general

[shell nova]

Bee made rustscan

[sick lance]

Didn't bee write Rustscan?

Yeah, she did

[sand trench]

two moderators and jabba the admin in chat talking
and then you pop in and offer illegal services

[sick lance]

Kek

[queen flare]

oh, so she's the actual developer of rustscan?

[sand trench]

[queen flare]

[shut hawk]

ya

[shell nova]

They aren't the smartest in the lot

[sand trench]

time to post this document of every credit card pin code

[shell nova]

Depends on the scope of the test

You want to find as many bulbs as possible in a pentest, why limit yourself needlessly

A red team on the other hand usually has a very specific objective

And there, stealth is key

[ashen marsh]

their*

[shell nova]

If soc catches the scan on a pentest, then good on them

[shell nova]

No, there

Maybe missed a comma

[queen flare]

without a port scan, how do you know what ports are open
and if you don't know what ports are open, how do you decide how to attack a system?

[sick lance]

If you're going to correct English, make sure you're correct.

[whole axle]

HY HOW ARE YOU?

[shell nova]

Poke at it with a stick

[sick lance]

WHY ARE YOU SHOUTING?

😄

[ashen marsh]

i didnt knew the context i thought he was refering to people

[shell nova]

We back in '96?

[shell nova]

Gotta read the context, mate

[ashen marsh]

okok

[boreal gull]

ywah

it me

[sick lance]

Cups and a string is much better, it's more secure than shouting.

[shell nova]

English is a highly contextual language

[sick lance]

@cosmic pendant seeks help in Rust.

[queen flare]

hi, nice to meet you

@boreal gull

[lusty bramble]

Anyone solving the hackfinity on THM?!

[shell nova]

Not all companies have in house competence

[sick lance]

#1347217239492919346

[native iron]

yes

[cosmic pendant]

I'm just wondering about it compared to Java.... I already chatgpted. But Im wondering if it's ... the next thing for me to learn.

[sick lance]

But a pentest isn't simulating a real world attack.

[boreal gull]

I think this happens because the server cries

[shell nova]

To be fair, you will be going much further than a simple port scan on a pentest

[cosmic pendant]

Yes

[boreal gull]

thanks!!

[twin ridge]

Gave +1 Rep to @slate quarry (current: #2750 - 1)

[cosmic pendant]

and we shouldn't do that in prod and miss results 😄

[ashen marsh]

i was looking at ur github page the other day

[shell nova]

Prod servers are fragile and susceptible

[boreal gull]

I'm sorry

[ashen marsh]

i m impressed

[lusty bramble]

May someone please just help me once for hackfinity…🥺🥺

The only task ghost phishing(task 14)

Seems I’m doing way more than expected

[shell nova]

Glhfdd

[native iron]

same i guess we have to use macros but thsts too much

[ashen marsh]

i reaally liked ur work

[boreal gull]

oh thankssss

💖💖💖

[lusty bramble]

Buts I can’t get anywhere

[native iron]

is your team on scoreboard we were 95 and now its noot shoeing

showing*

[shell nova]

Probably gonna have to mute people who give hints, yeah

[sick lance]

Please find a team and Collab, asking for hints and help is against the rules.

[ashen marsh]

why did u said i m sorry

[lusty bramble]

Yup on 113 ig

[lusty bramble]

I’m sorry😞

[native iron]

hmm we are not on the score board any mmore

[native iron]

sorry

[lusty bramble]

😩😩huhhhh

[sand trench]

where is that time machine shadow saved to speed up package delivery again

[sick lance]

It's ok,.I don't want to you banned and / or removed from the competition.

[upper knoll]

Afternoon chat!

[sand trench]

fkewiorfgnm2480794tn9u23q9unfg

[sick lance]

Shadow, stop typing your passwords in here.

[sand trench]

okay

[sick lance]

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1536)

[mental fiber]

Recently Attackbox's slow, is it just to me?

[sand trench]

thisPasswordIsAReminderToNotPostYourPasswordsInFrontOfScrubz!142389

[sand trench]

could be the influx of users using it for hackfinity

[mental fiber]

My dorm internet speed might be slow..

[mental fiber]

Okay, takes a little more but no problem

[blissful current]

same , dorm wifi lmao

[mental fiber]

dorm wifi..pain

[blissful current]

half of the time it would randomly show Connected,But No Internet

[mental fiber]

lmao

[native iron]

throtle it

[blissful current]

even rn im on my mobile hotspot lol

[blissful current]

its some cheap ahh router and the plan on it is even worse ...and no 5GHz

[native iron]

search wifi throttling

[native iron]

lmaooo

we got admin access to our clg's wifi admin panel

so we created an account with no restrictions and unlimited data usage

[blissful current]

even i have the access to this wifi , half of the time i block my annoying roommate off the wifi

[native iron]

ahahahaha

[queen flare]

lmao

[mental fiber]

Once dorm has slow plan, may no solution

[queen flare]

does he know

[blissful current]

ofcourse not , he makes too much noise pollution in the room , so , yeah deserves it , even during one important job related call i told him to be quiet , started watching reels on full volume

[mossy river]

Probably best not to admit to crimes here

[native iron]

no crimes we created the cyber sec club we have permission to do these things

[blissful current]

[mossy river]

Permission from whom? 😆

[upper carbon]

Hey there guys. Do you think it's possible to actually have a good (monetary terms) life working as a full time bug hunter? But not for a specific company, like, for anyone on hackerone etc

[mental fiber]

Just 'little' kidding, right?

[mossy river]

I’d hope it’s a written signed contract

[native iron]

sys admin

[queen flare]

is it a crime to block roommate off wifi

[blissful current]

tough imo

[mossy river]

If you don’t pay for it then yes

[upper carbon]

Why?

[blissful current]

Temporarily! YK , like 30-40 min

[native iron]

better to change the usr and pass it was cisco cisco

[alpine aurora]

Do I buy it?

[queen flare]

yes

[mental fiber]

Just SUDO it

[queen flare]

and then to live up to what you wear
write a script that deletes everything and execute that with sudo permission twice daily

[alpine aurora]

Done now i waite for it

[mossy river]

Even if it was default, it’s still unauthorised access

[blissful current]

(Might be wrong its just my personal opinion, if someone wants to correct, may do pls) i mean will depend on skills , many are already doing and the CVEs (IF there are any) get found easily by the ones who dont touch the grass , so gotta find out absolutely new vulns

Or perhaps be the first one to find it

[native iron]

yes

[blissful current]

thats why it tough to make bug hunting on H1 or BugCrowd as main Income source imo

but definitely go try

[native iron]

a trick do auth verification with 2 devices works every time

[blissful current]

👀

[native iron]

yea login in 2 devices with same id

end 1 session

and look if other session gets terminated

mostly not

[blissful current]

hmm...interesting

[queen flare]

i'm being slow with this cybercapa tutorial room cause of how many charts there are

making notes is gonna be a hell of a work

[blissful current]

my brain has been fried from the trash college , imagine being taught Biology, Environmental studies , History, and 5-6 more useless stuff to Comp Science Stream Students rather than focusing on real important stuff

[upper carbon]

but that's your personal experience too?

[mental fiber]

There's no way to change ur major?

[blissful current]

kinda , i tried to find some CVEs on both the platforms , but many possible CVEs are either patched or found

[blissful current]

well i survived 4 yrs already its my last sem anyways

[mental fiber]

Well done bro

[blissful current]

🫡

[mental fiber]

I'm CS major but in my univ there is Cybersecurity major

[blissful current]

even the people in my college are like sheeps bro like , everyone just do Web dev ..like come on

[mental fiber]

should major that from first

[thorn steppe]

Who is playing the Hackfinity CTF ??

[topaz pivot]

Same here...!

[blissful current]

meanwhile my college has tons of streams but the students are taught outdated and irrelevant stuff , imagine Cyber branch students as well having Web Dev projects on their profiles 🤡

[mental fiber]

Web dev..future client. the more, the better

[carmine tinsel]

I mean, that’s part of being a well rounded person, learning about the world beyond computer stuff

[blissful current]

cant deny that either , business for us

[mental fiber]

My dorm's internet finally failed to start attckbox

Come on wifi you can do it

[blissful current]

true but making Comp science student and focusing more on that than actual comp science subjects is what i meant

[carmine tinsel]

ahh

[blissful current]

lol i get that a lot too

[normal zephyr]

i would be intrested in doing the battle, but dont know hacking

[mental fiber]

When click, loads it in a few sec

[late matrix]

I am doing File Inclusion Lab Challenge-2 and need some help. Stuck. Not sure where to go. Where can I find help?

[carmine tinsel]

#room-help

[native iron]

what SS

[blissful current]

exactly same shit lol

[humble coyote]

yes

[shy finch]

#room-help

[normal zephyr]

why did it failed?

[late matrix]

Web Fundamentals

[blissful current]

Dorm Internet is the fastest thatswhy

the website is too slow for dorm internet 😹

[mental fiber]

Dorm Internet's too slow to load it in time lmao

[normal zephyr]

lmao

how much kbps or mbps?

[late matrix]

It says Welcome Guest!
Only admins can access this page!

I used curl to set cookie so that it is an Admin user. That seems to work. But I wasn't given a flag at that point.

[blissful current]

bruh that reminds me of my previous dorm it literally used to give speeds of 0.2Mbps(Mega Bits💀) on speed tests

[late matrix]

It says failed opening 'includes/Admin.php' and I can't seem to get past that.

[blissful current]

#room-help

which room btw?

[late matrix]

File Inclusion
This room introduces file inclusion vulnerabilities, including Local File Inclusion (LFI), Remote File Inclusion (RFI), and directory traversal.

I am at 80% done. Second last challenge..

[mental fiber]

☠️

[obsidian token]

gm all. up doing the soc analyst simulator. any pointers?

[blissful current]

ok wait

[late matrix]

http://10.10.77.136/challenges/chall2.php

Actually I think it has timed out by now.. but that is the challenge. Challenge 2.

[blissful current]

LFI#2?

[late matrix]

Trying to paste a screen capture..

[blissful current]

ok

[late matrix]

Can't seem to do that.. I'll screen scrape.

Steps for testing for LFI
Find an entry point that could be via GET, POST, COOKIE, or HTTP header values!
Enter a valid input to see how the web server behaves.
Enter invalid inputs, including special characters and common file names.
Don't always trust what you supply in input forms is what you intended! Use either a browser address bar or a tool such as Burpsuite.
Look for errors while entering invalid input to disclose the current path of the web application; if there are no errors, then trial and error might be your best option.
Understand the input validation and if there are any filters!
Try the inject a valid entry to read sensitive files

Answer the questions below
Capture Flag1 at /etc/flag1
[completed this one]
Correct Answer
Hint
Capture Flag2 at /etc/flag2 --> This is where I am stuck.

[blissful current]

oh ok in the challenge part , hold on let me check what it was about

wait ,

[late matrix]

I set the cookie THM "Guest" to value "Admin".. which seems to help

[normal zephyr]

just trying to understand what kind of game is this

[late matrix]

But after that I'm stuck.

[blissful current]

the hint would be that u have to use the filteration and ../../ (Directory reversal techniques to reach the flag)

from chall2.php itself , admin.php is not required to be accessed

[blissful current]

what game

[normal zephyr]

the hackfinity battle isnt justa game

all i know about it is that it a game hackers use to play to test there skills

[orchid pawn]

And you can win money

[blissful current]

ya its a CTF event (Capture The Flag)

[normal zephyr]

not sure about it in my knowledge no its not every time,like in the game given in this server, it would just be for a test

[blissful current]

This one has prizes for Top 10 teams

[cerulean nest]

i legit slept 2h yesterday

[normal zephyr]

what kind of prizes nitro, dollars?

[cerulean nest]

1 minute

[modest thicket]

9am time to start brewing the bean

[blissful current]

dollars , free THM subscription vouchers , Merches and stuff

[cerulean nest]

whens the 2nd round of challs drop

[hybrid plover]

how to do the osint challanges , i did the first one but the second one i cant seem to get any information

[cerulean nest]

oh osint is hell

[normal zephyr]

so hackfinity gives dollars on winning, can we use chatgpt to solve the problems? instead of solving them by ourselfs

[hybrid plover]

well chatgpt is dumb

[normal zephyr]

it will make the solving challenges ealy and faster

[hybrid plover]

idk there is a mural of pele kissing batman , what kind of incoding is in that man

[sand trench]

one large beanie please

[hybrid plover]

are u a student

[normal zephyr]

yes.

[late matrix]

@blissful current I think I need to do this with curl because of the cookie.. then -d "file=includes/../../../../etc/flag2" or something like that.. is that close?

[normal zephyr]

you can use diffrent ai tools

[hybrid plover]

well , then try the chalanges , solved 1 so far 😭

[blissful current]

Ha ha it won't help

[hybrid plover]

i dont know , maybe , probably, dont think it will help too much

[forest gull]

It's easy

[blissful current]

Till some extent it can but will not completely help u find the answers... You'll have to do it manually

[normal zephyr]

why? are the challenges above ai understanding?

[hybrid plover]

i spent 20 minutes trying chatgpt to come up with 5letter flags and it kept giving me 4 letter ones

[blissful current]

Ya.. Use Burp Suite

[hybrid plover]

its easy for u when u are literaly batman

[cerulean nest]

not telling u

but uh

[forest gull]

Tell me what you did

[cerulean nest]

its in plain sight ❤️

[blissful current]

Ikr I tried too!😹😹

[cerulean nest]

i wanted to legit end myself when i figured out osint2

[forest gull]

Yaa

[cerulean nest]

and im not even a beginner to OSINT

so uh

gl

[mental fiber]

I tested my dorm wifi but its 43mbps

[blissful current]

Same lol

[mental fiber]

But attackbox is still slow, why?

[hybrid plover]

well there is some words but idk what they mean , tried diff combinations

[cerulean nest]

cause ppl ddosing tryhackme

[blissful current]

Latency maybe

[analog drift]

why lol

[cerulean nest]

usage is at highest rn in history or smth

[cerulean nest]

hackfinity

[forest gull]

Strings

[hybrid plover]

is accualy inposible yo find the exact mural on hgoogle maps

[analog drift]

that’s an opposing course website right?

[cerulean nest]

its easy

just

[blissful current]

It's easy to find

[analog drift]

i’m newer to this stuff

[cerulean nest]

look at it really hard

[mental fiber]

hackfinity is an event?

[cerulean nest]

: D

yes

[blissful current]

Yes

[hybrid plover]

ye but there isnt going to be a flag on it

straight up

or is there

[forest gull]

There is

[mental fiber]

When its due?

[cerulean nest]

hmm

idk man

[mental fiber]

Better try after it

[cerulean nest]

look really hard

with ur eyes

👀

at every bit of the image

[blissful current]

On Osint 2/stego?

[hybrid plover]

am on the bus so i have to check when i come home

[cerulean nest]

yea

[hybrid plover]

yes thats what i am on

[normal zephyr]

We use cookies to ensure you get the best user experience. For more information contact us.

[blissful current]

[forest gull]

You should not use stego only OSINT

[normal zephyr]

using cookies then i get hacked

[hybrid plover]

whats stegi

stego

[blissful current]

Steganography

[hybrid plover]

what is that

lol

i thought you meant osint 2 stage

[blissful current]

Something lmao.. To shift bits of the picture to find hidden messages

[hybrid plover]

😂

[blissful current]

Lol

[hybrid plover]

wow

didnt think of doing something like that

[forest gull]

Yes I tried 🤣

Collected all words 🤣

[hybrid plover]

tha chances of me winning any prize alone is like 0.000007%

[blissful current]

Me too.. Shifted like 1000 times when I first got on it xD

[forest gull]

Check message bruhh

[blissful current]

Same I gave up.. People already reached 900 points I'm barely around 100 or less idek

I have some other college work anyways so can't rn

[forest gull]

play chess instead of this

[hybrid plover]

am already too good at chess but crap at this 😭

[hybrid plover]

i am on 15

[blissful current]

I'm crap at both 😶‍🌫

[hybrid plover]

lets say there is hope

[blissful current]

Yo.. Damn..

[normal zephyr]

@blissful current @hybrid plover i opened the track me now i am just solving some MCQs

[blissful current]

Oh wait u meant? 15 points?

[hybrid plover]

yes

[blissful current]

I thought u said ur age or something

I was like he's 15 and already started thm

[hybrid plover]

that would be nice

[blissful current]

😅

Ikr

[carmine tinsel]

You’d be surprised, there are quite a few young teens in this server

[blissful current]

No doubt of course

[hybrid plover]

probably much younger than 15 as well

lucky them

[blissful current]

Don't depress me now 😶‍🌫

[normal zephyr]

@blissful current @hybrid plover

[blissful current]

What?

Career path quiz?

[normal zephyr]

no after that

[hybrid plover]

track me u mean try hack me

lol

[blissful current]

[normal zephyr]

fr

how to get to the battle? @blissful current @hybrid plover

[blissful current]

Nice status

[blissful current]

Click on Learn tab on top then on challenges, then search Hackfinity

Nice.. Hits hard

[grizzled wing]

why is Yoda so pixellated ?

[carmine tinsel]

im honored to be quoted xd

[grizzled wing]

a jpg from 1998

[unkempt tide]

Any hint for ghost phishing or stolen mount

[carmine tinsel]

scrubz is gonna bounce on my ass no way

[grizzled wing]

👻

[split ore]

hello chat 👋

[blissful current]

I thought asking for hints and all was against the rules and everyone here is asking 🤓😹

[normal zephyr]

the challenges will begin in march 20 am i late? or its a time zone diffrence
isnt it 18 march right now?

[grizzled wing]

hello magician

[blissful current]

It's ongoing already

[split ore]

if challenges start march 20 you have two days..

[grizzled wing]

Scott (eyyy)

[split ore]

but I've heard they had begun

[split ore]

Eyyyy

https://tenor.com/view/michael-scott-jim-halpert-ayyy-eeeyyy-gif-25522436

changed to my THM's nick

[grizzled wing]

i see

[blissful current]

[split ore]

on the other note, I was just a big fan of Michael, it's not corelated to me in any way 😆

that nick stuck to me tho

[grizzled wing]

what magic do you do ?

[split ore]

they use chatGPT to sum it up for them, and then won't read it anyway lol

[grizzled wing]

Jabba said he will make a tiktok for the THM rules

[split ore]

I can unchain myself while being completely chained

after I eat the key

had to google that tho

[grizzled wing]

hopefully no one steps on the key

[split ore]

I'm watching you Jim..

you won't get me next time

[split ore]

I guess that's an idea for increasing site popularity

[modest thicket]

hey! harold houdini did something like that!

[grizzled wing]

i said it as sarcastic comment about how new users do not read the rules when asking about illegal stuff

[split ore]

oh, aight 😅

My noodle really thought THM tiktok is real

or at least unoficially

[grizzled wing]

i have no idea, never used that app

[proven goblet]

Hello everyone, i'm learning pentest on tryhackme platform. When i connect openvpn to tryhackme on kali linux, on terminal noticed succeed but tryhackme skill Not connection. Help me, thank you.

[split ore]

#room-help

Why does nobody read the rules anymore...

anyway back to the topic 😆

[blissful current]

+1

[grizzled wing]

🖨️ jam

[proven goblet]

sorry, forgive me :(((

[grizzled wing]

Pam !

[split ore]

https://tenor.com/view/tobey-maguire-peter-parker-sandman-spiderman3-i-forgive-you-gif-23309359

[grizzled wing]

cat forgiveness.txt

[blissful current]

It's alright don't worry 😊

Permission denied

[grizzled wing]

its fun to # then type and see what channels exist

[blissful current]

Hmm

[split ore]

cat default_apology.txt
cat default_forgiveness.txt

when stock price drops

[sand trench]

#room-review

[split ore]

almost felt like ppl would really use SSH in everyday life

[grizzled wing]

cat michael-scott-paper.php

[split ore]

https://dunder-mifflin.netlify.app

[grizzled wing]

did not know haha

[split ore]

just googled it myself 😆

sorry, ducked-ducked-goed

[grizzled wing]

ddg 🦆

[main meadow]

is the hacking battle fun? i dont have time for it 😦

[grizzled wing]

quick fun now!

instant fun !

[split ore]

fun? Where? Where? Pam, bring the champagne bottles!

[slate wraith]

https://tenor.com/view/freak-freaky-cat-level-infinity-gif-15287917168381984815

[grizzled wing]

is that ted mosby in your profile picture?

[normal zephyr]

well thats strange

[slate wraith]

nah

[grizzled wing]

then who?

[normal zephyr]

The competition will run from March 17th at 14:00 (GMT) until March 20th at 23:59 (GMT). The challenges will be made available in this room when the competition starts.

While you wait for the competition, feel free to try the challenges from our catalogue to practice!
thats what i am getting

[slate wraith]

kevin mitnick

[grizzled wing]

ok

[normal zephyr]

so i am one day late

[blissful current]

Yes

[normal zephyr]

is it because of time zone?

[split ore]

complete shut down hahah 😆

[normal zephyr]

your is 17 march mine is 18 march

where do you guys live?

[blissful current]

Today is 18th march

It started yesterday

[split ore]

depends on how you look

and where you live

[grizzled wing]

Jupiter

[split ore]

tell us

[normal zephyr]

yea then why i am late and you are not??

[normal zephyr]

lol

[split ore]

why do ppl with level 0 love asking #general where they live 😭

[normal zephyr]

delulu is raimbow? in which language?

[split ore]

oblivious

[grizzled wing]

"where do you live?"
in your computer

[warped adder]

Red team o blue team! Wich one for a begginer?

[blissful current]

Understandable

[grizzled wing]

both have to be learned

[warped adder]

First one?

[normal zephyr]

oblivious in what? isnt that the context?

[blissful current]

Purple 🟣

[grizzled wing]

https://tryhackme.com/path/outline/pentesting

[blissful current]

Blue u can

[slate wraith]

where do u live?

[boreal scarab]

https://tenor.com/view/brain-is-suicide-gif-18912146

[grizzled wing]

break it then learn to block breaking

[normal zephyr]

...

[grizzled wing]

the journey is yours

[boreal scarab]

DID SOMEONE SAY BREAK IT?!?!?!?!

[blissful current]

💀

[normal zephyr]

code : broke it again

[sand trench]

still waiting for the screenshot of beerrise blue screening a linux machine using systemd bsod service

[split ore]

Kansas

[sturdy pike]

Yellow World.

[slate wraith]

take me there

[split ore]

Yellow submarine

[split ore]

ur a girl?

[slate wraith]

no

[split ore]

hell yeah

hop in

sweet

https://tenor.com/view/the-office-dwight-dance-michael-scott-steve-carell-gif-17343022

[azure mulch]

[sand trench]

meep meep

[mossy river]

Can we keep discussions appropriate for the discord server please @slate wraith

[split ore]

bro got banned to a shadow realm

[split ore]

Ferb, I know what we are gonna do today!

[slate wraith]

i think its general

[split ore]

inapropriate

instant ban

[slate wraith]

😭

[versed oar]

Hello everyone i had questions related with sni bug hosts?

[loud marlin]

@boreal scarab T- you fucked smth: <t:1742309838:R>

[sand trench]

YAY

new personal best

[proven lark]

[crystal mauve]

Dayumn

[rapid merlin]

Which app

[crystal mauve]

U know the transcribers in court, they do 120+

[sand trench]

monkeytype.com

[sand trench]

yeah but those typing styles also remove the vocals while typing and use some shortcuts to write faster

[west ingot]

hackfinity is locked??

[slate wraith]

im better

[sand trench]

not even the 60 second test....

[viscid jacinth]

you took some time to ramp up haha

[crystal mauve]

What do u mean remove the vocals?

[split ore]

he was accelerationg

[crystal mauve]

Vowels?

[slate wraith]

wait

im trying to prove the site that im not a robot

[sand trench]

yeah vowels

forgot the word for a bit

[crystal mauve]

Yeah they use a weird keyboard too right

[azure mulch]

"46 wpm" cute

[viscid jacinth]

what being on a keyboard from a young age does to a man

[cerulean nest]

tryhackme tells us to touch grass?

no way

[azure mulch]

Dangerous, it frightens the shit outta me

[full pivot]

Are there any good rooms on bots and setting up a botnet?

[cerulean nest]

fr

[cerulean nest]

💀

someone please find where this guy lives

[ancient mirage]

the hackfinity battle room is locked?

[cerulean nest]

and report to the FBI

[toxic fjord]

the hackfinity battle room is locked?

[crystal mauve]

#1347217239492919346

[sand trench]

nice good job

[full pivot]

Ok. I'm not wanting to do anything illegal. I was just reading about botnets and wanted to see if there was a room that actually had all this setup.

[sick lance]

Why do you need a botnet?

[wheat ocean]

What exactly constitutes a "student"? Do you have to be enrolled in an accredited university? Is anyone interested in teaming up for this CTF?

[sick lance]

Yes.

[full pivot]

I don't need one, I was reading about them and wanted to learn more that's all. Nothing nefarious guys.

[zealous shell]

Sheesh all that while fixing those mistakes 🫡

[wheat ocean]

Yes looking to team? Or Yes to must be in Uni

[boreal scarab]

Maaaaaaaaaybe

[loud marlin]

sometime i think that you are proof that we evolve from monkey's ❤️

[crystal mauve]

It's more believable we were chimps genetically spliced w alien dna

[loud marlin]

that make more sense yes

[orchid pawn]

why its not working

[crystal mauve]

Maybe don't copy paste

[full pivot]

YOU'VE_GOT_MAIL

🙂 kidding - bad joke

[ashen marsh]

i think so tere is space

[hoary pier]

guys help me

im stuck on my very first room

[ashen marsh]

in the front

[orchid pawn]

i did not copy paste

[ashen marsh]

which one

[ashen marsh]

which roon

[orchid pawn]

extending your network task 6

[crystal mauve]

#room-help

[hoary pier]

offensive security

[full pivot]

@hoary pier , go to #room-help

to get the best help

[ashen marsh]

task

[full pivot]

Title your question with the room and task

[crystal mauve]

This chat is for alien conspiracy plz

[hoary pier]

i did no one is replying

[ashen marsh]

off sec intro

???

[hoary pier]

yes

task 2

[loud marlin]

@sand trench if you looking for some H.P.Lovecraft space horror alike movie. Color Out Of Space
https://www.imdb.com/title/tt5073642/

[hoary pier]

hacking ur first machine

[split ore]

you go to #room-help or ban is incoming

[mossy river]

@ashen marsh Please don't post answers here 🙏

[ashen marsh]

sorry

brother

[slow cloud]

👮

[split ore]

Jabba dealing with this sh every half hour 🙏

we got u bro

[slow cloud]

jabba the boss

[crystal mauve]

I got this book , bought it just for the cover 1$ so good

[lyric vortex]

Guys is it okey to save all my passwords in google password manager?

[loud marlin]

i got H.P.Lovecraft books and so.

[lyric vortex]

because from few days i am noticing some suspicous activities on my accounts

[slow cloud]

you should write it on a sticky note and leave it under your monitor or laptop

/s

[mossy river]

Yes that's fine

[crystal mauve]

Ooo a cyber stalker

[slow cloud]

im not too sure about the security or privacy in google password manager but bitwarden is a good option

[lyric vortex]

i am using random generated strong passwords from website and using them now i cant remeber them all so i saved them in pass manager

[loud marlin]

no. use password manager

bitwarden or so

[mossy river]

Elaborate?

[crystal mauve]

What kind of suspicious behavior?

[lapis berry]

how do i do the game hacking

[slow cloud]

bitwarden good option

can also be selfhosted

[loud marlin]

mean. not google one. at last i have not use it as default

[lyric vortex]

thats before now i changed and 2fa on

[slow cloud]

good

2fa should always be on

[mossy river]

But surely there's a reason why not? 😆 other than just saying no

[lyric vortex]

i havent heared of bitwarden

[slow cloud]

https://bitwarden.com/

[lapis berry]

how do i doo the game hacking hting

[loud marlin]

idk for sure. i guess is ok. just not know so much ppl use it as default one

[crystal mauve]

I use the same password for everything the name of my dog and 123

[slow cloud]

even just using a password manager is already a step in the right direction

[modest thicket]

@mossy river are you Jabba Bravo?

[mossy river]

I am yes

[modest thicket]

The Arch User 😮

[lapis berry]

well how do i do the game hacking thing

[lyric vortex]

i have to make sure my gmail is safe

[slow cloud]

good password, 2fa etc

should be fine

[lyric vortex]

yes enabled thnx

[umbral bay]

The answer might require a tick versus an apostrophe character.

[orchid pawn]

it worked now

https://tenor.com/view/tyler-rhoades-andrew-ttrpg-rpg-dnd-gif-8148931356507212128

[lapis berry]

memes never stop posting

[true urchin]

how to search teams in event

[blissful current]

#1347596231551225887

[true urchin]

not like that

search for my team which ranking it is

[blissful current]

Oh.. Idk I forgor

Ask mods

[true urchin]

alr

I dont want to tag them tho

[blissful current]

It should be on scoreboard on the website itself I guess

In the drop down menu MAYBE

#1351230456187846788 Or just ask it here.. Someone might answer

[blissful current]

@true urchin

[true urchin]

alright I will thanks

[twin ridge]

Gave +1 Rep to @blissful current (current: #2750 - 1)

[hoary pier]

..

[sand trench]

https://store.repebble.com/

IT IS ALIVE

[warped adder]

Someone wants to explaim me some concents or tipsss?
I am a begginer

[loud marlin]

for real... AdGuard block linux update =/ dheck...

[sand trench]

probably because random domain names that get put in block lists

[loud marlin]

yea... just looking at it. need to add nl. into allow list

[sick lance]

Mods aren't site staff

[blissful current]

My bad didn't know

[cerulean nest]

where's the

here is the code with the password hardcoded

task 32

[sick lance]

#1351230456187846788

[cerulean nest]

yeah someone asked but no answer yet

[sick lance]

That's the channel to use though, not this one.

[cerulean nest]

oh kk

[ashen marsh]

just curious can

we use DDOS attack in hackfinity

i m not playing

but just need to ask

??

[true urchin]

I don't think so

[ashen marsh]

because its not mentioned in the rulebook

i thinks so mods can tell

[ashen marsh]

i know we cant use brute force but what about DDOS

??

[true urchin]

I don't get why you would need to use it in the first place

[ashen marsh]

https://tenor.com/view/ferass18-gif-7869831930024597864

For Good intentions

[umbral bay]

There is a team search now on the Scoreboard page in the room.

[true urchin]

It does not load for me

[true urchin]

🤔

blackhat activities

[opaque flax]

What exactly would ddosing get you? How exactly will that get you a flag?

[naive violet]

No that's just a crime

[true urchin]

That's the same thing I was thinking

[naive violet]

Besides it's internal to the THM network

[true urchin]

The fact he also sends that gif and says "for good intentions"

[ashen marsh]

i was just joking

i said i m just curiou

curious

[wary ocean]

Speaking of ddos, is it legal to do on your own network or will the Wi-Fi company complain

[opaque flax]

“It was my friend who sent the message not me I swear I didn’t mean it”

[drowsy dust]

https://tenor.com/view/gif-gif-23738466

[true urchin]

wasn't me ahh

[chilly veldt]

It's not legal at any point, you're using infrastructure that you don't own, the first d in DDoS means distributed, aka something that takes place from different areas not only one

[opaque flax]

Brb gonna go get my own set of zombies on a internal only lan with no outside network connection devices I own and ddos that

It is now legal

[alpine aurora]

hey all how are you all doing this fine night

[ashen marsh]

fine

what about u

[harsh surge]

Pwning the last few challenges

What about yourself

[ashen marsh]

of hackfinity

??

[harsh surge]

Yeah

[alpine aurora]

im fine have to tune up my music bc i dont like to hear my neighbor dog no mae 3 days i have now its my time

[harsh surge]

Still a way to go, but so far it has been preem

[ashen marsh]

will i be able to access to hackfinity questions after

[harsh surge]

Almost done

[ashen marsh]

it ended

[ashen marsh]

u on top

or what

[harsh surge]

We have a few members without student mail so we not on the board "yet"

But that is work in progress

[ashen marsh]

will i be able to access to hackfinity questions after it ended

[harsh surge]

Sure!

Absolutely

[ashen marsh]

okok

[harsh surge]

Happy to help, maby I'll even write a couple of writeups

How you guys doing so far, without spoiling stuff

[alpine aurora]

i do hate Premium

[warped adder]

Someone apropves de certificetd secueity + ?

[ashen marsh]

from where can we do osint

what things should we know before we start

[harsh surge]

I wish I could answer that question without spoiling or giving away clues.

Just make use of references online about OSINT. Look at some of the most commonly used tools and understand the actual question or task that is given to you

That's all we can say

[ashen marsh]

any prequiste knowledge one require

to do this

[alpine aurora]

ohh msfconsole

[ashen marsh]

okok

thank you

[leaden aspen]

dang they added new challenges into hackfinity

[topaz pivot]

Hey guys good night 😄

[knotty pendant]

https://tenor.com/view/riczus-gif-13315984002290673339

[wary ocean]

ptsd from osinting too much

[knotty pendant]

Can you osint for me

This guy

[wanton forge]

hey i am new here to the server and the field

[loud marlin]

ello new, im ralex

[blissful current]

[sick lance]

What for?

[sick lance]

Why are you asking members to osint other profiles?

Did you know this is illegal?

[novel ingot]

lol bless the patience of the moderators

[loud marlin]

oh boy

[sick lance]

So you know it's illegal, but they can't do anything about it?

[novel ingot]

if it was me you'd be gone already

[grim sparrow]

:hammer: ftoppe#0 has been banned.

[blissful current]

[novel ingot]

well

[blissful current]

lol

[novel ingot]

deserved

[blissful current]

+1

[sick lance]

As much as people would love it if they were banned instantly, we would like a user to re-think their actions, and possibly have a change of mind/heart.

Give them enough rope to hang themselves.

[knotty pendant]

I just saw a wesjet swoop😳

And got a pic

[sick lance]

Please don't ignore me.

[knotty pendant]

Ignore what

[novel ingot]

I know don't worry being a moderator for an other cybersecurity platform I know what's like sadly

[sick lance]

I asked why you're asking community members to OSINT a different profile?

[knotty pendant]

Cause that person cyber bullied me and someone else

[novel ingot]

go to police

[sick lance]

And do what exactly?

[novel ingot]

don't do your own justice

[knotty pendant]

They posted pics of us online

[sick lance]

Please, if mods are dealing with a situation, can you refrain from getting involved.

[blissful current]

🚓 🚨

[knotty pendant]

And made fun of the other persons mom

And posted his mom online

[sick lance]

Then you report them to the authorities, you don't take vigilante action.

[sick lance]

Also, if this was on Discord, you can report them for breaking their ToS by doxxing.

[rapid merlin]

Sitting here at work eating Pringles for lunch and seen the adapter sitting next to the can

Cantenna lol

[blissful current]

[amber inlet]

You can rig the empty Pringle’s can at the end of your adapter for better signal

[wintry trench]

🤓☝️

[blissful current]

[sick lance]

Are you ok there?

[wintry trench]

ye

[timber galleon]

im in guyss!!!!!

jk jk

[sick lance]

clear

This isn't my terminal.

[timber galleon]

permission granted

[blissful current]

my eyes jeez so blurry

[blissful current]

[sand trench]

CLEAR
ZZZZAAAAP

[sick lance]

What a way to doxx your location.

[knotty pendant]

Oops

But its a swoop

[blissful current]

[knotty pendant]

Swoop was discontinued in 2023

[rapid merlin]

that's the joke

[knotty pendant]

How are people going to find me😔🥺

Its just a city

[blissful current]

there r ways

[wintry trench]

https://tenor.com/view/aisaka-taiga-taiga-toradora-palmtop-tiger-nervous-gif-4006289379856080201

[knotty pendant]

Verify

[sand trench]

CLEAR
ZAAAAAP ZAAAP

[chilly veldt]

my whole apartment is cold

but I guess that's what happens when you turn off everything for a week

[sand trench]

have you tried to defiblerate it to heat it up???

[lime wing]

hey guys im new to CTF's, I recently participated in PicoCTF 2025. I was curious about how many CTF's accur each year.

Does TryHackMe host many of them?

[sick lance]

This is the first student one from THM in years.

[alpine aurora]

Im see mythbusters right now and ...

[sick lance]

This isn't that kind of server, and that also breaks Discord ToS.

[lime wing]

Yes

jk btw

[wintry trench]

oh okay thx

[twin ridge]

Gave +1 Rep to @knotty pendant (current: #1366 - 3)

[inner bloom]

oh sry

[knotty pendant]

https://tenor.com/view/spongebob-fairy-glitter-leo-dude-fuck-yes-gif-996220195472280544

[chilly veldt]

approx 1 a week

[wintry trench]

youtube

[lime wing]

Are you serious?

that many?

[sand trench]

tryhackme has challenge rooms/ctfs that are there and can be done whenever over the entire year
then there is the new path releases or advent of cyber side quests for more focused ctfs

[inner bloom]

dont ban me please

[sand trench]

or the weekly releases of challenge rooms

[chilly veldt]

https://ctftime.org/

[knotty pendant]

Why would they ban you

[sick lance]

I won't, you were told it breaks a ToS of Discord and you stopped.

[lime wing]

What about CTF's that last up to maybe 2 weeks or something like that?

[lime wing]

Thanks!

[twin ridge]

Gave +1 Rep to @chilly veldt (current: #8 - 968)

[sick lance]

Please follow rule 9. 🙂

[sand trench]

not that many

[wintry trench]

oops sorry

[inner bloom]

Scrubz Freaks the fk outta me

[wintry trench]

his picture isnt loading for me

[sick lance]

Really?

[wintry trench]

no i cant see it

might be my internet

[sick lance]

Good...

It's transparent.

[opaque current]

peak comedy

[sick lance]

So you shouldn't be able to...

[wintry trench]

im confused lol

nvm

[blissful current]

Tch extremely unproductive day , the chat here was more epik than the challenges today

[sick lance]

Think of it like a ghost...

😄

[wintry trench]

😁

ok

[wary ocean]

the guy who im still about 25% certain is a advance jarvis like ai

[sick lance]

It's transparent so no matter what theme you use, you'll never be able to see it.

I really wish they'd bring midnight theme to desktop.

[sick lance]

Me?

[wary ocean]

yeah

[mossy river]

I thought they did

Maybe it’s amole?

[sick lance]

Only 25%?

I must do better...

These are the only themes I see.

[wary ocean]

theres midnight burple on there

[candid surge]

hello @wintry trench

[wintry trench]

hi

?

[zealous shell]

[sick lance]

It's paywalled though.

[wary ocean]

true, and the only other solution has a chance of getting the account banned

[rapid merlin]

i am back after years

[mossy river]

Looks like it’s time to put those savings to use

[sick lance]

I don't stream as much anymore, so I can't justify the cost quite yet. 😄

[chilly veldt]

hi back after years, I'm Bella

[wary ocean]

[chrome crown]

The SAL1 exam kicked me out of the analyst VM and is asking for a login

what do i do. got 40 minutes left

[inner bloom]

yea

[sick lance]

cc @umbral bay

[nimble ether]

heyyyy

bruhh its just the starting and they expect me to nmap commands why is it ?

thm rooms are not organised?

[chrome crown]

@umbral bay would really appreciate some help. I got kicked out of the analyst VM in the SAL1. I originally had like 48 minutes left. I now only have 37 minutes left. I tried exiting exam and reentering but it's still prompting me to login to the VM

[mossy river]

Let me check with the team one moment

What's your username on the website?

[chrome crown]

Thank you @mossy river

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1537)

[chrome crown]

my username is jcruuuuz

four Us

[inner bloom]

real

[nimble ether]

am I in the wrong room or its thm that's messed up?

[bitter lantern]

guys i want to learn python for ML and AI do you best platform to learn ?? for free?

[wary ocean]

tbf nmap is really useful so i 100% recommend learning it the sooner the better

[mossy river]

YouTube is pretty great for Python

[nimble ether]

even in the beginning?

no prior networking knowledge required?

idk about subnet

and all

[wary ocean]

yea, networking knowledge is good but you dont need a 100% grasp on it to know how to use nmap

if youre doing the pre rec paths on thm then it should networking before

[nimble ether]

can u suggest me which room to do for complete networking

[bitter lantern]

any channel suggestions ?

[nimble ether]

yeahh

[upper knoll]

Have you done security 101? Pretty sure that has networking in it

[mossy river]

I don't recall the ones I used I'm afraid 😓 sorry

[nimble ether]

no I didn't.

[upper knoll]

You should

[bitter lantern]

whatt ? (crying emoji)

[upper knoll]

Or is it pre security then security 101 been a bit

[wary ocean]

pre security and cyber 101 is great for beginning and to get better network fundamentals i recommend web fundamentals even tho its below pentester its a lot easier

[nimble ether]

okiee TMRW I will

I was following free path

okiee I will give whole day for networking TMRW

covering everything on thm

u guys have completed thm free path?

[wary ocean]

idk about all the freepaths but ive completed a few

[upper knoll]

Yep

[nimble ether]

it's worthed?

[upper knoll]

I did pre security and security 101

[nimble ether]

I will be able to mess up with people around me after that ?

[upper knoll]

And been doing bits of the other paths since

[nimble ether]

got premium too?

[mossy river]

No because that would be illegal

[nimble ether]

bruhh It was sarcasm

[inner bloom]

scrubs will ban u

[nimble ether]

like I would be capable to perform basic attacks right?

means?

[inner bloom]

https://media.discordapp.net/attachments/703257925887590460/1116385261098651759/cattoastingexpanded.gif

[halcyon solstice]

Hello everyone. Complete noob here… how much time should I dedicate to the SOC simulator for the SAL 1 if I have zero experience? TIA

[spice otter]

learn networking first probably

[upper knoll]

Probably worth completing pre security and security 101 and then heading down the soc path

[spice otter]

idk how well the simulator would be if you dont understand what your looking at

[upper knoll]

It isn’t a fast thing for a noob to get into

[chrome crown]

i can't believe the SAL1 VM kicking me out messed up my groove 😭 at least it was only the first simulation

I would have been sad af if I was on the last one

[queen flare]

at least learn the osi model and what ports are before learning nmap @nimble ether

[shell nova]

You don't want to be attacking anything you don't explicitly own or have not been granted permission to in a formal contract

[nimble ether]

ik what are ports

[nimble ether]

bruhh it was sarcasm 😭😵‍💫

[queen flare]

and you do not want to be "messing" people up either

[nimble ether]

SARCASM

[shell nova]

Hard time believing that the second time

[nimble ether]

sorry didn't mean to cross community guidelines 🙂‍↕️

[patent cipher]

hello, fellas..
I don´t know if should put it here (correct me if there´s a better channel to send doubts)

[shell nova]

Also suggest you look up what sarcasm means 😉

[spice otter]

the osi model was a TON of information 👀

[nimble ether]

☠️

[nimble ether]

what do u mean?

[shell nova]

Usually related to irony 😉

[nimble ether]

u guys use any other platform too?

[spice otter]

the osi model room in the pre security pathway

[nimble ether]

done

[spice otter]

free version of HTB attack boxes aren't bad

[queen flare]

yeah
make sure you note them down and remember them properly

always take notes when doing rooms

[spice otter]

yea that was the first time i ever took down notes in my life lol it was rough

[jovial cobalt]

got a guy scammed by bitcoin scam lost 30k and asking help to osint the phone number is it legal to do so ? and if it is can anybody help?

[nimble ether]

bruhh how am I supposed to write that much 😭

[spice otter]

not legal

dont do it

[queen flare]

this is not done here

[jovial cobalt]

ok bro

[nimble ether]

demm

[shell nova]

I'd avoid that

[jovial cobalt]

okey sry i just wanted to know it is legal or not

[grizzled wing]

@shell nova do you happen to know when the beginner pathway will be removed from THM ?

[spice otter]

OSINT is illegal unless you haeve very clear permission from the person, i think is how it works

[shell nova]

Might not be strictly illegal, but definitely sketchy and grey

[jovial cobalt]

ok tnks for the info imma watch out nowonwards

[shell nova]

Your guess is as good as mine, I'm not staff

[grizzled wing]

ok

[shell nova]

Laws aren't super clear on the subject everywhere, might be cyberstalking regs though

[queen flare]

when someone DMs and asks me to hack their ex gf or something
i usually just give them username of a mod, and tell them to contact them cause they are good with that kind of hacking lmao

[boreal scarab]

Am I the monkey?

https://tenor.com/view/fat-fat-monkey-fat-monkey-smile-fat-monkey-smiling-monkey-gif-1768197236560593059

[shell nova]

Good plan

[spice otter]

to many if ands and buts 😭 not worth ther risk

[shell nova]

Oh sure

Don't be an idiot usually applies

[spice otter]

^

[shell nova]

Osint has positives

[queen flare]

most of the time OSINT is not illegal because you're collecting info from open sources
but its illegal if you use that info to do something nefarious

[upper knoll]

Or use tools for specific organisations

Without correct permissions

[spice otter]

ahh ok so thats what makes i illegal

[boreal scarab]

I SMELL OSINT?!?!?!?!?!?!?!?!?

[upper knoll]

For example I know they police and private investigator have additional tools for looking up addresses legal names and places of residence

[boreal scarab]

https://tenor.com/view/dog-sniff-gif-3199815179106739551

[knotty pendant]

@boreal scarab what is fluff clan

[boreal scarab]

@gray sonnet wanna explain? Work has drained me of e rrgy to explain lol

[upper knoll]

Poor you

[shell nova]

Go back to sleep

[upper knoll]

Surely he’s not asleep during the afternoon lol

[boreal scarab]

https://tenor.com/view/crowpunk-cat-cat-meme-sleep-goodnight-gif-367631681592776840

[shell nova]

Naps are fine

[upper knoll]

Oh totally agree

[jovial cobalt]

it was he was depresed by loosing money and he cant do legal complaint and he getting realy bad thoughts so his friend aproched me

[upper knoll]

They will always have a story and justification often this is just social engineering

[jovial cobalt]

hes afraid his parents might be angry for loosing that much amount

[jovial cobalt]

ok understood

[upper knoll]

It’s just the newer versions

[mossy river]

Please don't post loud videos

[knotty pendant]

Sorry

[leaden marsh]

The ctf hard

[jovial cobalt]

how much did you solved

??

[jovial cobalt]

agree now i undertands i need to grind more haha

[leaden marsh]

What means grind

[gray sonnet]

So basically a tribute to one of our beloved ex mods Fluff, real nice guy

[mossy river]

100% totally not a cult

[gray sonnet]

It’s not a cult!

That’s why it’s called a clan

[formal ice]

Is someone available to help me for a pivot in a lab (it's not from THM)?

[mossy river]

Rule 1 in identifying a cult, they are against being called a cult

[upper knoll]

jabba sometime remind me to tell u a funny story of my idea for a relgion

[shell nova]

Might want to ask on that platform's support then?

[formal ice]

It's inactive.

[slate python]

Hey guys, the ones who already have a pentester job or jr pentester, did you have to have previous experience in another IT sort of job or were certification and proving knowledge enough for you,? Just curious about what to expect

[plush roost]

Well, I gues going from solo to forming a team zero's out all of your rooms.. yikes

[mossy river]

I will but I hope you know I never remember anything

[formal ice]

And in their demo, the tool is not available.

[upper knoll]

oh u are like me lol

[shell nova]

There are plenty of alternates

[formal ice]

I'm trying with metasploit.

[shell nova]

Probably

[formal ice]

I added routes.

[shell nova]

Never did get those working properly

[formal ice]

But now, I'm trying to use nmap on my own machine, not with metasploit.

[shell nova]

Chisel is nice though

[formal ice]

I know thee is nmap.

I tried with shuttle, trying to add a password to root user, it didn't take effect and it's asking this user so...

[shell nova]

Not really a pivoting tool

[forest gull]

hi

[shell nova]

Sshuttle should be fine

[formal ice]

Tried, it's not working.

So I am trying with msf.

Started the proxy.

[shell nova]

Chisel then

[formal ice]

It's telling me that's listening and ... nothing with nmap.

[formal ice]

I can't install tools on my entry point machine, and it's on linux.

[spice otter]

👋

[shell nova]

Static binaries?

[formal ice]

?

[shell nova]

If you have curl it's enough

Don't need to install as such, just drop in /dev/shm or /tmp

[formal ice]

But with metasploit it should works no?

I added the good port in proxychains.conf.

I have to enable/disalbe a special comment?

[austere hazel]

hi i got stuck any one can give some help

[upper knoll]

#room-help

[shell nova]

Maybe

Proxy should be local though

[formal ice]

And I can't download anything...

On the entry point machine I mean.

And.

Ah no.

[shell nova]

No curl?

[formal ice]

I can't host a webserver mb.

[shell nova]

You can on your attack machine and grab from there