general

[stoic quarry]

^ Your one and only warning

[swift ice]

no, I’m your long lost father who fell on hard times so I had to leave :(

give me your credit card number and the numbers at the back please

[knotty cargo]

Dont worry, ill put protein in it and get the best mark 💪

[stoic quarry]

Hell yeah

[knotty cargo]

It has only 14$

I work cash

[swift ice]

better than $0

[knotty cargo]

Without the need for online payments i probably wont have any online money accounts

[rapid merlin]

B.F. Skinner 😄

i thought i was smart, then i tried playing CTF's...

[mossy river]

Trust me, we have all been there

[rapid merlin]

you been at the "How can a human being be this stupid?" point?

[mossy river]

Yup

I spent a year in cyber and still had problems with certain areas in the field.

[rapid merlin]

my brain is a pinball machine that I try not to tilt

[mossy river]

You eventually don't realise how much you have improved because things become second nature.
That imposter syndrome feeling always exists though, especially because you'll encounter new techniques. Cyber is massive and while you will get better and understanding topics, there is still a learning curve for each new area of cyber where you will start from beginner and work your way up.

[rapid merlin]

see also https://en.wikipedia.org/wiki/Four_stages_of_competence

[mossy river]

Take me for example. I've been in Cyber actively for 5 years. It's now 7am, I've been up all night because even though I wrote it down, I missed something in my malware analysis which resulted in me having to redo my whole assignment. It happens. I feel stupid and tired but now I've learned. And honestly, it feels great because nobody told me where I went wrong, I figured it out.

[flint sluice]

Take me for example
I shall.

[mellow gull]

Sometimes it's good to have some perspective. When it comes to something like a CTF - from step one - when you first perform a scan, or you first start enumerating, you have already done something the vast majority of people never will in their entire lives.

[rapid merlin]

and tired, I wondered if that screenshot click might have been related to that

[mossy river]

:0 ❤️

[mossy river]

I have a feeling that I would have probably done that regardless 😆

[rapid merlin]

that's fair

[flint sluice]

Jbabsa, is there a new level above legend?

[mossy river]

Not that I know of, why?

[flint sluice]

What's Cyber Crusader from?

[mossy river]

It's the event level

If you claimed it after the event roles had been removed, you get stuck with it until the next event :p

[flint sluice]

Like that one with the swords that one time?

[mossy river]

Yes!

[flint sluice]

SO many complaints lmao

[mossy river]

We do remove it now but the rewards page doesn't get refreshed, meaning you can claim it post event and your level will update.

[rapid merlin]

Yesterday i tried a pwnable website to check my skills, when i joined i thought "Meh, this is gonna be easy, wont take too much time", clicked the button play and chose the easy mode. First machine - i needed to find the password from a C language code. Took me 40 minutes to realize that i somehow lost like 70% of my IQ so i went to watch a youtube walkthrough. It was like a horror movie to me. Hex codes, decimals, C language, hex collisions...

[flint sluice]

It's the little things, eh?

[mossy river]

Always (I'm also little)

[flint sluice]

Tru bestie

[rapid merlin]

obfuscation can be impressive with the C language

[wooden totem]

✋ 🕵️ 🤚

absolute convolution

[mossy river]

It happens, don't beat yourself up over it. Use it as a learning experience.
I don't mind looking at write-ups or walkthroughs, if you're doing it right, it really helps.

[rapid merlin]

i hate hex stuff

[wooden totem]

If you ain't getting challenged, you ain't learning right

🕊️

[mellow gull]

Just because we've learned one skill doesn't effectively mean we've learned another. Cyber Security is a couple thousand different skills all tied up into one very ill-fitting trenchcoat. You might fully understand one thing and be lost in another, running into an obstacle only means that there's still more to learn.

[sick lance]

Omg it's a Varg.

A wild one!

[flint sluice]

[wooden totem]

Is that a pokemon

[rapid merlin]

variable arguments?

[sick lance]

How pfp is.

[sick lance]

You actually popped up in a conversation a few weeks ago,

I thought you were Scandinavian, but your Aus?

Is your parents?

[flint sluice]

Mother is Norwegian.

Born here in Aus.

[sick lance]

😄

What ya been up to since THM?

[flint sluice]

Working, traveling, building stuff for the online store, digital art stuff more recently.

Was making some pokemon wallpapers with realistic texturing.

What about the Scrubzm8?

[knotty cargo]

Always happens

Step 1. im excited i cant wait for the machine to start

Step 2. Isnt that supposed to work like this why it dosent

Step 3. Ive done everything, im sure i didnt miss anything out *with a little bit of furstraition *

Step 4. *sneaks at a write up * oooo how did i miss such thing 🙂

[rapid merlin]

Morning

[elder peak]

Morning

[devout palm]

Morning

[stoic quarry]

I think while you're learning it's okay. You pick up how you can do something and eventually you stop peeking at write ups

I hope

[chilly veldt]

Morning stealth

[cerulean aurora]

where can i read about exploits and Vulnerabilities

for web application

[chilly veldt]

Google

[stoic quarry]

OWASP has a good one

https://owasp.org/www-project-juice-shop/

[knotty cargo]

I hope so

[stoic quarry]

That's what I tell myself anyway 😅

[naive violet]

Tryhackme, portswigger, owasp top ten, owasp wstg

[knotty cargo]

Is that something like DVWA ?

[pliant cairn]

yes

[sick lance]

Eh,. living and uni, whilst having they quiet family life,

[flint sluice]

Quiet is good.

Quiet is very good.

[boreal gull]

Maybe I am too quiet 🤔

[flint sluice]

Beeeeeeeeee

Yes yes you are

[boreal gull]

hiii!!!!!

[devout palm]

Hei

[flint sluice]

:

[knotty pendant]

[boreal gull]

[rapid merlin]

Hi 👋
Could someone help me with some advice regarding Kali best practices? I'm considering switching to kali, have a little xp with Ubuntu in vm,but before that just wanted to ask for advice :) tips & tricks for personal use. Thanks :)

[stoic quarry]

Kali isn't usually recommended to install on bare metal, usually just have a vm for it

[boreal gull]

i personally dont use kali i just bang a lot of tools into my main linux distro, but i guess the main thing is to continue using Windows / Ubuntu and use Kali in a VM so if you break it, you can just reinstall it easily 🙂

treat it like ephermeral

and also use an install script like install.sh so if you install custom software, in the event kali breaks you can just copy and paste the script and it'll work again to how you like it to

ignore my 0x1 role btw that was forced on me against my will

[rapid merlin]

Thanks :) really appreciated

[twin ridge]

Gave +1 Rep to @boreal gull (current: #84 - 88)

[devout palm]

Nah you are just noob :p

[neat sand]

For the last 1 year, I am using Kali on bare metal, it's a gradual learning curve

[stoic quarry]

That your daily driver or just for CTF stuff?

/Work lol

[boreal gull]

server OS

[neat sand]

Daily Driver

[stoic quarry]

Wild

[mossy river]

Honestly I wouldn’t recommend running any pentesting OS on bare metal

It’s bad practice and unsafe

[rapid merlin]

Was thinking of doing the same, if I break it I'll learn from my mistakes.. hopefully 😅

[knotty pendant]

I wish i had pancake mix😔

[mossy river]

Eggs, flour, milk

Do you have those? 😁

[knotty pendant]

Idk if i have flour

And no eggs

[rapid merlin]

drink milk

[knotty pendant]

Im gonna get pancake mix today

Wait i do have eggs

[pine stratus]

why exactly is unsafe 👽

[elder peak]

Mmm now I want waffles!

[sick lance]

https://tenor.com/view/gir-aww-man-invader-zim-gif-25625508

https://www.youtube.com/watch?v=vX3gxtuup5E

Invader Zim forever!

[boreal scarab]

Is now mine. I stole your PC

[mossy river]

A) Even if you're completing CTFs, you're knowingly interacting with services that you potentially share instances with other users
B) You are likely to modify your system which can result in making your system vulnerable, such as opening ports
C) Download potentially unsafe software or download exploits from the internet. If you run these on your system, you can lose your system. Furthermore, if someone accesses your system, they can use binaries or other exploits you have left behind to privilege escalate
D) You do not have snapshots. If anything happens, you cannot isolate it or revert to an earlier point.

Why waste your time constantly having to reinstall your system when it is bad practice anyway? It's better to become familiar with virtualisation environments because if you work in the industry, you are likely to be using them regardless.

Run Linux as your host as much as you want, but if you're pentesting, use a VM.
You can still have that daily driving experience but you are practicing good cyber hygeine.

[mellow gull]

Always wear gloves when you're working with germs

[sick lance]

Or dealing with seized devices.

[mellow gull]

I almost got hooked into buying one of those mini tower setups with Kali preinstalled on it but I learned my lesson about how much better virtualisation is before I made a poor decision

[sick lance]

Snapshots make it so much easier to get back to a stock image.

Especially after you've set it up with tools you might place yourself.

[pliant cairn]

petition to make this the default wallpaper

[sick lance]

On the attackbox?

noooo, the current wallpaper is nice.

[mellow gull]

April Fool's maybe?

[pliant cairn]

come on that wallpaper is gud

[mellow gull]

Setting up a stable snapshot after I've installed some additional tools from default has helped me a few times already, would definitely recommend

[pine stratus]

well thank you :)

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1431)

[hot notch]

Trying to install Katana on kali linux, but the whole GO installation with $PATH is making me crazy. Is it in .bashrc or in .zshrc I need to add a export PATH="$PATH:/home/kali/go/bin"? guides are telling be different things

[arctic pebble]

Any wizards with CVs/linkedin here?

[sick lance]

If you wish advice, post a redacted version of your CV in #cyber-and-careers

[knotty pendant]

Is there a promo channel😈

[mossy river]

No 😄

You can post videos or posts that are of TryHackMe content in #thm-community-media

[mellow gull]

In most distros ~/.bashrc is usually the right place for setting up a permanent export path, but I am not an expert.

[knotty pendant]

Done

😢😢

[mossy river]

TryHackMe media, not memes 😄

[knotty pendant]

But it had the thm logo

[mossy river]

It's still not social media, or of TryHackMe content 😆

[knotty pendant]

😔

[hot notch]

Is there a channel to ask question about specific tools(like katana, subfinder etc.)

[mossy river]

Here or #infosec-general

[sand trench]

;-; can't sleep

[stoic quarry]

That's no good

[exotic vector]

morning

[stoic quarry]

Mornin

[night root]

Hello

[knotty cargo]

what a professor

A question in the exam was

I forgot the syntax

Tcp's connection is: (smthing like this)

A. Process to process

B c d dont make sense

[rugged kayak]

mornin

[knotty cargo]

E. End to end

Process to process is the same as end to end bruh

[chilly veldt]

someone just requested to get slack AI

[pliant onyx]

Dark times truly

[night root]

I won a headphone from the Advent of Cyber event, but unfortunately, there is no shipment available to my country, Nepal. I have already emailed the support team about this issue, but I haven’t received any response from them, even though it’s been a week. Can anyone help me with this?

[chilly veldt]

support may respond a bit slower due to the amount of emails they get because of AoC

[night root]

Ok ✅

[stoic quarry]

Did you get your score straight away?

[exotic vector]

oh no

[knotty cargo]

Nope

Probably in 2 weeks

Btw i did good i hope

[stoic quarry]

Fingers crossed it goes well

[pliant onyx]

Congrats, btw

[dense jasper]

Hi I'm new here 👋🏼

[mellow gull]

Greetings

[stoic quarry]

Hello

[sick lance]

Hi new here 👋 I'm scrubz

[night root]

@pliant onyx thanks buddy but I don’t think i am goona get it 😶

[twin ridge]

Gave +1 Rep to @pliant onyx (current: #884 - 5)

[pliant onyx]

Even if you don't get this, you are good enough to get things in the future

You'll get better things
Plus the THM team hasn't decidedly told you you aren't getting this

So there's still hope!

[night root]

Working For it Hope I would

[chilly veldt]

time to put on a movie and just streamline fixing stuff

[pliant onyx]

Me with YouTube videos

Or Music

[chilly veldt]

I have to fix like 30 routers

[elder peak]

Oh how fun. What movie did you put on?

[chilly veldt]

non yet, got a meeting in 15 minutes and then lunch after, so can't really start a movie

[pliant onyx]

Glad I don't have to

[sand trench]

well as no sleep and therefor not in bed means it is buldak noodles time again

[mellow gull]

noodle time sounds good to be honest

[sand trench]

yeah gonna wait about 30 mins more before going to the store and buying some

[elder peak]

I always seen buldak noodles at the store, I have yet to purchase some. I did how ever have some shin noodles earlier.

[mellow gull]

buldak is pretty good

[elder peak]

I’ll pick some up then!

[mellow gull]

Mie goreng and sedaap is also really really good

[elder peak]

I don’t think I’ve seen them, I’ll will look for them.

[sturdy pike]

I had a question

in obsidian, should I have another folder for short notes or summarized notes? I'm already making full notes so I think it makes more sense to summarize them but short notes are kinda partial according to topics

currently it looks like this

[mellow gull]

Depends on what you prefer most. Everyone has different things

I organize things by task/objective first and foremost, and have separate sections for in depth guides on individual tools

[sturdy pike]

could you show me your folder organization for reference?

[mellow gull]

Uhhh I've got an old screenshot somewhere around, sure

My Obi vault isn't on this PC lmao gimme a sec

[sturdy pike]

no worries, I can wait

[mellow gull]

Semi-recent

[jade wing]

Ugh, this impacket script I am playing with is driving me nuts

[exotic vector]

oh no, how so?

[jade wing]

It's the impacket-owneredit script

its just being a pain in my ass

[chilly veldt]

guess you have to wrench it together

[sturdy pike]

Looks similar to mine with just topics as the head folders instead whereas mine has a common headfolder for topics, what plugins do you use? I followed a two year old video guide for it so maybe it's more efficient now

[jade wing]

I have all the info I need I pulled from bloodhound and its being a jerk :(

[jade wing]

Yup

[sand trench]

read that impacket command like it was saying it is hacking reddit and got concerned

[rapid merlin]

I had some kimchi noodles earlier, I cooked meat and mushrooms to add too

[jade wing]

impacket-pwnreddit

Oh shit wb @rapid merlin

[sand trench]

next time shadow is gonna use impacket they will most likely just use docker

[mellow gull]

Pretty much. Everything is divested, for the most part, into each phase of the Kill Chain for easy access. There's a larger section on the bottom that acts as a directory, and then useful stuff like lab setup and hardware near the top. I haven't really gotten into using plugins though, vanilla Obsidian has been pretty good to me.

[rapid merlin]

Hello, I got compromised

I might take a nap

[jade wing]

Oh shit :/

Ok dude, let me know if you need anything later when you get up. Rest easy.

[rapid merlin]

Thank you

[sand trench]

when even the people like missstealth get compromised it starts to be spooky

[jade wing]

https://tenor.com/view/spookying-intensifies-gif-20204037

If there is anything in my career I have learned, is nobody is above rng

[sand trench]

getting scammed a total of 20+ times on runescape has probably made it harder to scam shadow

[jade wing]

Sorry shadow

I was a menance in that game

I would PK and rob people all day

[chilly veldt]

badum tss

[jade wing]

Any game where it is allowed

If there is PVP I am going to PVP and if I can scam/rob "ethically" within the bounds of the game I will

Unless we are friends. I wouldn't knowingly do that to you shadow

[sand trench]

pk in the wilderness was okay
scamming people while trading or mostly unknown game mechanics on the other hand has not been allowed

[jade wing]

Yea when it breaks the bounds of whats allowed in game I wont do it

[sand trench]

learnt a lot of valuable stuff from getting scammed often though and reporting people

[jade wing]

but if I say come trade me in the wilderness and I PK you a lot of noobies would think thats scamming

thats just a life lesson

dont follow strangers in the woods

[sand trench]

yeah

[sturdy pike]

So it's an approach like writing experiments, interesting, Prerequisites > Content > Conclusion, seems pretty efficient, I might have to integrate it in my sub-head-topic folders, I think I might add summaries to recall stuff if I'm in a pinch or have to revise something, is vanilla obsidian a plugin?

[mellow gull]

Pretty much! Since hacking is usually a pretty step-by-step process where you're operating within a certain "phase" at any one time it ends up being pretty effective over having to remember exactly what every individual tool does. And no, "vanilla," in nomenclature, essentially means unmodified/unchanged. Like Vanilla Minecraft is Minecraft without any mods, as an example.

[jade wing]

Gaww I might have missed it, but did you consider going for that box on htb or nah?

[rugged kayak]

do you have lets say cheatsheet for some popular tools or do you remember commands

[mellow gull]

Nah not this time, got a lot of other stuff I'm working on

[sand trench]

fun fact of the day:
you can add files to be stored and encrypted into your keepassxc database

[jade wing]

I used to have a lot of cheat sheets and I have remembered a lot of commands as well. I still reference docs if I need to and only keep cheat sheets of new things I’m learning.

Typically and I know this is lazy if I’m doing a box I’ll keep a cheat sheet that is just a basic text pad of things I was doing and did and the exact syntax and chain of thought so I can come back to it later.

[mellow gull]

In each section I've written there's some basic-use cheatsheets. For example if I'm in the process of enumerating and I've discovered an SNMP server, or telnet, or whatever it is, I can go to the "scanning and enumeration" section of my obsidian vault and look for resources that can enumerate those services, and there's some basic command syntax/guides written in it.

[jade wing]

I’m a messy hacker :(

[sturdy pike]

That's the approach I use too, step by step organizing notes and linking them to the parent ones from which they're derived, so I think, I'm good at that part, just that now I have to integrate the prerequisites and the conclusions for each of the topics.
Ah, I see, thanks for enlightening me on the meaning.

[twin ridge]

Gave +1 Rep to @mellow gull (current: #142 - 54)

[jade wing]

My notes are often scattered but there is a system in the chaos the only time I get organized is for certs

[rugged kayak]

i was thinking about doing something similar, might download hacktricks locally, for now i only wrote down like few ffuf commands and some rev shell payloads

[knotty cargo]

Vanilla minecraft is how i understood what vanilla means

[elder peak]

Mmm that sounds delicious!

[mellow gull]

It's proven to be really helpful. My memory isn't great but I am able to write, like, an absolute ton; so I divest my talents where I can.

[knotty cargo]

Vanilla ice cream is, pretty much, icecream

[rugged kayak]

not only memory issue but its a lot easier to access when you have it all in one place

[knotty cargo]

Hmm passive ice cream ?

[rugged kayak]

that would imply existence of active ice cream

[knotty cargo]

Yes

[mellow gull]

Yeah I learned my lesson pretty early on about avoiding scattered notes. My brain is scattered enough as is, if I can effectively categorize my notetaking then I'm helping my future self

[knotty cargo]

Active ice cream has tastes, biscuits and more stuff

It does more than being an 'ice cream'

[rugged kayak]

right now i have something like this

but i have dedicated directory for each machine i did

[knotty cargo]

Did u do oscp ?

[mellow gull]

That's not the worst way to do things. Everyone has a method that works well for them, after all.

[rugged kayak]

no this is just cheat sheet i yanked from the github

[jade wing]

For me and my scattered notes I don’t mind but my memory is on point and that’s where I keep a bunch of my info. I access my memories like files on a computer and have my own file system so to speak so I can query myself pretty effectively and visualize well.

Notes for me are an interim stage of memory and considered a step in my long term memory. They become useless to me after a while for the most part.

[knotty cargo]

Nice

[rugged kayak]

i plan to in the near future tho

that or CPTS

[knotty cargo]

Ive a lot of notes but i rarely reach any because i remember the notes itself while im typing ut

[rugged kayak]

might go with cpts since its cheaper

[knotty cargo]

Im already down to cpts

[mellow gull]

Better to get a company to pay for OSCP

[knotty cargo]

Same reason

[jade wing]

Could always go eJPT first if you felt inclined to do so

[knotty cargo]

Also cpts is respectable

[jade wing]

It’s respectable to us, not to HR just yet unfortunately

[knotty cargo]

At the end of the day, knowledge wins and any cert that gets u a comfortable job works

[jade wing]

Mainly because it isn’t monitored like OSCP

[mellow gull]

The cert that gets the work is the best one

[jade wing]

The way I have been approaching boxes for a while is vastly different than how I would approach them in the real world and my methodology changes considerably. It’s a lot like competitive programming vs software engineering

[exotic vector]

it also depends which certs are recognised by employers in your country

[jade wing]

With one speed is key and you throw caution to the wind. The other you have to be more methodical

[mellow gull]

smashes -T 5 rapidly

[warped grail]

hello

[rugged kayak]

-T4 is the best

[jade wing]

Hey

[warped grail]

wassup

[mellow gull]

Hi

[rugged kayak]

hi

[mellow gull]

Howdy

[exotic vector]

I tend to be more methodical
even when doing ctfs I rarely go -T5 lol

[jade wing]

I’m seriously banging my head against the wall with this box right now I can’t believe it’s challenging me like this and it’s an “easy” box

[mellow gull]

Already had to chide Malarum a while back for rushing port discovery a little too quickly

[warped grail]

t5 is fastest or slowest?

i forgot

[jade wing]

Already 3 exploits in and 3 shells in with 3 accounts compromised

[warped grail]

💀

[rugged kayak]

fastest

[mellow gull]

speed

[warped grail]

yea

[exotic vector]

fastest, with -T5 you'll be spamming a server with a ton of requests

[mellow gull]

-T5 is fast to the point that you're missing stuff by virtue of your hostility

[pliant onyx]

I just go rustscan

[full orchid]

hiigood morning

[warped grail]

o

[jade wing]

Sometimes speed is great to practice for the simple fact sometimes you have to go fast.

[rugged kayak]

true

[jade wing]

There are situations where it is indeed key

[rugged kayak]

rustscan -a IP -- -A

[exotic vector]

yeah for sure.

[near sapphire]

are nmap scans illegal without permissions

[jade wing]

No

[mellow gull]

Yes

They can be in some countries

[jade wing]

But they are discouraged

Passive scanning isn’t illegal as it is akin to normal traffic

If you go fast with your scan it can be considered hostile

But it’s highly discouraged to do it regardless

[mellow gull]

It's pretty good to assume "shouldn't do it"

[jade wing]

Unless ethically in an engagement or a controlled environment like a ctf

[exotic vector]

with some servers fast scans can trigger their dos protection.

[knotty cargo]

Its more like guidelines than rules

[jade wing]

Yup, then you get the good ole blacklist

[mellow gull]

Basically it can and will cause problems for you not maybe, but eventually

[jade wing]

To my knowledge an nmap scan isn’t considered illegal in any country

[mellow gull]

France, actually

[knotty cargo]

Once i couldnt resist and i scanned my uni website

[mellow gull]

That's the only one I know where an nmap scan alone will get you demolished

[knotty cargo]

It was pretty vulnerable

[jade wing]

Without proper authorization I assume being key

[mellow gull]

Yeah, of course

[jade wing]

That’s wild France don’t play

[mellow gull]

They have a whole "trying every key to a door you know you shouldn't open" thing about it

[near sapphire]

did u report it? lol

[rugged kayak]

on my uni some student reported critical vulnerability and got suspended

[knotty cargo]

Nope

The PoC was even avaliable on github

[knotty cargo]

Yeah

Cuz the scan itself most likely illegal

[near sapphire]

I mean they should be grateful

[knotty cargo]

Goverment ? No

[rugged kayak]

most of them run outdated software from 10 years ago

[mellow gull]

Also ISPs generally kinda waggle their fingers a bit if they notice you doing weird stuff on their networks, portscanning being one of them

[near sapphire]

the uni

[exotic vector]

im doing a ctf and it adds an 128-AES key to the url, fun lol

[mellow gull]

Always good to be careful

[knotty cargo]

Its running a 2004 apache http server

Not even https

[jade wing]

When I was in college in like 2007 they were going over wireshark with us. I started sniffing our schools network and back then there were a ton of things that didn’t use https fully or hell anything. I called my teacher over and was like “like this?” And he saw what I was looking at and I could see teachers logging in, reports, all kinds of shit. He was not amused and I almost got kicked out because of it. They had to write a new policy because of it.

[knotty cargo]

Bruuuuh

[jade wing]

I thought it was hilarious

[rugged kayak]

i am convinced colleges are scared of using up to date software

[mellow gull]

Man don't teach kids about a cool network capture tool and expect them not to test it out

[knotty cargo]

Because its more expensive ?

[near sapphire]

I think its more like afraid things will break or teachers not knowing how to use it

[mellow gull]

Sometimes shifting to modern architecture can destroy legacy systems they're relying on for some random database that'll annihilate the school if it goes down for more than 0.2 nanoseconds

[rugged kayak]

is it expensive to do sudo apt update or download newer version of ubunut for vm

[exotic vector]

I feel like that when I learn a new tool and im not a kid lol
So I have to seek out ctfs to play around with it all.

[near sapphire]

or just plain lazyness

[rugged kayak]

until last year we used ubuntu 16.04 or something on our school vms

[knotty cargo]

Oh yeah its linux

I forgot that for sec

[rugged kayak]

they just recently switched to 22.04

[mellow gull]

Exactly! I learned about a tool that converts files into DNS queries and then reconverts them back into true files the other day and - like -
How can you not expect me to try playing with it?

[knotty cargo]

Then when will someone use the tools

[rugged kayak]

curiosity killed the cat

[jade wing]

But only if the cat was observed

[near sapphire]

I had to hold back trying out a ddos tool I found one time

[knotty cargo]

Haram

[pliant onyx]

Also rustscan -a IP --ulimit 15000 -- -A

That is if you want to announce your arrival on the server

[exotic vector]

oh that sounds like fun xD
today I've been learning sqlmap and got excited lol

[pliant onyx]

Yawn, I've done too many THMs today

Tired now

[jade wing]

I remember back in the day a bunch of budding “hacktivsist” all downloaded LOIC on “anons” word and would be part of a mission. This was from a 4chan post mind you with links (shudders) It was a RAT and hella people got owned but it was even more funny because Leo’s were also ratting the downloads and hella people got partv&ed

Oh those were the days

[exotic vector]

I remember that.

[jade wing]

Like it’s sad because well you know but I can’t help but look back and laugh

[lost birch]

That is a DDOS tool right?

[mellow gull]

Anon used to be such a big culture icon, really inspired all the modern day voice changing mask wearing spuds

[rugged kayak]

i slowed down a lot since new year, i was getting burnt out, nowadays i mostly do a room or two per day

[jade wing]

Yea there was a real one that circulated for a while but it quickly was out circulated by fakes that had malware

[exotic vector]

yeah it was posted on the IRC

[mellow gull]

The new fad is getting AIs to self destruct

[knotty pendant]

[lost birch]

How does that work? 🙂

[exotic vector]

and posting tiktoks where you're using nmap with phonk music playing.

[jade wing]

yup

[mellow gull]

My favorite

[pliant onyx]

I had slowed down as well, all I do nowadays is maintain my streak and learn something new

[wooden totem]

I heard tiktok has 4 days left

[half girder]

except elon buys it 😉

[exotic vector]

yeah china wants elon to buy tiktok

[half girder]

just read in the news there are apparently talks

[mellow gull]

I can't really explain this without skirting the rules, but basically getting the AI to input destructive commands into its own terminal.

Is the essential concept

[rugged kayak]

i will be grinding until i get top 10 in my country and i am retiring

[near sapphire]

I believe theres a day in aoc abt that

[mellow gull]

Anything for that screenshot baby

[jade wing]

It's so resiliant in architecture it only destroys the instance though

It is funny to see it implode however

[pliant onyx]

I’ll be grinding until I get higher than you then

[rugged kayak]

i need to grind 25k points more

[jade wing]

Monthly or all time?

Ah all time got it

[mellow gull]

Unfortunately yeah kubing or docking or whatever instancing they do makes it difficult to deal lasting damage but it's really funny to watch

[rugged kayak]

i am 8th on monthly rn since i didnt do much ctfs

[exotic vector]

considering how the tech world is in love with AI at the moment, I might consider learning how to find vulnerabilities in AI systems.

[rugged kayak]

mostly doing paths rn

[pliant onyx]

I need to grind <points to 0xD> + 25k then

[rugged kayak]

thats the spirit

[jade wing]

to be fair, I am looking at some of the people that are in top positions on leaderboards and I roll my eyes, I am slowly griding rank because why not but it feels meaningless when I see someone come out of nowhere and stack 9.8k points across 3 days

and I'm just like yea ok dude

[mellow gull]

Some of these people are gonna be ahead forever, too

[pliant onyx]

My main purpose of grinding is to get the skills required for a bug bounty

[mellow gull]

Like I ain't beating 0day, sorry

[rugged kayak]

bro has 5k points frist day after leaderboard reset

[exotic vector]

to me points and levels dont matter, im here to learn more than anything.

[pliant onyx]

If I don't complete at least 1 bug bounty this year, I will gift a rando Discord Nitro

[pliant onyx]

Oh yeah that man has way too many hours at this

[jade wing]

When you look at the rooms often you will see people that were obviously given the answers for first blood like as soon as the room release it they answer all questions with 30s inbetween them and its a brand new room

[pliant onyx]

Even rustscan says, "0day was here :)"

[jade wing]

it perma takes up the first blood spot

[pliant onyx]

That's a flex

[jade wing]

I think thats kind of lame

[mellow gull]

Some people just got nothing better to do

That's why I don't bother with it so much

[rugged kayak]

chasing the clout

[exotic vector]

theres also a lot of super advanced users/professionals who use thm as well.

[pliant onyx]

I don't see meaning at doing it first, just doing it fastest maybe

For now, I'm at a point where I want to do something completely on my own

Something = a tough room

[jade wing]

It's not even that they are so skilled and have nothing better to do its flat out cheating the system. It's not humaly possible to get first blood that quick blind in 30s

[pliant onyx]

I require a hint or two even in some easy rooms rn 😅

[jade wing]

and not just once but over and over again

[sharp citrus]

Cloning a Room

Article Link

https://help.tryhackme.com/en/articles/6498333-cloning-a-room

Jan 14, 2025, 11:13 AM

[half girder]

hm no

[mellow gull]

I mean some of these guys have clears that are faster than the VMs loading

[wooden totem]

isn't that the whole point in hacking tho, to cheat a system

[jade wing]

exactly

[near sapphire]

does thm staffs not do anything abt these?

[pliant onyx]

Lmao

[pliant cairn]

reminds me of Mr.Robot ctf scene

[jade wing]

Some of them are THM staff lol, but to be fair I give them a pass because well, they own the environment

[pliant onyx]

This year's Advent of Code leaderboard was poisoned with LLMs

[pliant onyx]

Are THM rooms also suffering due to bad LLM use?

[exotic vector]

Hints are good to have, because the tasks often want you to do something in a particular way

[jade wing]

the thing is the board and its points are really that competive though because of that and I think thats a shame

and I say what I say meaning no dissrespect to THM staff

[pliant onyx]

True, they help me not go into a rabbit hole, or help me not search through things when I'm on the right track and just skip the searching

[jade wing]

Thats why I like HTB's ranked seasons

[pliant onyx]

Which I highly appreciate

saved me time and braincells

[wooden totem]

ranked ctf

[near sapphire]

I mean personally idt staffs should be allowed to do the rooms they work on, at least not for first blood points

[jade wing]

Agreed on this part

[pliant cairn]

@safe canopy you good? huge respect for the time you are spending on eraser.

[half girder]

actually, it bothers me that THM set rules for rooms, what requirements they have to be considered easy/medium/hard/insane .. however the past months, they dont fullfill the requirements anymore and just pass QA .. when you check on easy rooms from the past years and then today, its quite clear that medium back then, is easy now. i dont think that THM is actually doing a smart move in here, when "easy" only leads to frustration to new users. link as ref https://help.tryhackme.com/en/articles/6633511-creating-your-first-room

[mellow gull]

I do think there's a pretty noticeable overlay between easy and medium rooms - hell, I've seen a few easy rooms that objectively are closer to medium/hard

[half girder]

sidequests were easier than some easy rooms lol

[rapid merlin]

I think some of the easy rooms aren’t easy at all

[jade wing]

I think people come to learn, and thats ok, its a newby friendly place, but if you take your rank serious and are competitve and want to push yourself, go HTB, many of their "Easy" boxes would be considered hard to insane by the standards here.

And I have also noticed the same doing some of the older boxes on THM, some of them were legit brain teasers

what I do like about THM boxes is the creativity in the themes and the whole vibe

[exotic vector]

definitely, some are quite hard.

[jade wing]

many of them are pretty neat

I very much so enjoyed the year of X rooms

[half girder]

they need a new category "trickshot" where you just dont need common sense but only need to know the most weird tricks ever to pass a room xD

[mellow gull]

Where THM thrives is in showcasing really creative processes and methods

[near sapphire]

yeah htb are NOT beginner friendly at all, I tried them once then gave up and never touch it again. I'll prob go back after I learned some skills

[half girder]

yea htb easy is rather thm medium/hard

[mellow gull]

Whereas HTB definitely stems more from stabbing you in the chest until you're bleeding and then dropping a 500 page manual about stitching yourself back up at your feet

[rugged kayak]

also room difficulty on htb is just community rating of that room, no?

[jade wing]

understandable, I think HTB aims for more realistic scenarios and chains of events vs THM which is more so trying to teach you to "think" like a hacker, use logic, solve puzzles, have fun.

[pliant cairn]

you are so accurate with this that i smiled reading it

lol

[jade wing]

No they are set by

[near sapphire]

not sure abt that one

[jade wing]

they are set by HTB

they gauge it based of techniques required that fall in line with their "tiers"

the more advanced knowledge is in higher tiers, and if a box requires that and its prerequisite it will have a higher difficulty

[pliant cairn]

yes. it starts with a rating but then upon release the community feedback changes the rating

[jade wing]

with that being said, its often I see a lower tiered box requiring higher tiered knowledge

[wintry flower]

yo @cloud quiver you there

[near sapphire]

there should be like a universally agreed upon guide for difficulty across all websites/ctfs

[mellow gull]

My only gripe with HTB is that they sell esport-style team jerseys and therefore I can't respect them

[jade wing]

It's too subjective if you leave it open to community it will always vary and fluctuate

some people think X is easy and others think its very difficult

[jade wing]

I'm going to have to buy one now so I can be a cringe lord

I don't like hostile their users can be towards THM users

[half girder]

i gotta read through how to create a room for thm, i have something in mind to combine riddles and hacking, so like a story thing as in the room mother

[jade wing]

they think their shit dont stink

and also, if you spend a lot of time in their community the amount of script kiddies and beggers who don't know shit is high

they all just beg "come on bro, give me RCE". "ok bro I will give hint pm me", "I got the system flag lol ez"

[sand trench]

n00dles time

[jade wing]

like wtf

[mellow gull]

Don't forget your hak5 beanie and MyHackerTech backpack with linux/terminal enamel pins

[jade wing]

See thats why I like THM rooms

its that creativity right there

[near sapphire]

also their discord link in the website is not updated, I wanted to join but oh well

[half girder]

well, htb is "hacker cool" .. im on the discord but rarely talk there, for my taste a way too toxic there

[jade wing]

It's toxic as hell over there I will be real

[mellow gull]

HTB's community is rough

[jade wing]

join the kali discord

[half girder]

im too old for comparing virtual p .. sizes

[rugged kayak]

are there more skids here or over there at htb

[sand trench]

the defcon discord has been nice to shadow

[mellow gull]

There

HTB is where all the hardcore wannabes go

[jade wing]

I think that is also subjective to interpretation but I feel like via observation over there

by the simple fact their community is bigger

I have met some people here that I respect and I can tell know their shit

[near sapphire]

kali has one??

[jade wing]

when you know your shit, you can spot people that don't real quick

and its like every other person over there

[jade wing]

They do actually yea

it can be pretty hostile, BUT

[near sapphire]

dont tell me windows has one too

[jade wing]

there are people that will help you and like to do so

[sand trench]

soooo does shadow know their poop????

[jade wing]

Microsoft has one yea and I actually got full blown into it with some power tripping mods over there

[wintry flower]

I'm trying to create a payload using msf venom and it says command not found What am I missing

[jade wing]

think reddit mods on steroids

[wintry flower]

in metasploit room

[jade wing]

and its filled with a bunch of people that wouldn't know a sysinternal if it slapped them in the face

[mellow gull]

#room-help

[near sapphire]

there is only one right answer to this

[wintry flower]

👍

[rugged kayak]

i would love to conduct a research on how does one become power tripping discord mod

[jade wing]

Yea that would be over there, but its likely you dont have it installed or are typing the command wrong

[rugged kayak]

btw htb discord has just 10k more members than thm

[jade wing]

all script kiddies I tell you

lol jk

but it feels that way

[mellow gull]

I used to be one (LOL) so I can answer this question.
Much like The Mask, it's a state of being that eventually subsumes your consciousness and overwrites your previous traits.

Apply same logic to reddit mods.

[jade wing]

I don't think I ever powertripped on anything I ever modded

I have always been chill and laid back and only handled actual issues

[exotic vector]

I dont pretend I know my stuff, I know enough considering when I started to do a lot of research.

[jade wing]

nowadays I wouldn't moderate shit unless I got paid good money for it

[mellow gull]

I got powertrippy kind of as a consequence of being relied on for everything

Need a new rule list? Need someone banned? Need someone interviewed for mod status? etc etc, kind of got handed off to me

It was either ego trip or psychotic break

[jade wing]

Why not both?

[mellow gull]

🤔

True!

[jade wing]

absolute power corrupts absolutely

[mellow gull]

Ironically I hated it the entire time

I hated being a mod on anything, God

[half girder]

well, its worse when you have a dispute among members and both are like "he/she goes or i go" and you are sitting in the middle, knowing both are valueable

[gleaming grove]

good morning guys~~~

[jade wing]

morning

[mellow gull]

Mornin

[gleaming grove]

time to do some rooms

[upper knoll]

morning

[wooden totem]

Is this the secret to all problems, "having" to do something is not as amusing anymore

[cloud quiver]

Hi buddy , what's up 🙂

[upper knoll]

yo the great kgb

i was talking about u last night

[sand trench]

;-; the noodles are all gone

[upper knoll]

all good i promise

[mellow gull]

Noooooooo

[sand trench]

shadow ate them all

[mellow gull]

Oh

Not noooo?

Kinda noooo?

[cloud quiver]

Well thank you for that 😄

[twin ridge]

Gave +1 Rep to @upper knoll (current: #639 - 8)

[upper knoll]

ima go make fish pie soon icl

[sand trench]

yeah want more noodles

[mellow gull]

Kinda nooooOOOO

[upper knoll]

your welcome you are the person i think of when im stuck

[gleaming grove]

noodles absorber

[upper knoll]

i know if your online problems i find will get solved

[half girder]

how did you get muted, @sand trench ?

[sand trench]

noodles are shadows favourite type carbohyderate giving food

[upper knoll]

considering how much asian food i enjoy i dont eat much noodle

[sand trench]

this weekend??? well kinda escalated or made a situation worse then it needed to be

[upper knoll]

they didnt really exist growing up i grew on pasta

[half girder]

ohh, i just saw the mute and was like "woa dafuq???"

[sand trench]

lapse of judgement on shadows part as they were tired and tried to explain how something was kinda rude

[mellow gull]

There was a peculiar "customer" that mistook Shadow for an employee

[sand trench]

i.e shadow has regrets it went that far and think the mute was extremely justified

[half girder]

aw, guess shadow was still polite enough

[mellow gull]

It was a bit much at the time, really caustic situation overall

[upper knoll]

we still appreciate seeing shadow!

[half girder]

my understanding of escalating requires lotta *** words xD

[exotic vector]

same

[mellow gull]

noodles are the best carbs

[solid stream]

I can't connect to tryhackme servers can someone help me?

[mellow gull]

Gaww would perish without noodles

[upper knoll]

what u trying to connect with lad?

[near sapphire]

I dont actually know what the * are supposed to be

[mellow gull]

curse words

I assume

[half girder]

words you wouldnt write or say in front of a kid or your mom ^^

[hearty hollow]

Does anyone know if and where you can get gns3 networks for training pentesting

[sand trench]

hmmmmmm should shadow eat some candy now or save it for later
descissions decissions decissions

[near sapphire]

ik but idk which curse word

[mellow gull]

Any curse word.

[cloud quiver]

https://www.gns3.com/software/download

[sand trench]

american version of arsehole fits into 3 letters

[near sapphire]

ah that one

[mellow gull]

what kind of candy does shadow have available?

[hearty hollow]

Then o gave to setup the metwork my self

[cloud quiver]

Wdym 🙂 ?

[hearty hollow]

But I stuggle adding multiple computer or setting up the network environment my self

[sand trench]

moastly foam banana
some french nougat
some regular nougat

[whole kraken]

Is anyone here a backend developer?

[upper knoll]

thats what vms are for right?

[mellow gull]

foam banana sounds wonderful

[cloud quiver]

You can download pre-configured network from somebody else

[rapid merlin]

Hey guys, hope you are all good

[hearty hollow]

Yeh but where?

[upper knoll]

google

llearning this stuff is always good but if u want to be spoon fed u wont get anywhere

[sand trench]

do you want an AD network to try your hacking skills on??? shadow has a few saved in tabs on firefox they could grab

[upper knoll]

learn to research and help yourself

[sand trench]

https://github.com/Orange-Cyberdefense/GOAD/blob/main/README.md

[cloud quiver]

https://www.gns3.com/marketplace/labs

[upper knoll]

yall are so friendly xd

[sand trench]

wait what is gns3????

[cloud quiver]

Network simulator software , similar thing to CISCO Packet Tracer only much less buggy imo 🙂

[sand trench]

ah

cisco packet tracer is terrible because it only supports light theme

blinding shadows poor eyes forever

[cloud quiver]

Then GNS will be great choice for you , I think it has those dark themes 😄

[loud marlin]

@boreal scarab
bite me 🙂

[sand trench]

sitting here waiting for shadows new blu ray burner

[near sapphire]

dark themes are an invention equivalent to fire for me

[sand trench]

monochrome books are cool

for those that don't know: https://www.monochromebooks.com/

shadow got the dorian grey one to give to their mom for christmas present

hmmmm maybe shadow should try and port this to catppuccin: https://github.com/vial-kb/vial-gui/blob/main/src/main/python/themes.py

[still robin]

https://tenor.com/view/hello-world-seytonic-coding-hello-gif-10598764531210485569

[rugged kayak]

verify to send gifs

[gleaming grove]

wow those look amazing

[sand trench]

they are more of a collectors item book then a normal everyday book

and yeah they are nice

the feel is premium and they look really really goood

[gleaming grove]

what book does shadow want in a monochrome version?

[sand trench]

a collection of h.p. lovecraft novels in a monochrome book version or alternatively dracula in monochrome version is what shadow is wishing for

[gleaming grove]

nice great choice

[cerulean aurora]

need to do web application pentest

help me with all the possible tools n other thinga

[mellow gull]

Which web application, and what scope

[cerulean aurora]

for soc

[knotty pendant]

I had another sleepless night😢😢

[cerulean aurora]

dont u do drugs

[knotty pendant]

No

[cerulean aurora]

ahh man

[mellow gull]

Really weird way of not answering my question. What web application, and what scope?

[half girder]

https://tenor.com/view/bunny-wth-confused-huh-what-gif-17289999

[cerulean aurora]

sorry i said already for soc

[sick lance]

Exam 1 down, 1 to go.

[cerulean aurora]

Security Operations Center

[mellow gull]

Best of luck to you, hope for good scores.

[pulsar spoke]

Yeee! What exam was it and what's next?

[sick lance]

Malware Theory.

Next up is Malware practical.

[pulsar spoke]

Easy for you, mate.

[cerulean aurora]

web applicationd

[half girder]

you want to pentest for soc .. im heavily confused .. perhaps rephrase the question again.. otherwise id say you just follow along the web app paths on thm and just write down which tools are used e.g. burp / zap / etc pp

[oblique furnace]

morning baby

[gleaming grove]

idk there are a lot of tools, but I think you should know them if you follow the learning path

[cerulean aurora]

i do know n i hava a list already

but need more of it

[gleaming grove]

morning

[cerulean aurora]

burp
owasp
zenmap
nicto
wikto
nessus
fortify

[young flicker]

Ohayō

[cerulean aurora]

wireshk

[young flicker]

I've got an app I cant use

[mellow gull]

Okay, you still haven't told us what room/web app you want to... soc for.

[rugged kayak]

bro tools dont matter if you dont know how to use em

and soc's dont do pentest btw

[rapid merlin]

socks

[cerulean aurora]

there will be 2 machines which well be getting and we need to find out as much vul as we can

[mellow gull]

Oh, I'm definitely not helping you then.

[half girder]

ah so this is work related

[cerulean aurora]

specifily cant say work

but my project

[mellow gull]

Cheating in any form is strictly prohibited. This includes, but is not limited to, requesting assistance with schoolwork, employee assignments, or active CTFs.

We can't help you, sorry. Whether it's homework or a professional task.

[half girder]

you wont have luck here with questions regarding homework/exams/work/"everything outside of thm". @sick lance to the rescue 🙂

[cerulean aurora]

ok

[half girder]

https://tenor.com/view/this-is-the-way-this-is-the-way-mandalorian-mandalorian-i-have-spoken-baby-yoda-gif-24159898

[mellow gull]

Look at that, I'm blue now

[boreal scarab]

https://tenor.com/view/aww-cute-gif-24949784

You taste bad

[rugged kayak]

congrats

[knotty cargo]

Does anybody have an idea that if i welded that coxial cable to this massive antenna, and connected it to the wifi card like this, will it work ?

[loud marlin]

ik. i dont shower today

[boreal scarab]

Also... get woken up "Matt, my computer on't turning on" Reseat the battery
"Matt, my monitor config is broken"

I HAVEN'T EVEN HAD MY COFFEE YET

AND I JUST WOKE UP

[sand trench]

could potentially work but why you would do this is a big question to shadow

[knotty cargo]

Hmm

[mellow gull]

Why do we do anything

[knotty cargo]

To fix the bad wifi range for the laptop

[sand trench]

aaah

[boreal scarab]

I know, I can smell you from here

[sand trench]

doubt it will give you any better range actually

[knotty cargo]

And get the range that satisfies my desires

My phone gets better range than this

Lets give it a shot

[rapid merlin]

It's not my wash day either 😄

[knotty cargo]

What can possibly go wrong

[sand trench]

would recommend a new dedicated usb wifi card over doing a bodge job with soldering/welding cable to attenna

[sick lance]

Scada is bogus,

nice little jsp vuln.

[sand trench]

........ please don't use that phrase

[boreal scarab]

Oh, you mean.... The Q word too?

[rapid merlin]

heard of some awesome jobs for Scada in the energy sector, but that must be scary

[sick lance]

Yeah, due to the legacy software and where they're placed.

[boreal scarab]

https://tenor.com/view/cat-chuni-sleep-gif-20108376

I'm going back to bed

[rapid merlin]

sweet dreams

[knotty cargo]

Hmm soldering it turned to be harder than i expected

And ill ruin the antenna

But i

Never gonna give up

[mellow gull]

I'm not surprised by this course of events but I'm curious nonetheless

[rugged kayak]

make a satellite

[knotty cargo]

The antenna is already a satellite 😂

[rugged kayak]

make a big satellite

[knotty cargo]

Size comparsion to my hand

Taller than a 15.6 inch laptop

[rugged kayak]

are you soldering that antenna to a laptop

[knotty cargo]

Im gonna connect to THM network by wifi 💀💀💀

[rapid merlin]

easier to look at a usb wifi adapter so you don't damage your laptop

[rugged kayak]

but where is fun in that

[rapid merlin]

suppose fun isn't meant to be cheap 🤣

[knotty cargo]

Daym i laughed a lot at my own argument

[mellow gull]

I swear it's like there's a calculation for how much time has passed and how demented people's ideas become here

[hoary tiger]

when i run LFILE=/etc/shadow what happened in backend ? it store an LFILE as variable?

[rugged kayak]

we are all slowly becoming insane

[mellow gull]

May as well solder the antenna directly to the laptop to make sure it's sturdy

[knotty cargo]

Usb c nokia already done

[mellow gull]

[knotty cargo]

Imagine what a giga chad can do when they go crazy

[sand trench]

it makes a variable called LFILE which has the value /etc/shadow

[mellow gull]

I feel my braincells disintegrating

[sand trench]

then later you can insert said value in the text by doing $LFILE

[hoary tiger]

where it stored ? and

[knotty cargo]

Im thinking of a way to do that while keeping the anetnna in one piece

[sand trench]

in the shells sessions env

[hoary tiger]

yesh

[hoary tiger]

if i open new shell it not work ?

ok

[sand trench]

depends but generally no it will not work

[hoary tiger]

ok

thz

[mellow gull]

Just do it below the turning hinge

[sand trench]

there are ways to pass the environment variables from one shell to another but probably out of scope here

[mellow gull]

So you can still aim the antenna for maximum reach

[vernal matrix]

guys networking is smth essential for cyber security in order to begin at it?

[mellow gull]

Yes.

[knotty cargo]

Wonderful, smart and amazing

[vernal matrix]

shall i begin with a CCNA course?

[vague crypt]

Hi there, what's the remote desktop tool name on the attacker box?

[sand trench]

depends on what you are hacking but generally yes

[vernal matrix]

ok

[mellow gull]

You don't need to start with a CCNA

Learning fundamentals first is...

[rough dome]

chad

[mellow gull]

probably a good idea

[rapid merlin]

Makes me laugh when ppl call the CCNA fundamentals

[rough dome]

yes do the Network+ or CCNA course, then if you want you can also do the certifications, but do the courses first, for general networking knowledge.

[knotty pendant]

https://youtu.be/amGLgE2EksE?si=HrhNGjz284cmb3Gz

Wtf is this 😭

[rough dome]

lifelessness

[upbeat seal]

Why is this?

[rapid merlin]

CCNA is a difficult cert, cisco has a new cert CCST, might be better for beginners

[vague crypt]

just found it in Discord history 🙂

[vernal matrix]

ok thanks dude

[twin ridge]

Gave +1 Rep to @rough dome (current: #2590 - 1)

[rapid merlin]

CCST looks like the old CCENT

[chilly veldt]

good music, lots of things to do, noone talking to you, best situation to be in

[narrow lark]

Hello guys I want to form a moral hacking team if any of you want to apply to the team you can send me in private chat I have a special site for submitting and receiving reports or gaps that we are working to improve or close

[rough dome]

ok

[rapid merlin]

Sorry by the CCNA being a difficult cert, I mean as a cert for someone that is just starting out

[rough dome]

special site

[knotty cargo]

Im wondering if theres a way make the wifi card transmit at higher power

[rough dome]

heating issues

[rapid merlin]

there are laws on this lol

[rough dome]

you into hardcore WiFi hacking?

[mellow gull]

Hello, we have rules against advertisement on the server.

[fallen beacon]

Good morning all! I've heard that the TP-Link routers are getting banned in the US. 😳

[narrow lark]

@rough dome do you wanna to join the team

[rough dome]

oh yea

[rapid merlin]

who uses TP-Link smh

[rough dome]

DM the link

[rough dome]

for what reason>

[fallen beacon]

😅

[rugged kayak]

for being spyware

[rough dome]

Chinese brands are notorious for spying home nets

[fallen beacon]

no idea

[narrow lark]

I am telling you all the information in the private chat just accept my addition

[rough dome]

I use a TP-link but not their driver, just the hardware. Moreover, I have even unlocked AP mode and WPA3 in it.

[rapid merlin]

MikroTik provide Enterprise features at consumer prices

[mellow gull]

@sick lance Sorry to @ you dude...

[rough dome]

what about distribution?

[rapid merlin]

MikroTik ships it's own linux OS

@rough dome you can download and play with it in GNS3

[rough dome]

Distribution as in business.

[boreal scarab]

https://tenor.com/view/jason-momoa-chair-popcorn-time-ready-to-party-dis-gon-be-good-gif-24174564

[rough dome]

Chinese brands have a great distribution all over the world.

[cyan delta]

Hello guys I got an email saying I won a prize on the advent of cyber 24 but haven’t seen anything else since. Has anyone gotten the actual email to claim your prizes yet?
Because according to the email it says ‘Please allow 7 days for us to reach out with more information on claiming your prize. In the meantime, you may wish to check out the prize terms & conditions below!’

[rapid merlin]

sorry, used to hearing distribution in connection to Linux lol

@rough dome It's a European company

[rough dome]

#1305926862114914325

[rapid merlin]

Latvia

[fallen beacon]

Amazon has stopped selling Alfa portable router dongles here in the UK and cheap/shady Chinese dongle has entered the market with lots of security concerns.

[rough dome]

checkout Zsecurity's Wireless Adapters. They ship from Ireland.

speciallly crafted for WiFi Hacking and are cheap.

[rapid merlin]

dodge sales of Alfa have been a thing for years

[fallen beacon]

[modest thicket]

This has been studied https://en.wikipedia.org/wiki/Behavioral_sink

[wooden totem]

cant you buy it from official website

[rapid merlin]

@fallen beacon I just looked on Amazon(UK), like you said they all look suspect

[fallen beacon]

[mellow gull]

Oh, right, yeah; the theory about decadence leading to madness. It's been proven true a couple times historically, and if you've ever seen what rich people do with their money it's being proven true today too.

[rough dome]

I spent 18 USD, and I have a dual band Adapter that supports AP, Monitor and Packet Injection, WPA3. (I had to install a custom driver to unlock all features)

[modest thicket]

Yea. Cool new blue name

[fallen beacon]

I was away for a year so I need to catch up on so many things tbh

[rough dome]

nature itself deals with overpopulation

[fallen beacon]

wait Bill G* never said that to begin with

[rough dome]

incarcerated?

[fallen beacon]

No 💩 . I thought I was only getting paranoid but thank you for looking up and confirming

[twin ridge]

Gave +1 Rep to @potent escarp (current: #777 - 6)

[modest thicket]

does anyone here have Sec+ 701 in recent memory? My question is, what resources would you suggest to prep for the PBQ's aside from CyberKraft.

[fallen beacon]

No man! Man of the house, providing for the family, just to make it clear I'm working in catering industry for the last 13 years

[rough dome]

💪🏻

[rough dome]

total domination prevents wars.

[modest thicket]

Nice thumbnail

[fallen beacon]

[modest thicket]

It's bean time ☕

[knotty cargo]

Its my war-driving desk

Looking around

Amplifier consists mainly of an RLC circut

And i can increase wattage by decreasing resistance

[modest thicket]

Soemtimes cellular doesnt cut it and you need to use someones home network (thats public of course)

[fallen beacon]

[modest thicket]

I would never illegal someone

[fallen beacon]

[modest thicket]

But I can't think of many ethical purposes for war driving

[fallen beacon]

What is war driving?

[modest thicket]

juss Google fren ")

[rough dome]

"EThIcAl"

[knotty cargo]

Chads are always in a war

[rough dome]

Google and ChatGPT = dead chat ma fren

[knotty cargo]

Life is a war

[fallen beacon]

ChatGPT or Google can give wrong results. LMAO

[rough dome]

oh seeet

not goood

[fallen beacon]

[fallen beacon]

[rough dome]

https://www.youtube.com/watch?v=WcgeRtcz074

[mellow gull]

You won't be able to post links properly while not verified

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 14, 2025, 1:24 PM

[sand trench]

well you can post the link but it will not embed

it is a good safety feature

[mellow gull]

If it won't embed it's best left unread

[fallen beacon]

[rapid merlin]

with who

[dreamy elbow]

Learning about hping3
hping3 -S -p 80 -Q <ip address>; unable to understand how the cmd works. So here the attacker can get the Target (ISN) from [ACK (from Target) - 1 ], but how the SYN packet details (ISN of Target), esp its not same n/w.
Tried searching for an explanation, but unable to get one, if someone could help, would appreciate

[rapid merlin]

Ok as a beginner , I would ask the question that - how to hack WiFi 🧐🤓

But obv THATS a no no because hacking someone is not good 🥲😔💅

[mellow gull]

If you're a beginner you have several steps between basics and "wifi hacking."

[modest thicket]

chuds

[rapid merlin]

Once I used BEef but I hosted a server on my freaking wifi and I was trying hard to host it public 😭🙏

[rapid merlin]

Ikr

I am just curious THATS all

And my curiosity drove me here

Tomorrow I got science exam and here I am

🙀

Ok one more question out of curiosity- is it possible to make DIY flipper zero ?🥰

[mellow gull]

Well THM has a few rooms on Wireshark might be useful for you.

[mellow gull]

Sure it's possible.

[rapid merlin]

Thanks 🥰

[twin ridge]

Gave +1 Rep to @mellow gull (current: #139 - 55)

[rapid merlin]

So I need a raspberry pi for it ?

And codings obv

[modest thicket]

yea you seen Julian Brown on youtube?

[rapid merlin]

Yes I have

[sand trench]

possible?? yes
easy?? debatable
cost effective??? probably not

[rapid merlin]

Man did so much and got burned

[rapid merlin]

For real , would cost a little money but who wants to spend 😔

[fallen beacon]

[opaque flax]

That’s why it’s an advanced topic 🙂

[mellow gull]

Heeeey Malarum

[opaque flax]

Good morning

Congrats on the level up!

[mellow gull]

Thanks!

3/4ths of the way to being a legend

[opaque flax]

I got barely any sleep. I got out of bed to continue trying to compromise that box

[upper knoll]

what box?

[mellow gull]

Make any progress?

[opaque flax]

Box for <competitor>

[opaque flax]

Yeah I was able to compromise another account

We are close to owning the domain i can feel it

[upper knoll]

better privs on that user?

or just another foothold to pivot through?

[opaque flax]

They control the privs we need

[upper knoll]

oh nice

[opaque flax]

We are attacking ADCS

[fallen beacon]

PTSD I've got from a ticketing machine working long hours in the kitchen did the same to my sleep and wakeup patterns. Take care of yourself bud!

[opaque flax]

Yeah idk how much I’ll be hitting the box tonight. It’s my go out to eat night with my SO

[rapid merlin]

Have a nice time mate

[upper knoll]

do that honestly sounds like a break might help u

[opaque flax]

Probably will

[upper knoll]

make their night get a good night rest let your sleep brain process and go again

imo

[fallen beacon]

Insider news flash: Many criminals in India have got hold of the Flipper zero and the level of digital crime has reached a whole new level. Another headache brewed

You can't teach integrity or ethics. Change my mind!

[opaque flax]

I’d like to finish this box before the next one releases for the week

[rapid merlin]

I am from
India 💀🙏

[opaque flax]

This one is “easy”

(It’s not)

[fallen beacon]

🙏 Let's team up and fight the bad guys 🙏

[rapid merlin]

Yes 😼💅

U are the black cat

I am the batman

🥰🫂

[fallen beacon]

No, I'm the Robinhood

[rapid merlin]

☹️🖕oki

[pliant onyx]

rood

[rapid merlin]

Oh fk I should have v collected money instead of buying bunch of games and a freaking ps5 🥹

[fallen beacon]

[grim siren]

hey i am a beginner i wanted to ask something

[cloud quiver]

Welcome 🙂 . What's the problem 🙂 ?

[grim siren]

umm i did traceroute to tryhackme.com from my kali vm and it shows ***, why is that

[cloud quiver]

That's normal 🙂

[sand trench]

for routers/hops that do not display traceroute information/name it shows stars instead

[grim siren]

what does it mean

oh thnx

[sand trench]

no problem

that was actually an usual question to ask that can teach you a decent bit about how things work behind the scenes

i.e most people never question or think about what said stars mean

[cloud quiver]

That output in a traceroute indicates a timeout to receive a response from hop often due to things network issues, firewall restrictions, or the intermediate device not responding to ICMP requests , depends on the network configuration afterall 😄

[sand trench]

a lot of hops/routers disable the name information for traceroute for security and privacy reasons and hence they show up as stars instead

[grim siren]

umm thnx i wanted to know what comes to my mind so i joined these discord servers

[sand trench]

well enjoy

[modest thicket]

black coffee + cinnamon (non irradiated) + heavy cream =

[karmic hemlock]

We're so definitely hitting 9000 points today

[cloud quiver]

Congrats 🥳

[modest thicket]

Esteemed channel members, I am requesting advice, pointers, tips for the Sec+ 701 as I am taking it today. Any help would be appreciated.

I am highly concerned with PBQ pointers, as CompTIA never ceases to amaze me with surprising and borderline ambiguous (with regards to the study material, at least)PBQ's..

[boreal scarab]

Non irradiated?

[oblique furnace]

3333

[boreal scarab]

You didn't get it from Chernobyl? Damn

[mellow gull]

cinnamon is irradiated by default, didn't you know?

It adds sweetness

[boreal scarab]

Everything has radiation

[oblique furnace]

https://tenor.com/view/skill-issue-big-chungus-anime-jojo-dvd-vhs-anime-gif-23649294

[modest thicket]

ionizing radiation improves shelf life. but i just want the cinnamon stick minus the radiation therapy

[oblique furnace]

ignore the caption

dvd on vhs slot

[boreal scarab]

https://tenor.com/view/radiate-positivity-fallout-radiation-gif-11056273986022428252

[boreal scarab]

Mine now!

[sand trench]

did you know that all alcohol sold for consumption in the usa has to be radioactive

if it is not radioactive it is illegal to sell

yuup

[sick lance]

Both exams done.

All done for 2 weeks 🥳

[sand trench]

it is because alcohol made from dinosaur remains is none radioactive while all other methods to make alcohol makes it slightly more radioactive then a banana and therefor it needs to be radioactive

[upbeat seal]

This is absolutely bananas, I love this fact

[rapid merlin]

In the UK we are moving down this net zero track. Which is awesome, but they aren't using nuclear, we need the radiation

[modest thicket]

congrats. Do you already have the results?

[fallen beacon]

[rapid merlin]

Well done 🎉

[fallen beacon]

We need a proper Sunlight 😅

[sick lance]

Nah, 2-3 weeks.

[austere verge]

I’m at the gym even tho I feel like poopoo

[modest thicket]

Cool, what were the exams over?

[sick lance]

Malware Theory and practical, can't say anymore than that. 😄

[opaque flax]

Sounds like an advanced topic 👀

[half girder]

oh def belongs to #exploit-and-mal-studies 😛

[sick lance]

I won't be discussing it as I'd rather not have my exam voided.