general

[blissful badge]

Silly 😛

Im in the unknown apparently

[dapper girder]

Yes

[ruby sand]

ah, but you're in the known unknown.... careful not to venture into the unknown unknown. that place is scary!

[dapper girder]

What in the gpt responses

[blissful badge]

How deep goes the unknown unknown

Endless

[ruby sand]

the known unknown means you know you don't know a thing... the unknown unknown means you don't know you don't know it yet. how deep does it go? how long is a piece of string??

[blissful badge]

hey! I do know things

🥲

[ruby sand]

lol, the more you know! 😛

[blissful badge]

2,147,483,647 in Java

Lol

[ruby sand]

perfect example of an unknown unknown for me, let me look that up 😛

ah max value, indeed.

[blissful badge]

Of string

😂

[ruby sand]

derp... i really tied myself up in that piece of string.

[blissful badge]

Don’t do it!

[blissful badge]

This actually makes sense

[ruby sand]

aw tanks! Half the battle is turning unknown unknowns into known unknowns. I spend half my life learning what i need to learn, and how to learn it effectively.

[blissful badge]

I spent half my life playing outside

[ruby sand]

showoff.

[blissful badge]

The other half I began learning and now I started my journey into the unknown unknown

[warm grotto]

[sonic totem]

greetings

[ruby sand]

merriest of mornings!! how's all, the like, such, whatnot, and etc.???

[arctic cradle]

https://tenor.com/view/hosico-cat-cat-camera-cute-gif-17129489

[rapid merlin]

Cute cat

[arctic cradle]

[rapid merlin]

I read that as now, spent a solid five minutes confused. Where’s my glasses

[arctic cradle]

you have no idea how much I appreciate glasses for PC

I don't have vision issues (maybe slight one) but coding a year ago, the letters would be slightly blurred

after getting proper glasses (+0.5), I felt like I was reborn

[gray sonnet]

now that's what I call a chonky one

[rapid merlin]

Yeah at first I needed glasses because my pupils would spend days open, they had given up on me but then I got glasses because I can’t see well far away

[split compass]

Fun, I saw on John Hammond the other day an attack vector of tricking people to WinKey+R, Ctrl+V, Enter to run some dropper code that is saved to clipboard by the "prove you're human" prompt on a page.

And tonight, I see someone in Reddit who was hit with this attack vector.

[stoic quarry]

Yeah it's been around for a while now, right clicking also works so they could obfuscate it a bit better

Ultimately it's just getting someone to open a shell or whaever from their side

(LIkely just install redline or something less exciting)

[split compass]

Yeah, I'm just surprised to see someone hit with it. I feel like copy and pasting random things from the Internet is one of the first things I learned to not do 30 years ago ^^;

[stoic quarry]

Grandma going to wordleanswers.co.uk and misspelling it would probably make her follow instructions

[naive violet]

But they don't know about Win+R being "run a process", they just want to access the site

Same reason everyone accepts cookies

[split compass]

I get why it works, just the lack of computer literacy makes me sad.

Some vectors just seem too easy 😄

[hushed knoll]

I remember when I copied linpeas from a website cuz I was a noob and couldn't deliver it to the machine. When I ran it it was like "bro did you just copy linpeas from a random source and run it without checking the source code?"

[stoic quarry]

Eh, don't get too upset

Lawyers do more complicated work than I'd ever bother to learn about, if they need my help printing to the right computer then I'll gladly help

[hushed knoll]

Never been ashamed like that

[naive violet]

Agreed - to a decent extent, not everyone needs to know depth about everything
It's the whole reason we specialise

[stoic quarry]

I think computer literacy should be increased overall, but that's from a tech guy perspective

I'm sure doctors think first aid should be increased overall too

[rapid merlin]

One message removed from a suspended account.

[rapid merlin]

Everything should be increased. Wait I think there’s a name for that… SCHOOL. Except schools somehow managed to waste 13 years of your life and don’t even teach you valuable things for life as an adult

[azure oasis]

thank you

[twin ridge]

Gave +1 Rep to @midnight sentinel (current: #2280 - 1)

[pliant cairn]

atleast you learnt (-b +/- sqrt(b2-4ac))/2a

will give you roots

[split compass]

They wouldn't be wrong. I've seen some really foolish first-aid choices in the field XD

Used to support ~100 lawfirms.
Two of them had wire transfer scams occur at one point 😦
A third one had an end user almost get hit with an Apple gift card scam, but the office admin caught wind, after purchase, but before transfer of the codes.
So they became Christmas party raffle items.

[stoic quarry]

That's a baller move

[split compass]

So did you learn this to the tune of Pop goes the weasel? Or row row row your boat?

[stoic quarry]

Roll with the punches type deal

[split compass]

Yeah, she was a crusty sort, but easy to get along with if you understood her.

I can appreciate someone who's been in it long enough that the weight of the years shows in how little patience they have for puffery 😄

[stoic quarry]

Yeah 100%

As long as they're not stubborn about change

[split compass]

Fortunately she wasn't.
She just knew that technology had sped past her at some point, so she knew enough to know what sounded right, but not to keep up with the current tools and tradecraft. So she was a good office liaison for us at the MSP side.

[stoic quarry]

Love the MSP life

The helpdesk > security path is real

[naive violet]

From my (limited) experience with the law profession, they seem to be absolute experts at writing legit emails that look like phishes

[stoic quarry]

Yes

Yes they do

The recent "I'm in a meeting please message me on WhatsApp, I have an important job for you" (gift cards) emails look too similar to legit emails I've seen

[rapid merlin]

How is everyone today

[rapid merlin]

One message removed from a suspended account.

[twin ridge]

Gave +1 Rep to @brazen vigil (current: #2280 - 1)

[rapid merlin]

Made some chicken soup for my flu thing

[stoic quarry]

Doing well

[rapid merlin]

Took ages to cut everything up but it’s worth it

[stoic quarry]

Fingers crossed it clears up soon!

[chilly veldt]

I just woke up to 38C 😭

[stoic quarry]

To what now

[arctic pebble]

It’s about 14c here

[stoic quarry]

Oh temperature

Lol

38 is crazy

[arctic cradle]

you're all wonderful, enjoy your weekend

[rapid merlin]

Thank you

[rapid merlin]

Toasty

[arctic cradle]

it was 3 degrees Celsius here at 7 AM

[chilly veldt]

it was inside a plastic dome

[rapid merlin]

Too warm for me

[unique vale]

helllo, does anyone can help me with python shell please.
im trying to reconnect to the shell but i cant enter export term=xterm 😭

[rapid merlin]

I hope you feel better

[rapid merlin]

Good to hear

[naive violet]

the stty and the fg need to be one command separated with a ; when you're using zsh

[arctic cradle]

best to ask in #room-help

[unique vale]

Thank you 😎

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2207)

[rapid merlin]

Thank you

[twin ridge]

Gave +1 Rep to @brazen vigil (current: #1506 - 2)

[unique vale]

👍 noted thanks

[rapid merlin]

Your welcome

One message removed from a suspended account.

[rapid merlin]

One message removed from a suspended account.

[twin ridge]

Gave +1 Rep to @brazen vigil (current: #1134 - 3)

[rapid merlin]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[naive violet]

There's a timer on it yeah

[rapid merlin]

One message removed from a suspended account.

[naive violet]

And if you abuse it we'll be disappointed with you

[queen flare]

is the top x% ranking system gone?

[rapid merlin]

One message removed from a suspended account.

[feral dawn]

where can i go to ask for help about a room

i dont understand what im doing wrong

[naive violet]

Nope

[queen flare]

i can no longer see it

[naive violet]

Where are you looking? It's on your profile

[rapid merlin]

You’re welcome

[naive violet]

You need to complete more rooms in order to get ranked

[queen flare]

it used to show the rank like two days ago though

[naive violet]

Ok, but

Things change.

[queen flare]

[feral dawn]

thanks, just dropped the question in there if anyone can help

[twin ridge]

Gave +1 Rep to @plain grotto (current: #626 - 7)

[queen flare]

thanks but any idea how many rooms i need to complete or something like that?

[twin ridge]

Gave +1 Rep to @naive violet (current: #2 - 2208)

[naive violet]

I think you need to get into the top x percent in order to recieve a rank. Maybe 10%? Not sure

I'm not staff

[queen flare]

what's CONTRIBUTOR?

[naive violet]

¯_(ツ)_/¯

[naive violet]

I made a bunch of rooms and stuff

Nope.

#feedback-and-ideas

[queen flare]

ah

can we do that too?

or is it something exclusive

[naive violet]

Not site staff, I don't work for THM, I have no sway.

[naive violet]

You can do it, but only challenge rooms

[queen flare]

ah

[naive violet]

I had a CVE allocated but they haven't published it

[queen flare]

@rapid merlin when did you last complete a room?

[naive violet]

It's fixed and then the product went EoL so ehhhh

[queen flare]

maybe completing one now will get your rank back

i will make my own vulnerable product

then publish a cve on it

[naive violet]

Responsible disclosure wise, I don't think I should publish it
It was a local privesc via an application on Windows, let you pop system from a standard user. Was nice.

Not a clue, if ever

Hence "forever pending"

I find cooler day to day, I just can't publish it because it's all NDA

Yeah I'm a senior pentester, I hack stuff all day almost eevry day

With permission, and I get paid for it.

I work for a company
Freelance pentesting isn't a thing. The huge amounts of legal liability, contracts, and insurance you need mean you absolutely shouldn't freelance

Have a look at job postings in your area

You can't speak globally for something like salary

[sage thicket]

Hi i need help finding a room. It is about the "find" command in linux terminal. I have looked but not able to see it.

[shut hawk]

It's retired, you can't access it anymore sadly

[sage thicket]

😭

all good

thx levi

[naive violet]

@gusty thicket Please don't send unsolicited friend requests or direct messages. It's against the tryhackme discord rules.

[arctic cradle]

James, can I be your.. friend..?

[dusty ice]

hi

What is the best tool currently available for hacking a phone?

[arctic cradle]

[torpid furnace]

https://tenor.com/view/laughing-cat-catlaughing-laughingcat-point-gif-7577620470218150413

[dusty ice]

I won't harm anyone😂

[arctic cradle]

[naive violet]

What are you trying to do?

[arctic cradle]

hack a phone

[feral dawn]

theres literally just not anything inside of this folder and its saying to look in the folder

[arctic cradle]

[feral dawn]

lolllll

[naive violet]

They can speak for themself

[dusty ice]

Penetration test on my phone

[naive violet]

Just look at the known CVEs for the phone. They get patched.
Unless you're a government, "hacking a phone" isn't really a thing.

[cold sparrow]

Trying to get "go" to work is killing me

[dusty ice]

“Phone hacking” is not a real thing. What

[naive violet]

Like people don't hack phones over the network like they do computers.

Short of literally government agencies

You'll discover your phone has no services listening

They're aggressively sandboxed too

[naive violet]

That's a blatant misquote anyway, pay attention to the caveats and full context.

[dusty ice]

ok pro

[naive violet]

wat

[dusty ice]

what

[arctic cradle]

the question is why you would want to pentest your phone @dusty ice

[sick lance]

Pentesting a phone is different from hacking a phone.

[naive violet]

If you're going to do a pentest against it as well, you should do some basic threat modelling first. What attacks are likely? What attacks will succeed?

[dusty ice]

I'll try it out normally, test my abilities, and just be good at testing phones

[sick lance]

But James is right, phones are not like computers, you can't just hack it easily, anything that can be exploited will get patched almost immediately.

Classic example is Pegasus, that relied on 0-day exploits with zero clicks to hack phones.

[naive violet]

"Testing phones" - again largely this is incredibly high grade nation state stuff.
If you're asking for what tools are used to hack phones, you won't like the answer.
There aren't tools. You have to build the tools. All the vulns and phones will be so different.

[dusty ice]

This may still be available if the user clicks on the amalgam link

[arctic cradle]

if I were you and had experience with penetration testing, I wouldn't be asking for a tool to "hack a phone", see where I'm coming from

[dusty ice]

Okay, I will try to look for loopholes

[naive violet]

What do you mean?

[arctic cradle]

something tells me that you want an automation tool to help you do all of the job and realistically if you want to do phone hacking, in my honest opinion you would need hardware to play around on a hardware level or even further kernel exploitation

[feral dawn]

What section of cyber makes the most money? I love the field but want to focus on what i can make good money in lol

[naive violet]

CISO

[dusty ice]

I mean, I will look for any loopholes through which I can hack any phone or build tools myself

[naive violet]

How's your binary exploitation?

[sick lance]

Unless you want to spy on people, there is no real advantage to hacking a phone,.unless you plan to bug bounty it

[dusty ice]

By appearing, you are about to perform it and you will be ready for the password

[dusty ice]

What do you mean?

[naive violet]

How are your skills in the cyber security sub field of binary exploitation?

[dusty ice]

Just for fun😂😂😂

[arctic cradle]

[dusty ice]

I actively use Nmap and Metasploit for penetration testing and vulnerability assessment. Nmap helps me in network mapping and discovering hosts and services on a network, while Metasploit provides powerful tools for exploiting vulnerabilities and conducting security assessments. Additionally, I am involved in code development to create custom scripts and tools that enhance my penetration testing capabilities. This combination of tools and coding skills enables me to perform thorough and effective security analyses.

[sick lance]

One way to let to jail.

Wow, ChatGPT much?

[naive violet]

Why did you ask chatgpt?

The answer is also irrelevant

[dusty ice]

Let's go

[naive violet]

Scrubs, I'm writing a con talk

[sick lance]

Oh, oh oh.

Where for!?

[dusty ice]

I asked chatgpt and all the tools are old and their vulnerabilities have been closed

[jaunty agate]

Please help me with the issue , I am not able to connect Bluetooth in my Garuda linux,it is even not listing devices ...

Please help I am stucked here from last night ,🥺

[tepid furnace]

uh

[naive violet]

That's... not what I'm talking about

[dusty ice]

What do you mean

[tepid furnace]

also you should study old vulns to learn how they worked and then you might have an idea about making your own :)

[sick lance]

And on what?

[naive violet]

If you want to find phone vulnerabilities, typically these involve the field of "binary exploitation".
This includes buffer overflows, heap flaws, use after free, and similar.
If you want to "hack a phone", you will need to discover the vulnerabilities. You will need to learn a significant amount of skills.

[dusty ice]

okay

[arctic cradle]

it was pretty obvious from the start that you had no experience in the field at all which is what I told you

[crude stump]

On what

[naive violet]

👀

[dusty ice]

Okay, I will try to delve deeper into learning and discover and understand old loopholes

[shut hawk]

Or you could start on TryHackMe

[dusty ice]

I'm already continuing with try hack me

[kind narwhal]

@sick lance

[sick lance]

My malware class was actually on phone malware last Friday, actually...

[kind narwhal]

There is a problem with this willow ctf

[sick lance]

#room-help if it's THM

[kind narwhal]

I log in with ssh key and enter the password sign_and_send_pubkey: no mutual signature supported
says

[naive violet]

Google the error and you will find a fix. This isn't a problem with the room. This is a problem with your tooling.

[kind narwhal]

I followed all the steps but I couldn't fix it

[naive violet]

Please share the details of your issue in #room-help then

[rapid merlin]

Hope everyone is having a good productive day. Stay hydrated!

[boreal scarab]

Morning!

[crude stump]

it makes me laugh how when you try to download google chrome edge is lie determine to change your mind

[tired bear]

🙂

[boreal scarab]

@naive violet

[naive violet]

@tired bear Absolutely not OK

[crude stump]

aw man i missed it

[crude stump]

Oh it’s a secret

I see

[naive violet]

I mean, it will be linked to my name and my work

[crude stump]

Alright. Next defcon?

[naive violet]

No chance lol

[crude stump]

Oh

Lmao

Like a small talk

[naive violet]

At least to start

[sick lance]

Please keep this to the channel you posted in.

[earnest swan]

ok sorry

[jolly wedge]

Can I do a practice easy room if I haven't done all the introduction to cyber security and complete beginner part or it is too hard ?

[sick lance]

You could certainly try

[crude stump]

what type of music do you like

[wooden totem]

From the screen to the ring to the pen to the king where's my crown that's my blind always drama when I ring

[crude stump]

wheres your prime

lunchly enjoyer

[wooden totem]

no idea how either of these are selling, they are actually terrible like subjectively

[crude stump]

Facts

Especially prime

Taste straight nasty

[wooden totem]

marketing the only thing holding them up

[teal wharf]

true dat

[rapid merlin]

lol nvm found a send feedback button my slow ah

[crude stump]

@sick lance There’s so many tools flarevm has to offer. Is the default tools good enough or should I just install all the available tools I can. Im prolly not gonna use most of em but 🤷‍♂️

[sick lance]

Depends on your use case I guess, however I doubt they will install

[crude stump]

Ahhh

The basic with suffice ig

[kindred apex]

Helo

Guys I have a issue

[sudden pond]

what?

[kindred apex]

I am getting a link 50 dollar Steam card from everywhere like X discord etc don’t judge me I am just 15 and learning some ethical hacking but I am in learning phase soooo what should I do

[clear jackal]

Don't click links

[sudden pond]

sorry i dont know much about this

[kindred apex]

I did so I blocked ‘em but again and again getting links

[sudden pond]

block em again

[kindred apex]

Oh

[kindred apex]

Which country

Bruhh

[sudden pond]

u?

[kindred apex]

India

[sudden pond]

neighbors

[kindred apex]

I don’t think so u r from Pakistan

[sudden pond]

why

[kindred apex]

I don’t mind knowing ur real location

[sudden pond]

what do you mean

[crude stump]

It’s a common scam link

[kindred apex]

Hmm

Ye sir

[crude stump]

It’s usually spread by hacked discord accounts

[kindred apex]

Yup

My friend sent me

@crude stump sir r u a experience white hat hacker !?

[crude stump]

This is a ethical hacking server

We don’t provide hacking services if that’s what your asking

[kindred apex]

Ik 🫡

[kindred apex]

Just sharing my problem Bruhh

[crude stump]

Best bet is for them to contact discord if your friend is still hacked

[kindred apex]

He knows

[crude stump]

Ik

[rapid merlin]

To complete the ''Crack the hash'' challenge what prerequisite knowledge do i need or what rooms should i complete in order to crack the codes.

[kindred apex]

I also want to do from where r u doing all this

[rapid merlin]

next to the dashboard icon there is a learn icon please click it and in that options select search, the search for the particular room you want

[sudden pond]

it asks you notthing its simple

first hashes can be cracked using crackstation.net

[rapid merlin]

As a complete beginner i dont really know i am just curious to crack it

[sudden pond]

and others manually by using the rockyou.txt wordlist

[rapid merlin]

ohhh thank you

[twin ridge]

Gave +1 Rep to @sudden pond (current: #924 - 4)

[sudden pond]

wlcm!

[rapid merlin]

i hope i helped you !!!

[brazen oyster]

Throwback room already gone?

[sudden pond]

yeah

[sudden pond]

are you the who plays KOTH?

[brazen oyster]

sad thats my next road after this red teaming path 😦

[brazen oyster]

yes

[sudden pond]

you guys are hell too good at KOTH

i just played 5-7 koth till the end

[brazen oyster]

sad that a high ranked than me dmed me yesterday and said i played using autopawns. My 20 + notes and articles about ctfs write ups i read for weeks just to learn playing ctf koth became useless 😅

[sudden pond]

sad!!

thanks @rapid merlin for a thing

[twin ridge]

Gave +1 Rep to @dense pagoda (current: #2281 - 1)

[kindred apex]

Nope

[sudden pond]

@kindred apex you are annoying

[kindred apex]

!?

[sudden pond]

u just dont answer the questions in a right way

[sudden pond]

what is ur thm usr name

[kindred apex]

Thm!?

[sudden pond]

try hack me

[near jay]

which openvpn file do I use for koth games? the "machine" one ?

[sudden pond]

anyone is fine

[kindred apex]

I don’t have specific usr name for thm

[near jay]

cheers

[sudden pond]

just make sure the server is close to your location

THIS CHANNEL IS DESERTED TODAY!!!!!!!!!!

ITS ALL EMPTY HERE

[silver sky]

It's a sunday

[naive violet]

Not everywhere has to be active all the time

[sick lance]

Yeah, server is quiet on a Sunday

[naive violet]

Even better - you don't have to be here all the time either!

You can take a break, go outside, learn a skill, all sorts

I, for one, have been designing things and working on a talk

[sick lance]

Working on Fortinet equipment, looking for vulns and CVE's well taking notes for my interim report.

[rustic totem]

Guys I just installed burp professional in my kali machine but it's not showing where it has installed...just the old pre-installed community version.....any suggestions what should I do?

[sick lance]

Do you have a pro licence?

[sudden pond]

Bye!!! Dog probelm

[rustic totem]

Got a cracked version! 🥹🥹

[sick lance]

Enjoy the malware!

[marble tapir]

Finally I'm here 😁

[rustic totem]

But my mentor gave it to me😭😭😭 ....others r using it too😭

[sick lance]

Was it hard?

What a shit mentor...

[marble tapir]

The verification part

[sick lance]

<Mobile phone?

[marble tapir]

Yeah had to switch account

[naive violet]

Are you aware that's illegal and against the tryhackme discord rules?

[rustic totem]

Didn't know

[sick lance]

What happened to your old one?

[sand trench]

weirdly enough crack the hash level 2 teaches you more on what you need to know to crack hashes then crack the hash

[sick lance]

I'd ditch the cracked copy and the mentor too.

[marble tapir]

That is not linked with mobile phone

[sick lance]

Poor mentor if they're condoning the use of illegal software.

[pine stratus]

isnt burp suite community edition enough ?

[sick lance]

I see.

[naive violet]

If you're not doing things where you're making money (and hence need the logging) then it really is enough

[rustic totem]

It is..... I got it, so I thought

[marble tapir]

Yeah, now it's good

👍

[pine stratus]

as a beginner i'm not aiming to make money , when i get more experience and more deep understanding of bugs and webapps , ill go for the pro one , i already watched many live streams about catching the bugs and i found that many of them are using burp pro

[naive violet]

Bug bounty? Don't really need the logging associated with pro

[pine stratus]

other than bug bounty ? how u can make money ?

[naive violet]

An actual, real job?

[pine stratus]

okay am so far from that , hopefully in the future

[crude stump]

Anyone know any practice websites I can practice using ghidra

Can’t find nothing on thm

[naive violet]

Search for reverse engineering or crackmes

[crude stump]

Oh let me see

[sudden pond]

where are u from india?

I discovered another solution for the famous openvpn problem

[marble tapir]

Tamil Nadu for now

[rapid merlin]

Thank you for replying to me

[twin ridge]

Gave +1 Rep to @sand trench (current: #3 - 1927)

[sudden pond]

just asked bcz of ur kuch to bata

[sand trench]

no problem

[sudden pond]

but there is a problem with the lvl2

[sick lance]

Can you code in C?

[crude stump]

no

[marble tapir]

That's a part of a song and next part is ... LIFE

[crude stump]

only intermediate python. sort of intermediate

[sick lance]

https://tryhackme.com/r/room/basicmalwarere

https://tryhackme.com/r/room/ret2libc

Two rooms which feature crackme's

[crude stump]

oo thank you everyone

yk its good when a russian is writing it

[sick lance]

If you do learn to write C, then write you own code, compile it, then chuck it in Ghidra.

[crude stump]

i tried learning C but the tutorial i used was so confusing i gave up.

thanks

its crazy how harvard has all this online

[rapid merlin]

can you tell me what it is

[sudden pond]

Advice n°3 f4476669333651be5b37ec6d81ef526f with this hash

[sick lance]

Where did you get this hash?

[sudden pond]

you cant find the wordlist for this now

[sudden pond]

crack the hash lvl 2

[sick lance]

#room-help then.

[sudden pond]

i am not helping him just telling

[sick lance]

The conversation needs to be in #room-help

[sudden pond]

ok @sick lance

[narrow bone]

https://www.youtube.com/watch?v=nODVcuLhe1M

Interesting video they mentioned even 0day with his revshells page at 44 min 😂
Blue Vs Red Team

[rapid merlin]

thank you for helping me

[twin ridge]

Gave +1 Rep to @sudden pond (current: #789 - 5)

[sick lance]

Ghidra looks better in darkmode.

[sudden bridge]

man where do i start RE in THM

[sick lance]

There is a few rooms in the Soc 1 & 2 paths.

[rapid merlin]

For free?!

[sick lance]

Ghidra is bae.

[crude stump]

there computer science lectures

[whole yew]

Harvard, Stanford and MIT all have really great compsci youtube channels. They upload the lectures for a lot of their classes, for free.

[sudden bridge]

does malware analysis come under RE? i thought it was vice-versa

[crude stump]

https://pll.harvard.edu/catalog/free

[sudden bridge]

CS50 is amazing. took it 3 times never completed however

[sick lance]

I'd say it was RE > Malware Analysis.

[sudden pond]

cant wait for tomorrow

wondering what's the surprise

[sick lance]

I have an idea, we were talking about it on Friday and I wrote in the text bar and took a screenshot, I'll post it if I was right.

Urgh, I can't work right now because my kitten is not leaving my laptop alone.

[rapid merlin]

i need to crack a hash for ctf
my laptop started giving burning smell
my student azure vm is running slow
any free and fast way to crack it?
its eta is 5hours
running rules

[modern blade]

Kitten dev?

[sick lance]

Which CTF is this?

[rapid merlin]

hiring process for a company

[sick lance]

Then we're not helping you, good luck 🙂

[sudden pond]

hehe

[rapid merlin]

i need a free service recommendation

[sick lance]

What is the cut off date?

[rapid merlin]

my student azure has limited resources

[sudden pond]

try some online tools

[rapid merlin]

as in?

[rapid merlin]

i am running rules

[sick lance]

When is the end date for the interview?

[rapid merlin]

on its hash

[rapid merlin]

overmorrow
but i have to go clg tmrw

[sudden pond]

can you share the hash

[rapid merlin]

so 12 hours burned there

[rapid merlin]

i shouldnt ig

[sick lance]

Really?

[rapid merlin]

its a zip2john hash

[sick lance]

We're not helping, if you continue to discuss this, I'll mute you for 2 day(s).

[rapid merlin]

ah okay

the burning smell from laptop is strong 😂

[sick lance]

You could be melting your CPU.

[rapid merlin]

switched to azure

[sick lance]

So do you think your computer will stop using resources or something?

[rapid merlin]

its not using my resources

smell was earlier when i was doing it locally

[sick lance]

Yeah...

[rapid merlin]

Thank you, I will have a look

[twin ridge]

Gave +1 Rep to @whole yew (current: #10 - 782)

[sick lance]

So you could have done damage then.

[rapid merlin]

Thank you

[crude stump]

You’re welcome

[sick lance]

I want to use android studio on my VM, however Vmware does not support Nested virtualization or Virtualized Intel VT-x/EPT

[mossy river]

Android studio uses virtualisation?

[sick lance]

For the phones, yeah.

[mossy river]

Is it for the android device?

Ahh thought so

I used an old Samsung, put it into dev mode and tested directly on the phone

[sick lance]

I may need to do this with my Uni work.

Right now I'm using a cloud based VM, but the RAM is pathetic.

[mossy river]

I moved to flutter and dart

we did it in college and it was quite easy

[rapid merlin]

can u say like if there are alternatives to my problem?
a free one

[sick lance]

No, 🙂

Any "free" based cloud VM's will be restricted.

[rapid merlin]

thats the problem

[sick lance]

Then it's one you'll need to figure out.

[whole yew]

android studio has a plugin hypervisor to emulate physical devices. It's more along the lines of qemu hardware emulation than a 'normal' same architecture VM.

[mossy river]

Yeah, I think I used it

iirc VSCode has a plugin to do it?

[whole yew]

Huge performance cost, if you have a rooted physical device to test on, it makes android dev/RE way faster.

[sick lance]

I have a rooted android handset, old Samsung Note 9.

[whole yew]

The only down side to using a physical device with android studio is that you are limited to the version of android on the device

[mossy river]

Hmm true

[sick lance]

And some of the apps I may need to use will get flagged by my AV, and I don't want to set up exclusions based on them.

[whole yew]

Android Studio works great on Fedora and Ubuntu. Just sayin'.

[sick lance]

It's the laptop I'm using, I think, or perhaps possibly a VmWare restriction.

[rapid merlin]

😂

if i disconnect ssh
i can still see the result tmrw right?

if it stores it somehwere

[sick lance]

Does the VM run 24/7?

[rapid merlin]

yes sir

[sick lance]

Then possibly.

[rapid merlin]

😂

[mossy river]

Might end the task, try using tmux?

[whole yew]

If you are not using screen or tmux to manage sessions, disconnecting the ssh session will terminate the shell process running your command.

[jolly forge]

funny, I used zip2john today. Although cracking the hash wasn't done on my own PC, I don't think it would require too much out of your PC especially for a CTF. What wordlists were you using?

[brazen oyster]

Throwback room totally out?

[rapid merlin]

i am using rules patterns

[rapid merlin]

great news i am doomed

[naive violet]

Yes, discontinued

[rapid merlin]

eta is 12hrs atm

[jolly forge]

oh so a mutated list?

[brazen oyster]

Sadness

[rapid merlin]

yeah

of rockyou

[naive violet]

@jolly forge @rapid merlin Please stop discussing it here

[jolly forge]

why?

is it against the rules?

[naive violet]

See here.

[naive violet]

Yes. Cheating.

[jolly forge]

how is it cheating when you just discussing a technique and not directly giving the solution?

[rapid merlin]

strict rules

[naive violet]

Help of any kind.
Now, please stop

[mossy river]

🙏 #rules

[mystic trench]

[sick lance]

How would you feel if you cheated out of a position in a workplace because somebody asked a server for of hackers for help?

[rapid merlin]

i know the solution is correct
i just have a potato laptop 😂

[sick lance]

That's not the point.

[median pollen]

Hello friends

[rapid merlin]

Scrubs was it you to say dye my hair orange, well it’s that colour rn. I’m in the mid transition to blonde

[crude stump]

Orange is festive

[pearl raven]

https://tenor.com/view/merida-brave-redhead-angry-gif-13786031

[pulsar spoke]

Since when can we add friends on THM?

[sick lance]

It's been there for years.

[sand trench]

since ages ago but recently we can add more

[sick lance]

It's just more noticeable now.

[pulsar spoke]

whaaaat?

[sick lance]

Oh well, I can't use Android Studio for what I want right now.

[pulsar spoke]

I didn't notice it until the new update

[sick lance]

Stupid Vmware and not allowing VT-X

[sudden bridge]

you have no friends on tryhackme

[sick lance]

I have two

[pulsar spoke]

True

[pulsar spoke]

Can I add you? Just to test

[pearl raven]

I have one...

[sick lance]

.Scrubz

[pearl raven]

Above average 😛

[sudden bridge]

i sent one to my irl friend... he didnt accept.

[sick lance]

Just be mindful, it may dox your name.

[mossy river]

#announcements message

[pulsar spoke]

who's gonna do that?

[sick lance]

If your full name is set on your profile, it will come in the E-mail.

[pulsar spoke]

oh... maybe not

[sick lance]

Unless it's changed 🤔

[mossy river]

I am trying to think if it was or not

[sick lance]

Only way to test it.

[void zodiac]

Did anyone have an imposter syndrome while starting studying on THM?

[mossy river]

Added ✅

[pulsar spoke]

almost everyone

[sudden bridge]

to have imposter syndrome, you must have skills.

[mossy river]

🤣

hi scrubz

[sick lance]

So it's not been changed 😎

[void zodiac]

I'm completing a networking module rn, OSI, NMAP. A lot of theory, it gives me an imposter syndrome

[pulsar spoke]

bruh, you got imposter syndrome from that?

[pearl raven]

Take your time with the things that seem overwhelming, take good notes. Revisit things if you forget.

[sick lance]

Nice streak 😎

[pulsar spoke]

You don't always have to stick to THM content. Find content which fits you best. If THM content doesn't work (which is rarely) do some research.

[pulsar spoke]

Thanks. I had a bigger streak earlier 😢

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 2885)

[crude stump]

I call free rep

[pulsar spoke]

I didn't mean to do this

[sudden bridge]

unthank him.

[pulsar spoke]

unthanks @sick lance

[void zodiac]

I do read, I do complete and research. 18 day streak right now. It's been 18 days and I'm still on the Network basics module. And it feels like I'm doing rooms really slow

[crude stump]

Psh if you see me doing rooms

You would die

I am slow af because I try to learn the tools in depth

[clear jackal]

Slow is subjective everyone learns at their own pace

[sudden bridge]

dont go very deep into OSI model. i've done a bit of socket programming and tcp/ip model helped me, OSI is just theoretical and idek why its focused so much.

[crude stump]

Reee my flare vm is done

[pulsar spoke]

Take you time. It's just the beginning and the most important part. Take your time and get it right

[clear jackal]

Take notes, review the materials, explore rabbit holes, and make your own journey

[void zodiac]

That's what killed me before in Pre-security, OSI was explained a bit too detailed

And in the Complete Beginner path it's kinda shorter, and instantly goes into TCP/IP

[crude stump]

Osi can be kinda complicated but if you know the absolute basic on what a level does and some things that do work on that level then that’s all you need to know really.

[void zodiac]

Yep, that's right. I even found a cheasheet with levels and brief description of actions performed

[crude stump]

I really like this model

[sudden bridge]

yeah man personally i was STUCK in this networking theory thing. i'd say get hands-on with wireshark and use RFC at best (would not suggest RFC if you're unfamiliar with docs reading) and get on the track.

[crude stump]

Networking can be a rabbit hole section fr

[void zodiac]

That's what the NMAP room suggested to me, to do Wireshark room before doing one of the tasks

[sudden bridge]

exactly.

[pulsar spoke]

Then do it

[crude stump]

I want to say. The wireshark room is awesome. It’s lengthy yes but it really puts into perspective what’s happening in a network

[sudden bridge]

the wireshark module in soc1 is just chef's kiss

[crude stump]

That’s the one

[pulsar spoke]

Since when did THM make Linux Fundamentals part 2/3 for subscribers only? 😠

[crude stump]

Was it not always like that?

[sudden bridge]

no it was free 😂

[crude stump]

Damn

Ngl that’s crazy

[sudden bridge]

thm really want 💰

even the windows ones are behind paywall now

[void zodiac]

No other rooms have it?

[void zodiac]

14$ per month in nothing

[sudden bridge]

have what

[crude stump]

Wait are you a subscriber

[void zodiac]

Wireshark module

[pulsar spoke]

easy for you to say

[void zodiac]

Yes I'm

[sudden bridge]

that translates to a big sum in my country

[pulsar spoke]

same

[sudden bridge]

u can just start a module without choosing a path.

[tepid furnace]

thm is a buisness

[crude stump]

I’m sure you can look up other rooms that use wireshark but soc 1 path is the main one

[brittle lynx]

Hello where do u recommend to learn cloud pentesting and defending (hands on) affordably?

[void zodiac]

Just other courses are much more expensive, that's why I say it

[pulsar spoke]

THM

[pulsar spoke]

Get the annual sub

[sick lance]

Few months ago.

[sudden bridge]

check flaws

[mossy river]

TryHackMe's cloud path is a separate subscription.

[pulsar spoke]

Why?

[mossy river]

https://tryhackme.com/r/path/outline/attackinganddefendingaws

[pulsar spoke]

What the HAIL?

[sick lance]

Could just be to change things around, I'm not sure.

[pulsar spoke]

I liked THM when the fundamental rooms were free

[crude stump]

Yk what would be a smart idea. Periodically making things that are free paywall and things that were not free, free

[pulsar spoke]

what?

[crude stump]

What do you not understand

[pulsar spoke]

oh, wait. I got it now

[crude stump]

Ye

[pulsar spoke]

I got confused when you said free paywall

[crude stump]

Oh lmao

[pulsar spoke]

punctuation, man

[crude stump]

Hm your right,

[sick lance]

Depends on how often it does switch, if it does.

[crude stump]

Every year maybe

[sick lance]

Big announcement tomorrow though.

[crude stump]

But at the same time paths are super long, so maybe you make a informational room free but the challenge room stays behind the paywall

[crude stump]

Oo yay

[void zodiac]

The best idea was to give a 3 months voucher for a call with THM team and give them a review

[crude stump]

Yeahhh you getting me now

[void zodiac]

It really got me back on the track because I remembered about its expiration and I decided to activate it

[sick lance]

People complain about the cost of THM, but since they launched, they have only raised the price once, and the cost pays their employees and other stuff.

People forget that.

Understandable that not everybody may in the position to purchase a subscription, they're exempt from my statement.

[void zodiac]

14$ is really cheap, seriously. It's one of the most affordable Cyber Sec courses

Offensive security courses which cost in total 140k$...

[rapid merlin]

It’s really cheap for the content supplied.

The same people complaining about the price I bet are the same ones paying £20 for a games skin

[void zodiac]

And I know that most of these 14$ goes host servers with machines and attack boxes

[sick lance]

60% of the content being free is a great balance.

[rapid merlin]

I didn’t know that much was free

[cerulean nest]

guys im getting a new computer

laptop

any recommendations

[sick lance]

Use case?

[rapid merlin]

I had a chat with ChatGPT and told it what I wanted to use the computer for and it gave me recommendations

[void zodiac]

My 1.4k$ Lenovo which died shortly after I bought it😶 it survived only for 2 years

Still no clue what happened to it since April

[mossy river]

what 😭

I bought a £150 second hand one three years ago and it's still balling

[rapid merlin]

That sucks

[void zodiac]

I was playing BeamNG and it just turned off and never turned on. Bios battery is ok, power battery is ok

[pearl raven]

Yikes, what were you doing with it, gaming?

that explains it

[mossy river]

Not really

[void zodiac]

Yep, BeamNG with 12 traffic

[mossy river]

Gaming on a laptop doesn't mean it's going to die.

[void zodiac]

True

[pearl raven]

No, but it likely will be overheating for extended periods

[cerulean nest]

cyber

and uh

[sick lance]

I may need to upgrade my workstation if I can't get Vt-x to work.

[cerulean nest]

ig hash cracking, and stuff

[void zodiac]

But it had issues with the CPU getting overheated

[cerulean nest]

rtx 4090 preferrable

with uh

not an ARM cpu

[void zodiac]

I wonder if my CPU died

[mossy river]

Yup, that's standard for laptops

[mossy river]

Then go for a tower, not a laptop

Get a tower with a dedicated GPU if you want to do hash cracking

[pearl raven]

Sometimes they can be salvaged with a good cleaning and a new application of thermal paste.

[rapid merlin]

What’s your view on chromebooks

[void zodiac]

My one is deadly dead, unfortunately

Even no signals or leds

[pearl raven]

Ouch

[naive violet]

You'd be hard pressed to get an ARM one with a 4090

[void zodiac]

What could it be? Motherboard? CPU?

[mossy river]

Chromebooks are great. Super efficient and high performance.
Chromebooks with the touch screen functionality and stylus are also awesome and useful to those who want a laptop and a tablet.

I wouldn't recommend them for Cyber because it's a custom OS that isn't supported in a lot of software.
Requires you to install other software like Anaconda which can be very temperamental.

If you are in full-time education, looking for something to do your assignments (especially a math based course or one that requires you to create diagrams etc), I couldn't suggest one more.

[fair jungle]

Get a thinkpad install debian OS, transcend to another universe

https://tenor.com/view/brock-lesnar-thinkpad-destroyed-laptop-ripped-in-half-gif-23291050

[mossy river]

I got a thinkpad and installed Ubuntu™️

[fair jungle]

Hell yeah

[rapid merlin]

That’s good 😊

I use mine for research and stuff

And to study

[void zodiac]

LemoLenovo Thinkpad 16P, and... It died

[rapid merlin]

Thank you

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1326)

[mossy river]

I got an M2 Macbook Air.
Best and worst decision.

Great for coding, writing assignments and doing work.
Terrible for VMs and Cyber (ARM CPU).

[void zodiac]

How long will it take to complete all paths on THM?

[rapid merlin]

I tried to install a VM onto a computer the other day and it would just crash everytime I tried to open it

In the end I just walked away 😅

[mossy river]

Impossible to say, everyone is different. Depends on your skill level, ability to learn and pick up new concepts and familiarity with TryHackMe:)

[void zodiac]

Less or more than a year?

[mossy river]

I got one to work but the software my university use for a particular module had no ARM support and using emulation was incredibly slow.
Now I just use my Macbook to RDP to my tower 🤣

[mossy river]

Less than a year if you are continously learning. If you do a room a week or take extended breaks (i.e. 2-4 weeks), it might take you more.

[void zodiac]

I try to do it everyday

[cerulean nest]

i want laptop tho

[mossy river]

I wouldn't worry about rushing the content though.
Taking proper notes and performing further research of each room you are completing to commit to your notes will leave you much better off 😊

[cerulean nest]

around 2-3k budget

or 4k at max

[mossy river]

I could not recommend not to spend more than 1k on a laptop.

[cerulean nest]

wtf? the gpu itself is 1.6k

[pine stratus]

buy a quantum computer

[cerulean nest]

lmfao

maybe cause im not gonna use the desktop

i want smth portable

but powerful

[naive violet]

Gaming laptops are... Still not great

[cerulean nest]

yup

im using the gpu for hash stuff for CTFs

[mossy river]

You're going to be wasting your money 🤷‍♂️

[cerulean nest]

i cant carry my tower to places

laptops on top

[mossy river]

You can RDP into your Tower from a laptop

[naive violet]

Not gaming?

[cerulean nest]

no time for gaming lmao

im using the gpu for compute

ye i like laptops

portable

[naive violet]

You can always rent GPU time. Bet it works out better.

Especially on battery life

[cerulean nest]

better to have my own gpu

plus im gonna have my computer plugged in 24/7

idc abt battery life

[void zodiac]

How important is making notes?

[mossy river]

I said the same thing, bought a £1k laptop, then went out and spend £2k on a Tower 🤣

[cerulean nest]

asus rog zephyrus g16 is pretty good

[naive violet]

If you're gonna have it plugged in all the time... Just get a desktop

[cerulean nest]

i dont like towers

[cerulean nest]

no but like im gonna have to move places

i cant just pick up my desktop

and go places

laptops on top

[naive violet]

Build an SFF. You totally can.

But hey, your money to waste in the end

[cerulean nest]

its not a waste is it?

around $2k for a 1.5k gpu

• other stuff

its good for the price

[cerulean nest]

this

[mossy river]

I think notes are very important.
From a scientific POV, notes actually help you turn what you have learned from short term to long term memory.

But, I can't say that notes are for everyone. If find them useful, I really recommend you to take them.
If you find them to be unhelpful, try finding a way of storing the information that is suitable for you! Whether that is recording and walking through the content, saving videos of other people explaining it or other:)

[cerulean nest]

yeah notes are important

my entire notes combined is over 1mb

[rapid merlin]

Hope everyone is having a wonderful day!

[pearl raven]

So far so good, hope you are having a great day also.

[rapid merlin]

Thank you very much, God bless you.

Stay hydrated!

[twin ridge]

Gave +1 Rep to @pearl raven (current: #87 - 81)

[cerulean nest]

🌊

[rapid merlin]

Hi guys

Who know about swiftseek

It work my google chrome and i cant delete it

[jagged otter]

💩

[mossy river]

The problem with laptops that have a dedicated GPU is that they are less efficient.

• Laptops have limited airflow and smaller cooling systems due to their compact design. They are prone to thermal throttling.
• Laptops tend to wear out faster because components that are soldered are subjected to constant heat.
• Some laptop manufacturers will lower the performance of the laptop to ensure that laptop isn't overheating.

You can spend your money on whatever device you want, I just want to ensure you have all the facts before you make a decision.
If you are still happy with buying one knowing this then all the more power to you 😄

Cooler hardware = faster hardware

I am

[fickle fulcrum]

hii guys

[rapid merlin]

I tried to google it and cyberfirst girls competition came up

[fickle fulcrum]

can someone help me with education advice pleasee

[sick lance]

Depends™️

[mossy river]

Feel free to ask here, if someone knows the answer they will help you:)

I remember doing CyberFirst about 5 years ago

No, this was a competition for Secondary School students

[sick lance]

It's a great idea, want more women in cyber? Aim one for them.

[rapid merlin]

Grandma stealth

On my way!

😊

[fickle fulcrum]

thank you. so i have a bachelors in international relations and i'm working in an SaaS company, so wildly different career to cybersec. i wanna switch to cyber and i know i can just get the certificates like comptia sec but i'm thinking to do a part time masters in computer science with cyber security. is it valuable or a waste of time? i just wanna open some options up for myself

[mossy river]

There were a few stages.
You had to be within x amount of people to complete a certain amount of the stages.
If you passed the stage, you would be invited to the next.

If you won all stages you got an internship and fully funded University scholarship iirc.

[fair jungle]

Valuable but depends on lots of factors, make sure cybersecurity is really what you want before you really invest too much.

[mossy river]

Personally I won't be doing a Masters for Cybersecurity. I haven't heard great things about Masters degrees in Cyber personally

You need to look at the job market for jobs you want to do and see what they requirements are

[fickle fulcrum]

thanks. the only experience i have is tryhackme and comptia material, which I enjoy so far but there is so much I don't know about this

[twin ridge]

Gave +1 Rep to @fair jungle (current: #1136 - 3)

[fickle fulcrum]

thanks. it's computer science with a cyber sec focus, if that changes?

it's honestly mostly computer science

[boreal scarab]

[mossy river]

Computer science degrees are great for IT as a whole.

[fickle fulcrum]

the thing about jobs, i don't know yet

i know it's a bad motive but i just wanna increase my pay and do something enjoyable

[mossy river]

I just don't think Masters offers much over a Bachelors degree from the people I've spoken to.
*This advice is purely anecdotal and not official advice.

[fickle fulcrum]

yeah i can imagine

i'm definitely not going back for a bachelors

it's either masters + certs, or just certs

i just figured that a computer science masters opens up a whole load of doors

[boreal scarab]

@cosmic pendant I feel like toaster may be beneficial here for this conversation

[fickle fulcrum]

thank you

[mossy river]

Just to confirm Neon, are you UK or US?

[fickle fulcrum]

UK/UAE

[void zodiac]

From what I saw, companies mostly require only knowledge, some also require work experience in cyber sec. And mention certificates as a bonus for getting an interview.

Haven't seen companies asking for a degree in IT or cyber sec

(I have no experience in this field, just saying what I noticed)

[naive violet]

Masters in cyber over qualifies you really

You can struggle, especially at the entry level

[fickle fulcrum]

so it's really just certs and experience

[rapid merlin]

I can’t find an entry level job 😭

[fickle fulcrum]

okay my next question - how do i gain experience without taking a serious pay cut?

[mossy river]

I know of people who get Masters degrees then move into Junior roles and really struggle lol

[naive violet]

They're out there.
I've been headhunting, although not any more.

[naive violet]

That's the challenge. You probably can't, sadly

[grim sparrow]

:hammer: aaaaaaaaaaaaa08527#0 has been banned.

[lone thistle]

[fickle fulcrum]

because obviously i'm earning my own salary now in a non entry role in my sector. i am worried about years of being on a lower salary. do you think i could do some kind of volunteering or internship on the weekend and that still count?

[cosmic pendant]

Can you a masters without a BS?

[sick lance]

Somebody really is annoyed huh.

[fickle fulcrum]

in the uk yeah, they have conversion courses

[pearl raven]

Apparently.

[boreal scarab]

There's toaster! Hi toaster!

[void zodiac]

Not all companies ask for it. And certificates can help you to get an interview.
(I can be wrong)

[mossy river]

You're living in their mind rent free 🥰

[fickle fulcrum]

why do they struggle btw?

[naive violet]

Most of then will expect relevant experience, especially beyond entry level.

[boreal scarab]

No one lives in my mind rent free. I charge them, I'm pretty rich in that sense then

[void zodiac]

Find by IP xd via ipconfig

[rapid merlin]

It’s pretty hard and to find a job now days

[naive violet]

The first one is difficult, then it's non stop headhunting in cyber

[sick lance]

👀

[void zodiac]

Maybe some serious certs can also be valuable

[fickle fulcrum]

so the consensus is that the degree isn't worth it? what about outside of cybersec, would it be useful to have anyway? i feel like maybe it would demonstrate experience / interest / foundation knowledge

[boreal scarab]

Every year, people always say that

Every, single, year.

[fickle fulcrum]

i just don't think people take me seriously with a non-STEM degree

maybe it's my own insecurity

[rapid merlin]

Well back in my day you could just walk in and ask. coughs up dust

[mossy river]

The environment is much different and what you learn on the course isn't always what you need for the job.
Job experience and academic experience is much different. I can't speak from experience.

[fickle fulcrum]

yeah fair enough, makes sense

i've seen cybersec degrees are not technical at all

[boreal scarab]

Back in my day

[mossy river]

🖐️ Mine

[fickle fulcrum]

yeah it doesn't exactly prepare you

[sick lance]

My BsC will hopefully be good.

My Hons project will get me contacts in Fortinet and Scottish Police.

[boreal scarab]

I got an associates in IT, not specifically cyber sec, but still took courses for sec while there

[fickle fulcrum]

better than no degree though I think

[boreal scarab]

Er, well, AAS

[fickle fulcrum]

nice

[sick lance]

I've already networked with Scottish Police - Cyber department, current and former.

[fickle fulcrum]

lots of different backgrounds i see

[fickle fulcrum]

interesting

[sonic vessel]

Is anyone here good at drawing like personified cartoons of objects? Like a can driving a boat for example

[fickle fulcrum]

nope

[boreal scarab]

I'm not in info sec though. My background is support.

[fickle fulcrum]

ah okay

i am so stuck and don't know what to do

[sick lance]

..Of all the most random things, This isn't one I ever expected to read.

[boreal scarab]

I demand that be added to #quotes .... oh wait

[void zodiac]

Another thing. You would have to combine work and studying. In case of studying on THB/HTB and getting certs you will have much more free time than if you would do Master degree

[mossy river]

Me accidentally meeting the director of Met and a blue team leader

https://tenor.com/view/when-the-banana-sells-a-million-dollars-gif-11873212726979639512

[sick lance]

The best way.

[fickle fulcrum]

sorry stupid question but what is THB? and yeah I want to keep my current job

and get some experience on the side, if possible

[sick lance]

Hack The Box, a platform with the same idea, but different delivery method as TryHackMe.

[void zodiac]

THM, I made a typo

[fickle fulcrum]

while studying certificates

ahh okayyy

[void zodiac]

Work experience or to practice?

[devout zephyr]

hello guys,i am new heree

[fickle fulcrum]

both but i meant the initial work experience

[boreal scarab]

[fickle fulcrum]

hello welcome

[devout zephyr]

hello

[fickle fulcrum]

it's gonna be tough but i already work minimal hours / super flexible 'full time' jo

job

[rapid merlin]

One message removed from a suspended account.

[fickle fulcrum]

so i want to make the most of this and try and use my free time to develop this career somehow

[void zodiac]

I think I would do THM anyway to understand the basics and stuff.

And then decide if you want to stick to further courses or get master degrees. The base THM will give you will be useful and for courses and for master's degree

[fickle fulcrum]

okay thank you

but THM won't help employability right

[sick lance]

It's not going to be easy, it's not impossible though.

[fickle fulcrum]

thanks i just wish i knew the right steps to take

[flint lintel]

Anyone here who is just learning these stuffs for fun ?

[rapid merlin]

One message removed from a suspended account.

[flint lintel]

kinda ?

[rapid merlin]

One message removed from a suspended account.

[void zodiac]

I learnt at THM for a couple of months more than I learnt at my uni for 3 years. And well, THM experience kinda helped me at uni. Still getting Bachelor's right now

[rapid merlin]

One message removed from a suspended account.

[flint lintel]

ahhh okay i dont expect any kind of employment from this

[boreal scarab]

https://tenor.com/view/chouette-santa-hat-gif-14143275

[void zodiac]

Can I dm

[rapid merlin]

One message removed from a suspended account.

[flint lintel]

sure

[narrow bone]

Does anybody use a MacBook with the M chips running a VM (Kali) and what’s your experience?

[slender current]

Is connecting to the site via http considered dangerous for the site itself?

[naive violet]

It impacts the integrity - auditing any actions on the site
And the confidentaility of any content transmitted

[lone thistle]

Kali with the ARM based release is but still have to bare in mind that not everything has yet a ARM release

so far, x86_64 VM in things like VMWare, (there's another one I'm forgetting - UTM?), still kinda suck because it's emulation not virtualisation

Linux x86_64 emulation on it is bareable, Windows x86_64 it's veeeery not

[rapid merlin]

hello i need help to decrypt a password for the website hackthissite
Level 6

Network Security Sam has encrypted his password. The encryption system is publically available and can be accessed with this form:

Please enter a string to have it encrypted.

You have recovered his encrypted password. It is:

914588h:

Decrypt the password and enter it below to advance to the next level.

Password:

how does it work ?

[placid bridge]

Hey guys wassup

[sudden bridge]

sup sup

[sudden bridge]

doesnt tell anything about anything except its from hackthissite

[muted nebula]

damn just hit 50000 point on THM. XD

I wanna add some firend what are your usernames on tryhackme?

[sudden bridge]

#1520

[sudden bridge]

1ndr4

bro give some tips man

[muted nebula]

sent request

[muted nebula]

bro look at my streak. That's the only tip I can give. You just have to put in some time and effort everyday

[sudden bridge]

so maintaining a streak like yours can get me in the upper end of 1%?

15k brings us at 1% but 15k doesnt sound very impressive

[void zodiac]

2300 :(

[muted nebula]

no I meant you have to keep learning and solving challenges everyday. don't pay attention to the ranking. Your main goal should be to learn and practice. The rank comes automatically after a while. I've been doing this for almost a year now everyday. I also started from 0 points too but my goal never was to "get my ranking up". It just happens on its own.

[sudden bridge]

ah gotchu

what category do u play

[muted nebula]

what do you mean by category?

[sudden bridge]

like oh, the most rooms on thm are boot2root but there's gotta be a category you're well versed in like web, forensics, crypto, RE or even a broader one

i dont care about rank too much either, just wanna put it on my resume lmao

[muted nebula]

I play anything really but my main focus is on red rooms. Up to like a week ago I only focused on red rooms and challenges. Now I've started with the SOC1 path learning some analysis and forensics.

[sudden bridge]

nice man

[muted nebula]

I understand. You'll get to the "top 1%" after 2-3 months of gaining points trust me. It was really fast climbing up the ranks at first but once you get to the top 5000, you won't move anymore XD

Like back then I would solve a single question and I would jump +200 ranks. Now i have to solve an entire challenge room with like 90 points to move +5 ranks

[eternal timber]

Shrek Harvey

[sudden bridge]

crazy

[sudden bridge]

i have fans everywhere.

doing soc path right now. was at 5%, reached at 2% and will even reach 1% but this path wont end 😭

its fun tho. well documented and everything

[muted nebula]

yeah I usually find blue team stuff dry and boring. But it's kind of growing on me. I've enjoyed working with Zeek and brim so far.

[sudden bridge]

you'll love wireshark one 😁

[muted nebula]

Oh I already do. I have experience with wireshark already XD

tshark is what I'm currently interested in

[sudden bridge]

oh thats ones also good

did u like MISP and openCTI? those were pain in the arse

[void zodiac]

I want to do Pentest. Should I also complete soc?

[sudden bridge]

very daunting

[sudden bridge]

u dont need to. stick to a path.

[muted nebula]

no I think I cried through those XD

[sudden bridge]

those rooms were where i re-thought my choice of choosing this path

[muted nebula]

I would recommend learning the basics if you have the time. Other than that not really.

[muted nebula]

ikr. I was gonna quit but worked my way through them

[void zodiac]

Well, I thought it could be good just to know, but not necessary

[sudden bridge]

nice man

[muted nebula]

I think the basics are kind of necessary. I recommend going through the SOC1 path if you find the time. Learning things like the cyber killchain and MITRE stuff is good for pentesters and red teamers as well. But you wouldn't have to analyse network packet captures and do forensics as a pentester

[sick lance]

Former blue teamer will make a great red teamer

[muted nebula]

totally agree

[void zodiac]

And a former read teamer?

Red

[sick lance]

Won't want to go back to blue team

[void zodiac]

Is the job market overheated for junior pentesters?

[devout zephyr]

i thought pentest needs experience

thats why i am currently doing soc path as i have no experience in jobs

any pentest stuffs are complicated to me idk why

[karmic geyser]

you wanna?

[muted nebula]

wanna what?

[karmic geyser]

I wanna add some firend what are your usernames on tryhackme?

[muted nebula]

oh yeah sure, what's your username?

[karmic geyser]

REDACTED

[crude stump]

Not over hated. Its very hard to get into pentesting as a junior

[sand trench]

• wonders if that bug scrubz found is fixed on tryhackme yet

[muted nebula]

sent request

[rapid merlin]

Why ?

Or how even

This bleach is burning, hope my hair don’t fall out

[karmic geyser]

Done.

[sick lance]

Being a blue teamer you'll know what to look for, what to defend and what to hide.

Being a former blue teamer you'll know all these tricks

[devout zephyr]

attacks ll evolve anyway ryt

[rapid merlin]

Ohh okay

[jolly forge]

they might have to add some more ranks soon

[crude stump]

Heck nah

Better not

[karmic geyser]

What ever you say, both teams are goated.

[outer rivet]

https://tenor.com/view/writing-fire-bro-how-bro-felt-gif-8015564281503585223

[fast thunder]

Is there any place here where I can get help, not with TryHackMe but if a site is legit or not, watching on VirusTotal is seems Malicious. It for a friend who is losing money, and he will not stop, so Im trying to reach out to a professional and I know there is many of you here. Just to show him that yes this is not legit, or maybe it is.

[sick lance]

Losing money!

[sand trench]

and peef poof to the sleep sloop shadow goes while the beep boops are blasting

[karmic geyser]

"I lost myself in the deepest dark hole that I could never come back from.
Have now idea what dimensions or planets I'm in and on, I fear the judgment day.
Your actions cut my heart like chainsaw yet it's still beating and pumping in love for you."

This is what I wrote today.

Went to a poetry event!

[limpid fossil]

Mac book pro or dell xps which should i get?

[crude stump]

If he’s loosing money because of it. Random transactions etc it’s prolly malicious

[rapid merlin]

I asked for the winter all year and now Ive got a cold I’m second guessing myself 🥴 I want one of those wearable blankets

[sleek flicker]

Hey guys

[void zodiac]

"In case of cyberattack just pull cables"

Is it a good advice?

[void zodiac]

Hi sensei Bd

[sleek flicker]

How are you guys doing

[void zodiac]

Good, you?

[sleek flicker]

I’m alright

Thanks for asking

I’m waiting for the big news to drop

[void zodiac]

What news

[sleek flicker]

https://www.linkedin.com/posts/tryhackme_circle-21st-october-on-your-calendar-because-activity-7253057338553618433-xzIA?utm_source=share&utm_medium=member_ios

[void zodiac]

"THM mobile app"

[sleek flicker]

Is any of you already in a cybsec job?

[rapid merlin]

Many people in here already have a job in cyber