general

[rapid merlin]

Also is it one of those ones where after some time you would have to redo it

[rustic plinth]

this is true, looking at the 101 content there is a decent bit iv not covered yet, so ill go down this track. Also as i see its part of the new SAL1 cert might aswell 😛

[mellow narwhal]

Though I feel it would be a bit better to reword this to say "Other certifications" instead of mentioning the specific names

could be controversial

[sinful bobcat]

Man I know that's why I'm seriously thinking of doing it, is there any time limit to try it after I bought it ?

[mellow narwhal]

that's just my take on it though

[sinful bobcat]

It's damn cheap for a certification

[chilly veldt]

@jagged yarrow there's something wrong here, BTL1 does give Job-ready SOC experience, as you do sit and get experience working in a SOC in their training and exam, I have taken the cert and it did give experience

[mellow narwhal]

I mean, CompTIA's certs cost around the same, so it puts SAL1 right up there with the amped up price vs quality worth certifications

[rapid merlin]

I really liked the Soc simulator

[jagged yarrow]

They don't teach you in an actual SOC environment - we use the SOC Simulator to evaluate actual real-world skills. We sat with analysts at Accenture to replicate exactly what they do

Try out one of the scenarios if you want to see what its like!

[sinful bobcat]

A little bit more if im not wrong it should be around 400

Soc simulators are fun

[brazen siren]

I had issues with the SOC simulation. I don't know enough on that side to understand what I'm actually supposed to do. I know how to break shit, but don't know how to guard shit 😄

[rapid merlin]

I really enjoyed the SOC simulator

[manic cedar]

Is there a way we can download from attackbox to our main system can anybody tell me

[sinful moon]

I think I mentioned above, you can use a local VM to do so. Using Kali as your guest VM would probably be most ideal

[chilly veldt]

fair, I find their virtualized SOC training where you had to populate and then do SOC work with it to be proper experience, I will gladly take one of your scenarios to see the difference.

on a site not, the pic there is pounds where a bit lower it's in dollars, so people might get confused about the pricing if they don't see the currency sign

[brazen siren]

send via email? 😄

[proven quartz]

You're supposed to complete at least SOC 1 in the Learning Paths

[manic cedar]

Not working

[mellow narwhal]

@jagged yarrow What do you think about this?

[brazen siren]

I completed it, but that does not mean I understood it fully to the extent I should've. I guess I'll retake the lessons to get more in-depth understanding

[sinful moon]

Oh I misread their question anyways, but no not realistically, that’s what I said above when I said a local or even remote VMs you administrate would be better

[brazen siren]

I'd say that it could use a few more levels, starting with ensuring that you are able to tell the difference between malicious actors and non-malicious ones first. Like making it mega apparent.

[brazen siren]

Let's say that once you did a report, it analyzed it, gave you feedback based on your report (like if you flagged something that is not malicious as malicious) it would give you feedback related to the analysis.

[sinful moon]

you technically could via the target machine but that’s getting extreme and I was just thinking of silly ways

[manic cedar]

I don't like vm that why I shifted from windows to Kali Linux

[brazen siren]

Same if it was a correct call

[sinful moon]

lol hopefully not as your main OS

but if you already have a Kali install, then there’s no reason not to be using that

[mellow narwhal]

SAL1 implies the existence of a SAL2 👀

[manic cedar]

As a main os i use only one os

[brazen siren]

Well... I might have a few Kali machines running as my main computers 😄

[sinful moon]

There’s nothing “blessed” about the AttackBox other than it’s in the same VPN network. Just OpenVPN in via Kali and you’re set

[brazen siren]

I don't judge

[mellow narwhal]

baremetal??

[sinful moon]

just if you mean you run Kali Linux as your main OS, that’s highly insecure and inadvisable

[brazen siren]

Yeah, not virtualized

[mellow narwhal]

yeah thats not advisable like elizabeth said

[sinful moon]

nothing wrong with Kali bare metal mind you, just not as this guy may be doing above

[manic cedar]

Using it I don't don't give you access to worllists

[brazen siren]

However, they're in a separate network, and have no important logins

[mellow narwhal]

just make sure you harden it properly even otherwise

if someone gets in, they can pivot

[manic cedar]

I have twin layer protection

[sinful moon]

both AttackBox and Kali have wordlists, idk what you mean

It’s in the seclists

[mellow narwhal]

separate network makes it harder, but hey remove all the possibilities right

[brazen siren]

truetrue

[manic cedar]

For room like root me and password for room

[mellow narwhal]

if only you're using this, remove everyone else from sudoers and monitor running services is what I advise

[sinful moon]

then you download the wordlists they give you and use them? what do you even mean lol

[manic cedar]

And attackbox is for an only in q
day

[brazen siren]

Any tips on hardening your Kali?

[sinful moon]

97% of the time you can use a local or remote VMs with no issues instead of the split view

[manic cedar]

Sometime they expect you that you are using attackbox

[fringe nacelle]

Just got the cert email from THM

[sinful moon]

Even then if you’re stubborn and or know enough, you can keep going

[manic cedar]

But it's easy to have room all info

[sick lance]

Blue cert released

[wooden totem]

speedrun

[polar wraith]

did the certificate just go live on the website

[sick lance]

Yeah.

[sinful moon]

They always give you the files to download and more. But yes if you’re happy with AttackBox just stick with it

[sick lance]

Kek

[vagrant kraken]

Its live 300 eyro

[umbral kiln]

[sick lance]

Not always

[cedar swan]

hi scrubling

[neon current]

Is the new sal1 proctored? Does it expire?

[pliant onyx]

New certs just dropped

[sick lance]

I would not suggest taking the malware etc

[sick lance]

Yes

[vagrant kraken]

297 Euro its 1 Cert

[sick lance]

Ya.

[neon current]

Yes to both?

[ancient mirage]

how are you today guys?

[sinful moon]

Yeah I said like 95% for a reason lol

[sick lance]

Both what?

[gleaming grail]

300 euro for that?

[fringe nacelle]

$297 USD

[vagrant kraken]

Yeap

[neon current]

That it's proctored and expires?

[sinful moon]

Anyways respect, this does look like a more legit try for a cert than I expected

[fresh ice]

What are your thoughts on recently launched SAL1 certificate for blue team on tryhackme

[gleaming grail]

Yeah I'll pass

[sinful moon]

I will actually check it out for real

[cosmic pendant]

https://www.antisyphontraining.com/ace-t-certification/

[near sapphire]

cert is here YAYYYY!

[sick lance]

You need id, unsure if it expires

[livid burrow]

omg

[fair thunder]

Can skiddy stop @ing everyone holy shit

[livid burrow]

what is the new certification thing

[main tiger]

not sure why it says "trusted by millions" when its just launched

[fresh ice]

SAL1 CERTIFICATE

[sick lance]

You can turn off.

[sick lance]

Reference to TryHackMe

[neon current]

If it does not expire, and it's proctored it may just be the best valued certification on the market, depending on the exam difficulty

[livid burrow]

it looks sexyy

[candid niche]

SAL1 😍

[fresh ice]

So the SAL1 certificate isn't free for premium users?

[sick lance]

No.

[vagrant kraken]

No

[real night]

Let's goooooooo

[vagrant kraken]

Nothing is Free

[livid burrow]

Wait its paid?

[halcyon harness]

I'm happy that it is a blue team cert

[idle mica]

I can't wait to evaluate that cert. Looks good!

[main tiger]

well its just launched either way so does not make sense. Tryhackme is trusted yes but the cert has just launched

[fresh ice]

What if we fail

[jolly aspen]

Price keeps changing. Was there a reduced price for the first x signups?

[fringe nacelle]

$300 pretty much

[neon current]

Is the sal1 given at a discount for premium users, haha

[livid burrow]

Ohh thought u get this after finishing the path of soc analyst 1

but it seems good

more professional

[naive violet]

Looks to be unproctored?

    Each section has its own timer, which starts counting down as soon as you begin that section. The timer runs continuously until time expires or you complete the section.
    The total exam duration is 6 hours within the 24-hour window. You must complete the sections in order: first the multiple-choice questions, followed by the two SOC Simulator scenarios.```

[vagrant kraken]

So its open book

[real night]

Considering it was a blue cert, there's a possibility that red cert is getting baked too right?

[cosmic pendant]

https://youtu.be/9quML_OS6Uc?t=6704

[fringe relic]

Well, millions of people have blind trust!

[vagrant kraken]

No value

[sinful moon]

It is trying for real to be an actual industry cert and yep those cost money. This is significantly more respectable than I was anticipating so yep, honestly good stuff. I still have to read more about it though

[neon current]

Is this the first official tryhackme certification?

[fringe nacelle]

I'm not a fan of mcq, but good luck to anyone who does it

[naive violet]

Yes

[main tiger]

😅

[tribal ice]

yo

[near hawk]

It's a mix

[tribal ice]

my diplay name seems to be okay here

[idle mica]

No, not inherently. Being able to operate independently and find information for yourself is a critical skill for any cybersecurity professional

[livid burrow]

Why so

[vagrant kraken]

Yea

[fringe relic]

It was a joke

[idle mica]

GIAC certs are open book, but they're still difficult for many individuals

[naive violet]

Closed book in this decade is unrealistic.

[near hawk]

Yea, it's unproctored

[cosmic pendant]

Because the open book is a way to check something, not look up everything, too much info

[main tiger]

HTB sherlocks hard and insane is harder than giac certs

[idle mica]

It depends on the cert exam lol

[chilly veldt]

@jagged yarrow if you'll like, I would love to send you my thoughts when I have gone through the scenarios and can draw differences to BTL1 here later,
I have personally worked with SOC systems for the last 3 years and have a lot of experience in the area

[sick lance]

Sherlock isn't as bad as people make out ml

Much like ghost.

[idle mica]

But you still could with an effective index

[cosmic pendant]

That's how they tell you study. That's how I passed all of mine

[real night]

There is proabably someone out there is already taking SAL1

[neon current]

I like the idea of the certification cause I love tryhackme's rooms, but I already paid for the OSDA, and the BTL1, I can't justify another cert if it's unprotored

[wooden totem]

Is sal1 really that good or is it just marketing

[idle mica]

Well yeah 🤣

[jagged yarrow]

Please do! Can you do me a favour and read this before hand? https://tryhackme.com/resources/blog/creating-sal1

[naive violet]

It's literally marketing, the material is from the creator

[chilly veldt]

of course 😄
I'll throw you a DM with my thoughts

[idle mica]

I might have missed it, but is there functionality to gift a certification attempt? I know we'd love to do a few giveaways with this

[fringe nacelle]

Let's force Elizabeth to do the Sal1

[brisk tree]

so the exam is 24 hours long or the content?

[jagged yarrow]

What do you mean?

[neon current]

I will say this the Soc tier 1, and tier 2 paths are some of the best in the industry, especially at the cost.

[fringe nacelle]

That would be insane

[naive violet]

The blog post is from THM, the creator.
It is marketing material.

[jagged yarrow]

Ah I see.

[cosmic pendant]

"Gold Standard"?

[main tiger]

It will take a while for the cert to get recognized by hiring managers

[naive violet]

There's more to it than that, but the industry takeup will be the proof

[fresh ice]

I have a 1 year premium subscription of tryhackme. And currently pursuing SoC level 1 walkthrough

[royal halo]

How long do you recon ?

[elfin oriole]

I doubt it will really get recognised

[main tiger]

BTL1 only started getting put on job posts after 1-2 years, so I would say around that ballpark. Suprisingly in the UK its sec+,CEH,BTL1 that are mainly on the job posts

[royal halo]

Why do you think so ?

[elfin oriole]

More mature certs still aren’t really recognised

[sick lance]

I havs not seen many positions consider CeH ..

[royal halo]

Yeah I think sec+ is pretty much the industry standard

[cosmic pendant]

Certs in many ways have been devauled, the same as college/uni. Because it's become another money grab

[naive violet]

@jagged yarrow Have you considered aligning it with the UK cyber security council specialisms and standards? Gov work in the UK is all moving to those

[sick lance]

Happily to be shown wrong if you can show them.

[main tiger]

I have, and as bad as it is. Its frustrating to see that on a job post.

[cosmic pendant]

Almost every position i see mentions CEH

[naive violet]

Incident response is a new specialism, not sure if soc fits into that

[royal halo]

but adding to the vast sea of certs is certainly an odd move, esp for tryhackme.

[cosmic pendant]

The ones we post include it

[elfin oriole]

BTL1&2, then SANS and experience is what I’ve seen for SOC roles if they are asking for certs

[royal halo]

Just adding more dilemma to beginners

[idle mica]

Tbf CEH and EC-Council have become a joke nowadays

[silent nova]

The quiz is multiple choice, wow. (Also SOC Sim? Nice.)

[steel aspen]

Who does CEH?

[cosmic pendant]

Not wrong, but that's on the business side...

[royal halo]

what do you mean ?

[cosmic pendant]

While EC-Council is a joke, and has demonstrated unethical behavoir themselves. THe marketing and most of the material for the cert is good

[steel aspen]

Oh that's who I was trying to think of. Didn't EC-Council get breached?

[amber quarry]

what's the argument behind this ?

[sick lance]

Mostly India

[cosmic pendant]

It's the daddy of pentesting certs

[idle mica]

The cert is absolutely useless as well, much like GRTP lmao. The SEC565 class was fantastic, the cert is just a multiple choice time crunch

[steel aspen]

Or maybe unethical stuff I was thinking of

[sick lance]

In the UK?

[cosmic pendant]

Oh, I can't help with that 🙂

[steel aspen]

Yeah the company I mean not the country that uses it lol

[chilly veldt]

I asked just above actually, with skidy giving a response

[royal halo]

At this point that chart just has to be a marketing stint

[pliant onyx]

Lots of people here do it yes

In fact, the teachers encourage students in the university to pursue it

And they do it with the students too sometimes

[steel aspen]

How good are CompTIA certs?

[fringe nacelle]

45 seconds a question for the mcq. I wonder how intense or simple the questions will be

[naive violet]

Their "soc simulator" from the text I think

[sick lance]

OpenUni in the UK include it on their source

[sick lance]

It is

[amber quarry]

ayy found it ty

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 966)

[pliant onyx]

Damn, I see

Wow it takes 'ty' too

Noice

[idle mica]

"Good" is relative. They're known to hiring managers and HR. Not entirely useless but you take them to establish that you have a rough baseline of knowledge

[amber quarry]

that blue team stuff isn't for my anyway 🥴
but it's cool THM is getting in the cert market with relatively affordable stuff

[jagged yarrow]

They don't teach you in an actual SOC environment - we use the SOC Simulator to evaluate actual real-world skills. We sat with analysts at Accenture to replicate exactly what they do. Try out one of the scenarios if you want to see what its like!

[sick lance]

Red team cert next.

[idle mica]

I really enjoyed the old CASP+, but SecurityX was a bit of a regression without the practical lab questions

[chilly veldt]

hmmm, time to ask work if they can pay for this cert

[stuck vapor]

I wish so

[sick lance]

MCQ is the one thing. I found strange.

[main tiger]

can do, if interested I can dm.

[chilly veldt]

could be fun to be the first who has taken it, then I'll just take it tonight to see what it is 😛

[fringe nacelle]

Go for it, the first 100 get a special goody box

[hollow saddle]

where you guyz found the answers of the labs ??

[main tiger]

I was never a fan of BTLO challenges. They were not that realitic.

[sick lance]

In the labs

[idle mica]

Oh damn I better take it now for giggles

[fringe nacelle]

You got this ez pz

[idle mica]

Gonna yolo it and see what happens 🤣

[hollow saddle]

i also try many labs but always they say incorrect to my answers even a space exit in it

[chilly veldt]

I think I am out qualified for it, so might be easy for me to get

[pliant onyx]

I will be devouring that

When will it be releasing? Any tentative?

[chilly veldt]

a level 1 cert might be too easy when you have 3 years of experience in SOC and built one 😄

[pliant onyx]

Subtle flex

[fringe nacelle]

Gotta flex them muscles

[main tiger]

OSCP still dominant a lot of the time, and CREST especially in the UK

[sick lance]

Granted,.the MCQ only takes 20%.

But still.

[idle mica]

Definitely, but a refresher never hurts and then you can more effectively recommend it to others!

[steel aspen]

Who's next after CompTIA?

[chilly veldt]

yeah, plan is that if this is a good one, we might push it to the new employees in the SOC

[pliant onyx]

Just get any/every cert at this point

And call yourself a cyber security 'expert'

[cosmic pendant]

I know a guy that 20+ certs and he was useless

[pliant onyx]

Pffttttt

[lament tendon]

I got the THM JR. Penetration Tester Certification, that proves beyond any doubt I am a master hacker, no?

[pliant onyx]

haxxter

[stuck vapor]

I hope that they come up with a new ethical OFFENSIVE red team cert

[elfin oriole]

I am curious why is there a multiple choice section when it’s unproctored and open book? Seems somewhat of a moot point?

[pliant onyx]

Elite haxxer (However you write that in scriptkiddie)

[lament tendon]

el1t3 h4xx0r

[pliant onyx]

They will teach you how to say, "Blue team sucks"

[steel aspen]

How about the Web Hacking module? Can hack Facebook now 😎

[pliant onyx]

Coz it's... offensive... get it...

I'll see myself out

[steel aspen]

https://tenor.com/view/hacker-pc-meme-matrix-codes-gif-16730883

[stuck vapor]

🤣

[lament tendon]

Ouch. But that is exactly my type of humor.

[ripe vine]

Is the exam proctored? What’s stopping someone from googling the multiple choice section?

[stuck vapor]

Na Na its was funny

[pliant onyx]

I have officially bagged a baddy

/j /s

[idle mica]

It depends on what your goals are. Hands-on experience is always great. Cert-wise, if you can get an employer to pay for a SANS class and GIAC cert, they're generally really good. I've been a big fan of AntiSyphon's training lately

[sick lance]

It only takes up 20%.

You won't pass with just the MCQ

[wraith granite]

my first server

:D

[ripe vine]

Is it seen as research skills?

[steel aspen]

Mainly security analyst. Sounds interesting and maybe even fun.

[stuck vapor]

Now im doing the holo Network

[idle mica]

Yessss welcome to the addiction of hardware lmfao

[elfin oriole]

If research is GPT 🙂

[wraith granite]

Thanks xD

[twin ridge]

Gave +1 Rep to @idle mica (current: #380 - 16)

[sick lance]

Soc sim scenarios are 40% each

[cosmic pendant]

This

Did you see that video i posted?

[jagged yarrow]

For MCQs, you answer 80 in 1 hour - so you can try and copy/paste to Google/ChatGPT, but the time pressure is there to limit this. Its only to evaluate foundations - the SOC SIM is a huge weighting for the exam, and not as easy to copy/paste - we also rotate scenarios and the MCQs are select from a huge bank based on a range of difficulty.

[fringe nacelle]

Grats on your first cert on THM skidy. Looking forward to seeing more whenever you finish making them

[halcyon harness]

That's cool

[jagged yarrow]

Thanks! It was in development for a long long time

[twin ridge]

Gave +1 Rep to @fringe nacelle (current: #399 - 15)

[stuck vapor]

Wild

[elfin oriole]

@jagged yarrow Will there be plans to complete the SOC path with a L2 aligned cert?

[chilly veldt]

welp, I should be able to get the go in a few, and then I'll be doing the exam this evening 😎

[abstract forge]

I was just finished studying for today and saw the announcement, really excited, would there be in the rooms and Soc Tier 1 section any practice rooms that would simulate what you would do exactly in those sim scenarios so you would feel comfortable taking the exam right after you are done with everything you can cover from these sections?

[jagged yarrow]

SAL2 coming this year

[stuck vapor]

Good luck

[idle mica]

Get really familiar with Windows and Active Directory. Build a home lab, maybe use GOAD, instrument it with Wazuh, follow a guide to execute the attacks, and see how they look in the SIEM. Otherwise, I hear the BTLO certs are good. The idea, in my opinion, is to get your foot in the door with an interview and then comfortably show that you know your stuff

[chilly veldt]

thankz

[fringe nacelle]

Thanks for the info boss

[twin ridge]

Gave +1 Rep to @idle mica (current: #363 - 17)

[ripe vine]

Well thought out approach, Ty for the extra context

[twin ridge]

Gave +1 Rep to @jagged yarrow (current: #140 - 57)

[jagged yarrow]

Yeah! Check out the details page recommended learning - we suggest which scenarios you should do to practice

[fringe nacelle]

I actually plan to make my own honeypot for fun @idle mica Got any experience with that?

[idle mica]

And don't be afraid to get there and talk to people. Meeting the right individuals can open up all kinds of doors. It's definitely a networking game as well

[jagged yarrow]

Thanks! We worked closely with a lot of people on this, including those at Accenture, SalesForce, JustEat, and our hugely talented product/engineering/content-engineering team

[sick lance]

Have a look at the training roadmap

[jagged yarrow]

I'd highly recommend you read the post about how it came to be - it really shows you the level of care and detail we went through to get it right: https://tryhackme.com/resources/blog/creating-sal1

[pallid lotus]

So, uh, has anyone actually been hired as a result of SAL1... which released 25 minutes ago? 😄

[idle mica]

Yeah, I think I used t-pot a while back when I had a static block. I'd probably recommend running it on a VM through a cloud service provider, but it's really interesting to see what happens when you have a honeypot just sitting there exposed

[stuck vapor]

Is there a room for learning proxychains

[elfin oriole]

The SAL1 first 100 is the first to buy or pass? In which case, will there be a memo when the first 100 have been reached @jagged yarrow ?

[jagged yarrow]

We ran betas to test it with different analysts - there are already people from Accenture, SalesForce and others that are rightfully certified. I can say since 25m ago, we've not had anyone certified yet - but the exam is 24h haha - ask again tomorrow

[stuck vapor]

W

[pallid lotus]

Congrats! 😁

[pallid lotus]

Sounds good! 😁

[abstract forge]

so can i buy the exam now and study for those 3 months basically and take it when i decide to? how does it work

[jagged yarrow]

There will be yes 👍

[solid elk]

Hey everyone,
I'm looking to learn more about cloud security (AWS, Azure, GCP) and would love to chat with someone who has experience in the field.

If you know any good resources or can connect me with someone, that’d be awesome!

I'm mainly interested in understanding security challenges in cloud architectures.

[idle mica]

Am I able to buy it and gift it others?

[jagged yarrow]

Yeah - you have 12 months to do the exam from buying it - but 3m of premium are included.

[elfin oriole]

Is it first 100 to pass?

[abstract forge]

nice thank you!

[jagged yarrow]

Yes

[steel aspen]

Oh no. I don't mind windows but I hate active directory. Haven't done a home lab. Can I buy a cheap pc as a test? Still learning about SIEM stuff. Still learning IT stuff as a whole though. The trying to change career is taking longer than I wanted it to lol.

[fringe nacelle]

Appreciate it boss

[stuck vapor]

Is there a room for learning proxychains?

[abstract forge]

can use a VM would be much easier ide assume

[cloud quiver]

https://tryhackme.com/room/torforbeginners

Task 2

[stuck vapor]

Thanks

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 3501)

[steel aspen]

Yeah I've got a vm. Ubuntu and (everyone's love to hate) Kali

[idle mica]

It's definitely a marathon and not a sprint, but you'll get there! Consistency and repetition is key and Active Directory is a critical component of many organizations. I didn't want to learn it either 🤣

[steel aspen]

Mainly use Ubuntu though

Yeah I definitely understand why active directory is necessary and I guess efficient too. It's just annoying to learn lol.

[stuck vapor]

Active directory is strong but just annoying

[steel aspen]

Company roles and if you wanna call it hierarchy lol.

[idle mica]

Microsoft gives you just enough rope to hang yourself when it comes to configurations and defaults. A poorly configured AD is a walk through the park to abuse your way to DA or EA

[boreal scarab]

https://tenor.com/view/press-f-pay-respect-coffin-burial-gif-12855021

[steel aspen]

I even forget what EA is

[idle mica]

Especially with ADCS. Lots of room for abuse there

Enterprise Admin

[steel aspen]

Aside from brEAd $ (EA Sports it's in the game)

[chilly veldt]

it's just awaiting approval lmao

[idle mica]

Wanna race? 🤣

I've gotta run to the DMV first in 20 minutes 😭

[sturdy pike]

How much is the cert?

[chilly veldt]

I have to wait for manager to approve the usage of company card

[steel aspen]

I'm guessing that's like ceo or CTO generally?

[naive violet]

No it's a purely AD concept

[idle mica]

No, it's like domain admin but forest-wide

[steel aspen]

Ohhh. That makes sense.

[idle mica]

If I CEO had enterprise admin... 😭

I'd quit

[ancient mirage]

just got my Jr Penetration tester certificate.

[sturdy pike]

The red of 0xC now burns my eyes

[steel aspen]

Yeah nah not smart hahaha

[sturdy pike]

Was it always like this?

[steel aspen]

My critical thinking is critically injuring me rn 🤣

Or lack thereof

[idle mica]

Pfft not at all, you learned something new!

[steel aspen]

Yeah too true. AD is still very new. I've done a couple THM rooms on it. Very slowly.

[fringe nacelle]

Grats

[sturdy pike]

I come here, hear people's successful stories, get motivation, do a couple rooms.

[tidal hound]

Guys I'm not understand that the first 100 candidate finish the class will get the certificate or it will give for anyone who complete the class guys? I'm not really clear about this

[steel aspen]

It does seem to be very red lol

Think first 100 gets limited edition THM swag

[cinder jay]

need to learn networking from basic . can anyone suggest me

[tidal hound]

oh so I think it's really hard to get T_T

[steel aspen]

But anyone who completes the cert gets it like any other cert

[sturdy pike]

I need it, probably done by now

[sturdy pike]

I know right

[lament tendon]

Check out the "Networking" section of the path "Cyber Security 101".

[tidal hound]

I think it's depend on people who want to be. Like you can learn what you think you like or you think it's easy to learn then you can explore what you want to do in cyber sercurity world like pentester or SOC personnel, etc

[tidal hound]

Nice

[cinder jay]

is it in this server

i dont get it

[lament tendon]

It's on https://tryhackme.com, which is the website this server belongs to.

[steel aspen]

It's not a normal Thm cert though. Industry recognised by the sounds of it.

[lament tendon]

https://tryhackme.com/paths

[steel aspen]

How about the admin panel? https://admin.tryhackme.com/

[cinder jay]

👍🏻

[lament tendon]

How hilarious.

But.

Whahahaha

Epic embed fail. ;D

[steel aspen]

Yeah pretty good

Yeah rekt myself 😎

[lament tendon]

You need to put <, then the link, then > in order to avoid the embed.

https://admin.tryhackme.com

[steel aspen]

https://shibes.xyz/

[lament tendon]

https://shibes.zyx

[mossy river]

Please don't advertise here

[steel aspen]

So <link> to stop the embed?

[rapid merlin]

Ok

[lament tendon]

Yep!

[fringe nacelle]

Jabba in full force 👀

[steel aspen]

Shibes link is cool BTW

[rapid merlin]

@hardy juniper Hope you're having a good day!

[lament tendon]

It's a neat domain, I suppose?

[steel aspen]

there's too many TLDs now

1000s too many

[lament tendon]

You think so?
I personally like that you actually have a choice for those. ^_^

They just should not have the ones that are common file extensions like .zip, because those will just be abused.

[steel aspen]

Too many to be able to make scams/virus links lol

[lament tendon]

You don't need TLDs to make phishing domains.

[steel aspen]

Nah but some non tech people wouldn't know ig.

[lament tendon]

Unforunately I cannot make an example outside of the advanced channels, whahahaha.
But it is rather trivial to generate a valid looking domain name while ignoring the TLD altogether.

[steel aspen]

Won't go into it as I know it's not allowed but yeah they should've stuck with the normal TLDs

[lament tendon]

Of course you are correct in that having more TLDs technically enables some more variation in malicious domain names, but I don't think it matters too much when put into correlation with what is already possible through just the domain name itself.

[steel aspen]

Yeah I know you can change domain to make it look the same too but with "custom" TLDs I find you can make it look that much more convincing.

[lament tendon]

Plus, having a non-common TLD that is not .com, .org, .net, etc will already by pretty dang suspicious to a lot of non-tech people, I would believe.

Imagine you get a link from your bank and it say your-bank.xyz.

(Of course, someone will fall for that, but someone falls for everything.)

[steel aspen]

Yeah most people would see that and turn away I'd like to think but yeah as you say some would. I know people who click links without hovering to see where it's taking them.

[sick lance]

@small remnant please don't advertise here.

[steel aspen]

Might change subject though cos I know at this time this chat gets all sorts of people out and about hahaha and this would be up their alley so to speak.

[lament tendon]

Sorta agree with you on that, but I also don't believe either of us said anything which is new to people in that field. xD
But yee, let's stop.

[sick lance]

Every one will get a cert

[steel aspen]

Yeah haven't given trade secrets hahaha but yeah better be safe

[steel aspen]

Any goals for the week?

[tidal hound]

Nice thank you bro

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3423)

[steel aspen]

Lots of unverified people come on at this time spilling rubbish lol.

[dark mason]

Is there a student discount to the cert?

[sick lance]

No.

[dark mason]

Dang it

Maybe next year then

[steel aspen]

You're #2 Scrubz. You were #1 what happened? #2 is rookie numbers.

[lament tendon]

Building a CTF for an official competition at a conference, I guess?
Apart from that it's just normal everyday work.

How about you?

[lament tendon]

Yeaaa....

[sick lance]

I don't rep farm

[lament tendon]

Wait, who overtook, lmao?

[sick lance]

I get my thanks for legit helping out. 😄

[steel aspen]

Oh nice that'd be cool as. What do you do for that? Make VMs and servers for people to use?

[idle mica]

Maaan, good luck! Making challenges is such a tough beast sometimes

[steel aspen]

That's what they all say when they get overtaken 😉

[civic egret]

Me when I lie

[sick lance]

I mean, there's the proof?

¯_(ツ)_/¯

[steel aspen]

Huh lol

[lament tendon]

Thank you. ^_^
I have fun with being evil tho, so it's all good.

[twin ridge]

Gave +1 Rep to @idle mica (current: #343 - 18)

[steel aspen]

Who's kgbkp

[sick lance]

User X welcomes new users by saying welcome.

The common reply is "Thank you"

Ez Pz rap farming.

[grizzled void]

KGB

[steel aspen]

Nah that's cheating fr

[idle mica]

Ha, I love that LOL. If you ever wanna exchange challenge ideas, feel free to reach out!

[lament tendon]

Normally you'd make a docker container for web challenges, and provide just files for forensic or RE challenges.
Framework-wise it works pretty much identical to how HTB does challenges (not machines, tho).

[lament tendon]

Sure thing.
I obviously cannot share anything I am doing right now tho.

[cloud quiver]

Is it banned to say hi to new users 🙂 ?

[idle mica]

Oh definitely

[sick lance]

Not really, it's just rep abuse. 😄

[steel aspen]

Oh yeah ( don't use htb, didn't like the interface 🤣)

[sick lance]

I don't use HTB either, yet still get brought up in the server

Rent free and all that.

[steel aspen]

Sounds cool though good luck with it lol

[lament tendon]

Thanks. ^_^

[steel aspen]

How similar is it to Thm?

[slim wave]

red teaming certification when

[cloud quiver]

Yeah , I know buddy , you told me that multiple times by now 😄 . You can delete/reset my rep 🙂

[steel aspen]

The layout was confusing as

[sick lance]

I can't, even if I could, I wouldn't.

[dark mason]

Soon hopefully

[sick lance]

Rep system is useless.

[steel aspen]

Least THM is neat and everything can be found easily

[dark mason]

I so split, idk if I should choose red teaming or pentesting

[steel aspen]

Organised

[sick lance]

Eh, in terms, not so much.

They just have different teaching methods.

[steel aspen]

HTB had stuff everywhere and doesn't help there's Labs and Academy lol idek the difference

I did try it to see what it was about

[queen flare]

+rep @cloud quiver

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 3502)

[cloud quiver]

What's the problem then 🙂 ?

[idle mica]

Alrighty, lets do this

[lament tendon]

Surprisingly different, in my opinion.
Learning content on THM is better, even tho HTB academy is pretty good as well (at a price, it's helly expensive).
I preferer the HTB machines tho, they have a more realisitic feel to them.
And for single more CTF-like challenges: there are good and bad ones on both platforms, HTB just as a lot more with higher difficulty.

[queen flare]

[sick lance]

People often say platform X is better than platform Y.

[sick lance]

There is no problem I'm just pointing out the obvious.

[lament tendon]

I specifically want to not say that.

[idle mica]

Do I need to call your manager? 🤣

[dark mason]

Best of luck! I believe in you brother

[sick lance]

People will do it all the time with everything.

[steel aspen]

I find the THM CTFs alright. HTB just throws you in it I guess.

[chilly veldt]

he's busy busy
and I am working from home, so it's just waiting for him to answer my message, think he's in a meeting

[lament tendon]

Well, HTB Labs is something different then HTB Academy is somehing different then HTB CTF.

[dark mason]

I don't like HTB CTFs because they aren't that streamer friendly

[idle mica]

damnit lol

[cloud quiver]

Ok but you're pointing that out every 2nd day 🙂 . I got your point like 2 months ago 😄 . If it is against the rules then take some action if it isn't , what's the problem then ?

[sick lance]

I've done less THM these days, only rooms I do are the ones we get to test.

[lament tendon]

Labs just gives you access to challenges (and some writeups).
Academy has few proper challenges and mostly learning content.

[chilly veldt]

indeed 😦

[sick lance]

What?

I brought it up because somebody asked me.

[steel aspen]

HTB has 3 different things? I only saw the 2

[lament tendon]

And CTF is just a platform for companies and orgs to host their CTFs on HTB infrastructure.

[sick lance]

I didn't bring it up for no reason...

If you're going to read a conversation, read all of it, not half.

[cloud quiver]

Yeah , you do , like every few days , you're mentioning how i abuse something 🙂

[sick lance]

I've mentioned it twice in conversation.

I haven't raised it before that, that's how conversations work.

[rugged kayak]

academy, labs and ctf

[sick lance]

Even if it was a greater problem than it is, I'd address it with admin, not general chat. 🙂

[oblique furnace]

uhhhh

[steel aspen]

I thought ctf would've fallen under labs lol

[lament tendon]

I brought that up as a bug a few days back because I can't read either, read the actual task. ;D

[oblique furnace]

im grinding my streak rn

[rapid merlin]

The new cert looks so good

Anyone here interested in BCI Technology?

[cloud quiver]

But what's point of having #intros channel if not to welcome new users and point them somewhere if they have some question ?

[rugged kayak]

nope

but they have regular ctfs and prolabs under labs

[small atlas]

@cloud quiver @sick lance I love the fact that new users, old users, anyone are welcomed. Postive vibes. More off it please

[lament tendon]

Naa, see my previous messages.

Or, well, just go visit the platform, whahaha.

[upper minnow]

i was confused on this one too

[lament tendon]

HTB sometimes hosts some pretty cool stuff on there themselves!

[sick lance]

Didn't read all of the task?

[cyan spruce]

Helloo

[lament tendon]

Hi.

[jaunty charm]

hi

[steel aspen]

He wasn't have a go at you lol. I was having some friendly banter with him and he brought up the welcome stuff to tell me about the reps.

[dark mason]

Welcome to chat!

[cyan spruce]

Thank yall

[chilly veldt]

this just keeps staring me in the face @idle mica 😦

[sick lance]

Then close it. 😄

[dark mason]

Wait

How many tries do we have on the exam

[chilly veldt]

well, I am waiting for my manager to approve so I just can plug in the details and get going

[sick lance]

I free retake

[steel aspen]

I wanted to say something smart but don't want it to be taken serious lol so better not

[dark mason]

Awesome

It's also cheap

[idle mica]

That's devious LOL. I wish they could reimburse you

[oblique furnace]

oh wait im with stupid

alright then

[chilly veldt]

well they can, I just don't have enough on my personal account lmao

[oblique furnace]

i finished tho

time to grind some on portswigger

and yall get the daily screenshot

[rapid merlin]

Offt okay

[idle mica]

double damn :(

[chilly veldt]

big time

[rapid merlin]

What’s the exam like?

Do we have to be on cam

I had that once

[umbral bay]

Everyone busy doing the SAL1 exam? 🥳 🙌

[steel aspen]

Better not say it lol 😬

[chilly veldt]

I am waiting for my manager to approve the usage of the company account to buy it xD

[idle mica]

I'm about to start it and just record my time lol

[sick lance]

No, not proctored.

[idle mica]

It's too enticing

[sick lance]

Which I find off as they ask for ID.

[rapid merlin]

Is it timed ?

[chilly veldt]

don't wait for me

[sick lance]

24 hours.

[rapid merlin]

Oh wow

[umbral bay]

Please let me know when you have taken it. Would like to hear your experience. 🙂

[idle mica]

aight, say less, Tuesday just got a hell of a lot more fun

[sick lance]

20% MCQ
40% for both soc sims.

[chilly veldt]

of course, give me this evening and it should be done together with @idle mica

[steel aspen]

How long would it take average?

[sick lance]

Hard to say really.

Depends on how fast/long you work.

[rapid merlin]

That’s long, we got a path for prep ?

[chilly veldt]

SOC level 1

[sick lance]

There is a training roadmap.

[near sapphire]

bella speedruning the cert 🔥

[rapid merlin]

Ohhh okay, that’s cool.

[sick lance]

^

[steel aspen]

Is each one different for when people take it? Different "scenario"?

[sick lance]

I don't know much about it, tbh.

It's been all hushed hushed,

I suspect if it's a sim, it may vary on how alerts pop up etc

[chilly veldt]

I should grab some snacks and stuff before I start it

[umbral bay]

Awesome. Are you gunning for that Certificate 0001 spot? 😄

[steel aspen]

Makes sense I guess being a real world cert

[idle mica]

At this rate, you know it! Sorry if it trips some alarm bells LOL

[rapid merlin]

I’ve done some of those already. Today I was studying geofencing

[idle mica]

I'm really enjoying the question bank so far, though

Lots of good stuff for that tier 1 position to know

[chilly veldt]

don't be, only reason I am taking it is to give feedback, I am already out qualified for the cert 😛

[oblique furnace]

Day 25

[elfin oriole]

Wondering if I should pivot to SAL1 then pick back up CCD after

[oblique furnace]

i still have no clear way to pay for the next month, hopefully i'll figure it out

i got a tech job (unlock an ic locked 13 pro) and the guy hasnt paid up yet

[steel aspen]

There's a lot of free rooms BTW

[idle mica]

One bit of feedback, I know there is the bookmark system, but it'd be handy to see the questions in the "See All Questions" popup because my ADHD brain does not remember numbers. Though, I'm not sure if that'd impact exam integrity

[sick lance]

Being able to backtrack on questions shouldn't do.

It's open book anyway.

[idle mica]

Yeah, like with ISC2. Later questions can inform answers for previous ones and all of that

[mellow narwhal]

I love that its at a highly affordable price, as compared to stuff like CEH, where the price vs quality doesn't check out

I can't take SAL1 rn, but maybe in later years. I'm looking forward to trying out the soc sims on the website though

[queen flare]

what cost do you see in dollars
because its kinda hard for me to compare prices in my currency

[umbral bay]

Noting that one down, thank you. 🙂

[twin ridge]

Gave +1 Rep to @idle mica (current: #332 - 19)

[chilly veldt]

297 US

[mellow narwhal]

Like, 300 dollars approximately

[queen flare]

isn't that close to pentest+ and those certs

[finite tulip]

Curious to see how long before it gets taken

[mellow narwhal]

Yeah CompTIA certs are in the same range

[grizzled void]

Pretty sure that is 404 USD

[mellow narwhal]

Idk if it varies based on country

Pentest+ cost here differs from SAL1 by ~$35

[queen flare]

error 404

[mellow narwhal]

BTL1 is way more expensive as compared to this

like, more than 2x the cost

[steel aspen]

Cert Not Found

[umbral bay]

Fairly quickly. 🙏 🥳

[hollow nebula]

has anyone gotten their pentest+

can't get above a 76% on the Dions - and dion wants a 90% to pass

[rapid merlin]

76 is still pretty good though, keep trying

[hollow nebula]

it's really post-exploitation that's holding me back. certain mimikatz commands, certain exploits . i'm just going through the THM rooms and trying to get the commands in my fingers

[rapid merlin]

If you’re looking for commands, this is a great book

[hollow nebula]

oh that looks fun

[rapid merlin]

It’s got red and blue commands and it tells you which team it’s for and what it’s used for

It’s nice

[hollow nebula]

i'll have to take a looky loo

[rapid merlin]

im currently a beginner wanting to get into red teaming. im learning all of linux fundamentals first right now but does anyone know of any networking books i can read while im getting a basic understanding of linux?

[lament tendon]

My recommendation: don't buy books on this stuff. Many, many platforms including THM, YouTube and more offer really good, up to date content on this stuff, often for free or at least for cheaper then a book.

[mellow narwhal]

basic networking is covered in THM rooms

[rapid merlin]

yeah thats up next, i just got a tip from someone to read up on a book

[lament tendon]

THM and HackTheBox also offer practical tasks alongside the content, which you won't get from a book without setting up your own environment.

[sturdy pike]

Let's see how the new cert is knuckle cracking sounds

[mellow narwhal]

Nah, I would say that its better to do the THM networking rooms

better than books, and you learn everything you need for red teaming

[rapid merlin]

ahh i see, now am i taking the right path by learning linux completely first before getting into networking?

[lament tendon]

Yes!

[hollow nebula]

yes

networking held me back for so long because i ignored it and went into pentesting

[mellow narwhal]

After which you can move onto Python, since in my opinion the 'big three' consists of Linux, networking and Python.

[hollow nebula]

even got sec+ and a job - and felt like a loser because i didn't know how pakcets travelled

[rapid merlin]

I want a networking book too

[lament tendon]

You can learn networking without that, but to actually do literally anything related to working with network, you will need knowledge about Linux and sometimes Windows.

[hollow nebula]

cisco has the free ccna course with packet tracer if you are a visual learner like myself

they even make you set up the homeoffice network with drag and drop cables

[rapid merlin]

i was studying python a bit before i switched to cybersec so i got that down a lil lol

now lastly do i really need the A+ or can i skip it over?

[rapid merlin]

I did some of this

[lament tendon]

Again, I would only recommend buying a book if it is either on a big sale (humble bundles are pretty good sometimes), or if you collect books.
In my opinion, they are often not worth the price when compared to other types of text or video based resources.

[rapid merlin]

I love physical books

[hollow nebula]

you can find older versions of books in pdf form pretty easily online

[lament tendon]

You can skip it.
Of course, if you want it, you can still get it, extra certs will never hurt.

[lament tendon]

In that case: completely fair. Based opinion. xD
Got a whole bunch of red/blue teaming field manuals and even the physical NMap book on my shelf too. ;D

[idle mica]

Another quick bit of feedback, should the countdown timer be running while reading the SOC Wiki and before hitting "start scenario"? Seems a bit odd, since one is potentially burning time while also waiting for the VMs to start

[rapid merlin]

Ofc, im just hit with the never ending overload of thinking that i need to get a grasp of it all quickly. but getting into pentesting will take time huh

[rapid merlin]

If I was to get a book on networking it would need to have diagrams

[idle mica]

I really enjoyed the MCQs, too! Good stuff in there

[lament tendon]

It will take time.
You need to take notes on everything and also take as long as you need to understand the stuff you are learning.

I have been doing this for more then two years at this point, and I am okay-ish, still learning new stuff every day.

[mellow narwhal]

A+ is the basics of computer networking/operating systems, so it might be suitable for entry level jobs

Note that I haven't done A+ myself, I'm just speaking from the practice tests I've taken (which are from CompTIA)

[rapid merlin]

im not a really good notetaker lol but ive been making flashcards on quizlet of linux commands n stuff

[chilly veldt]

unfair 😦

[rapid merlin]

Yeah ill probably get to it at a later point

[lament tendon]

That is a good start.
My recommendation is to set up a note collection that you can use to quickly look stuff up that you have learned about before.

[idle mica]

It'll make it that much more fun! Buy him McDonalds or something, bring it to him, and slip him a "pls pls pls" note 🤣

[lament tendon]

You can use some tool like Obsidian or Trilium to manage the whoe thing and sync it onto Github or another cloud service so you can access them from any device, everywhere.

[chilly veldt]

welp, I would then have to go to the office first

[idle mica]

https://tenor.com/view/monkey-toy-story3-gif-25030026

me when the VMs start

[rapid merlin]

ive been using obsidian but didnt know i could do that. great to know

[chilly veldt]

me right now on the company cams seeing when my manager is at his desk
(this is a joke, we do not have cameras in the office and I would never spy on people like this)

[idle mica]

I used to work for a place that wound up getting rid of the security guards because they made poor business decisions. Guess who was tasked with building security! That's right! The friggin NOC

[rapid merlin]

Do all communications have to run through cloudflare or can I change that

[chilly veldt]

huh?

[rapid merlin]

I don’t know

😂

Ah just ignore me

[chilly veldt]

communications in what way?

[rapid merlin]

I’m just gonna look at the new cert

Look at the topics eg

[devout palm]

Got a fresh haircut

[rapid merlin]

Nice

I rarely ever get my hair cut

Sometimes I cut it myself

[steep mountain]

Saves money

[rapid merlin]

Yeah also I’m not too fussed about my hair

[cosmic pendant]

Good book

[rapid merlin]

Yeah it’s nice

[steep mountain]

Get linux for dummies

[rapid merlin]

Ngl for a long time I could not see this tick here so I thought it was greyed out because I had not done it yet. Very difficult to see

[steep mountain]

I must be blind, where is the security analyst path

nvm

got my hopes up just for it to be a cert

[mellow narwhal]

what?

[elder peak]

Yeah that’s hard to see, what is it a ✅

[rapid merlin]

Yeah it’s supposed to be, is yours like that?

[elder peak]

I’m not at computer, I’ll check when I get back.

[fast zinc]

$350 is too much for SAL1 😭.

[blissful snow]

350 thats not a lot

[elder peak]

Cheaper than most cert exams

[blissful snow]

other are like $800+

[upper minnow]

certs are such pyramid schemes

[kindred yew]

Around 290 USD for premium users

[blissful snow]

brb my dogs unhooked all my speaker wire 😞

[kindred yew]

Who let the

https://tenor.com/view/baha-men-who-let-the-dogs-out-dogs-dog-music-video-gif-24347386

[blissful snow]

it was actually who let the dog in lol

[kindred yew]

You need a firewall rule for dogs

to filter incoming and outgoing dogs

[blissful snow]

no dogs

[elder peak]

Block dogs

[blissful snow]

then my dad opens the dog and lets them in

[idle mica]

I hate how effectively this cert exam simulates a real SOC queue. It's giving me 'nam flashbacks 🤣

[blissful snow]

must put dad in cage

[grizzled void]

I'm interested in knowing what the exclusive swag is. I doubt I'll be first 100 but I still wanna know what I'm about to miss out on

[wet marlin]

happy new year guys

im late ik

new year new me

[blissful snow]

happy new years

im giving you have a different tradition?

[junior wigeon]

I'm new to tryhackme

[sick lance]

Hello!

[chilly veldt]

lmao nice, I am not able to take it today 😦

[lament tendon]

Welcome.

[chilly veldt]

no answer from manager

[jaunty charm]

Welcome

[junior wigeon]

I'm doing the Jr penetration tester path. I wanna know what challenges and ctfs I can do while doing that path (?)

need begginer-friendly challenges

As I'm new to CTFs

[sick lance]

Uh thanks?

[twin ridge]

Gave +1 Rep to @jaunty charm (current: #1766 - 2)

[wet marlin]

yoo

new year new (me)ntal illnes

and agin as i say college is still a pima

pain in my ass

[jaunty charm]

oops sorry wrong person

[sand remnant]

Good morning. How do I obtain my token to verify my account with Discord?

[jaunty charm]

Welcome

[oblique needle]

yo new cert just launched

[wet marlin]

suck it

heheheh

bye4

[sharp citrus]

@sand remnant

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 25, 2025, 3:20 PM

[rapid merlin]

wait how do i get roles in here?

[eternal sundial]

Why I cannot share screen captures in THM channels 🙂

[grizzled wing]

click on link above

[rapid merlin]

i knew that

[arctic coral]

You need to verify first: https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[wanton ingot]

SAL1, interesting.

[eternal sundial]

Did maybe anybody do something similar aranging data from ICMP tunneling Pcap

[steep mountain]

What’s up with light mode?

[eternal sundial]

this is not a room, but THM CTF creating add-on, but I got this challange were its hard to find the flag

[dark mason]

Does tryhackme ship to romania as well?

[sturdy pike]

o i i a i o i i i a i

[weary veldt]

Its expensive

[steep mountain]

Linux a personality.

[near sapphire]

cool site man!

[dark mason]

It really isn't

[rapid merlin]

haha its not a site i made but thanks

[twin ridge]

Gave +1 Rep to @near sapphire (current: #188 - 42)

[dark mason]

It's about 150$ per try

And that's way cheaper than anything else I have seen

[weary veldt]

Its 30k in rupees

[sturdy pike]

Fuck it

I'm going level 9

I won't message before that

See ya everyone

[latent elm]

Hello ,

[mossy river]

Please avoid posting answers here, if you need help with a room #room-help would be your best bet 😄

[half girder]

oh thm finally came up with a cert, something to do for the next weeks then 😉

[slim arch]

Is it mandatory to buy certs?

you can just learn

maybe when it's industry recognized, I get it.

[rapid merlin]

That’s so real

[carmine tinsel]

Last night I had a dream I was doing a thm ctf

[frigid cradle]

Yo guys
Currently doing the persistingAD room
I have forged a new cert with ForgeCertTool and then i proceed to using Rubeus to request a golden TGT from the DC, however after numerous checks and retries i get this krberror16:kdc_err_padata_type_nosupp
Who can tell me if they have encountered this error in the past

[half girder]

#room-help

[frigid cradle]

Ok

[idle mica]

Last section... lets see how we do

[crystal lynx]

Hey can anyone guide me about how to understand the burpsuit responder pattern?

[strange current]

Are we winning?

[weary veldt]

There is a lab for that

[crystal lynx]

What lab?

[weary veldt]

You can search burf suit

There will be 3 rooms

[tight sparrow]

hi

[pliant onyx]

2>/dev/null

[idle mica]

It's suspiciously quiet on this scenario...

https://tenor.com/view/hes-in-the-walls-in-the-walls-wall-muppet-panicking-gif-27546618

[pliant onyx]

What if I ctrl C now

[toxic glen]

Man the grass looks so much greener on TryHackMe field, new levels and a certification.

[tight sparrow]

not really

[idle mica]

What do you mean not really? It's an objective thing 🤣

[tight sparrow]

btw i love this website

[tight sparrow]

i am newbie i didnt get the reference 😭

[toxic glen]

TryHackMe website is goated.

[idle mica]

Ahh okay, I was so confused for a sec lmfao

[toxic glen]

It made me want to be a security guy

[tight sparrow]

i am just suprised by one thing tbh that is some of the premium rooms right

[wicked cairn]

Soo with SAL released, do I even do SOC lvl 1 path or just do the SAL thing?

[tight sparrow]

some people just copy paste reupload them on medium or github

like posting answers is fine but they straight up post the thing lmao

isnt that stealing content

[tight sparrow]

oh ive been loving it so far, planning on getting the new cert thing after i learn my basics and everything

[toxic glen]

It's people just posting blogs because they've heard that posting blog posts about security helps you get a job. Most people who do that are just doing to stick in on there CV, so the content is rather basic.

[naive violet]

The path and the exam are separate, you'd do the path as exam prep

[mellow narwhal]

thats required for SAL if im not wrong. In terms of skill I mean

[toxic glen]

Good luck bro I hope the best for you.

[tight sparrow]

plus i just got premium and its been good, the streak thing the site has its just like duolingo and i love streaks i have like a 134 day streak on duolingo

[toxic glen]

Great 🙂

[mellow narwhal]

Its not feasible to police content anyway

THM doesn't have control over sites like Medium or Github

idk about the legality of it

[half girder]

you can simply write dmca reports to take the "stolen" content off

[idle mica]

^

Hack The Box does it all the time for active content

[tight sparrow]

i mean posting answers is fine

[toxic glen]

That's good

[tight sparrow]

that helps people

but straight up taking the whole thing is a bit much

[idle mica]

Posting answers doesn't help anyone

Helping people come to the answer themselves, sure

[tight sparrow]

no they usually show the process of how they got the answer

most of them

[mellow narwhal]

BreachForums is in active use lol, its about time someone made a dmca report

[idle mica]

It's BreachForums, dawg

[tight sparrow]

isnt it seized

the website still shows as seized

[mellow narwhal]

no, its active

people post season boxes answers on it

[toxic glen]

When I was grinding I looked up answers but made a point to study what I didn't understand.

[half girder]

thats called a writeup - thats legit and even encouraged by thm

[tight sparrow]

same thats what i do

[toxic glen]

Nice 😄

[wicked cairn]

@mellow narwhal o alright yeah that makes sense, thanks for the response guys!

[twin ridge]

Gave +1 Rep to @naive violet (current: #3 - 2256)

[tight sparrow]

also i never used linux in my life so the learning curve is steep

[muted stump]

my favorite is when I look at a write write-up because I struggle with a specific task. Just to see that the person doing the write-up skipped it. Nice to see other people on the struggle bus lol .

[thin vigil]

Hey gang, Im designing potentially my first modular home network that I can open up ports on. Someone else incredibly well versed in networking is helping me out but I just want to run by is the logic through you guys before I run it through him if that's all right and allowed

[tight sparrow]

how can i get the color roles

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 25, 2025, 4:56 PM

[tight sparrow]

oh thanks

[wild turret]

hello

[tight sparrow]

I got the role! fancy

[wild turret]

yo no slow mode here

[carmine tinsel]

what do u mean vigilante 🤔

[toxic glen]

I think it's a quote from Mr Robot

[carmine tinsel]

ohhh

girl I’m dumb

💀

[toxic glen]

Naaah, I mean I could be wrong but that's how I understand it.

[idle mica]

Shoot, in this industry, there are plenty of people who would unironically use that as their status while imagining themselves in the third person 🤣

[sinful moon]

It's a riff on the Sailor Moon english theme lol

Nevermind I'm dumb too

they would have said daylight and moonlight if that was the case

just hush, I've spent the last two hours troubleshooting a vendor proprtiary docker compose/linux setup for hospitality TVs lol

[round orbit]

I got the fucking job!!

[sinful moon]

Congrats!

[round orbit]

I cannot believe it

[sinful moon]

Don't know what job but that's always great to hear

[round orbit]

I really am gonna be a SOC Analyst

[idle mica]

My man, congrats!!!

[sinful moon]

Very awesome

[idle mica]

Don't get burnt out now lol

[round orbit]

From IT support tech let’s go

[eager marsh]

Congrats, now you get to stare at a slightly interesting screen

[round orbit]

I’m already burnt out hahaha I need something new

[sinful moon]

now let me tell you as SOC manager why your True Positive is actually False Positive lol

[round orbit]

😄

[sinful moon]

lol not quite the same thing when I manage a managed SOC

[round orbit]

It’s a SOC for clients, not an internal SOC, I don’t know if that means anything or is better/worse

[umbral bay]

Congratulations! 🥳

[round orbit]

It’s around an £8k increase

[carmine tinsel]

Soc analysts when I lose my soc in the washer

[sinful moon]

that's normal for a lot of MSPs/MSSPs

[idle mica]

Hell yeah man, that's a good jump

[umbral bay]

False True Positive or a True False Positive.™️

[round orbit]

You think?

I mean it is further away tbh, but yeah hopefully worth it

[idle mica]

Definitely. More money is more money

[glossy shuttle]

how do i contact tryhack me support? i have an enquiry

[chilly veldt]

So w33t how did it go?

[mossy river]

Email [e-mail] :)

[idle mica]

Still working on the last few alerts, so we'll see!

[mossy river]

Is there anything you think I could help with at all? @glossy shuttle

[glossy shuttle]

thank you

[pliant onyx]

Lfg

[chilly veldt]

Nice nice, mine is pushed till tomorrow, cause they needed to get some paperwork on it

[glossy shuttle]

idk i just have an email issue

[sick lance]

I mean, I agree with this to a certain extent.

I had a friend that took a new job, but ended up slightly worse off due to the cost of travel.

[idle mica]

Definitely, you've gotta factor in all that stuff, like health insurance (depending on where you live), etc. That was my concern with a role I'm currently interviewing for. Compensation is a bit on the lower end, but there are quarterly bonuses, and they cover 100% of all insurance premiums. It really balances out

[idle mica]

Hey Tim, I sent you a DM about one of the exam sections, in case it got caught in your message requests

[mossy river]

How are you doing w33t? 😄

[idle mica]

Doing well! Staring at the queue, waiting for the next alert 🤣 How have you been?

[mossy river]

Ahah, the second you look away it will appear I'm sure 😆

Busy as usual!

[opaque flax]

Good morning jabba

[idle mica]

Right? That's how it always goes. A watched alert never fires or something lol. Glad to hear you're keeping busy! Unless it's too much, then I'm sorry lol

[mossy river]

Hello hello, it's almost dinner time here 😋

[opaque flax]

I’m taking my lunch lol

It’s 11M

Am

[idle mica]

Central gang, lets go

[unkempt talon]

here its 17:21

[mossy river]

It's like a fifth sense, it knows you are waiting haha

I'm never too busy, unless my coffee flask is empty, then I'm too busy

[rapid merlin]

I made stir fry

[mossy river]

oooo, do you have anything nice?

[opaque flax]

Yeah starving myself 😂

[mossy river]

Oh yum - I think Spaghetti is on the menu tonight for me.
Have any pictures?

[sick lance]

Dinner time, then hot tub 😎

[rapid merlin]

Nah sorry I breathed it in 😅

[mossy river]

I hope this is strategic fasting, if not, I hope you're planning on eating something 😆

[rapid merlin]

I do love a spag bowl

[opaque flax]

Yeah I’ll eat dinner

[rapid merlin]

I’ve never been in a hot tub

[mossy river]

Pfft, maybe next time then ahah

[opaque flax]

But I am fasting

Need to lose some weight to

[mossy river]

Goodie, food is good for the brain

[opaque flax]

Yeah I have something to do with my local hacking group tonight so

[idle mica]

There it is. I look down at my phone and BAM 🤣

[opaque flax]

Should eat

[sick lance]

Really?

I've lived in one all week.

[mossy river]

If you haven't, take a look into caloric defecit, and please consult your doctor before* fasting for extended periods

[sick lance]

That and the pool.

[opaque flax]

Indeee

[rapid merlin]

Yeah never been in one, I do like pools.

I like swimming

[calm hound]

Hello everyone

[sick lance]

I prefer wild swimming to pools.

[rapid merlin]

I’ve never swam in a lake either

[sick lance]

Missing out.

[rapid merlin]

I would be worried about standing on something sharp

[sick lance]

I prefer lochs to sea, but depending on the loch, you can't swim with seals/dolphins/sharks or orca.

[rapid merlin]

I try hard to keep my feet soft. So rocks are scary 😅

[shut hawk]

If you're lucky you might see Nessie

[rapid merlin]

Reminds me of that movie

[sick lance]

Or unlucky if you're a fish.

[rapid merlin]

The water horse

[sick lance]

Ah, a kelpie.

[rapid merlin]

I liked that one

[sick lance]

What are you looking for, and why, exactly?

[spiral iris]

is there a version of this for Windows OS?

[sinful moon]

Not realistically, it's all over the place especially with standards changing over the decades

[rapid merlin]

I want one for windows

[sinful moon]

Heck even the paths will be diffrent depending on how far back you go

anyways if you liked that picture then yep man hier will be enjoyable to you all too

https://man7.org/linux/man-pages/man7/hier.7.html

[worn turret]

Sal 1 cert to expensive

Ngl

[sinful moon]

it's price compeditive with similar certs to be fair

[eternal timber]

Cert’s out

[rapid merlin]

Is there a way to monitor network 4G/5G

Without plugging a phone into another device

[eternal timber]

I had the strangest dream in which I suffered brain damage and kept spacing out with weeks passing in between

[upper knoll]

@mossy river @sick lance

[rapid merlin]

?

[mossy river]

Depends on your phone

[rapid merlin]

As in my own network lmao

[mossy river]

You can connect it to mitmproxy

[rapid merlin]

This is usually used for androids though, is there one for iPhone

[mossy river]

Mitmproxy is for all

I've used it on my iPhone

[rapid merlin]

I know we have net analyzer but it’s meh

[ancient meadow]

What's up y'all

[vocal oxide]

Hello everyone, I have a problem with the attack box, it does not have internet to download more tools.

[rapid merlin]

Ah okay, it’s downloadable to the device ? Without plugging it into a pc

[rapid merlin]

I swear playing valorant did that to me

[mossy river]

👋 To have an internet connection to the AttackBox you will need to subscribe.
The AttackBox should already have all the tools you need to complete TryHackMe rooms- is there a specific room/ problem you are having?

[naive violet]

Not unless you're a subscriber

[pliant onyx]

Mhm delyeeted after Jabba's response

[sinful moon]

Oh does subscriber actually give attackbox internet access these days? News to me

inb4 it's always been a thing lol

[pliant onyx]

It's always been- you sly fox

[calm cradle]

hi guyss

[ancient meadow]

sup!

[idle mica]

Finally finished SAL1 aaand I passed!

[sinful moon]

lol I am serious though, I had no idea, but yeah I had very little reason to stick with Attackbox for long

[pliant onyx]

Well done!

[vocal oxide]

Windows is the machine to do a data dump

[mossy river]

Oh damn you're too quick

[ancient meadow]

Woah, I just got word it came out

[calm cradle]

how re u today

[pliant onyx]

Personal kali goes brrr

[ancient meadow]

How was it?

[naive violet]

Certainly a very long time

[rapid merlin]

Okay thank you, I’ll check it out

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1497)

[pliant onyx]

Most of the time

[sinful moon]

nah more like remote Arch C2 server goes brrrr

[eternal timber]

Lmao

[pliant onyx]

A millennium for flies, a moment for the sun

[eternal roost]

Congrats!

[idle mica]

Dangit, one misclassification 😭 And the company has been taken over

[pliant onyx]

Wow, you a proper nerd

Nice

[sinful moon]

yee

[pliant onyx]

Elizabeth uses Arch btw

[sinful moon]

for over 18 years c:

[idle mica]

Thank you! It was a fun exam

[twin ridge]

Gave +1 Rep to @eternal roost (current: #78 - 105)

[pliant onyx]

I thought I would have to wait for ages

[sinful moon]

back in my day we had dat sys v init, HAL, ALSA, and kernel 2.6.26

[pliant onyx]

Nvm it was the right password schyupid me