#general

1 messages ยท Page 653 of 1

boreal scarab
#

Ralex* lol

chilly veldt
#

Ask your question

glass nest
#

Good point

chilly veldt
#

Hmmm

brittle lynx
# chilly veldt Ask your question

Im just kinda confused if I start a listener do I have to use a payload or can I just nc from the target to that port that is listening on sliver ?

naive violet
#

Have you read the getting started guide?

rapid merlin
#

Hats everyone up to ?

glass nest
#

Avoiding wrapping.

loud marlin
#

idk nothing...

grizzled wing
#

want to help me decide what movie to watch?

๐Ÿ”ซ Lethal Weapon
๐Ÿข Die Hard
๐Ÿ  Home Alone
virtualbox Other -- specify

nocturne sinew
grizzled wing
#

1 ๐Ÿ”ซ vote

nocturne sinew
#

Also. Thoughts, on Die Hard 4.0 from a purely cybersecurity perspective.

rapid merlin
grizzled wing
#

never saw it

mellow gull
#

Die Hard, and then Home Alone (basically a sequel)

grizzled wing
#

2 ๐Ÿ”ซ die hard

nocturne sinew
#

die hard 6: die hard with a super soaker.

glass nest
#

National Lampoons Christmas Vacation. For Maximum cringe

nocturne sinew
#

laugh a minute.

grizzled wing
#

the chevy chase one?

nocturne sinew
#

"Sh1tt3r was full!"

glass nest
#

yeah, but chevy chase is a doorknob

nocturne sinew
#

most american actors from the 80s were doorknobs.

grizzled wing
#

i will walk past that movie in Blockbuster

sand trench
#

how far until we shoot the sky with none magic missle???

glass nest
#

Apparently he was a giant one, even when he was in Community. Literally, no-one wanted to work with him

grizzled wing
#

he is problematic i have heard

nocturne sinew
#

The remake was really cringeworthy.

#

i can't remember which *vacation film they remade, but it was trash

glass nest
#

Ok! Santa is heading for Southampton, UK!

#

3 min flight from Lisbon in Portugal.

grizzled wing
#

Santa will hand out THM gift vouchers

crude stump
#

Im ready for Santa

sand trench
#

how long ago was santa in sweden???

rapid merlin
sand trench
grizzled wing
#

ok, seems Die Hard is the winner

rapid merlin
shut hawk
#

what dog toys are the least destructible?

nocturne sinew
nocturne sinew
crude stump
shut hawk
#

my dog is a menace, he'll somehow chew through literally anything

nocturne sinew
#

what type of doggo is he?

granite narwhal
grizzled wing
#

funny if your dog is named Dennis

crude stump
granite narwhal
#

Is Aoc easy?

crude stump
glass nest
#

Heading for London ๐Ÿ˜„

shut hawk
rapid merlin
boreal scarab
nocturne sinew
rapid merlin
shut hawk
grizzled wing
glass nest
#

Now hes going to Wales!

crude stump
#

Would be a shame if Santa got hit with a intercontinental missile

shut hawk
#

he's very good at camouflaging on our sofa

#

I've almost sat on him, multiple times

glass nest
nocturne sinew
rapid merlin
shut hawk
#

yeah, don't need a bite there nty kek

grizzled wing
#

i dont understand how the UK has so many accents in such a small place

rapid merlin
nocturne sinew
#

i met a gorgeous and friendly golden retriever in town the other day. Absolutely cheered me up 10000%

grizzled wing
rapid merlin
grizzled wing
#
Used as a disparaging term for a poor or uneducated young person, especially one who behaves in a brash or vulgar manner and wears ostentatious clothing and jewelry.
wooden totem
rapid merlin
#

I picked out my outfit for tomorrow

grizzled wing
#

nice

glass nest
#

picked an outfit? I just grab the top t-shirt from my 'washed' pile

wooden totem
#

fr tho, I love most british accents

rapid merlin
rapid merlin
boreal scarab
grizzled wing
nocturne sinew
rapid merlin
#

I love the socks

#

Everyone should wear knee high socks tomorrow

nocturne sinew
#

long socks in winter โค๏ธ

sand trench
#

also everyone here that is not from the nordics and celebrate christmas.... you better be asleep soon so santa can place the presents in your stockings

boreal scarab
#

I'm in jeans and a Tshirt. dancedogpls

sand trench
#

you never know what santas policy for witnesses is

boreal scarab
#

And there's snow outside

rapid merlin
sand trench
#

shadow wore the byte advent of cyber t shrit with the soc mas socks

sand trench
#

and the aoc 2024 hoodie 3xl

#

^ which shadow half way drowns in

granite narwhal
#

I love photo of small cat

wooden totem
nocturne sinew
#

i bought a boatload of gildan plain coloured t-shirts a few months back and yeeted loads of ones that have lost their ability to shirt.

shut hawk
#

Hacker we fear the most:

boreal scarab
grizzled wing
#

haha

glass nest
#

My exact expression during the AoC sidequest

boreal scarab
rapid merlin
#

Oh my

#

๐Ÿ˜

#

Of daddy76 had a Santa skin

#

I havenโ€™t played OW in so long so maybe he does

boreal scarab
granite narwhal
#

Just joking

rapid merlin
#

๐Ÿ˜†

#

Ayo where did that Santa go

#

died

#

I shot him

glass nest
#

He's in Cork, Ireland.

mellow gull
#

RIP santa

rapid merlin
#

Iโ€™m On my way There

#

yo santa lookin ripped af

boreal scarab
#

I revived santa

rapid merlin
#

Woop

nocturne sinew
#

OnlySantas

grizzled wing
#

must be the cookies

rapid merlin
#

evening shadow, how ya doin

sand trench
rapid merlin
#

Santa having that perfect Dorito shape

sand trench
#

to be a jolly good fellow

wooden totem
# boreal scarab Only one that has the whole scene and text

I must address your gif usage and express my critique. As the santa shushing and pointing a gun is enough to convey the scene and assuming that most people have seen it before It would be reasonable to pick the slightly shorter version with more frames per second for visual appeal, as the longer one clearly has more downsides in the context

mellow gull
#

That goes in the copypasta list

rapid merlin
sand trench
rapid merlin
#

a wild shadow is seen leaving the atmosphere

mellow gull
#

Blasting off again

rapid merlin
#

OnlySantas gone viral ๐Ÿ’€

#

and yes I hate myself for making that joke

mellow gull
#

Ayo

grizzled wing
crude stump
wooden totem
#

"Imma go to sleep early today"
looks at time
1am

rapid merlin
#

That Santa is fine af

mellow gull
rapid merlin
#

His hands are massive

mellow gull
#

Run backwards around the world really really fast

granite narwhal
mellow gull
#

That was gone fast

clever widget
#

๐Ÿ˜ญ

crude stump
#

Stop crushing on Santa

drifting hill
#

what was the flag in the end of the survey i did it but closed it by reflex instantly when i was done

mellow gull
#

woops

steep mountain
#

Is tryhackme subscription worth it and why?

crude stump
#

Ight bruh lmao

steep mountain
#

bruh

glass nest
#

Yes. For the extra content.

crude stump
#

Santa shaking ah

clever widget
nocturne sinew
steep mountain
#

i have my own machine

crude stump
#

Well mind you most of the paths have sub only rooms

steep mountain
#

I heard you guys have king of the hill 1v1, and more stuff

crude stump
#

They got 1v1?

#

Never knew that

steep mountain
#

idk i think its similar to htb

glass nest
#

In some ways, yeah.

nocturne sinew
#

only the challenges are possible, and don't make you hate yourself.

#

I have never had a good experience on HTB

glass nest
#

THM is more about learning, HTB is more about challenges.

steep mountain
#

htb got me stressin by doing challenges

#

i spend 4 hours on finding a flag

nocturne sinew
#

i tried HTB's xmas challenge a few years ago, absolutely awful experience.

mellow gull
#

HTB sells esports style team jerseys, bro

#

That's a red flag

steep mountain
#

๐Ÿ˜ญ

rapid merlin
#

I actually haven't studied in probably weeks which is bad!

crude stump
#

Honestly how I found Tryhackme was from looking up hacking discord servers to learn in. I joined and noticed itโ€™s an actual website. And so I tried it and here I am

rapid merlin
#

however since it's Christmas people are doing things and not being extremely anti-social

#

๐Ÿ™„

nocturne sinew
#

i think (because i can't actually remember), that i initially signed up for aoc2020.

rose tusk
#

also there's a difference between asocial and antisocial

grizzled wing
#

anti social is my jam

rapid merlin
rose tusk
# grizzled wing anti social is my jam

"Anti-social behavior (ASB) is defined as actions that cause, or are likely to cause, distress, alarm, or harassment to others. It can include criminal and non-criminal acts that harm or violate the rights of others. ASB can affect the quality of life for individuals and the community.
... Birmingham City Council, +2 more
"

glass nest
#

You know that ripped santa was just a drawing, right?

rapid merlin
#

I gotta go find me one of those

mellow gull
#

Drawings are enough for plenty of people

nocturne sinew
#

argh sneezing fit!

crude stump
#

๐Ÿ˜ญ

grizzled wing
twin ridgeBOT
#

Gave +1 Rep to @rose tusk (current: #249 - 26)

rose tusk
#

like majority of us nerds

grizzled wing
#

haha

mellow gull
#

Used to think I was antisocial
But I like having people around but maybe not necessarily socializing

rose tusk
#

same goes to white board and blackboard and whitelist/blacklist

#

no longer used, allow list/deny list respectively chalkboard and whatever is the other one haha

rose tusk
#

not saying that's the case, just a possibility

mellow gull
#

Oh it's no secret I'm an introvert.

nocturne sinew
#

i suspect that the 'new' meaning of antisocial (criminal) is a relatively (in the last 5-10 years) meaning.

mellow gull
#

And public outings in general definitely aren't my thing (that's more an anxiety problem)

rapid merlin
void tangle
#

I have to do 5 AOC task starting tomorrow in order to complete everything at 27th of December. I was expecting I'll be done sooner to continue my learning in fundamentals but its unfortunate I'll have to stay pre security until the 28th or 29th.

rapid merlin
#

We say like I donโ€™t want to go out because Iโ€™m anti social which means I donโ€™t want to be near anyone

rapid merlin
#

But if I said that to someone they would know what I meant

fossil marlin
rose tusk
#

yeah, generically it is used in the same way, just the word has a different meaning

#

just like remedial vs remediation

glass nest
#

It literally does ๐Ÿ˜„

rose tusk
#

yeah, some people use them interchangeably which is not right

#

look man, I'm a foreigner trying to explain English kekw

glass nest
#

Like literally :p

nocturne sinew
#

'enormity' is the one that mostly bothers me. Some use it to mean "enormousness" and actually it means "extremely evil"

rose tusk
#

I wasn't even aware

#

TIL

opaque flax
#

@visual anchor please do not send friend requests without asking people first

glass nest
#

Oh hey, it's Christmas Day! Yay!

rose tusk
#

merry xmas

glass nest
#

Day off work, finally!

nocturne sinew
#

oh no already?

mellow gull
#

Seven hours left for me until I can say Merry Christmas

rose tusk
#

the gym is closed, so sad :c

nocturne sinew
mellow gull
#

I mean by that ruling I can say it.

#

But my part of the earth hasn't arbitrarily spun enough to get there.

grizzled wing
nocturne sinew
#

time is an illusion; lunchtime doubly so.

mellow gull
nocturne sinew
#

which tz do thm boxes boot into?

rose tusk
grizzled wing
mellow gull
#

My enjoyment tends to stay in motion until acted upon by another force.

#

Oh, and happy Yule to those who celebrate, a few days late to mentioning that.

grizzled wing
nocturne sinew
#

i think it may be snoozetime

rapid merlin
#

I better do my hair before it gets too late

grizzled wing
#

who won the battle? Bill Nye

void tangle
mellow gull
#

Neil friendly firing Nye

#

๐Ÿ˜ญ

void tangle
grizzled wing
#

Neil DeGrasse was killer

nocturne sinew
#

Night all. Merry Christmas for folks east of the greenwich meridian.

timber galleon
#

๐Ÿ’ช

granite narwhal
#

today I'm trying get in top by finishing the junior pentesting

mellow gull
#

Warm your hands and rest your weary souls

grizzled wing
#

it's time for cyber ๐Ÿงฆ story time

mellow gull
grizzled wing
#

they have seen some stuff

mellow gull
#

Oh yes they have

grizzled wing
#

DarkNet Diaries episode that is fun is when the guy's mom got into a jail just using a clipboard due to her knowledge of how food inspections work.

mellow gull
#

You can get into a lot of places wearing overalls and holding a ladder

grizzled wing
#

i bet

rapid merlin
#

Itโ€™s too cold to continue hair antics

#

Maybe Iโ€™ll just tie my hair up tomorrow

grizzled wing
#

๐ŸŒจ๏ธ

rapid merlin
elder peak
grizzled wing
rapid merlin
#

What a mess

grizzled wing
#

holiday hair

rapid merlin
#

Gonna look like this

#

๐Ÿคฃ

grizzled wing
#

spikes

rapid merlin
#

Pink hair do

#

I remember when I had a slit in my eyebrow

#

I might do it again

#

Iโ€™ve been full of stupid decisions lately so why not

grizzled wing
#

having fun is a goal

sand trench
#

welp time to go sleep sloop to the beep boop for the meep moop

mellow gull
#

have good rest Shadow

rapid merlin
#

Merry Christmas everyone

#

I hope Santa brought all the good boys and girls the presents they wanted

split compass
rapid merlin
#

I'm staying up all night since yeah; fucked up my sleep schedule majorly

polar spoke
#

Potentially, depends how itโ€™s connected to your system/application

split compass
#

800Gbps infiniband? ๐Ÿ˜„ wishes

boreal scarab
split compass
#

That reminds me.
I have un-utilized systems at work, my boss told me to have fun with.
I need to throw some password hashes at it ๐Ÿ˜„

polar spoke
#

Sometimes both

brisk robin
#

You're a [0xA][WIZARD] Harry! Finally made it to Wizard! 3 more to go for that LEGEND status ๐Ÿ˜ค

brisk robin
split compass
#

Hmm, I see I'm no longer G0D

mellow gull
grizzled wing
split compass
grizzled wing
#

๐Ÿง™

mellow gull
#

Esqy sent me a frightening number of books and just one of them is like trying to read a bomb manual

grizzled wing
#

seriously a bomb manual?

mellow gull
#

I was about to say it's just a metaphor

#

But you know what in effect it's kind of the same thing

warm scarab
#

Merry Christmas THM fam stay safe everyone

mellow gull
vague frigate
boreal scarab
twin ridgeBOT
#

Gave +1 Rep to @polar spoke (current: #145 - 52)

grizzled wing
#

most people seem to be alseep or whatnot

jolly aspen
#

nah

mellow gull
#

It is quiet chat hours

opaque flax
#

the best time

boreal scarab
#

Santa is coming soon! Y'all better be asleep!

opaque flax
#

whos santa

opaque flax
#

wow

crude stump
boreal scarab
elder peak
boreal scarab
mellow gull
#

It is the special day

#

For most/some

boreal scarab
#

The specialist of special

elder peak
#

I thought it was Santa hat year round except for December, lol.

boreal scarab
mellow gull
rapid merlin
#

what do you think about the free Cisco courses? Are they worth it? Or is TryHackMe better?

cloud quiver
rapid merlin
#

i don't know what courses they are but I heard about them

cloud quiver
rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #5 - 1549)

rapid merlin
#

Santa v constant who wins

#

constant because I can't be changed kekw

fast grail
#

This event was my first ever experience learning cyber security and I can say it was amazing! I learned a lot of stuff. just finished the last day!

half girder
fast grail
twin ridgeBOT
#

Gave +1 Rep to @half girder (current: #244 - 27)

half girder
twin ridgeBOT
#

Gave 1 Rep to kangafoo (current: #235 - 28)

crystal sonnet
#

I didnt even spot the certificate button, normally to the right side.

half girder
#

however i noticed that thm finally added a certificate tab to the profile, finally ^^

mellow gull
#

I'd post my cert for cookie points but my job details are very easy to find by name alone hiss

crystal sonnet
#

Yes, that is a very good addition along with dark mode.

opaque flax
half girder
opaque flax
#

my job does not care

#

so i spam my boss instead ๐Ÿ™‚

half girder
#

mine neither

mellow gull
#

Absolutely nobody at my place of work would care l o l

half girder
#

on the other side, im probably the only employee among several hundreds sending in certs of stuff doing besides the job lol

opaque flax
#

my company does not care about pen testing

#

surprisingly not, most people are just there for the pycheck and dont care about tech

fast grail
#

Did you guys go to college to get a cyber job?

cloud quiver
opaque flax
#

i dropped out of elementary school

half girder
fast grail
opaque flax
#

no but i did go to college

half girder
#

@cloud quiver ty for the headup with cisco academy ^^ might grind there too

twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #5 - 1551)

fast grail
#

Oh, I guess that makes sense, lol. idk why I was thinking everyone had a cyber job

mellow gull
#

Cyber work isn't even the end goal for a lot of people here.

opaque flax
#

some people here have other jobs besides cyber

#

yeah i think people like hacking as a hobby but dont care professionally about it

#

or they watched mr robot

half girder
#

it might kinda take the fun out of it

opaque flax
mellow gull
#

I would like to pursue it professionally, but I'm fully aware that this is an extremely competitive and at least slightly luck-based environment and I'm not gonna abandon my steady work to go crazy for it.

opaque flax
#

i think it's hard to deny for a lot of people that watching mr robot influenced them to try hacking even it it makes you a script kiddie

rapid merlin
austere verge
#

I havenโ€™t watched it

rapid merlin
#

dude my internet is so bad fml

opaque flax
#

hence why i saw a lot of people

half girder
#

in 9 years doing system administration i only had one incident... was more a rolling thumbs job besides the dumb things like rollouts etc

mellow gull
#

I think I might be in the minority that haven't seen any hack-related media since...

#

What was that one movie?

fast grail
mellow gull
#

With Brad Pitt, I think?

#

Black Hat?

opaque flax
#

usually every couple weeks

rapid merlin
#

3mb/s ;-;

half girder
opaque flax
#

i am not in power to fix it

half girder
#

stupid employees?

#

xD

rapid merlin
#

I was gonna word it more eloquently Kangafoo, but yes; I'd imagine so

opaque flax
#

i have found credentials in plain text on a DC desktop multiple times

mellow gull
#

Huh???

opaque flax
#

plenty of open firewall web configuration pages open to the internet

rapid merlin
#

๐Ÿ’€

#

I'd go insane

opaque flax
#

devices vulnerable to log4j

rapid merlin
#

LOOOOOOOL

half girder
#

my incident was an employee clicking ransomware .. had to shutdown everything, took 3 days to recover

opaque flax
#

i administrate server 08

#

it drives me bananas

rapid merlin
#

Yeah it's understandable, I'd honestly talk to your CO about it

half girder
#

good thing afterwards... it was out of question that leading employees should have higher privileges xD

opaque flax
#

they are sure to listen to me

rapid merlin
#

Appeal to their needs, not yours

#

Permission to dm you?

opaque flax
#

no pls

half girder
#

anyways, id never do system administration again, for me it feels rather like being the digital facility manager

opaque flax
#

im moving to a spot to start fixing it soon

#

i have the right people advocating for my move into a position where I can implement secure solutions

rapid merlin
# opaque flax no pls

Ah all good; I'll just explain it here

File a report with your bosses explaining your concerns and the implications of employees neglecting their duties. Then, when an employee inevitably messes up; directly contact HR

#

explaining how your concerns were ignored

austere verge
#

But itโ€™s gotta be good experience at least

opaque flax
#

and i won't soon be administrating server 08

#

it's about to be decommed

crystal sonnet
#

If I could get some advise on which path to do next after doing cyber 101, complete beginner, intro to cyber and pre-security path ways.

opaque flax
#

pick a path that interests you

#

do you want to learn hacking? do jr pen tester

half girder
#

web path is a fun one

opaque flax
#

want to learn blue team? do soc level 1

#

i don't think you can really go wrong with any

crystal sonnet
#

yeah I dont know which team to go towards.

opaque flax
#

well hacking is fun

#

so

#

do jr pentester

mellow gull
#

+1 for pentesting if you like being active

#

SOC is a lot of log reading and staring at graphs

#

Which is great for some people

crystal sonnet
#

Are there no other general paths, before I start doing specific paths. I'm to the world of cyber security, I thought it best to secure my foundations first, as best as I can.

opaque flax
#

i mean

#

you just said you wanted to know what to do after the fundamentals paths

mellow gull
#

I mean there's plenty of foundational rooms that you can probably look up

#

But you've got three paths

half girder
#

@crystal sonnet well, you can also jump directly into the CTF game and see where you are standing and then you can still decide what you need to improve

#

however id recommend to start with the legacy machines on thm, because their understanding of "easy" changed a lot in the past years

crystal sonnet
austere verge
#

Ngl the only log reading Iโ€™ve ever done is less access.log ๐Ÿ’€

opaque flax
half girder
crystal sonnet
opaque flax
#

if you want to be serious about hacking

#

yeah

mellow gull
#

We always have braincells to lose.

opaque flax
#

hacking is hard

half girder
#

better with banging your head against the walls as in other ways xD

mellow gull
#

I haven't had to do notetaking for anything in years

#

I'm crying right now

crystal sonnet
#

I got yelled at by people for not making notes.

half girder
#

oh right, taking notes is important

mellow gull
#

Trust me

#

You're going to want a lot of notes

opaque flax
#

i trust no one

half girder
#

use obsidian or any other tool you are comfy with

mellow gull
#

About everything you're doing

opaque flax
#

not even

#

myself

crystal sonnet
half girder
#

yea everyone fancies something else .. im happy with obsidian, ive put the vault on dropbox and can access it now from all of my machines

mellow gull
#

Yeah Obsidian is turning out to be pretty great

#

Helps when you've got just...

#

so many subfolders...

opaque flax
#

and can access it just by connecting that device to my tailscale

half girder
#

thats my note taking habit xD

crystal sonnet
#

screenshot taking habbit

austere verge
#

Mine are in a notebook on my bed-

opaque flax
#

these are my notesfor cpts

half girder
#

looks neat

azure hill
#

I've said it already but I'm in the spirit so Merry Christmas everyone โค๏ธ

opaque flax
#

personally my favorite way to remember tcp vs udp

half girder
#

chuckles

austere verge
#

I was just learning about that

half girder
#

@opaque flax knowing how to force active ftp is occasionly helpful

austere verge
#

TCP maintains connection for the duration of the data transfer or smth

opaque flax
#

it's got that 3 way handshake

austere verge
#

I didnโ€™t rlly get what that meant tho

#

Whoโ€™s shaking hands

#

๐Ÿ˜ญ

opaque flax
#

the client and the server

austere verge
#

Whereโ€™s the third hand

opaque flax
#

Client sends SYN
Server sends SYN ACK
Client sends ACK

austere verge
#

Ouh

mellow gull
#

The most important thing to remember in hacking

#

SYN

austere verge
#

I havenโ€™t learned syn or ack yet tho

#

Lemme google

opaque flax
#

theres a lot of handshakes in the networking world

#

theres more in cryptographic key exchanges or kerberos authentication

mellow gull
#

WiFi handshakes
POST/GETS
Session Keys

#

All sorts

austere verge
#

Okie I think I get it pretty much

silver sky
#

PING

mellow gull
#

PONG

#

Hello, is SERVER here???

austere verge
#

I had to google what a packet was too kekw

opaque flax
#

sounds like someone could use some networking essentials

#

luckily tryhackme coversthe networking essentials!

austere verge
#

Im in the room I forgot the name

#

I havenโ€™t finished it

#

But me sleep soon

mellow gull
#

No. Stay here, forever.

silver sky
#

If you're in Costa Rica you better be quick! I'm delivering now!

austere verge
#

Iโ€™m in the introductory networking room actually

#

Atm

opaque flax
#

you will soon learn about networking

half girder
#

xD

silver sky
#

Panama City

half girder
#

reaching ecuador in 4 minutes

silver sky
sudden pond
#

THM feels slow these days

half girder
#

things will calm down again after aoc ๐Ÿ˜‰

#

and still no "no hints" shirt .. ts

opaque flax
blazing granite
#

Thatโ€™s a great sparkling wine, get it if you can

half girder
#

26e, not too bad

sonic sundial
#

Hey

opaque flax
#

hey

mellow gull
#

Hey

half girder
#

hey

waxen oasis
#

hey

crystal sonnet
#

Hey

cloud quiver
#

Hey ๐Ÿ™‚

soft vortex
#

ding dong

sonic sundial
#

AFTER I'VE COMPLETED JR PENTEST PATH DO I GO TO WEB FUNDAMENTALS AND CONTINUE WITH WEB PENTEST FIRST OR DO OFFENSIVE PENTESTING FIRSTWARD

opaque flax
#

woah woah

#

first off

mellow gull
#

Woah

opaque flax
#

no need to yell at us

sonic sundial
#

I accidentally on caps

#

didn't realise

cloud quiver
sonic sundial
#

mybad

opaque flax
#

but yeah

#

web fundamentals

sonic sundial
#

Alright, thanks @cloud quiver @opaque flax

twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #5 - 1552)

cloud quiver
#

+rep @opaque flax

twin ridgeBOT
#

Gave +1 Rep to @opaque flax (current: #220 - 31)

half girder
#

+rep @cloud quiver

twin ridgeBOT
#

Gave +1 Rep to @cloud quiver (current: #5 - 1553)

silver sky
#

Naughty shouting on Christmas Day!

#

I will take note of this

half girder
#

hm santa ignored my wishlist on amazon ๐Ÿ˜ฆ

soft vortex
#

happy xmas

mellow gull
#

How does one maintain the status of Nice, Santa?

soft vortex
#

join me Gaww

opaque flax
#

You didnโ€™t win this yeah mayor malware!!!! (I think I didnโ€™t really pay attention to the story)

soft vortex
#

you use motorolla ..right?

mellow gull
opaque flax
mellow gull
opaque flax
mellow gull
#

A plot, a plan, a scheme
A time, a date, a dream
Where one failed and passed along the wheel
It's a new user's chance to hatch a steal

opaque flax
#

Mayor malware needs to retire sometime

mellow gull
#

I'm breaking out of my shell to make a connection with each and every one of you.

#

And you'll embrace me with open ports and open arms.

opaque flax
#

Port 22: connection refused

mellow gull
#

Some less open than others.

opaque flax
#

I serve http

#

And http only

#

Please come give me your creds

#

Donโ€™t mind my friend wireshark

mellow gull
silver sky
mellow gull
#

Santa was secretly a villain this whole time???

#

Are presents actually just an HID interface to access people's homes?

opaque flax
#

Damn Santa is gonna get blood on me

#

Both user and root

grim imp
#

WOOOO

#

i finally got pfsense to download

#

now i can hack on a private ip

#

WOOOOO

opaque flax
#

You always had a private ip tho

grim imp
#

whale on like a vm so when i set up metasploit and stuff

mellow gull
#

If you're on a VM you should be using a VPN if you're using something like metasploit?

opaque flax
#

I have one of the last pfsense isos out there

#

On my ventoy

#

Metasploit or metasploitable?

grim imp
#

metasploitable

#

im just following a book mane

opaque flax
#

Why do you need pfsense to run a metasploitable vm?

#

How are they having you configure it?

grim imp
#

so i have an internal lan

opaque flax
#

Donโ€™t get me wrong learning a firewall is a fantastic skill. Iโ€™m just curious

grim imp
#

my brother in christ

#

i have no idea how to explain all of this

#

like i have an idea

#

but i cant compute

opaque flax
#

Are you putting it on a separate vlan?

#

Are you going to configure routes for the vlan?

#

Rules so only needed ports are allowed

grim imp
#

no

#

lol

opaque flax
#

Well then

grim imp
#

hold on

opaque flax
#

Iโ€™m holding on for dear life

grim imp
#

im trying to finish the set up then i will explain

mellow gull
#

I'm checking the guide I have for setting up vulnerable network topology

#

I mean pfsense isn't even in here - but I'm checking anyways

grim imp
#

ok

#

i knew there was a firewall

#

ima copy and paste

#

i hope thats not bannable

mellow gull
#

Shouldn't put

grim imp
#

setting up the internal network

mellow gull
#

Oh

#

That's old

grim imp
#

sorry i read this a long time ago and i knew it said something about a firewall

#

yes

#

ik

#

BUT ITS SOMETHING

opaque flax
#

So your isp by default should not be allowing any inbound connections at all

#

Unless youโ€™re port forwarding

#

So itโ€™s not strictly needed

grim imp
#

pf?

opaque flax
#

However I as I say that I am double NATing so I donโ€™t have much of a leg to stand on

#

Yes pfsense isnโ€™t strictly needed. But it gives you lots more control

grim imp
mellow gull
#

It's not bad persay, you're not hurting yourself

#

There's just easier and more effective methods nowadays

grim imp
#

im just trying to get more exp

#

oh

#

whal

opaque flax
#

How are you doing this pfsense setup?

#

What is it protecting?

#

How is it protecting?

grim imp
#

before i take my ethical hacking class i wanted to get some actual exp

opaque flax
#

What is your idea for pfsense in your network architecture?

mellow gull
#

It sounds like they're trying to set up these devices as part of an internal network system

opaque flax
#

Right I get that which I also do

grim imp
#

its port routing

knotty pendant
#

What did you guys get for Christmas

grim imp
#

depression

opaque flax
knotty pendant
mellow gull
knotty pendant
#

I got an ssd

opaque flax
#

Iโ€™d say what you want to do with the pfsense is configure it so the metasploitable machine is on a separate vlan then setup a route and rules so that only your attack machine can access the necessary ports for it

#

That would be part of configuring a secure infrastructure for setting up a vulnerable device on your network

autumn solar
#

Merry Christmas

mellow gull
#

Yeah packt says to do more or less the same thing through a vlan albeit through virtualbox or vmware if you're using metasploitable modules

#

So very similar process

#

This is wild to admit outright

opaque flax
grim imp
#

how old are you guys if you dont mind me asking

#

irl name or just discord stuff?

mellow gull
#
  1. Is it relevant?
opaque flax
grim imp
#

Because you guys know so much

#

im just comparing myself

#

v.v

mellow gull
#

I know very little, trust me.

opaque flax
grim imp
#

you can just make a new account

#

thats what i did with this account

#

but not because i tarnished my name lol

#

thennnn leave?

#

also why are joing nsfw discord servers lol

#

anyone watched frieren

grim imp
#

bro

#

I CANT do 2 things at once

#

ill brb

knotty pendant
#

Wtf

#

๐Ÿ˜ก๐Ÿ˜ญ

mellow gull
#

Okay... Rapidfireโ€”

@rapid merlin If it's a problem with your IT you're not going to clear the air with them, they know EVERYTHING you've been up to. If you're being harrassed or are in the wrong groups on Discord or whatever then just set up a list of friends you want to stay friends with and servers (and their invite links) that you want to stay in, put them in a little notepad, and make a new account. It'll take like an hour of your time, tops.

@grim imp Yes, I've watched Frieren. No, I haven't dedicated enough of it to memory to gush over it for more than like two minutes.

General note.

"Hacking" has the same pipeline as mathematics. The further into it you get the more you realize you know NOTHING lmao.

grim imp
#

i have a tattoo of frieren..

mellow gull
#

Well I hope it was tasteful.

grim imp
#

LMAO

#

why wouldnt it be

opaque flax
#

A vendor will have a really obscure fix

mellow gull
#

It applies to a lot of stuff, yeah.

#

Humans typically have a massively overinflated belief in their own understanding of, like, a lot of things.

#

We get so used to having tools and technologies that can perform tasks that we can't even begin to fathom, but when those tools break down or fall outside of their defined subject matter we need to rely on actual experts in that field

#

And it's only then that we establish even a basic idea of how complicated things can actually be when they aren't prettied up for us.

mellow gull
#

A Viktor reference? In my chat?

#

You're my first victim next SOCmas.

grim imp
#

lol

#

cringer

#

do you play?

mellow gull
#

No.

grim imp
#

mmmmmmmmmmmmmmmm

obtuse brook
#

man, scrolling up a bit was wild. Kindred just fyi, pfsense isn't going to do jack if it's just installed on your pc but everything on your network is still using your ISP modem/router as a gateway. Firewalls are generally their own physical appliances for a reason

grim imp
#

i have an adapter using an internal network

obtuse brook
#

Can you sketch your network topology in paint?

grim imp
#

i have

#

no idea

#

what that means

#

unless you mean

obtuse brook
#

Ok, well a firewall probably isn't going to help you then dude

grim imp
#

tell you how my topology works

mellow gull
#

So your intentionally vulnerable machines(VM or otherwise) should have the pfsense module between them and your host machine if you're intending on dealing with the inconvenience of reverse shelling to them every time

grim imp
#

yes

#

YES

mellow gull
#

So the map would look like

Vulnerable machines, pfsense, localhost, router (switch), rest of the whacky wild internet

#

Under optimal conditions

silver sky
#

Vulnerable XP machines are my favourite ๐Ÿ˜‰

opaque flax
silver sky
#

Of course

mellow gull
#

The best way to do it, naturally

grim imp
#

hahahaha

#

ive set up kali on the vm now too

opaque flax
#

So is metasploitable also in a vm on the same host machine?

grim imp
#

yes

#

im going to put this on my resume

opaque flax
#

And is pfsense in a different vm on the same host machine?

grim imp
#

"Super proficient in vmware and network topologies"

#

yes

#

all in the same virtual box

#

but different vms

opaque flax
#

So you are trying to configure an internal virtual network?

grim imp
#

i am doing that yes

opaque flax
#

Ok fair enough thatโ€™s a way to do it if you donโ€™t have the hardware to separate out the devices

mellow gull
#

Wouldn't you still need a separated instance to make sure the attack machine has to hit the firewall?

#

Maybe that's something you can set up in architecture

opaque flax
#

Iโ€™m pretty sure you can set that up

#

The pfsense can be the gateway

grim imp
#

the pfsense is the gateway

opaque flax
#

And the other 2 devices can use the pfsense as the gateway

mellow gull
#

Cool, got it in my head then.

opaque flax
#

You can configure the device vnics to be internal only so they donโ€™t attach at all to the host nic

mellow gull
#

Are you okay, Stormz?

opaque flax
#

Dude stormz itโ€™s like everynight you come in and spam a new image

grim imp
#

yes they are internal

mellow gull
#

You've been losing your mind for a bit.

knotty pendant
#

๐Ÿค”

knotty pendant
#

Bad internet

mellow gull
#

Maybe it's cause you're on mobile

#

But these are whack on PC

silver sky
#

These are wack on mobile too

opaque flax
#

Go back and look at stormz history itโ€™s mostly just images

#

Yeah itโ€™s wack on mobile

knotty pendant
#

Lowwwww taper fade

waxen oasis
grim imp
#

omg

#

its actually christmas now

knotty pendant
#

Yes

clever widget
mellow gull
#

Happy 12AM crew

waxen oasis
#

very merry

grim imp
#

going back to what you were saying @mellow gull, I feel like "hacking" is over complicated. I mean for beginners, if that makes sense.

clever widget
#

happyCat ๐ŸŽ„

mellow gull
#

Define what you mean by overcomplicated?

opaque flax
#

How is it overcomplicated?

#

Hacking is hard thatโ€™s for sure

mellow gull
#

One thing I'll admit to is that there's communal gatekeeping, for sure

#

But the beginning stages of hacking is exactly as complicated as it's always been and always going to be

grim imp
#

I always thought it had to do a lot with coding. Simple hacking is mainly just knowing the tools to use.

opaque flax
#

I like to think the hacking community is one of the less gatekeepey communities

grim imp
#

nah cybersecurity is the most gate kept communities there is

opaque flax
#

It really depends on which community you join

mellow gull
#

You run into it as you get to more complicated stuff

opaque flax
#

If youโ€™re on Reddit? Yea it is

mellow gull
#

HTB is famously gatekeepey

grim imp
#

who isn't on reddit

waxen oasis
#

real mayor malware???

grim imp
#

actually my friends suprised me when I heard they have reddit

opaque flax
#

Atleast my local groups are not gatekeepers

mellow gull
#

Anyways to get back to it a bit, it seems like you're actually complaining that basic hacking...

#

Isn't as complicated?

#

Tool understanding is ostensibly less difficult than proper coding

#

Although I would argue most beginners fail to fully grasp what their tools are actually capable of

thorny fulcrum
#

damn you mcSkiddy

mellow gull
#

He finally did it!

#

Our man verified

#

He can post all the whacky gifs now

#

Wait, different mayor

grim imp
#

I would've started a lot early if I wasn't afraid

mellow gull
#

No trust me you haven't overcomplicated it necessarily.

#

It's just the barrier you've described is a little further away

grim imp
#

doubt has killed more dreams than failure ever will

#

But I finally have my foot in the door

mellow gull
#

The biggest most important thing you need for this hobby, or job if that's what your after

#

Is a very high mental pain tolerance

#

And the willingness to bash your head against a wall for days

#

Oh, and notekeeping

grim imp
#

my biggest problem would be notekeeping

#

may start using my mac for note keeping

mellow gull
#

Make it not a problem early or it'll be a much bigger problem later

grim imp
#

trueeee

mellow gull
#

It will noticeably slow down your progress

#

But that's not a bad thing

#

Your progress probably should be slow so you can fully digest what's going on

boreal lagoon
#

^ I second that, especially when you are not in a race and can take your time

pulsar spoke
#

Happy Christmas Everyone ๐Ÿฅณ ๐ŸŽ„

clever widget
#

โœจ ๐ŸŽ„ happy christmas to u toooo

grim imp
#

i just freaking backdoored into metasploitable

#

and rebooted the machine

#

call me a hacker

knotty pendant
#

I just stole the family orange juice ๐Ÿ™๐Ÿ™๐Ÿ˜ญ๐Ÿ˜ญ๐Ÿค‘๐Ÿค‘๐Ÿ’€โ˜ ๏ธ๐Ÿ˜ˆ๐Ÿ‘ฟ๐ŸŽ„๐ŸŽ„

sturdy pike
grim imp
#

woahwoahwoahwoahwoah

sturdy pike
#

I hope you appreciated the pics of my cats

knotty pendant
#

Oh fuck

#

Weong pic

boreal lagoon
#

bro i looked over and was like ummmmm... LOOOOL

quaint badge
#

merry crisis

dark frost
#

๐ŸŽ…

knotty pendant
#

Merry christmuzz

#

Muzz

#

Duzz

#

Huzz

#

Bruzz

#

Grandmuzz

#

Grandpuzz

#

Sisuzz

#

Santuzz

#

Teachuzz

#

dawiddymuzz

#

Waky waky

steel aspen
grim imp
#

thinkpad goes hard

#

i need to lvl up on thm

tall merlin
#

How do be consistent

wheat pecan
#

Hey everybody

dark frost
#

I do own a thinkpad blobheart

rapid merlin
#

Christmas present

grim imp
#

would you recommend?

#

it looks good

polar wraith
#

my hero ๐Ÿซก

grim imp
#

so its good good

polar wraith
half girder
graceful knot
#

hey everyone, is thm down ?

warped fractal
half girder
warped fractal
keen tide
#

i learnt some python and made my own basic app for the first time, my first ever 100 lines of code

#

an someone give me another idea i can try coding

half girder
keen tide
knotty pendant
keen tide
half girder
keen tide
twin ridgeBOT
#

Gave +1 Rep to @half girder (current: #232 - 29)

knotty pendant
keen tide
keen tide
knotty pendant
#

Ok

half girder
#

because its the season, you should write a script which generates a simple xmas tree. its a quite common task in IT classes to get done

#

tiny bit of maths involved

grim imp
#

could you dm what helped you if you want?

half girder
polar wraith
#

idk if they are

#

but @keen tide learn flask

#

to make much better apps

#

u can learn here

#

best flask tutorial out there

half girder
#

he should rather learn the basics first

polar wraith
half girder
#

shivers

cobalt yacht
#

DARK MODE โค๏ธ TY

half badge
half badge
rose tusk
half badge
twin ridgeBOT
#

Gave +1 Rep to @rose tusk (current: #245 - 27)

rose tusk
#

limits are made to be broken so don't shoot yourself down before even starting

rapid merlin
keen tide
keen tide
#

i keep getting errors in the password generator i quit lol im gonna go learn more about random then try again

half girder
half girder
keen tide
#

how should i do it? print() and characters and symbols or is there another way

half girder
#

jep .. and what will help you is, draw it on a piece of paper first .. then you will understand the problem

#

x

#

xxx

random ginkgo
#

sorry but now, since the advent of cyber 2024 is over, how does it work with the prizes?

half girder
#

xxxxx

half girder
#

more tickets, more chances ^^

keen tide
random ginkgo
half girder
half girder
polar wraith
#

its good stuff

keen tide
random ginkgo
keen tide
half girder
keen tide
prisma onyx
#

Guys

#

I need help

#

Can anyone get a snapchatter's phone number?

#

Please it's an emergency

naive violet
#

@prisma onyx If you are concerned for someone's safety, contact the police.

remote panther
#

hello does anyone knows how can i get a student discount ?

sharp citrusBOT
half girder
naive violet
tranquil sable
#

Even if it is for your own safety, if you are in immediate danger please call the police

#

Also, Hello ๐Ÿ‘‹ It's been a while since I've popped in here

prisma onyx
#

I really can't call the police, I have strict parents

green ice
#

Merry Christmas guys !

half girder
#

nothing is as bad as parents wouldnt be there to help

prisma onyx
#

:""

naive violet
#

We don't do illegal or unethical hacking here, including cyber stalking. It's against our rules.

prisma onyx
amber ingot
#

Merry Christmas, Feliz Navidad, and Selamat Natal to you all. Spending the holidays sick as hell while doing THM courses, hope y'all christmas is more eventful than mine

fervent canopy
#

guys any advise on how to try hack me vpn on my machine. I've tried but I'm getting this error. Options error: You must define TUN/TAP device (--dev)
any advise.
Ps. I rarely use my kali linux machine also i'm using it on virtual box
I'm a beginner so I'm kinda new with all of that.

half girder
exotic vector
prisma onyx
naive violet
prisma onyx
#

I don't know what's his next step

half girder
green ice
naive violet
#

Please stop discussing it here @prisma onyx

prisma onyx
amber ingot
naive violet
#

If you continue to discuss it here, you will be permanently banned from the discord for discussion of illegal and unethical activities @prisma onyx
Go. To. The. Police.
They have the skills and authorization to deal with this stuff.

prisma onyx
#

Okay..

silver sky
#

Merry Christmas all ๐ŸŽ„

naive violet
#

Mornin' hex

grim imp
#

skills

#

idk about that'

exotic vector
naive violet
silver sky
silver sky