general

[rapid merlin]

What changed?

[vast tulip]

@rapid merlin that's like basic 😂 but a good start for a young man like

[boreal scarab]

I like Trilium, some like Obsidian, you also got Joplin

[sick lance]

I use Onenote, pen and paper and my white board.

[outer rivet]

https://tenor.com/view/monkey-buisness-gif-26885105

[eternal timber]

User interface on mobile

[loud marlin]

Obsidian FTW

[rapid merlin]

It was meant as a joke😂

[outer rivet]

Pen and paper

Woow

[whole yew]

Just a heads up - there's a lot of business pressures that can affect careers, just saying that "skills" prevent someone from getting laid off is not how the businesses judge keeping someone on the payroll.

[sick lance]

The method for taking notes, is not as important as "how" to take notes.

[boreal scarab]

Write notes using smoke signals

[vast tulip]

Taking notes. I use obsidian and notion

[outer rivet]

Notion? I though that only for like organizing stuff

Nice

I might tru

[vast tulip]

God I am just very literal person

[vast tulip]

Well I guess that depends in many factors but u r kinda right

[vast tulip]

Yeah I mean u gotta do some to do list to track ur progress at some point right. And use obsidian to link interrelated topics and also good for writing ctf write-ups

[sick lance]

Oh well, time for my stop, have a good one everyone. 👋

[polar spoke]

this

[vast tulip]

Till we meet again 😄

[loud marlin]

❤️

[lime belfry]

Ok but, I already completed 3 paths and the notes I only took were photos for the tasks in the room it will be highly appreciated sending me your notes

[vast tulip]

Very nice look

[loud marlin]

ty

[vast tulip]

Did u customized it yourself

[wooden totem]

arch btw

[vast tulip]

Maybe u should add ur pics in the note taking apps

[loud marlin]

arch yes. a lot. obsidian, not so much. i spend fair amount of time to custom it. look and keybinds thing to be faster

[vast tulip]

Fair enough 😂 you can't say u use arch without doing that right.

Which de is tho

[loud marlin]

hyprland

[vast tulip]

Damn I know that is something I should try

I usually use debian based distros but recently I am kinda trying black arch

[pliant cairn]

Changed the colours @loud marlin? Its cool tho

[loud marlin]

colors are based on wallpaper. script create 15 colors based on current wallpaper. and appy that colors on system

[pliant cairn]

Lovely and cool

[vast tulip]

Dude I can never do such customization. Did u followed some walkthroughs or u just made that from scratch

[loud marlin]

used ml4w as base theme. check github

[loud marlin]

as new wallpaper the new colrscheme

[wooden totem]

why 15

[loud marlin]

idk. it is script like that by default

[wooden totem]

arching

[loud marlin]

yea

[vast tulip]

Will do. If I have time and the Energy 😂

[loud marlin]

i hve kali also hyprland

[vast tulip]

Can I take a peak

[loud marlin]

gib few min. got some thoing to do

[vast tulip]

Sure

Actually I got some table tennis 🏓 to do as well but do send it here

[gray sonnet]

any mods around?

[loud marlin]

ill send in 2-3 min

[loud marlin]

you also got DM from rinz ?

[gray sonnet]

please mute @heady nova

[gray sonnet]

yup

I got his phone number from when he was working at microsoft in my city, I am calling him to inform him

[grizzled wing]

i just got DM from Rinzler with malicious steam gift card link, VirusTotal flags it

[loud marlin]

bad rinz, bad 🙂

[grizzled wing]

yea

[vast tulip]

I didn't like the file manager but the rest seems cool. Especially the transparent part

[loud marlin]

@sick lance our rinz got hack... can help ?

[sick lance]

Not really.

[loud marlin]

frack =/

[heady nova]

i got compromised

[grizzled wing]

good thing i immediately went to VirusTotal

[heady nova]

i don't get it

there are no traces

no codes

no links

[loud marlin]

https://tenor.com/view/covid-meme-cute-gif-23513805

[sick lance]

Secured your account?

[wooden totem]

check friends and apps

[heady nova]

my linkedin got compromised yesterday

[grizzled wing]

shows you are likely a spammer

[heady nova]

yes, 2fa was enabled

on both

[wooden totem]

also login sessions

[loud marlin]

time to fresh os install

[heady nova]

any other way?

I have labs setup

hmm

let me see

[loud marlin]

change all the things... use vpn

[heady nova]

yup

gonna do that

[wooden totem]

I dont think files get effected

[loud marlin]

change all passwds and so on

[wooden totem]

most of the times the answer is here

for discord I mean

[loud marlin]

dont use betterdiscord if so crap thing

[crude stump]

One of my mods in another server also got hacked the same way. He went to bed and next minute he’s spamming scam links

[grizzled wing]

best of 🍀 luck to Rinzler

[heady nova]

checked em

[wooden totem]

no better discord

[heady nova]

no other logins

prolly my host got compromised

[loud marlin]

windows ?

[heady nova]

yes

[grizzled wing]

ohh

[loud marlin]

can be as most like

[heady nova]

should i get rid of it?

the os

feels an easier option rn

[loud marlin]

might be best to do

[heady nova]

aight

[wooden totem]

you can reset and keep apps and onedrive

[heady nova]

gonna fall back to kali

[grizzled wing]

as daily driver?

[heady nova]

nahm, I'd choose *nix

[heady nova]

yes

[grizzled wing]

the Rinzler is no longer labelled a spammer

[heady nova]

long time folks

[wooden totem]

the linux disease

[grizzled wing]

haa

[heady nova]

gonna burn linux in a drive

see ya'll down there

[loud marlin]

do full disk format

the long thing

[wooden totem]

might as well tear down you walls, the viruses hide there too and transmit harmful emf

[loud marlin]

put foil on head also

[heady nova]

got it

[grizzled wing]

DE REZ ! DE REZ!

[heady nova]

hey sudo , how you been?

[grizzled wing]

ok

busy with other things

[heady nova]

life been good?

what you upto nowadays?

[grizzled wing]

could be better, could be worse. been learning more about databases for potential jobs, still unemployed

how about you?

[heady nova]

hey, not always gonna be night

[heady nova]

been hustling here and there

[grizzled wing]

the 🌞 will rise eventually

[heady nova]

got picked for a job

let's see

[grizzled wing]

how was the MSFT internship awhile ago - last time iwas here

[heady nova]

It was good

a bit hectic

9-12 was in office

9am-12am*

[grizzled wing]

wowza

[heady nova]

got an offer somehow

lucky

[grizzled wing]

they liked your work in the grid

[heady nova]

now I'm gonna try build a business alongside a 9-5

alot of money down the drain prolly

but hustle is hustle

[grizzled wing]

and bustle

[heady nova]

mhm, you in eu?

[grizzled wing]

nope

[heady nova]

us?

[grizzled wing]

i am wherever you want me to be

[heady nova]

@gray sonnet nope, still can't dm

[gray sonnet]

wym you still can't DM?

[heady nova]

in the hustle grid, that pfp still is as green as ever

[heady nova]

dude I'm kind of banned

from dms

[gray sonnet]

wtf, when did discord implement that?

[heady nova]

and I see people falling for this

[loud marlin]

try re enable

[heady nova]

don't like it

at all

[grizzled wing]

suspicious activity would naturally block you from DMs

[gray sonnet]

and try emailing discord

[heady nova]

I will

tearing down win

[gray sonnet]

aye

[heady nova]

let's see if i can get a sample

[gray sonnet]

smort

[heady nova]

am part of the botnet prolly

[gray sonnet]

anywho, I got a chemistry mid term to prepare for, I'll cya'll later

[gray sonnet]

keep calm and reinstall

[grizzled wing]

chemistry!

[heady nova]

get those benzoates good

[eager marsh]

p

[grizzled wing]

drink dihydrogen monoxide

[loud marlin]

nooooo

lol

[heady nova]

new energy drink?

[loud marlin]

lol 🙂

[grizzled wing]

its water

[heady nova]

oh dang it

didn't pay attention

[loud marlin]

H2O = dihydrogen oxide

[blissful snow]

https://tenor.com/view/cat-water-gif-19744162

[grizzled wing]

⛵

[loud marlin]

❤️

[heady nova]

it's punishment from heavens for playing too much dark souls i guess

when they told me it's not for beginners they really meant it huh

[loud marlin]

skill issue 🙂

[rapid merlin]

How can I use the attack machine if I don’t have anymore hours

Can I use my own Linux?

[sick lance]

Yeah, connect to the VPN.

[sharp citrus]

Q&A: Common questions after connecting to the VPN

Article Link

https://help.tryhackme.com/en/articles/8991559-q-a-common-questions-after-connecting-to-the-vpn

Oct 18, 2024, 4:15 PM

[loud marlin]

yes. use vpn from thm

[rapid merlin]

Okay

Thanks

[loud marlin]

https://tryhackme.com/r/room/openvpn can help

[rapid merlin]

Okay

[sand trench]

D: shadows poor pocketflare

[grizzled wing]

hi shadow

[loud marlin]

dheck is pocket flare ?

[vast tulip]

I have Been having trouble connecting using OpenVPN. Hope this works

[sand trench]

ello ello veggies

[sand trench]

mini flashlight that is from keyport

[loud marlin]

oh

btw shadow, looked into hyprland ?

[heady nova]

@loud marlin

[loud marlin]

yes my dear ?

[heady nova]

kali good right?

[loud marlin]

not as daly driver

not smart to go

[heady nova]

ubuntu

[sand trench]

a bit.... had to go sleep before sitting in front of pc all night long

[loud marlin]

go ubuntu or arch might

[heady nova]

got it

[loud marlin]

https://hyprland.org/ and check wiki ofc. if you didn't

[loud marlin]

arch come with almost no "standard" app on it. clean os 90%

[heady nova]

and which arch should I go with

[loud marlin]

https://archlinux.org/ and watch vid of how to install via archinstall scripts. manual install is pain in ass

[heady nova]

got it

[sand trench]

or if you want more like archlinux but with graphical installer and working out of the box more or less you could try endeavour os

[heady nova]

got it

tanks @loud marlin and @sand trench

[loud marlin]

whaaat... no rep 😦

[sand trench]

+rep @loud marlin

[twin ridge]

Gave +1 Rep to @loud marlin (current: #24 - 352)

[loud marlin]

thanks

[twin ridge]

Gave +1 Rep to @sand trench (current: #3 - 1925)

[loud marlin]

@sand trench show it 🙂

[umbral bay]

Thank you for reporting this. We are investigating. 🙂

[twin ridge]

Gave +1 Rep to @vague coral (current: #2275 - 1)

[loud marlin]

ello tim

[mossy river]

You need to change your account password, it bypasses 2FA

[umbral bay]

Let's see the first person who can switch around the letters in premium user 😄

[loud marlin]

not free user

[gray sonnet]

@heady nova managed to get a sample?

[sick lance]

So it's not an image that is attached: 🤔

Something to do later I guess

[primal kestrel]

I apologize; I am just curious about new things and want to learn cybersecurity, but no one has helped or guided me.
so corny honestly

[blissful snow]

what is bro doing 😭

[sick lance]

Nothing now

[primal kestrel]

https://tenor.com/view/civilization-6-nuke-civ-6-gif-11452126007701647869

[blissful snow]

oh well guess this didnt last long for him now

[primal kestrel]

THM rank as job title

[umbral bay]

I'm sure you can fingure it out. 🤔

[sick lance]

God damn Hydra is annoying.

I can use it to get a username, and a password to a ScadaBr login, can i do it together.

Trying to demonstrate the many ways it can be done.

Python script, burp and Hydra done.

Zap and ffuf next

[primal kestrel]

fuff my beloved

[finite notch]

Anyone who good in .net programming

[primal kestrel]

uhhh idk about good

but i know my way around

EvilratDevloper

[meager ember]

Is anyone else driven nuts by Captchas asking you to identify a motorcycle, while showing you a picture of a scooter?

[crude stump]

What is that

[wooden totem]

five hundred instances of python

[primal kestrel]

only the person asking for .net advice

[crude stump]

?

Guessing it’s somthing bad

Oh wait omg I’m so dumb

That’s his name lmao

[rapid merlin]

What’s the command to download open vpn on kali Linux

[primal kestrel]

if i had to guess sudo apt-get install openvpn

[rapid merlin]

Thank you man

What does sudo do and mean

[gray sonnet]

a role? at thm? as a CTF player?????

what

[primal kestrel]

sudo elevates your privileges for the command. i just assume it's needed because messing with networking usually requires root privilege

[mossy river]

That is not a real role for the record

[gray sonnet]

I'm aware, that's why it confused me

[rapid merlin]

Oh okay now once I have open vpn how do I open it

[mossy river]

People on LinkedIn put their job title as CTF player at TryHackMe 🤷‍♂️

[sand trench]

is room tester a real role???

[primal kestrel]

sudo openvpn ./yourvpnfile

[sharp citrus]

How to: Starting your first TryHackMe machine

Article Link

https://help.tryhackme.com/en/articles/7977454-how-to-starting-your-first-tryhackme-machine

Oct 18, 2024, 5:10 PM

[blissful snow]

https://tenor.com/view/dog-gif-9796017

[sick lance]

[blissful snow]

we got pro play in tryhackme before gta6

[rapid merlin]

How do I find the file location of the vpn

[blissful snow]

huh

[primal kestrel]

https://tryhackme.com/r/room/openvpn you should read this room

[rapid merlin]

I can’t find it

[primal kestrel]

read the room is a funny phrase to use there

[crude stump]

It should say your username and then .ovpn

[rapid merlin]

Ok

[blissful snow]

should be in ur downloads folder like any other file

or sometimes on the desktop

[rapid merlin]

Nothing in my downloads

[crude stump]

Oh well

[blissful snow]

check in ur browser the download directory or even better click open file location

[rapid merlin]

Okay

Still nothing

[blissful snow]

redownload it again i guess?

[mossy river]

Are you using the file explorer or terminal to check?

[rapid merlin]

Term

Cuz Nothign in file

[mossy river]

Are you specifying your home directory?

/home/username/Downloads

[rapid merlin]

Nah nothing there

[mossy river]

If you’re downloading it, on your browser press “show in files” on the downloads page

[rapid merlin]

I’ll try browser

Nothing

[primal kestrel]

does anyone have a fun room suggestions for me? 😺

[rapid merlin]

What is networking

Hardest course

What are the best rooms to learn Linux

[edgy thicket]

Guys I download the vpn for Linux but the file is 0 when I write in terminal sudo openvpn the file name can’t connect. I use parrotOS ?

[stoic quarry]

You'll probably get the same output if the file isn't working

Maybe ask in #site-support too 🤷

[rapid merlin]

^ easy to medium for me

[narrow bone]

Linux Fundamentals 1 + 2 + 3

[rapid merlin]

Thank you

[stoic quarry]

Yeah Linux fundamentals for sure

Also check out OverTheWire if you want just raw Linux ctfs

[rapid merlin]

Okay

[jolly echo]

bandit labs

[stoic quarry]

Lowkey the best way I learned any sort of Linux stuff was to just use Linux

[rapid merlin]

Ong

[stoic quarry]

I went all out and ripped out windows and jumped in without knowing what to do. It was the best way to learn imo

But if you don't want to do that just dual boot and try use it for normal web-surfing for a while

[rapid merlin]

How do you dual boot again

Don’t you need an extra hard drive (ssd) with Linux or anything on it then wanting to use Linux you go to your bios menu?

Or am I completely wrong

[stoic quarry]

I think you can do it on the same partition

Or no

A different partition, same hard drive

I've never dual booted lol

If you have the option, I'd also suggest WSL. Just the terminal (I think) but if you use it often you'll get used to it

Like with a lot of learning you just gotta dive in and get used to it to learn anything

At least that's how I see it

[rapid merlin]

Is there a way to stop the stupid spam,scam messages on LinkedIn

[narrow bone]

dont open the messages

[rapid merlin]

I can close them 👀

[narrow bone]

the inmail stuff from recruiters are always funny

[arctic cradle]

pull an uno reverse card and spam/scam them back

[rapid merlin]

They’re gonna turn me into a computer

[arctic cradle]

That Message Sounds Very Legit Especially Because Of Capitalized Characters!!!!

[rapid merlin]

I feel like this is when I hear new rumours about me and I’m like wow 🍿 tell me more

Sounds interesting

😂

[arctic cradle]

you're not gonna miss on the opportunity, right??

[rapid merlin]

🥳The emotes 🎉

[arctic cradle]

let us know how it goes being "FORMAL Task Manager Position"

[narrow bone]

send them a picture of a task manager

[arctic cradle]

that is the only best move

[rapid merlin]

Tell them I’ve already hired one for myself

There’s only space for one task manager around here

How come on the site it says I’m level 3 but

On here it says 0x1

[arctic cradle]

you can grab your discord token again and re-verify

[narrow bone]

verify again

[rapid merlin]

Ahhhh

Okay

[arctic cradle]

it will update asap or it will after 24 hours

[rapid merlin]

Okay

Thank yky

[arctic cradle]

no worries

[rapid merlin]

Yurrr

[stoic quarry]

I'm level 999999 but here it says something else wth

[rough gorge]

mmh did someone had to generate their vpn after the new dashboard release, or is that just coincidence?

somehow my all time working does not anymore 😦

[stoic quarry]

Maybe, someone was having issues here before

[rapid merlin]

Yurr

[stoic quarry]

It'd be weird if the frontend changes affected backend imo

[rough gorge]

ye :/

[stoic quarry]

Sick new color

[rapid merlin]

Yepper

[primal kestrel]

stranger things have happened!

[rapid merlin]

What does level 4 looks like

[stoic quarry]

True lol

[arctic cradle]

ayy, looking good, congrats 😄

[rapid merlin]

Yea

[arctic cradle]

grind up and find out

[stoic quarry]

I lowkey like the lower level colors

Gimme that deep purple

[arctic cradle]

I like the orange color

for deep purple you can always become a nitro booster

[stoic quarry]

I ain't paying for glorified IRC

[primal kestrel]

i am

[sick lance]

You're not going to remember everything.

Notes and a small chunk of muscle memory.

[umbral bay]

The standard one or for a network?

[rough gorge]

the standard one, vip, my beloved 10.8.211.1 😅

[stoic quarry]

Yeah just keep doing rooms, you'll learn the process

[heady nova]

upgraded @loud marlin

+rep @sand trench

[twin ridge]

Gave +1 Rep to @sand trench (current: #3 - 1926)

[teal wharf]

12 rooms a day ? i think u are speedrunning more than learning

[stoic quarry]

Oh yeah lol

If you're just copying answers you'll never learn

[rapid merlin]

My dad is vaping in the car and it’s making me feel sick 🤢

[teal wharf]

dad ? vaping ?

how old is he 30 ?

[sick lance]

@umbral bay does that count?

[rapid merlin]

Yeah he used to smoke a lot but he got copd and now he vapes

But it smells awful

[teal wharf]

even tho vaping is VERY unhealthy , recommond for him using mint/cherry vapes xd

[rapid merlin]

He’s using something that’s like gold blue tobacco flavour

It doesn’t smell like tobacco

[sick lance]

Vaping is the worst way to imitate a steam train, ever.

[rapid merlin]

I like the smoke tricks you can do with vapes

But I don’t vape

😂

[teal wharf]

i can smell it from here 😵‍💫

[sick lance]

You must be easily amused.

[umbral bay]

Likely the VPN server got updated which invalidated your ovpn file. Did you have to regenerate it, and does the new one work?

[rapid merlin]

You already said something similar to this before and I agree

[rough gorge]

new one does work, did not have to generate. Only missing my ip :p

[stoic quarry]

Me reading this convo while vaping

Yes very true

[rapid merlin]

I have to carry a mattress down a main road

[umbral bay]

It does not. 😄

[sick lance]

Pretty strange way to spend your Friday night, but you do you I guess.. 😄

[stoic quarry]

It's Saturday hahahah

Gottem

[sick lance]

This is awkward.

[stoic quarry]

What the hell

This can't be right

[sick lance]

Where do you live?

[teal wharf]

reveal urself chinese spy

[stoic quarry]

China, spyland

[wooden totem]

everyone missed friday 13th like a month ago or something

[stoic quarry]

I missed tattoo deals

Annoyed me a lot

[placid bridge]

Life is good 😏

[stoic quarry]

That's good!

[rapid merlin]

what happened to your face lel

[sand trench]

beep beep VROOOOOOOOOOOOOOOOOM

[placid bridge]

Wait wym 😂

[stoic quarry]

Cars b like

[wooden totem]

13k?

[rapid merlin]

https://tryhackme.com/r/room/defensivesecurityintro Whats the last answer of this room

[sand trench]

why are you asking??? just follow along with the view site button

[mossy river]

Tastes like chocolate coca cola

[wraith fjord]

Hello

[sick lance]

#room-help please.

[wraith fjord]

I mean, what do you expect to...

oh

[mossy river]

This is illegal and against our community rules

[stoic quarry]

Lmao

Oh he's a bad boy

[mossy river]

If I was going to remove you, you would be gone:) this is your chance to try and follow our community rules

[placid bridge]

Damn some tea

[stoic quarry]

Sipping that shit up

Why you attacking ppl in the server bro

Chill out

[wraith fjord]

the person had lot of free time in their hands

[stoic quarry]

Probs a kid

[wraith fjord]

@chrome vale ayy how was the ejpt ?

[chrome vale]

@wraith fjord I passed! 85% haha. No points for metasploit despite using it quite a bit. No idea how the grading works. Appreciate the ask!

[wraith fjord]

ayy congratulations !

[chrome vale]

Thanks 😊 !

[blazing granite]

office rules 😂😂😛

[stoic quarry]

Especially on Friday

[steady pewter]

Yep.

This is actually my workplace's evacuation plan as well.

[steady pewter]

Windows defender

[umbral bay]

They really missed an opportunity here with: 3. git out

[gritty ocean]

I'm back y'all

[sand trench]

well you gotta git push the door to git out

[gritty ocean]

I remember you omg you refer to yourself in 3rd person

[gritty ocean]

got into uni as a computer engineer and started doing research and project in robotics. Now that I work a lot with Ros I'm seeing a ton of vulns so I'm back to the fun

resetted progress on all of my rooms

[sand trench]

ello ello

[warm terrace]

damnnn, do u like it tho ?

[karmic geyser]

@placid bridge How many rooms?

[placid bridge]

on try hack me?

i think 39?

ion know

dont use the internet

[steady pewter]

Keep your computer offline forever

[karmic geyser]

do more.

[whole yew]

why would you have to?

[placid bridge]

inshallah later i just been doing oscp for now

had a challanging ctf machine they gave

[karmic geyser]

2nd time? 💀

[placid bridge]

im not done obviously, im doing the course work

ill be done in a monthish

[sand trench]

simple answer == you can't
more in depth answer ==
you close down as many of the low hanging fruit holes as you can
using strong passwords form a password manager
multi factor authentication on everything you can get multifactor on
keep your email secure
read up on how to detect common scams to avoid falling for them
make sure you have windows defender enabled as malware protection
let windows firewall be active and installed

[karmic geyser]

do the htb Pentester Path too man.

would also prep you better.

[placid bridge]

finished that

just never gave the cpts exam

right when i finished i just bought oscp

and started that

and yeah it prepared me better

[sand trench]

think @mossy river might be interested

[karmic geyser]

One Hammer ticket please.

[karmic geyser]

https://tenor.com/view/islam-astaghfirullah-haram-gif-22586634

Noice man

[sick lance]

No, private sale is not allowed in here

[sand trench]

YAY a scrubz

[placid bridge]

ye oscp has some labs that id rate hard or very hard machine

[karmic geyser]

I didn't get a plane ticket.

[karmic geyser]

LoL

cool

enjoy your course man

I don't plan to ever take OSCP

[placid bridge]

ye fam hope ur journey goes well

my plan is OSCP -> CPTS -> OSWP -> CWEE and so on

[karmic geyser]

hard part is taking notes.

SORRY

https://tenor.com/view/islam-astaghfirullah-haram-gif-22586634

[placid bridge]

IT IS MAN, having good notes is such a good skill

wallahi try bookstack

[karmic geyser]

I struggle with it every day.

[placid bridge]

amazing resource for note taking

[placid bridge]

u use obsidian right?

[karmic geyser]

Cool

[karmic geyser]

with newly released theme by golam71.

[placid bridge]

yeah id say obsidian is good but i realized long term it wont be helpful for me

so i moved to bookstack

just for long term oganization

basically a self hosted website

[cold sparrow]

Ive been learning for around to months and i havent taken any notes, yall are making me feel bad lol

[sand trench]

well an alternative to note taking is trying to teach others how to do what you are trying to learn

[placid bridge]

def take notes

long term helpful

memorizing is good too

so if u take notes repeat them by typing them

dont copy paste

[wraith fjord]

Did a whole ass room and its 2 am and i cannot write notes :/

I will do it tommrow ! 😦

*Did got root as well.

[cold sparrow]

right yeah i deff need to start and even though i havent i also havent talked to anyone about what ive learned etc i know thats bad and i need to start talking to people more on here aswell.

[placid bridge]

[cold sparrow]

ill check out bookstack

[gritty ocean]

Hell yeah what room?

[placid bridge]

i prefer u start with obsidian tbh

heres an idea

of my old web enumeration notes

[cold sparrow]

alr np wow yeah that looks way better on readability

[placid bridge]

ye ye

make notes

and then put them in a canvas

for readability

bookstack doesnt have much readability

just has a better way to organize massive content

[gritty ocean]

@placid bridge Sorry for interrupting do you speak Arabic?

[placid bridge]

la

thats all ik

lol

[gritty ocean]

Akh. Al-3afu

[cold sparrow]

im guessing it would be better for larger learning like going for a cert or something

bookstack^^^

[placid bridge]

i mean its good cause i had to combine notes of multiple cert to make one path

[gritty ocean]

Use Krita

[cold sparrow]

ah

[placid bridge]

ill actually show u rn how its like

honestly amazing

lemme start it up

[versed barn]

How far are you guys in cyber security? I just started my degree in computer science 😄

[karmic geyser]

what plugin you using for gprhs?

[karmic geyser]

Simon does both.

[karmic geyser]

takes extensive notes and teaches other from there

[karmic geyser]

What what you using fo rthat?

[placid bridge]

like this

[placid bridge]

bookstack brother

notes arnt complete tho

have to slowly move them here

[karmic geyser]

https://notes.benheater.com/ Ohhh

[karmic geyser]

Nice arts

[placid bridge]

yes it has markup compatibilty

so easy move

from obsidian

to bookstack

[cold sparrow]

im personally not that far im about 60% of the way through in complete beginner path, starting from pre Security, and trying to learn bug bounty stuff on the side

[placid bridge]

finished 🙂

[versed barn]

Nice! Congrats!

[placid bridge]

yess is that ur notes?

[versed barn]

Oh shoot, that’s neat! It’s a fun degree 😄😄

[karmic geyser]

You can never reach the top of or the bottom of the spectrum of cybesec.

[placid bridge]

def was

[karmic geyser]

0xBEN

[placid bridge]

no idea who that is but yeah

[dapper girder]

[karmic geyser]

Oah will try.

[cold sparrow]

ah ok still doesnt look bad but smaller tasks i can see how obsidian would be better

[karmic geyser]

chk htbcord. 😉

[versed barn]

Huh

[karmic geyser]

You meant the degree in cybersec?

my bad

[versed barn]

Yes haha I was so confused

[placid bridge]

https://tenor.com/view/sung-jin-woo-solo-leveling-arise-solo-leveling-arise-gif-312142547876113903

[karmic geyser]

My bad

[dapper girder]

rockyou is taking its sweet time with Basic Auth...

[placid bridge]

did the labs actually require u to brute force

[sand trench]

doubt it

[unreal solar]

OSIRIS room last step is killing me

[placid bridge]

watching bad boys rn

yall seen it?

[unreal solar]

maybe CQURE tools updated a lot since then

[shell nova]

at 50 requests per second you'll be a while

[wooden totem]

Oi uei! 'omelander done killed my wife and took me bloody son

[cold sparrow]

windows defender doesnt like obsidian lol

[gritty ocean]

Lmao😭

I cant wait to finish one of my courses the software I use requires me to disable memory integrity

[chilly veldt]

I hate js

why is node just REEEE

[molten sky]

x2

[torn trail]

soydevs

[chilly veldt]

I am trying to understand some code right now and it hurts my brain

[sick lance]

If it acts as malware...

[torn trail]

brainfuck will be even crazier

[sick lance]

...it will be treated a such.

[torn trail]

pyinstaller also is seen as malware

[molten sky]

pyinstaller pes are unsigned

[torn trail]

ik

[molten sky]

why smartscreen is alerting to a seemingly signed app here, i'm at a loss

[torn trail]

but even when I just compile

a legit program no malware in it

it just says malware found

[molten sky]

yeah because unsigned (most likely why)

[torn trail]

when I was on windows lol

windows be hindering your workflow like crazy

glad I switched

[cold sparrow]

yeah idk it was just the installer not that actual app

[molten sky]

i mean yeah windows does that quite a bit but requiring signatures is actually reasonable security wise

[torn trail]

yeah well I dont need that spyware av anymore lol

all the telemetry it is packing too

[molten sky]

as much as i dislike microsoft, not sure if i'd go that far in regards to defender anymore

[torn trail]

it is well known that defender also spies even when it blocks malware

[molten sky]

it's become quite solid over the years and it's not as ridden as people expect from M$

wat m8

[sick lance]

...define spy?

[torn trail]

telemetry is spyware to me

[molten sky]

i mean yeah but what

[sand trench]

meep moop time for sleep sloop

[torn trail]

just open wireshark and you will see for your self

[molten sky]

windows is a telemetry shitshow but defender isn't the telemetry behemoth here

[rapid merlin]

is there a way to switch my thm account to a different discord account

[sick lance]

Sort of phone do you have? 🤔

[torn trail]

lineageos with no google apps

[sick lance]

Yes, you ask a mod nicely.

[molten sky]

it does send data for operational needs but so does every other modern AV

[sick lance]

Makes sense now.

[rapid merlin]

alright thank you

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2881)

[molten sky]

clamav is probably the only modern av that comes to mind that doesn't send real-time data and that's a very different type of AV, one that doesn't spot the same issues

[torn trail]

I mean google play services USES FRICKING 400MB in the background dude

[molten sky]

google play =/= defender

[torn trail]

never said that

[molten sky]

not sure what the point was in that case

am at a loss here

[torn trail]

I am just talking about all the spy products out there

people commonly use

[molten sky]

oh yeah -- defender just isn't the enemy in this case

and I hate everything coming from MS

[torn trail]

I liked windows defender threat intelligence dashboard for enumerating subdomains from websites with 1 click to a csv

it could give me 5k subdomains in 1 second

[sick lance]

#site-support

[molten sky]

https://tenor.com/view/scrubbing-bubbles-cleaner-bathroom-cleaning-clean-gif-2033290382210386314

[molten sky]

it's time @sick lance

[torn trail]

it is paid now btw

[sick lance]

Hoping it's isolated.

[chilly veldt]

TIRED

sorry caps

[clear jackal]

What were you doing that was hindered?

[torn trail]

it is slow buggy and insecure

• it has that av that bugs my mind

[clear jackal]

So you can't point to anything more specific is what you're saying. It's fine to not like a product/company, but brushing things in broad strokes is meh

[torn trail]

I dont need windows to eat so much ram I rather give it to a vm on linux that I want to run smoothly

[sick lance]

Windows never gave me issues

[torn trail]

good luck with the new recall feature btw in 24h2 lol

it will come to be cross platform

windows 10 will see its end soon

[sick lance]

Recall will be stored locally.

And there isn't anything you can't disable via Powershell.

[torn trail]

most people wont do that

and you know that

[sick lance]

Good.

[torn trail]

only the hackers or people with normal sense will

[clear jackal]

All I'm getting out of this conversation is overly broad statements and unsubstantiated claims. I love the internet

[torn trail]

if you say so

[sick lance]

I mean, I speak to people who claim Windows and their phone are spying on them, yet use Alexa.

[torn trail]

that is ridiculous

oh man there was this vuln in those google home devices where you could deauth the wifi and the home would disconnect

which in return resetted itself

[molten sky]

well, the windows part is true lol

[torn trail]

then you can register it and spy on people

[sick lance]

Did you see they lost a month's worth of logs?

[torn trail]

but it should probably be patched by now

[sick lance]

https://www.bleepingcomputer.com/news/security/microsoft-warns-it-lost-some-customers-security-logs-for-a-month/

[molten sky]

i'm all for hating windows but it seems he's just doing it to do it 🤷‍♂️

[clear jackal]

Yeah, that's why I jumped in. I'm all for not liking things, but hating just to hate doesn't help anyone is a common symptom of being terminally online

[molten sky]

what in the hell lmao
it doesn't even seem like they lost data, it just never got added in the first place? that means it won't even be in companies' (non-Sentinel) SIMs or logs or anything

i wonder what the estimated % of lost records is

[molten sky]

defender used to be pretty shit but it's honestly pretty good nowadays -- for all microsoft's faults, it's actually a viable AV and even a somewhat viable EDR

may deploy a managed edr overtop of literally just free-tier defender to a good 1300-1400 eps soon, to replace crowdstrike

[clear jackal]

Yeah, it will be interesting as that data is used to establish standard vs anomalous activity

[deft marten]

Hi everyone im new in cybersecurity and tryhackme

Before Yesterday i took a lab class and we used the L2 MAC Flooding &ARP Spoofing
My instructor has asked me a question in the lab class the question is "why is the data here is 666 bytes"
In step 4
Could someone explain to me please

https://tryhackme.com/r/room/layer2

[sick lance]

Page doesn't exist, I'm going to assume it's a private room.

[deft marten]

Wait leme see i guess im sharing something wrong

No its good https://tryhackme.com/r/room/layer2

If the page doesn't exist to you search for the tool "L2 MAC flooding & ARP spoofing"

[crude stump]

Real or AI?

Guess

[jagged otter]

What do you mean by real?

[crude stump]

It’s a real super cat

[jagged otter]

Oh, I thought you might've meant, real photo that you made.

[crude stump]

Oh no

I’m not that talented in arts

[jagged otter]

make his nemesis a racoon

[crude stump]

Alright

[chilly veldt]

[sinful moon]

chat’s cooked

What are you all up to?

[chilly veldt]

writing game cheats

[sinful moon]

I did like a 1h30min cyber security meeting today with a client and there’s only so much I can talk in one sitting lol

[jagged otter]

That is cool

[crude stump]

At that point you start spewing random protocols

[sinful moon]

lol and this point you start burning up the earth generating AI with wasted GPU cycles

But nah yeah it was hard to keep going after that long presenting

[shut hawk]

skril issue

[sinful moon]

lol

prostrats

[chilly veldt]

well not when the whole challenge is to make those cheats

haven't you heard of hackceler8?

[slender scaffold]

o_o

[sinful moon]

that is an interesting dichotomy however, game reversers are often extremely darn experienced and I always love to see it

[crude stump]

Aye art ai is fine

[sinful moon]

Just not yours thus far

[chilly veldt]

hackceler8 is a ctf that works around a game that the internal devs at google has made, our goal is to make cheats for this game to win it as fast as possible

[crude stump]

Wow

[slender scaffold]

mmmm celery

[shut hawk]

heh I only kid :P

[chilly veldt]

every round we are playing something changes in the game, making a certain cheat not work for example, or you'll have to rewrite something or build something new

these rounds have 3+ different challenges you then have to solve using these cheats and knowledge of the game

every round is 1h 30min, where 45 minutes of them is preparing for the round

[crude stump]

YEES

More ai

[sinful moon]

lol I got into malware reversing courses and etc with the eventual goal of “maybe I could reverse some retro x86 games to help restore them”

[crude stump]

What course

[sinful moon]

God that’s even worse

[shut hawk]

What year are you doing? @chilly veldt

[jagged otter]

the nemesis

lol

[chilly veldt]

year?

2024

it's on right now

this weekend

[shut hawk]

Well its in June, no?

Ah ok

[chilly veldt]

we played the prelim rounds today

[shut hawk]

Ahh, the other Google CTF was in June

[chilly veldt]

ye

[shut hawk]

You got your whole team on it?

[chilly veldt]

approx 20 players

[shut hawk]

Wowsers

[chilly veldt]

18 players sitting in malaga in a villa playing together

[shut hawk]

Awesome!! Glhf

[chilly veldt]

(actually 14, with 4 players being onsite the google finals)

[shut hawk]

might have a watch

[chilly veldt]

Some pics I've taken from the villa

[chilly veldt]

it'll be streamed on sunday

[slender scaffold]

Win ❤️

[chilly veldt]

will try

we came 4th today

[sinful moon]

nice!

purdy but I love that interior of the geodesic dome

[shut hawk]

Beautiful scenery+pool+CTF?! Absolute heaven

[chilly veldt]

yuuuuuup

and personal chef

[shut hawk]

very lucky!

[chilly veldt]

big time

[shut hawk]

make the most of it 😆

[chilly veldt]

we have

[rapid merlin]

Why did tryhackme remove the total hours of study/week that would appear on the top right

[stoic quarry]

Oh did they

Bit annoying

[slender scaffold]

Persona chef wtf ❤️

The dashboard looks really diff

[molten sky]

@chilly veldt split the winnings?

i'll split mine if i win

[slender scaffold]

Are you both there

[molten sky]

i mean i'm not but i'll split it if i still win somehow

[slender scaffold]

Hrrrmm

[boreal scarab]

@slender scaffold

https://tenor.com/view/boop-deadpool-negasonic-teenage-warhead-brianna-hildebrand-gif-14216702

[slender scaffold]

o_o

AAAAHHHHHH

[boreal scarab]

You have been booped!

[slender scaffold]

you’re a boooop

[pine stratus]

guys i have a question ; is the sound of discord"s messages notification changed ?

[cold sparrow]

what community plugins would you recommend/settings also is that graph view or how did you get it like that its sick

[placid bridge]

It's a canvas, I use the GitHub plugin on dark mode. It's personal preference

Have fun with it

But don't waste too much time on it

Readability and ur personal likeness matters

[boreal scarab]

No, you're a boop!

[chilly veldt]

sure, splitting 0 still gets 0

there is no winnings

[gleaming notch]

hi

[steady pewter]

Ah, there is no place like 127.0.0.1.

[molten sky]

There is no place like localhost?

s/127.0.0.1/~/

[gritty ocean]

hey y'all, I scraped a Raspberry 3 from an old project, looking to use it as a homelab to practice networking attacks
Anyone done it before?
What’s the move? Docker?

[south remnant]

!verify

[crude stump]

https://blog.talosintelligence.com/uat-5647-romcom/

Absolutely wild the amount of time and complexity a nation state backed groups malware is

[neon merlin]

So what's the deal with Microsoft recall? Are windows users going to be forced to install an update with it?

[blazing granite]

I prefer ::1 🙂

[simple valve]

There are projects on Google and Github that utilize Raspberry 3

IMO, the sky’s the limit

[gleaming notch]

Hi

Anyone here have a bonnet?

Botnet

Sry

[gritty ocean]

yes you have Shadow a

a

cat pic

[gleaming notch]

Botnet

[gritty ocean]

yes a Botnet

send Shadow a cat pic

[gleaming notch]

Who?

Who is shadow?

[gritty ocean]

you're right. Decided on using Alpine as a base and docker on top

[near hawk]

Why you asking if anyone has a botnet? 👀

[gleaming notch]

Just they seem cool

And I want to make my own

[still hare]

Seems like he has some very legitimate business

[gleaming notch]

Shhhhhhh

[near hawk]

This is not the server for that and that's illegal

[gleaming notch]

Bro

Having a botnet is not illegal

Just using it for illegal purposes is

And I would never do that...

[gritty ocean]

fed?

[near hawk]

This isn't the server to be asking about botnets

[gleaming notch]

Why not

[still hare]

The illegal part is when it’s non concessional botnets which is 99% of them not much different from malware chains really

[gleaming notch]

I was wondering if anyone had one

[gritty ocean]

please stop. This is not the place for it

[gleaming notch]

Ok

Sorry

But there is nothing illegal about a botnet

[near hawk]

We're an ethical hacking and you have just joined out of nowhere asking if anyone has a botnet with no context lmao

[still hare]

And ethical and learning is focus in these servers no one’s gonna help with anything potentially unethical regardless of what your intentions are

[gritty ocean]

Mods, expose him to Lovecraftian horrors beyond Human comprehension

[gleaming notch]

Botnet is Not illegal

[molten sky]

wat m8

[gleaming notch]

I'm curious

[gritty ocean]

you're not helping your case

[gleaming notch]

Bruh

Ok

[near hawk]

Lets stop this convo and not continue to ask about botnets 🙂

[still hare]

Doesn’t change the fact no one knows your intentions

[gritty ocean]

^

[crude stump]

Let’s listen to blackout

[molten sky]

@sick lance runs a few tho and can probably give some tips

https://tenor.com/view/scrubbing-bubbles-cleaner-bathroom-cleaning-clean-gif-2033290382210386314

[still hare]

I would spam him till he answers, be stupid not to really

[molten sky]

yeah pretty helpful, just hard to get ahold of sometimes

[sudden pond]

what is on oct 21

[neon merlin]

How can you get a legal botnet? Isn't a botnet having thousands of compromised machines all over the world doing your bidding?

How would you get thousands of machines legally?

Unless you are a massive company

[steady pewter]

that's french for 127.0.0.1

[clear jackal]

Let's not, he's in a European timezone

I notified the moderation team in the appropriate channel, just ignore the person asking about the botnets

[still hare]

It’s sarcasm but then again people are asking about botnets In here

[steady pewter]

I don't know, it's kind of hard to tell sarcasm in text..

[neon river]

yo

[clear jackal]

You did not /s

[still hare]

Yes let’s all ping a mod and break several other rules 🤦‍♂️

[still hare]

You do have me here 😂

Anyway how is everyone

[steady pewter]

I'm doing good.

Just about to do a KOTH game.

[still hare]

Very nice I’m stuck in procrastinating if I go straight for cissp or not

[umbral bay]

👋

[still hare]

👋

[neon merlin]

How likely is someone going to have vim as able to be run as root with no password? This is in the "common Linux privesc" room

Why would someone set this up?

[sudden pond]

OCT 21??

[steady pewter]

I honestly don't know, but considering some people's laziness, it could happen.

[simple valve]

The point there is how you can abuse certain binaries for privilege escalation, not because of vim.

You can replace vim with any other binary.

[steady pewter]

eh, it's more of like a SUID file risk, like reading /etc/shadow than anything else, too.

[simple valve]

SUID is different from sudo

[steady pewter]

oh, sudo, I thought you guys were talking about SUID.

[vestal phoenix]

FYI: this years defcon's conference is uploaded to youtube

[steady pewter]

cool

[still hare]

Shame that it only gets run in America tho

[snow depot]

Hey guys I need some ideas for a machine i am making for a class i am teaching. It is being hosted on tryhackme so other people can access it to and work on it. My class is full of very beginner people so i dont want anything that is super hard. I already configuired ssh to be vulnerable but want some ideas that arent to hard to impliment for it and would be fun to learn

[sudden pond]

Linux or Windows

[snow depot]

linux

[neon merlin]

The vim memes are true, how to l do I permanently exit?

[molten sky]

turn it off and back on again

[snow depot]

:q!

[neon merlin]

Right now I'm typing :!p and it's going back to terminal but then when I type anything it opens vim again

[sudden pond]

:wq

[neon merlin]

It goes back to terminal and says shell returned 127 press enter it type command to continue. Any input just opens vim again

[sudden pond]

even with :wq ?

[neon merlin]

That says e32: no file name and doesn't exit

[snow depot]

press esc a few times to ensure you are in normal mode and then try :wq

and if that doesnt work try :qa!

[neon merlin]

[No write since last change]
/bin/bash: p: command not found

shell returned 127

Press ENTER or type command to continue
[No write since last change]
/bin/bash: p: command not found

shell returned 127

Press ENTER or type command to continue
[No write since last change]
/bin/bash: q: command not found

shell returned 127

Press ENTER or type command to continue
[No write since last change]
/bin/bash: q: command not found

shell returned 127

Press ENTER or type command to continue
[No write since last change]
/bin/bash: q: command not found

shell returned 127

Press ENTER or type command to continue

[snow depot]

that will force quit all vim sessions

[neon merlin]

Every one of these is an attempt lmao

[sudden pond]

:w filename

is it bcz of shell commands ?

[neon merlin]

:qa! did it

What an annoying piece of software

[snow depot]

ayyyyyy still know a bit of vim XD

[sudden pond]

what about hash cracking or something like this (i am also a beginner so dont laugh at me)

[snow depot]

youre all good lol. I actually like that because you have good views on stuff you want to learn

[neon merlin]

I'm not sure why the normal quit commands didn't work. Maybe because I had just used vim to spawn a root shell

[snow depot]

That is a good idea because I am preparing them for the Lockheed Martin hacking competition and they have some of that stuff

[sudden pond]

In a room i had to get the key using vigenere cypher and still my head went spinning

[snow depot]

Vim is crazy lol

[snow depot]

lol XD

yeah cyphers are fun but a bit confusing to get used to

[sudden pond]

but the problem is that i already knew about vigenere bcz of 9th grade

[snow depot]

yeah lol

[sudden pond]

DxRK what about cloning a room you like?

[steady pewter]

want to hear how a single letter typo costed my win in KOTH?

[sudden pond]

happened with me

[steady pewter]

I think koth can be improved by allowing for:
uppercase and lower case letters in a username

but wouldn't that make matching usernames conflict?

[sudden pond]

yes this is frustrating

write your name in lowercase and then get Fu**ed

bcz mine is Sm1l3

[snow depot]

Dont really want to clone

[steady pewter]

I think it would be good to have some kind of averaging system that finds the most similar username in the round, so that it will pick a username like:
GuineaPigLord
instead of:
GuineaPigLOrd

[sudden pond]

no i am talking about a feature or like getting an idea to create a similar vuln

[snow depot]

ahhhh

yeah true

[steady pewter]

why not? Is it against the rules?

just wondering

[snow depot]

theres a setting on some of them where they dont want you to clone anything from the room

so i just dont really want to risk it yk lol

[sudden pond]

DxRK can you share the room with me when it is complete

[snow depot]

yeah

its super easy lol

[steady pewter]

I mean theoretically, if you were able to somehow compile it into a .img file, and upload it back to your computer, run it on virtualbox; would that be against the rules?

[snow depot]

Dont know and dont really want to find out XD

[steady pewter]

true.

[snow depot]

I already lost my main thm account and dont want to loose this one

[sudden pond]

HOW?

[steady pewter]

I was about to ask the same thing

[snow depot]

I seriously dont know. I log in with my email and it just says there is no account on this email or somthing like that

it was just gone

[sudden pond]

strange

[steady pewter]

interesting..

[sudden pond]

you can contact THM

[snow depot]

I did

[steady pewter]

so they don't know what happened either?

[snow depot]

they just said that there is no account under that email address

so i just made the one i am currently on like a year ago and am trying to get it back to the rank i was

[steady pewter]

That's sad.

[sudden pond]

was gonna say the same

[snow depot]

I dont really care to much because i just use it as a teaching tool or to learn something new but i was sad lol

[sudden pond]

losing all your progress is really sad

[steady pewter]

yeah, same, at most I can only keep a month streak lol.

then you have to probably redo all the rooms you did..that would suck.

[snow depot]

yeah lol so im just working on getting back my 0xC rank back

[sudden pond]

i got an idea.

[steady pewter]

I used to be wizard, why was I moved back a rank?

[sudden pond]

what about creating a different acc for room development

so this way you will not lose your main acc

[snow depot]

the only one I really hated redoing was the Eternal blue room lol

For copying rooms?

[steady pewter]

yeah...

I don't like any of the metasploit stuff, I mean using it is a breeze when you're not being quized on LITERALLY everything, but it's good to know.

[sudden pond]

for any reason bcz u r afraid of losing your acc

[steady pewter]

yeah

I mean if you had any.

[snow depot]

I also dont want to copy rooms because I like seeing what I can come up with. I also like adding stuff I have seen irl on pentests and stuff like that so I have stuff I can add I just dont really have anything super beginner I see alot lol

really only like basic printer exploits but I dont want to have to clone drivers and setup a virtual printer XD

[steady pewter]

I am working on my own rooms, but they are just so hard that I don't think it would be..beneficial to have these rooms on there. It's like the kaizos of tryhackme.

[snow depot]

XD

I would have a crack at it lol

[steady pewter]

I just continually work on them until it becomes unsolvable.

[snow depot]

ive been messing around with some AI ive been working on trying to see if I can impliment it into a thm room. I have a few different ones but the one i really want to add simulates social engineering and want to try and setup a room with that where you have to interact with the AI over chat or somthing to try and get creds or somthing

[steady pewter]

I actually DID that!