general

[glass nest]

You're old now

[devout palm]

As you are

[lost birch]

What's wreath? Like the Christmas thingy?

[sand trench]

one of the network rooms on tryhackme

[pallid lotus]

It also barely works, although that's on the TryHackMe infrastructure side. Network itself is fine.

[pallid lotus]

Speak for yourself!

[sick lance]

https://www.tryhackme.com/r/room/wreath

[pallid lotus]

Right, okay, I am 23 ffs

[chilly veldt]

that's old

[devout palm]

Try me. 19

[shell nova]

lol

[pallid lotus]

... I hate you all

[devout palm]

[glass nest]

Well, it worked well enough to teach me how slow proxychains are 😄

[lost birch]

fair enough 🤣🤣

[boreal scarab]

We love you too!

[devout palm]

Muirr how it feels like to be old

[chilly veldt]

my eyes and brain hurts

[pallid lotus]

I dunno. Give it four years then you tell me

[glass nest]

Also, theres not a lot of hands-on labs for practical practise on pivoting

[devout palm]

I don't want to be 20 years old

[lost birch]

what's 19 like

[silver sky]

I don't remember it

[pallid lotus]

Ugggghhhh, I really want that pillar drill

[boreal scarab]

Omg, Fallout 4 collections take forver

[devout palm]

You hack stuff and call Muiri old

[sick lance]

What's stopping you?

[glass nest]

Black Friday isnt for a few days 😄

[boreal scarab]

oh @silver sky When you asked Squad, you mean Squad 44?

[silver sky]

https://tenor.com/view/doja-cat-star-wars-gif-25078126

[lost birch]

Sounds fun 😭😭 and a lot like 18

[silver sky]

No

Squad

[boreal scarab]

Oh, then still no lol

[glass nest]

A pillar drill really ups your forstner-bit game

[silver sky]

https://store.steampowered.com/app/393380/Squad/

Steam

Squad

Squad is the embodiment of tactical military action. Compete in massive-scale 50 vs. 50 battles in the most realistic combined-arms first-person shooter. Squad emphasizes combat realism through teamwork, tactics, and authentic warfare. A wide selection of realistic faction-specific weapons and vehicles allow players to build their own loadouts t...

Price

$49.99

Recommendations

141950

▶ Play video

Get it

[pallid lotus]

I also want a new mitre saw... And I want to see if I can get deals on both lmao

[boreal scarab]

I have so many games

[sick lance]

Oh, Black Friday soon.

[glass nest]

Oh your poor bank acount. RIP.

[lost birch]

What's a pillar drill...

[rapid merlin]

Squad my beloved

[pallid lotus]

I can already take £50 off the total bill, but it'll still be £600 odd

[lost birch]

Actually I'll search it up

[silver sky]

So you can join me and @lone thistle in walking 5 miles, digging a hole and then dying to a person hiding in a bush

[pallid lotus]

Hence waiting a few days for black Friday

[lost birch]

OOO COOLLL

[pearl raven]

Pillar Drill in the US is a Drill Press I think.

[lost birch]

I remember these in DT class!

[pallid lotus]

Watch me find a freakin' table saw as well

[pearl raven]

Not sure what it's called elsewhere.

[lost birch]

When we did woodwork

[glass nest]

Synapse - It a drill thats basically mounted so its solid. You can then use a lever to push the drill down, so you know it's dead straigh

[lost birch]

They were funnn

[shell nova]

could be useful

[lost birch]

I liked the belt sanders though 🙂

[pallid lotus]

The number of rip cuts I know I need to do is steadily mounting

[pearl raven]

The ones I have at work... like to walk a little 😦

[pallid lotus]

And my track saw ain't brilliant

[sand trench]

why does everyone need a saw just for sawing tables??? sounds like a very weirdly specific saw to need

[lost birch]

Ahhh that makes sense unc 🙂

[pallid lotus]

...

[lost birch]

can I call you unc

[pallid lotus]

It's a saw mounted into a table

Go search it up

[boreal scarab]

Sounds about Hell Let Loose ish

[glass nest]

Course you can Synapse. It's the name I chose 😄

[sand trench]

should have marked that with joke probably

[shell nova]

I could use some actual tools but I know I'll never use them

[lost birch]

😂😂

[devout palm]

I use pen to cut wood

[pallid lotus]

Probably

[silver sky]

I use my fist to cut wood

[devout palm]

Minecraft mentioned

[glass nest]

Muiri - have a bit of a google, but theres a guy (I think it's Izzy Swan, Maybe?) who made a jig to make bowls on a table saw. The thing looks mad.

[pallid lotus]

I use your head to cut wood 😁

[pallid lotus]

How the heck does that work?

[naive violet]

In layers?

[silver sky]

It's an effective tool

[glass nest]

Very dangerously 😄

Like rocks it over the blade

[pallid lotus]

That's...

[glass nest]

Lemme find it

[pallid lotus]

Well, that sounds like a good way to lose a finger

... Or 10

[devout palm]

Cmon 44

[silver sky]

What is life if you don't have danger

[devout palm]

Folks

[glass nest]

https://www.youtube.com/watch?v=3SOWA5Rev6U

[pearl raven]

Eh, they make blades that sacrifice themselves when in contact with anything conductive.

Shouldn't get anything more than a slight nick 😛

[lost birch]

Folks

[pearl raven]

https://tenor.com/view/sausage-weiner-machine-saw-slow-motion-gif-17810821

[lost birch]

that almost hurt

[jolly plume]

cower before the glizzy

[silver sky]

https://tenor.com/view/washing-hands-fire-sparks-grinder-gif-16535412

[devout palm]

Must kill all the bacteria

[pearl raven]

I should clarify, the blades don't sacrifice themselves persay. There is a brake built in that shoots itself into the path of the saw teeth, effectively stopping the blade spinning, and shearing off several of the teeth in the process. It's very quick, and it's a fantastic safety feature.

[lost birch]

That's some clever tech

[silver sky]

Or the solution is, just don't stick your fingers near sharp spinning blades

[pearl raven]

Common sense isn't common?

[glass nest]

Jowp, yeah, I saw somthing like that, SawStop?

[pearl raven]

I think that's the name, yes.

[naive violet]

Even better though
Do both!
Have a safety mechanism in case. As you wear a seatbelt in a car.

[glass nest]

I know they do other stuff like beasty fences and stuff. Looks like they are starting to move towards th UK

[naive violet]

It's risk, same as cyber
Reduce the likelihood (keep your fingers away) and the impact (make the blade stop and not take your fingers off)

[glass nest]

Right tool for the right job, Zumi 🙂

Nice, James. i like what you did there Keeping it relevant 😄

[pearl raven]

Same reason I have a silicone Wedding Ring 😛

[glass nest]

Cos you can't be trusted with metal?

[naive violet]

You build a lot?

[pearl raven]

Work with lathes, drills and mills often.

[naive violet]

Work work or hobby?

[pearl raven]

Both, the company I work for mainly does electronics/IT, but we do produce some wooden / acrylic products.

[naive violet]

Nice

[pearl raven]

It's fun, I get to mess things up every now and again 🙂

[storm niche]

Hai

[tidal frigate]

heyy guys

[glass nest]

Do they let you use some of the equipment for your own projects?

[pearl raven]

I have free reign. I should clarify, on my own time, not the companies 😛

[glass nest]

Thats bangin'

[storm niche]

Do anyone know de OS footprinting or attempted it?

[jolly plume]

also fresh here -- hey

[storm niche]

Hey bro

[lost birch]

what is that?

[lost birch]

hey!

[storm niche]

It's when you detect the OS of the device connecting to your network via your IDS/IPS

[tidal frigate]

ohhh blue team stuff i think

[storm niche]

it's really difficult that's what I heard

[tidal frigate]

but i havent done it

[lost birch]

yeah thats blue

[tidal frigate]

nothing is difficult i mean if you are curious about it its gonna be fun learning it so it might be "complex" but not difficult

[lost birch]

couldnt agree more

[tidal frigate]

[storm niche]

Oh my bad is SOC I Red team?

[storm niche]

Amazing!

[devout palm]

SOC is blue team

[storm niche]

I'm doing de SOC I cert or trying to going slow like I did in Security + I did them both slow

[tidal frigate]

soc is = detecting, monitoring, investigating, and responding to security incidents to defend an organization from cyber attacks

[storm niche]

Ok great

[tidal frigate]

so yeah blue team

[jolly plume]

just got my A+ cert in september. going to start on a network cert next year and started a tryhackme account to have fun in the meantime

[devout palm]

I like both red and blue team, since malware analysis can be considered as blue team

[silver sky]

compared to malware development and execution 😉

[lost birch]

ooo malware analysis is blue team?

sweeett

[devout palm]

Mostly SOC level 3 afaik

[silver sky]

Red Team = Offensive
Blue Team = Defensive

[devout palm]

It depends on the company though

[devout palm]

Yeah i did not want to say that xd (Obviously not executing)

[pallid lotus]

Holy shit this guy is a nutcase

That actually worked really nicely though

Who needs a lathe, amiright?

[silver sky]

Yay time to read through boat loads of crime statistics

please end my suffering

[boreal scarab]

My laptop speakers just creaped me the hell out. Playing heavily modded Fallout 4. Nora is talking... and I thought it was actually coming from behind me WTF

[glass nest]

You shut your filthy mouth

[pallid lotus]

Just use the damn table saw, duh!

[glass nest]

Hehe

[granite narwhal]

I acheive

I acheiced conference in kuwait so I want to show you my cerftication

[jolly plume]

let's see it

[devout palm]

Erm

[abstract laurel]

Hello, here the domain and subdomain points to same IP, but how does browser/server know which website the client is requesting

[fair lava]

DNS resolution maps all subdomains to same IP, while browser sends HTTP request with the host header specifying subdomains or domains

[winged saddle]

Just a thought: imagine you are in your room. And everyone is asleep, but you. And you hear your door bell ring after every hour....what will you do?

People say, best is to call the cops when you are 100% sure something is off....

Plot twist is here: the door bell is not located outside the gate but, outside the wooden door that leads to your garden and then comes the gate......

Someone's definitely inside or is the machine malfunctioned?

[fair lava]

I would be too lazy to even think about it tbh...

[winged saddle]

The bell is really loud

[devout palm]

Scary

[winged saddle]

Had to stay up till 6 am

[devout palm]

How did others not wake up

[winged saddle]

I don't know

Maybe they were deep asleep?

[naive violet]

The browser doesn't know
The browser asks for the content and the webserver provides it

[abstract laurel]

Sorry, my question was not clear.. i mean, as domain/subdomain all will resolve to same ip, how does server knows which website to serve to the client

[fair lava]

Based on host header included in the HTTP request

[naive violet]

Then yep that's the Host: header
It's called vhosting if you'd like to look into it more

[abstract laurel]

thank you everyone

[split compass]

Hostnames are only important to your computer.
Either it will be resolved internally (From a local cache or hosts file)
Or via DNS (In that order).

Your web browser then connects to that IP, compares any certificates found to the FQDN you provided, informs you of any matches or mismatches.
It further provides a header full of information including the requested URI/FQDN.
As part of the FQDN above, the web server can provided you the appropriate vhost, or an application router/HTTP Proxy can redirect you to the correct internal system or VM.

[naive violet]

Fwiw, vhosting doesn't have to be FQDNs

FQDNs is more of a dns thing, vhosting and dns are related but very much separate

[split compass]

True, I'm just used to seeing vhosting rely on the FQDN, usually if someone wants to do something off the rest of the URL I tend to see HA Proxy or NGinx reverse proxy.

There's a lot of overlap in some of the web technologies with minor nuances.

[naive violet]

that's if you're being sensible with it lmao

Also FQDN being fully qualified
VHOSTs don't have to be

[split compass]

That's true.
I've seen vhosting used to backend without an fqdn referenced from a front end public facing server via fqdn.

hostname only routing shudders

[abstract laurel]

Guys, i used to take notes in Notion app because of its cloud sync function in my windows(host) machine.. i dont take notes in virtual machine(kali) as i feel it can crash someday... But Notion is very laggy and slow.. any alternate better note taking app where i can sync to cloud and access from other devices..(free app)

[silver sky]

I love notion, so idk

[abstract laurel]

i take a lot of screenshot and i think because of this, its very slow sometime

[split compass]

Everyone's going to tell you Obsidian.
I'm not saying they're right or wrong, I haven't used it, but that's what I hear every time its asked 😄

[abstract laurel]

is it fast compared to Notion, free and can be access from any devices?

ill have a look..

[split compass]

I was looking for a relational notes app recently, and, decided I'm probably going to end up running a wiki and just using git to back it up XD

[fair lava]

evernote or obsidian yes

[shut hawk]

or trillium

[sand trench]

if you need cloud sync and need it for free that is a hard thing to come by

technically obsidian can do it over git but then you gotta use git repos and know how protect those

[split compass]

If you have keybase, it supports git protocol and would be automatically encrypted with your PGP key. So I guess that's an option.
I still use it even after the purchase, but I'm going to migrate away from it as I start self-hosting more.

Apparenlty Proton's free tier includes Proton Drive, which would probably be enough for simple notes storage.

[sand trench]

well shadow was talking about in client sync methods

but yeah other online storage methods can work for not storage too

anyways shadow has a headache and wanna be up decently early tomorrow so it is now meep moop to the beep boop for the sleep sloops time

[devout palm]

Good night

[crystal mauve]

anyone got any good recoomendations for notetaking? currently using a private discord server

[high mulch]

💀

[devout palm]

@sick lance

[high mulch]

Oh god!

[grim sparrow]

:hammer: aron7303#0 has been banned.

[grim sparrow]

[BAN] User left the discord server.

[devout palm]

Thanks jabba

[wild rose]

I don't know what I missed but it looks like it needed everyone on deck.

[jolly plume]

lmao

[high mulch]

https://tenor.com/view/its-madness-william-frawley-jk-simmons-being-the-ricardos-thats-insane-gif-24212269

[crystal mauve]

are any of those free?

onenote isnt free

[high mulch]

neovim

[shell nova]

oof @ Affero GPL

[devout palm]

VIM ftw

Markdown Preview mode

[teal wharf]

i thought notepad was enough 😭

[crystal mauve]

neovim looks like mostly for code/i'm taking the majority of screenshots (fornow)

does it have a place for my screenshots?

[high mulch]

yes and no

[devout palm]

Obsidian is good for pasting screenshots and it appears on the current folder (You can change it)

[crystal mauve]

ohhok

hmm its free, how do they make their money

[pearl raven]

There are some parts that are not free.

[devout palm]

Also some services take donations

[crystal mauve]

download done ty

omy, the logo is so sexy

[glass nest]

Thats how you know it's a quality product

[crystal mauve]

hah

[lost birch]

I want to do researchhh

need me some intel 👀

[glass nest]

Ok. look up how to do a XSS attack

[lost birch]

okay!

ive heard of that

[glass nest]

And now you'll know what it is and how to do it 😄

[lost birch]

i forget what the types are like stored and the other two

which i forgot

[teal wharf]

hey uncle sqy . how u doing

[glass nest]

Zumi - Many peoples are 😄 I think Jameses is aswell

Why you all blue, Hix?

[lost birch]

wdym your first CVE though

[teal wharf]

I evolved it seems

[lost birch]

the first CVE you exploited?

[silver sky]

https://tenor.com/view/neebs-promoted-yeah-yay-bff-gif-11512732

[lost birch]

oh wow fair play

[glass nest]

Gratz, hix 🙂

[lost birch]

what is a CNA? 🙂

[teal wharf]

thanks

[twin ridge]

Gave +1 Rep to @glass nest (current: #18 - 453)

[silver sky]

1028 out of 1500 words. ALMOST THERE.

[glass nest]

cmon, synapse. stop getting distracted - XSS, Go 😄

[teal wharf]

i wish to use a static discord token , but it is what it is

[lost birch]

oooooooo

[teal wharf]

i guess this token is tracking me

[lost birch]

okay okay XSS

[glass nest]

Hey, you asked for something to research :p

It's a good arrow to have in your quiver

[silver sky]

the best arrows are explosive

[glass nest]

Explosive Cross Site Scripting? Thats gotta be a room idea 😄

[shut hawk]

All the elements explode

[grim sparrow]

There are no URLs in that message.

[lost birch]

ummm

[silver sky]

Explosive SQL injection'💣

[glass nest]

With explosions?

Yeah, but the X makes it sound cool

[teal wharf]

true dat

[high mulch]

https://tenor.com/view/javascript-undefined-undefined-undefined-my-beloved-undefined-heart-locket-typescript-undefined-gif-7120495185284007187

[silver sky]

XPLOSIVE SITE SCRIPTING

[hexed steeple]

ssti 😍

[silver sky]

Don't forget about XXXSS

[teal wharf]

when was the first xss attack discovered

fr ?

well whoever discovered it , for sure was a mastermind

[silver sky]

https://www.youtube.com/watch?v=fWk_rMQiDGc

[teal wharf]

people who actually think out of the box

[lost birch]

im going to carry on after i finish my duolingo#

[silver sky]

Don't forget the https://en.wikipedia.org/wiki/Samy_(computer_worm) Samy Worm

Samy is my hero

[lost birch]

i remember this episode

[glass nest]

See Synapse? XSS is cool 🙂

[lost birch]

XXL

omg my duolingo i keep failing

[glass nest]

And a Square. and a Circle. You... you a squid game?

[lost birch]

i will carry on with xss

after this

[silver sky]

I have a hammer payload I use sometimes

https://tenor.com/view/hammer-gif-23464742

[lost birch]

ogporegjkeopqgjre i got it wrong again

does it draw a triangle

thats jokes

[glass nest]

The 'bermuda payload'

[lost birch]

I FINISHED MY DUOLINGO

[glass nest]

Good. Lets hope your daily sacrifice appeases that evil owl

[teal wharf]

duolingo knocking on your door 🤜 at 3:00 am . u openning the door ? yes or no (for the streak u abandoned)

[lost birch]

yes (i have a baseball bat within arms reach)

[high mulch]

https://youtube.com/watch?v=twE-zdUkB_U

for anyone that practice MMA or any MA.
I thought this video was interesting.

[lost birch]

Ohhh i remember this!

I remember the guy who did RockYou used to go to websites and just put speech marks in entry fields

[lost birch]

I'll watch this later :0

[high mulch]

https://tenor.com/view/duolingo-gif-27056073

[high mulch]

Totally, this is something I started doing in practice, years ago. And also to select better any sparring partner, since a lot of people tend to have a lot of ego or fragile one when sparring.

[silver sky]

I still spar

¯_(ツ)_/¯

can't damage what's not there

[high mulch]

TLDR of the video is not to stop sparring, is to do it properly.

[silver sky]

Oh good.

[glass nest]

Yeah, I found that when I was doing sword-fighting with some other nerds. One in particular offered to 'teach'. but his teaching simply involved showing the 'student' that he could whoop them over and over.

[normal fable]

Hi

[glass nest]

Annoyingly he was kinda good. Not because of his skill, He was just like 6.5ft tall, so had ridiculous reach. If he was less of a doorknob, he would be a valuable person to learn from

[normal fable]

Been a while. How's everyone doing?

[teal wharf]

not anybody can be called "teacher" really

[silver sky]

Don't forget Charlie Zelenoff, what a jackass.

https://www.youtube.com/watch?v=lBQ9nZAsJBw

[glass nest]

Yeah, but it was the best way I could say it on here :p

[high mulch]

Oh this a hood's classic

[pearl raven]

Can confirm, Muay Thai and Wrestling made me dumber 😄

[pearl raven]

Yeah sparring is essential. I only spar with people I know, and I do not bring ego into it ever. I let my partner set the pace usually 🙂

[silver sky]

[pearl raven]

That's just a landmine of a statement...

[high mulch]

That's absolutely how it should be. And for the last part of the sentence, that's good. That's why I limit myself nowadays to practice by myself, and concentrate on the Art part of Muay Thai, which I luv.

[nova kelp]

i need somw help with my facebook account who can do so

[high mulch]

Good thing you didn't go to the boxing route.

[mossy river]

Facebook support can help you:)

[teal wharf]

let me guess u want help hacking a fb acc ?

[pearl raven]

Lemme tell you about my teenage years 😛

[high mulch]

Oh no

[pearl raven]

I was fortunate enough to avoid injury and too much head trauma 🙂

[blazing granite]

Without getting this to the political arena, which I have no intention to do. I'd say that it's no really jew, but more Israelis. Israel invest in their people and it shows.

[nova kelp]

no facebook could not i want to get my acc that was hacked back it is part of my career im a musician and cant do my thing without facbook

[silver sky]

https://facebook.com/hacked

[lost birch]

this game is fun

i am learninggrgega

thanks unc

[high mulch]

@pearl raven
In one of my previous jobs, I had this supervisor, a very nice gentleman, what I know of security and helped to get to supervisory positions, was thanks to him.

He used to box, and one of the things that led me to decline his offer to be trained by him, was him himself, the migraines he'd get, oh no... The medicine he had to take, was "oof" and that's an understatement. I would have to cover for the rest of the shift for him, because he'd be dozing off.

He used to train certain police departments from here in regard to self defence.

[twin ridge]

Gave +1 Rep to @pearl raven (current: #78 - 91)

[nova kelp]

tried that who ever did it set up two factor against it so i cant get in

[silver sky]

¯_(ツ)_/¯

contact facebook

they'll help

[nova kelp]

if i facebook would have helped i would not be here ive been trying to reach facebook all day they dont have a good way to actually contact them

[mossy river]

It's not our service, there's nothing we can do here

[pearl raven]

Yeah I was concerned for a while, I started getting headaches and learning was getting difficult... turns out I'd never had an Eye Examination... I needed glasses...

[high mulch]

I told him 50/50 jokingly, to train me for mma in regard to striking and go from there.
He was like "nah, boxing or nothing". I was like "nah... I'm good"

[pearl raven]

Dodged a bullet tbh.

[high mulch]

Oof, thank goodness nothing heavy/bad...

[high mulch]

Yeah, and also because I'd feel limited on boxing. Thing I didn't feel when kickboxing.

[pearl raven]

More range, less head impacts.

https://tenor.com/view/the-smurfs-azrael-banging-head-cat-frustrated-gif-27368915

Oh... that's not really appropriate...

It was supposed to be head banging... not banging it's head

[high mulch]

I have a coworker that was going to (I reckon) BJJ or jujitsu.
Only bad thing is I don't have money to spend on that, but I'd luv to.

[teal wharf]

i like this cat on cocaine competition

[pearl kindle]

u want to see a cat on cocaine?

https://tenor.com/view/cat-cat-tongue-cat-licking-white-cat-cursed-cat-gif-27575167

[high mulch]

@pearl raven
https://www.youtube.com/watch?v=LtJSUmlcCT4

this was my supervisor/mentor, Ed Pollard.

[teal wharf]

yooooo 💀 this one a lil freaky

[pearl kindle]

i mean he's on cocaine

[teal wharf]

(and i like that)

[rapid merlin]

evening thm

[pearl raven]

Very cool, I can't watch the video right now, I'll check it out later.

[high mulch]

no probs :D

[lost birch]

xss-game.appspot.com

xss practiceeee

sorry if this is annoying

i had no clue you could use html like this

[blazing granite]

I did Jiu-jitsu for a few years it was great, the life happens and I had to stop

[high mulch]

Yeah, hopefully you can get back to it :)

[high mulch]

https://tenor.com/view/bjj-jiu-jitsu-takedown-chokehold-martial-arts-gif-26300970

[lost birch]

lol why does this work

[brittle lynx]

I just realized that an AWS network would be so much more secure than an AD network.

Because even the host discovery is completely removed by using AWS.

You're not allowed to scan any host or instance that is not a part of the target company.

That means you CANT EVEN PING SWEEP.

[crystal mauve]

https://tenor.com/view/happy-man-cry-crying-redhead-gif-24137125

wow obsidian is incredible

[lost birch]

the notes app?

[crystal mauve]

yea

[silver sky]

Just remember, threat actors do not care

[lost birch]

ping sweep as in testing all the ports right?

(ive only come across that in nmap)

[blazing granite]

also it wasn't create it by microsoft, that's a huge plus 😂

[lost birch]

AD = active directory i presume

yayy

[clear jackal]

Are you trying to say Azure? Active Directory and AWS are not equivalent technologies

[boreal scarab]

"How unnecessarily large do you want the notification window?" YES

[storm niche]

Is trying de 1=1 on username or password fields illegal? I haven’t done it was just wondering if it was ?

[mossy river]

It would be an unlawful pentest.
It's more unethical than illegal but depending on your country, if you do end up accessing anything you're not authorised to, it could be considered computer misuse if they decided to report you or take you to court.

General rule of thumb is not to pentest things you don't have a written signed agreement to. If you do pentest something and it crashes, you can get in a lot of trouble. Especially if they pull up the logs following the crash and they can see you're doing something you're not supposed to.

All of this is very situational depdent, but why risk it at all?
Unless you are actively persuing bounties on a programme, you're looking for trouble 😅

[storm niche]

Oh ok this is understandable and very concerning because I think too many kids or script kiddies do these things. Glad to know it’s punishable.

[pallid topaz]

Hello all

[brittle lynx]

Hello

Are u a hacker too

[boreal scarab]

Man... not eating basically all day has left me so low on energy

[pallid topaz]

No, im new 😦

i joined cuz im doing tryhackme free stuffs

i got kinda stuck on something

i found the answer but idk why is that the answer

[silver sky]

then you are officially a hacker, welcome to the club

[silver sky]

How does one add 45 additional words to an essay

[pallid topaz]

Thank you i suppose 🙂

[twin ridge]

Gave +1 Rep to @silver sky (current: #44 - 204)

[pallid topaz]

According tothe quiz in the website i would like to be a Security analyst

[boreal scarab]

Bullshit it!

[pallid topaz]

Is it that good or bad?

[boreal scarab]

I can't even think right now... was playing fallout 4, then BOOM low on energy

[silver sky]

Might have to ya know

[pallid topaz]

Btw can someone help me to explain me some stuff pretty quick?

Is about some simple stuff in the test of tryhackme

I just want to know why is THAT the answer

[silver sky]

just shoot

someone will likely answer

[pallid topaz]

Well is from an easy thing "apparently"
question is:
Whats the name of the scheduled task that is malicous.
answer is = Clean file System
then ask me other 2 things which are name of the file task was running and which port with it was
nc.ps1 and 1348

So i be like yaii i foound the answers

but Idk why is that malicious

if i google nc.ps1 i just found some kind of forks for spagetti 😭

[boreal scarab]

Shaking im so low on energy, damn

[mossy river]

you shouldn't be shaking

I would seek a medical professional

[silver sky]

Because it's abnormal. When you look through the scheduled tasks you'll see normal things that should be labeled correctly, the name is trying to disguise the task as "Clean file System" so when a user looks at it they just think it's something else

[pallid topaz]

ok

[boreal scarab]

I basically haven't eaten all day.

[silver sky]

Sounds like your blood sugars are low

why have you not eaten?

[boreal scarab]

I have no idea

Got food in me now. I'm happy. Already feeling better

Oh much better now 😄

[unreal solar]

That's great general but another settlement needs your help

https://tenor.com/view/fallout4-gif-5924860

[boreal scarab]

H........ HOW THE FUCK DID YOU KNOW I WAS PLAYING FO4?!

[unreal solar]

you just said

[boreal scarab]

Oh

I'll....

I'll be in this corner over here

https://tenor.com/view/sad-alone-sad-person-alone-cradle-sitting-along-in-corner-gif-11206167521557372047

[unreal solar]

sorry

couldn't miss this one 🤣

[boreal scarab]

https://tenor.com/view/preston-garvey-fallout-fo4-another-settlement-gif-16895459270352605670

[unreal solar]

i got word of another settlement asking for help

[silver sky]

@boreal scarab I DID IT, IT'S SUBMITTED

[unreal solar]

i'll mark the location on your map

[boreal scarab]

WOOOOOOOOOOOOOOH

[sturdy lark]

Home-made fried chicken, from the real CyberChef

[boreal scarab]

https://youtube.com/shorts/ZVIDhY-s8Zg?si=NCEPyzhHYMzd48LP

[unreal solar]

HAHHAHAHA

classic

https://www.youtube.com/watch?v=R-HV6ruNrvk

[sudden pond]

base64?

Bye

[sleek plank]

Hey I’m not sure where to ask this. But I wanna get into network security (defending side) but idk where to start. Does anyone have any suggestions on what I should look into first?

[storm niche]

If the best hacker knows all the ways in then can’t they tell the best defender or blue team to patch all the point of entries except the user ofc they cause 90% or breaches I think?

[finite basalt]

I've got my active directory controller all setup and my samba share on proxmox I think, I've not done it in a vm though because I didn't want any bandwidth restrictions etc. for accessing my btrfs array

😎

all set up to use proper active directory groups as well
Only took 506 different webpages to get proxmox and AD working

both subvolumes within the same drive, just need to sort out my backup script at some point, especially as it's raid 0

[analog ravine]

hi

[finite basalt]

hi 🙂 how're you?

[analog ravine]

im good! i just signed up. this site seems pretty cool.

[analog ravine]

how are you?

[boreal scarab]

I don't think anybody realizes how hard it is for women to work in the postal service. It's such a MAIL dominated industry!

[finite basalt]

Doing well thanks 😄 keeping myself busy

[boreal scarab]

https://tenor.com/view/seinfeld-patrick-bateman-bateman-sigma-sigma-male-gif-22867718

[blazing granite]

if your goal is performance rather than data redundancy go for it

[finite basalt]

So bad 😭

[analog ravine]

https://tenor.com/view/davie504-epic-davie504epic-epico-epical-gif-18050683

aw i cant link gifs haha

[boreal scarab]

[finite basalt]

The kind of data I'm storing isn't valuable so I'd rather have the storage capacity and the speed

[blazing granite]

https://tenor.com/view/ba-dum-tsss-drum-band-gif-7320811

[finite basalt]

The purpose of the vault is that it's a btrfs subvolume designed for documents that may want backing up and they'll be differentially backed up to my dad's server which has raid 5

[blazing granite]

great choice then 🙂

[finite basalt]

And now I have an active directory server to authenticate with and use for any devices on the network

Only thing is I may want to make it externally accessible or setup a VPN because I primarily use laptops at the minute

[blazing granite]

A few years back I was playing with AD and Linux, I used LDAP with good results

[finite basalt]

I used samba primarily because it's a mix of devices and I wanted the built in file share functionality

I might even set it up with a print server as I've an old usb Samsung printer I like to use

It's a black and white and only does one side at a time but it costs 10 quid for toner haha

If you want double sided you've got to do the print all odd pages and then flip it and print all even pages haha

[blazing granite]

samba is for filesystem, with LDAP your Linux server join the AD kind of crazy but kind of fun 😂

[finite basalt]

Yeah but samba does also have stuff for full fledged domain controllers too

[blazing granite]

I did samba too, I usually go full Linux but sometimes it's fun to mixed it up 😂

[finite basalt]

That's fair, I use a mix so samba made sense due to windows devices

[blazing granite]

Proud Linux user since 1993, it's more like 90% Linux 10% windows

[boreal scarab]

https://youtu.be/knkEzgT_UeE?si=LrRkRr4d1LXMlrkF

I... I love this company

They just go with the memes

[blazing granite]

I hate using translating to "learn" a language, in order to learn/use a language properly you need to understand the language without translating, it'll be harder but better results at the end

That's my experience, I only speak 5 languages

[boreal scarab]

Oh ONLY 5 languages

[blazing granite]

I have friends that speak more languages than I do, so there is nothing to brag about. One of them speak 15 languages she's a language monster 😂

[boreal scarab]

I'm trying to learn Norwegian. Could only really say "Thank you for the meal." And "You're welcome"

Melk og kaffe, takk.

[blazing granite]

some people have a knack for languages, and most Americans don't 😉 😛

[boreal scarab]

I think si spelt that right

[blazing granite]

😂

[boreal scarab]

Milk and coffee please.

[sturdy lark]

I feel sad for Asians. Most Asians only speak one language, while the situation seems different in Europe

[boreal scarab]

Hey hey hey hey hey. I gotta learn a language that's one of my nationalities!

[blazing granite]

that's look like a cultural thing.

[boreal scarab]

Aaaand doing duoligno, and already forget crap.. then again, has been many months

[blazing granite]

because duolingo is crap 😂

[boreal scarab]

I quite like it

[wide merlin]

Hi, need input pl0x #974406074444685322 message

[sturdy lark]

Duolingo is very useful if you're learning a language from a completely different language family than your native tongue, as it treats you like a complete beginner

[blazing granite]

if you like it go for it, but just you just said you, that you did it and you don't remember shit so maybe it's not the best system 😂

[blazing granite]

post there and wait, patience is a virtue. Also posting in different channels only will annoy people

[wide merlin]

I'm pretty much done this box and have been waiting for a while... :S

[boreal scarab]

It also helps, atleast for the basics, that Norwegian sounds close to it's English counterpart

[boreal scarab]

I haven't been on duolingo, or talked in Norwegian to anyone in months, maybe even a year

[blazing granite]

people here are all volunteers they will answer when they have time or will, there is no time limit 🙂

[wide merlin]

revshells is unsafe, I guess people like to mess with others here

[wide merlin]

yea thing is its a REALLY simple query

and I need to get this box done before midnight :S

[blazing granite]

that's your need, that have nothing to do with all the other needs of people here in this server 🙂

[wide merlin]

nvm i got it, was going to hit it eventually

[blazing granite]

https://tenor.com/view/tumbleweed-silence-gif-19279803

[wide merlin]

for advent of cyber whats the min qualification of skill you should have to be able to solve

jr pentester work?

[blazing granite]

beginning friendly I believe

[wide merlin]

Okay thanks

[odd crescent]

HI

[clear jackal]

No skill needed

[frosty iris]

you dnt need skills, its very beginner friendly

[crystal mauve]

Does anyone have a sort of blueprint for obsidian as to what they did or wish they did for their journey cyber security/programming journey ?

[wide merlin]

Cool, will try

[odd crescent]

hlo

[frosty iris]

advent of cyber seems really fun and it being beginner friendly would most likely help ALOT with gainin skills

[odd crescent]

i am begineer , is it okay with that

@odd crescent

@odd crescent hi

[odd crescent]

you are wrong

[tall stag]

Need money don’t language

I have a lot of friends who speak 3-6 languages and they are still working for 1500-2000€.

My cousin is 19 years old, speaks only English and earns 5000€ every month.

Lol

It’s the big difference.

[fallen pewter]

Quick question are most of the exploits and stuff learned in these labs still applicable in real world?

[fossil otter]

same doubt from day one

[simple valve]

In general, yes

The exploits just take other forms.

[stoic quarry]

Ello all

How we doing?

[tall stag]

Yes, most exploits learned in labs are still applicable in the real world because they teach foundational principles, real-world attack techniques, and skills transferable to modern systems. Many organizations also run outdated software, making older vulnerabilities surprisingly relevant.

[dark frost]

this hit hard :x

[frail tundra]

Does anyone know if there is way to do snapshots using UTM as your virtual machine? I'm using a m3 MacOS, running Kali linux. I've looked through the settings on UTM and tried to find videos on YouTube but nothing is coming up.

[dark frost]

i do speak 3 languages :3 and somehow what you say is true for me exept i do 0 €

[azure hill]

Methods and techniques like nmap skills, metasploit etc most definitely

[dark frost]

but in europe it's very common to have more than 2 languages

in Switzerland everyone speak 3 language normaly if they went to school .

[azure hill]

World Metrics
 Additionally, bilingual job seekers experience a 77% increase in opportunities when applying for jobs in the current labor market.```

https://www.worldmetrics.org/bilingual-employment-statistics/

[dark frost]

i know in India it's very common to know 4-6 languages , with the many locals dialects

[misty zealot]

respectfully youre so wrong idek where to begin and it just sounds like you're coping because you have difficulty learning other languages. People dont learn other languages for the money, they learn it to communicate better with others, meet new people, learn different media, etc. learning languages is not an easy feat so it's a direct opposite of laziness. Egotistical is going around asking people if they can speak english when travelling instead of making sure they feel more comfortable by talking to them in their native tongue. Egotistical is going and expecting your friends who have english as a second language to be doing all the language heavy lifting instead of you making a move to do the mental conversion strain instead.

[azure hill]

Science confirms he is wrong, keep learning languages people 🙂
Might I recommend C#, beautiful language

[misty zealot]

completely agree there on both aspects

[proper sable]

i suggest golang

[azure hill]

Seems everyone is learning go lately, in demand or easy language I wonder?

[proper sable]

in demand for the most part

it's also a beautiful language

not the easiest though

[brittle lynx]

Hey guys

Anyone did OSCP and can tell me if there is anything in the Red Team path that is good for preping the OSCP

[simple valve]

I suggest checking their curriculum and aligning it with the Red Team Path

[brittle lynx]

Hey I see u have the CRTO, when I checked Indeed there are no jobs that are requiring it.

So can I ask why did u get it and is it still worth looking at ?

[simple valve]

It was a requirement for my current job

[brittle lynx]

Wow, do pen test jobs and red team jobs require and know about it ?

[simple valve]

I guess it differs between certain areas and countries. I know for sure that CRTO is looked at in Japan iirc

[simple valve]

It depends on the employer tbh

There are other certs like GPEN, GRTP, GXPEN, OSEP, etc. which they look at as also desirable

[dark frost]

https://tenor.com/view/cat-kitty-cute-kitten-feline-gif-17585598

looking for a job , is a job itself , been pimping my CV , changing it for every jobs offerts

[clear jackal]

That is correct, job hunting in itself is a full time job

[brittle lynx]

How Bro there are only 45 jobs in the world asking for CRTO, is it really worth it (im looking at indeed)

[dark frost]

very niche indeed , but you may get better pay or can be promoted later for having it

[brittle lynx]

Is the Red Team Capstone Challenge the biggest network on THM ?

[spark dune]

Yo I’m new too!

Looking to break into the cyber world as a junior pen tester.

I have a friend in IT who said that I won’t be able to do that since there are no entry level roles in cyber.

If so, how should I proceed? I have no certificates or degree but I’m open to gettting whichever certificates that can help me land a job

[brittle lynx]

Don't listen to ur friend and go for ur dream

[spark dune]

Yeah fr I’m still completing the courses on THM

I’m only 22 so I figured I got time

But idk what to work towards tbh

I searched and then aren’t lots of pen testing jobs in my areas

I’m based in AUS^

[brittle lynx]

And I will give u my personal moto, don't do boring one-thing modules

Do the big labs with multiple stuff in them and just research whilst you do them.

That is much more exciting and will drive you to learn whilst you are hacking

[spark dune]

Which ones are those? Any u recommend?

I’m low key overwhelmed by the amount of rooms there are

So I’m just following the premium pathway 😭

So far it’s been lots of reading and 0 practice

[brittle lynx]

U know how there are rooms, and modules, and paths? There is also a tab called "networks" those ones are filled with multiple computers to hack

So u go to them, and u just keep researching everything whilst u do them

Use chat gpt as ur companion

[spark dune]

Alright imma check it out

I’ve only scratched the surface

[spark dune]

Is there a certain point I should complete up to before moving to practicals?

Or do “networks” teach me as I go?

[brittle lynx]

Yeah there is one point and 1 prerequisite that you have to have:

YOU HAVE TO GO HARD

U just have to go hard and research hard

[spark dune]

I am always hard 😩

[spark dune]

Alright imma do that tonight

Thanks for the tips 🙏

[misty zealot]

So youve just outed yourself as a racist against second generation immigrants from eastern europe 💀

You did not have to stoop this low

On top of that, youre also incredibly incorrect

And how can you call people arrogant for having parents that made sure they’d be as multicultural as possible

[devout bay]

check pm?

[misty zealot]

Says a lot about his intelligence tbh

Or lack thereof

[tall stag]

In general, this is what I have seen, I told it as I lived and saw it, my aim is not that way.

[misty zealot]

What did you see other than far right wing media 😂

God you people are so stereotypical it’s not even funny

[finite basalt]

Possibly my most unhinged playlist

I've managed to split 20 hours of music into roughly 16 playlists

[misty zealot]

I dare you to work with these people and then you’ll realise that BECAUSE theyre second gen immigrants they work harder than most and lack arrogance

[tall stag]

Calm down, there is no need to prolong it, you can close the subject 😄

[misty zealot]

Theyve grown up and watched their parents struggle assimilating

[misty zealot]

Well i think there is no need to be an ignorant racist yet here you were sending tons of paragraphs

Dont like it when your rubbish actually gets analysed and called out?

[tall stag]

Why are you so angry?

[misty zealot]

You expect me not to be after you say something so provocative?

[tall stag]

I didn't say anything about racism, I made an observation, I didn't use hate speech or anything else.

[misty zealot]

Your “observation” was hate speech. Learn what micro aggressions are

[tall stag]

I didn't understand what I was saying about your own point of view and how you look at it from that angle and interpret it according to that perspective, so I wanted to close the subject.

[misty zealot]

Stereotyping second generation immigrants from eastern europe saying theyre lazy classifies as hate speech

[tall stag]

You comment according to your own perception.

[finite basalt]

I'm not taking sides but I think the argument may be scaring others from the chat

[tall stag]

Yes

Thanks

[wooden totem]

https://media.discordapp.net/stickers/1266623412357562390.png?size=160&name=dying

[finite basalt]

I just hopped on to talk about how bad that one playlist I made is

[low echo]

Hello

[finite basalt]

Hey, how're you

[wooden totem]

https://media.tenor.com/4-O1JlNIlpsAAAAj/small-amogus.gif

[low echo]

im fine thank you and your?

[twin ridge]

Gave +1 Rep to @finite basalt (current: #107 - 69)

[wooden totem]

https://media.tenor.com/Uzuoa5jweoAAAAAj/among-us.gif

[finite basalt]

Doing well thanks 😄 just sifting through my one big playlist to make it more manageable

[wooden totem]

too big, thats already an emoji

https://media.discordapp.net/attachments/465092340097351680/1076244084328497172/files_1.gif

[low echo]

Nice, and have you fun with playlist music?

[finite basalt]

Yeah it's fun so far but a little stressful

I've never thought about genres before, I just threw em all together

I've not slept but it's now 6am so I think I'm gonna get up, sort a hot water bottle and a blanket and go do some work downstairs

[proper sable]

https://tenor.com/view/mods-cat-funny-smite-gif-17567204071102087896

fuck :(

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Nov 19, 2024, 6:05 AM

[finite basalt]

There you go mate, once you're verified you can embed gifs

[proper sable]

ooh ok

[low echo]

but you will manage it because I also added all genres

[chilly veldt]

Morning

[proper sable]

yay

[low echo]

Morning

[proper sable]

https://tenor.com/view/mods-cat-funny-smite-gif-17567204071102087896

[finite basalt]

So far

[proper sable]

nico collin's 👀

[finite basalt]

I will say other than my sad playlists, kartoffel and lasaga are my favourites, some class music

Also Nico Collins is mint

[proper sable]

i need that i'm so edgy fr playlist

[finite basalt]

It's still a work in progress but I'll send it once it's done

[proper sable]

alright

[finite basalt]

I've also got the playlists: fuckin sexy like, overthinking and overthinking but upbeat playlist which are good so far, pre me rock also bangs

This is some of fuckin sexy like and pre me rock

[proper sable]

omg the 1975

[finite basalt]

They were all in the one playlist, was something for everyone in that haha

[finite basalt]

I'll have to check those two out

But yeah plenty of good ones

Friday I'm in love is a banger though, one of my favourites in there

[wooden totem]

https://tenor.com/view/monday-left-me-broken-cat-gif-7061127327620702176

[cerulean aurora]

hey

what happen to that group

did you remove me or what

[brittle lynx]

Hey guys

How many hosts do the AD networks have ?

[junior wraith]

hola

?

[brittle lynx]

I am on the red team capstone right now and I only scanned like 4 hosts

I think the rest of the hosts are on private networks maybe

(hopefully)

[junior wraith]

oh like thyat. not so much hosts

There was a network map in those rooms right?

[brittle lynx]

Yeah there is, thanks for clarifying that those are real

But btw I just want to say that there is a skill to be learnt by dealing with 1000s of hosts at once

You have to adapt and use organizational tools

I mean real tools that people made

But this is still nice practice that might be easier

[junior wraith]

would be a bit costly with 1k hosts 🙂

[brittle lynx]

Nope u only need 50 dollars for a permanent lab with thousands of hosts full of vulnerabilities

For example the Sliver Module on HTB

[junior wraith]

oh?

[brittle lynx]

For a AWS enterprise for 50 dollars as well u can get the PwnLabs Cyber Range

Which has 10s of AWS assets

Or the HTB Pro Labs

50 dollars

But THM is 14 dollars for EVERYTHING, so deal is still very good

[junior wraith]

I see, PwnLabs Cyber Range sounds interesting have you done it?

[brittle lynx]

Yeah I was invited to do one early to see if it has problems

And let me tell u it was very exciting

Others also shared with me that they too found Pwn Labs very good quality

[junior wraith]

and thats 50 a month?

bootcamps 400 350 for azure aws

[brittle lynx]

Well if u are me its 50 a month and bootcamp is 175 a month

That's because I started my own company and I can bargain (which is something u should do too)

But if u are just a normal person then u pay 200 for those cyber range and 350 or 400 for the bootcamp

[junior wraith]

hmhm I do have a company

[brittle lynx]

Use that company to get deals and trials for everything

[junior wraith]

al right thanks

[chilly veldt]

You know it's a good morning when you have already been reverse engineering for over an hour and it just turned 8

[slow cloud]

Morning hackers

[devout palm]

Morning i want

[chilly veldt]

This is just general reversing so I can take screenshots and explain what's found

[devout palm]

That, i don't like

[chilly veldt]

Well I have already reversed it to fully understand the code, I just have to write about my findings, luckily to people who understand code

[simple valve]

That’s not a network, right? Its just a bunch of labs per module

If I’m getting the context right, thousands of hosts spinned up does not cost $50

[chilly veldt]

sometimes I just love how Bing is so stupid slow to update

[rapid merlin]

It’s snowing

[chilly veldt]

I love snow

[cloud quiver]

Where 😄 ?

[hushed vector]

@cloud quiver what is your tryhackme Username? and can I add to you as frnd

[cloud quiver]

Yes buddy , of course 😄 . KGBTHM is the nickname 🙂

[rapid merlin]

England

[cloud quiver]

Lucky you 🙂 , I love snow .

[rapid merlin]

So do I

[unreal zephyr]

[exotic vector]

morning, its a snow day :D

[lone thistle]

It’s coming down quite thick and fast here 😁

Lovely view to wake up to

[exotic vector]

I cant take a photo to show because everyone would be able to figure out exactly where I live

[glass nest]

The moon-craters would be a dead giveaway

Whoops! Sorry fae!

[exotic vector]

When I look out my window I see snowy roof tops

[glass nest]

Ben - Thats mad. Like.. 2 weeks ago it was shorts n t-shirt weather

Ah. You live in a christmas card. Confirmed

[lone thistle]

whatya mean, I'll still rock the shorts

gotta be in the minus to consider not

[glass nest]

I don't care what anyone says, you are an honorary south-westerner 😄

[lone thistle]

LMFAO

true

[devout palm]

Yeah, it's not that I don't like writing. I just get distracted and finish it in more than it should take.

[glass nest]

We generally don't get too much snow in the city. I heard its because it's by the sea and the air is too salty, but I dunno. We snow up on the moors (Countryside) though, which isnt far

[exotic vector]

I am cold and it seems I have a package delivery anytime between now and 1pm

[lone thistle]

y'all got your natural grit salt 😄

[exotic vector]

It's like that in my hometown, it'll need to be very cold for snow

[glass nest]

Thats right Ben. that explains my salty and gritty personality

[lone thistle]

oh yeah the heating had to be whacked on this morning. Sorry Martin Lewis

[exotic vector]

The heating is on but it's currently being overpowered rn lol

[glass nest]

Fae - Even if it gets cold here, it's usually just frost and ice with adamantium-like properties. Usually the snow arrives if the wind is blowins from the north - i.e from where the moors are

[lime belfry]

hello everyone , I just want to do OSINT challenges can you give me your fav one

[exotic vector]

you must be near where I live xD

[cloud quiver]

Try this one 🙂

https://tryhackme.com/r/room/ohsint

[glass nest]

have a look at Tracelabs, Thats their thing. I don't know if the have challenges as such though

Fae - I'm in Plymouth 🙂

[exotic vector]

oh....you're nowhere near me

[lime belfry]

I did it

[cloud quiver]

This one maybe 😄 ?

https://tryhackme.com/r/room/sakura

[tepid furnace]

I love windows

getting a random hardware bluescreen out of nowhere

and now everything works just fine

[lime belfry]

thanks

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #22 - 410)

[tepid furnace]

when in doubt take a nap and your technical problems solve themselves

[glass nest]

I have so much doubt, that I'd sleep all day...

[exotic vector]

im on linux so all my technical problems are caused by me

[exotic vector]

ill probably be in bed later watching shows

[glass nest]

What're you currently bingeing?

[exotic vector]

me and my partner are currently binging big bang theory.

[glass nest]

Ooh.. fun fact: Leonards specs have no glass in them 😄

[late warren]

Guy's I'm having issues with finding correct return address I stack can anyone able to help me with that

[late warren]

In exploit development

[ornate rain]

hey

[glass nest]

dheeraj - May be worth waiting till james is back on.. Seems like he kindof understood your whole process. I was lost when you were explaining it 😄

[late warren]

🫠omg

[exotic vector]

oh I know, and they're all in their late 30s playing mid to late 20s characters

[late warren]

When he will be back ?

[glass nest]

Well, he's UK based, so likely he's in work now.. Maybe 9 hours? (5 or 6pm UK time)

There are other people who know this stuff, it's just I know you've already gone through most of it with him, y'know?

[late warren]

May ik how are they

[glass nest]

I've no idea, to be honest. We have a whole range of people here

[late warren]

Haven't u done exploit development bro?

[glass nest]

Nope.

Never really interested me

[late warren]

I thought u might know I'm new here

[late warren]

Oh Alright

[glass nest]

Yah, It's a fair assumption. Also, Well... james is also a Mod, and exploit development is kindof a... gray area.. on here. If your chat is with a mod, it's less likely to cross any lines

in fact, usually it's only really talked about in the #exploit-and-mal-studies room

[exotic vector]

most of it is to protect the server from getting nuked

[late warren]

Yeah ok

[late warren]

I see let me ask there then

[devout palm]

No Access REEEEEEE

[exotic vector]

I have some reading to do today

[sonic crest]

Guys does anyone know , how u get a job in physical red teaming or what certs r requireded

[jaunty hull]

Hey, Black friday discount coming?

[sick lance]

Ha e a look at jobs around you

[sick lance]

Maybe

[hushed vector]

OSCP or eCPPTv2

[sonic crest]

I don't see anything in linkedin and don't see anyone talking about how to get in it , mostly its about pentesting

[sonic crest]

I was talking about physical pentest

[hushed vector]

You mean IOT hacking

Hardware hacking stuff?

[sonic crest]

If u want me to be particular, u can say similar to black team

[hushed vector]

Black team kinda do stuff illegal

[rapid merlin]

North korea is hiring

[sonic crest]

Most I got was , get in a cyber security firm as a pentester and hope they give u a physical pentest along with an internal pentest

[sonic crest]

No

Its a contract based

[hushed vector]

If you are looking for IOT Hacking you check this course https://academy.tcm-sec.com/p/beginner-s-guide-to-iot-and-hardware-hacking

[sonic crest]

U get a contact to break in a building and try to get as much as information u can , and later u have to report it

[hushed vector]

Ohh

[sonic crest]

Yea , that what I am being talking about, it comes in red teaming (physical part)

[exotic vector]

that sounds really fun

[hushed vector]

Lockpicking, bypassing alarms, surveillance systems, and understanding physical barriers.

Using tools like lockpicks, RFID cloners, and badge duplicators.?

[sonic crest]

I mean if u r bored of your pentest job, yea it's fun. But it's alot of work , and it can go for days or weeks

[sonic crest]

Yea that stuff , but I don't wanna learn it or anything. Its just i wanna know , how to get hired as a physical red teamer , i didn't find any job listings in linkedin

[exotic vector]

its probably something you get invited to do

[hushed vector]

Yea

[sonic crest]

Nah, its just u have to find a cyber security firm that gets those contracts

And it's not easy to find

[hushed vector]

On Linkedin I don't kind see that kind of job posting

Do you attend events such as defcon or besides?

[sonic crest]

That's what I am saying, its not listed

[sonic crest]

I didn't

[hushed vector]

For that you need to engage with community or networking kind of stuff

I mean they can guide you

[sonic crest]

I listened to people who r into that field , they just said they r into red teaming and get contracts from companies to infiltrate their buildings

[sonic crest]

That's why I am here , trying to find someone

[marsh snow]

Hi

[hushed vector]

Mostly that kindly offers services to the company

You can put out on linkedin

If you are looking for contracts or kind offer them your services

[sonic crest]

I don't think, they juts give those contracts to anyone, u can get them from your company which deals with offering pentesting services
That's why I am here trying to find someone who is into this and can guide me

[naive violet]

Usually you go that way after being in pen testing for a while

You need to work for a company that offer it really

Liability and risk are obscene, not viable for a single person

[rapid merlin]

gm thm

[exotic vector]

morning

[sonic crest]

Any names

[exotic vector]

im practicing the basics on my homelab and its wild how slow a UDP scan is compared to TCP scan

[rapid merlin]

yea LO

I was surprised how long a paranoid nmap scan took 😄 https://nmap.org/book/performance-timing-templates.html

[exotic vector]

oh yeah paranoid scans take forever

[south egret]

I think someone here mentioned that they run a company specialising in physical pentesting. I forgot who it was but i think it was one of the guys with the light blue role

Community legend

[sonic crest]

What does light blue role indicate

[south egret]

Idk they probably contributed something to the community

[sonic crest]

I mean . What's the name of the role

[south egret]

Oh its this guy

[sonic crest]

@silver sky can I DM u , or just talk here , i really need to ask some questions about the physical pentest

[sonic crest]

Thanks alot

[twin ridge]

Gave +1 Rep to @south egret (current: #555 - 9)

[rapid merlin]

how you feeling this morning

[exotic vector]

cold, its been snowing and my flat is freezing

[rapid merlin]

yeah it's snowing where i am rn too LOL

I woke up and was like da fuck is that snow

[exotic vector]

it snowed last night here

[rapid merlin]

idk I was asleep by half 1 ish

and my curtains were shut way before that

today I shall fix my vms!

[exotic vector]

I havent been outside yet because waiting for a delivery (if it arrives) and waiting for my partner to wake up. But the roof tops I see are all covered in snow but I suspect the ground is gonna be barren because yesterday a lot of gritting salt was poured onto the streets

[rapid merlin]

ah

yea idk my rooms at the back of my house so i never rlly know

what goes on outisde

unless it's out back

[exotic vector]

and...it looks like I need to fix 1 of my vms

[rapid merlin]

yea so do I LOL

3 actually

you using vmware?

[sick lance]

Black team?🤔

[rapid merlin]

gm scrubz

[sick lance]

Hello

[rapid merlin]

do you use vmware or vbox?

[sonic crest]

U can google

[exotic vector]

no virtualbox

[sick lance]

Or you.cajntell, since you raised it.

[rapid merlin]

this apparently

[sonic crest]

Thanks

[twin ridge]

Gave +1 Rep to @wanton ridge (current: #816 - 5)

[rapid merlin]

oh, yeah idk why but vmware is being so annoying lately

idk abt virtualbox

[dark frost]

Oh wow that's james bond cools stuff

Black like the suit man in black

[rapid merlin]

apparently anyway, I only did like 2 searches to try find an answer while kali was autoconfiguring nw kek

[sick lance]

That looks made up so people can do illegal shit

[rapid merlin]

yea LOL

[wooden totem]

red team with extra bullshit

[rapid merlin]

hence the "apparently"

probably a paperwork justification for APTs icl

[sick lance]

Most people go

Blue team > Pentesting > red team.

However there are a few exceptions.

[rapid merlin]

it honestly just looks like a way of getting an APT on paper without raising red flags

[hushed vector]

He is not sure what he Wana do? 🥲

[rapid merlin]

no idea

but that just screams APT

[mossy river]

https://tenor.com/view/rose-bruno-mars-apt-apt-rose-bruno-mars-blackpink-rose-gif-2249060797784296514

[rapid merlin]

gm jabba

[mossy river]

Apt apt apt apr uhuh uhuh

[rapid merlin]

how many times do you think kali will die today

[dark frost]

Good morning

[wooden totem]

3.14

[dark frost]

Apt get install?

[sick lance]

Too many.

Skill issue

[rapid merlin]

;-;

[dark frost]

What apt mean 👀?

[exotic vector]

@rapid merlin I have almost solved my issue xD

[rapid merlin]

Advanced Persistent Threat

lazarus n things like that

[dark frost]

💀

[rapid merlin]

black team literally just looks like a way of putting it on paper

[dark frost]

Cool stuff

[wooden totem]

apartment

[rapid merlin]

^

[sick lance]

Got rid of Virtualbox and started using VMWARE?

[rapid merlin]

scrubz vmware has been shit the last couple days

[rapid merlin]

mustang guitar ❤️

[sick lance]

For you maybe.

[rapid merlin]

okay

[sick lance]

It's flawless for me.

Well, almost

[rapid merlin]

I really hope one of your vms dies

[exotic vector]

no

[rapid merlin]

really

you can feel a small amount of the suffering I have

[sick lance]

It's ok, they're all backed up with Snapshots.

[rapid merlin]

dude i actually can't even install kali

it's just randomly getting stuck on things

LOL

[sick lance]

Send screenshots

[rapid merlin]

it was doing this yesterday, except it got stuck on unpacking hashcat-data (amd64) (I don't even have an AMD cpu or gpu)

is that virtual machine?

not to mention, extreme input lag; NAT randomly pulling a brick out of it's ass and not working

clang C compiler

well, and C++ Objective-C if that is your thing 😉

vbox would probably fix most issues, but at the same time; ew vbox.

[self rarelyUsesObjectiveC];

[exotic vector]

on virtualbox I have this issue where I can put all my vms on the internal network and all but 1 would be scanable

[lime belfry]

from my experience this is not related with the AMD CPU or anything I had this problem before just increase the storge minim storge to run kali Linux is 25G or something like that

[rapid merlin]

hashcat probably wants it for the OpenCL

[dark frost]

this lazarus 💀 ?
"The Lazarus Group, a cybercrime gang linked to the North Korean government, has been involved in several cyber attacks"

also known as APT38

[rapid merlin]

Trying to upload a ISO to THM yet has been sat on 00.000 percent for 26 hours.

[steel aspen]

THM merch should have a THM lanyard lol. Unless I'm blind.

[rapid merlin]

still stuck on the ss

[rapid merlin]

.

no idea what causes it

got it from kali.org

fixed it

it was going so well..

oh it is

was just taking a while

almost there!

this CyberChef (room) is awesome

nice to have all the things in one place

IT FXIED

YAY

WHAT

[wooden totem]

evil windows

[rapid merlin]

now it's just letting me sign in

wtf

was the image verified prior to install?

yea it was from kali.org

the hardware is ok? https://www.memtest86.com/

ye

[rapid merlin]

Best korean group, before BTS

[rapid merlin]

Windows but cool

But can he beatbox?

[dark frost]

I am applying for anything related to IT in my city

[rapid merlin]

W

[dark frost]

Need money to buy thm premium

The salary range from post to post is ridirulous , some pay +10k a month , some 5k . For same jobs/ qualifications

[sudden pond]

o/ THM

[lost birch]

o/

[dark frost]

O7

[rapid merlin]

Don't apply for SAP jobs

[dark frost]

What SAP?

[rapid merlin]

It's a fraud, shitties IT job ever

It's a program used by big companies

But it is so stupid and complex

[lost birch]

But what does it really involve

[dark frost]

As long as it pay and i don't sleep on the street

[exotic vector]

I found a few IT jobs that I can apply for because the description is really vague like wow

[dark frost]

This morning i applied for a vague job paying 12k € / month . That said we need a guy that do HPC

High perfomance computing

Whatever that mean

[rapid merlin]

basically meaning they'll take just about anyone

does anyone ever ask for low performance computing? 🤔

🤔 indeed

going through :Tutor in nvim rn

yay

[exotic vector]

Yeah it means I need to make up a CV for it and do a quick search on their "nice to haves"

Nvm they require 1 year experience in IT and customer support

[dark frost]

I said i do c++ high perfomance 🥺 , but the activities can be anything