager marsh]

Good day to you

[drifting mural]

Hi caustic

[tired moth]

generally if the firewall has multiple interfaces that has for datapath, Natting etc., then the inbound datapath interface(or pool) has deny all by default. And for outbound it should have application default. Im talking wrt pfsense or palo alto as an example.

[steel aspen]

Scrubs are u around to contact a mod?

[south egret]

Nah I think its a meme

-# This user is under surveillance by the US FBI • Learn More

[steel aspen]

Oh

Looked legit cos it

[eager marsh]

Tsu are you playing with markdown?

[steel aspen]

Has a thing to hover over

[slender scaffold]

Chat sure is weird at this time…

[steel aspen]

Can u see the user?

[south egret]

what markdown are u talking about

[pliant cairn]

eh?

[vagrant terrace]

I don't know exactly what the customer Company's external firewall is, but my colleagues say that since the inbound is set to 'ALL DENY,' no matter how the outbound is configured, there is no internet connection.

[steel aspen]

try 3am nzst lol

[eager marsh]

Please tell me you’re joking

[slender scaffold]

True >_<

[steel aspen]

Oh nvm it is a aprt of the normal bio it's just changed I think

[boreal scarab]

Yo hoe

[eager marsh]

Is Ra hard at all for anyone?

[pliant cairn]

thats not how it works. egress or ingress is bi-directional. policies are for who initiates the connection.

[tired moth]

I don't know exactly what the customer Company's external firewall is, but my colleagues say that since the inbound is set to 'ALL DENY,' no matter how the outbound is configured, there is no internet connection.

[slender scaffold]

hoe and a bottle of rum

[pliant cairn]

why are you copy pasting messages?

@tired moth

[tired moth]

https://tenor.com/view/joe-biden-biden-presidential-debate-huh-confused-gif-4375529952616887689

[slender scaffold]

I’m gonna guess age is a factor in the answer

[vagrant terrace]

I understand that in the firewalls I know, inbound and outbound policies are bidirectional, but even if the inbound policy is set to 'ALL DENY,' the outbound policy can still allow internal IPs to communicate with the internet.

I said it to my colleauges, but they said I'm wrong.

[tired moth]

https://tenor.com/view/dancing-duck-dance-duck-duck-ooontz-dance-gif-10943740227711557279

[pliant cairn]

the number of times i had to explain this in my office to my colleagues and clients is awfully a lot. sometimes its better to just ask them to learn how tcp works 😂

[slender scaffold]

Wire shark :3 get them receipts

[pliant cairn]

in a client meeting i was furious and said. "i aint got time to teach how networks work. please learn your fundamentals and come back with your queries."

[vagrant terrace]

SO... I'm right that?

[sick lance]

You're not a mod.

[pliant cairn]

yes sir.

[vagrant terrace]

Thank you mate.

[twin ridge]

Gave +1 Rep to @pliant cairn (current: #532 - 9)

[karmic geyser]

@tired moth Salam bingbong9

[sick lance]

We don't help with external ctfs

[karmic geyser]

Bro, you have nitro?

[sick lance]

Is this for work?

[floral turtle]

Oh... I see...

[vagrant terrace]

Yeah... Part of?

[sick lance]

Please don't ask for help in here, speak to a senior.

Let's not take random advice from random members.

[vagrant terrace]

They are Seniors...

[fair dawn]

[vagrant terrace]

They don't know the Inbound and Outbound policy of Firewall...

[neon merlin]

Is there a shortcut to open a ticket without having to talk to the bot?

[sick lance]

The speak to somebody who does.

[sick lance]

Email support.

[slender scaffold]

@rapid merlin hopefully nothing bad happens with Milton :/

Been watching it cause a friend I know is also in the path

[neon merlin]

Alright I'll email. I thought it would be easier through the site though to prove my identity

[vagrant terrace]

8 is all of my company, but nobody knows correctly..... I thought I was wrong....

[eager marsh]

The ability to speak does not often make you intelligent

[sick lance]

I think they'd ask to email that

[sick lance]

Then please dont ask in here, we don't help with work material

[rose spruce]

learnt from experience

[vagrant terrace]

It helped A lot.

[eager marsh]

I hope you will be pleased with my very first room I am developing

[sick lance]

Yes, but going forward.

[slender scaffold]

it’s a morning o_o in THM 😂

Or afternoon :3 I mean whichever

_< yikes

[tardy finch]

@whole yew are there roles for certifications you passed ? I see you have some certificate related roles

[slender scaffold]

I’ve seen them roles

[tardy finch]

How do I get them ?

[slender scaffold]

I think it’s interesting it’s traveling East o_o

[tardy finch]

Got a few certs under my belt

[slender scaffold]

Might need a mod to answer that one lol. I don’t wanna give incorrect info

I’ve seen a lot come from the Atlantic side mostly and then rip up the coast

Just like where I’m at.. hurricanes come from the east and move toward us west.

[tardy finch]

Its hitting central/northern Florida by the gulf coast from what I read

[sick lance]

No you're right

They need to show a mod some sort of proof.

[boreal scarab]

https://tenor.com/view/jack-sparrow-rhum-is-good-pirates-of-the-caribbean-johnny-depp-gif-13219281

[sick lance]

Hello!

[steel aspen]

Shoot I forgot to delete message, sorry got confused

Confused has been settled though

Confusion

[sick lance]

I'll have a look

Nah,.can't see it

[steel aspen]

Nah I think it was just the bio but it looked different from the last time I saw it

Don't remember it having a hover thing.

[sick lance]

Moving forward, if you have a concern or issue with another user, you can DM a mod without asking

[steel aspen]

Okay thank you

[dawn crater]

Anyone have a thm discount voucher for me🙂

[crude stump]

No

Begging doesn’t get you one

[south egret]

what does

[crude stump]

Waiting for a community giveaway and trying your luck for one

[silver sky]

Contribution to the community/giveaways

[hollow mortar]

gm

[steel aspen]

Night all

[boreal scarab]

Morning!

[steel aspen]

1:49am is morning yes 😎

Gotta wake up at 7 😬

[boreal scarab]

No, it's 8:50 AM. There's only 1 time zone!

[steel aspen]

That sounds like a usa thing to say 🇺🇸😝

[boreal scarab]

MURICA

[slender scaffold]

https://tenor.com/view/hurricane-gif-17764895662849801388

[crude stump]

Land of the free 🦅

https://tenor.com/view/infinitestratos-0814-attack-gif-14776258

[slender scaffold]

uhh….. o_o

[sonic oriole]

What is the flag that you obtained by following along
whats the answer to this?

[south egret]

If this is about a thm room go here #room-help

[twin ridge]

I finished my report. Are you proud of me? ❤️
:8ball: You may rely on it

[slender scaffold]

Awwww ❤️ love you too Robocop

[sick lance]

No, your friend is doing something illegal, we won't be helping you.

Obviously don't click their links

[reef roost]

One message removed from a suspended account.

One message removed from a suspended account.

[boreal scarab]

Go bed

Nap time

[reef roost]

One message removed from a suspended account.

[karmic geyser]

MERICA

[split plover]

Understandable that you don't help with this kinda stuff. But saying that it's illegal doesn't make any sense. People do malware development and malware analysis. Some people can do this for research and learning purposes. Don't PUT illegal stamp on if something involves any kinda malware lmao.

[boreal scarab]

News flash. Scrubz does malware analysis

[novel ingot]

the thing here is that there's no way to check to be sure that's really legal so most of the time no answer is the answer

[clear jackal]

If the message got removed, I'm assuming it contained some form of legally ambiguous language in either GB or the US

CFAA is overly broad

[boreal scarab]

Can I get this "CFAA" translated?

Nvm

I big dumb.... barely had coffee

[primal kestrel]

another tuesday another 3-5 thm rooms

[empty moss]

Hi all, quick question. What's the rules/guidelines around producing write-ups for CTFs on THM? Thanks in advance 🙂

[south egret]

his friend is making a spyware that can locate him in real time and he was asking if there are any alternatives to ngrok(?). im guessing they were tryna tinker and learn how these stuffs work but as what evix said theres no way to be sure

[sharp citrus]

Managing your rooms

Article Link

https://help.tryhackme.com/en/articles/6633579-managing-your-rooms

Oct 8, 2024, 1:20 PM

[south egret]

bruh i dont know how to use this bot

[crimson ledge]

Better to let it learn how to use you

[glad marsh]

hey guys anyone has problems with starting attackbox now? Getting VM_Parsing_Error

[severe condor]

[sick lance]

You're friend is creating spyware you spy on you.

I doubt this is for work l.

[sick lance]

#site-support

[sick lance]

Creation of such tools is illegal in the UK under the Computer Misuse act.

[primal kestrel]

ai elon pfp cherry on top

so funny

and without reading the original message it seems like, "hey my 'friend' is making this malware and is looking for some help 😉 "

[delicate kite]

https://tenor.com/view/breaking-bad-walter-walter-white-sus-face-app-gif-23028540

[sick lance]

Creation of malware should never be done "for learning". That's the worst sort of excuse.

And the police won't take too kindly to it.

[inland vault]

hi

[reef roost]

One message removed from a suspended account.

[obsidian lava]

how to hack wifi password tell me

[cosmic pendant]

lol

[crude stump]

Double whammy

[cosmic pendant]

"oh Mighty GOogle"

[sick lance]

I already spoken to you about this

[inland vault]

u want to hack ur wifi password

wow

bro

[half island]

Hey, quick question, can we sponsor someone who wants to purchase premium ?

[sick lance]

You can buy a voucher for them.

[sharp citrus]

Redeeming a voucher

Article Link

https://help.tryhackme.com/en/articles/7310236-redeeming-a-voucher

Oct 8, 2024, 1:44 PM

[sick lance]

Nope, that's redemption

https://tryhackme.com/subscriptions

[half island]

In my memory, we had 5% reduction over the swag shop. This does not exist anymore ?

[rapid merlin]

Good afternoon

[primal kestrel]

do y'all think this is ethical

i trust

[rapid merlin]

I trust no one 😂

[crude stump]

Tbh idk if it disappears or somthing but way back I remember getting it but idk how to check if it’s actually lowering the price

[sick lance]

Yes, you need to email support

They will give you a code.

[sick lance]

Good policy.

[crude stump]

Ethical is in bold caps. I think that’s enough to trust someone

[hardy totem]

I’m trying to connect to my tryhack it showing white blank screen

[sick lance]

#site-support

[hardy totem]

Who can explain that to me please

[rapid merlin]

You might want to ask in #site-support

[hardy totem]

Yea my tryhack it showing white blank screen

[crude stump]

According to my calculations, the mass of Tryhackme is 0.67g, if you approximately split the Tryhackme atom in two it should work

[sick lance]

We seen that the first time, which is why I asked you to to go #site-support

[tired moth]

your not a mod

[sick lance]

I am a mod.

[tired moth]

your a mod

[crude stump]

https://tenor.com/view/lil-yachty-drake-gif-21712801

[sick lance]

Correct, you're not a mod. 🙂

[tired moth]

https://tenor.com/view/african-kid-africa-thinking-calculate-hmm-gif-14333456070094555182

[hardy totem]

What’s a mod?

[crude stump]

Take a good guess

[tired moth]

https://tenor.com/view/disco-party-gif-19245240

[hardy totem]

https://tenor.com/view/discord-mod-discord-dancing-guy-cringe-gif-3173535023585082338

[crude stump]

Failed embezzlement

[torpid furnace]

Hey

[hardy totem]

Hello

[sick lance]

Is that you?

[tired moth]

no im not a mod

[tired moth]

youre a mod

[sick lance]

Ah, you're implying all mods are good dancers

[crude stump]

I think they are

There just jealous

[sick lance]

Nah, I'm not.

[sinful moon]

lol I would love to attend the in person THM event… if it wasn’t an ocean away. Oh well

[umbral bay]

New THM profile page is back. 😎

[sick lance]

Woooo

#room-help

[rapid merlin]

I dance

I dance around the flat

[silent forge]

i like song u recommend

Maybe My Soulmate Died 🎶

EPskypemusic

[primal kestrel]

is using a tool like ZAP's spider (& ajax spider) against bug bounty rules?

[delicate kite]

Flyings an option

[crude stump]

Plane tickets be expensive

[sick lance]

It can be l.

Check the bounty

[sinful moon]

Thanks but I don’t need to fly to the UK just for Pizza and a QA lol

[crude stump]

Is bottom right hasbulla

[arctic cradle]

think so, though I have no clue who that guy is

but fits the meme perfectly well

[tropic sigil]

@jagged yarrow

[mossy river]

Is there anything I can help with? :)

[tropic sigil]

How does he have animated profile picture with nitro basic 🤧??

wondering

[mossy river]

I’m assuming it’s because he hasn’t cancelled the plan from since the change

[arctic cradle]

but nitro basic allows you to set an animated profile picture I believe?

[tropic sigil]

It doesn't

[errant hawk]

Hi can you add « Jordaah » on your discord friendlist he had issue for joining the server

[arctic cradle]

oh, right, I thought you meant nitro classic, I didn't even know "basic" actually existed, lol

[tropic sigil]

lol

[arctic cradle]

his avatar is very cute, though

I can watch it all the time

[sick lance]

Can you DM me their user id?

Jabba may be busy

[silver sky]

Today's chest pump is unreal 💪

[tropic sigil]

Agreed

[tawny ruin]

I thought that's an elevator, not a chest pump 🤔

[misty kiln]

I am playing CTF name all in one.. I saw LFI vulnerability. I tried /etc/passwd it worked fine.. But when I tried ../../../../wp-config.php it not showing anything.. But after php://filter/convert.base64 encode it show..why I can't directly print it out?

[arctic cradle]

elevator? isn't that a mirror?

[tawny ruin]

True.

[south egret]

i thought that was a refrigerator handle

[arctic cradle]

it definitely is

[pearl raven]

Walk in freezer with a mirror.

[south egret]

where tf is my guy pumping irons then

[arctic cradle]

guy? what guy

[sick lance]

Which CTF are you doing?

[misty kiln]

All in one @sick lance

[sick lance]

Is it active?

[misty kiln]

I wonder what is the difference btw them. I asked to chatgpt he saying.. It is sensitive file so that's why I can't directly access.. But /etc/passed is also sensitive file right then how I can't access wp-config.php file directly

[misty kiln]

Yes.

[arctic cradle]

do you mean this guy?

[pliant cairn]

eww javascript

[steel aspen]

Can't help in active ctfs

[sick lance]

Then we can't help, sorry

[misty kiln]

What you mean by active...?

[arctic cradle]

typeof NaN; // ~ "number"
NaN === NaN; // ~ false

[rocky mulch]

is it allowed in the rules to watch for guides when stuck in CTFs ? (or it's just you can't share infos)

[rapid merlin]

https://www.youtube.com/watch?v=Uo3cL4nrGOk

😄

[arctic cradle]

it's OK to watch guides especially if there are even write-ups for them, I don't see how that breaks the rules

[arctic cradle]

been watching those videos for a year now, that JS one is one of the best and the latest one with production in the office

[steel aspen]

Is the ctf still going?

[misty kiln]

No

[rocky mulch]

👍

[arctic cradle]

it amazes me that some people still use their phone instead of smashing the print screen integrated function in Windows

[misty kiln]

There is writeup available.. But they don't mention how it works..

[misty kiln]

I am not logged discord in my system

[sick lance]

#room-help for thm please.

[south egret]

where did u get my photo

[pliant cairn]

use jquery? what are you 5? we use jjquery

[rapid merlin]

yes 😄 https://jjquery.io/

[pliant cairn]

this shows how confused they were

and they still are

[patent fern]

What is the name of the service that lists Systems Internals as the manufacturer?

[pliant cairn]

and everyone who uses js are

[karmic geyser]

@tired moth 👀

[finite rock]

portswigger

[sick lance]

Now it's apparent...

[void zodiac]

Discord got banned in Russia 😶

[unreal cave]

hey guys. Anyone got darkmode on THM? there's this one extension for it on the chrome web store buy doesn't work. Any reccs?

[rapid merlin]

I simply use Redshift and my browser settings

[steep wren]

Guys i have a problem while i'm installing Parrot OS in virtualbox. Whenever i "Install Parrot" and it says "Done" and it restart my system it gets me back to "Try / install" and it's like an infinite loop. I tried everything i've seen online and nothing seems to work. Is there anything else u can suggest guys?

[unreal cave]

neat, darkreader works well too apparently

[void zodiac]

Try a virtual machine with parrot installed

They offer this option on the website

[steep wren]

damn true, i completely forgot about that one. Thanks!

[twin ridge]

Gave +1 Rep to @void zodiac (current: #2261 - 1)

[void zodiac]

Can I dm?

[steep wren]

yea of course

[boreal scarab]

https://tenor.com/view/send-help-help-help-me-help-me-im-poor-bad-situation-gif-15097358

[open shale]

Who provided the auxiliary/scanner/ssh/ssh_login module? what is the info command? please.

[rapid merlin]

Mine must be gone 😂

I always think maybe mines blocked lmao because my block on my other account was so long

[silent forge]

nice any other one !

or just send me playlist

[rapid merlin]

I recently unlinked my Spotify

[silent forge]

😕 okey

[rapid merlin]

You know each playlist literally consists of four songs. I am the sort of person where if I find a song I like I never stop listening to it

[silent forge]

same XD

for me my playlist is likes songs

[rapid merlin]

I have different ones, different ones for different moods

[silent forge]

so it's complicated in your case

[rapid merlin]

Yeah

[silent forge]

glad to meet u 😌 👌

[lone thistle]

9.2mb of this picture is caused by W I D E

eye spy a pocket mask...good good 😄

[sour lance]

Hello

[rapid merlin]

You too

[restive harness]

[sick lance]

Oh, dlc for Diablo 4 is out today

[novel sky]

guys does thm subscription renews automatically?

[sick lance]

Yes

[novel sky]

the "subscription" tab is showing as if i dont have a subscription active... weird

[sick lance]

When did it set to renew?

[novel sky]

i dont recall tbh

i just today wanted to cancel it and i saw it like this

[hushed adder]

I'm feeling really weird, like I want to get into TryHackMe and start working but at the same time I do not want to as soon as I start working I end up getting distracted by another site every couple of minutes. Is there anyone else like this? how can I get past this issue?

[shadow tiger]

Yeah, it's very relatable and quite normal. I try to get my posture right (active sitting posture- so sit with a straight back or try standing if you have the supplies) and avoid distractions such as 100 open tabs, Discord, WhatsApp et cetera. Won't work everytime, but it works sometimes

[hushed adder]

I totally feel you on that. Lately I've noticed that whenever I sit crooked I end up putting my feet on the table and before I know it I find myself just watching a movie😂

[shadow tiger]

Yeah, it really is counterproductive

But procrastination is definitely part of it, so you don't have to avoid it altogether

[hushed adder]

I'll try to fix my posture and get to work after a nice shower andthanks for your input

[shadow tiger]

No biggie

[timber galleon]

Hello

do any of you know allot about port 1801?

[high mulch]

you need something in specific or an overall explaination?

[clear jackal]

What are you trying to?

[celest valve]

If i start using free try hack me what learning path should i start going or where should i start to learn pentesting or offensive security or some red team things

[rapid merlin]

It was warm outside right, so I dropped my coat at home. Sits down in the library and it POURS outside 🙃

[clear jackal]

#start-here

[pliant cairn]

youtube did something with the ads.

generally ad block works. but now i guess they made it unskippable

[worn thorn]

they bake it into the video stream

[pliant cairn]

yeah pretty much

but im glad i found an amazing ad

[normal fable]

hey yall.. I'm still alive.. just been very very busy with life. 🙂 Hope yall are doing well.

[timber galleon]

do u know how msmq works? and do you understand code to a socket for injection for the queuejumper vuln? i need it revised

[clear jackal]

What's this for?

[timber galleon]

queuejumper

its for pen testing i cant find one for rce so i tried making a payload which downloads it from my http server and it worked but i need to target the port socket itself and not the web page

[clear jackal]

No, what's it for as what is the work being done for? School, work, etc?

[timber galleon]

penetration testing

for work, trying to understand more about the message queueing service itself and how it communicates so i can eventually design a poc

[clear jackal]

Ah, ask your seniors

[timber galleon]

eish

thats the issue

no seniors

there is no poc for this? how can i ask them, i dont think you understand...im designing a poc and need the code revised by someone who knows exactly how the service communicates...

[clear jackal]

This may be getting into advanced topics

[timber galleon]

is there a channel for this?

[clear jackal]

#exploit-and-mal-studies

[timber galleon]

ahhh no access

[clear jackal]

I asked for mod determination on where this belongs

[sick lance]

Ah, here is James, I was about to start, but James will be better than I.

[sharp citrus]

@timber galleon

Discord: What are the advanced channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Oct 8, 2024, 5:56 PM

[sick lance]

Or was...

I hope you didn't stop typing because I started @naive violet

[celest valve]

But like should i start going the free learning roadmap or is there another free path to go

[sick lance]

The article shadow linked will show you requirements, however this sort of chat goes in that channel;, and ideally it's not a good idea to get support from random people on the internet regarding work, there must be someone you can get support from?

[grave bobcat]

Hi bros

[sick lance]

hi sisters

[grave bobcat]

I am a man

not your sister 😅

[bleak bluff]

are ranking percantages removed from site?

[sick lance]

Funnily enough, I'm not your brother... 😅

[grave bobcat]

why It would ?

[hushed adder]

yooo

[grave bobcat]

no you are my brother 👍

🌹

[bleak bluff]

cuz i can not clearly see my percantage that im in

[hushed adder]

Can u send a pic

[bleak bluff]

yea

[grave bobcat]

I think you can see it on the right site above in the dashbord !

Is it hiden ?

[timber galleon]

making POCs and securing the internet is what everyone should do

proving vulnerabilitys are more of a goal th

[naive violet]

Don't ask for help with work here

[bleak bluff]

can you send me a screenshot of it

[celest valve]

Lol

[sick lance]

PoC chat is accepted in the advanced channel, work chat should not be done on this server.

[timber galleon]

its not for work... its for penetration testing... its designing a poc

[grave bobcat]

sure

[timber galleon]

alright homie, thanks for the help

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2848)

[celest valve]

Whats poc

[timber galleon]

proof of concept

[celest valve]

Wat

[sick lance]

for work, trying to understand more about the message queueing service itself and how it communicates so i can eventually design a poc

[sick lance]

No, it's on your profile.

[timber galleon]

no stress, no need to quote me

[timber galleon]

A PoC (Proof of Concept) is a demonstration that proves a vulnerability can be exploited.

[boreal scarab]

I broke TrueNAS Scale shell!

[grave bobcat]

bros

[remote breach]

hey people halfway through the redteaming path but feeling a bit lost as what to do after i dont have a formal cyber education and was considering doing the ceh exam but its way outta my price range any and all advice will be appreciated

[grave bobcat]

i think we need a dark mode on the site

[remote breach]

feel free to dm or @ me : )

[sand fractal]

guys i need help some guy doxing my family in school and he gives information and make fun could anyone help me get revenge please?

[sick lance]

Please contact your school.

[sand fractal]

bro

i need real revenge

i aint no shit snich

[sick lance]

"Real revenge" would be illegal, and not advised.

[sand fractal]

i just need to doxx him back tha's all

not hack

[sick lance]

Doxxing is illegal...

[sand fractal]

he did dox

[muted nebula]

what did you do to them?

[sand fractal]

what?

[muted nebula]

go to the police

[sick lance]

Can you please not get involved.

[muted nebula]

yes

[boreal scarab]

We're not helping. Doxxing is illegal. Please go talk to your principal, or the local authorities.

[sand fractal]

bro

[sick lance]

If you keep asking, I may mute you/remove you from the community, as you're not here for ethical, legal reasons.

[twin cipher]

how do i be haxxor

[boreal scarab]

[sand fractal]

the group says tryhackme

[boreal scarab]

Yes... as in https://tryhackme.com

[sick lance]

The group promotes ethical hacking, and cyber security.

what you're wanting help with, is neither of those.

[drifting mural]

Big eyes

[sand fractal]

what about public info?

[sick lance]

Releasing info in a threatening manner is illegal.

[celest valve]

Im pro haxxer in scol with this

https://youtube.com/shorts/Pjb5ppO2V_M?feature=shared

[sick lance]

Please drop the subject, now.

[sand fractal]

no just public , like oculd anyone go to jail for doxxing publc info

could

[placid sand]

I have a question that I'm hoping y'all may be able to answer for me, if I'm receiving threats from someone via snapchat is there a way to reverse look up what number they're attached to? Or any other information? Also I apologize if this isn't the right group, I don't really know who else to ask

[naive violet]

Contact the police

[placid sand]

If I only have a username then what other information can I provide them?

[boreal scarab]

There's a term for it. And we, for the ethical side of gathering info, do not call it "doxxing". "Doxxing" we consider the unethical side of info gathering.

[naive violet]

You don't need any

[naive violet]

We moved on - please leave this kind of thing to the mods too.

[celest valve]

Sigma

[celest valve]

.

[boreal scarab]

[rapid merlin]

what is more fun event wise, blackhat or defcon?

[naive violet]

Defcon for sure

[celest valve]

Wow 5 people tapped my messge 😎

So popular

[warped summit]

dude we are here to study not help u do illegal stuff😭🙏🏼

[naive violet]

Blackhat is more corporate aimed, defcon is more hacker-culture aimed

[night quail]

Hi

[naive violet]

Just a shame it was cringe

[celest valve]

Np

[finite rock]

Hello

[tired moth]

hi

[celest valve]

Hi

[finite rock]

Hi

[rapid merlin]

👋

[tired moth]

https://cdn.discordapp.com/emojis/1292120866703806514.gif?size=128&quality=lossless

who wants to

[celest valve]

Here very boring people yeah?

[tired moth]

why is there so much mod abuse in thm

[finite rock]

idk, i don't see anywhere?

[rapid merlin]

😎

[finite rock]

HTB goes crazy lol

[rapid merlin]

I’ve not been in htb in ages

[mossy river]

Hey, if you have any feedback about our moderation, feel from to drop me a DM! Always happy to take on feedback to improve our community team:)

[rough gorge]

No new room today?! 👀
New schedule gets me confused 😅

[crude stump]

Sigma

[rapid merlin]

Are any of them in the Uk

[naive violet]

You get bsides and 44con in the UK

Some regional defcon or owasp chapters, a couple of 2600 clubs

[muted nebula]

yeah was waiting for one, was disappointment lmao

[tired moth]

https://tenor.com/view/anonymous-кот-котанонимус-cat-anonymus-gif-25989295

[eager marsh]

Bsides is also in Austin

Never been tho

[rough gorge]

maybe tomorrow,
last week and the week before was a bit tough but also nice to have so much new stuff 🙂

[muted nebula]

yeah.
I also think there gonna be one tomorrow XD

[sick lance]

Tuesday - Friday is the days, unless they've changed.

[rough gorge]

yea, last week there was one on wednesday 20:00 CEST (pyrat)
and the week before on tuesday (cheese ctf) and wednesday (the london bridge) I think both 20:00 CEST.
Got a confirmation, that there has been something adjusted until january.

[woven prairie]

hello can anyone help me with virtualbox?

[sick lance]

What do you need help with?

[static sierra]

i need staff to help me

i didnt recieve my monthly hacker badge and i was #1 all countries yet i received nth

[crude stump]

What is a monthly hacker badge

[static sierra]

hacking into machines more than anyone for this month

i spent countless hours trying to achieve this badge yet i didnt receive yet this is not smth i can tolerate as a user who have been promised to with rewards

[sick lance]

I've already asked you to contact support.

[static sierra]

and i did reach out to them

[sick lance]

Then wait for them to reply.

[static sierra]

scrubz u dont understand how painful it is when u spend countless nights and hours dedicating urself to that specific platform which is in this case thm just to acheive a reward that would make me feel better about my dedication its like u study 4y in BCs then the college shut down for war or wtv

[crude stump]

🥳

[celest valve]

But at least u learned much hacking

[sick lance]

Staff won't make it go faster in here, you'll get the badge, just wait patiently.

[crude stump]

Smart man right here

[rapid merlin]

winter has arrived i'm waiting for my badge O o

How to get badge help others and support them easy pizy 😉

[static sierra]

ur with the same case as well?

im talking about monthly hacker badge my man

[rapid merlin]

I'm talking about staff role 🙆

[static sierra]

gl with it seven

may u get what u deserve

<33

[sick lance]

You need to be THM staff, to get that.

[rapid merlin]

Yep how to become staff then 🫂

[gloomy hamlet]

pog

[chilly veldt]

apply for a position

[rapid merlin]

How ?

I'm not done anything great so far to apply, may be i could try

[chilly veldt]

https://tryhackme.notion.site/Work-at-TryHackMe-6bd665d7bd3448348d04fa06f4b4ef66

[rapid merlin]

It's for direct job request

[chilly veldt]

yeah, apply for a job, get a job, become staff

[sick lance]

All people in this server with Staff role are actually staff.

[rapid merlin]

It's different here haa i need to get job first then staff

Is there anyway i could become staff like helping others and supporting them

[chilly veldt]

nope

staff is staff employees of the website

[rapid merlin]

Cho Chad

[chilly veldt]

there's community mentors, which are people who have helped a lot around in the community, they are NOT employeed by thm

[rapid merlin]

But in htb it's different xd ! i thought same would be apply here

[chilly veldt]

htb staff is also employeed by the company

[crude stump]

I mean you can’t be staff but you could try to become a mentor

[rapid merlin]

They are community contributors i forgot that

[pine belfry]

ahh i wouldve loved to travel to london and help but too much going on lol

[chilly veldt]

yes, that's the same as community mentors here

[rapid merlin]

Your right 🙂

[chilly veldt]

I should go back to writing my project

almost done

[crude stump]

I would die

[chilly veldt]

this has taken us a week to write

[rapid merlin]

I could write a lot I reckon

[sand fractal]

back

[shut hawk]

https://tenor.com/view/kermit-the-frog-typing-busy-typewriter-writing-gif-16527898

[rapid merlin]

I am very speedy typer with my eyes closed too 😂

I think it’s because people type how they talk and I talk so fast. People ask me if I can sing rap god

[chilly veldt]

this is a report on redesigning a whole network for a municipality

[rapid merlin]

Sounds interesting

[chilly veldt]

yeah, it is, but when you have 2.5 weeks total for the project it gets spicy

[oak tangle]

I took a break from tryhackme for a little while, and now I can't remember what command I used in windows to transfer a payload from the attackbox?

[eager marsh]

So did you compromise said windows host or is it your pc you wanna transfer to

[oak tangle]

the windows host is a virtual machine provided by the room

[eager marsh]

Oh well in that case you might wanna use IEX to transfer it

Setup a Python http server and grab the file from your attack box

[oak tangle]

I know I used the python server. I just can't remember the Powershell command I used.

What is IEX anyway?

[eager marsh]

Invoke Expression

Gimme a sec I’ll send you the command you have to use

[pearl raven]

Invoke Expressions

[sick lance]

Depending on the file, you perhaps shouldn't take it.

[crude stump]

I read depression for some reason

[eager marsh]

Invoke-Depression

[pearl raven]

lol

[oak tangle]

I just found it; it was invoke-webrequest. Thank you anyway!

[eager marsh]

Oh my bad

Glad to see you ended up getting though

[twin ridge]

Gave 1 Rep to omegawarton (current: #2261 - 1)

[void zodiac]

Access to networks for 7 days of streak.

What is this access? What does it give?

[sinful moon]

Access to some of the network based rooms for free like Throwback

aka instead of just one machine, it’s a whole network you’re looking at and moving laterally though

[void zodiac]

Sounds really cool

[sinful moon]

mhmm it is for sure

It’s normally just for subscribers, but yeah with a 7 day streak, you can access some of those for free

[sick lance]

Throwback is not included in the list, nor is it still available.

Throwback was a seperate purchase.

[sinful moon]

Ah ouch, shows how long it’s been since I’ve checked up on this, but fair I’ve been a sub for years

[void zodiac]

So no benefits for me since I have premium

[sick lance]

Nah, subs get auto access.

[sand trench]

shadow was one of the last few people to ever complete throwback network

[sick lance]

Oh god.

£4.6K

[sand trench]

HOLY MEEPs

[pearl raven]

lulz

[sand trench]

anyone wanna burn holes in their wallets???

[sick lance]

And I get to try and break it. 😂

[sand trench]

with a hammer???

[sick lance]

Maybe.

[olive portal]

Hello guy

[pearl raven]

On sale over here:

[sick lance]

I have my hons project to do involving Fortinet products.

It's going to be fun.

[pearl raven]

Ah cool

[sick lance]

Anyone using a .io domain?

https://every.to/p/the-disappearance-of-an-internet-domain

[eager marsh]

Is throwback even still available

Oh

I guess it isn’t

[sick lance]

Throwback is not included in the list, nor is it still available

[sinful moon]

Yeah that was already clarified for me by… yep

it just was the last time I was working on the Networks so shows you how long that’s been lol

[devout palm]

https://tenor.com/view/cat-chat-cat-fall-hello-chat-cat-gif-24961178

[sick lance]

Red team best network

[sinful moon]

hah interesting, reminds me loosely of the .mobi situation the other month

[sand trench]

meep moops time for sleep sloops to the beep boops

[pearl raven]

Night Shadow

[shut hawk]

honestly I doubt they'd just remove it like that

way too many important domains

[boreal gull]

i actually did not, i’ve been here since 2019. i just checked message history and i got here before you did! i took a lil hiatus back then

Unless you count Slack

The original community Slack not the employee one

[shut hawk]

Took you 7 months to check the message history

[boreal gull]

glad the world is waking up to ownership of domains

[boreal gull]

i was stalking Swafox to see if they were okay hah

when ur as old as me you’ve gotta dig through the history to see how people ended up 👵

[shut hawk]

https://tenor.com/view/sure-grandma-lets-get-you-to-bed-yes-grandma-gif-6683134261581381982

Cloudstrike is coming to my uni to do some recruiting 🗿

[boreal gull]

i provably joined just before summer 2019 in slack i think, back when they ran their first uni CTF

[boreal gull]

there will be no tech people there probably

when they come to unis it’s mostly sales in my experience :/

[pallid lotus]

I know you didn't -- I remember you being brought in 😆

[boreal gull]

it’s always sales for big corps

[boreal gull]

if you’re talking about midship yes

[shut hawk]

☹️

[boreal gull]

mod shop

mod shop

stupid auto correct

[pallid lotus]

Si

[shut hawk]

No potential job opportunity?

[pallid lotus]

Do you... want one?

[boreal gull]

definitely not i’m afraid especially when their company is doing so badly

[shut hawk]

Honestly I'd take anything

[boreal gull]

i’m sorry to say

[devout palm]

https://tenor.com/view/ltg-british-food-mods-low-tier-god-gif-9108075214677777615

[boreal gull]

maybe you will be their scapegoat

[shut hawk]

I would single handley raise their stocks

[boreal gull]

yeah probably by your father investing in the company

[shut hawk]

By removing all regex

[boreal gull]

you should do this using regex

i can make 10

on tiktok

idk 10 of what

but i can get 10

[shut hawk]

/[^a-zA-Z ]/g

[boreal scarab]

https://www.techspot.com/news/105025-lunar-lake-allegedly-smokes-z1-extreme-handheld-gaming.html

Mmmm USB4 2.0

[crude stump]

What’s with the weed symbol

[boreal scarab]

USB4 2.0

420

https://tenor.com/view/sassy-sass-spell-it-out-peter-hale-teen-wolf-gif-17852877

[crude stump]

Yeah I’m confused

[chilly veldt]

my fingers, they hurt

[shut hawk]

Lookup the meaning of 420

[chilly veldt]

lmao

[umbral bay]

Words of wisdom?

[chilly veldt]

network segmentation, 802.1x, redundancy and implementation of SSL VPN

[umbral bay]

Does it pass the generative AI check? 😄

[chilly veldt]

some of the topics at least on how to redesign a network to make it more secure and redundant

[chilly veldt]

most likely, cause we have been sitting and writing it by hand 😄

[umbral bay]

Next time try to write in cursive, it flows better. 😎

[chilly veldt]

it's written with a municipality network in focus, we had to take their current enterprise network and redesign everything to make it better and make a report on how to implement different design features, and security features

[wooden totem]

average of 5 characters per word

[crude stump]

Ah

So that’s why

It’s a joke on 420 in the name

[chilly veldt]

286 servers segmented into respectful networks with different levels of security, with Vlans/subnets and portgroups for said network, all hooked up to firewalls, making sure all the network traffic is monitored and restricted

welcome to school projects

[sick lance]

Come on Tim, she's not that old.

[chilly veldt]

I actually do know how to write cursive

[wooden totem]

I tried reading my notes from school when I was writing everything in cursive, half of the words are unrecognizable

[chilly veldt]

luckily we are 4 people in this group, so I haven't written everything

[wooden totem]

average group project

[eternal timber]

Imagine trying to read Russian in cursive

[chilly veldt]

yup, I was planning on taking on this project by myself, but I didn't get a company to team up with before it was too late

[wooden totem]

Jarvis, post the russian cursive image from reddit

[crude stump]

You can’t read that?

It clearly says “drink vodka…”

[eternal timber]

My eyes

[barren spade]

Hi everyone

[undone citrus]

😭

[undone citrus]

Hello

[pine belfry]

i could eat british food day in day out

chat give me a roast rn

[devout palm]

https://tenor.com/view/english-breakfast-sandwich-food-breakfast-sandwich-breakfast-sandwich-gif-8361904612263620247

[pine belfry]

on another note, does anyone have any resources i can use to learn more about $PATH since its interesting and common in privesc

(that looks heavenly)

[undone citrus]

British food ain’t that bag ngl

[undone citrus]

Do you think the premium try back me is worth it ?

[pine belfry]

Absolutely

Less fiddling with VMs, more rooms, and you get to support them

[undone citrus]

Alr ty would you choose it over something like Codecademy

[twin ridge]

Gave +1 Rep to @pine belfry (current: #2261 - 1)

[undone citrus]

Idk even know why I have code academy tbh I want to learn cybersecurity not much about coding

[pine belfry]

Yeah defo, im not too sure what codeacademy is but if youre learning about cyber this is one of (if not the best) resource for learning about it

[undone citrus]

Alr thanks dude

[pine belfry]

im on a cybersecurity course and i go to a lot of networking events and this is one of the top things that is mentioned there without a doubt

anytime!

[undone citrus]

O how do you find networking events ?

Any local news or news papers

Cause I want to get involved I have work experience coming up and I need to find a company to take me

[pine belfry]

I usually use something called "eventbrite" and search for cyber events there, im from bristol in the UK and there is loads of stuff around here. tomorrow theres a cybersecurity convention, and i just go to those and talk to as many people as possible

would 100000000% reccomend getting linkedin too if you havent already

[barren spade]

https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats microsoft got your back

[undone citrus]

Ya I recently actually got that

[pine belfry]

much appreciated 🙏

[undone citrus]

I’m your countries neighbour lol but ye thank you ill check that out

[pine belfry]

ah great, definitely check it out, theres loads of events and everyones in the same boat so i wouldnt worry too much or be nervous about it

(also they usually offer free pizza and drinks which is very enticing)

[undone citrus]

O alr nice

[undone citrus]

lol thanks again appreciate it

[pine belfry]

youre good! happy jobhunting :)

[karmic geyser]

POV: CTF

[boreal scarab]

@chilly veldt send help

SOS

[chilly veldt]

reboot

[boreal scarab]

Did... 5 timnes, even updated TrueNAS

[chilly veldt]

skill issue

[boreal scarab]

[barren spade]

fix file permissions and force upgrade

check helm status first tho

[jovial wave]

do info rooms award points?

[eager marsh]

I dont think they do

[jovial wave]

sadge

[jovial wave]

oh wait they do but only the ones that ask actual questions not the read and complete ones

[sinful moon]

That is correct, empty “answers” never give you points, only questions that require an answer

[boreal scarab]

It was a kubernetes thing, called in the big dogs to help, Emma. Thanks again @hot cairn !

[twin ridge]

Gave +1 Rep to @barren spade (current: #2261 - 1)

[boreal scarab]

Fuck you bot

[pearl raven]

lmao

[hot cairn]

it kept forcing it to be that, and was group owned by netdata???

so kubectl edit deploy fixes it good enough lol

[boreal scarab]

So long as VPN is good, and able to access the webUI + other apps can talk to it, all that matters 😄

[eternal timber]

Hell o

[boreal scarab]

@loud marlin https://cocoapress.com/products/cocoa-press-2-3d-chocolate-printer-diy-kit

[boreal scarab]

[boreal scarab]

Also @glass nest

[eternal timber]

What’s good

[boreal scarab]

Got one of my TrueNAS Scale apps back up and working properly, since Emma helped me get it all up 😄

[eternal timber]

Nice

[crude stump]

That would be smart for a bakery

[rapid merlin]

program it to make chocolate bars with a QR code on them

[winter swallow]

Hi

[rapid merlin]

hello

[winter swallow]

How's everyone doing

[rapid merlin]

doing good here, music and ☕

[winter swallow]

Nice!

Good to hear

[boreal scarab]

https://tenor.com/view/weee-gif-22113548

[boreal scarab]

Man...... now I wanna watch Kiki's Delivery Service, such an amazing movie

[winter swallow]

Sooo I'm actually a newbie when it comes to cyber security but I'd like to join the industry later so can anyone suggest some resources if possible and also um a roadmap to entry level jobs in cybersecurity 👀

[rapid merlin]

OWASP Top 10 - 2021 Task 11: I successfully discovered cute cat pictures

[regal forge]

Hello folks,
I am stuck at a certain problem which is regarding XSS, if someone could give me an explanation that would be highly appreciated 🙂

Given the following JavaScript snippet of a page running on HTTPS, explain how a Network adversary could execute an arbitrary payload in the origin of the HTTPS site. You can assume that the site is not sending an HSTS header and the attacker cannot get a valid certificate for the site. Also, explain how this could be addressed (the script_host should still be stored on the client and your solution must not rely on HSTS).

function writeAd() { // getCookie extracts the value belonging to that key var script_host = getCookie('script_host'); var script = document.createElement("script"); script.src = script_host + "/ad.js"; document.body.appendChild(script); } writeAd();

[sinful moon]

The real question is, is this some of your course work? I’d just be curious what this is for

[regal forge]

Yes, this is one of the sample question to prepare for semester exam.

[smoky granite]

hey

how are you doing

[sinful moon]

Then there’s some potential ethical concerns with us helping you with this unfortunatetly

That being said, it’s not all that hard

[smoky granite]

hey

[sinful moon]

yes heya

[regal forge]

can you just say if I am going in the right direction?
What I think is an attacker can host a malicious JS file with the name as ad.js and host it on his own domain and then set the cookie with the url to his domain.

[smoky granite]

how are you doing

[sinful moon]

lol you are not wrong. But I would advise you to consult with your classmates or study group rather than here.

[sinful moon]

quite sleepy

we’re glad to help with these sorta questions but it gets tricky when it’s homework/study material

[smoky granite]

oh ok if i may ask where are you from

[outer rivet]

Love the icon in website

[coral phoenix]

Hello chat, mods, and staff

[outer rivet]

hi hOW YOU KNOW simon and seadris

[coral phoenix]

I know everybody

[sinful moon]

I live on the planet Earth in the solar system, local group, thank you for asking

lol not quite the same local group as I had in mind, but… potentially

[neon merlin]

Planet Earth? Don't post my dox

[sinful moon]

lol

also happens to be one of my fave documentaries so I can’t complain there

[coral phoenix]

When is THM going to release certificates?

[karmic geyser]

Never

[karmic geyser]

Hello the wild brath.