#general
1 messages Β· Page 1005 of 1
arrives
seems like online Starfield
greets
is there gonna be announcement for them stickers
same lol
yeah in 1-2 weeks
larry?!
Evil Larry
Don't disappoint larry
what stickers though
physical sticker of THM , for laptops n all
sold on swag shops?
ya
if i make my own thm stickers and stick them on my stuff (not for commercial reasons, just personal use), would that be frowned upon?
@mossy river
112INR including tax
so like $115USD? LOL
I'm not sure if the policy has changed, but in the past you were allowed to as long as you're not selling them
i want the hoodie
its cool

Stickers sold on the shop are 99p, not including shipping
oh right there was shipping i thought they gonna teleport

shipping would be 8 euros for 2 euro product

@queen flare Nirmala Tai might tax on this too as it will import




my stickers shall remain uncaramelized
Shipping varies, there might be a delay because I'm not sure if I can ship them to our American warehouse atm

This one there is add on azure
ohhh thm based in uk right? if so shippin would be 8 to 10 euros for me cos im in eire
will it be included in premium or buy separate?
Its like amazon clouf security okay
finally knocked out the tcpdump educational room. Gotta say that was far more challenging to wrap my head around than it should have been
you me clout security? 
It is but the products don't ship from the UK
oh...

MS has good security too.. I mean.. they should..
kudos to @shadow isle
i wish india had more offline ctfs @blissful current
yeahh
finding an offline ctf here seems like searching pokemons
India is being spoken. @gray sonnet get yo ass in here
gotta find em all??
Hackathons mostly ..that too mostly for other domains
and for cyber sec , its development /defensive part mostly if there
i googled a while back and most results were from years ago
cant if there's none xD
truf
only goal rn -> gtfo from this country
dang
most of my relatives live abroad, no wonder why tbh
Cloud

I love pentesting cloud but I dont know it tbh @sick lance
cloud sec is pretty in-depth.. tbh.. huge subject.
I like it
I could write books for years on cloud sec... and never run out of content. π€£
So who do you think will be the first Eternal? Will Aquinas get his homework done!?
first u gotta learn about cloud computing , its architecture , how it works n stuff
0day?
0day is already
says he has another tag..?
He's still External.
ooooo 0.0
Step by step to go further
Eternal
Done
Can anyone tell me what does the command 'Curl' does in Linux?
I have question about the aws in tryhackme
I need to finish all pentesting modules right is better right go be ready for aws right?
Just jump in the pool.. if the pool is too deep.. go to the shallow end.
There is a wading pool here too...
If you're in too deep.. get out. LOL
not out out.. just back off and bathe in the sink first. π€£
Nobody but you can test your skillset..
I had to log into my hotmail to take a call the other day... hotmail.. yall remember that??
Not since MSN.
back in the netscape navigator days... LOL
I mean.. you really wanna see a real life pic of me?? LOL
I'm not THAT old.. but I'm not young anymore.. coming to terms with that...
dm me a pic. I'll pull it apart. LOl
I am 46
okay.. gonna delete that now. LOL
Happy belated birthday brother
...dad?
No. You are not rabbit... LOL
π¦
I turn 47 in sept...
Wait, did you not just say you turned 46 yesterday, haha
NO.. pic was yesterday. LOL
Learning techquines how to swim well
I turn 25 in sept. Quarter life crisis. OH MY GOD.
back float... lifesaver.. water wings..
what does revshells.com do/
Dang, lots of September babies haha. Im also Sept 4
I try to inject ai prompot it been 20 hours
leo/virgo========good at sec/hacking
It helps with shells
libra too.. can't lie
oh the commands?
Shut the front door...
Dunno about sighns.. we all good at what we good at.
You're def not good at enumeration. 
We all do what we do.. is good. Learn from others and teach others all the things.
Teaching others is actually one of the best ways to solidify a topic/subject; at least for me
Teaching others also teaches you but this statement is 100% true
If you are able to present it in a way that someone who doesn't know it, understands - it means you've got a good grasp
Its an Online Reverse Shell generator, helps in generating shells in/of various languages/types/encodings etc etc. Explore the website, youll know
I am not teaching anyone AD. π¦
If you can't teach.. you really don't even know. π
i see now
thanks
its very helpful
I'll teach you to teach AD... π
Might take a few years.... LOL
Please do. I am reading this big ass thingy and i am crying lmao
what is hoaxshell and msfvenom?
You should google it tbh
!rank
If you can learn AD in 12 hours.. my life is a lie
That's like saying "PowerShell is easy..."
Ive been learningabout it since a month and i still sometimes forget NTLM/Kerberos authentication
Cant spell them correctly apparently.
As a PowerShell, I can confirm that I am easy.
Wrong server.... LOL
"I learn AD in 12 hours"... - Finished "Intro to Windows AD (45minute course) in 12 hours
Did you make notes ?
I was being sarcastic haha
I had a book once.. "Learn C++ in 24 Hours".. yeah.. that went well... π€£
Me too
"For Dummies..." haha
I had a book "Data Structures and Algorithms in Java".... i cried that night.
The night i bought it
Ah horrors of war
In joy?
arrives
yes
The only books I've gotten so far are only Ebooks for Kindle. The one that I have yet to finish is "The Manga Guide to Cryptography"
I forogot i cannot send pic here
BUT! I do usually take notes, haha
I had a very cool pic for my notes on AD
upload to imgur and paste link
Just upload to an image site, and link it
You gotta verify your TryHackMe account with this server.
π
Also, I've never taken hand written notes.
I've only used Obsidian or Notion for that
For me it REALLY helps.
I love Obsidian as well, haha
@blazing granite iirc you said that use timeshift ?
same cos my hand is like been fitted to me from another person and i cant control it and whenever im usin pen it just writes his own notes so i prefer notion or idk sum notepad
I also had trillium but id just keep malware stuff on it.
Taking hand notes slows things down for me, I'm ADHD AF, it helps me focus on what I am doing
Alr gonna dip bois
us
Ciao ciao
I could've just published my Notion notes for an hour/15 mins here than uploading pic on igmur tbh
Here's mine, it's not the best, but it's progress
Plus, having physical notes helps me study. The way I remember things is I quiz myself throughout the day randomlly on the stuff i am learning. If I don't know something instantly, but I am able to pull it from memory I know that I've got it down. If I can't, I check the physical notes, repeat over and over, and make sure to quiz myself on it in an hour or so
Real
As long as it works for you, its all that matters. I'm sure you can probably have a career in designing the most optimal Obsidian vaults haha
I use Obsidian mostly for projects, then have notebooks full of info. I personally dont need to "digitally" access my notes since I can just Google if i dont recall and dont have my notes
But yeah, its interesting to see how different people retain info differently
I gotta start doing handwritten notes, kinda miss that style.
I'm always re-organizing my notes.
What is happening
first one gives doctor house moment
lemme connect to ya rq im downloading microsoft office atm
not even close to me
@loud marlin thanks man
Gave +1 Rep to @loud marlin (current: #25 - 396)
huh? for?
@loud marlin thanks
Gave +1 Rep to @loud marlin (current: #25 - 397)
Sending Curl explanation
ooh... np
pls do not boost my ego to much heh
I can finally listen to my moronic lecturer for 45 minutes.
Took a bong hit before?
haha I see this meme is making the rounds now
More concrete. Methylphenidate.
to much dumb chemical here =/
Thanks!
Gave +1 Rep to @loud marlin (current: #25 - 398)
listen here you ...
Eh?
sry... i have them in wrong way in my head ...
slow af... gawdz.. LOL
Ah that's fine. It's used for ADHD treatment.
yea. it is for that big way
coffee makes me mellow...
I am joking bro my country's internet is slow asf
arrives
It happens. I lived on 10mb/s for a while.. and prevously dial-up.. LOL
i got 660 points for 1 room lets goo
Which room? I wanna go to 0xE.. again.. because points changed.. and I asked for it but now I'm lazy enough to regret it. π€£
are there many juicy rooms like this?
that give this much?
I kinda wanna just grind to 0x15 now...
@boreal scarab come on, you've been here long enough
an osint room ist called like ohmint or smth
OhSINT
not that one
I already did that one I think... π¦
its also so easy that i can do it
easy is a reletive term...
and i am basicly just a begginer
well the excersises can be mostly solved with google revers eimage search
hi guys
Buffer overflows are easy... for me. LOL
dont even know what that is π
Smashing the Stack for Fun and Profit.. read it
Where heap at?? The Heap will tell you. π€£
Is it okay to link to that whitepaper?? here??
maybe we should hack our way in?
Probably best not to ey
Locked rooms aren't intended to be accessed because the content is broken or outdated
(or not ready to be accessed)
just kidding Love THM , Please send our humble request to open that again for 2 weeks with 0 prizes/scores just for learning
smells like BBQ I'm Sure THM plan the best for us their community.....better go back studying.
THM is AWESOME!!!
hey where can i verify my tryhackme account on discord? (i found token in settings, but where can i apply it?)
using /verify
go to your profile --> manage account go down theres a token Discord
ty
Gave +1 Rep to @gusty inlet (current: #634 - 9)
copy it do not mistakee and send it here its privvate
come here with the instructions you got
good luck in your learning
maybe it is a good thing to let stuff know there is a prompt i get every time im starting a VM
maybe something it about to break i dont know just my duty to show you the prompt, its every time im power up the VM Parrot on the last few days .
well it cant be mounted heh
gettin same thing
Parrot? π
It's a known bug on the AttackBox, it's okay shouldn't affect anything
Is it subscriber only VM?
but there is no corridor

the website doesnt load
How do you guys read the manual
Did you join the room?
walls and walls and walls of text
yea
Have you refreshed it?
Oh, ping 10.10.10.10. See if you get a response
That works
Thanks π
Gave +1 Rep to @loud marlin (current: #25 - 399)

funny guy, funny guy π
might be
might with psilocybe =/
but now i can accualy see the page source evben though its just loading
idk what to do with the hashes
make hash browns 
let's not share recipes and so π
Take 1 part flour, to 1 part egg. And you got dough.
hi here, I am Ciju
nah. here's legal... so no need to homemade... but lets not π
Lets!
Canada
The world
Gondor
could you resquest a friend with me...
wow, cool
thank u
i want to become a co-worker with you to earn the money
if you want, please send me friend request...
Co-worker? I don't do the hiring unfortunately
I have to ask... you're not a bot are you?
Yes, I have timeshit in a laptop with mint
Give it a captcha π
to get friended
does timeshift backup luks header in process ?
I believed so. I used it once on a cipher disk with luks, and I was able to restore the disk to its full glory once when I had an issue
ah... ok
I always make an image with clonzilla too, just in case, but that's me the paranoiac one π π
lol
why?
idk?
You don't answer any questions, instead you keep asking the same question. No one knows why you are wanting to add them to friend list, and in a discord about hacking, its not really best practice...
"wanting to be co-worker to make the money" doesnt really give me a good understanding lol
Not even that, there's a bot that asks for people to become co-workers then adds you and DMs you with spam
I think you are too ambiguous
we are frieds
I donβt know which career path to choose, cloud penetration testing or Devsecops. This might be a stupid question but is there any role that includes both of them at the same time?
so i think they are good guys
https://tryhackme.com/careers/quiz
Try this quiz!
At the end, it gives a pretty good overview of what the job entails
I tried it and it said pen testing
But Iβm also interested in Devsecops
So idk wat to do lol
Learn pentesting with a focus on software development
hello
I think the two compliment eachother quiet well actually. DevSecOps promotes continuous testing and pentesting can be integrated as part of this continuous testing, providing periodic or even continuous feedback on the effectiveness of the DevSecOps pipeline
its my first time hacking and i want to be a hacker like yall are
We aren't hackers, we are cybersecurity professionals
- kali linux developers, probably
can i be one
New skilled unlocked: DayZ rainbolt
Yes
I hate dayz
You can be whatever you like, its 2025 - the world is your oyster
I had fun with it. Better with friends, otherwise its walking simulator, and I get bored so i put up a video on the other monitor, and before you know it Im more engrossed in the video, don't hear the footsteps, and die loosing 7 hours of picking up water bottles
Me too
my demo video for my dis is now all complete, just gotta submit it all in a few days and I'm gold to work on the final module assignment π
it a floofer
@shrewd viper Please don't post such "advertisement/resume" here π
Is Bark a friendly AI? π
content to gpu*
Help Windows 98 is telling me thereβs wizards in my computer who want to help me. Who are these wizards and why are they in my computer
Are they friends with Gandalf and can he help me?
Oh lovely thank goodness
He summons friends.
I mean, wait until you see the talking paper clip.
That sounds horrifying
Just like you
lol
I actually did see Clippit/Clippy yesterday after installing Office 2000. I forgot he was in releases that late
Man, that describes so many people...
Whatβs up OS WAN Lenovos
I was seconds from writing ".... like me" lmao
lol, but yeah Iβm just starting fresh with my UTM emulated machines on iPad since I have a much better way of doing this all now
So Iβm having fun installing all the things again
You're as bad as one of my colleagues showing up to our last CTF with an iPad running a Kali VM
Freaking lol yeah itβs probably this exact same solution, UTM is rad
Itβs just a Mac/iOS front end to qemu and quite nice
But yeah so enable JIT for best results and side load
I need to mess around with the Apple ecosystem more
Hello chat
Gotten real comfy using the M3.
Herrow
the user interface will be terrible
Surprisingly not by the time you add a keyboard case with a track pad
anyways StosVPN is loopback so that my own iPad can pretend to be another machine for enabling JIT and refreshing developer certs
So no more wireless teathering to a desktop which does this stuff over the network and breaks half the time
You're nuts, you know that right? 
yeah lol, but this is way better than my AltStore + SideJITServer setup previously
Why are you doing this?
Because I love playing around with OSes and because I can
Only Mewer makes me laugh when asking "why".
how can i open up a jpg file in the THM reccomended VM without the "apt install eog" ??
I have Logitech combotouch keyboard/touchpad case for my iPad so itβs fun pretending itβs actually a netbook running Windows 2000 and silly stuff like that
Use a different viewer?
Y'know what. This is a mood
meanwhile I can't view photos/videos/audio on windows using the standard media player because it shits itself 
Yeah itβs an addiction of mine. OSes and retro computing are something I sorta obsess about. Installing and updating old OSes is just fun and relaxing for me
Have you tinkered with Quebes OS?
I have no choice but to use VLC
Yes. It's the fact you're doing it on a feckin' iPad that has me cackling 
I realize it requires special hardware, but figured I'd ask. Besides my friend, I haven't found anyone else that uses it
Yes but I donβt have much thoughts about it other than itβs needlessly complex for my needs
lol Muiri, I paid for M4, I need to use this power somehow
That was my understanding as well, haha. Its extremely opsec focused with everything being a vm inside of a VM, but its not worth the hassle
You seen the Windows 10/11 media player paywalled some codecs? 
I'd say no because my media player just outright does not work; however I have indeed π€¦
Amusingly, the old Windows Media Player did not, so the codecs are obviously installed somewhere lmfao
iirc you can technically just install them via AppX installer commands but I will leave it at that
gn guys, i've not studying for a while and i want to come back, i was seeing c++ back then, should i continue or go for other stuff? i knew a little bit about linux (nmap, metaspoil, etc)
sorry for bad english i'm not american
I mean, I just opened the MKV in WMP instead. Instant bypass, and let's be honest, it's infinitely superior than the modern crap anyway.
why better than using windows media player π π
@sinful moon I may need some ESXi adivce soon.. I'm gonna put you on speed dial...
weird time to get into it but sure
I've got some ESXi advice.
annnnd.. moo lady. 
exhibit a
Yeah lol, donβt use it anymore
Nuke it, flip Broadcom the bird, and install proxmox
Okay.. well I may need WORK advice soon.. may.. LOL
Broad-con
The absolute final straw is when they screwed over homelab users like me
I've tried dism and sfc and it does not detect anything wrong, tried some other stuff and then accepted it was a microsoft product and therefore bound to fail
my dad still uses an older version of esxi, I use proxmox#
On top of paying $200 a year for their licenses for homelab, you now need to pass one of two VMware certs to even qualify
I mean:
- I'm not American either. Half the chat isn't.
- What are you aiming for?
Yeah.. and... I'm gonna push to move on... frfr
Migrated all my stuff to Proxmox with no regrets
Something something minimum core count as well
I use mpv π
thatβs even more recently than my switch
Yeah. A week or two ago
They bumped minimum core count to 72 which is excluding small business users even more
pay more for cores you donβt need
Or bankrupting them
mhmm
I've yet to find a single product Broadcom have actually done a good job with. They really are the graveyard for good software.
I do technically have 72 logical βcoresβ in my dual Xeons but shh
Have you got any experience with the enterprise licenses for Proxmox @sinful moon?
I do not but I know of the plans
... Plans?
I'm thinking Azure honestly.. MS has kind of got the game rn...
basically the lowest Community plan is just to ensure you get the entripise repos which are stable releases instead of rolling release
Oh, subscription plans
but they keep on messing with the UI... real bad...
Yes unfortunately, but at least for free you get the equivilant of ESXi + vSphere without feature limitations
Twitch or YT?? One is free.. the other is also.. π€£
maybe vmware will enter the list of companies/products that were killed after an acquisition. They head it that direction for sure
100%
That's broadcom's MO in a nutshell.
At least Workstation is still okay... And free
ttv/nerd4life tyvm.. (totally not me... so I'm not promoting or advertising...)
It just sucks, prior to Broadcom I was practically a VMware evangelist with 15+ years of experience and nowβ¦ big meh, donβt use them
Dr disrespect 4 life
In this video I discuss the new updates to OpenSSH 10.0 including post quantum encryption enabled by default. Read the full release notes below.
https://www.openssh.com/txt/release-10.0
My merch is available at
https://based.win/
Subscribe to me on Odysee.com
https://odysee.com/@AlphaNerd:8
βΏπ°π΅π²Help Support the Channel by Donatin...
YAY
I wouldn't worry. There is now a grand total of: one active admin, one active mod, and one active trial mod. Last I checked they're all UK based.
Yeah desperate move to still try to get folks into the ecosystem, just sad
assuming the encryption actually works and is not weak in any way
Great for hackers though π
mhmm, although I will not say my bit about how easy they made it to do otherwise previously (I think it was intentional)
If you really wanna check out my gaming channel.. it's in my BIO on discord... π€£
I mean, that's a given 
Not really π
Mhmm, imho that was the same sorta βinβ they were low key giving to convince people to get in
You don't like Trackmania??? π
I don't even know what that is
I have not played it despite enjoying car/racing stuff
Aye, like Microsoft in the 90s with their debugging license key lmfao
LOL cool
I shall be saying so long and good morrow to yall..... in a few..
moo to you all
Okie see ya if so, nice chatting as always!
Wonder if any orgs actually did just do a GitHub trawl rather than buying Workstation.
I suspect I know the answer...
Yes
Whew I wouldnβt recommend it for orgs but yeah for personal folks who just wanted to learn VMware it seemed perfect
Then again Iβve never known VMware to actually do audits to small/medium business lol
Aye
The other thing they did was give it free to education establishments. Well, 365 day trial licenses
Ah neat
Again, sink the hook in so they'll come back and pay
Yeah lol, which is why I think they previously left the Workstation Pro so βopenβ previously. Get individuals into the ecosystem so they were prepared for workign with the infa professionally
itβs just a shame how things went
you build it and they will come π π
Every time you say hook link and sinker I keep thinking of that time you got a rev shell on someone in here
back in 2021 when I was hired, I was like βyo I have decades of experience with Linux and VMwareβ and my boss was like hot damn
@chilly veldt long time no see. How was the italy/china trip?
Hahaha. Before this afternoon I would not have got that reference. One of my colleagues was talking about that film 
lol suprised you didnβt at least hear the phrase and etc
Hey, I did not get anything. I just executed the commands he told me to execute and didn't bother informing him he had them the wrong way around 
haha ouch
It was pretty good actually, China was just a lot of relaxing while scouting the city and seeing how many cameras there was, Italy was really nice, good bit of competition
I think I remember hearing about that
is that w motivation?
True true, but still funny to think about
Yeeeee, every time I look in pinned on this channel
Good lesson for them, maybe read and grok the commands you are trying to run lol
What was funny about my trip to Italy, the first restaurant we went to was a British one
Best not to send the command here
... There's a reason that rule exists lmfao
lol totally fair, which is why I was phrasing it as the jumping off the cliff thing
And yes, it's because someone did actually trick a user into doing that
my bad
Multiple times
w8... ill try and let you know if is safe...
man I think my mate's trying to surprise us and join us on the night out out, I caught him on snap maps in the area and said he best be joining us π€£
Again, who's gonna enforce it? 
π so much great food in Italy and you go to a British restaurant π
cheeky bugger installed a gps spoof app and now he's suddenly in syria trying to hide that he's coming with us on piss up
Hey hey!!
They had a great unseasoned fish and chips
Thinking of commands that can wipe your drive, I have never once made a mistake on dd, I donβt understand how many people like donβt double check when they run it
Were you around in the Elf era?
We did also get a good t-bone steak
btw the addition of status=progress a couple years back was a game changer for dd
actually shows you what itβs doing instead of justβ¦ waiting
previously you had to pipe it into something pipeviewer for that
Saves using the old sigkill trick
Wait, was it sigkill?
And of course, the ungodly amount of pizza
Think so. You could send it a signal with a specific argument and it would spout out its progress.
for great meat go to Argentina, so far best meat in the world
That t-bone steak was 144 Euros
hmm, I had only heard of methods just piping it into external progress apps. Interesting
Found it
I did also get vegetarian food @pallid lotus don't worry
USR1 signal via the kill command, not SIGKIll
Thatβs super cursed still, but yeah
Says the individual running VMs on a feckin' iPad 
like I said best meat in the world and way cheaper than that π
lol now I myself admit how cursed this is
Iβm sure Tim Apple is not happy with me running Windows on my iPad on stock iOS lol
I'm getting my meat on, eating as much as I can for when I go back to Israel
Ironically I just installed FreeBSD ealier so Iβm BSDing on BSD in a very round about way
I didn't mind, it wasn't me who was paying
Anyways if anyone wants to get their feet wet, UTM SE is on the App Store for anyone to install. Just expect 486 to Pentium levels of performance without JIT
I wouldnβt recommend any higher than XP for UTM SE and even then, be prepared to wait
Although Windows for Workgroups 3.11 is perfect if youβre a weirdo like me who loves that setup
I mean, can't be worse than Windows 11, right?
lol indeed
Also before anyone gets too excited, no Windows for Pen Computing and Windows XP Tablet edition are not ideal, since the USB βdrawing tabletβ input in qemu and UTM is just a normal mouse input and not actually true tablet input
You saw the rage about recall?
Theyβre finally rolling it out for real, but we shall see
but yeah they changed to opt-in thankfully
still trivial to disable via GPO or regedit
I don't think anything is, at least until windows 12 will come out π π π
Yes we all heard about it lol, I brought it up in staff meetings when it was announced
We are going to talk about it soon
Just as above, apply the GPO or the regedit via your RMM and forget about it
that was a total recall π
What's RMM?
- a lot of companies, probably
Remote Monitoring and Management
Itβs an agent IT installs on all machines to do automation, monitoring and much more
(it was a joke on a lot of companies that doesn't have that)
Ah okie
Discords formatting messes it up
Weβre a business of like 8 techs with a hundred clients so if we have robust RMM thenβ¦ whew
Yeah, that's understandable
I do know like single tech internal shops who were just like βwhats rmm, I just walk to each computer and do the thingβ whew dude
Oh FFS. Not this shit again
We just only roll out win10
Youβre going to have a ton of fun in October then
Yuuuup, it's finally here
Makes my jobs as an incident responder quite lovely
If youβre not proactively doing upgrades rn, I would highly recommend your org do so
When did they make that change?
We did a build review of our new Win11 desktops a month or two ago
As of this month they re-announced it
I mean, that's the upside LMFAO
Wonder if they've disabled it in their golden image since the testing was done

that's "fun" until you have hundreds of clients and everybody wants support and problem fixed yesterday π
At least it's opt in this time
Afaik itβs opt-in
Already got a good bit of CTF challenges planned
the big hoopla last year was because it was opt-out
I mean, that and because it's an astoundingly bad idea
Watch it being an "opt-in" aka it's a question you'll get asked when you install the machine
Which many people just say yes to
Anyways Kyooty, I wasnβt kidding, your org is going to have to bite the bullet and itβs best to do it before you stop getting updates entirely
And if you say no it just goes into an "are you sure" loop
Yup, indeed, but we'll see how we'll handle it
Totally fair, thankfully weβre over half way on our Win 11 upgrades
Like win11 updates ππ
So happy that I just sit with my Linux laptops and servers
opt-in in small letter under those 300 pages that nobody reads π
Haha, our guys are brutal for that. They ain't upgrading anything. They're just allocating Win11 devices and instantly nuking the old desktops lmfao
God help anyone with stuff stored outside their roaming profile 
lol canβt complain there, hardware refresh at the same time isnβt a bad idea if itβs time anyways
oh ouch lol
Only thing I touch that is Microsoft related is azure
I figured you did fuller migrations than that
Iβm so sorry Kyooty lol
also idk why I donβt just call you Bella but shh
Azure and Entra ID is such garbage compared to AD and GPO, why did they have to reinvent the wheel and then spread it over 60+ different interfaces
And only thing I touch in Azure is Sentinel π€£π€£
And defender
Gimme good old fashioned AD hacking. If I wanted to hack Oauth I would take an app sec test 
lol then count yourself lucky
because that's what microsoft does
Agreed Muiri lol
I'm a SOC employee
Iβm a βinfosec everythingβ, sysadmin, compliance manager, devops, and still help desk all in one π
Nothing, what you did is illegal
Still illegal, could get you in serious trouble and jeopardize your future in the security field
Only test with explicit authorization to do so. Yes they can continue to suffer with their bad practices because who knows how they will react
I got 2 jobs, internal IT responsible and SOC employee
theyβre also in violation of PCI DSS compliance with that
so be careful with your use of credit/debit cards there lol
curiosity killed the cat, and can land you in jail, so just redirect you curiosity to a safe environment, THM has a lot of rooms that can satisfied your curiosity π
Yeah imma do that, curiosity got the better of me. I wonβt do it again π
As a cybersec expert consultant, I'm hourly
Good idea, and donβt worry about asking, we just want to steer you in the right direction
Yeeee, don't want another person get hit with a lawsuit
Thank you, I wanted to ask because I donβt want to get in trouble.
Gave +1 Rep to @sinful moon (current: #32 - 303)
Yep exactly and now you know. No worries, just always check before hand
Wanna hear the best part about being a consultant?
If a business wants this kind of activity, they will ask on HackerOne and similar sites
Yeah I got you, first and last time this happens lmao π
Whatβs that Kyooty, Iβm a consultant as well
Everything you do is expendableπ
lol
if you want to stay out of trouble, rule of thumb, don't mess with things that aren't yours or you don't have explicit and written permission of the owner π
spare wireless router you own is perfect for learning Wifi stuff
Did so myself back in the 00s and learned tons
No joke, got a budget of 8 hours to get used to a new NDR tool and onboard it to our system, took me 3 hours in total,
The rest is free money
set up your own old router to use WEP and enjoy cracking it in under 5 minutes.
lol if you do want to have some fun, in non-infosec tech related communities where young folk are self hosting internet facing services and talking about it, theyβll jump for the opportunity for you to do some testing on their setups explicitly
this is for nagi, just continuing Rexβs thought
Understood dude, I didnβt do anything to it, I didnβt exploit anything. Just curious, I understand the consequences, sorry for what I have done, in came from a place of curiosity not a place of malice π
Itβs actually funny how eager self hosting folks will jump at the opportunity for you to take a poke, and you will always find something wrong with their setups
(lol besides the obvious of exposing their home network to the internet via whatever they are opening up)
lots of these kids have never heard of a VPS or donβt have the cash lol
curiosity is a great thing don't get me wrong π
Just yeah use that curiosity to replicate insecure setups on devices you own and go to town!
as I said above, the WEP cracking is a basic right of passage imho lol
Okay, will do. I got to start doing this, it sounds fun
Yeah wifi stuff is really neat and great to get into
For WPA stuff you may not have the kind of network volume to make that happen but itβs still good enough to test client disconnects so you can grab the handshakes and more
For WPA your attacker machine spoofs being the router and telling clients to disconnect so you can grab that handshakes when it auths with the real router. Grab enough of those and you have what you need barring WPA3 improvements
Dang thatβs sounds freaking awesome, imma try that after some THM rooms. Letβs see what happens, thanks for the advice guys, I understood the lesson from today. Thank you again! π
no problem!
Another thing, how similar is the SOC simulator from THM to real world SOC? I have done SOC but I havenβt tried this simulation
Iβve not tried it yet but Iβve heard good things, but let us know if you have any questions!
Technically Iβm an SOC managerβ¦ for our outsourced SOC so lol, I donβt know how much I count
Although realistically I guess that just makes me level 2 SOC
Our SOC is so so, but I often have to make my own determination that disagrees.
Sorry SOC, I know this looks sus but itβs literally the head of a business trying to play Civilization III via Steam, and it was detected for weirdness because itβs an old game
Me who is hired as a level 1 analyst, but also does escalation shifts cause I'm the one with the most practical knowledge and experience
Interesting, I have done SOC 1 only but have not completed the SOC rooms from THM, doing the cybersecurity path so I can get a refresher for the network and cryptography modules
Good stuff!
Would love to get myself a SOC 1 position but I cant afford to step down on salary... Have to support family.. Whats the avg salary of soc1?
Depends highly on where you are at geographically and even then how big is the org youβre protecting. Thereβs no one answer
Does anyone know where the mods went?
THere was supposed to be an annoucement today
well... watching vids of how to configure kitty sounds weird to listen/watch =/
Just hit 6 figures as a cyber defense analyst but hardly that. I mostly a sys admin
Could you go remote as a soc analyst?
If youβre at six figures then SOC level 1 will be a downgrade, but you could potentially get much higher up in that chain
Yes but it highly depends on the company
Hm I see
million dollar question, I've been asking that question for a while π
Just not sure why youβd want to switch to SOC if youβre already a analyst in infosec. And sysadmin is fun and rewarding side part of my job personally
Iβm still 16 lol still got a lot to learn
Yeah thats what I was thinking. Reason I am doing SOC 1 THM for cySA and then pentest+ after (required for schoo). In school for my Masters
mhmm doing these courses are invaluable to learn
I may just transition to being Linux sysadmin for a while if I can get off my butt to update my resume, friend let me know about a good position
Love being a linux admin lol
That's the right attitude, even if you were 30 or 40 in infosec always have a lot to learn. The moment you think you know everthing you're done π
Yeah Iβm the sole Linux sysadmin at my org but that doesnβt mean a ton at this scale lol
Agreed mate Iβm 16 and young, I hope someday Iβll make my career innit
Yep Iβm in my 30s and in infosec, this field always keeps moving and thatβs why Iβm here
Real shit
How do you become a Linux admin btw
it keep it on your toe, that's for sure π
learn to use Linux real well lolol
Was CEH hard
No
What did you use to study
I was lucky, we had a proctored class in my masters that taught us hacking and we got CEH out of it
at least with Linux, if you use it long enough, you will be required to learn functions of how to administrate it. Compared to Windows, you can be a power user and never learn AD/GPO or Azure and still think youβre hot shit before you see how much you have to learn
indeed, I've seen some so call linux admin that have to google how to move files in term π
Lucky man
holy crap Rex that is too funny
even my boss who doesnβt know shit about linux can still get his way around vim and the basics
Although fair we hired a Windows Sysadmin who was much the same⦠he is no longer with the company lol
Crazy
I am very impressed to see someone jump 930 points within 10 min on my league board!!! Really impressive!!!!!!!! I must really know how you did that???????
lol oh boy
not having a job or life
that's the new gen for you they watch 2 tik toks and a 5 min youtube videos and they think they are Linus π
Uhm
What other questions do you have while I"m here?
I mean thatβs no worries if youβre preparing for the field
Hacking = admining other people's computers by force
Do you recommend OSCP or CEH, what do you think I should go for
That would be called "spamming answers from answer dumps" and or "automatically spamming answers from answer dumps"
OSCP is sort of the way to go, CEH isn't bad depending on your country, but it is rapidly being replaced/phased out
Probably more correct lol, what muiri said
I see
HTB has a cert, CPSB or something that is pretty good
Pretty much the only place CEH has any respect these days is India
Oh damn
For good reason
OSCP is kind of the gold standard and one Iβd love to have
Any other certificates compared to OSCP?
Sure will be much help
π
okie Iβm going to get back to installing Windows 98SE on my iPad but Iβll be around lol
I wish there was still a quotes channel
there is one around π

lol hush, it is happening
Because I can 
Yeah, that's what I asked about two hours ago lmfao
OSes and retro computing is one of my obsessions
after I install, Iβll use Windows Update Restored to fully update this. Does that make Windows 98SE secure? No, but itβs fun lol
I also think retro computing is cool. My favorite is mid to late 90's stuff.
You ever tried installing Windows 98 on an iPad?
If not, you're in for a treat...
No, lol.
there was a thing like 10 years ago
Awesome, me as well. Sorry for everyone who has seen this 38 times already but, hereβs my PIII machine
where they started at windows like 95 and then upgraded it every version up to like xp or 7
Oh god, the bloat...
Yeah common meme task
I was thinking the pic is coming π π
I think itβs gross because yeah, the bloat indeed
You could also start earlier with at least a Windows 3.x install to 95 upgrade
yeah no thanks
same honestly, I donβt see the point
Some could say the same about what Iβm doing right now, but at least Iβll be able to play software rendered games and enjoy Encata 98 and stuff because why not
....
Do you have a carbon monoxide monitor in your house? Totally.... totally unrelated π
It would have been cool to install MS-DOS on it.
oh hush, but we do lol
I already have
ask me about DOS memory management because whew itβs a whole thing
malloc (Random(333-4444),Random(000000-FFFFFFF))
lol fair but no I mean Conventional Memory vs Expanded Memory vs DOS Extenders and more
DOS is so cursed lol
Anyone here watching any golf?
when you typically install βdriversβ which practically run as TSRs under DOS, they just load themselves in conventional memory (the 640k) and program will complain you donβt have enough RAM to run. So you gotta edit your autoexec.bat or config.sys to free up space or more realistically use memmaker in MS-DOS 5.0 and higher to do it for you.
Theyβll load your TSRs and etc in high memory above your 640k conventional memory
Thatβs how you can still have CD-ROM, mouse and sound card drivers working as expected and still load large apps
and it if wasnβt for my silly emulators and VMs I wouldnβt have this knowledge, because I forced myself to do pure DOS on an emulated 486DX2 in 86box to learn
Tell me your secret!!!!!! How did you score 930 points within 10 minutes on the league board??????
Nah UFC
see miruiβs post about people just spamming answers from walkthrough without actually learning
That makes sense!!! They only hurting themselves!!!
Yep for sure
hello
Where can I find this post??
They just said the exact same thing I did and I couldnβt find it immediately with plenty of chat going on
ok
iirc they literally relied to you the last time you asked this
Yeah!!!! I been in first place for 4 days straight. I was pulling 2580 points. The guy in second place was at 1928. I refresh the league board every 10 minutes. 10 minutes later, he took the lead and went from 1928 to 2858!!!!! And for the last 4 days, I have been on for at least 16 hours a day!!! I knew something was off!!
Yeah theyβre just gaming the system, donβt worry about it
as you said, theyβre only hurting themselves by learning nothing
I am actually sitting here laughing about it now. I am not worrying about it. lol!!! As we would say here in the South, Bless his little heart!!!
go your own speed and learn as much as you can, people get too obsessed with levels and stuff that they lose the point and forget about the knowledge, they use dumps and miss the whole point. What you learn worth more than any points π
Absolutely a great point!!! I sometimes I have to go through a room twice to get a better understanding. Once, it took me 3 days to through one room. If I remember correctly, it was "What the shell" room.
Oops 
Is that the maker of impossible rooms? π π
Hey, I have only ever put out one actually impossible box... and that was a joke.
... Mostly
It was a great room. I will revisit it to see if I can do it better. I am getting the hang of shells for I did more shell rooms. I am finding the shell rooms to be more fun.
I will never do the log4j room
... That was John Hammond lmao
Nothing to do with me
Wasn't it you who made a room similar to that, with the one website
SHAKER
THATS THE ONE
Also not mine
The last content of mine you've seen was 2021.
I have had almost four years to get more annoying.
You should see the latest ones.
Guys, I'm giving up cyber and doing truck driving cause I can go anywhere!
Jk jk fun game tho!
Don't worry, I'll probably test it
No you won't. They ain't going on THM 
why not lol, my response for log4j got me recognized as infosec material in the first place
I tend to build things for private use these days. Even if I put them public it wouldn't be on THM.
Can't be bothered with the upload process, and I definitely can't be bothered waiting a year before the box releases.
It was the shaker room I was talking about, I got so mad at hydra that I made it a personal job never to do the room
Hydra was annoying for a while until I started to kinda figure it out
Still annoying
Oh, I'm talking about the user Hydra
get on my level bro <3
I don't know Europe D:
lol thatβs the whole fun of it
They drive on the wrong side of the road x.x
You Japanese?
No theyβre not lol
I'm Sapnaird and Native AMerican aka American
:)
Spaniard*
Oh, well, in that case, driving on the right is wrong
No
Yes
Driving in general is wrong
lol even better
You gotta drift
only drive in truck sim, best
I mean. That took an unexpected twist. Can't argue with that logic.
I did a couple of hours ago
Japan is left hand drive so make of that what you will
That's why I asked 
Yee I could just tell it was weeb things
Fair lmao
which is why I want a Japanese exported car
Toyota
Katakana only name on Discord is sus for such
Would have made your response to "wrong side of the road" very funny if they had been
I love my M3
Kanji ony 2 characters tho
I like the kata version
I do not even know how to respond to that because lol what
Do you even know at least Hirigana and Katakana? Beyond just Kanji
Fair but even then thatβs weird since hiraganaβ¦ okie fair enough then
... Did you not learn hiragana first?
Hiragana is best for native Japanese while Katakana are used for loan words and technology terms
e39 is nice
Respectfully, we wonβt be the only people who call you out on such lol
I have most of my social media names in multiple different languages that cannot be typed on a "normal" keyboard
Mine is just a pure shitbox, can't even pop the hood
I mean IME or alt keyboards are typical these days
Anyways Iβll get into the car chat with the Acura 3.2TL (1999) I used to have, lovely car
V6 with dat VTEC
Yea but thats little extra annoying
I suspect "normal" may depend on your locale 
Japan does use QWERTY keyboard but with IME and printed overlays
Really? intersting
Thanks for the free movie πΏ
Gave +1 Rep to @chilly veldt (current: #8 - 977)
You're welcome
Just a quick wikipedia example. Typically theyβll have more overlays than just the hiragana
That is an ISO enter bar but shh you only said qwerty
I noticed how you can screen shot with a section of the page, how do you do that?
Are you kidding? Which OS do you want this info for
Win+Shift+S
have fun!
Youβll get a bounding box to make your screenshot from
unless you change your clipping tool defaults after that, then you have to use the helper at the top of the screen
Got it!!!! I just tried it. It worked
Very good!! I use to never own a computer of any kind. I stopped internet for scammers almost cleaned my clock. After 7 years of research, I went down the rabbit hole. I wonder how they hacked me. In my search, I came across security plus. I figured, what the heck, I will get certified. Now I am here with little knowledge on this tech stuff!!! I came a long way.
Totally fair and sorry if I sounded condescending, everyone has to start somewhere and it sounds like youβre on the right track!
Interesting choice to attempt for Security+ after all this time but I canβt complain, it will ensure you know the basics to protect yourself and others
And yep THM is a great place to learn the info you need to get up to that
You know who else wants to attempt Security +
Yeah!!! It wasn't easy getting Security+ with zero knowledge!!! I should have probably got the A+ first. Another thing, I don't have the option to react to comments and it is enabled in my settings.
Iβm gonna keep my mouth shut this time
You need to link your TryHackMe account to your Discord account to gain access to things like that or uploading images and such
Oh. Ok
also lol idk why that link came up in my search, one sec
All about TryHackMe Discord Server.
It's /docs discord verify
ok
very silly that changed
New articles
I do know itβs a search but lol now a bad result is the top
so maybe we could just have a bespoke command if itβs going to be this silly
Regex
good morning from australia
that's my cousin π π
good evening from the other side of the world π
where u from?
guys what should I do when using a library wifi? Do I need to turn on VPN or something?
thanks
from here, there and nowhere opossite from you π
If youβre on a public WiFi and not transmitting anything sensitive, who cares. With HTTPS it will be difficult to do anything about. If youβre doing actual work stuff or more than sure, use a VPN
If you were in my situation, what would u do?
I'm just studying rn
If youβre a student and youβre just studying then who cares
If you were doing work for a company, then yes youβd typically connect to the corporate VPN so sidestep any issues about confidentality
great advice π
Just dont put your sensitive data into site that arent HTTPS and youll be fine
Mhmm threat modeling wise, someone would need to comprise the remote sites own private keys to even decrypt your traffic
Unless you are doing something extremely classified, and someone knows that, no one is going to go through the hassle of trying to decipher your HTTPS pcap files haha
It was indeed a way bigger concern in the late 00s and early 90s when less were using HTTPS and TLS for their communication
back in the late 00s, sure anyone could see what you were seeing on AOL Instant Messenger but lol, times have changed
Oh man, who remembers the AOL discs in EVERY newspaper delivered, for like 5 years
At least here in Western Canada, you would literally see the streets literred with discs. You would clean up your grandmothers place and jsut find them in random crates
before my time π π
omg
also that's not a disk, that a cd-rom π
It was early 2000's i think
...
