general

[pallid lotus]

I started on £45k going directly in as a junior pen tester for an internal team.

Not sure what you'd get going into an equivalent consultancy position, although their cap tends to be higher.

[neon merlin]

That was your entry point? Cause that sounds ideal then.

[pallid lotus]

Either way, that's above national average

[neon merlin]

Average salary in UK is 34k now

[simple valve]

We cannot gauge the use case or its ethical implications when someone asks of a question, especially ones that are very specific. That’s why the advanced channels are there to facilitate proper discussion. Even there, there is the possibility that the question may not be answered.

[pallid lotus]

Yeah, although I started that role:

1. In the final year of a specialist cyber degree
2. With OSCP, CRTO, OSEP, and OSWE
3. Off the back of an internship with that company, during which I built half the pen testing environment

Right pre-requisites, at the right time

[neon merlin]

The government will be putting up the requirements to bring a foreign spouse up to £38k a year soon too

[pallid lotus]

Huh. Not sure if that's good or bad. Has net pay gone up, or just inflation?

[neon merlin]

For reasons I'll have to be making more than that when they do.

[quick dock]

How long does rank 13 take?

[pallid lotus]

Back in the good ol' days... Under a week.

[sudden pond]

depends on you

[pallid lotus]

Lord knows now

[chilly veldt]

Ngl life feels fantastic right now, I can just lay here and listen to the wind and rain hit the plastic

[chilly veldt]

Around 2-4 months

[quick dock]

Like rooms wise? Is it a bunch

[chilly veldt]

Yup

[pallid lotus]

And bear in mind they're still not gonna help you with anything remotely illegal (for obvious reasons)

[neon merlin]

I'm not sure, I am as surprised as you. I left UK 10 years ago. And am considering returning. When I left UK the average salary was around £27k. I looked it up recently and some sources are saying it's as high as £38k. But I know a lot of people in UK who don't make anywhere close to 38k

@pallid lotus

[pearl raven]

Sounds relaxing af. My wife plays rain / storm sounds at night it helps her sleep. I've grown to enjoy it.

[pallid lotus]

Yeah, that seems high.

Also, if you want some advice on coming back: don't

Absolute hellhole these days

[pearl raven]

Always was where I grew up 😛

[neon merlin]

When I left UK if you were on £30-35k you were extremely middle class

[quick dock]

Super confused at what that means? So i practise pen testing and cant ask any questions until i get rank 13?

[chilly veldt]

This is like, the feeling and sounds of sleeping in a tent, on the mattress of a bed and the security of not getting wet as a house

[pallid lotus]

You're not practicing pentesting

[pearl raven]

Sounds awesome!

[chilly veldt]

Really is, and then the direct access to watching the night sky

[pallid lotus]

But to answer the spirit of that question: you can't ask anything that's "restricted" until you hit level 13... and even then it's still limited.

[finite basalt]

I was writing a report for uni and just realised I'd tuned out to the fact I was listening and still am to the home depot theme song on loop for an hour and 20 minutes

it is a 30 second song

[chilly veldt]

Lmao

[neon merlin]

I've been making good money working in China for the last decade. But like... if you had a kid would you want them to be in the Chinese school system?

[pearl raven]

Soft skills are very important, a lot of the time in IT people are... difficult to work around and with.

[pallid lotus]

Where's the fun without the danger?

[neon merlin]

12 hours of study 6 days a week

[quick dock]

Connecting to vpns in a controlled environment with know vulns isnt practice?

[neon merlin]

UK going downhill but I think the schools are still free and good.

[sudden pond]

if someone is completely new to this where should they start

[finite basalt]

that means I listened to it 160 times 🤣

[chilly veldt]

The pool and jacuzzi laying right outside of the dome, that's the fun

[finite basalt]

how're you doing mate 😄

[pallid lotus]

Moot point. Chances of me ever having a kid are 0

i.e., I've never really considered that question

[neon merlin]

That just explains why I'm looking into coming back

[pallid lotus]

They're still free... not sure about good...

[neon merlin]

And trying to find a career that will pay me well enough. The career I do in China doesn't exist in UK

[chilly veldt]

But yeah, get what you mean muiri, this isn't an outside vacation, but a relax vacation, that's why 😝

[pearl raven]

You dress up as a panda?

[chilly veldt]

We are here to build game cheats, not shelters

[pallid lotus]

Mate, if you treat a pentest the same way you treat a machine on the THM network, you will be sacked within days.

[sudden pond]

restricted

[delicate kite]

Enviroment wise good, yes. Education side compared to other countries not so good

[pearl raven]

Muiri, you don't just blast the living crap out of it with Nmap and run wide open on all tooling??!

[sharp citrus]

@sudden pond

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 17, 2024, 12:43 AM

[neon merlin]

Primary school teacher in a private international school.

[pearl raven]

That's very cool!

[pallid lotus]

A) you will miss a tonne of the "boring" vulns which need to be raised but you never consider in a CTF (e.g., security headers)

B) chances of you breaking something are quite high

[neon merlin]

ofc teacher exists in UK. But not paying as much as China does.

[finite basalt]

I have absolutely suggested that we all dress in maid outfits in the office for a day

[neon merlin]

And there's no specific role of "Expat teacher"

[quick dock]

Are you trolling me? Not upset genuinely curious? Im just a student trying to get into this field so its pretty odd a pentesting learning platform like this is anti pentesting. Please help me understand

[finite basalt]

for shits and giggles, I got told that I was alright to do it but they wouldn't be

[pearl raven]

You will literaly screw up the entire thing dude.

[pallid lotus]

I dunno, there are private schools here which probably pay reasonably?
Being able to speak mandarin probably helps with that too

[chilly veldt]

Is it now that I am saying that I will be doing this tomorrow actually and making breakfast for my CTF team?🤣🤣

[finite basalt]

Hi, I'm "my CTF team?"

[neon merlin]

UK teacher pay scales are openly posted online, they are not good. Plus it's more work for less pay and the kids are worse behaved.

[finite basalt]

what's for brekkie

[chilly veldt]

Eggs and bacon

[pearl raven]

Classic

[pallid lotus]

No, I'm being serious.
I have yet to find a practice environment which accurately emulates a real world setup.

THM is good for learning skills and techniques. It is not a substitute for experience.

[chilly veldt]

And baguette with cheese and salami

[finite basalt]

Very nice, I've got bacon and sausages in for a bacon sausage buttie some time

[pearl raven]

I do miss black pudding and Scottish Bacon.

[pallid lotus]

Also, hi!

[finite basalt]

you been well?

[pallid lotus]

Ehhhh, reasonable. You?

[chilly veldt]

It's not a maid outfit per say, but I will be in an apron

[pallid lotus]

Those just for local authority, or for public schools as well?

[neon merlin]

Expat teacher is kind of a weird job in China. You're literally hired because you are from UK / USA etc

[pallid lotus]

Because I imagine the fee paying schools probably pay their teachers more

[neon merlin]

And then Chinese schools can charge parents more because "look a real foreigner"

[pearl raven]

lol right

• not sarcasm btw.

[pallid lotus]

Ewwww

[sudden pond]

can you explain

[pearl raven]

lol fight me 😛

[pallid lotus]

I mean, at least you're not wasting the dead pig I suppose

[neon merlin]

If you're a private international school which teaches bilingually in English and Chinese. having a few guys from USA or UK around just seems to legitimise your school and you can charge more. Kinda weird.

I can't think of another industry that works like that

[pearl raven]

true, I don't eat much bacon in the US, I find it rather meh

the black pudding though... can't find good stuff over here.

[neon merlin]

The only other thing might be how in dubai it's popular to have a guy from UK as your butler

[pallid lotus]

Not really. Enterprise is very different from a lab. It's much bigger, the systems tend to be different (e.g., different OS, software, etc). You've got complex networking and hybrid environments to deal with.

Oh, and importantly, the maintainers of said systems aren't looking to implement vulnerabilities deliberately...

It's an extremely different feeling.
The only way to really understand that is by getting experience in that environment

[sudden pond]

then where to get the experience

[pallid lotus]

Usually through a different aspect of IT

Helpdesk, sysadmin, developer, etc, etc

[sudden pond]

what about u

[pallid lotus]

Cybersec is difficult because you're expected to know a vast number of topics. That's why it tends to not be entry level.

[pearl raven]

Even in my small network (52 people) things can get complicated very quickly (before I had proper documentation :O). Lab environments are designed to just work. You aren't inheriting servers switches and routers from 5 different people. Let alone an entire enterprise environment.

Never mind the FW configs... jeebus

[pallid lotus]

I came into industry with several advanced certifications and a couple of internships.
I was not ready. At all. It took me ages to get to grips with it.
I was lucky to be in a team which supported that.

[pallid lotus]

Exactly this.

[sudden pond]

what certs

[pearl raven]

It's awesome that you got to experience that. I feel that it would be an extremely beneficial thing. I generally just get yelled at when the WLC goes down, or my boss forgot his password 😛

[pallid lotus]

E.g., I did a review of an API gateway today. The complexity of even the one service in scope was much higher than anything you would find in a lab. More boring, but infinitely more complex.

[pallid lotus]

In chronological order:

• OSCP (offsec entry level)
• CRTO (technically senior level... Not sure why)
• OSEP (Offsec 300 level)
• OSWE (also Offsec 300 level)

[neon merlin]

Oh, and importantly, the maintainers of said systems aren't looking to implement vulnerabilities deliberately

Important one this one. I'm only up to Jr Pentester path on THM, but I feel a lot of the stuff they've taught so far is stuff that isn't going to work on any company in 2024. Is that right?

[sudden pond]

and this is how you got your first job?

[neon merlin]

like who hasn't patch against eternalblue in 2024?

[pallid lotus]

So for context, I went in theoretically with specialisms in active directory / adversary emulation, as well as application security & source code review.

I say theoretically because, while the techniques translate, the experience most certainly does not.

[neon merlin]

Who doesn't sanitise user input on websites in 2024?

[pearl raven]

Lmao, you may be surprised.

[pallid lotus]

I haven't done any THM in a while, but almost certainly, yeah.

[pallid lotus]

Yeaaaaah, about that

The simple stuff will work sometimes

Sometimes you find an old system which is vulnerable to old vulns

But a lot of the time you don't. Client side frameworks generally make XSS in web apps much less likely, for example. That also introduces whole new ways for managing token storage and authn / authz

e.g., if you've got an SPA consuming a web API, chances are cookie auth isn't the way to go.

Heck, if you're using a REST API it's outright breaching the spec if you do.

In which case vulns like CSRF and potentially CORS misconfigurations become a thing of the past. No value in hijacking a user's browsing context if you can't do anything with it 🤷‍♂️

That's the other thing labs don't really teach. In the real world it's all about impact. If you can't demonstrate impact then no one cares.
In a lab the impact is generally dramatically severe (e.g., RCE... very rarely happens IRL). In real life you need to simultaneously care about the little things, and also acknowledge that they aren't necessarily impactful.

[pearl raven]

Yeah, labs teach concepts. Experience is key.

[crude stump]

@fervent meteor hows your scripts you are making going along

[crude stump]

Ain’t that with everything

[pallid lotus]

For example, raising a TLS finding -- for example, Lucky13 affecting CBC cipher suites. It's technically an issue, but chances are the service will reach EoL before you can actually exploit it.

[pearl raven]

Didn't have labs for women? 😛

[finite basalt]

Doing well thanks, I'm between doing uni work and being nostalgic with friends over nightcore and 2009 youtube tutorial music haha

[twin ridge]

Gave +1 Rep to @pallid lotus (current: #9 - 789)

[pallid lotus]

It should be fixed, yes, but it's far from a critical (no matter what shite Nessus spouts)

[pearl raven]

just failed over and over... lol

[crude stump]

😂

[pallid lotus]

Eh?

[pallid lotus]

[crude stump]

Bro pulled out the screenshot

[pallid lotus]

...

In my defence, it's 0200

[pearl raven]

That is absolutely fair 😛

[crude stump]

Not a clue on what that means

[pallid lotus]

Speaking of which, I need to be up for work in a few hours. Bed time

[pallid lotus]

It means it's two o'clock in the morning and I'm working tomorrow lmfao

... Today

Ffs

[crude stump]

Oh

[pearl raven]

Night, and good luck today... 😛

[crude stump]

Is that military time?

[pallid lotus]

It's 24 hour time

[crude stump]

Ah

[pearl raven]

Which is superior in every way 😛

[pallid lotus]

Also: ISO8601 all the way

[crude stump]

First time seeing someone use 24 hour time

[pearl raven]

agreed

[finite basalt]

I pulled this gem out in our soc discord while we were nostalgia-ing https://www.youtube.com/watch?v=TKfS5zVfGBc

[clear jackal]

Huh, LTT got threatened by CompTIA

Their video about the A+ exam was taken off YouTube and also their video distribution service, Floatplane

[crude stump]

That’s good asf

Congrats

Who got number one?

Oh

Betchu it’s like a team from Harvard or some shit

[finite basalt]

https://cdn.discordapp.com/attachments/758763997297115238/1296281411581509682/VID_226380730_002531_652.mp4?ex=6711b7a4&is=67106624&hm=456e97e9ac5156393983d091adf262fb2d1c43babad2e65ecc6b48e8d6adc523& this clip never ceases to make me laugh

[pearl raven]

That's awesome congrats!

[crude stump]

The camera zoom makes him look like he’s flying

[pearl raven]

I did my first 'real' ctf solo against teams, I took 375 out of 1500.

I was very down on myself about it until my BIL put it in perspective for me.

[molten sky]

@pallid lotus you're back! what happened to your role?

( /s )

[crude stump]

Of course

[finite basalt]

his bike sounds just send me each time, always makes me smile

[crude stump]

Bros sleeping

[crude stump]

Rurururu

[finite basalt]

it's the one where he lets off the accelerator 🤣

"rururururu ..... noom... rahahahahaha"

[pearl raven]

That sucks dude, I know you were prepping for it and trying to get ahead of it.

brb switching workstations.

[crude stump]

Bruh you serious

Who joins a team and not practice

How did you know they didn’t practice. Did they straight up tell you they didn’t practice,

That’s good atleast

[pearl raven]

It's great practice for an actual leadership role, herding kittens 😛

To clarify, I have no idea of your current position and made an assumption. I apologize if I was off the mark, and meant no offense.

[devout bone]

I used to pop in, still do but used to too

[pearl raven]

lmao

Just got done with one of your videos, thank you for the content.

[devout bone]

Yup no complaints here, hope your well too

[neon merlin]

You mean I don't just get flag.txt and ask for money? 🥲

[neon merlin]

Yep, same with working as a teacher. Doesn't matter how many courses you've taken on childhood behavior and development. A child is in front of you right now screaming their head off and refusing to sit down, what do?

Writing your objectives on the board aint gonna do it.

[crude stump]

Exactly

Same with flight simulators

[neon merlin]

First year teachers tend to get eaten alive by the kids tbh. Takes a few years for them to develop strictness and classroom management techniques.

[pearl raven]

Flight sims are like training wheels, they can get you so far. Sure they don't teach what to do in actual force feedback scenarios, but...

I did learn how to do a J turn in a simulator 😛

[neon merlin]

They don't teach how terrifying the feeling is when you stall a plane irl and you're now pointing at the ground

And that feeling in your stomach

[pearl raven]

Right!

[devout bone]

I'm not so sure about that anymore, I've definitely thought I was going to die playing some horror games in vr

[pearl raven]

lol

[devout bone]

or roller coaster sims

[pearl raven]

those make me slightly sick

[devout bone]

crazy to get butterflies in your stomach when you know you aren't moving

[pearl raven]

usually okay with VR, but the older I get motion sickness / vertigo is a pain.

[devout bone]

Yeah - I keep meaning to get a new headset its been years since I did anything in VR. Have the origianl oculus devkit

[pearl raven]

nice, I just have a regular one

[devout bone]

once it sold to FB, i was out. Never tried any other

[pearl raven]

I've been very interested in the valve setup.

[neon merlin]

I've only tried it in the arcade. Super hot VR felt really good

I was legit flinching when I got shot unexpectedly

[pearl raven]

It's neat, unlike the VR of the 90s. I've taken several trips to place in the world I would otherwise likely not visit, Giza, Petra etc. Very cool.

superhot was also pretty neat.

beatsaber is fun too 🙂

[devout bone]

any reason you'd go valve instead of bigscreen?

[trail walrus]

are there any tools i can use to resolve masked backend server ips? my ip can be visable for this, i dont think the lab detects attempts

[pearl raven]

if i'm honest the handsets.

[stable ledge]

Hey guys ! First time on the discord! Hope everyone's feel great !

[pearl raven]

No other reason.

[pearl raven]

Hello!

[pearl raven]

I say that from a place of ignorance, as I'm not sure how well the bigscreen headset reacts to hands, or if it has controllers.

[devout bone]

it can use the valve controllers i believe

[pearl raven]

the form factor in bigscreen is certainly desireable.

[devout bone]

was considering it, just because the weight of the index seems like a big con -- wasn't sure if the lower refresh rate fov was a big issue

[clear jackal]

What is this for?

[pearl raven]

Lol, I have a unique... neck, the weight isn't a concern for me 😛

but after a period of time for sure it would be a factor.

[pearl raven]

For me I can't use them long enough for it to matter. I'd need a break due to the motion sickness it occasionally causes me.

[clear jackal]

Giraffe confirmed

[pearl raven]

lol

I said unique, I did not state how 😛

[boreal scarab]

[pearl raven]

Don't make me get my flight sticks...

[boreal scarab]

I got a Honeycomb alpha and a Thrustmaster Warthog HOTAS, but using the throttle, not the stick

[pearl raven]

Saitek x52 pro.... I think you win lol

[boreal scarab]

Also got a Logitech G27, with a semi high low switch and Jake break for the gear shifter... also got a sim panel from all my button needs!

[opal crow]

Alr bois I'll move back home next week prob

[pearl raven]

GL!

[opal crow]

The lectures are nice because the professors are nice and they joke with us but rn I just have a horribly inefficient schedule

[opal crow]

Thank you brother

[twin ridge]

Gave +1 Rep to @pearl raven (current: #88 - 80)

[pearl raven]

I have a force feedback steering wheel, It's a logitech but I cannot remember the model currently.

[opal crow]

And I also miss my cats and dogs

[pearl raven]

that sucks. Glad your profs are cool.

[boreal scarab]

My G27 is FFB too

[pearl raven]

pedals look right

[boreal scarab]

Gotta get the one with a clutch!

[pearl raven]

I learned not to drive with them on a wheeled seat pretty quickly :p

[opal crow]

Yes yes they are nice and all but I go to one lecture and I'm tired all day and I didn't understand much

Hope it's not just bs in my head

[pearl raven]

Could be, take some time to relax and unwind

or if you are so inclined, bust your butt and work on stuff.

[opal crow]

No no I don't need to relax I need to WORK lol

[pearl raven]

I figured, on that grind?

[opal crow]

I have to give analysis 1 in February I don't know middle school math

[opal crow]

Inshallah

[pearl raven]

If you try I believe that he does.

[opal crow]

I can stay with my kitties and my grandma if I go home and I can smoke weed and eat real food

[pearl raven]

lol

[opal crow]

I'm only eating frozen pizza now

[umbral bay]

Have you flown a real one? 🤔

[pearl raven]

better than chicken ramen!

[opal crow]

Indeed

@boreal scarab r u a pilot

[molten sky]

yeah

[boreal scarab]

I have not

[boreal scarab]

I can pilot windows machines into BSODing!

[umbral bay]

Try to get into a Saab J 35 Draken (Red Dragon) 😎 If you can pass the fitness test 😄

[finite basalt]

For the first time in my life I've struggled to find the link to the 802.11 standard, because IEEE has moved it

[pearl raven]

lmfao

[finite basalt]

Finally found it and had to reference that, absolutely awful to try and reference

but I technically wouldn't say that's correct because it was actually the LAN/WAN Standards Committee of the IEEE Computer Society within IEEE

but I don't fancy typing that when I want to cite them 🤣

[blazing granite]

I've driven an electrical scooter in the middle of Tel Aviv. Is that count? 😉 😛 😂

[umbral bay]

Going 2.5 G? 😄

[blazing granite]

skipping angry drivers, do you know how people drive there? 😂

Once I didn't realize and I entered a highway I can laugh now 😂 😛

[umbral bay]

Outrun Tel Aviv edition

[pearl raven]

Yeah...

[blazing granite]

Egypt is way worse but that's absolutely chaos 😂

[pearl raven]

lol, I have never been. Would love to see the treasures and sights/sites. (cant think of the correct word).

sorry.

[blazing granite]

Archaeological sites?

museums?

[pearl raven]

all of it tbh

[blazing granite]

Cairo Museum is great, Luxor, Karnak, Gizah, etc

[pearl raven]

Thank you, I will look into these suggestions!

Zumi I am dropping you a DM.

[blazing granite]

those are just a few there are so much to see there like The Pyramids of Dahshur and Saqqara, Abu Simbel, the Coptic museum, Alexandria library, etc. I visited many times, it's impossible to see all in one trip unless you stay there for a long time 🙂

I could talk for hours (which I won't do it, because I don't want to annoy people 😂 ) 😛

[pearl raven]

that's fair.

thank you for the feedback and info. it is truly appreciated.

[boreal scarab]

Me? Fitness test? Hahaha.

[pearl raven]

lulz

[boreal scarab]

No way I could pass the military fitness.... can't even go into the military, heath reasons WOOH

[blazing granite]

I get you, I can't even run to catch a bus 😂 😛

[neon merlin]

Run? Oh that thing I've not done in 18 years since leaving school.

[finite basalt]

first part of my dissertation proposal's done

[warm grotto]

That's a long boi.

[finite basalt]

it's only 1000 words

[blazing granite]

that thing that I haven't done ever 😂

[finite basalt]

I did that in about 2/3 hours taking my time to be honest

[boreal scarab]

I can run, I can lift I could do manual labor, but haven't done bench presses in like... 10 years, cause, don't care, not in my todo

[finite basalt]

I took at least an hours break in the middle to talk about nightcore with someone

[blazing granite]

I don't have any health issue that forbid me to do it, but I can't be arse really 😛 😂

[neon merlin]

It's too low res I can't read it

[finite basalt]

That's fine, I didn't intend for you to read it 😄

It's explaining what my dissertation is roughly, what it aims to do, how and the risks associated with it

[boreal scarab]

Amen

[finite basalt]

Assuming ethics goes fine and my supervisor doesn't try and steer my dissertation, it will be researching the behaviours and implementations of MAC address randomisation and if there's any ways to defeat it or any other potential data that could be used to fingerprint devices

Unfortunately the supervisor I have is objectively the worst in the university, in regards to his knowledge, interest in his students and helpfulness. I drew the shortest possible straw.

[pearl raven]

I too can go hard...

[finite basalt]

I thought I'd get some of it done because it needs doing in two weeks and I've got a meeting with my dis supervisor tomorrow so I can show him where I'm up to and it might answer some of his questions

[blazing granite]

that's what he said? 😂

[pearl raven]

woops..

lol

my first pentest report for college was 128 pages long,

[blazing granite]

a nice light read 😉 😛

[finite basalt]

very nice, I think the biggest I've done so far was actually an expert witness report for a mock trial and that was done as a group and was 40+ pages

[pearl raven]

lol\

right

[finite basalt]

Actually had a mock court session and all, got to dress up in a suit which was nice

[pearl raven]

it should be shorter for that

[finite basalt]

I'd have to check, gimme a min

[pearl raven]

by "technical report" was the majority.

[finite basalt]

I'm pretty sure the report was 40 pages

[blazing granite]

indeed, nobody is going to read 128 pages 😂

[pearl raven]

lol I'm sure you looked great.

No shot lol.

[finite basalt]

It was 43 pages in the end including a physical security assessment and network security assessment

with screenshots etc.

[pearl raven]

That's awesome, at my facility the last response I got was, why would anyone even try that. (lockpicking the server room)

[finite basalt]

The forensics one was 32 pages and it a bit naff but that's because only a quarter of the team did anything

[finite basalt]

you should have seen the team before us that were on the stand, funniest shit I've ever heard

[pearl raven]

Guess who lockpicked the server room.

lol

[finite basalt]

They described brute forcing passwords as "randomly stuffing in passwords and hoping it works"

[neon merlin]

How long did it take eternalblue to go from 0day to like scriptkiddie level. It's kinda crazy how easy it is to do now

[finite basalt]

the lawyer asked "is there any technical term for that" and he said yeah "stuffing passwords in"

[pearl raven]

password stuffing of course being a thing... is not the same thing lol

[finite basalt]

yeah of course

[pearl raven]

I should say credential stuffing.

[finite basalt]

but then he described bruteforcing a physical pin lock and said "bruteforce"

and the lawyer said "this bruteforcing technique, could that also apply to the one you mentioned earlier?"

[pearl raven]

lol

[finite basalt]

by the end the lawyer said "mr X is it safe to say that you have no clue what you're doing and you aren't qualified to be an expert witness"

the lad said "yes"

[pearl raven]

I think that is fair lmao

and a complete pwn.

[finite basalt]

another team apparently got on the stand and the first thing they said was "they're guilty!"

[pearl raven]

lol

no shit

[finite basalt]

the lawyers eyes lit up and he said "is that so? that's my job, you do yours and I'll stick to mine"

[pearl raven]

haha sounds right, it's a gotcha moment

[finite basalt]

Our team did alright given that the lad on the stand had been awol and not wrote any of the report so had no clue what was in it. Actually got through the cross examination with no issues other than that the report was missing one of my findings. (we helped the forensics side of our team because 3/4 of them weren't doing anything) so 1 person wrote the report and happened to miss the registry findings

[pearl raven]

oops

[finite basalt]

Honestly though I did really enjy that other than the fuckaround with some of the people

we made the unfortunate mistake of having 4 people focusing on the forensics (2 of them which failed the forensics modules)

[cerulean aurora]

hey

i need a lil help

my pictures got currepted how can i get them back they are in the .format file ig

[blazing granite]

did you google it?

[finite basalt]

you imaged the media containing the pictures? how'd they get corrupted?

[neon merlin]

Is the blue room a little old? It's asking how you convert a shell to a meterpreter shell. Which is something that's automatic

[finite basalt]

it's not always automatic, it depends on the payload for instance

[pearl raven]

It's not always.

lol. Thank you James.

[blazing granite]

I had to wear a suit for all my tests 🙂

[neon merlin]

Like you get a meterpreter shell by default after using a default payload on eternal blue exploit

[finite basalt]

Honestly love a good suit, unfortunately it's not the goto for me when I go to uni

When I go to uni I usually wear black jeans and some sort of black/grey t-shirt because greyscale all the way

[blazing granite]

Specially during oral, and practical test, always a suit, or you couldn't sit for the test. That's the way to get people used to it. I didn't need it I went to a private school (primary and secondary)

[pearl raven]

My go to even in my environment is a t-shirt (provided by the company) and shorts. Its humidity and environmentally controlled and is the same year round.

[finite basalt]

ahh fair enough

When I was in secondary school and sixth form we had to wear suits, in fact that would've been the same suit

I did however get another suit recently and I will say I looked fuckin sexy

[warm grotto]

Anyone else like using mindmap kind of visualization for notes 'n' stuff?

[finite basalt]

I would've asked me for my number when I was in that suit

[pearl raven]

hell yes

[pearl raven]

lmao

[pearl raven]

I prefer obsidian, however you should learn how to tag / link things in a fluid form for you

[warm grotto]

I've been screwing around with Edotor.

[pearl raven]

I have no knowledge of that and perhaps someone else will chime in.

[finite basalt]

this was the more recent one

went from 2 piece to 3 piece, still an older one but definitely like that suit and will absolutely be finding every chance to use it

I will say I got more compliments that night than I think I've had in my entire life haha

And as soon as I left the event I switched from dress shoes to vans so I looked like something out of dr who

[pearl raven]

You are the red guy right? 😛 Just kidding. You appear to be professional and fine, there is nothing offensive from that photo. It's a nice photo of you.

[finite basalt]

yeah it was a slightly more professional setting with pictures taken so I dressed up nice

[pearl raven]

Very cool

[cerulean aurora]

yes I did

[finite basalt]

When I normally go into the office I arrive wearing black jeans, t-shirt and a hoodie

Definitely a nice and relaxed office environment

[pearl raven]

lol that is valid.

I am so glad for that where I work, it keeps me there.

[cerulean aurora]

i used some crack software

[finite basalt]

occasionally I've walked in hood still up and earphones in 🤣 certainly had times where I felt the office was a little chilly so I threw my hoodie on and put my hood up to keep my ears toasty haha

[finite basalt]

so were they ransomwared or did the file just break your files when you put them through?

[pearl raven]

lol

[finite basalt]

were they deleted or are they still there

you need to give more information, recovery is not a one-way fixes all

if it's a corrupted file signature that's nice and simple, if it's corrupted data, you can try see if you've got past versions or autosaves, if you've got deleted data you can try fetch it back from the file slack but it all depends on how it was "corrupted". corrupted is too vague

[daring moss]

verify

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Oct 17, 2024, 3:50 AM

[inland fable]

will someone do me a favor

[finite basalt]

depends, what's the favour?

[inland fable]

so i was looking throguh i figured out how to find passwordfd

password

[finite basalt]

looking through what sorry?

[inland fable]

inspect

[finite basalt]

Inspect what?

[inland fable]

when your on computer

[finite basalt]

what do you want doing?

if I were to do this favour for you, what are you expecting me to do?

[tepid furnace]

tbh if someone can find your password on your website using inspect element thats a fumble so bad you should be sued for malcious neglegince

[neon merlin]

inb4 "who can hack my exgfs instagram"

[pulsar spoke]

What do we get in return?

[neon merlin]

You'll have to ask the person above

[cerulean aurora]

see this

it is still but i cant open it

[sharp citrus]

Pong!

API Latency

129ms

Client Ping

217ms

Oct 17, 2024, 5:05 AM

[worthy gyro]

hey

anyone know how to play koth

its confusing for tme

[hot nova]

A- what is happening?

[pliant cairn]

Morning people

[muted nebula]

working for me...

[hybrid remnant]

Are people cheating on KOTH? I've seen binaries in /root named "koth", seems like an autopwner, they get to king.txt in a matter of seconds, then locks king.txt

[finite basalt]

Try copy it and remove .format from the name

[cerulean aurora]

i have the image

im not able to edit extension

[muted nebula]

that's not gonna help if the file's content are messed with

[cerulean aurora]

yes i did then i open the image and i get this error

[finite basalt]

Of course not but it's always worth a try

[cerulean aurora]

what should i do next

i also try some softwares online

but nothing works

[finite basalt]

I'd try put it in a hex editor and send the beginning and end bytes of the file

Try see if it's a damaged file signature

The actual file content may be fine other than the file signature

[cerulean aurora]

how to do this?

it just lots of numbers there

[finite basalt]

Yeah what numbers for the first six?

[cerulean aurora]

see

[finite basalt]

What about the numbers at the end??

[cerulean aurora]

here

[cerulean aurora]

h

[muted nebula]

why you doing this stuff on windows

[finite basalt]

It appears to be missing the end of file signature, now if it's lost data then you're looking at file recovery and likely need to image that drive and use autopsy to try get it out of file slack but otherwise you can try adding the bytes FFD9 And see if that fixes it

[cerulean aurora]

sorry what is the problem

[muted nebula]

IDK, for me personally it's easier to do it on linux since there are a bunch of tools you can use out of the box. But if it's comfortable for you then I guess it's fine.

[finite basalt]

Try add FFD9 to the end of the numbers and export the file and see if it works

[cerulean aurora]

im not use to it

[cerulean aurora]

sorry i didnt understand

[finite basalt]

All those numbers and letters

At the end of the ones on the left side add FF D9

It's the bit that tells a jpg that it's the end of the image

It might work assuming that the actual image data is intact

[cerulean aurora]

like this

[muted nebula]

weren't magic bytes at the beginning?

[finite basalt]

Yeah now try export that as a jpg and see if you can open it

[finite basalt]

JPEGs and some other files also have magic bytes to indicate the end of file

Or the end of a particular section etc.

[lament tendon]

That image name suggest the photo was taken with an IPhone?

[finite basalt]

So like PowerPoints and documents are OLE files and contain jpegs inside them so the magic byte at the end is important

[finite basalt]

It's magic bytes suggest it's got exif data so yes it's probably off a phone

[lament tendon]

Have you tried using an online converter? (Excuse me if this is repetitive, I just don‘t want to make any suggestions without knowing whats going on.)

[finite basalt]

Or a camera

[lament tendon]

Or open tho image with a browser.

[finite basalt]

Let's see if exporting and opening the image works first

As it's already done technically

[lament tendon]

Editing the hex just seems a bit, well, last-resort-like.

[finite basalt]

It's only the file signature which is currently damaged

If the datas intact it'll work

A converter likely won't fix the file signature

[lament tendon]

Aaah, so it‘s actually broken, I see.

I assumed that there were just some compatibility issues, because that happened to me in the past.

[finite basalt]

Nah it's missing the magic bytes at the end

[hot nova]

there is nothing working for me

[finite basalt]

And potentially missing data but hopefully just the magic bytes

@cerulean aurora did it work?

[lament tendon]

That would be a bit more difficult to fox, indeed.

[finite basalt]

It's 20 past 8 am and I've not slept, I'm supposed to be up in four hours

[lament tendon]

Dude.

Get some rest. 😅

[finite basalt]

🥺 I'm just a techie

[lament tendon]

I can relate, but like…

[finite basalt]

I'm chronically sleep deprived but now that I'm helping someone I'm committing to the bit if you pardon the joke

[cerulean aurora]

lemme try

[lament tendon]

Hmm. That‘s insanely unhealthy, you know? I did sleep very little as well, then someone told me how much long term sleep deprivation boosts your chances of getting dementia when you‘re old and now I am too scared to not sleep. xD

[finite basalt]

Oh I know about the risks but I genuinely struggle with sleeping

[hot nova]

wait why it doesn't work at brave?

[lament tendon]

It is really not up to me to tell you what to do anyways.

[finite basalt]

I also heard that recent studies found that caffeine can potentially reduce likelihood of dementia so at least I've got that going for me

[lament tendon]

Whahaha, then I‘d be fully immune.

[finite basalt]

I really did used to make some effort to try and sleep but it doesn't work

[finite basalt]

Same

Lore accurate

[lament tendon]

Actually tho.

[finite basalt]

In September on one of the days I'd had a gram of caffeine and slept like a baby

[lament tendon]

One day I drank two really cheap iced coffees from a supermarket only to notice that they had 400mg caffeine each.

[finite basalt]

Apparently I was visibly happier than normal but that was about it

[lament tendon]

But I lived. Somehow.

[lament tendon]

Oh, you get sleepy with caffeine?

[finite basalt]

I had a thermos full of coffee which had 350mg of caffeine per 170ml followed by 2 redbulls

It makes me more relaxed except when I'm getting on trains

[lament tendon]

Or you had a gram in all of September?

[finite basalt]

I had a gram in half a day in September

🤣

[lament tendon]

Oh.

I see. xD

[finite basalt]

But I stayed hydrated so my kidneys didn't give up

[cerulean aurora]

i have change the value

what now?

[naive violet]

@finite basalt 👀 progrock is looking doable, might not even GPS lock it

[finite basalt]

I did have one time where all is drank over two days was 8 red bulls and my kidneys were not forgiving. I became jaundiced at work

[finite basalt]

Try and export it to jpg and see if it works

[lament tendon]

That‘s something I struggle with.
Hacking session for 10h only to notice that my glass of water has been empty for the last 6.

[finite basalt]

Oooh very nice, that's handy, is it accurate enough?

[cerulean aurora]

how do i do htat

that

[finite basalt]

I used to struggle and then I was one redbull away from death one morning so I started drinking water when I drank redbull

[naive violet]

There's a 0.25ppm TCXO onboard apparently, on the 2
Will talk to my local expert and see what he reckons

[finite basalt]

Depends on the tool you use idk, it'll be on the website man

[finite basalt]

Pretty damn good that, fair enough

[steady bluff]

hey guys in few days i m going to have a school event of crytic hunt i wanan come first pls help me cook

[lament tendon]

My big advantage is that I just simply don‘t like how energy drinks taste, whahaha.

[finite basalt]

If that doesn't work @cerulean aurora you need to research forensics because I can't help you with it more, I gotta sleep

[lament tendon]

But yea, water important.

[finite basalt]

I used to drink them purely for taste

[lament tendon]

Who would have guessed.

[finite basalt]

But then I found that I had them when I got stressed because it made me feel less stressed

[cerulean aurora]

im doing it from a site

[finite basalt]

I don't think I'm that sensitive to caffeine in the first place, when I had that gram in half a day I didn't have jitters or anything

[finite basalt]

I noticed, you need to save/export it as a jpg and try and open it

[lament tendon]

Mmhmm, I see.

[cerulean aurora]

not working

[finite basalt]

As in you can't export it or as in the image is still broken?

[lament tendon]

I suppose you do develop some kind of tolerance at some point. Would be kind of abnormal if not.

[cerulean aurora]

the image is still broken

[finite basalt]

Then you need to look into if it's possible to forensically recover it

[lament tendon]

Well, I will leave you to foxing the image now.

[finite basalt]

I can't help you with that though as I have to sleep

[lament tendon]

See you guys around.

[finite basalt]

I don't think I've ever had jitters

Anyway take care man

[steady bluff]

guys i have a school event in fews days 😭 pls help me

[sick lance]

What are you trying to open, and where from?

[steady bluff]

its a crytic hunt

[sick lance]

No, we don't help with school work.

[steady bluff]

that a crytic hunt

[sick lance]

We still don't help with school work, regardless of what it is.

[steady bluff]

then just call it a office

i have a event in the office 😭

[grand mural]

I'm planning to start learning Linux and wanted to ask for your suggestions. Could you recommend any good YouTube channels or tutorials for beginners? Also, do you have any advice on which Linux distro would be best to start with?

[sick lance]

Please read rule 5.

[sharp citrus]

<#651923438524432404>

Rule 5 - No Cheating

Cheating in any form is strictly prohibited. This includes, but is not limited to, requesting assistance with schoolwork, employee assignments, or active CTFs. If you need help with challenges or content from other platforms, please use their respective Discord server. [See More] [See More]

TryHackMe Rules · Oct 17, 2024, 7:34 AM

[sick lance]

tl;dr, we are not helping you cheat in anyway, shape of form. 🙂

[steady bluff]

😭

[sick lance]

Linux Journey is a good website to interactively learn the CLI and other stuff.

Even has a page on which Linux distro to use.

[grand mural]

Thank you i will look into this

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2871)

[steady bluff]

@sick lancebtw its allowed to use any form of help in the event

so yk i can ask

[stoic quarry]

I've been daily driving Linux for over a year now but I might give this a try still

[teal belfry]

@devout palm hi bro

[sick lance]

Not in this server it isn't. 🙂

[steady bluff]

WHY broo 😭

[cerulean aurora]

it my picture which got corupted

[stoic quarry]

How'd it get corrupted

[upbeat meadow]

Hi I need help in my lap

[stoic quarry]

In your what?

[sick lance]

So we don't assist cheating.

[sick lance]

What's up with your laptop?

[hushed adder]

hello friends I am using gnome kali linux and after the update so
After sudo apt-get update command I ran sudo apt-get full-upgrade command and rebbotted and after that the logo of most of the programs on my computer became invisible and I cannot enter the terminal 😦
CAN ANYONE HELP ME PLEASE

[upbeat meadow]

Thanks but I don't need any help now the help-room helped me

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2872)

[neon merlin]

did you make a snapshot before upgrading?

[hushed adder]

Nope It's my main os

[stoic quarry]

Is there a new version of gnome out or something

[neon merlin]

Yeah... best to not just update kali without backing up. It breaks constantly wth updates.

[hushed adder]

some things have changed after the update for example the lock screen background has changed

[hushed adder]

how can I do it

cuz Terminal doesn't open

[stoic quarry]

Wait Kali is your main os?

[hushed adder]

yeap

[stoic quarry]

Ctrl + alt + T doesn't open it?

[neon merlin]

Even the Kali devs kinda advise against running Kali as a main OS

[hushed adder]

no i tried but it didn;t work

[stoic quarry]

What shell do you use?

[hushed adder]

my computer's bad. 😦

[stoic quarry]

Yeah lol

[sick lance]

Ya this happens after an update

[hushed adder]

Do u have an Idea sir 😄

[neon merlin]

I run Linux Mint on a pretty old computer and just put tools and wordlists on that.

For THM I just use the attackbox tho, which is ubuntu

I don't actually go near kali

[stoic quarry]

Isn't it parrot?

Oop

[hushed adder]

nope but in htb yeap

[stoic quarry]

I have a Kali box for CTFs/Labs and just use ovpn

Oop

Pretend I didn't say that lol

[neon merlin]

I dunno maybe I'm talking out my ass, I just thought I saw somewhere it was ubuntu

[stoic quarry]

Might be, doesn't really matter

[hushed adder]

u

ure right thm attackbox os is ubuntu

[atomic pond]

where can I ask about openvpn connection?

[neon merlin]

https://discord.com/channels/521382216299839518/521771811768107008

[stoic quarry]

Oopsies

[hushed adder]

I won't be able to process ctf this day cuz of terminal 😐

[neon merlin]

It the THM kalibox useful? I've never actually tried it

[hushed adder]

yeapp

[stoic quarry]

Neither lol, just ovpn

[hushed adder]

it's better than htb

[neon merlin]

Does it have advantages over the ubuntu box?

apart from being for 1337 h4ckers because kali ofc

[hushed adder]

no it's best to download ovpn to your own machine and connect to it

[neon merlin]

I can't use openvpn due to reasons

[hushed adder]

what's up

[neon merlin]

Discussing why would be against the guidelines of this discord I think

[hushed adder]

got it

My problem is still not solved 😐

[sick lance]

Re install a new image. 😄

[neon merlin]

Does your kali machine have much saved on it?

Yeah cause I was just about to suggest what Scrubz said

[atomic pond]

why does openvpn seem to connect, but doesn’t write the IP in the browser on 10.10.10.10 (2ip gives my regular IP address)

[hushed adder]

yeapp

I'm sorry to bother you but how can I overcome this problem @sick lance

[stoic quarry]

What do you mean write the IP to the browser

[atomic pond]

that is, I can’t connect to the machine and in 2ip.ru it says my real ip

[neon merlin]

I don't think it's supposed to be a VPN in the same way say NordVPN is that hides your IP

It's just designed so you are networked with THM machines

[atomic pond]

In room page in the room page it says You are disconnected
To access target machines you need to either. While in tryhackme.com/r/access: Connection Connected

[mossy river]

Correct^ the TryHackMe VPN only routes TryHackMe traffic to our servers, it does not route your public traffic through our network

[stoic quarry]

Yeah try ping a local IP and you should see it

[atomic pond]

10.10.10.10? or 127.0.0.1?

[stoic quarry]

Whatever the lab ip is

[wooden oasis]

alright thanks

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2206)

[rigid cypress]

Does anyone play the game together

[atomic pond]

Its successfuly ping but the site loads for a very long time or even endlessly and queries such as nmap or dirsearch give timeout

[neon merlin]

I feel like a dick explaining to my work colleagues that I don't answer anything work related at the weekend. But this isn't unreasonable right?

"Oh zcorp you're so hard to reach you never reply after work or at the weekend".
No I don't

[shadow tiger]

Nope, work and private should be separated

[muted nebula]

are you sure your openvpn is connected?

[neon merlin]

Like the coporate group chat gets muted friday night and doesn't get reopeend until monday morning.

[atomic pond]

In page tryhackme.com/r/access "Connection: Connected you are ready to start hacking"

And ifconfig show tun0

[muted nebula]

does tun0 have an IP address assigned to it?

[atomic pond]

But in room page "access machine: You are disconnected"

[muted nebula]

which room is this?

[atomic pond]

Pickle rick

And everyone else rooms

[neon merlin]

Anyone I can DM about migrating the THM discord token?

[atomic pond]

Yes, It does

[muted nebula]

the "access machine" doesn't always show you if your connected or not. If you can ping the machine in the room then you should be good to go

[arctic cradle]

the newest Dashboard UI layout looks sick

: (

[rapid merlin]

I don’t either

Why would you add people on tryhackme, it there a chat service

[arctic cradle]

probably to collab on CTF's

or just play CTF's in general

[rapid merlin]

Oh I didn’t know you could collab

[arctic cradle]

I may be mistaken though, I've never done it

[rapid merlin]

I’ve never done one with anyone before

[arctic cradle]

my dream is to have Scrubz as my friend

one day..

[stoic quarry]

Scrubz helped me like a day ago

🫣

Or will steal my token and take credit as being a noob

[muted nebula]

woah the new dashboard looks awsome

[pallid lotus]

Not anymore

Think the friends thing is just to compete over points

[stoic quarry]

Bit of friendly competition

[rapid merlin]

Ah okay

[queen forum]

tryhackme making some real good changes. love it ❤️

looks refreshing

[pallid sapphire]

huhhh

[stoic quarry]

New paintjob looking good

[arctic cradle]

#site-support

[wooden oasis]

i have a question

Offensive security focuses on one thing: breaking into systems. Breaking into systems might be achieved through exploiting bugs, abusing insecure setups, and taking advantage of unenforced access control policies, among other things. Red teams and penetration testers specialize in offensive security.

Defensive security is somewhat the opposite of offensive security, as it is concerned with two main tasks:

Preventing intrusions from occurring
Detecting intrusions when they occur and responding properly
Blue teams are part of the defensive security landscape.

Some of the tasks that are related to defensive security include:

User cyber security awareness: Training users about cyber security helps protect against various attacks that target their systems.
Documenting and managing assets: We need to know the types of systems and devices that we have to manage and protect properly.
Updating and patching systems: Ensuring that computers, servers, and network devices are correctly updated and patched against any known vulnerability (weakness).
Setting up preventative security devices: firewall and intrusion prevention systems (IPS) are critical components of preventative security. Firewalls control what network traffic can go inside and what can leave the system or network. IPS blocks any network traffic that matches present rules and attack signatures.
Setting up logging and monitoring devices: Without proper logging and monitoring of the network, it won’t be possible to detect malicious activities and intrusions. If a new unauthorized device appears on our network, we should be able to know.
There is much more to defensive security, and the list above only covers a few common topics.

In this room, we cover:

Security Operations Center (SOC)
Threat Intelligence
Digital Forensics and Incident Response (DFIR)
Malware Analysis
Answer the questions below
Which team focuses on defensive security?

for the course

isnt the anser blue team?

[copper ibex]

The new UI looks very nice

[stoic quarry]

Are you just pasting a whole question lol

[wooden oasis]

nono thats the question

ill show you

[stoic quarry]

Which team focuses on defensive security? sounds like that's the question

[wooden oasis]

how do i send a pic

[stoic quarry]

DM if you want

[wooden oasis]

snm

[wooden oasis]

ive sent u it

[rapid merlin]

Is there somewhere I can look at a playbook for firewall rules, if that is the right word 😅

[stoic quarry]

Like common commands?

I usually just search "{firewall} cheatsheet" lol

[muted nebula]

"/verify"

[karmic geyser]

want me?

[arctic cradle]

it's alright, I was just messing around, thanks though

[twin ridge]

Gave +1 Rep to @karmic geyser (current: #536 - 9)

[arctic cradle]

#room-help and please refer to which room you're pointing out, but shortly, yes, sounds like Blue Team

I don't know if you took that from THM or you're reading an article or something

[barren oriole]

Yoo @pallid sapphire

[wooden oasis]

im doing a course

im new to cyber and im learning

[pallid sapphire]

yooo

whats up

[arctic cradle]

I understand but it's best to ask room related questions into the appropriate channel -> #room-help

also, it's best to attach a screenshot along with your issue or give us a link to the room you're doing so we can check it out ourselves to properly help you

[wooden oasis]

alright cool

[arctic cradle]

[light osprey]

Hey guys! glad to be here

[arctic cradle]

welcome, friend

[barren oriole]

English lab😭

Boormax

[light osprey]

Thanks mate!

[twin ridge]

Gave +1 Rep to @arctic cradle (current: #784 - 5)

[tepid citrus]

Hi guy. How are you stopping this weird AI scrapers or crawlers on your websites ?

[stoic quarry]

robots.txt

Not that anyone respects it

But hey ho

[proper void]

Hi everyone! I've been learning on THM for a couple of weeks and now joining the discord. Glad to join the community 🙂

[stoic quarry]

Welcome!

[light osprey]

I just have joined too

[stoic quarry]

Welcome to you too

[arctic cradle]

welcome, enjoy your stay here

[light osprey]

🤝

[proper void]

Thank you everyone!

[pallid sapphire]

whatt>?

[pallid sapphire]

boormax?

what is it

[stoic quarry]

Boormax yknow

[pallid sapphire]

idk

[stoic quarry]

Idk either I'm just trying to fit in

[pallid sapphire]

what is it pls acknowledge me

[light osprey]

Guys, someone got a job through learning on TryHackMe?

[pallid sapphire]

yes and i left it

[stoic quarry]

Lmao

[light osprey]

Why lol

[stoic quarry]

You could use it on a CV to say you've done experience and have competed in CTFs, but likely need a bit more to get a job

[light osprey]

Are you bounty hunter now?

[karmic geyser]

np

[pallid sapphire]

its in diffenet country 😦

join us in vc

haha

[light osprey]

I spent already about 2 month and completed 36 rooms and got 170057 rank. Its just beginning

[stoic quarry]

Yeah, it's fine to keep learning and get experience

A lot of people jump into infosec wanting to do red teaming, but you probs won't get a job as a pentester right away

[pallid sapphire]

yes

[light osprey]

i love to but my eng speaking skills are horrible haha. Im at B1 level but increasing

[stoic quarry]

SOC stuff can seem boring but it's fun idk

[pallid sapphire]

then they realize its not red team good for them ... then got confuse with differnt paths in offsec

[stoic quarry]

100%

[pallid sapphire]

hahha its ok we do understand everything mate 🙂

we are hackers haha

[stoic quarry]

Yeah you're fine

[neon merlin]

I went from barely touching linux to doing my first eternalblue exploit in 28 days so THM is great for some basic knowledge

[stoic quarry]

Lmao nice

You got your role back, nice one

[pallid sapphire]

thm is best out of market if u want to genuinely learn anything about offsec- infosec

[light osprey]

yeah i dont like a lot of documentation in SOC, so pentesting more interesting

[light osprey]

im not yet haha

[stoic quarry]

It's more interesting yeah, but a lot of people get disillusioned by not being able to understand things and give up

[neon merlin]

I know that's not much, but without THM I wouldn't even know where to start or what eternalblue even was

[pallid sapphire]

its the best once u know how to do

rather than pen test

[stoic quarry]

100%

[pallid sapphire]

exactly thm is friendly

[stoic quarry]

I think understanding the fundamentals and slowly building up knowledge before choosing a path you want to go down is ez pz with THM

[pallid sapphire]

yes

[stoic quarry]

Can't do that as like... A lawyer or something

[light osprey]

yeah, true

[pallid sapphire]

silastic i think u seen many paths in google and end up here hahah

and like oh yea finally

[stoic quarry]

You can't just decide one day to do Criminal law when you've been doing IP law the whole time

Maybe you can I'm not a lawyer

[neon merlin]

Yeah like if you wake up one day and think "I wanna learn some stuff about hacking" it would be very hard without platforms like THM

[pallid sapphire]

woahh

[neon merlin]

You'd have to set up your own lab stuff

[pallid sapphire]

i like to see all loving thm

🙂

[stoic quarry]

Yeah you'd need to know it before you did it, which is a bit of a paradox

OverTheWire is great for general CLI stuff. Not as indepth as THM but it's pretty good too

There's just a lot of resources out there

[pallid sapphire]

its been years man to see this kind of Appreciation

[stoic quarry]

Go out and learn my friends

[light osprey]

i set my goal - 6 month before my 1st bounty hunting

[stoic quarry]

Good luck? I've never done much bug bounty-ing before

[light osprey]

also i got 5 Google certificates on Coursera

[stoic quarry]

I've found a few CWE's but no one got back to me lol

[pallid sapphire]

me ?

ggoogle also have certs now

[stoic quarry]

Anyone idk

[pallid sapphire]

ok 😦

[light osprey]

how much time are you in infosec?

[stoic quarry]

As a job?

[light osprey]

from begging

[stoic quarry]

Eh?

[split plover]

I've also heard that if your main goal is earning money go for blue teaming first then you can start with offsec. And it'd be great ig. As you'll be earning some money and can invest in yourself to build more solid knowledge.

[light osprey]

let me rephrase when you start learning?

[light osprey]

sounds like easiest way

[stoic quarry]

I was a software developer before. I always had an interest in infosec. I was asked to change the password db from plaintext to hashed.
I had no clue what that meant so I did some digging and realized I loved infosec

Been employed a year, been learning on and off for about two years

[split plover]

What programming languages you guys know? And which one you use as your primary lang?

[neon merlin]

It seems like blue team is easier just based on salaries. Pentester jobs are offering 60k GBP while I've sen SOC 1 as low as 28k GBP

[light osprey]

Damn! I dont have so much time haha

[neon merlin]

It suggests that Soc 1 is at a much lower level and easier to get into

[stoic quarry]

Pretty much. Blue teaming also lets you learn offsec stuff, just without playing with it

[arctic pebble]

Junior SOC roles can get even lower, it’s more entry than pentesting

[wise sphinx]

hi how to have public info of an aws site please?

[mossy river]

Could you elaborate, please?

[neon merlin]

yeah seems way more lower ranked.

[light osprey]

what about foreign citizens? is it possible too?

[arctic pebble]

All about a foot in the door

[stoic quarry]

Depends if the org is willing to hire you

[neon merlin]

yeh thats good

[arctic pebble]

Dependant on the employer. A lot of the companies I’m heading for are British citizens only

Due to clearance

[stoic quarry]

Rip

Better become a british citizen first

I might do the same lol

[wise sphinx]

i want when the site was started and if possible, account or pseudo of the person who own the site

[arctic pebble]

Well even then you can’t be employed for clearance

[light osprey]

But for me - blue team is borring

[arctic pebble]

You need to be a citizen for x amount of time etc

[stoic quarry]

I thought that too. It's not that bad

[arctic pebble]

And if you’ve moved/traveled in certain countries you will be declined clearance

[mossy river]

You can try who.is but if they have enabled privacy, there's not much you can do.

[stoic quarry]

who.is yeah

Oop

[neon merlin]

I'm a British citizen but been out of UK for 10 years. Might come back.

[stoic quarry]

Beat me to it

[arctic pebble]

Don’t

[mossy river]

https://tenor.com/view/bills-ugh-gif-9811803164280522639

[stoic quarry]

Just give me your passport I'll let you know how it goes

[narrow bone]

imagine being paid for a boring job how awful 😂

[stoic quarry]

(That's a joke yo)

[arctic pebble]

I won’t get political but the UK is in shambles

[light osprey]

Yeah, me too. I have visited UK once. Love China town in London

[mossy river]

Let's switch, I'll leave and you can come back

[stoic quarry]

Ayo what about me

I got a question re: room write-ups, should that go here or in another channel?

[neon merlin]

Well I'm in China right now. They pay IT roles like crap here. (I'm not in IT right now)

[light osprey]

first i need increase my skills, then ill see what next

[mossy river]

Here is fine

[wise sphinx]

who is do that:

there is no a whois but for aws?

[mossy river]

How did you get the s3 bucket's address?

[stoic quarry]

Are there any rules for write-ups? I know some sites don't allow answers etc. I can't find anything saying what is/isn't allowed. Might just be blind lol

[idle arrow]

Love the new UI guys!!

[pallid sapphire]

hehhe

[wise sphinx]

a russian tries to phishing me

[neon merlin]

They probably wouldn't even give a SOC role to a foreigner in China because you can only be employed in a job that no Chinese person can do. And there's like 1.4 billion.

[pallid sapphire]

huhhhh

[light osprey]

Ok guys, nice to meet you again. See ya

[neon merlin]

Incredibly strict working immigration rules here

[stoic quarry]

I bet

[pallid sapphire]

u leaving us

[mossy river]

Yes.

Do not include any TryHackMe graphics or art from the room.
Posting full content of rooms/ answers is not allowed.
If you are looking to post it in the Discord server or on the website, it must not contain any flags or passwords (exceptions: live streams).

I would recommend emailing [e-mail] for the full breakdown of the rules:)

[mossy river]

@near hawk would it be possible to put this (the written article) on help.tryhackme.com?

[wise sphinx]

so what do i can do to make whois working good?

[neon merlin]

Yeah can't do any job a local can do. Need to be recognized by the government as an expert in whatever field you're in. Have to have all your qualifications approved by the government. Can only work 1 specific job, the job your work permit is for. Cannot hold any other part time jobs or side hustles.

[stoic quarry]

Beaut cheers mate! I'll censor out the answers and flick a message that way to get some guidelines

[mossy river]

https://support.aws.amazon.com/#/contacts/report-abuse

[stoic quarry]

Oh you just... I really need to read huh

[neon merlin]

Damn so many medium articles break these rules

[stoic quarry]

Yeah they do lol

But if you want to learn then cheating for the answers isn't helping you

[wise sphinx]

i must have an account to report? its idiot

[stoic quarry]

You can't use medium articles at the workplace, Get used to figuring stuff out

[neon merlin]

Is it not against copyright to just copy paste large amounts of THM onto other websites?

Cause that's what they do

[split plover]

Damn, this sh*t look fckn cool bro.

[stoic quarry]

If they're reviewing it then it's probably covered under some sort of fair use or transformative category

[split plover]

I mean the UI

[neon merlin]

I'm scared that if I go to an interview they will ask me to do something and I wont have google.

[stoic quarry]

Just tell them that

[mossy river]

Yes, they may be removed 🙂

[arctic pebble]

Then you better learn what they may ask, basic interview prep

[stoic quarry]

My first job outside of software development they asked me "How would you create a new user in AD"
I had no clue what AD was. I didn't know what they were saying. I just said "I got no clue. I'd google it or ask someone for help."

Somehow I got the job and moved up the ranks lol

[neon merlin]

Because I'm not in this industry I dunno how common this is, or if it's a thing. Do they ask you to do things off the top of your head much?

[shut hawk]

No

[proper void]

love this

[shut hawk]

This field is constantly changing, so it's way more important to know how to research efficiently to find the answer

[neon merlin]

When I worked for an IT security company (But not in a computer role ironically) they'd test the potential devs out by sending them a task to do over the weekend.

[stoic quarry]

And not bullshit about 'knowing' something when you have no clue.

If you don't know something then ask. If no one else knows then read the documentation. Don't just sit and do nothing lol

[proper void]

This makes me think, there is a lot of theory on THM and sometimes I'm worried not to remember everything, but it's not the goal right? (reassure me pls haha) You should read the theory first, and then remember it by practicing a lot?

[pallid sapphire]

yes

[stoic quarry]

Pretty much

Get a general understanding and practice it until you know what you're doing

Then get given a task at work that is completely new and do it all over again

[proper void]

hahaha

[neon merlin]

I'm in the same boat. I'm hoping that knowing that something can be done is most of the way there. Even if you don't know specifically what commands you would type.

There's always -help and man I guess

[proper void]

those are the ones I memorized instantly 😂

[shut hawk]

Focus on understanding the theory, memorising comes naturally afterwards

[proper void]

thanks guys, I feel better haha

[arctic pebble]

Employers love honesty and the ability to use Google is the ability to research

[neon merlin]

They probably wouldn't want me to answer "cause I heard you got a job going" when they ask "why do you want to work for our company?" tho

[stoic quarry]

Yeah for that just do some research and say you love the work they do and can't wait to join the team

Be a bootlicker until you get the job, then relax

[neon merlin]

I'm wondering if doing a little computer club with my students might be something I could at least put on a CV. Right now I just have nothing related to computers. We have extra curricular clubs every Friday afternoon. At the moment I just tag along to help the baking club.

[stoic quarry]

Yeah it sounds lke it

[arctic pebble]

I feel like you should just honestly present yourself as you are, I’m kind of confused why you’d want to fake these things if you’re not passionate about them? Just my take

[stoic quarry]

Real

[neon merlin]

I dunno what you mean by fake things

[limpid cobalt]

man why does the new ui calls me a "dum ahh"?

[arctic pebble]

Obviously choosing to do things to bulk CVs is recommended but it feels like there’s part of your whole life you’re trying to change to fit into an interview my man

[limpid cobalt]

things getting way to real here

[stoic quarry]

Gottem

[neon merlin]

Well when trying to change careers, they're not going to be interested in my 10 years experience teaching in a primary school. I need to put something on there related to computers at least.

[arctic pebble]

I guess any personal projects or interest you have etc

[stoic quarry]

What sort of room is this lmao

[neon merlin]

I thought no one cares about the "Hobbies" section of a CV?

[muted nebula]

blue team

[neon merlin]

I never put anything like that

[arctic pebble]

Monsters inc

[limpid cobalt]

man im liking this new ui

[stoic quarry]

It is a nice UI

[arctic pebble]

I don’t have hobbies on mine, I have projects, where I list my THM journey and also my role as a content tester for a game

[stoic quarry]

Confused me for a mo but I liked it

[arctic pebble]

But volunteering etc is always great for a CV

[mossy river]

Hobbies are super important! It's nice to know that the person you're hiring does things outside of work. It helps you work as a team if you can bond through your interests

I know of people who have been denied the job purely from not having any hobbies

[neon merlin]

I don't think my UI changed

[stoic quarry]

Check the dashboard

[arctic pebble]

I wouldn’t exactly be putting massive paragraphs on hobbies but

[neon merlin]

Maybe it's just no one cares if you just list "watching movies and playing video games"

[mossy river]

Just quick bullet points, throw it in at the end

[stoic quarry]

Nah just say boring stuff like

• Learning x language
• Playing y instrument
• Soloing Everest and the secret bigger mountain in 1h 25m

Normal stuff like that

[mossy river]

^ Those also show a willingness to learn 😉

[neon merlin]

Mine looks the same I think, I tried clearing cache

[mossy river]

That is the new one^

[stoic quarry]

That's the new one

Bro you gotta stop beating me to it cmon now

[limpid cobalt]

man never knew the recruiter cared about that stuff , might need to get a list ready 😅

[mossy river]

If you joined recently, you may have already had the new one.

[neon merlin]

Oh really, It's looked like that for a while?

[neon merlin]

Yeah I'm on 28 days

[mossy river]

Yeah you might have been lucky enough to be given special access 😎

[stoic quarry]

You don't have to go that insane, just put down your hobbies. Even if it's building PCs or doing other stuff then it's a hobby

[neon merlin]

I feel special

[stoic quarry]

||The chatbot is new too, I likey||

[neon merlin]

I've not written a CV in about 7 years tbh I don't even know what the current meta is.

Jobs recently have been through word of mouth

[stoic quarry]

Just ask an LLM

[shut hawk]

information overload

[stoic quarry]

If you have access to any where you are

[arctic pebble]

I’m very excited to hear back from James about my acceptance to the mentorship program with THM

[limpid cobalt]

true true, was just worried man, getting rejections after rejections by companies

sometimes cant even get the aptitude test solved ;-;

[stoic quarry]

Just gotta stay on the grind i'm afraid

[neon merlin]

ChatGPT is my therapist

[stoic quarry]

That's not good

[arctic pebble]

You have to get denied time and time again

[stoic quarry]

Anyway gang lovely chat. I'm outski

[arctic pebble]

The job market works like that

[stoic quarry]

L8r sk8rs

[arctic pebble]

See ya @stoic quarry

[neon merlin]

You guys are getting rejections?

[limpid cobalt]

yeah ig that gives more experiance about whats going to come next

[limpid cobalt]

man 😭

[neon merlin]

When I was looking for work in UK last time it was just getting ghosted constantly

I would have liked to actually get rejected lol

[arctic pebble]

My man, I’m changing careers from construction to IT/Cyber and I’ve had job offers for jobs I didn’t want but I went to the interviews purely for the experience

[limpid cobalt]

ngl this was happning to me as well at the start

[arctic pebble]

I think I’ve had over 100 denied apps, 20+ interviews and 6 job offers, all declined

You’ll know when the job is right for you & I know when the job will benefit me more than staying where I currently am

[limpid cobalt]

dang, thats quite a bold move to go from core to IT. respect man!

[arctic pebble]

Yeah, I’ve been on PCs all my life just never had the drive to make it a career, dodged going to uni to study computer forensics to peruse a childhood relationship which failed so why not give it another shot, I’m only 26 and have plenty of gas in my tank

[neon merlin]

whoa we're the same person but I'm 34

[arctic pebble]

Currently doing CompTIA A+, have network, security and cysa all purchased to do after A+

[neon merlin]

That guy that was always "into computers" but never did anything with that

[arctic pebble]

Exactly but yknow, you don’t have to be a certain age to pick something new up

[limpid cobalt]

im more into devops, now trying to shift towards security if possible

[neon merlin]

The thing was when I was around 18, there just wasn't the resources to learn this stuff.

Now you can go do a degree in ethical hacking

[arctic pebble]

Now is the best time to get in, especially with all the material you can do online, I’m teaching myself my CompTIA courses whilst also researching malware etc, it’s all doable from Google

[limpid cobalt]

and almost all of the study material is for free