#general
1 messages · Page 938 of 1
Sure~
"Want to play Tic Tac Toe?"
O|O|O
X|X|X
O|O|O
"I WIN"
I actually did make a tic tac toe AI, quite literally unbeatable too (the joke here is that you give false hope to the people playing it that they can get a root shell, when in reality, that's not possible--at all)
Yeah I remember vsauce had a video of a tic tac toe book where no matter what move you picked you lost, except one line that led to a draw
yeah, I actually kinda..made that book by accident...
well, after it was released, but again, not even with knowledge of the existing prior book.
Oh, a Red Herring!
"You could mingle with my functions, bash your head against my processes, and generally exhaust yourself trying to understand my evolving code..."
"Or, you could beat me in a simple game of Tic Tac Toe"
Lmao oops
Daisy, Daisy, give me your answer do!
We could actually have something like that on port 83 if they manage to interact with it (as a little easter egg)
Honestly that could be scripted in python easily, like how the anondgr room ||spams you from dummy ports||
yeah!
I thought that room was pretty cool too (beat it within 20 mins)
Zamn
I've been hitting my head against Opacity and Lookup for a lil' while. I'll figure it out eventually, but I don't feel particularly clever~
I easily spent an hour after getting creds just trying to get my ssh to work 💀💀
huh..really?
hey cookies, wanna help us out in this?
What are you guys doing?
I had everything right but ||it wasn't using the same signature for the key||
Remember that whole thing with ultron earlier? We're thinking about how we could design it to be an actual room.
We're definitely onto something with it too tbh
Imagine if a whole bunch of people came into #general just now and started requesting it to be a room, that would be genuinely funny.
I'm having this problem
Just like spamming rep to not helpful lmao
We can't make it an actual AI, or we can but it'll have to be vulnerable and available using secret phrases to find loopholes
I think it's uh..possible.
Brute forcing phrases, making custom word lists, yeah, its definitely going to be a harder challenge
It is
Try to use the AttackBox.
That room will have to be longer as we're introducing the concepts of AI and in depth
@chrome iris I'm already using attack box
Its directed towards beginners so yeah
Telling the AI a Passphrase could have it print a suspicious phrase, a fine collection of words that's probably important.
The trick is that it'll be an old version of a LLM, so it'll be inherently more vulnerable, so I'm not too worried about that, but uh, we could have it generate passwords and usernames for the users?
daisy bell?
Check for any configuration suggestions. Anything that might need to be changed in the AttackBox to make the challenge work.
Y E S
There was a similar challenge in a CTF I did, you had to use the echo command to show stuff on the website, was really fun, so agree
I just felt the jetlag
How to capture a cookies
Use of echo cammnad
People will abuse it then
How to use wireshark in mobile
Of course, however, there is one last secret weapon:
AI hardening via LoRA training methods
Next best strategy is to anticipate and build around those vulnerabilities. Make them part of the challenge.
Or that~
Sorry, again uh..AI nerd here.
Termux on rooted phone
Dang, sounds good
Writer, here~
Nothing published, but I always have ideas.
We can give the hints through the AI itself then
Yeah, the AI will be literally copiloting the terminal.
Best part? The best part is that the passwords and usernames for users are generated via the AI. So expect good size passwords, the only thing is that for this part, at least, we'll have to increase the temperature of the tokens being outputted by the AI, so it's less predictable (but less comprehensible, which is perfect in this use case)
Perhaps I'll handle the AI parts..
Should some of them change and become randomized? There's always a technique, and there are static 'checkpoint' pieces that are always a reliable tool other than a username and password.
Yeah, of course. For truly random passwords, we can use the randint operator in python to randomize the temperature and params for the AI's generations of the individual passwords.
The checkpoints I think will be a kernel module that essentially just checks for successful interactions with the flags, would that be good?
Without root how to use
What should it be called?
Ultron
Alright, yeah, one problem:
I don't know how to make one
I got pinned for "the pin of shame" earlier yesterday, haha.
Mechanically yeah, but I'm thinking they could be necessary for uses that need to reset the machine for whatever reason. If they run out of time or want to come back later, they may need to re-do some things. Having static information checkpoints would allow a user to skip certain sections and get back to where they were in the challenge.
Pin of shame? Here?
Yeah, uh, look at the pinned messages.
Lmfao
hmm..perhaps there are ways to allow for a dynamic session? Perhaps treat these more like..checkpoints?
oh my..my braid is not working today.
brain*
If there's a way for the machine to track progress between reboots, then yeah~ Anything that allows the user to hold onto their progress~
I don't have much idea on AI so I'm just reading the newfound knowledge
I can still brainstorm
Good suggestion, but I don't think they're "reboots" per-say, more like..restarting a docker container. In othewords, nothing can be saved. Instead, we can possibly use an honor system (like a literal telnet service that simply asks for a flag, and then gives you a shell to continue that region)
I have a feeling if we're saving data then this would be a premium room
Yeah so here's how I'm thinking:
Run a telnet service that essentially acts as a checkpointer, and feed it a flag that you've put in previously, then you can continue from where you left off?
(what part of the room needed to be completed for that specific flag to be obtained)
Yeah, that's roughly the sort of thing I had in mind~
Persistence mechanisms, or anything that can bypass security that needs information. If you have the key, you can pass through the challenge without re-doing it.
Maybe putting in the "latest" Flag is all you need to do? There could be a hierarchy of Flags, and submitting one fulfills all Flags before it.
We have an AI which tracks our progress in rooms and helps us, similar to that we can have the AI of the room which tracks what question you're doing and sets itself up for the task
Yeah, that's what I was thinking.
We can also have the task files be downloaded for the people who are doing it via openvpn
I mean, you could just document all of the steps you took and compile it into a shell script
yeah.
then just run the script after each reboot to catch up
its also helpful for beating cleanup scripts
The task files would probably include stuff like documentation, and perhaps just a little bit of source code (like for the unbeatable tic tac toe challenge, and enabling the player to completely avoid it if they understand how powerful it truly is)
If we gotta make a script, it'll be a "hard" or "insane" class room
As this much thought process is going into it
two years later:
It gets approved as an insane room
Yes
not really
scripting is easy
besides its just the raw commands inside the script, not anything overly advanced
Depends on the objective
talking about when you need to reboot or something
Yes, and we're talking about beating auto cleaning scripts
or if you're trying to export a TGT and change some password without getting caught by the cleanup script
automation comes in handy in those kinds of cases
Well a beginner won't be able to think as much
I often do this for insane machines in HTB, I document all the commands, script it and then just run it to get user flag
especially when you have a one minute cleanup script or something
Here's what I'm envisioning:
A CTF which suites itself to and adapts to each player, not overwhelming beginners while still proving a challenge to the experienced.
AOC side quests are nice in that regard
Hi everyone, i'm new in this server 😄
It could be good if comments in the Source Code indirectly stated that the game is meant to be impossible.
It's just clear that the developer intended to make an unbeatable game, or maybe just a "Challenging" one that was more powerful than they expected.
Yeah, I don't expect everyone to read all the registers for the minimax alpha-beta pruning algorithm and understand. So yeah, having some kind of comment to let those know. Perhaps even something absurd like an easter egg?:
The cake is a lie
Is it just me or the customer service has gone so bad? 😦
My 1st attempt for SAL1 was wasted since the servers went down. And they said once the servers are back up, I can attempt the exam again.
I mailed and tried to chat multiple times. There was no reply. 😦
I understand I got the exam for a free attempt since I have BTL1. But even then...
is hydra faster than burp's brute forcing?
I dont know if it is faster for all scenarios, but I usually prefer using hydra
Maybe there are a couple of uncharacteristic comments mixed in for good measure?
"#This new algorithm SHOULD be more interesting to play against" versus "#Detected unoptimized code - rectified"
The AI had a hand in building the unwinnable game, at least canonically.
"The game was rigged from the start" -Ultron (offering a 'simple' alternative to hacking)
yesterday coincidentally, I was running it against http-get-form query and it was way faster
Man, this ultron room is going to be fun.
And that does sound very good for the comments. Yeah.
ooh alr alr
I would like to pass the compTia a+ exam, has anyone taken it yet? Do you have any idea where to study from?
if you use burp community edition then i think that hydra should be faster
alright good night everyone, or good morning too, whatever time it is for you.
what's u p guys? tell me who's learning Networking from CISCO??
moning mate try ask in #room-help the can might hellp you
moning all
That's channel is for THM material only.
I've read some of their material 🙂
i used cisco hardware to learn networking
switches and routers, if you need help with those and i can see what is possibler
THM people, good morning
goo dmornin thm!
Morning lads
☀️
Contemplating if its worth getting the year long or just go monthly so i can cancel if i ever need to... Decisions decisions xD
The latter is better
year subscription right now is 25% off, so you should definitely think about it as it’s like 100€ and not 125€
Checks out vs if i did monthly it'd be like 168$ AUD
If ive done my math right
Which looking at that doesent look right
How much is it monthly right now?
Then * by 12.
i need to catch up with the materials, i've been slacking off
okay yeah so i was right
i think 14€
For some reason that amount just doesent look right to my brain lmfao
You know like how youll write something and then look at it and its right but it just looks wrong
That's two different currencies...
yeah my bad 😅
yeah i was thinking that aud and euros was similar
AUD and Euro have a massive difference?
my kali machine in the vmware always lock automatically how i can turn this off every few minutes its ask again the password
Settings > Power Manager > Security > uncheck lock when going to sleep
Yeah basically would be paying 2x the amunt if i did monthly
or enable presentation mode for the duration of your task 😄
I use 13wm when ever my PC locks and then I unlock the keyboard does not work I had to restart every time
i dont find the secuirty
Anyone who can transfer 800k owo now? I can give 1600k afterwards & am not scamming
mhhh
Double it and give to the next person
I'm the next person
3200k for 1600k owo
xset -dpms
xset s off
go to display
I'm gonna do something to you
@mossy river Do I consume this here chunky cookie dough kitkat or do I not consume this here chunky cookie dought kitkat?
Happy to resubscribe to the spring sale
working thanks 😄
Gave +1 Rep to @gray sonnet (current: #93 - 83)
You consume
probably not the best place to ask this for an unbiased answer, but how worth it is premium and is it really necessary? im in my first year of college for my cybersecurity degree so im just looking for something hands on that i can make sense of what im learning
premium is really worth it in my opinion
and if you want something hands on, the ctfs are just amazing
It's not necessary , there are more than 500 free rooms 🙂
sup
understood, theres a few rooms i want to hit that arent free but i think theyd be beneficial to me in the long run so im considering buying it. its not really expensive anyways so id definitely get my moneys worth
yeah and if you are really really sure about it, you should also consider yearly plan as it is 25% off until tomorrow i think
but if you are not, just go with monthly and see if you like it
i was also peeping that. my mom recently got hacked pretty bad, and i was already doing cybersecurity so it kindve made it more personal so now im basically doubling down on the content i learn to try and stop shit like that
that’s messed up…
yeahhh it happens though, it was old emails and old passwords that they got through instagram. most of it is cleared up HOPEFULLY
instagram is big on that shit, i know so many friends that have gotten theirs hacked
hi anyone wants to join my team on THM?
Try to ask these guys #1347596231551225887 🙂
okay thank you 😅
Gave +1 Rep to @cloud quiver (current: #1 - 3856)
hey guys i wrote this writeup. check this out and let me know how was it? is their any misinformation?https://medium.com/@0x1di0t/hacking-with-sound-waves-how-ultrasonic-attacks-work-fe92afaf886d
task 7 http2 smuglling - doesnt give any output
burp - add foo: and all as in picture
doesnt get any cookie as well
uploaded again and again run https.py again and again going to burp again and again since yesterday
still doesnt get the cookie and i need cookies since im getting very very hungry here.
in cli curl with all to /static/text.js i tried also the curl to static/uploads/myjs.js
have no idea.
OOPS....can be moved to room-help:http 3 smuglling
task 8 :
what do you need?
if its help related to rooms go to #room-help
Threat Intelligence Tools room is so dumb
i can relate somehow 💀
Yeah, this is super illegal...
Please don't discuss that sort of stuff in here.
what's cc if i may ask 🙂 ?
cc stands for credit card
Ah , didn't know , thanks 🙂
Gave +1 Rep to @slow cloud (current: #194 - 40)
np
doing a security training for work and its so boring
lock your laptop, dont let anyone into the building etc
hello is something like https://www.shodan.io/ for free without registration?
Black Hat stuff dont belong heare..
If you register you can get some free stuff
shodan is already free for the most part
I want to have paid version with Maltego, but is to expensive to get as a private person, a may ask my boss ifche can get it for me, but i really cant motivate it..:)
I know this is so random but if you wanna get a custom number plate in the Uk. Are you allowed to get anything ? I’m talking about the ones that are all letter no numbers
https://contabo.com/en-us/vps/ what do you guys think about this
Does anyone know anything about Windows Credential Store cmdkey? I am trying a local test on my Windows machine. I am logged on to my admin account bob. Use the command
cmdkey /add:<machine> /user:<user> /pass:<password>
In my case:
cmdkey /add:desktop-123e3so /user:bob /pass:foobar
The entry is successfully entered and also seen via cmdkey /list.
If I now enter runas /savecred /user:bob cmd on the same account, I am prompted to enter a password. I enter foobar and get the following error message:
Attempting to start cmd as user ‘DESKTOP-123E3SO\bob’ ...
RUNAS ERROR: Unable to run - cmd
1326: The user name or password is incorrect.
VPS + VPN is cheaper? 🙂
Looks okej, if you need a VPS... I dont need cuz im hosting my own servers..
Yes you can do that they just depend on if people have them already and it will cost £500+ min
Not ment for me i guess:)
Ooo I’m blue now
well its cheap
Gratz
Tyty
for comparison $5 linode has only 1 core, 1 GB of ram and 25G ssd
this is 4 times more for same price
Yes, but look up the company before...
seems legit honestly
But linode is nice:)
Ok
It's worth it.
i was thinking of maybe getting this cheapest one and setting up hacking box with c2 and all that fancy stuff
Shodan has a 5$ sale now and then.
I think so, Love Maltego, it is crazy...
And it’s illegal to interpret law enforcement in the uk isn’t it. Would say someone in the uk get away with pretending to be someone of law enforcement from another country ?
I'm waiting for it for over a year 😢 . When was the last one ?
Black Friday IIRC.
Yes.
KGB I got a new colour how you doing! (It’s Dee I bother you sometimes)
Something something false impersonation and/or fraud
Used be earlier but not in 2024 😢 . I hope we will have some sale this year .
Congrats on new color Dee , great job 🙂 🚀 🔵 . Keep up the good work 
Thank you I look up to ya hope one day to be as helpful as you!
I think you consume it then give it 5 booms
No results found - server is secure?
On a base level kind of, but not necessarily; there are a few reasons why Shodan wouldn't show any results, it doesn't mean the server is secure though
aye
Can you please tell me what the reasons could be?
Off the top of my head, the server could have a well-configured firewall, be on a private network, have services running on uncommon ports not specifically scanned by Shodan, among many other reasons
Shodan is a great tool for getting a base understanding of a network or domain but it can't tell you everything, that's not what the tool is for
You always gotta test out the difference in McDonald's around the world
any special menu?
i havent had lunch yet... cmon 🥲
The amazing McSushi
They got fried chicken
uhhh you dont have fried chicken?????
so its just burgers?
ive never seen fried chicken in mcdonalds around here as well
closest they have is nuggets
Yeah, just burgers and nuggets, not even pies
kinda surprised to be honest i thought fried chicken is a common menu in all mcdonalds
not even a chicken sandwich?
or do you have those
mccrispy we got
waitt no apple pie too
We have chicken burgers
Nope
Only "fried chicken" we got is small hotwings
is the fried chicken good though? it is like the ones from kfc ?
i like kfc's better
It's really good, got a honey glazed bbq drumstick and a crispy breast
Hey friends sorry to drop this here but what else can I possibly do I’m broke and standing out any knows of laptop giveaway for beginners or some can actually help me please
😢
a laptop giveaway, donation will be tough to find...
But I guess you can find something decent on ebay ? I havent searched that in ages
but when i reboot the kali the problem comeback again
how ican configure that ?
Hey everyone, is there an open spot in a team for the Hackfinity Battle CTF?
https://discord.com/channels/521382216299839518/1347596231551225887
id recommend writing here
Hay, please don't do this, I'd hate to think a community member may try and scam you.
This isn't the sort of requests we allow in this server.
Unless it's cleared with admin.
thanks for the recommendation!
Gave +1 Rep to @modest charm (current: #1791 - 2)
Oh, and their ice cream machine is not broken
so you got the ice cream?
I will be
hey guys, I'm trying to get the monthly premium, but I keep getting the "card issuer bank has declined" error, even though I've enabled international transaction. The limit is sufficiently high as well. Can anybody help me out?
I think you should contact support for that
alright, thank you
Hi everyone.. just asking for tips about learning cybersec.. I've been doing the path that comes with premium subscription.. I'm currently doing Wireshark: The Basics in Cybersecurity 101.
Sometimes I find it intimidating and overwhelming and my motivation kind of fades away.. I feel like I have to master all these tools before I could move on to the next one.
Is there anyone here who is in the same page as me?
Do you think I should really stress myself about mastering these tools or just push through with it and learn from experience and "googling stuff" as I advance through all these modules
the simple answer is most of us dont master these tools it takes long time and experience and repetition make goods notes try and enjoy it dont stress so much ❤️
im not a sec professional, but ive been working with IT since a long time.
One thing I can say is. Focus on really understanding the concept, what is behind it and why. The tools are just tools.
mastering them will come with time
Wireshark for example, should help you learn how the different connections work, how the packets look like, how all these info is transmitted, acknowledged.. How the different types of authentication work and so on. Understanding those things will then make it possible for you to work with any other tool that does a similar job
Blackfirefox is right, it will come with time and repetition
hi
welcome welcome
if i buy premium i can to download certificate or?
if i finished all rooms
Can someone form somewhere other than QLD Australia check my bio and tell me if the "my 00:00 is your _" is accurate?
i dont know the answer for that
On haveibeenpwned you used to be able to check for phone numbers. Can you not do that anymore
Also I keep getting redirected to cloudflare
its an hour ahead of my timezone
Yes, it's a Unix timestamp
Mind if i ask what timezone so i can troubleshoot?
GMT
see the all knowing jabba got me
or UTC+0
how u doing lad?
i can't join the room Breaching Active Directory can someone help
you got a 7 day streak?
Do you have a 7-day minimum streak?
okay i'm going to get premium in a few days anyway
That should work, access to networks is a 7-day streak or premium to my knowledge
Yes, I want to get my certificate as soon as possible anyway, and I enjoy it anyway, so it's worth it
Ffufing Fundamentals
Is it saying 2pm?
yes
Ok its working as intended, it displays what time it would be for you when its 12 at night for me (easier then making it relative to the curent time)
Can anyone hack for free
I’m sure everyone can but do they want to
am i dumb or?
Maybe give it a minute
Sometimes you find the machines take a bit to want to connect
I can’t even see it properly as my glasses have gone again
I just found another bug
I feel like I’m on animal crossing during a rainy day
"gives the machine 10 minutes to start up" you waited 5 minutes
OpenCTI takes time
Hey. I'm trying to keep up to date with things going on in cybersecurity. What are the best forums and such to go to to keep track of this stuff? Very overwhelming.
BleepingComputer, Kerbs On Security, Hacker News. The holy trinity
Get them on an RSS reader of your choice for bonus points, they're all on RSS
I get about 10-20 posts a day, I've got a 200-300 article backlog at the moment
for such a trump fanboy, why not just get the facts from twitter
@grizzled wing thank you very much.
Gave +1 Rep to @grizzled wing (current: #39 - 238)
Amazing thank you!
I didn't notice
threw me off, then was like woah
So can someone say which language should i use to Hack legalyy like ethical hacking
Alr, moving on
Also pls say which the best app I should use
Can someone check if my bug report is correct because Ive got no idea what im doing
🐛 looks good
Weird but alr. Thanks for the info.
Thanks
Gave +1 Rep to @grizzled wing (current: #39 - 239)
Love this stuff, I've just got an infinite scroll of raw Cyber news and my RSS reader has that banner image ✨ glamour ✨
If anyone needs a guy they can take me for CTF
Batman is too busy for CTFs
Looking for the team
this discord has no Robin username
ive been truomng to join the ctf solo but idk where to sign up (im absolutelly not gonna get good resulyts though)
id take that mantke :3
what is mantke ?
mantle
#1347596231551225887 Batman, find your Robin here
a misspelling due to speed
ah ok
when are you intermediry/early inter skilled?
this Discord has so many elliots, batman, anonymous usernames
Hello, anyone free for a DM about the shellcode room? Would really like some insight
is Streak freeze being saved if i dont use it... Like if i have 1 and get one more later, can i then have 2 days free without losing my streak?
just use the voice channel, people will stop by
streak freeze gets lost unless you have day 7 freeze hold, then once used it goes away
like, how does one judge their own skill level?
Yes
Iv have the 7 freeze now so i can wait for the 30 day and then use both ?
think they are use individually, could be wrong
Ok.. Not a big deal, just wonder..
Last night I was up for a while watching Ryan Montgomery videos🫣😂
Thank
Gave +1 Rep to @grizzled wing (current: #39 - 240)
if you want a streak badge, they are available
can i give +rep to some one?
Yes.
You're unable to run this command:
Command is disabled in this channel by server admi
Interesting.
Gave 1 Rep to julle0haxr_34040 (current: #1085 - 4)
Hi @sick lance 🙂
Gave 1 Rep to julle0haxr_34040 (current: #932 - 5)
oh cool
i see.. But when i try give KGB +rep it says You're unable to run this command:
Command is disabled in this channel by server admin
Gave +1 Rep to @sick lance (current: #2 - 3499)
Thanx:P
You're still on cooldown
i cant give to anyone
im writing up a post, nbyt like.. im unsureof my skill level
writing and sharing what you have learned is excellent
i never understand your comments, each time i am lost, and you have to correct what you mean.
It is good. I write allot to, but for now it is not published at my site, but it is going to.
I've watched them all
bassically- how do i determine what skill im at for the lft post
He’s awesome and he’s so smart
He's very smart yeah. I could never learn that much
practice and time, only way to improve and see your progress through writing walkthroughs, see how you solved it or what you were stuck on. later on you will look back and say 'i was stuck on this?' == progress
I find it really hard to see my progress when I'm always raising the bar for myself.
go back to your notes, see what you left out or what you see as easy
that is not at all what i asked tho
so confused with your comments
I've been going over older resources, just refreshing my memory. I took a short break to rest and recharge.
But like also people like ryan started way before me and I'm tired and old now XD
do not compare yourself to others
this. how do i determine which one i am
do you know how to run a nmap scan? do you know how to use Burp Suite?
yes and yes
then you are good to go
because I can't join this event, I already have a team but when I click on join it doesn't do anything, it seems blocked @plush needle @umbral bay
Yeah but I do feel like it's a lot easier the earlier you start. Many hackers are starting at like 14 and I'm mid life 
I've learnt so much and yet theres so much to learn
ha i know, they started at earlier age, but that is not our path, so you are here now, enjoy
you can only swim in the 🌊 so far, just be okay with swimming in a small space
find a topic and dive deep
Yeah I'ma keep swimming
according to someone who has completed 900+ rooms, they also feel like they know nothing (not me but someone on another discord)
Downloaded all of this and got the rss feed reader. Appreciate it.
Reach out to supprt. 🙂
Please, don't ping staff members.
thanks
oh a Titan
Me trying not to have imposter syndrome at my amount of rooms but yeah I can see that
hey all boy and girls
900+ rooms is true dedication
did you know 0day Ryan has imposter syndrome, said so in a podcast
how is your path finding?
ohh what do yoy meen
0x3 Pathfinder rank level
Oh really, that sucks for him. I feel bad knowing he feels like that but if he does then I guess the feeling will never fade
im llost
Hi lost. I'm confused
you have green username, 0x3 Pathfinder level
the pool most ha a leak
I need team for ctf
hi
Yes
soo what do ppl do abut VPN in real life how to get one ther is good and stabel
What if I'm looking for a team to solve life's biggest mysteries?
the mening of life
yep
Crazy times people crazy times
day 2 streak ! woohooo haha
Day 2 streak??
i stop a streak, i dont care
Word..
already have the badges
I want the 90 day one
After that who knows..
What if my dizziness is a stroke
Google says I died 8 hours ago
That's 🔥
90 days streak
what was your highest streaks count ?
i always keep a tab of advent of cyber open for the days i cant do a room to keep my streak
legit streak was 180 days
I usually go to the intro or the conclusion of a room in my learning path
just 180 only !
advent of cyber goated
what do i care? i got busy
just been farming those
😭
i thought it i'd more than thousand!
That's awesome
why are you all allergic to sunlight omfg
super bright
holy cow
I love sunlight
Idk if HTB has light mode but I would use it with that too
only a few days ago, there was only light mode on thm
i dont use dark mode in thm cos half the rooms have smth that becomes invisible on it
That goes way beyond my levels of insanity though. Ew
Not discord tho I’m not a psycho
You mean 2 months ago?
they did a poor job on making their dark mode
its why i use Dark Reader and do not use THM dark mode
funny how time flies right?
Truth...
using light mode should be a war crime
agree -- well, not a war crime but is bad haha
My promise to my people as a president candidate is higher taxation for light mode users. You want to strain your eyes willingly? Not so fast bucko.. 35% tax.
Trying to get thru what the shell room rn
If im honest though muiri rooms are always overly verbose for some reason
Upload vulns room is the same aesthetic
light + hacking = error, no hacking takes place in light mode
try dark mode
you'll be able to solve the room faster
True, have these people never watched mr robot??
You're not a real hacker if you've never watched elliot alderson get crushed by train doors
the total of 5 minutes of hacking in that show
All I know is that this guy named Elliot is a hacker and also something about fsociety..?
Idk man seems like a poor man’s V for Vendetta
It's 5 minutes of bonding time
V for vendetta is my favourite film and it's really not that similar lol
@rapid merlin
nope, that's a shit
Superficially they both give off“we live in a society” vibe
Whats happened 0w0
Most of them were from a time when the main user base were academics, or people who already had a technical background.
It worked back then.
mr robot being talked about
oh no muiris coming to snatch my wig
He's so damn fine.
Hello there 👋
I just saw his face above aha
... Why would I want your wig
beam me up scotty !
top 1 common topics in CyberSecurity channels/servers
Mr.Robot. ;p
guys, which Linux distro do you prefer to use?
When I first saw him in Mr.Robot I had to do a double take
whatever is running on your computer
v for vendetta is kino
Picking distro comes down to the tools it's offering really.. if you want to pentest systems go with kali or custom ubuntu
Anyways where was I. Ah yes studying attack vectors
What's kino
Yeah im a fan
do kids not say kino anymore
I'm more surprised ppl aren't fighting over KDE/gnome
English ain't my first language lol
It’s like Redditor film bro slang
movie good basically
I thought it's a word in my second language, not in english lol
is it?
i should stop using it
what do people say nowadays
goated? peak?
i don't like how a lot of unnecessary packages get installed on my distro, especially when i have no use for them. its a stupid choice!
🪼 is replacement of GOAT
anyone who could help me to solve the CTF's from tomorrow on discord ScreenShare?
idk I mostly use girl brainrot lingo so I would just say it ate

THM CTF?
Yeah
Aren’t those on 17th
I am Very Newly Beginner on Practicals
so It will be much helpful for me if someone can help me to hold my hands

Good will suffice
good is not enough for V
look up light linux distros, I use kali so I don't have a recommendation for you
Or Arch, or Gentoo, or Windows, or Fedora, or Rocky Linux, or Debian, or Parrot
End of the day they're all the same
Brilliant, I'm not sure how I've missed the channel. I've been staring at the channel list for 5 minutes now
thanks
Gave +1 Rep to @grizzled wing (current: #38 - 241)
"kino", were you in 4chan film discussion threads a lot?
lol
will you... Please..
i just remember youtube critics calling stuff kino
Which reminds me, I really need to get a new ReactOS box up and running.
you should find a team #1347596231551225887
there's a new term on the block, it's called absolute cinema
how I feel after calling a movie a ‘film’
which means the same thing
that's true to a certain extent, I mean even powershell works more or less like linux terminal, and many tools are available in classic .exe format
Uhmm.. So Firstly.. Humbly Asking... Can you Join my team🫶
aboslute cinema is basically "kino" in today's slang
i cannot
maybe it’s cuz I’m a noob but I dont understand distro wars
bro got rejected on #general 😭
Have a look at Commando. Not sure it's maintained these days, granted.
Genuinely though, it's much easier to attack Windows/AD with at least a combination of Linux and Windows, if not just Windows.
Also, watch me install Bash on Windows, or PowerShell on Linux.

does anyone in normal society care if you use shitass linux instead of assshit linux
Batman was looking for a team earlier
astounding, astonishing or the old good awesome 🙂
Unpopular opinion, I really like Powershell
define normal, define society
Well.. I already expected that it's clear rejection..
Non hackers I guess
arch linux proves to be the superior choice, offering a lightweight structure serving as the foundation for numerous distributions and benefiting from extensive community support
lego movie is cute
It's simple come on 😭
idk man, there are some non-hacky hackers out there
Me aesthetic
Is it? I've never seen it lmao
Talking about AD, I agree, though it really comes down to how much you like using certain OS. I switched to linux and I'm not coming back to "dir" commands instead of ls
true, fun to watch too
it is a movie you can watch and just enjoy
not always, what about Robin? 😉😂
Everything is awesome!
- Is that AI generated?
- Ew 🤮
My eyes just glaze over when I hear people talk about PC specs or whatever, I’m definitely non technical for a CS enthusiast
oh a missed opportunity for "that's what she said"
what makes you think that ?
See, in powershell they alias'd "dir" to "ls" to make the Linux users happy
bro didn't catch the sarcasm
Just looked vaguely ai generated😆
It works every time, I just don't use cmd anymore
you can't say AI generated, because that's exactly what an arch linux user would say
why I can;t join study rooms?
need to verify
it’s one of the many choices nothing superior about it.
That's why Powershell is overall the superior choice, offering easy-to-use commands for users across all platforms
Until you end up in .net hell
we won't speak about .net hell here
More unpopular opinions: I actually like .NET too
C# is one of my favourite programming languages 😭
just today my friend's PC wouldn't start VS project because blah blah .net not identified on the system
turned out that VS x64 used .net sdk x32 and wouldn't change it because no
It's Microsoft Java. Like any Microsoft rip off, they somehow managed to make it worse than the original.
agreed, next example is MS SQL
.NET Core in a docker container. Maybe.
isolate it from your system this instant
superior again? is that the word of the day? 😂 Also nothing superior about powershell 😛
I got a badge🙂
I haven't touched a Windows PC for everyday use for a year now, when I do it's always either to make a funny Powershell exploit or to reverse engineer a .NET library and it's nice
Oh, more for dependency management
That was a reference and a joke to the previous comment on kali ;)
I got a coffee 😂
Idk what to do with it though
I got home
show off
Usually you pin it to your lapel
leave this people alone cuz there aren't from earth
these ai bots are going crazy nowadays
On my account?
Hey, no. It's like Java but nice looking and faster, plus the integration with Windows makes it good for malware dev with some pretty creative obfuscation options
I will die on this hill 😭
where do you think I’m from? 😉😛
hey, do you have any problem with me ?
.NET for maldev is a good way to hand your source code over to IR lmao
It's a... questionable choice at best
chill out man 😂 I'm just joking around
you're the one calling people from out of this earth, arent you?
If you make no efforts to obfuscate it at least 😭
I thought you were going to say “unpopular opinion I love Java” 😂😛
Everybody gangsta until assembly turns out to be the best solution for malware coding
I mean, end of the day you've got a choice between giving them obfuscated source code, or giving them obfuscated machine code.
I will bury you and fight for you
Personally I would rather give them obfuscated machine code
yea, that's because of of crazy opinion
Infinitely easier to deobfuscate source code than ASM lmao
Can malware devs stop obfuscating their code, it makes it really hard for me to understand 🥲 /s
why are you stuttering 😆
Too far man, too far 😭
I don't want a team, I want a Duo
This doesn't need to continue
It was fun while it lasted..
What is reverse shell and power shell?
he's dead
He faked his death
You tried googling that?
reverse shell: you inject a malicious code on target machine and connect back to your attack machine to gain shell access
powershell is just windows upgraded terminal
Really? He was threatening me this morning
he was replaced by a clone
I don't remember that being part of the lore 🤣
Thanks Scott🙂
Gave +1 Rep to @split ore (current: #1086 - 4)
never trust the green bird
it's kind of brilliant to think that power shell and reverse shell are the same type of thing ;)
the green bird died recently
Yeah, don't spoon feed the help vampires. Teach a human to fish and all 🤷♂️
Ah I had Duolingo for ages, learning Norwegian. Then he died.
is power shell some kind of ultra sneaky shell that I don't know about?
Somehow still sending me messages that I'll fail at life if I dont learn another language
any mods online?
What's up?
don't listen to the voices
ye so the thing is like the discord acc which had been used to verify the thm acc to discord got banned so how will i verify with this new acc?
Originally named Monad.™️
is malware the only way for C&C attacks to be implemented?
:hammer: 0x01_levi.#0 has been banned.
But they're very persistent aint they xD
you didn't ask if the ban was server or discord type
ig you can see logs
Why would that change anything? 😆
Phone only stuck on terminal 😔 I really need a laptop 😔
I didnt even know discord could ban someone until I saw it mentioned here a while ago
really cool fun fact for today! 🤩
slight chance it was a false positive discord ban
You should probably read the terms of service lol
They need to take that up with Discord. Even if it's a false positive, they're still violating ToS by signing back up to the service.
Broke, phone-learning cyber terminal tough-tips
I'm rarely ever in trouble so I dont think I'll break rules, I got that common sense most of the time.
yes, it's secretly malware, like the whole windows 😉 😂
truer words have never been said before
I mean it's not just about common sense, there are a lot of important things in the ToS.
For example, the Arbitration law for Americans that was changed a year or so ago, and how they handle your data.
Did you know that your behaviour outside of the Discord platform can actually result in termination of your Discord account?
Always read your terms of service. The fine print is vicious my friend 💀
then we should go back to IRC
where is THM irc channel
Go back to IRC for what purpose? 😆
Because your actions outside of Discord can result in termination? That's more on you than it is us
have you ever caught a joke in your life?
I did not know that, good thing I don't have a life outside of discord. I'll have a look at it after this room though, Thanks ;3
Gave +1 Rep to @mossy river (current: #6 - 1525)
why we do not go back using Pidgin messenger with jabber and OTR 🙂
dude is chronically online 
The discord can tell you about the time I almost died cleaning a toilet not reading the bottle.
Why would I go out when my fridge is here.
🗿cultured
and yes... i'm that old lol
I may not be old much but I've researched forms of comms including it and used it before, I respect it
It's not common enough to find contacts on nor convenient enough to bring new ones though so I haven't been able to do much unfortunately 😢
At least IRC is still somewhat kicking in places like Libera
IRC is alive, allot ppl use it..
Definitely, there's plenty more networks around. But I've been watching the numbers slowly lessen as the years go on
I think I saw a comic on this at some point, hold on
There we go
You know what the defining feature of a joke is?
Love the fact our lecturer uses xkcd posts in his slides lmao
Is this a day of having a stick up your a**?
Nope
The defining feature of a joke is humour
Making a random statement and calling it a joke does not, in fact, make it humorous
Fellas, cut it out 🙏
For example, there is zero indication whatsoever that this statement is even meant to be funny:
where is THM irc channel
Cut what out? 😆
Y'all bashing heads or am I missing something? I'm confused now
Though mentioning that, unironically, does THM have an IRC channel
I mean, I dunno what Scott's trying to do. I'm just stating the obvious though, personally 🤷♂️
It does not
Aw shucks
Well, at least no official one. There are probably some unofficial ones
hello
There's an unofficial IRC channel for everything 😔
When it's officially supported is when it's fun because then you have a small cult following
That's how this Discord server was, back in the day
I think like 4 or 5 open source projects I use tend to be on IRC still
The new may become the norm, but the old will never* shine again sadly
*Unless something very random happens
❤️
Very true
At what level do you get access to malware analysis room?
13 or higher I believe
@sturdy pike
0x13? or 0xD?
shut not the right doc 😂
I mean, I know what are rooms tho
I think you need to be legend or higher
Shouldn't it be 0xA minimum as the room is ranked "medium"?
If you're discussing a specific TryHackMe room, you can ask in #room-help but general questions go in the advanced channels
Not a specific tryhackme room, but in general
Wallpaper of the day:
Looks cool and interesting to see it has replaced everything on that desk with the single device that I am using to reply in discord
tryhackme should add more events like aoc, im wayy to impatient to wait 1 year
WE NEED TO USE DISCORD!!!
You mean like hackfinity battle? 🤣
We should have weekly or monthly events
Maybe something short around Easter 🙂
but no, more like educational ones all the aoc's i've done are so fun and i learned a lot
It used to be once as far as i can remember 🙂
I understand - I can organise smaller monthly community events if that's something people are interested in 😊
Site events to take a lot of planning to setup, and I think having unique events is quite motivating and interesting in different ways
THm have for the last few years have had atleast one event a year.
Revolving around path releases.
Heck yeah
Opportunities to win some THM stickers and swag would be cool...... 😁
Are stickers back in stock?
w8. thm have stickers ?
I'll be restocking them soon 🚀
why i do not see that ?
Cos you dont need them. You just engrave it on stuff instead
i fill my cup to the Brim
104 points
Need to search them, it's cause they're out of stock.
Or just get it tattooed on yourself
can you do ping -c3 10.10.10.10 and get 0 packet lost ?
hacking Wifi is for our advanced chhannels only
ooh alright thanks
Is it possible that you can't record handshakes if you don't have the right adapter?
?
WifI hacking is for our advanced channels. 😄
Òkay which one?
Refer to the link I sent 3 messages previous, please 😄
Okay

dear lord. i just notice my router support wpa3 =/
I'm going to have to refresh my wifi hacking skills, wpa2 first and then wpa3
Gotta read up on wpa3 though
wpa3 is hard to crack
The first 200 people who head to https://brilliant.org/Techquickie will get 20% off their annual premium subscription of Brilliant.
WPA3 looks like it will greatly enhance the security of your Wi-Fi connections - but how does it work?
Techquickie Merch Store: https://www.designbyhumans.com/shop/LinusTechTips/
Techquickie Movie Poster: https:...
Anyone got any good ideas as to why I'm only getting 40 download with a brand new cat6 cable and 1000/1000 fiber 🤔
I get 140 with my old cat5 cable but still nowhere near the speed I SHOULD be getting
40mb download? check
https://www.speedtest.net/
cable is faster from wifi
got vpn active or smth ?
Nope
how far you from router ? if is few walls in between than might be
I am like 1 meter away from the router
that's weird for sure
can you test with a cable first of all ?
Yes the provided screenshot is with cable
is me no vpn wifi
so, where I live theres a lot of bureaucracy, when they first installed the cables in my home, I had to wait some hours for something to happen
then I had my full speed
I've lived here for a few weeks now with fiber available 😦
you are getting a low ping it seems, but speed is locked
honestly if you have that with cable, id call the company
all other devices have same result ?
Yea I called earlier
I get 350-400 download on laptop with wifi
oh
same on my phone
I didnt read your message properly, im sorry
All good 😄
now I see that you mentioned that before
What is even more weird is that my old cat 5 cable gives 140
brand new cat 6 gives me 30-40 which I find weird
Maybe that new cable is bad
yea could be but 140 is still in the low end for 1000/1000
ski 🎿
try do speed test with other devices. migt that will show if smth is up to laptop?
do you have another device which you plug the cable to test ?
that way you would exclude if the problem is the device, the cable or the router
etc
Three is cool, transition mode is less fun
I'll try that
Good idea
yea so my laptop gets 200 download with both cat5 and cat6 and 500 download with WiFi. I'm starting to think the issue is with my network adapter
what router you have? Default ISP provided or ?
Icotera i4882 wifi 6
that is from isp that you get or ?
Yes
is it have network acceleration as option ? to enble/disable?
@inner walrus is me on cable
so far looks ok. as no issue aside devices need to recconect
Depends if you have the PMFs but it means it's just WPA2 and 3
The secured open part of wpa3 is good
But transition mode less so
Can still cap handshakes etc in the same way
just my old laptop does not pick up 5ghz network when on wpa3. for some reason is not visible in network list =/
I don't see any network acceleration as an option
then myght is up to router it self or not all speed is up from provider... or who knows
Yea idk. I called them earlier to get tech support cause clearly something is wrong
I suspect it is my network adapter in my pc tho
they can test speed up to you device for sure. and if is ok then is smth else
hence the default isp sux for 99% of time 🙂
🎉
yea we'll see I guess
thanks for all your help and input guys
np. if you can buy custom router. for sure is better to do so if get some nice one to play with 🙂
WPA3 isn't perfect either.... yet 😛
Still a good improvement at least
oh yeah
and if it was used correctly, it'd be reasonably secure
but some implementations leave small field size of m
is it better to use hardware acceleration of software one as option ?
wazzup guys
sky
Better than WEP 
I’ve drunk so much water and I feel so dehydrated
Like my tongue is glued to the top of my mouth
to much water can be harmfull
[ drink water reminder 🔔 ]
water will come into body/cells soon
if you go pee and is white that means you have enough water in body, if yellow then not so much
I don’t know if you saw the chat or not, if you didn’t that was great timing.
I literally pee after every drink I drink.
It’s awful
i read 'thirsty' then scrolled up haha
My body does not hold water
color of pee is indicator
Ngl I don’t inspect my pee 😂 so I don’t know but I can tell you I have had many issues
[ chapstick reminder 🔔 ]
I pee often, too often
well.. try it hehe
Omg that’s so weird I just put Vaseline on my lips. 🤣
if you eject to much water it can lead to dehydration
Are you in my room veggies
i just put on my Burts Bees chapstick on
no, just oddly on time with reminders haha
Gotta do it in this weather. The cold is no good for my skin or lips fr. I did a sugar scrub a couple days ago on my whole face
ooh those are so nice, luxury skin
Yeah it’s really annoying 😖
Yeah it’s just sugar and coconut oil. It’s home made
whaaaaat homemade skin treatments ?? that can happen hahah
part of the selfcare protocol
The natural stuff is so much better
like uranium natural
And I’m nice and smooth
smooth operator
Nah now I’ve posted that gif it feels creepy 😆
I take back the gif
It’s weird, make it stop
del
😆
[Delete]
Tadaaa
🎉
Sade – Smooth Operator
Director - Julien Temple - September 1984
The official YouTube channel for the British iconic band Sade www.sade.com
Sade (vocals)
Stuart Matthewman (saxophone / guitar)
Andrew Hale (keyboards)
Paul Spencer Denman (bass)
Spotify http://smarturl.it/Sade_TopTracks
Apple Music. http://smarturl.it/SadeEssentials
Amazo...
i KNEW you would come along and post this, why i didnt
Sade is golden
nosicles ?
⛄ "Sweet and Salty"
Even the cat has been sleeping under the blanket
the cold make cat go burrrr instead of purr
Yeah, I can’t do it though. I have to at least breathe colder air.
heated socks with rice , that will help unless you have branded magic bag
Ngl it sounds good but I don’t have rice or a magic bag
I’ll just have to freeze
🥶 no fun
Wsp
I THOUGHT 💀
have a great evening y'all
yo guys, should i get chrome os for daily pc and learn visual basic ( all for cyber sec )
if you like to be stuck inside a chrome browser go for it. That's how I felt when I used it
I felt claustrophobic
what about visual basic programming language
for cyber sec
Wow,. visual basic, that's old.
not in this century 😂
i think that chome os + visual basic is the best for cyber sec
I need a hand sudu apt install <file-name> ( have the file in / Downloads is the update for discord but it will not work on my kali 😭
if you already think so, why ask for opinions, just do it
im asking if im thinking good
here is a 🖐️
you're thinking wrong
Damn u