#general
1 messages · Page 643 of 1
greetings
Hi!
Hello Elizabeth, Hav0k
i had my 🥦 + 🧀
yea that makes sense, so ok question, what about running it would inject the command, because i imagine a windows system would see a .mp3 file and try to run it in the desired program, which id imagine shouldnt be able to run any commands
What kind of cheese? :0
Hello Gaww!
marble
Mmm broccoli cheese sounds yummmy.
The execution file that you see isn't necessarily representative of its actual functions. One thing you'll learn is that filetypes can be occluded or straight up spoofed, and their functions can't be entirely trusted just by their extension type.
I'm jumping in late but remember most Windows users have Hide Known Filetypes enabled, in which case you can make a song-name.mp3.ps1
a word document or excel sheet can also mess up your week if you allow it.
it is so yummy
which would just look like song-name.mp3 to most users
In general, don't blind trust files you get off the internet.
yea that makes sense, and thats why when making webservers you check for more than one extension, would it be possible with just a .mp3 extension?
If you control the web server you can just display any filename you want, bit harder if it's designed to just show raw files but doable
Also computers don't think like humans. When you try to execute an mp3 it doesn't go > click > oh mp3! music! > play music!
There's a far more sophisticated line of code that gets run that can be interacted with and manipulated.
Indeed, and also remember Unix/Linux/macOS don't give two craps about what the file extension actually is. That's much more of a Windows thing
Oh I bet! I love me some broccoli! Also enjoy some, the less popular brussel sprouts, lol
so what exactly would run then? i doubt the file would contain the way to run it
you can always use the *nix file command to identify what a file actually is, regardless of what extension it has
both are yum but I prefer the brocc
brussel sprouts are so good with bacon in the oven
on a windows system that is
The file definitely contains a way to run it. By virtue of being a file it has to run code to execute.
If it can't do it on its own it'll make a request or set a command series to a program that's probably on your computer that can run it.
On Windows it is specifically is specified by the file extension, and you can set that system wide
i plan on learning powershell in '25
Powershell knowledge is invaluable for sure
especially for both infosec and Windows sysadmin
I plan on being active on thm/htb again.
Mmm bacon is also one of my favs, definitely agreed, b spouts with bacon is soo good!
@hidden wraith When you learn about Enumeration you'll learn how infected files can basically piggyback onto more advanced programs to run their executions.
ok so in that case when i double click in windows what exactly happens, sorry im asking a lot of questions btw, i like to understand it completely and fully
So for the MP3 example
ive done a small amount of enumeration not much
If you mean in Windows, that will specifically check for any know filetype handlers for the extension
it looks for an associated program for that extension and tries to open it. If it doesn't have one it'll ask.
that's all stored in registry but can be edited via GUI config options
Yeah, that's the gist
It checks against the filetype and searches for something that can run it
It gets more complicated for other OSes, for Linux it's generally via xdg-open
If you mean "how does a virus on an MP3 do some crazy stuff, it's just an MP3," that's an ocean-large question with a million answers.
yeah I think my song-name.mp3.ps1 (with Hide Known Filetypes enabled) is probably the most likely, but it's far from the only concern
ok so basically you double click windows will say this program defaultly opens mp3, then opens the file in the program? and i kinda am but id imagine that would be buffer overflow or some other attack
The potential problems start from the second you press the download button for a malicious folder
We're seeing this a lot reciently using .lnk (Windows shortcut) files since you can give it an arbirtary icon and it can run arbritary code
yea that makes sense
Can put all your powershell in the .lnk as a first stage loader that continues to download and execute a more complext exploit/script
i see John Hammond explain that, smply change the icon of some malicious file on windows to the recyle bin
well that's the current trend going on right now since it's way easier to get past AV
for sure, although I do know my EDR at work would catch that... well at the very least in the second stage of it
I googled like 4 different things while lurking and reading this convo 
But yeah they always try to make that first stage as innocuous looking as possible to both users and to AV/EDR
Once more the gist is don't trust random stuff you download on the internet
filetype is mostly irrelevant
the coolest thing i learned when i started wa sjust because its says its a JPEG doe snot mean that is what it is, turns out it is a PDF which has nested stuff
lol I did actually see legit printer driver software get blocked however because it tried to use a similar .lnk link containing Powershell to launch it's own installer, and our EDR was like woah there
which to be fair is extremely uncommon for legit software to be doing
printer drivers do be messy sometimes.
i mentioned earlier printer hacking 101 room was my favorite
So many acronyms 😵💫
Yeah lol, in this case it was Cannon's full suite. The tech this impacted just installed the bare drivers instead
many more to discover later on.
HP printer error: HP has detected you failed to give them more money
it usually takes a while for our SOC to get back to us and actually generate an alert so I don't always get to let one of our techs know in time
should standardize error messages so it is useful for once.
🤯
Yep SOC is a good one to know c:
my epson is more polite "you put new ink cartridges in... but they arent our official ones.. you know, not ours, go buy them"
Yeah HP is just brutal about this practice
erm, actually, we've decided that ink can go bad, and we've spent more money on competitor toner detection than on our actual printer technology, so yes, more money please
Their literal printer carts have DRM on them
never had issues with epson. They are pretty chill and haven't screwed me over.
they do it more politely ^^
Brother in my experience has been pretty solid, but yeah I never really use printers myself
Just have to support them endlessly at work lol
printer error: we want more money
Brother hits you with that entry fee, but they won't nickle and dime you to death
true that
but in the end no one likes printers lol
unless it's a 3D one.
Totally fair, yeah and we usually are buying enterprise grade printers when possible
first set of ink is always quite low... just a few pages and then "buy mooarr" xD
They remind me of old people with dementia
Printers are mostly used by old people
way to call someone out
The way they be making noises and then not doing anything half the time until u tell it to do it again

Yeah, while I have a printer besides me in this work from home office, I can count on a single hand the number of times I actually needed to use it lol
return labels
Yeah that's the main thing my SO needs it for
I've needed it for some stuff dealing with the US goverment but that's about it
I have to use one for work semi-frequently
This year the home printer ran maybe 3 times total.
printing wifes return labels .. so in use a lot lol
Helps work wise that our entire company is IT and I work 800 miles away. I think we used it once so I could sign an NDA for them and scan it
man everything is electronic signature nowadays
Yeah lol, but this company has very little staff, they just wanted my physical signature in some form
But yeah this was about four years ago as well
mostly management/HR related there
pandemic pushed tech forward
Mhmm and lol pandemic kinda got me this job so I can't complain
naaa, of course i can use digital signature at work, but i have a personal strict fountain pen rule. looks fancier 🤷♂️
do you pentest it?
You mean you don't like that disgusting default fake cursive font they like to use for the electronic ones?
ok so question regarding the 0 click malware you warned me about earlier, what allows that to happen bevause from what i can find its usually caused by hijacking anti virus or it just opening on install, are there any other ways? or are those the primary ones
lol the default adobe one looks awful indeed
of course 😉
Prolly looks better than my handwritten cursive
surprising, innit?
what's a printer? 😁
It kind of depends? A common one is run-on-boot, but with the executable files it'll usually be a background process that runs on execution of the file.
If you mean zero click from a downloaded file or similarly, that's almost exclusively because the Preview Pane is enabled in Explorer or similar
Hi idv player
Preview Pane is a blight
someone who worked a printing press back in the day 
oh my god dont call me out in the wild like that
WE KEEP THAT STUFF HIDDEN OKAY
Why it’s a cute game
what is that and how do i disable it
I mentioned this to a few people here before but the current version of Outlook won't let you view file details without previewing them first and it infuriates me
If you don't see document previews in Windows Explorer then it's already disbaled
the fanbase is not. as a 6 year veteran of that hellhole i choose to not be associated with it 😭 anyways who do u main
Bloody queen
. that is the worst dad joke i have ever seen
Yeah very thankful for those new Outlook defaults, and they warn you quite a bit before previewing a file, including PDF
good thing I don't plan to be one.
But yes even for a JPG
oh ok that makes sense
opinions on hullabaloo?
Images are ultimately just a bunch of metadata
But yeah, Preview Pane is something you have to go out of your way to enable in Explorer
As a survivor utterly terrifying I ban him every game
i still havent encountered him
because of how many times he's been banned
who do u surv main
He locks ur abilities and spam hits
yeah as a priestess main i think i would just kms we can barely run around as it is
Usually faro or acrobat or doctor idk
One could even say... and Adobe Acrobat? 

Adobe
I think I vaguely remember adobe getting cancelled on cool math games when I was in elementary school
Is ThAt CaroLinE???
He’s a cutie patootie
it's if dead by daylight and coraline had a kid
the best game ever
but 99% of the fanbase is so weird
You're probably thinking of Flash
Adobe Flash Player got axed, that might be what you remember
Oh yeah
wasnt that just like yesterday?
You can still play them in a massive archive called BlueMaxmia Flashpoint
haha I know right

so young
you're as old as your back health 😌
But yeah Flashpoint is a standalone application which launches Flash games and similar, with standalone Adobe Flash Player, if you need that nostaliga hit
I was alive before minecraft was a concept 💀
I was born with scoliosis so I'm very old
bruh- outta all the health areas i could have mentioned
You can be my role model I’ll totally look up to you
😭
I remember taking off "sick" in high school when Minecraft survival mode launched
im so old, winamp is still the first thing i install xD
i was around for Ask Jeeves
Oh, brother, you could've mentioned any health area and I've got a chronic disorder for it
no biomes etc, just the original survial mode after creative
Ask Jeves was ahead of its time, it should have been AI
i think i was 6 years old when everyone was talkig about that 😭
I was a Xbox one kid
I remember playing the demo sandbox for minecraft in the browser
with the fog turned up WAY too high
I actually remember when biomes hit, it fricked up our server since our shared town ended up being in a snow biome all of the sudden lol
LOOL WITH THE "one hour is equivalent so several days"
"it looks like you want to write malware, would you like some help?"
played it.
I was much too old by the time it was new
so real
bonzibuddy being the predecessor of cortana
also pirates 101
i was feral over pirates101
and Pirates of the Caribbean online before it got eradicated in less than a year after start of service
i never played that one rip
I have watched hour long documentaries on Wizard101 and such because I kind of love to hear this stuff, especially for now long dead online games
Wizard101 is still very active LMAO
atp i believed it was malware because we were unable to uninstall it from my computer
oh rip, figured it went the way of Club Penguin and more
😭
The Nintendo ds was my primary gaming device for a while
Meanwhile my first gaming "device" was Sega Genesis lol
SEGA
I'd have rather still had Club Penguin though
club penguin >>
I was such a good secret agent 
Yeah, it may exist, but I'm suprised I haven't heard about Club Penguin revival efforts
not if youre TELLING US 🤨
Now that I've told you you know what I must do now
but probably much hader to get going again compared to others
There were a couple attempts at it
And there are some private servers running it atm
Nice nice
ive never even heard of that
Well that was basically forced to go public after everyone knew about the private efforts
😩
Mhmm, very neat game
DC Online ain't got garbo on it
It is now open to the public tho via private servers, but yeah used to be private knowledge as well
?
Why does tryhackme keep freezing up on firefox?
POTCO existed for about 6 years
Was it six years?
Never experienced that myself GG, and Firefox is all I've ever used for THM
It felt like so much less
Yee
lemme test to see if it's an issue or just you
damn.
It is an issue for just them, I suspect they have an extension or something causing issues
There's a crew trying to bring it back/keep it alive as well
yeah it's a you issue
its just started happening a couple of days ago, I havent changed anything on the browser nor the computer, cant seem to figure out the reason.
4+ years of THM on Firefox myself
Or it’s the computer being poopy
plenty of computer resources avaliable
I remember I kept making new accounts that I'd speedrun to tortuga island and then give up cause it got hard and I was too stupid to play the game properly
this is why i have two go to browsers because i switch to the other for a week then bam all's been fixed
its just his issue, and wrong channel anyways
that sounds so much more fun than binging the movies over and over again
Beyond basic Flash games, I honestly never got into many of these browser MMOs and etc tbh
i found a really good one just from a popup ad that i completely forgot and i still miss to this day
Not even Runescape back in the day, but that was due to my adversion to Java in the browser lol
popup ad from a dodgy website too
That was my whole childhood. Homeschooled by parents that never paid attention to me left me with way too much computer time.
i was 8
i bet you were so happy during covid watching everyone suffer your daily life
So sorry for the homescooling lol, that's never fun. I have a close friend who was as well
She was extremely shelted to much of anything until I became friends with her lol
homeschooled???? where does this happen??
United States
wtf?
Or Canada lol
not as common in canada
i was homeschooled for 6 years of my life, it kind of just happens
My friend above was home schooled Canadian but yeah
I was raised up on a program called K12 starting from fourth grade cause I was a biiig bullying victim in the public school system. My mother was too sick (and frankly too nuts) so she just gave me the teacher userkey and let me teach myself school.
I basically maxed out the free content
lol that's wild, but yeah sorry to hear about that situation for sure
i thought that only exists in cults and circus
We have a lot of those here lol
Well now you know a real example
Freedom!
And can confirm, it was not great
i mean, homeschooling worked for me because i was never in a country for more than 2 years, generally moved every few months
It's often very relegious parents and etc
personally homeschooling was fun for me as i always got to have new experiences
I was autistic enough to learn the school part but missing out on a decade of essential social development has definitely done irreparable damage.
I went to school and still hardly developed social skills some of us just be loners 😔
once again, everyone got nerfed during covid you are so fine
Hey I've got a superiority complex about that
At least I maintained a higher-than-grade reading grade level
Very nice, yeah same despite my public schooling
being social is just a muscle you need to exercise youre gonna be fine
Wow if I can type correctly that is
the edits there had me dying
I know right, worst word to typo multiple times lol
the context as well
absolutely rich
I've learned if I'm just nothing but my truest self and don't bother pretending to be something else then I get by pretty well.
It's alright, back in 4th grade my Spelling Tests would be titled by myself as "Spilling Tests" 
covid time during school was fine. It was learning without the filler yappin and endless repeating questions of the others.
so... homeschool...
Trying to emulate my delusional interpretation of normal has only ever caused problems.
👀
im learning i hate investigating threats lol
Yeah I can't even imagine covid era learning, must have been wild
actually my school was pretty chill about if you need to attend or stay at home.
I've heard nothing but horror stories from the teachers I know
homeschooling xD
Apparently in America the aftershocks are still causing major problems
oh that's nice of them, i feel bad for the teachers though
lol that's fair. I did have some online learning in high school, but those were advanced classes that couldn't be provided by the school... and we just sat in a classroom with a bunch of computers to do so
ouch
well, covid put teachers to their limits .. when you have someone 50+, who never did more with a computer than just amazon shopping, is now suddenly supposed to do classes over video calls .. i can absolutely understand that didnt work out at all
and i was the biggest social distancer germophobe ever
yea true but hey they were surprised to see even one taking that deal. I had a great time with my math teacher learning more advanced topics.
I nearly failed high school never rlly made friends after covid and stopped doing work almost dropped out of uni too before finding comp sci which im good at for some reason
More worried about the younger kids
i diagnose you with autism
We've got a generation of people that never developed the ability to learn
they are already lost tbf.
Glad to hear you found your passion though, yeah keep at it!
i think there are bigger issues than covid for those creatures
that already happened before covid 😉
I do show a lot of signs
I think all of us are maybe just a little bit...
Yeah I do honestly think I'm undiagnosted autistic. For the longest time I thought I couldn't be due to me being an extravert, but I long since learned that's a total myth
I went to a psychiatrist for a bit but I think I stopped before getting any kind of diagnosis
autism is a superpower if you learn how to use it correctly
I sure don't like contant yappin
when i was young there was no autism, it was just "nerdy" lol
Fr just gotta get in that obsessive flow state
Only in some cases, and certainly not even for most
Yeah I'm constantly on an obsession of some sort or another, addicted to it
are you kidding me? i managed to remove my autism social intelligence nerf by using pattern recognition tism with my memory tism
I have over 3K articles in my Wikipedia Reading Lists on mobile, with Wikipedia also being one of my top past times lol
dopamine hunting? 👀 do you ever complete these tasks or no bc that could be adhd
tired. have fun people, fun chatting with all day gaww , and with Elizabeth
gnnnnn
cya
Nah I do complete tasks, I don't get easily distracted until I move onto the next obsession and drop it completely until I come back around
...So, I have a bit of a background in assisting with early education, particularly for people with developmental disorders, and there are statistically more people with low functioning ASD then there are cases of your stereotypical hyperobsessed savants.
tism
Goodnight unc
rest well veggies
Nice yeah I worked with ASD specific classrooms, it was very rewarding
but yeah I for sure agree
There's so many more on the spectrum that just fly under the radar
It's a spectrum for a reason
for sure
tbf i dont really view the spectrum as low functioning or high functioning it just depends on the treatment variations
Scaled as low as someone with a barely noticeable tick to as high as someone that can't function whatsoever
and how early it starts
my mother's a psychotherapist and ive seen her interventions
Yeah I worked with completely non-verbal individuals on the spectrum at times, but yet they would still be extremely insightful and intelligent
Look, I used to live with a mother that had a son that was low-functioning.
He spent 22 hours a day in a crib being strapped down because otherwise he'd hurt himself with random flailing
exactly, so many children that were thrown out by their schools ended up doing super fine with the right intervention
He was a fully grown adult.
I recommend huberman lab podcast on this topic
It will be very helpful
I'd argue that may have been a lack of stimulation and education growing up, and just our very poor knowedge of about this stuff at the time. Things have for sure changed indeed
i was going to say something similar among those lines
especially with how flexible the brain is
I worked with many similar indivuduals in the ASD classes as a parapro and yeah we saw a lot of those ticks but eduction for these indivudals have helped a ton
i dont think an autism diagnosis is the same as it was a few decades ago simply for this reason, more awareness means that there's early intervention and training/treatment
but also as someone who worked in special education and home health care, keeping someone strapped down like that is actually kind of illegal?
For sure
In the kid's case it wasn't a matter of just trying to stop him, it was something he didn't have control over. We had a state rep that would show up every once in a while
But he'd broken bones doing it before
Which also explains the "Autism Epidemic" everyone is/was afraid of. No our diagnosis of such just got dramatically better, because yep it is indeed a spectrum
That's fair but with proper redirection and more, this is something that can improve. Yes stimming can be extreme for some people, but it doesn't always have to be self distructive in time
I even worked at a school which was the "last stop" for troubled people in special education, and saw it work wonders
I agree. We've gotten a lot better about it even in just the last decade compared to what we used to do ala "toss em into the shark tank, they'll either get better on their own or they'll be bullied into a psychotic break"
I know, I was one of the kids tossed into the shark tank
Yeah that's unfortunate, but I do agree. I will admit I worked at an extremely well funded program in the 2010s but could see night and day differences in some students
I know other school districts and more around us didn't have it so well
gaww i do understand that things have been harsh but it's not the same anymore
I had a lot kind of going against me. But it's definitely a lot better now and I'm glad not quite so many kids are getting the treatment I got.
helps to have a major multinational company funding these programs because this is their headquarters lol
Never implied otherwise.
so im sorry but i do have to disagree with this
How so?
That was poor wording on my part, I agree.
The implication that most cases are 'low functioning,' a bit of a split from what I was trying to say.
Yes for some it's deabhilitating, but it also allows individuals to excel especially in very STEM and more
the earlier these children will be able to understand their condition and utilise it because it's not a disability, it's pattern thinking
mhmm
At least now'a'days the big obstacle seems to be parents
There's a lot of nightmare mongering going around
i believe low functioning autism is just autism that hasnt been treated properly
Yeah unfortunately. Referenced some of that above. But yeah it's not an illness that can be contracted or more, it's just another way for the brain to function
well, i dont know what its like in foreign countries, but in germany parents can force a school to have their kid being schooled there with a helper .. what might kinda work in elementary... but after, its rather a pain in the ass for the kid itself and the other kids.. there are special schools, but parents dont want to accept their kid needs different help
yikes
A certain number of parents don't want to be "the family with that kid on the block"
And it's easier to just reject heuristic or educational assistance for them outright at their kid's expense than admit it.
hopefully social media brings more awareness over there then
In the United States, we do have the former for "high functioning" students, a term I'm still not huge on, but we'd have the same schools for both general public education and special education.
They'd just be dedicated classrooms for the people who needed it
gotta keep their reputation up rather than helping their own.
the irony is most parents ive seen who have shamed their kids for autism / said they didnt have it end up being the autistic parents
When I was in public school there wasn't any separation. I used to group up with a bunch of 'special' kids cause they'd be bullied if they were left alone.
My closest friend in elementary and middle school had a helper I think
But also I think he got better and stopped needing him by the time we got out of middle school
Always seemed normal to me tho
And I never asked about it
Yeah that is unfortunate. But yeah I can't really speak for other areas in the US, I just know our program got tons of funding which helps lol
We're fifty countries calling itself one country
The differences in funding and standards is as wide as can be
you're not wrong lol
i think that at least once a week
Meanwhile, this may be a bit of a DOX, but lol it was one of the companies who made Agent Orange making this all possible 🙃
no offense, but the US doesnt get a shit done in a general way - basically every state operates on its own xD
America starts making a lot more sense if you understand it's basically just the European Union and all the states are union members
True but federal government has a lot of influence by choosing to provide or withhold funding to states on certain things
Which is exactly what the union does from time to time
THEY GAVE FUNDING??
But even within my own State, yeah each school district is their own distinct entity with their own counties within the state within the country
Second lowest paid school district victim, baby
Yep, don't "crap" where you live. But also they do a ton of funding locally to kinda sway the public
in germany, education is a state thing... thats why education is called the hoe of politics cause everyone uses it as they wish lol
thats why your final mark in school is rated differently from state to state... in state A you might have a B+ .. in another state its just a C-
Hey, like, entirely off topic
What's the etymology/origin of Kangafoo? Just kinda curious, feel free to shoo me away
wanted a new name, i like kangaroos, replace r through f cause of foobar and thats it
Makes sense!
something something foobar2000 is love
I'm sure that's not the reason why tho lol
with the program its self being named after such
yea my old name is / was related to some stuff, so was about time for a new start lol
lol my first handle was back in elementary school for NeoPets, and I just picked an Egyptian god and some numbers because The Mummy was big back then 🙃
and to be fair, mythology has always been intersting to me
Although kind of helps we had back to back Hercules and The Mummy in the 90s lol
Took a whole class on Greek myths cuz I needed the credit 
Nice, although interesting and can still be relevant
How come
Well if you ever meet one of the gorgons you know how to face them
A mirror
If nothing else, naming of geeky projects lol
i had latin in school for 8 years .. rip
whew
i wanted to add the ancient greek but parents were like "you want to become a priest or what?"
This wasn't my choice since I moved in with my SO, but adopted his current greek gods hostname scheme
even my remote pentesting server is nyx. Although yeah it gets a bit more difficult the more machines you have 🙃
There are just so many greek gods
obviously in production, having cute pet names is far from ideal though
Hesiod’s theogony is what we used in that class
And some Herodotus and the illiad and the odyssey ofc
yeah although you can tell me dipping into nyx I'd already taken a lot of the neat female godesses
nyx is cool though and is in the game Hades though, so that's neat
my computer names are all cow related lol
of coruse I say all of this from Elizabeths-Mac-mini.local 🙃
You'd have had Eris, Persephone, Circe, Gaia, Selene, Nike, Erinyes, Methe, Cybele... There's plenty
Yeah already used plenty of those, some of which were already claimed by the SO
U don’t even have to just use gods
Does anyone know how to get a girlfriend in 2025?
Medea
Theft.
lol that's what Zeus would have done
Minthe is a fun one for a secret host
the same way as all the centuries before, you gotta talk to girls lol
Are yall familiar with the epic of Gilgamesh
Yes.
The Greeks and Romans were really funny about that though. What a nice religion you have, we just conquored you so you know... Zeus actually spawned them. Let's not get too into the weeds on the why
My pfp is anime gil lol
The syncretism between the greeks and romans is a really neat historical footnote
For sure
The fact that a lot of it ended up coming down to "You know what they're the same gods they just have different names for the other dudes" is unironically really funny
lol indeed. But yeah I'm usually a much bigger fan of the Greek naming and etc. Roman, well we just kinda named our panets after them and less fun
Discord's been kinda skippy these last few days here and there
lol yeah, I haven't noticed to many issues as of late but you never know
The only thing the romans got cooler might be Hercules
Most of the time I prefer Hercules to Heracles
but also, would we still have the same kind of whimsical mystism/interest about these names if we had named them after Greek gods?
oof, Discord is doing it again 🙃
Nah it’s my home internet connection apparently. Lost to the void
Oh… okay
I mean Prometheus would make a sick name for some kind of malware that steals data

Welcome back
lol thanks, not too happy with Charter's internet around midnight as of late
Cerberus for a malware would be pretty sick
we do have dual ISPs with fallback, but really the other ISP is mainly for our work from home connection
I keep going to sleep and then opening this chat again cuz it’s too entertaining
We already use Hydra with one of our favorite tools so that's taken...
Oo
Scylla as a Trojan with Carybdis as it's C2 would be very neat (I am obligated to say I am not advocating for it)
Thinking more generally of funny infosec names and exploits, I still love "VileFault" for FileVault for macOS oriented stuff
Program writers are a funny group
They've spent hundreds of hours writing the most psychotic script imaginable just to expend the rest of their deluded imagination naming it DartFestroyer
lol pretty much
I dream to work on DartFestroyer2.0 one day
Alright lol, before I spend the rest of the night on chat, I should get back to doing my very important tasks... like emulating MacOS 6.0.8 on my modern Mac, because reasons
I nearly got one of those little mini Macintosh blocks with the emulated OS a while back
Oh those little guys which were like inches tall? Yeah completely unusable but very cute!
Yeah that's the one. Good for, like, a basic clock or weather display on your desk
Have a good one!
I will attempt to go to sleep and not lurk
You get good rest too then
👋
Soft White Underbelly interview and portrait of Steve Sims, a hacker in San Francisco.
For ad-free, uncensored videos and plenty of exclusive content please subscribe to the Soft White Underbelly subscription channel at https://softwhiteunderbelly.com. It's $10 a month and watchable on Apple and Android mobile apps, Roku TV, Apple TV and Amazon...
Yo guys I am peeing and pooping boredom from studying network+ lol
It's boring how do u guys make networking fun?
by being social and networking with people 🙂
Bro
Comptia Network +
Lol
I mean I saw the boredom in my poop when I examined it after I finished
there is some interesting psychology in that behaviour
Tell me
above my pay grade
What is that?
an interesting part of my job is getting to work with people in areas of study
and spending time listening to them share about their experience/education
I wish I could help you dive into that question more
yet I get the desire to pursue certifications 🙂
@wraith bronze what is that link about?
never forget https://www.shlinkedin.com/
Is Xfe better or GNOME
We just talked about it yesterday lol
Read about the diff between them and I believe you'll be able to decide which one suits you the more 😉
why is red team capstone attack box adapter not there?
like i have to use my own vm
but it keeps freezing on me so id like to be able to use the attackbox
Hi
Hi
Finally i will be successful 😃
Do you know how it is possible to access an Instagram account without it being yours? If someone does it for me, I will pay them
Hello hackers
Hi
@sick lance
Chickendeno
Sup anon ?
:⁾
That would be illegal
It was my account but it was stolen
"without it being yours"
I passed proof that it was mine, I said that because it is literally not mine anymore
Please seek out telegram support
@sick lance who can I contact regarding networks
ngl I been having a really hard time with them
what I mean by that is
attackbox doesnt have the capstone adapter that the network says it should have
I tried using my own vm
but i guess it doesnt have enough power
so it keeps freezing on me
I would like to be able to use the attackbox
to pentest the redteam capstone network
Then post in the channel
which one
thms close to 4m users
Damn
It's a library, you don't need to install it, just import it
I just wanted to say; Merry Christmas to all 4m users and I hope everyone has an awesome end of the year 😄 ❤️
Hey there
Hi
I can still see the sunrise
hey if you are active in thm does someone in discord see you active or
No, they're not linked.
The only shared info is the colour of your rank
(activity wise).
I’m still sleepy
Now when I wake up I check my daughters okay and then look for the kitten 😅
ohh ok
I might be twisted but any challenge in life seems like a THM flag to be solved
that doesn't mean I don't get frustrated 😄
I mean in this case the issue is with THM
so
painful
@sick lance so happy you mentioned Zap to me, that tool is so fun to use 🙂
yet still need to know why Burp is so popular
Burp is the industry standard.
ah
Especially if your org pays for pro.
understandable
im getting more comfortable with burp, im not getting as lost in it. I haven't tried zap yet
metasploit rooms is so confusing for beginners
gonna have to practice again and again fr
that 's a great feeling once you become comfortable with a tool 🙂
it certainly paves the way to more opportunities for learning
I had to do that like you mentioned, repeating it over and over until it sunk in
ikr i just did the metasploit exploiting room and i was like wtf
i am confused af
ig if i just use it i will get used to it and understand little by little
don't let that feeling discourage you, it's pretty normal, hopeful you plow through 🙂
I love the mantra of "try harder" it's kinda true

I try and remind myself of that when I'm blocked on something in my head
When I did the metasploit rooms, I ended up doing a lot of extra reading. But now I know the tool and comfortable with it.
Just re-vsit rooms/materials every few days.
Remember you won't remember everything you learn.
I really try and gift myself with breaks when I am too hard on myself as well
easier said than done 😉
that sounds like a decent alternative ---- our normal way is the x will continue until morale improves
I am reading a book titled "the myth of normal"
Pro is way better yeah
you always need breaks, theres only so much information you can fit in your brain each day. But takes a few times of revisting it before it sticks
Dunno how, not like I've left 
@sick lance what is a vacation like for you?
i thought i was gone for longer but apparently not
i was in here just a week ago posting sinks
self care being important etc.
it is, I had to take a week break when I had an SSD completely fail and lost my notes. Decided to have a break, im still not completely there but definitely a lot better since the SSD died.
@molten sky depressants as escapism? I'm not perfect 😄
@exotic vector good for you taking a break 👍
good point on it being a depressant -- i have a solution for that too but it's not very THMy
I hear ya 🙂
~~ the solution is more scotch ~~
but actually tho i normally have a glass after work but now i can't cause gym ,-,
I now have so many books on cybersecurity and hacking, I should start reading some of it lol
interesting, ya I have a coworker who did sober November, doing gym now 🙂
my drinking day now is after the gym on the day before rest days only, but the problem is i always forget it's an okay-to-drink day and then i miss the big event
I only know self care and being connected to people is really important
psychosocial rehabiliation!
or at least my school training taught me that 😉
we are all doing that now
100% ---- working full remote is cool and all but i'd appreciate the option to go in once in a while and not be a recluse by mandate
and it's almost 5am and i'm tired as hell ---- peace y'all
o7
goodnight
I don’t drink anymore it takes me places and makes me cry, i just spend 4 hours a day in the gym six days a week
nice work 👍
I’m not happy or satisfied i think i should hop on ⚙️
treats everyone differently -- if you gotta opt out ya gotta opt out
gym as an alternative is even better
how long have you been at it?
Agree
8 months
my best lesson in school was to not believe my own thinking (it is just a hint) not a truth
I will remember this
makes my job really easy, and people seem to love it 🙂
Wait how do you not believe your own thinking ?
No gear. Absolutely not. There's absolutely nothing wrong with using as long as you're okay with the health risks (as with alcohol, tobacco, etc), but at only 8 months, it's just too early
Take advantage of those newbie gains while you can
How much longer does newbie gains last, i went from 52kg to 65 but now its stagnant
Wait isn’t this a cybersecurity sever
So you’re open to other’s opinions?
different for everyone --- but at 8mo i'd wager you're still in it, easily
if you're stagnating, there are tons of other options to kickstart things agian that aren't unnnatural
listening is my skill
I see
That’s a great skill
thanks
Did anyone notice the character in my pfp
you mentioned spending a shit ton of time at the gym --- deload for a week or two. maybe take a week off. that alone is huge
make sure your diet is where it should be. macros are important if you want to optimize things
redevelop your routine --- if you've been flat benching only for 8 months, your body gets used to things --- switch to an incline for a few and see if it makes a dent
overworking yourself can slow things down quite a bit
@molten sky you really know fitness 😮
I see changing up the workouts will help and spending a week once in a while not working out
I thought eating more helps, i do push pull leg btw
ultimately, if you need to, you're not gonna lose a gram of muscle taking a week off --- a month or two absolutely, but a week here or there isn't gonna lose anything
you're obviously skipping a week of training, so you'd lose that week of apparent progress, but you could gain that back in just being fresh and not a crumbling mess anymore
And it’s actually useful information that’s helping me already
Subscribe to Renaissance Periodization on youtube and listen to Dr. Mike Israetel - giving the "best advice" scientific based for every gym bro. (But still funny vids love his humor)
100% on the eating --- diet is most of it --- if you're not eating enough, you're not gonna have the energy, not gonna have the nutrients to build or repair, and just gonna feel like shit
israetel is fuckin hilarious as well
love RP
Renaissance periodisation ok
the best for that 
Most of my diet is losts of rice and chicken and steamed vegetables and i take creatine and whey
re: diet ---- it's helpful to log what you're eating if you don't already, just to more easily track macros and calorie intake and whatnot --- do not become obsessive over it, 50 kcal here and there isn't gonna kill you, but it helps you keep on top of things and figure out 'why do i feel weak af this week? ahh my xyz is all fucked up'
I'm personally a big fan of cronometer but people have their preferences
Cronometer is an app ? Can i log stuff in there easily?
https://www.youtube.com/watch?v=rnJr28JI5e8
Dont know about your age but here he is talking about "when and if" to take gear because many young people are doing it nowadays when they absolutley dont need it took me some minutes to find it 😂
Get started on your fitness Journey without fads or gimmicks with our NEW Ultimate Beginner Bundle! https://rpstrength.com/pages/ultimate-beginner-bundle?utm_source=YT&utm_medium=bio&utm_campaign=RP_YT
Become an RP channel member and get instant access to over 200 videos of exclusive in-depth training and advanced science content! ➡️https://ww...
I've been on a slight deficit recently and it's kicking my ass energy wise --- can't get shit for reps no matter the weight
it's night and day how it affects performance
I make walks to the grocery store as my exercise 😮
Should i change anything?
don't think i've watched this one but i'd wager he agrees 8 months is too early lol
Walking is not enough, you should run instead
About those safer alternatives…. What are they ?
It becomes stronger
I used to do a lot of street outreach where I would walk a ton
nothing stands out necessarily --- chicken and rice are both good and as long as you're a decent cook then you can do a ton with them --- even a good risotto
just make sure your macros and micros are hit cause it _is_ a fairly limited diet, and it's easy to miss things
thankful I go back to my social worker role in 2025 part time 🙂
taking people on social outings
i've been a lil low carb recently, getting most of my kcal from fat + protein instead, and that's affecting energy as well --- but it makes the cut a whole lot easier
I live on the top floor of my block of flats, so my exercise is walking up and down them on my way to the supermarket lol
What would you say is the best food for daily consumption to get those macros efficiently
Isn’t that ketosis
we really live the same life 🙂
it's the right concept for keto but i'm not _that_ strict and low carb --- i'd put keto at like 5% while i'm a bit above that. also not religious with it so not sure how much ketosis is actually happening
I can’t seem to find cronometer
it could be measured but idc too much --- i just know it helps for my energy mid fast
which i guess means ketosis but whatever
im watching a video on when gamers turn into 5-star voice actors and its so funny.
is that a YouTube video? would love to see it
and i don't obsess over it too much tbh --- i had pasta with a good meat sauce yesterday, and just supplemented it with whey to hit my protein goal
When Gamers Turn Into 5-Star Voice Actors! The best gaming voice chat and proximity chat moments that see regular gamers turn into 5-star voice actors!
Enjoy the video? LIKE & SUBSCRIBE for more.
➡️ Submit your clip to be featured: https://forms.gle/1HKPMPPuNCGqpQM58
ABOUT TOP GAMING PLAYS:
Welcome to Top Gaming Plays. We focus on bringing yo...
i'd rather have some variety and not hate doing it after 6 months ya know what i mean
Those pills for muscle gain like myodrol ?
had some home-made taco bowls the other day before that
Day 2 of fixing kali
(a lot of ground beef and turkey in my stuff tbh)
Yeah i think i should change my split too
bad scrubz -- this is a diet and fitness server not a hacking server
I still dont know what you did to it lol
what is going on with kali? is it broken? rolling release related?
Oh, fitness.
What's your 5k?
Oh I fixed that, I forgot to enable a setting.
Haha !
btw don't overdo the whey either
you can actually have too much protein
What was wrong with kali
I was gonna say "I hope it died in a cool way, and not in a fae way" but sounds like it died in a fae way lol
Nah, I created a new one and I'm moving all my stuff to the new one.
different kind of fitness. running sucks
ah!
Just one scoop post workout
(i actually enjoy running sometimes but i'm in a no-cardio phase rn)
Pah.
You're just slow.
oh yeah no my times have always been pretty average for runners, nothing to write home about
even when i ran
@sick lance I run OpenBSD and build everything from source so know some rolling release pain 😄
today, after not running, i'd just die on the side of the road probably
Is cardio necessary? How much ?
that's probably fine tbh ---- some people go for the ""all the protein no matter what!!!"" method and that can in theory be a bit subpar
too much protein == protein now burned for energy rather than fats and carbs only == more liabile to consume muscle for fuel when needed than fat
rolling release can really help developers though
not to mention community involvement
I had to switch to windows because linux was suddenly being unstable after a kernel update :(
@exotic vector that is great experience you gained, knowing use case
The body can use protein for energy ? Maybe if the protein intake is more that the carbs ?
cardio is necessary for _cardio_vascular health, but it's not something I do all the time --- if i'm in a heavy build stage I don't do it at all, and if i'm in a cut, I don't do it normally either --- I have phases where I do a ton of cardio and then just stop for a while (but that's just me and my whack ass setup)
ultimately too much cardio can take away from muscle development and if you are doing cardio then it's placement before, after, or at a whole 'nother time in or after your routine can affect it as well
So muscles shrink ? From too much protein and too much volume ?
@exotic vector when I shifted to macOS dev there was a feeling of sell out because I was choosing something easy use case
I now just use linux as vms.
computer is stable, just wish I was on linux still lol
im still trying to do things the linux way, like I was making an ini file on windows. And did you know you cant make a text file, name it then add the code because windows is like "hmmm....thats actually a text file :3" but on linux I can be like "file.ini ...open insert code" and linux is like "yep thats an ini file"
I loved hearing what people said earlier today "you use what works best for you" 🙂
-b
carbs, proteins, and fats are the three major forms calories come in --- most people burn carbs first, but as with keto where you make your body burn fats first instead, you can get into a state where your body burns excess proteins first instead
it's not an issue if you're always in excess, but if you somehow manage to get your body in that weird state and go on a cut, now your body is going to continue using that fuel it's been using for the last 2 months, which is all the excess protein you're no longer eating
( not a dietitian, nutritionist, food scientist, knowanythingist, do your own research, etc )
This is actually scary, cutting seems complicated while the bulk i’m on is literally all you can eat at this point and trying not to be hungry at all
Okay but thanks for the information anyway
Gave +1 Rep to @molten sky (current: #61 - 134)
unlikely if you're being a normal person
1 scoop a day with a normal diet isn't gonna get anywhere near that
more like if 80% of your kcal was from proteins and the other 20% from carbs and fats or something crazy
tldr; moderation & not being dumb
I don't know any of this subject matter, yet love hearing people who know 👍
if your weight calls for 90-140g of protein/day, no reason to start having 240
@molten sky so I do multiple job roles, it is interesting as one is mental health and addictions, and gym is a healthy coping for some
anyways before I head out
tldr of it all;
take a week off or a solid deload week. refresh.
have a not shit diet with a suitable surplus (not so much that you turn into gorlock)
change routine if necessary
life heavy things and put them down while yelling lightweight
So to maximize, we eat more calories as carbs when gaining right ?
gym >
Thanks for the summary
My kali boots up when it wants to boot up any one knows whats up I reinstalled it many time but at some point I face this issue
Which hypervisor are you using?
LIGHTWEIGHT!!!
Its my main os
carbs in my experience are the better energy source, so yeah a good carb base like from that rice (don't never have fats tho fats are good)
My condolences.
i have a rice crispy treat or two before/during leg day normally as well cause carbs good
we like carbs
either that or some salted honey toast
Or a family sized strawberry trifle
So sugar is fine when gaining
if someone tells you sugar is the devil and you need to avoid it then you should come back and slap them with a trout (or your choice of locally available seafood)
Just throwing this out there... is a cybersec community the best place to get info on this sort of thing?
I will find a fish
Speak for yourself. 😄
weak is a perspective imo
No but it came up so…
fair fair
yeah honestly the conversation came up
I'm weak to cool wolf art
but yeah sugar is fine just don't go eating a tray full of oreos every night thinking that you'll be the next eddie hall
sugar is a source of carb at the end of the day
I think i know what i need to do now i know the righteous path
howl xd
Oreos keeping u big as hell
Thats the long and short of it. I mean, we kinda know what's good for us and what's bad. Macros and all that jazz are only really relevant once you are already far down the road of sculpting/gaining or whatever.
@exotic vector what can you share about building a home lab?
Keeping a diary of what u eat its the middleground, it helps eat responsibly
I currently have Charlie Brown Christmas Tree home lab 😄
Well he has 2 tanks in his driveway 
I mean.. yeah, if you have goals you want to hit. But the reality is simple.
macros are important if you're serious about it, micros are what can be generally ignored, BUT it can be a source of extremely valuable information to some
like why the fuck am i so xyz this week? ah cool my zinc to copper is all outa whack
Exactly.
micros are more diagnostic imo while macros are more forward
Even then, I don't know anything about that stuff, but If I want to make a relatively healthy meal, it's not rocket science.
yeah unless you have a specific goal in mind, trying to figure something out, no reason to overcomplicate it
Get a few computers in a room, one or two server cpus connected to em, put all the computers in the room on a private ip and you got yourself a home lab
I did build mine on my main computer out of VMs
i peak at my micros once in a while outa curiousity but i only ever look at them when tryna see if something specific is weird
oh VMs that's a good approach
Productivity - It's like those folk who start gymming, and then instantly go on the protein shakes. for the most part, they're pointless until you get to a certain point.
the average everyday joe would just pee most of that protein out
It’s Raymond Kenny
situational but i largely agree
I am talking about the 90% though
sometimes you need that supplement to well, supplement things --- but a lot of people as long as their diet isn't pizza rolls 24x7 are probably fine
Well atleast immediately after a workout it might absorb most of it
I then had a series of VMs with their own configurations, so depending on what I want to do I just spool up those VMs. I do have to keep the amount open down because even though the software sees 12 cores, I only have 6 full cores but each with 2 threads. So I cant scale it up at the moment to practice AD stuff.
THAT BEING SAID, they can still come in below their ideal range for building and it will be slower, but that's also assuming they're working as hard as they need to be and as frequently as they need to be to hit that ideal range, which most brand new people sure the fuck aren't doing
(tldr; still agree)
Darksurgeon - productivities answer basically covers that 😄
@exotic vector so some pros/cons, makes sense to me
I feel sick if i try to dirty bulk i feel pukish in the gym on a burger pre workout
definitely.
But for where I am rn its good enough, because if im practicing attacking techniques the VMs im targeting will be given the least amount of resources possible.
On the other side, nothing wrong with a nice burger 😄
you really make it work for you, that's awesome
dirty bulk WILL build faster, but when you average it out with the cut where you build slower, you're building at literally the same rate as the guy who clean bulks it straight through and doesn't need to cut
But i want to be bigger faster and i am very tired of being a skinny …..
It's not gonna happen fast though. No silver bullet.
I will remember this
then you'll also have a period of cutting where you'll build slow af or barely at all until you're back down to your target BF%
(@ this)
In this context 'fast' is using months
^
I do, its how I learn about things :)
I tinkered a lot to get it working, I do need to remake it though.
Time is plenty
8 months into the gym? welcome to the body dysmorphia stage!
You won't be Arnie by Valentines day, for example
I see where i am 🥹
Nahh i prefer to scare em off with intimidation
yes, our constant desire for improvement, love that 😉
hehe, I prefer to avoid situations where intimidation is neccessary
i agree, just skip that stage and go onto the attack
I do want to find if its possible to host offline website setups on a vm so I can practice webapp stuff. I havent looked into yet, its an idea that just popped into my head lol
hosting community wifi file hosting can be an interesting goal
but yeah @upbeat flax watch tf outa RP he's got some really good and insightful content and aside from the random joke to keep it ineresting is very straight to the point normally
a lot of good info there
i'm out for real this time y'all you kept me for another hour god damnit
o7
its a big project, something that I may look into at somepoint.
I will
ikr, it peeked my interest as well 🙂
one day I'll look into it, then let you know.
I hate how Kali ships with 2023 Ghidra.
It does?
I always have to install it manually.
Maybe I should get a new ISO sometime. xD
Nov 2024?
Yeah, the Ghidra kali ships with is 2023.
Hmm. Maybe this version wasn‘t out yet during the last release? 🤔
Apart from that it is definitely a little silly.
Kali was last updated 3 days ago.
Real
But that‘s not the latest Kali in this case, right?
Kali updates pretty frequently, no idea why they havent put the 2024 version of ghidra
If ghidra did a better job about their shitty decompiler it wouldve been a much better tool
Yeah?
But ig if u understand assembly good enough u dont need it
that reminds me I got to update kali
Ghidra > Ida.
better download the latest iso too, 50:50 you gotta do a new install anyways 😉
Ghidra > Ida Freeware
Nah, I prefer Ghidra over Ida Pro.
Yea. I‘m just saying that with the release of the latest Kali, the current Ghidra version might not have been out yet. But since I don‘t know the version history of either, that is only an assumption as to why Ghidra isn‘t up to date there.
That‘s pretty much the entire thing I tried saying.
Ghidra has had over 6 updates in 2024.
Damn
Well, then my assumption is wrong.
Im using same compiled source from 2022
a person of culture i see
does darkmode fix the other bugs?
Yes. After using dark mode, I no longer have restless leg
yo
Like what?
the old notification bug, running machines not properly displayed, ..
then we also have the streak bug which doesnt properly show the badge even though a streak was reached
@remote swallow Hey, that's not overly appropriate for this environment
Ok. I'm heading into town. On the sunday before xmas. If I don't return, i bequeath my raspberry pi collection to James.
ooooo kkk
Noted
I have sooooo many
Good luck though
Haha, fair fair
He guys, does anyone know if tryhackme has a darkmode option?
play with your eyes closed.
its coming soon on an update
I heard some ppl use an extension to get dark mode
Tomorrow.
Use an extension for now. Dark Reader should work just fine.
I dunno, IMO Dark Reader is not as nice to look at, as natively supported dark mode for web apps
Last I remember using it, it was really good. Displayed sites in Amoled Black and offers text-color changing
I used it for Tryhackme mostly
is there any good reverse engineering rooms in tryhackme? Challenges preferably.
Yeah, there is a few.
Is it actually 😯
What manga is your pfp from

Hey guys. Is there a place I can see how the various levels in thm go? Like HACKER and all
I'm sorry it's a dumb question
hover your mouse over the level itself
TY
@cold sparrow ^
Wdym?
Yeah i was searching for those too but majority of them are for beginners
What day does AoC end?
24 i think
Cool cool
Questionaire on the 25th
Did anybody here take part in a real bug bounty program?
Please don't post the same question over multiple channels.
The better channel for this is probably #bug-bounty
sorry
It's ok. 😄
When I first started using Discord I thought all channels had different users, I grew up with the mIRC and 90's/00's chat rooms.
😄
Nice addition.
IRC brings me back
Also Sunday shopping just before Christmas is not the one
is metasploit question allowed here?
Well is it in relation to a tryhackme room or in general?
kinda
Yeah
hi guys
Hello
I saw a wild @lone thistle typing
Well given system32 contains critical files, the system won't allow you do so. Even if it does, your operating system will not boot up
lurking and accidentally hit the spacebar 
Easily done
yk anything abt metasploit? @silver sky
Yes
can i ask about a litttlee little bit of problem
What is your problem, and what are you doing?
Okay Fellas! From Mint Faye to Fedora 41! World seems kind of futuristic in here! Thanks for the advice @rapid merlin this turned out amazing!
Gave +1 Rep to @weary nexus (current: #1003 - 4)
fedora is a good distro
Meh
Good luck on your journey, keep exploring. 🙂
wait fedora has gnome ?
Dang
I need it
Is there anyway to switch distro and keep user data untouched ?
chose this one as primary workstation
Hi
i think it should be possible with the timeshift, or similar kind of tool
Welcome 😄
@cloud quiver @worn thorn @exotic vector these guys are master

Morning 
Afternoon
Mornin'
It's morning 
No it's afternoon

