general

[rapid merlin]

I loved it

Very expensive

[daring jackal]

It really is, there's a lot of content in the course and it goes over windows 11 (and previous versions) and teaches you more linux and setting up a lab and more. there's like 145 lectures

[loud marlin]

yea. just it need more prepare and aftercare

[glass nest]

Well, epoxy resin you use in molds is a bit different to the stuff used in printers

[boreal scarab]

@umbral bay https://open.spotify.com/track/7LWLdvudt2VzGVXt7tfvBH?si=a14451dcc28945fc

[glass nest]

More akin to UV resin. In fact, I'm pretty sure thats how those printers work

[rapid merlin]

Yeah I never used UV resin before

I thought it was too brittle compared to the one I used

[glass nest]

I think nail technicians use it

A lot of the little UV lights that makers use are nail lamps

[rapid merlin]

Yeah I’ve had that type of nail polish before

[lament tendon]

Matt, how in the world can you even break Spotify embeds?

[rapid merlin]

Always found that polish to be like plastic and it just peals off

[glass nest]

Speaking of nails, I actually use Shellac to finish wood-turned pens 😄

[rapid merlin]

I think I’ll just get the plastic one then

[glass nest]

Good choice

[topaz topaz]

hey guys, whenever i press "i" on the attackbox it launches the control center, I'm trying to type commands and it won't register. Anyone know what that is?

Tried googling but nothing comes up

[mystic trail]

Can someone tell me how important is c language and is it worth to learn it and does it add a big value to your cv ?

[glass nest]

If you want to be a programmer, it can help.

[boreal scarab]

https://tenor.com/view/mrbean-wink-trust-me-gif-12533011335583576089

[lament tendon]

Depends on what you want to focus on.
It will definitely look good on your resume, but if you want to go into web hacking, for exmaple, you will see very little of it.

[glass nest]

Learning it soleley to have it on your CV... eh.

[rapid merlin]

Is there a massive difference Between the enclosed and open ones ?

[lament tendon]

But like Esqy is saying, becoming good at C is a massive time and effort commitment, and just learning it to show off won't be fruitful, I don't think.

[glass nest]

I'v not used an open one, but the enclosed ones control the ambient temerpature a lot better, so your arctic/tropical room temps shouldnt matter so much

[mystic trail]

And whats the best for web hacking ?

[glass nest]

None?

[lament tendon]

Python, Javascript and Go, potentially.

[glass nest]

Programming aint really needed for hacking

[lament tendon]

Knowing Python will help you a lot tho.

[opaque flax]

Powershell and bash scripting I’d say would be helpful too

[lament tendon]

It would, but that's stuff you should be comfortable with as a power user in general, not just for hacking, whahaha.

[opaque flax]

Same with python

[glass nest]

Yeah. But even then you don't need to know much

[fair lava]

PHP or Ruby

[glass nest]

Better to know how to read code

[lament tendon]

Pretty much, yea.

[lament tendon]

Ruby?

Kind of wild, but I at least see where you are coming from.

[glass nest]

First time I've heard Ruby described as that!

[lament tendon]

As a web language?

Or as wild? 😅

[glass nest]

As Wild.

[lament tendon]

Heh.

[sinful moon]

ruby off the rails

[lament tendon]

I like ruby off the rails.

[glass nest]

ntss ntss ntss

[rose tusk]

knock yourself out dog lol

ruby and lua are monsters and pascal or whatever that abomination is called

[glass nest]

Haha, Pascal was my first ever language 😄

[lament tendon]

I do like LUA, because it is better then VimScript. Lel.

[sinful moon]

Lua I have a soft spot for, but shh, arrarys should never start at 1

[lament tendon]

Actually, for configuring stuff, LUA is pretty dang awesome.

[amber hound]

But isnt index 0 the case for all programming languages though

[lament tendon]

Respects if you get the reference.

[lament tendon]

Most*

[sinful moon]

mhmm done a good but of Lua myself for Love2D, Pico-8, TIC-80 and etc

[amber hound]

Theres languages that start array at 1 ?

[sinful moon]

and yes that's the point of my statement lol

[lament tendon]

Yes. LUA.

[sinful moon]

you may have missed the "never" part

[amber hound]

Oh now i get it sorry never done lua

[sinful moon]

No worries, Lua is very easy to work with, but yeah typically seen embedded in a larger framework

[slim atlas]

Hey everyone, so life has gotten pretty busy and I don't think I'll be able to finish the AoC day challenges in time once the main event is over. I was wondering if we lose access to this year's AoC once it's over? 🤔

[lament tendon]

You can.

[glass nest]

Nah.

[lament tendon]

Huh?

[glass nest]

you can even play on previous years ones 🙂

[lament tendon]

Oh, I misread.

[sinful moon]

all previous AOCs are open for access

[slim atlas]

I can lose access? 👀

[slim atlas]

ooOooh

[lament tendon]

Yea, the won't remove the rooms. ^_^

It'll stay open.

[slim atlas]

Okay thanks

[glass nest]

But that desk will me mine 😄

[lament tendon]

You can win a whole desk?

[glass nest]

Its one of the prizes 😄

[slim atlas]

Will I still get the glitch badge if I finish the challenges after the event is over?

[lament tendon]

I think so.

[slim atlas]

Awesome 😎👍

[amber hound]

I'm going for the chair then

[sinful moon]

Yeah I'm not sure about the achievement, but I do think it's based purely on if you completed the room or not

[lament tendon]

THM's face when someone in, like, India wins.

[slim atlas]

I like feeling like Ash Ketchum gaining the badges in THM lol

[sinful moon]

mhmm it's nice

[glass nest]

gamified learning for the win!

[lament tendon]

I am decently sure that I have a badge from the 2019 or 2020 AoC event, which was from way before I joined.

[fair lava]

For those who complete it within timeframe

[lament tendon]

But I have not been on THM in ages either, so there is a decent chance I am wrong.

[sinful moon]

lol yeah I can't lie, I frequent this Discord much more than I frequent the site these days

[glass nest]

me too. By the time I get home from work, I just wanna veg out

[slim atlas]

I was able to finish AoC last year but this year I'm studying for a cert + work so I got my hands full

[lament tendon]

I have committed sacrilege and moved over to HTB.

[glass nest]

For sure, meowbot. Gotta prirotise the industry recognised stuff over a game 🙂

[slim atlas]

I'm graduating from thm soon too but I'll probably be back to check their web app pentest path

THM has really upgraded their game lol

[lament tendon]

Eh, I would not call it graduating. Still think that THM is the better place to learn stuff.

I just like the challenges and CTFs on HTB more to pratice on.

[neat drum]

.

[slim atlas]

I'm only moving to HTB because most of my h4x0r friends are there lol

[glass nest]

Soo... we're not your friends? 😦

[lament tendon]

Because on THM some people still try to sell you a steganographed cleartext password in a PNG as a CTF. xD

[slim atlas]

You guys are my cyber friends

[lament tendon]

(Only in the easy challenges, but like... )

[glass nest]

Yeah, but the easy wins are what keep people going

[slim atlas]

You're making me look bad, Uncle

https://tenor.com/view/cat-sleep-depression-sleeping-cats-gif-23632688

[exotic vector]

phew task I was getting annoyed at is done

[glass nest]

Fae!! not see you in aaaggeeesss

[exotic vector]

I know. Im really far behind AoC and other stuff lol
so im trying to just get through AoC lol

[glass nest]

Me too. I'm on Day 3 😦 I'll have a pop later this evening

Still got 1 answer left to get on the Side Quest task 1 too.

[exotic vector]

I just finished day 7, was annoying because it kept terminating so every 20 mins it'll just nope out on me when im typing a command mid way through, so I had to speed up typing out the long annoying commands. But got it done, I had hope to get another task in today but I was typing so much so fast that my wrists hurt

[sinful moon]

I had a blast on the side quest last year, but yeah barely made progress even on the main quest this year lol

[glass nest]

Better than suffering the wrath of mrs fae 😄

[exotic vector]

I am not attempting the sidequests because im definitely not experienced enough to begin to do those, and yes I did try I was completely lost lol

[glass nest]

Hehe. well, trying is half the battle 🙂

[sinful moon]

Mhmm just difficult being busy with work and etc

But the side quests are at least worth a try indeed

[exotic vector]

and after losing all my notes thanks to my old ssd failing I lost motivation, because I now have to potentially redo them...

[glass nest]

Ellie - I had an urge to re-make my arcade the other day 😄 Gonna reward myself with it after all my xmas shopping is done

Fae - suddenly something like Notion is very attractive 😄

[rose tusk]

you should read the T&Cs 😄

[glass nest]

Bit - wouldn't be surprising. There arte LOT of indian folk on here

[exotic vector]

yeah im trying to find a notetaking app that can store stuff in a cloud somewhere that is completely free lol

[rose tusk]

notion

onenote

[glass nest]

Fae - Just use a regular one and back it up to Google Drive

[rose tusk]

github private repo

[glass nest]

Or.. what Chev said.

[sinful moon]

lol totally fair, but if all else fails there's always MAME :3

[rose tusk]

joplin with storage in one of the free storage drives, i actually have an article on this on my website lol

[rapid merlin]

I was looking at this today

[exotic vector]

omg is this the moment where I actually use github for the first time, besides not using it to download dodgy repos

[glass nest]

Muiri was really into Cherrytree at one point

[sinful moon]

I'm at work so some of my messages will be sporadic

[glass nest]

All your messages are sporadic. In frequency and in content 😄

[rapid merlin]

Oh nice okay thanks

[twin ridge]

Gave +1 Rep to @glass nest (current: #17 - 510)

[rose tusk]

this is what i listed myself:

[sinful moon]

lol hush

[slim atlas]

https://tenor.com/view/sensational-gif-4975652

[rose tusk]

no order of preferences, all of them are free 🙂

[sinful moon]

I can sometimes be quite verbose

Logseq is one I would recommend adding

[rose tusk]

@exotic vector hope this helps 🙂

[exotic vector]

thank you, i'll look into them

[twin ridge]

Gave +1 Rep to @rose tusk (current: #251 - 25)

[rose tusk]

pleasure is all mine

[rose tusk]

the article is like 1 year old, i'll refresh it, cheers for the heads up tho

[sinful moon]

Logseq is quite nice for being completely open source and has a sync feature, but both upside is downside: Everything is a bulletpoint

it's still markdown based but it's like 10/10 for work but less ideal for long notes

Daily journal though is what makes it even more ideal for work though

[rose tusk]

there was a really cool one i tried in the past called capacities

it has like telegram integrations but it's more like mindmaps and some sort of obsidian-esque note linking

[exotic vector]

luckily a lot of the stuff I have learned so far I remember how to do it.

[glass nest]

Yes Fae!

[rose tusk]

i feel you with hard drive failing, beginning of the year i lost 2 ssds in the timespace of 1 month lol

[glass nest]

Thats what it's all about

[sinful moon]

just watch out, Microsoft Defender will goble up any notes about reverse shells lol

[rose tusk]

you can add filepaths and stuff to exclusion if you are worried about it, isn't it

[exotic vector]

im on linux so I dont have to worry about defender

[glass nest]

Or screenshot. Obvious downslide is no copy/paste

[rose tusk]

in fact you can plop defender on linux, but it's easier if you're doing it via ARC

[sinful moon]

Good stuff, but I use every major OS every day c:

But yeah Linux main lol

[rose tusk]

exposure level 9001

[glass nest]

Geek

[sinful moon]

I say typing on my M4 Mac Mini

[exotic vector]

I had a little collection of shells from thm and now they're all gone although I know that in a practical real world sense, none of them are likely to work. But I felt like I needed them to help me understand shells

[boreal scarab]

@cosmic pendant face reveal

[rose tusk]

always add shikata ga nai 😄 that'll work

[sinful moon]

Yeah THM will help a ton with that understanding indeed

[glass nest]

again 😄

[sinful moon]

the main things that really helped me were making sh and etc more usable once you have that foothold

[loud marlin]

Speed limits are optional suggestion
-- My Boss

[exotic vector]

but yeah, im now back learning again lol

[glass nest]

Good effort fae 🙂 nice to see you again

[exotic vector]

when I wasnt around I wasnt really not doing anything, I was still looking under the hood of stuff lol

[sinful moon]

as one should c:

[exotic vector]

especially single player video games so I can obsessively play them at night even though my pc is definitely too weak to play it. So you take a peak and adjust a few things to play it.

[glass nest]

That is the best thing you have ever said 😄

[cloud quiver]

Which games do you play 🙂 ?

[sinful moon]

retro games are always a good bet as well, mhmm

[exotic vector]

at the moment stalker 2

[cloud quiver]

Great choice 😄 . I remember playing the original one a whillleeee ago 😄 . It was a masterpice imo , definitely in my top 10 🙂 .

[sinful moon]

too many smilies lol

[exotic vector]

its great, in the arena you can shoot out the spectators and push them around the arena.

[split ore]

bro likes to smile

[exotic vector]

anyway @glass nest what have you been up to?

[polar holly]

ughhh network on the beachfront today is horrid... Had to switch to four different wifi networks in like half an hour.

[warped grail]

[glass nest]

Just working. and xmas xhopping

I'm not all that exciting a person 😄

[knotty pendant]

Is it not possible to play Minecraft bedrock on linux?

[hushed vector]

[knotty pendant]

😡

[hushed vector]

Maybe try to use windows for that

[rapid merlin]

Hi

[knotty pendant]

I already installed Ubuntu

Windows is gone

[hushed vector]

Hello

[hushed vector]

[knotty pendant]

I can play java though

[hushed vector]

You should verify whether it is supported in the operating system.

[knotty pendant]

I keep getting Minecraft is not responding messages😔

[exotic vector]

yes you are !!!!

[split plover]

Where can I find groups of black hat hackers? Like chatrooms or stuff?

[neon belfry]

hey guys

I'm new here and just need a aclarification

[knotty pendant]

I get a lot more performance than what i got on windows

[hushed vector]

Maybe you shouldn't do that

[neon belfry]

do we need to runa and installed VMs to do THM ?

[hushed vector]

You can use attack box or your own vm

[loud marlin]

so i just lost my pc mouse on my table and can't find it...

[split plover]

Oh but why do you say that?

[hushed vector]

As there are involve in illegal activities

[neon belfry]

so basically use the vms as if I'm using my regular Computer

[split plover]

Well, that's what I wanna do for threat intelligence. Or should I look for other ways if there are

[split plover]

I mean not involve in cyber crime. Just wanna look into them yk

[hushed vector]

As tryhackme has both options either use their attack box or connect with openvpn in the vm to solve the rooms

[languid pecan]

@sinful moon Can you help me out?

[split plover]

Actually there is a room about how to get started and use openvpn. That might help you understand how it works and you can use it

[sick lance]

Java edition maybe?

[neon belfry]

🦾

[flint crow]

Hy

[sick lance]

@solid zenith please don't advertise on this server.

[cloud quiver]

Hi , welcome 😄

[languid pecan]

https://www.darkreading.com/cyberattacks-data-breaches/cultivating-hacker-mindset-cybersecurity-defense

[fiery imp]

howdy

[subtle bloom]

Guys I have made room for Password Cracking Does anybody know how much time it will take to go public?

[glass nest]

gotta be reviewed by the room testing crew

[chilly veldt]

most likely really long, cause if it's just password cracking, it will not be taken great by the public

[subtle bloom]

To make a room on password cracking was not a good idea at all ig😭

[glass nest]

no no, It's a good idea 🙂

Good work making a room.

[sick lance]

Is it easy to find the password?

[subtle bloom]

Depends

[sick lance]

https://help.tryhackme.com/en/articles/6495836-the-room-review-process

Please ensure that any brute-forcing such as password hashes or enumeration does not take longer than 5 minutes. Although the time taken depends on hardware, please use entries located high up in wordlists. We suggest you use the THM AttackBox as a benchmark for hash cracking and similar, as this is accessible to all.

[daring jackal]

I heard kali linux is a good OS because it already has a bunch of tools pre installed, after i learn my way through linux more I'll probably switch to that next

[glass nest]

It's good for pentesting, but not really all that stable to use as your everyday operating system

[daring jackal]

oh why's that? is it heavy on performance?

[glass nest]

more that..It might just crash.

nothing stopping you from using it on 'bare metal' (as we call it), just not reccommended

[daring jackal]

Oh shit, maybe i will just use it as a vm then

[exotic vector]

I would never bare metal run kali

[chilly veldt]

I wouldn't want to reinstall my operating system every 3rd month

[glass nest]

If you want linux as your main OS - something like ubuntu is a safe option

[drifting mural]

Can I play on it

[daring jackal]

well it wasnt gonna be anytime soon i was saying eventually but yeah im on ubuntu right now

[glass nest]

Oreh - Sure.

not as good as Windows for that, but modding and OS communities are always working on ways to make them work

faulty - It's good that you wanna mess about with different OS's though 🙂

[daring jackal]

i think they have steam on their app center if im not mistaken but i didnt try it out because my laptop isnt meant for gaming

[exotic vector]

if you play multiplayer games just stick to windows, as multiplayer games rely on kernel level anti-cheat

[daring jackal]

yeah i was just asking for an opinion i wasnt planning on switching right away lol just eventually but if youre saying that it might crash more often then I'll probably use kali as a vm or just stick with ubuntu

[glass nest]

It's all good, faulty. We are all here because we are inquisitive, and like asking questions 🙂

[daring jackal]

Cause i was born a windows user i barely know shit😭

[glass nest]

Yet.

but you are learning 🙂

[daring jackal]

im trying its fun to learn about just A LOT to learn about

[exotic vector]

theres a meme I found and I wish I still had it

[glass nest]

Faulty - well, you'll learn a lot by using it as your everyday. another challenge to set yourself - whenever yo do an action (unzip a file, install a package.. etc) see if you can find a way of doing it using only the terminal

[wind lake]

whats up gang

[daring jackal]

without looking it up right?💀

[glass nest]

Just faulty becoming part of the Linux cult

Nah, Look it up, of course.

but remember that for next time 🙂

[daring jackal]

https://tenor.com/view/vubdiscord-cult-notacult-thomasvanhaecht-gif-21570248

ah ok

[drifting mural]

Jingle bells Jingle bells Jingle mada*aka

[wind lake]

ive heard ubuntu is pretty damn decent now for gaming

[chilly veldt]

https://www.protondb.com/explore

[normal fable]

Just got home from taking the ISC2 CC exam. Passed. 🙂 yay

[chilly veldt]

gg

[exotic vector]

it is, and if you have amd hardware then all the drivers come with the kernel.

Which is why I went with Arch based as the kernel gets updated a lot quicker so I get more updates to my amd hardware a bit quicker

[normal fable]

Took me half the given time to complete.

[wind lake]

congrats

[wind lake]

nice

[glass nest]

Good work EZ 🙂

[daring jackal]

congratu-damn-lations

[normal fable]

I didn't even really study for it. 🤣

[drifting mural]

Lol

[normal fable]

Anyone here I'm sure can pass it..

[drifting mural]

I have exams for the first semester

This month

[daring jackal]

good luck oreh

[drifting mural]

Thanks

[glass nest]

you got this oreh!

[drifting mural]

Appreciate it!

Illtry my best

[sturdy pike]

what would be a goood linux cert?

[chilly veldt]

linux+

from comptia

[daring jackal]

im still waiting on more info on this cybersecurity class from this community college, it's supposed to prepare me for a few of the comptia+ exams alongside some other things but they haven't been responding so I'll probably have to call them

[glass nest]

Yeah, as bella says. the CompTIA ones are generally recognised

[drifting mural]

Security+ is a must

[sturdy pike]

It's really confusing, I was recommended linux essentials the other day by an IT professional, for cybersec it's different?

[glass nest]

eh. Linux is Linux.

[exotic vector]

I taught myself linux

[drifting mural]

I don't think you need that certificate

What you need is security +

[glass nest]

honestly, if you are applying for a specific job, the specific cert for that job would have the most impact. the others would just be 'frosting' on the cake

[chilly veldt]

both works, don't really need a linux cert anywhere

[drifting mural]

Any cert for linux is good

[sturdy pike]

ah, for more context, I've more or less have prepared a plan for what I'm gonna do which was referred to me by people here

[glass nest]

People? Huh. i thought we were all AI bots.

[sturdy pike]

okay so I guess, whatever works, if it's needed I'll just give the test and get it, I taught linux to myself by breaking and fixing machines again and again

[drifting mural]

Go ask them, what are they expecting from you

[chilly veldt]

AI bots? I am merely a fraction of your imagination

[glass nest]

Frizzy - best way to learn

[glass nest]

a very pink fraction 😄

[sturdy pike]

Solipsism

[daring jackal]

imagination? Im just the guy that appears in your mirror when you walk away

[sturdy pike]

oh, it's you? then I don't have anything to worry about, you seem friendly

[drifting mural]

St*u guys

[fair lava]

Either LPIC-1 or CompTIA Linux+, one is more prevalent and other one is recognized globally

[daring jackal]

I try to be lol, no point in being hostile

[sturdy pike]

is it? It was a rabbit hole at the time, my brain muscle was sore to the core, I wanted break from linux more

[glass nest]

Yeah, but how much did you learn in the process?

[sturdy pike]

noted

[alpine lintel]

has the vpn been dcing everyone or just me?

[sturdy pike]

I know a few tools but the basic structure is well known to me, installing libraries, programs, integrating them, removing boot and make it still work (although I don't think I can do it anymore)

[sturdy pike]

santa will give you an extra present this time

[daring jackal]

i hope to god he does, i need my pc parts

[glass nest]

Well, have a look at the syllabus of the certs recommended. You may find that it's a bit too basic for your skillz at this point. So getting it would just be cert-stacking.

[drifting mural]

Yep

[sturdy pike]

It's my dream to have a PC but me travelling around the world doesn't allow me that

[drifting mural]

Lol

[rapid merlin]

I feel u

[glass nest]

It's my dream to travel around the world, but my PC is here. So y'know. 2 sides of the same coin 😄

[drifting mural]

Yeahh

[daring jackal]

im just hoping i dont shock the living hell out of myself or the motherboard💀 im taking some precautions though so it should be fine

[sturdy pike]

Yeah that's what I need, can't be all bark and show no bite, a proof would make things better

[glass nest]

if it works for you 🙂

[drifting mural]

I'll buy myself a PC since my laptop is getting old and I don't travel that much

[glass nest]

There is an argument to be made that getting, say sec+ or pentest+, could indicate that you know linux well.

[exotic vector]

on your pc you can travel the world through google maps

[daring jackal]

[sturdy pike]

I was just being metaphorical, I meant that I roam around in my country studying at different places, I need a PC to settle but I can't, and I have to earn myself a new laptop haha

[glass nest]

fae - did that during Covid. Just made me have itchy feet, y'know? 😄

I havn't roamed in years 😦

[drifting mural]

Mb you should allow yourself to relax

[glass nest]

to @loud marlin ?

[sturdy pike]

here I was casually touching the core components of my laptop while cleaning it, a single static and the machine is a brick, I like to gamble but only in gacha games lol

[sturdy pike]

I think it will, you know I've taken in a lot of information since the last three days trying to clear my confusions, now my planning board is a mess, too many scribbles on my notebook

[exotic vector]

yeah never do any work on your laptop or computers without anti-static bracelet or something

[sturdy pike]

I'll directly prepare for sec+ then, I have to get an entry level job in the blue team anyways as the red team is distant for now

[drifting mural]

Go for it

[glass nest]

I was told a thing, but dunno if it's true. I'll get confirmation. @naive violet I was once told that when working on a PC, static can be prevented by leaving it plugged in with the socket switched off. Is that accurate?

[daring jackal]

i bought some anti static gloves for work a while back and brought them to my house, i also plan on getting an esd mat

[sturdy pike]

Is it exciting settled at one place? My environment is all hustle and bustle so I gotta move around rather than stay still at a place

[naive violet]

Sort of, need to earth yourself too.
Only works in the UK or other places with similarly strict grounding and switched sockets

Killing kit with static is rare now though

[sturdy pike]

I did that one time without anything or any precautions, then I started disconnecting the battery, I can kinda do a little self service myself now after 4.5 years with this laptop

[naive violet]

Esqy.... I need a desktop project enclosure. Think set top box size or smaller

[glass nest]

Frizzy - The stability is nice, but I like seeing new places too.

Lego is always cool, James?

[naive violet]

Sadly no

[exotic vector]

when I take apart my computer for whatever reason I take my socks off and ground myself first lol then I completely turn off and unplug the computer and let it sit for a bit.

[glass nest]

Maybe grab some random old tech from a car boot, and gut it to fir your projects inside?

[sturdy pike]

This all makes my laptop feel old, but it still works strong and can run AAA+ games released today so I think I can be a little more productive till I get a new one, for which I'm trying to get an internship

[sturdy pike]

We really are two sides of the same coin, you have what I don't

I have a real serious question

[rapid merlin]

or you can just touch something that is metal every now and then

[sturdy pike]

you guys still here?

[rapid merlin]

that is what I used to do

I also had the professional grounding bracelet

[naive violet]

I've got a lovely box but it's got way too many holes in it currently, would need to make a new front plate

[glass nest]

Well, I mean, folded metal can be lit.

I know you're not a fan of the lines on 3D printed stuff

a wooden box would be funny, especially if your thing is super techy 😄

those holes can house arbitrary LEDs?

[boreal scarab]

https://en.wikipedia.org/wiki/Sandwich,_Kent

Brits confuse the fuck outta me

[glass nest]

The feeling is mutual, I'm sure 😄

[rapid merlin]

Why is a City named Kent almost in every country

XD

Was Kent someone special?

please educate me

[boreal scarab]

@glass nest We need a Brit!

[exotic vector]

Kent is a county in the UK

[glass nest]

I think fae is one

[rapid merlin]

oh cus Kent is a city in WA state for Example

I think there is Kent street or City in Turkiye

I dunno I just seem to see it everywhere

[rapid merlin]

oh dang Uncle I didnt know you had EJPt

was it hard

to get

I did their course

[glass nest]

Nah. was really easy

[rapid merlin]

which was easy

oh nice

[exotic vector]

unfortunately I am

[rapid merlin]

I remember when it was free

[half girder]

@rapid merlin well, actually its quite easy, the bri'ish invaded and occupied 62 countries which nowadays celebrate the independence annually. therefore you can tell, their names were used a lot 😉

[rapid merlin]

unfortunatellu you are a brit?

[exotic vector]

yes

[rapid merlin]

oh makes sense

[rapid merlin]

why unfortunatelly

[glass nest]

I think Beerise mistook me for an Englishperson :p

[rapid merlin]

UK is good

[rocky basalt]

Heyy

[rapid merlin]

hi

https://tenor.com/view/dog-gif-9481602568918433940

[exotic vector]

there are many reasons

[rocky basalt]

Lmao

[half girder]

you didnt decide yet for pg tips or yorkshire? 🙂

[rapid merlin]

tbh trust me when I say this you woulnnt wanna be from anywhere else

yall got everything one needs to live a decent life

[exotic vector]

yorkshire tea obvs

[half girder]

northaner?

[exotic vector]

nope

[glass nest]

Anything above the M4 is northern

[rocky basalt]

Why such a religious name?

[rapid merlin]

why not

[half girder]

damn, you ruin my hypothesis, that yorkshire is in the north and pg tips in the south 😦

[rapid merlin]

😉

[rocky basalt]

So how's life treating y'all

[rapid merlin]

good Praise be to God

https://tenor.com/view/cat-cam-cat-camera-cat-wide-cat-wide-gif-16729570673879006163

you see this cat is eating really good

[rocky basalt]

Nicee

[rapid merlin]

are you new to cybersec

or you have some experience

[rocky basalt]

yea its been a year

im new

[rapid merlin]

nice do you work in the field or?

still prepapring?

[half girder]

@rapid merlin also for that there is an explanation why people are not happy in the european countries, its a mixture of post roman decadence and just-world fallacy. that mixed with the impact of social media gives people the impression they wouldnt live their best life. things like having a roof over the head, and a full plate on the table, are not considered worthy anymore, rather as default basic thing. so unhappyness (is that a word?) and discontent spread.

[rapid merlin]

that is sad tbh

[half girder]

jep

[glass nest]

It's the 'Grass is greener' argument

[rapid merlin]

I also noticed yall are being instigated against each other in Europe

[half girder]

exactly, right on point 🙂

[half girder]

huh? no, its just no one likes the french. thats mutual lol

[glass nest]

😮

[rapid merlin]

no I mean like people within a country

[half girder]

oh that

[rapid merlin]

like for exmaple certain group in the UK doesnt like another and etc etc

[half girder]

yea, envy

[rapid merlin]

same thing with the US

[exotic vector]

there was a reddit war earlier this year, the entire balkans subreddits banded together with Albania. Wild stuff I know :O

[glass nest]

I always figured that county/city rivalries were a normal thing

Even within cities

Especially when sports are included

[half girder]

yea in my village no one likes the next village next to us lol

[rapid merlin]

but the thing is it is not even about cities anymore

it is a group vs a group

[rocky basalt]

preparing like currently im on the verge of uni applications and stuff yk

[glass nest]

Except on here. Literally no-one cares where anyone else is from. apart from genuine interest

[half girder]

hm group vs group, i dont know, no idea

[exotic vector]

yeah no one in the city likes the town I live in when its all urban between the city and the town so they're attached lol

[glass nest]

PG Tips vs yorkshire for example. Vim vs Nano vs Emacs

[half girder]

well nano is clearly the better editor cough ^^

on the other side, kooty only needs to hear of best practise and git, and you have a fight ^^

[glass nest]

wouldnt know. been stuck in Vim for 2 years

[half girder]

yea no idea, i never was in the editor or distribution fights, i have my favos, thats it

[glass nest]

Can't find the exit command 😄

[exotic vector]

vim came pre-installed on my OS so I use kate editor

[half girder]

:wq ^^

[exotic vector]

ctrl+x ?

[glass nest]

fae - doesnt work in Vim :p

[devout palm]

Hei

[half girder]

favo editor, i dont know, actually i only use cli editors when i really need to, i avoid them

[exotic vector]

I use cli editors when im already doing something in the terminal

[half girder]

jep, like just a minor change or so, then its ok, otherwise i prefer a minimum of luxury, so zed is actually nice

[glass nest]

prefer a minimum of luxury... wow.

[half girder]

too harsh? 😉

[glass nest]

Treat yourself, man 😄

[half girder]

well, click click syntax highlighting, auto completion, more click click and common short cuts 😉

[exotic vector]

I love syntax highlighting, I need it so things are readable

[half girder]

and yes i know there are plugins for that also for cli editors lol

[lament tendon]

Setting up a self hosted mail server from scratch ought to be the most painful thing I have done in a hot minute, lmfao.

[exotic vector]

I dont envy you lol

[half girder]

@exotic vector could you do me a favor and check your yorkshire package whether it still has the "by appointment to HRH the royal price of wales" on the top?

[exotic vector]

I dont physically own any yorkshire tea box, all my teas are from lidl lol

[half girder]

oh ok, was curious whether they still use the old images on webshops

[exotic vector]

1sec ill have a look

[half girder]

also twinings used "by appointment to her majesty queen elisabeth II" xD

i mean, doesnt seem like legit commercial to me anymore 🤔

[exotic vector]

im crying 🤣

[half girder]

lol

well, someone gotta be passionate about the tea ^^

[exotic vector]

they might of updated the images used by supermarkets, on their official website they still have the old photos though

[devout palm]

lol

I want a yorkshire tea cup

[exotic vector]

yorkshire tea website has a page of how to make a proper cup of tea

[half girder]

well, a proper cuppa is also a topic which can cause discussions, same as cream or jam first on a scone ^^

[exotic vector]

thats a north south divide. I solved this issue by never having a scone

[half girder]

but scones are so tasty 😮

[devout palm]

Cookie

[half girder]

well for the obvious reason i dont have access to them, so i make them myself, but bad compared to one from an english tea house

[lament tendon]

That's hilarious.

[exotic vector]

ive been to a tea house once in my life, we had a little tea party. The fancy plates came out and everything

[drifting mural]

https://tenor.com/view/tf2-lore-team-fortress-2-gif-18342083926392112526

[timber galleon]

pick one: custard cream or bourbon biscuit

[exotic vector]

bourbon biscuit.

[wicked gazelle]

sup

[drifting mural]

Both

[half girder]

@exotic vector may i dm a tea house pic?

[exotic vector]

of course :)

[lament tendon]

if food { eat() }

It's quite easy.

[wet quail]

does tryhackme teach c for the reverse engineering sections

[lament tendon]

Hardly, from my experience.

Maybe they added something since I've last been active tho.

If you want to learn C and low level stuff, I can highly recommend pwn.college!

That site has a bit of a knowledge requirement for some of its stuff tho.

[modest mica]

best site to make a safe mail account?

[lament tendon]

Could recommend proton mail.

[half girder]

proton i guess

[lament tendon]

If you want to go secure-secure. go onion mail, you can make an account there over Tor.

[sick lance]

@jade ridge Can I help you? 🙂

[lament mantle]

Scripting languages: JavaScript (it's unavoidable), Python, Ruby, PHP. I'm a fan of Ruby since it has really nice web libraries which make writing custom scripts much easier (ex: nokogiri, mechanize, rest-client, ferrum, etc), also plenty of tools/frameworks.

[sick lance]

What do you use Ruby for, for web apps?

[lament tendon]

You are the first person I meet that even uses Ruby in the first place whaha.

I hear Ruby on Rails is pretty popular in web dev tho.

[sick lance]

I mean, you don't need to know any languages for hacking, it certanly helps, but it's not essential.

[autumn solar]

If you want to learn reverse engineering it has its uses, you'll need to be able to learn how to translate machine language to higher level language in your head and back again

[shell peak]

thats false

[grizzled wing]

thought the image would be smaller

[fossil merlin]

Learning C has made learning other languages way easier for me.

I'd only recommend learning it if you want to have a really deep understanding of OS's or plan on doing dev.

Otherwise most hackers I've met have just got the basics of a few languages down.

From what I understand it's not super necessary

[sick lance]

Explain.

[fossil merlin]

I've met plenty who just learned python and JS and have been doing great

[boreal scarab]

Which one is better?

[chilly veldt]

left

[normal fable]

left

[placid lagoon]

I'll say right just so that there's variety.

[fossil merlin]

Left

[normal fable]

Right kinda hurts my eyes.. tbh

[placid lagoon]

This reminds me of those tests they do when you get an eye exam

[normal fable]

@boreal scarab should have done a poll. 🤣

[normal fable]

Do they always try to stick the needle in your eye too?? 🤣

[boreal scarab]

Poll:
White Or Green

[normal fable]

Left is blue.. not white.. lol

[knotty pendant]

@fossil merlin you said you work as a it help desk person now?

[normal fable]

I do too

[knotty pendant]

I found this vid😭

[fossil merlin]

Provided onboarding goes well yes, I am taking an internal support position. 🙂‍↕️

[normal fable]

Service and Support Engineer is my technical title.. lol

[boreal scarab]

Left is white

[normal fable]

Why everything blue then? lol

[placid lagoon]

https://en.wikipedia.org/wiki/The_dress

[fossil merlin]

Peak, that's heavenly compared to what I'm doing rn

Every day at my current job feels like hell

[knotty pendant]

What was your worst call you ever got

[fossil merlin]

Geriatrics calling in asking for help with setting up a fire stick, they didn't have a router set up (though they have been paying for internet), didn't know what an HDMI cable was, didn't know how to work an on screen keyboard and we're very aggressive as it was "my job to fix it for them" the call lasted 4 hours

[boreal scarab]

"We've been trying to reach you about your car's extended warranty"

[fossil merlin]

I almost developed an ulcer and was also quitting smoking at the same time.

[daring jackal]

that sounds rough sorry you went through that

[normal fable]

Heh.. I had an hour long call with a guy who swore up and down his computer was plugged in.. he figured out the problem.. it wasn't plugged in.. after an HOUR... lmfao

[daring jackal]

that's insane💀

[normal fable]

Don't trust when a user says "Oh yeah I did it.." they likely didn't.. like that email that we sent out.. they def didn't read it. lol

[half girder]

https://tenor.com/view/it-problem-phone-call-have-you-tried-turning-it-off-and-on-again-gif-17823069

[daring jackal]

thats what my boss tells me and then when i get to check the teacher's computer they are like "Oh i already did that" when they in fact did not do that

[normal fable]

https://music.youtube.com/watch?v=rZHFoowQENQ&si=4tYrc5Sh0j7HNYtx

[fossil merlin]

I was getting paid at the very least.

This new job is a $4 pay cut but I'll get to do some real hot boy IT shit

[shell peak]

lets say u r doing exploit research and u see that the app u r exploiting has a flaw but only if u carefully bypass the seccomp or whatever, ull need good knowledge of asm to do it

[normal fable]

That's in-depth app exploitation.. not really to work in cybersec.. that's advanced stuff.

[sick lance]

ASM is a bit much for a web app.

90% of web app exploits are already written,

ASM is far too advanced then simple web app

Hell,.for web app you could potentially only use Burp.

[normal fable]

Bruh.,. just use random input.. maybe even directory traversal. No programming or knowledge of required.

[shell peak]

i think that the topic was hacking in general

[normal fable]

Hacking doesn't require knowing a programming language or how to program.

[shell peak]

u kinda have to understand how the program works in order to exploit it

[normal fable]

Most of us just like to learn.. like.. Python.. or C, C++ C# even.. don't know why you would want to learn C#.. but.. hey. lol

[shell peak]

or u can blatantly paste others people work

[half girder]

or use chatgpt for some basic stuff

[sick lance]

Hacking is very broad though.

It terms of what it is.

[normal fable]

Or use Metasploit?? lol

[shut hawk]

your narrowing down hacking to binexp basically

[shell peak]

i would say that this applies to web exp too

[sick lance]

So not ASM...

[shell peak]

that was just an example

[normal fable]

../../../ is programming?? it's not binexp.. but it's still hacking... finding a vuln.. and utilizing that vuln..

[fair lava]

No, but it is advantageous in reverse engineering so you can dissect and understand malware, in general to understand inner workings of systems

[normal fable]

I definitely agree that it's advantageous.. but it's not required.

but RE is def more advanced than using a basic exploit.

[shut hawk]

For reverse engineering, sure

[half girder]

the benefit i see in programming is actually you are not contingent on a certain tool, you can simply create your own things or modify existing stuff. once a tool should be popped, it wont impact you that bad.

[shell peak]

now u r narrowing down hacking to chroot escape techniques

[shut hawk]

no, it was a counter example to your generalisation that hacking requires programming

[devout palm]

Lockpicking is also a hacking

[normal fable]

It's just an example. What about SQLi? (SQUILLY!!)

[shell peak]

yeah so is what i said an example

[normal fable]

There are basic concepts you should know... I can see that point.. but you don't have to know how to program at all.

[shell peak]

depends on what r u planning to do i guess

[normal fable]

Hacking is a very broad term..

[fossil merlin]

@shell peak the only reason I chose to learn programming was because it was fun and I want to be a big brain boy.

For plenty of cybersec you don't need to know programming or at most know some scripting.

[normal fable]

Look.. the gov tried to prosecute someone for hitting F12 on their keyboard.. they considered that hacking. 🤣

[sick lance]

So we can agree, progamming isn't essential to hacking, it certainly helps, but you can manage fine without learning.

Learning to read code, is more important than learning to write code.

[fossil merlin]

😤

[shut hawk]

This

[fossil merlin]

Hit f12 and get hit with wire fraud. What a world.

[shell peak]

hacking is a broad term

[sick lance]

That's what I said, literally 5 mins ago.

[shell peak]

binexp, maldev and other fields are considered hacking. so u say u dont need to know programming languages for them?

[fossil merlin]

I once got in trouble at my current gig for doing stuff in terminal.

My boss thought I was "breaking things"

[sick lance]

It's a form of hacking that would require code, you're just arguing for the sake of arguing now.

[shell peak]

its a form of hacking that requires programming lmao

[sick lance]

These two topics listed are not topics beginners would pick up.

[shell peak]

soo? its still considered hacking

[sick lance]

Not for somebody new to the field.

[shell peak]

nevertheless

[normal fable]

We just find holes and poke at them.. maybe we should be called pokers?? LMFAO

[devout palm]

Poker face

[sick lance]

However, MalDev is not essential for ethical hacking.

[fair lava]

You won't need any programming knowledge for phishing or role playing, but you will need awareness and self efficacy to seek support if that happens, although you will still need to understand some technical aspects of it, it stays rooted in psychological manipulation

[shell peak]

for some branches of "hacking" u dont need programming languages i agree with that

[fossil merlin]

Earlier in the conversation they stated that programming isn't required for many parts of cybersec.

Stating that because maldev requires programming cybersec as a whole requires programming seems a little bit pedantic

[stiff rune]

do i have to use the discord token from the site to associate my account here?

[sharp citrus]

I could not find an article, please try again.

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Dec 17, 2024, 9:21 PM

[devout palm]

Follow this link ^

[stiff rune]

thanks

[shell peak]

alright buddy

[normal fable]

https://tenor.com/view/buddy-gif-1355133136296934405

reminded me of that. lol

[devout palm]

Pal

[normal fable]

🤣

[fossil merlin]

I can't decide if south park was better back then or if I thought it was funny because I was a kid

[normal fable]

Some stuff I watched as a kid.... oh my...... if they put that on TV these days... lol

[shut hawk]

ok pal!

[devout palm]

Ok lad

[fossil merlin]

Man I just wanna watch ferngully on VHS one more time.

[half girder]

still makes me wonder how a generation which grew up on southpark and simpsons can be so thin skinned these days ^^

[fossil merlin]

I think it just depends on the intent behind the offending party.

[normal fable]

Kinda weird.. but yeah..

I grew up with headbangers ball and bevis and butthead.. so.. 🤷

[fossil merlin]

I'm happy to have a friend make a bad joke but if a stranger starts intentionally poking at me in bad faith that's an issue imo.

Apply that to the macro culture and you have a bunch of "Schrodingers assholes"

[half girder]

agree on that

[fossil merlin]

I will say that there is a coterie (online especially) that does seek out things to make hay out of. But it's not nearly as large as the contemporary news makes it out to be.

Most people just want to be treated well and/or left alone.

It's why I moved from bar work/bouncing to IT. Got tired of dealing with other people.

[shut hawk]

ah so I guess you haven't experienced being IT helpdesk?

[normal fable]

How can I help? 🤣

[shut hawk]

https://tenor.com/view/hello-it-have-you-tried-turning-it-off-and-on-again-telephone-on-call-gif-15495555

[normal fable]

LOL! So often does that actually fix the problem.

[half girder]

sometimes i wonder whether workmates or customers are worse ..

[normal fable]

Have you ensured that your device is fully up-to-date and rebooted? No.. you have to reboot after.. go ahead and do that.

[half girder]

when i was dealing with my IT support when changing department, it took 3 IT helpdesk guys to apply a new phone number... "you already have a phone number ... err yes, but i need a new one because new building and new department.. so i need a number from there ... but you have a number .... ugh" .. it took a week btw

[normal fable]

We only have 5 IT support people for a world wide org... just help desk.. not full IT dept. lol

[half girder]

uhm.. we have an IT dept for each region .. but they are responsible for 100k people

[normal fable]

Ah.. We are only about 600 people at this point.. so that's really not a lot. lol

[half girder]

i think certain services are centralized though, but usually you only deal with 1st and 2nd level

most things actually even work ^^

[cursive crag]

im the fake it guy at my job our real one doesnt respond to me ever sice i pen tested the router 😂

IT*

[glass nest]

thats probably beecause you didn't ask before 'pentesting' it.

[cursive crag]

more then likely i was using our network for awhile as my personal playground to test tools and explore but ive stopped since using tryhackme

[timid depot]

If you did that at my place you wouldn't be able to access anything but notepad

[normal fable]

*a paper notepad 🤣

[glass nest]

If that happened at my place, he'd be fired at the least, and reported to the police at worst.

[normal fable]

We take that stuff serious in my env.

[boreal scarab]

https://youtube.com/shorts/Z7NM2ag35Bw?si=kDlzPosJ5YKYeKDj

Mfers

[normal fable]

🤣

@boreal scarab it's not a drone.. that's ME!

[dense minnow]

is there any discount code for tryhackme subscription this christmas?

[worldly cedar]

Hello guys
Is someone here good at stegnography pls ? I need help for my studies

[sick lance]

Yes AOC2024

[sick lance]

We don't help with school work

[worldly cedar]

It's cyber security work

[dense minnow]

oh nice, thanks a lot

[sick lance]

Still can't help

[dense minnow]

it only works for annual subscription I guess I have to do that then

was planning for monthly

[sick lance]

Yes

[cursive crag]

omg thankfully i still have a job and am allowed to use my laptop

[sick lance]

Byod?.
Yikes

[normal fable]

Annual is the way to go. You're gonna use THM for more than a month anyway. 😉

[cursive crag]

never cause any damage and reported what i found i was just trying to learn 😫

[normal fable]

and.. cheaper.

[cursive crag]

and also just fumbling abound at times i had no idea what i even accesed or tried to access

[normal fable]

You should learn on your own devices or where you have explicit permission to do so.

imo

[cursive crag]

agreed i was doing this before i knew you needed permission

[cursive crag]

yeah well kinda well the owner is super cheap and wont buy new computers a lot of them are running on outdated software. and more then likly have malware on them. i know at some point a couple years ago they got held for ransome but they dont take it to serious so i just use my own laptop.

[opaque flax]

I can’t even write scripts to automate tasks at work

[shut hawk]

discord wtf

[amber hound]

Aka buy nitro plz

[cursive crag]

i did some simple scripts today to pull PDF's from my work email sorth them then bluk print it kinda works lol

[sick lance]

Wasn't this done before, down 250MB to 25?

Now 10?

[shut hawk]

I honestly can't remember, I think they increased it to 25 and then suddenly brought it back down again

[opaque flax]

we have threalocker blocking execution of anything not whitelisted

it's safe but my job is less efficient for it

[rapid merlin]

You look like someone I used to know when I was younger and I’ve been trying to remember his name

[glass nest]

https://tenor.com/view/now-youre-just-somebody-that-i-used-to-know-wouter-de-backer-gotye-somebody-that-i-used-to-know-song-i-dont-know-you-anymore-gif-18632753

[cursive crag]

Ahhh makes sense I deal with a ton of paperwork so fortunately they let me automate as I please as long as I can make it work

[rapid merlin]

Ngl thousands of people are somebody that I used to know

[amber hound]

well idk my name is the name you see on the profile also Armanndo

xd

[rapid merlin]

I don’t talk to a lot of people I used to know

I’m the problem

😂

[glass nest]

you've been perfectly pleasant to me.

[rapid merlin]

That’s because you’re pleasant

[amber hound]

which means im not

[rapid merlin]

I have a zero BS policy

[amber hound]

-1 morale

xd

[rapid merlin]

This wasn’t his name

But I can’t remember his name

😅

[glass nest]

Wouldn't that be good for your plants though?

[amber hound]

ohh wait so im just a look alike okay okay +1 morale

[rapid merlin]

I pet my plants everyday

[glass nest]

i mean real BS

[rapid merlin]

Yeah that would be good but HS is better

If you know you know

[glass nest]

Well, So far in my life, I've not needed to learn.

[rapid merlin]

Horse shite

😂

Easier to get a hold of

[rapid merlin]

Yeah, it’s better for you not to know me, for your own sanity

[glass nest]

Except for 1 thing. Me and some guys were having a few beers and helping a buddy out in his garden. He decided he wanted a plum tree. We were all... lightly inebriated (apart from him), so he drove use to a garden centre. I held up the tree to the guy there and said 'how do we make this actually happen?'. He said 'you'll need fish blood and bone'.

I made a witty comment, but probably not aprops for here

But never knew that was a thing

[amber hound]

https://tenor.com/view/cat-insane-cat-meme-insanity-losing-grip-gif-2901353152573298214

[rapid merlin]

My dad gets all that special stuff

I just use liquid seaweed

[rapid merlin]

Oh lovely, well welcome to the madhouse

[rapid merlin]

I need to know

[glass nest]

Needless to say, he was not amused 😄

[sand trench]

god meeps shadow is extra exhausted... time to go sleep sloop to the beep boop for the meep moop

[normal fable]

omg early for shadow

Nite shadow.

[boreal scarab]

https://tenor.com/view/fps-tactical-swat-swat-team-ready-or-not-game-gif-24633908

[rapid merlin]

Good night

[mellow gull]

A good evening to all

[normal fable]

Oh poo...

[boreal scarab]

@rapid merlin WAIT

I have a pic for you

[cursive crag]

I got left on read once, I sent a carrier pigeon so she know it’s real

[boreal scarab]

[slate phoenix]

https://tenor.com/view/scout-update-nothing-dissappointment-gif-9922939

[slate phoenix]

Logging in to advent of cyber to more log analysis

[agile hazel]

hey

[modest mica]

is there anything like gimp or paint in kali linux?

just need a way so store screenshots for a sec

[mellow gull]

Gimp has a Linux install through a flatpak

But by default I don't know for Kali

You can also use prtscn and it'll save a screenshot into your pictures folder directly if you don't need a special viewer?

[knotty pendant]

Hi

I just thought of the best website idea

[modest mica]

tell us

[knotty pendant]

Im going to make a website with a whole bunch of programming books for people who cant afford them or cant find them

[modest mica]

good idea

[azure hill]

you mean like pirate bay

[chrome plaza]

Can someone help me we this question: https://0x00sec.org/t/path-traversal-bypass/42453

Hey guys, i have tried to bypass python 3.12 builtin http file server (python3 -m http.server <port> ). I was intrigued that we cannot read a file that is outside the base path of the server. If the server has a base path like /home/foo/bar, we can only access files or directories inside it, and /home/foo/bar/…/…/…/etc/passwd it’s redirect to /home/foo/bar. I’ve read the python 3.12 source code and it seems it’s using a function called normpath from a posix module. I’ve not found the source code so i decided to implement it myself. I’ve created a simple cli project in go to simulate the server, instead of creating a http server it only read the filepath that you put in the cli args. Can someone find a bug or a vulnerability in my code ?

(GitHub - thiago-figueredo/hacking-normpath: A golang simulation of python http.server to learn some path traversal tricks)

[boreal scarab]

Is this for a TryHackMe room?

[chrome plaza]

nope

I'm just studying

@boreal scarab can you help me ?

[frail tundra]

what's good everyone

[sick snow]

Evening sir.

[jolly ingot]

How man felt sayin' that

Damn

Imbedding failure

[cold sparrow]

What do I do if I see a drone?

[opaque flax]

what do you think you should do?

[blazing granite]

https://tenor.com/view/tumbleweed-silence-gif-19279803

[knotty pendant]

https://tenor.com/view/blud-dog-meme-goofy-ahh-gif-6688052593586142752

[opaque flax]

why do you keep spamming this gif

[knotty pendant]

Technically its not spamming

[opaque flax]

sure im being a little dramamtic but you keep posting it

[boreal scarab]

@mossy river https://github.com/araujo88/brainrot

I demand the bot be coded in this!

[wheat pecan]

Oh is it the genz like language?

[boreal scarab]

Worse

Gen Alpha

[swift ice]

that bot is so skibidi toilet that I obtained sigma rizz

[frail tundra]

hey I'm having troulbe with the linux fundamentals room the machine isn't working it say it doesn't exsit

[frail tundra]

this is a wild statments

[swift ice]

to be fair, that isn't my generation

[frail tundra]

mine either

I think that's all gen alpha

gen z and proud here lmao

[blazing granite]

mine either

[frail tundra]

can anyone help me with this room

[knotty pendant]

Which room?

[sinful moon]

the room I'm in, it feels like the walls are closing in on me. It's frightening please help

lol sorry I couldn't help it

[blazing granite]

#room-help

[blazing granite]

https://tenor.com/view/walls-closing-in-claustrophobic-closing-in-walls-moving-walls-narrowing-gif-14787117

[sinful moon]

Yeah I hate it when that happens

by the way if it helps anyone since I just shared this with a user in DMs, these are my ~/.zshrc aliases for SSH to my remote pentesting server to provide HTTP(S) or RDP to my local computer for use with TryHackMe. We discussed this yesterday

alias nyx="ssh elizabeth@10.10.10.10"
alias nyx-proxy="ssh -C -D 8089 elizabeth@10.10.10.10"
alias nyx-rdp="ssh -L 13389:11.11.11.11:3389 10.10.10.10 -l elizabeth -N"

for RDP you have to provide the target machine (the 11. one) and then your ssh IP

nyx being the hostname of my remote server lol. Obviously I changed the IPs as well

it is kind of surreal to use RDP on my local computer, connected to my remote server in a datacenter, which its self is connected to THM via VPN

[steel aspen]

Genz is a weird one. Technically I'm a part of it but I don't think I am

[knotty pendant]

https://cdn.discordapp.com/attachments/1229069977689133086/1294657037409718345/scrm.gif

[sinful moon]

wat

[gray sonnet]

what did I just walk into...

[limpid apex]

hi, i see your profile reads dubai. i am also in dubai. please can we connect

[bold schooner]

Hello everyone!!! Someone have access to THM website right now?

[cloud quiver]

Works fine for me 🙂

[bold schooner]

OK. Thx a lot for your answer.

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #6 - 1360)

[whole yew]

shame on you using IPs instead of A records on your local DNS

🙂

[hidden glen]

btw can this be used in win ver?

[rapid karma]

Do you have to upgrade your qualifications to complete the test for this course
class name:Enumeration & brute force-Exploiting Vulnerable Password Reset Logic

it keeps showing the following issues:
The Community Edition of Burp Suite contains a demo version of Burp Intruder Some functionality is disabled, and attacks are time throttled Please visit https://portswigger.net for mo/ details about Burp Suite Professional which contains the full version.

[viral axle]

#general Where can we raise a feature request for the THM website?

[chilly veldt]

#feedback-and-ideas

[polar wraith]

is there no one i can dm to get feedback on my ctf without spoiling it?

like a mod or someone?

[sick lance]

If you're submitting it to QA for public release, staff prefer if you don't give it out

[polar wraith]

damn

alr

[neat drum]

damn twice today my attackbox has crashed during a capstone challenge, what is going on?

[rapid merlin]

that can be super stressful when that happens

it's like a SOC trying to DDoS an attacker

the last time it happened to me I legit had to take a break and come back to it later

[rapid merlin]

that reminds me of running tmux inside tmux 😄

[devout palm]

Hei

[fair lava]

If you use it frequently you can invest in professional edition but it won't be so cost effective, instead you can use Nikto, Hydra, Wfuzz....

[livid cove]

someone from germany?

[sick lance]

Many people.

[rapid merlin]

can i ask if anyone has used 'LetsDefend' the SOC training site before, and if so is it worth it. i hate it when website only sell you a yearly subscription and not a monthly one so you can't test it out without too much commitment.

[past sparrow]

seemed pretty meh to me tbh

[rapid merlin]

oo thanks, cus i have to admit i still sont reallly know too much about cybersecurity so i dont want to just fall for a shiny website

[twin ridge]

Gave +1 Rep to @past sparrow (current: #246 - 26)

[wooden totem]

you can basically "try" everything out with just looking at youtube videos of others using it

[rapid merlin]

ahh i will check it out, never knew that

[rapid merlin]

truee, but i dont know when or if they are sponsored by that website so it there will be mild biases.

[valid sigil]

So, THM changed the experience when completing the room. Almost scared to death after clicking submit to the last question of the room. 😱 😆

[rapid merlin]

i want to finish most of the content on here then get a HTB sub simultaneously

[past sparrow]

That's a common trap, shiny page, price tag and then your only lessons are recorded videos with no hands-on input

missclicked reply, oops

[past sparrow]

was intended to that

[rapid merlin]

🤣 it does happen time to time

[past sparrow]

I like to sit far from my screen, so I don't pay attention to those small text things 😎

[rapid merlin]

you sit afar consciously? i have a bad habbit of slowlyy leaning forward and then a bad eye strain

[past sparrow]

at this point its rather unconscious, I find it more comfortable, instead of getting closer to monitor, I like to zoom in webpages

[fiery juniper]

hey folks, I'm currently trying to do the athena room, I have clicked on the "start machine" button and it has given me that "hooray" popup, it has been like 10 minutes since then, I am yet not able to see the IP of the machine. is that normal?

[rapid merlin]

yes i zoom in too ha!

but nice meeting/talking to you @past sparrow gotta hop off

[past sparrow]

But what I suggest doing is check out their "curriculum" and just study those things on your own with help of youtube, google and some random github repos, because they are not putting any extra effort for exclusive content

[sick lance]

Hi there, can you please ask for support on their dedicated support service. 🙂

[past sparrow]

Alright, take care

[rapid merlin]

okay, and i just wanted to know the opinions of the people here cus i trust here, and asking them if their site is good or not is kinda you know...

[past sparrow]

I can only imagine reply from asking someone if their service is any good

[sick lance]

If you ask their discord server opinions on it, like you did in here.

[half badge]

https://tenor.com/view/eyedress-gif-24991003

[lament tendon]

How's life, everyone?

[mellow gull]

Life's lifin'. Good morning, all.

[cloud quiver]

Thanks for asking , good for now , how are you 😄 ?

[twin ridge]

Gave +1 Rep to @lament tendon (current: #37 - 234)

[lament tendon]

Well that's... good. I guess.

Whaha

[lament tendon]

Same. Bit tired, had no sleep.
But considering that I am surprisingly ok. ^_^

[mellow gull]

That's good to hear!

[cloud quiver]

Glad to hear that 😄

[lament tendon]

Just bored of the thing I have to do right now. So smalltalk with strangers on the internet it is.

[half badge]

I cooked some delicious Yakisoba noodles and I'm happy

Life's bad. I'm feeling good

[lament tendon]

Uuh, fancy.

[lament tendon]

Also huh?

[half badge]

Is it? 😭

Can't wait to continue advent of cyber

[lament tendon]

Well, I am yet to cook at all today, so I'd say yes.

[mellow gull]

Sometimes a little bit of socialization is necessary to give us the charge/motivation to do other things.

[half badge]

Ohh well yeah didn't have studies so I had all morning

[mellow gull]

Yakisoba is a big yum. It's not a lot of effort (usually) for the flavor you get.

[lament tendon]

I need to make some asian-ish food again sometimes.

Prolly just going to steal this idea, lel.

[safe hawk]

I am new to this server

[lament tendon]

Welcome. ^_^

[half badge]

Yes!

I picked up a new ok pan yesterday and some oyster sauce. And japanese soy sauce because the dark chinese one I had isn't exactly what I seek

Maybe I'll buy ingredients for some burgers or burritos. Basically uh I'm new to cooking but always liked it so I'm glad to experiment at my age :3

It's a passion!

[lament tendon]

Lmao.

You can exeriment with cooking at any age. ;D

I get you tho.

[mellow gull]

Cooking is a journey, like any other passion. You can step onto the road whenever you like, or take a break from it whenever you like. I really hope you enjoy the time you spend, at least in my case I've found it very peaceful.

[lament tendon]

Cooking is really boring, but eating stuff is very fun.

[half badge]

Ty! My passions are cooking, instruments and IT! Also cooking for loved ones is>>> (even though I'll die single hahaha)

[half badge]

Depends on who you are!

[lament tendon]

Well, true.

[half badge]

To me cooking is everything but boring lmao. It's up to preference

[mellow gull]

Some people find horseback riding or knitting extremely boring, but for some people it's worth investing all their free time into.

That's the wonder of being Human, being able to pursue the things that get our whimsy.

[lament tendon]

Absolutely. Not trying to argue against what you guys like, that is just my subjective opinion on the thing. ^_^

[mellow gull]

If you add costuming/acting to that you get the bulk of my interests too, so I get where you're coming from

[lament tendon]

If you can cook there is no chance you die single. ;D

[half badge]

HAHA good one 😜

[lament tendon]

Lemme guess, you're like 20?

[half badge]

Ohh? Wow! Tbh I always wanted to just know if I'd be good at acting because I'm very immersed in good fiction, understanding characters and feelings emotions and all but yeah

[half badge]

I won't really say but around that yes.

[mellow gull]

Acting is 90% passion and love for the role. If you put as much into it as you do for something else that you enjoy doing, you'll have no trouble in at least any theater or impromptu position.

[lament tendon]

Yee, totally fine. Just don't say that you'll be single forever at that age, that is unlikely and also kills your mood (eventually).

[mellow gull]

The current twenty-somethings have kind of a caustic dating market at the moment, but things do get better.

People mature and the things that they value evolve over time.

[lament tendon]

(I'm also 20-ish)

[half badge]

Kills my mood? Haha I'm actually a fair lot of depressed lmao. I just don't see any reason not to be positive and kind on this server!,

[half badge]

Woww gtkk

[mellow gull]

I totally get what you mean. Left to my own devices I can be really negative too, but being around likeminded people does a lot to help. If you're around people who like the same things you do and value your presence, it's a lot harder to let that little voice get to you.

[lament tendon]

That's my point. Been there, done that and at the end of the day, if you say stuff like that out loud you're at some point going to fully believe it.
And that doesn't feel good. At least from what I know, I suppose.

[half badge]

@mellow gull @lament tendon ur kind. Take care ❤️

[lament tendon]

Well, thanks. You too.

[mellow gull]

Reach out any time.

[floral hawk]

This cloud room from AoC (Task 22), that's some nice stuff!

Are there any estimates how many of the 131_484 people who joined the room are doing? This makes chances of winning anything astronomically low, right?

[sick lance]

It depends on how much tasks each person has done.

[mellow gull]

The amount of tickets you get are determined by the amount of questions you answer. If you assume that everyone answered all the questions, the chances of winning anything are approximately the same rate for everyone.

There are approximately 2,200 gifts (it's a little more), the majority of which are voucher items - but I'll count them anyways.

If everyone who's joined answers every question, you have a 1.6%~ chance of winning anything. Realistically the average user answer-rate is probably more of a slant curve so it should be higher than that.

So definitely not astronomically low.

[floral hawk]

So not astronomically low but still low. Much higher than I thought though.

What do we expect to be an average of answered questions per player?

[lament tendon]

I'd expect ~20.

[floral hawk]

Nice!

[lament tendon]

That does not mean that I will be right at all tho. xD

[sick lance]

It dips,.for me I haven't completed tasks for the last week, but nice been doing the side quests, and I'll finish off the path closer to 27th

[craggy finch]

hey i just completed the pre security,should i just continue following learning roadmap?

[cloud quiver]

Yes , I would recommend you to go with Cyber 101 now 😄

[floral hawk]

Well, if you feel confident, you can skip right to the Red Teaming, but chances are, you will come back to the security 101 fairly quickly.

[floral hawk]

I was trying to get them on the day of release initially, but started doing yesterday's task every morning. But got all of them and the yesterday's AZURE room is my favoruite so far.

[mellow gull]

You can safely assume the majority(about 60%~) of users won't clear more than the first few rooms, or a room set of the non-AB/VM rooms like the log checkers, since that's how user participation usually works.

The reality could be different, but I don't have access to THM's user graphs or anything so I'm just basing it on normal user activity in other places.

After that, it's a pretty quick hike to full participation, and you can probably assume about 20% of overall users will complete everything or at least the majority of content.

[craggy finch]

thank you

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #6 - 1370)

[floral hawk]

Very nice!

[mellow gull]

And Bit's estimate isn't far off, if not a little low. Most of the rooms have 3-5 questions, and while we haven't gotten access to all the rooms yet there's five that meet our established estimation for the majority of users to clear. If the trend remains the same, you'll probably see an average answer count of 30~ or so?

There's also a certain percentage of people that have joined the room just to read about the lottery but ultimately decided to do nothing, but I'm assuming everyone that's joined is participating by a standard graph.

[pallid cave]

Oh is the Aoc side quest room gone?

[sick lance]

No?

#1312113121040535656

[tall iris]

Hi 👋

[pulsar spoke]

Osu

[mellow gull]

[cloud quiver]

Hi , welcome 🙂

[tall iris]

Thank you

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #6 - 1373)

[exotic vector]

welp time to reinstall windows

[wheat mesa]

Hi guys, what do u think about Kali Purple?

[sick lance]

Yay.

[sick lance]

Eh, rather just use Windows for DFIR.

[wheat mesa]

I can't figure out why my VM box has a CPU usage of 90%

[naive violet]

Look at the processes

[wheat mesa]

Yes, my memory usage is about 30%, CPU is around 85%

[exotic vector]

its all because of task 14 of AoC because I cant paste anything into the cursed windows attackbox >.>

[languid egret]

My browser doesn’t work on my attack box so I can’t get past advent day 2

[frosty needle]

tryhackme down or wut ?

[blissful cedar]

I will ask the same question

[shut elk]

I am having probems too

[sick lance]

Check the pins in #1305926862114914325

Lol

[frosty needle]

yup i guess its down

its alright let tryhackme take a break hhhh

[whole gazelle]

looks like it

[chilly veldt]

finally pulled myself together and sent this to my manager and his manager (the CEO):

I have been thinking and would like to request a meeting in January about a change in my pay to reflect the amount of responsibilities that I have, even as an apprentice.

As I am currently in a position where I do work for 3-4 different positions interchanged in many departments, I have come to the realization that this amount of responsibility does not really fit an apprentice's salary,
but rather almost a Team Leads, therefore I wanted to request a talk about expectations and such.
Let's see what they say

[exotic vector]

I did, thm completely died lol

[real night]

when will it going to be back?

[lavish sage]

is the site down?

[sick lance]

Staff have been notified.

[real night]

yes 500 something wrong

[lavish sage]

im getting 504 gateway error

someone took room exercising a lil bit too serious and decided to take thm down

[languid jacinth]

yeah site must be down

[tacit tinsel]

Yeah.. its down guys

[torpid pasture]

yeah it's down

[pulsar spoke]

Ggs

[shut jungle]

I can't open the site either

[sick lance]

Nobody can...

Staff have been pinged.

[shut jungle]

Would this be the reason why I coudln't open my target site?

[chilly veldt]

yes

[real night]

I haven't done any events today unfortunately, it won't lose my streak

[lavish sage]

yes

[shut jungle]

Ohhh.....

[sick lance]

Maybe yes, maybe no.

[chilly veldt]

no streaks will be lost

[sick lance]

What's the target IP?

[tacit tinsel]

Credit Cards are now compromise 🤣🤣

[chilly veldt]

no?

[exotic vector]

it wasnt me, all I did was restart the machine and splitscreen and thm died lol

[crystal sonnet]

Mayor Malware is at it again

[knotty cargo]

sup Gs

[loud marlin]

Jabba or ben trip ower network cable and now ppl suffer 🙂

[shut jungle]

I was doing task 2 from AoC 2019, and I needed to start a machine where I will make dir enumeration. The things was that I couldn't connect to the needed site. I had OpenVPN set up correctly