general

[karmic geyser]

Bro started being active in thm

[coral phoenix]

I've been looking at the member list, some real's in here

Where is everyone

[pearl raven]

Usually kinda dead after about 7 US.

[coral phoenix]

Ah I see

[jagged mirage]

wait why cant i use emojis here

[coral phoenix]

I bet its popping at 3AM US

Like absolutely POPPIN

[karmic geyser]

You need to verify.

[karmic geyser]

As always we gonna start with nmap

[pearl raven]

lol

[coral phoenix]

In lieu of certs I just put Top 1% THM on my resume, it's worked out very well

[karmic geyser]

You got it where i'm coming from?

[coral phoenix]

still waiting on THM certs

I refuse to use other platforms

[karmic geyser]

me too brath

[karmic geyser]

you got your OSCP via doing thm?

[crude stump]

Ooh oh nice

For what exactly.

[coral phoenix]

I did all the THM content, bought the OSCP exam (I never did the course) and passed no issue

Taking CRTO now, again, just THM

This platform has it all

[outer rivet]

Bro I am building activedirectory

[coral phoenix]

Which THM room teaches how to build AD?

[crude stump]

The Active Directory room

[lilac urchin]

Hi
I want to learn more about anomalous network behavior
How is it being detected today? what are the signatures and rules to detect anomalies?

Anyone have idea?

[crude stump]

I mean that’s kinda broad but take a look at yara rules

[lilac urchin]

I want to know like for example yara rules, what is the input to the yara rule.

Flow:
Is it a network packet that comes ----> yara rule checks?

I'm most interested on the input that the detection or behavior or pattern check happens on

[coarse plover]

Hey all anyone online available for a quick question about the buffer overflow prep module ?

[clear jackal]

For help with THM content, #room-help is the best place to receive assistance

[frail locust]

May I ask why no to other certs? Such as Hack the Box?

[coral phoenix]

There isnt anything on Hack The Box that I cant learn on THM, right?

[frail locust]

Nope they dont even have blue teams tho

Which brings to blue team labs but meh

[coral phoenix]

Yeah! TryHackMe number one!

[earnest fog]

HTB premium is bs. Paid 18$ and got to 41.04% progress in my chosen path with only 20 modules. THM? 105 done (and more are available) rooms on premium which costs less. ❤️

[rustic canopy]

I want to add my opinion. TryHackMe is better than HTB. I came from HTB and now knowing the THM Platform that's really cool!! Especially for Blue Team Aspirants. TryHackMe has SOC Level 1 and Level 2. (Which both those two are completely highly righ in content, actually better than courses of companies like TCM)

❤️TryHackMe Forever❤️

[earnest fog]

The weird part is that they have academy and app. Separate subscriptions, but I was told to give academy a try first and then go spend my money on app. 🤷‍♂️

[rustic canopy]

Yeah, it's a true fact. I think TryHackMe offers a lot of content all-in-one at the same price than HTB ’academy’ and ’app’.
You'r right bro

(I just failed in Written Grammar. Using cell XD)

that's why it's edited

: )

[rapid merlin]

hello world

[coarse plover]

Hello

https://tenor.com/view/office-milton-sitting-waiting-gif-10654068083597262833

https://tenor.com/view/imindanger-danger-ralph-gif-22328804

[earnest fog]

https://tenor.com/view/sup-baby-yoda-grogu-gif-25118331

[neon merlin]

If we're doing tryhackme vs HTB, I like tryhackme's website better but HTBs VPN works for me and THM's doesn't. So using the attackbox makes everything slower.

I think this might be a UDP vs TCP thing? HTB has the option to use a TCP config for VPN. THM does not.

[coral phoenix]

Interesting!

[neon merlin]

Also I like how HTB have set up their vulnerable website tasks. You don't need to connect to their VPN to access them. They have public IPs. While with THM I need to spawn attackbox and open firefox on attackbox in a VM that I'm running in Firefox and it's all very meta.

[gray sonnet]

THM has those too

Just not in the older rooms

[fading perch]

apache, nginx or openlitespeed?

[rapid merlin]

any coupon codes for premium?

[earnest fog]

Never had an issue with THM VPN.
On HTB I had many issues with submitting flags due to poor sanitization. But I do agree - some publicly available websites used for modules makes more sense, rather than spawning VMs.

[earnest fog]

I prefer openlitespeed + LSCache.

[simple valve]

I like nginx idk why

[earnest fog]

used nginx before, loved it. switched to ols last year.

[neon merlin]

Yeah it's definitely a UDP vs TCP thing. I can't connect to HTBs UDP VPN either.

Although while I can connect to HTB's TCP VPN I can't ping their targets today so can't actually do anything

[sick lance]

#site-support if you would like support with the VPN please.

[neon merlin]

Learned more about computers in a month than I have in my entire life with THM tho

And I started using computers in Windows 3.1 days.

[gray sonnet]

Morning everyone

[warm grotto]

G'day.

[finite rock]

[neon merlin]

How long would you say you need to be learning to do some of the easy practice machines like fowsniff? I'm halfway through complete beginner and Jr Pen tester.

[warm grotto]

I'd say if you've got an idea on how everything works, then you can roll up your sleeves and give'r.

[chilly veldt]

Morning

[south egret]

#room-help

[wooden totem]

It appears that my body has worse virus protection than my pc lol

[vapid spear]

Good Morning Everyone

[warm grotto]

G'day.

[steady pewter]

good morning everyone..sure haven't been here in..2 months?

[rapid merlin]

Morning

☺️

[remote swallow]

Average THM user behavior

[rapid merlin]

How is everyone ?

[remote swallow]

Good , WBU

[tough widget]

So today we find out which ten are selected for personalized support?

[void zodiac]

I feel like my government is testing what software and tools people use to bypass blocked sites. Blocked Instagram, blocked YouTube, blocked Discord yesterday

And for example, before I could access sites by bypassing DPI. Now nobody can

Do you think the government could do it just to gain information on what people do to bypass and how they react?

[remote swallow]

I think it's more like a control thing , They can filter stuff and block stuff when shit goes down the drain

[void zodiac]

That's what I meant, that they collect information for this reason, to know how to act when things are... Messed up

[remote swallow]

It's about time before every government will adopt the same habbit and it will become a norm

[void zodiac]

Unfortunately

The hilarious thing that Discord was used by the military for communication 😶 and ofc they have troubles now

I will never understand this logic

[remote swallow]

TOR was created by US navy soo they have there ways

[coral phoenix]

I learned about TOR on MR robot episode 1!

[remote swallow]

https://tenor.com/view/shit-leslie-jordan-gif-11334450875675318506

[sick lance]

Obvious troll, is obvious.

[void zodiac]

It's just that a hilarious government causes problems for soldiers while promoting the war

[remote swallow]

Governments don't care about you or the soliders : Lolz

[sick lance]

Can we please leave politics and such out this server.

[remote swallow]

Not politics

[sick lance]

You uh, just mentioned the word government.

[remote swallow]

Yeah i din't mention which government

[sick lance]

Irrelevant..

The subject as a while has a blanket ban.

[remote swallow]

So what should we talk about my good sir

[void zodiac]

I didn't even mention the county or anything, just complaining about useless domain blocking

[coral phoenix]

Why am i a troll? Okay fair, I was.

[sick lance]

You've been here long enough...

[void zodiac]

And just suggested what it is done for

[sick lance]

Please see my previous post.

[coral phoenix]

Ohhhh

Scrubz is the fun police I keep hearing about

[sick lance]

Ah, you must be another frequent user of HackTheBox.

[coral phoenix]

Well, im certainly in the more professional discords. I wouldn't claim Hack The Box is one of them.

[arctic cradle]

Scrubz is my father and if you have issues with him, you have issues with me

[coral phoenix]

Regardless, you are a bit infamous

[arctic cradle]

[sick lance]

You're in HackTheBox....

No point lying about it...

[coral phoenix]

I can see mutual servers too

I am not sure what you mean

We call Hack The Box the 'cesspit' for a reason

[sick lance]

Now you do.

[coral phoenix]

Well, I am not trying to start beef with you - just a friendly conversation between security professionals

[remote swallow]

Good save

[coral phoenix]

To be fair, a ban from here is a rite of passage, it kinda means you've progressed in your infosec journey

It's a neat server though

Cool people

[sick lance]

You're not banned though, unless you're on an alt.

[coral phoenix]

I am not an alt, Brath is my handle

Out of curiosity why is there such a schism between this server and HTB?

[sick lance]

¯_(ツ)_/¯

People have to argue about something.

[remote swallow]

Probably started by users on which is better

[coral phoenix]

No kidding

[remote swallow]

Even though i won't consider them a competition to each other

[coral phoenix]

Hack The Box is a stomping ground for highly intelligent hooliganry and at the same time absolute skids. I generally recommend new players in the cybersec world start here.

[visual lake]

Hi

hello brath

[remote swallow]

I would personally suggest newbies to start with THM and then move to HTB because HTB won't serve you everything on plate like THM does and some people might get freaked out cuz of that

[coral phoenix]

howdy

[coral phoenix]

Spot on

Then you can move to real platforms like Vulnlabs after a few certs

[remote swallow]

Yeah

I would perfer to play Networks instead of CTF's at that point

[coral phoenix]

I don't play CTF's just due to the nature of players using chatbots en masse

I used to

Anyways, I did indeed come here to see what's up and LARP as a skid. I'll excuse myself - keep up the good work THM.

[hard dawn]

I'm moving on to HTB after THM

I personally like the style of "here's what you need to know, go solve it yourself" of HTB more than THM

I felt like I learned more and accomplished more

Even though I'm banging my head against the table

But THM is an absolutely great structured learning path if you're lost

[chilly veldt]

[pliant cairn]

i got 3 meeting now and have to fit in my doc appointment in bw

im so exhausted

[frail locust]

Oh nah! You saved me a headache. Thank you Kind Sir!

[twin ridge]

Gave +1 Rep to @earnest fog (current: #2261 - 1)

[wooden totem]

omfg I almost had a heart attack. I was just chillin then I noticed breathing noises like loud inhales and exhales from unknown location and they stopped when when I went closer. It was just random chance and the sound was from outside construction whatever and the walls made the sound muffled and it sounded exactly like breathing 😭

for context im home alone, kinda dark and im tired

[rapid merlin]

Throw glitter in the general direction of the noise and whatever’s hiding will appear

😂

[cinder spindle]

Help me please

Someone

I came to this server because I need help my account got accused of something I didn't do.

Pls help me

Anyone

[neon merlin]

which account?

[cinder spindle]

My account

PLZ help

PLZ

[novel ingot]

of THM ?

[cinder spindle]

CAN WE TALK IN DMS I CANT SEND ANY PROOF HERE

Idk

All I know is that

My discord might get banned

[novel ingot]

proof of what ? no explain the context here

[cinder spindle]

Within the 12 hours

Ok so

" Recently, I received a message from a friend with an invitation link for a Discord server. I scanned the QR code to enter the server, but it turned out to be a hack. I immediately changed my password to log the hacker out of my account. However, during the hack, my account was used to report random friends in my friend list and people on my servers, including you"

My friend sent me this

[neon merlin]

If it's one of those "I accidentally reported you and you'll get banned soon unless you do xyz" those are scams dude

[cinder spindle]

Hug

Huh

IDK.

[frozen island]

Is the website just not working for me? When I try to submit something it doesn’t work and takes a few minutes to submit

[cinder spindle]

YEAH IT HAPPENS TO ME TO.

[cinder spindle]

No it's fr.

[wooden totem]

avoid QR codes like a plague

[neon merlin]

What do you think this discord can do? You need help from discord support.

[wooden totem]

funny joke

[neon merlin]

I don't think anyone here works at discord

[novel ingot]

I don't understand how can they get you banned ?

[cinder spindle]

Idk too i tried to Submit the request

[novel ingot]

just send a message to discord support and explain calmly the situation

[neon merlin]

He's been sent a scam phishing message

They message you saying "someone hacked me and reported all your friends and you, go to this totally real website and enter your discord details to solve this".

[cinder spindle]

My friend told me to add someone called mwp_2001 apparently they work in discord but

[wooden totem]

good luck with discord support lol

[cinder spindle]

they are not accepting my request

[novel ingot]

ah ok

[neon merlin]

And then after you have entered your details into the totally real website they phished your credentials

[naive violet]

The account is still hacked.
This is a scam.
That is not your friend.
That user does not work for discord.

[neon merlin]

2024 and people are still falling for this.

[cinder spindle]

Wait but

[novel ingot]

yep just change all your passwords

[naive violet]

Be polite. Don't victim blame.

[cinder spindle]

Can I send you this in dms pls.

[wooden totem]

it can be year 3000 and there will still be uneducated people

[naive violet]

Don't victim blame. Be polite.

[cinder spindle]

dawg.

[neon merlin]

https://discord.com/safety/understanding-and-avoiding-common-scams

Read "Discord staff impersonation"

"Discord Staff will never directly message users on the app for support or account-related inquiries. If someone claiming to be staff asks for personal information, payment, or changes to your login credentials, we recommend that you do not engage further. "

[wooden totem]

https://tenor.com/view/thanos-its-just-the-way-it-is-im-just-the-messenger-gif-25567865

[cinder spindle]

Bro thanks to ninja I can help now 😭😭

[neon merlin]

Hacking in the movies: "I just sudo'd into the backdoor and ran a trace on his kilobytes and I'm in"
Hacking IRL: "Hello I'm the password inspector"

[wooden totem]

"recommend"

[karmic geyser]

AD 101

[karmic geyser]

Start focusing on your studies and stop comparing A and B.

[silver sky]

Well they can't force anything

If someone wants to play with petrol, they can 😂

[wooden totem]

Could've make it sound a bit more serious than just recommendation

[silver sky]

I benchpress naughty students

Pocket mask indeed! I also have a trauma kit and mini AED on my rear on my belt

[tranquil garnet]

Yo quick question. Can TryHackMe certs substitute those industrial certs like CompTIA cuz really wanting to get a career in cybersecurity but getting those expensive certs seem like a rip off

[shut hawk]

No they can't

[south egret]

No, but putting it in ur resume does you no harm

[shut hawk]

You don't need to have certs to get a role in cyber, but they can help a lot

And the TIA certs are pretty cheaply priced, compared to others

[arctic cradle]

that is well said, discord staff will never DM you, whoever claims to work for Discord is clearly trying to scam you (token access / phishing)

[tranquil garnet]

From my Region and country they always put something like "certs are a huge plus" but clearly they only take candidates with certs its just how HR works here.

If you don't have certs most of the time they will ignore you...

But planning to take Security+ and CySa at the same time. You think this one is alright for someone with no experiences. CySa might be overkill for someone with no formal work experience but if I am trying to differentiate myself from the rest of the applicants I guess its the right thing? What you guys think?

[neon merlin]

I saw someone say they put that they completed Bandit on their resume. I am not sure if they were genuine or trolling. (Disclaimer: I am an education major not a cyber security major)

[sick lance]

Don't know why someone would troll on their resume..

@night prairie

[neon merlin]

I once made a lua script to change the LEDs on an RC car controller to a different colour and uploaded it to github now I can officially say I contribute to opensource projects in my spare time.

[shut hawk]

Fair question to ask, I'd put it in #cyber-and-careers and give a bit more information about yourself and the region your from

[sick lance]

Well, I mean... You did?

You've created an open source project.

Creating something to do something, is much better than "I've completed X,Y,Z on platform X,Y,Z".

[eager marsh]

Well that’s not always true

[neon merlin]

ha ha, this comes from another discord where we were half joking about resume padding putting our hobbies into corpo speak

[sick lance]

Give me an example?

[eager marsh]

Certifications are one such example

[forest crater]

https://tryhackme.com/r/room/cicdandbuildsecurity

someone can vote for reset the machine?

[sick lance]

#ci-cd-and-build-security

[sick lance]

That is completly different to completing a room on TryHackMe.

[neon merlin]

Like "In my spare time I contribute to the latest in opensource bleeding edge 2.4ghz LoRa communications"
Read: I fly drones and am part of the ELRS discord.

[eager marsh]

But it is still something that you’ve completed on a platform no?

[sick lance]

Well, no..

Because you can't prove you actually completed, or just copied answers from a write-up you've found on Google.

[eager marsh]

On….a certification exam?

[sick lance]

That is completly different to completing a room on TryHackMe.

If you're going to debate, don't ignore what I say to get your point across.

[eager marsh]

i think that proves my point even more

[sick lance]

Being ignorant? It does not.

[eager marsh]

You can’t really copy answers from a writeup on a cert?

[sick lance]

Again, you've taken what I said completly out of context.

My reply was a reply to this.

I saw someone say they put that they completed Bandit on their resume. I am not sure if they were genuine or trolling. (Disclaimer: I am an education major not a cyber security major)

[eager marsh]

Maybe clarify what you mean then

[eager marsh]

Oh well in that case, yeah don’t put that shit on your resume

[silk star]

Hello everyone!
a curious student needs help!

I am trying to get into the cybersecurity field, but there is a bunch of YouTube tutorials and a roadmap..

What are you thinking where should I take the cyber security online course?

So far I found this one https://www.simplilearn.com/pgp-cyber-security-certification-training-course

But I am still not sure!

[eager marsh]

More than happy to help my friend, first YouTube is an excellent resource

But you have to know how to filter the trash from the gold

This course is pretty good sure but I would recomend taking some other supplemental material such as overthewire as well

If you need additional resources, please don’t hesitate to dm me

[hazy sundial]

dude i haven't hacked in like 6 months and i forgot everythingggg

[grim sparrow]

There are no URLs in that message.

[silk star]

Thanks!

@grim sparrow it is a online course from simplilearn . com

[twin ridge]

Gave +1 Rep to @eager marsh (current: #1497 - 2)

[hardy mica]

Hi guys how are you ?

Any good vpn to suggest ?

[sick lance]

What's the use case?

[neon merlin]

I like 12vpx

[hardy mica]

Work , cyber intelligence. New fiekd for me

[eager marsh]

I recomend using wireguard

[hardy mica]

So nothing malicious

[eager marsh]

Very good option

But if you’re looking for a good enterprise option Bitdefender or Nord should give you what you need

[hardy mica]

I am not looking for the most secure "black hood bad guy hacker darknet God" . Just something good for work

[hardy mica]

Ty a lot

[twin ridge]

Gave +1 Rep to @eager marsh (current: #1127 - 3)

[eager marsh]

Hey it’s no problem happy to help

[hardy mica]

Talking about work i can spend more to "look more professional"

In my last work we used to use Openzvpn , given by the company

[sick lance]

openzpn, or OpenVPN?

[hardy mica]

I tought about OpenVPN again tbh. But i see they offer mostly "Company packages" not individual ones

Working in remote i can choice the One i prefer

[neon merlin]

I'm not sure if we're talking about the VPN app here or the VPN provider

[eager marsh]

OpenVPN offers both

They offer an access server at arround 7 dollars per connection per month

[chilly veldt]

Just setup own local VPN

[eager marsh]

As well as a client

[hardy mica]

Yeah but you pay 7 dollar per connection with 10 connection

So about 70 dollars per month

[eager marsh]

Well the guy ain’t lookin for anything fancy. No need to break the wheel

[eager marsh]

Which is why I didn’t recomend you openvpn

It can get pretty pricey

[hardy mica]

Yeah but im looking for something more basic . At least at start

[neon merlin]

Is that just one server?

[eager marsh]

It’s just the one that you can host on a machine

[neon merlin]

I pay $10 / month and get over 50 in different countries

[chilly veldt]

well if it's for work, then setup an OpenVPN/wireguard server or something always-on vpn

[hardy mica]

hmm ill start with wireGuard then starting looking around

[chilly veldt]

don't need to use an external company

[sick lance]

I use Malware-Bytes.

[chilly veldt]

yeah, I am also talking enterprise 😄

[hardy mica]

It's remote work , so they give you the option to set up the vpn you like the most

[sick lance]

Not for personal use though, you'll have that from work.

[hardy mica]

i used to use OpenVPN , given by the company

[chilly veldt]

if it's personal use, then mullvad vpn is my goto

[hardy mica]

it was a very good option tbh

[hardy mica]

ill give a look at it too , thank you

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 886)

[chilly veldt]

we are finally in our "fine writing" period of our report, reading it through and deciding what needs to be rewritten/deleted

[severe flame]

Is this Blue or Red team report?

[boreal scarab]

https://tenor.com/view/gm-good-morning-squishiverse-squishie-morning-gif-4701675560681324567

[ashen parrot]

Hi, im searching a team for do the hack the boo, i have some expirience in cybersecurity and hacking.

[sick lance]

You should probably ask in their server.

[rapid merlin]

Is anyone interested in an amazing programming community that supports all languages and project types?! Check my bio for invite!

[sick lance]

Please don't advertise your server in here, it's in the rules you blindly accepted.

[rapid merlin]

Ok

Sorry

Hows everyone

[wooden totem]

Does anyone ever actually answer truthfully to this question

[rapid merlin]

Probably not

[pearl raven]

Some people genuinely do, that concept is completely alien to me.

[clear jackal]

To strangers on the internet? Probably more than real life

[arctic cradle]

[pearl raven]

In person, it's always "I'm doing well how about you?"

[rapid merlin]

Get some rest :)

[rapid merlin]

I'm always saying, busy and tired

😂

[pearl raven]

lol that's fair.

[clear jackal]

Right. In the US at least, it's seen as rude to burden someone else with your problems, unless you're asking for help

[pearl raven]

Sure seems that way.

[arctic cradle]

I just lied for solid 40 minutes but it seems like I'd need a nap, though I'd do a few tasks at THM before giving myself a powernap

[clear jackal]

tbf, everyone has problems. I can see why it's seen as rude

[rapid merlin]

It's socially awkward when people are gonna explain their problems in detail in real 😂

[rapid merlin]

What about a nap first, then some tasks?

:p

[arctic cradle]

it bugs me if I don't study first, it's gonna be on my mind like a triggered OCD that I have to take care of before fully resting my mind

[rapid merlin]

Fair

[pearl raven]

Very much so, especially when they start to overshare.

[neon merlin]

Do the time it takes to complete a room estimations take into account how god damn slow it is to do anything on attackbox

Oh you want to open firefox? Wait several minutes

[south egret]

just create ur own attack box

[neon merlin]

can't get on the tryhackme vpn

[languid forge]

hey i got a question, i am still new to all of this and i just completed the learning roadmap and did the career quiz, should i learn and study something else before heading into the Jr Penetration Tester roadmap or can i jump and learn on the way to see where i lack certian things ?

[neon merlin]

Like typing has lag

[rapid merlin]

Your own VM probably works better then

Why doesnt that work?

[neon merlin]

I'm running linux and have all the tools but since these websites don't have public IPs I can't get at them with my machine

[rapid merlin]

#general message

This is a community recommended order

[rapid merlin]

But you can use the VPN?

[neon merlin]

I can't

[languid forge]

@rapid merlinthanks

[rapid merlin]

Why? 😅

[neon merlin]

UDP openvpn blocked on my network

[rapid merlin]

Oof...

Are you a subscriber?

[neon merlin]

yes

[rapid merlin]

Hmm for me the attackbox works fine, so thats strange

[neon merlin]

it works but it's incredibly slow

Like if I type something I'm waiting for it to actually show up

The labs where you have to load up a website are sheer torture

Also the constant freezing

[south egret]

i only ever used the thm attack box if i want to redo something real quick

[neon merlin]

apparently it just crashed while we were speaking and I'm having to respawn it

[south egret]

lol

[neon merlin]

All I want to do is go to this website to see the practical

[rapid merlin]

Damn... Where are you located? As the Attackbox-servers are in GB afaik

[neon merlin]

Why not give them public IPs?

Asia

[rapid merlin]

Because Public IP's get scanned a lot

And sometimes even breached automaticly

[sick lance]

Sub attackboxes have Public ip's

[rapid merlin]

Zcorp is talking about the target machines, right?

[neon merlin]

yes

[sick lance]

Which country are you in?

[tranquil garnet]

Yo if I skip Security+ and go straight on CySa. Would it be okay? Cause I looked at Security+ it seems that I know most of the things covered in it and I'm confident of my computer skills and would like to pursue CySa despite having no work experience.

[sick lance]

#cyber-and-careers

[neon merlin]

Macao at the mo

[sick lance]

Ah, China.

[tranquil garnet]

Just asking here for some opinions if I skip Security+ 😅

[rapid merlin]

Scrubz means, you can ask it in that channel ;)

[neon merlin]

Depends who you ask 😅

[rapid merlin]

Wait can you explain that to me? It's an administrative region in China right? 😅

Now im curious

[neon merlin]

Some people consider Macao and HK to be countries in their own right

[rapid merlin]

Ahhh

[spring temple]

Is something wrong with accessing machines since yesterday ?

[sick lance]

No

[spring temple]

Ok then its a me issue

[sick lance]

I mean, Moose was already speaking to you

[spring temple]

Cant split screen the Autopsy room

[spring temple]

I cant split screen the Autopsy room but can connect to it through AttackBox, weird

[hushed wren]

Hey hello foks

You guys new about KIA car hacking

[tranquil garnet]

Its prevalent on non high end models/trims

[hushed wren]

No, it works on all the KIA cars made after 2013.

[tranquil garnet]

Really? I thought that as long as your KIA has the "immobilizer feature" it should not work... I mean the news said it

[gray sonnet]

WOOOO Let's drop some tables

[neon merlin]

Is that the one where you just use something to turn the key barrel that isn't the key?

Not much of a hack

[normal rose]

well I also heard that it works on all KIA cars made after 2013 which is fucking crazy

[boreal scarab]

@gray sonnet

[normal rose]

as far as I know you just need burpsuit on your phone

[gray sonnet]

Morning 👀

[boreal scarab]

https://tenor.com/view/vain-so-vain-full-of-youself-love-yourselv-britney-gif-12117985

[rapid merlin]

True. I guess Canada is going to ban Burp Suite now

😂

[neon merlin]

So this isn't the one where people were inserting USB sticks into the key barrel?

[tranquil garnet]

Might try it... with consent ofc.

[rapid merlin]

No

[normal rose]

https://www.youtube.com/watch?v=jMHFCpQdZyg

[tranquil garnet]

I find it hard to believe especially on the higher trims

[boreal scarab]

A look into @gray sonnet and I's DM's

[rapid merlin]

Crazy

[tranquil garnet]

Only works in US i suppose

[normal rose]

here is a video from david bombal

https://www.youtube.com/watch?v=lDdJLrxQg24

[neon merlin]

Just use the hammer hack it's quicker

[normal rose]

well i actually shorted an old Fita Tempra 15 years ago 😄

[tawny ruin]

https://arstechnica.com/cars/2019/08/wiseguy-changes-license-plate-to-null-gets-12k-in-parking-tickets/

[tranquil garnet]

Oh KIA fixed it

[rapid merlin]

Just a software update you have to install manually?

Or?

[tranquil garnet]

It was a software update

[normal rose]

mmh probably via OTA.

[neon merlin]

The same thing happened when a guy thought it was funny to have the vanity plate "NO TAGS"

[rapid merlin]

Ohhh wait it was not a problem in the cars

[neon merlin]

So when police wrote out a ticket to a car without a license plate they wrote "NO TAGS". And he got them all.

[rapid merlin]

But in the KIA website

[neon merlin]

I dunno if this one is real though cause how did someone not noticed this issue?

[tranquil garnet]

Corporations tend to have some serious media control.

KIA is a big brand so they actually have the right connections to do damage control, cause without it then they probably went out of business a long time ago.

[normal rose]

mmh well I am still watching the video from david bombal. But as far as i know it was an issue with the dealsership website.

[rapid merlin]

Captchas give me sooo much anxiety

I had to do like 6

Select all pictures with motorcycles

DO I HAVE TO SELECT THE SQUARE WITH 2 PIXEL MOTORCYCLE IN IT?

[normal rose]

mmh maybe ask ChatGPT 😄

[candid light]

running a vpn?

captchas can get crazy insistent if you have a vpn on

[rapid merlin]

No, just selecting bad I guess

[candid light]

i suggest doing the voice one

[rapid merlin]

https://tenor.com/view/captchas-aycd-get-aycd-rage-rage-against-the-machine-gif-25842611

Like this

This ones

[normal rose]

ok so the vulnerability for the KIA hack was basically a poor programmed website. They were able to do an authentication bypass because the dealership API was running besides the enduser API where car owners would lock in to configure the car software remotely.

[rapid merlin]

True

[normal rose]

I guess the guys from Kia should have done the introduction to webhacking on tryhackme.com 😄

cause it is explained there 😄

[rapid merlin]

😂

[celest valve]

Why nopady likes chatgpt

[shut hawk]

GPT is cool, it has some good use cases

[rapid merlin]

And some bad ones too

:)

[shut hawk]

as with all things

[shut knot]

Anyone else got issues with AttackBox opening

Oh no, an error occurred while starting VM: PARSING_ERROR

kali linux work tho

[eager marsh]

Probs the config file. Have you tried resetting the attack box

[shut knot]

how so

[eager marsh]

You can usually reset the attack box by terminating the active attack box

[shut knot]

it wont even start up

[eager marsh]

And then restarting it by clicking the Start Attackbox button

[shut knot]

there is no active box

[eager marsh]

Oh in that case contact #site-support

They should be able to help you out

[shut knot]

👍

[eager marsh]

You can also contact them via email using this

[rapid merlin]

[sharp citrus]

@shut knot

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Oct 9, 2024, 2:25 PM

[rapid merlin]

Hmm

[chilly veldt]

Report is finished and submitted

[eager marsh]

Good job Bella!

[rapid merlin]

Bye

[rancid zinc]

anyone there

[chilly veldt]

#room-help

[rancid zinc]

thank ya mn

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #7 - 887)

[sick lance]

00's want their humour back.

[boreal scarab]

Humor*

[keen rose]

what are some great rooms for people that are currently studying Security+

[eager marsh]

I would recomend the SOCLv1 as well as some of the pre security pathway

Those should give you a good starting point in the more practical aspects of the Security+

[keen rose]

thank you !

[twin ridge]

Gave +1 Rep to @eager marsh (current: #916 - 4)

[eager marsh]

No problem happy to help

[teal wharf]

guys how do people create drawings like these in terminal , is there a tool or it is just manual

[sick lance]

Probably a tool.

Or a website.

[teal wharf]

do u know any specific one

[sick lance]

Not really, not the sort of thing I use.

[shut hawk]

Figlet

[teal wharf]

Thank you man

[twin ridge]

Gave +1 Rep to @shut hawk (current: #14 - 571)

[rapid merlin]

Is that a download ?

It looks it, I wish it was on the website 😎copy and paste

[empty moss]

If anyone can help with this question I'd appreciate it. Don't want to get banned by breaking the rules lol.

[sick lance]

Don't use THM art in your thumbnails, and don't put hashes/passwords/flags in the write up.

[empty moss]

Thank you for this. Is there a time block on new rooms? e.g I have to wait until a room is 30 days old before publishing online?

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2852)

[sick lance]

Staff request you wait 72 hours 🙏

[empty moss]

Brilliant, thanks for your quick response! 🙂

[rapid merlin]

I wanna have a go

I love how they added the outtake to the Cisco video on the networking course

Adds humour

[lilac urchin]

I have a question

I want to train a deep reinforcement learning agent

[viscid hill]

Is there a way i can get in contact with admin or something, tryhackme email systems are a bit bugged

i submitted a writeup but i got an email that I think was meant for the owner of the room

[boreal scarab]

@umbral bay Not sure if this falls under your department or someone others. regarding rooms and writeups.

[viscid hill]

Doesn't leak any sensitive info don't worry, but it was definitely for the owner

[boreal scarab]

They'll most likely tell you to email support, but still pinged one just incase.

[sick lance]

Tim isn't support.

[boreal scarab]

Noooooooo really?

I didn't know that, thanks Scrubz

[sick lance]

You're being sarcastic and it's not needed.

They'll most likely tell you to email support, but still pinged one just incase.

That makes it look like you pinged a member from support.

[sick lance]

What are you using this for?

[lilac urchin]

It will be a autonomous system where agent can decide the best action based on the state:

[sick lance]

Is this for work, school or something?

Please stop posting walls of text.

If you want to send long messages, do so in a file.

[lilac urchin]

oh ok

but I want to understand how crowdstrike falcon works currently

[inland birch]

Whats the main reason of this server?

[sick lance]

It's an ethical hacking and cyber security server that is for https://www.tryhackme.com

[inland birch]

im just tryna grab a lil something a boot a lil something

[sick lance]

Eh?

[inland birch]

dm me

[sick lance]

Er, no thanks.

You can state in here.

[inland birch]

just have a question

[lilac urchin]

How does intrusion detection systems work?

[sick lance]

Then you can ask it..

[sick lance]

Surely you can google this?

[lilac urchin]

I need specifics

[chilly veldt]

I intrude, it detect, SOC employee respond

[clear jackal]

false positive

[eager marsh]

Normally they work off heuristics and or a signature. If a certain piece of malaware or an action in the network happens, the intrusion detection system will trigger an alert

[chilly veldt]

and then I get DA

[eager marsh]

Ordinarily these intrusion detection systems don’t do much other than alert you but there’s also intrusion prevention systems

These can actually prevent an intrusion

[eager marsh]

There’s a really good book by No Starch called Evading EDR

You can look at that for more info : )

[lilac urchin]

How is the current landscape, are the products mature and good?

[lilac urchin]

Don't wanna build something that no one will use

[thorn plover]

@shadow isle hello man im doing one of your room and i met answer problem.

The room name : Nmap Basic Port Scans

Problem :

When its time to enter what port was discovered in the new scan im pretty sure its the right answer but nop. So i tried to enter each port manually but same 😦 , have you solutions maybe ?

[eager marsh]

Lots of good products around

You’ll have your work cut out for you

Crowdstrike is one such example

[lilac urchin]

then no point lol, where do you see a gap in cybersecurity?

[eager marsh]

That’s a rather broad question, but if I had to give one. It would be the people

The main reason for breaches is human error

[lilac urchin]

can you explain how it is the people? what kind of human error

[eager marsh]

Easy. Social Engineering revolves arround the issue of human error and the manipulation of people to get into a system. Thus non technical people are a lot more inclined to do things that may reduce a company’s security posture

[lilac urchin]

Interesting, so your saying the systems are well placed, but the manipulation is which allows to bypass the system

[eager marsh]

Such as clicking on links they shouldn’t. Tailgating, Circumvention of Security controls via manipulation. I could go on but most breaches and gaps often have an origin in one person or a group of people fucking up.

[eager marsh]

This is true, but it is equally possible that humans could make a mistake and introduce insecure practices like vulnerable code and poor asset management.

[lilac urchin]

what is primarily the subject of cybersecurity is it [ IDS, SOAR, Code Vulnerabilities, Human Error]

[lilac urchin]

are most products that make up cybersecurity as whole in that list

[muted nebula]

@rough gorge guess it'll be friday...

[rough gorge]

yeah might be 🙂

[eager marsh]

I’d say the last two are the biggest culprits of glaring issues in information systems

[lilac urchin]

So you would say the last two needs most innovating, as first two have matured systems in place

[eager marsh]

Yes!

[lilac urchin]

In terms of code vulnerabilities, wouldn't it happen at CI/CD level. Aren't there tools that do scanning?

[eager marsh]

While there are tools yes, but these tools aren’t perfect and don’t catch everything

[lilac urchin]

Like SonarQube

[eager marsh]

Yeah. Why do you think CVEs are so plentiful

Sometimes these tools won’t catch everything

[lilac urchin]

any books on Static code analysis?

[eager marsh]

I’ll find some gimme a sec

This one’s pretty good

[lilac urchin]

Do you see any opportunities here in automation

[solar flume]

How to uninstall Kali linux From my bootable leptop?

Please 🙏

[eager marsh]

https://www.kali.org/docs/installation/hard-disk-install/

[eager marsh]

I mean yeah, anything can be automated but you’ll probably be better of doing it yourself

[solar flume]

Bro I want to uninstall

Kali

[sick lance]

Install a new os?

[solar flume]

No

[eager marsh]

In that case just make a bootable USB and set your bios to boot from it

[solar flume]

I want to remove it fully

[lilac urchin]

In context of autonomous agents, do you see some Deep RL algorithms that can be applied here

[solar flume]

I have bootable USB

[eager marsh]

Hmm that’s outta my scope of knowledge sorry

[solar flume]

Please guide me how can I uninstall

Please 🙏

[eager marsh]

What do you have on said usb

[solar flume]

Kali lunix

[eager marsh]

And what do you want to install to replace it?

[solar flume]

And I want to uninstall from my leptop

[eager marsh]

Because you have to pick an OS to replace it

[solar flume]

I want to use windows

Again

[eager marsh]

https://support.microsoft.com/en-us/windows/create-installation-media-for-windows-99a58364-8c02-206f-aa6f-40c3b507420d

Follow these steps

[solar flume]

Ok

U mean I have to clean my bootable USB then install windows?

[eager marsh]

https://answers.microsoft.com/en-us/windows/forum/all/make-installation-usb-for-windows-10-on-an-ubuntu/9c7b4cc1-ba59-4f77-8771-1bb61dfab02a

if you plan on doing it from your Linux install, please follow these instructions

[eager marsh]

You should format it first yes

[solar flume]

So I have to formate my bootable USB?

[eager marsh]

Correct

Do not format the laptop itself

[solar flume]

windows is not working in me

[eager marsh]

What do you mean?

[solar flume]

Just Kali's is opening up inside my leptop

[eager marsh]

Because you haven’t made the bootable USB for windows yet

[solar flume]

So I have to make a bootable USB for windows now?

[eager marsh]

Correct

[solar flume]

And format Kali from the botable USB?

Right?

[eager marsh]

Yes

Format the Kali installation usb

NOT the hard drive with Kali on it

https://itsfoss.com/bootable-windows-usb-linux/

[rapid merlin]

.

[oak skiff]

I hope all my florida cyber nerds are staying safe ❤️

[rapid merlin]

Hm seems to be a few “new” accounts trying to add me, not suspicious at all

[solar flume]

Bro

Can u please dm me

🙏🙏

[oak skiff]

if it helps i think you can set your account to just not receive friend requests

not totally sure though

[rapid merlin]

Oh that would be nice

[solar flume]

@eager marsh please 🙏🥺

[rapid merlin]

I didn’t know you could do that, thank you. I’ve changed it now. It was easy to find too 😭

[twin ridge]

Gave +1 Rep to @oak skiff (current: #459 - 11)

[clear jackal]

There are plenty of guides on how to install kali and also do a live boot off of a USB device. Just conduct a query utilizing your favorite search engine.

[oak river]

Can someone reccomend a good router pls?

Is Linksys Hydra Pro 6 good?

[clear jackal]

Requirements? Price? Country?

[oak river]

Bulgaria, 200$

max

Requirements - Security primarily

I just want a better router

I have a tp link

Archer

Some S-box (Derogatory)

[clear jackal]

If you have $200, it may be better to purchase a Dell optiplex and put OPNSense on it

[oak river]

Huh

I have a raspberry pi

3b+

But it seems to run only on amd64

Should I just go for another Chinesium like Tp-Link?

Maybe an Asus is a good choice\

[clear jackal]

Build your own instead of purchasing overpriced potatoes

That's what I am saying

[naive violet]

Also wifi is like a whole other thing

[oak river]

But wifi for houuuuuse

😭

[clear jackal]

Do you have a wifi router currently? Put it in bridge mode if you build your own

[oak river]

I have, its what gives me internet

Router in a box basically

https://ardes.bg/product/asus-rt-ax86u-pro-90ig07n0-mo3b00-322456

This seems like a good choice if I wont build

Or?

[craggy egret]

How do i refresh my discord level?

I got into OMNI but it didn't update in discord

Nvm i figured it out

[rapid merlin]

So I started gaming but now I’m on phone games

Anyone played Evony?

[torpid furnace]

@hollow zenith

[rapid merlin]

I read that as banana, I need my glasses

[hollow zenith]

hello

anything i can help with ?

[void zodiac]

THM really helps me with uni, since it covers Linux

One year helped me with using hashcat and installing verification keys for documents

And now I can run the simplistic webserver with my site for uni

[boreal scarab]

Pc gaming better!

[boreal scarab]

You mean the game that shows the fake ads?

[rapid merlin]

I don’t think it did tbh

I’ve not seen any ads

I used to play pc but I quit

[boreal scarab]

Evony: The Kings Return?

[torpid furnace]

can u check messages i think i found u somewhere

[hollow zenith]

hmmmm

can you specify the place ?

[spark tundra]

just a quick question, I vaguely remember connecting to the attack box for OpenVPN but I know there is a second step involving a remote desktop connection. any help with that or a source

[torpid furnace]

cyberxbytes

[hollow zenith]

yes, it is me

the 0x0face

[torpid furnace]

ah i see ur doing pretty good

do u see 0xballs 😂

[hollow zenith]

rank 11

cool

i am very busy with college, that is why i don't have much time to play CTFs

[torpid furnace]

fair enough some of these rooms annoying asf lol

[hollow zenith]

they even added rev eng challenges

i don't know anything about it so far

😔

[torpid furnace]

ik so annoying

and the web challenge discover is so weird

it asks about the numbers 12345 on the secret dir

[hollow zenith]

i am not complaining about the level of their challenges

my problem is with my current knowledge level

[torpid furnace]

all web challs easy until discover

also kinda annoying all their updates are in arabic

as were speaking i completed another room

[hollow zenith]

😎

you can cook

[torpid furnace]

hahaha

"What is the number "really ?
70 this one

[hollow zenith]

good for you

keep shining

[rapid merlin]

I can’t see anything else other than the word Evony but it’s probs the same thing

[sand trench]

meep moops time for the sleep sloops to the beep boops

[boreal scarab]

eepy seepy deepy weepy?

[chilly veldt]

I might do a jamming session in VC tomorrow if people are interested

[boreal scarab]

https://tenor.com/view/bubu-dancing-dance-happy-dance-bubu-cat-gif-9406698208260770694

[chilly veldt]

I got 8 hours of house music ready for a playlist

[boreal scarab]

daaaaaaaaaaaaaaaaamn

[chilly veldt]

I need to play for a week

there should be a lot to choose between

also currently downloading a playlist that is 20 hours long

[slender scaffold]

O_o

[torpid furnace]

guys how can i decode this
📧💖💇💱📧💖💈💧📧💖💈💐📧💖💈💓📧💖💈💠📧💖💈💆📧💖💈💐📧💖💈💧📧💖💈💢📧💖💈💓📧💖💈💡📧💖💈💩📧💖💇💲📧💖💇💞📧💖💈👼📧💖💇💕📧💖💇💥📧💖💈💍📧💖💈💣📧💖💈💡📧💖💈💓📧💖💈💍📧💖💈💔📧💖💈💃📧💖💇💘📧💖💇💘📧💖💈💍📧💖💇💵📧💖💈💞📧💖💇💥📧💖💈💫

never done emoji decode or wtv

[rapid merlin]

Hm

The first bit says if you want to E date you gotta cut your hair

Then you’ll get paid

[boreal scarab]

Lets see if ChatGPT o1 can decode

[boreal scarab]

HC BD BB BH BD BM BB BD BA BH BL BP HS HH BA HH HC BR BB BL BH BR BB BD HH HH BR HS BH HC BD

(Generated by AI)

[rapid merlin]

Oh nice

[sick lance]

Where did you get it?

[atomic aurora]

do i still need a universal forwarder if i want to digest my local sysmon logs into splunk? I have my splunk instance running on the same local machine

[muted rock]

Hi

[slender scaffold]

o/

[safe shoal]

Hi
I have the error in my project.

[clear jackal]

What's this for? Work, school, etc?

[quaint jolt]

can someone hack a tiktok acc for me

[slender scaffold]

@mossy river

Oh wait maybe they gone already. Sorry

[mossy river]

Hey this is illegal and against our community rules

[rapid merlin]

Hi

[rapid merlin]

I just almost dropped my phone on my face again

[boreal scarab]

@slender scaffold

https://tenor.com/view/doggo-boop-gif-22290017

[pearl raven]

https://tenor.com/view/baby-seal-cute-animals-gif-16233025

[slender scaffold]

Boop you!

[rapid merlin]

Two types of puppy

[boreal scarab]

[slender scaffold]

I need a drink

I’m stressed out haha

[austere bronze]

Hey guys, are there any penetration testers here?

[teal wharf]

get urself a milkey shakey

or some hot tea if u feeling 🥶

[boreal scarab]

I made broccoli cheddar soup, and poured myself a glass of wine

@blazing granite you can be in this convo too lol

[slender scaffold]

A milk shake sounds good

[slender scaffold]

Are you still adulting lol

That sounds like some advanced soup right there

[boreal scarab]

I am still adulting

[boreal scarab]

It was pre-made I just heated it up I put my heart and soul to make that!

[slender scaffold]

https://tenor.com/view/hmm-suspect-gif-22611582

[crude stump]

Ask your question

[austere bronze]

I have been a BugBounty Hunter for two years, and I have passed many different learning stages, such as Linux, networks, programming languages, offensive security, etc., and I am really struggling to obtain the first vulnerability on BugBounty platforms.

[boreal scarab]

https://tenor.com/view/santa-kitty-merry-christmas-gif-24427779

[crude stump]

Does not play

[crude stump]

Hm

Tbh I don’t touch bug bounty’s cus it’s scary so I don’t really know

You could ask in #bug-bounty

[austere bronze]

Is there anyone who has gone through the same experience and can give me some advice to help me? I would really appreciate it 😔

[boreal scarab]

[crude stump]

Zumi said portswigger is good

[rapid merlin]

Making me hungry

[boreal scarab]

My job here is done

[rapid merlin]

I don’t have anything yummy like that

I’m studying too because I can’t sleep

[high mulch]

https://tenor.com/view/sirsir-getmethose-butsir-getme-sir-gif-21367400

[high mulch]

paused on time

https://tenor.com/view/deflect-mob-psycho100-power-gif-15431115

[rapid merlin]

I’m gonna have mushroom soup instead

[coarse plover]

https://tenor.com/view/hanukkah-happy-hanukkah-hanukkah-song-chanukah-dreidel-gif-10490506

its almost that time of year !

[rapid merlin]

What time

[coarse plover]

To celebrate the miracle of Hanukkah !

[neon merlin]

When I look at other learning platforms that aren't tryhackme 💸

$1649 for Offsec Pen200 and that's the cheatpest package

[rapid merlin]

Mb 😂

That’s literally what you said in that gif but that’s not what I read

[boreal scarab]

https://tenor.com/view/monke-monkey-gif-25423353

[coarse plover]

The awkwardness that comes in the office when your diversity hire turns out to be a pro Israel republican.

[rapid merlin]

👀

[high mulch]

funnily enough, my rainbow six siege nickname used to be cyber monkee

https://tenor.com/view/mmmm-monkey-monkey-ug-master-oogway-oogway-gif-19727561

[cosmic pendant]

hi

[coarse plover]

hello

Toaster what did you get your PHD in if you dont mind me asking ? Im looking at grad school here next year

[crude stump]

Critical infrastructure

Pretty sure

“Kenith-Can you give me the zuck”

[coarse plover]

Ah, any advice for a 29 year old who pivoting in to the industry late ? I already have a degree but it was in business. Im finishing up my CS degree at the bachelor level this year

[coarse plover]

not sure i understand this

[crude stump]

Hold on

https://youtu.be/DzDd9cT_2UE?si=-_9nxxKnJw03Rnxf

[coarse plover]

ah yes that is my far removed cousin. I had the same nickname growing up

[crude stump]

Ima be honest

I ain’t in the industry yet

I want to be tho

Sooo

[pearl raven]

https://tenor.com/view/wat-gif-5001440307614895833

[coarse plover]

Ah I worked in IB for a bit fing hate excel spreadsheets

[crude stump]

Looks creepy

[coarse plover]

i see the death in her eyes

[crude stump]

IB means what again?

[coarse plover]

investment banking

[crude stump]

Oh

[coarse plover]

its not glamours or high paying unless you go to an ivy league lol your just a VP's bitch

[pearl raven]

lol spreadsheets... excel black belt here 😦

[crude stump]

Spreadsheet competitions

Imagine

[coarse plover]

when your only view is a spreadsheet for a couple years it drains the soul

[crude stump]

Sounds soul draining

[coarse plover]

atleast I know how to load shellcode into a vbs script now lol

trying to focus on this buffer overflow prep lab but my adhd is kicking in with the repetitve part where you have to trigger 10 overflows in a row doing the exact same thing lol

What certs would you suggest are most valuable currently ?

[crude stump]

Would really depend on the type of field you go into and also what the job is asking for

[coarse plover]

I mean offsec would be ideal. honestly I want to just work remote somewhere in a ski town and red team so i can mountain bike and ski. I dont want to do anything crazy with my career I just love CS and cyber. Im hoping to get in grad school to study either Information Science with a telelcommunications focus so I have a specialized understanding in networking. Then I plan to get the OSCP and CSIS. I really just enjoy being a student and playing sports

*either IS with a concentration in telecoms or CS

East Coast ? Whys location matter everything is virtual in this industry

yeah

[rapid merlin]

What is it for uk

👀

[neon merlin]

Are there any certs that don't cost $1000 ea?

[rapid merlin]

Defence

Blueyyyy

[rapid merlin]

No

Sadly they all cost a toe

[neon merlin]

Why are they so expensive?

[rapid merlin]

Think of it as an investment.

The money you put in for certs is nothing compared to what they get paid

[wooden totem]

I guess its same with student loans and payments for regular school

[high mulch]

what role you want in blue team?

blue team is sorta... broad.

[neon merlin]

My cert to teach English was like $19

[rapid merlin]

Rush B blyat

Sorry what

[rapid merlin]

I want to do malware analysis, create defence structures, forensics

[neon merlin]

offensive security got a pretty good industry going, they create the problem and then sell the solution to it. Like if a window fitter went around throwing bricks through windows.

[wooden totem]

Then you're the one throwing bricks

[rapid merlin]

Most business is done like this

[high mulch]

be part of a SOC team

[wooden totem]

https://tenor.com/view/vince-mcmahon-money-vince-mcmahon-money-wwe-capitalism-gif-23623669

[rapid merlin]

Okay 🫡

[fossil inlet]

good

[high mulch]

then you can escalate from there

[rapid merlin]

Mid to A

[high mulch]

💀

[neon merlin]

I feel like there are probably more blue team jobs than red team. Would that be true?

[high mulch]

red team sector often requires more experience, or ~~someone to trust. ~~

[neon merlin]

Cause a company always needs someone in hourse to defend, but only needs to hire a pen tester rarely.

[rapid merlin]

Damn can I get a skull emote count. Heh

[neon merlin]

Like I don't think a company will pay you a 9-5 salary to sit in the office and constantly try to hack them right?

[wooden totem]

Aw nahhh what is EXP-401 cost... man

[neon merlin]

When I look at the requirements for cyber jobs it looks like someone threw a bunch of scrabble tiles in the air and wrote down what they landed on.

[rapid merlin]

Facts

[wooden totem]

A secret employers won't tell you; you can say you have the requirements almost fulfilled

[neon merlin]

Oh like how I've been "pursuing" my masters in education on my resume for the past several years.

Hey I looked up the website

[clear jackal]

I wouldn't lie in an interview or on a resume. Possibly the fastest way to get tossed and blacklisted from potentially working in that organization. That and the cyber industry is a lot smaller than people think.

[neon merlin]

Doesn't everyone talk crap on their resume?

[clear jackal]

No, it should be a reflection of your actual skillset

[high mulch]

I geniuenly put what I used to do or do

[neon merlin]

The corpo speak has got so out of hand that you need to adopt the same corpo speak.

[clear jackal]

Do you have examples?

[wooden totem]

I wouldn't necessarily say lie, more like test your luck with explaining info that you know isn't reached on requirements

[neon merlin]

My job is "I teach kids English" but that's not what I say in an interview, or on my resume. I'd pad that out to like a paragraph.

[wooden totem]

Man im literally so bad at wording stuff this sounds even worse

Yeah just dont do what I said

[clear jackal]

OK, then in the interview I ask you feeler questions on your resume, to determine your surface knowledge, and then drill in to the things that are lacking or popped as red flags to get a true understanding of your competency

[neon merlin]

I think these are two different things. I don't lie on my resume. But I make everything I do sound as amazing and technical as possible.

[clear jackal]

A resume shouldn't be paragraphs, it needs to be concise and to the point.

Meaning Position X followed by 3 bullets of your "greatest hits" at that role

[neon merlin]

I mean on your cover letter and personal intro

[clear jackal]

A cover letter is a separate document. Tbh, I don't like paragraphs at the top of resumes

[high mulch]

technical custodian = janitor

[clear jackal]

Other mentors disagree in some cases, but that's my personal opinion

Your resume is your elevator pitch in paper form

It needs to grasp the attention of the reviewer and paragraphs are not that

[neon merlin]

Different industries maybe, I've never had issues with paragraphs. But not many people apply to the roles I apply for.

Usually we supply a resume, cover letter and a self introduction video.

[clear jackal]

Custodial Engineer

[neon merlin]

Dedicated facilities maintenance professional with expertise in the implementation of cleaning protocols, sanitation standards, and environmental health practices to ensure optimal cleanliness and safety in diverse settings.

"I mop up kids puke"

[clear jackal]

I am talking about STEM resumes, as we're on a STEM oriented discord. Non-STEM resumes are different

[high mulch]

I saw something like that on indeed... but once again, there's some scamy and scumy jobs

[neon merlin]

"Sandwich engineer"

That one was a joke but Subway legit call their staff "Sandwich artists"

I actually wonder what it's like for HR now in the days of ChatGPT.

I've never needed to send out a resume for the past several years so the last time I did it was before ChatGPT was invented.

[rapid merlin]

👋 😆

[neon merlin]

I bet the Fiverr resume writing industry has been destroyed.

[high mulch]

https://tenor.com/view/skeleton-skeleton-meme-man-skeletron-fortnite-gif-8574616040851063459

[rapid merlin]

Prone is a safe position to avoid risk of falls!

[neon merlin]

What invisible keywords should you put on your cyber role resume to not get filtered out by the bots tho?

[coarse plover]

Mr. Robot, blackhat, phase 1 etc

[neon merlin]

I heard when you send your resume it's not actually looked at until a bot decides someone should look at it.

[neon merlin]

kali linux

[high mulch]

that or you get hooked by someone else

[neon merlin]

I should probably get round to making a linkedin profile

[clear jackal]

ATS is a thing and has been around for a while

[coarse plover]

put your profile pic as an unapologetic woman. cut out a picture from victora secrets and make it your profile pic. based men will interview you on the spot.

[clear jackal]

Pictures should not go on a resume

[coarse plover]

unless your super hot

[rapid merlin]

this is an excellent place to practice https://www.shlinkedin.com/

[clear jackal]

This conversation is better suited for #cyber-and-careers anyway if you're looking for actual assistance

[neon merlin]

So I'm working in Asia these days and it's wild what is standard to put on a resume. Pictures of yourself, your age etc.

Stuff that in the west you absoluetely shouldn't do

marriage status etc

[grim sparrow]

URL Scan Report

Report for https://www.shlinkedin.com/

Malicious?

false

[slender scaffold]

[rapid merlin]

Literally everything I did

[coarse plover]

i dont click nuthin these days

could be a seeker script yall wild

[neon merlin]

🌟✨ In the journey of life, we often find ourselves navigating the intricate pathways of opportunity and challenge. It's essential to remember that every moment, whether perceived as a setback or a stepping stone, contributes to our unique tapestry of experiences. Embracing the ebb and flow of progress can lead to profound realizations about our true potential.

Together, we can illuminate the path forward, one reflection at a time.

Agree?

[coarse plover]

illuminate

[neon merlin]

Average linkedin "influencer" post

[south egret]

Test

[wooden totem]

isnt that just device info

[neon merlin]

You put those things on your resume in the west?

[coarse plover]

thats how it all starts. Phase 1 of the exploitation SOP

is recon

[south egret]

Im living on the edge i click everything

[wooden totem]

I live as the edge, my browsing in sandboxed

[coarse plover]

id have to turn my proxy on and burp it if imma live that dangerous. I have ublock and all sorts of stuff to block adds

if you want to get crazy run a qubits system everything is sandbox and virtualized/compartmentalized.

wait i dont think its called qubit

Quebes OS. My brain is melting ive been online too long

[slender scaffold]

burp<

[neon merlin]

Just run TempleOS, can't be hacked if you have no networking.

[coarse plover]

im looking at it now

linus made a video on it

[neon merlin]

You can watch that it's a decent intro

there's also a down the rabbit hole on it

[rapid merlin]

TempleOS = ring-0-only

[neon merlin]

The headline is operating system made from scratch by a paranoid schizophrenic

[rapid merlin]

iirc paranoid schizophrenic was removed in the DSM-5

the subtypes at least

[tepid furnace]

I have reached peak stupidity

remember guys

when unplugging things on your pc

DO NOT

blindly reach

or you'll end up like me pressing my flash bios button

[rapid merlin]

😮

[neon merlin]

I thought you were going to say you got electrocuted.

[tepid furnace]

god no

arguably this is worse

the last image I took on my pc is 3 months old

so I think I'll be able to recover

but my pc is throwing a fit

so we'll see

[rapid merlin]

best of luck 😉

[neon merlin]

Why is there a flash bios button?

[tepid furnace]

convienence

[neon merlin]

Or inconvenience in this case

[rapid merlin]

@neon merlin it can come in handy when you need a new BIOS for a CPU the board does not yet support

you can update the BIOS without a CPU

[tepid furnace]

yur

[neon merlin]

Oh I've never needed this feature.

[molten sky]

I needed it just a few weeks ago

it comes in handy

[clear jackal]

Flashing the BIOS doesn't affect the data on your hard drive

[coarse plover]

Terry Davis was brilliant. That is an incredibly sad story i just read though.

[clear jackal]

The computer should still boot tbh, probably at an older version.

[coarse plover]

An entire os built by one man thats off the charts

[neon merlin]

With it's own programming language

[coarse plover]

HolyC

[clear jackal]

If not, follow manufacturer instructions on recovering/reinstalling

[coarse plover]

yeah mental health is no joke. poor guy

[tepid furnace]

yeah I was just worried about it bricking tbh

it ended up being ok

just some stuff got messed up

good reminder to save a new image externally though lol

[rapid merlin]

He really understood PC hardware to build something like that

[tepid furnace]

oh the holy c guy

yeah I wish he had gotten the help he needed :p

imagine the cool stuff he could've been making today

[rapid merlin]

I wonder if Terry ever read the classic Peter Norton guide to programming PCs book

[oblique furnace]

hi

[pliant cairn]

henlo

[vapid spear]

mornin'

[celest valve]

Mornin