general

[hybrid plover]

uce can use this forexample https://www.thewordfinder.com/caesar-cipher-solver/

[polar spoke]

does iwconfig run without iwd running?

if not

we can try nmcli device wifi list

[polar spoke]

shows 1.56Gb/s as the phy rate

[polar spoke]

seems like you should be seeing "full" speed

[modern fox]

uhhh why my daily strike froze

[loud marlin]

2 of mine. one 2.5 one 5g

[polar spoke]

yeah, there we see 540Mb/s

not sure why the negotiated speed is < 1/2, it should either be 1/2 or full

[loud marlin]

kali is this

[chilly veldt]

@mossy river inspiration for my next tattoo (17th april)

[polar spoke]

yes, that's full PHY rate

what channel does kali think it's on?

[modest charm]

whats up folks

[hybrid plover]

good evening

[loud marlin]

how to find that 🙂

[polar spoke]

nmcli

same commands as before

[polar spoke]

in this screenshot we see channel 56

which is a bit odd

given than that's a 20MHz channel

and could be a significant contributing factor to the speed

i expect that kali should report channel 50

which is the nearby 160MHz channel

since it's giving full PHY rate of 160MHz MIMO

[loud marlin]

upp is arch down is kali

[polar spoke]

huh

interesting

both marked as 56

perhaps as the center channel for negotiation/control frames

if you start a big download or a speed test, does that output change?

they wont run at full all the time, only when in use and the negotiation for faster speeds has happened

oh hey wait

what region are you in

[loud marlin]

NL

[polar spoke]

i wonder if your kali has a null country code set

and is able to do "illegally" fast channels

due to DFS or similar

[loud marlin]

the channels for wifi change on arch when i do speedtest

[polar spoke]

yeah, that is what i would expect

[loud marlin]

it change it self few time

go to 100, then 56 and so on

so set channel manual in router ? or

[polar spoke]

well

hold on

[blissful snow]

does mad hat use tryhackme just wondering

[polar spoke]

it's possible that the arch config is behaving properly

and the kali config is not

[loud marlin]

as in same speedtest

[polar spoke]

the DFS channels here

and some of the subgroup channels within it

are subject to regulation in different regions

and subject to interference monitoring

with a region code set in your driver, your adapter will behave according to some parameters

usually related to local airport and radar installations and such

kali, being that it's for pentesting, I often see set with 00 or null country/region codes

allowing all channels and widths and such

but this may be illegal and perhaps a bit "uncool" to leave on

despite it giving faster speeds

my concern is that your arch is seeing DFS channel interference/conditions and doing what it's supposed to by not intefering with it

and that your kali is not and is stomping whatever to get the fastest speeds

iw list should show us the region settings for the adapters

[loud marlin]

for kali chanel stays at 56 all time when speedtest

[polar spoke]

yeah, it's not moving when it might need to

this could be bad behavior for the adapter, despite it looking like better behavior

[loud marlin]

but on kali i got

[polar spoke]

it is interesting that it is giving full PHY rate speeds while reporting a 20MHz channel

[sand trench]

BELGGERHGEREF

[loud marlin]

i can force 40 in router

[sand trench]

cough cough

[polar spoke]

before chaning router side (though it should ALSO be respecting DFS)

lets see if we can determine the difference in the settings for the adapters/drivers

which i think means getting iwctl running

because i dont have another good way to query the region/capabilities from the running adapter

[loud marlin]

i can change region on router as i wish

[polar spoke]

iw reg get

this or iw list or similar is what we are after on the client

as for the router, setting it to NL is preferred if you are in NL radio space

though i dont know the NL power/band/etc. restrictions

[loud marlin]

is when i run on kali

[polar spoke]

interesting

ok, so we see country code is set to 00, as expected

but the adapter has decided NL for you which is good

[loud marlin]

on arch

[polar spoke]

again interesting

we see capabilities missing on the Arch one

or at least not enumerated

[shut hawk]

🤨

[polar spoke]

these both look like the adapter is "behaving" in that it has it's region set

though both have country code as 00

but it does look like kali is seeing adapter capabilities in the sub ghz range?

or rather, not attached to that phy but present elsewhere?

[loud marlin]

idk what anything of that means you say heh

[polar spoke]

so

in theory

that "country code 00"

should be NL on both systems

"should" is a bit strong, as the phy appears to be setting and respecting it on it's own

but it should be set to your regulatory domain

we see DFS UNSET so i dont know that it's "truly" respecting DFS without that set

but we are looking for differences here more than we are trying to bring you into regulatory domain compliance

can you run iw list

[loud marlin]

is arch

[polar spoke]

(we can fix the reg domain stuff later, its just a reg set)

[loud marlin]

iw list is sht load of info. any specific part ?

[polar spoke]

uh

good point

sec

[sand trench]

hmmmmmm qubes os

[loud marlin]

or send you the result in DM?

[polar spoke]

yeah you can do that

[crystal moss]

my pc is hot:

😛

[sand trench]

now lick it

[plain tartan]

Could be a great foot warmer

I like to use my laptop charging brick as a foot warmer some days

[sturdy niche]

I left a SimpleHTTPServer open on my attackbox when I was trying to send a payload to a victim machine. Some IP started messing with it within 15 minutes.

[plain tartan]

That is something they warn about 😄

[sand trench]

yah that happens

especially if you are a subscribed user as then the attackbox got an outward internet connection

[sturdy niche]

It seems automated, seeing as how it all populated within seconds lol

I said 15 minutes, it was closer to 6 minutes. That's some freaky stuff.

[polar spoke]

the internet is full of scanners 🙂

[sand trench]

naaah scanners are full of internet

[solemn kelp]

Hey mate 👋🏼

[sand trench]

https://en.wikipedia.org/wiki/Mate_(drink)

[loud marlin]

what is that lol

[vale raptor]

I think, it is illegal

[loud marlin]

@sick lance @mossy river

[grim sparrow]

:hammer: shivamshukla84670#0 has been banned.

Done!

[plain tartan]

I like the apps name 😄

[full ginkgo]

Oii bruv

[whole yew]

A few days ago

[round orbit]

Hey guys

[chilly veldt]

really good tea

[sand trench]

a drink???

[loud marlin]

not to you post heh

[lament tendon]

@mossy river 🎉

[grim sparrow]

Done!

[fierce thorn]

This reminds me of that software "check if your cc is in hackers databases" 🤣🤣🤣

[plain tartan]

Okay but that's hilarious 😄

[stray ice]

Can I ask a question that is not related to tryhackme ?

[lament tendon]

Probably? As long as it does not go against anything in #rules you'll likely be fine. ;D

[stray ice]

nice

so i have a problem in my code

i do a web page but i have a problem in my CSS

[full sparrow]

You should go to #programming

[stray ice]

ok thank's

[twin ridge]

Gave +1 Rep to @full sparrow (current: #1114 - 4)

[cerulean nest]

Guru GG

oh it hasnt updated

[lament tendon]

You can force an update by verifying again.

[cerulean nest]

kk ty

[twin ridge]

Gave +1 Rep to @lament tendon (current: #36 - 255)

[cerulean nest]

lesgo

[stray ice]

How long do i have to wait for my profile to be updated ?

[cerulean nest]

took me like a few hours

of waiting

for A->B

[stray ice]

ok ok

[cerulean nest]

hell yeah

0xC

[stray ice]

So tomorrow it will normally be updated

[cerulean nest]

probably yeah

[stray ice]

nice man

[cerulean nest]

yw

[stray ice]

yw ?

i'm french bro

[cerulean nest]

?

[cloud agate]

anybody wanna do the brick heist with me im new. Like super new lol i just have an assoicates in cyber

[cerulean nest]

whats that supposed to mean

[stray ice]

what's yw

[cerulean nest]

yw = you're welcome

lmao

[stray ice]

ok i didn't know

[cerulean nest]

what did u think it meant

[cerulean nest]

dont do brick heist maybe

[knotty pendant]

https://tenor.com/view/lick-spongebob-meme-spongebob-meme-snail-gif-11908872455029987581

[stray ice]

i think it's a missclick

[cerulean nest]

oh lol

[stray ice]

bruh

[cloud agate]

noted 😂

[stray ice]

i don't know what's lmao too

[cerulean nest]

if u have premium

start on

pre security

if u dont have premium

still start on pre security

: D

dm me if u need help setting up a personal VM

theres prob some guide out there but some ppl (notably me) like doing it hands-on

so uh

ya

cya

[ruby plinth]

Anyone got a prefrence in terms of laptop for pen-testing? Trying to get more expereince in the field before i drop my OCS packet.

[cerulean nest]

MSI raider 18 HX A14V

😎

[ruby plinth]

4k is steeeeeeeep

[cloud agate]

im not that new HEHE just new to the process of red teaming etc and how exploiuts work im pretty tech savy though i used to do htb but gave up trying to get through the 101 boxes alone

[ruby plinth]

💀

[cerulean nest]

if i were u i would still do pre security

[cerulean nest]

meh

its like

$3200

not 4k

[ruby plinth]

Were on a military salary here

😭

[cloud agate]

sounds good thank you

[twin ridge]

Gave +1 Rep to @cerulean nest (current: #1824 - 2)

[cerulean nest]

omg 2 rep

no way

[cerulean nest]

idk man

[ruby plinth]

Thinkin a budget of like 2k

[cerulean nest]

buy a focken macbook or smth

[ruby plinth]

I have one

[cerulean nest]

na jk never buy a mac

hmm

[ruby plinth]

Should I get the top new model?

[cerulean nest]

from where

[cloud agate]

this is the way for music and audio production not cyber

[cerulean nest]

microsoft: no

apple: no

[ruby plinth]

apple

[cerulean nest]

lenovo: no

[cerulean nest]

no

[ruby plinth]

Where do you recommend looking?

[cerulean nest]

buy smth like

MSI

or ASUS

from costco's website

they have it cheaper

[cloud agate]

asus is pretty good!

[cerulean nest]

i think

[ruby plinth]

Just curious on the reasoning between those two?

Still delving into this field

[cerulean nest]

better

[cerulean nest]

idk im not that into hardware

[ruby plinth]

2k a decent ammount to drop?

[cerulean nest]

i just know they are more price efficient

[cerulean nest]

meh

[ruby plinth]

my desktop is 5

[cerulean nest]

for a laptop no

[ruby plinth]

💀

[cerulean nest]

im on the MSI i talked abt earlier

its uh

[cloud agate]

https://shop.asus.com/us/90nr0ja2-m00630-rog-zephyrus-g16-2024-ga605.html?gad_source=1&gclid=CjwKCAjw-qi_BhBxEiwAkxvbkEXz4x5Eg5J9tDfQ3Cplfb7R0TOqfuWVNvooP_sN-Rq026Xdr-yZZRoCCnoQAvD_BwE

[cerulean nest]

decent

oh yea that

[round orbit]

Lenovo ThinkPad’s are nice

[cerulean nest]

my sister got that 💀

[cerulean nest]

oh HELL NO

[ruby plinth]

I've actually heard a lot of people using ThinkPads in this field

[cloud agate]

lenovo is trash ngl

[round orbit]

The E14 series

[cerulean nest]

NAHHHHH

[round orbit]

Yep

[cerulean nest]

apple m1 better than that bs

[round orbit]

Same for Dell Latitude’s

[chilly veldt]

lmao

[cloud agate]

facts

[cerulean nest]

hell no

[chilly veldt]

apple fanboy

[round orbit]

Mac’s are shit

[cerulean nest]

fuck dell

[ruby plinth]

I hate dells

shits slow ash

[cerulean nest]

frfrfr

[round orbit]

Fuck apple mac lmao

[ruby plinth]

macbook runs decent

[chilly veldt]

can your macbook run arch?

didn't think so

[boreal scarab]

AY. Need y'alls help. What's a cool sounding callsign using the phonetic alphabet?
Could also include numbers

[round orbit]

Lmao

[cerulean nest]

it can

if u know what ur doing

[round orbit]

Can it shit

[ruby plinth]

Idk how its gonna do with attacks

is my thing

[cloud agate]

that link i sent is honestly best bang for buck in your proce range SMH i used to work for best buy i feel like im now their discord sells man'

[cerulean nest]

bud just get the ASUS

the guy sent

[round orbit]

Good luck upgrading your mac hardware

[cerulean nest]

thats hella good

if u need setup dm me

[ruby plinth]

📿

wrong emote

[cerulean nest]

i can help u uh

[ruby plinth]

🙏

[cerulean nest]

set up ur VMs

WSL or VMWARE

or both

idfc

[ruby plinth]

I'm still in hasing

give it a minute before we get into VMs and stuff

[cerulean nest]

btw if ur really gonna learn cybersec

every single course

is

fucking

$9700

for the good ones

[cloud agate]

its comfortable nad portable like a mac and has about as close to a mac track pad as possible while still having grate performace

[cerulean nest]

PER COURSE

[ruby plinth]

I just need a basic foundation for what I'm trying to do

[cerulean nest]

mac track pads ❤️ ❤️ ❤️

[ruby plinth]

The military will pay for my college

[cerulean nest]

W

[ruby plinth]

I'm not really concerned with cost

GI Bill go brazy

[cerulean nest]

lmfao

[ruby plinth]

both of em

[cloud agate]

im struggling with sec + rn so many freaking definitions its killing me

[cerulean nest]

just dm me if u need help with stuff

if its tryhackme then uh, dm someone smarter lmao

[ruby plinth]

🙏 I appreciate it.

[prime bear]

I want ask what the password to skip the siem

[cerulean nest]

im really good at networking

like

[round orbit]

@cerulean nest have you even worked in IT? Because both of the laptop models I mentioned are very liked and mass-deployed in a lot of enterprise businesses

[cerulean nest]

cisco stuff

etc

[runic wraith]

Does anyone know what software this is used?

[cerulean nest]

lenovo idk man

dell maybe

[ruby plinth]

Nah I just need the basics of stuff, nothing to advanced the officer path I want will take care of that 💀

[cerulean nest]

mind map software prob, google the top 3 or smth

they all look similar

[round orbit]

Lenovo feels nice, they use nice materials. Dell’s last a long time too, easy to repair and upgrade

[ruby plinth]

I may hit you up I'm still tryna understand OSI I understand like how it's presented just where certain things are past like layer 3 lol

[cloud agate]

I can get behind dell, but not Lenovo they are good but, they are just weird at the same time

[ruby plinth]

This is also what I'm looking for

something I can go home and swap hardware when need be

[cerulean nest]

do the tryhackme room on that

[ruby plinth]

more storage etc.

[ruby plinth]

did, I think I just need more experience on it

[cloud agate]

you will never be able to sw2ap cpus and gpus on laptops

[ruby plinth]

my notes are long ash from these courses 💀

[ruby plinth]

yeah they solder em in now

cheeks

[cloud agate]

but the asus i sent has m.2 storage yuou can add and swap

[cerulean nest]

just do it a few more times or smth

[cerulean nest]

the asus u sent is good

[ruby plinth]

🙏

[round orbit]

Lenovo is Chinese I think so I understand it, but I just got given my ThinkPad laptop and I was skeptical first now I like it. Thin bezels, smooth matte chassis, sikly smooth trackpad, fingerprint and facial biometrics etc

[cloud agate]

lenovco is also banned by DOD so dont do lenovo if you want to work in cyber in the DOD

[cerulean nest]

💀

[round orbit]

Only issue I have is the Fn and Ctrl key placement. But I think in the BIOS there’s a swap toggle

[ruby plinth]

Maritime Cyber Warfare Officer in specific is the path

so i appreciate this info,

[round orbit]

This doesn’t mean it’s a bad product though lmao

[cloud agate]

your welcome my dad was a cheif in the airforce and he told me that they banned them do to chinea adding a chip that had a keybopard logger on it and since then have been removed but still banned

sorry i cant spell smh

[ruby plinth]

you're good

[round orbit]

Don’t forget the military is still ran by boomers and non-technical senior officers. I was in the military

[cloud agate]

agreed

[round orbit]

It is painful.

[cloud agate]

yes and no

[ruby plinth]

and people with gifted kid syndrome

[cloud agate]

especiialy non technical officers thats very true smh

[round orbit]

The military has a very strong mindset of “It is isn’t broke don’t fix it” kinda mentality

[cloud agate]

i feel like officers should always start as enlisted

[cloud agate]

yes they do LMAO

im jsut a military brat and i most definitely understand

[round orbit]

Yeah, in recent years I’ve used some legacy tech lmao

Oh boy

[cloud agate]

I kinda wanna join but im scared lol

[round orbit]

cough Dial up

[cloud agate]

oh nah just no like actuallyu no

[devout palm]

What did you folks learn today?

[round orbit]

A lot

Started my first day

As a SOC Analyst

[cloud agate]

congradulations bro!!

[ruby plinth]

dont forget the gifted kid syndrome

[round orbit]

Thanks man

[ruby plinth]

nukes in specific have it BAD

[devout palm]

Tell us so we can learn too!

[round orbit]

?

[gritty hatch]

hey guys any one knows the main diff between C2-server and payload server?

[round orbit]

Yes

[cloud agate]

thats over my head im barely getting sec+ under my belt

[round orbit]

One is C2, one is for payload

[cloud agate]

im A NOOB couldnt even be a scipt kiddy if i wanted to

[devout palm]

Payload server is more vague.

[round orbit]

A question you can ask AI

[cloud agate]

faxcts

[gritty hatch]

but both deliver malicious to the target if am wrong ,so can we say that metasploit is a also a payload erver

server*

[round orbit]

Perhaps to reduce the noise on the network? Idk, I would suggest to ask AI for a more detailed answer

[cloud agate]

The key difference between a C2 (Command and Control) server and a payload server is their function: C2 servers act as a central hub for attackers to send instructions and receive information from compromised devices, while payload servers are used to deliver the malicious code (the "payload") to those devices.

[round orbit]

The real question is why

[cloud agate]

c2c send and control what the payload server sends that way the malicious code and the commands dont come from the same place

think of a botnet

[round orbit]

Exactly. If you take down the payload server, C2 still operational

[devout palm]

I have never heard of a "payload server". So that's a weird question.

[cloud agate]

in a bot net situation the c2c controls the hosts but the payload server send the actual code to the hopsts

like in a ddos attack the code to control the hosts is sent by the payload c2c tells the host to attack the server

[devout palm]

You can control clients (beacons in this case) without a payload.

[gritty hatch]

so metasploit is both it send the payload and controll it and still mention it as c2 server thats weird

[fair pelican]

Hello everyone 👋🏻
I'm a beginner and I am seeking for a mentor or a boot camp

[cloud agate]

think of the paylaod server like a delivery truck or a hard driver to hold the code and the c2c as the OS

[ruby plinth]

people in leadership positions at least in my experience have this gifted kid syndrome (i work with nuke drops so this could be part of it as well)

[cloud agate]

metasploit is a application to set up a c2c and payload server

i have very limited knowledge this is all guesses from what i know

[ruby plinth]

ships wifi sucks

1856 hours to download mac terminal tools

😭

[round orbit]

Brother, on a warship you’re lucky to get over 30Kbps, be grateful with what you have

[gritty hatch]

but thanks bro any way , I see now the main diff

[twin ridge]

Gave +1 Rep to @cloud agate (current: #2786 - 1)

[ruby plinth]

Last deployment we didnt have wifi at all 💀

[round orbit]

Emcon plan?

[ruby plinth]

nah just wasnt installed

[round orbit]

Sounds like emcon

[ruby plinth]

googling

[cloud agate]

your welcome! if i told you something wrong im sorry Definitely let me know so i can learn too!

[round orbit]

Emission control

Certain operations or areas have different emcon plans

[ruby plinth]

oh nah they were just trying to work out the contracts

[round orbit]

It’s a NATO thing

[ruby plinth]

wifi is new on ships

like were one of two carriers to have it

[cloud agate]

they need to give yall starlink for wif

[ruby plinth]

we have it

[cloud agate]

so it jsut sucks or maybe its the APs

[round orbit]

Or NAICIS

[ruby plinth]

but you have 5 thousand people all trying to use the internet at once

people downloading stuff, watching stuff, on the phone etc.

[round orbit]

Starlink isn’t too good from what I heard

[ruby plinth]

it also doesnt help that we have to keep moving in a circle

[cloud agate]

oh okay that defintly makles sense

[ruby plinth]

say it again for the funny

[ruby plinth]

i dont think they care about emissions right now with what were here doing 💀

[cloud agate]

@ruby plinth do yoiu have sec +?

[ruby plinth]

yes

[hardy bane]

hi guys . plz introduce cve bot

[ruby plinth]

for clearance?

[cloud agate]

dude im struggling on studying for it any tips im using professor messer and the CompTIA app but i cant seem to get it through my head

[ruby plinth]

Oh I thought you meant secret

💀

Nah I havent gotten that far yet

[cloud agate]

LOL nah man this certification is kicking my but

[ruby plinth]

I gotta get to the offensive security course first 🙏

[cloud agate]

terrified to spend 500$ on a test just to fail

[ruby plinth]

500$ is STEEP

[cloud agate]

no shit LO)L

[ruby plinth]

I'm just tryna make my degree path easier 💀

Militarys finna pay for EVERYTHING

[boreal scarab]

@chilly veldt belllaaaaaaaa

[cloud agate]

i belive my company will too but still i have to pass it for them to pay fo rit

[ruby plinth]

Oh military doesnt care

I have both the Post 9/11 GI

and the Montgomery

[chilly veldt]

no

[cloud agate]

thats nice i used my dads to go to school and get my associates in cyber

[ruby plinth]

I plan to use the Post 9/11 for my bachelors

and then the montgomery for my masters

[cloud agate]

defintly keep it for your kids if you can

[ruby plinth]

Nah it's one use and I aint stayin enlisted lol

[cloud agate]

i dont blame you get in and get out making 200K

[ruby plinth]

theyre letting me comission or im taking my new degree, my secret clearnace, and my experience because I plan to intern somewhere to gain experience, and finding a job somewhere

[cloud agate]

i thought hard about going the route you are

[ruby plinth]

It's not a bad gig but being enlisted does suck a little bit

but no one else was gonna pay for college and I was tired of law enforcement

[cloud agate]

i just love my church and my community i finally have one after growing up moving every 3 years

[ruby plinth]

yeah that wasnt fun as a kid either

[cloud agate]

i dont blame you thank you for serving for us on both fronts

[twin ridge]

Gave +1 Rep to @ruby plinth (current: #2786 - 1)

[ruby plinth]

thank you for your support.

[twin ridge]

Gave +1 Rep to @cloud agate (current: #1824 - 2)

[umbral bay]

Nice to hear.

[cloud agate]

thank you!

[boreal scarab]

Damn

[chilly veldt]

what?

[boreal scarab]

Was wondering if you could help me come up with a callsign

[scarlet fox]

how can wireshark intercept network traffic on other machines?

[ruby plinth]

It's sniffing traffic it doesnt really intercept it

moreso watches where its going and where its coming from to my understanding

[scarlet fox]

yeah thats js my bad choice of words

[ruby plinth]

You can download the copy of traffic you sniffed but

best of luck decrypting it

[devout palm]

If you can redirect traffic to your machine then you can also sniff them.

Otherwise you can't get others' packets.

[scarlet fox]

alright thx

[quasi pike]

If hacker should be an anonymous person then why people posts their self’s on LinkedIn

[mossy river]

Because there’s a difference between CTFers and people who work in the cybersecurity industry

[late forge]

hi

[orchid tusk]

Ya’ll wish me luck on my business law exam, can’t wait to fail 😭

Never thought that reading code would be easier than reading law but here we are lmao

[chilly veldt]

Bluewin

[orchid tusk]

[boreal scarab]

[crystal mauve]

[boreal scarab]

I've been thinking about it for like an hour.... it's hard to come up with a permanent callsign

[orchid tusk]

Blue_win

[quasi pike]

Ahha nice understood

[boreal scarab]

Oooh, could put fluff in it too

[ruby plinth]

5tuxn3t

[crystal mauve]

Wen update?

[wooden totem]

Twinkie

[boreal scarab]

5 Tango Utah Xray November 3 Tango

[ruby plinth]

stealing this

[orchid tusk]

“I❤️Steg” 🗿

[ruby plinth]

uniform

[boreal scarab]

Oops, was uniform

I get em mixed up sometimes lol

[ruby plinth]

I used to get Sierra and sam mixed up

you can thank the sherrifs office for that

same with India and Ida

[boreal scarab]

Well, I am looking for a callsign for LSPDFR

[ruby plinth]

what are you state, county?

[boreal scarab]

Was thinking of putting Whiskey and Viper in it.
Right now, with LSPDFR Enhanced mod, I'm in the industrial area, but Highway Patrol

[ruby plinth]

Our highway units were King Units

so 1K-84

1K-93

etc

[boreal scarab]

https://tenor.com/view/lspdfr-gif-27277973

[ruby plinth]

I've been the chief of a few fivem servers for SAHP

was always 1K-01

[wooden totem]

Girlscout

[wooden totem]

Stand up right now and go back to work

The floor is rated feet only

[sturdy raptor]

it’s 3am here

[wooden totem]

Then your work is to sleep

[sturdy raptor]

working on that

[silver sky]

Touch grass

Jks love ya @boreal scarab

[umbral bay]

Bravo Sierra Oscar Delta. 😄

[boreal scarab]

BSoD, love it lol

[boreal scarab]

Nuuuuuuuuuuuuuuuuuuuu

Been modding gta V for a couple of hours now, almost got it right

[chilly veldt]

That's what bluewin is for

Blue windows

[boreal scarab]

oooooooooooooh

[dark mason]

Have you guys seen Burp Suite's AI feature?

[chilly veldt]

A call sign is also something you quickly can say, which is what bluewin is too

[boreal scarab]

Yah, but I want it to mean something, sound badass

[chilly veldt]

Dude...

[boreal scarab]

Wha?

[chilly veldt]

No one in the military has badass call signs

[boreal scarab]

News flash, this aint for military lol

[chilly veldt]

The call signs are nicknames given to you by your fuck ups

[chilly veldt]

Why tf do you need call sign anyway?

[boreal scarab]

LS PD FR

Want me to sound it out?

[chilly veldt]

Police doesn't have call signs...

They have position numbers

[boreal scarab]

Surprise! LSPDFR has callsigns

[chilly veldt]

Have you ever interacted with anything like that?

[boreal scarab]

Like Sam 44, 1 Delta 33, etc etc

Problem with LSPDFR, you don't have a rank, and if you do with LSPDFR Enhanced, you go up in ranks, so it changes

[chilly veldt]

That's not call signs, that is position numbers

[grim sparrow]

I cannot find a mute for the user mridulsharma.#0

[chilly veldt]

It correlates with the area you're in, unit you are and unit number

[quasi pike]

Why do you want to mute him

CTF players will grow to be millionaires
True✅
False ❌

[cloud quiver]

@spring acorn Don't try to ping everyone . To join vc you will have to verify . You can learn how to do so on the link below 🙂
https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[cloud quiver]

I wanted to unmute him 😄

[oblique furnace]

no screenshot for today or yesterday cuz i barely slept today and was busy yesterday

[cloud quiver]

That's fine , it's ok to take a rest from time to time 🙂

[oblique furnace]

thanks

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 4318)

[leaden marsh]

The worse new I have heared That my laptop now inside it become alchol

💔💔

[twin ridge]

🔊 Unmuted cis32_mvp

[eager marsh]

What nothing for April fools

Yall are lame

[cloud quiver]

@round orbit Watch out for blacklisted words 🙂

[craggy wadi]

What is your honest criticism of the cert? Genuinely curious.

[eager marsh]

Multiple choice questions have no place in a practicum about a SOC. Plus they kind of lied on their competitors on HTB

[upper knoll]

Evening chat

[eager marsh]

Plus an industry leading cert?

My brother in Christ it just came out

[upper knoll]

How many of the load of certs that are almost all practical knowledge contain multiple choice questions? Most if not all

Hmmm

Seems like it’s kind of standard

Does a practical have the ability to cover all the other possible knowledge somehow who will work in a soc will need

Seems like that wouldn’t be possible either

[finite basalt]

imo a perfect exam would feature an open book exam and a practical element

[upper knoll]

As far as I know the SAL1 is open book with practical elements? But I could be mistaken

[finite basalt]

Like I think we should assess the ability to know things and find the answers as well as to show practical application of information

[quasi pike]

I have one

[finite basalt]

I don't recognise the name of that one, I only hold the AWS CCP

[upper knoll]

It’s the new THM one

[finite basalt]

but that's because work paid for it, I've not paid for any certs thus far

[quasi pike]

don’t try to fall in love with a hacker because every time you try to build a connection they will DDoS your feelings

[finite basalt]

Like maybe when I finish uni I'll look but until then

[finite basalt]

my favourite line is "relationships are like git repositories, you commit, push, pull, merge and resolve conflicts" haha

[upper knoll]

I think it could use a few months to get stable but imo the thought and work behind it is really good

[quasi pike]

I really noticed something hackers don’t have feelings

[eager marsh]

https://tenor.com/view/boooooo-this-guy-stinks-serious-spongebob-squarepants-gif-11981386

[finite basalt]

that's not true, we hackers do have souls

[quasi pike]

Your soul is Linux

[finite basalt]

nope

[upper knoll]

Careful you’ll summon the arch users

[finite basalt]

I definitely have feelings haha

[upper knoll]

They come out of the wood work if you mention Linux too much

[quasi pike]

I tried my best with April joke

[finite basalt]

I'm not very outward about them but they're there in full force haha

[quasi pike]

They’ll get angry if I mentioned Linux ?

[finite basalt]

I'd say that it's probably common within the industry, problem solving's baked into our personality
we like solving things on our own so don't tend to be very outward about our emotions

[upper knoll]

No they’ll just come to talk about arch

[finite basalt]

I installed arch linux 🤓 ☝️(this is a joke)

[upper knoll]

And I just did a one hour chest bicep day at mostly midnight

[finite basalt]

I woke up from a nap two hours ago

it is now 1am

[leaden marsh]

Why everyone like arch linux

[upper knoll]

Oh no they’ve gone and done it

[quasi pike]

It’s allows you to have the latest software without needing to upgrade your entire system

[finite basalt]

legend has it they travel in heards

[leaden marsh]

Not like kali right

[upper knoll]

It’s just another Linux distribution just so happens it’s kind of like veganism

[quasi pike]

I actually respect having your own zone hackers personality is actually nice

[upper knoll]

You have/use it you tell everyone about it

[eternal timber]

Sir yes sir

[boreal scarab]

Been playing around with it, love it, fits me, but just doesn't.... WOW me

[pulsar knot]

The perfect distro

[modest thicket]

is this arch?

[pulsar knot]

No... it's a Debian flavor Commadore OS vission 2.0

Commodore

[modest thicket]

its a bad meme sorry i just wanted to share it with you

there was this guy in here who was always like "i use arch btw" and i made that meme to reply to him

isnt Debian what Linus uses?

[pulsar knot]

anyone using parrot or kali is using a debian flavor

[modest thicket]

ahh.. i do like flavors..

[pulsar knot]

Commodore OS isn't a security OS though its just a fun kickback to the 80s commodore 64

[modest thicket]

some like chocolate, some like vanilla... yes i see

i cant see my fawaz wth

ahh.. now i see it

[modest thicket]

80s???

[sick wave]

Where's the THM april fools at 🤔

[pulsar knot]

Yeah the 80s when your parents used let you ride in the back windshield of the car while they chain smoked Marlboros on long trips

[verbal totem]

I was considering which distro to use in virtualized lab.
At the end, I decided to use kali in qemu virt since kali docs provide the guide.

[pulsar knot]

can't go wrong with either one I don't think

[crystal mauve]

📖

[spring acorn]

thanks! I'll keep this in mind.

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 4322)

[left coral]

i pref kali to parrot i have no REAL reason outside i started with kali.

and parrot reminds me of mac (and i dislike mac)

[grizzled wing]

congrats 🎉 on being green, 🧙

[worn turret]

M

This was lowkey complicated

[topaz skiff]

i've worked as a devops engineer for like 5 years and active directory still scares me at times

though to be fair, writing scripts and interfacing with LDAP was its own sort of arcane magic

[crystal mauve]

Thanks veggies!

[twin ridge]

Gave +1 Rep to @grizzled wing (current: #35 - 272)

[dapper turtle]

Yesterday I hit my 30-day streak. Today I have gone on 3 times and each time I've been greeted with a window letting me know I've hit my 30-day streak, and I do a short walkthrough room and my streak stays at 30 days, which seems... strange.

[celest dirge]

Wait, so you've been on your 30 day streak, and then when you did a room, it says you got a 30 day streak, but doesn't go up to 31?

[dapper turtle]

Yep. I’ve been on a 30 day streak for just over 40 hours now.

[desert dirge]

Did someone say they use Arch btw?

[celest dirge]

You should probably contact support

[sharp citrus]

@dapper turtle

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Apr 1, 2025, 3:13 AM

[crystal mauve]

It’s being looked into sed scrubs

[cloud quiver]

Congrats , keep up the good work 🙂 🚀

[fair pelican]

Hi everyone 👋🏻, I am beginner and I am looking for a team

[hazy flame]

https://tenor.com/view/reimu-reimu-hakurei-china-love-love-china-gif-4739820462458512257

[crystal mauve]

Waitttt so chatgpt can do any art style

[brave totem]

what if THM made every easy question hella hard for april fools

[nocturne raft]

When are the several learning paths getting retired? 11:59 GMT April 1 or April 2?

[hallow laurel]

is there any rooms that teach how to read and understand Apache logs?

[whole yew]

hold up dawg, i got the best hello kitty image to date

[knotty pendant]

https://cdn.discordapp.com/attachments/1300304557615874089/1355373622088171570/IMG_3188.gif

[near sapphire]

where's the thm april fools event 👀

[knotty pendant]

Soon

[cloud quiver]

🤣

[boreal gull]

i've been waiting 6 years for a skidy & ashu karaoke event 😦

[whole yew]

don't forget we were promised Muiri was going to sing opera for us

(the promise wasn't from Muiri though, so the collecting on that promise has been difficult)

[near sapphire]

hi bee

[near sapphire]

that's the april fools all along

[desert dirge]

The squiddest

[desert dirge]

Dude this is adorable lol

[blissful current]

[civic oak]

Happy fools day, stay safe, stay smart. 👊

[blissful current]

@inner bloom hmmmm..nice

i'll just enjoy playing games on my VR today , no grind THM

[inner bloom]

thanks

[inner bloom]

which one

[blissful current]

probably Tactical Assault VR online

else i'll play Beat Saber or AC Nexus for timepass

[desert dirge]

I haven't been able to get into the parrot website to download the OS for the last few years, so parrot has been out for me

Kali is a great toolbox, but it seems to me that a lot of hacking is going to be from target machine - to target machine in the target environment, so it's good to slowly wean yourself off of hacking distributions or tooling once you've gained some experience.

what the - where did message go

[blissful current]

[desert dirge]

y delet message, now I wasted my reply and look dum D:

[blissful current]

anyways am off here , cya

[sturdy raptor]

https://tenor.com/view/cat-water-fountain-face-cute-gif-10731183726034091306

[tepid citrus]

Hey Everyone , we started using Chronicle/SecOps as our SIEM tool. Does anyone have resources for incident response and alert logic that would help accelerate the learning process?

[crystal moss]

Today im going to end the Jr Pentester Path, just the last challenge.. what path to take next?

[cloud quiver]

Depends which area of cyber security you're the most interested in 🙂

[crystal moss]

I like redteaming but more and more im get into blue

[cloud quiver]

Well you will have to decide . If you're more into red teaming check out red teaming path . If you want to pursue a career in blue team go with SOC1 and 2 paths 🙂

[foggy otter]

or do both

[crystal moss]

🙂

Yesterday I set up a honeypot admin login on my webpage. I made it with Flask and the Webhook to Discord, so when someone tries to log in I get a message with the attempt and the IP it came from. Cool project 🙂

[inner bloom]

is ejpt good

[hollow ledge]

need tryhack me premium acc

[inner bloom]

purchase it then

https://tenor.com/view/dancing-duck-dance-duck-duck-ooontz-dance-gif-10943740227711557279

[boreal gull]

yeah it was okay from what i've seen

[inner bloom]

i have no certifications
so i am planning to go for ejpt as it is not that expensive and I've noticed that many people recommend it

[boreal gull]

wonder if this is implemented yet 🤔

[boreal gull]

yeah why not

[chilly veldt]

BEEEEEEEEE

[polar wraith]

metaspoilt? 💀

[sudden pond]

Get a sub not an account

[digital socket]

Hlo

[blissful current]

Meta Spoilt

[polar wraith]

ye mb thas what i meant to say

[whole topaz]

Hello everyone, I’m struggling with some python exercises, beginner level, can someone help me in private ? (I have to do them before 2pm)

[pine stratus]

did u use chat gpt?

[umbral grove]

The hacker:

[crystal moss]

to some extent, why do you wonder?

[pine stratus]

just asking :p

[crystal moss]

Okej:)

[crystal moss]

I haven't written anything with a bottle before so I had to get some help 😛

[pine stratus]

the admin login page (the honeypot) is a directory ? or subdomain or what exactly?

how the hacker supposed to find it so he login xD

[crystal moss]

you can do whatever you want, but I have it on a subdomain with a route to /admin, so the directory /admin itself doesn't exist at all... there is a link on the index page that is kindly called admin;D

Not made for any real safety but was mostly a fun lab...

[pine stratus]

hmm , well its a good small project , but I think u can see the ips of whoever is visiting ur webpage . i would suggest , to try doing honeypot in a server with easy creds and record user action and commands 🎧

[upper knoll]

We can’t help with school work here

[crystal moss]

Yes, of course I can see all visitors' IPs if I wanted to, but it's not really of interest to me, but it is interesting to know who is trying to carry out some kind of attack, like now for example, I see which IP is trying to log in to the admin page, and after some attempt I block that IP with fail2ban. All the info i sent to a Discord server so i get a notice.

woop woop

[grim sparrow]

Done!

[trail bloom]

can someone find my bug

Scanner s = new Scanner(System.in);

[whole topaz]

Why ? It’s something quite simple

[upper knoll]

If it’s from a room #room-help @trail bloom

[sick lance]

Hi, asking for school help is against our community rules. 🙂

[sharp citrus]

<#651923438524432404>

Rule 5 - No Cheating

Cheating in any form is strictly prohibited. This includes, but is not limited to, requesting assistance with schoolwork, employee assignments, or active CTFs. If you need help with challenges or content from other platforms, please use their respective Discord server. [See More] [See More]

TryHackMe Rules · Apr 1, 2025, 9:50 AM

[whole topaz]

Ohh ok so sorry

[cyan parcel]

Thank you, @cyan parcel

[sick lance]

Kek

[sudden pond]

+r*p @cyan parcel

[cyan parcel]

:c

[wary geode]

Hello guys I was learning SQL injection and I want to practice where I can find free labs ?

[cloud quiver]

Here're some good ones 🙂
https://tryhackme.com/room/cheesectfv10
https://tryhackme.com/room/dailybugle
https://tryhackme.com/room/jurassicpark

[wary geode]

Thank you !

[twin ridge]

Gave +1 Rep to @cloud quiver (current: #1 - 4326)

[sick lance]

https://www.bleepingcomputer.com/news/software/vmware-workstation-auto-updates-broken-after-broadcom-url-redirect/

[sick lance]

Burp suite academy

[cyan parcel]

https://tenor.com/view/table-flip-adventure-time-gif-6102284985928581700

[rapid merlin]

hlo

[red ibex]

Hey

[rapid merlin]

can you tell me one thing

why this server bot is sending messages on my server even its not there

[red ibex]

Hmm not sure what you mean?

[rapid merlin]

wait

[sharp citrus]

@cloud quiver

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · Apr 1, 2025, 10:41 AM

[cloud quiver]

🙂 ?

@meager tinsel

[mellow narwhal]

there's nothing wrong...?

[queen flare]

does thm have a walkthrough room for nikito?

[sudden pond]

Oh my heart

new swag For a moment i thought my cap is going to trash now

[queen flare]

like a tutorial room

[crystal mauve]

Haven’t seen one scorpius, just rooms that suggest to use it

[cerulean aurora]

hey

[sick lance]

There is a room that used to walk through it as part of the room, possible Tools r us.

[ancient mirage]

how are you today guys?

[cerulean aurora]

suggest some tool to get web application vulnerability

[ancient mirage]

burp suite

[cerulean aurora]

ik that, any other options?

[crystal mauve]

Metasploit, ask chatgpt

[ancient mirage]

depends what kind of vuln you are looking for

[cerulean aurora]

any kind of

[sick lance]

Zap, Nessus, Nikto.

[ancient mirage]

have u already did the information gathering, enumeration?

[sick lance]

Openvas?

[cerulean aurora]

i means i am testing my website so want to know how many vulnab i have so i cn patch em all

[sick lance]

Do you host the website?

[cerulean aurora]

can say that

me n my parthner we both

[sick lance]

Do you host it on your own hardware?

Or do you use a third party to host the website?

[cerulean aurora]

3rd party

[sick lance]

Then you can't test it.

You need their permission.

As it's their software/hardware etc.

[cerulean aurora]

um okok

[ancient mirage]

u can still ctrl+u, and give the source code to a.i. and ask him about possible vulnerabilities.

[blissful current]

🦹‍♂️

[queen flare]

attackbox ain't booting up properly

anyone else facing it?

[queen flare]

that's the one i am doing
but its not a walkthrough
its a challange room where we have to use nikito

that's why i wanted to do a walkthrough room first, but its fine i'll just do some research

[cerulean aurora]

will try

[boreal scarab]

@sick lance Wanna come up with a callsign for me?

[sick lance]

MicrowaveTea

[cloud mural]

anyone plays CTF on ctftime

[sick lance]

If you perform an attack that disrupted their service etc.

You'll have no protection from a legal stance.

[crystal moss]

but.. You can test web applications and the page itself, ex wp etc?

[sick lance]

No...

They'd need to whomever hosts it permissions.

[cerulean aurora]

tk that

[crystal moss]

ok..

[cerulean aurora]

acha tell me methods to get admin login
like sql ssrf

[crystal moss]

I host my own stuff.. 😛

[cerulean aurora]

we are working on something so yes

[sick lance]

Doesn't mean it's ok to attack it...

[crystal moss]

But this is a bit interesting.. If I am not allowed to test the security of my site if it is hosted at a web hotel etc. and my site is exposed to an attack that could have been avoided if I had only tested the site, who is then responsible, the one who hosts it or is the responsibility still entirely on me, like that I should test the site in a local environment before it goes into production?!

[sick lance]

Yeah, you can test it before prod.

[cerulean aurora]

help me with methods to get admin panel access

only name will work for me

[sick lance]

I have already told you no.

If you continue to discuss this, I may have to mute you.

[crystal moss]

Yes, of course you can, but are you responsible for doing it? Even if I test it locally, there is still a certain difference when it is in production.

[cerulean aurora]

why so

im doing it for my site as i already told u

[sick lance]

For the reasons I have already stated.

[sick lance]

It's a combination of both.

However that doesn't mean you can attack it to test it.

[boreal scarab]

I don't microwave my tea!

I have an electric gooseneck kettle 👀

[crystal moss]

If you follow the different paths here, you will learn. Here you only get help with questions like the labs and rooms here, not your own projects!

[sick lance]

That statement has taken what I've said out of context.

[crystal moss]

Im with you..

[verbal pumice]

also isn't it in general illegal to test attacks on the web?
I'm a newbie but my intial thinking was that all tests should be done in a VM

[sick lance]

Bug bounties are legal if you stay on scope.

[verbal pumice]

gotcha

off topic, is it okay/possible to test malware in a VM?
I wanna go down the Redteam path

[rapid merlin]

hello

[sick lance]

Creation of malware is illegal, and out of scope for their channel, we discuss malware exploits in advance channels

[crystal moss]

Hello!

[sharp citrus]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Apr 1, 2025, 11:53 AM

[verbal pumice]

oh gtk thank you!

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3587)

[cerulean aurora]

wakarimasu

[sick lance]

English only please.

[crystal moss]

?

[cerulean aurora]

kidding

[cerulean aurora]

understand

[blissful current]

[leaden marsh]

I will make it summary!

In like level advance in tryhack u will access the advance rooms

[blissful current]

it unlocks 0xD[Legend] rank onwards

[vital bluff]

Please where can I get SSH tunnel ip?

[sick lance]

To what?

[vital bluff]

Where do they sell the SSH TUNNEL IP ADDRESS

[crystal mauve]

#771818902342074388

Ahh, need legend

[sick lance]

You set up ssh tunnels in your devices...

[blissful current]

[vital bluff]

The ip information

[acoustic estuary]

Are there ever any sales on THM premium? Trying to complete the cyber security 101 learning path completely but can't swing the $$ right now even with a student discount, hoping to hear there is sales every now and then

[sick lance]

There is, but they apply to annual subscriptions only

[acoustic estuary]

thats what I'm looking at getting but right now even with a student discount its $100, when are sales typically?

[sick lance]

Random times or Black Friday/Xmas.

Sale is the same as student usually.

And they can't be stacked.

[acoustic estuary]

oof, i was hoping to stack them. guess i'll have to save up

[steel aspen]

Does this have a proper full article? I'm gonna turn it into Buzzfeed: I.T Professionals SHOCKED!

[gritty fern]

I believe it’s just that image

[topaz skiff]

i've got a big interview today, everyone lend me your strength

https://tenor.com/view/genki-dama-spirit-bomb-goku-gif-12526925

[blissful current]

[cloud quiver]

Good luck , fingers crossed 🙂 🤞

[pliant bronze]

[cloud quiver]

Will there be a new room today 🙂 ?

[soft bramble]

hello
are certs for hackfinity available?

[cloud quiver]

Not yet 😦

[soft bramble]

https://tenor.com/view/roman-roy-jealous-angry-angry-look-succession-gif-1317768538820840230

[main tiger]

https://www.youtube.com/watch?v=507eUyyOt-0

[rapid merlin]

Good morning! A new day means new opportunities to grow, learn, and move closer to your goals. No matter what yesterday looked like, today is a fresh start. Stay focused, stay motivated, and take one step at a time. Success isn’t about being the best instantly—it’s about being better than you were yesterday. Keep pushing forward, stay positive, and make today count!”

Wishing you a productive and successful day ahead!

[cloud quiver]

Thanks for daily motivation 🙂

[twin ridge]

Gave +1 Rep to @heavy quarry (current: #1825 - 2)

[ancient mirage]

https://tenor.com/view/yoda-star-wars-learning-am-i-gif-16531775

[hollow marten]

I am in a room that hints to doing some parameter tampering via fuzzing. Without success with ffuf and gobuster, i checked a walkthrough and found the correct parameter and tried via a curl. "curl http://[machine_ip]?file=/etc/passwd" wont give me what it supposed to. "curl http://[machine_ip]?file=/etc/passwd --data password=somepass" does give me what i am after. So it seems i need to post password and have the file parameter appended to url as get. I have tried "ffuf -u http://[machine_ip]?FUZZ=/etc/passwd -X POST --data password=somepass -w parameters.txt" this doesnt work like the curl command and i dont get any hits. I have fried making FUZZ part of the post and that didnt wotk. My question is how can I fuzz a parameter that needs a post and get?

[crystal moss]

try with absolute path to parameters.txt

about POST and GET do you mean you want it at same time?

[cloud agate]

goodmorning yall!

[crystal moss]

morning..

[blissful current]

-# Good Ebening

[cosmic pendant]

GM

[hollow marten]

Ffuf iterates through the file fine. It just doesnt give me any hits like "curl http//:[machine_ip]/endpoint.php?file=/etc/passwd --data password=somepass"

[obtuse agate]

Hello, Am new to Tryhackme and i want to learn ethical hacking, And some suggested me to go to tryhackme me course but i am blank now should i buy premium and ehat course i should learn and i want to become pro

Help me please

[mellow narwhal]

Start with pre-security path

[ancient mirage]

do the Pre-Security Module from tryhackme at first.

[blissful current]

u can go thru the #start-here -> #974406074444685322 for free first

then u can buy premium for further if u like it

and yes its worth it to buy premium for learning

[obtuse agate]

Oh,

[crystal moss]

100 %

[obtuse agate]

Thank you guys, And after the introduction i should go to specific course?

[blissful current]

Pre-Security course & then Cyber Security 101 course

[spice otter]

start with the presecurity pathway

in the roadmap section in the "learning" tab on the website

[obtuse agate]

That's for beginners right?

[blissful current]

yes

THM provides 3 roles Roadmap in Cyber Sec

• SOC Analyst
• Penetration Tester
• Security Engineer

u can choose the paths according to ur interests or do all one by one , upto u

[obtuse agate]

Oh that's nice

From your side, Which do you think is best?

[blissful current]

it depends on what u want to do , all 3 paths are good for each roles

As a Red Teamer i'm doing the Penetration Tester Path

[obtuse agate]

I think i should research on all the path and decide

[obtuse agate]

Great

[blissful current]

yes firstly do the 2 i told u above , there's a short quiz after that called career quiz which u can give and see what path prefers/suits to u

on the site's learning roadmap section

[obtuse agate]

2? Presecurity course and Cyber security 101? Am correct?

[blissful current]

yes

[obtuse agate]

Lemme note down

Alright

For this two course should i buy premium?

Or lemme go in free?

[blissful current]

it gives some free rooms, after that u will need to buy premium

if you're a student , can get some discount for Annual subscription

[boreal scarab]

Ah yes.... AI, thank you.

[blissful current]

https://tenor.com/view/cat-wtf-wtf-cat-shocked-shocked-cat-gif-16097802352571672167

[obtuse agate]

So, I should do that course and do Cyber security 101 and then do career quiz and select a one thing from three, And then buy a premium to become a pro?

[obtuse agate]

@blissful current

Sorry for ping

[blissful current]

ya , u can buy premium any time , i think the complete course may not be under freeplan fully

[boreal scarab]

Need callsigns still, what y'all got?

👀

[obtuse agate]

Alright, Guys thanks you are a big W i will become hacker like you!!!

Am gonna become pro

We will meet back after i be pro

[blissful current]

[obtuse agate]

Wait wait, Last doubt do i need linux?

I have windows

[viscid jungle]

Windows is fine! But Kali Linux makes it easier with installed tools and it is designed for hacking

So you can install a virtual machine of Kali Linux or use windows if you’d like

[blissful current]

better to have linux , since many challenges will be on linux

otherwise can use ATTACKBOX inbuilt on THM site

[obtuse agate]

Oh okay

[blissful current]

i'll recommend download VM with Kali/parrot on it

[viscid jungle]

Goodluck I wish the best for you <3

[blissful current]

cant depend on Attackbox since it starts getting slow too

[obtuse agate]

Thank you!

[twin ridge]

Gave +1 Rep to @viscid jungle (current: #2788 - 1)

[modern fox]

arrives

[blissful current]

-# Hellos

[viscid jungle]

I have Kali Linux as my permanent os LMAO 😭

[blissful current]

maybe i should try that with my old laptop lol

[modern fox]

wdym permanent

[viscid jungle]

Yesss it’s also my old laptop!

[viscid jungle]

I deleted windows and installed Kali Linux completely on my disk 🗿

[blissful current]

it will then become

Microsoft Linux Surface

[viscid jungle]

[modern fox]

w man

[blissful current]

its too shit for Windows 10/11 and has less RAM n storage , will do that

[chilly veldt]

Good way to have a broken laptop

[viscid jungle]

No w goes to you :3

[modern fox]

decided to full scan my comp via using windows defender or wtv its name is and it detected some viruses in my kali linux ISO image

[viscid jungle]

LMAO exactly it’s lightweight too so perfect 🗿🫶

[spice otter]

could be false postives?

[blissful current]

(tbh nah , it has free lifetime MS office , helps me with college stuff , ig i'll probably keep it as it is)

[rapid merlin]

..

[viscid jungle]

LMAO that’s sad for me-

[chilly veldt]

Kali is not lightweight 😭😭😭

[viscid jungle]

Shush my computer works better in it

Windows just takes all my battery’s life

[modern fox]

it was

[blissful current]

lightweight than Windows 11 tho thaz fs

[modern fox]

tho windows was slowing my laptop on purpose so ive deleted em

[rapid merlin]

if you don't have every metapackage in the cosmos installed it's quite fast especially with drivers installed bare metal.

[modern fox]

some competition thing

idk

[spice otter]

kill the old so you have to buy the new, android and apple do it to

[modern fox]

exactly

[coarse hedge]

Well, I did that to my old pc and it doesn't go well.

[viscid jungle]

Imagine windows just detects all iso images as malware so we don’t install them and keep windows-

[worldly hearth]

Hi I have non-THM question guys. I have Pentest box and it has many Web Apps. Now I am trying Pentest one by one boxes. All web apps are on this IP address 192.168.231.128. the web app, I want to Pentest is in this address "http://192.168.231.128/bodgeit/" . What lines should I add in my hosts file so with just an IP address only scan my target Web App.

[modern fox]

thats their goal

[spice otter]

😂 😂 😂

[viscid jungle]

Oh I see, mine works fine though I don’t know maybe it will get worse overtime but I doubt that

[viscid jungle]

That’s what I’m thinking rn 😭

[spice otter]

why do you want to pentest that address 🤔

[worldly hearth]

That is my VM

[spice otter]

thats a valid reasoning 🤷‍♂️

[viscid jungle]

I apologise for my horrible humour

[simple turtle]

I have completed a room but it's not showing up in profile just it's showing in my rooms section

[rapid merlin]

Step One: sudo nano /etc/hosts

Step Two: Go to the bottom.

Step Three: Add the IP then TAB, and then enter the Domain.

Step Four: CTRL + S, CTRL + X

[simple turtle]

Is there anything to do

[blissful current]

🦹‍♂️

[simple turtle]

Can anyone please help me

[blissful current]

refresh site n check maybe

else report in #site-bugs or #site-support

[simple turtle]

I tried that thing too it's not working