general

[rapid merlin]

fun 🙂

[blazing granite]

no way!!!! I'm ok with my height, 2 m is too tall

[mossy river]

Just the first sentence sounds very accusative, I wouldn't want someone to be upset at you because of it 😊
Your safety is my priority

[chilly veldt]

The place is already booked

[eternal timber]

Tragic

[silver sky]

Not really, my best mate is 6,9

[eternal timber]

Actwally it’s 196 cm ☝️

[chilly veldt]

Nice

[drowsy dust]

Totally understand, thank you for pointing that out. I appreciate your care

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1449)

[karmic hemlock]

6'5 is above top 1%

6'9 is... ginormous

[blazing granite]

4 cm doesn't make a different 😛 still too tall

[eternal timber]

He must chuckle whenever someone asks his height

[silver sky]

He's in the yellow hoodie

[chilly veldt]

Indeed, 4 gourmet courses, with wine pairings, just need to plan something to do before the dinner

[drowsy dust]

Who are these two fine men ?

[silver sky]

If he had a £1 for every time someone said it, we'd be rich

[karmic hemlock]

Id probably be as tall as the white logo on his sweater 💀

[eternal timber]

I’m only asking for a 6 cm increase

[drowsy dust]

BRO where’s his pants?

[silver sky]

That's my best mate on the left, me on the right

[blazing granite]

that's what she said 😉 😛

[chilly veldt]

It's the same when people don't think my mates last name is hamburger

[eternal timber]

I was just gonna say “I’m only asking for 6 cm” but I figured someone would say this lol

[chilly veldt]

The amount of times he's gotten a free hamburger at McDonald's is astronomical

[karmic hemlock]

That sounds cool af i need a legal name change

Bulking hack 101

[silver sky]

Jesus Duo you are persistant

[eternal timber]

They call me The Incredible Bulk

[chilly veldt]

He was born with it

[karmic hemlock]

I got to A2 in Spanish and then quit 😔

[eternal timber]

I somehow never got into learning Spanish

[blazing granite]

it's 2 jesus, or stereo jesus 😉 😛

[blazing granite]

because duo lingo sucks 😛

[drowsy dust]

Bro I love Duolingo

[karmic hemlock]

What do you recommend for language learning Mr polyglot

[eternal timber]

I just watch media in the language I want to learn. That seems to work

[mossy river]

Spent 12 hours training a machine learning model only to find out the data set was loaded incorrectly

[silver sky]

Tbf I am watching irish tv right now

[eternal timber]

Using sklearn?

[mossy river]

Mhm

[eternal timber]

It’s a pretty neat library

[blazing granite]

learn the language the old way, or go to where speak that language and do immersion

[mossy river]

I'm glad I noticed that the data was loaded incorrectly but it is so tedious. I can't wait to never touch this again

[drowsy dust]

Noun Town is fun for VR language learning. You can pick up different items and learn what they are in that language

[eternal timber]

Was the depend variable in the left side or smth lol?

[blazing granite]

kind of immersion, putting your phone and PC in that language helps too

[mossy river]

I might try this, thank you!

[twin ridge]

Gave +1 Rep to @drowsy dust (current: #350 - 17)

[drowsy dust]

No problem :)

[eternal timber]

I just use English for all my devices even though my native language is technically not English

[mossy river]

I really want to learn European Portuguese, hopefully it has it

[karmic hemlock]

Sometimes I worry about my ability to get a job in this economy, but then I watch aizens0ul brainrot videos on Reels and the people on there make me feel better about myself

[eternal timber]

On a serious note, getting a job is extremely difficult now

[mossy river]

pandas thought the first column was an index

[eternal timber]

And it’ll probably just keep getting worse

[karmic hemlock]

Yep, 75 applications out for internships and waiting

[blazing granite]

I use english too, because spanish sucks 😛

I had it in italian and hebrew too

[eternal timber]

Do you use .iloc[:, :-1].values?

[eternal timber]

I use Chinese sometimes

[rapid merlin]

what if that traditional method of getting work is no longer as effective as it once was?

[drowsy dust]

Unfortunately it doesn’t

[eternal timber]

That’s crazy

[mossy river]

No, I know why it was doing it but I just didn't realise until after I had trained and evaluated the model 😊

[eternal timber]

Are we considering LinkedIn to be a traditional means?

[mossy river]

https://tenor.com/view/crying-emoji-gif-21922016

[eternal timber]

Oh I see. Glad you figured it out

[silver sky]

Ooooh Ukrainian

[mossy river]

Most language learning resources use Brazillian portuguese or they take the mortgage on my house in the form of a subscription. It's very upsetting.

[eternal timber]

Anyone else forget to type out words cause they already said them in their head or do I have another mental illness?

[blazing granite]

I know only a few phrases

[rapid merlin]

I have never had a hire related to linkedin, although I've seen that company have a data leak in the past

[drowsy dust]

Do you have meta quest? I’ll buy it for you. I have too much free money on that platform lol

[silver sky]

I don't

[drowsy dust]

Rip

[silver sky]

But it's cool to see Ukrainian

[eternal timber]

Honestly don’t care much. It’s a good way to share yourself with employers

[rapid merlin]

you do you 🙂

[drowsy dust]

Yeah! It is

[eternal timber]

Not many people bother to learn Chinese so that’s pretty cool

[eternal timber]

I’d rather do-

[silver sky]

I know a few, including you are under arrest

[drowsy dust]

Yes

[eternal timber]

What happened in china

[silver sky]

Only because we used to have loads of Chinese students

[drowsy dust]

Their language is crazy complex

[blazing granite]

handy when you're in Shanghai 🙂

[eternal timber]

I’ve never been to china

Been wanting to visit

[chilly veldt]

I need to find some fancy clothes to wear

[drowsy dust]

You can go and wave to North Korea from the shore lol

They have a bridge to NK

[eternal timber]

Wear a fedora. That’ll make any outfit fancy

[silver sky]

Hot off the press tip, don't say things like "What happened in china" when you go

[eternal timber]

What are the chances I get shot

[silver sky]

Yes but you can't cross it

[blazing granite]

been in a few places, China, Taiwan, Japan, the good Korea 😂 , etc

[drowsy dust]

Yes and shout Taiwan is a free and independent country lol

I mean don’t shout

[drowsy dust]

They took the fun out of that :(

[drowsy dust]

Yes 100%

[eternal timber]

I’ll go around yelling “what happened at Tiananmen Square in 1989”

[drowsy dust]

NOO

🫣😂

I don’t know if I’ll go to china bruh

[silver sky]

Well you can't save everyone

[drowsy dust]

They train their kinder gardeners military techniques

[celest dirge]

Japanese? What platform?

[drowsy dust]

VR Meta quest 2, prob 3 too idk

[pliant cairn]

Speaking of china. I have been playing sifu recently and its so good. Music is so good too

[celest dirge]

Nvm

[drowsy dust]

They have it on steam

[celest dirge]

Same name?

[drowsy dust]

Yup

[eternal timber]

I played that game for like a week then deleted it for space

[drowsy dust]

https://store.steampowered.com/app/1643100/Noun_Town_VR_Language_Learning/

Steam

Noun Town: VR Language Learning

🏆 From beginner to winner - start from scratch and build up 1,000+ words and phrases in English, Japanese, German, Korean, Chinese (Mandarin), Spanish (MX), Spanish (ES), French, Italian, Ukrainian, Russian, Greek and Egyptian Arabic.🎮 No grinding, just gaming - learn through playing, in a world full of exciting mini-games and interactive lesson...

Price

$19.99

Recommendations

134

▶ Play video

[pliant cairn]

I have not even crossed the junkies

[eternal timber]

I’m eepy

[celest dirge]

Thanks

[twin ridge]

Gave +1 Rep to @drowsy dust (current: #331 - 18)

[eternal timber]

Do I just sleep or gulp down my mug of coffee

[silver sky]

Right time to get on the road. Have fun all

[drowsy dust]

You too, enjoy

[drowsy dust]

Sleep

[silver sky]

Driving around Baghdad, loads of fun

[drowsy dust]

Drive safe 😎

[eternal timber]

Good idea

[silver sky]

I'm not driving thank god

[drowsy dust]

Even better

[silver sky]

I just sit in the boot

[drowsy dust]

Passenger princess

[silver sky]

Boot prince

[eternal timber]

I need to do a lot of work tmw

Didn’t do much today

[drowsy dust]

You ready to get locked in?

Wake up grind sleep

All fueled by coffee

[eternal timber]

Hell yeah

[silver sky]

https://tenor.com/view/sb-gif-25758315

[drowsy dust]

Yes!

[mossy river]

-unmute 359823134494294018

[twin ridge]

🔊 Unmuted censoredhacker

[eternal timber]

About to work on logistic regression now

[drowsy dust]

Enjoy

[eternal timber]

A short foray for today but thx

[twin ridge]

Gave +1 Rep to @drowsy dust (current: #323 - 19)

[drowsy dust]

Ooo rep nom nom nom

[chilly veldt]

I need my energy drinks, I have to be security guard today

Some peeps needs to pull cables for security cams apparently, and then need to go through our basement, so I will stand guard and make sure it's actually what happens

[queen flare]

how much knowledge should i gain, or what pathways should i complete before starting with playing thm's koth or other ctfs?

[cloud quiver]

You can start with easier/guided CTFs 🙂

[queen flare]

the closest i have completed so far is "blue"

[cloud quiver]

That's great starting point. I would recommend you to check out Basic Pentesting and Vulnversity . They're guided + they have a video walkthrough if you get stuck 🙂
https://tryhackme.com/r/room/basicpentestingjt
https://tryhackme.com/r/room/vulnversity

[silver sky]

@cloud quiver your a legend 😉

[queen flare]

are these rooms part of any pathways/modules that i would encounter when doing conventional pathways, or should i search for these specifically?

[queen flare]

+1

[cloud quiver]

Well thank you for that 😄

[twin ridge]

Gave +1 Rep to @silver sky (current: #40 - 230)

[silver sky]

You do not need to do pathways to get the most out of the content

you can do seperate rooms to enhance your learning

[cloud quiver]

They're a part of Complete Beginner pathway but it is outdated by this point 🙂 . I would recommend you to finish at least Cyber101 path before trying to go with un-guided CTFs 🙂

[queen flare]

yeah, i am currently doing the cyber101 pathway

[cloud quiver]

That's a great starting point 🙂

[queen flare]

can i do the one's you linked parallely while doing the cyber101?

[silver sky]

I personally love the cyber 101 pathway

[queen flare]

since those are guided

[silver sky]

Yes!

[cloud quiver]

Yes of course 🙂

[queen flare]

that's a great idea
but i suppose i should at least learn the basics like kgb said, before venturing onto unguided pathways

[silver sky]

unguided CTFs

is what he said

[queen flare]

right

my bad

[silver sky]

There's plenty of guided or semi-guided CTFs

[cloud quiver]

You can go with guided CTFs in parallel with Cyber101 . They're a great way to practice what you've learned during the path 🙂

[eternal timber]

Health insurance dataset keeps reminding me of him

https://tenor.com/view/gigachad-luigi-smash-bros-smash-bros-ultimate-missing-gif-26523330

[cloud quiver]

The advantage of guided CTFs is that they go step-by-step process of what should you do to exploit the target , instead of just requiring you to provide flags 🙂 . Also they're much more realistic than some CTFs on THM 🙂

[silver sky]

@mossy river

[chilly veldt]

UK garage and hardstyle makes the morning better

[queen flare]

honestly, i was kinda afraid to do those ctfs, thinking that those are included in the learning path and are meant to be done only after finishing content preceeding them. but i'll take your suggestion and try doing them parallel to my learning paths

[cloud quiver]

Yeah feel free to do them now 🙂 . If you get stuck try to consult with video provided + you can reach in #room-help 😄

[silver sky]

Don't be afraid, if you do get stuck, consult videos or room help. Or stick it on hold and come back later on.

[chilly veldt]

Hmmm I might even get half an hour or more on the office speakers!

[silver sky]

There's no shame in admitting it's too hard and then coming back once you have more confidence/skills

[split compass]

OR, you can just bash your head against the wall until your brain leaks out your ears.
Whichever method you prefer 😄

I like keeping my greymatter 🙂

[sinful moon]

Random though as I’m headed to bed. Computer Chronicles (1983-2003) early on has so many episodes on burdening AI use and what they then called “Expert Systems” in the mid 80s.

While we’ve come a very very very long way in the last 40 years, it is funny, how so many of the same issues still exist

[eternal timber]

Crazy that it’s been 40 years since the 80s

(I wasn’t born then)

[sinful moon]

Mhmm indeed, me neither, but I’m not too far off

[jolly aspen]

Used this tactic many times haha

[sinful moon]

I just love that CP/M creator and co-host Gary Kildall was always skeptical about AI even back then, and I think a healthy dose of AI skepticism is indeed what we need to carry forward

[rapid merlin]

classic show

[queen flare]

thanks for the advice ❤️

[twin ridge]

Gave +1 Rep to @silver sky (current: #38 - 231)

[sinful moon]

lol at the same time he was a fanatic about optical media, even founding a very early multimedia CD-ROM publishing company. Man was a genius, too bad the industry did him dirty

[eternal timber]

“I didn’t trust AI so I built one for Americans.” Is gonna be my pitch

[queen flare]

punching the screen is a better alternative imo

[sinful moon]

If things worked out just a bit differently at that meeting with IBM, we’d be using GEM Desktop 11 right now instead lol

[queen flare]

sounds something out of the web series person of interest

[sinful moon]

Hate to say it but that was probably Elon’s pitch for his awful AI product lol

[queen flare]

i wonder if that would be better or worse

[eternal timber]

Took a sec to figure out how to read that lol

[sinful moon]

Yeah we have no real way of knowing. Concurrent DOS, DR-DOS and GEM before Apple sued them were very neat software

[whole gazelle]

have beautifull day y'all

[eternal timber]

It’s almost midnight but thx

You too

[blazing granite]

I love DR-DOS

[queen flare]

do you guys like using the attackbox or use openvpn on your own vm to do rooms?

[eternal timber]

Openvpn and my own VM back when I did rooms

[sinful moon]

I use my own VM, more accurately a Virtual Private Server hosted remotely

[whole gazelle]

openvpn makes me feel more like areal hacker

[sinful moon]

and I ssh tunnel everything I need back to my local computer

[queen flare]

interesting

[eternal timber]

https://tenor.com/view/100-gif-26246178

Fighting the urge to call people nerds when I’m a massive one myself

[sinful moon]

Mhmm, not cost effective but I do use it for personal infosec tasks more generally. and it’s like babby’s first C2

[queen flare]

true
nothing makes ya feel like a hacker than having to execute excessive and often unnecessary commands on your shell

[blazing granite]

https://tenor.com/view/hacker-air-quotes-computer-hacker-denis-denis-daily-gif-14341192

[opaque flax]

Sudo

[queen flare]

commands with long outputs that appear continuously rather than at once are preferrable for the aforementioned task

[blazing granite]

https://tenor.com/view/simpsons-nerd-gif-9743791

[sinful moon]

Feels even more wild when my local THM RDP session is ssh tunneled from my VPS which its self is OpenVPNed into THM. Feels wild interacting with a graphical remote software solution tunneled via, well, ssh

[opaque flax]

SSH port forwarding is a wild technology

[eternal timber]

When your room is so cold you just leave your bottle on the floor to cool over night

[sinful moon]

basically I just bind 3389 to 13389 and use that on my local after connecting to that ssh tunnel

[eternal timber]

Me

[queen flare]

i've had friends who videoed arduino code running on their laptop and posted it on social media saying "doing a little hacking"

[chilly veldt]

The office feels like a coffee shop now lmao

[sinful moon]

Call me paranoid, but I liked the idea of THM never directly touching my internal network via the VPN

[rapid merlin]

i've seen alot of people using arduinos for colorbots to cheat on games lately

[eternal timber]

Did you guys know that Elon’s father married his adopted daughter

He adopted her when she was 3 btw

[queen flare]

how does that work

[sinful moon]

He’s also an immigrant lol, but shh, probably best not to get into that

[sinful moon]

Also not something we want to get into much, but Mouse and Keyboard emulation while taking a visual input

[rapid merlin]

Not sure how it works but u can try reading here: https://www.unknowncheats.me/forum/valorant/604387-unibot-colorbot-arduino-raspberry.html

[queen flare]

yeah i'm just curious how the tech works
rather than trying to cheat on online games

[blazing granite]

a kind of woody allen 😂 😛

[rapid merlin]

father's, brother's, nephew's, cousin's, former roommate etc.

it checks for specific colors, and you can make custom functions such as triggerbot or just mousemovement

[sinful moon]

I’ve also seen solutions that use external memory mappers to segmented device

[chilly veldt]

The good ol house music while the espresso machines are purring

[sinful moon]

you can get PCI-e DMA cards basically which can output your RAM to a segemented device, then that device does much the same as I described above

[eternal timber]

What a weird family, man

[sinful moon]

There’s some great informational videos on YouTube about this topic, but getting into this area is kinda gray

[queen flare]

dang

[rapid merlin]

great idea! I'm putting on some and coffee 🙂

[queen flare]

yeah prolly best not to discuss gray areas here

[rapid merlin]

☕ +🏠 = 🥳

[chilly veldt]

We got a new flavor of beans home, tried them out, and they do taste amazing

[rapid merlin]

awesome

[blazing granite]

I bet Sweet home Alabama was on the background when they presented the news on TV 😂 😛

[chilly veldt]

This one has notes of raspberry, chocolate and cinnamon

[queen flare]

he wanted to expand his botnet

[chilly veldt]

That one we use for drip tip
The espresso one is notes of chocolate, brown sugar and red apple

[eternal timber]

https://tenor.com/view/elon-elon-musk-salute-hh-gif-559068524507792941

[eternal timber]

He’s such a massive predator

[mossy river]

Hey can we avoid politics here.

[sinful moon]

Although on the topic of anti-cheat, it’s funny to see them false positive. Some would literally look for the strings of like windbg64 in any location in RAM and… you guessed it, if a user set their name as that and messaged you while you were playing an anti-cheat game, then rip

I only disclose this since it’s long been fixed all anti-cheat that I know of

[rapid merlin]

The first time I saw the film Predator (1987) was on a busted TV which made the whole film look green. Best experience imo 😄

[sinful moon]

pretty egregious and poor detection method

[queen flare]

on that note apparantly valorant's anti cheat doesn't agree much with my personal configuration

[sinful moon]

ah ouch, yeah some of these get really heavy handed

[rapid merlin]

that's the one with the hefty bug bounty iirc

[queen flare]

also a bunch of games are unhappy if you have secureboot disabled

[eternal timber]

It’s just an Elon targeted post but since it was on inauguration then yeah mb

[eternal timber]

Was this when the dinosaurs still roamed around

[rapid merlin]

ageism 😄

[sinful moon]

lol we had a 1989 RCA TV which got increasingly worse at Simposons skin Yellow which needless to say was a big issue in the 90s. Eventually it got so bad that too much of that yellow would cause the CRT to loose sync and signal

[blazing granite]

https://tenor.com/view/roar-rawr-predator-gif-11210937136773139413

[queen flare]

that's random af but i love it
there is something else about watching movies on old cathode ray tube televisions with color issues

[sinful moon]

especially once the DVDs came out and that yellow signal was even more “pure”

[austere venture]

Did anyone else practice linux part1 for a while?

[rapid merlin]

although CRTs can be dangerous to tamper with I can see them creating some fun effects

[queen flare]

i've done that room
why do you ask?

[blazing granite]

it was the time when people still have class 😉

[sinful moon]

Indeed, unfortunately I need to fix my Trinitron computer monitor at some point, but no worries, I do know how to safely discharge

[austere venture]

Because im practicing it and i feel a littlw slow tbh lol

[queen flare]

do you need help with something?

[austere venture]

Nah not yet thank you though

[sinful moon]

man pages always help, as well as tab completion, but yeah let us know!

[eternal timber]

Back in my day

[opaque flax]

Call of duty insta closes if you open wireshark

[sinful moon]

zsh and (most likely fish, eww) have flag tab completion

[opaque flax]

Which is not even a defense cause I can just pcap on my firewall?!

Or just mitm essentially on my own network and run wireshark

[sinful moon]

Ironically vast majority of all their older titles have very bad RCE vulnerabilities which they’ve left unpatched

[queen flare]

why is fish ew?

[sinful moon]

Because it’s literally running a web server to configure a shell

[opaque flax]

All old cods are cheating messes

[sinful moon]

Oh I’m sure, I just never play them online anyways

[queen flare]

modern call of duty is too full of woke stuff

[opaque flax]

They do so much fake posturing for anti cheat

[sinful moon]

lol

[silver sky]

Funnily enough, the person who found most of the COD RCEs is a friend of mine

[sinful moon]

Nice nice

Yeah I’ve seen some insane POCs and more

[rapid merlin]

crunch time corner cutting code

[opaque flax]

Honestly it’s probably an interesting rabbit hole to research

[rapid merlin]

did you ever hear the darknet diaries XBOX episodes?

[opaque flax]

I did! I’ve listened to every episode!

Was so interesting learning about the Xbox underground

And how many dev kits were just out there

[rapid merlin]

I hear ya

[eternal timber]

Need a lumbar support chair

[sinful moon]

Now console modding, hacking and emulation (at least retro) I know a good bit about. But I was not active back in the day

[lusty patrol]

Ahh darknet diaries, I love the content. Usually listen to podcasts while I'm outside

[sinful moon]

I guess I can do my own name dropping knowing the guy behind the Insignia Xbox Live replacement service for OG Xboxes

[opaque flax]

I’m gonna be honest…the latest episodes have been poor quality

[opaque flax]

Did you have a jtag for it?

[rapid merlin]

that's cool

[sinful moon]

Nah, I just softmodded back in the day, but I didn’t do a ton of Xbox modding with how open Dreamcast was

now PSP <3

[rapid merlin]

oh ya that was totally open

[silver sky]

I had jtag and rgh consoles back in the day

[rapid merlin]

saw a fair bit of dreamcast game dev

[silver sky]

also had a jailbroken ps3

[opaque flax]

I remember the first time I heard abo modded Xbox’s and seeing the power when I was a kid lol

[eternal timber]

Never had a ps3

My first console was a ps4

[sinful moon]

blew my mind back in high school playing GBA games on my PSP which only one year ago was a “current handheld”

[opaque flax]

Cod waw zombies der riese

[silver sky]

MW2 modded lobbies

[opaque flax]

Dude dropped me a PAPd wundeerwaffe

[sinful moon]

Mine was a Sega Genesis 🙃

[opaque flax]

Some of the most fun lobbies we mw2 modded lobbies

[queen flare]

how do you get into game modding btw?

[rapid merlin]

whats ur going opinion? keepass or 1password

[rapid merlin]

https://www.youtube.com/watch?v=V0kq0yCTpNE

[sinful moon]

Yep, great channel c:

[opaque flax]

Same way you get into any other form of hacking really

Just research and understanding

[silver sky]

Well these days you just make stuff and use the inbuilt support for it

[sinful moon]

FM Synth rules

[cloud quiver]

Maybe keepass since it's free 😄

[rapid merlin]

I love audio hardware hacking 🙂 or circuit bending

[sinful moon]

Bitwarden is what I use

free and open source

[queen flare]

game modding is considered hacking?

[sinful moon]

Keepass is also good

but I think 1Password is propritary

[queen flare]

[rapid merlin]

I believe so yes

[opaque flax]

Of course

[queen flare]

how

[opaque flax]

+1 for bitwarden

[sinful moon]

by the traditional deffinition of hacking

as in fiddling around with software and hardware

[opaque flax]

And doing unintended things

[sinful moon]

mhmm

[opaque flax]

For example modifying a packet to give you tons of gold

Is hacking

In an mmorpg

[queen flare]

but that would depend right?
there are games like operation harsh doorstop which is primarily designed for the modding community

[silver sky]

Back in my day, modded xp lobbys

[queen flare]

how would that be hacking?

[sinful moon]

1984’s “Hackers: Heroes of the Computer Revolution” is a text I can highly recommend if you have any interest in computing history

[opaque flax]

Modding is a form of hacking I’d say

[sinful moon]

which sticks to that classic definition

[silver sky]

I co-developed Redacted T6 for Black Ops 2.

[queen flare]

thanks
would check that out

[twin ridge]

Gave +1 Rep to @sinful moon (current: #34 - 269)

[opaque flax]

Good book

[sinful moon]

No problem, seminal text in non-fiction computing history

[blazing granite]

The Pirates of Silicon Valley is also pretty good

[opaque flax]

Do they sail the high seas?

[rapid merlin]

I've been reading this Peter Norton artifact I recently found, which really aligns with the latest #1331657410091417600 room since it has all the BIOS commands

[sinful moon]

Yep, I’ve got that on my watch list, but I want to get to when that aired lining up with my current “Computer Chronicles” watching to check it out

But yeah he had a book for that as well

[rapid merlin]

JMP F000:E05B cool the POST is happening now! 😄

[sinful moon]

I’m up to 1986 in my watching of that show so far and having a blast

[static perch]

How would you do sqli challenge where select and union are filtered? You can't bypass with by changing cases for some characters(like SeLeCt)

[viral crest]

@opaque flax soon "modding" is gonna be as unethical as saying "hacking"

[opaque flax]

No

And saying hacking isn’t unethical

[silver sky]

[queen flare]

how is saying hacking unethical?

[silver sky]

It's only unethical if you gain an unfair advantage

[viral crest]

Every time I say hacking in here I get a warning that I will be blocked.
Isn't that unethical at all?

[opaque flax]

Modding gta v single player is completely ethical

[chilly veldt]

I mod stuff daily

[queen flare]

how are you saying it now

[opaque flax]

Doubt. There’s context we are missing

[silver sky]

It's not down to you talking about hacking. Context is key. What you've likely done in the past is talk about unethical/illegal activities. If you have an issue with server moderation, please feel free to speak to the discord admins, i.e @mossy river

[viral crest]

Forest for the trees yal...
Forest for the trees.

[mossy river]

By whom are you warned?

[queen flare]

oh hey, there's a guy dming me asking about how to phish people
i've sent screenshot in your dm

[viral crest]

THM just started freaking out.
Isn't that warning enough?

[mossy river]

Could you point this out to me? I'm not sure I'm following 😅

[viral crest]

THM feels I am braking some kind of rule, so he tags a modder.
That's over kill if you ask me.

[queen flare]

he said you can clear up why you were warned in the past with mods

[sinful moon]

I mean as said above, context is key. We are all kind of here for hacking in one form or another, but ethical hacking is the primary context we abide by

[mossy river]

You were complaining about moderation so the user was telling you where your point of contact for complaints would be 😓

[chilly veldt]

Hmmm, to do work, or to sip coffee

[sinful moon]

Why not both?

[chilly veldt]

I don't feel like moving from the coffee chair

[viral crest]

I just got a warning, from a bot, the modder was anonymous.

[opaque flax]

This is a very compelling argument

[sinful moon]

and the coffee can’t be transported to your work chair? lol

[chilly veldt]

Again, don't feel like moving

[viral crest]

And I am not complaining I am using that as an example.

[mossy river]

You haven't received a warning from this server.

Not within the past hour at least

[chilly veldt]

My work chair/desk is 50 meters away

[sinful moon]

lol you can survive the minute walk

[chilly veldt]

And the coffee is hot, so I will be burning my hand

Plus the coffee music isn't at my desk

[opaque flax]

I think you just need to drink coffee

[sinful moon]

“coffee music” 🤔

[viral crest]

I think it was fluff

[mossy river]

@viral crest Your only warning on this server is for trying to cause drama. You were informed that if you continue, you may be removed.
There are no warnings for saying the word "hacking" or any mutation of this word.

[viral crest]

Not sure

[mossy river]

Fluff hasn't been a moderator here in almost a year.

[viral crest]

Ok that one

The drama one

That dude got up in his feelings

Then I got that warning

[chilly veldt]

We have a dedicated coffee area with speakers, espresso machines etc.
I put on some chill house music at the area

[rapid merlin]

If anyone is dramatic it would be scrubz 😅

[viral crest]

Wherever that was

I might be wrong about fluff

[chilly veldt]

Scrubz isn't dramatic, but to the point

[sinful moon]

Who cares, just move on potentially lol

[rapid merlin]

he is very dramatic

[mossy river]

But, ironically, you have just started to cause drama by stating you're going to receive a warning for something you haven't had a warning for 😓

[viral crest]

The point is not so much the word hacking the point is that for Minor details people freak out

[chilly veldt]

Not really, there's rules here for a reason, discord has a good chance to delete this server if some of these rules gets broken too many times

[rapid merlin]

go to my mentions

you'll see what i'm talknig about

[jolly aspen]

https://tenor.com/view/bike-fall-memes-baton-roue-bike-stick-gif-8999945942594219773

[rapid merlin]

"you wont get help in this server"

yet that's what the entire point of the server is

[opaque flax]

Hello again

[rapid merlin]

😭

[mossy river]

If you can show me where/ when this has happened, I will investigate 😄

[jolly aspen]

Wtf did I just waltz into

Mal how are you?

[sinful moon]

Nothing important honestly lol

[chilly veldt]

On the topic of malware, that is restricted as he says, cause it's one of the top reasons why discord deletes servers

[jolly aspen]

You can’t brush this highly important event under the rug!

[sinful moon]

lol

[opaque flax]

Honestly idk. I’m good how are you? I should be asleep but watching Tyler Ramsbey Pentesting an azure blob container

[mossy river]

I appreciate your feedback and I will address this with Scrubz 🙂

[jolly aspen]

Those blobs never stood a chance

[viral crest]

@mossy river all I am trying to say is people tend to get jumpy.
Not complaining.
Just pointing it out.

[rapid merlin]

yet i never mentioned anything regarding it, i asked for help regarding a project if someone could tell me if there is any malware in it since it is open sourced.

and he says "you won't get any help here"

[sinful moon]

lol I spent an hour and a half setting up Azure VPNs in our firewalls today for a client’s internal IT

[rapid merlin]

that's very odd.

[mossy river]

Okay 😅 In future, if you can point it out in my DMs, that would be very helpful :)

[opaque flax]

Whenever I think of a blob storage I just think of like a gelatin of data

[eternal timber]

He’s more blunt than dramatic

[jolly aspen]

Yep, exactly this

[viral crest]

@mossy river you got a deal.

[silver sky]

Mmmmm tasty

[chilly veldt]

From how I see it, he's not doing anything wrong, but I can see your side of things, I ain't a mod

[jolly aspen]

Data just pours out like a cup of jello

[silver sky]

I'll take 1gb

[opaque flax]

It’s just in a blob

[sinful moon]

I may have complained yesterday, this guy was/is a CIO but was asking “wait why is the Azure VPN gateway different from the firewall’s VPN gateway”

[opaque flax]

Much better than page

Or a block

[sinful moon]

dude that’s how VPNs work lol

[opaque flax]

“Why do the IPs be different in different places”

[chilly veldt]

That's a hell of a bite

A giga one indeed

[sinful moon]

byte, but yes

[opaque flax]

So I have 2 rabBITS

I need 6 more

Than I’ll have a rabBYTE

Hahahahaha

End me for this terrible joke

[oblique furnace]

ive just tried again with my father's pagbank card and my mum's itaú card and all of them keeps declining when buying the damn voucher 😭

[jolly aspen]

💀

[opaque flax]

I do call them my bits

[sinful moon]

cute

[oblique furnace]

so far i tried:

• 2x mercado pago (mine and my father's)
• itaú card (mum)
• nubank (mine & sister's)
• 2x pagbank (father)
• 2x banco do brasil (sister and grandma)

none of them accept

[opaque flax]

Have you reached out to support?

[jolly aspen]

Ohhhhh it’s time for me to venture off into the desert

[sinful moon]

ironically we call our kitty a “bun” often because when she sits with her legs under her she looks like a loaf of bread. But also so we can say “hun bun bun”

[opaque flax]

What kinda dessert?

[oblique furnace]

thm or stripe?

[opaque flax]

Either

[oblique furnace]

bank refunds the money after ~5 minutes so it's not a total loss

but still

[jolly aspen]

DeSert 🌵

[sinful moon]

Yeah just get THM support involved and etc

[opaque flax]

What kind of DESSERT

[sinful moon]

[e-mail]

[jolly aspen]

But I’m sure there’s cupcakes

[opaque flax]

👀

I had a cupcake yesterday

[oblique furnace]

im buying voucher specifically because i am currently on vacation and im trying to prepay for a month of THM for when i get home

its like 3:49 am rn

[rapid merlin]

what's the key difference people use firefox instead of brave

[jolly aspen]

Nice

[opaque flax]

Reach out to thm support

[oblique furnace]

time doesnt really make difference tho

[silver sky]

This was already explained, you cannot get payment support here. Contact support...

[oblique furnace]

okay

if only i could pay with pix

[sinful moon]

Care more about open source standards and the open web than Brave folks

[oblique furnace]

i am 99% sure you can accept pix with stripe

[jolly aspen]

Their level of courage

[oblique furnace]

would make it so much easier for me

[opaque flax]

I personally do not

Thm might

I dunno

[oblique furnace]

i'll try

[sharp citrus]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Jan 23, 2025, 6:50 AM

[silver sky]

Please contact support

[sinful moon]

Yeah I mentioned it above, but fair that’s even prettier

[oblique furnace]

https://en.wikipedia.org/wiki/Pix_(payment_system)

[opaque flax]

Yeah Ik just reiterating 🙂

[oblique furnace]

i'm referring to this

[sinful moon]

Nothing we can do about it indeed

[oblique furnace]

i forgot it's "paymen system"

fixd

[silver sky]

There is nothing anyone can do here. So any suggestions etc, needs to be sent to support or #feedback-and-ideas

[oblique furnace]

alright

im sending an email rn

def helps that rn its morning in london

[jolly aspen]

I wish I could type in two places at the same time. I’d be very efficient

[opaque flax]

Ever since I realized how good markdown is

[mossy river]

You will still be put into the queue I'm afraid

[silver sky]

It's 7am, but they won't get back to you today, you'll be placed in a queue

[jolly aspen]

So, the plan is to grow two more arms, or perfect one handed typing. Which do you think is easiest?

[opaque flax]

Just ncis it

[silver sky]

Two more arms

more efficient

[opaque flax]

https://tenor.com/view/hack-hacker-computer-gif-3899102

[silver sky]

https://tenor.com/view/hack-hacker-computer-gif-3899102

[jolly aspen]

Awe, cute you two

[silver sky]

Jinx double lock

[sinful moon]

You could learn to type on a chorded keyboard with one hand indeed, but lol impractical… well at least more practical than the alternative though

[opaque flax]

I just like especially how they are seeing everything the threat actor is doing lol

While they are exfiltrating the data

[jolly aspen]

Nothing is impractical

[opaque flax]

They are simultaneously being trolled

[sinful moon]

I think I even saw that episode of NCIS as a re-run at my old job lol. We always had the TV on so I couldn’t help it

[opaque flax]

And the TA breached the level 7 firewall and the 3d firewall

[jolly aspen]

Would be the ultimate flex tho

[opaque flax]

Honestly lol

[silver sky]

And then gibbs just pulls the plug

[opaque flax]

That stops the exfil right?

[silver sky]

It did

[opaque flax]

I guess if they were exfiltrating data ONLY from that computer

[sinful moon]

Realistically all that needed to be done, but we don’t actually know the NCIS network layout but lol, we’re thinking about it more than the writers did

[opaque flax]

Cause we’re nerds

Imagine if a TA that bad had just a temporary shell with no persistence

Oh wait they did

Probably used Metasploit

[sinful moon]

Honestly given what was done it was probably just lame IT remote access but that does have persistence typically

[jolly aspen]

Metasploit with a Mavlink stream of the attacker desktop

[opaque flax]

And turning off the computer stopped it

So

[sinful moon]

lol there was one time where I had to fight a scammer who was connected using the same remote IT software I was

I had to be very careful about which one I was killing lolol

[opaque flax]

lol that’s funny

[jolly aspen]

Mal did you get your hdd alive?

[opaque flax]

Yeah I have all my datas

[sinful moon]

mhmm, thankfully our software has a unique ID in the process names, directories and more

[jolly aspen]

Woot 🙌🏼

[opaque flax]

Zumi is always a lurkin

[sinful moon]

Alright it’s 2am. Goodnight all!

[jolly aspen]

Good night

[opaque flax]

Hacking wasn’t working out for me tonight

Good night

[jolly aspen]

Im off to the desert now

[opaque flax]

It was fighting me every step of the way

[opaque flax]

Enjoy

I was wanting to root chemistry

[jolly aspen]

Going to cover my body in dry sand and spice

[opaque flax]

Good…luck

Chemistry was just not

Playing nice

Was so glitchy

[silver sky]

I'm also playing in the sandpit

[opaque flax]

That’s fine I don’t need you to. It was legit being buggy

Like the web page straight up wouldn’t load

Couldn’t make POST requests

I can try adjusting the MTU

Ip:5000

I just gave up for the night I’ll do it tomorrow

Once I got the rev shell trying to stabilize it w/ python3 (which is on the box) immediately closed the connection and so idk if that was network issues or if its intended but I’ll play with it tomorrow

[oblique furnace]

message sent

idk what il do if this doesnt work

[opaque flax]

Some free rooms

[rapid merlin]

Morning

[whole gazelle]

hi

mornin

[rapid merlin]

👋🏻

[eternal timber]

Gn

[rapid merlin]

Good night ?

[oblique furnace]

bank refused my support chat because of "security checks"

gargle my fucking balls

and yes that is in fact whatsapp

[rapid merlin]

I just woke up and it took me a minute to realise I couldn’t read that

[oblique furnace]

you request support after going thru their shitty ai and they contact you in "up to 5 minutes"

took them like 8

but immediately after i send em my request

they send this bomb

[oblique furnace]

.trocr

no notsobot?

[dusky vine]

Soc fundamentals any one know dm

[oblique furnace]

Your transfer request was rejected after some automatic security checks.
Don't worry, you can make a new transfer later, or try other payment methods and continue using your Mercado Pago account without any problems.

[mossy river]

Off topic 😄 Are you Brazilian?

[oblique furnace]

yes

[dusky vine]

Soc fundamentals walkthrough

[rapid merlin]

Ah I see, frustrating

[cloud quiver]

Try to send message in #room-help 🙂

[jovial burrow]

dm

[wooden totem]

Either my alarm didn't work or I slept through 3 whole sonatas

[dark frost]

Morning

[wooden totem]

(For context, my alarm sound is beethoven's moonlight sonata 1st movement)

[dark frost]

Forgot to charge phone and woke up now seeing it as 0%

[mossy river]

My alarm plays Discord notification sounds to wake me up

[near sapphire]

now I know how to wake jabba up

[rapid merlin]

Morning everyone

[naive violet]

This is inexplicably concerning

[mossy river]

Gets the heart going, y'know, little bit of adrenaline

[naive violet]

Make it discord call for +10 adrenaline

[mossy river]

If I'm feeling extra tired the night before, I set it to the water droplet sound from the AttackBox

[sick lance]

My kitten has a habit of knocking my charger out the wall, I have an external battery pack for this, quick charge is great for this too

[rapid merlin]

I wake up at 7am now without an alarm

[near sapphire]

I desire to have this ability

[viral wedge]

my 8 day streak freeze disappeared even when I havent used up any of it, have they remvoved it

[knotty cargo]

Today i tried ordering some pi goods from temu

I entered wrong card details and it got locked for 6 days

After sometime i recived a confirmation code from a random number on whatsapp 💀

[rapid merlin]

That was not temu

[silver sky]

Or it was actually temu because temu does do that

[rapid merlin]

It’s taken years of practice. First you need to starve yourself of sleep for 20 years so that when you finally allow yourself to sleep for 8 hours it just wakes you up earlier

[rapid merlin]

Off a mobile number, he didn’t say it like it came up as temu

[rapid merlin]

I tried this track as an alarm once 😄 https://www.youtube.com/watch?v=gMithi7bkfY

[silver sky]

They literally do that via WhatsApp.

[rapid merlin]

That would drive me crazy

[rapid merlin]

I swear when they’ve messaged me it’s come up Temu

[rapid merlin]

yes, it was way too extreme of a wake up

currently using some Persona 3 Reload soundtrack 🙂

[silver sky]

I've had both temu and random numbers for order updates etc

[rapid merlin]

I wake up three times around the morning

[silver sky]

I believe it's rate limit bypassing

[dark frost]

That time you wake 2 minutes before the alarm ring

[rapid merlin]

I don’t have an alarm rn

[dark frost]

Those 2 minutes feels like eternity

[rapid merlin]

I wake up like 5/6/7

And then have to get up because of school run

[knotty cargo]

they sent confirmation code on sms

[silver sky]

And WhatsApp

[knotty cargo]

It was different code 💀

Anybody tried ordering electronics from temu ?

Still didnt order yet

Theyre not cheap

Pi zero 2wh for 17$

[silver sky]

I would be very sceptical of anything electrical from temu. Especially if it seems too good to be true

[knotty cargo]

Nothing rly too good

I thought the prices would be cheaper

[sick lance]

Alot of companies moved to WhatsApp for support

[knotty cargo]

Theres a cash on delivery option for cart above 65$

Something inside me tells me to forget about it lol

[silver sky]

We used to have an automated booking system for our clients via WhatsApp

[queen flare]

an nmap scan on the attackbox that takes around 40 seconds
takes around 10 mins when done on my VM kali linux through openvpn
is that something that happens to you guys?

the command i used is nmap -sV -vv --script vuln TARGET_IP

[near sapphire]

I think attackbox just does enumeration wayy quicker

[queen flare]

yeah that's what i am hinting here as well
i've noticed this to be a general trend rather than being specific to a room

so i'm wondering if you guys encounter this as well or is it just me

[sick lance]

You're on the same network when you're on the attackbox

So it will naturally be faster than your vm

[queen flare]

sure, but 40 seconds to 10 minutes?
that's a lot of delay

[sick lance]

What takes you 10 minutes may take another user 5.

[near sapphire]

hence why I started to use rustscan, nmap takes wayy too long sometimes and i'm impatient

[sick lance]

Is it a delay though, or is it behaving as intended?

[sick lance]

Rustscan can break stuff

[queen flare]

i'm getting correct results with nmap scan
but its taking way long compared to what the attackbox is getting me in seconds

[sick lance]

Even nmap can break stuff

[near sapphire]

never experienced that bfr

[sick lance]

You're also scanning at a default speed.

[silver sky]

Break everything

[near sapphire]

why fix something when you can break it

[queen flare]

sure, but i'm also scanning at default speed while using the attackbox too

[wooden totem]

society

[sick lance]

Yes...

But the Attackbox is on the same network as the target machines.

Your VM isn't. That is the difference

Your VM needs to go routed traffic

[queen flare]

i understand and agree
what i am asking is, is it normal for vm to take like 10 mins to scan while attackbox takes seconds, solely because of this reason, or is it more likely to be something wrong with my setup and i need to recheck?

[dark frost]

What nmap does ? It ping , tcp syn every ports and wait a delay to move to next port

[knotty pendant]

😳

[mossy river]

Keep it appropriate. This is a learning environment.
There are people as young as 13 here.

[dark frost]

Wtf stormz

[sick lance]

It could be a factor on a few things, troubleshooting would certainly help that.

[sick lance]

What is the speed like for a normal nmap scan?

[near sapphire]

also I have a question on nmap, why does it sometimes detect later ports than earlier one like it detects ports above 1000 first then ports in the 100s

[sick lance]

Nmap hits ports at random

[queen flare]

all nmap scans take like 5-10x longer than attackbox

[near sapphire]

ah I thought it goes in order

[sick lance]

And if you don't declare a port range

It won't hit 0-1024

[queen flare]

i thought it scans like the most popular 1000 ports by default?

[sick lance]

Yeah, it some of them may not be in the 0-1000 range

But some

@solemn crypt please don't advertise in this server. 🙏

[eternal timber]

Wdym break

🤔

[queen flare]

wouldn't it scan those 1000 ports in an order, like ascending or descending?

[sick lance]

Cause the box/device to be in responsivs

[sick lance]

No?

[sick lance]

It hits podtz at random

Ports

[eternal timber]

Why does that happen? Why would packet exchange cause that? Overwhelming data?

[sick lance]

Pretty much.

[eternal timber]

I see. Thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3292)

[queen flare]

how does that work, hitting ports at random?

i always imagined that somewhere there is a file in nmap's configuration where it is specified what the top 1000 ports are
and nmap scans those ports in the order mentioned in the file or something similar to that

[sick lance]

That would be a great way to be detected by an IDS very easily.

You can use the flag -r for subsequent scanning.

[queen flare]

because the ids designer would configure the ids to flag it, when it receives traffic in the same order as nmap would scan?

[rapid merlin]

ya I think -T0,1 are for IDS evade with nmap etc.

[queen flare]

i didn't even think of that

[rapid merlin]

so patient 🙂

[sick lance]

Exactly 😄

[queen flare]

but there must still be some kind of configuration file telling nmap what the top 1000 ports are
otherwise, how does it know which ports to scan in the first place?

[rapid merlin]

isn't ransomware detection like that with files?

vs random etc.

[sick lance]

There is yeah, those ports are "pushed" to the start,

[sick lance]

Depends how it's built, what it looks for

If it's VM detection it could be storage, folders, settings history recycle bin,

Computer name

[queen flare]

i'm sorry, i didn't understand what you meant by "pushed to the start".

[sick lance]

Even if you choose a range, it a "common top 1000" port is in the range, if will scan it first, unless you subsequent it

[near sapphire]

and I assume common ports like ssh, http, https are scanned first?

[sick lance]

https://en.m.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

[queen flare]

gotchu, thanks for the explanation
learnt something new about how nmap works today

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3293)

[sick lance]

Go to "Well known ports"

[sick lance]

But yes

[rapid merlin]

-F can be handy to reduce the number of ports scanned

My book has the ports and what they’re for

[near sapphire]

why is there a qotd service

[rapid merlin]

I used to reference /etc/services

My osint book has time zones

Which is pretty cool

that's cool 👍

Sorry not osint book, operator handbook

I’m brain dead

😄

I stopped drinking coffee for a week last week, my brain made way more typos than it normally does

[devout palm]

https://tenor.com/view/cat-berg-cat-orange-cat-swimming-gif-25177582

[rapid merlin]

My body starts having a meltdown if I have coffee now days and I look like I’m on something else.

I hear ya

I can sense the anxiety difference in myself drinking coffee

https://en.wikipedia.org/wiki/Caffeine-induced_anxiety_disorder

1 cup a day I can handle ok

tea is usually a better choice for me though

I used to drink coffee all day and used to be fine

Now I can’t at all

I hear that, same

I think after gradually stopping coffee my body became so used to not having it that now only a little bit really messes me up.

oh interesting

I am trying to remove it from my day to day

I can drink tea though, no more than four cups

nice

[silver sky]

THM on tour 👀 coffee time

[rapid merlin]

sweet hat 😉

[silver sky]

It was a freebie 👀

[rapid merlin]

I actually noticed the skull first

You can take the girl out of the goth but you can’t take the goth out of the girl 😆

[silver sky]

It's the Punisher 😂

[rapid merlin]

I knew I recognised it

[silver sky]

This is the bit where stealth goes "who's the punisher"

Oh nevermind 😂

[rapid merlin]

Damn 😅

[autumn thunder]

Guys does anyone know what was the name of the lab where I have to make forensic image in linux

[devout palm]

https://tryhackme.com/r/room/memoryforensics
?

https://tryhackme.com/r/room/volatility

[abstract cliff]

hi

[cloud quiver]

This one maybe 🙂 ?
https://tryhackme.com/r/room/linuxliveanalysis

[rapid merlin]

Fdisk -1
dd if=/dev/sda1 of=/[outputlocation]

Something

Something something

Anyways

[devout palm]

https://community.hex-rays.com/
Hex-rays new design

[autumn thunder]

I don't think thats the one, the lab I'm talking about we have to use dd commands

[silver sky]

Something something potato

[cloud quiver]

Can you remember some more context from that room ?

[deep geode]

yooo i am newbie by using autorize in burpsuite, does yall know what else we can do using autorize beside looking for idor?

[autumn thunder]

All i remember is that in that lab we were told how to check partition or disk drivers in your linux and how to make image of this drives through dd command

[devout palm]

Possibly https://tryhackme.com/r/room/introtocoldsystemforensics ?

[cloud quiver]

This one 🙂 ?

https://tryhackme.com/r/room/forensicimaging

[autumn thunder]

Yep that's the one thx mate

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #2 - 2376)

[autumn thunder]

Thx to u too mate for helping

[mossy river]

+rep @devout palm

[twin ridge]

Gave +1 Rep to @devout palm (current: #28 - 347)

[devout palm]

Nice catch haha

Felt like OSINT

[cloud quiver]

Like yours 😄 +rep

[twin ridge]

Gave +1 Rep to @devout palm (current: #28 - 348)

[pliant onyx]

Not me taking hours on easy rooms

[devout palm]

It's fine to take your time

[cloud quiver]

That's normal

[pliant onyx]

Amen

[cloud quiver]

especially if you're talking about CTFs 🙂

[queen flare]

same
i lost count over how many times i restarted my machine because of metasploit breaking the machine

[pliant onyx]

Been there

[devout palm]

Blue room?

[queen flare]

yeah actually
i'm redoing it cause i didn't take notes last time

you would think it would be easier when you are doing it for the second time

[devout palm]

Notes be important but i can't do it

I take notes whenever i feel like

And they are definitely not organised

[queen flare]

used to be same in the past before i tooks kgb's advice

[pliant onyx]

Time to refer to a writeup for a hint or two

[queen flare]

and scrubz also certainly had a role in me starting to take notes

[queen flare]

LMFAO

[arctic cradle]

is THM functioning properly? I get disconnected on my VM every 5 seconds saying "it's my network" while it's not

and the site is barely loading now as we speak

[cloud quiver]

Yeah , it's buggy for me also 😄

[mossy river]

Looks a bit slow, let me check

[queen flare]

bruh the fuck

[small heath]

What was the advice?

[gleaming grove]

good morninggggg

[devout palm]

You blew up the whole THM network! /s

[cloud quiver]

Which room is this ?

[queen flare]

blue

[rapid merlin]

It was the capturing disk image for Linux which I thought he wanted but I don’t think he even saw it 😅

[arctic cradle]

ah yes, my favourite room so far

[cloud quiver]

🤣

[devout palm]

Oh i like that room too

[queen flare]

hated that room, too lengthy

[arctic cradle]

did you also scream for "HELP" the only button clickable?

[devout palm]

Is it Scrubz's room?

[near sapphire]

I learned so much from that room!

[arctic cradle]

would've been funnier if the progress was 100% instead of 0%

[devout palm]

Not too late, never too late

[arctic cradle]

we made it bois

[queen flare]

can you send link to this room

[near sapphire]

I'm gonna wait for the writeup

[devout palm]

Here:

[arctic cradle]

https://

[queen flare]

thank you

[twin ridge]

Gave +1 Rep to @devout palm (current: #28 - 349)

[devout palm]

Damn, too many reps today

[gleaming grove]

im gonna do it, any advice?

[queen flare]

i recommend reaching intermediate level at least

[arctic cradle]

make sure to start the Virtual Machine.. OH WAIT..

[gleaming grove]

booty||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||_ _ _ _ _ _ _ ty

[twin ridge]

Gave +1 Rep to @queen flare (current: #789 - 6)

[arctic cradle]

booty gives rep because of "ty" word

[near sapphire]

nope

[queen flare]

dang

[near sapphire]

try again, its fixed

[arctic cradle]

bootу

[near sapphire]

see

[arctic cradle]

you're right

now try it on me

[near sapphire]

booty||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||_ _ _ _ _ _ _ ty

[twin ridge]

Gave +1 Rep to @arctic cradle (current: #285 - 22)

[queen flare]

booty

[arctic cradle]

[mossy river]

[devout palm]

Lmao

[gleaming grove]

hive mind secret power

[cloud quiver]

[devout palm]

https://tenor.com/view/kitty-cat-cat-float-kitty-float-cat-water-float-gif-17908418945946410709

[arctic cradle]

Jabba, is the issue fixed?

[arctic cradle]

I can see the "mlem" part

[mossy river]

Should be, yes:)

[arctic cradle]

arigato gozaimasuuu

if you call me weeb I will block you

[queen flare]

guys i have an important announcement to make

[mossy river]

Noooooo, I accidentally stopped my ML model, it's been training for 1 hour 30 minutes 😭

[devout palm]

Japanophile

[arctic cradle]

https://tenor.com/view/sips-tea-hmm-interesting-thebidofficial-gif-12929673626046504495

[queen flare]

due to metasploit breaking my machine every 2 nanoseconds, i have taken the difficult decision to use a writeup for making my notes on the Blue room
rather than redoing it again

[mossy river]

Just do the exploit manually

[queen flare]

wdym

[mossy river]

Don't use metasploit, just do the blue exploit manually

[dusky vine]

Can you teach me hacking?

[queen flare]

how do you do that

[near sapphire]

ask the nsa, allegedly

[rapid merlin]

"this operation on all this data will take for ever, let's leave it running overnight, should be done in the morning" - Windows Updates reboots system automatically at 3AM

[arctic cradle]

it will cost you about 10$ to subscribe to THM and learn hacking there

[sick lance]

More then enough free rooms for a grasp...

[fallen beacon]

They're watching

[devout palm]

Hi, if you think "hacking" only consists of compromising social media accounts, nah it is not the place. But if you mean as in cyber security, you are welcome to give https://tryhackme.com a visit.

[mossy river]

Metasploit is a fancy wrapper that makes running exploits easier.
All it does is takes someone else's exploit, converts it to something metasploit can use and then provides you with access to things like shell stabilisation etc.

https://www.exploit-db.com/exploits/42315
(not sure if this is good, I just search eternalblue exploitdb)

You can run it manually by just downloading a script that does the exploit

[queen flare]

that sounds harder than restarting the machine 10 times though

[mossy river]

I honestly am not sure what you're doing if you're restarting 10 times 😅

[arctic cradle]

it's actually cooler to run the exploit manually rather than using an automated tool, you learn a lot as well along the process @queen flare

[mossy river]

I don't think I've ever needed to restart the blue room and I did it before they updated metasploit to auto stabilise for you 😆

[queen flare]

that's a fair point
i think i'll do it manually just to learn how to do it

[rapid merlin]

building exploit code from phrack magazine method 🙂

[gleaming grove]

i restart the blue room like... 3 times, same for ice

[mossy river]

It's better to learn how to manually do it because you can't use automated tools during some exams like OSCP

[rapid merlin]

with a compiler

[queen flare]

interesting

[arctic cradle]

didn't know that

[queen flare]

me neither

[near sapphire]

the ctfs that my uni hosted, and pretty much all other uni too, bans automated tools too

[devout palm]

Automated exploitation tools*

Enumeration tools are allowed

[gleaming grove]

but wat about using the exploit directly from exploitdb rather than using metasploit?

[mossy river]

^Good clarification

[gleaming grove]

thats allowed?

[mossy river]

I don't think so

You can't use tools or script that pwn the box automatically, unless you write them during the exam

iirc

I'm pretty sure it's on OffSec's website, it's been a while since I took a look at OSCP

[rapid merlin]

I did a “sfc /scannow” on my system and found corruption in the files system but I couldn’t find the error or corruption in the system log.

like fuzzing a daemon of some kind, and watching it crash at an instruction pointer filled with 0x41's

[mossy river]

Doesn't /scannow fix the corruption at the same time?

[sick lance]

Or should do.

[rapid merlin]

Yes but the issue should have been in the log file. It would have given me a clue to how these issues were occurring

[queen flare]

why does this keep happening?

[mossy river]

your target ip is wrong?

[rapid merlin]

Also depends on how the issues are being run. Not sure if anything designed to start with bios could have just reset or mitigated after a fix

[queen flare]

no
its correct

[mossy river]

Sorry, I mean your localIP is wrong

set LHOST=tun0

[queen flare]

okay, can you explain why this needs to be done

also thanks

[mossy river]

It needs to reconnect back to you to open the shell

It's like me sending a letter to someone but not putting a return address

[gleaming grove]

the nsa is listening

[queen flare]

no i understand that
but why should i set it to tun0 instead of whatever is there by default

[mossy river]

Because the default is a placeholder

[sick lance]

Default should be eth0

[mossy river]

tun0 references the interface on your PC that is the tunnel to TryHackMe servers

[sick lance]

Why the direct reply Discord

[queen flare]

okay makes sense

[mossy river]

You would need to set it to whatever you want the reverse connection on, I can safely assume that tun0 will be your VPN IP address that's why I said it.
but, you should manually type it out when you're beginning so you know what you're referencing.

If you type ip a s tun0 it will show you the interface and it should have an IP address which matches your TryHackMe VPN IP address.

If you have multiple tunnels open, i.e. tun0, tun1, tun2, tun3, you will need to specifcy which tunnel. This can occur if you're on multiple VPNs.

[near sapphire]

didnt know you could short it like that, i always do ip addr show tun0

[mossy river]

That command might be wrong, it was pure muscle memory

[sick lance]

Ip a | grep "tun" 😄

Returns all your tun* interfaces and ip

Good way to check if you're running multiple tunnels

[queen flare]

would it work if i didn't type it out manually?

[mossy river]

I'm not sure I understand your question

[queen flare]

i did this and it didn't work

do i have to type out the actual IP address asscociated with tun0?

[sick lance]

Is your tun0 10.0.2.15?

[mossy river]

That should work fine

[sick lance]

Remove the =

set LHOST tun0

[mossy river]

Ah^ yes replace the = with a space

[queen flare]

OH RIGHT

[mossy river]

I really hope that ms5 syntax uses a space 😆

[queen flare]

thanks @sick lance @mossy river

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3294)

[odd lintel]

is there a thm free path or rooms for bash scripting

[mossy river]

All paths are free:)
Some rooms on the paths might require a subscription

[queen flare]

the LHOST IP that was there by default (eth0) also starts with 10, just how thm IPs tend to
so i was thinking that it was using the ip associated with the vpn by default

[odd lintel]

hm

[near sapphire]

+rep @mossy river

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1450)

[gleaming grove]

https://tryhackme.com/r/room/bashscripting

[odd lintel]

thanks

[gleaming grove]

[odd lintel]

how do i link discord to it

[gleaming grove]

use /verify

[queen flare]

i remember about a thm room that introduces you to lua
can't find it back
anyone has any idea of what room it might be?

[gleaming grove]

go to your account on thm
Manage Account > Account details
then scroll down
You will find a discord token

[rugged kayak]

when did we get this

this is nice

[odd lintel]

hi

thanks

[near sapphire]

69, nice

[elder peak]

New to me, imma go have a look.

[near sapphire]

wait where is it?

[gleaming grove]

Learn > Challenges

[near sapphire]

oh yeah

does the network rooms count as challenges?

[gleaming grove]

network services? im doing the second one right now

[rugged kayak]

i am not sure

[rugged kayak]

no, networks

like wrath and others

[gleaming grove]

ohhhh

[left oak]

Just now I think. Wasn't there few hours back.

[rugged kayak]

i know it wasnt there yesterday

[odd lintel]

so if u dont have a credit card u cannot buy subscription

[near sapphire]

dont thm accept debit?

[rugged kayak]

they do

[odd lintel]

oh yes mb

[rugged kayak]

you need card or paypal i think

[near sapphire]

is the "insane" dificulty only for aoc, I dont think i've seen others