general

[loud marlin]

git as for github ?

[inner goblet]

Yea

[loud marlin]

you can yes. also using kali as any other linux based os is ok. just is not recomended to use it baremetal since is not so much stable.

[rugged kayak]

git git is insalled by default

[blazing granite]

it's not really recommended to use it as any other linux, kali is a tool, not a daily driver distro. For kali to be a daily driver you have to install a whole bunch of thing on top, and doing that you'll miss the whole point of kali, and also probably open up to some security issues

[loud marlin]

the only reason i use kali as daly driver is spare laptop. that i hate... dumb ass lenovo 🙂

[inner goblet]

Wait so

Wait so yall don’t hack everyday?😐

[blazing granite]

I have a vm with kali and a usb with kali live, but I don't use it as daily driver, my daily driver is fedora

[drowsy dust]

I do hehe

[loud marlin]

well... not so day by day... yes and no

[tranquil comet]

Hey again

[loud marlin]

ello

[tranquil comet]

I finally got verified

Whats up

[loud marlin]

sky

[blazing granite]

https://tenor.com/view/bri-rimshot-vixen_xo-streamer-badumtss-gif-20278770

[restive plaza]

Hello please am new here I need new friends please add up

[tranquil comet]

Huh

[restive plaza]

Yea add me

[blazing granite]

please do sent friend request without authorisation and interaction with the user

[tardy crater]

Carolina looks sus 🤐

[blazing granite]

wrong server for that 😂

[tardy crater]

Yup 😂

[tranquil comet]

That account was made today btw

[tardy crater]

Like if i would add her just because of her pfp and her wanting to make friends, jokes on her i an afraid of women 😎

[tranquil comet]

[blazing granite]

maybe some horny youngster will fell for for it 😂

[wooden totem]

I think I learned a valuable lesson. Don't find out you have no idea where first aid kit stuff is during an actual emergency

Also that adrenaline is very useful

[blazing granite]

I guess we live different realities, the first thing I learn is where is the emergency exit, first aid kit, and the bomb shelter

[wooden totem]

Nah I know where it is, I just found out I have no idea where the gauze is

(It was inside the roll)

[tardy crater]

I dont know if this is the right channel to ask, but i tried downloading kali on external ssd, the installation went well, i booted into kali, then exited to bios boot preferences, the ssd with kali was still there even after removing usb from which i installed it on external ssd, hovever when i booted into windows and then back into bios boot preferences, the ssd with kali was not there anymore, i checked diskmgmt and it said there is efi partition of 965 mb, but i cant find it in boot preferences, secure boot is off and usb boot is enabled. Any help would be appreciated 👀 😁

[high mulch]

That had happened to me, but because the place was awful, and we were practically undertrained.

[blazing granite]

Also once a week I used to check if the first aid kid was properly stocked so we always knew what we had and their place

[obsidian pasture]

how do you see other machines that you have up? i tried opening an attackbox but said I had 3 vms alr running

[wooden totem]

Good thing to keep in the mind

[blazing granite]

kali has a discord, you can ask there kali specific questions

[wooden totem]

Manual, history

[blazing granite]

#site-support

[radiant thorn]

can someone help me out figure something out in john the ripper room under cryptography

[blazing granite]

#room-help

[radiant thorn]

no one is responding there

[wooden totem]

(When someone knows, they answer)

[radiant thorn]

i need to move past that qestion

[blazing granite]

so wait, patience is a virtue, asking the same thing in different channels won't get you help any faster, you'll just annoy people

[wooden totem]

If you need a fast but potentially less reliable answer, chatgpt is there for you

[radiant thorn]

[radiant thorn]

doesn't know shit

[wooden totem]

User skill issue

[rapid merlin]

or hacktricks.ai is sometimes useful

[radiant thorn]

no

[mossy river]

Have you checked a write-up?

[rapid merlin]

yes!

[wooden totem]

Yummy unknown link

[blazing granite]

https://tenor.com/view/skillissue-skill-issue-gif-22125481

[high mulch]

[rapid merlin]

you should check book.hacktricks.xyz it's well repped

[wooden totem]

"Well repped" uhuh

[rapid merlin]

Yeah..

[wooden totem]

Very trustworthy

[mossy river]

? what's with all the negativity

[wooden totem]

Skepticism is not negative by default

[rapid merlin]

mhm, yeah I'm a bit "dissociated" currently

[old canopy]

☹️

[rapid merlin]

Probably the way I phrased it

[mossy river]

Hacktricks is very wellknown in infosec, a quick Google search would show that 😄

[wooden totem]

Okay maybe it is now that I read it again

[rapid merlin]

:)

[old canopy]

😦

[radiant thorn]

so no one here uses the room-help

[rapid merlin]

do you code in c without classes? (c-- joke haha)

[old canopy]

i never coded a line in my life

[rapid merlin]

ah; C++ is pretty much C with classes

[old canopy]

what is c++

[wooden totem]

I can see that now yeah, to be fair though that's the most suspicious domain I can think of

[upper knoll]

Depends on time of day if you can catch the light kgb he will basically solve anything

[rapid merlin]

I am not google, however I can tell you its a programming language that's used universally for pretty much everything, from phones, vending machines, registers, etc. It's used in a variety of mobile, desktop, and IoT devices.

[old canopy]

help

[upper knoll]

Low level programming lanauage

[old canopy]

ahh thank you i didnt know it

[twin ridge]

Gave +1 Rep to @dawn oyster (current: #1073 - 4)

[rapid merlin]

it is indeed a low level programming language

[old canopy]

thank you i didnt know it im very new into computer stuff

[upper knoll]

Allg lad

[wooden totem]

Clearly

[rapid merlin]

says 0xGuru

[rapid merlin]

clearly

holy c is the true answer

[old canopy]

im on temple os my friend in nsa recommended is it better OS then windows?

[tardy crater]

okay thankyou, i thought its rather OS related question so i tried it here, i will join kali dc thats a good advice

[rapid merlin]

everyone that doesn't code in holy C will fear the day terry rises from his grave and punishes all of the unholy swine that plague our world.

[rapid merlin]

only if you don't have wifi

[wooden totem]

Who's terry

I would know a Larry

[rapid merlin]

LAN w DMZ isolating your infrastructure. ^

[blazing granite]

That's doesn't say much, I can't think something worse than windows 😂

[rapid merlin]

Larry Davis?

[rapid merlin]

they're rage baiting if you haven't caught on

[upper knoll]

Depends on what you want from your os

[wooden totem]

Completely serious question no funny business

[blazing granite]

I know Larry great game, 😂

[upper knoll]

Be kind before anything else even if they are we can be pleasant to them

[wooden totem]

Hey pal, what did we say about that funny business

[old canopy]

classic haha

[rapid merlin]

I know, and I've been kind and curdious the entire time.. I was just pointing it out if they hadn't caught on to that yet.

[old canopy]

https://tenor.com/view/me-when-i-see-my-class-gif-15768348532634343334

[wooden totem]

I would help knowing who terry is

[tardy crater]

also, anybody knows whats up with instagram? why is there such a high spike in violence? gory videos, people getting shot. And dont tell me its based on the videos i watch, because i have my feed based on cats, women and cars. There is no way all of a sudden it would recommend such videos, altough i uninstalled ig 2 days ago, i logged in out of curiosity today and the first thing i saw was a video of a man getting shot, many of my friends also experience the same and there are even articles about it on the internet

[rapid merlin]

look up terry davis

[old canopy]

true thats me

[rapid merlin]

he's a great man

he did alot of bad things (and good things)

mostly good

[wooden totem]

Do you mean Terry A. Davis

[rapid merlin]

yeppers

[wooden totem]

That is not a word

[rapid merlin]

In my dictionary it is.

[ashen jetty]

anything can be a word if you try hard enough

[tribal ice]

holy yap to the 100th power

[blazing granite]

creepers? 😂

[tribal ice]

terry davis. the founder of holy C

[wooden totem]

There's a lot of inventing in this server

[high mulch]

Windows is the best OS

[rapid merlin]

Yeppers is a diminutive or emphatic form of yep formed with the colloquial suffix -ers. (See preggers.) It isn't usually included in dictionaries, and in corpus searches from the early 20th century the overwhelming result is a misscan or misprint of peppers.

[wooden totem]

Okay, now im english

[high mulch]

Yuppers

[blazing granite]

Ishmaeli, how are you?

[tribal ice]

doing good avi

[rapid merlin]

that makes sense, but I thought you'd catch on to that though.

[tribal ice]

how about yourself?

[wooden totem]

I don't do a lot of catching unfortunately

[rapid merlin]

I don't like writing in C# but some times it's more consistent than py is 💀

[blazing granite]

I'm chilling 🙂

[tribal ice]

C# is the prettier version of java

[blazing granite]

java is the devil in a cup 😂

[wooden totem]

When I think of Csharp I see a nice quiet bench overlooking a pond with ducks swimming under the trees

[tribal ice]

the only language that's suitable for OOP. I understood OOP when I learned java.

[upper knoll]

Anything is a better version of Java

We all hate Java

[dusk reef]

what's wrong with java

[wooden totem]

The best question is always, what's the difference between java and javascript

[blazing granite]

that's sharp 😉 😂

[blazing granite]

script

[wooden totem]

A demonstration would be ideal

[tribal ice]

was fluent at it once upon a time. stopped for a few months and lost my touch.

never went back to it again

[upper knoll]

Better for your sanity I’m sure

[tribal ice]

then I discovered thm and htb

and pentesting and ctfs

[dusk reef]

wdym

[upper knoll]

I’m training up for the new soc cert rn

Gonna take it in about a month I’d say

[tribal ice]

luck is in good hands

good luck

[wooden totem]

https://www.slideshare.net/slideshow/why-java-sucks-and-c-rocks-final/3763050

[sand trench]

meep moops it is the time for sleepy sloopy sleep sloops to the beep boops

[tribal ice]

based

[upper knoll]

Rest well shadow

[dusk reef]

plot twist, i dont use either

Assembly is the only true way

[wooden totem]

First step in baking an apple pie is creating the universe

[dusk reef]

what is C# commonly used for

[loud marlin]

new box printed

[vale raptor]

woow!

[wooden totem]

Games

And apps and shit

[brazen fractal]

What else can you print, maybe try computer components. That would be awesome..

[loud marlin]

you can for sure. alsmost anything can be done. but all is plastic ofc

[boreal scarab]

goes to maker space to stay for a couple of hours

Also me: Stays for 8 hours

[rapid merlin]

Finally coming back to TryHackMe after a month of not learning cybersecurity due to moving to a new place.

I also got a new PC and monitor.

[carmine tinsel]

welcome back 😆

[boreal scarab]

@blazing granite I didn't know you had a baby brother, @rapid merlin

[rapid merlin]

[blazing granite]

I don't 😛

[loud marlin]

btw @boreal scarab i got new hotend. the microswiss one

[boreal scarab]

What about @cosmic pendant with mini @wicked sage

[boreal scarab]

WOOOOOOH

[cosmic pendant]

eoooy

[blazing granite]

you still typing so I guess you're OK 😂

[boreal scarab]

Weeeeeeee

[blazing granite]

toasterrrrrrrr

[boreal scarab]

I hope you didn't burn anything down today Toaster

[blazing granite]

just bread probably 😂

[wicked sage]

Hehe

[boreal scarab]

THATS A LAUGH OF A MADMAN!

https://tenor.com/view/tf2-pyro-team-fortress-burn-in-flame-fire-gif-15811879

[blazing granite]

2 toasters, are we getting invaded. The attack of the killer toasters 😂

[split plover]

Yo guys, what's with the insta feed full violent and gore reels?

Do you think it's algorithm or smth else?

[idle mica]

Mix of algorithm and it being Instagram

[split plover]

Ugh, I can't digest the content

[carmine tinsel]

thank god I didn't open instagram today xD

I remember a couple months ago ppl were getting weird content like this one livestream of a lady giving birth

Can they fix their algorithm lol

[blazing granite]

so don't watch it. Is somebody holding a gun to your head and make you watch it?

[carmine tinsel]

well it only takes one scroll to accidentally land on violent content

[split plover]

Lol I don't watch it, it's just whenever I'm scrolling it's showing all that content

Not from my following list

[split plover]

Exactly

[blazing granite]

close the app and walk away

[split plover]

And people who are too sensitive can't deal with it ig.

[split plover]

Okay Mr

Oh btw, I just joined yesterday. I wanted to ask something....

Do you think hacking groups like anonymous are dead? Yk those hacktivist groups to change the world.

Cuz I mostly hear it's all about financial gains now

People using ransomwares etc

[idle mica]

Hacktivists are always out there, but they may change over time. Some individuals get caught and some simply grow up lol

For example, there are plenty of hacktivists who operate in Ukraine's benefit against Russia and vice versa

[split plover]

Oh yeah, ig you're right

They just grow up lol

And realise it won't affect much

[idle mica]

Some are working at Walmart 🤣

[split plover]

🤣

[blazing granite]

or McDonald , do you want fries with that hacktivisim? 😂

[halcyon harness]

I have a theory, foil theory, that meta intern have had last day of his unpaid intership so he wanted to give meta little surprise

[real lichen]

C# is great for rapid development with windows Forms applications. Can quickly make tools and other apps with tons of built in windows buttons and textboxes and drop downs and all kinds of other premade forms. It is also commonly used as a scripting language like in Unreal Engine.

[wicked sage]

I am a mad man

[clever stratus]

Hi guys, how do I know if my Kali Linux VM is connected to the THM Vpn? It shows the IP on the top right corner but when i try to enter the given ip of the target machine it brings me to lookup.thm, however it sais "Hmm. We're having trouble finding that site."

[blazing granite]

#site-support

[olive delta]

does anyone know how to hack a discord account someone took my one and i want it back

[loud marlin]

it is illegal do to so

[olive delta]

its my account tho

[loud marlin]

then contact support

[high mulch]

https://tenor.com/view/two-please-gif-25333074

[grizzled wing]

@mossy river

[blazing granite]

🥦

sup

[fossil merlin]

Gang

[grizzled wing]

@whole yew

[blazing granite]

sup

[whole yew]

Please contact discord support. It's illegal to hack a service to recover an account.

[boreal scarab]

https://tenor.com/view/peeking-hiding-scared-safe-to-come-out-anxiety-gif-942488290165645132

[blazing granite]

I said fries 😛

[fossil merlin]

Gang. I need your aide

[grizzled wing]

police notepad opens ....

[fossil merlin]

Swear fealty to me!

[grizzled wing]

pass

[fossil merlin]

Understandable, I have to start somewhere though. 😔

IT is cool and all but being a feudal lord is preem.

Especially since we are bringing corporate serfdom to 2025

[grizzled wing]

aside from all the feuds

[fossil merlin]

Ez I'll just use you guys and win.

gg no re

[grizzled wing]

survey says ...

[blissful snow]

what is wss://[ip]sslip.io:4999/

[grizzled wing]

NOPE

[blissful snow]

btw hi

[blissful snow]

well the wss part

[fossil merlin]

Sudo why won't you support my dreams? 😔

[grizzled wing]

winner server shop :// <ip> .io : 4999

[blissful snow]

?

[grizzled wing]

the dream of being a lord reminds me of the scam of people paying for a plot of scottish land to get a "legal" document stating lordship

[fossil merlin]

Aight, time to read. Night gang night @grizzled wing

[grizzled wing]

closed police notepad

[fossil merlin]

That's a thing?

Wait

[grizzled wing]

yes, was a thing years ago on youtube

[fossil merlin]

Wow I wonder if they made money

[upper minnow]

Veggies hii

[grizzled wing]

hello green Chag !

how does it feel to be green?

[upper minnow]

One step closer to D

[grizzled wing]

🎉

[upper minnow]

A lot better than potato yellow

[grizzled wing]

haha

[upper minnow]

Id prefer to be purple like shadow but no way im getting nitro

[grizzled wing]

Nitro is a nice extra to have but not essential

[boreal scarab]

https://tenor.com/view/catdestroy-catknockover-stacy3654129-gif-18955963

[idle mica]

https://tenor.com/view/linkin-park-hybrid-theory-one-step-closer-chester-bennington-gif-7507587971665523262

[grizzled wing]

this lovely song has another level in regards to Chester 🪦

[carmine tinsel]

just started shells intro room and I am curious, how do you all know what reverse shell payloads to use? They seem quite complicated so far

[idle mica]

For real. Rest in peace

[idle mica]

It depends on what is executing the payload. That's ultimately what'll inform the type of payload that is used

So a PHP web shell versus a stageless payload on Linux, for instance

[carmine tinsel]

I see

[fossil merlin]

@upper minnow grats on the green. :3

I gotta study for this cert but imma catch you after >:3

[outer rivet]

https://tenor.com/view/think-thinking-thoughts-person-all-the-time-gif-1836332222206272183

[outer rivet]

https://tenor.com/view/figglebottom-figglehorn-straight-drop-craig-gleason-snake-bite-dog-gif-22723175

[fossil merlin]

I hate you for this meme @fervent meteor

You posted it first

[outer rivet]

https://tenor.com/view/discord-fly-fly-scare-fly-hapesas-screen-bug-gif-24360955

@fervent meteor

[fossil merlin]

You infested me

[outer rivet]

https://tenor.com/view/discord-fly-fly-scare-fly-hapesas-screen-bug-gif-24360955

For

?

[fossil merlin]

You know that song "infested" by choking victim? @fervent meteor

[outer rivet]

@seadrih is this true ?

[fossil merlin]

That's me, with the bee.

Also I POSTED it to you. You should know it.

Now I know you don't really love me ....

[outer rivet]

https://tenor.com/view/don-pollo-don-pollo-cry-don-pollo-crying-don-pollo-car-cry-crying-gif-12796830642966950657

[fossil merlin]

I'm just a GAME to you

Smh my head

[fossil merlin]

Me rn frfr

[outer rivet]

https://tenor.com/view/dexter-dexter-morgan-michael-c-hall-smile-gif-4431777

[fossil merlin]

This is even worse

Why do you put us through this? @fervent meteor

[outer rivet]

Dexter is goatee

[fossil merlin]

Scum

You're scum @fervent meteor

[opaque flax]

Are we leaking?

[fossil merlin]

Wat

[opaque flax]

This seems chaotic

[fossil merlin]

You're watching a breakup happen in real time, @fervent meteor has abused me and is now darvo'ing the fuck out of me.

I'll be looking for a rebound 👀

You don't want me as an opp, I got shooters all over. 👀👀👀

[opaque flax]

You 2 were so good for eachother

[fossil merlin]

I know.....

[arctic token]

@real lichen Ok, I made it in here if you care to chat further. 🤣

[real lichen]

im here

what websited do you run?

[arctic token]

What area of Cybersecurity you wanting to go into?

[real lichen]

bug bounty pen testing

its really just a side hustle for me

[arctic token]

I'm building it now so it's still in development. It's interfacing with a whole cloud multination corporation network for my students to practice in. So it'll be a bit.

Nothing wrong with a side hustle. I have a few myself.

After 28 years in Cybersecurity it is my side hustle now. I retired in 2018.

My main work now is developing my AVN

and my security site

Just in case that wasn't obvious 🤣

[carmine tinsel]

God damn, 28 years

I haven’t even been alive for that long 🙃

[arctic token]

I'm 62

[high mulch]

https://tenor.com/view/abelha-gif-14433121352321093766

oh god, I was surprised I didn't see you reply to that :v
until I scrolled down a bit more

[blazing granite]

wow

[arctic token]

Don't tell me I'm the oldest one on THM? 🤣

[fossil merlin]

It's rizzmas gang!

[high mulch]

https://tenor.com/view/viralhog-grandpa-grandpa-kiki-dance-kiki-dance-dance-party-gif-11921464551826174070

[fossil merlin]

What was the great depression like? 👉👈

[arctic token]

Thanks for that. I do like it though

Well at least you didn't ask about any dinosaurs. 🤣

[fossil merlin]

Real talk it's cool that the server has older people in it

Nice to see people transferring skills that would otherwise disappear

[carmine tinsel]

This is discord, I’m sure half of the server users here are below 18 xD

[blazing granite]

yep, I thought it was me, but I'm a youngester compare to 62 😂

[fossil merlin]

Like cobal or those bad jello dishes from the 60s

What were the aspic dishes of the 60s like? @arctic token

Jello salad or whatever the fuck

[arctic token]

cobal, fortrain, C/CPM, IRIX all that good stuff

[fossil merlin]

That's legitimately impressive

I'm learning cobal rn and I can't imagine learning it from like a fucking book

[arctic token]

I was Neo before Neo 🤣 🤣

[fossil merlin]

Instead of a 10 hour cobal learning and meme compilation with subway surfers in the corner

[real lichen]

been following the white rabbit for a long time now

[fossil merlin]

That's the SUPERIOR way to learn

[high mulch]

I have my neovim with subway surfer on the side, for optimisation purposes.

[fossil merlin]

Preem, nova even.

[real lichen]

their were other "Ones" before Neo maybe one of them was you

[fossil merlin]

Ok, but seriously did you have to eat those weird jello salad dishes in like the 60s-70s?

Were they even real or were they just a psyop?

[real lichen]

Mandela Effect

[blazing granite]

do you mean the jello with fruit in it?

[fossil merlin]

My grandparents died and I don't know anyone above 40 so I have to ask these questions when I can. 😔

[blazing granite]

I was really young but I remember those from family events

[fossil merlin]

Yeah! Those things.

[arctic token]

Yea, back in my time there community was VERY CLOSE and we pretty much knew EVERYONE because it was difficult as Fu-k to learn for anyone. There literally was no help. Either you learned and figured things out or you didn't get into hacking as it was called back then

[fossil merlin]

No fucking way

[high mulch]

I mean, they still sell those

right?

[fossil merlin]

You're fucking with me again @blazing granite

No way a person would eat those.

[high mulch]

https://tenor.com/view/hugs-good-morning-gif-23566482

[fossil merlin]

I've never seen them irl

[blazing granite]

I'm not, it was a popular dessert back then 😂

[high mulch]

Oww

[fossil merlin]

I'm 3rd gen Ukrainian though so my grandparents made like pampushky and shit

[high mulch]

Ahhhh, got it.

[fossil merlin]

And stuff with very bland grains that tasted good.

Varenyky too

I need to make some

[fossil merlin]

A DESERT?!

I saw ones with hot dogs and mayo in it?!

That's not a desert

[blazing granite]

I only ate the jello with fruit, like a fruit salad trap on jello, no hot dogs or mayo 😂

[high mulch]

Oh no, that's some evil type of witchcraft...

[fossil merlin]

That makes me feel like I can trust you more.

I would never trust a person who hurts themselves like that

[high mulch]

Just like that pizza with chocolate, banana, and sweets.

[blazing granite]

maybe there were a savoury version I wasn't aware of it. Like I told you I was very young

[fossil merlin]

Well hey this is all good 1st party sourcing

[high mulch]

Besides Pizza with chocolate, banana, and sweets on it as toppings.
There's also chocolated fried chicken, which I was disgusted and surprised it even was a thing.

[carmine tinsel]

The idea of anything savory with a jello texture scares me

[high mulch]

https://tenor.com/view/dwight-jim-pranks-jell-o-gif-3990507

[dark frost]

The brainrot epidemie has spread infinitly

[high mulch]

long time ago

[dark frost]

this is the end

https://tenor.com/view/this-is-fine-gif-10093852890875433850

[high mulch]

https://tenor.com/view/magiccraft-magiccraftgifs-mcrt-magiccraftgame-gif-4268096814512656700

[eternal timber]

https://tenor.com/view/ugh-annoyed-eye-roll-eyeroll-whatever-gif-12583888296439898899

[blazing granite]

This is the end
Beautiful friend
This is the end
My only friend, the end

[dark frost]

the end is a new beginning

[upper pasture]

Hi I need an advice
I got an email that I am selected for Information Security Specialist position phone interview last Friday at 2.30pm. I professionally responded at 9.30 pm. So today is Wednesday and I did not hear back from them. How to handle please?

[cloud quiver]

Try to ask guys in #cyber-and-careers channel 🙂

[upper pasture]

thx

[brisk dagger]

Good evening guys, can anyone tell me what to create websites and applications, and back end or front end

[spiral cobalt]

Can I take what I learn here and conduct bug bounties?

[cloud quiver]

Yes of course 🙂

[cloud quiver]

That is going to be a long process which can take months/years to learn 🙂

[real lichen]

HTML5 web3 php javascript

SQL database

[stiff island]

Start with HTML, CSS and Javascript those are pretty much the base coding language for a website.

for the front-end at least

[static acorn]

MY CTF starts in 2 and a half hour and im gonna freak out im so pumped! are yall PUMPED. Get PUMPED

https://tenor.com/view/flexing-flex-arnold-arnold-schwarzenegger-body-builder-gif-18454197

[pliant onyx]

That's the spirit

[eternal timber]

Good luck

[static acorn]

thank you mr.pooping lion. im sure this isnt another one of my schizo episodes.

[broken horizon]

sup

[static acorn]

hello🫡

[broken horizon]

hru

[static acorn]

im awesome! and yourslef?

[broken horizon]

me too just completing fundamentals

[static acorn]

you never truely "finish" fundamentals

[broken horizon]

gonna take easy on pentest, will go for soc for now

[static acorn]

soc W

big win

[broken horizon]

yeah cauz its overwheliming as beginner and can't remember commands for tools after completing modules

[static acorn]

yep. i recommend re-doing every module at least once to cement the learnt info. and take NOTES. if you dont TAKE NOTES... i will personally come to your house and hand you a pencil... then stand over you while you take notes like you dad did when you were learning multiplication tables... im watching you...

[cedar swan]

thas cute

[fossil merlin]

Haiiiiii >.<

[cedar swan]

okay dude...

[fossil merlin]

Okay what?

[broken horizon]

yeah @rapid merlin also said same that notes are imp and ik why after completing some modules

THM community is very friendly fs

[static acorn]

THATS MY @broken horizon ! 😭

[fossil merlin]

Much friendlier than most IT/hacking forums fs

[broken horizon]

if you message in HTB, you just hope someone replies

[static acorn]

yeah everyone here is super awesome. ive met so many nice people here

[fossil merlin]

The helpful ones are super helpful but you definitely got some assholes in there.

I have a few friends that spend a lot of time doing htb stuff but they are swamped

[broken horizon]

and the guys here explain really well like best buddies

[molten sky]

https://tenor.com/view/tf-you-pinging-me-for-why-did-you-ping-me-stop-pinging-me-ping-gif-15535866550244856690

<3

kinda wanna know where that gif is from actually

[fossil merlin]

Avatar

[molten sky]

oh shittt

you right

he blue

[fossil merlin]

The blue people one not the good one uwu

[broken horizon]

yeah you only get reply if ur ranked or certified and only their discord CTF team groups are cool

[molten sky]

the HTB server is lame

i also don't use it because if you want to verify it forces you to use your account name which is also just my name which is lame

[fossil merlin]

I'm not gonna shit talk em yanno, but yeah I prefer this one for chatting. :3

[broken horizon]

same

[molten sky]

like lemme say shit without my name right there

[broken horizon]

its just chill here

[fossil merlin]

They don't want anonymous opps @molten sky

[crystal mauve]

https://tenor.com/view/hatsune-miku-sand-planet-gif-3442556610549530670

[fossil merlin]

Hewwo uwu

[molten sky]

i don't even care for anonymous on here but like cmon

i'm far from anon on here

but lemme not make it front and center pls thx

[fossil merlin]

I know, I mostly wanted an excuse to say "opps"

[molten sky]

oops

[fossil merlin]

Fuck my stupid life man. 🚬

[static acorn]

HELLO. i am normal!

[molten sky]

no you're not

[fossil merlin]

Guess I gotta die

Today I was crushing it at work tho

[molten sky]

lol this guy has a job

how lame

[blazing granite]

@molten sky 👋 long time no see 🙂

[crystal mauve]

hi - is your curse self inflicted?

[molten sky]

oo that's a name i recognize @blazing granite

buncha weirdos in here with new names

[static acorn]

https://tenor.com/view/buh-buhbye-bye-funny-cat-gif-15915151935577916389

[carmine tinsel]

and I thought thm friend request name doxxing was goofy

[blazing granite]

yep, it's a running issue nowadays 😂

[fossil merlin]

Fixed some monitors by resoldering components, unfucked someones email, incident response stuff.

[fossil merlin]

👉👈😔

[carmine tinsel]

I would die if you could link my immature jokes to my real life identity xD

[molten sky]

nah i make worse jokes irl

[fossil merlin]

Whereas me, a man of principle have selfies on main and say weird shit.

[carmine tinsel]

idk why i even said that. on my actual instagram account I already post like 50% weird memes

[fossil merlin]

I have embraced cringe.

I will never return to the dark days of shame.

I have achieved self actualization.

I am the same online, as in real life.

[fossil merlin]

I know I hate it too. 😔

[molten sky]

https://tenor.com/view/car-wtf-weird-cyriak-gif-13984840

[static acorn]

MY SON

[fossil merlin]

What shocks?

[static acorn]

where did you obtain this picture of my son

[static acorn]

LMAO

[fossil merlin]

That's me replacing cat6 e at work

[carmine tinsel]

https://tenor.com/view/ip-address-i-have-your-ip-address-meme-the-year-of-shadow-sonic-the-hedgehog-gif-8303076054430392933

[static acorn]

can a cat6 even shock you?

[carmine tinsel]

How I feel when telling ppl irl im into hacking

[fossil merlin]

It can carry power yes

[static acorn]

enough to shock you?

thats dope

cat6 tazer incoming

[fossil merlin]

Dunno I just ate it

I used proper power handling tho

[molten sky]

every once in a while i have someone clarify my job like 'oh so like hacking' but it always sounds cliche af

[molten sky]

https://tenor.com/view/hacker-typing-hacking-computer-codes-gif-17417874

hackerman

[fossil merlin]

Yo is that you?

That's peak

[static acorn]

im hungry for somthing only cat6 can satisfy

[molten sky]

what happened to the first 5 cats

[fossil merlin]

I ate em

[static acorn]

https://tenor.com/view/xqc-xqcl-mad-bite-bitting-gif-22844450

[blazing granite]

I must go bye

[molten sky]

*deletes reply before getting banned*

[molten sky]

cheers m8

[fossil merlin]

I did eat a micro b usb when I was 10 cuz I thought it'd taste good

Later @blazing granite sleep well :3

[carmine tinsel]

I knew this kid in third grade who ate a quarter

Never knew what happened after that

[fossil merlin]

Fecal impaction

[static acorn]

did you expect it to taste like twislers? im so confused

[fossil merlin]

I dunno guy I was 10

It was small

[carmine tinsel]

anyway third grade mentioned

https://www.youtube.com/watch?v=sIF07Vxw-sY

[static acorn]

i did chew on some plastic teddy bears when i was in second grade cuz they looked like gummys

[fossil merlin]

Hey any of y'all read the "three body problem"?

[carmine tinsel]

yes

I have

[fossil merlin]

Was it good

[static acorn]

no 😭

[carmine tinsel]

I like the 3 body problem a lot but i read it a year ago so I dont remember a lot

[fossil merlin]

Me too, like 4 times. I'm using audible for my 5th read through, the VA is excellent

[dreamy moat]

Hi everyone. I'm new to Discord so I'm not sure if this is the right section, but can someone help with an issue I'm having. I can't access the Subscription page under Manage Account. It's not loading andjust showing a blank screen. Has anybody had this issue and if so, how did you resolve it?

[fossil merlin]

May I recommend "Blindsight" by Peter Watts?

[elder peak]

The banana always gets me 🤣

[carmine tinsel]

I have it on my goodreads tbr

[static acorn]

i didnt even see it til you mentioned IT

[fossil merlin]

It's good. Read it and we can talk about it

[carmine tinsel]

im finishing up a book rn so I'll probably get to it in a bit

[elder peak]

Sneaky banana 🍌

[static acorn]

i read this book call "iboy" recently. its about a kid who gets hit in the head with an iPhone and gains the ability to hack things with his mind. (i wish i was making this up) actually a good read tho.

[carmine tinsel]

this is gonna be me after i finish jr pentester

😈

[static acorn]

yur gonna hit yourself in the head with an iphone?

[carmine tinsel]

girl ive already done that like 5 times when scrolling on instagram with my phone over my face

why am i not a master haxor yet????1

[elder peak]

It's worth a try

[static acorn]

https://tenor.com/view/jarvis-tony-stark-iron-man-meme-dank-memes-gif-8688445319860298090

all your cat are belong to us now

[static acorn]

thats where i put my cpu 🤷‍♂️ pcie

120 fps max settings

[carmine tinsel]

its getting exfoliated :3

[static acorn]

its gonna have buttery smooth skin

[molten sky]

god damnit

just realized i can't go to defcon this year cause of a wedding

[tulip hatch]

This is weirdly satisfying to watch. I can't tear myself away. It's like watching a drunk puke in front of a sunrise.

[pliant onyx]

New topics are so difficult to grasp

[static acorn]

https://tenor.com/view/pc-gif-19276963

cream cheese thermal paste

[autumn flume]

hello everyone! new here 😄

[static acorn]

WELCOME 🫡

[cloud quiver]

Hello , welcome 🙂 👋

[cloud quiver]

Water-cooled i7 nice

[autumn flume]

that's nice

[cloud quiver]

Congrats , great job 🙂 🚀

[eternal timber]

Nice

[static acorn]

dude. api classes.. sound bomb as hell

i need to learn api's

[eternal timber]

I miss JS now

[autumn flume]

nice to meet you all, i started this year to learn and am pretty excited

[static acorn]

console.write("js, misses you too")

[cloud quiver]

Glad to hear that 🙂

[static acorn]

wait isnt it console.log?

smg i think it is

[eternal timber]

It is

[static acorn]

too much python as of late i think

[autumn flume]

that's js right ?

[static acorn]

yuh

[autumn flume]

print_r xD

[eternal timber]

You might have gotten it mixed up with document.write

[static acorn]

guys... i know to many languages they all just morph into one now

[pliant onyx]

Thank you, but I'll need more practice on this

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 3542)

[eternal timber]

Skill issue

[pliant onyx]

I'll also have to take notes potentially since there's a lot more to learn

[static acorn]

it rly is

[pliant onyx]

Very

[static acorn]

i just had a redbull and i havent had an energy drink in so long. my heart is about to explode rn.

mistakes were made

[pliant onyx]

Today's msfconsole art
Looks like a cow?

[static acorn]

MOOOO

[cloud quiver]

Yeah it is a huge topic , this room is just scratching the surface

[carmine tinsel]

I gotta get to the metasploit rooms man I’ve been lacking

[static acorn]

metasploit goes hard. script kiddys dream. its my dream. i am script kiddy

[pliant onyx]

Is a good C2

[carmine tinsel]

A part of my soul dies when I have to learn a new tool just bc I don’t really like using them, I prefer learning the logic behind attacks

[pliant onyx]

I'd say they are two separate things

Learning the tool is helpful and important, but learning the attack behind them can be important as well

That said, msfconsole taking so much time today

I just updated the metasploit-framework, maybe that's why

[static acorn]

use Armitage

https://tenor.com/view/mujikcboro-seriymujik-gif-24361533

does anyone unironically use armitage? be honest

[real lichen]

Where should i post this??

This room text is not switching properly for dark theme

[static acorn]

what in the

[frigid cradle]

Use light mode

[static acorn]

https://tenor.com/view/deadbeat-light-mode-gif-24758217

[real lichen]

i know but im sure the staff would like to know

[carmine tinsel]

I don’t know why ppl are so allergic to light mode xD

[cloud quiver]

#1333993673381253162 🙂

[frigid cradle]

Just for that one room
Or clear browser cache and relogin

[real lichen]

light mode is bad for your eyes is why

[carmine tinsel]

My theory is that we aren’t used enough to getting actual sunlight outside so anything bright is too much to handle xD

[static acorn]

https://tenor.com/view/flynn-dixon-blind-crash-hugo-gif-11026353490696108102

[real lichen]

#room-bugs or #site-bugs

[frigid cradle]

Exactly which is why i recommend taking walks around 9am and 5pm

[cloud quiver]

Those are not active anymore

[real lichen]

i see that now lol

[cloud quiver]

Report in #1333993673381253162

[eternal timber]

I think I’ll code up an app that generates and stores passwords for sites you enter

[real lichen]

i see ty

[real lichen]

make your own password manager?

[eternal timber]

Yes. It shouldn't take too long

[real lichen]

its pretty easy to google how to encrypt your files as well make sure you generate your own random keys

and look up how to generate your private key using a password that you set in the program

[split compass]

I have done exactly that

[real lichen]

and dont store the password either you should only store a password hash and compare that

[polar spoke]

i wouldnt

[real lichen]

its easy and if you do everything im saying it will be extremly secure

[polar spoke]

You can’t

[split compass]

Just don't try to roll your own crypto.

[polar spoke]

You must store the password to be able to reuse it

[real lichen]

worng you come up with a hash algorithm that you use to generate a password hash

[polar spoke]

No.

[split compass]

But anything you want to use that password with will not simply let you pass the hash... And if it did, then the hash becomes the password.

[real lichen]

then when i type my password in i run it through the same hash and compare it to the stored hash and if they are the same then boom

[polar spoke]

Then it doesn’t store your passwords

You do

[real lichen]

and then i encrypt the file that the passwords are stored in using my own public and private key that i generate

[polar spoke]

Also no

[real lichen]

i have already written this code

[polar spoke]

Local pubkey doesn’t make sense

[split compass]

Keith, slow down and listen for a moment.

You have a password manager. To manage your login to sites and programs, let's say for instance, LinkedIn, right?

[real lichen]

you guys missed the begining of the convo

[eternal timber]

what did I start

[real lichen]

this guy said he wanted to write his own so i was saying how he could

[eternal timber]

I am just making one for fun

[split compass]

"I think I’ll code up an app that generates and stores passwords for sites you enter" - quote

Which, yes, that's a password manager, but, as chicken said, in order to use that password to login to a site, you need, the password, not a hash of it.

[real lichen]

totally doable

[real lichen]

the hash is only for the password to login to the app

[polar spoke]

Don’t do it this way

[real lichen]

all your other passwords are saved in an encrypted file follow along jeez

[polar spoke]

It opens up vulnerabilities you don’t need to have

No need to store the hash of the master password at all

[versed heron]

Hi all

[polar spoke]

Storing it only weakens the outer encryption layer

[real lichen]

how else are you going to check if its correct?

[polar spoke]

You don’t

You attempt decryption and check for failure

[split compass]

The output being correct, tells you it's correct.

[real lichen]

thats true i guess

good point

[eternal timber]

logging in tells you it's correct lol

[real lichen]

but storing your password hash is how every website does it

[polar spoke]

Well, not every website

[real lichen]

you wont be able to verify your login without checking it somehow either my way or the way @polar spoke

[polar spoke]

Locally decrypted containers like some online bitcoin wallets and proton mail and such don’t

[polar spoke]

Correct, so they don’t

They locally decrypt into your browser and fail on bad password

[real lichen]

i like that

[polar spoke]

Websites that don’t use local decryption will store a hash, usually, but it’s ALSO not necessary that they do that either

Better crypto systems exist, they just aren’t widely deployed

[real lichen]

still though you cant deny that storing the hash is how 70% of websites do it

[eternal timber]

I don't think it matter if the website itself tells me

[static acorn]

https://tenor.com/view/cat-skate-board-gif-778367011615093516

[polar spoke]

Oh of course

But local password managers don’t 🙂

[split compass]

Oh chicken... Speaking of crypto wallets. I'm a complete coin novice, but I have a few, and I need to transfer them, preferably to an offline wallet, have any good reference materials?

[real lichen]

yeah but we are talking about how do you save all your passwords and keep somone from opening your custom made password manager

[real lichen]

yeah i never thought of just doing it that way

[white crow]

https://tenor.com/view/harvey-specter-suits-suits-tv-suits-usa-gif-15684789061952038692

[polar spoke]

Yeah, this is what I do so if you want advice on how to do it right, feel free to ask

[eternal timber]

encrypt the save file and keep your computer secure

not much else you can do

[real lichen]

you implement a master password like we were talking about

[split compass]

Remember if you have it decrypted, it's plaintext somewhere on your machine.

[polar spoke]

Sorta ish

[polar spoke]

Yeah and in memory and potentially in all sorts of other places

[split compass]

Biometrics are neat... But also, technically, more public than your thoughts.

[eternal timber]

then you save that password in another password manager

[real lichen]

im writing custom software for family business that saves encrypted information and i was going to do a master password. now i know how to do it the best way

[eternal timber]

Will I get sued if I use the THM logo as my GUI background

[polar spoke]

I would honestly not want to do that

Sounds like a huge amount of liability

[split compass]

I assume they have a trademark, and due to the way trademark laws work, they MUST enforce their mark, or risk losing it.

[polar spoke]

Nah, all of the biometrics take place in enclaves or other secure hardware elements

[real lichen]

i love it. i went to school for computer programming / game development

[split compass]

So, if you have a good reason to use, and associate that use, with your software, send them an email, and get permission.

[polar spoke]

Oh I’m sure it’s fun, it just sounds like a ton of liability

Applied crypto is hard and hard to get right

[eternal timber]

not commercial use tho

meh

[real lichen]

i feel like its overkill cuz small business but you can never be too safe lol

[polar spoke]

i mean, i wouldnt say its overkill

[split compass]

Yep, but it's not copyright, it's trademark. No safe harbours.

[polar spoke]

depending on what the business does, it's probably required in some ways

[eternal timber]

yeah

figured

[polar spoke]

i'm just saying I would NOT want to custom develop anything that does that for any kind of business use

especially if they are required to do that by a compliance framework or certification process

as they will almost certainly not be happy with a custom implementation that hasn't passed audit

[split compass]

In the 80s Nintendo actually used their trademark as their DRM.

[chilly veldt]

Morning

[real lichen]

im doing it in C# Windows Forms which makes it super easy to do. the libraries are already there for the encryption and everything

its all already working

[polar spoke]

That doesn’t really mean it’s been done right or will hold up to any level of scrutiny

Just using existing libraries helps but doesn’t fix a lot of the nuanced faults you can introduce into stuff like this

[near sapphire]

https://tenor.com/view/family-guy-fortnite-family-guy-chicken-popular-vibe-the-weeknd-gif-3449867671768307845

[real lichen]

i have been programming for 15 years

if that helps

[split compass]

So then the regulators will need to audit the libraries you referenced, plus your code base, plus how you implement and interact...

[polar spoke]

Sure, but given the talk of storing the hash of the master password, it’s clear that this remains difficult territory to get right despite that amount of experience

[split compass]

Regulatory agencies don't work on trust me bro.

They make you pay to have the code audited by their approved vendor list.

[real lichen]

im the sole IT ADMIN / Developer / Tech

[polar spoke]

Like, this is my area of expertise and I wouldn’t even feel comfortable doing it

[real lichen]

i work directly for the company

i wired the whole office i build all the computers

[polar spoke]

Yeah this too lol

[split compass]

Does the company process credit card payments?

Handle PII? Etc.

[real lichen]

i setup and manage the server

[eternal timber]

dope

[real lichen]

uno singlular

lol

[polar spoke]

Oh god PCI compliance makes this a nightmare

[real lichen]

im not storing that kind of information

[polar spoke]

I can’t imagine trying to push a custom solution to meet PCI or NYDFS or similar

[real lichen]

thank god im not

[polar spoke]

Even PII for employees can be sticky

[split compass]

I worked for a credit agency once upon a time, had to do the compliance audits.

Management kept trying to take shortcuts.

[polar spoke]

Yeah, I worked both insurance AND for a bank

[real lichen]

yeah i have been researching

[polar spoke]

I did the whole lot of it, top to bottom, and it was rough

[real lichen]

and im not storing sensitive employee or client data either

[split compass]

Fact is, it's just cheaper to use an accredited solution most of the time. 😓

[real lichen]

we have quick books for all that

[near sapphire]

question, does credit cards cvv work the same/similar way as passwords do?

[real lichen]

its fun for me and free for the company

[polar spoke]

No, not really

[real lichen]

im storing mostly bid information and job info and timesheets and work completed information

[polar spoke]

Some of that can be regulated iirc

[real lichen]

my goal is to make invoicing a ton faster

making a custom app to do things the way we want them done

[near sapphire]

so like do cc companies store them in plaintexts in their db cause that seems unsafe

[split compass]

I agree that sort of thing can be fun, and educational, I just wouldn't let it anywhere near production, until, and unless, it passed any kind of regulatory commissions requirements that it may cross territory with.

[ebon sage]

Hi frnds, can someone guide me get past the task 8 in Upload Vulnerabilities room.
can't figure out how to select and upload the file via command on annex.uploadvulns.thm

[polar spoke]

Why would that be unsafe

[near sapphire]

if their db ever get leaked

[real lichen]

we wont rely on it until it has been tried and tested for many months

[near sapphire]

all cc would just be accesible

[polar spoke]

Yeah, but that’s a given

[split compass]

It's only three numbers long. Shrug

Wouldn't make a very good password right?

😉

[real lichen]

any specific regulations you think i should look at?

[ebon sage]

Hi frnds, can someone guide me get past the task 8 in Upload Vulnerabilities room.
can't figure out how to select and upload the file via command on annex.uploadvulns.thm

[near sapphire]

so why not use a password instead of random 3 numbers, is it for convenience?

[polar spoke]

It’s just not used that way

It’s kinda more similar to a checksum than a password honestly

[split compass]

It's only one part of the whole verification process.

[near sapphire]

so the verification process for cc basicly just checks if you have the card or not cause all the info needed is there, so why not add a password so if a card was stolen the thief cant just use the cc, kinda how like debit cards work

[real lichen]

they also dont want to make using the card too complicated

use virtual cards for best security those can be regenerated on the fly

[fresh cobalt]

I just did JS for beginner, if we have deobfuscation online to easly deobs.. then what's the purpose of it ? Makes harder is just copy paste it on a good website. I'm newbie in JS don't yell to me 🙂

[grizzled void]

#site-bugs

[real lichen]

@polar spoke any recommendations for breach monitoring software preferably open source. Im redoing our server with proxmox instead of windows

[real lichen]

that was taken care of a while ago thanks though

[twin ridge]

Gave +1 Rep to @grizzled void (current: #149 - 54)

[grizzled void]

yeah just noticed

[real lichen]

and actually its #1333993673381253162 because the other ones are not being used anymore

[grizzled void]

good to know I was not aware of the changes, I will keep this mind, thanks

[twin ridge]

Gave +1 Rep to @real lichen (current: #2703 - 1)

[real lichen]

no problem

[polar spoke]

Breach monitoring?

[real lichen]

network monitoring

[grizzled void]

snort

security onion

[real lichen]

open source preferably?

[grizzled void]

both are

[polar spoke]

Yeah, that’s a whole like… field of stuff

[real lichen]

sweet

[polar spoke]

IDS/IPS, network monitoring, endpoint monitoring, etc.

[real lichen]

basic small business setup what would you do?

max 10 computers + 1 server and 1 offsite computer that uses openvpn to connect to the office network

offsite is used for data backup

[fresh cobalt]

Span critical ports + Snort

[real lichen]

and snort can run on like a linux server vm that i spin up?

[fresh cobalt]

yep, give it a try. You can create alert file and even rst traffic

[real lichen]

im seeing that network TAPS are a better option than SPAN ports

opinion?

[sinful bobcat]

Good luck to anyone participating
And may the exploits be with you

[grizzled void]

tap is inline where span is mirrored traffic

[fresh cobalt]

Span is working perfectly, for high traffic it may missed some packet but ...

[grizzled void]

I prefer to run my Security Onion as a network TAP but SPAN works just fine

[real lichen]

right and the SPAN can cause dropped packets because of the mirroring its duplicating packets and adding extra traffic

just what im reading

so if you have heavy traffic TAPS might be a better option im guessing?

special hardware needed for this?

[grizzled void]

if you run it as a VM in proxmox you would just direct all traffic through it for a TAP

[real lichen]

right makes sense so no extra hardware needed then\

just proxy traffic trough it

[fresh cobalt]

If you want a really good product reliable and hardware based for high traffic, Probe Vectra are good, you installed Probe on critical and strategy port and you have a brain server collecting traffic from the probe. The product is great to detect abnomral behaviour based on signature and some ai to check pattern behavior.. But it's expensive 😦

It's not for a size of 10 computer but just fyi

[real lichen]

yeah im trying to keep it simple no need for crazy enterprise stuff

sounds cool though

[grizzled void]

Great Scott Gadgets has a decent network tap for under $50 if you needed a physical tap (keep in mind that it does lower the speed from 1000BASET to 100BASETX but for learning purposes it is good) but if you are doing it all in VM you don't need the additional hardware

[fresh cobalt]

snort is great for you i believe if you are concern about heavy load, check you might have some distribute design with cuthrough ..i'm not sure but i won't be surprised

[real lichen]

im trying to apply everything im learning to the family business

i still gotta convince them to buy a nice managed switch lol

i got a router that can handle 10GBe so thats a start

and i ordered a NIC for the server that will handle 10GBe

gonna run the 10GB to the server and all the other computers are on 1000Base

we arent even in an area that will give us more than 1GB of internet down yet but internal network is getting ready lol

[fresh cobalt]

enjoy

[real lichen]

ty

[eternal timber]

Did someone say snort

[fresh cobalt]

idk, i've not been alerted 🙂

[chilly veldt]

So tired

[real lichen]

done researching now time for bed

Thanks for all the info peeps!!

[twin cipher]

Snort what

[eternal timber]

Same

[eternal timber]

Not appropriate to say in this server

[eternal timber]

Made the app

[naive violet]

So.... Don't?

[eternal timber]

I dont think I did

[fresh cobalt]

Who knows ..knows

[chilly veldt]

?

it's just a building filled with electronics

[ripe vine]

Evil Corp!!

[blazing granite]

Tirbeca AT&T building 33 Thomas I lived in that neighbourhood for a bit

[ripe vine]

What's with the no windows

[chilly veldt]

it's a building only for electronics, no-one is in there, therefore no need for windows, as the phone lines/services doesn't need sun

[ripe vine]

there is me thinking servers use photosynthesis for power

Architecturally it looks horrible lol

[blazing granite]

rumour has it that is an NSA building

[carmine tinsel]

The ventilation must be horrible

[pliant cairn]

evil freaking corp.

is that actually real?

[fresh cobalt]

Yep

[eternal timber]

@restive plaza this individual sent me an unprompted friend request

[pliant cairn]

maybe they wanna be fren

[fresh cobalt]

There is some ..

[twin cipher]

Mr robot?

[blazing granite]

33 thomas st, NY if you want to see it in person 🙂

I lived near by for a bit

[pliant cairn]

always a chance it could blow up.

[pliant onyx]

I am so tired (hi so tired👋) I've been completing incomplete rooms since morning that I had joined but not done yet

[eternal timber]

Vro talking to himself

[dawn grove]

Hi everyone

[cold jungle]

Helloo

[regal bluff]

I would be scared to death stepping my foot inside

[sturdy pike]

I got free nitro for a week?

damn'

[near sapphire]

does tryhackme have a challenge room thats just pure pcap analysis, i still struggle with those

[upper knoll]

Search the blue team rooms

It’s possible you’ll find more pcap stuff

[vague dragon]

what do u suggest to me to learn c or to stay on the tryhackme path ?

[whole gazelle]

tf? those are to diffrent things

[upper knoll]

i dont think there is much content on learning the C lanauages however if u search for them there might be if you just want a good learning path follow this #start-here

@restive plaza there is a rule not to add or dm users without asking first please dont do that!

[whole gazelle]

yoo u got friend request too???

[upper knoll]

yer i did i guessed they might not have checked the rules so better to clarify as the mods dont mind us reminding people of that one

[restive plaza]

Please am new on this app and I need friends to talk to

[restive plaza]

Ok

[upper knoll]

well your welcome to meet people in general but ask before adding people!

or dming

[restive plaza]

Okay

[restive plaza]

Can I add you

[upper knoll]

the mighty kgb wassup!

[restive plaza]

Can I add you

[whole gazelle]

depends on u bro

what you find more intresting etc

[restive plaza]

Accept my request

[eternal timber]

How polite

[upper knoll]

@mossy river @sick lance

[cloud quiver]

https://tryhackme.com/room/c2carnage
https://tryhackme.com/room/warzoneone
https://tryhackme.com/room/warzonetwo
https://tryhackme.com/room/mastermindsxlq

[vague dragon]

ima give u an advice on connections if u beg for it no one will need u u have to make him need u too so u can advice each other

[grim sparrow]

:hammer: carolina583837#0 has been banned.

[eternal timber]

What

[vague dragon]

woah

[upper knoll]

sorry if u were resting jabba

[vague dragon]

was he realy want friends or it was a hack ?

[mossy river]

It’s a scam bot

[vague dragon]

aha

[upper knoll]

guessed with that pfp pick but thought id be nice as we try to spread kindness here!

[vague dragon]

me too any pfp with 18+ its likely for scams

but hacks idk if its possible by just adding u

[upper knoll]

cant do it with just an add last i checked

normally its a scam/phishing link

[vague dragon]

yup

so whats better for ethical hacking learnin c or tryhackme

[whole gazelle]

depends on what you wanna do

tbh

[vague dragon]

like what

[whole gazelle]

c is cool to learn how computers work

[upper knoll]

any coding lanuage will help you but mostly unless you are doing more specific things knowing coding wont be required

im not a good coder but im not a awful hacker

[vague dragon]

so tryhackme it is then

[upper knoll]

follow the #start-here path it will guide ya

[vague dragon]

thnx so muchu

[upper knoll]

this is a lovely server people always help

for example im always a big supporter of the lovely kgb he is our room helper god

imo

[vague dragon]

whats the add friends butten down the path about is it more fun this way or it takes ur time

[polar wraith]

any1 here whos done all the xss labs on portswigger?

[cloud quiver]

There should be button on the left side of your dashboard below skill matrix 🙂

[cloud quiver]

I did 🙂

[vague dragon]

whats xss mr foxy

[cloud quiver]

https://tryhackme.com/room/axss

[vague dragon]

thnx

its hackin using the browser

[crystal moss]

Wasup today whit you guys?

[polar wraith]

can u gimme a hint for one of the labs

https://portswigger.net/web-security/cross-site-scripting/contexts/lab-event-handlers-and-href-attributes-blocked

dis one

[crystal moss]

What Chanel can i find a team to join?

[cloud quiver]

This one is a bit tricky . It's about one specific behavior of an animate tag which can allow us to add attributes to other tags

[polar wraith]

but isnt animate blocked

[cloud quiver]

Team for what 🙂 ?

[polar wraith]

only <a> tag is allowed

[crystal moss]

ctfs

[polar wraith]

oh wait nvm

damn

[cloud quiver]

Shouldn't be it can be nested inside <a>

[polar wraith]

okok tyyyy

[real token]

Sup

[crystal moss]

Dont know how it is in THM but in HTB you can do boxes in teams

[cloud quiver]

You can ask in #room-help if you have some problem . There's also team option on THM . Go to your account settings > Teams

[crystal moss]

Yes, ut how to find teams to join...?!

[cloud quiver]

Well , you can try to ask somebody here he is also looking for a team . Maybe you can also check #koth channel 🙂

[sick lance]

Please use their own discord server.

[crystal moss]

Aait, thanx

[polar wraith]

its dead

[sick lance]

Doesn't mean you can break our community rules. 🙂

[real token]

Why you asking for hints when they literally give you the solution and hints? xD

[polar wraith]

they dont give hints for every challenge

[crystal moss]

Did ask in the site help Chanel but no answer. I did register with a Google account, now i cant change my mail or set a pass for my account, can i change this some how?

[polar wraith]

plus why would i wanna see the solution

i wanna solve it myself

[sick lance]

You can't change email with a Google sign in.

[real token]

Then open the solution, and only see 1 line at the time

[polar wraith]

oh its against the rules

ok mb

[real token]

If you wanna solve it by yourself, read the materials, try payloads and more payloads until you give up eventually and just look at the solution xd

[crystal moss]

I know, so i wonder if i can change my registration..?

[sick lance]

For THM?

You'd need to contact support.

But I don't think so, with how Google sets up accounts.

[real token]

Scrubz, I have a question regarding my "Full Name" in the Tryhackme profile, I wanted to change it to something else, it is currently 0xVoidBytes, but it says I can't have numbers on it when I try to change it to 0xSomethingElse

I already have a number on it

[sick lance]

You could have had the 0 before the change.

So anything set before the change, will be allowed to stay.

[crystal moss]

Ok, i see... One more q: in my profile it is a flag for UK, im from Sweden, did not find whare to change it...

[real token]

Ah yes rare 🍷

[sturdy pike]

Did everyone get a free nitro?

[sharp citrus]

Changing your country's flag

Article Link

https://help.tryhackme.com/en/articles/6611897-changing-your-country-s-flag

Feb 27, 2025, 10:30 AM

[sick lance]

@crystal moss ^

[crystal moss]

Tanx

[crystal moss]

No?

[sturdy pike]

I don't know then, I was gifted a free week of it

[crystal moss]

From who? THM?

[sturdy pike]

Nah, they don't do nitros iirc

A free week maybe by discord themselves

[ancient mirage]

how are you today guys?

[orchid dome]

I was getting free Nitro and it would have started charging me after a month

[slow cloud]

thats usually how it goes

[orchid dome]

So its the same as Music giving a month free at start or YT premium giving a month free for the first timers

[orchid dome]

🤷🏻‍♂️

[crystal moss]

A hook, so unexpected

[sturdy pike]

Lemme send a screenshot

[robust oyster]

Hey Guys been a while, I have a question for the masses but background history first. we know of automated chains to mitigate HID vulnerabilities on internal infrastructure for example, white, black and quarantine lists for plug and play devices. My question is, when performing a reconnaissance during pentesting, what tools or techniques would a recon phase use to enumerate the chains and external granular PnP devices to isolate potential for HID threat vectors in anticipation of recommendations post pentest?

We know NMap and ZenMap can fingerprint internal infrastructure but that is for networked nodes, the issue here obviously is the granular nodes of PnP, perhaps someone knows of relevant scripts?

[mellow narwhal]

So you want to enumerate if there's any vulnerable external devices?

[pliant onyx]

I shall be 0xB soon™️

[tropic ice]

really nice 💪

[crystal moss]

Maltego?

Maybe did misunderstand what you want to do...