#general
1 messages · Page 820 of 1
are you sure 🤔
It's all voluntary, please be patient someone will help you if they can:)
i am kinda stuck on this not able to proceed pls help me out admin
I'm not around at this time, I'll help if I can when I'm back
@bright tartan
You should know our website by now!
#bot-commands please @bright tartan
uh
I have a services that sends a hyprland noti for every time icmp fails for quad10
and that was a quick 45ish mins
?_?
why?
all is jokes lol haha just my opinion anyways never been a fan of pentesting distros i like to configure everything myself
hm
it doesn't work if you try to load http://10.10.10.10 ?
As much as i can without wheeling
was thinking if i should just download everything on my arch
its not loading
You will have a lot more of an understanding of package management, utilizing your os .e.g rather than out of the box shit with specalized distros
I take offense
I would rather use the attack box on a free plan then install and daily drive kali lol
Or run in vm really**
Enough
Anyone eith Kali installed on bare metal is insane 💀
This tells me you have a lot like me lol
I actually have more of a life then i thought
Gmod 600 hours tho kek
Stranded in the capital with no place to stay, freezing cold and stopped at a tavern to warm up and have some wine 😂 hope you're all having a better evening
I used to know a guy in college running kali on bare metal laptop and he would randomĺy whip out his laptop and apt upgrade && apt upgrade in front of people/teachers to look mysterious 💀 💀
what kinda medival bull moops is this???
HAHAHA in Greece taverns are very frequent. I came for a business meeting but my job didn't provide a hotel last and let me know last minute...
Holy shit dude im at work drinking tea
Im in burger landia tf is a tavern
I have more than double on war thunder
I regret it
You seem like a war thunder guy lmfao
Should spent on gmod
I don't dven wanna know how much i had on lol
I imagine you arent on steam? Or you just dont chexk?
i mean on league of legends
My idea is that no time is wasted as long as you are enjoying yourself
oh you're on league..?
most of the time it wasnt
fortunately ive been cured
sorry but we league players do not actually enjoy playing the game.
Hoowww lol what drags you bqck everytume ?
dont even have it installed anymore
1k on dota is still a lot
addiction..
pure..addiction..
Too much tbh
Not saying that isn’t true
I am insane
Rust player status
You are not wrong, but I still take offense
that too
Never played rust
O god more than i have on any game
1k on dota is just crazy, i played dota 2 for like 15 minutes and i got sick of it
Nah im saying 3k 4k is rust pmayer time stats
There is a dota .. 2 lol??
me when i have 2.7k hours on fortnite...
yeah 😂
Sounds like some minecraft 2 type beat
playing rust is like sumbitting a form to be tortured
Omg
have you tried league of insanity?
any admin is there
Hey man not with skilled plays only to get offlined at work
ping the jabba guy
I've played like 2k in lol
already there i need assistance kinda stuck for hours
he just said it earlier 😭
A thousand images just flashed through my mind
Consisting of
That sounds like heaven
no more big boykisser images in the chat please im in a very dark room and i just got FLASHBANGED.
Boyta go home now
Nicenice
I miss my bed I'm tipsy and tiredd
Have a nap for me
Lol i just lesrned about this im not sure what it meqns but i just know when someone says something suspicious to send it
😭 well crap welcome to the furry side of the internet
0 brightness + night light shielded me from this horror
theres this thing called backlight and this thing called night light filter
i do not have either of those on...?? 😭
theres no furry side of internet, because the whole internet is furrified
I have extended my eyesight lifetime by 20 weeks with this simple trick
im no furry!
Idk have seen some of the most skilled(at least in my perspective) regarding security end up being furries lol..
You definitely have a backlight
yeah i dont really know why..that happens..
heres something even worse
but linux users in general are very..questionable..
at least most of that time was on background
Like just scroll some of the reddit accounts that had answers to your tech questions if you scroll down far enough in their post history prolly some furry stuff there somewhere
that thing got boring after 5 days
Do you need a help line?
im terminally addicted to idles
I never even gave it a thought let alone play
have you been on r/linuxfurries yet? 
i study till 6pm and spend the rest of my time watching number grow
Personal attack
🤣
uwubuntu
Oh god no
is this you?? 😭
Btyhhh lmrs99a
LMAOO
i prefer htis one
Making hello kitty os next
Loggums oh my god
LMAO
What till i catch u quandang
really like this latest thm update
so satisfying to see the letters filling the blanks
@dark mason might just sleep..gonna get on the room first thing when i wake up (if it's released by then
)
I am already typing out the questions
:)))
I have everything set up, I just had to type out the questions
let them sleep please
now he will never sleep
Brother, it will take a while for u to finish this
IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!IWILLGETRTHOUGHTHSIROOMTONIGHT!!1!
you gotta screenshot now, the cat is curious
The cat is curious
cat in the hat
Good night guys
i gotta organize my resume 😭
Goodnight, take care.
Sometimes messy chaotic resumes are the best new hires
Or worst
Lol
nah i wanna sort programs by what they do
Wut?
im putting program proficiencies on my resume since i dont have prior work experience to show ik my way around programs
idk, i seen it on a random article at like 2am
you are not a mage
I am
i use to be a mage
going mage hunting tonight 🕵🏽♂️
MAGIC MISSLE
Touhou? In my chat?
oh dope touhou animation

marissa best human witch
Hi, security guys, what do you think about this browser extension - https://chromewebstore.google.com/detail/type-keeper-for-web-perso/hijekaeoeonmnoldbmakmpgjenjhldni
no clue as it is on the chrome web store meaning it is not for shadow as they use firefox ¯_(ツ)_/¯
well

Who ever says the stupidest shit possible gets a rep
that's quite obvious 
Windows is the best OS
+rep
Gave +1 Rep to @high mulch (current: #222 - 33)
LMAO
google chrome best browser

how everybody doing im new here
hey new here i'm miikie, i'm doing good!
+rep for your brain cells
Gave +1 Rep to @quick blaze (current: #1311 - 3)
Seepdeek
wow
Hello
Hi
Time to play around with vinyl wrap
Wowzers
I slept whole afternoon not sleepy rn
Wass good?
I should probably head to the gym today
Gonna turn my laptop pink
Studying. You?
It's midnight here
Coffee might be too dark
Ah I see. It’s 3 pm here
That's not dark
It stains the cup wdym 
Mmmm
🎀
Wahh i feel to drink but all sleeping
Bustelo is the best
my type of coffee :)
Noted
Which country?
USA 🦅
??
I don’t understand what you sent
You having stroke ?
That’s what I’m asking
How do i know 😭
Why do people lurk and dm idk
What does this mean bro 
@quick blaze done
I am sending you in DMs
🕵🏽♂️
Ahh my bad i was kinda sleepy just typed mistake
just so u know if u are getting dms u dont want u can report it as its a breach of rules
tell a mod and theyll remind the specifics of the rules
It’s fine lol. Just got confused
probably cause u arent verified
@rapid merlin
He dm and deleted a few times
Is that a thing
Yeah
idk just a guess
I did
maybe /shrug
But it will make wrong people get tagged
Copy paste my tag then
if u follow that little bot link it will show u how to verify if u want
Yeah sure thank you!
Gave +1 Rep to @upper knoll (current: #314 - 20)
Think she was verified
happy to help just finished a room and hit streak 100 so im chillin for a bit
😭 i forgot that plz don't make me remember
No, Estel 
Me ? I haven't even that much active here 
It's 2:44 am
Need to sleep
Cya yall!
yes sleep
Have a Great day homies!
Cya homie


I’m impressed
how so?
I’m impressed you made your own room before even getting to HS 
it's an OSiNT room, wasn't that hard
DMs
If you put the spoon in it and it sinks, it's not dark enough. ;D
yer go ahead
awns the room
U want to try the room?
@rapid merlin hi
hi
Still want the room?
yes ^_^
What's the hardest red team or pentest cert?
Both are almost same I guess
+rep
I just got my "intro to cyber security" cert by Google, when can I apply for a FAANG job?
as soon as possible
@quick blaze isn't sleeping tonight
What are you waiting for?
U said u like osint, right?
GODDDDDDDDDD
Who doesn’t
We love OSINT here
Want my osint room?
Not finished but ye
Ye
@mossy river if I’m going to test a room can I get the room tester role?
Room testers is a voluntary team part of the QA department:)
You get the role when you accept an invite from timtaylor, and you test upcoming rooms.
I have a question for God
WHYYYYYYYYYYYYYYYYYYYYYYYY
I could test your OSINT room if you’d like, but I doubt I’ll get very far
Fait enough
OpenVPN does not connect to TryHackme what is its solution?
Can u show us the error?
Ded chat
yus as europeans go sleep slop
Where would I report a misspelled word on a THM room? Nothing big like a bug.. just a little mistake. 🙂
still goes in #room-bugs last shadow heard
I guess it's not even really misspelled.. just a different way of spelling it that I haven't seen before. 🤷
ah could be british vs american spelling
Had to look it up. It's "British English" vs "American English" spelling.
"""
When it comes to spelling, “authorisation” is the preferred form in British English, while “authorization” is used in American English. Interestingly, British English accepts both variations, but American English strictly uses the “Z” spelling.
"""
Interzting 🤣
do you guys know if there is any SQL related badges?
You can look on the Badges page too
What he said^
Interestingly I only have the apprentice one... I should get the Slayer badge. 🙂
if I still can...
@cloud quiver do you have list of osint room by any chance
I now have a pink laptop
Hello kitty
Site got broken?
the corners isn't the best, but still looks good
Fun fact, hello kitty has a boyfriend named dear daniel
Done!
there aren't really many OSiNT rooms
I know about OhSiNT and Sakura
?
OwO
uwu
holy shit, 8 hours later im finally done with this room 😭
what room
send link rq?
oh this one
Is anyone else having trouble accessing the platform?
working for me
also working for me
uhh delete flag
🧠 on 🔥
i just completed the sqlmap room and i did not receive the badge for completing the sqlmap room. the badge is called sword apprentice. it was the room just called sqlmap. is it the wrong room?
maybe
i see there is another called sqlmap: the basics but the badge just says sqlmap
go into that room and check if it has the badge button
I don’t remember but maybe there’s a few rooms you need to complete. Some badges are like that
where is the badge button supposed to show?
I normally see them to the right of a path
Says what your next badge is on that path
ahh yes it's the wrong room
Oof
maybe they should update the badge description. insted of saying complete the sqlmap room it should say sqlmap: the basics
well there are a decent bit of those badge problems
and shadow don't have the time to go through and check all of the badge giving rooms to get those corrected
That’s lame to hear
*tonight
Hopefully they fix it soon
well for any of those you find maybe report it in #site-bugs or alternatively in the feedback form
Guys, when im learning, should i do notes of every shortcut and its meaning i see? (sorry if the question is stupid im just tryna get into this, thx)
not sure which fits better in this instance
if you want... but any notes is better then no notes
Woody!
100 epochs
Thanks! I will try noting from now on
Gave +1 Rep to @sand trench (current: #4 - 2084)
Bro 27 hours on your notebook 💀
also shadow recommends about once every 3 months or so to go back and clean up your notes to make them easier to read and have them organised
Dunno bout yall but im just noting in notepad, organizing notes in a folder since my writing is terrible
Obsidian is great for note taking
Thank You! Thats good to know, is anythin locked behind a paywall or something?
note syncing not using git is paywalled
and also the publish feature if you wanna publish few notes as webpages
other then that nope
I haven’t payed a dime on it. But you can pay to sync your notes with other devices or publish
Thats good then, all i really need to do is note some shortcuts anyways because im forgetful
also .txt files vs .md files have the problem of windows defender the anti virus tripping out if it finds windows exploit scripts
which is why some people use triliumnext as it uses a db file meaning it gets past windows defender
No idea what any of that means
windows defender gets angry and thinks your computer is infected and therefor deletes or quaranteens text files if it finds windows exploits in said files
Oh I see
trilium next does not get detected as the text is stored in a sql database
trilium next being another note taking app
anyways time for this shadow whadow to go sleep sloop to beep boop while meep moop
Gn shadow
Goodnight sleepy weepy
+rep @sand trench
Gave +1 Rep to @sand trench (current: #4 - 2085)
Gn
Your pfp reminds me of a meme but I can’t post it here
DMs are open ;)
Time to stop procrastinating and carry the logs 🪵
Take care y’all
Who’s gonna carry the logs
If my wife doesn't allow wifi, can I lte prepaid data? Cash up front?
Said I would mesh up like I did last time we tried having more than wifi at the same time without establishing rules first
wat
i dont think this is the server you are looking for
you got a colour i dont see often
i indeed have acquired a color that is uncommon
So is tp-link getting flushed?
Now attack
@rugged kayak check DMs
Hi Greg

Is that butter?
cheese id guess
your doing better than me
Yo, wsg guys
yo
But what does it all mean
About to sleep you?
On bus to campus.
.... opposite timezones
What did you do?
you were pink and now you are 🥔 color
XD nah, its 5 here. Im in Cali for a lil
Am...
I'm mage now :D
Pm
./ 🧙
Tater colour approved
... you're the one 5hours behind 🤣
Throw guesses
Real cheese
Yeh…. XD Like I said ‘dyslexic’
Not fake cheese?
Mature cheddar?
Fairs
I think I see pepper jack cheese there
clear cookies and cache
🧊
The plain white one is aged sharp cheddar yes
Yum
I live in burger land we have fake cheese everywhere
lol
same
😆
We try!😭😭
How much was the block of cheese?
This looks like a hotel counter and food plate. Or an airport lounge
I think like $20 im not sure i bought a lot of cheeses at once lmfao
Dropping coordinates in 30 sec’s
Can you find the coordinates based on the shadow
thank god shadow is not here, shes gonna lose her mind jajajaja
Gave +1 Rep to @polar shale (current: #238 - 30)
are you selling fake cheese burgers
a cheese connoisseur
For the low
Y is that ha?
You rich
That's better than most of the meals I eat tbh
Cuz thats A LOT of money for cheese alone
I grew up without what i have now i try to assimilate as much as i can haha
fair twin haha
Bless 🖤
Im loading in rn lol
Nice
Funny timing
https://www.numbeo.com/cost-of-living/country_price_rankings?itemId=12
Price Rankings by Country of Local Cheese (1kg) (Markets)
lol
Gtg y'all. Cya
now i gotta find out some for my description
cya
lol
Do you have watch dogs 2 on pc?
no
rip

?
Well in that case
I was just confused to why I had no roles, and then my question answered itself.
You kinda gotta verify. 😉
I didn't see you answer your question so I did. LOL
But I said my question answered itself
:(
Now how did it do that
Can I dm you about something? @glacial flame
About wat?
An opportunity to make your life 10x better. Just don’t want to share pii here
@light ore
Alr
Thanks for the message @drowsy dust
Gave +1 Rep to @drowsy dust (current: #222 - 33)
Thanks for the rep 😎
+rep
Gave +1 Rep to @drowsy dust (current: #217 - 34)
Here're some good ones 🙂
https://tryhackme.com/room/greprtp
https://tryhackme.com/room/redteamrecon
42
Can’t fool me Douglas Adams
we're from the 40 crowd 🥳
guys need your input, before i start working on the boxes and with my exam, I am currently going through the sql injection in tryhackme but i am not sure if that is sufficient enough for the OSCP exam. i know that we are not allowed to use sqlmap and i feel port 80 and 443 is the entry point for most of the priv esc.
what
you can look it up using the search function
alr thanks
From the tryhackme dashboard Learn > Search > “splunk”
i think if you only know sqli you're cooked for oscp
i went to challenges
learn > search is kinda inaccurate
the new challenges tab is nice, gave me everything i need
forgot they added that
basically what I said 😂
it also gives some rooms that aren't part of it but its not that big of a problem or anything i just dont prefer it
or maybe im tripping 😂
ah...ok my bad. i'll cater for your preferences next time sire
yea typing backticks is slow on mobile, you beat me to it
need to look at writeups a bit
you were more in depth
i can imagine so, if its difficult to use a search bar
i wish it was

no need for shade
i was just looking for a list of splunk rooms that ppl use for practice lol
Ok, now you're just taking the piss "does anyone have a list of all the splunk rooms?"
all
not all 🤦 i was just asking in general if anyone has a list of rooms they practice with
cause theres a google sheet that ppl use to practice for oscp
use the search function and make your own list 😂 😛
perhaps then, asking in the "offsec" server would be most prudent?
tried to find a google sheet/github repo that had list of sherlocks or thm rooms but didnt find any
They might be outdated too
right cause of oscp+
Eh, I don’t think the curriculum changed that drastically
surely doing pretty much any of the splunk rooms would be helpful?
I just mean that some online resources may not be well updated if it was below 2023
you still on the splunk? 😂
you're kind of slow man, i'm searching for a list of splunk/elastic room in contrast to finding well documented material ppl used for oscp, cause im tryna take cdsa by next year ig
havent found a repo for blue team stuffs sadge
I luv it too, I only don't luv its price :P
If you’re taking the CDSA, then surely their specific modules can help you.
splunk slunk splunk 😂
There’s also dedicated mini paths for Splunk I think under the Learn tab
I actually stalled all the splunk rooms on purpose 
yeah cause splunk is 
alr thanks
Keep splunkin' mate
splunk will find you sooner or later 😂
BTL1 is a good certification
yeah its kinda pricey tho but its way easier than cdsa and ccd afaik
cheaper than ccd too, but cdsa feels like a fun thing to do since the report writing apparent makes people go over 100+ pages lol
I'm kind of scared of their certs lol
I do blue teaming as well, but idk how the CDSA will be
it's splunk with a lot of threat hunting so that sounds fun 😂
I'm starting prep for CPTS next year, its already daunting especially since I'm 0 at AD
my weakest point for threat hunting is identifying tools that aren't just plain headers lol or identifying which cves were used for X attack on whatever im triaging
skill issue 😂



This makes me dizzy
2010 facebook post ahh comment
No like genuinely
Look down and try to make out a face
It’s esven more disturbing when only the eyes are flipped upside down
when a whole field of study was just summarized into viral facebook posts 💀
@drowsy dust i think you just baited my curiosity i just typed in that link but replaced it with youtube URLand it actually brought up the admin page
I’m fine with this
@drowsy dust i did not think it was going to work
how bad can googles security be for me to accidentally find a vulnerability
The key is to never pay for Youtube premium and you are impervious
What if I get free YouTube premium
well, then you will always get got
I mean Google needs my support
They’re a small up and coming company

HI
welcome!
lol fr? You got to the admin page and not Rick rolled?
@drowsy dust yea im serious but i did not do it for tryhackme i said let me try it on youtube and when it worked it scared me ecause i knew my ip was visible
😆
ihih
Bro caught me in 4k
Pov: u have younger siblings who love torturing the cat…
I just realized that they changed the answer indicator from asterisk to underscore
@drowsy dust but it did peek my curiosity a little i had to control myself i wanted to see how hard it would be to crack but i knew that would be highly illegal
🤣
…or worse, against the THM TOS :p
Change your name to BigBrassBeanz if you do that
@jolly aspen lol
Realistically I’m sure it’s more than segmented with a completely different VPN system like Wireguard and more
(for THM)
But yes I love their solution for people just poking around
Have you been to admin.tryhackme.com?
there's something better which could be done (not for this, for something else)
buy the domain hackthe.box and make it redirect to THM

btw, HTB does this
try visiting tryhack.me
.box is only a proposed TLD but not current
yeah probably still has to be released
why debate a decade to register a simple TLD though? 🤣
I was about to say… yeah decade since last movement, but better to think it though than the insane .zip TLD we have now
This is owned by Luke turvey
we have a tld like that??
Yes it was a big deal within the last year and a half due to understandable infosec concerns
O h lol
Looks like it will be private for blockchain
I didn't whois it
Maybe
They were Google’s last awful decisions as a registrar before they gave that up
I don't understand blockchain in the slightest though 
.zip is a top-level domain name operated by Google. It is a generic top-level domain (gTLD) introduced under the Internet Corporation for Assigned Names and Numbers's new gTLD program. Approved as a part of the program, .zip became available to the general public on May 3, 2023.
The qualifier .zip is also associated with the widely recognized ....
Ahhhahaha yep, I’ve read about this
Rightfully has an entire section on “Security Concerns”
yeah many blocked it out right. Some security researchers bought up all the sus domains they could
.elf TDL dropping soon
lol, but no one Linux savvy enough to know elf would fall for that. Plus I mean, we don’t really use that typically
But everyone knows Santa’s little helpers
usually only see it in really weird places like PS2 modding or PS2 Linux and similar cases
lol shh
where’s my .out TLD so I can get the very valuable a.out then?
lolol, that’s typically not how you do it
such stealth 
much opsec 
Appears to be a DJ
I would typically recommend just the ICANN lookup or literal whois rather than that for profit site, but fair the ICANN lookup sometimes fails, but generally the Linux command works
Im on mobile, but thanks for the suggestion
On iOS as well or else I’d be like, why not termux
Im aware of how to perform a whois lookup 😉
mhmm, I just hate this site coming up in the results trying to out SEO the real thing
although my dude, please charge your phone lol
Ffs
<3
lol sorry I wasn’t trying to give you a such a hard time… entirely intentionally c:
I will also note I am an iOS user these days. I do miss termux being handy on my phone, was an Android user for over a decade before I switched
Brb Waiting for my phone to fully charge first
Totally fair, yeah I’m just at home typing on an iPad with a keyboard case no-less lol
I’d complain that no one is up but too late for US and too early for UK lol. I’m only up because I have tomorrow (erm, today) off
In more interesting news I got to setup a Linux system that powers a hospitality related media feature at work today, that was nice
student discount doesn't apply to monthly premium now or my pc bugging?
I got to hack a relative's old Linux system recently
They'd forgotten the root password (over 25 years old system), I used a basic kernel exploit
Sec, I have a pic somewhere
um if you had access to grub you didn’t even need an exploit
heck I’ve had to do so professionally for non-security stuff for ESXi systems lol
It was a wonder I even got it to boot up 🤣
its 32 bit, I downloaded an ISO image from stack overflow and mounted it with rufus on a 4 gb usb
Xubuntu
even then 32bit grub 1 you could have done the same thing and dropped into single user mode and just done the thing
I didn't know of that
Yeah lol, I wrote a C script and ran it
fair enough
setuid(0) etc
How far are you on the Linux priv esc rooms on THM? because yeah you could have just messed with /etc/shadow its self trivially
I'm not, actually.
I need to be better at it
So far I've only covered kernel exploits, path manipulation, SUID, cron jobs
Yeah I could have modified shadow as well
or cracked the root hash, idk?
if you can actually modify the /etc/shadow you can just make it blank or input your own known hash, even easier. Obviously less than stealthy, but not what you were looking to do
Wouldn't have made much of a difference tbh, the current user had all permissions with sudo
Just got root for fun to say that I got root 
lol, so you could have just done this without even any hassle either and skiped a few steps, but totally fair
I wasn’t sure how locked out of it you really were
Not locked out at all tbh, there were multiple ways in
only thing is the root password itself was forgotten, or it would've just taken a sudo su to get in
mhmm, and that’s often the fun of Linux exploitation, tons of ways to get the same job done, especially the older it is, the easier it is
I did have fun cheesing some Linux THM rooms with newer exploits than they were designed for… but fair I went back and did it “the right way” so I didn’t cheat myself out of that knowledge
iirc I used DirtyPipe and PwnKit on some for fun, before we had proper rooms on either
👋
old THM rooms can be fun playground for new exploits if you don’t feel like spinning up a lab for such
Heya!
Eh, finally got to do more Linux stuff at work for a client, that was nice. Retro wise, its mostly been retro PC gaming as of late with mods. Not much coding other than reverse engineering a PROPRIETARY AND CONFIDENTIAL Docker Compose setup to troubleshoot how it worked lol.
mods, reverse engineering, confidential setups, sounds like the life 🙂
living the dream
lol kinda the norm, but yee, can’t complain
I just said to someone... best advice I could ever give is, enjoy your day today 🙂
@sinful moon it is really great to hear you share about your experiences 👍
Glad to hear it! lol yeah I just do a ton of random stuff both at work and personally. imho it’s good to be well rounded, not that I’d be remiss in saying I’d enjoy a more specialized single focus job in the future, but amazing job experience
But yeah for the former point, besides just enjoyment, there’s a reason I use every OS I can get my hands on
it is really great to hear you make the connection to a job and what you are passionate about
that is value to both yourself and employers
For sure, although it is probably time for me to move on, but saying so and doing so are two different things. We shall see, I am at a pretty comfortable spot
yes growth is extremely healthy to be able to self reflect on
mhmm
Yeah I’m not content unless I’m learning something every single day, I wouldn’t even say I’m pushing myself to do so, more just addicted to learning lol
happy to hear you say that, I believe it is a big reasons we are all gathered here
I need like 10 bottles of vodka stockpiled
depressants? 😮
@lunar cloud I so want to hear what you had to say 🙂
Yeast
anyone know the answer to this question.Based on the duty to inform case study, what should be considered when deciding whether to investigate a breach? (Answer1 vs Answer2) it has to be 4 letters vs 13 letters. "The duty to inform is closely tied to transparency and communication. DFIR teams must keep stakeholders informed about the progress of the investigation, emerging threats, and mitigation efforts while ensuring confidentiality and that privacy laws and regulations are observed. Regular status updates, incident reports, and briefings contribute to fulfilling this duty. Communication channels may include secure emails, encrypted messaging platforms, or dedicated incident response portals. Timely and accurate information sharing enhances collaboration among team members and external stakeholders, fostering a collective understanding of the evolving threat landscape.
"
@wooden totem my addiction is showing up at the bakery at 7AM asking for their latest bread
What
what is this for?
IR Philosophy and Ethics
oh! alcohol being a depressant (no shame)
This sounds like a question for school which we’re not supposed to be assisting with.
If you need that kind of assistance, it’s best to collaborate with your classmates or reach out to advisors
That’s a lot, lol
@eternal timber I had education on mental health and addictions with 5+ years of street outreach, and 2+ years a facility 😄
it only added to my social engineering skill 😄
I like not having to think
Even if it’s not completely effective
Fun fact this is my last night of drinking habitually
@eternal timber I hear ya, numbing, drowning out being in our head
Do they have fresh bread
Not drinking it all at once lol
I’ve had two beers and whiskey
@wooden totem omg, the best
Tonight
I can't eat "normal bread" anymore
Would you eat this
You don’t want to know how many I’ve had, which had lead to my tolerance and lead to this not being acceptable in my life anymore lol. But thats a me issue I’m getting over. You are just fine my friend!
considering you invested the time to share it, quite possibly yes, yet I would love to hear your personal story around that picture
Garlic bread
we live and learn, I hear that 😉
That is obviously a stock photo lol
Oh, stocking up for the year
a crazy part of my bread purchasing experience, is making a connection to the person who was up super early baking it
and them knowing who I am
thus your name and orgin story? lolol
it is simply a connection to people 🙂
More like a month if I’m being irresponsible
At most
haha I know, nice story. I just couldn’t resist
was hoping it was your secret super power origin
pro tip use your favorite AI to help you hack!!
well about that….
my super power is most likely caring about people
i have been testing copilot it works pretty amazing
Inadvisable, it should only be an assistant, it is not magic, its just fed off of web data and more. It doesn’t mean it’s right, it doesn’t mean it’s being ethical, it doesn’t mean it’s being stealthy. There’s so many caveats if you mean to use this for red team engagements. You need to be very mindful to check behind it if you use a tool like that
i know this it shows you the references
and it is much easier than searching the web
@real lichen that kind of thinking creates jobs for new people, yet creates work for experienced people, to fix the disaster of code written by AI
not saying it is right or wrong
That’s fair but it’s better to actually learn this yourself and only reach out when you need help
not for writing whole programs either
i am i use it to look up commands and it can help keep track of data for you too
and wait you need help with something, it’s called man pages and documentation
lol
or literally tab completion in your terminal
again this is much easier
I have friends at Electronic Arts who spend most of their day fixing bugs due to AI generated code implemented by new programmers using AI
Jarvis, source on Reddit from now on
and i can feed the man page to the AI and he can help me look for stuff
It’s easier to switch out of your terminal to check something you need in your terminal?
Dang you can go through 10 bottles in a month, 750ml bottles?
AI creates new opportunities for us in cybersecurity
not sure how I feel about that
FOR REALS
I get it, I’ve used ChatGPT to help me in some limited capacities, but also, you’ll find many guardrails against truely malacious use you may actually want to employ for ethical purposes
I don’t drink often but I go hardcore when I do
@eternal timber binge drinking! or substance abuse
i am going for ethical use and the AI wont answer you if it thinks you are doing illegal stuff lol
Liver disease my favorite
@eternal timber message me if you think we can avoid any self harm 😉
Well Keith, it depends on what field of infosec you’re interested in then I guess
It's pretty good for beginner stuff and basics, struggles to think outside the box
mhmm
Don’t worry. I’m not in state of mind anymore
just saying especially if you are new you can just ask to explain a command you dont understand
Thanks tho
Gave +1 Rep to @lime ledge (current: #234 - 31)
it’s only yet another source of documentation but one which must be used with quite a grain of salt, especially on code
it will even walk you through finding exploits on metasploit lol
We do have rooms on that, and there’s the info command
just like man pages for general commands
Just as long as you’re only using it as a supplement that’s fine, rather than a crutch
definetly not a cruch its my assistant
don’t cheat yourself out of learning how to find info yourself
because you’re not going to have it in standardized testing
i also have had a bachelor of science in computer programming for 14 years
just breaking into cyber security
what…
I have had 20 years experience as a programmer, recently learning PowerShell is hard 😄
Oh I misread my bad
lol
PowerShell isn’t too hard it’s just extremely C# and “code as documentation” to a fault
I have 22 years of experience in life
code is easy
yet they say that but you see a powershell script without comments and it’s ouch
I can only say take it easy, and unlearning can be a blessing
Where the money is
my degree was also specialized for game development
That’s sick
I did gamedev indie for 6+ years
i love it the new unreal stuff is crazy
14 years ago probably means raw engine coding, or were you doing frameworks back then too?
still living off the funds today
yes maam
Imma try that
created engines of our own
for final project i created our entire VFX engine and editor
It is useful for assisting tbh
Especially useful for harder things like active machines in HTB
Nice most of my gamedev were with APIs but not full on Unity/Godot, more like Love2D, Pico8 and APIs like that
@wooden totem my experience taught me (also the connections to people) that living by making mistakes is the best thing I could never do
I can do some simple stuff with SDL and C++ but I don’t have the time for that
@real lichen did you work on popular games? something known?
Good thing my whole life is a mistake then 😎
reddit frontpage 50k USD 1 day 👍
yet I didn't know why
lesson learned... measurables
CEOs, customers, employees, shareholders...
make a thing, sell a thing, measure
Totally fair
i have not worked on any known games i have friends in minecraft and destiny
Yeah I have some friends in the industry working from indie to AAA, it’s neat to hear what they’re working on for sure
I have been a CTO in finance, worked in gamedev, also worked in cybersecurity
i worked at Audible and Publix Corp lol and a couple indie companies that didnt pan out. working on my own stuff now
and now I hide from my experience 😄
Ouch I don’t envy working as CTO, but nice
my last job was as a social worker helping people with disabilities 🙂
I say accidentally becoming compliance manager as one of my many hats, also not envyable
we really want growth, how ever that looks like
Nice yeah those were my first two jobs, working in education and home health care with similar populations
Pay was crap, but extremely rewarding jobs
little example for a quick AI question this is more noob related
make nmap go as fast as possible with threads
To make Nmap scans as fast as possible by leveraging threads, you can use the following options: -T5, --min-parallelism, and --max-parallelism.
Here’s an example command that sets aggressive timing and increases parallelism to maximize speed:
Example Command
shell
nmap -T5 --min-parallelism 100 --max-parallelism 256 <target>
Explanation:
-T5: Sets the timing template to Insane (fastest).
--min-parallelism 100: Sets the minimum number of parallel probe groups to 100.
--max-parallelism 256: Sets the maximum number of parallel probe groups to 256.
dude the man page would have told you that
man page ftw 👍
lol
i didnt find yet my personal dream job, however after 20 years its about time to not say anymore "it pays the bills" .. i should look for something fun + paying the bills xD
this makes it easier to understand and just a quick example lol
ChatGPT, please give me a summary of the nmap man page
BRO WANT GIVE ATTAK MY BOR? WANT ?
I don't think it's a noob question if the question has so many specifics
just do / to do a search while in a man page, but yes
i did already know what i was looking for
me using it to mess around with bug bouties and keep track of what ive done
give me a summary of our targets
Sure thing! Here's a summary of our current targets and the progress we've made so far:
Target 1: MercadoLibre
Objective:
Perform comprehensive security testing to identify potential vulnerabilities in MercadoLibre's web application and infrastructure.
Activities Performed:
Directory Enumeration:
Conducted multiple rounds of Gobuster scans.
Identified numerous directories returning 403 Forbidden status codes.
Filtered and documented significant directories for further analysis.
403 Forbidden Directories Analysis:
Focusing on directories like /netdiag, /nt4novel, /WebDAV-IIS, and /sip-server for deeper exploration.
Next Steps:
API Testing:
Set up test user accounts and explore MercadoLibre's APIs for potential vulnerabilities.
Subdomain Enumeration:
Identify and analyze subdomains using tools like Sublist3r or Amass.
Automated Vulnerability Scanning:
Run automated tools (Nikto, OWASP ZAP) to identify common web application vulnerabilities.
CSP Analysis:
Evaluate Content Security Policy headers to prevent XSS attacks.
but also I will just point out, THM teaches you a lot of these things
I hate computers.
And hack tricks if you really need that kind of outline for “what to check” if you don’t know
But this is also why keeping your own notes are important
I’m guessing that CISSP is the end career goal for a lot of people in cyber security?
I get the value, but as infosec professionals, we should already be subject matter experts
And never share with others 😉
of course i screenshot everything and all of that. this is something i have just been experimenting with
Many do publish their notes online, that’s kind of a common past time actually, infosec blogging even just for THM/HTB writeups
and honestly, that’s kind of the form that the hack tricks site is in, it’s just a collection of notes already
yo guys, ik it sounds kinda stupid but will tryhackme's certs help idk get a job or some? im just 15 but im kinda thinking about the future n stuff


