general

[polar spoke]

wow that seems relatively low

[blissful snow]

what happened if you dont mind me askgin

[polar spoke]

33B fits in 32GB?

[shell nova]

it's a distilled model, whatever that means

[polar spoke]

yeah, they've done some cute optimizations

[chilly veldt]

NDA

[clever adder]

producted by rtx 5090

[clever adder]

special thanks gta 6

[shell nova]

pretty sure than not every parameter is used at the same time?

[blissful snow]

someone broke it?

[wooden totem]

ouch? that's called a discount

[opaque flax]

Buy the dip

[polar spoke]

or it's lowered quant or such

[naive violet]

Depends if it's gonna come back

[wooden totem]

get that 10 years in

[shell nova]

probably some packing too yeah

[naive violet]

Like if this has proven a lot of the value is based on hype, the value is a way out

[sick lance]

You use Jetbrainz, aye?

[shell nova]

aye

[sick lance]

Is there a way to get the information like this, like Spyder does?

[polar spoke]

based on hype? but but but 500B$ Stargate project that doesn't have secured funding yet!!

[shell nova]

might be some debugger plugins

[sick lance]

My lecturer is trying to get me to use Spyder for this reason, but I don't like Spyder.

[jade wing]

By telling you if you do something intentional to get muted because it was done on purpose it will be long intentionally thus meeting you with equal force you think that’s a mod flexing their power? Lol wut.

Little intentionally instigating and provoking then being mad when you get smacked for it if you get smacked for it like calm down. Dude didn’t even mute you after you said that whole edgy statement

[shut hawk]

are we talking about deepseek r1? I've self-hosted it and it's pretty incredible seeing the reasoning process

[jade wing]

This is like one of the most chill places for mods trust

[sick lance]

Ya.

[polar spoke]

yeah, scrubz posted the stock dip from it's release

[shut hawk]

a bit slow, but i was using the 32b one so kinda expected

[polar spoke]

what hardware?

[shut hawk]

is it time to buy stock?

[shut hawk]

4090 rtx, 64 DDR5

[shell nova]

I mean it'll likely recover

[polar spoke]

ehh, depends on what you believe

[polar spoke]

ahh nice

[sick lance]

I don't think this laptop will be able to run it..

I think it may be pushing it.

[shut hawk]

cant hurt to try the smallest model

[sick lance]

Nah man, go big or go home 😄

[shut hawk]

your laptop will love you

[clear jackal]

https://tenor.com/view/bike-fall-memes-baton-roue-bike-stick-gif-8999945942594219773

Back to work lol

[clever adder]

can you run doom?

[shut hawk]

barley

[neat belfry]

bruh

[half girder]

every time someone says bruh, god kills a kitten.

[shut hawk]

wait idk why I said 4090, it's a 4070 rtx

[clever adder]

wth

[shell nova]

lol, wut?

[polar spoke]

# Actual DeepSeek-R1 (requires 336GB+ VRAM for 4-bit quantization) 
ollama run deepseek-r1:671b

[neat belfry]

funny cuz i got hurt ystrd while bike riding

[sick lance]

I have Ollama running, I just need to download and/or setup whichever I want to use.

[polar spoke]

welp, gotta go scrape up a bit more VRAM

[clever adder]

🤨

[naive violet]

Was it because you shoved a stick into the spokes?

[shell nova]

don't worry, manufacturer model numbers confuse me as well

[neat belfry]

huh?

[shell nova]

AWS might be able to help I guess?

[shut hawk]

@polar spoke have you benchmarked the 50 series on hashcat?

[sick lance]

I mean, I can't even link a meta quest 2 to my GPU.

[neat belfry]

idk wht tht means

[sick lance]

I have no hope for this LLM.

[polar spoke]

not properly but we have some iffy numbers from someone who ran a broken bench

[neat belfry]

ion get the joke

[shell nova]

oh wait it's VRAM that it wants? well, strike running that locally I guess

[polar spoke]

I dont have a 50 series card yet

[neat belfry]

ey scrubz, wsp homie

[shut hawk]

lol yeah the intel CPUs really mess me up

[sick lance]

Going to play Fortnite then BO6...

You?

[shell nova]

my card has like 4 GB VRAM

which was a lot in 2016...

[sand trench]

yah no not gonna use that

[wooden totem]

it's lowkey not good

all I've heard

[polar spoke]

it's not bad

[sick lance]

I have 4GB too.

[neat belfry]

bored as hell, im sick tdy sso didnt go to school

[sand trench]

shadow is sticking with dolphin-mistral

[sick lance]

Nvidia T500.

[polar spoke]

a lot of people are mistaking "not a huge jump in perf like last time" for "it's bad"

[shell nova]

no real improvement on the raster side for a given power

bit better on memory though

[polar spoke]

it's basically an architecture and node refresh

and for that, it's actually quite good

[shell nova]

didn't they boost power by 100% last time as well?

[polar spoke]

3090 -> 4090 was ~ 2.5X in some tests

[neat belfry]

do u play chess

[polar spoke]

4090 -> 5090 is ~ 1.5x on the high end

[clear jackal]

I feel like you can copy and paste this to almost anything

[polar spoke]

true lol

[shell nova]

yeah but with a 500W! power envelope

[wooden totem]

I've seen frame generation is a huge problem

[polar spoke]

people still think the 4090 was a bad deal because it was "too expensive"

[sick lance]

Not since school.

[polar spoke]

4090 was 600W unlocked

[shell nova]

even a 4090 boosted that high will give the same perf

[polar spoke]

in case everyone forgot lol

[neat belfry]

do u wanna play a chess game

[shell nova]

thought it was 300W

[polar spoke]

no

[shell nova]

which is still ridiculous

[polar spoke]

4090 was 450/600

depending on the PSU you seated it with

[shell nova]

it also liked to catch on fire

[polar spoke]

well

the 12VHPWR connector had issues

but that's been replaced entirely

so it shouldn't be an issue going forward

[neat belfry]

like a quick online game

?

[shell nova]

yeah, I saw the GN video

[sick lance]

No thank you,.as I said, I'm off to play Fortnite and bo6

[twin ridge]

Gave +1 Rep to @neat belfry (current: #1718 - 2)

[sand trench]

shadow uses ollama and open-webui

[wooden totem]

isn't 1200 recommended

[polar spoke]

but yeah, the 5090 doesn't have some "insane power draw" like everyone seems to think it does, at least imo

[shrewd trout]

My machine is bugged, I have already restarted it but it still remains that way, how can I solve it?

[shell nova]

anyways, nvidia still stuck on moar power mode

[neat belfry]

what do u do for a living?

[shell nova]

also too damned expensive

[shut hawk]

didn't they say it was "double the performance"?

[polar spoke]

nah probably only 900-1000

[sick lance]

#site-support

[shut hawk]

https://youtu.be/EtX6xyb_4fo be like

[wooden totem]

fake performance

[polar spoke]

it's all up to how you test it

much like the Apple M1 was NOT 3090 equivelant but they said it outperformed it

[shell nova]

they're still hitting huge diminishing returns

[polar spoke]

we're doing that again

[wooden totem]

why is 5090 already out

[polar spoke]

apples to oranges comparisons are all marketing does anymore

[shut hawk]

right

[polar spoke]

not for long

[sand trench]

when new amd gpu????

[polar spoke]

oh man, AMD fumbled that one so hard

[shell nova]

sadly

[sand trench]

sits here with their 7900xtx

[polar spoke]

i have no idea how they mess this stuff up every time

[wooden totem]

that sounds powerful

[sand trench]

maybe they like being the underdog

[polar spoke]

they are fumbling their driver improvements, dev confidence, and their hardware launch

it's a mess

[shell nova]

my laptop is showing graphical glitches from time to time and it's scaring me

cause it's an APU

[wooden totem]

what are graphical glitches

[sand trench]

shadows laptop has not been booted up since shadow jumped out of uni due to huge mental health decline

[neat belfry]

buy a new one

[shell nova]

well, green lines across the screen from time to time are bad™️

[wooden totem]

thats cable interference in my experience

[polar spoke]

if you are seeing artifacting that is limited to individual lines i'd assume screen or screen cable long before processor issues

[shell nova]

I can't afford to upgrade my 11-year-old tower, how do you think I can afford a new laptop

[neat belfry]

save up

[shell nova]

s'called life, mate

[polar spoke]

GPU artifacts typically impact entire frames or entire types of rendering

[shell nova]

has a tendency to drain your bank account

[neat belfry]

fr

[hazy flume]

hello, is there anyone who knows how to work well with cisco packet tracer app and create lans, networks, setting ips, default gateays, subnet masks and configuring routers? id love to ask some questions

[neat belfry]

c'est la vie

[spice salmon]

can someone help me in roomhelp

[shell nova]

last time I had a GPU die it showed similar symptoms

[clear jackal]

Just a reminder that everyone here is a volunteer and will help you when they are able.

[polar spoke]

even if you start showing that kind of issue

[neat belfry]

maybe

[shell nova]

hoping it's just a driver issue

[polar spoke]

i would strongly recommend just playing with the RAM

or RAM temps

[hazy flume]

here or in private?

[shell nova]

on a laptop?

[polar spoke]

the core is very likely not the issue even if it's dying

[clear jackal]

If you have questions, just ask. #infosec-general might be better because it's slower

[shell nova]

RAM is probably soldered in

[polar spoke]

depends on the laptop i guess

[neat belfry]

nah i said maybe sum1 here knows

[sand trench]

wants framework laptop

[sick lance]

Is this for homework?

[shell nova]

recent-ish lenovo

[spice salmon]

i know. i was just asking for help.

[shell nova]

framework didn't want my money last time I tried

[hazy flume]

when setting two lans on cisco packet tracer, and then adding a router, after the ip address assigning and default gateway, while configuring the router, what ip address to assign it if the two networks using different subnet?

[shell nova]

they kept rejecting my card

[clear jackal]

Patience is a virtue. Asking across multiple channels doesn't get you assistance any quicker.

[sand trench]

???
well kinda same here but they have since started selling to sweden

[sand trench]

oh huh so not same

[clear jackal]

#infosec-general is better because it's not moving fast. Answer @sick lance first though

[shell nova]

nah, they just didn't support the whole 3dsecure thing

[sand trench]

oh like the thingy that asks for swedish bankid when you pay with a swedish debit card???

[shell nova]

yeah

[sand trench]

welp that sucks

https://www.youtube.com/watch?v=NudylaHRXgM

here we go again

[gentle patio]

Hiii alll
I have uploaded a machine since yesterday and it is still converting with NaN% percentage, is there any issue on tryhackme? I need to upload it asap

[naive violet]

Hey, a lot of people are reporting this lately

I've asked some staff but not heard back

[gentle patio]

Ohhhhh noooooo since when

[neat belfry]

guys i gotta question, discord is 13+ right?

cuz if it is, why is it so easy to acces servers with adult content in it

[polar spoke]

why can i go on the internet, ignore the rules and warnings, and look at stuff!!!

[neat belfry]

like bruh, on discovery u'd see many many servers with crazy stuff

[naive violet]

This ain't the place for that tho

We aren't discord

You should ask them

[shell nova]

I mean there's a reasonable expectation of don't be stupid as well

[neat belfry]

yea they aint answering for shyt

[polar spoke]

I can't imagine why...

[neat belfry]

last time, i contacted discord support and got no response

[boreal scarab]

https://tenor.com/view/rock-water-random-stupid-spiritus-gif-22378889

[neat belfry]

im not joking, dem mf's dont care

[feral vine]

no regulation and 13 yo can access that type of content even outside of discord easily

[neat belfry]

💀

[shell nova]

lies! you get a wet rock

[opaque flax]

I feel like this is really a potato

[neat belfry]

not rlly, in america, in states like texas, u cant anymore

[polar spoke]

Hi, I'm in Texas, that's not even close to true lmao

[half girder]

would need a banana for scale to make sure

[opaque flax]

Hold on lemme go get one

[neat belfry]

it is, when i was there, i tried accesing it and it sent a message saying to verify

n stuff

[sand trench]

you get wet rock which is better for hole made hot food

[neat belfry]

like u cant js click 18 and older no more there, u gotta verify

with like proof

[polar spoke]

yes, if you pick one of the like 4 major MindGeek sites, you get a warning

that doesn't mean it's not easy to access

or that somehow the regulation changed how the internet behaves

[naive violet]

Not sure this is an appropriate topic for this environment

[polar spoke]

yeah, trying to stay in the guard rails here a bit

[neat belfry]

i mean most adult sites have that screen

[naive violet]

Let's move to a different topic please

[polar spoke]

^

[neat belfry]

i was lttry js in texas not long ago, i got tht screen, i did an expiriment

[polar spoke]

well, i've been in Texas essentially my entire life, save for some travel

so

I've got quite a good idea of how that regulation has impacted services across the internet and it mostly... hasn't

but again

new topic

[neat belfry]

bruh, so u tellin me im tweaking?

[polar spoke]

this is not the place to discuss

[neat belfry]

yea true

[rapid merlin]

coffee is like the best thing humanity ever discovered

[polar spoke]

there's better, it's just... not socially acceptable anymore

[rapid merlin]

lol

[devout palm]

A beer would also do

3 of em, actually

Sufficient enough to fly away

[rapid merlin]

I need a stimulant, not a depressant

[neat belfry]

I disagree

[rapid merlin]

unless im trying to reach the ballmer peak

[neat belfry]

bro coffee aint good for ur health

[devout palm]

Since when a beer is considered depressant?

[rapid merlin]

https://xkcd.com/323/

xkcd: Ballmer Peak

Apple uses automated schnapps IVs.

[neat belfry]

beer is a depressant, it slows down the central nervous system

[polar spoke]

the Ballmer Peak is real

[neat belfry]

which is what a deoressant is

[polar spoke]

ask me how i know

[rapid merlin]

most research suggests its perfectly healthy in healthy doses

[devout palm]

Nah that's a lie

:p

It's antidepressant xd

[jolly aspen]

Both wrong

[half girder]

i really wonder, i highly doubt you can reach the point with bud light xD

[polar spoke]

i wouldn't want to regardless lol

[neat belfry]

everything has a side effect

[sand trench]

it surpesses instead of stimulates hence why it is worse for technological development unless you got ballmer peak

[rapid merlin]

i agree

[neat belfry]

so you're wrong on this one

[chilly veldt]

there's a reason why all ctf players are alcoholics (joke)

[sand trench]

everything has a ld50

[jolly aspen]

It does both

[rapid merlin]

do show me a good paper that says coffee is always bad for your health lol

[jolly aspen]

It’s the one substance that actually ingresses cells uniquely to any other. Because alcohol is bipolar so there is a unique effect on lipid bilayers

[neat belfry]

beer dosent suppress, it depresses. it has a chemical called ethenal which increases the effect of gaba in ur neurotransmitter

[half girder]

well, once you reach the point you drink coffee before sleep, you only drink it for the taste anyways

[polar spoke]

Every year for CMIYC @ DefCon, I do my best to fit the stereotype 🙂

[neat belfry]

i didnt say its bad, im saying it has side effects

everything that has to do with medicine has a side effect

let me tell you that

[rapid merlin]

side effects doesnt mean its unhealthy. Also it only has side effects for some individuals

[sand trench]

shadow once again raises you that everything has a ld50

[clever adder]

Can someone help me with cyber security?

[rapid merlin]

yup

[sand trench]

depends on what specific niche part of cyber security you need help with

[chilly veldt]

understandable, I mean, it's crypto, you have to be drunk to know math

[clever adder]

pentest

[neat belfry]

well, to some extent it does and no it dosent only have side effects for some individuals, if it happens to person a, itll happen to person b

[polar spoke]

god tell me about it

[devout palm]

So that's the reason i want to sleep after having a beer

[half girder]

like viagra was intended to lower high blood pressure .. we all know it sold for the side effects xD

[devout palm]

I don't want to code or do computer stuff

[sand trench]

you are doing a pentest or you want us to pentest you????

[chilly veldt]

I can't, cause I don't know math xD

[devout palm]

But i realised coffee really works for me

[polar spoke]

lmao

[devout palm]

I can speak fluently, which means i can do critical thinking

[devout palm]

Normally i can't do it

[polar spoke]

sounds like something an LLM would claim

[neat belfry]

not rlly, it can make u feel relaxed and it negatively affects ur sleep

[young vortex]

When I drink coffee im getting so tired wow

[rapid merlin]

Not true. Some ppl have higher tolerances to caffeine than others. Also some are allergic to coffee while others arent.

[chilly veldt]

well I know basic math, but I dropped out of high school

[devout palm]

I said i wanted to sleep, didn't say i go to sleep

Yeah it makes me relaxed

[clever adder]

I am a beginner and I don't know much about pentest, I couldn't find a good source on the internet either

[devout palm]

Also you can very well go to sleep with a couple of beers

[sand trench]

#start-here

[devout palm]

Basically hungover

[sand trench]

shadow heavily dislikes the taste of alcohol

[neat belfry]

on average, the side effects ot caffeine are the same. high intake can lead to anxiety attack, coffee can cause stomach upset or indigestion and u can expirience withdrawl symptoms like headaches or irritabillity, it increases adrenaline too

[sand trench]

you heard it here first folks
showering in cold water which gives you an andrenaline kick is both good and bad for you

[neat belfry]

there are more positive affects than negative which is why its not unhealthy but again, the side effects are very much there

[neat belfry]

i made a mistake

[chilly veldt]

you testing out the new deepseek model?

[devout palm]

Tell me the good news first

[rapid merlin]

so you agree with my original point?

lol

[neat belfry]

yes

[opaque flax]

I happily had 1 monster sometimes 2 6 days a week when I was on nights

[neat belfry]

tf is deepseek

[rapid merlin]

so u just wanted to be a contrarian?

[clever adder]

thanks but, my pc need upgrade for open virtual box in tryhackme. another website or wiki/book?

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2071)

[neat belfry]

bro i on use ai

[rapid merlin]

U see this cat in my profile pic? I bet you wish you had one just like it

[chilly veldt]

I'm not your bro, dude

[clever adder]

my cat better 😎

[sand trench]

try using the attackbox on tryhackme then.... not much you can do without a good laptop/pc

[rapid merlin]

Pic?

[rapid merlin]

its ai generated xd

[clever adder]

yeah its my cat

[neat belfry]

matter fact ai is act good, i use tht sht for my homework, when sht gets hard, use tht mf

[rapid merlin]

Haha jealous

[neat belfry]

bro the relience on ai in todays world is alarming

[static perch]

Wouldn't it be great if we can access attackbox from like navbar?

[clever adder]

its like A****

[neat belfry]

ai is a big threat to human integrity

[rapid merlin]

Ah now it all makes sense xd

[clever adder]

okey. i try buying ssd

[rapid merlin]

lets outsource actual skill to an AI model lol

[neat belfry]

ai has goods and downs

[sand trench]

AI sure has its uses
LLM:S on the other hand is mostly plagarism machines

[neat belfry]

the good part is tht u can let it do ur work for u, bad news is tht it can take ur job from u too

or make u less. valuable

[rapid merlin]

its supposed to be at best an assistant. Ur not supposed to make it do your work for you sigh

[clever adder]

btw this server iq level high a another one

dont travel asia country

[young vortex]

?

[cloud lichen]

si

[clever adder]

??

[cloud lichen]

did they stutter?

[clever adder]

who?

[cloud lichen]

what dont you understand?

[clever adder]

no lol

[cloud lichen]

I know. this chat is gibberish right now. im outy

[rapid merlin]

well with your current attitude, an AI can easily automate you away in 4 lines of code

[sand trench]

well nah the IQ of this server is in the negative because shadow is giga stupid

[clever adder]

bro my bad sory

I meant to say this place has a high IQ

[sand trench]

shadows statement stays the same.... the generic IQ of this place is below the normal level because shadow is stupid

[clever adder]

who say shadow is stupid?

[sand trench]

because crows and octopi and squids are smarter then shadow :D

[lament tendon]

What'd you break this time? ;D

[sand trench]

local git repo

[lament tendon]

Ah, fair.

I do think everyone has to go through that at least 4 to 6 times in their lives. xD

[clever adder]

more!

[lament tendon]

More of what exactly? 😅

Please don't break any more repos!

xD

[clever adder]

xd

i back my poor vsc, cyber sec not for me ( for now)

[sand trench]

oh meeps: https://www.youtube.com/watch?v=4UfmqKc-u7Q

this is bad bug

[pearl pendant]

How does it make you less valuable? Just use it like everyone else, and make yourself more valuable thereby. It's just another tool

[lament tendon]

Heh. Have not updated my laptop in days.

[clever adder]

i use kali i am hacker🤓

[sand trench]

well this is just in arch-testing versions buit yeah

[pliant juniper]

Hey everyone, hope you’re doing great! I wanted to ask for some advice.

I’m an IT student specializing in Cybersecurity next year, and I’m currently looking for a summer internship focused on security roles.

I’ve been using TryHackMe—finished the Pre-Security path and making progress in 101—but I’m not sure what to focus on next. Should I go for Security Analyst or Security Engineer? Which one would give me a better shot at landing an internship in the next 6 months?
I’ve enjoyed CTFs, but I feel like the pentester path doesn’t match real-world roles right now, so I’m leaning more toward the defensive side.

My university also covers certifications for the next two years. Any suggestions? I’m currently working on AWS CCP and RHCSA to build a good foundation. Let me know your thoughts!

[crude stump]

Holy wall of text

[lament tendon]

Those I'd honestly say that neither path will give you an advantage over the other.
What people look for most for is being generally comfy with computers in general and, importantly, the interest and motivation to learn new stuff about something.
At least in my experience.
If you want to works towards an security engineering related internship, do that path, if you want security analyst stuff, do that.

If you are not sure what the difference is, I recommend you read up on it. ^_^

[sand trench]

soc level 1 and soc level 2 paths give you chances for soc jobs which are quite common for early cyber security people...... helpdesk is the way for simple early IT job

[clever adder]

yes is it

[lament tendon]

For getting a proper job, not just an internship, there will likely be higher knowledge and skill-borders.

[crude stump]

Plus can’t you do internships each year

So you could try both

[lament tendon]

Well, if you are still in school or college, unlikely.
We had a dedicated time frame where we were supposed to find an internship for a few weeks, was pretty fun.
But then it was time to go back to regular classes.

[sand trench]

in shadows gymnasium years there was a period of time where shadow needed 15 weeks of internship

[lament tendon]

15 is wild.

[mint dirge]

hey everybody!

[lament tendon]

It was 3 for us. Hardly any company wanted to hire anyone for that short, was relly difficult to find something for some people.

[lament tendon]

Hello.

[gleaming grove]

https://tenor.com/view/king-ghidorah-ghidorah-lightning-volcano-kaiju-gif-2559928746157546740

After days of grinding, IM BACK—WITH A NEW COLOR!

[mint dirge]

lol

[rapid merlin]

eyy

[mint dirge]

shiny

[lament tendon]

Coolio. ^_^

[gleaming grove]

potato color

[mint dirge]

thats a great color

[clever adder]

i use zapret

its very nice

[pliant juniper]

Thanks for the advice! The thing is, internships here are super limited, and you have to compete for them. Most of the time, they expect you to already have skills in the path, not just general knowledge or motivation to learn. So yeah, I need to choose a path and focus on it!!

[twin ridge]

Gave +1 Rep to @lament tendon (current: #37 - 238)

[pliant juniper]

Thank you!

[lament tendon]

+rep @sand trench

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2072)

[clever adder]

i dont translate 😭

[pliant juniper]

+rep @sand trench

[lament tendon]

You are on cooldown. ;D

You cannot spam the rep commands, so I did it for you. ^_^

[pliant juniper]

ohh thanks

[clever adder]

+rep @sand trench

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2073)

[clever adder]

nice

[gleaming grove]

MAGIC SPELL~~~||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||||​||_ _ _ _ _ _ _ ty

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2074)

[clever adder]

report

[lament tendon]

Shadow's not going to be surprised about 20 million pings at all.

[clever adder]

yes

[knotty cargo]

Yo yo yo

[gleaming grove]

yoo gigachad

[mint dirge]

lol

thats a great name

[knotty cargo]

I havent been here since days

[gleaming grove]

yeah me too, i was lock-in

[lament tendon]

@sick lance

[gleaming grove]

@sick lance

[lament tendon]

Don't click on this, guys. ^_^

[knotty cargo]

lock n load

[gleaming grove]

but. but the 50 bucks

[sand trench]

yeah that is common enough that shadow just noticed them when they got time

https://github.com/EnhancedJax/Bagels

why no linux install instructions ;M;

[knotty cargo]

We missed a great deal 😭

[opaque flax]

Again?

The url is steamn cummunnuty lol

[knotty cargo]

Ive a friend that dosent knoe anything but a pro at reverse engineering

[sand trench]

shadows forte in hacking is probably sadly game hacking

[knotty cargo]

He can barely do subnetting but he can find buffer overflows and debug binaries etc

[rapid merlin]

this looks awesome whatever this is lol

[sand trench]

which is not very popular

[knotty cargo]

Roblox hacking scripts

[sand trench]

expense tracker... i.e to keep track of what amount of money you have spent each day and figuring out your stuffs

[sand trench]

naaah mostly single player games

with things like cheat engine or pince

[rapid merlin]

I've always wanted a terminal based everything app :>

In this case it's just finances but thats awesome too

[knotty cargo]

That dosent count for me

[sand trench]

well not touching multiplayer game hacking for a lot of reasons

mostly it is unethical

[knotty cargo]

If i accepted selling roblox scripts i'd be a millionare now but

Gigachads dont live off cheats

https://tenor.com/view/giga-chad-gif-23143840

[sand trench]

though have had some fun with creating mods for games using lua and json and java

which could be considered hacking in some instances

[knotty cargo]

Lua is my faviorate

I coded a roblox game with lua over 5000 lines

It was some great days

[sand trench]

here is shadows current fun time with game hacking: https://www.twitch.tv/papa_jefe

[devout palm]

xd

[sand trench]

he is using random number generator manipulation and hacking in pokemon emerald

@naive violet if you are still here

[knotty cargo]

Bro thats wild 💀💀💀

[sand trench]

that is going further then most people would but fair

[knotty cargo]

Whom here believe in transgender nonsense

[devout palm]

Meh, what do you expect from morons

[knotty cargo]

I thought u deleted it for rule 9

[devout palm]

I deleted it because it would look like a reply to your message. I meant to imply the malware author by "moron".

[gleaming grove]

im doing jabba's room

[thin hound]

Can clicking on a link actually hurt you though? Unless it’s a zero day of some kind?

[devout palm]

And transgender is not a belief

[rapid merlin]

Yikes.

[knotty cargo]

Quick reaction ✅

[sand trench]

well dunno but not gonna go and check...

[knotty cargo]

Thats a reaction for a guy well not younger than 18

[devout palm]

Wdym

[sand trench]

https://www.virustotal.com/gui/url/08ec3d386770ddb9359db2c1d50bdfd41966e4e20f1576328ff265479e4a46e2/community

[rapid merlin]

Rule #2

[sand trench]

here you go guys

help with downvoting the reputation of this link

[opaque flax]

I need a virus total account

[devout palm]

Don't have a virus total account

[knotty cargo]

The action and time u took for it is an average for 24 yrs old

[polar spoke]

VT is great, just be careful what you upload 🙂

[sand trench]

guess shadow is special for having a virus total account then

[rapid merlin]

still trolling?

Imagine being 18+ and trolling on discord for days at time

[knotty cargo]

Not talking to u

Nd im not trolling

U made it look like on now

[devout palm]

I didn't get what it has to do with age

[polar spoke]

some people don't have jobs or better things to do

[rapid merlin]

Rule #1 and Rule #2

That TUI finance tracking app is so cool I wanna make something similar now :>

No constroversial topics and no being rude

[knotty cargo]

Brah

[rapid merlin]

Right

[rapid merlin]

"brah"... what are you 12?

[knotty cargo]

Nevermindd

[rapid merlin]

Oxymoron af'.

[gleaming grove]

you got a cellphone in your cell?

[rapid merlin]

Shhhh..

[knotty cargo]

Bro ur the one acting like 12 lol

[rapid merlin]

Don't tell anyone, they will raid my cell

lol

Crazy how many people sent me friend requests and shit thinking I'm real

[knotty cargo]

And choosing the number 12 specifially is for a bad purpose

[polar spoke]

just tell them you're on hold with United still for your claim

[rapid merlin]

That's a good one

[gleaming grove]

fr? JAJAJAJAJA

[lament tendon]

Yes. There are multiple different types of vulnerabilites like XSS, XSS injection (kind of a rare one) and other stuff you really don't want to risk.

[thin hound]

Yeah but this clearly doesn’t have XSS in it or SSRF or others

[sand trench]

how can you know that without risking it and looking at the source???

[pliant onyx]

Is there a mod up rn

[lament tendon]

I can be embeded in a JS tag on the site you are visiting.

[sand trench]

scrubz seems to be here soonish

[pliant onyx]

Guide them to #1332425025399292044 when they come

[devout palm]

I can actually analyse the JS code for ya folks

Worth a blog post?

[pliant onyx]

And no one click any links

NO LINK CLICKING

[rapid merlin]

Yes, for real. Even on this mobile FF-type game I play. I got like 30+ friend requests the first 3 days I started playing.

[lament tendon]

In this case it would be CSRF. ;D

[lament tendon]

In case you want to deepdive into what is possible by just having Javascript run within our browser, I recommend you look up the BeEF exploitation framework.

Pretty cool tool.

[devout palm]

Also browsers are in sandboxes

[lament tendon]

As they should be. xD

[polar spoke]

honestly, I don't think there's much or any risk from clicking a link like that these days barring a browser specific exploit or you entering creds or downloading and running something

but wouldn't suggest anyone click links they dont trust regardless

[sand trench]

wait is firefox in a sandbox??? thought that is what people used firejail for

[devout palm]

And i guess they wouldn't waste a sandbox evasion with fake steam xd

[grim sparrow]

Done!

[rapid merlin]

It would be funny if someone made a kernel-level browser

[devout palm]

Why thoo

[sand trench]

+rep @sick lance to the rescue

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3318)

[rapid merlin]

Because they feel like it

[lament tendon]

It has site isolation as far as I know.

Something, at least.

[sand trench]

oh right

it also has multi account containers for shadow :D

[lament tendon]

firejail is cool tho, you can start all sorts of stuff in there. Wonder how effective that is tho.

[sick lance]

Ok, I have a serious issue with this.

[sand trench]

shadows main gripe with it is if there is a vuln in firejail they get suid bit perms if exploited

now there is no telling if such vulns exist or not

just shadow is spooked by that possibility

[opaque flax]

Multi account containers has been a savior for work

[sick lance]

This is no way to speak about a lifestyle of a community member, I'v already removed three users this week with transphobic/xenophobic/racists views.

You can consider this your last warning.

[gleaming grove]

terry would

[opaque flax]

I manage over 100 clients and tenants

[lament tendon]

Lucky me, I'm just skipping the firejail part altogether, hehehe.
But I also got NoScript on block-by-default, I guess.
Won't protect me against anything, but it'll do.

[rapid merlin]

yess xd

[sand trench]

shadow just uses ublock origin in hard blocking mode

[devout palm]

Naa terry wouldn't do glowy behavior

[sand trench]

it is a huge reason why a lot of people can't use google chrome or chromium based browsers

as multi account containers have such huge usage potenital

[devout palm]

https://tenor.com/view/glowie-gif-24523736

[lament tendon]

I have that as well. But it blocks ad domains, while NoScript just blocks all javascript everywhere and I can reenable it for only the domains I need and for only as long as the session is open.

[sand trench]

noscript is maybe not fully dead but eh

[lament tendon]

Pretty neat plugin.

[devout palm]

I use Brave, simple and fast. It has built-in ad blocker.

[sand trench]

ublock in advanced hard blocking mode blocks javascript if you tell it to

so you can have it block all javascript by default there too

[polar spoke]

why block all JS by default?

[rapid merlin]

ye if u want that old web experience of exclusively seeing static html/css :>

[lament tendon]

It still ships with current Tor installations, even.
Its just less of an adblocker and more of a quality of live upgrade for people that don't like javascript. xD

[polar spoke]

that's going to do more to break usability than to protect you from much imo

other than maybe some basic tracking stuff

[lament tendon]

Because me no trust.

[polar spoke]

fair enough

[lament tendon]

Well, the stuff I need is enabled on a per-domain basis.

[sand trench]

yeah and shadow is fully aware of this... hence why shadow go through the trouble of figuring out what needs unblocking to work for each site they use often

[lament tendon]

Same.

[sand trench]

it is a once setup cost and after a bit better privacy and security

[polar spoke]

yeah

[gleaming grove]

well thats dedication

[sand trench]

dedication and persistence is part of the things shadow has good skills in

[sick lance]

I use Malware-bytes extentions and VT4.

Anything I download gets automatically sent to Virustotal.

[cunning igloo]

Where can I post a question regarding Cybersecurity / Awareness in RL I have a question and need a second opinion

[gleaming grove]

and cheese knowledge 🧀

[sick lance]

Here.

[sand trench]

naturally

[lament tendon]

I got no download checker, to be fair.

[sick lance]

Waaaah

[lament tendon]

Ah, the convo is back. xD

[sick lance]

@cunning igloo Is this homework?

[cunning igloo]

No its not I need a second opion about an issue I'm facing

[sick lance]

Ah, could you please upload as a file, that was a massive wall of text. 😄

[gleaming grove]

how do you know so many?? im impressed

[lament tendon]

How are you dealing with downloading personal stuff, idk, medical documents and such?
Does it prompt you for an upload?

In that case I might be interested in that extension. :3

[polar spoke]

Trust me on this, DON'T do this

[sand trench]

reading through the database shadow has multiple times over and always rereading the one that is posted for the day

[polar spoke]

automatic VT upload is.... not recommended imo

[sand trench]

also read through the wikipedia page on cheese quite a few times too

[lament tendon]

If not, you should maybe attempt to remove your stuff from VT now tho. xD

[gleaming grove]

wow thats a lot of work

[sick lance]

Which one?

[polar spoke]

the VT upload

[sick lance]

Oh, I don't use it for personal stuff.

But I can remove it.

[polar spoke]

i mean, even then, i would suggest against it

VT is a great resource

but it's also a DLP nightmare

everything that goes into it, comes out the other end for some of us

[sick lance]

Oh, I know, I had a sub a few months ago and got pinged when a few quesitonable files came.

[clear jackal]

This

[polar spoke]

yeah, if you spend some time on setup, you can catch some very juicy stuff

i see it multiple times a day, every single day

[clear jackal]

Like financials

And accounts related to financials

[sick lance]

I no longer have a sub. 😦

[lament tendon]

What's DLP an acronym for?

[polar spoke]

I've had to alert companies to complete infra compromises via VT

[sick lance]

Data loss protection

prevention

sorry

[lament tendon]

Ah, thanks. ^_^

[twin ridge]

Gave +1 Rep to @sick lance (current: #1 - 3319)

[polar spoke]

like, keys to the kingdom in easily searchable files

[clear jackal]

Prevention/Protection I think either is fine

[polar spoke]

just flowing into VT with no regard

[clear jackal]

Yep

[sick lance]

I've only been doing it for a few days, I've only really fed a few binaries and python scripts.

[polar spoke]

yeah, I see a ton of it from the browser extension but there's also plenty of other things that feed it

some i still haven't identified

it's a mess

stuff just flows into it all day long and i have no idea how some of it ends up there

[clear jackal]

iirc what I saw/was informed was that every hash and contents of a new executable being run were submitted to VT

[sick lance]

I'm really interested to set something up now so I can have a nosey.

This could have been a good dissertation.

[lament tendon]

How come you get so much insight into this?
Job related?

[clear jackal]

Which is more than bad, you're self breaching at that point because it's all searchable on VT with their paid stuff

[cunning igloo]

I hope this is fine:

[sick lance]

This is so much better, you're asking for help, being descriptive, and not taking up half the screen (and my screen is on potrait mode)

[polar spoke]

Nope, just have access

[sick lance]

And an interest.

[lament tendon]

Fair, fair, makes sense.

[polar spoke]

nosey isn't even the half of it haha

[sick lance]

It's not really something I can assist with, somebody might be able to though.

[polar spoke]

you should see what shows up

[lament tendon]

Do you need a subscription for that stuff?

[polar spoke]

yes

and it's wicked expensive to get VT Enterprise

[clear jackal]

Students and certain research categories can access for free if approved

[polar spoke]

and difficult too iirc

yes, research allocations exist

[sick lance]

Oh RLLY.

[polar spoke]

but you are restricted a bit

[lament tendon]

Ah unfortunate. Got a Shodan membership tho, that place is yet another treasure grove. :D

[lament tendon]

Ouh, that is fancy.

[lost birch]

Which place is this

[clear jackal]

VirusTotal

[lost birch]

Oh reallyy

[clear jackal]

Their enterprise engine

Or whatever they call it

[polar spoke]

get comfortable writing their custom YARA though

for live rules at least

[lament tendon]

xD

[polar spoke]

there's a lot of quirks to it

that make it difficult if you aren't used to working with their specific stuff

[sand trench]

not sure where shadow heard this but heard things about google dns being used to track users by what domains they quried so would not be surprised if a chinese dns server did the same

[lost birch]

Isn't the google DNS free? 8.8.8.8?

[clear jackal]

Feel like that's not just Google

[sand trench]

not a lot of meta data in dns requests more then source ip being your natted ip at home plus the domain name and a cache value last shadow checked

[polar spoke]

DNS is it's own rabbit hole and I will refrain HARD from getting into that one

there's just so much going on there

[sand trench]

unless you count time to live as a meta data point

[clear jackal]

ISPs have used it forever to track people/stuff

[lost birch]

What use do ISPs have with it? Unless they build shadow profiles

[sand trench]

true... shadow just don't have any ready available source hence why the not sure where shadow heard this

[polar spoke]

ISPs are your first line of DNS lol

[sand trench]

isps have been caught injecting their own ads on connections in the past but yeah building advertising profiles basically

[polar spoke]

they have a vested interest in keeping your DNS queries with them first and foremost because it allows them to serve local cache and such

[clear jackal]

Sell your data

[rapid merlin]

how do you feel about using unbound and https://quad9.net/

[sand trench]

good enough for most people

[lost birch]

Classic -_-

[sand trench]

if you want better then most people you could set up a pihole using unbound and quad 9 as the upstream dns provider

[lost birch]

When you say most...

[sand trench]

and there clarified

[lost birch]

Mhm

[sand trench]

if you want super mainstream dns server though shadow would point people at 1.1.1.1 from cloudflare

not googles 8.8.8.8

if you want even better then just regular pihole you would setup dns over https or dns over tls or dnscrypt

[polar spoke]

if you are using custom DNS, know that you may be losing performance and gaining latency to all sorts of services

[sand trench]

yeah hopefully

[cunning igloo]

So that means they can get some information and still can use it to track and analyses an companie and still using for phising / spam ?

[polar spoke]

e.g. Netflix local cache system at your ISP vs wherever google or cloudflare decide to route you

could significantly lower perf if you aren't aware eof it

[sand trench]

potentially yes if they do reverse ip lookups

[opaque flax]

Im my own first line dns

[lament tendon]

I don't use DNS, I have a physical notebook with a lot of funny numbers in it.

[polar spoke]

lol

[cunning igloo]

So My concerns are correct specially when it goes over china.

[sand trench]

ipv6 or ipv4???

or are you the rare ipv5 user????

[polar spoke]

IPv7

why use longer addresses when you can just 64bit it

[sand trench]

don't think an ipv7 version has even started being developed but could be wrong

[polar spoke]

although i guess that's still technically "longer"

it was proposed years ago

there's an RFC and maybe some other documentation

but it was never adopted for anything

[sand trench]

fair enoughs

[rapid merlin]

what ever happened to IPv5?

or was that just odd?

[loud marlin]

https://tenor.com/view/deer-ice-gone-jumping-gif-13261777

[sand trench]

https://en.wikipedia.org/wiki/Internet_Stream_Protocol

[lament tendon]

I don't know what that is. I don't know what DNS is either. I just have a notebook with really hilarious numbers such as 228855 and 12345678. :D

[empty pier]

How to exploit the ftp port of a web server

[lament tendon]

That really depends on the web server.

And service version.

And configuration.

[opaque flax]

What

[sand trench]

feel like that wikipedia article is a good history lesson for a lot of network technicians

[opaque flax]

Yeah it depends

[loud marlin]

and color of rainbow

size of the sun also

[crude stump]

How to

[empty pier]

Mm

[rapid merlin]

Need tea

[crude stump]

Makes me laugh “how to”

[lament tendon]

https://hacktricks.boitatech.com.br/pentesting/pentesting-ftp

Have fun.

[empty pier]

👍

[crude stump]

How to get up

[lament tendon]

Next time you can also just put this exact sentence into your search engine tho, it'll show you a bunch of helpful stuff. ^_^

[sand trench]

shadow has probably messed with dns more then most people

just because they thought dnssec and encrypted dns is fun

not to mention dns blocking lists

[rapid merlin]

some of those DNS exfiltrators can be pretty fancy code wise

[lament tendon]

Got to help set it up in an internal network recently, and by help set it up I mean watch a guy click one button and then have the ansible pipeline do everything else. xD

[opaque flax]

Thanks pihole

[twin ridge]

Gave +1 Rep to @sand trench (current: #4 - 2075)

[sand trench]

yeah shadow now uses nextdns

[opaque flax]

Yeah I use my domain controller as dns then it forwards all requests to my pihole instance

[sand trench]

mostly because it has some nice features standard pihole does not provide
and because shadow did not feel like running a pi all day every day for pihole

[opaque flax]

Pihole is then set to I think cloudflare and Google

[rapid merlin]

I remember running/maintaining BIND 4 😄

[opaque flax]

Oh my pihole isn’t on a pi

[sand trench]

well shadow could run pihole in docker too

but eh

[opaque flax]

Mines in an lxc

[sand trench]

main problem with self hosting the pihole is how often shadow relies on their nextdns instance on their phone when out and about in the wilderness next to the telephone towers

[rapid merlin]

it is easy to end up with a complex setup

I got my tea

👌🏻

[empty pier]

Is there any vulnerability on php version 7.4.10

[placid lagoon]

try googling

[empty pier]

I googled but

[lost birch]

Google works better

Oh haha

[empty pier]

There is no major

[lost birch]

No major what?

[clear jackal]

What's this for?

[lost birch]

good question

[empty pier]

To hack a web server

[lost birch]

who owns the web server

[clear jackal]

Where is the server located? Who owns it? Is this homework?

[empty pier]

No

[lost birch]

What made u want to hack it tho

[placid lagoon]

Is it a tryhackme challenge?

[empty pier]

Just a 😋

No bro

[lost birch]

Bro 🤣🤣🤣🤣

[clear jackal]

I don't know that I recommend you lick a webserver

[empty pier]

Ok bro

[clear jackal]

Not your bro

What is this for?

Is this a TryHackMe room?

[lost birch]

ping 192.168.1.1

[placid lagoon]

The way he responds gives me the impression that he's using google translate

idk

[wheat hare]

The amount of times I've entered pint <ip> instead of ping <ip> ...🤦

[lost birch]

Cheers bro 🍻

[jolly aspen]

Does it work 🍺

[lost birch]

Sorry I didn't read it all

I saw pint

[rapid merlin]

The amount of times I've entered gut push instead of git push 🤪

[empty pier]

Bro i want the variables of php 7.4.10

[sand trench]

well if you are doing that on linux you can set an alias to avoid the problem

or setup a function that tells you it is ping you meep moop not pint

[clear jackal]

Are you doing a TryHackMe room?

[empty pier]

No bro

[lost birch]

https://tenor.com/view/the-boys-the-deep-bro-gif-9003163676469616067

[sand trench]

Overcast ☁️ +2°C (-1°C): ↑3.1m/s: 100% humidity: 0.0mm: 0 uv: 991hPa
well this feels like nice weather for january

[opaque flax]

I think php has a lot of variables

[empty pier]

I am trying to hack a website server

[empty pier]

Yes

[lament tendon]

PowerShell has aliases too!

[opaque flax]

Do. You have permission to hack it?

[whole gazelle]

yessir!

[empty pier]

Bug huntting bro

[sand trench]

yah but not sure if you can set those to permanently stay each time you open a new powershell window like you would do with bashrc or zshrc

[lost birch]

what scope Lil bro

[lament tendon]

You can. ^_^

It's a bit scuffed tho.

Linux is just better.

[jolly aspen]

Deets

[lament tendon]

(And now we wait for the arguments to start.)

[sand trench]

agree whole heartly with linux is just better

[jolly aspen]

What does powershell call aliases? The same?

[lament tendon]

Yea.

[opaque flax]

Yeah the same

[lost birch]

Is it a cmdlet or...

[opaque flax]

Powershell has tons of aliases

[lost birch]

Oh nvm

I know what u mean

[opaque flax]

Get-childitem is ls

Curl or wget is invoke-webrequest

[jolly aspen]

Ahhhhhh ok right

Yes I’ve seen this

[lost birch]

still use cat anyway

[lament tendon]

Get-Childitem is like that part that is not the alias tho.

[lament tendon]

Forget I said anything, I can't read.

[silk cosmos]

HI can someone help me please?

[rapid merlin]

I’m so tired

[silk cosmos]

Im in OWASP Top 10 - 2021 room

[rapid merlin]

You should post it in room-help

[silk cosmos]

section 4 ask me to go http://MACHINE_IP and its not work

[lament tendon]

There should be a green button that says "Start machine" somewhere.

After that you will get an IP address that you can connect to to using the attack box or the VPN.

[worn turret]

Thoughts on deepseek

[silk cosmos]

Yes this what I did

[lost birch]

I'm glad we have innovation. And its open source. Stocks can take the hit in the short run

[grizzled wing]

people having issues today

[placid lagoon]

try http instead of https

[lost birch]

This isn't an etc/hosts issue right

[lament tendon]

You are going to https://... while you need to visit http://... instead. ^_^

[opaque flax]

They’re calling deep seek agi?

[grizzled wing]

deepseek is top of charts

[silk cosmos]

OMG

thanks

[rapid merlin]

Hi everyone! I’m Demmy from NYC. I’m new here and excited to be part of this community. I’m a student and a budding entrepreneur, working hard to support myself through school on my own. Looking forward to engaging conversations and hoping to feel right at home!

[sand trench]

doubt we actually got artificial general intelegence in the vains of how it is depicted in sci fi

[grizzled wing]

hi demmy

[lament tendon]

Happy to help.

[lament tendon]

Welcome.

[grizzled wing]

AGI is vague and not near to happening

[rapid merlin]

Thanks

[twin ridge]

Gave +1 Rep to @lament tendon (current: #37 - 239)

[rapid merlin]

No GlaDOS yet

sadge

[upper knoll]

until i have halo cortana im not happy with ai

[mellow sky]

which has more real world style boxes - HTB or THM?

[lament tendon]

In my opinion, HTB.

[upper knoll]

but if your newer thm is far more friendly

[lament tendon]

But getting into it is a lot more difficult then THM.

[upper knoll]

htb is more advanced

[lament tendon]

For learning content, I prefer THM at the moment.

[opaque flax]

HTB usually

[mellow sky]

HTB does have academy now, but its pricing scheme is a bit stupid

[opaque flax]

But as others said htb is harder

[half girder]

htb academy is rather like reading man pages

[mellow sky]

THM is defo better value for money, but I remember when i was doing boxes few years ago some felt very CTFY

[half girder]

their hands on approach is ... improvable 🙂

[opaque flax]

I’d expect ctf boxes to feel ctfey

[boreal scarab]

https://tenor.com/view/chicken-biryani-imma-chicken-chicken-drip-imma-chicken-drip-imma-drippy-gif-10415340344260732617

[silk cosmos]

But HTB not work only for infrastructure PT ?

[upper knoll]

how u doing good sir!

[silk cosmos]

and less APP ?

[lament tendon]

To be quite fair, HTB boxes don't really feel like real pentest engagements either.

[mellow sky]

what about pro labs?

[boreal scarab]

https://tenor.com/view/ohmygodtu-abokit-اومايقوتو-oh-my-godtu-gif-16716321040528611414

[mellow sky]

ive seen them advertiised

[clever meadow]

watched Pantheon as if I were cramming for finals or watching a lecture video.

[opaque flax]

Thm has similar

[lament tendon]

Not sure, didn't pay for those.

[opaque flax]

To pro labs as well

[boreal scarab]

https://tenor.com/view/black-cat-couch-peek-sneek-gif-27576117

[mellow sky]

oh u mean like wraith?

[half girder]

never tried pro labs, only did a few boxes

[opaque flax]

Yeah

I’m saving my prolabs until I finish the academy path

Then use it to for practice CPTS

[silk cosmos]

Good place to lean APLICATION PT ?

[lament tendon]

Anyhow. Leaving. See you guys around.

[silk cosmos]

PortSwigger is good?

[mellow sky]

are there any websites that provide like real world simulated retired networks with machiones u can pentest not just something made by a random user

[silk cosmos]

Good night 🙂 @lament tendon

[lament tendon]

PortSwigger is good for Webapp/API pentesting.

Not sure whether they got any application stuff as well.

[lament tendon]

Sort of rare, I got no names for you.
Closest you'll get to the real deal is bug bounties, but that'll require some experience.
No clue how well versed you are.

[mellow sky]

still starting out, just curious for future reference

do tiny companies also host bug bounties

or is it just like paypal amazon etc

[lament tendon]

Sometimes.

You can check the bounties on platforms like HackerOne.

[opaque flax]

You can also look for a VDP

[sand trench]

yeah best bet is checking sites like hackerone for bug bounty programs

[opaque flax]

Which is basically bug bounty without the prize

[sand trench]

welp shadow gotta dissasemble their ploopy headphones headband as the clamping force is too light

[opaque flax]

I’ve heard vuln lab is a step up from htb

One day

[sand trench]

test test

[loud marlin]

test run ok

[sand trench]

well then one of those external cmus programs works :-:

[hollow turret]

a

[mint dirge]

Would love to pick at somebodys brain regarding installing kali. I've got oracle virtualbox and have setup kali via iso in the past. Issue I've ran into the last few installs is it seemed unstable (from my very limited knowledge) and would freeze and crash at times or wouldn't boot via oracle virtualbox. My curiosity is how others have setup Kali. What have you used to setup a VM? Is Oracle VirtualBox the way to go? Could it be the amount memory, threads, etc. I give it? I've now got a USB I keep the latest kali install iso on. Looking for thoughts, advice, etc. as I move forward.

[opaque flax]

VMware workstation pro and the prebuilt vm image

[mint dirge]

any suggested links or places to read up on this? Do you have any reasoning why you prefer or suggest it? Or is this more of the standard?

[opaque flax]

It just works better for me and you can find the prebuilt vm image on the Kali website

[blazing granite]

I use qemu/kvm and use iso

[blazing granite]

that's an easy solution 🙂

[opaque flax]

That’s why I suggest it

Imo vmware works better and all you have to do is import the image

Then Kali

[blazing granite]

if I want a quick vm I download the ova, but 90% of the times I use iso because I like the options to set up things my way

[rapid merlin]

What’s everyone up to ?

[mint dirge]

You mean like the virtual machines settings or the install?

[mint dirge]

is doing it that way the same as running the iso and installing? whats the same or different

sorry for 20Q, just curious and want to know.

[blazing granite]

both

[opaque flax]

No you just import the virtual machine and hit start

[opaque flax]

For me default settings are fine

[rapid merlin]

I have no friends

[blazing granite]

sometimes is fine, but even if I don't change anything I want to have that option just in case. I'm kind of neurotic that way 🙂

[rapid merlin]

So bored I’m gonna open Duolingo
And study some language

[untold zephyr]

Study arabic

[elder peak]

Watching BHIS - Talkin' Bout infosec News.

[blazing granite]

nice language

[rapid merlin]

No thanks, I’m doing Norwegian

[twin ridge]

Gave +1 Rep to @untold zephyr (current: #2631 - 1)

[rapid merlin]

Nice I need to watch some

[grizzled wing]

i did Bolt CTF mostly on my own ! 🎉

[rapid merlin]

Ohhh good job

[grizzled wing]

just needed some ideas on some stuff

[grizzled wing]

i also was watching

[devout palm]

Chill billing

Bing chilling

Wbu?

[grizzled wing]

Tib3rius is live 🔴

[rapid merlin]

Well the more I look into my case the more I just want to leave this country.

[elder peak]

Nice. I was busy earlier so I missed the live stream, so watching it now.

[rapid merlin]

But also practicing some Norwegian

[grizzled wing]

Norway is the way

[devout palm]

Same.

[elder peak]

Norwegian Black Metal 🤘

[rapid merlin]

I love the languages up that way. Norwegian and Swedish ❤️

[full wave]

hey i want to set up my home lab for cyber? does try the hack help me to set up a lab?

[rapid merlin]

Ah yes

Please send more

[grizzled wing]

i enjoy Finnish Metal

[elder peak]

I enjoy some good ole, Old Man's Child, out of Oslo

[sand trench]

finland is the most metal country based on metal bands per 100k people

[grizzled wing]

Scandinavia own the Metal music in my book

[rapid merlin]

Oh wow

Do you think I would survive if I left England and just lived abroad

[fervent ruin]

for some reason i have to type "-p1-65535" if i want to scan all ports, using "-p-" not working

[rapid merlin]

Got a job out there somewhere

[sand trench]

depends on how good your english is

[rapid merlin]

With my kid

I’m English

[sand trench]

yes exactly this is why it might be a problem

[rapid merlin]

My Norwegian is basic

[grizzled wing]

you can also leave it out

[rapid merlin]

I’m confused

[grizzled wing]

nmap -Sc -sV $ip

[sand trench]

plenty of native english people who have poor english

[rapid merlin]

Because I’m English it might be hard for me to live abroad ?

Oh

[rapid merlin]

I call it the funner grammer language 🤓

I can articulate my sentences correctly. I think 😂

If I want to be professional I can

I’m just lazy on discord.

😌

laid back 🙂

[grizzled wing]

englishhhhh

[rapid merlin]

On discord I’m a bit of a plebasaurous

[grizzled wing]

the plebs

[rapid merlin]

But you should hear me speak to the people on the other end of a pay check.

[fervent ruin]

i thought if i do that way it only scans like 1000 ports

[grizzled wing]

the fast top ports is -F

[rapid merlin]

My Norwegian though is pretty bad

[fervent ruin]

ok, thank you

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #57 - 150)

[sand trench]

yeah that is just top 100 ports though

[grizzled wing]

i speak Python

[sand trench]

default is 1000 most common ports

-F is top 100 most common ports

[rapid merlin]

@grizzled wing what is a good metal album to listen to?

[sand trench]

-p- is all ports

[fervent ruin]

this not working for me

[sand trench]

though -p- depends on where in the command it is placed

[fervent ruin]

oh ok

[rapid merlin]

Yeah we will call it that 😆

[sand trench]

sudo nmap -A -T4 -vv -p- -Pn 10.10.253.16

generally the command shadow uses

also that ip should probably not have been included

but doubt it is online anyways

[grizzled wing]

i enjoy this Ukrainian band
https://youtu.be/ZIGxetR8XrE?feature=shared

[fervent ruin]

how to i get the subscriber role?

[sand trench]

subscribe to tryhackme then rerun the verify command

[fervent ruin]

subscribe where

[grizzled wing]

PsyBeast is a 0xVisionary

[sand trench]

can't get the link as already subscribed and it does not show up in the options then D: