#general

1 messages Β· Page 471 of 1

rapid merlin
#

Thousands of movies and shows i totally own

#

YUP

#

πŸ˜…

sinful moon
#

Oh no we literally have shelves and shelves of them

#

this be our server

rapid merlin
#

how flakey streaming services are, you need your own collection

sinful moon
#

Dell T430 with dual xenons and 256GB of RAM

#

this hosts our Plex, does video encoding and ripping and much more

rapid merlin
#

my dad likes a lot of old TV that's not really shown anymore, so it's fantastic for him

#

I set my dad up with 4 6tb set up on raid 10, connected to a pi as a nas and the m1 is the plex server, it's more than enough for him.

rapid merlin
sinful moon
#

lol just me and my SO but yeah, just a home server

#

lol one sec

rapid merlin
#

I was looking around the house the other day and I do think I need to take some of this stuff to the tip

sinful moon
#

also good stuff above yeah we just have an insane blu-ray library and this is our ripping to encoding to hosting pipeline, but storage ironically is over on the 46TB+ NAS

#

This does have a ton of storage but don't want all out eggs in one basket there

rapid merlin
#

getting vmware now update you guys when i setup my vmware and knock out a few classes

#

appreciate the tips

#

good luck @rapid merlin

sinful moon
#

No problem, VMware is lovely, especially for retro but yes for modern as well. Just other solutions are less ideal for retro which is something I'm obsessed about lol

#

VMware has just plain been around the longest which helps there

rapid merlin
#

I don't consume much media these days, with work and study, I don't find much time

#

don't think falling a sleep to archer and south park count lol

#

@sinful moon hey which should i download for vmware?

athena-rolling-x86_64.iso

2 days ago
athena-rolling-x86_64.iso.md5
60 Bytes
2 days ago
athena-rolling-x86_64.iso.pkglist.txt
13.6 KB
2 days ago
athena-rolling-x86_64.iso.sha1
68 Bytes
2 days ago
athena-rolling-x86_64.iso.sha256
92 Bytes
2 days ago
athena-rolling-x86_64.iso.sha512
156 Bytes
2 days ago
Source code
(zip)
Jan 30
Source code
(tar.gz)```
#

im guessing that first iso one correct

sinful moon
#

I have never heard of Athena in my life but yes the plain iso will be fine

#

You can optionally verify it with those checksum downloads if you are paranoid

rapid merlin
#

alr did

sinful moon
#

I am discussing work/life concerns with the SO so I may be a while c:

rapid merlin
#

got a good signature πŸ‘

#

np i was just curious i got the rest from here

plush jewel
#

help please!

#

any idea how we set local port forwarding

#

i keep getting this error

bind [127.0.0.1]:80: Permission denied
channel_setup_fwd_listener_tcpip: cannot listen to port: 80
Could not request local forwarding.
ok]^H
shut hawk
#

sudo

plush jewel
#

don't have sudo permission!

shut hawk
#

use a higher port then

#

like 4444

plush jewel
#

i want to forward the port 80 to another port remotely (i'm executing this on the remote server, i want to get the remote 80 to my local machine)

steel garnet
#

Could anyone help me with a reverse engineering Challenge? i've been bugging at it for a few days now but can't seem to find the flag for the life of me. It's an old one from my national ctf competition.

Ivana has made another program that asks for a secret number - can you find out which number this program accepts? (There are versions of the program available for both Windows and Linux - both versions contain the same solution, it doesn't matter which one you solve.) The flag is in the format CTF2020[numbers]

I found the main function of the code in ghidra, but can't seem to get further than that.

plush jewel
#

i guess i figured it out , i used socat !!

#

socat is just PURE PAIN

#

its syntax is just headache

loud marlin
teal wharf
mossy bloom
#

bro im newer in hacking im know linux -_-

#

i use arch btw

teal wharf
#

and im know kali

neon merlin
#

can I set an alias for a .txt file in linux?

#

Instead of having to type out --wordlist omg/this/is/an/incredibly/long/file/address.rockyou.txt

quartz fog
#

cp omg/this/is/an/incredibly/long/file/address.rockyou.txt ~

#

Also maybe DERP=/path/to/file

blazing granite
quartz fog
#

$(DERP)

mossy bloom
mossy bloom
blazing granite
ocean vale
mossy bloom
ocean vale
#

yes

mossy bloom
#

break the arch goal of building your system yourself

#

bruh arch have a archinstall

quartz fog
#
# docker run \
          --env PS1="ADC(\#)[\d \T:\w]\\$ " \
          --interactive \
          --privileged \
          --rm \
          --tty \
          --volume "/tmp/target:/target" \
          "index.docker.io/library/archlinux:latest" /bin/sh
mossy bloom
rapid merlin
#

whoever was helping me earlier thank you

#

got my vm setup and im already started the first intro classes

#

appreciate it

blazing granite
mossy bloom
blazing granite
crude stump
crude stump
#

Glad you got helped tho

mossy bloom
#

I'm starting out in hacking, is it better to try to learn a language or learn it through tryhackme?

teal wharf
neon merlin
#

mfw having to add aliases to .bashrc for every john tool pepega

loud marlin
#

you don't

neon merlin
#

I installed from github, not package manager so if I type a tool name it just says "not found" without setting an alias

mossy bloom
loud marlin
#

if john is installed outside $PATH variable, then just need to add location into $PATH

#

what is output in terminal if you type locate john or whereis john

neon merlin
#

locate gives a wall of files and whereis says /etc/john

mossy bloom
loud marlin
#

unsted in terminal try run john /etc/john and then rest of command

#

just it is weird to work like that

neon merlin
#

that isn't even where john is so I don't know why it's saying that

#

My john tools are located in /home/user/src/john/run

loud marlin
#

do you have that location in $PATH variable?

neon merlin
#

export PATH="/home/user/Pentest/john:$PATH" is at the end of .bashrc but it doesn't work

#

It only started working when I started adding alias for each tool

loud marlin
#

w8. where john is installed? in that pentest or in /home/user/src/john/run this one ?

#

or instrall john normal way, not git lol

neon merlin
#

It was in the pentest folder when I downloaded it the first time.

crude stump
#

instead of john the ripper, it should be john the hacker

neon merlin
#

Then I found a guide that gave you all the commands and set it up under src

neon merlin
#

I only got the git version to work

#

I went through that a few days ago with another user who couldn't get there's working either until they messed with the config file

#

So it seems the package manager version of john has config issues

loud marlin
neon merlin
#

"No password hashes loaded" (See FAQ)

#

But the FAQ has no info on how to actually solve it

#

It just talks about unshadowing linux passwords

loud marlin
#

and why do not try hashcat, not john

neon merlin
#

cause the room is about john

loud marlin
#

oh in that case ok

#

and do you specify --format in case of not git john?

neon merlin
#

before I didn't because it's supposed to autodetect

loud marlin
#

that yea. just if john can't detect hash type he will not load hash and so

viral crest
#

After being forced to drink at work.
I went to the coffee shop.
Got me a double shot expresso.
God Bless America.
And God bless this Coffee.

fickle fulcrum
#

hii

#

does anyone work in cybersec

viral crest
#

Does being a hacker qualify?

#

No I am not just a hacker
I have drunk 3/3rd bottle of wine.
And a double shot of expresso coffee.
Hacker.
Lolz

#

Sorry I came for the lolz and stayed for the revolution.

#

No I am not hacking for you

#

No I am not helping you cheat

#

I am just saying hello

viral crest
#

"Hello Friends"
Can I call you that?
I know I just made that up in my head.

#

You are my imaginary friend.
"Mr. Robot"

boreal scarab
#

@loud marlin I maybe going weeeeeeee right now. But what is happening?

loud marlin
#

you are not going weeee. drunk ppl πŸ™‚

neon merlin
#

Ok I figured out not having to point to rockyou.txt every time I want to use it. Add rockyou="/a/very/long/address/SecLists-master/Passwords/Leaked-Databases/rockyou.txt" ro .bashrc and then you can invoke it in commands by typing like --wordlist=$rockyou

loud marlin
#

that make sense. just it does not make sense why is doing that

worthy acorn
#

thank you

twin ridgeBOT
#

Gave +1 Rep to @fervent meteor (current: #59 - 133)

loud marlin
#

so the normal way --wordlist=/path/to/wordlist.txt is not working ?

#

then it make sense to store in variable

inner pine
#

Good morning

neon merlin
#

You ever feel like your ISP just goes "that's enough internet for you for today" and hits a big button that says "slow down targets internet?"

inner pine
#

I am setting up a USB flash drive with useful field sec tools. What should I include?

neon merlin
#

I'll be able to torrent at 20-30mb/s sometimes but can't even get 100kb/s at others.

#

Think they just hit the button. I got one 1.5GB file at 30mb/s but the next one is going only 250kb/s

#

Damn how do 3 different calculators come up with 3 different answers for 118613842 % 9091

#

Google came up with 3565, Chatgpt came up with 4999 and the linux calculator app came up with 1304.734572654

#

The answer the room wanted was 3565

#

terminal command calc gets it right

rapid merlin
rapid merlin
#

Calculator says 3,565

runic ore
#

Hi, I have a problem. So, I just started using Try Hack Me today and I do the first task(The bank). I already put the amount balance but it says I have the wrong answer. Anyone can help me?

loud marlin
rapid merlin
brave glade
#

hi guys, quick question, has VMware always been this much of a clusterf**k to download? I know I haven't setup one for quite long while, so dont know if anything happens to it. But damn it's annoying as hell

tepid furnace
#

vm wasnt always this bad

#

broadcom sucks

#

virtualbox ontop

brave glade
#

been using this for almost 7 years, suddenly users need to register for a damn Broadcom account just for an install

tepid furnace
#

id look at virtualbox imo :p

#

but I only used vmware for a few months

brave glade
#

I used vbox back then, got multiple CPU level issues that I migrated to vmware

#

dont know how it is now

#

might even try it again

warm grotto
#

When I used it as a teenager, it was just simple download, install, run for the most part. What'd they do to it? It's been a hot minute since then.

brave glade
warm grotto
#

Fair enough. I'm guessing most use VMware or VirtualBox?

brave glade
#

not like I know any other alternatives

#

these 2 are the only ones i know since I first touched Linux

warm grotto
#

Touched linux? You on linux or windows?

brave glade
#

I mean since I was first introduced to Linux

#

im on Windows most of the time

warm grotto
#

Ah, okay. I'm a Linux Penguin so I use more native stuff to it. I think windows has it's Hyper-V that people can use, though, doesn't it?

brave glade
#

I use Ubuntu for daily back then in my early networking days

#

even install multiple OSs in one device

#

now I no longer need Linux as much, so a VM is enough

#

and I havent touch THM for months, so now Im getting back at it, setting up new hacking VM

#

was in the mood for some hacking marathon until broadcom ruined the mood

warm grotto
#

I wanted to try something different during pandemic so I opted to go full Linux and haven't really looked back since. I did GPU passthrough for a VM and windows for a couple months 'cause I wanted to play some of the games that were wonky trying to play on Linux, but now it's gotten pretty good that I don't have a reason to touch it anymore.

eternal timber
#

Hello

warm grotto
#

G'day.

trail quest
#

Hey how’s it going everyone?

#

That’s good haha

brave glade
#

get verified first

rapid merlin
#

do you like written notes

#

or computer notes

#

need to know if i will regret writing my notes on google docs πŸ’€

#

okay bet yea i'm doing computer notes for rn since its just basic stuff atm

brave glade
rapid merlin
#

yup thats what im doing

#

for example

#
Fix: Snitch to your boss. Policy violation can be an example: if the user starts uploading confidential company data to an online storage service
pliant cairn
#

Morning yall

brave glade
pliant cairn
#

How are you doing today?

alpine quail
#

Hi guys! Are there any noobs here like me? To work on some simple projects, like an automated recoinassnace and gathering of tools and such.

loud marlin
#

@mossy river @sick lance

warm grotto
#

Running through rooms and modules with an Initial D megamix in the background's a kinda vibe.

boreal cosmos
#

anyone doing backtrack?

#

i am stuck on LFI

crude heath
#

Good Morning everyone

elder peak
crude heath
#

I would like to connect on kali linux ( virtual machine ) in terminal with ssh tryhackme@ipadress but I can't do this

#

Problem is in password

#

It's not tryhackme

#

Anyone can help me?

wraith fjord
#

where is the VM ?

wraith fjord
#

is it on cloud (THM) or is it your local?

#

Additionally, have you made sure the ssh services are running ?

inner pine
rapid merlin
#

which european kept writing organisation instead of organization

#

😭

inner pine
#

Organisation is the correct spelling πŸ˜‰

cold jungle
#

I just noticed something here.... LOL

#

If you know you know

loud marlin
#

yes. rust is made by one of THM user here

cold jungle
#

WOW, Its incredible tool...

deep rampart
#

guys random question i just got the 30 day badge if i lose my streak do i lose the badge too?

loud marlin
#

nop

steady pewter
grim sparrowBOT
#

:hammer: kwanmodrick#0 has been banned.

amber laurel
#

what did this guy say?

#

ohhh waitt, dw

jagged otter
#

hello

#

everyone asleep?

finite basalt
#

nahh I'm alive, how're you

#

Bout to head out to shops

jagged otter
#

taking a break from school work

finite basalt
#

fair enough man, I'm planning on fixing my sleep pattern today

jagged otter
#

good luck. mine just falls back

finite basalt
#

been awake since lunchtime yesterday but have been ill with a chest infection so only got up at 4pm

#

so plan is to go to bed tonight at 10pm roughly

jagged otter
#

i think i'd wait till after the infection is gone

finite basalt
#

nah, no point to be honest, got things to do and it's well out at the moment

#

I've been going to bed at 6/7 in the morning

jagged otter
#

yeah, i know the feeling. i been going to bed at 9am

finite basalt
#

yeah man, I'm the one in the office who comes in on no sleep kekw

#

recently went part time as well so it's only got worse haha

jagged otter
#

that sucks

finite basalt
#

I ran a freshers fair stand on no sleep and did alright tbh

#

I did have a gram of caffeine roughly that day but that was more so I was physically capable of socialising, I fell asleep about an hour after my last redbull kekw

jagged otter
#

dang

finite basalt
#

I don't recommend having that much but I'm not particularly sensitive to caffeine, didn't have jitters or anything

jagged otter
#

i can't do caffeine

finite basalt
#

Although I didn't have caffeine the next day except for an espresso just in case my heart decided to give out haha

jagged otter
#

i drank a code red mountain dew and stayed up for 2 days

finite basalt
#

It relaxes me more than anything, I actually had a period of time where I drank it for stress relief while working at my old job

#

That was quite bad though because I was getting to the end of the day and finishing 4/5 cans of redbull and forgetting to drink water. I have never experienced so much pain as my kidneys punishing me for dehydration

jagged otter
#

wow

finite basalt
#

luckily after puking a couple times and drinking significant amounts of water and sleeping for a day I was right as rain

jagged otter
#

well it does say redbull gives you wings

finite basalt
#

Yeah, I actually prefer coffee, if I want caffeine I have a 350mg/170ml coffee

#

Got 3 times as much caffeine with less additional chemicals etc.

#

I recently got a pressure valve as well for my aeropress so need to try that soon

jagged otter
#

true

finite basalt
#

anyway imma head to the shops

#

but have a lovely day man πŸ˜„

jagged otter
#

lol you too

gray sonnet
#

Hey James πŸ‘‹

tulip heath
#

Morning everyone

#

support team ain't available on weekends ?

loud marlin
#

some might.

tulip heath
loud marlin
#

oh. can try other card or so ?

tulip heath
loud marlin
#

same bank or different ones?

tulip heath
loud marlin
#

you sure there is enough $ on cards ?

tulip heath
loud marlin
#

then might be up to bank... some might answer here, if not send email

tulip heath
loud marlin
#

then when it comes them some will respond

arctic cradle
# tulip heath

I believe this is a bug or sort of, another user complained and Scrubz suggested to email the support

#

(if not mistaken about the support part)

tulip heath
#

I think the support team isn't available on weekends

arctic cradle
#

well, it's almost Monday, right πŸ˜„

#

you'll probably get a reply tomorrow

tulip heath
#

I'll wait πŸ˜„

arctic cradle
#

yeah, sadly when it comes to these type of problems, only the support can help you out, our hands are cuffed

inner pine
rapid merlin
#

I can’t drink coffee like that

#

I usually drink decaffeinated tea

half girder
#

does someone know what a hash file with hash + salt has to look like for hashcat?

loud marlin
#

can you post hash that

#

is that thm room that you also link

half girder
#

the exploit to be used is outdated, so i fixed it a bit as far as i could to get a result, but the cracking feature doesnt work anymore, therefore i want to use hashcat for

loud marlin
#

hash as you linked need to change in order to hashcat can use it

half girder
#

so hash:salt or something like that?

#

thanks, ill try

twin ridgeBOT
#

Gave +1 Rep to @loud marlin (current: #24 - 350)

chilly veldt
#

otherwise hashcats help function also tells you

half girder
chilly veldt
#

but it's best to do your own research before asking for help πŸ˜‰

inner pine
real spruce
#

Hi , did anyone rooted the new backtrack room , i have a question

half girder
half girder
shell nova
#

Should be a tool to convert py 2 to py3

hearty stream
#

yo

#

do i need to learn HTML, CSS, Javascript first to become ethical hacker?

half girder
finite rock
hearty stream
#

cause i already started learning HTML

twin ridgeBOT
#

Gave +1 Rep to @finite rock (current: #349 - 15)

finite rock
hearty stream
finite rock
rapid merlin
#

Does anyone know of any websites where you can put in what you want on a pc and it tells you what parts to get πŸ‘€

half girder
hearty stream
finite rock
hearty stream
#

i cant

#

im broke

arctic cradle
#

being broke doesn't stop you from making money

hearty stream
#

i work at warehouse im 16

finite rock
arctic cradle
#

more like it motivates you to make money even more

hearty stream
#

so should i learn hacking and from that make money?

hard pine
finite rock
arctic cradle
hearty stream
#

i want financial freedom

hard pine
#

blud thinks life is like movies

hearty stream
#

that will not fulfill me

arctic cradle
hearty stream
#

thats not the life i want

half girder
#

im too old for that kind of discussion 🫣 later

arctic cradle
#

sorry to break it to ya but life's hard and if you think that getting financial freedom at 16 happens with the snap of a finger, sorry mate, doesn't work like that

arctic cradle
naive violet
frail locust
#

At this point, I had to explore around THM more and I see wayyyyyy more resources to learn other tools to get me started. You're getting money's worth out of it.

Had to revisit on why I went in the first place. Doing a career changer journey

rapid merlin
rapid merlin
#

I want something for designing systems, Ai eg

#

Doing projects

rapid merlin
#

Designing systems? Idk wym that’s too broad

naive violet
#

Well, very specialist. I don't know of any sites like that, if I were speccing a system for it I'd be reading a lot of Puget Systems documentation

rapid merlin
#

Okay thank you

#

I’ll have a chat with chat gpt

loud marlin
#

total reasonable thing

wise cradle
#

Hi

inner pine
#

Simple CTF > Is there a nmap command to retun all services on port 1000. This only returns 1:
nmap -p1000 10.10.135.251

loud marlin
#

well... you need to add service discovery flag

wise cradle
#

English or spanish

#

whoever talk first is gay

inner pine
cloud quiver
#

-p 1000 tells the command to scan ONLY port 1000

inner pine
sick lance
inner pine
#

Time for a pineapple break

grim sparrowBOT
#

I cannot find a mute for the user papamidnite0272#0

#

I cannot find a mute for the user papamidnite0272#0

sick lance
rapid merlin
#

Does anyone know if there is some kind of box where you can put your computer so other people who come over can physically touch my tower πŸ˜…

cloud quiver
rapid merlin
#

I’m going to buy a fractal design meshify C mid tower

rapid merlin
cloud quiver
opal crow
#

Guys I have a question, does anyone know of a course or yr compilation of a full computer science degree? Basically im pursuing one and I don't need to attend lectures I just have to give exams irl. The university is about 6/7 hours by car from my home and they don't give zoom lectures. If I could find a course like that I would save on so much money and time and headache because I could study at home with chatgpt and watch the same arguments at home

arctic cradle
#

they should have what you're looking for

cloud quiver
rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #317 - 17)

void zodiac
#

Working in terminal and editing code are becoming addictive, what's going on with mecri

arctic cradle
#

I also can't comprehend it still but I just enjoy the terminal more than clicking folders

void zodiac
#

And it becomes much faster and easier to work with than to use a user interface

arctic cradle
#

yeah

#

I actually had trouble using Brim to analyse a pcap file whereas I was faster using the terminal and zeek-cut commands

polar spoke
chilly veldt
polar spoke
#

eventually

#

it's one of those algorithms that doesnt really accelerate well on GPU, which is kinda the point of it

#

so getting it running in a way that's worth adding is... kinda painful

chilly veldt
#

understandable, we where wondering about it yesterday due to some challenge we where sitting with

shell nova
#

John doesn't have it?

chilly veldt
#

nope, john doesn't either

#

actually, john has it, on systems that support yescrypt

cosmic pendant
#

GM Everyone

karmic geyser
#

GM mr Phd.

cosmic pendant
cosmic pendant
karmic geyser
#

Hii, hru Sir?

tired moth
karmic geyser
#

Oh bing here, πŸƒπŸ»β€β™‚οΈ

tired moth
#

nice bio simon

shut hawk
rapid merlin
#

Afternoon everyone, hope everyone is having a good weekend

brittle lynx
#

Hey guys if I get an ISACA exam passed without experience do I get anything at all ?

Or it is just for once I get experience I can claim the cert ?

pliant cairn
#

Yescrypt better yes

brittle lynx
pliant cairn
#

What?

karmic crypt
#

Hey there, hope you are having a great weekend.
I'm a day trader looking to automate my own strategy. I have zero knowledge of coding, but through my research, I found that purchasing historical data and importing it into Python would be ideal for writing a script to make my backtesting more effective.

So, my question is: does anyone here have experience with this type of coding? If so, could you point me in the right direction to get started? I know this will be a marathon before I reach my goal, but I don't want to waste more time relying on someone else. Thanks!

quartz fog
#

I wrote something that scrapes for stock ticker data and then exports it to an SQLite3 database and does some calculations for some columns...

willow shuttle
#

Hello guys, I’m new here.
I’m a computer science student.

#

I would like to ask if there is a moderator here.
I have a research survey I need to fill up.
I would like to know if it’s allowed.

quartz fog
#

I'd be willing to sell the script for a modest fee.

polar spoke
rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @polar spoke (current: #160 - 46)

rapid merlin
polar spoke
#

Yeah sure

rapid merlin
cosmic pendant
#

Argon everywhere then! πŸ˜„

polar spoke
#

that's also difficult to recommend for me

#

for some similar reasons as for yescrypt

#

bcrypt is strong but importantly, it's also dead simple and well supported

#

very difficult to mess up a bcrypt deployment

#

yescrypt and especially argon2 are quite a bit more complex to understand and thus deploy properly, even leading to instances where they end up being weaker than a bcrypt implementation they were meant to replace

#

i believe openwall even says this on their yescrypt page

#
Technically, yescrypt is the most scalable password hashing scheme so far, providing near-optimal security from offline password cracking across the whole range from kilobytes to terabytes and beyond. However, the price for this is complexity, and we recognize that complexity is a major drawback of any software. Thus, at this time we focus on large-scale deployments, where the added complexity is relatively small compared to the total complexity of the authentication service setup. For smaller deployments, bcrypt with its simplicity and existing library support is a reasonable short-term choice (although we made progress towards more efficient FPGA attacks on bcrypt under a separate project). We might introduce a cut-down yescrypt-lite later or/and yescrypt might become part of more standard or popular libraries (and it is already in libxcrypt), making it more suitable for smaller deployments as well. 

from: https://www.openwall.com/yescrypt/

#

this is also the same advice i gave to OWASP a while back, bcrypt wherever you can unless you really know what you are doing

#

though my suggestion was later overruled in favor of Argon2 regardless

karmic crypt
quartz fog
#

I used python. These are the imports I used

import sqlite3
from bs4 import BeautifulSoup
from selenium import webdriver
import random
import argparse
#

I also used proxies, but you probably don't need to do that πŸ˜›

karmic crypt
twin ridgeBOT
#

Gave +1 Rep to @quartz fog (current: #494 - 10)

karmic crypt
#

My main focus is on trading, trading related scripts and coding my strategy.

simple valve
karmic crypt
twin ridgeBOT
#

Gave +1 Rep to @simple valve (current: #20 - 414)

faint harness
#

Hi everyone

simple valve
karmic crypt
rough wedge
fresh shale
#

Hi guys, I am new beginner in hacking... I just completed some 4 free basic modules in THM, what is best fast and free (or one month subscription) strategy to finish junior pentest, web fundamentals , red teaming , offensive pentesting and comptia pentest+...

simple valve
fresh shale
simple valve
#

There are always free resources to learn. pwn college, Portswigger Academy, and cryptohack are just some off the top of my head.

south egret
#

PEH by tcm sec is a pretty good resource for building ur methodology imo, they've uploaded the course on youtube

fresh shale
fresh shale
twin ridgeBOT
#

Gave +1 Rep to @simple valve (current: #20 - 415)

simple valve
#

Free resources will always be there, just need to sift through all the BS

fresh shale
oblique furnace
#

just finished jr. pentester path

rapid merlin
#

Anyone of you guys in red teaming?

slow dragon
#

the interview/tech support by THM, are those results out yet ?

oblique furnace
#

i did introduction to cybersecurity and jr. pentester

#

any other paths/rooms before i go out bug hunting?

#

note that i am mostly interested in web applications since the only use id get for os pentesting is for my own company (for which i have 2 servers which ive already had some friends who know more then i do pentest for me)

simple valve
simple valve
south egret
strong gull
#

i suggest checking educational websites, they tended to be misconfigured(keep in mind, i am not encouraging to do something unauthorized )

arctic cradle
#

@south egret nice "about me" status

arctic cradle
#

mine actually shoots

#

your doesn't, I survive

#

gg

rapid merlin
fresh shale
wooden totem
sick lance
fresh shale
twin ridgeBOT
#

Gave +1 Rep to @sick lance (current: #1 - 2864)

fresh shale
boreal scarab
#

Kernel go brrrr

worthy acorn
#

is there benefits to certain vm software compared to others or is it mainly just personal preference (iyo)

#

are they free?

#

xD ..i have win 11 home 😦

boreal scarab
#

Weeeeeeee

worthy acorn
#

ill try them and compare

indigo yarrow
#

I am a university student looking for a job. Should I take the OSCP exam?thanks

south egret
#

fr kekw navigating through their website gave me headache

worthy acorn
#

ive been using vbox i wa just curious if there were other free vm software that was a smooth to set up and isnt super bugged out

indigo yarrow
twin ridgeBOT
#

Gave +1 Rep to @tired moth (current: #2263 - 1)

tired moth
#

i hav oscp in 4 days

#

but i have bonus pointsss

#

thank you

wooden totem
#

certified professional

eager marsh
#

SocLvl1 is funny

ionic bloom
#

does Virustotal throw false positives because of virtual machine ?

sick lance
hollow quarry
#

Can someone help with nano? I would like to paste something inside nano but it doesnΒ΄t work. The same as I want to have this on --> { in nano, but it wont work out for me πŸ™ƒ

sick lance
#

If so.

hollow quarry
sick lance
#

Look above gif.

atomic kernel
#

@dark sequoia hi

karmic geyser
#

πŸ‘€

hollow quarry
rare hamlet
#

Hello!

#

Who have a idea for a osint tool ?

sick lance
#

Depends, what are you Osinting?

rare hamlet
#

Nothing totally. It's just for my github.

sick lance
#

eh, it would be hard to suggest as I wouldn't give you a geolocator as in publc domain info.

rare hamlet
#

a Whois?

rapid merlin
#

I always find OSINT a strange field, not that I don't believe that it's not part of security but it's not a technical skill. I'm not knocking it, but asking technical ppl to do it to me seems odd

sick lance
rare hamlet
#

Ok!

#

Thanks you really...

sick lance
rapid merlin
#

sorry for my hate on OSINT lol

fresh shale
#

Can anyone please give me any free course name like HTM and THM free videos on Junior Penetration whether on YouTube or nay other ... Has to be interactive like THM and HTM...

sick lance
sick lance
#

My advice is to just get a sub on THM, or use the free content, 60% of it is free.

fresh shale
eager marsh
#

Don’t take that piece of crap

sick lance
eager marsh
#

Stop trusting the Google certs they’re worthless

mossy river
eager marsh
#

They won’t get you a job lmao

sick lance
fresh shale
sick lance
mossy river
rapid merlin
mossy river
#

OSCP Alone won't get you a job

eager marsh
#

You might as well have taken the Security+

sick lance
fresh shale
sick lance
eager marsh
rapid merlin
#

the subscription pays for it's self, worth it

sick lance
#

That depends on the user.

fresh shale
sick lance
rapid merlin
#

it works out as Β£11 a month, that's so little. It's well worth it

sick lance
#

It's good for new users too, THM might not suit their style of learning.

rapid merlin
#

If you do annual it's even cheaper

sick lance
#

If you're a student it's even cheaper.

rapid merlin
#

^

fresh shale
eager marsh
sick lance
#

Take the difficulty with a pinch of salt

What is hard for you, could be easy to somebody else.

south egret
rapid merlin
fresh shale
sick lance
fresh shale
#

No I checked and tried it... Just that you somehow need atleast one month subscription to complete Junior pentest , that to if you want to spend more than 12 hours daily...

sick lance
#

On the contrary, their post made it seem like it's too short with the sheer vast amount of topics...

#

See.

#

My suggestion is to not speed run anything, and take notes, the more the better.

fresh shale
#

I am just figuring out is Junior pentest can be complete in one month so that is why I am asking for expert.. is it possible,?

sick lance
#

You'll also want to avoid burn out.

fresh shale
sick lance
#

Again, their post is making it seeming like they want to learn as fast as they can.

fresh shale
sick lance
#

Have you logged in?

fresh shale
sick lance
#

@pallid lotus

Gib ViP ticket.

naive violet
#

The data doesn't come from the public
It comes from dedicated volunteers

sick lance
#

It seems to stick members.

fresh shale
#

But they need some minimum amount of money to run organization... If you are student you may claim the subscription for even less maybe 10$ don't know

fresh shale
pallid lotus
sick lance
#

Not quite.

pallid lotus
#

Will be lucky if my honourary membership gets me a guaranteed ticket lmfao

fresh shale
sick lance
naive violet
#

Nah that's the point
The data is given for a specific cause, rather than publicly

chilly veldt
#

I feel like I have packed too much for my vacation

fresh shale
chilly veldt
fresh shale
sick lance
#

I remember when Ippsec was mentioned in here they'd pop up.

fresh shale
sick lance
sand trench
#

cisco netacad goes brrrrrrr

atomic kernel
#

@chrome vale hi

sand trench
#

any news if the .io domains are still gonna go poof???

chrome vale
atomic kernel
wraith fjord
chrome vale
sick lance
atomic kernel
wraith fjord
#

oo can i join?

atomic kernel
sick lance
#

@rough gorge did you .io ever fix itself?

wraith fjord
#

Not yet atleast

atomic kernel
sand trench
#

...??

#

0xD not hacker???

rough gorge
atomic kernel
wraith fjord
#

for sure!

chrome vale
#

The more the merrier ^_^

wraith fjord
#

Haventplayed Koth in while πŸ™‚

chilly veldt
sick lance
atomic kernel
#

Why can't I message there

wraith fjord
#

Youd need to verify

sharp citrusBOT
atomic kernel
#

And I don't want to do it now really

sick lance
#

I see, in any case, Koth chat is for that channel, not #general

rare hamlet
#

i have the permission for send a github link ?

sick lance
rare hamlet
#

Yeah!

#

i want your reviews lol

sick lance
#

We prefer members interact with the community more before self promotion.

rare hamlet
#

Ok

#

I think I found a crazy hole.

#

The bot @sharp citrus have a anti-link ?

fresh shale
twin ridgeBOT
#

Gave +1 Rep to @wraith fjord (current: #137 - 54)

sick lance
#

Tried to play a game on my phone and it's shouting at me telling it's rooted.

worthy acorn
sick lance
rapid merlin
#

Is there a way to make pythons text bigger

#

I’m so blind

#

Found it

#

πŸ˜‚

#

good day

#

hope everyone is doing well

frail ledge
pallid prairie
half lion
rapid merlin
sand trench
#

no shadow is not doing well... wells are to deep and scary

rapid merlin
sick lance
#

I just want to play Golf Battle >:-|

cosmic pendant
#

Howdy

rapid merlin
#

I wanna dye my hair, it’s been black for almost two years. What colour should I go πŸ‘€

sick lance
#

Ginger.

rapid merlin
#

It was one of my favourite looks

jagged otter
#

hello

rapid merlin
#

Hi guys

azure cape
#

Hello, I have a question if it is possible to put Linux on the second disk. Make this kind of dualboot but between disks.

rapid merlin
#

How can i see hosts on the DMZ

sick lance
sick lance
rapid merlin
sick lance
azure cape
#

oh okay. Now i understand

sick lance
sick lance
azure cape
#

idk it;s not the same feeling xD

rapid merlin
#

I want to a little advice please

sick lance
#

Full screen it πŸ˜„

sick lance
rapid merlin
#

Ejpt exam

#

I start for 6 hours

sick lance
rapid merlin
#

Yes

azure cape
#

i really would like to do dualboot on one disc but someone told me that it's possible to destory windows or smthg

rapid merlin
silver sky
#

My desktop is fitting

rapid merlin
sick lance
rapid merlin
#

Yes

grim sparrowBOT
#

:mute: grausturm#0 has been muted.

wooden totem
silver sky
rapid merlin
wooden totem
silver sky
sick lance
sick lance
rapid merlin
sick lance
rapid merlin
#

Got it

jagged otter
#

some how I put myself in a situation. I'll be taking 2 exams in november the A+ and the network+

#

i hope i don't confuse my answers

#

i'm just taking a break

rapid merlin
#

Good luck

jagged otter
#

thank you

chilly veldt
#

Hmmmm, I am contemplating if I should arrive at proper time for work tomorrow or arrive late cause i am staying all night

rapid merlin
#

Any of you guys watched the movie Django Unchained?

half girder
chilly veldt
half girder
chilly veldt
#

I got a flight Tuesday morning in the city the office is at, so I am staying at the office/a sleeping place I have close by

#

I live around 170km away from the office

jagged otter
#

ok think imma get back to it. it's been fun

pallid prairie
#

Chromium based browsers are RAM hungry monsters.

half girder
pallid prairie
chrome vale
#

Where do we report a user cheating on KOTH? Ch1 is getting king.txt nearly instantly at start and no way to modify it.

chilly veldt
pallid prairie
pallid prairie
half girder
sick lance
#

They're using a rootkit

half girder
#

however i have the same atm, all over the place building lots, so my 20 minutes commute is now 1h too

#

time for working remotely lol

chrome vale
sick lance
chrome vale
#

Are you suggesting he has a rootkit sitting on all the machines, so despite resets it's instant? As soon as we started it was like 0.01 seconds and he had king

sick lance
#

I'm not suggesting it

#

I'm telling you what they're using

pallid prairie
sharp citrusBOT
#
TryHackMe's Email

TryHackMe's support email address.

sick lance
chrome vale
#

Can't isntall chkrootkit or anything on the machine -- it's like fishing for a needle in the haystack rather than playing KOTH

sick lance
#

It's boring if you ask me.

pallid prairie
chrome vale
#

If that's the case, I'm not sure I wanna give them my premium user $$ 😦

pallid prairie
#

Everyday he go in games, be a king and not let others explore at all.

rapid merlin
#

Someone’s using a rootkit on me

chrome vale
#

MissStealth, is it Ch1?

tired moth
#

hi

pallid prairie
rapid merlin
#

Working in chipsec tonight

#

And py

rapid merlin
#

I’m going blonde

rapid merlin
#

You know why I’m dying my hair because I’m turning into a wizard and like to pretend I’m still young.

rapid merlin
#

Wait what

#

When

#

Show me

pallid prairie
rapid merlin
#

Okay, delete your message then

tired moth
sick lance
#

You know we can see deleted messages, right?

rapid merlin
#

I was ready to stand on business

rapid merlin
sick lance
rapid merlin
#

Especially when I wouldn’t dm you πŸ˜‰

#

Kekeke

#

Too busy dancing round my kitchen

pallid prairie
rapid merlin
pallid prairie
rapid merlin
#

I would just live there

devout palm
#

I'd like to be a plant

pallid prairie
devout palm
#

And not worry about life

half girder
pallid prairie
devout palm
#

Doesn't matter as i am going through things

#

But yeah, happy to be a part of the nature

half girder
devout palm
#

I hate the fact that everything is temporary

#

Worrying about what will happen next in bright days would ruin yk

half girder
#

oh im always positive about things, as long as there is a roof over your head and a meal on your plate, things are good

devout palm
#

That's good

#

I can't do it

sand trench
#

shadows favourite colour is still blood red

#

that dark redish color of blood

#

so nice

pallid prairie
sand trench
#

definitely not the first time people call shadow vampire

#

188 cm tall
long dirty blonde hair
very very pale skin
love the colour of blood

opal crow
#

Oh to be pretty and mysterious

opal crow
#

I look like a taliban

rapid merlin
#

Show us

opal crow
#

Hell no

sand trench
pallid prairie
sand trench
#

you know shadow could do a vampire themed ctf

#

but it would be hard to get it to release this month

sick lance
#

Don't let shadow fool you, she's as old as her streak is on THM

opal crow
#

Shadow is a female?

sand trench
#

the only thing that is incorrect is calling shadow a vampire... shadow is older then vampires

opal crow
#

I thought he was a dude larping as a girl

sick lance
#

Her pronouns are right there?

opal crow
#

Ye I thought he was larping as a girl

#

She

blazing granite
rapid merlin
pallid prairie
blazing granite
#

ouch!!

pallid prairie
#

Oh the first person born after big bang.kekw

rapid merlin
devout palm
rapid merlin
devout palm
#

Bananas? Damn

sand trench
rapid merlin
devout palm
rapid merlin
#

Oh yeah the banana plants

#

They’re cool

devout palm
#

Yea

#

You have cactus?

pallid prairie
rapid merlin
#

Nah I don’t, my newest plant was a carnivorous plant

rapid merlin
jagged otter
#

needed a break

#

how's everyone?

pallid prairie
pallid prairie
mystic hedge
#

hello

opal crow
#

Guys I have a question

sand trench
pallid prairie
mystic hedge
#

can someone recommend me a book or a course / website on which i can gain skills and play king of the hill?

jagged otter
#

i tried to watch lotr. couldn't do it. hats off to those who did

opal crow
#

Basically I enrolled in university and I'm attending all lectures n stuff
I paid 80 euro per semester for this uni and I won the green card for the us so skipping lectures won't be a huge cost in terms of money or networking (I'm in Germany).
I have 4 exams for this semester which are IT systems, basic cs, basic programming and analysis 1.
I'm thinking of going back to my home country which is like 6/7 hours by car from the uni, study on my own and come to the uni only to take exams, coming to lectures isnt mandatory and I'd have them recorded for most subjects besides cs basics.
Because I've been studying cybersecurity solo for about 6/7 months now and the way I learned how to learn is to dig deeeeep in every sentence every concept every word that I don't understand. And its working great. And now I'm at uni where the professor talks and I can't ask a billion questions like I ask chatgpt so the end result of me not asking all the questions I need is that I don't understand the lesson and then I have to go home and learn by myself as if I didn't go to lecture
I just feel like it's unnecessary to attend lectures idk, do you think this would make sense or should I stay here?

jagged otter
#

wow

opal crow
pallid prairie
rapid merlin
#

Hold up, let me get my glasses for that essay

rapid merlin
pallid prairie
opal crow
jagged otter
#

i'm in college now

naive violet
opal crow
#

Everyone is telling me not to do it because it's university is an opportunity blah blah but idk i feel like I'd learn better self studying if uni keeps being like this. It's as if they make it very easy for students to not come to lectures while not providing much to students who go

rapid merlin
jagged otter
#

just don't get stuck in the parties and other things

naive violet
#

And yes, the lecture alone is not meant to give you everything.
You need to be supporting it with self study on the material they've told you to read.
This isn't school any more. You need to work independently as well.

rapid merlin
#

You need a little bit of everything

opal crow
rapid merlin
#

And plus cyber is never ending learning too. It just never stops

naive violet
jagged otter
#

chatgpt is just vomiting the stuff it has learned back at you.

sand trench
#

chatgpts code does not understand the meaning of words last shadow heard

#

but yeah

jagged otter
#

if it makes you want to bang your head against the wall, then you're on the right track

sand trench
#

for computer science you can get a decent bit of info from harvards cs50

#

^ which is on youtube

opal crow
sand trench
#

if you use chatgpt for the programming course shadow is currently taking in uni you get sent out and asked to return next time the course goes around

jagged otter
#

find out what you want to do and learn it

naive violet
#

I have to hard disagree there.
The more you go into specialist topics (or "delve" as the spicy markov chain likes to say) the more subtly wrong it'll get.
You need to know what's correct in order to spot it making the mistakes.

opal crow
#

For analysis 1 I would need a private teacher even if I stay irl in uni so not very useful either

pallid prairie
# opal crow Basically I enrolled in university and I'm attending all lectures n stuff I paid...

Self learning is the best learning which I believe.
And no one can teach you everything you must have to learn alot of things by yourself.
But a guidance and a helping community is better where you can share not only knowledge but your life lessons and learn the same from others.
So by saying not going to college and learning using some AI model is not a good option at all.
Use it as friend, but not as a philosopher and guide.

opal crow
#

The only subject that kinda lets me by myself is cs basics but there's tons of online resources for that and chatgpt knows the basic theory of that course and can create exercises for me

naive violet
#

If only that were true

jagged otter
#

sounds like it's online

half girder
naive violet
#

Because it's absolutely not, as someone with niche and specialist skills and interests

rapid merlin
#

I use chat gpt all the time

clear jackal
#

Glue belongs on pizza

pallid prairie
naive violet
#

It's a spicy Markov chain.
It can't reason. It can't fact check.
It's purely what words are most likely.

sand trench
rapid merlin
opal crow
naive violet
#

The training data can be great, but it's still a GPT. Still works the same

sand trench
#

Banana
Chicken
Curry powder
Peanuts
Pineapple
on a pizza

clear jackal
opal crow
naive violet
#

No, that's literally why hallucinations happen

high mulch
# opal crow Wdym?

stay on the Uni path, so you can take that degree.
You're already doing the extra step which is studying by yourself.

naive violet
#

You're fundamentally mixing classes of AI/ML

finite crystal
#

sup

naive violet
#

You're assuming it reasons

#

It doesn't

jagged otter
#

i just need that piece of paper

naive violet
#

It can't

jagged otter
#

if i need to take the certs i can pay for them myself

pallid prairie
#

There are tons of chats which I am missing to read.😫

jagged otter
#

all i really wanna do is bug bounty

clear jackal
#

You should really only pay for Security+ if you need to pay for anything

finite crystal
#

personally, i dont fully trust chatgpt

rapid merlin
finite crystal
#

u know

clear jackal
opal crow
jagged otter
clear jackal
rapid merlin
#

Are there any better AI than chat GPT ? Rn

#

Curious

finite crystal
jagged otter
finite crystal
#

u should try different things to have a feel for it

naive violet
#

@clear jackal debating getting a QRP HF transceiver btw

finite crystal
#

i mean if u were to do bug bounties for the rest of ur life

jagged otter
#

i enjoy cyber security

finite crystal
#

it would be the life of a programmer

strong gull
finite crystal
jagged otter
#

i know

clear jackal
jagged otter
#

i like hacking and digital forensics and many more things

finite crystal
#

+1 right there

#

couldnt have said it better

opal crow
jagged otter
#

i joined try hack me to see what other fields are like

#

i love to learn

finite crystal
#

what type of rooms are u doing?

naive violet
#

Have you not seen the classics?
How many Rs are there in "strawberry"?
It's not as smart, learned, educated, etc as you think. It's a spicy Markov chain.

Try it for some proper, detailed technical questions.
I've had it spit back answers that would have literally killed me had I listened.

naive violet
jagged otter
finite crystal
jagged otter
#

i also love over the wire

finite crystal
#

its machine learning

#

it takes some time to fully develop

#

and it wont even fully develop

naive violet
clear jackal
clear jackal
rapid merlin
#

I had to ask

strong gull
clear jackal
#

Yes, because you don't meet the requirements currently

naive violet
sharp citrusBOT
opal crow
# rapid merlin It says twoπŸ’€

Professors at my uni use it to explain exercises to us lol. This is why I'm questioning staying here, If they use it why tf am I sitting there watching someone use chatgpt instead of using it on my own

finite crystal
rapid merlin
#

I say please and thank you to chatgpt πŸ˜‚

twin ridgeBOT
#

Gave +1 Rep to @vale flax (current: #2263 - 1)

jagged otter
#

i use it to search for certain websites

finite crystal
#

i use it for music

#

and math

opal crow
#

I think it depends if you upload a data base to it or not. If you upload a file and ask it to explain the file to you which is what I've been doing for now it works pretty well

clear jackal
jagged otter
#

also i give it my poetry to read to analyze lol

waxen oriole
#

/verify

clear jackal
#

Non commercial I should say

rapid merlin
opal crow
#

What's that

clear jackal
#

Commercial you can do things like encryption

rapid merlin
jagged otter
#

the plural of R

finite crystal
#

its 3

rapid merlin
#

It said two

jagged otter
#

lol 2

finite crystal
#

tf u mean 2

rapid merlin
#

Did everyone miss what James said ?

finite crystal
#

now im getting angry

#

😠

jagged otter
#

strawberry letter 23 is a great song

naive violet
opal crow
devout palm
#

stawberi

naive violet
rapid merlin
finite crystal