general

[boreal scarab]

It'd probably say 4 out of 8 for you? Maybe? Dunno

[jagged otter]

this in your bios?

[boreal scarab]

Nope, HWInfo

[boreal scarab]

Download that app, either portable, or installer, I usually go installer. go to memory section and you'll get your answer

[jagged otter]

OK

[jagged otter]

it says dual boot

i mean dual channel

[jagged otter]

you see?

[boreal scarab]

Yah, so you're all good, you're in dual channel

[jagged otter]

i wonder why it doesn't tell you in the bios

[boreal scarab]

Asus for ya lol

[jagged otter]

lol

i hope i don't need to upgrade for a long time

i thought about getting more storage, but I use a lot of external drives

[opal crow]

Why is no one freaking out

[jagged otter]

but be cool to add some M.2's

[jagged otter]

there will always be people doing that and people creating something to fix the problem

[opal crow]

I mean ye but how do fix crypto wallets in the near future

[jagged otter]

yeah, that's a problem

[cold jungle]

Chill they are not going for your few dollars

Probably the cost of breaking into your wallet will not justify breaking into yours

[jagged otter]

i have 6.75 in bitcoin that I don't want to lose

i'd rather have gold if it were me

[cold jungle]

Still they probably won't be going for this as they are mainly focused on military use... We should be concerned about the neuclear stuff... Tough I don't know which type of encryption used there

[jagged otter]

i was thinking bout that too. but didn't a hacker break in the US and their passwords were like 123456

makes me think of that old hacker movie. the passwords god, secret, and some other lame ones

[cold jungle]

Chill bro its probably the start....

If chineese can do it other nation researcher will also find something and will use it against them

So either they will have to come with something new or some other country will come with something new to defend from this

Not really a point of concern

[jagged otter]

i think nukes are just stupid. i don't understand the complete annihilation of everything to make a point

it's like a kid that is losing a board game and flips the board over

ok thanks @boreal scarab

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #28 - 305)

[jagged otter]

i need to study. ttyl

[primal kestrel]

has anyone ever had trouble doing apt upgrade in their VM? when i reboot and login it disconnects me. i could get a newer iso but it would be a mild inconvenience

[eager marsh]

The Chinese

[boreal scarab]

You're welcome!

[simple valve]

Read the full article

They broke a small key

Quantum computer resistant encryption algorithms have also been available for quite some time now

[primal kestrel]

i got it to work by re-enabling lightdm in recovery mode

[loud marlin]

@boreal scarab grub =/ idk how stupid is to play with it, but aint smart 🙂

[night prairie]

I had a large download so I left it running overnight only to check now and see it was paused at 1% the whole time for some reason

[slow helm]

i'm i the only one feeling thm became kinda laggy

[sick lance]

Not for me.

[rapid merlin]

wishing everyone a good productive day 😊

[winged summit]

Thanks! You too!

[twin ridge]

Gave +1 Rep to @tall field (current: #536 - 9)

[boreal scarab]

jeeeeeeeeeeeeeesus

I just use default, never really CUSTOMIZE my linux

[frank void]

Hi guys. Is there any new expoit that allow skip password while login in into Microsoft account?

[loud marlin]

do it 🙂

[boreal scarab]

But but but..... time

[frank void]

I changed my password 3 times and i'm still getting constant spam on my 2FA

[loud marlin]

what you wish to do exactly ?

[frank void]

To know why this is happening

[sick lance]

Why you're receiving spam?

[rapid merlin]

thank you!

[twin ridge]

Gave +1 Rep to @winged summit (current: #109 - 67)

[frank void]

Why my 2FA ask me to approve login when there is no chance for my password to be leaked

[loud marlin]

2fa is safety

to prove that you are you

[rapid merlin]

a bot asking you to confirm you’re a human?! how dare that bot think he’s a human?

[winged summit]

Absolutely! We need more positivity in tech. Your message was a breath of fresh air 🙂

[rapid merlin]

i try. thank you 😂

[twin ridge]

Gave +1 Rep to @winged summit (current: #107 - 68)

[arctic cradle]

@sick lance may I DM you? (this is like the 3rd time I'll be asking you for DM's lol)

[sick lance]

Ya

[timid jay]

Is there a way to raise my monthly points without the challenges that come down in the same month?

[void zodiac]

Is it tough to get a job in cyber security in Poland for a foreign person?

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 15, 2024, 3:37 PM

[sick lance]

You don't need to ping a mod, and juun may be busy.

[hardy arch]

Quick question. I was completed the OSI room a couple days ago and now it states that one of the tasks is incomplete and now i can not get the box checked
even after resetting the room.

[sick lance]

Check the pins in #site-support

[hardy arch]

thanks

[sudden bridge]

where's the soc1 channel

[chilly veldt]

Cause it's fake

[sick lance]

#soc-level-1-path

[boreal scarab]

Lost in the dryer. You found SOC 2, but, sorry, SOC 1 was lost to the washer gods.

[sudden bridge]

seems like my computer is playing games on me

[boreal scarab]

https://tenor.com/view/monsters-pixar-inc-monstersinc-mike-gif-21326421

[wooden totem]

Is this normal having the volume so low (out of 100) and the volume be "normal", cus 6 is already loud. I never questioned it, had 2 different pcs and 2 different headsets and its same

[boreal scarab]

Does that headset have it's own volume control?

[wooden totem]

no the volume buttons control this, the main windows volume

[boreal scarab]

App itself have it's own volume control?

[wooden totem]

yeah but its connected to main volume, if I adjust in app it will adjust the main

[boreal scarab]

Odd

[dull river]

Who got a machine I can hack rn

[gray sonnet]

What's with offsec being acquired, anyone know something about it?

[boreal scarab]

https://tryhackme.com does

[dull river]

Thanks

[boreal scarab]

[boreal scarab]

[rapid merlin]

Home made burgers and chips tonight

[loud marlin]

https://tenor.com/view/fat-cat-garfield-tummy-full-tap-belly-gif-15742977

[sick lance]

They added Dino Crisis to PS+ library...

[loud marlin]

buy winrar licence

[sick lance]

Don't need WinRar for RAR files.

W11 does it natively now.

^

Get your own pfp.

My pfp also isn't a colour.

[gray sonnet]

how in the world did you manage to make a flag...

[sudden bridge]

r49 g51 b56

do this

[gray sonnet]

oh, a flag flag

[sudden bridge]

am i tripping or yall deleting msges

[sick lance]

They are.

And I told you my pfp isn't a colour

[shut hawk]

"transparent discord pfp"

plop it into your search engine of choice

[sudden bridge]

the power of googling.

[sick lance]

"transparent image" would yield the same result.

[worn thorn]

a deep sea creature

[sick lance]

Can still see you

[hollow igloo]

Hey guys, Mayank here from Mumbai India I am having trouble installing Arch on my virtual machine I read the arch wiki documentation followed the steps it ended up very bad do not have time to watch 1 hour long videos on how to install arch step by step do you have any fast forward or easy to understand installation process guide/video please share here thanks for the help.

No i have installed the base iso

should i install the vm file

sorry my bad download the vm file

So could you help me installing it like a walkthrough

[boreal scarab]

What should I do for lunch?

[hollow igloo]

Yes i clicked new and then added the iso gave it 4 gb ram 100gb space then clecked it on start

[boreal scarab]

[hollow igloo]

So should i expect any help from your side?

That was default location

ok

have you installed arch before

ok

Check your messages

[sick lance]

Please ask before you DM.

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2870)

[hollow igloo]

Oh sorry I apologize.

[loud marlin]

...

[pliant cairn]

Hey all

Looks good. How long did it take to configure?

[loud marlin]

couple of days for sure...

[gray sonnet]

holy shit

that looks awesome

[loud marlin]

there is more... this is just show of things 🙂

[gray sonnet]

show more :D

[pliant cairn]

Make the theme teal would be more chill viby

[loud marlin]

ff also follow color theme

[loud marlin]

@gray sonnet

[gray sonnet]

that loader is so dang cool

[gray sonnet]

Man that looks awesome

[loud marlin]

thanks... atm working on login screen...

[twin ridge]

Gave +1 Rep to @gray sonnet (current: #87 - 80)

[wooden totem]

why does the screenshot notification stay in the screenshot, thats kinda badly designed

[loud marlin]

i need to take it witrh delay. and delay popup kinda stuck for some reason

[cloud quiver]

That's one of the best environments I have ever seen 😮

[loud marlin]

also working on keybindings to run things faster

[chilly veldt]

We took over Malaga 😎

[loud marlin]

OSINT time 🙂

[molten sky]

anyone going to bsides nyc

[wooden totem]

mexican cartel boss house from breaking bad

[chilly veldt]

Lmao

[loud marlin]

@gray sonnet also

[chilly veldt]

It's an Airbnb for while we play CTF

[gray sonnet]

Ooh, that's some nice shortcuts

[gray sonnet]

my first thought literally

[wooden totem]

with mexican filter added

[loud marlin]

mexican filter... lol

[sand trench]

now apply the scandinavian filter???

[chilly veldt]

Why you want it black and grey?

[sand trench]

because it is bella mode

[chilly veldt]

Touche

[pearl raven]

One of the few things I disliked (slightly) in Breaking Bad was the usage of filters indicate that we were now over the border.

[wooden totem]

idk sweden ig, thats pretty snowy

[rapid merlin]

That looks very cold

[sick lance]

Yes.

Names should be English and easily taggable

[sudden bridge]

i didnt know names could be changed damn

what was ur name before dude

[rapid merlin]

yo

principles of security is premium (paid)

whats the free path get around

i just want to keep learning basics n shit to help showcase on my college resume n allat

[sudden bridge]

u can always check writeups

[sick lance]

Learn elsewhere or buy a sub

[rapid merlin]

write ups?

[pine stratus]

Hello, are there rooms in thm ,to explain and practice mitm attacks ?

[rapid merlin]

fr?

[sick lance]

Yeah?

[rapid merlin]

but they told me there was a bunch of free shit

thats it?

it was only like 1-2 classes

[sudden bridge]

bro language 💀

[rapid merlin]

??

im speaking english bruh

[sudden bridge]

u can go here https://tryhackme.com/r/hacktivities/search?page=1 and search for free rooms

[mossy river]

"Language" usually refers to someone who is excessively swearing 😄

[rapid merlin]

yea on here https://tryhackme.com/r/hacktivities

it says security principles should be a free path

[sudden bridge]

paths are paid, thats how they earn

[teal wharf]

at least censore some words homie

[rapid merlin]

oh lol

[pine stratus]

if anyone have an idea please ping me , and thank in advance :)

[rapid merlin]

bro i was on the wrong room

[mossy river]

All paths are free, not all content on paths are free

[rapid merlin]

sorry

https://tryhackme.com/r/room/securityprinciples

i was supposed to be here

[sudden bridge]

ik defense ones.

[sudden bridge]

yes its free as can be seen.

[rapid merlin]

i was supposed to be on security principles not principles of security

[pine stratus]

what are these rooms called

[rapid merlin]

whats the difference between security principles and principles of security

💀

It’s like the North Pole up in here

[sudden bridge]

wireshark traffic analysis. it has one task dedicated to mitm and arp poisoning.

[pine stratus]

okay thank you

[twin ridge]

Gave +1 Rep to @sudden bridge (current: #1499 - 2)

[wraith fjord]

Your pfp is me irl @sudden bridge

[sudden bridge]

also yk, u can learn about bettercap and scapy. good for offensive mitm. @pine stratus

[pine stratus]

in thm ?

[sudden bridge]

no way someone is so handsome irl

[sudden bridge]

on youtube i meant.

[pine stratus]

okay

[wraith fjord]

https://tenor.com/view/benjammins-gigachad-giga-chad-chad-giga-gif-17045906263069769854

[wraith fjord]

your pfp is how i am at work

[teal wharf]

@rapid merlin check this link it got every free room sorted

https://github.com/winterrdog/tryhackme-free-rooms

[pine stratus]

ur name represents me , but banana in stead of potato

[rapid merlin]

bro

ur a savior

love you man thanks

[teal wharf]

anytime bro

[rapid merlin]

👅

[sudden bridge]

💀 ur gonna get kicked bro

calm down

[rapid merlin]

Hush it short cake

[teal wharf]

fr

[rapid merlin]

for what

[sick lance]

This is going to be out of date

[rapid merlin]

How yk

[sick lance]

Don't be rude. 🙂

[rapid merlin]

Ik im just playin

Just joshin around

[sudden bridge]

my bro u can just search for free rooms on the search bar

[sick lance]

Rooms were moved l.

Paid > sub
Sub > paid

[rapid merlin]

thanks unc

[teal wharf]

yep few rooms there are not free anymore

but 89% are

[rapid merlin]

i will do every single room

on the list

and keep track

then make a new github

and add it to my college resume*

[wraith fjord]

Sorry wrong screen

[sudden bridge]

yeah windows funda 1 went behind paywall thats so weird

[sudden bridge]

ur name reminds me of casca from berserk

[teal wharf]

or burp basics idk why they removed it from free rooms

[rapid merlin]

i just wanna do cybersecurity so i can arrest bad hackers

[sudden bridge]

thm wants that money

[rapid merlin]

👍 🤠

[wraith fjord]

I just want to get paid alot

like

yeah

[rapid merlin]

im okay with mid pay

nvm im not gonna do that somebody just told me its illegal in dms

[sick lance]

Yeah, I was about to say....

[rapid merlin]

i ain know

[sick lance]

Not only is it illegal, it's dumb.

[rapid merlin]

i thought it was a glitch in the matrix

[tranquil osprey]

Lol, too dumb to outsource in which case you won't get the job in the first place or if you are too good then you won't need an Indian to help you out. Maybe as the CEO of your employer

[rapid merlin]

if it was legal the only reason i'd do it is so i can travel the world while also having passive income

2k a month goes a long way in some countries

thats why i wanna do cyber so bad tbh

so i can travel

[sick lance]

How can you outsource a job if you're not remote?

[wraith fjord]

imagine outsourcing the gig and the person you outsourced to, borks the whole network

and wipes the production database

[tranquil osprey]

didn't mean any offence, sorry. just kidding, too many CEOs in tech giants from India

[rapid merlin]

zero trust?

*FANGs are zero trust

[wraith fjord]

by doing something cutesy like SQLI basic test

[uneven hedge]

Hey guys back from milton

[wraith fjord]

Earth is cutesy

[rapid merlin]

cant lie tho cyber is prob top 5 best careers for potential of working remote

[wraith fjord]

depends

[rapid merlin]

game dev for example is way too competitive

especially with things like roblox, etc

mfers working for free

[rapid merlin]

pen test?

can i survive on hackerone if im good enough

[wraith fjord]

you cannot work remote in BFSI sector (usually)

sorry if your client is in BFSI

[rapid merlin]

whats BFSI?

like fintech?

[tranquil osprey]

Pentest would be an on-site job, unless it isn't too involved

[rapid merlin]

i heard if you have a really good understanding

you can make bands easily in a month off hackerone

[tranquil osprey]

That's mostly web stuff

[wraith fjord]

ive only worked with BFSI and Automobile

[rapid merlin]

that's what im persuing

[wraith fjord]

so

[tranquil osprey]

Pentest isn't just that😅

[rapid merlin]

not like in the field, RFID tag cloning, social engineering in person

like web stuff

[naive violet]

You see about the successes, you don't see the failures

[rapid merlin]

good point

[naive violet]

If it were easy, everyone would do it

[rapid merlin]

i heard if you wanna be a good blue teamer you have to be a good red teamer to begin with anyway

[tranquil osprey]

Too many failures (and fuzzzzzin) behind all that experience 🥲

[jovial wave]

any of you done btl1 cert? Heard it wasnt worth if you already did or are working on the thm soc path and should go for something harder like ccd, but not sure how true that is

[teal wharf]

blue teaming in my opinion is way harder and critical role

breaking is easy fixing is hard

[pine stratus]

oh noway

[half girder]

thats what happens when management follows the "i know someone who can do it cheaper" philosophy

[teal wharf]

true dat

but here i was talking about a Threat actor not a red teamer (yes ik red teamer is supposed to imitate a T A but with limitations)

[mossy river]

@shut hawk

Doing this rn

[shut hawk]

I'd never get fit doing that

never lose

😎

[molten sky]

relevant: the creator of the burpee himself has even said it's a horrible exercise that does near nothing

[mossy river]

Brother I know you die every pistol round

[rapid merlin]

#room-help 🙏

im going crazy please somebody help

[whole yew]

because you never play?

[shut hawk]

well it sounded better without saying that smh

[shut hawk]

lies

[molten sky]

At 6 am on October 21, 2013, in Portland, Oregon, Lloyd Weema broke the burpee world record: the most chest-to-ground burpees performed in 72 hours with 9,480
you can do it

5,234 in 12hr, 951 in 1hr

[rapid merlin]

im going to kill

whoever made the room security principles

the answer isnt the name of the principle it's the number of the principle

i hate my life i was stuck on it for 30 mins

[slender scaffold]

uhm...

[loud marlin]

@shut hawk is it true if you set HF antena you can listen UTC time ?

[loud marlin]

try harder ^^

[rapid merlin]

dude i had the right answer 💀

[molten sky]

welcome to corporate

[sand trench]

gberfm9+ug3wer9inmg34w9r9igv3wr9uigr90we908i34g9ingwerioweruio9uihwevf9uh23rgquhgef89w89uhwefgq89hgwdd9uhghasdu9

[rapid merlin]

it only made it correct when i put 2

instead of the actual name

[loud marlin]

try post in #room-help

[rapid merlin]

nah i figured it out and reported in #room-bugs

had to be a mistake

thanks for the tips tho was so confused

[loud marlin]

it is not bug. you need point to number of the answer. not the answer it self

same as all 3 q and a

[sand trench]

the answer field when empty tells you the format

[rapid merlin]

i just noticed this

my fault

[slender scaffold]

hello kitty!

[sand trench]

nah it was a centipede shadow tried to kill on their keyboard

kill as in capture and place outside as they can't survive these cold temps well shadow has heard

[peak whale]

hey what was the program called where i could use kali linux on a virtual machine?

is it vm workstation pro?

[teal wharf]

vmware / virtualbox ?

[sick lance]

A hypervisor?

[peak whale]

virtualbox is the one, recognized it from its icon! thank you

[boreal scarab]

@hollow pivot and @shell nova if either of you play Euro Truck Simulator. There's a 1:1 Paris map: https://forum.scssoft.com/viewtopic.php?t=308325

[shell nova]

Would not drive a truck in paris

Ever

[lament tendon]

I did this with a fighting game once, were I would do 10 push ups per lost fight and I died in real life.

[sand trench]

every time shadow stubs their toe they do 1 push up
which results in 64 push ups a month

[lament tendon]

That must hurt.

[sand trench]

definitely

sometimes the nails fall off because of being beaten so badly

[lament tendon]

At this point I would recommend replacing all stairs with ramps and removing all walls and furniture from your house.

[sand trench]

shadows cordination skills are whacky

[loud marlin]

❤️

[lament tendon]

Why do you have the box of your router mounted to the wall?

[loud marlin]

so the router don't fell lonely

[lament tendon]

I see, makes sense.

[loud marlin]

and warranty... at last i know where the box is...

and more surface for dust ofc

[pliant cairn]

fr, if i dont clean my work table turns to egypt

[lament tendon]

I hate all surfaces in my room for that reason.

Cleaning is annoying.
And you have to do it every like 3 days as well...

[loud marlin]

you know that most of dust is made of dead/dry human skin ?

[lament tendon]

Yea, not really bothered by that.

I just don't like Dust because it looks dirty.

And, well, I have to clean it all the time. xD
Maybe I should get a roomba.

[barren cove]

Any resources on hardware hacking/pentesting

[loud marlin]

my boss get siri thing on work as gift... i hear she have big fights when talking to it 🙂

[teal wharf]

dark web forums

[lament tendon]

Hmm, HTB Acadey has some stuff about it.

[barren cove]

Is it worth opting for ?

[lament tendon]

More advanced content can be pretty expensive there, tho.

[lament tendon]

Darknet? I would say no.

[loud marlin]

just google it

[lament tendon]

Plenty of stuff you can find and access a lot easier on the clearweb. xD

Specially for entry-level.

[barren cove]

Wanted to be unique apart from pentesting and soc huh

[lament tendon]

I mean, you can.

Hardware hacking is some pretty amazing stuff.

[barren cove]

OSINT is cool.i guess

[lament tendon]

OSINT is boring as hell, in my subjective opinion.

[barren cove]

No doubt recently was hacking printer stuff 🤓

[barren cove]

It's cool isn't it like you do your intel

[drifting mural]

Yeah you just google

[barren cove]

Yeah I saw this but no pdf available

[lament tendon]

I guess?
But I can also image more fun things then looking at social media profiles and public records all day.

Just not my field of security.

[loud marlin]

https://www.humblebundle.com/books can be found here from time to time to buy

[barren cove]

OSINT Analyst heheh

It's a separate discipline in cybersecuity

[lament tendon]

I knew a guy on here once who did that.
I'd ping him, but I forgot his tag. xD

[narrow grotto]

Is anyone available to help guide me on how to get a reverse shell? I am currently stuck.

[rapid merlin]

Erm what the sigma

[lament tendon]

Sure.

What are you stuck with?

Ah, before that: active CTF? Homework?

[barren cove]

So which field u think in cybersecurity is more worth doing don't tell me pentesting

[lament tendon]

"Pentesting" can be a lot of fields as well.

[barren cove]

Android ?

[narrow grotto]

I'm in the Ignite room, but more specifically I am stuck trying to get root. I modified the reverse-shell-php.php (I think the correct way) and I ran 'python3 -m http.server 8080' to start a server.

[lament tendon]

You can pentest networks, web applications, hardware, binaries, the list is endless.

[lament tendon]

That too.

[rapid merlin]

For me it's reversing and malware analysis

[barren cove]

Malware analysis is pretty cool field but setup frustrates me

[rapid merlin]

Yeah

[narrow grotto]

When I'm inside the ignite machine, when I run 'wget http://10.10.75.122:8080/reverse-shell-php.php' it says file not found.

[rapid merlin]

It's frustrating and difficult but rewarding

[barren cove]

Remnux and flarevm

🫠

[narrow grotto]

Typo, that was meant to say *php-reverse-shell.php

[rapid merlin]

Still difficult

[lament tendon]

Can you give me a bit more info on the room? When I search for "Ignite" I get 7 pages of results.

[rapid merlin]

For more sophistcated cases, ofc

[lament tendon]

Is this rom part of a path?

[barren cove]

Which setup you using for analysis

[lament tendon]

Ah, found it.

[naive violet]

@barren cove Although it's a little old, Hacking the Xbox by Andrew "Bunny" Huang is a very good intro
The author made it free from their website too

[rapid merlin]

I'm not currently doing any reversing or any other thing because I need to study

But I'm learning C++

[shut hawk]

i have no idea

[lament tendon]

Can you DM me the exact commands you are running and what you have been doing up to this point?

[barren cove]

For hardware stuff?

[naive violet]

Ye

[barren cove]

Oh I see

[rapid merlin]

I was reversing with ghidra and some other tools

[barren cove]

Ghidra is best

[rapid merlin]

Testing and those things

[astral oyster]

Did you start the python server in the same folder as the php script?

[barren cove]

But u should be proficient in low level concepts for this

[lament tendon]

Depends. For .NET stuff, you defo want to use ILSpy. And there is a lot of dotnet stuff out there. xD

[barren cove]

No doubt

But Ida free version is of no use that nuch

[rapid merlin]

I do have some grasp of C, C++ and asm but it isn't anything crazy

[barren cove]

Much

[rapid merlin]

But I find amusing reversing and those things

[barren cove]

Seems crazy at some point

[rapid merlin]

It's so curious to me

[barren cove]

If you know reversing for you everything is open source and u can pretty much do anything with the software

But that's not that easy as well

[rapid merlin]

Not really, there's lots of anti-dumping, anti-debugging techniques, sure, they can be evaded but it takes a time

[barren cove]

Tryhackme has no modules for hardware right

[rapid merlin]

And also I don't want to mess with things that have DRMs or any of that

Nothing illegal

[barren cove]

Good of it but again reverse is only towards malware analysis nothing apart from this

[rapid merlin]

There's crackmes that are made for all ranges of abilities

[barren cove]

Yeah for android you should know that but not in depth

[barren cove]

Yeah that's good one

[rapid merlin]

Reversing is also essential for exploit development

[barren cove]

Binary exploitation yes how I can forget that

[rapid merlin]

Dang but I feel like an idiot in binary exploitation, it's so fucking difficult

There's so much techniques and memory things you have to learn

[barren cove]

If you can do reverse engineering you can do exploitation stuff as well in my opinion

[barren cove]

Don't you learn these things in reverse?

[rapid merlin]

From bypassing ASLR, DEP, SEHOP, safe variable ordering, etc...

[barren cove]

Exploit development is not doubt the toughest of all

Nowadays it's not that much due to memory safe languages

[narrow grotto]

This worked, thank you.

[twin ridge]

Gave +1 Rep to @astral oyster (current: #1499 - 2)

[barren cove]

Rust

[rapid merlin]

I do but it's very very very difficult to find good sources

[rapid merlin]

Sure but it can still have some memory issues

[barren cove]

There are so many just type binary exploitation and you find thousands of sources online

[barren cove]

Just think how difficult it seems to be in C Rust is another day

[rapid merlin]

And I know that bypassing protections isn't what one does alone, it's something that most of the time is backed by a very experienced team

[barren cove]

Rust is not that easy to learn firstly plus exploiting rust programs will be a herculean task

[rapid merlin]

Yeah, I know

[barren cove]

For me real hacking is this exploitation and not the penetration stuff

[rapid merlin]

But there has been some problems with rust and they'll still be

[barren cove]

Nothing is perfect

[rapid merlin]

Fr, penetration testing feels sometimes menial to me

[barren cove]

That's why we are here

[barren cove]

It's just limited plus everyone is getting into it

[rapid merlin]

You scan, find attack vectors and do reconnaissance

[barren cove]

Web side and all that

[barren cove]

The reconnaissance part is fun and okay but the rest

It's just repetition and u do that every day

[rapid merlin]

Yeah, that's what I mean

And in my experience people are VERY VERY bad with managing corporations

Or large projects

[barren cove]

AHH well can't say bout that

But yes managerial operations are complez

[astral oyster]

Limited in job opportunities ?

[barren cove]

Limited in sense that you just take permission for the system to be taken and then start doing things legally

Job opportunities are ample in pentesting

[astral oyster]

Aha

[barren cove]

Android pentesting is hot these days

And am thinking of having some modules on it as well

[astral oyster]

I have 0 knowledge about android pentesting

[barren cove]

So does I

[rapid merlin]

But isn't android much more secure that computers?

[astral oyster]

I wonder do they follow the same penetration methodology or is there a completely different framework

[barren cove]

It's so hectic just like malware analysis but not that much to setup the lab for android analysis

[rapid merlin]

Should be different

[barren cove]

It's web with some android stuff tools will be obviously be different with emulators ADB stuff

[barren cove]

Nothing is secure

U can't say iOS is more secure than android and that android is more secure than Computers

[astral oyster]

I once ran android studio on my laptop.. it’s heavy lol

[rapid merlin]

But android and IOS is much more secure than computers

They're a smaller ecosystem

[barren cove]

I can show you the systems that are more secure than any other and android phones that are more secure than iOS

[astral oyster]

iOS yeah but not android

[barren cove]

Tis so does the setup

[rapid merlin]

And not only that but computers are insecure by design

[astral oyster]

Like what??

[barren cove]

Yeah you can say but again nothing is secure

[rapid merlin]

It's an entire very complex ecosystem, which can lead to lots of attack vectors

[rapid merlin]

Yeah but they are more secure

[barren cove]

It's on the individual how they maintain their systems

[astral oyster]

Tru

[orchid tusk]

Me when I use excel to exploit on Minecraft back in 2019 🗿

[astral oyster]

☠️

[lavish remnant]

One message removed from a suspended account.

[rapid merlin]

I mean, there has been several cases of android and iphone exploitation tools

[orchid tusk]

Waaaaay off topic lmao

Probably won’t find em here

[rapid merlin]

It's against the rules

[barren cove]

Humans are err

[lavish remnant]

One message removed from a suspended account.

[orchid tusk]

That’s black hat, although could be white top if government funded

[barren cove]

Android pentesting is all about testing apks

Android apps and stuff related to web

Nothing else

[rapid merlin]

Ik but it's still against the rules

[barren cove]

There is a great book on it android hackers handbook

[astral oyster]

Oohh makes sense

[barren cove]

If anyone interested in android

[astral oyster]

The attack vector is the apps in the device

[orchid tusk]

I’m a chad, I refuse to use android and instead use my own servers to sideload android apps on iPhone 🗿

And ISH

[wooden totem]

bro what

[orchid tusk]

I’m going to die on that hill

[barren cove]

You are genius with some sickness

[rapid merlin]

Damn developing an exploit for grapheneOS should be a headache

[astral oyster]

Does that count as jailbreaking?

[orchid tusk]

Meh, not really since I’m not screwing with the OS

[wooden totem]

https://tenor.com/view/its-free-real-sate-gif-7215175

[orchid tusk]

Plus I’m scared daddy Apple is gonna freeze my phone

[astral oyster]

So how does that work?

[wooden totem]

daddy apple already took your wallet and spit in your face

[barren cove]

Yeah and there are so many in play store

[orchid tusk]

Sideloading is like if you were wanting to climb a building, but instead of using the stairs or elevator, you use a rope and pulley funded by your hopes and dreams

[barren cove]

Even tho play store does say they have scanning mechanism

[astral oyster]

😭

[rapid merlin]

@barren cove What's your opinion on grapheneOS?

[barren cove]

Never heard of it

[orchid tusk]

Wasn’t the top app on play store back in 2020 a racing game that was just malware lmao 😭

[barren cove]

Mobile OS

[orchid tusk]

I prefer dolphin OS 🗿

[barren cove]

I think App Store is more secure than Play store

Secure software design is the thing that we all learn and in the end we also have that goal while being Cyber-Security students

[rapid merlin]

@barren cove You should look into it, it includes lot's of privacy and security improvements. Memory hardening, stronger sandboxes, disables JIT and several more

[orchid tusk]

Hacking ROMs on an iPhone is an actual war crime, I should be given a military execution for the things I’ve done 💀

[wooden totem]

type shit you hear from former arch admirers

[barren cove]

We all just software engineers with security in mind

[barren cove]

Tails OS?

[orchid tusk]

Trueee, I love my ISH with outdated Docker and no tools installed 💀

[barren cove]

U seem to be

[rapid merlin]

I'm talking about an android based system

For pixel

[naive violet]

Go to the police.

[astral oyster]

AHAHA TELL ME MORE BOUT IT

[rapid merlin]

More secure than tails because tails is more about privacy

[barren cove]

Well how much secure I bet

What if I run an APK app in it which is malicious unintentionally and it srcews up all of the things

[wooden totem]

would an anonymous tip be less beneficial?

[naive violet]

¯_(ツ)_/¯

[rapid merlin]

But damn

[wooden totem]

not scenario specific

[barren cove]

Btw what's the extension of iOS apps just like we have apks for android

[rapid merlin]

Like sending viruses through apk seems lame

[orchid tusk]

🤮

[barren cove]

Never heard about it lol

[barren cove]

How

[wooden totem]

16 year olds with edgy friends have entered the chat

[barren cove]

I didn't use word virus tho I said malicious

[rapid merlin]

Social engineering

[barren cove]

It can be a backdoor a spy something like that

[barren cove]

Humans are err

[rapid merlin]

Yeah but it's more or less of the same

[barren cove]

You can easily fool human beings

[rapid merlin]

Not that much difficult

[orchid tusk]

Malicious mentioned, wtf is a kernal 🔥🔥🔥

[wooden totem]

I love social engineering

[rapid merlin]

What's the fun of it??

I prefer technical things

[barren cove]

Malware can destroy pretty much everything from you bootloader to your whole OS

[barren cove]

Same

[rapid merlin]

And graphene is very much suited for mitigating malware from booting at start and those things

[orchid tusk]

I see a netcat expert in the making

[barren cove]

Social engineering is topic related to social ethics I guess

[rapid merlin]

Because it has verified boot

[barren cove]

And not directly Cyber-Security

[loud marlin]

kernel is source of OS. smth that connect hardware and software

[wooden totem]

why would anyone want to be an expert in that

[barren cove]

Altough there is some cool stuff there in Kali Linux for social engineering

[rapid merlin]

Ik pixel phones have verified boot but GOS seems to do it better

[orchid tusk]

So over 😭

The joke is dead

[barren cove]

Yeah and kernel is the first thing u do when u create an OS

[orchid tusk]

Ruined, turned to ashes

[rapid merlin]

"enhanced verified boot with better security properties and reduced attack surface"

[barren cove]

Everything can happen

[loud marlin]

os runs on top kernel ring and so

[barren cove]

Nowadays malware have become more smarter

[orchid tusk]

I thought it was boot disc, OS, kernal, then so on

[barren cove]

It's kernel and then other things

[rapid merlin]

Yeah but GOS should be much much more difficult to exploit

[barren cove]

But it is

Zero day exploits I love them

[rapid merlin]

Developing a reliable exploit for it (remote, without interaction) is very very expensive

[barren cove]

It's real fun

[rapid merlin]

Or should be in theory

[astral oyster]

How much commission you getting? 😂

[rapid merlin]

?

[orchid tusk]

Time to exploit LUA, we going back to 2017 with this one 🔥🔥

[rapid merlin]

I've been using it personally

[astral oyster]

That’s nice

Btw how’s the UI

[rapid merlin]

It has improved a lot

Now there's google app compability but sandboxed

[orchid tusk]

Not as good as my windows 95 running natively on iPhone 🗿

[rapid merlin]

And faster app spawning

I remember that taking more time some time ago

[orchid tusk]

I live for pain

[astral oyster]

https://tenor.com/view/this-is-fine-fire-coffee-dog-gif-10959043

[rapid merlin]

If I ever get to be good I'll be contributing code for graphene

[barren cove]

How many of you using kali

As bare metal

[orchid tusk]

Wait so why use Graphene over just running a kali server?

[rapid merlin]

Wdym

Man

You're missing a lot of knowledge

[orchid tusk]

Plenty of VM’s but surprisingly I’ve never had a device just running kali natively

[barren cove]

Don't make things complex

[rapid merlin]

Graphene is for android

[orchid tusk]

Nuh uh

[rapid merlin]

And kali isn't even good for running servers

[barren cove]

U missed it then

[barren cove]

Point

[rapid merlin]

Kali is bloated for servers

[orchid tusk]

Ohhh

[barren cove]

Kali is insecure for servers I would rather say

[rapid merlin]

If you know something about setting them up you would use either ubuntu or debian

[orchid tusk]

My bad, I thought you meant it was going to run the Os off of a server and cloud it to a device, missed the native running text

[rapid merlin]

And then make what you need to do

[barren cove]

Debian for servers

[rapid merlin]

Some servers run on ubuntu

Not very complex but it's good

[barren cove]

Arch for supremacy

[orchid tusk]

Didn’t mean to say running kali for servers, meant using a server to run Kali

[orchid tusk]

This

[wooden totem]

https://i.imgflip.com/96tuk9.gif

[barren cove]

Arch is best of all

[rapid merlin]

Why

[astral oyster]

Cloud server?

[rapid merlin]

https://tenor.com/view/speech-bubble-gif-27609617

[orchid tusk]

Cause it’s funny

[rapid merlin]

Nah, I'm joking

But there's an stereotype of arch

[barren cove]

Blue teaming or purple lol

[orchid tusk]

I get to run Minecraft Java on my phone with arch, god I love the internet

[barren cove]

Use hyprland

[rapid merlin]

It doesn't even make sense

[barren cove]

Seriously

[orchid tusk]

Highly ineffective, damn near a war crime, gross, and most of all, hell to setup

[rapid merlin]

If you have the system resources to run it localy then do so

[barren cove]

Minecraft is written in which language btw

[orchid tusk]

I love cloud based coding

[orchid tusk]

Java lmao, I meant that Arch allows me to run emulators for Java

[barren cove]

Lol

[rapid merlin]

Bugrock = C++ and Java = Java

[barren cove]

Hehehe

Java I hate tho

[orchid tusk]

C# + SQL + spaghetti code = profit

You know I met this guy the other day near my dorms, and I looked over at his Compsci notes, I kid you not, he was writing his notes in SQL speak

[barren cove]

Sus

[astral oyster]

https://tenor.com/view/haha-so-funny-gif-27253208

[orchid tusk]

I remember reading about that one guy who was so into hacking that he got institutionalized, apparently at the hospital, he got bored and literally hacked into rockstar, scraping GTA 6 files with an Amazon fire stick. 💀

All while under police watch lmao

[astral oyster]

Lmao

[orchid tusk]

Probably would’ve hauled him to the NSA if he wasn’t unstable lmao

[wooden totem]

It says hotel, using firestick, hotel tv and phone while his laptop was confis

[orchid tusk]

Oh I thought it was at a hospital

Still impressive as hell lmao

[wooden totem]

Stare at the wall or black mail rockstar, which one you picking

Actually i think staring at the wall would be harder for that guy

[orchid tusk]

Fr, bro could have just watched YouTube but instead committed a felony 💀

Also, I hate iPhone lmao

Just lemme play the fun cyber game 😭

[narrow bone]

Move on onto your Mac 😂

[orchid tusk]

Ain’t got no Mac money, gonna pull up with the chrome book 🗿

[orchid tusk]

99% ram usage from opening 1 chrome tab, peak engineering

[wooden totem]

You paid for whole ram, you are using the whole ram 🧠

[boreal scarab]

You wouldn't wanna have fun driving your truck in those tight corners?

Imagine having an American truck go through those corners 👀

[orchid tusk]

This guy 💀

[torpid furnace]

im hosting a ctf challenge anyone wanna try some rooms

[sick lance]

Wat

[orchid tusk]

Fast and ez Robux

[torpid furnace]

in reality

ur a skid

u wont do anything ok?

[sick lance]

I banned you before?

[orchid tusk]

Nuh uh

[torpid furnace]

do something to me

please

[orchid tusk]

He gonna fight you

[torpid furnace]

i would like to see u try

[orchid tusk]

So over man

[torpid furnace]

lol

[orchid tusk]

[torpid furnace]

ur broke

[grim sparrow]

:hammer: kogadaledom_90732#0 has been banned.

[torpid furnace]

ahhh i wanna bully that kid

[orchid tusk]

Lmao, he gone quick

[torpid furnace]

anyone wanna try my ctf?

[primal kestrel]

very publicly and loudly announcing wanting to start an illegal operation

[torpid furnace]

if itd allowd?

[orchid tusk]

Would if I was at home, can’t rn 😢

[sick lance]

Depends

[orchid tusk]

If it’s government funded, it’s technically not black hat 🤷‍♂️

Just a kind of… grey hat

[sick lance]

Wat?

[chilly veldt]

[orchid tusk]

I’m losing brain cells

[sick lance]

The Internet archive is back as read only.

[slender scaffold]

Give me the strength to leave home and get stuff done

_<

https://tenor.com/view/cat-i-dont-want-to-go-no-gif-4670418

[autumn solar]

Lolololol dayum

I miss all the good stuff

Finally getting back into the swing of things after the month from hell

feelsgoodman.jpg

[sand trench]

time to go sleep sloop to the beep boop for the meep moop for shadow

[autumn solar]

Good night then. Take care

[boreal scarab]

I gotcha

Uh

They have a new CTF running at your neighborhood sushi bar!

[slender scaffold]

Whaaaatttt?!?

[boreal scarab]

You should go and defeat it!

[molten sky]

@boreal scarab go to bed

[slender scaffold]

Are you done adulting btw

[boreal scarab]

I just took a cat nap!

[wooden totem]

You can technically eat through your nose

[boreal scarab]

I am done adulting

[autumn solar]

Doesn't mean it'll feel good or that it's chewed 😂

[silver sky]

Yes

[slender scaffold]

Omg I made it out of the house

[wooden totem]

Fun story actually, it happened once that I chewed the food and right when swallowing I laughed through my nose so the chewed food went into my nasal canal from the back side and I couldn't do anything but let it slowly squeeze its way down my nasopharynx into my throat trying not to inhale it, weird unpleasant feeling

[crude stump]

https://www.notebookcheck.net/Android-16-will-include-a-Terminal-and-full-Linux-VM-support-with-GPU-acceleration.900394.0.html

[karmic geyser]

Chat, is this true?

[rapid merlin]

woah yes please

[blazing granite]

I'm failing to see the fun part of the story 😂

[boreal scarab]

Weeeeeeee more attacks

[slender scaffold]

Who you attacking lol

[boreal scarab]

Oh, no one, that's people attacking me

Or... well.... trying to and failing

[boreal scarab]

https://tenor.com/view/crickets-crickets-chirping-silence-awkward-silence-gif-5319192

[blazing granite]

https://tenor.com/view/tumbleweed-silence-gif-19279803

[viral crest]

I found a way to detect paranoid people.
Wear sunglasses around them, if they feak out about it? They are paranoid.

[slender scaffold]

sounds…. like a plan

[boreal scarab]

We need to do that at DC33

[tepid furnace]

What are they attacking lol

[boreal scarab]

My server that has nothing of importance on it XD'

[tepid furnace]

damn

can you atleast see what their attempting to do?

[boreal scarab]

XXE, but going to be getting Wazuh up, just testing it in VM's on my laptop right now

[tepid furnace]

oo that's cool

[slender scaffold]

https://tenor.com/view/hey-bernie-gif-26833383

[boreal scarab]

Hehehehe ram go brrrr

Desktop has 64 GB, but too lazy to get up and go on it, stuck with 32 GB

[tepid furnace]

oh damn

I've got 32 aswell lol

I've thought about 64 but I cant justify it yet

[boreal scarab]

I can

ALL THE VM'S!

[tepid furnace]

hd2 eat my ram

(windows is just bloated)

I am running hd2 though lol

not just idle windows

[mystic hound]

Just download more RAM

Lol

[autumn radish]

anyone with python experience that i can ask for a pm to figure out why something in my code isnt working ?

[neon merlin]

chatgpt can be good for that like "What's wrong with this code" and paste in the code

[clear jackal]

Until its confidently wrong

[autumn radish]

haha

right i could try chatgpt

its just its a minor minor thing, which i dont understand why x works when y doesnt

[autumn radish]

perfect chatgpt helped so much thanks mate

[twin ridge]

Gave +1 Rep to @neon merlin (current: #2268 - 1)

[sinful moon]

lol it is interesting, I’m not even like anywhere near the list of users, but yeah I constantly get unsolicited DMs and friend requests from people in the THM server

lol how is it they’re finding me when I’ve not posted in a day or two

[autumn radish]

thats because you have a girls name :P I get the same thing tons of dms from people asking to play with me on different games or just "hey lets chat girl" -.-

[sinful moon]

lol yeah, still, even by that metric, they would have had to scroll down to the Es in user listings lol

ironically I get way more here as a user than Discords where I’m a mod up at the top, probably because they’re rightfully intimidated lol

[autumn radish]

you'd be surprised how bored or dedicated some people are to chatting with us girls. :P

[sinful moon]

lol you are not wrong

[autumn radish]

yeah well being mod people not writing is probably because if they sound creepy or are not allowed to dm mods : some servers have that rule they are afraid of getting banned.

[sinful moon]

lol ironically even this server has a rule for don’t unsolicited DM people, oh well

[autumn radish]

oh lol i just had 2 people write "hey girl lets chat" in dms just now :D wth

[sinful moon]

lol potentially in reaction, but Ive got none. Not something I will get jealous about because lol.

[autumn radish]

nice trolling i have to be honest

respect for that

[autumn radish]

absolutely in reaction can't help but laugh

[sinful moon]

lol it’s usually not too weird being a girl on the internet, but whew there are some folks that are just wild

mhmm

[silver sky]

Turn off the DMs

That's what I did

Doesn't stop the friend requests tho

[sinful moon]

Nah I’m a moderator of multiple Discords and I need them open

[silver sky]

You can do it on individual servers

[sinful moon]

Fair enough but lol I have 78 servers I’m in

[autumn radish]

when you are on max limit for servers its kind of difficult

[sinful moon]

effort

[crude stump]

Discord rizz

Crazy

[sinful moon]

skidibli ohio? fellow kid

am I doing this right

lol

[crude stump]

Yes

[silver sky]

Inb4 not a woman, just a man with an anime photo

[silver sky]

https://tenor.com/view/how-do-you-do-fellow-kids-steve-buscemi-30rock-fellow-kids-one-of-us-gif-21904018

[sinful moon]

indeed

[autumn radish]

Shiro is so cute ! Dont in before that :P

[crude stump]

That makes it even more hilarious

[sinful moon]

and she self identified as female, lol, it’s more than fine

I don’t even know who that character is despite being an anime enjoyer though lol

[autumn radish]

oh please god dont start the whole gender thing.

[sinful moon]

yea it’s not lol

it’s an anime thing now

[autumn radish]

No Game No Life

cute show

[sinful moon]

Ah fair enough, I heard good things, but I’ve been burned by some “popular” anime before so I’ll hold my judgement for until I have a reason to check it out

[crude stump]

Dang you been on discord for a long time. 2016 wow

[sinful moon]

lol me too AceS 🙃

[crude stump]

Oh shoot you too

[autumn radish]

yeah just a sibling pair sent to a world where everything depends on the result of games. Really cheesy show but i love the characters

[sinful moon]

I guess you are inherently more interesting with the anime avatar lol

[crude stump]

Nah it’s just because I never seen them chat before

[sinful moon]

lol no worries

[autumn radish]

im quite old nowadays :P mid thirties. my husband has been a gamer since we were kids so yeah ive been dragged along and chose my own paths

[sinful moon]

I’m kinda poking fun anyways

[crude stump]

😂

[sinful moon]

I was about to say, glad that message was deleted lol

[sinful moon]

Heck yea, I’m right around the same age c:

[autumn radish]

i dont even know what message got deleted now im curious

[sinful moon]

lol it’s unimportant now that we’ve moved on

[autumn radish]

husband showed me Lucky Star and Clannad I was hooked after that

[sinful moon]

Interesting you didn’t just like start in the 90s but totally fair, those are some great anime

[crude stump]

My first anime was ponyo but I don’t really consider that my actual first. I got hooked after attack on titan

[sinful moon]

it’s sorta like Cowboy Bebop in some ways but a bit more cheerful lol. I’ve only seen a couple episodes

[autumn radish]

90s was dbz and stuff really terrible stuff :D Plus i was more focused on learning h ow to cook and clean and knit from my mom and grandmother :P

[crude stump]

Vinland saga is godly

[sinful moon]

plz NGE is 90s, but fair I didn’t watch that until 2007ish lol

Sailor Moon though still kicks ass lol

[crude stump]

There better be a season 3

[autumn radish]

absolutely one of my favorite shows ever. But i think you had to be in that year and remember stuff because they have LOTS of references to what stuff was going on at that time. I think it was back like 10-15 years now if not longer

i first saw it in 09'

[sinful moon]

yeah it’s around 1997 afaik

[autumn radish]

Lucky Star was not 90s show. without looking it up im 100% on that

[sinful moon]

okay then it’s gotta be about 2002

Oh I’m thinking of completely the wrong show

[autumn radish]

2004 was manga start

and anime 07'

[silver sky]

Not allowed to have bigger forearms

Two metal plates in each arm 😅

[sinful moon]

Outlaw Star is what I was thinking of lol

[autumn radish]

lol okay yeah :P

[sinful moon]

the star bit I guess crossed my wires

[silver sky]

Well unless you want the metal plates to dislodge

Jesus I feel old

[sinful moon]

things lol

[autumn radish]

omg win3.1

[sinful moon]

Yeah that’s actually on the iPad Pro I’m typing on rn

or emulated on rather lol

[autumn radish]

óh maybe you can help. what was that ski game where you used mouse and there was bumps and jumps @sinful moon ???

[sinful moon]

lol thanks c:

Ski-free

[autumn radish]

can we get that on w11 ? :O I NEED that. Its been so long. like before 95' :O

[sinful moon]

It’s a 16bit program so you can’t run it natively without 32bit Windows. But there is a program called WineVDM to add a 16bit translation layer, I’ve just not had great luck with it compared to emulation

[autumn radish]

oh oh oh and the game where you were blue and white pólar bears you had to jump ice platform to another ??? @sinful moon

[sinful moon]

lol that one I have no idea about lol

[autumn radish]

born in 89' :P

[sinful moon]

I am four days younger than The Legend of Zelda: A Link to the Past

[autumn radish]

damn i loved that game so much, now that i think about it, it may have been a country locked game like a game as an ad for some drink

[sinful moon]

yeah I don’t remember it from the Microsoft Entertainment Packs and etc

[autumn radish]

oh dear that means im the oldest one here :(

[sinful moon]

lol I know for a fact we have older, just the oldest atm

year or decade lol

[autumn radish]

thank you now i feel better <3

[twin ridge]

Gave +1 Rep to @plain grotto (current: #2268 - 1)

[autumn radish]

haha

[sinful moon]

but yeah I do think getting to grow up in the 90s was really rad

[autumn radish]

90s were absolutely the best decade to grow up

[sinful moon]

I mean same for the 80s but we went from no real internet access for folk to whew we’ve got broadband and 3D gaming on this thing called the Xbox

lol how so

[autumn radish]

dont even get me started, I know im not from US but watching all whats going on over there im just waiting for earths doom.

[sinful moon]

we’re kind of the last gen to have grown up without direct internet or later smartphone intervention

[autumn radish]

yeah we know how it is when we are bored and mom sends you out in the garden for the next 3 hours given a stick and say come back when dinners ready

[sinful moon]

lol yea for real

I am chronically online now but I for sure remember a time before it lol

[autumn radish]

nowadays kids grow up looking at an ipad more than the actual trees right in front of them.

[sinful moon]

meanwhile today’s kids don’t understand filesystems because “lol what do you mean they don’t just live in a bucket under the app”

[autumn radish]

i try to have my kids the same upbringing as i did. especially related to NOT being on the internet. They get a stick to play with and get tossed out in the garden :D and they and their friends actually LOVE it. the friends wants to be here more than at home thats really cool

[sinful moon]

tells kids to get off my lawn and yells at clouds

[autumn radish]

hahahahaha

lol

[sinful moon]

it is ironic how “old man yells at clouds” is like actually a relevant thing that makes sense now vs when that episode came out

IT’S JUST SOMEONE ELSE’S COMPUTER

the cloud is lol

I was yelling at the cloud

Sounds good! and good luck!

[autumn radish]

just started learning. im an absolute beginner.

[sinful moon]

lol okie

[sinful moon]

And yeah let us know if you need any advice!

[autumn radish]

its just for fun i want to do ctfs with my husband. But i dont want him teaching me :D hes absolutely terrible and have no patience to teaching anything else than how to teach our son to fight -.-

thanks

[sinful moon]

Whole reason we’re all here, I needed to upskill in infosec in 2021 after getting my first IT job finally. Learned infosec on my own in the 00s and needed to catch up

[autumn radish]

oh nice!

I think the main reason is competition with my husband, he always beats me at everything but THIS TIME! im gonna get revenge

[sinful moon]

yeah lol, log4shell vulnerability kinda defined my career in that it happened like one month after I joined

heck yes, you go girl c:

[autumn radish]

will do my best

[sinful moon]

But yeah I’d just recommend to continue to focus on THM and it’ll give you more than enough to get going, and while THM has some great CTFs/challenges, I would recommend potentially checking out HackTheBox once you are are a bit more familiar with your tooling and etc

HTB does have a side academy thing but I think THM is superior for user friendliness

[autumn radish]

oh okay yeah. I was also adviced that ctf site that only had them i forgot its link / name

[sinful moon]

mhmm

[boreal scarab]

We're alive!

In my lab environment....

[sinful moon]

Yeah they do have some courses like Android malware reversing and such which is hard to impractical to do on THM rn

mhmm is an agreement most generally? lol

Yeah for sure

lol, no that’s just the english language

you got it in your name

lol

that makes significantly more sense :p

it’s a pain in the butt to ping or moderate people with unicode via commands

lolol

can’t complain, I’m sure no mod here

wha lol

[boreal scarab]

Aaaaaaaaaaaand we got my lab agent

[sinful moon]

lol I only said that since I am mods in other servers

nice nice!

Yeah I’ve been thinking of deploying Wazuah for my personal setup

emulation and retro gaming related communities

retro computing stuff, all that jazz

mhmm

[boreal scarab]

Now...... I have to kick up a Ubuntu server on the same VLAN as my actual server.... do the install all there too.....

Or, I got an AIO I can hard wire to the same network and use that.... choixes

[sinful moon]

because Wazuah is a free EDR and SIEM basically all in one. I have no direct experience with it beyond a bit of fiddling but it’s neat

[neon merlin]

"I used to be "with it" and then they changed what "it" was. Now what's "it" seems scary to me".

[boreal scarab]

Attacks on my server, might aswell have more active monitoring on it

I'm very memorable

https://tenor.com/view/wow-gif-22908691

Not my name.....

[sinful moon]

his use of annoying reaction gifs is even more notable lol

[boreal scarab]

My PFP

[neon merlin]

Is this server someone would specifically want to attack or is this like every server on the internet gets attacked this much regularly?

[boreal scarab]

I don't know what you're talking about

Nope, been like this for years

[sinful moon]

yes that is typical if you don’t like lock down a port accessable to the internet

never set up something like a Virtual Private Server unless you’re sure you can adequately protect it because holy crap, your SSH will get pounded immediately

[boreal scarab]

AHAHAHAHAHAHAHAHAHAHAHA no. It's a gaming server with no info on me, all randomly generated passwords.

Only thing they got is.... the game servers

[boreal scarab]

Jokes on you, I have no SSH. I access my VM through my server's host

[sinful moon]

perfect

and yeah VPNs to even get into it in the first place are even better

but also yes, plz public key your ssh if you do this sorta thing and disable password login

[neon merlin]

I had a VPS at one point but didn't know you had to protect it I don't think anything bad happened tho.

It was just running a proxy