#general

1 messages · Page 820 of 1

somber surge
#

still not loading

quick blaze
#

are you sure 🤔

somber surge
quick blaze
#

😮

#

try to regen config file, or just use the attackbox?

mossy river
somber surge
#

too slow response

mossy river
#

It's all voluntary, please be patient someone will help you if they can:)

somber surge
#

i am kinda stuck on this not able to proceed pls help me out admin

mossy river
#

I'm not around at this time, I'll help if I can when I'm back

grim sparrowBOT
#
Pong!
API Latency

114ms

Client Latency

370ms

sharp citrusBOT
#

@bright tartan

TryHackMe's Website

You should know our website by now!

mossy river
somber surge
#

uh

quick blaze
somber surge
#

let me try

#

still not loading

quick blaze
#

try pinging 10.10.10.10

polar shale
polar shale
sand trench
#

and that was a quick 45ish mins

somber surge
quick blaze
polar shale
#

Very based

upper minnow
polar shale
# upper minnow why?

all is jokes lol haha just my opinion anyways never been a fan of pentesting distros i like to configure everything myself

upper minnow
#

hm

quick blaze
polar shale
#

As much as i can without wheeling

upper minnow
#

was thinking if i should just download everything on my arch

somber surge
mossy river
#

@quick blaze @somber surge Can you continue this in #site-support please?

#

Thanks 😄

polar shale
#

You will have a lot more of an understanding of package management, utilizing your os .e.g rather than out of the box shit with specalized distros

dark mason
polar shale
#

I would rather use the attack box on a free plan then install and daily drive kali lol

#

Or run in vm really**

chilly veldt
#

Enough

polar shale
#

Anyone eith Kali installed on bare metal is insane 💀

quick blaze
#

🤔

polar shale
#

Counter strike?

#

Lollll

#

I have 1k

#

Played since i was 14

polar shale
#

I actually have more of a life then i thought

#

Gmod 600 hours tho kek

topaz topaz
#

Stranded in the capital with no place to stay, freezing cold and stopped at a tavern to warm up and have some wine 😂 hope you're all having a better evening

polar shale
#

I used to know a guy in college running kali on bare metal laptop and he would randomĺy whip out his laptop and apt upgrade && apt upgrade in front of people/teachers to look mysterious 💀 💀

sand trench
topaz topaz
polar shale
#

Im in burger landia tf is a tavern

wooden totem
#

I regret it

polar shale
polar shale
upper minnow
#

I don't dven wanna know how much i had on lol

polar shale
upper minnow
#

i mean on league of legends

polar shale
#

My idea is that no time is wasted as long as you are enjoying yourself

quick blaze
upper minnow
upper minnow
quick blaze
polar shale
upper minnow
#

dont even have it installed anymore

wooden totem
quick blaze
#

pure..addiction..

chilly veldt
dark mason
#

I am insane

polar shale
dark mason
#

You are not wrong, but I still take offense

upper minnow
chilly veldt
polar shale
quick blaze
#

1k on dota is just crazy, i played dota 2 for like 15 minutes and i got sick of it

polar shale
quick blaze
quick blaze
polar shale
#

Sounds like some minecraft 2 type beat

wooden totem
#

playing rust is like sumbitting a form to be tortured

polar shale
quick blaze
somber surge
#

any admin is there

polar shale
wooden totem
polar shale
chilly veldt
#

I've played like 2k in lol

somber surge
#

already there i need assistance kinda stuck for hours

quick blaze
#

😭

quick blaze
#

he just said it earlier 😭

polar shale
austere verge
#

A thousand images just flashed through my mind

polar shale
topaz topaz
quick blaze
#

no more big boykisser images in the chat please im in a very dark room and i just got FLASHBANGED.

polar shale
topaz topaz
#

I miss my bed I'm tipsy and tiredd

#

Have a nap for me

quick blaze
#

WAIt

#

No

#

NO

polar shale
quick blaze
#

FUUASGJKAGSFK

#

my eyes

quick blaze
topaz topaz
wooden totem
quick blaze
wooden totem
topaz topaz
quick blaze
#

im no furry!

polar shale
topaz topaz
quick blaze
upper minnow
#

heres something even worse

quick blaze
#

but linux users in general are very..questionable..

upper minnow
#

at least most of that time was on background

polar shale
#

Like just scroll some of the reddit accounts that had answers to your tech questions if you scroll down far enough in their post history prolly some furry stuff there somewhere

wooden totem
polar shale
upper minnow
#

im terminally addicted to idles

polar shale
quick blaze
upper minnow
#

i study till 6pm and spend the rest of my time watching number grow

quick blaze
polar shale
quick blaze
#

🤣

polar shale
#

I literally use :3 😐😂

#

But i have an excuse

dark mason
quick blaze
polar shale
quick blaze
#

LMAOO

upper minnow
polar shale
quick blaze
polar shale
polar shale
#

Fuck

quick blaze
#

LMAO

polar shale
#

What till i catch u quandang

upper minnow
#

really like this latest thm update

#

so satisfying to see the letters filling the blanks

quick blaze
#

@dark mason might just sleep..gonna get on the room first thing when i wake up (if it's released by then trol )

dark mason
#

:)))

#

I have everything set up, I just had to type out the questions

upper minnow
#

let them sleep please

wooden totem
#

now he will never sleep

quick blaze
#

I SHALL AWAKE

dark mason
#

Brother, it will take a while for u to finish this

quick blaze
#

IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!

dark mason
#

I suggest you go to sleep

#

Ok

wooden totem
#

you gotta screenshot now, the cat is curious

mellow gull
#

The cat is curious

eternal timber
#

cat in the hat

queen steeple
#

Good night guys

wary ocean
#

i gotta organize my resume 😭

high mulch
polar shale
#

Or worst

#

Lol

wary ocean
#

nah i wanna sort programs by what they do

polar shale
#

Wut?

wary ocean
#

im putting program proficiencies on my resume since i dont have prior work experience to show ik my way around programs

#

idk, i seen it on a random article at like 2am

wary ocean
#

i use to be a mage

quick blaze
#

going mage hunting tonight 🕵🏽‍♂️

sand trench
mellow gull
sand trench
#

oh dope touhou animation

quick blaze
sand trench
#

marissa best human witch

rapid merlin
sand trench
#

no clue as it is on the chrome web store meaning it is not for shadow as they use firefox ¯_(ツ)_/¯

rapid merlin
#

Who ever says the stupidest shit possible gets a rep

quick blaze
#

that's quite obvious trol

high mulch
rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @high mulch (current: #222 - 33)

quick blaze
#

LMAO

quick blaze
rapid merlin
cunning comet
#

how everybody doing im new here

quick blaze
#

hey new here i'm miikie, i'm doing good!

sand trench
twin ridgeBOT
#

Gave +1 Rep to @quick blaze (current: #1311 - 3)

dark mason
#

@quick blaze

#

:)

quick blaze
#

AHSAJKLHDAKJLSD!!1!?!?

dark mason
#

Let me double check if this is possible

#

and I will send u the link

quick blaze
#

i will find god

#

i shalln't sleep tonight without finding GOD.

eternal timber
#

Seepdeek

quick blaze
#

wow

hushed heath
#

Hello

eternal timber
#

Hi

chilly veldt
#

Time to play around with vinyl wrap

eternal timber
hushed heath
#

I slept whole afternoon not sleepy rn

hushed heath
eternal timber
#

I should probably head to the gym today

chilly veldt
#

Gonna turn my laptop pink

eternal timber
hushed heath
eternal timber
#

Coffee might be too dark

eternal timber
chilly veldt
#

That's not dark

eternal timber
#

It stains the cup wdym kekw

chilly veldt
#

Cuban coffee, that's where it's at

#

2 shots of cuban espresso

eternal timber
#

Mmmm

hushed heath
hushed heath
chilly veldt
high mulch
eternal timber
#

Noted

eternal timber
#

Am I having a stroke

chilly veldt
#

Chug a shot of that and pop a lip wing

#

Then the day is going to be good

hushed heath
eternal timber
#

USA 🦅

hushed heath
upper knoll
eternal timber
hushed heath
eternal timber
hushed heath
#

Why do people lurk and dm idk

eternal timber
dark mason
#

@quick blaze done

quick blaze
#

A

#

ASJHDLA

#

WASJLH YES

dark mason
#

I am sending you in DMs

high mulch
quick blaze
#

🕵🏽‍♂️

hushed heath
upper knoll
#

tell a mod and theyll remind the specifics of the rules

eternal timber
hushed heath
#

genius_x47

#

Why can't i tag

upper knoll
#

probably cause u arent verified

eternal timber
#

@rapid merlin

sharp citrusBOT
hushed heath
#

He dm and deleted a few times

eternal timber
hushed heath
upper knoll
#

idk just a guess

eternal timber
#

Probably cause she didn’t include the @

#

If I’m guessing lol

hushed heath
#

I did

upper knoll
#

maybe /shrug

eternal timber
#

Try again

#

Curious now

hushed heath
#

But it will make wrong people get tagged

eternal timber
#

Copy paste my tag then

upper knoll
#

if u follow that little bot link it will show u how to verify if u want

twin ridgeBOT
#

Gave +1 Rep to @upper knoll (current: #314 - 20)

eternal timber
#

Think she was verified

upper knoll
#

happy to help just finished a room and hit streak 100 so im chillin for a bit

eternal timber
#

At least before she got banned

upper knoll
#

or u mean the spammer?

hushed heath
eternal timber
hushed heath
#

It's 2:44 am

#

Need to sleep

#

Cya yall!

upper knoll
#

yes sleep

hushed heath
#

Have a Great day homies!

eternal timber
#

Cya homie

hushed heath
hushed heath
dark mason
#

alright guys

#

I need/want some early testers for my OSiNT room

#

any volunteers?

upper knoll
#

how hard?

#

and challange or info?

dark mason
#

challange

eternal timber
dark mason
upper knoll
#

im willing to try ig?

#

but

#

no promises for my completion of it if its hard

eternal timber
dark mason
eternal timber
#

Yeah Ik

#

Just take the compliment

upper knoll
#

but yer go ahead thief

#

ill give it a try

dark mason
#

DMs

lament tendon
upper knoll
upper minnow
dark mason
upper minnow
#

ye

#

i thought i wrote "send" but apparently i also had a stroke

dark mason
#

@rapid merlin hi

rapid merlin
dark mason
rapid merlin
#

What's the hardest red team or pentest cert?

sacred python
#

Both are almost same I guess

rapid merlin
#

I just got my "intro to cyber security" cert by Google, when can I apply for a FAANG job?

craggy tinsel
#

as soon as possible

dark mason
#

@quick blaze isn't sleeping tonight

dark mason
quick blaze
#

GODDDDDDDDDD

opaque flax
mellow gull
#

We love OSINT here

dark mason
quick blaze
#

WHERE IS GOD

#

WHERE IS HE?!

opaque flax
#

Is it room testing you need?

dark mason
#

Not finished but ye

dark mason
opaque flax
#

@mossy river if I’m going to test a room can I get the room tester role?

mossy river
opaque flax
#

Oh coolio

#

Nvm then didn’t know sorry

sand trench
#

I have a question for God
WHYYYYYYYYYYYYYYYYYYYYYYYY

carmine tinsel
#

I could test your OSINT room if you’d like, but I doubt I’ll get very far

dark mason
mystic imp
#

OpenVPN does not connect to TryHackme what is its solution?

dark mason
#

Ded chat

sand trench
#

yus as europeans go sleep slop

normal fable
#

Where would I report a misspelled word on a THM room? Nothing big like a bug.. just a little mistake. 🙂

normal fable
#

I guess it's not even really misspelled.. just a different way of spelling it that I haven't seen before. 🤷

sand trench
#

ah could be british vs american spelling

normal fable
#

Had to look it up. It's "British English" vs "American English" spelling.
"""
When it comes to spelling, “authorisation” is the preferred form in British English, while “authorization” is used in American English. Interestingly, British English accepts both variations, but American English strictly uses the “Z” spelling.
"""

#

Interzting 🤣

restive night
#

do you guys know if there is any SQL related badges?

normal fable
#

You can look on the Badges page too

drowsy dust
#

What he said^

normal fable
#

Interestingly I only have the apprentice one... I should get the Slayer badge. 🙂

#

if I still can...

rugged kayak
#

@cloud quiver do you have list of osint room by any chance

chilly veldt
#

I now have a pink laptop

wooden totem
#

Hello kitty

halcyon harness
#

Site got broken?

chilly veldt
#

the corners isn't the best, but still looks good

wooden totem
#

Fun fact, hello kitty has a boyfriend named dear daniel

grim sparrowBOT
#

Done!

halcyon harness
#

ok, nevermind

#

everything works

dark mason
#

I know about OhSiNT and Sakura

crude stump
dark mason
drowsy dust
dark mason
wary ocean
#

holy shit, 8 hours later im finally done with this room 😭

wary ocean
#

tempest

#

shouldnt have been this hard but oh well

quick blaze
#

send link rq?

wary ocean
quick blaze
#

oh this one

wary ocean
#

its hell

#

very good, but hell

pearl helm
#

Is anyone else having trouble accessing the platform?

candid niche
cunning comet
#

@THM{PENTEST_COMPLETE no

#

@pearl helm no

dark mason
quick blaze
drowsy dust
#

I like flags

#

Keep it

sand trench
drowsy dust
#

🧠 on 🔥

restive night
#

i just completed the sqlmap room and i did not receive the badge for completing the sqlmap room. the badge is called sword apprentice. it was the room just called sqlmap. is it the wrong room?

sand trench
#

maybe

restive night
#

i see there is another called sqlmap: the basics but the badge just says sqlmap

sand trench
#

go into that room and check if it has the badge button

drowsy dust
#

I don’t remember but maybe there’s a few rooms you need to complete. Some badges are like that

restive night
drowsy dust
#

I normally see them to the right of a path

#

Says what your next badge is on that path

sand trench
restive night
#

ahh yes it's the wrong room

drowsy dust
#

Oof

restive night
#

maybe they should update the badge description. insted of saying complete the sqlmap room it should say sqlmap: the basics

sand trench
#

well there are a decent bit of those badge problems

#

and shadow don't have the time to go through and check all of the badge giving rooms to get those corrected

drowsy dust
#

That’s lame to hear

sand trench
#

*tonight

drowsy dust
#

Hopefully they fix it soon

sand trench
#

well for any of those you find maybe report it in #site-bugs or alternatively in the feedback form

rapid merlin
#

Guys, when im learning, should i do notes of every shortcut and its meaning i see? (sorry if the question is stupid im just tryna get into this, thx)

sand trench
#

not sure which fits better in this instance

sand trench
drowsy dust
#

Woody!

eternal timber
#

100 epochs

rapid merlin
twin ridgeBOT
#

Gave +1 Rep to @sand trench (current: #4 - 2084)

drowsy dust
sand trench
#

also shadow recommends about once every 3 months or so to go back and clean up your notes to make them easier to read and have them organised

rapid merlin
#

Dunno bout yall but im just noting in notepad, organizing notes in a folder since my writing is terrible

drowsy dust
rapid merlin
sand trench
#

other then that nope

drowsy dust
#

I haven’t payed a dime on it. But you can pay to sync your notes with other devices or publish

rapid merlin
sand trench
#

also .txt files vs .md files have the problem of windows defender the anti virus tripping out if it finds windows exploit scripts

eternal timber
sand trench
#

which is why some people use triliumnext as it uses a db file meaning it gets past windows defender

eternal timber
#

No idea what any of that means

sand trench
#

windows defender gets angry and thinks your computer is infected and therefor deletes or quaranteens text files if it finds windows exploits in said files

eternal timber
#

Oh I see

sand trench
#

trilium next does not get detected as the text is stored in a sql database

#

trilium next being another note taking app

#

anyways time for this shadow whadow to go sleep sloop to beep boop while meep moop

eternal timber
#

Gn shadow

drowsy dust
#

Goodnight sleepy weepy

eternal timber
#

+rep @sand trench

twin ridgeBOT
#

Gave +1 Rep to @sand trench (current: #4 - 2085)

rapid merlin
#

Gn

eternal timber
drowsy dust
#

Time to stop procrastinating and carry the logs 🪵

#

Take care y’all

eternal timber
#

Who’s gonna carry the logs

stray tide
#

If my wife doesn't allow wifi, can I lte prepaid data? Cash up front?

#

Said I would mesh up like I did last time we tried having more than wifi at the same time without establishing rules first

hot cairn
#

wat

upper knoll
upper knoll
hot cairn
#

i indeed have acquired a color that is uncommon

stray tide
#

So is tp-link getting flushed?

odd widget
#

Now attack

dark mason
#

@rugged kayak check DMs

grizzled void
blissful snow
#

omg finally fixed it

#

i can see messages now

shrewd stag
blissful snow
#

yall think i handle this right

polar shale
#

How fucked am I?

#

This is dinner

#

I work at 3am

near sapphire
#

Is that butter?

upper knoll
#

cheese id guess

prime root
#

it’s not as bad as it looks

#

those breads look good

blissful snow
glacial flame
#

Yo, wsg guys

blissful snow
#

yo

jolly aspen
wheat flare
glacial flame
#

On bus to campus.

wheat flare
jolly aspen
grizzled wing
glacial flame
wheat flare
blissful snow
#

I'm mage now :D

glacial flame
grizzled wing
#

./ 🧙

wheat flare
#

Or 6

jolly aspen
glacial flame
#

Nvm, I'm dyslexic XD

wheat flare
polar shale
polar shale
glacial flame
glacial flame
wheat flare
wheat flare
drowsy dust
#

I think I see pepper jack cheese there

blissful snow
grizzled wing
#

🧊

polar shale
polar shale
blissful snow
polar shale
wheat flare
jolly aspen
# polar shale

This looks like a hotel counter and food plate. Or an airport lounge

polar shale
jolly aspen
#

Dropping coordinates in 30 sec’s

glacial flame
gleaming grove
twin ridgeBOT
#

Gave +1 Rep to @polar shale (current: #238 - 30)

blissful snow
gleaming grove
#

a cheese connoisseur

polar shale
carmine tinsel
wheat flare
#

Cuz thats A LOT of money for cheese alone

polar shale
polar shale
blissful snow
#

like the pfp?

#

also another one from dedsec

polar shale
glacial flame
polar shale
#

Funny timing

grizzled wing
blissful snow
#

lol

glacial flame
#

Gtg y'all. Cya

blissful snow
#

now i gotta find out some for my description

blissful snow
polar shale
#

I wnna make some chez

blissful snow
#

lol

polar shale
blissful snow
#

no

polar shale
#

rip

blissful snow
#

yeah

#

getting my xbox soon

polar shale
#

Thats right

#

I miss 360 and JTAG/RGH

blissful snow
#

i use to have wii u

#

xbox was my second console brand

fringe nacelle
rapid merlin
#

?

eternal timber
normal fable
#

Sure is

#

I hope you all are well kekw

rapid merlin
#

I was just confused to why I had no roles, and then my question answered itself.

normal fable
#

You kinda gotta verify. 😉

rapid merlin
#

ik

#

ty tho

#

😭

normal fable
#

I didn't see you answer your question so I did. LOL

rapid merlin
#

:(

eternal timber
#

Now how did it do that

drowsy dust
#

Can I dm you about something? @glacial flame

glacial flame
#

About wat?

rapid merlin
#

I wish a mod could help me transfer my token from my old acc

#

:(

#

very sad

drowsy dust
rapid merlin
#

@light ore

glacial flame
#

Thanks for the message @drowsy dust

twin ridgeBOT
#

Gave +1 Rep to @drowsy dust (current: #222 - 33)

drowsy dust
#

Thanks for the rep 😎

rapid merlin
#

+rep

twin ridgeBOT
#

Gave +1 Rep to @drowsy dust (current: #217 - 34)

hot cairn
jolly aspen
blazing granite
warped plinth
#

guys need your input, before i start working on the boxes and with my exam, I am currently going through the sql injection in tryhackme but i am not sure if that is sufficient enough for the OSCP exam. i know that we are not allowed to use sqlmap and i feel port 80 and 443 is the entry point for most of the priv esc.

dry sigil
#

does anyone have a list of all the splunk rooms?

#

or challenge rooms that use a siem

blazing granite
dry sigil
#

alr thanks

jolly aspen
dry sigil
#

i think if you only know sqli you're cooked for oscp

#

i went to challenges

#

learn > search is kinda inaccurate

#

the new challenges tab is nice, gave me everything i need

#

forgot they added that

blazing granite
jolly aspen
dry sigil
#

it also gives some rooms that aren't part of it but its not that big of a problem or anything i just dont prefer it

#

or maybe im tripping 😂

jolly aspen
#

ah...ok my bad. i'll cater for your preferences next time sire

dry sigil
#

:PP

#

also bro splunk 2 is not easy at all

jolly aspen
dry sigil
#

need to look at writeups a bit

blazing granite
jolly aspen
high mulch
dry sigil
#

i wish it was

high mulch
dry sigil
#

i was just looking for a list of splunk rooms that ppl use for practice lol

jolly aspen
#

Ok, now you're just taking the piss "does anyone have a list of all the splunk rooms?"

#

all

dry sigil
#

not all 🤦 i was just asking in general if anyone has a list of rooms they practice with

#

cause theres a google sheet that ppl use to practice for oscp

blazing granite
jolly aspen
dry sigil
#

tried to find a google sheet/github repo that had list of sherlocks or thm rooms but didnt find any

simple valve
dry sigil
simple valve
jolly aspen
#

surely doing pretty much any of the splunk rooms would be helpful?

simple valve
#

I just mean that some online resources may not be well updated if it was below 2023

blazing granite
dry sigil
dry sigil
#

havent found a repo for blue team stuffs sadge

upper minnow
#

man i love splunk

#

great roguelike

high mulch
simple valve
blazing granite
#

splunk slunk splunk 😂

high mulch
simple valve
#

There’s also dedicated mini paths for Splunk I think under the Learn tab

high mulch
#

I actually stalled all the splunk rooms on purpose kekw

dry sigil
#

yeah cause splunk is kekw

high mulch
#

Keep splunkin' mate

blazing granite
mellow narwhal
dry sigil
#

yeah its kinda pricey tho but its way easier than cdsa and ccd afaik

#

cheaper than ccd too, but cdsa feels like a fun thing to do since the report writing apparent makes people go over 100+ pages lol

mellow narwhal
#

I'm kind of scared of their certs lol

#

I do blue teaming as well, but idk how the CDSA will be

dry sigil
#

it's splunk with a lot of threat hunting so that sounds fun 😂

mellow narwhal
#

I'm starting prep for CPTS next year, its already daunting especially since I'm 0 at AD

dry sigil
#

my weakest point for threat hunting is identifying tools that aren't just plain headers lol or identifying which cves were used for X attack on whatever im triaging

blazing granite
#

skill issue 😂

high mulch
drowsy dust
high mulch
high mulch
eternal timber
#

This makes me dizzy

high mulch
eternal timber
#

Look down and try to make out a face

jolly aspen
high mulch
#

I know, I used to see these sort of posts all over FB back in like 2009 or 2010

jolly aspen
#

when a whole field of study was just summarized into viral facebook posts 💀

cunning comet
#

@drowsy dust i think you just baited my curiosity i just typed in that link but replaced it with youtube URLand it actually brought up the admin page

eternal timber
cunning comet
#

@drowsy dust i did not think it was going to work

#

how bad can googles security be for me to accidentally find a vulnerability

jolly aspen
#

The key is to never pay for Youtube premium and you are impervious

opaque flax
jolly aspen
opaque flax
#

They’re a small up and coming company

high mulch
boreal scarab
high mulch
#

||That actually scared me||

worn vine
#

HI

gleaming grove
drowsy dust
cunning comet
#

@drowsy dust yea im serious but i did not do it for tryhackme i said let me try it on youtube and when it worked it scared me ecause i knew my ip was visible

drowsy dust
#

😆

limber hare
#

ihih

glacial flame
eternal timber
#

Woke up randomly liking toast bread for pb&j

#

Who put a spell on me

glacial flame
real night
#

I just realized that they changed the answer indicator from asterisk to underscore

cunning comet
#

@drowsy dust but it did peek my curiosity a little i had to control myself i wanted to see how hard it would be to crack but i knew that would be highly illegal

sinful moon
#

…or worse, against the THM TOS :p

jolly aspen
cunning comet
#

@jolly aspen lol

mellow narwhal
#

ChatGPT says unusual activity detected from my device kekw

#

ffs

sinful moon
#

Realistically I’m sure it’s more than segmented with a completely different VPN system like Wireguard and more

#

(for THM)

#

But yes I love their solution for people just poking around

sinful moon
#

That’s what I mean lol

#

I’ve been in on that game egging people on to try lol

mellow narwhal
#

there's something better which could be done (not for this, for something else)

#

buy the domain hackthe.box and make it redirect to THM

#

btw, HTB does this

sinful moon
#

.box is only a proposed TLD but not current

mellow narwhal
#

yeah probably still has to be released

#

why debate a decade to register a simple TLD though? 🤣

sinful moon
#

I was about to say… yeah decade since last movement, but better to think it though than the insane .zip TLD we have now

jolly aspen
mellow narwhal
#

we have a tld like that??

sinful moon
#

Yes it was a big deal within the last year and a half due to understandable infosec concerns

mellow narwhal
jolly aspen
mellow narwhal
#

I didn't whois it

mellow narwhal
sinful moon
#

They were Google’s last awful decisions as a registrar before they gave that up

mellow narwhal
#

I don't understand blockchain in the slightest though kekw

sinful moon
#

.zip is a top-level domain name operated by Google. It is a generic top-level domain (gTLD) introduced under the Internet Corporation for Assigned Names and Numbers's new gTLD program. Approved as a part of the program, .zip became available to the general public on May 3, 2023.
The qualifier .zip is also associated with the widely recognized ....

jolly aspen
#

Ahhhahaha yep, I’ve read about this

sinful moon
#

Rightfully has an entire section on “Security Concerns”

#

yeah many blocked it out right. Some security researchers bought up all the sus domains they could

jolly aspen
#

.elf TDL dropping soon

mellow narwhal
#

let's have a TLD called .txt

#

or .pdf

sinful moon
#

lol, but no one Linux savvy enough to know elf would fall for that. Plus I mean, we don’t really use that typically

jolly aspen
sinful moon
#

usually only see it in really weird places like PS2 modding or PS2 Linux and similar cases

#

lol shh

#

where’s my .out TLD so I can get the very valuable a.out then?

#

lolol, that’s typically not how you do it

#

such stealth Knucklesgrin

#

much opsec thought

jolly aspen
#

Appears to be a DJ

sinful moon
#

I would typically recommend just the ICANN lookup or literal whois rather than that for profit site, but fair the ICANN lookup sometimes fails, but generally the Linux command works

jolly aspen
#

Im on mobile, but thanks for the suggestion

sinful moon
#

On iOS as well or else I’d be like, why not termux

jolly aspen
#

Im aware of how to perform a whois lookup 😉

sinful moon
#

mhmm, I just hate this site coming up in the results trying to out SEO the real thing

#

although my dude, please charge your phone lol

jolly aspen
#

Ffs

sinful moon
#

<3

#

lol sorry I wasn’t trying to give you a such a hard time… entirely intentionally c:

#

I will also note I am an iOS user these days. I do miss termux being handy on my phone, was an Android user for over a decade before I switched

jolly aspen
#

Brb Waiting for my phone to fully charge first

sinful moon
#

Totally fair, yeah I’m just at home typing on an iPad with a keyboard case no-less lol

#

I’d complain that no one is up but too late for US and too early for UK lol. I’m only up because I have tomorrow (erm, today) off

#

In more interesting news I got to setup a Linux system that powers a hospitality related media feature at work today, that was nice

magic plover
#

student discount doesn't apply to monthly premium now or my pc bugging?

mellow narwhal
#

They'd forgotten the root password (over 25 years old system), I used a basic kernel exploit

#

Sec, I have a pic somewhere

sinful moon
#

um if you had access to grub you didn’t even need an exploit

#

heck I’ve had to do so professionally for non-security stuff for ESXi systems lol

mellow narwhal
#

its 32 bit, I downloaded an ISO image from stack overflow and mounted it with rufus on a 4 gb usb

#

Xubuntu

sinful moon
#

even then 32bit grub 1 you could have done the same thing and dropped into single user mode and just done the thing

mellow narwhal
#

Ah here it is

#

Image quality is not the best

sinful moon
#

./hack Knucklesgrin

#

yeah you could have just done that by hand

mellow narwhal
#

Yeah lol, I wrote a C script and ran it

sinful moon
#

fair enough

mellow narwhal
#

setuid(0) etc

sinful moon
#

How far are you on the Linux priv esc rooms on THM? because yeah you could have just messed with /etc/shadow its self trivially

mellow narwhal
#

Yeah I could have modified shadow as well

#

or cracked the root hash, idk?

sinful moon
#

if you can actually modify the /etc/shadow you can just make it blank or input your own known hash, even easier. Obviously less than stealthy, but not what you were looking to do

mellow narwhal
#

Wouldn't have made much of a difference tbh, the current user had all permissions with sudo

#

Just got root for fun to say that I got root kekw

sinful moon
#

lol, so you could have just done this without even any hassle either and skiped a few steps, but totally fair

#

I wasn’t sure how locked out of it you really were

mellow narwhal
#

Not locked out at all tbh, there were multiple ways in

#

only thing is the root password itself was forgotten, or it would've just taken a sudo su to get in

sinful moon
#

mhmm, and that’s often the fun of Linux exploitation, tons of ways to get the same job done, especially the older it is, the easier it is

#

I did have fun cheesing some Linux THM rooms with newer exploits than they were designed for… but fair I went back and did it “the right way” so I didn’t cheat myself out of that knowledge

#

iirc I used DirtyPipe and PwnKit on some for fun, before we had proper rooms on either

rapid merlin
#

👋

sinful moon
#

old THM rooms can be fun playground for new exploits if you don’t feel like spinning up a lab for such

#

Heya!

rapid merlin
#

@sinful moon what is new with you?

#

any fun retro experiences, or coding fun?

sinful moon
#

Eh, finally got to do more Linux stuff at work for a client, that was nice. Retro wise, its mostly been retro PC gaming as of late with mods. Not much coding other than reverse engineering a PROPRIETARY AND CONFIDENTIAL Docker Compose setup to troubleshoot how it worked lol.

rapid merlin
#

mods, reverse engineering, confidential setups, sounds like the life 🙂

#

living the dream

sinful moon
#

lol kinda the norm, but yee, can’t complain

rapid merlin
#

I just said to someone... best advice I could ever give is, enjoy your day today 🙂

#

@sinful moon it is really great to hear you share about your experiences 👍

sinful moon
#

Glad to hear it! lol yeah I just do a ton of random stuff both at work and personally. imho it’s good to be well rounded, not that I’d be remiss in saying I’d enjoy a more specialized single focus job in the future, but amazing job experience

#

But yeah for the former point, besides just enjoyment, there’s a reason I use every OS I can get my hands on

rapid merlin
#

it is really great to hear you make the connection to a job and what you are passionate about

#

that is value to both yourself and employers

sinful moon
#

For sure, although it is probably time for me to move on, but saying so and doing so are two different things. We shall see, I am at a pretty comfortable spot

rapid merlin
#

yes growth is extremely healthy to be able to self reflect on

sinful moon
#

mhmm

rapid merlin
#

that's the core to hackers imo

#

we want growth

sinful moon
#

Yeah I’m not content unless I’m learning something every single day, I wouldn’t even say I’m pushing myself to do so, more just addicted to learning lol

rapid merlin
#

happy to hear you say that, I believe it is a big reasons we are all gathered here

eternal timber
#

I need like 10 bottles of vodka stockpiled

rapid merlin
#

@lunar cloud I so want to hear what you had to say 🙂

wooden totem
#

Yeast

sinful moon
#

fermented

#

(that’s not vodka tho)

lunar cloud
#

anyone know the answer to this question.Based on the duty to inform case study, what should be considered when deciding whether to investigate a breach? (Answer1 vs Answer2) it has to be 4 letters vs 13 letters. "The duty to inform is closely tied to transparency and communication. DFIR teams must keep stakeholders informed about the progress of the investigation, emerging threats, and mitigation efforts while ensuring confidentiality and that privacy laws and regulations are observed. Regular status updates, incident reports, and briefings contribute to fulfilling this duty. Communication channels may include secure emails, encrypted messaging platforms, or dedicated incident response portals. Timely and accurate information sharing enhances collaboration among team members and external stakeholders, fostering a collective understanding of the evolving threat landscape.

"

rapid merlin
#

@wooden totem my addiction is showing up at the bakery at 7AM asking for their latest bread

eternal timber
lunar cloud
#

IR Philosophy and Ethics

rapid merlin
sinful moon
#

If you need that kind of assistance, it’s best to collaborate with your classmates or reach out to advisors

elder peak
rapid merlin
#

@eternal timber I had education on mental health and addictions with 5+ years of street outreach, and 2+ years a facility 😄

#

it only added to my social engineering skill 😄

eternal timber
#

Even if it’s not completely effective

sinful moon
#

Fun fact this is my last night of drinking habitually

rapid merlin
#

@eternal timber I hear ya, numbing, drowning out being in our head

eternal timber
eternal timber
rapid merlin
#

@wooden totem omg, the best

eternal timber
#

Tonight

rapid merlin
#

I can't eat "normal bread" anymore

wooden totem
#

Would you eat this

sinful moon
# eternal timber I’ve had two beers and whiskey

You don’t want to know how many I’ve had, which had lead to my tolerance and lead to this not being acceptable in my life anymore lol. But thats a me issue I’m getting over. You are just fine my friend!

rapid merlin
wooden totem
#

Garlic bread

rapid merlin
sinful moon
#

That is obviously a stock photo lol

elder peak
rapid merlin
#

a crazy part of my bread purchasing experience, is making a connection to the person who was up super early baking it

#

and them knowing who I am

sinful moon
#

thus your name and orgin story? lolol

rapid merlin
#

it is simply a connection to people 🙂

eternal timber
#

At most

sinful moon
#

haha I know, nice story. I just couldn’t resist

#

was hoping it was your secret super power origin

real lichen
#

pro tip use your favorite AI to help you hack!!

sinful moon
#

well about that….

rapid merlin
#

my super power is most likely caring about people

real lichen
#

i have been testing copilot it works pretty amazing

sinful moon
# real lichen pro tip use your favorite AI to help you hack!!

Inadvisable, it should only be an assistant, it is not magic, its just fed off of web data and more. It doesn’t mean it’s right, it doesn’t mean it’s being ethical, it doesn’t mean it’s being stealthy. There’s so many caveats if you mean to use this for red team engagements. You need to be very mindful to check behind it if you use a tool like that

real lichen
#

i know this it shows you the references

#

and it is much easier than searching the web

rapid merlin
#

@real lichen that kind of thinking creates jobs for new people, yet creates work for experienced people, to fix the disaster of code written by AI

#

not saying it is right or wrong

sinful moon
#

That’s fair but it’s better to actually learn this yourself and only reach out when you need help

real lichen
#

not for writing whole programs either

#

i am i use it to look up commands and it can help keep track of data for you too

sinful moon
#

and wait you need help with something, it’s called man pages and documentation

real lichen
#

lol

sinful moon
#

or literally tab completion in your terminal

real lichen
#

again this is much easier

rapid merlin
#

I have friends at Electronic Arts who spend most of their day fixing bugs due to AI generated code implemented by new programmers using AI

wooden totem
#

Jarvis, source on Reddit from now on

real lichen
#

and i can feed the man page to the AI and he can help me look for stuff

sinful moon
#

It’s easier to switch out of your terminal to check something you need in your terminal?

elder peak
rapid merlin
#

AI creates new opportunities for us in cybersecurity

#

not sure how I feel about that

real lichen
#

FOR REALS

sinful moon
#

I get it, I’ve used ChatGPT to help me in some limited capacities, but also, you’ll find many guardrails against truely malacious use you may actually want to employ for ethical purposes

eternal timber
rapid merlin
#

@eternal timber binge drinking! or substance abuse

real lichen
#

i am going for ethical use and the AI wont answer you if it thinks you are doing illegal stuff lol

wooden totem
#

Liver disease my favorite

rapid merlin
#

@eternal timber message me if you think we can avoid any self harm 😉

sinful moon
#

Well Keith, it depends on what field of infosec you’re interested in then I guess

wooden totem
sinful moon
#

mhmm

eternal timber
real lichen
#

just saying especially if you are new you can just ask to explain a command you dont understand

twin ridgeBOT
#

Gave +1 Rep to @lime ledge (current: #234 - 31)

sinful moon
#

it’s only yet another source of documentation but one which must be used with quite a grain of salt, especially on code

real lichen
#

it will even walk you through finding exploits on metasploit lol

sinful moon
#

We do have rooms on that, and there’s the info command

#

just like man pages for general commands

#

Just as long as you’re only using it as a supplement that’s fine, rather than a crutch

real lichen
#

definetly not a cruch its my assistant

sinful moon
#

don’t cheat yourself out of learning how to find info yourself

#

because you’re not going to have it in standardized testing

real lichen
#

i also have had a bachelor of science in computer programming for 14 years

#

just breaking into cyber security

sinful moon
#

what…

rapid merlin
#

I have had 20 years experience as a programmer, recently learning PowerShell is hard 😄

sinful moon
#

Oh I misread my bad

sinful moon
#

PowerShell isn’t too hard it’s just extremely C# and “code as documentation” to a fault

eternal timber
real lichen
#

code is easy

sinful moon
#

yet they say that but you see a powershell script without comments and it’s ouch

rapid merlin
real lichen
#

i was trained in C++ originally

#

have exp in assembly some

wooden totem
#

Where the money is

real lichen
#

my degree was also specialized for game development

rapid merlin
#

don't give in to hate

eternal timber
rapid merlin
#

I did gamedev indie for 6+ years

real lichen
#

i love it the new unreal stuff is crazy

sinful moon
#

14 years ago probably means raw engine coding, or were you doing frameworks back then too?

rapid merlin
#

still living off the funds today

real lichen
#

yes maam

wooden totem
real lichen
#

created engines of our own

#

for final project i created our entire VFX engine and editor

mellow narwhal
sinful moon
#

Nice most of my gamedev were with APIs but not full on Unity/Godot, more like Love2D, Pico8 and APIs like that

rapid merlin
#

@wooden totem my experience taught me (also the connections to people) that living by making mistakes is the best thing I could never do

sinful moon
#

I can do some simple stuff with SDL and C++ but I don’t have the time for that

half girder
#

@real lichen did you work on popular games? something known?

wooden totem
rapid merlin
#

reddit frontpage 50k USD 1 day 👍

#

yet I didn't know why

#

lesson learned... measurables

#

CEOs, customers, employees, shareholders...

#

make a thing, sell a thing, measure

sinful moon
#

Totally fair

real lichen
#

i have not worked on any known games i have friends in minecraft and destiny

sinful moon
#

Yeah I have some friends in the industry working from indie to AAA, it’s neat to hear what they’re working on for sure

rapid merlin
#

I have been a CTO in finance, worked in gamedev, also worked in cybersecurity

real lichen
#

i worked at Audible and Publix Corp lol and a couple indie companies that didnt pan out. working on my own stuff now

rapid merlin
#

and now I hide from my experience 😄

sinful moon
#

Ouch I don’t envy working as CTO, but nice

rapid merlin
#

my last job was as a social worker helping people with disabilities 🙂

sinful moon
#

I say accidentally becoming compliance manager as one of my many hats, also not envyable

rapid merlin
sinful moon
#

Pay was crap, but extremely rewarding jobs

real lichen
#

little example for a quick AI question this is more noob related

make nmap go as fast as possible with threads
To make Nmap scans as fast as possible by leveraging threads, you can use the following options: -T5, --min-parallelism, and --max-parallelism.

Here’s an example command that sets aggressive timing and increases parallelism to maximize speed:

Example Command
shell
nmap -T5 --min-parallelism 100 --max-parallelism 256 <target>
Explanation:
-T5: Sets the timing template to Insane (fastest).

--min-parallelism 100: Sets the minimum number of parallel probe groups to 100.

--max-parallelism 256: Sets the maximum number of parallel probe groups to 256.

sinful moon
#

dude the man page would have told you that

rapid merlin
#

man page ftw 👍

real lichen
#

lol

half girder
#

i didnt find yet my personal dream job, however after 20 years its about time to not say anymore "it pays the bills" .. i should look for something fun + paying the bills xD

real lichen
#

this makes it easier to understand and just a quick example lol

mellow gull
#

ChatGPT, please give me a summary of the nmap man page

odd widget
#

BRO WANT GIVE ATTAK MY BOR? WANT ?

wooden totem
#

I don't think it's a noob question if the question has so many specifics

sinful moon
#

just do / to do a search while in a man page, but yes

real lichen
#

me using it to mess around with bug bouties and keep track of what ive done

give me a summary of our targets
Sure thing! Here's a summary of our current targets and the progress we've made so far:

Target 1: MercadoLibre
Objective:

Perform comprehensive security testing to identify potential vulnerabilities in MercadoLibre's web application and infrastructure.

Activities Performed:

Directory Enumeration:

Conducted multiple rounds of Gobuster scans.

Identified numerous directories returning 403 Forbidden status codes.

Filtered and documented significant directories for further analysis.

403 Forbidden Directories Analysis:

Focusing on directories like /netdiag, /nt4novel, /WebDAV-IIS, and /sip-server for deeper exploration.

Next Steps:

API Testing:

Set up test user accounts and explore MercadoLibre's APIs for potential vulnerabilities.

Subdomain Enumeration:

Identify and analyze subdomains using tools like Sublist3r or Amass.

Automated Vulnerability Scanning:

Run automated tools (Nikto, OWASP ZAP) to identify common web application vulnerabilities.

CSP Analysis:

Evaluate Content Security Policy headers to prevent XSS attacks.

sinful moon
#

but also I will just point out, THM teaches you a lot of these things

round orbit
#

I hate computers.

sinful moon
#

And hack tricks if you really need that kind of outline for “what to check” if you don’t know

#

But this is also why keeping your own notes are important

round orbit
#

I’m guessing that CISSP is the end career goal for a lot of people in cyber security?

sinful moon
#

I get the value, but as infosec professionals, we should already be subject matter experts

round orbit
real lichen
#

of course i screenshot everything and all of that. this is something i have just been experimenting with

sinful moon
#

Many do publish their notes online, that’s kind of a common past time actually, infosec blogging even just for THM/HTB writeups

#

and honestly, that’s kind of the form that the hack tricks site is in, it’s just a collection of notes already

rapid merlin
#

yo guys, ik it sounds kinda stupid but will tryhackme's certs help idk get a job or some? im just 15 but im kinda thinking about the future n stuff