general

[topaz topaz]

That's awesome

[wary ocean]

thats a sick as hell cover ngl

[opaque flax]

They’re generally nice about not hacking you lol

It’s generally frowned upon to hack others at the convention

[glacial cove]

They were joking about people hacking themselves with it in the past lmao

Never their intention, but there's always one person

[opaque flax]

They have super secure networking (except for the open WiFi where you get put on the wall of sheep for)

[opaque flax]

Oh there’s bad actors for sure there

Just connect to the secure WiFi and besides that keep your WiFi and Bluetooth off

[glacial cove]

Not the organisers at least 🙏

[opaque flax]

And beware at the hotels

[opaque flax]

No defcon has a top notch NOC and SOC

I was on hotel WiFi and got a self signed cert error going to google.com

I noped tf out of that WiFi rq

[glacial cove]

My device pings back to my home net with Wireguard + PSK and my own recursive DNS at all times so I'm good 👍

[naive violet]

Big fan of wireguard

[opaque flax]

That too

[solar plank]

Probably, but how much data they can store...? :D

[topaz topaz]

Wireguard is also used by our i.t. firm can vouch

[glacial cove]

Brilliant golden standard for VPNs, especially the cryptography. Me and my best buddy love it

[opaque flax]

Unfortunately my isp doesnt allow me to open ports so I can’t have a dedicated vpn tunnel to my network. Used to run wire guard on my last isp

So currently I’m using tailscale but that doesn’t route all my traffic afaik

[solar plank]

OH, Can I boast a little??!?!?!?!

[glacial cove]

Get in there fellow self-hosters 🙏

[opaque flax]

I could do a vps in the middle and stuff but nah

And have the vps accept inbound connections and everything is just connecting outbound

[glacial cove]

That time of the day for the proxmox and trueNAS pizazz to come out

[opaque flax]

I love my proxmox

10/10

[glacial cove]

i was thinking holepunching or something similar

[opaque flax]

Got my domain controller and true NAS on it and opnsense, pihole, wazuh

[solar plank]

Soo, I have THIS beauty!!

It's also acessible through my VPN have a lot of stuff on it and I might get another one like that :D

I think I might be on a way to creating my very own server room

[opaque flax]

That uptime tho

[wooden totem]

how does a screenshot have transparent background

[opaque flax]

Not as bad as I’ve seen

But could do with a reboop soon

[blazing granite]

since vmware going to shit because of broadcom proxmox is becoming a real player

[solar plank]

also I need to swap GPU for something more powerful and support to vGPU for my GUI boxes

[solar plank]

Do you think that it's about time, not the updates?

[opaque flax]

Still behind hyperv tho

[opaque flax]

Stuff just breaks with long uptimes

[solar plank]

My server never told me nothing about update for kernel and stuff

[solar plank]

can you tell me more about that?

[opaque flax]

If you’ve configured it for the community edition repository it’ll auto update

If you got a memory leak then more and more resources will be consumed the longer the uptime

[solar plank]

lemme reboot it than rq

[opaque flax]

lol wait no

[solar plank]

xd

[opaque flax]

As long as your vms are good then sure

But don’t just kill your vms without making sure they’re good

[glacial cove]

I love my setup, everything is all fenced in behind my VPN

I'm running some dozen little bits including a vaultwarden instance, RustDesk relay, SearXNG instance connected to Tor proxy, Jellyfin, Adguard Home for that sweet preconfigured DoH and NextCloud

[opaque flax]

Also restarting will clear temporary files and such

[solar plank]

they're good, I have a bunch of them and don't think that I've seen issues on them. Also since I use proxmox it's complicated for me to go through all of them

[opaque flax]

It’s just good practice to give the server a reset

What all are you running?

[glacial cove]

Your next step: baby's first cluster

That's where I'm heading. Kubernetes is all the buzz these days

[mellow gull]

Enterprise standard is every 90 days or so for a reboot, but usually they can put resource load onto a backup temporarily during that process to minimize downtime

[opaque flax]

I have an under my desk server data center

[wary ocean]

i want to get a large storage usb stick and 3d print off a cyberpunk shell for it that says soulkiller to feel like a hacker boy when pinging my own network

[glacial cove]

My server's just a repurposed Dell PC BTW lmao

Now, get this though. Ultra flex

My VPN is actually not running on my server, it's entirely agnostic

[opaque flax]

Yeah. I can stand some downtime when I do my reboops

[solar plank]

mine is noname self-built old gaming PC with switched CPU, RAM and updated BIOS

[glacial cove]

It's running on a router which I UART'd into running OpenWRT 😎

[mellow gull]

Yeah it's not like most individuals like us are hosting systems that need effectively 100% uptime, so it's not an issue to do it more regularly

[solar plank]

I struggled a lot with this PC after getting myself comfortable with laptops :D

[glacial cove]

Ooh, beware the power draw depending on the GPU/CPU

[opaque flax]

Yeah for sure. My SO had an issue where she couldn’t access her network remotely cause the first wall glitched and was not available “on prem” to reboot it. So she now has a cron job running for weekly reboots and a script that auto starts the vms upon reboot

[glacial cove]

My ideal is likely going to be a bunch of quad core N1000s and maybe a single low profile GPU somewhere for transcodong

Transcoding

[solar plank]

Can you clarify? =

[glacial cove]

The power draw of gaming PCs is often gnarly as all heck. If you're sitting at home running it 24/7, you will end up spending quite a hefty bunch every month on the electricity bills. People enjoy small TDP set-ups which are efficient on bill costs

[solar plank]

ahh, yes make sense. I'll note it, but for now I live in a place where electricity and internet is cheap

probably at the time I'll need to think about it -- I'll just rent myself place in the server room

(and live in this server room)

[mellow gull]

If you're doing strictly VM and/or linux tasks the majority of processing is done through memory, so there's no need to have a beefy GPU which is a major draw on power otherwise.

Computer think hard, computer get hot

[solar plank]

I work with LLMs sometimes also do some complicated computer stuff since I'm (kinda) penetration tester at my work

[opaque flax]

Thank god the computer did thinking hard for me cause I sure as heck know my brain cells aren’t up to par

[twin ridge]

Gave +1 Rep to @mellow gull (current: #81 - 95)

[mellow gull]

Lord knows most of us never developed a brain. The machine might be learning but I'm not.

[opaque flax]

Too real

[solar plank]

Have you seen something like that in your life before?

[glacial cove]

Bro I'm tired, my computer's on it's last two braincells with the funny activities I was attempting on it

[mellow gull]

Yes.

[solar plank]

I love this IBM mount in server rooms (but it's also kinda usless if this server room is big)

[opaque flax]

Yeah it’s a fancy kvm

[glacial cove]

Computer has no brain 💀💀💀

[solar plank]

(kernel virtual machine?)

[mellow gull]

Every server room I've ever been in has something like this

[glacial cove]

Yes, and I don't get it

[mellow gull]

Info needs to be accessible somehow

[glacial cove]

PiKVM it or remote desktop, idk

[solar plank]

We usually just connected through the wire and ssh'd into machine

[naive violet]

I want one, haven't seen a lot for sale sadly

[mellow gull]

Man ya'll don't believe in redundancy anymore? Shame

I love these physical access terminals

[opaque flax]

Keyboard video mouse

[opaque flax]

I was watching saville tech and he had a shirt that said “back in my day we had backup domain controllers”

[solar plank]

I love them too!

But somehow we just didn't used them much

[opaque flax]

And I need that shirt

[mellow gull]

I'd like that one too

An older reference but it checks out

[opaque flax]

The amount of clients I support that combine file sharing/ad/dns/print is appalling. 😭 and only have 1 server for it

[solar plank]

anyways!

It was nice talking to y'all!
See you around and have a wonderful day (or night) ahead!

[opaque flax]

I don’t think I’ve seen a single client use AD CS

[knotty pendant]

hi

[lost birch]

Can someone help me understand reverse shells and bind shells

[mellow gull]

What's to understand?

[lost birch]

Do you need to use netvat commands on both the attacking and target?

Netcat*

[mellow gull]

It depends on the shell?..
In a bind shell you establish a listening connection on the target machine using similar techniques and then connect to it with your attacking machine

And in a reverse shell it's the opposite, you listen on your attacking machine and send a connection from the victim machine

[lost birch]

So with a bind shell the target listens for commands from the attacking machine

[mellow gull]

Yes.

[lost birch]

Ahh so reverse shells - they execute the commands on the target

And we just listen to the whole session

[upper knoll]

yes

[lost birch]

thank you

Both

[undone timber]

how much of tryhackme is paid once you get a bit further?

[mellow gull]

Approximately 60~% of THM's content is free IIRC?

[lost birch]

yeah most of the content is free

[undone timber]

👍 so the experience doesnt matter not like that now the intro is free and the intermediate topics/advanced will be paid?

[mellow gull]

Mooore or less, yeah

The lot of the path-specific content is paid

[opaque flax]

Seems like most challenges are free

[undone timber]

what do you mean by that?

[mellow gull]

So the learning paths, which consist of a specific set of rooms meant to teach particular content like SOC 1 or Jr Pentesting or what have you, a lot of that is subscriber-only from what I've gathered

But challenge rooms, a lot of info stuff, other walkthroughs for unrelated stuff, is all free (or a lot of it is, at least)

[lost birch]

Gaww I get it now!! Thanks again

[undone timber]

so basically this path is a lot of stuff apid but you got the free ones who aren t the path?

[mellow gull]

[undone timber]

like these

[lost birch]

Yes

🙂

[mellow gull]

You've filtered it for free-only rooms, so naturally, those are all available to anyone.

[lost birch]

A lot of walkthrough rooms are also free

[undone timber]

walktrough only know the roadmap and the rooms

[undone timber]

i know

[opaque flax]

Okay enough silly talk

Are you an ls -la person or ls -al person

[mellow gull]

I'm an ll person, actually

[opaque flax]

David bombal is with you

[sand trench]

neither... shadow is a ls -lah person

[opaque flax]

Gotta be human readable

[mellow gull]

Well lah dee dah

[sand trench]

haha yeah that could be a phonetic memorisation rule

[upbeat pilot]

ello

[fallen beacon]

I was expecting a dark terminal with bright green text but WTH

[sand trench]

merp morps time for slerp slorps to the blerp blorps for sleep sloop beep boop meep moop

[glacial cove]

Expectation vs reality

[upbeat pilot]

guys i need sm help

[fallen beacon]

[glacial cove]

What you expect hackers to be doing:

What hackers are actually doing:

"Herrr durr look, it boots into GRUB"

[fallen beacon]

Pizza box

[glacial cove]

I sit there watching my fellow students finishing an assignment for our Cybersec course to see how they're getting along, they tell me they're busy coding a program that opens 50000 windows to draw bad apple on screen

On a laptop with 4GB RAM, sitting there with a 64gb page file

I'm not kidding

That was before christmas

[fallen beacon]

1995 nostalgia for me 😰

[mellow gull]

That's the most elaborate forkbomb I've ever heard of

[jolly aspen]

alias la=“ls -lah” here

[glacial cove]

The smartest guy I know, he codes homemade malware with anti-reversing and bypasses Virustotal on all vendors

I ask him what he's working on now, he says he's creating a Bluetooth driver to DOS a guy next-door in his Uni dorm because he won't stop pissing about with the Bluetooth speaker

[trim dirge]

hey , i hope i am not in the wrong channel but i want to get better at bufferoverflow (ways to defend and to bypass the corrections ..etc) any one can show a path or maybe went through this ? (i have basic BO knowledge )

[mellow gull]

I'm
Somewhat obligated to say that that's pretty ill advised and shouldn't be motivated.

[glacial cove]

Yes, he's definitely not a good guy 💀

[jolly aspen]

There are a couple room in thm on the subject

[glacial cove]

I'm not condoning any of that, I'm calling it stupid

The malware he makes is all just for the sake of exercises and he uploads it to Virustotal to get it signed up by the vendors, he's not interested in any unethical practises

[opaque flax]

He’s not interested in unethical practices. He’s coding a BT driver to DOS someone

These are contradictory statements

[glacial cove]

But the Bluetooth thing, nah

[fallen beacon]

[rugged kayak]

bro is dedicated to stop annoying neighbor any means necessary

[jolly aspen]

Motivations take hold in curious places

[glacial cove]

I know, he knows, it ended up being satire but it's just the wackiest shit I hear around the place

[fallen beacon]

💯

[opaque flax]

Right. But you can’t say they’re not interested in unethical actions and make the statement that they’re doing unethical things

[lost birch]

lmao what an extreme measure

[opaque flax]

I mean you can

[lost birch]

Just ask him

[fallen beacon]

It's all about access to resources IMO

[opaque flax]

No it’s not

Access to resources has nothing to do with the ethics of something

[jolly aspen]

Fair enough, and I agree. Given the context it’s pretty low tier, but still likely illegal(it would be in USA)..so probably not the place to discuss

[fallen beacon]

Integrity and ethics cannot be taught to some

[opaque flax]

Definitely illegal. It’d fall under like unauthorized use of a computer or whatever the federal law/applicable state law is

[jovial burrow]

hey, anyone taking part in soc simulator game?

[jolly aspen]

I believe it would also affect some FCC laws as well. Since broadcast devices must accept and not interfere with the function of others

[gleaming grove]

Deauth devices are legal and jammers are ilegal?

[jolly aspen]

Wireless has some very fine lines to dance around on what’s permitted and not

[fallen beacon]

Goodnight all, it's bedtime for me here in the UK

[opaque flax]

Yeah probably. Not sure how much the FCC would care. Nor would local or federal LE really care tbh cause it’s not happening on a massively disruptive level.

Still is illegal tho

[jolly aspen]

Deauth intent can be illegal. A jammer is illegal

[lost birch]

Goodnight spectre

[jolly aspen]

Oh, yess they would

[gleaming grove]

mimir time

[wooden totem]

Something something medical devices interference

[gleaming grove]

booty

wait what happend

[opaque flax]

Local LE wouldn’t give 2 craps lolol. fcc or Feds maybe

[fallen beacon]

[gleaming grove]

the bot doesnt work

[jolly aspen]

FCC will give many craps

[rugged kayak]

dont tell me they fixed it

[glacial cove]

I mean, something we got taught in the ethics module of our class today. "Morals are like personal ethics. They may contradict with the law from time to time, they are your personal code of conduct". He should probably take a page out of that one lmao

He won't touch anyone's devices, doesn't fang malware. Reports any group of skids who threaten him rather than hacking them back, being responsible about it and understanding the gravity of the situation

Small shit like fiddling with someone's Bluetooth because they've been genuinely disrupting the entire block with it and nobody's responding to the noise complaints. Well

[wooden totem]

https://tenor.com/view/thanos-avengers-endgame-gone-reduced-to-atoms-gif-26539274

[opaque flax]

Fair

[jolly aspen]

That’s not how disputes are settled…

[gleaming grove]

BOOTY~~~||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||_ _ _ _ _ _ _ ty

[twin ridge]

Gave +1 Rep to @opaque flax (current: #135 - 58)

[rugged kayak]

legality and morality usually dont go well with each other

[glacial cove]

Yep. Touché

[jolly aspen]

But, I can’t comment anymore, as discussing it would be breaking the rules here… so, have at ya fellas

[opaque flax]

IF it went to a court the defense “nu uh I don’t think it was unethical think of MY personal morals” would not be a defense

[wooden totem]

Dexter had a code

[jolly aspen]

We’re just pals, buddies, friends, compadres. Ya know

[wooden totem]

Lovers even

[opaque flax]

When we talk about ethical and unethical hacking here and in most spaces unethical hacking is any hacking outside of the law that could land you in legal trouble

[opaque flax]

Thanks cupcake

[twin ridge]

Gave +1 Rep to @jolly aspen (current: #190 - 39)

[jolly aspen]

You shut your beautiful mouth when you talk to me

[wooden totem]

I don't think you know how talking works

[upbeat pilot]

wild

[jolly aspen]

Hello 👋🏻

[upbeat pilot]

elloo

[wooden totem]

✋ 🕵️ 🤚

absolute convolution

[opaque flax]

So even DOSing someone with a Bluetooth driver even if they’re annoying and you don’t have consent to do so is completely unethical no matter how you justify it or if you think it’s justified

[glacial cove]

Aye. That's why we're covering it. It's worth covering the separation between ethics, morals and legalities more often in this field

[gleaming grove]

yep just like deauth someone with your wifi adapter

to get his handshake

[lost birch]

in other words with great power comes great responsibility

don't need ethics just watch spiderman

[jolly aspen]

And poor Bluetooth connectivity

[opaque flax]

Why don’t you like…knock on his door and shake his hand if you need his handshake that bad. No need to deauth him

[lost birch]

two way handshake 🤮

[wooden totem]

Erm aktualy its specifcially illegal becus jamming frequences are dangerous to potential medical devices on persons

[lost birch]

funny I was looking at this today

[jolly aspen]

https://tenor.com/view/silly-handshake-hug-funny-gif-3403884

[gleaming grove]

i dont want them to fall in love with me

[glacial cove]

Does THM have any ethics modules? I've forgotten at this point

[lost birch]

probably not

[wooden totem]

I know htb has a whole page

[lost birch]

There is "Careers in Cyber security"

Lol

[glacial cove]

Worth considering making one mandatory at this point because of how many wacky shenanigans happen here in #general from passer-byers

[opaque flax]

It won’t help

People will still come in and ask us to hack their ex dogs facebook

[gleaming grove]

its always funny

[glacial cove]

A bit 🤏

[lost birch]

https://tryhackme.com/r/room/irphilosophyethics

[rugged kayak]

good thing is they dont stick around for a while

[wooden totem]

Good luck telling people eho want something that "oh we dont do that here its actually ill..."

[opaque flax]

BUT ITS MY GMAIL

[lost birch]

AND SUPPORT WONT HELP ME

[gleaming grove]

my roblox account all my robux

[opaque flax]

I HAVENT EVEN TRIED CONTACTING THEM

[rugged kayak]

free robux hax

[lost birch]

Hi guys I am running a penetration test on myself, I have a website of mine can someone help me deface it?

[boreal scarab]

Chilling in VC if anyone wants to join

[lost birch]

people here speak?

[boreal scarab]

I know, shocker lol'

[glacial cove]

[opaque flax]

SSH into the box (cause you own it and have the password or private key and it’s legally accessed) and change index.html to say “synapse was here”

[rugged kayak]

what fascinates me is how little they now about the topic in general but they want to haxx something

[wooden totem]

1. Get a random stranger to "hack" into your account
2. Talk to specifically trained and trusted support person about retrieving your account
   You can only pick one

[rugged kayak]

1, its no brainer honestly

[mellow gull]

Can someone hack back my facebook account? I lost it seven years ago and I'm only just now wanting to get it back.

[opaque flax]

I’ve gotten a discord token stealer scam message from the guy asking me if I wanted to be a real hacker lol

Seemed kinda ironic

[wooden totem]

"You pass the first test"

[gleaming grove]

easy points im gonna do it right now

[upbeat pilot]

Hellppp guyss

[gleaming grove]

i want a new color

[sick lance]

An we stop with the unethical jokes?

Can*

[jolly aspen]

was waiting for that

[gleaming grove]

whats wrong?

[rapid merlin]

here we gooooo

[upbeat pilot]

WHERE CAN I LEARN PHYTHON FOR FREE IF ITS NOT CODECADEMY

[mellow gull]

[gleaming grove]

yt?

[rapid merlin]

cs50

[rugged kayak]

blackhat python book

[sick lance]

Tried their docs?

[rugged kayak]

and doing projects

[upbeat pilot]

THANKS

[opaque flax]

W3 schools. YouTube

[jolly aspen]

netacad has a basics course, and the writer of "automate the boring stuff" is often releasing their text for free

[upbeat pilot]

TYYY YALL]

[rapid merlin]

NW

[opaque flax]

Why are we yelling

[jolly aspen]

you clearly aren't

[rapid merlin]

BC ENERGY

[rugged kayak]

avoid getting stuck in tutorial hell

[opaque flax]

i am not yelling

[upbeat pilot]

huh..

[jolly aspen]

best process is probably to mix the generic course with a small project and lots of googling

[glacial cove]

Docs are always going to be a heavy lifter for your learning, tutorials help but they can't beat a good docstring

[rugged kayak]

focus on trying to make something, trial and error instead of sitting in front of 6 hour tutorials

[glacial cove]

At least personally; try more venues for your learning and see what works 👍

[rapid merlin]

IT'S AT 20 UPVOTES LETS GOO

[jolly aspen]

docs are sometimes really difficult to understand without prior coding knowledge tbh

[upbeat pilot]

CAN U GIVE ME ALL FULL GUIDE OF YOURS IN DM? 😭 🙏

[jolly aspen]

why do you want to learn python?

[rugged kayak]

tell me this, is there any task you would like to automate that is boring in your day to day life

[silver sky]

Do you have to shout?

[upbeat pilot]

so i can complete cybersecurity

[rugged kayak]

if you are using linux make script that will sort your downloads directory

[jolly aspen]

woke up the wide boi

[upbeat pilot]

yes

[upbeat pilot]

yup

[karmic hemlock]

Who is the wide boi

[silver sky]

Shouted so loud I could here it here in Iraq

[rugged kayak]

and do bunch of googling

how to do this how to do that

best way to learn

[jolly aspen]

i would find a more pointed reason or specific problem you want to solve with it - then learn how to solve the problem with python

[rugged kayak]

just go straight in

[karmic hemlock]

I see now

[glacial cove]

True, indeed. A well written one is usually nice and to the point though with descriptions of parameters and returns per function, I tend to get lost in tutorials sometimes because there's too much "waffle" personally

[upbeat pilot]

i also wanna make some py projects and pygames

[wooden totem]

Pygames huh

[jolly aspen]

i mean, thats nice if you know a parameter, and why they exist and uses..

[wooden totem]

Haven't heard that name in eons

[rugged kayak]

write down what you want and what you need and do some reasearch

[jolly aspen]

ok, so what game and project

[boreal scarab]

'Who wants to watch me struggle with python?

[rugged kayak]

make http server

[upbeat pilot]

me

[boreal scarab]

Verify your account and come join me in Voicechat

[lost birch]

what is the issue I might be able to help 😭

[rugged kayak]

is that a farming game where you automate drones using python

[glacial cove]

W3schools taught me in a few brief sentences what those are; after I got the memo, it was smooth sailing

[upbeat pilot]

calculator project and js a simple game

[lost birch]

I have used Python for a project I just don't know what you are making to be honest

[sharp citrus]

@upbeat pilot

Discord: How do I verify my TryHackMe account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Jan 21, 2025, 11:45 PM

[boreal scarab]

Yes, yes it is

[upbeat pilot]

i did verfity lol

[boreal scarab]

Doesn't show you did

[lost birch]

Your tryhackme account?

[glacial cove]

If you did successfully, your name would be ✨colourful✨

[lost birch]

In discord?

[glacial cove]

Representing your current rank

[lost birch]

Yeah ^

[upbeat pilot]

WAIT A MINTUE

[jolly aspen]

there you have your google search " how to build a calculator in python"

[lost birch]

The verify command here ties your tryhackme account to your discord profile

[upbeat pilot]

ye i use chatgpt

[jolly aspen]

sure

[lost birch]

Goodnight all

[jolly aspen]

use a better prompt like : " i am a complete beginner in python, I'd like you to explain in a step by step way the important aspects of the language necesary for building a simple calculator, then ask insightful questions about the next projects I might want to work on to further develop my skills in python"

[upbeat pilot]

lol i did now

[upbeat pilot]

helpful

TYYY]

[lost birch]

Best of luck

[upbeat pilot]

tyy

[jolly aspen]

thats very fortunate for you, not everyone is so quick to understand these concepts

[upbeat pilot]

real

[lost birch]

don't give up

It may take long

[upbeat pilot]

i tried it b4

[lost birch]

It probably will to feel good at it

But you can definitely do it

It being Python

[upbeat pilot]

THANKS FOR SUPPORT

[rugged kayak]

have you guys seen new AI https://api-docs.deepseek.com/news/news250120

[lost birch]

I am learning of this now

Like right now

[upbeat pilot]

learning wht

[jolly aspen]

its not easy, and its not really hard, its just cinsistency and persevearance. the majority struggle the most in the beginning then it really does get easier. but having some problem to solve with it is the best motivation. even if its something simple like organizing files with a program. or sorting emails etc.

[lost birch]

watching a video on deepseek

[lost birch]

^

[rugged kayak]

fireship?

[lost birch]

yep.

Classic

[rugged kayak]

i just watched it 5 minutes ago damn

fireship goated

[lost birch]

He isss

Oh yeah I saw that chatgpt ddos method

[upbeat pilot]

yeah

[lost birch]

Apparently it didn't limit the number of links in API calls

[upbeat pilot]

mhm

guys can sm1 like who is proff in python show me a simple project

chatgpt insiprations are boring

[rugged kayak]

i just have bunch of exploits from github and directory sorter

[upbeat pilot]

GIMME SONE

SOME*

[jolly aspen]

https://tryhackme.com/r/room/pythonbasics

[upbeat pilot]

u are an programming OG FRL

U ARE A SAVIOR

[boreal scarab]

Now I'm lonely again

[trail pier]

because docs are written by experts who often forget how much of their knowledge they take as granted for everybody else

[boreal scarab]

@rugged kayak get in here!

[trail pier]

throughout my years long experience as a swe, docs only serve their purpose when you already know what you’re doing and you need to know specific details

[jolly aspen]

yea, totally.

[trail pier]

For beginners I recommend that you skim through quick tutorials and learn the material by applying it, modifying it and then trying to break it

[jolly aspen]

i've only encountered a few docs that did some heavy lifting. most of the time they had an in house instructional designer or something - if you want docs readable by all, although probably at the detriment of the really experienced, then you need someone without technical repetoir to read through them to provide insight

[trail pier]

Yep, should also note that most experts have a god complex

So a good chunk of them love a little showoff here and there xD

[rugged kayak]

sorry i didnt see i was eatin

[drowsy holly]

Hello! I'm new to tryhackme and we practice every day. How many hours is ideal to work every day? Unfortunately my English is not very good and I use translate to read since I'm from Greece. But I have passion!
There are people who started this way, for example tryhackme, experimenting on your own, now that there is AI to ask questions and get the answer straight away, have they progressed and seen results after a while?

[mortal plume]

is it possible to form a team here on THM for the SOC challenge https://tryhackme.com/r/soc-sim/scenarios

[jovial burrow]

what is this sir?

[jovial burrow]

i have been at it for a week now. and I think it really depends on you. Its about how much info you can learn, retain and practise ig

[jolly aspen]

im curious about this too, I seems it is only for current or prospective business owners

[jovial burrow]

really? i thought we can form a team here and compete

[jolly aspen]

try to register and let me know how it goes

[jovial burrow]

i am looking for a team, wanna team up?

[jolly aspen]

sure

[mortal plume]

That is why I want to know too

[jolly aspen]

i would first try to find where you can register without having a business account

[jovial burrow]

wait lemme see if that's possible

[arctic token]

You're going to find out that there's plenty of Free rooms also in the Paid modules. There's just not all listed in the page your looking at.

[jovial burrow]

i think its possible! yes but for some reason i am being shown in a team. Why though?

HELP: can anyone explain how can we team up and compete for this challenge?

[mortal plume]

This has disqualified me

[jolly aspen]

might have to wait for tomorrow when staff starts to wake up again. its pretty late in UK right now

I have an email I can use, and I can create more. But I dont think I want to buy a business premium account just for the event just yet

ill wait until the staff is awake to get more clarifying questions on the event

[jovial burrow]

well i think my edu account will fit in for this rule. Lets wait for staff clarification

[jolly aspen]

that was another question I had as well

[jovial burrow]

🤣 yep if all goes well. Lets win this

[mortal plume]

it looks like creating a team dashboard is another option

[boreal scarab]

[eternal timber]

Finally got my meds

[devout palm]

What meds

[eternal timber]

Antidepressants

[worthy sleet]

wow i dont get banned cool

[eternal timber]

@sick lance

@mossy river

[clear jackal]

?

[eternal timber]

Dude above me said the n word and deleted it

[clear jackal]

Gotcha, thanks

[mossy river]

I deleted it 🙂

[rapid merlin]

@mossy river was so fast on the draw, it's like Red Dead Redemption 3 maxed skills

[eternal timber]

Probably should add the word to the automute list

[near sapphire]

Is the soc simulator challenge available for free users

[grizzled wing]

https://tryhackme.com/r/resources/blog/soc-simulator-launch

[pseudo scroll]

[grizzled wing]

looks like it is for Business. subscribers do get access to it (not full version)

"SOC Simulator is available exclusively on TryHackMe for Business plans."

[near sapphire]

Ah ic

[grizzled wing]

i didnt know so, now we both do

[near sapphire]

Sudo whats ur fav veggie

[grizzled wing]

🥦

and brussel sprouts

have any favorite veggies?

[wheat hare]

🧅

[modest thicket]

carrots, asparagus, sweet potato

[grizzled wing]

Tor browser haha

asparagus is okay,

[near sapphire]

🥕

[near sapphire]

First time i've heard some said brussel sprouts r theyre fav veggie

[grizzled wing]

good beta carotine.

[grizzled wing]

good in oven with some bacon

[devout palm]

Good night THM

[grizzled wing]

Fortinet is in the BleepingComputer news VPN passwords leaked

[devout palm]

Even though it is almost morning

[austere venture]

Hey everyone im doing HTML - javascript
Section How WebSites Work

Im taking plenty of notes but will this path give me hands on parctice?

[grizzled wing]

yes, lots of rooms you interact with websites, part of CTFs is to look at HTML code etc

[near sapphire]

Good morning heap

[austere venture]

Okay im just worried this will be the only time this will he talked abt and have little practice sites going on because without the video i didnt have a single clue what to put in the HTML java code if that makes any sense

[eternal timber]

Are you the veggies admin

[grizzled wing]

you might want to practice and learn from https://www.w3schools.com/html/default.asp as a resource for HTML and Javascript. also Python is available there which is worthwhile getting familiar with for later on in cyber sec journey

[blazing granite]

some are root vegetables 😉 😛

[grizzled wing]

there is no root fruits

[near sapphire]

Time to learn privesc on veggies

[austere venture]

Thank you

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #63 - 135)

[blazing granite]

there is root beer, that shouldn't be called beer 😂 😛

[grizzled wing]

haha root beer is fun beverage

[eternal timber]

Good one

[mellow narwhal]

Fortinet has some or the other issue all the time

So does Ivanti, Cisco, etc etc

[eternal timber]

Fortnite

[grizzled wing]

yea, they show up often

[grizzled wing]

its amusing that the company is supposed to be secure is not

[mellow narwhal]

They have loads of services running, so that increases potential attack vectors I guess

[eternal timber]

Got heart burn from taking my antidepressant

[mellow narwhal]

I will now be posting random memes

[grizzled wing]

your 🫀 🔥 with hacking

[grizzled wing]

haha those videos say 1 hr but you have to stop and type the code so it ends up being 3 hrs

[mellow narwhal]

I've never taken a course on programming tbh

My teacher/mom taught me everything I know

I did complete the coding stuff on THM and SBT for fun though

[eternal timber]

Oh nice

I prefer learning from books

[austere venture]

So as a reference although i will take time to learn some aside for now ive been at it on THM for like 3 hrs+ now

[grizzled wing]

i just plug myself into the matrix

[mellow narwhal]

I have four books on Java, they were my mom's when she prepared for SCJP certification

They're good

[austere venture]

So when i look at that site you gave me im like holy sweet mother of god
My eyes lol

[austere venture]

Oofer why bro

[grizzled wing]

3 hours, great work

[grizzled wing]

they have dark mode on the top, toggle it on

[austere venture]

Around 6 or a little before any..

[austere venture]

Ok bet not just thatt but so much info

[woeful cedar]

Hallo frands

[grizzled wing]

1 bit of info at a time, take breaks

[woeful cedar]

Wassup

[austere venture]

Kratos?!
You learn the way of the cyber??

XD

[woeful cedar]

Yes.

Cyber God Of War

[austere venture]

😭 bro cant be stopped xD

[woeful cedar]

No.

[grizzled wing]

you can be stopped, you are not a 0xLegend yet

[woeful cedar]

Fuck

But alright

[eternal timber]

You seem to have a cool mom

[woeful cedar]

@eternal timber I did a PR yesterday
100 KGs deadlift

[eternal timber]

Is the spoon bending or are you

[eternal timber]

Awesome job

[eternal timber]

Duty

[grizzled wing]

i bend around the spoon

[austere venture]

Oxlegend?
Ox15 ETERNAL

[viral crest]

Wtf there is another kratos ??????

[austere venture]

Rn im 0x4 seeker

[woeful cedar]

I want that Kratos physique irl.

[eternal timber]

Fairly popular character

[grizzled wing]

have seen double usernames lately

[austere venture]

Wtf

Lmfaooo Gold 🤣🤣

[eternal timber]

The matrix is glitching

[grizzled wing]

there are 2 NO ONE usernames

[boreal scarab]

https://open.spotify.com/track/48lxT5qJF0yYyf2z4wB4xW

[eternal timber]

R squared and altered R squared

[eternal timber]

https://tenor.com/view/raccoon-dance-rave-dancing-pedro-gif-12980208777396115333

[viral crest]

No confusion,
I am all caps
🙃

[boreal scarab]

https://tenor.com/view/raccoon-rave-dance-gif-15389662957248741331

[viral crest]

I'm gonna to log in with my Mr.bean account
🤣

@woeful cedar good luck with that

[woeful cedar]

Thank you.

[twin ridge]

Gave +1 Rep to @viral crest (current: #1049 - 4)

[austere venture]

Just got done with how websites work now im on putting it all together ..

Lets do this

[viral crest]

@austere venture web sites don't work, they are broken.

By the time they are repaired, you will be broken.

[austere venture]

That coming from kratos sounds scareewee

XD

[viral crest]

Your enthusiasm for computer science is great, but it's not from one day to the next.
Computer Science is a very long journey, with sleepless nights, and lots of alcohol.

At least it has been for me.

[austere venture]

I guess instead of alc is weed/vape but i night stop that

Yeah ive watched alot of videos of the reality of trying to find a job in CS Typical american corp shiz but i need a skill period so s
This is one of the cheapest ways to learn something for now.. although i do worry alot i just have to keep working ..

[humble garnet]

HI EVERYBODY , i start a vmware confug for kali linux to hack my own windos 11 notebook

[blazing granite]

what is a confug?

[austere venture]

Configuration i assume

Did anybody need help with the quiz as well??

[blazing granite]

which quiz

[blazing granite]

https://tenor.com/view/joke-dumb-you-gif-8906255

[austere venture]

Putting it all together its in the pre secuirty path

[austere venture]

XD

[blazing granite]

if you need help with a room you should post in#room-help

[austere venture]

Nah nah i dont need help im jus shitting here like of thm didnt have a lil walthrough video id be stuck like crazy and this quiz.. jus oof
If that makes any sense

[slim tapir]

Sup guys

[austere venture]

Sup

[slim tapir]

How we doin tonight?

[modest thicket]

Blackpilled waiting for AI takeover. Sitting here trying to get these bowels to move..

[austere venture]

Im ok for the most part
Wby

[slim tapir]

Wild

[slim tapir]

Well, let's just say I'm having a hard time trying to dump hashes in a win server 2003

There's no better way to kickoff your week

[jolly aspen]

Just two folks struggling to dump

[blazing granite]

https://tenor.com/view/bri-rimshot-vixen_xo-streamer-badumtss-gif-20278770

[slim tapir]

Bro theres just no way I cant execute shit with a non-interactive shell in windows

[near sapphire]

do u guys use tmux or terminator

[civic oak]

sound:0:7

[jolly aspen]

t-3000

[modest thicket]

Make it happen, soldier. You got this. 🫡

[eternal timber]

https://tenor.com/view/terminator-terminator-robot-looking-flex-cool-robot-gif-16625083

[mossy river]

You can respond with the soundboard now 😭

[austere venture]

Sorry for the ignorance what is that??

[civic oak]

Yeah. 😂 I got the beta for it today.

[near sapphire]

wtf is this new?

[civic oak]

Think so, at least it is for me.

[mossy river]

They better add a permission for it 🙏

[jolly aspen]

@mossy river i have a question about the SOC announcement, are you the person to ask?

[mossy river]

I can find out- what's your question?

[near sapphire]

aww i dont hv it

[jolly aspen]

It seems it is for business accounts only, is that correct? Would student emails classify for the “non Gmail” etc generic emails.

Lastly, if it is for business members, does it require a paid subscription to participate in the event

[opaque flax]

did Jabbas color change?

[humble garnet]

igot a csdcard 1tb and if i change my cqard od=f notebook youps read file permission denied

[mossy river]

Business users are users with a subscription to our business plan https://tryhackme.com/business

[opaque flax]

nope it didnt its my monitor

[mossy river]

I believe it is only for business users, yes

[humble garnet]

one idea

[mossy river]

Not yet 😊

[opaque flax]

is a promotion for jabba in the cards? 👀

[humble garnet]

its a phillips 1tb sdxc card

[eternal timber]

What’s above an admin

[mossy river]

I'm the highest you can get in the Discord server 😆
I am planning on adding a new role so that users know what my role is at TryHackMe

[opaque flax]

i dont even know whaat your role is!

what is it? community manager?

[mossy river]

Yes:)

[eternal timber]

Is Sec+ a certification role

[opaque flax]

it is!

[mossy river]

I'm hoping to properly define my role as I get a lot of messages of users thinking I'm a volunteer or don't manage the community

[opaque flax]

it is because i am certified in positive security

[opaque flax]

fair. your thm staff role is hidden when i look over it

[jolly aspen]

I did some poking and it seems university email works. I guess my university participates

[mossy river]

That is actually a really good point

https://tenor.com/view/spongebob-patrick-star-noted-notes-gif-26231953

[opaque flax]

that could be my vertical monitor tho

[jolly aspen]

Nop. Same for me

[eternal timber]

Pretty sure thats for the student deal

[jolly aspen]

Nop

I’m on a team

[opaque flax]

name your role "no seriously I actually work here"

[eternal timber]

A team?

[clear jackal]

I was up until 0400 Jabba

[clever stratus]

Did THM remove referrals?

[clear jackal]

I have no idea why

[opaque flax]

were you hacking?

heccing?

[clear jackal]

No, I was trying to sleep

[clever stratus]

cant find a referral page to make one thats why

[mossy river]

[mossy river]

Yes

[opaque flax]

i should sleep but watching twitch

[clear jackal]

Yeah, go to sleep

But while you are awake, go look at lounge

[mossy river]

I'm not going to fall asleep anytime soon. I'm pretty much sleeping whenever I get a chance, my sleep schedule is non existent.

Oh right! I saw your message but I got sidetracked 😆 Apologies

[opaque flax]

i miss working nights lol

[clear jackal]

No worries lol, I figured you may enjoy it

[blazing granite]

I'll never miss that in my life 😂

[opaque flax]

i loved it

[upper knoll]

yo jabba

we both awake

[mossy river]

Every year I think "Wow, I really had a bad routine, I will never do that again".
I somehow manage to top that every year.

I don't even work nights and I hate it

Dee, why are you up 😭

[upper knoll]

i wasnt tired so i was like

i wont lie down

so

here we are

xd

im suppose to be up at 7:30 tomorrow

[rapid merlin]

I work late at night when I work from home 😄

[upper knoll]

im half between powering through and sleeping for a few hours

[rapid merlin]

low anxiety hour is 1AM

[cold sparrow]

I want

https://support.discord.com/hc/en-us/articles/27924658426135-Soundmoji-FAQ

[austere venture]

I hate small mistakes lol

[mossy river]

sound:0:5 imagine not having

[cold sparrow]

Awesome!!!

[rugged kayak]

jabba will there be new colors for new ranks

i see they are all still green

[mossy river]

I said this and I'm screwed 😂

[upper knoll]

seems like it at this point xd

[near sapphire]

who was the discord admin bfr jabba

[austere venture]

Ugh had to restart machine gotta take it slower imagine trying to learn hacking on a serious time limit

[mossy river]

Yessir, we're currently working to make sure the colours are the best fit for the new levels 😎

I filled them all with 0xD Green because grey roles fill the next highest role colour in the hierarchy

[eternal timber]

Before time, there was Jabba

[mossy river]

We had lorestil before me:)

[cold sparrow]

I just noticed that I am no longer a god

[rugged kayak]

nice, thanks 😁

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1445)

[cold sparrow]

https://tenor.com/view/disney-moana-maui-demigod-gif-15810600

[near sapphire]

got demoted from "god"

[cold sparrow]

I will make you all believers. Bwahahahaha

[blazing granite]

not me 😂

[near sapphire]

why did they quit? stop?..being admin

[sinful moon]

Nice, according to Wikipedia’s year in review:

I read 3,275 articles, I read the most on Wednesday, I saved 1,052 articles to my reading lists, I edited Wikipedia 9 times, and articles I’ve edited have been viewed 83,000 times within the past two months

[opaque flax]

youre famous!

[mossy river]

They moved on in their career- they were a community manager.

"Admin" is more a description of the role's permissions than it is the responsibilities within the Discord server

[teal charm]

Can ask why certificate of completion stating duration?

[sinful moon]

lol not quite, I’m sure those are rookie stats. Plus most of my edits are minor grammatical and “encyclopedic tone” edits

[opaque flax]

one day youll have dj mobley levels of recognition

[sinful moon]

lol, nah I’ll probably keep on plugging like this. It’s just whatever I come across while reading and thinking “that doesn’t sound/look right”

I’m just addicted to learning about anything and everything though, so I’m not too suprised by my 3,275 read stat though

[blazing granite]

she is 😂

[sinful moon]

lol hush

[opaque flax]

me too i have to read some ebooks i recently got

[sinful moon]

9 edits in a year is nothing. I put the most effort into “Llamasoft: The Jeff Minter Story” since I really enjoyed that game compliation/documentary

[sinful moon]

Nice, I typically go on book reading binges on and off. But I’m kind of like that with most media. Wikipedia is just a bit of a constant for me though

[near sapphire]

can i unenroll from a path?

[sinful moon]

Just start another path, but your progress will not be reset

[mossy river]

You can't, you need to join a new one

[opaque flax]

for sure. idk i do some hacking, i do an academy module, etc im like i dont feel like reading

[near sapphire]

refering to this question, so will that affect the duration?

[sinful moon]

mhmm, as of late I’ve just been on a gaming and “watching all of Computer Chronicles (1983-2003 informational PBS show)” binge

[teal charm]

Wdym?

[blazing granite]

you can check in any time but you can never leave 😂 😛

[sinful moon]

I’m big into retro computing and history and it’s fun to see what’s up with boots on the ground in computing in 1986 where I’m at now

[opaque flax]

im playing video games and watching a streamer right now

[sinful moon]

nice nice, yeah I generally can’t multitask like that, with a couple exceptions

[blazing granite]

here comes the photo 😂

[opaque flax]

cupcake?

[sinful moon]

for media, I’m pretty much all or nothing. It gets my undivided attention or I don’t feel like I’m appreciating it. But obviously chill music in the background and etc are exceptions

[opaque flax]

i like background noise

[blazing granite]

the photo of Ellie PC 😂

[sinful moon]

I just can’t use anything with information or too much talking as background noise but yeah I get you

Hm? Also I generally shorten my name to Ellie

[opaque flax]

yeah if i need to concentrate then i will

[wraith frigate]

Anyone available for a job?

[sinful moon]

you all lucked out, I won’t spam it again

[mossy river]

You need to be verified before you can post jobs here:)

[wraith frigate]

oh, sry

how i can be verified?

[mossy river]

Drop me a DM please

[opaque flax]

https://tenor.com/view/you-son-of-a-bitch-im-in-son-of-a-bitch-im-in-gif-19826994 this gif is all i can think of

[near sapphire]

I meant since the certificate of completion has the duration elemen, if I change path, will that affect the "duration" of my previous path

[blazing granite]

that's some salty language young man 😉 😛

[wraith frigate]

done

[teal charm]

Hmm, I dont know lol. I am new to THM

You should know better than me hahaha

I just completed Pre-Security path lmao

[near sapphire]

I'm a free user so u should know more on that end lol

[eternal timber]

Pretty impressive to get to level 8 as a free user

[near sapphire]

aoc carried lol

[eternal timber]

https://tenor.com/view/luffy-luffy-gear-5-luffy-gear-5-white-gear-5-joyboy-gif-11074505862450082218

[teal charm]

I like this. Havent watch one piece so long

[eternal timber]

I dropped it at egghead too

[rugged kayak]

i got to legend i think before i got premium

[eternal timber]

Awesome

[rugged kayak]

you can get really far honestly

i mean there are 500 free rooms

[near sapphire]

nice bio btw, agree

[rugged kayak]

shhhh

[eternal timber]

I love Python

[austere venture]

Welp ive got done with part1 of linux.. still worried but thats because i have no practice now this will be interesting figureing out how to practice 🤔

[opaque flax]

Make a vm with Ubuntu on it

Practice

[austere venture]

I have that

[opaque flax]

The. You got practice

[eternal timber]

Why Ubuntu

[austere venture]

But even then ... i just goo make a list of the commands using the notes i took..

[opaque flax]

Okay so proxmox and spin up vms

Or get fedora

Or use Kali

Go do a ctf or some more rooms

[austere venture]

I have ubuntu

[opaque flax]

It’s all Linux

[rugged kayak]

fedora is goated

[opaque flax]

M’linux

[austere venture]

M... ctf where can i find that

[opaque flax]

Filter rooms by ctf

[teal charm]

After I have done pre security path, what ctf can I play?

[rugged kayak]

@austere venture

[rugged kayak]

try any easy room

[opaque flax]

You can try any easy ctf

Might be better go for pentesting fundamentals tho

[austere venture]

Okay..... racked with nerves because i remeber nothing..... not good.

[teal charm]

Thanks

[opaque flax]

You’ll remember the more you use it

[rugged kayak]

what are you doing, linux fundamentals?

[austere venture]

I just got done with part 1 of it
John said not to do part 2 until im familar with the commands we talked abt in part 1

[opaque flax]

Yes that’s true you should be familiar but you will use Linux the entire time you’re on tryhackme

Soon it’ll be like second nature

[cloud quiver]

Maybe it is too early for CTFs for now . I would recommend you to finish Cyber 101 first and then to start with some guided CTFs 🙂

[rugged kayak]

ls, cat, cd and maybe find

those you will use all the time

just dont overthink it

[austere venture]

Yes exactly
Like rn the machine is active for cheese ctf and i open the terminal and did ls

[austere venture]

My arch nemisis lol

[teal charm]

Guided CTF? Where can I look for this?

[rugged kayak]

dont try to memorize commands, just use the system normally

it will all become natural very quickly

[cloud quiver]

This one for example + you have a video walkthrough 🙂
https://tryhackme.com/r/room/basicpentestingjt

[austere venture]

Thank yall for the encourgement..

May someone give me a hint tho... 😅 or would that be in room help?

[opaque flax]

Just as an fyi we all routinely google commands

[rugged kayak]

what do you need help with

[rugged kayak]

yea google will be your best friend

[teal charm]

Ah ok thanks. Although I dont know how to differentiate it😂

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #2 - 2334)

[rugged kayak]

you dont need to memorize em all

or you can make yourself a cheat sheet

[cloud quiver]

It will guide you step by step how to exploit the machine 🙂 . Great way for beginning 🙂

[tardy vector]

Sup dudes, new here enjoying learning on the site. Have a question about VPNs. Whats the best VPN to get? Which one do hackers recommend?

[opaque flax]

I routinely google simple crap

[teal charm]

Ok noted with thanks ya

[opaque flax]

I guess what are you trying to do

Are you wanting to deploy a vpn or connect to one

[austere venture]

Cheese ctf
The first thing i do
I assume open terminal

[teal charm]

Just use openvpn?

[opaque flax]

If he wants to deploy a VPN server sure but

If he wants to connect to a vpn to route all his traffic

That’s a different question

Which is why you need to ask for a use case

[eternal timber]

I heard proton was good

Or read rather

[split compass]

Mulvad and Proton have the best reputation/proven track record, but a VPN will not protect you from yourself.

[opaque flax]

Nor will hiding your ip stop you from getting tracked

[tardy vector]

I mean to connect to one to be private

[opaque flax]

Well rule 1. If you aren’t paying for it you’re the product

[mossy river]

Unless your setup your own, your data will never be private.

[opaque flax]

So it won’t be private

[rugged kayak]

vpn is not a security product and it will never be

[opaque flax]

And 2. Yeah above

[tardy vector]

lol there's so much info incoming

[opaque flax]

And 3. Hiding your ip won’t stop others from tracking you

[tardy vector]

I'm not sure I'm at setting up my own level but the goal is to get there

Appreciate all the responses

[opaque flax]

Setting up your own is easy. But it still won’t help with privacy necessarily

[cloud quiver]

This one is also great 🙂
https://tryhackme.com/r/room/vulnversity

[mossy river]

Why do you think so?

[opaque flax]

Let me change my statement

[cloud quiver]

But as I said I would recommend you to finish Cyber 101 first 🙂

[opaque flax]

It will help with privacy on public networks

[tardy vector]

I'm super noob.. just not satisfied with my lot in life and computers have always been fascinating to me. I love the journey so far

[opaque flax]

It will not help with privacy for who is sending the traffic

For example on your home network. It’ll be obvious it’s you…traffic is coming from your home network

[teal charm]

Ok will do! Thanks for the guide along my cyber journey

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #2 - 2335)

[opaque flax]

On a vps?

Your payment details are usually there

And your account attached to your instances

I guess I’m also making assumptions about what it’s being used for too

Plus fingerprinting

The other ways of tracking someone

[tardy vector]

I just don't like the idea of them knowing what I'm looking at

[opaque flax]

It’ll help on public networks and your isp

[rugged kayak]

also whole "encryption" seems kinda unnecessary since https exists

[opaque flax]

But like Google and msft will know it’s you

[mossy river]

If you're using a service for the VPS, like AWS, your details will only be public to AWS. The VPS will still serve it's purpose.
And, if you really know what you're doing, these won't be worries.

[opaque flax]

Yeah it just doesn’t hide you as well as these vpn services advertise

[mossy river]

It still protects your traffic. Especially if you're using free or public WiFi.
And, if you have reason to suspect someone is on your home network, the encryption will stop them from viewing the traffic.

[rugged kayak]

its either your isp or some third party company

[opaque flax]

Yeah which is why I wanted to change my statement

[tardy vector]

I don't really want either to know what I'm into to be honest but it is what it is

[rugged kayak]

i mean yea but since 99% percent of all traffic is https what can be seen

[mossy river]

That's only http traffic

[opaque flax]

I just watched a video and red note is sending a ton of traffic over http 😂

[rugged kayak]

what are they doing again with rednote isnt tiktok back

[opaque flax]

But yeah the biggest benefit is protecting yourself on public networks

[opaque flax]

Idk it was just a matt brown video

[rugged kayak]

what about my own hotspot

no one there but me

[opaque flax]

He also MITMd himself and was able to decrypt the encrypted traffic easily

I just don’t like how vpn companies just tout this whole anonymity thing

[mossy river]

You have the right to be concerned about your privacy, but I wouldn't lose your head over it.
Generally you will be fine to use your home network. If you're in public, use a VPN service. Nord is quite popular and I've seen people in Cyber use it. Even though I don't respect their practices, they seem good enough for general use.

[rugged kayak]

throwing buzzwords at people that are not familiar with the topic

[opaque flax]

I’ve heard good things about Mullvad

Their no logs claim has stood up

[rugged kayak]

they were raided several times

common sweden w

[opaque flax]

You can pay anonymously too

[rugged kayak]

yea with crypto

no info stored but some random number that is your account id

[opaque flax]

You can also send them cash afaik lol

[eternal timber]

Didn’t study much today

At least I got my meds so I’ll be more productive after this

[karmic hemlock]

@cloud quiver Thank you for showing me vulnversity. I was looking for ways to apply my knowledge and getting frustrated on some of the CTFs because I realized I've never actually practiced enumerating and breaching a machine before

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #2 - 2336)

[cloud quiver]

Yeah , guided CTFs are a great way to start imo especially because they're somewhere realistic 🙂 .

[graceful mauve]

Do you think programming a ftp server is good for a beginner project in C++

[cloud quiver]

Try to ask these guys #programming 🙂

[graceful mauve]

Ty bro

[tardy vector]

What exactly about their practices are controversial. So I currently use nord. Like I said I'm very new in this realm. In other content I've watched people talk about VPN company's having shady business practices but don't really go further into that nor which companies had them which is essentially why I asked the question I did. Kinda just wanted to know if I chose well or if I should switch and why or why not. I got quite a bit of responses that will have me deeper in contemplation now lol and I'll be trying to find content more in depth on it

[mossy river]

Nord's advertisements target people who don't understand what VPNs do.

[tardy vector]

Much like me 😂 guess it worked out for them

[jolly aspen]

Especially like the ones that imply they protect you from malware

[austere venture]

Goofy ass smile lol

[hoary tiger]

guys when u do a room or ctf and u have login page and nothing .js or something in source code what next should do ?

[mellow gull]

dirbuster

Or Ferox or Go or whatever, take your pick

[solar plank]

Xd

Let me fix that for you!!

[pine stratus]

vpn protects against mitm

[opaque flax]

Ffuf!

[gritty mural]

i got a question about a weird thing in the registry regarding persistence is this chat the correct place to ask?

[split compass]

While talking about VPNs, I guess I'd be remiss not to shill the anti-censorship platform I worked with at psiphon.

Something something, bias disclaimer.

[gritty mural]

yoo thats sick my entire highschool was using psiphon to play games and watch wild stuff in class

you did a good thing my man

[knotty cargo]

Oh no...

Bro its 9c here im already freezing

[vagrant geyser]

Heyo

[woeful cedar]

Is it that bad?

[mossy river]

Yes, it's fear mongering.

[woeful cedar]

Are there any VPNs which are actually good?

Is proton VPN good?

[mossy river]

Most VPNs are good and serve their purpose, I just don't believe in deceptive advertisement

[woeful cedar]

Fair enough

Is it possible to bypass a VPN and find the original IP address of the guy whose using the VPN?

[mossy river]

Q. Is it possible to find the original IP address of someone using a VPN?
A. Yes

That doesn't mean you can take just an IP address on it's own and find a user who made that request.
You would need access to the logs or server to see what was being routed to where from whom.

[woeful cedar]

I see

[mossy river]

Meaning? That statement is very vague. 😆

Do you mean it's possible to make VPN files that transfer your data to other servers? VPN files that can be used to execute malware?
Give a man a fish, teach a man to fish. What information would one need to look for when inspecting a VPN file?

[pliant onyx]

The only OpenVPN file I use is of THM

So if anything happens to my system, I know who to point fingers at

[woeful cedar]

😂😂

[mossy river]

You are well within your rights to be wary and I implore you as cyber security learners to check everything before you run it

[pliant onyx]

"Will be sending each message on Discord like this".encode()

[sick lance]

It's my kittens first week in heat.

Send help.

But not male cats.

Only help.

[pliant onyx]

Would pets and a swimming pool suffice?

[naive violet]

@pastel scarab Please don't send unsolicited friend requests, it's against the tryhackme discord rules

[pastel scarab]

Got it, sorry

[sick lance]

No, as she hates water.

[knotty cargo]

My knee is hurting and i cant do morning training daym

How im gonna learn hacking without proper warm up

[pliant onyx]

Tough crowd, will have to resort to treats

[forest fractal]

damnm exiftool is not enough for the things Im testing, I told my friend to send me a picture and Ill try to investigate it

any suggestions for other tools

[thin hound]

What are you trying to achieve

[forest fractal]

infomation was not enough huhu didnt even get the date when it was taken and the model of the phone HAHAHA

[thin hound]

Well if exiftool didn’t get the metadata, then it’s probably not there

Most social media strips it

[mellow gull]

"Not enough"
Exiftool provides all of the metadata in image files, period.

If you didn't get it, it's not in the image.

[forest fractal]

I want to know the location of the picture iy was taken, model of the phone and date the picture was taken hehe

[cloud quiver]

Metadata may be removed 🙂

[forest fractal]

ahhhhhh hmmm is there a way for my friend to send it with the raw file?

@cloud quiver

[cloud quiver]

Wdym ?

[forest fractal]

send the raw image without sending it through any social media

[mellow gull]

Mmmmmm

@mossy river @sick lance

[forest fractal]

google drive works?

Im actually trying to improve my DFIR skills with the help of my friend

thats why I told him to send me a random picture

[whole gazelle]

fly fly little butterfly!!!

[mossy river]

You shouldn’t be trying to perform any form of hacking on your friend if you don’t have explicit, written permission @forest fractal

[forest fractal]

I have dont worry

hes beside me while Im doing it HAHAHAH

we also dont have a USB here HAHAHA

[mossy river]

Okay, get it in a signed contract and send it to my DMs and I’ll happily help you

Otherwise, I’m going to ask that you refrain from asking here.

[forest fractal]

yeeey thanks, is a convo from reddit enough?

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1446)

[forest fractal]

Ill pm you details hehe

[mossy river]

That is not a written, signed contracted 😆

[forest fractal]

oh nooo

than wait ill ask him

[mellow gull]

Thanks Jabba.

[graceful mauve]

Which star wars should I watch?

[pliant onyx]

yes

[forest fractal]

@mossy river thanks bro for giving me a warning, I appreciate it

[sick lance]

Episodes 4-6 then 1-3.

[graceful mauve]

Perfect

[mossy river]

Thank you for the ping

[twin ridge]

Gave +1 Rep to @mellow gull (current: #81 - 96)

[mellow gull]

The entire series as intended, including the animated Clone Wars cartoon

[graceful mauve]

As long as I get to swe java the hut in happy

[mellow gull]

Without breaks, except for water (stay hydrated)

[sick lance]

Pretty helpful

RoboCop is fixed 😄

[mellow gull]

No more shenanigans, what a shame

[graceful mauve]

Is jabba the guy a discord admin?

[mossy river]

I am the community manager 👋

[mellow gull]

Jabba Bravo is a top tier community manager/admin

[graceful mauve]

+rep

[whole gazelle]

it's apple time 🍎 🍎 🪀 🪀 !!!!!

[forest fractal]

does modern phones also hide the metadata from pictures?

[graceful mauve]

Anyone that knows programming, an answer in #programming would be most appreciated if you a g

[graceful mauve]

I think iOS is notorious for keeping metadata in their images

[mossy river]

I'm not comfortable with this topic continuing given your previous questions 😓

[forest fractal]

ohh sorry

[graceful mauve]

Professional response

[forest fractal]

Ill change topic hehehe

[forest fractal]

sorry brother

[graceful mauve]

What did he say tho lol

[graceful mauve]

What are you talking about

[forest fractal]

nope, I wont conitnue it hehe

[graceful mauve]

Scooby doo

[thin hound]

Is retrieving metadata from an image even considered hacking?

[graceful mauve]

It's considered OSINT at a technical level

[pliant onyx]

exiftool <image>

https://tenor.com/view/hacker-pc-meme-matrix-codes-gif-11310648121341593764

[graceful mauve]

^

Exiftool ain't bad fr

Custom made tools are better

Hard to do tho

[pine stratus]

i want to dm concerning something weird im facing with discord

[mossy river]

Go for it

[sage field]

Hi guys bit off topic. I have just set up a virtual host for reverse engineering using the flare vm suite. Sort of stuvk on where to start. Anyone here have advice on where to start? Like language to look into or anything like that? (Even certs for reading on my off time on the service desk!)

[rapid merlin]

Morning, hope everyone is doing well

[sick lance]

Are you reverse engineerinc Malware?

[slow cloud]

mornin

[solar plank]

Hey!

[chilly veldt]

sup sup

[solar plank]

How you're doing??

[chilly veldt]

tired, working from home today luckily

[solar plank]

Ohh, same here :D

[slow cloud]

i wish

[whole gazelle]

mornin!!!!!