general

[opaque flax]

Good morning everyone

[rapid merlin]

Hey @opaque flax

[lament tendon]

Damn, THM changed a lot since I was around last time.

I do like it.

[verbal canyon]

Cant miss great games tho

[dusty drum]

Don’t give up .

[red surge]

Can't miss life either 🙂

[dusty drum]

Don’t forget to mention stressful aswell . Hahaha 😂 or probably that’s just me .

[opaque flax]

Gaming is also good. Burning yourself out on one thing that you really like isn’t a good idea

[modest thicket]

on the topic of video games being a waste of time: i read something that intuitively made sense (no SOURCE??) basically there an argument that humans should spend their time doing something for work, health, and hobby. spiritual too but i would tack that in with health. i say this because theres something positive about having a hobby to deload the stress from your brain.

[dusty drum]

Balance

[true urchin]

@strong cape use ./verify

[dusty drum]

Last night I got the jr pen tester certificate and it feels so good knowing what they talk and how I understand what they talk about . Nmap,msfconsole are my best friends now hahaha.

[modest thicket]

congrats!

[dusty drum]

[sand trench]

without the dot and with your token

sigh gonna have to buy more of this artist music later:

[jolly aspen]

Did shadow receive her rare anime video collection yet?

[sand trench]

nope ;-;

it was meant to arrive on monday but now it is "stuck" in belgium

[jolly aspen]

Stopped for fries and mayonnaise I bet

[sand trench]

stuck as it has not moved since 05:40ish local swedish time

or well it might have moved

just no new updates from fedex

[wicked lagoon]

i need ideas for graduation project related to cybersecurity

[sand trench]

pihole to look at what dns requests computers that use it send and how many of those go to weird places

[knotty cargo]

dossent something like this exist ?

[wicked lagoon]

i think this already exists

[sand trench]

yeah so??? you can still do research on that and propose interesting information

[knotty cargo]

but cool ngl

i was thinking about

[boreal scarab]

Muiri is stuck in my head forver.... ordered Vegan food

[knotty cargo]

should i even say it lol

[boreal scarab]

And I'm not even Vegan

[sand trench]

shadow is so far gone into the none vegan side of things that muiri dislikes shadow stance on food

[knotty cargo]

im anti vegan

[half girder]

i only eat the bad animals making vegans starve ^^

[acoustic torrent]

dog meat >

[knotty cargo]

💀

i like RAW meat

[jolly aspen]

Weird how unnecessarily contrarian people get about food preferences

[sick lance]

People just being people.

[half girder]

this is still pretty much civilized .. ask about editors or distributions, then you see the server burn ^^

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #216 - 34)

[knotty cargo]

im wondering what word triggered the +1 rep

[jolly aspen]

I think YAGPDB is a bit broken

[knotty cargo]

pretty much

[knotty cargo]

civilized

[knotty cargo]

ask about editors or distributions, then you see the server burn ^^

[jolly aspen]

cough vim 👀

[modest thicket]

ask about

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #210 - 35)

[knotty cargo]

this is still pretty much civilized ..

wait what was it

[boreal scarab]

Damn, Steam updated their download page

[modest thicket]

then you see

[jolly aspen]

The server burn

[half girder]

nano

[knotty cargo]

what words trigger the +1 rep ?

[modest thicket]

this is still pretty much civilized .. ask about editors or distributions

[jolly aspen]

That’s what rev and I were trying to find out I think

[modest thicket]

yes

[twin ridge]

Gave +1 Rep to @knotty cargo (current: #646 - 8)

[modest thicket]

how did you get the magical rep

wtf

[knotty cargo]

braaaa

[half girder]

probably just scrubz messing with the bot

[knotty cargo]

@knotty cargo thanks

[half girder]

+rep @half girder

[modest thicket]

scratches neck got anymore of that rep?

[half girder]

xD

so self rep doesnt work

[jolly aspen]

The server burn

[half girder]

+rep @cloud quiver

[knotty cargo]

sooooo @twin ridge no rep for me ?

[boreal scarab]

https://tenor.com/view/is-it-gif-20766212

[jolly aspen]

waits patiently for…

[knotty cargo]

wait im about to break it

@twin ridge thanks

[sick lance]

Ask

[sick lance]

About

[sick lance]

Ask about

Neither.

[knotty cargo]

lemme tryyh

[boreal scarab]

Wait, who is @oak nimbus ?

There's only 1 breaker of things, and that's me!

[sand trench]

admin

[jolly aspen]

^^

[modest thicket]

meanwhile some admin is messing with us and shadow +rep'ing people

[knotty cargo]

much

[boreal scarab]

Well I know that lol. Meant, I never seen em before

[knotty cargo]

much

[sand trench]

by that logic you have disociative idenity disorder and work for tryhackme

[knotty cargo]

much!

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #29 - 338)

[boreal scarab]

Wtf?

@mossy river Think the bot is borked

[modest thicket]

much!

[knotty cargo]

when the announcment appeared on my screen it caused a lot of flag

[sand trench]

oh ey the soc simulator is out

[knotty cargo]

its called simuletaaaaaa

[rapid merlin]

test 12

[jolly aspen]

Uh, teams?

[sand trench]

been testing the soc simulator a bit as a room tester

enjoy people

it is confusing and hard to start but good learning experience

[knotty cargo]

i want to become a hacker on soc simulator

[red surge]

we are a teem of 4 haha I can't convince them to do it 🙂

[unreal phoenix]

Anyone wants a hacking service

[sick lance]

oohhh...

What like?

[knotty cargo]

RULE 9 DO NOT ENGAGE WITH SCAMMERS

scrubz this is ur last warning

[rapid merlin]

@nocturne spire

[unreal phoenix]

DM me

[red surge]

hahha

[boreal scarab]

https://tenor.com/view/bonk-gif-13392138837084579216

[jagged otter]

hi

[pliant cairn]

Whats with someone about to be banned and me just opening discord

[sick lance]

Prizes for the top three teams include
1st Place: Free TryHackMe for Business subscription (up to 10 licenses) and PlayStation®5 Digital Edition Console ($4,500 value)
2nd Place: Free TryHackMe for Business subscription (up to 10 licenses) and Nintendo Switch or Oura Ring ($2,500 value)
3rd Place: Free TryHackMe for Business subscription (up to 10 licenses) and Raspberry Pi or Hak5 gift card ($1,000 value)

Wow, them prizes.

[jolly aspen]

Give use a head ups next time

[jolly aspen]

Looks nice

I need a team

[shut hawk]

Gonna get some clarifications, because I don't think its 100% clear

[modest thicket]

for my team i choose Linus Torvalds, Steve Wozniak, Ghidra, the NSA, and APT1

[red surge]

general question will this knowledge be transferable, even if you don't use the same products ?

[pliant onyx]

Well I ain’t a blue team guy personally, but I can try

[jolly aspen]

Team frenchfry

[steel iron]

Hello guys i just started any tips for starters?

[rapid merlin]

aint winning, so im not excited

[nocturne spire]

Yes?

[dark frost]

https://tenor.com/view/blue-da-ba-dee-eiffel65-gif-14330492

[dusty drum]

Don’t give up .

[unreal cipher]

Did people actually win stuff from advent of cyber?? I participated finished all the challenges and haven’t heard anything. They had all those prizes and now thm is doing another giveaway

[cloud quiver]

You can start with this pathway 🙂
https://tryhackme.com/r/path/outline/presecurity

[twin ridge]

Gave +1 Rep to @steel iron (current: #2612 - 1)

[sick lance]

All winners were E-mailed.

[jolly aspen]

#1305926862114914325

[pliant cairn]

Be consistent. Persistent and have fun

[jagged otter]

how's everyone? I been away for awhile

[steel iron]

Thanks

[jolly aspen]

Uh ok..yag is sick

[red surge]

should have called this unsecure 🙂

[chilly veldt]

it's 1854 hours and I wanna go home from work

[storm dune]

Hi, what rooms would you recommend for linux priv esc?

[cloud quiver]

Why 🙂 ?

[cloud quiver]

https://tryhackme.com/r/room/linprivesc

[red surge]

idk what is presecurity 😄

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #2 - 2326)

[pliant cairn]

You should. Whats keeping you from going

[jolly aspen]

Oh wow

[cloud quiver]

Introduction to security 😄

[modest thicket]

that rep machine going brrr

[chilly veldt]

incident response

[modest thicket]

lemme get some ")

[jolly aspen]

Enough replies..

[jolly aspen]

And I think it works!

[red surge]

No that room already exist we need another name 🙂

[knotty cargo]

this room is awsome

[pliant cairn]

Incidents come and go...leave it to yoir manager 😆

[jolly aspen]

I’m trying here

[jolly aspen]

I want to know what it is

[modest thicket]

its some friendly bug

giving people free reps ") woot!

[chilly veldt]

well, I am the senior responder, manager just needs to approve what I am doing

[knotty cargo]

@twin ridge thanks that was helpful

[sick lance]

You need all the bugs to beat me. 😄

[jolly aspen]

What is presecurity 😄

[twin ridge]

Gave +1 Rep to @modest thicket (current: #348 - 17)

[modest thicket]

what the heck!

Why, I didn't even do nuffin!

[jolly aspen]

😄

[knotty cargo]

i think even spaces give rep

[modest thicket]

what is presecurity 😄

[pliant cairn]

Ehh...ikik been there done that. I recently moved from soc to prodsec. Life has not been this much better

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #206 - 36)

[jolly aspen]

Security 😄

[red surge]

This room made me realise i need to understand basic linux programing interface (C programing)

[jolly aspen]

Security 😄

[cursive quest]

I have a question is there any way to changes the site language i've been using tryhackme for 6months now but i think there is some words that I didn't understood in the begining .

[chilly veldt]

I just need to push the PR and then it's sleep time

[sick lance]

Not officially.

[knotty cargo]

hmm it didnt for me

[gray field]

Есть русскоязычные?

[sick lance]

You can use browser extentions, but all answers are in English.

[knotty cargo]

i like some guys' way of vision

[cloud quiver]

Yest

[sick lance]

English only please.

[red surge]

ah sorry this is not the same room

[cursive quest]

Did they plan to add language option in the next update of the site?

[chilly veldt]

aaaand bitbucket has issues, so PR is tomorrow

[knotty cargo]

yeah theres 2 with the same name

[sick lance]

I don't think so, and also not really clear.

[red surge]

https://tryhackme.com/r/path/outline/beginner

[cursive quest]

Oh yea i might try that thanks

[red surge]

it's this one

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3278)

[pliant cairn]

Im taking a wild guess on what this means. With my 300 ish streak on duolingo - it means "russian anyone?" Correct me if im wrong

I dont google. I learn by conversations and duolingo

[gray field]

Yes

[granite narwhal]

I wish pentesting simulator

[pliant cairn]

Never felt this happy

[gray field]

Russian is so hard

[granite narwhal]

I wish pentesting simulator

[pliant cairn]

I bet you wish "pentesting simulator" cybervenom

[gray field]

Who will participate soc simulator. Can I join your team?

[lament tendon]

So every challenge room on the platform? ;D

[granite narwhal]

What u mean

[lament tendon]

Every CTF is some sort of pentesting simulator, no?

[granite narwhal]

Ur right

[lament tendon]

Indeed.

[boreal scarab]

🎵 **Cause 🎸 I'm just a teenage🎸 dirtbag🎸 baby 🎸 **🎵

[granite narwhal]

But I need it like real life someone tell me hack like that and then we have team and do some hacking

[lament tendon]

In this case I recommend you look into bug bounties through sites like HackerOne. There, companies but bounties, often money, on vulnerabilites on their website.

[pliant cairn]

Try bugbounty. Legal and stay inscope

[twin ridge]

Gave +1 Rep to @granite narwhal (current: #705 - 7)

[mellow narwhal]

plus, attackbox is always there

[lament tendon]

So you can attack real services and maybe even get paid for it.

[sick lance]

bugbounty

[twin ridge]

Gave +1 Rep to @pliant cairn (current: #367 - 16)

[pliant cairn]

Bot is botting

[sick lance]

Wow, at this stage it's just anything with a y?

[granite narwhal]

Let me finish the path and then go to. The bug boumty

[twin ridge]

Gave +1 Rep to @pliant cairn (current: #348 - 17)

[mellow narwhal]

yes

didn't work

[lament tendon]

Is it giving rep for saying "bug"?

[gleaming grail]

did that really need a ping

[mellow narwhal]

bug

[pliant cairn]

Y

[lament tendon]

bug

No.

???

[sick lance]

Ok, anything with a y at the end.

[mellow narwhal]

smokey

[modest thicket]

can someone respond to me with what is it called when hackers find a bug for an organization and get paid for it?

[mellow narwhal]

nope

[lament tendon]

This is buggy

[mellow narwhal]

bug bounty

[lament tendon]

Neither.

[twin ridge]

Gave +1 Rep to @modest thicket (current: #329 - 18)

[mellow narwhal]

YEAH LOL

[pliant cairn]

Y at the end. So funny bunny runny

[mellow narwhal]

its probably that

[mellow narwhal]

bug bounty

[sick lance]

boy

[mellow narwhal]

Nope didn't work

[lament tendon]

bug bounty

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3279)

[sick lance]

I'm on cool down

[mellow narwhal]

😭

[gleaming grail]

huge skill issue on my part but ethical hacking is too hard 🫠

[pliant cairn]

Bug

[sick lance]

Not if you learn.

[pliant cairn]

Us moment.

[versed holly]

yeah like how do you even find bugs

[granite narwhal]

Let me finish pentesting and be professional on it

[mortal acorn]

Bug Bounty Hunter

[gleaming grail]

I've tried for years, read so many books, tried different sites, etc etc, I don't know what to do honestly. I couldn't hack a potato windows xp that hasn't had updates in 9 years

[sick lance]

Use a magnafying glass, best place to look is under rocks.

[twin ridge]

Gave +1 Rep to @modest thicket (current: #320 - 19)

[pliant cairn]

Lift the rock. Under the bed of a typical dorm. In the cracks of the ceiling. They are everywhere

[sick lance]

Wow, you really didn't learn EternalBlue?

[mellow gull]

I'm glad to see we're still memeing

[gleaming grail]

what's that

[mellow narwhal]

You would've come across that at some point, having read books realted to the subject

[pliant cairn]

Big big bug.

[modest thicket]

https://tenor.com/view/fedora-gif-4928654

[junior island]

Ms017

[sick lance]

boy...

[sick lance]

uy

[sick lance]

bounty is good.

[twin ridge]

Gave +1 Rep to @mellow gull (current: #83 - 91)

[versed holly]

i dont think we are talking about those type of bugs

[mellow gull]

[versed holly]

so are you guys taking a look at the soc lab??

[mellow gull]

Bazinga||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||_ _ _ _ _ _ _ ty

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3280)

[mellow narwhal]

Eternalblue is basically an old exploit which allowed an attacker to get access to all the devices connected on the network by exploiting a misconfigured implementation of the SMB protocol on Windows.

[pliant cairn]

Sifu music goes very hard. I feel like doing kung fu. I don't know any kungfu.

[jolly aspen]

Presecurity 😄

[twin ridge]

Gave +1 Rep to @modest thicket (current: #307 - 20)

[mellow narwhal]

Presecurity 😄

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #201 - 37)

[mellow narwhal]

LOL

[gleaming grail]

but that's not around anymore, right?

[pliant cairn]

Presecurity

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #194 - 38)

[shut hawk]

@sand trench Were you the person with the list of good security related blog sites?

[modest thicket]

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2061)

[sick lance]

It is.

[shut hawk]

where tf was that rep trigger

[sand trench]

think that was scrubz or shadow

[pliant cairn]

Security

[shut hawk]

oh, securi"ty"

[jolly aspen]

It’s presecurity with the emoji

[gleaming grail]

I've read these plus a book called conf!dent cyber security
i could not hack a machine to save my life

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3281)

[mellow narwhal]

systems which haven't been upgraded for 9 years?

[mellow gull]

I'm loving this rep bug it's so funny

[trail portal]

hello guys! aside from the competition, is there a way to participate in the new SOC labs solo?

[mellow narwhal]

Presecurity 😄

[sand trench]

@shut hawk here is shadows exported rss feeds list if that is what you are after:

[sick lance]

Have you seen how many airports who use XP as their OT/IT?

[shut hawk]

perfect TY

[pliant cairn]

Did you read or just turned pages?

[sand trench]

no problem jayy

[mellow narwhal]

Damn, I haven't actually. How interesting.

I didn't know anyone in the world still does

[gleaming grail]

I read them, but it seems like either nothing worked, was outdated, or that it simply wouldn't work on an actual target

[sand trench]

scrubz might have some additional sources that could be added too jayy

[gleaming grail]

Like if you gave me a machine I could not hack it

[pliant cairn]

Blame the firewall

[thorn umbra]

Cool new feature that a premium membership doesn't cover, paywalled for businesses. Gotta love it.

[mint palm]

9 years is nothing

[mellow gull]

I personally have seen and work with a bunch of legacy systems that use super outdated and vulnerable versions of windows

[gleaming grail]

whats wrong with this, there's no information showing right?

[trail portal]

truly, what a shame

[sick lance]

When Crowd strike fucked up, some went back to Windows 3.1

[mellow narwhal]

That desperate 🤣

I mean, it was a choice between something and nothing I guess

[gleaming grail]

but what do you do when the systems are all up to date, etc, and your job is to hack it? Do you just see the latest windows and go yeah job done

[mellow gull]

You can identify that it's an older windows type by the file symbology on the webpage

[jolly aspen]

Fair amount of Osint on this board

[sick lance]

https://www.techradar.com/pro/security/southwest-airlines-avoided-crowdstrike-microsoft-outage-because-its-still-running-windows-31-fourth-largest-us-airline-remained-free-of-bsod-errors-because-its-os-hasnt-been-updated-in-decades

[twin ridge]

Gave +1 Rep to @mellow narwhal (current: #307 - 20)

[gleaming grail]

but how would you even hack this place? without knowing ip etc

[jolly aspen]

I can say, it was also broadcasting an ssid

[mellow narwhal]

Just because everything is using the latest version doesn't inherently mean that its not being used in a way that isn't vulnerable

[mellow gull]

There's an entire process called the CKC Framework that explains this entire process. First step is recon, always.

[gleaming grail]

or without doing something super obvious like sticking a usb in their computer

[quaint nymph]

is the soc simulator free or do i have to pay for some of the labs or modules

[sick lance]

Many, if not all, ICS systems run on legacy software, and since they "shouldn't" connect to the internet, only communication is done internally (sensors and actuators) they're normally not updated

[modest thicket]

fly a drone in there thts got a malicious usb-drive mounted on it. fly the drone into the server closet. this is theoretical simulation for ethical pen testing. with permission

[mint palm]

Quite often misconfigurations cause vulnerabilities, even on up to date system

[mellow narwhal]

I'm surprised that hackers didn't attack it right then and there

[sick lance]

Stuxnet is a wonderful example of this.

[gleaming grail]

I tried to study this for years all through school/college, now I've got no future because I focused soley on this only to realise that I can't do it 🫠

[mellow gull]

If you studied this for years and don't know about BSSID discovery I don't know what to tell you, if I gotta be fully honest.

[pliant cairn]

Relax. And try again. You can do it.

[mellow narwhal]

How do you hack an ICS system if it doesn't connect to the Internet?

[sick lance]

Think stuxnet.

[sick lance]

You go to it.

[modest thicket]

where are you tripped up at

[modest thicket]

what qualifications do you have. consider networking/help desk first?

[mint palm]

Social engineering

[sick lance]

Or use a method that you can control, or set up something that will look for something, then if it has it, attack, if not disarm.

[mint palm]

Supply chain attacks also

[gleaming grail]

I have a comptia+ networking certification

[mellow narwhal]

But initiating any form of communication with the machine?

[modest thicket]

you arguably have the most difficult of the trifecta. you can be a network/security tech

[twin ridge]

Gave +1 Rep to @gleaming grail (current: #2612 - 1)

[mellow narwhal]

Oh, that required physical access right? Unless I'm mistaken

[pliant cairn]

Stuxnet kind of spread is possible with a 0day or 0days. Considering the current security posture of many companies its not that simple. Social engineering is best bet.

[sick lance]

Yeah

Some industrial plants use modbus traffic which is built with zero security.

So you can pretty much MiTM it.

[twin ridge]

Gave +1 Rep to @mellow narwhal (current: #294 - 21)

[mellow narwhal]

Yep. easiest way into any machine

[gleaming grail]

I would not know how to do any of this lmao

[modest thicket]

do you want to know how to? if so, think of the right questions to ask.

[mellow narwhal]

Ohhhh modbus, I did a pcap challenge involving that once

And yes everything is plaintext

[sick lance]

Would not have been possible without someone inserting a usb where they're not supposed to.

[gleaming grail]

well I kinda wanna do ethical hacking, but something always goes wrong, and it just seems impossible to actually hack any up to date machine

I've been trying to hack my laptop for ages

[sick lance]

Yes, because that sort of communication is more focused on being available than confidential.

[jolly aspen]

That’s the fun

[mellow narwhal]

Try your hand at #1312113121040535656 4, it's an up to date machine.

[mortal acorn]

Stuxnet is complexed and advanced, the story behind it is so rad it deserved an episode on darknet Diaries

[pliant cairn]

Thats what happened in most cyber incidents

[gleaming grail]

I'm already on the network, I know all the critical info of the laptop. despite these huge advantages, I can't get anywhere

[mellow narwhal]

It gives ARPANET vibes

[sick lance]

Yeah, but the method of delivery was more important than the execution

[mortal acorn]

Do you attend on tryhackme paths?

[mellow narwhal]

Is it a Linux?

[modest thicket]

ethical hacking is an advanced role. If you want career advancement start with another Cyber discipline.

[gleaming grail]

I saw those, and I have looked at pretty much all the fundamental topics

[twin ridge]

Gave +1 Rep to @mortal acorn (current: #1291 - 3)

[main meadow]

maybe to hack up to date stuff you need to buy some zero day exploit from shadow brokers for five million

[jolly aspen]

Seriously, do an AOC event. Then start the presecurity path. You’ll catchup fast

[twin ridge]

Gave +1 Rep to @gleaming grail (current: #1712 - 2)

[mint palm]

Well, this isn’t what most pentesters do. Many of them wouldnt be able to “break into” a well configured and updated laptop.

[gleaming grail]

windows 10

[jolly aspen]

YAG is making it RAIN today

[mellow narwhal]

Honestly, its possible that the system is secure lol

[jolly aspen]

https://tenor.com/view/money-rain-making-it-rain-make-it-rain-gif-15447991

[pliant cairn]

Is it serving anything? Any services?

[mellow narwhal]

However, check the version, and if it hasn't been updated, try searching for CVEs on NIST or exploitdb

which date after that version

[gleaming grail]

I don't think my laptop should be secure, there's no antivirus, no crazy firewall stuff, defender is disabled, it's probably not completely up to date

[mellow narwhal]

This would be useful

Because generally, Windows updates are for a reason, so there'd be some form of a vulnerability in your current version

[mortal acorn]

Do you feel like its not sticking onto your memory or is it the modus operandi that u dont figure out?

There is so much help you can get man

Or woman

[gleaming grail]

How would you find out exactly what os version the laptop is running if you couldn't access it directly? I've tried on nmap -o or whetever the comand is, but it returns very basic information at best

[mellow gull]

-A

[pliant cairn]

Man...

[jolly aspen]

First step. Enumeration, learn what they do and it will make alot more sense

[mint palm]

I think you should start from the beginning, this is some knowledge you should already have with Network+. No need to hack your laptop first.

[gleaming grail]

i used the nmap gui so I wasn't entirely aware of the command

[jolly aspen]

“Or whatever the command is” speaks volumes. Learn what they are and do and it helps tremendously

[pliant cairn]

I start to doubt if you read anything at all in the first place. If i have to be very honest with you

[jolly aspen]

Ping

[thorn umbra]

Not free, and you can't purchase access without being a business and buying multiple seats.

[gleaming grail]

I tried my best with nmap, the gui has options for OS discovery etc

which I used

[mellow gull]

Bro uses zenmap?..

[pliant cairn]

Isnt zenmap deprecated? I last saw it when i was a kid lol

[mellow gull]

Yeah it is

[modest thicket]

watch these vids. https://youtu.be/4t4kBkMsDbQ?si=PtJe9wwrdr_b3Lxb ~~~ https://youtu.be/JHAMj2vN2oU?si=U9f8oFyFGn0xqPGr

[gleaming grail]

don't think I've used zenmap

[mellow gull]

Nmap doesn't HAVE a modern GUI

So you're wrong or lying

[lament tendon]

The normal version has that too. ^_^
Zenmap just uses nmap under the hood.

[mellow narwhal]

-sV 😄

[gleaming grail]

ah yes this one is familiar, I used this

[cloud quiver]

https://nmap.org/zenmap/

[mellow narwhal]

Zenmap is a GUI, but

its basically just nmap command structuring

[lament tendon]

That's version detection, OS detection is -O. ;)

[gleaming grail]

I must be wrong in that case, I'll load up the one I used

[mellow narwhal]

ah, right.

-O for os and -sV for versions

[lament tendon]

Yeee

[mellow gull]

-A does both

[fossil anchor]

Is there anyone among you who knows how to crack game cheats?

[mellow narwhal]

That I didn't know

[sick lance]

-A is aggressive.

[mellow narwhal]

I'll have to remember

[mellow gull]

A for "Aggressive"

[gleaming grail]

Ah yes you're right, I didn't see zenmap under the nmap part, its been a while since I used it

[gleaming grail]

so yeah I use zenmap

[mellow narwhal]

I generally just go sudo nmap -sV -Pn -p- <ip> for most cases

[modest thicket]

⬆️ ➡️ ⬅️ 🆎 🔢 ⬇️

[lost birch]

What does -Pn and -p- do?

I've not seen those flags

[wooden totem]

50% there

[mellow gull]

-p- checks every port

[gleaming grail]

i thought it was something to do with the thing blocking the request

so it bypasses it somehow? probably wrong

[mellow narwhal]

Disable ping probes, scan all 65535 ports

[undone timber]

where can i sent pics

[naive violet]

We don't do game cheats here or software piracy

[fossil anchor]

pff okey

[naive violet]

@fossil anchor please do not solicit business here. We are not hackers for hire.

If you continue to discuss it here, you will probably be removed due to our rules on unethical and/or illegal activities

[lost birch]

What are ping probes?

[mellow gull]

When you ping an IP you send little packets to it

[boreal scarab]

Man, 10 degree weather, in short sleeve shirt, not bad at all.

[lost birch]

Right

[mint palm]

Try Googling that, actually nmap has maaaany interesting flags that not everyone knows about

So it’s an interesting thing to research

[mellow narwhal]

It skips host discovery. Usually it pings to confirm that its up, but some firewalls have detection rules for that, so it assumes that the host is up without sending ICMP ping packets.

[lament tendon]

-Pn skips the ping scan, basically nmap won't confirm that the target can actually be reached before starting a scan.
-p - tells nmap to scan a certain port range, and the second - means all 65535 ports.

[wooden totem]

is that C

[gleaming grail]

To anyone that has read books on cyber security stuff, how much of the content actually worked? Everything was older versions, different commands, I could barely get anything working even in practice

[mellow gull]

Most of it under the right circumstances.

[lament tendon]

By default nmap will only scan the most common 1000 ports, correct me if I am wrong.

[lost birch]

My favorite is -sC --script vuln

[mellow gull]

Correct.

[mellow narwhal]

think so, yes

[mellow narwhal]

Definitely, NSE is useful

[gleaming grail]

I tried to buy the most popular books, did you happen to read any that I sent?

[mellow gull]

Did you send a picture or something earlier?

[gleaming grail]

here

[nimble trout]

Might be a dumb question, but is the soc simulator competition free to enter?

[naive violet]

Apparently needs to be a company thing?

[undone timber]

🙃

[naive violet]

Have to be part of a team dashboard, not sure if that's fully company exclusive

[sick lance]

The Soc simulator has one for subs, one for business and another for no idea.

[naive violet]

Nowhere until you verify with the bot

[lost birch]

What tool do you prefer for finding web pages and subdomains? I've heard gobuster, ffuf , dirbuster, sublister

[undone timber]

where is the bot? 👀

[nimble trout]

I see, I’ve got some work colleagues, we would like to participate but not sure if we will get the support from our company

[naive violet]

Be careful with the difference between vhosts and subdomains

[lament tendon]

My personal subjective preference is ffuf. I don't think it matters too much tho.

[lost birch]

google time 🙂

[lament tendon]

It can search for vhosts, but it's a bit more tricky then with, let's say, gobuster.

[sick lance]

@sharp citrus

[naive violet]

Vhosts are a http thing, subdomains are dns. They're often used together, but they don't have to be

[sick lance]

Or just do do /verify

[sharp citrus]

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 21, 2025, 6:44 PM

[mellow gull]

I've read two of these and only one of them would I consider "popular." If you want effective resources I would suggest content published by Packt, there's a very useful book on using Kali written by Glen Singh that's very informative.

[gleaming grail]

Ohh, out of curiosity, which is the good one of the two?

[twin ridge]

Gave +1 Rep to @mellow gull (current: #82 - 92)

[mellow gull]

Topmost book on using Python.

[gleaming grail]

Ohhh interesting

[naive violet]

The good books I've read are conceptual.
Exploits go out of date, so do commands, etc.
The concepts don't. They evolve a little and we get new ones, but almost always building on existing knowledge

[mellow gull]

Learning the methodology and process of discovery - the innate curiosity that comes with this work - is extremely valuable and helps to build an essential mindset.

[naive violet]

The Blackhat Python book is good now it's updated to Py3
If you get a Py2 copy, run

[undone timber]

why would you ever buy a py 2 lmao

[wooden totem]

run in what sense

[naive violet]

For people who want to get into security as a career, I really recommend reading about theory

[naive violet]

Run away

[gleaming grail]

It must be a big skill issue but I had huge amounts of trouble with this book, it would often just make you copy out tons of code, I wouldn't know what the code did, but also, all of the environments were outdated, I could never get the code to run etc etc

[naive violet]

Python 2?
It's an older edition of the book

People buy books second hand all the time, I'd recommend it for a lot of things

I got a lovely second hand book today

[sick lance]

The price for some books is awful.

[mellow gull]

40$ a title for half the stuff in cyber security is rough

[undone timber]

i only buy 2nd hand cars 🙂

what im i missing here did grep "HTM" access.log but don t see a flag prob blind lol

[naive violet]

To build on this, learn the context security happens under. What are the business drivers? How do you fit into the business?
How does security actually work? Why don't businesses put the "proper" amount of work in to make sure they're never hacked?

[sick lance]

#room-help

[naive violet]

#room-help please

C'mon scrubz, at least say please

[sick lance]

Please and thank you.

😄

[jolly aspen]

I mean, stop fixating on past failures and start on a THM pathway…

[mellow gull]

• this. If you spend more time lamenting over past failures than trying to course correct and improve, then of course you won't make any progress.

[naive violet]

I haven't liked a lot of coding books

[mellow gull]

A very good portion of hacking is failing, then failing, then failing again a dozen times before finding something that works and running into another wall to bash your skull against until something else works and so on

[boreal scarab]

F

[jolly aspen]

It’s fun!

[undone timber]

i liked clean code 🙂

[wooden totem]

physical books are so 2015 🙄

[undone timber]

should give it to my friends to cuz they write spaghetti

tryhackme is set up in a pretty fun way does remind me of duolingo 🤔

[naive violet]

Jokes on you most of mine are 1995 or older

[red surge]

Linux Programing Interface is the goat you should buy it 🙂

[undone timber]

that explaines why you are a SENIOR mod jk

[devout palm]

https://tenor.com/view/kitty-cat-cat-float-kitty-float-cat-water-float-gif-17908418945946410709

[naive violet]

I wasn't even born then!

[undone timber]

how did you get those books then?

[naive violet]

Second hand

[wooden totem]

1995 was 30 years ago

[naive violet]

Various stores, events, etc

[naive violet]

Correct

[wooden totem]

thats very old

[undone timber]

oh i just had to buy then for my first cs year but was just a waste of moeny most of the books were useless now i just do online payed cources on the side and buy a book when it intrests me

[clear jackal]

[blazing granite]

big fan of rss, I'm going to have a look

[wooden totem]

some might call it half of a life time

[sand trench]

apparently 2 of the feeds in that file does not work nicely with freshrss ;-;

[undone timber]

i tought the witcher 3 was released a while back was 9 years

[sand trench]

yeah enjoy.... just be careful to not nuke your already imported feeds if you import that file

[undone timber]

where can you see those roles bind to your progress btw?

[mortal plume]

Is it possible to form a team of five for this challenge on THM https://tryhackme.com/r/resources/blog/soc-simulator-competition-2025

[blazing granite]

that's for the advice, but it's not my first rodeo 😉

[wooden totem]

hover

[finite basalt]

the house is empty and the tunes a blasting

[wooden totem]

you wouldn't know if it was empty

[twin ridge]

Gave +1 Rep to @finite basalt (current: #101 - 76)

[wooden totem]

I want this bot INCINERATED

[naive violet]

...what did that trigger on?

[upper knoll]

it seems to be having issues today

[wooden totem]

yummers

[twin ridge]

Gave +1 Rep to @naive violet (current: #3 - 2240)

[wooden totem]

ok nvm thats new info

[naive violet]

Empty

[twin ridge]

Gave +1 Rep to @wooden totem (current: #180 - 42)

[naive violet]

Yep lmao

[jolly aspen]

Wild because I used a single ty the other day and it didn’t work

[wooden totem]

maybe it was made for variations of ty so it accepts tysm and stuff, but they didn't think of actual words that have ty

[naive violet]

Prefix is unusual

[wooden totem]

the bot got updated today or something

[jolly aspen]

It doesn’t work for just…

[jolly aspen]

Security

[twin ridge]

Gave +1 Rep to @wooden totem (current: #179 - 43)

[jolly aspen]

Holy shit, that didn’t work earlier

[versed hemlock]

Are you trying to ty it together

[twin ridge]

Gave +1 Rep to @wooden totem (current: #175 - 44)

[wooden totem]

if thats the case maybe "thx" also works?

[mellow gull]

Thx

[twin ridge]

Gave +1 Rep to @wooden totem (current: #173 - 45)

[mellow gull]

More ammo

[jolly aspen]

Maybe thxs works too?

[wooden totem]

try by adding letters on the left side of thx

[versed hemlock]

Rtyr

[jolly aspen]

You try

[wooden totem]

you gotta reply btw

[jolly aspen]

😂

[wooden totem]

cooldown

[versed hemlock]

Styl

[jolly aspen]

Ahhh ok, that’s why some weren’t working earlier

[rapid merlin]

😭

[jolly aspen]

You have to reply to a person

[mellow gull]

We already know it doesn't work if there's text at the end of the detected string

So rhahdjalthx would work but shdhahthxshsha wouldn't

[rapid merlin]

life stuck at pink color

[wooden totem]

I dont remember if only at the end was tested

[mellow gull]

As long as there's an empty space after it it works

[wooden totem]

tytest

[mellow gull]

It can be anywhere in the post otherwise

[wooden totem]

idk if im onnn cooldown

[mellow gull]

It doesn't work

We tested this really thoroughly lol

[wooden totem]

I was supervising the experiment, I don't have any remarks on a test that is specific to only at the end characters

[boreal scarab]

https://youtube.com/shorts/Mbh8n3sFvo0

@blazing granite

[crude stump]

Ha I knew of the soc simulator before they even announced it

[mellow gull]

Yes, we did.

You're in that post too, so

[silver sky]

So if I was to try thrifty

[twin ridge]

Gave +1 Rep to @mellow gull (current: #82 - 93)

[mellow gull]

Yup

[silver sky]

Yeah that's scuffed

[chilly veldt]

Hmmm, to drop out and get a better job or to stay and suffer for the rest of the year

[wooden totem]

what about thisthx

[twin ridge]

Gave +1 Rep to @mellow gull (current: #82 - 94)

[mellow gull]

So thx also doesn't search for spacing on both sides

That's so weird

[wooden totem]

none of the triggers do

[wooden totem]

fifty fifty

[mellow gull]

Then of course it also doesn't matter if it's at the end specifically

[mellow gull]

It can bethx anywhere in the post

[twin ridge]

Gave +1 Rep to @wooden totem (current: #170 - 46)

[chilly veldt]

Well if I drop out I have to fight for future salaries

[wooden totem]

it just needs "no visible character" after it

[mellow gull]

Yup

As long as a space is appended at the end of the string

It can be anywhere as long as it ends in thanks ty and thx

[wooden totem]

there's your answer, that'll be 150 dollars

✋ 🕵️ 🤚

say the line @mellow gull

[chilly veldt]

But I am currently underpaid and overworked

[rapid merlin]

hey wsp

[wooden totem]

it seems there is a search for 3rd option

[rapid merlin]

what are you talking about

[mellow gull]

I'm on cooldown 😢

[chilly veldt]

Possibly, but I am graduating in December

[blazing granite]

I tried Chateau Latour twice. It's a great wine, but I've never had that vintage.

[wooden totem]

I see we're not on the same page here, my line after ✋ 🕵️ 🤚 is always "absolute convolution"

[mellow gull]

I will add this to my knowledge repository

Let's give it another go

[wooden totem]

there's your answer, that'll be an additional $25 charge

[whole topaz]

Guys I need immediate help please if someone can find a lost phone with no wifi help me

[chilly veldt]

Not really

[wooden totem]

it's a very rare moment, special occasions

[chilly veldt]

Contact the local law enforcement

[mellow gull]

I'll be prepared next time. I won't be defeated again

[whole topaz]

It will take too much time i for real need quick help

[mellow gull]

Contact your phone service provider

[wooden totem]

if you have the option find my phone enabled, the phone will transmit location data to other phones in proximity without wifi, you gotta log in on another device

[twin ridge]

Gave +1 Rep to @whole topaz (current: #2614 - 1)

[wooden totem]

I'm gonna do something to you

[chilly veldt]

We can't know if it's your phone or not therefore we can't help

[whole topaz]

It’s my sisters phone I swear

[wooden totem]

those are literally all the options you have

[chilly veldt]

Again, go to local law enforcement

[whole topaz]

Ok thanks y’all

[drowsy dust]

https://cdn.discordapp.com/emojis/1292773820951695390.gif?size=128&quality=lossless

[wooden totem]

are you allowed to munch those

[boreal scarab]

Looks like you're forking over $1900 lol

[knotty pendant]

Wait, is this a MANGO MANGO😈 reference 😱😱 Chat! This is a MANGO MANGO😈 reference 🤣🤣🤣. Boi, you won the Internet meme of the day 😂🫱. Only the Balkans with noradrenaline will understan

[errant fossil]

https://tenor.com/view/rizzler-slow-turn-christian-joseph-costco-guys-reaction-gif-7355487670642656004

[wooden totem]

is that ryan gosling

[errant fossil]

Yup

[knotty pendant]

https://cdn.discordapp.com/attachments/1231641946905251841/1231647298828632114/steal.gif

Find the bugs

[blazing granite]

it's not a cheap wine, but the price depends a lot of the vintage

[fiery otter]

what's the bounty

[twin ridge]

Gave +1 Rep to @knotty pendant (current: #1713 - 2)

[knotty pendant]

Idk

[fiery otter]

give me 2 cheeseburgers and i'll do it

[knotty pendant]

Ok

🍔🍔

[fiery otter]

cool

[knotty pendant]

There

[fiery otter]

im winning in life

🕷️ 🐞

there's your bugs

[kind pumice]

hello

[drowsy dust]

Don’t tell mom

[faint stirrup]

Hey guys, im new

[blazing granite]

https://tenor.com/view/jimchi-jim-chi-asmr-camp-queen-ben-mums-the-word-gif-18613241

[mellow gull]

I'll tell Dad instead

[drowsy dust]

NOO

[blazing granite]

https://tenor.com/view/bri-rimshot-vixen_xo-streamer-badumtss-gif-20278770

[grizzled wing]

JASON web tokens room finished

[blazing granite]

🥦

[grizzled wing]

🦖

[blazing granite]

how are you?

[grizzled wing]

rather not think about that

busy doing THM

[mellow gull]

No time for feelings
More points

[grizzled wing]

yes!

for gaww new profile picture

black cat in red sweater?

[wooden totem]

It's a cat Sakamoto in red scarf, from the hit manga Nichijou (the scarf allows him to speak)

[devout palm]

https://tenor.com/view/cat-berg-cat-orange-cat-swimming-gif-25177582

[knotty cargo]

agree

i totally agree to the said points

[arctic token]

Hello everyone. Glad to join and just have to take a look around now and get familiar with the lay-of-the-land here 🤣

[rapid merlin]

please don't break anything

[arctic token]

IT will be difficult, but I'll try....

[knotty cargo]

bro is into something 💀

[twin ridge]

Gave +1 Rep to @knotty cargo (current: #596 - 9)

[blazing granite]

https://tenor.com/view/do-or-do-not-gif-19616599

[knotty cargo]

it could mean

that I.T. will be difficult

[arctic token]

Great advice wiseone

[knotty cargo]

or not breaking the rules could be difficult

one of either

[arctic token]

Which ever happens first

It's a race condition

[knotty cargo]

bot liked the cyber security part

[twin ridge]

Gave +1 Rep to @wooden totem (current: #169 - 47)

[jolly aspen]

I think it’s a cape!

[boreal scarab]

@blazing granite https://youtube.com/shorts/tpwFZIaDMBs

Why'd he light the candle?

[onyx geyser]

When I try to run a command like 'whoami' on powershell-client, a task is executed but I can't see any output in the screen. Any idea will be appreciated.

[wooden totem]

you're into wine now

[boreal scarab]

@blazing granite forced me to be! He held his sommelier gun up to me!

[grizzled wing]

black hat hacking in style

[boreal scarab]

[naive violet]

What's "powershell-client"?

[onyx geyser]

There's starkiller and powershell-client. The second one is a shell command.

[naive violet]

Right, so within Empire? Within Starkiller?

[boreal scarab]

Empire strikes back?

[onyx geyser]

In any them I can get a shell command output.

It's on task 31

[devout palm]

Arghhhhh

Screw indirect calls

[knotty cargo]

is that calling a macro ?

[devout palm]

Wdym

[knotty cargo]

i mean its skipping calling a macro

[devout palm]

I think a way to get destination addresses is dynamically getting them in the runtime

[loud marlin]

he try to learn assembly

[devout palm]

Which is hard. This is a common problem in obfuscators.

Screw polymorphism. I can't make my binary work.

[devout palm]

No, it is an instruction in a legit binary

Instead of hardcoding the destination offset, it's using registers to make jumps

[knotty cargo]

i thought its jumping to an address which has a macro

so it says skipping indirect calls

oooh wait indirect calls

[trail cobalt]

Quick dumb question I probably know the answer to but would I be completely lost if I went into the soc simulator only having done some of the soc analyst path ?

[devout palm]

Nah it's my obfuscator

[knotty cargo]

assigning addresses to a register right

[devout palm]

Yes, and jumping depending on that register

That's why we can't guess where it is jumping to without running the binary

Causing problems

Frustration is real

[knotty cargo]

isnt r supposed to be a refrence for a 64 bit register ?

[loud marlin]

there is call or so in programing thing. and heap does not know to use it 🙂

[knotty cargo]

so the 8 must be a register right

[devout palm]

r8 is a register

[knotty cargo]

what ive taken in uni about registers go like rax, rbx rcx

[devout palm]

Yes

But they are not the only one

[knotty cargo]

ooo

i see

i feel

i experience

[devout palm]

They are extends for GPRs

r8 r9 r10.. r15

[devout palm]

https://tenor.com/view/kitty-cat-cat-float-kitty-float-cat-water-float-gif-17908418945946410709

[knotty cargo]

oooookayyyy

learning assembly is fun

i want more of it now

[devout palm]

Oh let me make you less interested real quick:
https://docs.oracle.com/cd/E19641-01/802-1948/802-1948.pdf

https://www.intel.com/content/www/us/en/developer/articles/technical/intel-sdm.html

You don't have to read all of them tbh

Just mess with assembly and it will automatically be placed into your brain

[blazing granite]

a short one 😉

[knotty cargo]

ive taken many of it in uni
to the Protection Model Instruction part

which is, less than half of the book

[devout palm]

I get really bored when reading books

[high wind]

what happened to the advent of cyber prizes? have it been announced yet?

[knotty cargo]

not more than i do

[devout palm]

But when it is about preparing something you can use, you read it with ease

Matter of interest basically

[knotty cargo]

like a project

[devout palm]

I think they sent a mail to winners

[topaz topaz]

Of course, emails have been sent 3 weeks ago

Nice seeing you all around here again

[devout palm]

Ok back to work, need to fix this stooopid indirect calls

[knotty cargo]

where do u practice assembly ?

[high wind]

thx

[devout palm]

Reverse engineering

[twin ridge]

Gave +1 Rep to @topaz topaz (current: #330 - 18)

[knotty cargo]

nice

[topaz topaz]

Does reverse engineering also teach you about writing assembly?

I'm very far behind this knowledge so I'm wondering what to expect

[knotty cargo]

yes

u disassemly a binary

it is all instructions now instead of python code or C

[devout palm]

It does help but writing assembly is another thing

There are many options you can use when writing assembly code

[upbeat pilot]

HELLO

am new heree

[devout palm]

So you need to choose an efficient solution to a problem, and create a proper structure

[arctic token]

@timber galleon Nice to see you in here 🤣

[timber galleon]

👋 welcome

[twin ridge]

🔊 Unmuted himira_2

[knotty cargo]

omg my blue filter suddenly gone

my eyes

is life that much blue ?

[upbeat pilot]

bro that was weird

i literally got muted a second ago

[sick lance]

Yes, you pinged everyone.

[knotty cargo]

wild

[upbeat pilot]

I WAS LITERALLY ASKING SMTH 😭

[upbeat pilot]

ikr

[sick lance]

People who ping everyone or here get auto muted.

And their message deleted.

[upbeat pilot]

yeah

[knotty cargo]

pinging a server with 250k members...

[upbeat pilot]

i see so

[knotty cargo]

can u imagine

the mount of watts u consume turning 250k speakers on

[upbeat pilot]

oh. yeah ofc i did so.💀

[knotty cargo]

and the amount of carbon footprint u make (jk jk jkkkkkkk)

not mentioning the 0.0001% of them who thought their phone is on silent but it ringed in a senstive area

[sick lance]

Or it's like, common bot behaviour.

[topaz topaz]

Why don't you ask like the rest of us human beings? 💀

[fringe nacelle]

Lol

[topaz topaz]

At work I have my brightness set to the Lowest level possible with blue light filter on 24/7, my coworkers clown on me constantly

[kind narwhal]

https://tryhackme.com/r/room/osimodelzi

Task-4

Hello, normally pictures like these look neat to you, but they look like this to me. What do you think could be the reason?

[fringe nacelle]

I feel that

[topaz topaz]

Right? I like making my displays look like the kindle kind, almost as if it's on paper

[kind narwhal]

yo ?

[topaz topaz]

Lighting in the office doesn't get in the way so why not

[knotty cargo]

always lowest possible not healthy too

[topaz topaz]

What do you mean

[vast spoke]

is math useful in this area of expertee, in your guys opinion

[knotty cargo]

if u find it hard to read something on the screen, its unhealthy for eyes

[dark mason]

This shouldn't taste so good

[topaz topaz]

I don't reach the point of straining no

[kind narwhal]

I can't see the image

[topaz topaz]

If you're on dark mode some material may not be 100% optimized

[knotty cargo]

just above that is ideal

[fringe nacelle]

Awooooga

[vast spoke]

.

[topaz topaz]

Gigachads never strain their eyes even on turned off monitors

[knotty cargo]

but it did anyway

[topaz topaz]

Cappuccino?

[knotty cargo]

https://tenor.com/view/gigachad-chad-gif-20773266

[dark mason]

Hot chocolate

[sinful moss]

@hasty sand im ur biggest fan! conragts on getting #1 on tryhackme

[dark mason]

Fr

[fringe nacelle]

I'm ass at math and I'm still here. So not really, but there is probably a specific field in CS that requires it

[topaz topaz]

Still awesome

[dark mason]

It was also 40 cents

[topaz topaz]

It doesn't have to be, no

[knotty cargo]

hmm wasnt he the #1 already ?

[dark mason]

So cheap as hell

[topaz topaz]

Wtf?.... You made it yourself or something 😭

[dark mason]

Nah

Bought it from the café shop

49 cents

[topaz topaz]

For a few years at least

[dark mason]

40*

[fringe nacelle]

Like 49 cents in the Philippines?

[topaz topaz]

Asian country?

[dark mason]

Europe

[fringe nacelle]

Yup that's why

[topaz topaz]

What yall mean that's why which eu country is this cheap?????

I'm in Europe...

[dark mason]

We steal wallets

[topaz topaz]

Wait I think I know

[dark mason]

Take a guess

[topaz topaz]

Albania?

[dark mason]

No

[topaz topaz]

Romania

[dark mason]

Ayyyy

[knotty cargo]

hes chilling so it cant be germany

poland ?

[topaz topaz]

Hahaha I lived with Romanians, we have lots of common words you and I

[dark mason]

Like?

[topaz topaz]

I'll translate so it doesn't break the rules but kouti(box) kalorifer(radiator), tsigar(cigarette), fasoli(bean) and many others

[dark mason]

Yeah kinda similar

[knotty cargo]

wait fasoli is an arabic word

[topaz topaz]

That's crazy

[dark mason]

The tiktok 12 hours ban was crazyyy tho

[sinful moss]

squid game!! 🔥 🗣️

[topaz topaz]

Hahahahahahaha what? 😭

[sinful moss]

ur pfp

[dark mason]

His pfp is not squid game

Try again

[sinful moss]

😔

[topaz topaz]

Oh nooo pal 😭

[blazing granite]

My grand father was from Romania

[sinful moss]

yeah the goat

[dark mason]

I want to see his stolen wallet collection

[knotty cargo]

wheres he from

[topaz topaz]

I know you guys sell tons of cheap leather wallets and they're genuine

[dark mason]

Everything here is cheap for Americans

[topaz topaz]

Trust me not just Americans

[dark mason]

Or even Europeans that aren't in the balkans

[topaz topaz]

Prices in similar European countries for leather goods are nearly double yours

[blazing granite]

He was an honourable Rumanian Jew

[dark mason]

Ahhh

[topaz topaz]

Have you been following your streaks pal?? You've been the same level for a while. Better not be slacking.

[sinful moss]

South Florida, FL

[topaz topaz]

Montgomery truly is real cool

Love his podcasts

[sinful moss]

||i didnt just look that up 😭 ||

[topaz topaz]

There's lots of people saying he's not for real though I hope it's not true

I don't bother giving into such allegations though it's pointless

[fringe nacelle]

Does anyone have any info on his revshell site? I was gonna dm him for more info, but I chickened out

[arctic token]

@topaz topaz You talking about Ryan?

[topaz topaz]

Yeah

[arctic token]

Yea, I'm not a big fan

[topaz topaz]

What kind?

[blazing granite]

I don't know who he is, but I love the malicious live podcast.

[fringe nacelle]

Click his profile, it's the site in his description

[topaz topaz]

Tbh I get that as I've seen what some might claim about him but I see nothing malicious about him, if anything he claims to be of benefit to society without asking for anything in return afaik?

I can't consider myself not being a fan of a person who claims to help

[arctic token]

Yea, there is that, so maybe not all bad.

[topaz topaz]

I know what you mentioned but I'm asking what kind of info

I don't think he'd respond even if you didn't chicken out

[arctic token]

I love the offering to help as long as you are truely helping and not confusing or giving bad advice. I understand advice is just someone's opinion though but still.

[fringe nacelle]

Ohhh, idk more about what the site does and its purpose.

I'm not too well informed on Rev shells yet.

[topaz topaz]

Bad advice as in?

[edgy granite]

advice damn

[topaz topaz]

I think the THM modules would help you many many times more than dming

[arctic token]

Just some things he's said over time. Don't want to talk about him without him being able to defend himself.

[topaz topaz]

Fair, I get that. Differing opinions are always respected

[fringe nacelle]

Ohhh is it similar to how in the Cyber advent where you took over an AI, after figuring out that it can send pings back? Appreciate the response yah

[topaz topaz]

Yes

[opaque flax]

You didn’t get a chance to win a trip to defcon D:

[topaz topaz]

Kind of but it actually ends up being a reverse shell cause you make the AI use netcat

[opaque flax]

It is a command injection tho. Ai prompt injection

[upper knoll]

not a waste if u learn from it!

[opaque flax]

I was gonna go regardless so

[topaz topaz]

I think you have to gain a lot from it

[solar plank]

Hello everynyan

[topaz topaz]

AoC2024 was beautifully made and had material from many different topics

[topaz topaz]

Hey pal nice seeing you

[solar plank]

haw are you fine thank you... I wish... I were a bird....

Nice seeing you too!

[topaz topaz]

I wish I were a breeze

Formless just traveling everywhere

[opaque flax]

Come drink with me and my group! On Thursday night we get a limo or party bus, go to hofbrauhaus and get drunk, eat good German food and have a good time. Then Go back to the hotel and drink more

[topaz topaz]

This reads like a copypasta

[opaque flax]

Ok

[topaz topaz]

That's fair

[solar plank]

So, I'm going through a CTF and I don't understand where's the tool located in attack box, also dunno where to ask that :D

I can install it but I think that it's a bug

[opaque flax]

We always try and find someone new to add to our group every year

[topaz topaz]

Is that defcon?

[opaque flax]

Yeah

[topaz topaz]

Sounds cool mane

[solar plank]

what are you talking about? I hope to join you but don't think that I'm gonna be able to :D

[opaque flax]

Oh bet. Last year I found a guy who was like “I’m locked out of my room for a few hours” cause he didn’t have a key. I invited him and it turns out he’s a senior software dev at msft 🤣 first time at defcon too

[solar plank]

Yeep

Agent Sudo

[fringe nacelle]

Are defcon tickets still $2k and up? I tried finding tickets for the events, but I failed lol.

[opaque flax]

Defcon tickets are 400

[sand trench]

hmmmm shadows answered questions spiked today....
just as shadow is startin to ramp up their ctf beating :D

[opaque flax]

Black hat is 2k and up

If you are finding defcon for 2k you’re getting scammed

[true urchin]

https://tenor.com/view/trump-donald-trump-thumbs-up-good-yes-gif-13303990716584415679

@rapid merlin

[opaque flax]

Anyways it’s a good time. It’s a weekend long party with hacking in the mix

[fringe nacelle]

That's what I assumed, is there any big difference with black hat and defcon?

[blazing granite]

2k maybe with accommodation included

[opaque flax]

Black hat is for the professionals defcon is for the hackers/enthusiats. also defcon is more partying than black hat and black hat is professional and for companies

[solar plank]

Danke

[opaque flax]

He did specify tickets

[upbeat pilot]

hello

[opaque flax]

Fair. There’s lots to do at the convention center too

[fringe nacelle]

Appreciate the explanation! I was curious on going, tryna build up connections and learn more. I've heard that doing the villages is the best way at defcon

[opaque flax]

Defcon is what you make of it

So

You kinda choose what you want to do

[glacial cove]

Defcon is hacker pilgrimage

[opaque flax]

You wanna go see talks? Go do that. You want to solve a complex cryptography puzzle that takes the whole weekend ? They got that too

If you want to get hands on training and learning? Villages

[solar plank]

Hey!

[opaque flax]

The easiest village to get started with is physical security and lock picking

I like doing challenges. I find a ctf and get free swag

[solar plank]

Getting connection on such event is soo cool!

Swag is also awesome but you can do both sometimes

[fringe nacelle]

noted.

[glacial cove]

Lockpicking is 👌

I was chilling with the good fellows at the malware village in one of the other cyber sec conferences I attended, that stuffs good too

[naive violet]

LOADS to do though, and loads of walking

[solar plank]

100%

Have entire lockpicking kit wit a lot of locks at home :D

[upbeat pilot]

bro your name is taller than my life + hrru?

[devout palm]

Oh shoot i found the issue

[glacial cove]

Lockpickers unite 🙏

[devout palm]

I didn't know virtual function offset table is stored in .text section which is meant to be for code section

[opaque flax]

There’s also lots of training to be had. For example I learned how to hack one of those door buzzers you see in apartments

[solar plank]

Yes! (What does hrru means?)

[opaque flax]

For sure. But like I said. You get what you want out of it which is what makes it so good

[upbeat pilot]

how are u

[naive violet]

You will miss things, but that's ok

[glacial cove]

The workshops are hella cool if you can get into them

[opaque flax]

I always make sure to atleast hit the up the vendor area

[glacial cove]

Peak of the conference for me

[opaque flax]

One thing I haven’t done yet either is attend bsides

I’ve been meaning to

[solar plank]

Ohh, I'm fine! Pretty good actually!

I used to be afraid of chatting with people back in the day but now look at me :D
I think I understood something in this life xD

[glacial cove]

Ahhh that's the one I'd just been to, plenty of good faces and workshops there

I think 5pider was chilling at the last one as well, Havoc C2's creator

Gimme a sec

These bad boys were circulating in the malware village

[solar plank]

How bad they are?

[opaque flax]

When I was in line con to get my badge I saw some putting down fake 100s all over the place lol

[opaque flax]

They’re prob just USBs with malware on them

To like test in a sandbox

[glacial cove]

Yep, USBs with a defanged multi-stage infostealer