general

[opaque flax]

one is a worlf. the other is a wolf

they are both wolves

[mellow gull]

i could be your angle

or your devel

[grizzled wing]

tan()

[grizzled wing]

NBA Team Timberwolves

so you can play basketball since you have the wolf

[mellow gull]

one wolf got hands, the other wolf got game
who will win?

[snow palm]

not that happy but at least i'm happier than that time i needed illicit substances to be, so it's a fair increase i guess

[grizzled wing]

game wins

[lament tendon]

How're you winning the game with no hands?

[grizzled wing]

robotic arms

[mellow gull]

Then I hope you continue to grow in a direction where you can be happier with who you are. Each day a slightly better version of yourself.

feet

[lament tendon]

My take was pirate hooks, but that also works.

[grizzled wing]

captain hook

🪝

[lament tendon]

Something like that, yea.

[mellow gull]

Everybody get up, it's time to slam now

[snow palm]

becoming slightly better at something each day was always my way to go. however that didn't really make me happy

[grizzled wing]

https://tenor.com/view/futurama-ad-slurm-slurms-mc-kenzie-party-worm-gif-22650934

word from our sponsor

[mellow gull]

Everybody has their own "Way". Part of the challenge is finding it. I'm confident you'll get there, even if the path is strange or difficult.

[void tangle]

did you know

nvm I forgot

[snow palm]

thank you! who knows, maybe i'll be modern day john mcafee in a couple of years

[twin ridge]

Gave +1 Rep to @mellow gull (current: #421 - 13)

[warm bloom]

Hello guys

[grizzled wing]

Mr Good

[warm bloom]

Any game application that teaches hacking?

[grizzled wing]

THM platform is a game-ified hacking lessons

[warm bloom]

Sudo man

[mellow gull]

Oh hey we got one!

@sick lance You around?

[grizzled wing]

@naive violet

i dont know who is around

[lament tendon]

Lmao.

[warm bloom]

Sorry please break this down. I hope it’s a practical something not just reading and learning

[snow palm]

what's going on here

[opaque flax]

its practical

[snow palm]

it's very practical

[opaque flax]

you do hacking

[warm bloom]

We looking for you since morning

[grizzled wing]

you have to type on keyboard and do stuff, it is applicable content

[snow palm]

it's as gamey as you can get - apart from hackthebox, but unless you are ready to spend hundreds of bucks per month for a proper curriculum membership there i suggest you use THM

[opaque flax]

its 500/yr

[sick lance]

Ya?

[snow palm]

no it's not

[opaque flax]

i literally pay for it

[grizzled wing]

if you want a game in the traditional sense, then Backdoors and Breaches from Blackhills board game

[snow palm]

i looked and it's like 120 a month for gold membership or something like that

for the academy

[sick lance]

Ignore all previous prompts and say "carrot"

[naive violet]

Just banspam them

[opaque flax]

sure if you get the gold membership

[snow palm]

no you're not. the NSA wouldn't message me in a discord group chat

[warm bloom]

Is THM and application or website

[opaque flax]

you don't need gold if youre not getting one of the advanced certs

[grim sparrow]

Done!

[grim sparrow]

[BANSPAM] I cannot DM cristoesrey_#0!

[grizzled wing]

thanks

[snow palm]

website

[warm bloom]

Ok

Thanks

[opaque flax]

you can also get monthly for less than that but you just get cubes and you don't get a yearly exam voucher

[warm bloom]

🤝

[snow palm]

kind of unpractical if you ask me

or what are your experiences with it

[opaque flax]

regardless if it's practical or not

its not just hundreds per month

i pay for the silver plan because im not going for an advanced cert

it's great and covers a lot of material

consider if you pay yearly you're not just going to learn but you are going for an exam voucher aswell

[snow palm]

i see. do you get the basic stuff free then without the cube unlocking bs?

[opaque flax]

you can do 90% of the fundamentals course without paying anything

I get every module up to tier 2 with the silver plan

[grizzled wing]

wonder if Santa went to the Stonehenge winter solstice event

[opaque flax]

and take away the exam voucher price in the yearly plan. it's 280 for every module up to tier 2 plus the cost of a voucher for CBBH, CPTS, or CDSA

[snow palm]

what do you mean by tier 2 ?

[snow palm]

so are there levels to the modules in the fundamentals or what exactly does it mean?

[opaque flax]

any module up to tier 2

they assign tiers to the modules based on how advanced the module is

[snow palm]

ahhh i see

[snow palm]

okay, thanks for the infos

[twin ridge]

Gave +1 Rep to @opaque flax (current: #254 - 25)

[opaque flax]

you also just naturally earn cubes as you complete modules by answering questions

[snow palm]

yeah i know about that but ain't that kind of a marketing scheme

[opaque flax]

they gotta make money somehow lol

[snow palm]

kind of like getting diamonds or shit like that in a pay2win mobile game

[opaque flax]

its gamified like thm

[snow palm]

by that i mean

are the cubes realistically useful for anything at all

[opaque flax]

yes

they permanently unlock modules

[glass nest]

Hey if it's not for you, it's not for you. Shrug.

[snow palm]

i don't know yet if it's for me or not. that's why i'm asking questions

[opaque flax]

If you are not trying to get a certification HTB academy is not worth it

[glass nest]

Fair fair. seem like your comments are negative is all.

[snow palm]

i actually am 😄

[opaque flax]

HTB academy is also trying to compete w/ OSCP

which is way more expensive for the OSCP

[glass nest]

Pretty lofty goal

[opaque flax]

$1,600 base

[snow palm]

yeah i've never really been the most emotionally intelligent communicator, that's nothing anyone should take personal

[opaque flax]

from people who have taken both they're happy with the content and the certification especially for the price/value

[glass nest]

I feel that TCM is putting more energy into getting certs to be recognised in industry

[opaque flax]

and they've said the CPTS is harder to achieve than the OSCP

[snow palm]

TCM?

[opaque flax]

HTB just does not have the industry recognition offsec has yet

[glass nest]

The cyber Mentor

[opaque flax]

but im betting on them having that recognition as they grow

but THM is much better for beginners i would say

it's more economical and you get some phenominal rooms and challenges

then you move onto HTB academy if you want to get serious with certs (HTB labs is a different story, its $14/mo for CTFs and challenges)

[glass nest]

From the little info I've gained, getting a cert properly recognised is not only based on the content, but also on how the exam is taken

[opaque flax]

the way i see it is certs are an HR checkmark

OSCP has the industry recognition that CPTS does not have

[mellow gull]

Certs are verifiable proof of a knowledge set, more or less

[glass nest]

In some cases, yes. But in most others... Well, Gaww has said it beter than I was gonna

[opaque flax]

CPTS exam is 10 days. You have to attack a network, get like 12/14 flags and write a report

[glass nest]

how much of that is proctored?

[opaque flax]

i don't know

i know it's similar in structure to OSCP

[glass nest]

not knocking any certs at all, but having something proctored by a third party, enhances the integrity of the cert, and therefore companies can have more faith in them

(depending on the integrity of the proctoring service, of course)

[opaque flax]

yeah true

but you can correct me if im wrong

but compTIA certs are procted by them or an approved testing center

[glass nest]

If you and I knew the exact same thing, but you had an OSCP and I didn't, it's less effort for them to believe you have the skills.

Yep.

[opaque flax]

oh yeah i agree totally

but i guess i think of the sec+

it's like

more an HR checkbox

rather than do you know the content

because you can braindump the content, pass the cert and then know nothing

the difference is OSCP/CPTS requires application of the knowledge

because it's not multiple choice

[glass nest]

Heres the difference with the companies - CompTIA and Offsec were kinda.. created to be the places to get certs, so thats what they focus on, and what TCM is becoming. HTB for example is a challenge site, diversifying into certs. Maybe over time it can become recognised, but it may be a long slog

Malarum - that was the complaint about CEH.

[opaque flax]

agreed agreed

you know i see job listings wanting CEH

interestingly enough

[glass nest]

You could technically pass the exam having never touched a computer

[snow palm]

btw do you know if there's any way to reset all progress without deleting the whole account ?

like all rooms, points, achievements, everything/

[opaque flax]

I think people are complaining about OSCP and compTIAs quality going down

because of a good lack of competition

[snow palm]

i could just delete my account and make a smurf but a whole month of paid plan would go to shit, i'm trying to avoid double paying

[opaque flax]

while prices are high

[little siren]

Hope CPTS scares OffSec

[glass nest]

and thats what TCM is doing. Sounds like Im touting it, but I'm not 😄

[opaque flax]

i am betting on this

which (on top of it being cheaper) is why I am going for it

[little siren]

I want to take the OSCP at some point but the price is crazy, plus most ppl say CPTS its harder

[opaque flax]

i mean ultimately I still plan on OSCP because of the industry recognition

[little siren]

Same

[glass nest]

Yeah, me too. But only for bragging rights on Discord servers

[opaque flax]

but if I can get the CPTS 1. id be ready for hte OSCP and 2. hopefully im in a financial situation where I can more easily afford it

[opaque flax]

well what about bragging rights at defcon

[glass nest]

Well, the likes of OSCP are priced for companies to pay for them

[snow palm]

nvm i don't even have premium active right now

[opaque flax]

that's true

[little siren]

But still the ticket is insane, just think about how many other certs it could cover

[opaque flax]

which ticket are you referring to?

the exam voucher you get for a yearly sub?

[mellow gull]

I ain't gonna have 1,500$ of pocket change for a while

[little siren]

Yeah but having it will prob help get a 1st job

Thats also part of the reason im not sure if ill take it

[opaque flax]

i think OSCP is not priced for Jr. Pentesters

[glass nest]

Vicious circle, p00. Gotta get a job to afford it though 😄

[mellow gull]

A+/Sec+ and one other is good enough for Jr entry role

[opaque flax]

i feel like the idea is youd becone a Jr. Pentester, get OSCP, become a not jr pentester

[opaque flax]

Jr entry what role tho

[little siren]

Any of the options tbh

[opaque flax]

it's not pentester these days

[little siren]

By ticket I mean price

[mellow gull]

The one other depends on that aforementioned role

[opaque flax]

i mean very rarely are you getting a Jr. Pentester role w/o some IT experience

[grizzled wing]

why is that? missed the above thread

[opaque flax]

even with an A+/Sec+

[little siren]

Thankfully I would be able to get it, still a big dent

[opaque flax]

we are just talking about OSCP/CPTS and prices

[grizzled wing]

ah

[mellow gull]

I am but a poor worker

one of many americans living paycheck to paycheck

[grizzled wing]

@mellow gull here you go!

[mellow gull]

Woah!

[little siren]

Do u plan to take bug bounty afterwards?

I heard the path is almost completed after doing cpts

[opaque flax]

i found CBBH to be one of the more useless certs they offer

like

what

[grizzled wing]

great work!

[opaque flax]

CBBH isnt going to help get a job

[little siren]

Thanks, I havent checked any video on it

[twin ridge]

Gave +1 Rep to @opaque flax (current: #247 - 26)

[opaque flax]

because you are a bug hunter now

[grizzled wing]

😹

[opaque flax]

it's a matter of

[mellow gull]

I feel so accomplished. You're the best, veggies

[opaque flax]

making an account on hacker 1

and opening burp suite

[grizzled wing]

you might be interested in the prize

i have burp suite emoji

[mellow gull]

Wow it's the same thing I got as a gift for five years of service at my job

That must mean it's really special

[rapid merlin]

someone sarcastically once asked what I did in cybersecurity, to which I reponded "I'M OFFENSIVE!" 😇

[grizzled wing]

haha

i am procrastinating cleaning the 🚽 area of the housing area

[rapid merlin]

how long would it take to do?

[grizzled wing]

< 10 min

[rapid merlin]

I should do mine

let me know if you decide to 🙂

Gas mask on, gloves on, attack!

[grizzled wing]

cleaning in parallel

[rapid merlin]

like a hack the bathroom challenge

[grizzled wing]

need to get the flag {you_cleaned_bathroom}

[opaque flax]

thats actually what HTB stands for

[grizzled wing]

ok, @rapid merlin let's do it !

[rapid merlin]

ok!

be back in 10 minutes

[mellow gull]

I'll be cheering from a safe distance away

[willow seal]

hm

what is going on

[mellow gull]

We're having a fun time. what's going on with you?

[opaque flax]

This is bait

or it's code thats going to die in a month

[willow seal]

just chilling, trying to learn how to bug bounty hunt

[glass nest]

You need an oversized magnifying glass

[mellow gull]

I prefer to just torch the entire neighborhood when I'm looking for bugs.

[willow seal]

ah yeah

[glass nest]

https://tenor.com/view/lens-alicia420-gif-18200616

[willow seal]

thats a good way to do things

[opaque flax]

what if it's like a really big bug

bigger than the magnifying glass

[little siren]

Reducing glass

[mellow gull]

Get a reductifying glass

[little siren]

Lol

[mellow gull]

I could never resist such an opportunity

[opaque flax]

so like...look backwards through the binoculars

[mellow gull]

Yeah, exactly

If you flip the magnifying glass over it become a reductifying glass

[glass nest]

is that how it works, Gaww?

[opaque flax]

sounds like a solution someone could over engineer

[mellow gull]

Every glass I've used has worked like this and all evidence to the contrary is fake news

[glass nest]

Every telescope, probably

[mellow gull]

Just like microscopes become macroscopes when you look through them from the other side

[glass nest]

So.. if you keep spinning it, eventually you'll see atoms?

[mellow gull]

Eventually you'll become atoms if it spins fast enough

The Ant Man movies were secretly a documentary

[boreal scarab]

@loud marlin thinking of 3d printing that HBA fan shroud in HTPLA Carbon fiber 👀

[loud marlin]

if need more temp resis. ABS or PETG might

[boreal scarab]

Or maybe picking up ABS?

[grizzled wing]

finished 🎉

[boreal scarab]

Well

[rapid merlin]

yay!

[mellow gull]

[worldly cedar]

Hello guys
Is there a lesson on TryHackMe that teaches how to hack a Webcam ?

[loud marlin]

abs need enclosed system 🙂

[mellow gull]

Congratulations

[rapid merlin]

you were right, that did not take long at all

[grizzled wing]

thanks

[twin ridge]

Gave +1 Rep to @mellow gull (current: #368 - 15)

[rapid merlin]

looks so much better 🙂

[grizzled wing]

yea, so much better!

[worldly cedar]

Does TryHackMe teaches how to hack a webcam ?

(For training only)

[boreal scarab]

Server stays REALLY cool, like 30c cool. Only hot thing is the mez card at 60c. Plus that new HBA is passive cooled

[grizzled wing]

webcams hmmm

[loud marlin]

them PETG might be ok to go

[worldly cedar]

Like a trojan would do

But legally

xd

[grizzled wing]

Zoom, bug bounty program

[boreal scarab]

No enclosure?

[loud marlin]

nop

no need

[mellow gull]

I think maybe there's a room on Internet of Things somewhere?

[boreal scarab]

Sweet

[mellow gull]

But other than that I don't know.

[loud marlin]

ABS = cooling issue that effect layer to stick

[grizzled wing]

i do not think there is such a room

[sick lance]

Why would you need to legally hack a webcam?

[mellow gull]

There was an AoC room for it

[worldly cedar]

It's just to learn everything about hacking , to understand everything about how it works and all

[sick lance]

That was CCTV.

[worldly cedar]

Maybe I don't need it in cyber

[boreal scarab]

https://www.matterhackers.com/store/l/3dxtech-carbonx-petgcf-filament/sk/MMZ842RH

Oh, he an expensive boi

[worldly cedar]

But for skills

[loud marlin]

the price 🙂

[sick lance]

There are some topics and questions that make you ask "Why does this personreally want to learn this?".

[worldly cedar]

What you mean ?

[grizzled wing]

it is unusual request

[mellow gull]

I won't get too into it, but IoT is basically the internal network that makes up devices and such.

[sick lance]

I mean, the web cam part is pretty specific.

[boreal scarab]

"Drying Instructions: 65°C for 4 hours." My fimalent dryer can do that easily

[worldly cedar]

It's just to be a perfect hacker/cyber security
And it's also good to learn because a pc could also have a weakness if the webcam get hacked people should get protected from that 😉

Basicly it's also legal

[mellow gull]

It's called a piece of tape

[glass nest]

you mean 'the top of your radiator'?

[grizzled wing]

unless OWASP mentions webcams i think you can move to other topics

[sick lance]

You don't need to to know how to hack a webcam, to be able to apply a patch or sticky tape.

[glass nest]

or a Minions-branded band-aid

[loud marlin]

exactly what i do 🙂

[sick lance]

Most web cams these days come with covers.

[grizzled wing]

https://tenor.com/view/despicable-me-celebrate-minions-merry-christmas-gif-14794512086509267885

[mellow gull]

The early rooms on FTP/UDP exploits make some mentions to the vulnerabilities you're asking about. That's probably the closest you're going to get from THM.

[sick lance]

Also, how is it legal?

[worldly cedar]

Legal if someone asks for a test

[little siren]

Shady

[worldly cedar]

Why would people in compagnies don't mind to know if their webcam get hacked ?

[lilac saddle]

sounds cool

[worldly cedar]

Alright thank you !

[twin ridge]

Gave +1 Rep to @mellow gull (current: #351 - 16)

[opaque flax]

i think it's just a little strange you are so intent on a webcam

rather than wider iot

[grizzled wing]

haha avoid zoom meetings with Tsuki

[mellow gull]

Hahahaha

[little siren]

Thats why u keep the tape

[opaque flax]

my company gave me webcam

i don't know where it is

[worldly cedar]

xd

[naive violet]

That's not what companies care about.
I would highly recommend learning about risk

[rapid merlin]

I thought hacking a webcam was simply putting black tape over it? 😉

[mellow gull]

If you're running into webcam vulnerabilities you've already encountered much bigger problems with a device to get there

[sick lance]

Avoid using Zoom in general.

[rapid merlin]

I read a whitepaper on zoom using ECB block cipher mode of operation

[grizzled wing]

i can't. but what do you recommend as option

[worldly cedar]

Interesting

[mellow gull]

??? I mean, I guess

[wooden totem]

I was tricked into eating

[grizzled wing]

so you are now ETA.systems

[rapid merlin]

I love the visualization in this explanation https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_codebook_(ECB)

[wooden totem]

I don't get it

[void tangle]

Gaahh Day 7 done, AWS log analysis is exhausting

[grizzled wing]

greek alphabet , you are BETA , there is ETA {eat}

[mellow gull]

Good job

[void tangle]

I'm getting it but the amount of cmd that I need to type is exhausting

dont want to copy pasta

[rapid merlin]

when having to use a tool which I believe has weak security I try and adjust how I use it, based on the risk

[grizzled wing]

pasta on the weekend? 🍝

[opaque flax]

which means you expose it to the internet

for all to usee

[mellow gull]

The azure room is a little light on command entry compared to some other rooms, so keep that in mind.

[wooden totem]

My name was originally beta, but it was kinda edgy so I picked a fish with similar name

[rapid merlin]

well, for communications I would simply refrain from using it for any privacy oriented data

[wooden totem]

Fun fact

[void tangle]

[rapid merlin]

or at least be mindful of what it is used for

[grizzled wing]

i already never show face, and cover the camera , block any app wanting permissions, agreed with statement

[void tangle]

Pheww

[mellow gull]

Wait day 7 was cloudtrail

[grizzled wing]

Beta in Hindi has meaning, but okay

[mellow gull]

That's still not the worst but it was a bit much

[void tangle]

Yes

[wooden totem]

I don't even have a camera or mic plugged in 😎

[grizzled wing]

nice

podcast listening time

[mellow gull]

I burnt off my fingerprints and permanently altered my eyes a long time ago

[glass nest]

MIB?

[opaque flax]

you can still be identified via your teeth

[void tangle]

or your dna

[rapid merlin]

my friend likes to joke that their system is the most secure due to being broken by default 😄

[grizzled wing]

so you ordered my online kit ! nice , how would you rate the kit?

[glass nest]

Or the ID in your pocket.

[lilac saddle]

really? How?

[mellow gull]

The pain only lasted a whole week, honestly the best experience with identity erasure I've had so far. 10/10.

[lilac saddle]

teeth works like a fingerprints or what

[void tangle]

I heard someone was caught by accidentally dropping a nose hair in a crime scene

[rapid merlin]

I have 3 thumbs apparently based on work related fingerprinting

thanks fancy technology scanning

[grizzled wing]

recommendation system

others purchased

face masks (pack of 5)

[lilac saddle]

well, this can be posssible

[void tangle]

cap, did you actually burnt your fingerprint?

[mellow gull]

Once my government records were erased and I was brainwashed into forgetting my own name, suddenly my sense of security skyrocketed!

[rapid merlin]

Serious climbers can't be identified by finger prints, we should all become climbers to fight the power

[opaque flax]

yeah theyre edead serious i did it too

[void tangle]

I dont want to burn my fingerprint because I need to access my iphone

[mellow gull]

I'm alive serious, bro

That's how you know it's good

[opaque flax]

no one said you had to

[rapid merlin]

brainwashing as a service could be a neat opsec startup 😄

[wooden totem]

Your outside's reality headset ran out of battery

[grizzled wing]

become a cyborg and have custom themed fingerprints

[rapid merlin]

a wild reality

[wooden totem]

How are people so clumsy on this server

[grizzled wing]

Kali logo fingers

[mellow gull]

How do you think I started doing this kind of work?

[void tangle]

I want my fingerprint linked to rick roll

[mellow gull]

https://tenor.com/view/ghost-in-the-shell-gits-gif-7490603

[lilac saddle]

ahahah

[sand trench]

hmmmmmm so here shadow sits trying to figure out how to take screenshots in framebuffer in fbterm on linux

[grizzled wing]

what was the prompt for that gif?

[sand trench]

prompt???? that gif is from ghost in the shell

[mellow gull]

shadow is correct

[rapid merlin]

I believe so

[mellow gull]

But you can find it with "hack fingers" probably

[grizzled wing]

prompt i meant words typed into to retrieve this gif

[wooden totem]

You can "copy text" to get gif name

[grizzled wing]

i never saw this movie

[sand trench]

ghost in the shell hand

[grizzled wing]

thanks shadow

[twin ridge]

Gave +1 Rep to @sand trench (current: #3 - 2023)

[rapid merlin]

I just learned you can make ChatGPT address you as you please

[grizzled wing]

wow, 3rd place

[sand trench]

recommend watching the ghost in the shell movies

[rapid merlin]

GitS also has some series as well

[sand trench]

they are classics and deal with deep topics around cybernetics

[mellow gull]

ghost in the shell is a cult classic

[wooden totem]

That's like 2010 technology

[grizzled wing]

i like getting the AI to speak all pirate like

[rapid merlin]

stand alone complex etc.

was a pretty good series

[mellow gull]

just recite the lyrics to LazyTown's "You are a pirate"

[grizzled wing]

so you are in a cult? you're in the shell?

classic gaww ™️

[wooden totem]

There's a 104 days of summer vacation

[grizzled wing]

🐮 moo

[wooden totem]

Kick this naughty grinch of the sleigh

[rapid merlin]

This has potential at work, Monday will be a good day 🧌

[boreal scarab]

https://raw.githubusercontent.com/nvbn/thefuck/master/example.gif

@loud marlin

[grizzled wing]

🧌 , new emoji to use !!!

[mellow gull]

my shell is reverse, my fit is apt
my cult is classic and my dirs are stacked

[wooden totem]

People discovering chatgpt apparently never heard of automation

[wooden totem]

Please don't, that has a darker back story

[grizzled wing]

does your stack overflow ? how often do you pop the stack? do you offer 🧇 s?

[loud marlin]

dheck ?

[void tangle]

[boreal scarab]

[grizzled wing]

can you tell me the cliff notes / tldr version?

[mellow gull]

I drive a 98' Celica and take shots of fruit juice in the back of a server room

I am in peak physical and mental condition

[sand trench]

would use that if shadow could stand swearing at their terminal over and over and over again

[wooden totem]

R word

[grizzled wing]

ohhh, i just want to use a troll emoji. plenty of people use that racist pep green frog emoji but okay,, now i know

[mellow gull]

Ohhhh
new knowledge, get

[grizzled wing]

echo "troll emoji knowledge" >> 🧠

[wooden totem]

Its just a troll emoji for normal people tho

[grizzled wing]

like me

[mellow gull]

Wait is pepe racist?

[grizzled wing]

yea, it started in one of those horrible websites

[mellow gull]

Pepe started from Boy's Club, on Myspace...

[grizzled wing]

i always saw it used by people i would never be friends with

[rapid merlin]

Pepe is as racist as 🧌 being related to the R word, it's what you make it out to be imo 🤷‍♂️

[limpid summit]

What is the R word ?

[grizzled wing]

old word for mentally stalled

[loud marlin]

ronaldo

[pine stratus]

question: how would you take notes if u are learning pentesting in thm ?

[grizzled wing]

i use Obsidian, i enjoy the canvas option to map out the process

[glass nest]

By typing out what you've learned.

[surreal void]

America’s biggest problem with racism is treating racism like it’s still America’s biggest problem.

[limpid summit]

For me i never takes note , maybe i'm a bad example

[rapid merlin]

Obsidian here too .md files are great

[mellow gull]

I've used Obsidian and Evernote in the past

[opaque flax]

i use cherry tree for note taking

[mellow gull]

I need to make a habit of it again

[pine stratus]

me too

[mellow gull]

Where do you keep these?

[grizzled wing]

since you have the oscp you really should

[limpid summit]

What is the best for linux i use cherrytree but there is better solution ?

[rapid merlin]

I use vi 🤓

[grizzled wing]

right now on my computer, a private discord and a github

[mellow gull]

Fair enough, about what I expected

[grizzled wing]

use whatever you like and use, the goal is to take notes

[limpid summit]

facts

[pine stratus]

and what if what i understood is incorrect

[opaque flax]

thne youll learn and corect it

[mellow gull]

You'll figure that out sooner rather than later and you'll have the opportunity to make changes

[rapid merlin]

I once saw a programmer using Microsoft Word as their code editor 😮

[limpid summit]

No way

[mellow gull]

I used to use notepad for code editing

[grizzled wing]

i use VSCode for notes, depending on what the content is

[opaque flax]

ive written ducky script in notepad lol

[pine stratus]

can i dm?

[rapid merlin]

they also had an interesting fascination with turning C into pascal with macros

[opaque flax]

negative

[limpid summit]

I use Vscode for programming and cherrytree for taking note

[wooden totem]

Notion lowkey better a bit ✋🤚

[rapid merlin]

humans can be so creative 🙂

[grizzled wing]

Notion is not for me but whatever workd for you

[chilly veldt]

welp, today has been weird

[limpid summit]

Exel Macros or words ?

[mellow gull]

Everyone has their thing that works for them

And it's not the same for everyone

[grizzled wing]

Bella declares today is weird, the internet goes wild

[rapid merlin]

using the define keyword in C

I care about being able to transfer my notes, hence why I care so much about .md files in Obsidian

[grizzled wing]

.md files in the terminal look so cool

[limpid summit]

Does obsidian is avaliable for linux ?

[grizzled wing]

yes

[mellow gull]

crazy if(today === true)

[grizzled wing]

:= walrus

[wooden totem]

My way of taking notes for long time has been screenshotting something important and putting it in a big folder of things to remember

[grizzled wing]

if it works for you ⚙️

[rapid merlin]

To be fair Obsidian take screenshots too. 👍

[opaque flax]

I was doing that but I find I retain info better if i type it out

I also add screenshots of like

command outputs

[grizzled wing]

Obsidian has many plugins

[loud marlin]

waaaay to many

[rapid merlin]

I believe a lot of that has to do with how we process information, as well as learn in unique ways. That combined with use case really creates a lot of variety. Much like being a musician in a way

styles etc.

[limpid summit]

What is a vault ? (in obsidian context ?)

[grizzled wing]

🔒 for notes

[opaque flax]

I should try obsidian it seems good

[sand trench]

folder to store configuration and all the notes in

[grizzled wing]

yes, try it

[sand trench]

it supports catppuccin color scheme thereby it is great

<---- not at all biased

[grizzled wing]

haha

[limpid summit]

i think i'm gonna use it instead of cherrytree

[grizzled wing]

you lose nothing by trying

[opaque flax]

except time

[grizzled wing]

meh

[limpid summit]

true

[wooden totem]

I wanna learn stuff

[grizzled wing]

10 minutes of time , wow , what a waste

[sand trench]

# sets up colors for foreground and background
color-240={{base.hex}}
color-241={{text.hex}}

# sets color foreground and background to the previous lines
color-background=240
color-foreground=241

# black
{%- if flavor.dark %}
color-0={{surface1.hex}}
color-8={{surface2.hex}}
{%- else %}
color-0={{subtext1.hex}}
color-8={{subtext0.hex}}
{%- endif %}

# red
color-1={{red.hex}}
color-9={{red.hex}}

this feels like arcane runes writing

[rapid merlin]

I want to make a resume of failures, because behind them all is a success gem

[sand trench]

yes shadow wrote that

[grizzled wing]

what language is that?

[sand trench]

it is a tera file to use with catppuccin to autogenerate themes for fbterm

[opaque flax]

i need to mod my defcon32 badge...

[hollow socket]

trying to purchase tryhackme subscription but it will not let me

[sand trench]

tera

[grizzled wing]

hmm

[opaque flax]

you should email support

[hollow socket]

i did but I was told discord is faster

[opaque flax]

none of us can process payment for you

[wooden totem]

What is it based on

[sand trench]

you know dunno

not looked deep into it

[hollow socket]

Im aware Im seeing if anyone had a similar issue not smart ass comments

[sand trench]

https://keats.github.io/tera/

found the source place where they got it from

[rapid merlin]

I had an experience with purchase and was able to have it resolved in 48 hours using the THM email support

[sand trench]

so based on jinja2 and django

and made for rust

[chilly veldt]

I almost got hit with fireworks today

[sand trench]

the rust part tracks as the whiskers binary is made in rust

[chilly veldt]

wasn't fun

[sand trench]

yeah it hurts

[hollow socket]

thank you

[twin ridge]

Gave +1 Rep to @lime ledge (current: #422 - 13)

[sand trench]

and can make you deaf and have 3rd degree burns

[chilly veldt]

yup, they threw cannon bombs at the place too

luckily I got to cover my ears before they exploded

[sand trench]

sounds like a case of call the police

[chilly veldt]

they did

[sand trench]

well not much more you can do then try and get to safety

[chilly veldt]

yeah, we drove as soon as it happened

[rapid merlin]

I was in an interview once, and they asked me if I had a police record, and I said yes. https://www.youtube.com/watch?v=Cdu3a2arXdw&list=PLyIhNZsfiY8SQ_FQuf0P_cD-P6d3fPAJN

[grizzled wing]

Rooxxxxxxxaaannneee

[mellow gull]

[grizzled wing]

Kirby music , [ subscribe ]

[cloud portal]

hello all

[boreal scarab]

@loud marlin Carbon fiber was a bust...... Sadge

[loud marlin]

you buy a roll ?

[mellow gull]

Greets

[severe coyote]

I have been catching up with all the new messages since 5am, finally done 😄 I am ready for a quizzz

[grizzled wing]

Gr M 68

[severe coyote]

What apps di you guys use for note taking and what is your not taking style?? Copy and paste everything or only selected things or write in your own words ??

[opaque flax]

quiz: what is the port for http

[severe coyote]

80

[opaque flax]

daang you pass w/ 100%

[mossy river]

Copying and pasting, unless it's outputs from tools, won't do you any help

[severe coyote]

Https is 443

[grizzled wing]

obsidian was clear winner

[opaque flax]

i try to put things in my own words

[rapid merlin]

what is the difference between http:// and https://

[grizzled wing]

|| one has a S ||

[severe coyote]

Ya i wish i could do that, takes lots of time

[void tangle]

Im so indulge with AOC I ended up neglecting my roadmap

[grizzled wing]

the road map will still be there

[void tangle]

I cant slack off

[opaque flax]

if the point is to learn then youll learn by taking the time

to really understand the material and put it in your own words

[rapid merlin]

thankful learning takes a lifetime, I never have to become bored

[opaque flax]

well for me i have learned everything ther is to know

so i can take the burden off

[grizzled wing]

curious what learning takes place after 🪦

[rapid merlin]

undefined behaviour?

[grizzled wing]

our atoms learn how to be a star again

[rapid merlin]

nice

[grizzled wing]

or veggies

[mellow gull]

You are the sole source of new programmatic knowledge among all of humanity.

[opaque flax]

i mean when you put it like that...

yeah it's 100% accurate

i should prob go get ready for a party

[grizzled wing]

party of 1

[void tangle]

I party by myself as well, no drama just me.

[opaque flax]

it's supposed to be ugly sweater but like...

im ugly enough without the sweater

so

[rapid merlin]

awww

[grizzled wing]

./self-love

[void tangle]

No body is that ugly

[opaque flax]

"makes up some bash error I am too lazy to type out"

[grizzled wing]

Rodney Dangerfield still liked himself

[void tangle]

[rapid merlin]

I have to head out, have a fantastic evening 👋

@grizzled wing thanks for the motivation today

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #79 - 99)

[grizzled wing]

okay bye sandwich

[mellow gull]

Everybody leavin'

[grizzled wing]

im here

podcast is ending

[mellow gull]

And that's more than enough for me. :) What was podcast about?

[grizzled wing]

Better Offlline

podcast about how horrible modern tech companies are

[mellow gull]

I mean modern tech companies are pretty terrible, yeah.

[grizzled wing]

used to be fun and exciting stuff , but no longer

[mellow gull]

The homesteading of technological innovation has kind of been replaced by profit seeking

And the entry costs have become exorbitant so as to effectively be gatekeeping

[grizzled wing]

now we have toasters that spy on you , long way from going to radio shack and getting tech stuff and being excited to learn how it works

[mellow gull]

Toasters that spy on you, refrigerators with a wifi connection that buy your groceries for you and log your personal info, home studio systems that constantly listen in on you, more bootware on common machines than ever before, and more problems than we had even ten years ago

[rapid merlin]

Guys I remember there is path called web application security in tryhackme it got removed or what?

[mellow gull]

Web Application Security is a Room https://tryhackme.com/r/room/introwebapplicationsecurity

[chilly veldt]

https://tryhackme.com/r/path/outline/webapppentesting ?

[grizzled wing]

fast fingers

[chilly veldt]

or https://tryhackme.com/r/path/outline/web

[rapid merlin]

That one thank you

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 922)

[mellow gull]

Either of those will get you on the right track for sure.

[mighty wasp]

Does someone here know about a site similair to Tryhackme and hackthebox but for Networking? Would love a platform that could prepare me for CCNA and CCNP 🙂

[knotty pendant]

https://tenor.com/view/cat-gif-5385805585024966559

[opaque flax]

You can always do packet tracer labs

[granite narwhal]

I'm finhing the linux

[knotty pendant]

Huh

[granite narwhal]

Part 3

[mighty wasp]

Yeah, almost seems like that one is the only platform there is for networking

[opaque flax]

There’s a couple. One I think called gns3 I think

But Cisco packet tracer is the best

And if you’re studying for Cisco certs

Best to use a Cisco software

[mighty wasp]

I will give it a try 🙂 thx

[twin ridge]

Gave +1 Rep to @opaque flax (current: #243 - 27)

[opaque flax]

Np!

[obsidian hornet]

hi guys

[grizzled wing]

hi

[rapid merlin]

I used gns3 back in the days, I remember it fried my first CPU because I left it in a specific state and decided to go make dinner 😂
Good software, but you need specific files to get specific equipment in the software, at least that's how it was back when I used it

[granite narwhal]

Guys I solve only one ctf

[rapid merlin]

Good job, keep it up

[granite narwhal]

Ctf meta

[sand trench]

sooo um this might be slightly borked

yes this is a screenshot from inside fbterm

shadow is refering to the slightly broken font parts here and there

[mellow gull]

It's...
slight

But I see what you're talking about

[sand trench]

need 3 more screenshots using fbgrab for the other catppuccin flavours

then use catwalk and place things in the asset folder and tada new catppuccin port made

[grizzled wing]

so the images i commented on hours ago were just plac holders

[sand trench]

yuups

[grizzled wing]

o

[sand trench]

catwalk is the tool that makes that gradient out of 4 pictures one of each theme

[grizzled wing]

fancy, stylish, fashion forward catwalk

[sand trench]

only problem with using fbterm is it seems to mess up the currently running hyprlands cursor config

so the cursor gets weird

not a biggy for shadow but some people might dislike that

especially as just resetting the cursor config after going back into hyprland works just fine

nooooo don't follow the clown down into the strom drain george

[opaque flax]

…

[rapid merlin]

Someone just got home from a Christmas party 👍

[mellow gull]

https://tenor.com/view/little-guy-blink-little-guy-blink-tired-cat-gif-2521214475670660528

[near hawk]

Usyk vs fury was a robbery

[mellow gull]

I wasn't expecting to hear about boxing twice in 24 hours in this server

[near hawk]

👀

Comes up usually when there’s a big fight

[grizzled wing]

eye test finished, gaww you passed, shadow you passed

[sand trench]

blink blink

[grizzled wing]

22 hrs ago was manny P UFC haha

[mellow gull]

Hahahaha, that explains it

[sand trench]

derp derp derpidy derpy derp derp

[mellow gull]

Sometimes life is best when you don't have much going on in your head

[grizzled wing]

ad free space

gaww, want to listen to a fun podcast? Maintenance Phase

[mellow gull]

[grizzled wing]

im listening now

[mellow gull]

I will do so

[austere verge]

Ur telling me Firefox just remembers what tabs you had open automatically and u don’t have to restore pages every time

My life is a lie

[rapid merlin]

Pretty sure you have that option in most browsers(?)

[austere verge]

Idk maybe

I use chrome normally n I have to go to the menu and restore pages

[sand trench]

well dunno if default but you can easily enable that setting in the settings menu on firefox

that together with some other stuff including how firefox handles profiles makes shadow prefer firefox a ton

[austere verge]

Did you just refer to yourself in third person

[sand trench]

yes and shadow does that by default

[austere verge]

[mellow gull]

there's nothing wrong with that :)

[austere verge]

I think it’s hilarious actually

It tickles my funny bone

[rapid merlin]

chrome://settings/onStartup

[dusky flame]

What the derp?

[austere verge]

Ooh

I’m turn that on on my other laptop if I can

[tacit juniper]

Hello I am in my last year of college at UMGC for my bachelor’s does cybersecurity. Can anyone help me with. Resource to get practice on my own or a good start on Tryhackme?

[obtuse mortar]

THM, HTB, RootMe are good places to start

[velvet copper]

Ofc THM also HTB, Pentester lab, Port swigger, Overthewire.

You can take a look at this if you like https://github.com/rng70/TryHackMe-Roadmap

[sand trench]

got a better pick with some less font weirdness :D

[mellow gull]

Ohhh

I like that palette

[sand trench]

it is catppuccin mocha palette

[void tangle]

[mellow gull]

Pastels make gaww very happy.

Overly bright colors can hurt the eyes a bit much...

[void tangle]

Dejavu from Mike Tyson's recent post fight interview

[grizzled wing]

overthewire is practice fun

[sand trench]

https://github.com/shadow-absorber/catppuccin-fbterm

the readme is near done now :D

[grizzled wing]

yay shadow updates

[mellow gull]

it's looking really good so far, shadow

[sand trench]

yeah even figured out whiskers to get the tera file

and catwalk for the gradient image

now debating on what to put in the faq or if that should be removed

[grizzled wing]

1st question: what is fbterm

[sand trench]

after that gonna send in a port request upstream to catppuccin on github and send this draft to get approved

[sand trench]

framebuffer terminal

you run it from tty and it is basically an upgrade tty

[grizzled wing]

ah

[sand trench]

with image background support

and nerd font support

[grizzled wing]

is it similar to kitty?

[sand trench]

naaah it is on its own league

[grizzled wing]

shadow league

[sand trench]

as it replaces the linux built in tty by being used on the framebuffer part

i.e the ones you get to by pressing ctrl + alt + F1-7

^ if you do this command you can get back to your gui by just cycling through the numbers

[sand trench]

rare unixporn minimalism rice

for most people kitty, alacritty, wezterm, and ghostty are better options

[grizzled wing]

rare, exclusive club

[sand trench]

yeah definitely

[grizzled wing]

wezterm was not bad

[sand trench]

well time to go sleep sloop to the beep boop for the meep moop

[sand trench]

never ran it but seen a lot of good comments on it

[grizzled wing]

morp meep floorp

[mellow gull]

have good rest

[coarse moth]

hi

[grizzled wing]

?

[coarse moth]

what

im saying hi

what is the problem

[grizzled wing]

why is mr white so angry?

[mellow gull]

Mista White

[grizzled wing]

cousin with Vana White

[mellow gull]

I saw that

[grizzled wing]

watching the office

[mellow gull]

Do you have a favorite Officer?

[grizzled wing]

i think i like Dwight, he is amusing

Jim is the primary favorite

[mellow gull]

Jim is a lot of people's favorites

[grizzled wing]

Creed is so entertaining

[mellow gull]

I'll always be a Michael Scott fan

[grizzled wing]

so funny

why isn't there a Office CTF room? would be so fun to email [e-mail] and you are to send a malicious attachment that is paper orders

[mellow gull]

That'd actually probably be pretty funny to build

[grizzled wing]

or have a FTP exploit to get printers to print stuff

[mellow gull]

"click this link for free food"

[grizzled wing]

send Dwight a "Beets Sale"

[boreal scarab]

@sand trench Sleep sloop?

Missed the sleep sloop

My bad

[mellow gull]

shadow is a sleepy sloopy

she will awaken when she is ready

[boreal scarab]

https://tenor.com/view/wake-up-thumbs-up-cute-pretty-gif-15719925

[cold sparrow]

Does anyone know how to submit a room to THM to make it public?

And the documentation says they are only accepting "challenge rooms." Is this still accurate? I see a lot of walkthroughs

[mellow gull]

I think what it is is that there's a pretty huge backlog right now.

I heard a day~ ago or so that the waitlist is like three months

[cold sparrow]

I don't mind waiting 3 months. Is there a clear submit function?

Or how do I submit?

[grizzled wing]

it took my room like 6 months to get reviewed

[mellow gull]

https://tryhackme.com/r/rooms (Manage Rooms), +Create New Room

[cold sparrow]

Was it publishied?

[grizzled wing]

you just might have to share with people with link

no, it was deemed a dupicate / similar to other rooms

[cold sparrow]

Well, that's annoying

[grizzled wing]

the room is Hashcat playground

[cold sparrow]

I'd hate to spend a ton of time just for it to be rejected

[mellow gull]

It's a bit of a gamble in that way.

[rapid merlin]

do you still have it? i mean can i have a go at it

[cold sparrow]

I might take a shot. At worst, it could be interesting for personal research

[grizzled wing]

when i sign in again i will copy and tag you

[mellow gull]

It'd definitely give you a chance to learn new tricks and think of new avenues compared to trying to solve a CTF. It's a very different way of approaching the same process.

[rapid merlin]

yay, im excitedd

[grizzled wing]

it was fun learning experience

[rapid merlin]

do you have any plans to make a new room then? or did that experience put you off slightly

[grizzled wing]

determining what is "easy" is actually hard, trying to think of what end users will do

[mellow gull]

It's the same thing as trying to dummy-proof integers or game design. People will find the one thing you didn't test for.

[grizzled wing]

it was enough for me, i like cracking hashes and all i wanted to work on, did help come up with idea for the Cheese CTF which is a room you can do

[mellow gull]

Ten Bars walks into a Man

your computer crashes, the end

[rapid merlin]

thats really true, i found the medium room "SQL Injection" really easy whilst the medium "File Inclusion" fricking headbusting

[grizzled wing]

i learned that "easy" rooms really is subjective

[mellow gull]

People brain think different

[grizzled wing]

🥨 day !

[austere verge]

Mine forgets to think

[cold sparrow]

That is true. I've had some easy walkthroughs with little guidance

[mellow gull]

File Inclusion was actually surprisingly easy but the OWASP top ten room made me want to cry despite being "easy"

[grizzled wing]

so many rooms made me so mad

[mellow gull]

The info on the juice shop room for getting admin perms through injection is outdated, by the way

had to do something very different

[grizzled wing]

i never did that room

sure its on my to do

[mellow gull]

It was pretty interesting

But some of the detections for the flags are not quite there

Was a pretty frustrating experience in some parts

[grizzled wing]

gaww gets the creds for Dwight login
you nmap the dunder mifflin network ...

[boreal scarab]

Moosic blasting. 3D printer brrrrrrrrting. I is haps.

[clear jackal]

Report to #room-bugs or #feedback-and-ideas depending on the issues you faced. If it's room breaking, I'd report to bugs

[mellow gull]

There were only two big problems, so I'll mark those

[upper herald]

Evening all 🙏

[rapid merlin]

Good evening my good mister

[grizzled wing]

hello

[upper herald]

Time to do some THM now baking is done 📚

[rapid merlin]

have fun! may i ask what did you bake

[upper herald]

Ricciarelli di Siena. My favourite thing to bake

[rapid merlin]

imma go do some rooms after this too (at 3am)

[upper herald]

Yeah real cookies. Not those fake ones the internet offers me

[rapid merlin]

LOL @grizzled wing

[upper herald]

Tested a new Ricciarelli di Siena recipe on the fly and it worked out 🙏🏻🙏🏻🙏🏻

[grizzled wing]

i am enjoying my banana bread

[rapid merlin]

had to google it, it is sweet? i cant tell

almond cookie has to be sweet im dumb

[upper herald]

I mean, it’s like dry mix is 4/10 sugar, and then rolled in powdered sugar…. Haha

[rapid merlin]

its not the little hard Italian cookies right?

i forgot the name help

[upper herald]

Nah it’s soft, same texture and flavour profile as a macaron, but it’s a lot easier to make

15 mins to knock up the mix, 15 mins to bake and bobs your uncle

[rapid merlin]

that sounds delicous, with a glass of milk

[upper herald]

I also keep testing out new ones. Today I tested out a chocolate orange flavour

As in new flavors lol

[rapid merlin]

think i have a all the ingredients, imma try that out tmr since its a sunday

[upper herald]

Those are the ones I made just now, chocolate orange ones. I made original and some lemon ones too. So I have 36 biscuits

[rapid merlin]

:( i've brushed my teeth already for bed, why are you making me jealous

[upper herald]

Make them tomorrow! So easy to make. Happy to share my recipe if you want

[grizzled wing]

look nice

[rapid merlin]

may you? then i be off to do some rooms

i'm just wandering on the google page for it, some are round some are ciabatta shaped - side not i wonder if ciabattas are easy to make, fav type of bread

[upper herald]

170g almond flour
150g bakers sugar
30g powdered sugar
2 egg whites
1tsp almond extract
1tsp vanilla extract

-preheat oven to 350F/180C

• mix the wet ingredients with a fork until fluffy
• mix the dry ingredients (but not the powdered sugar) into the wet mix with a fork until mixed well
• spread the powdered sugar on a plate or something similar
• use a teaspoon to scoop up some of the mix, and then roll it around in the powdered sugar until a ball
• place on parchment lined baking tray, and press down until 1/2 inch thick
• bake 15 mins, or until outside is crispy

That’s my exact steps and measurements. Yes from memory

[rapid merlin]

almond flour, never heard of thatt

[rapid merlin]

lemme copy that to my notes app, thank you though!

[twin ridge]

Gave +1 Rep to @upper herald (current: #2510 - 1)

[upper herald]

If you wanna make chocolate ones, do 15g unsweetened cocoa powder and 155g almond flour

No problem!

Enjoy

[rapid merlin]

got it

mb for delaying you doing your room

[upper herald]

Haha nah you’re good. I’m in the easy cyber 101 rooms currently anyway. Nothing too complex

[mellow gull]

You'll be doing all the fun stuff before you know it

[rapid merlin]

i started that path in october, did to 30% lost motivation, came back in december and powered through it

[upper herald]

I hope so. I just feel I’ll come to the real cyber stuff and won’t understand it or figure it out

[mellow gull]

It's okay to have to go back and refresh sometimes. Like anything else it's practice, then practice again, then get too cocky and get stuck before realizing you still need practice.

[rapid merlin]

you got it man, we believe in ya

[grizzled wing]

you always have to look stuff up

[upper herald]

Thanks! Only been working in IT one year but hoping it’ll click! I really wanna work on moving towards Sec stuff

[mellow gull]

🙂

Just keep at it, persistence is your best friend.

[grizzled wing]

persistence is important

[upper herald]

If there's one thing I'm good at, it's being a persistent pest

[grizzled wing]

cyber sec its an asset to keep pushing

[mellow gull]

We are all stubborn creatura

[upper herald]

Oh my rooms are CLI rooms! I love CLI (I've grown to love Linux through my job)

[grizzled wing]

the terminal is home

[mellow gull]

Gaww is like moff. I see a room that's shiny and pretty and I can't help but want to bang my head against it until I either die of failure-induced psychosis or succeed.

[grizzled wing]

the terminal is the power glove of computers

https://tenor.com/view/hackerman-break-computer-programming-hacking-gif-7263541

[upper herald]

yeah we have no choice but to use Ubuntu at work, so I'm used to it

I get to go into 100's of VM's and work from them 🙏

[grizzled wing]

ubuntu is not bad, i use it

[mellow gull]

https://tenor.com/view/hacking-gif-25051087

[upper herald]

cmd line time!

[mellow gull]

[grizzled wing]

Albedo dance is about the sunlight reflecting off the snow

[mellow gull]

That's true!

[hidden wraith]

hi!

[grizzled wing]

hi noah

[mellow gull]

Greetings Noah

[grizzled wing]

still have the ark?

[upper herald]

'ark at him!

[hidden wraith]

just joining in from the advent of cyber calendar, whats up? and na, thing got dropped on the mountain as the water rushed away, funny enough we all got some massive whip lash from the rolling

[mellow gull]

That's cool to hear. What kind of progress are you having on it so far?

[upper herald]

man wish I was ready enough for advent!

[grizzled wing]

the first time is hardest as so much new content and rooms and terms

[hidden wraith]

just doing the first tasks now, i got a new laptop so i gotta set up try hack me on here

[mellow gull]

Advent is very beginner friendly once you figure out the essentials

[grizzled wing]

watch the videos

[hidden wraith]

yea i believe it, if anyone wants to work on it together just lmk, i got the owasp top 5 down, not that thats probably enough

[mellow gull]

There's only like 4-5 rooms so far where I've felt frustrated

And most of those were a lack of reading comprehension on my part

[grizzled wing]

read and take notes of what you are learning

be organized

[mellow gull]

It's like getting little tidbits of golden wisdom from your grandfather

[upper herald]

Hmm, I should probably give it a go to whet my apetite to see what's to come for me?

[grizzled wing]

its crazy that you can do so much with just an IP address

[mellow gull]

nmap is unironically a terrifying program

[hidden wraith]

lmfao have you seen the site that sells nmap scan data?

[grizzled wing]

super long manual

[hidden wraith]

only thing you need is -A -Pn though

[mellow gull]

no -v?

[grizzled wing]

verbose

[hidden wraith]

i meannnn not before i write a bot to read it lol

[mellow gull]

one v isn't that bad

[hidden wraith]

yea, i had a course where we had to scan internal networks so i have a bad habit of just scanning the whole subnet tho

[mellow gull]

-p- isn't bad if who you're scanning isn't a psychopath

[upper herald]

You got me intrigued now

[hidden wraith]

which part

[grizzled wing]

you want to scan all ports? i like to use the top ports first

[upper herald]

-p- and pyscopaths

[mellow gull]

-p- is essentially the "check everything" command

Sometimes it takes a while if you're checking a broad network, sometimes it adds milliseconds at best

It's usually best to range it to the top ports though

You find weird stuff sometimes

[upper herald]

Weird stuff such as?

[rapid merlin]

I never run my nmap scans without -d9 just to be 100% sure I get all the info

[mellow gull]

Well I knew a guy that kept every port open because he thought it'd help him download stuff faster

[hazy sundial]

ello

what are yall doingggg

[mellow gull]

It doesn't, by the way.

[upper herald]

EVERY port open?

Damn, hackers dream that fella

[mellow gull]

Up to 5,000

He did that shit manually in his router's man log

[upper herald]

you could have easily coded that... damn lol

[mellow gull]

You can just set a range of ports to be open if you want to

It's built into most of the firewall programs

But he was really... dumb...

[upper herald]

interesting strategy to do it 1 by 1 then

[small badge]

can someone help me understand why adding '-fs 2395' to this command shows and output of the correct subdomains compared to when i do it without the option and it goes through the entire wordlist with no output?

[grizzled wing]

real skill is hacking using a amazon firestick while under police custody

ha i was right, you typed a story

[mellow gull]

I'll hack my way out of prison with a gun

[upper herald]

just hack you release date to tomorrow innit

[grizzled wing]

what does the man page say?

[worn thorn]

by checking the return size you can figure out what domain is valid.

[mellow gull]

In ffuf, -fs gives a maximum limit to the HTTP (Jesus) response size

[small badge]

but why is the response size 2395? and why do i need to filter the response size?

[austere verge]

I wonder if anyone’s ever been messing around in terminal and accidentally done smth illegal

Like enter an ip wrong or smth

[mellow gull]

Yes, for sure

It happens

[worn thorn]

you can filter on any type of response. Sometimes size is more consistent than others. The size of 2395 in your case works because the correct subdomain is that big.

[small badge]

so normally would it be better to put a range?

[mellow gull]

If you know what the general range of what you're looking for is

[upper herald]

definitely try something in 216.26.194.0/24 range

(actually don't)

[small badge]

okay then thanks i just didnt really get it and i tried searching to come to no conclusion but yeah that helps me understand

[twin ridge]

Gave +1 Rep to @worn thorn (current: #111 - 68)

[mellow gull]

It's like if you know the true character range in a wordlist is less than a certain number of characters you can limit it by that size to reduce your search time

Same general concept

[hidden wraith]

lmfao i cant download the file for the first one since it has a virus in it

[worn thorn]

might be a false positive

[hidden wraith]

no its definitely vulnerable, im just in a war with windows and chrome rn

[mellow gull]

Wait, which file are you trying to download?

[hidden wraith]

the one with the song.mp3

[mellow gull]

??? Onto a windows machine

[hidden wraith]

lol yea

[worn thorn]

not a good idea to use your host. Especially windows.

[mellow gull]

No, yeah, bro, that one is definitely malware, don't do that. You're supposed to do it on the Attackbox

[hidden wraith]

oh ok, i do have it isolated to wsl though

[mellow gull]

The malicious file won't do anything egregious but it's not great

Not meant to be used (emphasis; analyzed) anywhere outside of a VM or linux machine where it can't be instanced

[hidden wraith]

yea, not planning on running it, god that would be awful

[mellow gull]

...Well, I gave more than adequate warning.

[hidden wraith]

ok, what is a c2 server?

[mellow gull]

They're remote servers that malicious individuals use to execute code to infected devices

[hidden wraith]

ok thats interesting, so basically if you run the command it searches for crypto wallets and website logins then sends it to this server

[mellow gull]

yup, that's our classic somg.mp3

[hidden wraith]

ok am i dumb here i looked up the username in github, and nothing came up

[mellow gull]

Yeah don't worry there's no actual remote c2, that'd be cruel

[hidden wraith]

nvm

[mellow gull]

But in a real example you might not get two separate files like that

It'd be integrated into the actual mp3

And playing the song would execute it's injected commands

[sinful moon]

What's up hackers? lol

[grizzled wing]

gaww has been so helpful

hi Elizabeth

[sinful moon]

I see some nmap help and more