general

[rapid merlin]

proton isn't privacy focused

never was

[obsidian helm]

Surf, Proton I think

[gritty fern]

How can a VPN even be security focused?

[rapid merlin]

surf, probably not

[gritty fern]

Not very fluent in VPNs

[obsidian helm]

Hello guys

I'm new here what's up

[rapid merlin]

I'm assuming he meant with user security & privacy in mind

if so, mullvad.

[obsidian helm]

@rapid merlin really?

[obtuse mortar]

Yeah Mullvad seems to be consistent

[wooden totem]

"dont touch my data pls"
-"alright"

[rapid merlin]

Proton has been exposed, and laughed at by every single person for being a horrid service

[finite basalt]

I still have doubts about data collection but in terms of tying it to an identity mullvad seems better

[gritty fern]

Bro hasnt unlocked replying in his skill tree yet

[wanton schooner]

oh ok thnks

[tranquil lark]

Is the site working for everyone rn or is it just me thats broken?

[gritty fern]

broken rn

[obtuse mortar]

Although Mullvad does fall under 14 Eyes

[rapid merlin]

yeah, mullvad is consistent and reliable, rarely ever down; support is also quick and competent

doesn't matter

[obsidian helm]

@gritty fern yea, I'm new here and I just started chatting

[rapid merlin]

they've been raided before, no logs or anything was found

[gritty fern]

Hover over a message and on the right it will have a reply button

[wooden totem]

Jarvis, fact check on Reddit, sort by updoots and summarize the whole story from that one linked blog

[obsidian helm]

@rapid merlin yea that's clear

[ebon quartz]

is the site acting up for anyone else?

[rapid merlin]

For anybody coming, yes the site is down, staff are aware and are working on a resolution, thanks.

[obtuse mortar]

Ever tried IVPN? Looks semi trustworthy

[rapid merlin]

no

I was put onto mullvad by a friend in 2021

never looked back

[obsidian helm]

Nope

[finite basalt]

for the sake of ease I just use protonvpn personally

not proton sorry

[wooden totem]

this guy is getting paid to recommend mullvad

[finite basalt]

nordvpn*

[trim scarab]

yeah i can't finish my room as of 10 mins

[obtuse mortar]

I have been running tails + mullvad + tor and have not found any leaks

[obsidian helm]

Nord?

[gritty fern]

lmfao

[finite basalt]

I've heard good things about mullvad but personally don't care too much about security of it as much as speed

[chilly veldt]

It has good speed

[rapid merlin]

yeah, you might have to swap servers a few times though

[gritty fern]

@obsidian helm i dont accept random friend requests

[obtuse mortar]

On mullvad you can't do more than a double bound?

[obsidian helm]

@gritty fern I understand... Kinda seem strange, but gte to know each other at least I have no friends here

[wooden totem]

I saw surfshark being rated better than nord

[ebon quartz]

I would answer question but once I hit submit nothing happens

[south dock]

what? I am using it right now, it's slow but it's working =O
Guess I should log off just in case.

[ebon quartz]

I would need to open a new tab then it would be complete. I lost 2 tickets completing the room

[stark wolf]

something going on with the site?

[obtuse mortar]

I feel like nord is bloatware

[rapid merlin]

yes

[trim scarab]

same, we just have to wait i guess

[rapid merlin]

Surfshark, express & nord advertise through grifting yters

[hasty sand]

It's back

[rapid merlin]

o/ ryan

[chilly veldt]

I personally love mullvad

[wooden totem]

how much are you getting paid

[rapid merlin]

good work on the peoples call centre with pierogi lmaoo

[hasty sand]

Thank you

[twin ridge]

Gave +1 Rep to @wanton ridge (current: #2338 - 1)

[rapid merlin]

I'm being held in their server room, please help me

[rapid merlin]

Of course, nothing I enjoy more than watching them rage unbelieveably

[wooden totem]

safe and trusted review, I believe it now

[ebon quartz]

anyway to see if I got the tickets from the room I completed? I wasnt able to see if I received them

[chilly veldt]

I mean, if you want privacy and secure connections mullvad is top 1 cause it's ram only infrastructure

[void zodiac]

Wowv

Oday

Hi

[wooden totem]

@rapid merlin you gotta advertise like this to be more effective

[obtuse mortar]

Outside of reading actual auditing reports its actually hard to find a non grifting list of good vpns for privacy and user security

[hasty sand]

Nice to meet you 🙂

[chilly veldt]

How you doing Ryan?

[void zodiac]

Nice to meet you too 👋

[rapid merlin]

deam im ur fan bro

ryans discord getting lit up rn

[ashen bloom]

yo friends

[wooden totem]

I think this 0day fella is a celebrity here

[rapid merlin]

its normal, he is top 1 right now lol

[hasty sand]

About to get some Chick Filet, hope you all have a great day and thanks for the kind words ❤️

[gritty fern]

0day!!

[obtuse mortar]

what VPN does this 0day guy recommend?

[gritty fern]

Chick filet is fire

[hasty sand]

Mullvad

[boreal scarab]

Can you get me dinner? 👉👈

[ebon quartz]

woah is that really who I think it is?

[obtuse mortar]

thank you sir

[twin ridge]

Gave +1 Rep to @hasty sand (current: #49 - 167)

[rapid merlin]

mullvad its a real god vpn for not beeind rastred

they dont know who paid his service 💀

[rapid merlin]

What’s your favourite food ?

[void zodiac]

I like this photo a lot

[sick lance]

#site-support plz

[boreal scarab]

Sushi!

[rapid merlin]

Oh man that’s my favourite too

[rapid merlin]

Srry bby ❤️

[hasty sand]

http://printer.discord.com/

[rapid merlin]

What type of sushi you into ?

[boreal scarab]

https://tenor.com/view/holy-cow-holy-cow-gif-25938150

[hasty sand]

The real "computer man" @quartz osprey

[gritty fern]

I love these silly subdomains

[wooden totem]

if you click that your printer explodes

[gritty fern]

No it prints all of discord

You might run out of paper

[hasty sand]

Rick is my business partner, make sure to DM him and ask if he is the "Computer Man" (he's in the office next to me)

[boreal scarab]

Sashimi is quite nice, I usually get those from a Japanese supermarket. And regular "american rolls" like California is alright, but I more like the specialty rolls

[loud marlin]

https://www.thewebsiteisdown.com/

[void zodiac]

Won't he get annoyed by DM?

[rapid merlin]

I read that as spaghetti rolls. Where’s my glasses 😆 I’ll get you some sushi if you ever come down

[gritty fern]

I will lol

[void zodiac]

I will too 🙂

[boreal scarab]

https://tenor.com/view/wheelie-rollin-they-see-me-rollin-jeep-kid-gif-21057802

[ashen bloom]

I NEED ATTENTION

[boreal scarab]

[pearl kindle]

finished two rooms with 500 status code 😦 dont know if i got tickets or not rip

[ashen bloom]

WHY NO?

[boreal scarab]

@hasty sand when will we get a 0day joindeleteme discount?

[rapid merlin]

https://tenor.com/view/pay-attention-to-me-give-princess-attention-princess-wants-attention-slide-gif-15215153

[void zodiac]

Because no

[weak orchid]

beep

[hasty sand]

He loves DM’s

[rapid merlin]

That’s you caught in 4K

[ashen bloom]

🥲

[pliant cairn]

Hey all

[hasty sand]

I own Pentester.com so nope on that!

[void zodiac]

Okay, I'll dm 🙂

[ashen bloom]

btw, i m not the princess, just prince

[boreal scarab]

Damn

[gritty fern]

If i asked really nicely could i have pentester.com?

[hasty sand]

I’ll make a THM discount if you guys want one.

[boreal scarab]

[void zodiac]

Done 🙂

[hasty sand]

I was waiting for our international removals to be complete before I announced it here and on socials.

[hasty sand]

lol! Thanks

[twin ridge]

Gave +1 Rep to @void zodiac (current: #377 - 14)

[ashen bloom]

ya need

[void zodiac]

I wonder how much it costs now

[boreal scarab]

https://tenor.com/view/you-have-mail-mailbox-gif-11623462

[void zodiac]

Oh, "You've got mail"

Amazing movie

[candid river]

Sounds good

[ashen bloom]

WHO NEEDS A INBOX MESSAGE, I CAN PROVIDE INBOX MESSAGES

[void zodiac]

I want a DM 🙂

[candid river]

Btw what was the reason of the recent crypto wallet popup ? Was it an xss vulnerability?

[hasty sand]

Supply chain attack. Nothing THM could have done :/

[ashen bloom]

DONE ❤️

[rapid merlin]

When I was a kid I used to wish I would get mail, biggest disappointment as an adult 🤣

[candid river]

Ah i see, understandable ty 🙂

[twin ridge]

Gave +1 Rep to @hasty sand (current: #49 - 168)

[ashen bloom]

i NEED AN EXPLANATION FOR SUPPLY CHAIN ATTACK

[loud marlin]

you need turn off caps

[hasty sand]

Somebody modified the code of a JavaScript library, and when that code updated, they reflected on all sites they used it. Using voice to text sorry if there’s errors.

[wooden totem]

https://tenor.com/view/cat-bills-bill-confused-cute-gif-9327192660005731683

[ashen bloom]

thanks !

[twin ridge]

Gave +1 Rep to @hasty sand (current: #49 - 169)

[boreal scarab]

You've got bills!

[rapid merlin]

That’s all they are

[rapid merlin]

For real

[wooden totem]

I also got army recruitment in the mail

[rapid merlin]

Oh no

[rapid merlin]

I would rather a bill

[ashen bloom]

OH MY GOSH, KHALIFA IS TYPING

HARD

[hard badger]

hi guys, i have a problem that i cant get in touch with machines through VPN.

[gritty fern]

Dude

Why

[ashen bloom]

🤣

[wooden totem]

it was just a question "HEY unemployed person! Wanna do something?"

[void zodiac]

Obsessed..

[rapid merlin]

I would have been like, nah I’m good doing nothing 😌

[void zodiac]

More cringe content

[gritty fern]

r/masterhacker

[void zodiac]

Shhh

:(

[void zodiac]

Shhh

[cloud quiver]

Which platform is this 😂 ? Where're you finding these things ?

[ashen bloom]

OH MY GOSH, LOOKS LIKE HE DON'T KNOW WHAT DDOS IS...... HE CAN PERFORM DOS ATTACKS WITH HIS 5 DEVICES

[void zodiac]

Reddit

[wraith fjord]

hmmm i read DDOS

[ashen bloom]

[south egret]

humor me

[ashen bloom]

🥲

[south egret]

https://tenor.com/view/sad-sigh-monkey-gif-2049020038486032791

[boreal scarab]

https://youtube.com/shorts/OqIm4IuOqEU?si=XuIy9hsuqhwVllx-

[ashen bloom]

what he is doing

IF ANYONE KNOW TROUBLESHOOTING, TELL ME "why my both laptop and pc disconnecting usb connected devices like mouse and keyboard".... It's annoying now..... At least laptop has a touchpad,,, so i can use it.....

Is it a malware problem or a hardware related problem?

I also get an error message like "mscp.cfg not found" when starting windows in both devices since i got my usb disconnecting problem......

[boreal scarab]

https://www.nexusmods.com/skyrimspecialedition/mods/124947

It's a real mod

https://tenor.com/view/confuses-handsup-dontknow-hands-up-gif-24764458

[wanton schooner]

──(kali㉿kali)-[~]
└─$ subfinder -d example.com | httpx -title -ports 443,8443

           __    _____           __         

_______ / / / () / / _____
/ / / / / __ / // / __ / __ / _ / /
( ) // / // / __/ / / / / // / __/ /
//_,/.// /// //_,/___//

            projectdiscovery.io

Usage: httpx [OPTIONS] URL

Error: No such option: -t
[INF] Current subfinder version v2.6.0 (outdated)
[INF] Loading provider config from /home/kali/.config/subfinder/provider-config.yaml
[INF] Enumerating subdomains for example.com
guys i have tried everything but this is not owrking

what can i do ? to fix this error

[wraith fjord]

http://example.com ??

[ashen bloom]

update subfinder and retry

[wraith fjord]

also

[wanton schooner]

yeah i just replaced it with actual site

[wanton schooner]

it says already newest version

[past obsidian]

Hello

[ashen bloom]

go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest

[wooden totem]

I think you scrolled past 1380 inappropriate mods to find this

[clear jackal]

Is this for a THM room?

[boreal scarab]

Nah, bout 124,946 inappropriate mods

[clear jackal]

If so, #room-help

[wooden totem]

https://media.tenor.com/Uzuoa5jweoAAAAAj/among-us.gif

[ashen bloom]

I did google

[wanton schooner]

no

[clear jackal]

What's it for then?

[wanton schooner]

i m trying to learn recon

[fiery kite]

im just finding out the actual 0day is a mod here

[wanton schooner]

so i was just doin it in virtual machine

[sick lance]

What is example.com ?

[clear jackal]

What were you doing reconnaissance on? You said you changed it to example.com

[boreal scarab]

https://tenor.com/view/no-family-guy-bad-dog-newspaper-peter-gif-8108196576766934699

[clear jackal]

Oh, hi scrubz

[sick lance]

:wave;👋

[wanton schooner]

yeah i was doin it on actual domain which is allowed in program

[clear jackal]

Try reinstalling your drivers through device manager for the USB devices

[boreal scarab]

Not a mod

Senior mod

Get it right

[sick lance]

Which program?

[boreal scarab]

[wanton schooner]

bug bounty its really famous company , video i was learning from was also using same domain

[ashen bloom]

I tried, looks like a dumb thing for me..... May have to format windows and try again

[boreal scarab]

Can my damn 20 ft power cables arrive any slower?

[sick lance]

Can you share the scope?

[wanton schooner]

yeah wait

[ashen bloom]

wth, is your english

[wanton schooner]

😹 srry

[ashen bloom]

[wanton schooner]

it sspotify program i was doin on @sick lance

[wanton schooner]

──(kali㉿kali)-[~]
└─$ go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest~
go: github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest~: github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest~: invalid version: unknown revision latest~

what do i do now

[ashen bloom]

go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@v2.6.7

replace version in the last like it

[sick lance]

So where is the scope?

[wanton schooner]

https://hackerone.com/spotify

https://hackerone.com/spotify/policy_scopes

[crude stump]

What’s the difference

[wanton schooner]

@sick lance

[wanton schooner]

after this i tried to run the same command , its still not working

[rapid merlin]

Choccy milk making everything better

[wanton schooner]

what do i do now ?

[sick lance]

Have you checked the out of scope stuff, RE subdomain?

[wanton schooner]

yes its not that i wasnt using example.com

nd i was just following the tutorial

[void zodiac]

Pizzburgers

[wanton schooner]

wow

[sick lance]

Which tutorial?

[wanton schooner]

youtube video on recon

[sick lance]

Does the video do it on Spotify?

[wanton schooner]

yes

so how cna i make this command work i tried to save it in txt file but still not working ? 🥲

[ashen bloom]

may try to update with apt-get install subfinder

[wanton schooner]

it is showing same results

[ashen bloom]

[boreal scarab]

The title

@sick lance What's the difference between mod and senior mod?

Was going to ping James, but since you're here, you might know.

[ashen bloom]

looks like it is not a problem with subfinder

[wanton schooner]

then

[ashen bloom]

u shuld use double hypens in httpx options

[jolly ember]

Yes, now they are not displayed as they were before, which is very sad.
Either it was removed altogether, or there is a clever way to do this, which I do not know about.

This kind of view looks much cooler than just displaying icons.

[wanton schooner]

it says no such options

[sick lance]

Er...

Colour?

Senior mod can right click ban.

[boreal scarab]

Ooh, fancier punishments!

[neat tusk]

milk noises

[boreal scarab]

https://tenor.com/view/world-milk-day-dairy-milk-calcium-got-milk-gif-11940914203467054069

[rapid merlin]

how can i verify my acc, thanks ❤️

?

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 1, 2024, 6:00 PM

[sand trench]

coffee coffee COFFEE

[drowsy hollow]

https://tenor.com/view/hacker-hackerman-hacking-keyboard-typing-gif-12765516119677733425

[rapid merlin]

That's bavaria

[boreal scarab]

No, this is Patrick!

[sand trench]

beerrise name is patrick????

[boreal scarab]

https://tenor.com/view/lawyer-mike-i-invoke-the-fifth-5th-i-want-to-talk-to-a-lawyer-gif-24149446

[sand trench]

shadow pleads the third

[pearl raven]

pleads the third in third person, Shadow pleads the Ninth?

[sand trench]

hmmmmm

[delicate kite]

You can still view it that way

[sand trench]

so you telling shadow shadow pleads things that are not included in the constitution but ought to be???

like right to privacy

or right to love whoever

or right of indigenous people

[pearl raven]

I think all those things certainly should be protected, yes.

[sand trench]

The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.

for those wondering what the 9th entails

[pearl raven]

From what I have read Shadow appears to have those ideals, I apologize if I am mistaken?

I was certainly not trying to upset Shadow.

[sand trench]

oh sure but the american amendments have a hard time applying to shadow as a swedish citizen

[pearl raven]

Understood lol

[sand trench]

right to privacy is very deeply ingrained in shadow

[rapid merlin]

Got him

[delicate kite]

https://tenor.com/view/cats-love-puss-in-boots-big-eyes-wide-eyes-gif-12148910539632984319

[sand trench]

you just did

[delicate kite]

There was no question mark

[pearl raven]

Don't ask to ask, just ask.

[sick lance]

It's £500 for three questions.

[pearl raven]

Damn!

[delicate kite]

It's only one so its free?

[pearl raven]

That doesn't even make sense Scrubz, 200, 200 and 100? 250, 250, and 1 free?

[delicate kite]

First is free trial

[pearl raven]

lol

[sick lance]

Yes, now what's your third question?

Gottem.

HA!

[pearl raven]

Confirmed, Scrubz is an evil Genie.

[glass nest]

Nah. It's been established that Scrubz is a guy who won't get no love from me, when he's in the passenger side of his best friends ride, trying to holler at me.

[pearl raven]

lol, not many gifs that are 'pg13' for that...

[sick lance]

https://tenor.com/view/tlc-no-scrubs-90s-music-i-dont-want-dancing-gif-17860658

[glass nest]

Finally friday! This week has both flown by and dragged on. such a weird dissonance

[rapid merlin]

o/ people

[pearl raven]

Hey constant, how are you?

[delicate kite]

Right I can't even form my question

[glass nest]

It's cos it's friday, Mohamed.

[pearl raven]

@delicate kite https://tenor.com/view/im-in-your-head-you-cant-win-gif-8159346

^ Scrubz

[exotic vector]

It is hell outside

[glass nest]

You subconciously want to chill, so your brain is rebelling

[jolly ember]

No, I can't, - I give these screenshots as an example, which I saved for myself earlier.

[delicate kite]

I made it from pre security path up to red teaming path, and I feel like I stopped learning. If the room has no info or hints I don't think I can complete it, although from how much I have done I should be able to complete an easy rated room like "whiterose" or "ignite"? Any suggestions on what I should do, maybe I just need a break or something. I know the question is discombobulated, my mind can't form a proper question right now.

[delicate kite]

Go to your profile, and choose "share room badges", that's what you're looking for

[jolly ember]

@delicate kiteOooh, friend, this is what I need!
Damn, I was sure that this button does completely different things, which I didn't even click on. (thank you)

[primal kestrel]

ey tone i've been gettin into computers lately. cyber security. ton of bucks in that industry

https://tenor.com/view/sopranos-fiber-optic-cable-high-speed-internet-access-chrissy-sopranos-fiber-gif-18211585564397229690

[delicate kite]

https://tenor.com/view/operornas-opera-italiensk-verdi-bellini-gif-14792838

[pearl raven]

At a certain point breaks are necessary. I just took a week off from doing any security stuff. I needed it to clear my head and get back to learning.

[delicate kite]

No worries!

[sand trench]

https://tryhackme.com/r/hacktivities/practice

try the practice tab

with the based on your experience

[jolly ember]

I understand what you are writing about, it is necessary to alternate theory with practice (otherwise you will be an "eternal student").
I personally switch to hacking machines on other platforms. Make sure to pause in order to unload your brain from an overabundance of information, otherwise it will be "overloaded".

[exotic vector]

I need to practice, but im not sure at what point I can practice with my skill level

[dull river]

Yo

[pearl raven]

The link Shadow posted above will give suggestions based on that.

[exotic vector]

omg im so dumb xD thank you
shows what I can do based on my experience

[twin ridge]

Gave +1 Rep to @pearl raven (current: #78 - 88)

[dull river]

I am trying host Kali on my USB but I can't find it in bios I am using and hp computer

[pearl raven]

Not dumb.

[dull river]

Anyone here can help ?

[exotic vector]

is the image file burned to the usb stick as a bootable?

[rapid merlin]

The song is gonna be stuck in my head now

Now I’ve seen it, I can hear it

💃

[olive owl]

Do i get anything if i boost the server?

[delicate kite]

Yeah that's where I got the "ignite" ctf from my question, which I can't do without having a little hint from walkthrough...

[sick lance]

You get to ask for a gif to be added

[olive owl]

Huh?

[boreal scarab]

My dumbass was looking for my phone... panicking where it was...

It was in my hands... watching YouTube

https://tenor.com/view/homer-simpson-gif-3418239

[brave pilot]

guys how do you get the roles thing?

[exotic vector]

I have done that, I have even turned the flash on my phone to help me see in corners to see where my phone is which is already in my hand

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 1, 2024, 7:25 PM

[brave pilot]

like yk, subscriber and THM level

ohhhh do i verify in the discord or on my thm account?

okay tyty🙏 🙏

ah very cool, my roles are set to me automatically

[crude stump]

If someone has a domain, can they sell or disable it fast. The reason why I’m asking is because I’m analyzing a usps smishing scam I got. I put the link into url scan and it has a picture of the fake page. I wanted a more in depth picture so I tried to put the url into hybrid analysis but it says the domain doesn’t exist. The actual text said you have 12 hours to confirm your address(it’s fake) but I’m thinking, is it possible whoever is behind it sold or disabled the domain once that 12 hours was up?

[brave pilot]

whats the cyber crusader role about?

[boreal scarab]

When I was younger, I once called my mom. Asking her if she has seen my phone

I called her with my phone....

[swift ice]

or it was taken down by the registrar

regardless, I like Any.run as a free sandbox to visit URLs and detonate malware

you will have to use a business email though (a school email also works)

[crude stump]

That actually could be the case

[swift ice]

also, there was a cool talk at DEF CON about these USPS smishing scams
https://youtu.be/gLOv67LlIQs?si=zJCBYevULzKxGs3n

[crude stump]

If it is that’s good but a bummer cus I wanted to see it in a sandbox environment

[crude stump]

Aye

Bet

[swift ice]

yeah, the speaker basically did your work for you lol

but as always, there’s more work to be done stopping these guys

it has become whack a mole at this point

[silver sky]

This is my biggest gripe with it

[jovial reef]

Today, I got a smishing scam that when embedded, has a redirect to the real gov uk site but when you set the User-Agent to a mobile device, it will go to a malicious site

lol

It's weird

[crude stump]

Ooo

[silver sky]

It's to stop you digging on a PC

[crude stump]

Yoo that actually might be the thing

[silver sky]

No it isn't might. It is. Harder to analyse anything on mobile

Given your target is SMS too

[naive violet]

Most web browsing is on mobile devices now

[crude stump]

Hm is there a sms sandbox environment?

If that’s even a thing

[silver sky]

You can honeypot using SMS. Just make a phone number and get it out there.

But you can't "sandbox" SMS as you are thinking

[jovial reef]

Yeah, when I send the request in burp, I can intercept it on my mobile and somehow I still get redirected even when I use the same user agent and sec-ch-ua headers

[crude stump]

Looking at it through url scan, it shows the redirect and it’s to the official usps site

Damn criminals have to be smart

[jovial reef]

Yeah, it was a link shortener too and unshorten.it even said it was the real gov.uk site

Because it gets a 302 to the real site

[silver sky]

Burp is detectable

[astral relic]

how to unlock Linux Fundamentals Part 2

[jovial reef]

What's a better way than to use Burp do you think then?

[crude stump]

Thats interesting

Ima think over this

[jovial reef]

Do I have to make an emulator or something?

[astral relic]

without subcription is this possibile??

[silver sky]

Well it depends on how well they are at trying to detect Burp. There's ways to detect it and fuck with burp users.

[astral relic]

anyone help me plzzzzz

[jovial reef]

Yes

[silver sky]

If it's a subscriber only room, you will need to subscribe to access the content

[silver sky]

Be patient come on now.

[jovial reef]

Proxy and repeater is free without a subscription

[silver sky]

They wasn't asking about burp 😅

[jovial reef]

Oh

They replied to my msg 🤣

[silver sky]

I know

[astral relic]

i am new on tryhackme right now i dont want to pay for that now what should i do for learn about it

[silver sky]

Try other free rooms.

[crude stump]

There are tons of free rooms

[astral relic]

how?

[jovial reef]

Wait, so what would you recommend instead of burp?

[jovial reef]

Sorry, I thought you were asking whether burp is free

[silver sky]

Burp is good. Your Sec-Cha-UA is obvious

[astral relic]

what should i do for learn more about this

[crude stump]

We told you

[silver sky]

Try other rooms or subscribe.

[glossy mantle]

learn step by step

[jovial reef]

You have to have a subscription to do Linux Fundamentals 2

[crude stump]

Also there are some YouTube channels and websites that talk about Linux

[glossy mantle]

one step at a time 🤝

[astral relic]

can you suggest some room

[crude stump]

The Linux fundamentals are basically the bare basics of Linux

[jovial reef]

Ah ok, thanks :)

[twin ridge]

Gave +1 Rep to @silver sky (current: #43 - 199)

[crude stump]

A lot of it is online

[glossy mantle]

try the new room

[wooden totem]

I'm surprised I haven't received any sms scams/phish in years, cus I think I remember I used my same phone number and "used" it on some Spawn free gtaV money site

[crude stump]

Lmao

[glossy mantle]

cybersecurity 101

[crude stump]

Once you get a new phone number that’s how I got tons of scams

[astral relic]

thank you all for your suggetion

[wooden totem]

why would that be specific

[jovial reef]

If you respond to any scammer, they save your number in a database and sell it to other scammers I believe

[sand trench]

mmmmm modded noita is fun

[wooden totem]

I guess I never responded, I only got 3 contacts and ignore everything else

[jovial reef]

Why am I so happy about that...? idk

[crude stump]

Hold on I gotta learn burp suite now

[sick lance]

Burp is op

[swift ice]

it just sucks that the Pro version costs around 45 plates at Panda Express

[polar spoke]

hey you do radio stuff right?

[naive violet]

Decent amount yea

[polar spoke]

2.4ghz or mostly subghz?

[naive violet]

Got some 2.4ghz non wifi stuff in the works atm

[polar spoke]

looking at some 2.4ghz stuff for a project, bluetooth/wifi ranges but protocols are handled

currently, need to do some direction finding work and having a real hard time finding anyone doing anything similar

without BT5.1 CTE and phased arrays

[naive violet]

I had a similar thought recently

I want to see some 2.4G DF stuff

[polar spoke]

i'm about 10 seconds from just gluing some directionals together into an array and using RSSI

because i cant find anything useful in this space

[naive violet]

Hi gain, so highly directive, antennas are available

[polar spoke]

right, i've used them before for... stuff

just cant believe there's not even a directional sweep DF setup

[naive violet]

I'm mostly looking at satcom at the moment so I need stupid high gain as 2.4ghz power is expensive

[polar spoke]

i'm also looking at satcom equipment

but for terrestrial use

because satcom is the only time you find mobile-ish antennas apparently

winegard dishes and such

[naive violet]

Yep and usually hi gain

[polar spoke]

exactly

[naive violet]

The mobile TV sat dishes are all gonna be 10gig, I think S band TV is pretty much dead

Gain for a given dish is a lot less at 2.4 compared to 10

I'd probably look at a patch, there's a ham with some good 2.4g patch arrays

[polar spoke]

oh yeah, but a retro fit with some directional 2.4 feed means i can spin and sweep and hopefully get power/rssi related vectors

[rapid merlin]

Holy shit

[polar spoke]

i dont need trilateration or anything

[rapid merlin]

Chickenman

[polar spoke]

just vectors

[rapid merlin]

Ur cool af

[polar spoke]

🫡

haha

[naive violet]

Spin sounds difficult compared to sweep but I'd like to see it

[polar spoke]

i mean, it cant be that bad can it?

use an omni for channel select

then spin a channel specific feed until i get frames and measure angle and power

and repeat until decent confidence in direction

could probably coerce frames from the omni

to get repeated vectors faster

i dont need AoA or anything precise, just rough directions

2D

honestly i'm surprised at the lack of commercial availability for this

[naive violet]

If I remember, I can talk to my boss who's really big in the microwave bands

[polar spoke]

it doesnt seem that hard

but even the drone defense work is mostly around parsing packets for GPS info and not just straight direction finding

[naive violet]

ToA would be difficult, comparatively, but RSSI seems easy

[polar spoke]

right

[primal kestrel]

good watch. i can't believe they setup websockets to read any file on the host

[naive violet]

I'd get a patch or panel etc with a sharp null in the middle and tune to that I suppose

[primal kestrel]

FROM the victim

[polar spoke]

SiLabs has some AoA/AoD stuff using a phase array for BT5.1, but it relies on the 5.1 CTE spec for phase analysis

this thing

it seems to work relatively well, but without the client device doing CTE it doesnt really work at all apparently

which seems kinda surprising to me

i'd think at some point someone could slap together some coherent receivers and do ToA or at least a handful of directionals in an array to use RSSI

but i cant seem to find any good examples of it for this

most people seem to be under the impression that the "noise" on those channels defeats this

but i'm looking specifically for a usecase where noise is not an issue, very few if any clients powered on in range

[naive violet]

https://en.wikipedia.org/wiki/Direction_finding#Two-channel_DF

That's what I'd go with, two channel

[polar spoke]

yeah, that's going to be tougher

[autumn breach]

the whiterose room honestly shouldn't be rated as easy so don't be yourself up over that. Should be a medium difficulty at least

[polar spoke]

i'm trying to keep this within the span of man portable or perhaps vehicle based

so my distance between antennas will be quite small

looks like there's very few commercial options

if any

even the defense oriented ones appear to be sub 2GHz most of the time

https://www.morcom.com/direction-finding-systems

this one claims <2GHz with one model being "expandable" to 3.5

i'm wondering if it's just because of the hardware or if there's an RF reason why this gets so hard above 2

[naive violet]

So I've been reading about defense comms recently

For... reasons

[polar spoke]

of course

[naive violet]

(they released a nice pdf)

[naive violet]

Battlefield comms tend to be much much lower, not a lot above L band most of the time

[polar spoke]

yeah, of course

[naive violet]

Above a gig, it's hard to do stuff that isn't line of sight

So not a lot of point DFing a beam that goes practically upwards

[polar spoke]

which is crazy to me because modern battlefield comms Do use channels up there

[naive violet]

The ew sections in that doc I tagged you with are worth a read

[polar spoke]

they just dont seem to be talked about a lot

hmm cant reply in thread

[naive violet]

Might ahve to join?

[polar spoke]

not sure tbh

but as far as modern battlefield comms go

https://www.persistentsystems.com/radio-modules/

there's quite a bit above L band now

[boreal scarab]

Hey James and chicken

[polar spoke]

👋

[naive violet]

Yep, but where's it's sat all the energy is directed up

[boreal scarab]

How ya doing?

[naive violet]

So hard to DF something that you can't see

[polar spoke]

this P2P meshnet stuff

[naive violet]

Alright, busy week

[polar spoke]

man portable

https://www.persistentsystems.com/mpu5/

for the crowd favorite, the MPU5

this is how you would run the network backing your ATAK

adhoc mesh, somewhat often in C band apparently

even the "poor man" designs for doing this without spending 30k$ for a radio are all 5ghz based

common way to achieve that seems to be a custom firmware for UBNT Rocket M5 nodes

give it a paint job and some antennas and you get away with a cheap alternative to an MPU5

https://docs.google.com/document/d/e/2PACX-1vQ-CQPKQoxwUs22BxCVVWEgoi6T5WjK5gj4A6dTuFdoL3xQOzWndhEsBhI49IOAK_8EMrfJ6XgIs75I/pub

[boreal scarab]

Any new fun projects being done?

[naive violet]

Chipping away at the same old

[mossy river]

*Plugs in my computer*
Me: Haha imagine if it doesn’t start

My PC:

[boreal scarab]

[mossy river]

(Didn’t plug the power cable in)

[boreal scarab]

[mossy river]

It’s not my fault, all the cables behind the PC were plugged in 😭

The power cable wasn’t behind the PC 😂

[devout palm]

lul

[polar spoke]

they are quite popular these days

apparently

sweet

lol

[sick lance]

Whilst you're here.

I've tried searching everywhre, do you know a hypervisor where I can use VT-x passthrough, Hyper-V and Virtualbox claim my CPU doesn't have VT-X, however I know I do, I can run android studio on my host and emulate a phone, I can't do it in Virtualbox/Hyper-V

[polar spoke]

is it enabled in bios?

[sick lance]

For some reason it VT-X won't work via a hypervisor, and I also checked if I can WSL the stuff I need, but seemingly it won't see the ADB.

[sick lance]

Yes, as I can run VM's 😅

[polar spoke]

hmm

[sick lance]

And Android Studio uses it on my host for the emulation.

[polar spoke]

maybe it's not VT-x but something else?

like SR-IOV

and the error is being unhelpful?

[sick lance]

There is another error, I'll pull it up

Just need to boot it

[polar spoke]

ok

[boreal scarab]

You mean the HTC crypto phone? Lol

[boreal scarab]

https://www.htcexodus.com/us/cryptophone/

[shut hawk]

SVM mode enabled in BIOS too?

[sick lance]

Yup, like I said, I can run this on my host.

But in the VM it's telling me I can't.

[polar spoke]

weird

oh two layers of virtualization?

[shut hawk]

On vbox, in the settings -> system -> processor is the nested vt-x... enabled?

[naive violet]

Greyed out is a bad sign IMO

[sick lance]

It's because it's booted on.

[shut hawk]

What's your CPU?

[sick lance]

Unlocks when it's turned off

11th Gen Intel(R) Core(TM) i7-1165G7

[shut hawk]

oh wait

do you have hyper-v and virtualbox both enabled?

[lapis monolith]

hello can anyone tell me for pcap challenegs can i access the machine to my ovpn kali vm ?

cause i m asked to use tryhackme machine only

which is is very laggy on browser

[sick lance]

No, Hyoer-V is disbaled.

[north badger]

Anyone here good with Assembly programming cause Im currently losing my sanity

[wooden totem]

That's totally normal when writing assembly

[north badger]

i wanna cry 🤣

[wooden totem]

You should cry

[lunar bone]

Pwncat hasn’t been updated in years. Obviously still functional just wondered if there’s any alternative that’s maintained

[sick lance]

What ya doing?

[north badger]

Uni project and I'm getting integer overflow when tryna divide

[sick lance]

We can't help with University work, it's against our community rules.

[north badger]

Fair enough, Im just slowly losing my sanity as apart from this one bug its fine.

[exotic vector]

look look im light green !!!

[devout palm]

Nice!

[errant fossil]

Napping helps

[lunar bone]

Honestly maybe there’s room for a fork 👀

[lunar bone]

Shoot ur program

[lunar bone]

Nvm I think metasploit has everything u could want

[sand trench]

welp it is time for the sleepy sloopy to the beepity boopity for the meepoity moopeity

[brave pilot]

just hit lvl 3💪

😔

i'll do it now😔 🙏

there we go

thank you! I'm gonna be learning about packets and frames now💪 💪

[dusky bone]

https://www.flickr.com/photos/kevinkelly/albums/72157613562011932/

I thought this was an interesting site. I found it in the book I am studying. "Networking basics" an older book but still has some useful stuff in. All labs for networking.

[tranquil lark]

Finished the Cyver Security 101 path. Got 2/3 for all the big prizes maybe next time

[forest forge]

cool

[eternal timber]

Elo

[sudden pond]

WhiteRose done😄🙂

[drowsy hollow]

i have ~20% to go and everywhere 2/3 beside rank & streak freeze

[drowsy hollow]

but i dont think i will win something

[glass nest]

Not with that attitude you won't. gotta be in it to win it, and theres no point in admitting failure befre you've tried your very best

[brittle lynx]

Hey guys
Does anyone know a bug bounty hunter or a web assessment specialist ?
I am trying to decide if I should focus on web hacking and master it instead of being average at all stuff

[glass nest]

We see a lot of young folk come in here thinking that Bug Bounty is their key to getting rich quick - This is rarely the case. The most logical plan would be to 'git gud' (as the kids say) before expecting any returns on bounties. That being said, Nothing stopping you from signing up and seeing how they are structured and what is expected etc.

[brittle lynx]

But can u viably only hack web as a career ?

Or do employers not look for specifically web hackers ?

[molten sky]

you can find a job doing that, sure ---- it's not normally people's first job though

[glass nest]

Depends on the employer. However, remember, you want to make yourself a desirable person to work for them

Hey, Productivity 🙂

[molten sky]

many people internal transfer into it or move laterally into it from software or whatever non-dast 'else'

[molten sky]

hola friend

[crude stump]

We ❤️ gambling

[eternal timber]

Russian roulette?

[drowsy hollow]

Naah
I think i will master the rooms
Thats only a thing of time but the last 10 rooms or more i only got bad tickets 😄

[glass nest]

Have you learned anything from the rooms you did?

[crude stump]

90% of gamblers give up before they hit big

[glass nest]

86% of stats are made up

[drowsy hollow]

https://tenor.com/view/gamba-xqc-gambling-addict-777-gif-25803752

[drowsy hollow]

many rooms i did before and i reset them
All SOC related Rooms a new for me but relativly easy

[eternal timber]

Ye, that’s how you usually complete the rooms

[glass nest]

Well, if you learned anything, Then, in a way, you have won 😄

[brave pilot]

guys can you help me out please

[chilly veldt]

currently steaming all my clothes

[brave pilot]

am i allowed to ask for help?

[eternal timber]

I need to steam mine

[crude stump]

Of course

[chilly veldt]

of course

[eternal timber]

They’re all wrinkly

[brave pilot]

i'm stuck on a question but its not for school work or anything

just the course thing

[drowsy hollow]

yeah for sure
i never I have never been at the point where I can do things so easily.
Now I just don't stop again for half a year 😄

[glass nest]

Nah, At the very least you'll be back for the Advent of Cyber event 😄

[crude stump]

#room-help

[brave pilot]

thank you🙏

[drowsy hollow]

i write u private
Maybe i can help you

[brave pilot]

sure

[molten sky]

never that's illegal

immediate jail time

not even a trial

[dusky bone]

plus we cut ya noogies off!!

[keen light]

Does try hack me use guacamole to set up the clientless connection to the attack box

[fair lava]

Yes

So it allows them to access directly through browser

[brave pilot]

Oh sorry for asking😔

[blazing granite]

I think is pico de gallo

[keen light]

I’ve had that before at a friends very nice.

[brave pilot]

Nah i was just asking because my dumb self accidentally joined the mf hackthebox server instead of tryhackme discord at first so I accidentally made a hackthebox account

And in hackthebox rules oyu cant ask for help or smth idk i think i js read it wrong

[clear jackal]

What course?

[brave pilot]

Pre security - network fundamentals - firewalls 101

[clear jackal]

Yeah, for THM questions, #room-help is the best place to receive assistance

[brave pilot]

Yupyup i got help hella fast

[jovial reef]

By the way, can I ask for help for retired CTFs on tryhackme that aren't public?

[clear jackal]

I'm going to assume no, but I'll ask a mod for determination

[jovial reef]

Ah ok, thanks :)

Because I have done the CyberFirst CTF and there's this one IoT module that confuses me lol

[versed hinge]

man im exhausted.. been doing rooms for the last 9 hours

[jovial reef]

At least you can access the rooms 😃

I haven't had access to any of the tryhackme rooms for like a week

It keeps saying "User not in room"

[versed hinge]

did you click the Join Room button

[jovial reef]

I can't do any rooms on the platform whatsoever

The rooms that I have tried don't require joining

[versed hinge]

clear your cachce/cookies/dns?

[sick lance]

Was this TryHackMe's CTF?

[jovial reef]

It was, yes

[sick lance]

Ah, probably not, as I don't know if THM wish to make it public.

[jovial reef]

ah ok

[sudden pond]

wasnt it HTB's

[jovial reef]

It was one for schools I believe

So it's probably a different one

It was hosted on THM just over a week ago

[rapid merlin]

Anyone ever got this error?

[azure hill]

Try run the program as administrator

---

I convinced a scammer to click a grabbify link and it pointed to Nigeria, I can't resolve the IP though does anyone have any advice what I can do with the information provided by grabify

[mossy river]

This is illegal and against out community rules.

I would suggest that you not attempt to ‘hack’ people when you are clearly untrained. This can also disrupt ongoing investigations being conducted by police. Report them to phishing/ scamming forms and move on :)

[gentle rose]

😮

[azure hill]

Ah I see, my apologies

So how do people like scambaiter etc make videos about these kinds of things if its illegal (I guess it would depend on what country you're in also(Note I'm refering to law not community rules, which I respect)

[clear jackal]

They're fake

[rapid merlin]

I love being woken up by phone calls when I’ve already told someone not call but knock because I’ll be ✨asleep✨

[clear jackal]

Or, in some cases, done in conjunction with Law Enforcement

[azure hill]

Makes sense, damn

Still so many people irl getting scammed it's so sad to see

[molten sky]

when you are clearly untrained
burned

[azure hill]

ikr..

[clear jackal]

The most you can do is user education. It goes a long way

[azure hill]

Then tell the users they're untrained

[swift ice]

or just don’t do it lol

unless your name is the FBI or CIA, then “hack back” is illegal

[azure hill]

depends on your countries laws I guess

[swift ice]

tell the NSA that

[clear jackal]

I'd need to read their charters, but offensive operations are tightly restricted. FBI is also inward facing, so warrants are a must

[keen light]

I don’t follow content creator “hackers” much but one who does illegally hack people is Jim browning although he is kind of an activist so I don’t really have any objections to what he is doing.

[clear jackal]

Offensive cyber operations are technically acts of war

[keen light]

But I wouldn’t recommend it

[swift ice]

sure sure, I truly believe the FBI is doing what they say they’re doing /s

[chilly veldt]

it's also illegal for them 😄

[clear jackal]

If you have evidence that they are stepping out of bounds, you can report it to the multitude of watchdog agencies or the Office of the Inspector General as a whistleblower

[azure hill]

I'm reporting to the only relevant authority in my jurisdiction

I imagine lots will get done >.>

[keen light]

Yeah Governments do lie, but mostly when trying to protect citizens and operatives apart from some clear (historical cases) that are evidently wrong.

History is messy

[azure hill]

So how about all that nonesense from 'CIA' officials about how hackers have the green light against ISIS.. Is that BS also?

'proposed' US military operation

nothing official yet

wait I read further

I just realised all we can do as hackers 'legally' is educate other people to educate other people until we're employed anyway

hacking = pyramid scheme perhaps lol

depression is real

[keen light]

True could develop tools though maybe a RustMap or RustJohn

Farm those GitHub stars

[dusk tangle]

The DoJ in the US said that they won't charge you anymore for attacking stuff if they can't prove you weren't doing it in good faith security research

but I mean that's risky so

prolly don't

[keen light]

Although most stuff is like that, you can become a mathematician and then do math in your room but you won’t make any money unless your employed, but teaching will earn you internet “respect” and maybe some money if you have a donation scheme or are employed to teach (content creator). And as long as you know something that someone else doesn’t no matter how simple you can teach(as long as it’s correct :))

[rapid merlin]

Do u guys use docker or vm?

[keen light]

Both

But for what specifically

[molten sky]

Yeah Governments do lie
~~ what?! no, never, they would never do that, not my government ~~

[rapid merlin]

Im having problems with kali bc it's always breaking, stuffy24 told me to use docker to spin it up and down real quick. Idk what it means

[molten sky]

Yes

[keen light]

“hello I’m from the government and I’m here to help”

[dusk tangle]

who here plays D&D

[rapid merlin]

Like my main problem is that I spend so much fucking time downloading new Kali images bc it's always fucking breaking

[molten sky]

dockerized kali sounds annoying and near useless
vm for kali, easy choice

[keen light]

I just use it on my system live

[rapid merlin]

It's always breaking

[dusk tangle]

we should have a THM D&D campaign

[keen light]

Burn the USB 🔥

[molten sky]

exactly the words i was hoping to hear!

[rapid merlin]

Is there any way to go around the problem?

[molten sky]

would need more details. hypervisor, host, resource usage + allocation, error messages.....

[wild rose]

Actually Sophos just disclosed that they implanted back doors into their devices to identify Chinese APTs. Called Operation Pacific Rim. https://www.bleepingcomputer.com/news/security/sophos-reveals-5-year-battle-with-chinese-hackers-attacking-network-devices/

[rapid merlin]

Uhhh it's usually not a resource problem. It's that sometimes shit doesn't work and idk what to do to make it work so I delete the Kali image and I download a new one

And then the problem is usually solved

But it takes so much fucking time

Idk why he recommended docker for this

[molten sky]

that um -- that both answers little and raises more

you shouldn't have to redownload any new isos, the disk image remains unchanged

also can't say why things are breaking without knowing what's breaking or what's being done leading up to 🤷‍♂️
but when it does break, you should be able to rebuild with the same iso. but when it does break x2, you should be using snapshots to avoid needing a rebuild in the first place

well, assuming your hypervisor supports snapshots

[rapid merlin]

Lemme google it

[molten sky]

(but yeah, docker is quite a bit different)

[rapid merlin]

So a snapshot is like freezing the os so that it always stays like you left it?

[molten sky]

pretty much

a snapshot in time

[rapid merlin]

Mh nice

I can use that just after downloading Kali image

So it's always fresh

I'll try now thx

[molten sky]

I typically take three snapshots on a new build --- one immediately after install ('genesis'), one immediately after updating ('updated to...'), and one with the base required tweaks for my normal use ('with tweaks' + a desc)

(overboard for most, useful for myself)

[crude stump]

But that depends on the severity of the operation no? Like if a nation states starts causing power plant meltdowns that’s when it’s a act of war, but large scale spying via cybersecurity attacks happens all the time and nothing is really said about tensions rising because of spying. Or is the reason for that because it’s hard to pinpoint exactly where that attack is coming from. What’s your opinion on that

[molten sky]

i'm free ! finally cleared my github notifications
pages and pages of hacktoberfest spam PRs and issues

[rapid merlin]

I don't think my laptop supports snapshots @molten sky

I'm not seeing anything that I see in the tutorials

Like I have much fewer options

[molten sky]

your hardware shouldn't make a difference, it depends on the hypervisor

i.e. vmware vbox hyperv qemu etc

[keen light]

Do you do bugBounty/Ctfs while listening to music

[tepid furnace]

of course

[keen light]

What genre.?

Or just whatever?

[pearl kindle]

Hihi

[boreal scarab]

$130 for the setup I want for monitoring both my main and my VLANed network.....

Reee

[pearl kindle]

damn

[molten sky]

woah

OSCP is removing bonus points

interesting

and we're getting an expiring oscp+ alongside now as well --- 8570.01 compliance incoming?

[pearl kindle]

for real?

[molten sky]

seems to be [ref]

[pearl kindle]

maybe oscp+ but oscp stays indefinite right

[wild rose]

right

[molten sky]

yeah you earn both

[pearl kindle]

perf

[molten sky]

my guess is they want to become compliant with 8570 for the sake of getting that clearance moneys but also let people keep earning lifetime certs

[pearl kindle]

prob

[molten sky]

i wonder how long til they do the same thing for their other certs

can't imagine them stopping with the one

[pearl kindle]

let's see

[molten sky]

looks like 140 CPE credits over three years to maintain, with $135 AMF

[pearl kindle]

wah

[molten sky]

so 140 edu credits and $405 every 3 years to maintain

[pearl kindle]

that's why i love thm

[swift ice]

you’re about 2 months late to this news lol

wait until you find out OffSec got bought by a private equity firm a few weeks ago

[pearl kindle]

?!

[molten sky]

eh if it's not immediately relevant to work than i don't pay much attention often times
if not working i'd rather be away from my desk and technology as a whole tbh

[molten sky]

wat

[swift ice]

https://www.prnewswire.com/news-releases/leeds-equity-partners-acquires-offsec-302275836.html

[molten sky]

oh my

PE is the death of all things

[pearl kindle]

offsec is the new take-two

rip

[molten sky]

i wonder if the two changes are related to one or the other

[swift ice]

it’s most definitely a push to be on the 8570 list as many have already predicted

[molten sky]

lmfao wait why are oscp certs "Blockchain Secured"

[rapid merlin]

no idea

[molten sky]

looking at someone's profile and noticed that their oscp cert has a Blockchain ID number alongside

[pearl kindle]

welcome!

[rapid merlin]

been here for days, but ty

[molten sky]

the "Blockchain Record" was created 3 years after the cert was issued as well. huh.

[pearl kindle]

i don't believe it's related

[rapid merlin]

^

probably some way of verifying who they are, 0 clue

[molten sky]

wish i could compare but i don't care enough to see another person's profile

Accredible for those who are familiar

[pearl kindle]

ya

oh yeah i forgot to say, i said days earlier that i had a potential job for devsecops, i refused the offer 😦

[molten sky]

should've sent em my way lol

[versed hinge]

awe yeeeah, hacker in 4 days

[pearl kindle]

bro if you saw the offer

i will keep being a devops engineer for now i guess

but i really want to be a devsecops

[boreal scarab]

Canceled that order... back to squire 1 cause AIO I was going to use isn't powerful enough... fuck

[wind mantle]

I created a video on YouTube about the new Cyber Security 101 learning path. And I sent an email 7 days ago to get the 5 Extra Tickets! But no answer yet . What should I do?

[clear jackal]

8570 is deprecated

It's 8140 now, I haven't seen OffSec mentioned yet

[molten sky]

eh i keep hearing that but it's still all i see
is it finally official?

[clear jackal]

8570 has been deprecated officially for a few? Maybe 1 year(s)

Part 3 of 8140, the cert and experience part, was just released iirc and is readable on https://public.cyber.mil

[molten sky]

is the cert matrix the same? i'm getting a very similar result for that part of it

seeing a weird new qual matrix tho

[clear jackal]

Cert matrix doesn't really exist anymore, afaik

[molten sky]

hm

All of the DoD 8570 certifications did carry over to the DoD 8140 Cyber Workforce Qualification Program, and they were aligned to the appropriate DCWF Work Role and DoD 8140 proficiency level.
well that's worth something I suppose

[clear jackal]

I'm not really dealing with that stuff anymore day in and day out, so my info on the new stuff is going to be a little skewed

It's been a mess though

[molten sky]

i just remember "it's gonna be deprecated for real this time" about 73 times

delays and delays

never read much into it beyond that

might read up now that it's a real (and in effect) thing

[clear jackal]

It was deprecated for real within the last 4 years

I can't remember specifically, time is mushing together for me

[molten sky]

i wouldn't doubt it --- I haven't followed too closely. haven't had a need 🤷‍♂️

[clear jackal]

I know it was deprecated because it had a direct impact on my life lol

[vestal phoenix]

I'm re-watching Mr. Robot. time really does fly.

[crude terrace]

hi everyone, i am unable to to solve this question "When was the twitter.com record created? Provide the answer in YYYY-MM-DD format." even though i write the correct answer "2000–01–21". i am getting incorrect answer popup

can anyone help me

[dusk tangle]

can you show a screenshot?

[vestal phoenix]

What type of attack would this question be vulnerable to ?

[crude terrace]

I am unable to get screenshort

here

shot*

but this question is part of "Networking Core Protocols" part 3

[wild rose]

plz ask room related questions in #room-help

[boreal scarab]

https://youtube.com/shorts/iwReGF63ad8?si=gePj43gxDsBR2Hvi

Have fun with this

[molten sky]

well that was tasty

don't really have food but i found some still-good cream cheese i forgot we had and tortillas, so i made a couple cinnamon roll up things

[rapid merlin]

Is it easier getting a job in networking than in cybersecurity?

[molten sky]

probably, but lacks details

lvl 1 soc guy and new networking guy are probably similar

not equal but close

[lunar bone]

 The tool is made by someone that does not read the nmap man page. The tool just try to connect to the 65K ports in big batches. This approach will give you tons of false negatives and firewalls will block you instantly (or just fake the exposed ports).

But the worse thing is... that you can do exactly the same thing with nmap. The params by default in RustScan are 4500 connections at same time and 15000 ms. If you set the same in nmap...:

nmap --min-rate 4500 --max-rtt-timeout 1500ms scanme.nmap.org -p- 

I just read this about rustscan :\

not only is this correct from my benchmarking nmap with those flags is faster

[keen light]

Buts it’s Rust

That makes it automatically better

[lunar bone]

and it has lolcat

by default

[keen light]

Tmux 4 way split with cmatrix vim and gtop arch desktop rustcan and coding socks

I hate rainbows and lolcat

I also hate RGB

I haven’t looked into rustscan , is it just nmap but rust.

[lunar bone]

yeah tryhackme recommened it for koth

to scan faster

was a troll

any of the crazy fast stuff like masscan (that's actually fast) give hit or miss results just because of the speed

[keen light]

So basically just nmap ported to rust

[lunar bone]

yep

and THM boxes can't respond fast enough for it to make any meaningful difference from what i'm seeing

[keen light]

Soon rust will assimilate the Linux kernal.

[lunar bone]

rust is bad

overly complex

[keen light]

I like it, but that’s just me C is very nice tho

[lunar bone]

worst of c and higher level languages combined

c is good because it's old

[keen light]

What language do you like.

[lunar bone]

go

[keen light]

I like c because it is so basic to understand but then gives you infinite freedom after that

[lunar bone]

@daring arrow

[keen light]

Go is good I’m probably gonna learn it next

[lunar bone]

it has some weird stuff

but for the most part its super fun

[keen light]

nil

[lunar bone]

nah thats not that weird

[keen light]

What’s the worst bit

[lunar bone]

tabs is

it wants tabs

[keen light]

In rust it’s anything Async

[lunar bone]

is anyone else seeing starts in expired for koth

what happened

nvm

blud how does drew already have a flag and I can't connect to the box

[lunar bone]

someone really disabled ssh during koth

how fun

and no ones resetting it except me 💀

[wraith fjord]

howdy

[lunar bone]

hi

[rapid merlin]

did Russia actually fine Google for $20,000,000,000,000,000,000,000,000,000,000,000 ?

[lunar bone]

yes

it has the same meaning as me saying im fining u 2 gajillion $

[rapid merlin]

crazy

[lunar bone]

kernel modules are hard 😦

apparently the version i'm running of kali kernel headers just aren't easy to find

and wsl uses weird kernel

[stray tapir]

Hello

[versed hinge]

WSL is just windows pretending to be Linux.

[lunar bone]

Custom weird kernel

[static coyote]

hi friends

[arctic cradle]

Google emailed me if I could give them a loan so I did..

puny money

[crude terrace]

anyone interested to train together

[terse edge]

quick question, what if i run out of rooms to complete and still haven't gotten a complete ticket? (free user) for trywinme

[sick lance]

Then that's ok you're not assured to win anything.

[olive owl]

Amazing

[terse edge]

alright, thanks

[exotic vector]

hiya everyone

[sick lance]

👋

It's a wet day for some OCR training, which means the fields will be bogging!

[exotic vector]

hopefully it wont be too bad for you.
its a bit murky here.

[compact quest]

Hello

[exotic vector]

hiya

[wraith fjord]

https://tenor.com/view/winter-arc-gym-bro-you-might-bro-winter-gym-gif-9852791732676612091

Me after having unhealthy amount of sweets

[compact quest]

I'm new here

Happy Halloween

[exotic vector]

welcome !

[compact quest]

thx

[sick lance]

This is the best conditions.

Especially going through the burn

[glass nest]

I see OCR and I think optical character recognition, but realise.. that can be right if you are talking about boggy fields.

[polar wraith]

is it possible to get the cyber crusader rank removed from my profile

not that i want to

just curious

[exotic vector]

fair enough

[neon merlin]

It goes when the event ends

[polar wraith]

no it doesnt

its permanent lol

[neon merlin]

I'm sure it was said in here that it would go away when the event ended before

Also:
"How long do I keep the Cyber Crusader level?

When the ticket promotion is over (4th November), your 'Cyber Crusader' title will disappear and your level will be recalculated."

[exotic vector]

@stark gust I changed my notetaking regime a little. And its working out better for now.

[exotic needle]

Does anybody know how to stop rsyslog daemon process in linux

[polar wraith]

bruhhh

whats the point then

[exotic needle]

It didn't work 🙂

[sick lance]

No it isn't.

[polar wraith]

that sucks

[exotic needle]

Stopping rsyslog.service but its triggering units are still avtive
Syslog.socket

[exotic vector]

im using joplin, so I have nestled folders for learning paths so each learning path folder has another folder for the main topics where notes for those topics are and a lab task folder.

I started to do my note write ups once I have done with doing rooms for the day, or done the next morning.

I still have to transfer my notes to joplin though but gonna do that when I have a little more time, so probably sunday night lol

[sick lance]

What are you doing this causing you to want to end it?

[exotic needle]

Just don't want to make my system activity logs

[sick lance]

Make it what, sorry?

[exotic needle]

I want to stop making logs

[sick lance]

sudo systemctl stop rsyslog.service

[exotic vector]

yeah no not gonna do that xD
I done it this way with joplin because it syncs to my phone and uses markdown.

it is, its so quick to just put a code snippet or create headers or make a page wide line to seperate sections up.

[exotic needle]

Again this error..

[sick lance]

You're going to have to find what is still triggering the logs.

Is there a reason you want to stop the logs?