general

[cosmic pendant]

A person just like you!

[blissful snow]

is that bad

[cosmic pendant]

Nope

it's just a thing 🙂

[blissful snow]

dang it wasn't here for it

[cosmic pendant]

oh you just joined

welcome 😄

[blissful snow]

not just

i been here for a few months

[cosmic pendant]

https://tenor.com/view/oh-honey-no-gif-5584828

[wind lake]

ive been here many moons

[autumn solar]

gets Narnia flashbacks

[cosmic pendant]

This is the first step to a year! What do you think so far?

[blissful snow]

I really like it, here it's better than the rest of the cybersec servers I've join and more active, also i love the community.

[cosmic pendant]

Good good

[blissful snow]

how long have you been hre

[cosmic pendant]

if you check my profile you can see that

[blissful snow]

that's new

dang

[wind lake]

tis not

[blissful snow]

to me

[wind lake]

ah

well then yes

whats your deal @blissful snow whats up what ya doin

[lyric grove]

.

[blissful snow]

red teaming , security researching, and coding

[wind lake]

very cool

are you in industry or studying?

[blissful snow]

studying

[wind lake]

in school?

[blissful snow]

still in highschool so on my own

I'm not a bot i was gonna type that at first the reason i said that because it was pretty fast

[wind lake]

oh youre a bot?

[wind lake]

nice, gettin at it early is always good

[blissful snow]

yeah,

i got into coding first then went to cybersec

[bleak quartz]

same

[blissful snow]

I'm gald I did it's really use full

[rapid merlin]

Does it take a while for my level to be reflected on my discord profile?

[wind lake]

nice. what languages do you know?

[wind lake]

yes

[bleak quartz]

prob every hour or sum

[rapid merlin]

Oh right thanks

[bleak quartz]

don't take my word for it

just a guess

[near sapphire]

hi bee how u doin

[blissful snow]

do you count html , and css

[cyan parcel]

https://tenor.com/view/lets-party-archer-you-yes-you-pointing-gif-15094779

[wind lake]

i mean

ehhh

sure

[wind lake]

doing okay how about yourself

dr karev

[near sapphire]

sleepy

[sick lance]

Once a day, or if it's rate limited a few.

[wind lake]

look its mouldy

[blissful snow]

ok so, html,js,python,php,sql,c,asm, and c++(a little),

[wind lake]

very nice

[cyan parcel]

I don't know about y'all, but my spine is fkd

I got love for you Jazzy

[wind lake]

c and assembly and you aint even out of highschool? good job

[rapid merlin]

I’m trying to finish up the presecurity and cyber security 101 and then taking my path into pentester

[blissful snow]

same school chairs

[blissful snow]

thanks ,wbu

[twin ridge]

Gave +1 Rep to @wind lake (current: #70 - 128)

[bleak quartz]

That's hella nice

[wind lake]

why is ur spine fucked (i say, sitting like a fucking shrimp in my chair)

[wind lake]

MWAH MWAH MWAH MWAH

[wind lake]

im really rusty with everything but i learned python c and asm in college when i was taking my degree

i know a little bit of c++

[blissful snow]

depends if your back is used to it then its normaly resting places for it, but if you try to sit up its prob gonna be uncomfortable

[blissful snow]

cool

[cyan parcel]

Cybersecurity yoga

[cyan parcel]

Sitting isn't a natural position

[wind lake]

i have a standing desk

[blissful snow]

what is

[near sapphire]

oh hey its the infamous mulder

[wind lake]

the motor is unplugged

[cyan parcel]

Yoyo

[blissful snow]

would you recommend?

[wind lake]

yeah i would

theyre good

[cyan parcel]

Standing desk + treadmill combo

[wind lake]

im just lazy

[wind lake]

thats the real shit

[blissful snow]

i would fall so many times lol

[near sapphire]

real definition of sweats

[cyan parcel]

I need this in my life though

[wind lake]

standing desks are great tho, i really need to use the standing feature of mine more

[cyan parcel]

Jazzy you need to plug your desk now

[wind lake]

but you kinda gotta make asure your cable management isnt absolute garbage

[wind lake]

come over here and make me

jk i might

i dont stand enough

[cyan parcel]

Only if you offer a burrito

[wind lake]

you remember when i sprained my ankle like a month and aa half ago?

[wind lake]

burrito place a block away lets go

[cyan parcel]

I do

[blissful snow]

i hate messy cords

[wind lake]

its still not right

[blissful snow]

gotta fix mine when i get home matter of fact

[wind lake]

i need to go to dr but i forgot about my last appt and now i have a noshow fee and i cant pay it rn :|

[blissful snow]

i never heard of a noshow fee

[cyan parcel]

Oh shit, you checked a doc? You might have fucked something for real

Craaaap

[wind lake]

it might need physio tbh

hopefully not surgery lmao

[cyan parcel]

It's a thing in ultra-capitalist cities, same in London

[wind lake]

but like, the bottom of my foot hurts if i move it a certain way

and walking up and down stairs isnt great

[cyan parcel]

Might be muscular 🤓

Soak in hot water and buy some arnica @cosmic pendant you too, buy arnica

[blissful snow]

does salts work?

[wind lake]

whats arnica

[wind lake]

the ankle itself still kinda hurts too though. on the side where the bone is

but its mostly the muscles

[cyan parcel]

Mountsinai lol

[sand trench]

@sick lance

[wind lake]

hm

[wind lake]

still have to finish the game... just got out of the otherworld hospital

[sick lance]

Noooo

[sand trench]

now alan wake is better :P

[sick lance]

Ding ding

[wind lake]

scrubz mute shadow for SH2 slander

[wary ocean]

the fog reminds me of the mist movie

[sick lance]

Oh that's the elevator for Alan Wake as it's not on the same level.

[cosmic pendant]

I bought a harmonica, it makes sound

oh boy

[sick lance]

Did you by any chance read our rules?

[cosmic pendant]

New account and been on the server for 12 minutes.....

[wind lake]

what are you? if youre my worst nightmare....

[cosmic pendant]

Apparently reading for him is his worst nightmware

[sick lance]

Yeah yeah.

So you claim

[wind lake]

okay thats actually pretty accurate

[sick lance]

Let's not be sending malware to our members.

[wind lake]

im afraid of men

[wary ocean]

theres plenty of sites for malware analysis in static rooms with just the effect of said malware

[loud marlin]

@cosmic pendant what day it arriwe ?

[wind lake]

simpy is not the place for that. malware analysis is a topic reserved for experienced and vetted individuals in this server

[sick lance]

Malware is reserved for our advanced channels. ¯_(ツ)_/¯

[sharp citrus]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Apr 24, 2025, 5:08 PM

[blissful snow]

what leel is that again

nvm

[cosmic pendant]

soon

[wind lake]

cheer up pal

[cosmic pendant]

How much exprience do you have? Are you in the industry?

[loud marlin]

oh biy

[grim sparrow]

:mute: burninhell122#0 has been muted.

[blissful snow]

4 more levels to go 😢

[wind lake]

just become community mentor then you dont have to

[blissful snow]

I wish i could

I don't think I'm close yet.

[balmy ridge]

anyone here know of parrot debain and good resources for learning how to use the pentesting tools

[cosmic pendant]

...................... isn't it the same as anything else?

you get the tool to run, you use it?

[loud marlin]

50/50

[blissful snow]

beside windows

[sick lance]

Windows can be used to hack.

[wind lake]

sorry i only used partridge debian

[blissful snow]

but not using linux tools

[wary ocean]

anything can hack if youre brave enough

[blissful snow]

calculator

[balmy ridge]

lol

[cosmic pendant]

It's all just packets and bits.....

[balmy ridge]

parrot good

tbh

[last harbor]

Ik a guy who hacked using a firestick

[blissful snow]

yeah solid and smooth

[cosmic pendant]

the english guy from prison?

[last harbor]

Yh it’s nice

[balmy ridge]

lol do we know the same guy

[sand trench]

just compile all the tools for windows

[last harbor]

Yup the gta leaker guy

[balmy ridge]

ye on utm vm its seamless

[sand trench]

as nearly 100% of them are open source

[balmy ridge]

lol i knew malone

l0l

[cosmic pendant]

Yeah, he got screwed for that, what an idiot. couldn't keep it to himself..

[cyan parcel]

The audacity

[balmy ridge]

When I was a kid I used to be a skiddie on raid forums

lol

[blissful snow]

tryhackme is a good source 😉

[sand trench]

shadow is getting old

[balmy ridge]

You think?

[sand trench]

their left shoulder blade is fucked up

it hurts so much

[balmy ridge]

I want to get into team red pen testing if anything, I am better with the se aspect.

But I know technicals are most important.

back then I never realized sql was easy

[blissful snow]

same

[balmy ridge]

kids were hijacking chat boxes off that

[sand trench]

mongodb is also easy

most database software are decently easy for any IT person deal with

[balmy ridge]

does it make front end ui?

confused

[blissful current]

ello

[blissful snow]

how oold

if you don't mind

[sand trench]

technically 5528 years old already :P

[blissful snow]

How'd you hack life.

[blissful current]

mongodb? its Backend , data storage/manipulation , type of Non-RDBMS

[balmy ridge]

Ok I see, I am not an expert yet so I have yet to utlize stuff of that sorts.

[blissful current]

no worries

[balmy ridge]

I took a break from the interenet when I went to college

grave mistake.

[blissful current]

Oh

For UI design u can use Word Press /Figma like softwares

[balmy ridge]

replit and deepsite seem to be good @blissful current

Have you seen either of those.

[blissful current]

Replit yes
, not yet seen Deepsite tho

[sand trench]

that is a secret for you to figure out :P

[balmy ridge]

Deepsite seems a little better than replit gives you the html, and it can be run locally and I bet it wont require that much resources @blissful current

[blissful current]

Capture the Age

[blissful snow]

lol

[balmy ridge]

I bet you can make a tree with it as it runs off of deep seek

My issue is docker doesnt wanna work on windows 10 for me

[blissful current]

ah ok

[balmy ridge]

always dumb compatiability issues that prob are easily fixed.

just I am not too sure

and dont work witha nyone really, last guy I worked with yelled at me for him being to cheap wiht the project.

[blissful current]

yeah , by this year they'll discontinue and shut off Win10 i guess

[rapid merlin]

How do I contact a mod?

[balmy ridge]

Yea they want a backdoor to everything lol

[blissful current]

u dont contact mod , the mod contacts u before xD

[sick lance]

Ping one if you see one

[wind lake]

why

[blissful current]

scrubz here

[balmy ridge]

Is it easy to run docker on a mac?

[wind lake]

https://tenor.com/view/wouldnt-you-like-to-know-weather-boy-gif-15559185

[blissful current]

lol

[blissful current]

idk dont have a mac so no idea , u gotta search on google for it

[balmy ridge]

oi bet

[wind lake]

afaik, if its m2, no...? but take that with a grain of salt

[sick lance]

What's with all the illegal questions?

I literally just muted you to review our #rules

Why must I?

[blissful snow]

Hacking life we want to be 5238 years old.

[balmy ridge]

m1 pro

[sand trench]

if you knew how it works maybe you would not want it D:

[blissful current]

[sick lance]

As I said before, these questions are for our advanced channels

[sharp citrus]

Discord: What Are the Advanced Channels?

Article Link

https://help.tryhackme.com/en/articles/8671900-discord-what-are-the-advanced-channels

Apr 24, 2025, 5:25 PM

[blissful snow]

Go to the link.

[blissful snow]

fileless malware?

[sand trench]

no hacking life

[blissful snow]

Ahhh

[sand trench]

the last 2 digits of shadows age dipicts how old they look and feel

it is not fun

[blissful current]

[last harbor]

Dang. Can u add u on Roblox btw?

[blissful snow]

I always wondered why is there cheese in your name

[blissful snow]

5100

wait so it resets

[blissful current]

https://tenor.com/view/cheese-gif-25732604

[sand trench]

ding ding ding

the day it swaps form 99 to 00 is also very very rough

[blissful current]

i doubt its allowed to discuss in General

[loud marlin]

nayone know how to fix this =/

[sick lance]

@tropic hearth This is the last time I'm going to tell you this, this is not the channel for this discussion.

[bitter mantle]

DM me

[sand trench]

if shadow could read that font maybe

[sick lance]

[loud marlin]

i hate compile things.... dumb ass errors lol

[wary ocean]

i finally caved and got the new elder scrolls remastered 😭

[blissful snow]

You gotta grind.

[wary ocean]

ill play abt 10 minutes and go "thats cool"

[sick lance]

I can't wait to binge it.

When I'm done playing SH2, Dead Space and Re4.

[wary ocean]

my backlog is so big

i only got it cuz im planning on making videos from it and piggy back off the game

[blissful snow]

I think he gave you a lot of mercy most, some people don't get warned about this.

[blissful current]

a senior in my college had 27 backlogs

[wary ocean]

like games in backlogs?

[blissful current]

wait hold on what Backlogs are u talking about

💀

[last harbor]

Guys does anyone know how to isolate virtual machine?

[blissful snow]

Turn off the wifi.

[last harbor]

And use wat?

[sick lance]

If you don't know how to sandbox, it's not a good idea to try what you're wanting to do.

[wary ocean]

put the computer in a plastic tarp and itll be isolated

[sick lance]

Guys, the wrong advice is just trolling.

[last harbor]

I kinda am unable to so I need help

[sick lance]

Stop.

[sick lance]

I don't think you should be worrying about isolation at this point, maybe study something else.

[last harbor]

Hmm

[blissful snow]

What is sandboxing i heard of it but neer asked

[sick lance]

It's when a device is isolated for analysing something.

[blissful snow]

ah

[sick lance]

It's not limited to malware/virus.

Digital Forensics also do it.

[blissful snow]

ik isn't it for web stuff to

i forgor i heard about breaking out of one somewhere

[last harbor]

It is

[autumn solar]

Oooooh Dead Space! Loved #2

[wary ocean]

should be able to just run it on a virtual box and itll be fine, at least thats my assumtion

[autumn solar]

That credits theme was chef's kiss

[wary ocean]

i mistaked soma and dead space so i bought soma on sale instead of dead space

[naive violet]

There's sand boxing concepts in web, like the javascript sandbox and effectively sandboxing via same origin policy

[sand trench]

sandboxing is what linux flatpak does

[frank oyster]

i cant change the password of the tryhackme account ?

[blissful current]

u can

[wary ocean]

if you have 2fa that might be why, could also ask for password change confirmation in emails

[frank oyster]

im trying to find the option in the accounts settings but i dont find

srry im new

[wary ocean]

click your thm pfp> manage account> password

[sick lance]

Interesting PFP choice.

I thought you were Aquinaz there.

[wary ocean]

who?

[sick lance]

@frank oyster

[desert shuttle]

Hey guys any good places to check out for Reverse Eng. challenges/CTF

[frank oyster]

i dont have that

option

just accounts detail

sub

and ctf teams

[sick lance]

Did you sign up with Google SSO?

[frank oyster]

no

[real temple]

hi

[shadow coyote]

is there a discord community for Nmap/Npcap?

[real temple]

just read the manual page

man nmap

[stiff geyser]

is there a way to sort by OS?

[real temple]

to learn about nmap

[shadow coyote]

i did, my loopback adapater is being assigned auto APIPA instead of local address

[sick lance]

Just search for linux or windows.

[sick lance]

What are you trying to do?

[shadow coyote]

capture packets on my local network

[sick lance]

What are you using to sniff?

[stiff geyser]

its not the most reliable way

[sick lance]

It's the only one.

Currently.

[shadow coyote]

pnet crate from rust 🙃

[real temple]

oh your learning rust im learning c and c++

[sick lance]

No, which NIC are you using?

[real temple]

im having a hard time learning c there isnt much videos online for it so im having to do a lot of reading

[shadow coyote]

network interface card, eghh im very new but i think that would be my virtual loopback adapter no?

[stiff geyser]

Ok then I'll try that way then

[sick lance]

Does it support monitor mode?

[shadow coyote]

it does yes, it was working just fine few weeks ago then windows had anupdate and now the adapter is not recognized as a loopback/ it gets assigned an auto APIPA address

[sick lance]

Not like default NIC to support monitor mode.

[shadow coyote]

i honestly wouldn't know bc im new. would a default NIC be my other network devices/adapters?

like a Wirless LAN adapter?

[sick lance]

Are you using a laptop or Desktop?

[shadow coyote]

Desktop

[sick lance]

netsh wlan show drivers

Run this command in cmd.

If it shows Monitor mode supported : Yes

You can use monitor mode, if it doesn't, you more than likely can't.

[left current]

Hello everyone

[shadow coyote]

Interesting, it does not show Monitor mode field so I assume I can not

[sick lance]

Nope.

And that's why you can't sniff the network.

[left current]

I want to learn ethical hacking where do i start

[sick lance]

Have a read over #start-here

[left current]

(i dont have a cs background)

[left current]

okay

[shadow coyote]

Thanks for the insight, I'll keep digging. Just curious how I got the packet sniffer working with the virtual loopback adapter in the first place

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3674)

[bronze osprey]

@idle mica hello! I saw you took the SEC565 course. Do you have recommendations for prep or tools I should touch up on? Thanks!

[twin ridge]

Gave +1 Rep to @idle mica (current: #298 - 24)

[wind lake]

wow its alex.exe

[bronze osprey]

Hi Jazz!

Hru?

[wind lake]

doing alright! yourself?

[bronze osprey]

Pretty good! Brushing off some dust lol

[wind lake]

nice thats always good

[quaint parrot]

Could you tell me what's tool it's very important to have for a beginner in redteaming ?

[bronze osprey]

There are a lot of tools you can use

[quaint parrot]

Where can i have some exemple?

Sorry if m'y question seems weird

[mellow narwhal]

Of what, tools?

[quaint parrot]

Hey everyone,
I'm new to pentesting and I'm feeling a bit lost on what tools I should start learning. I want to get a solid foundation and understand which tools are essential for beginners—especially for scanning, enumeration, and basic exploitation.

I'm currently working through TryHackMe rooms and would really appreciate any tool recommendations or beginner-friendly rooms to focus on.

Also, I'm using Kali Linux (or Parrot OS, if that's what you're using).

Thanks a lot in advance!

[boreal scarab]

Are you looking for tools apart of the OS, or external tools like websites?

Also, do you know what path you want to focus on the most? Web pen, OS, OSINT, etc etc

[rapid merlin]

yo am i cooked if i used arduino cables to plug in a optiplex cooling? (it works 🙏)

[loud marlin]

@boreal scarab fixed GRUB 🙂

[boreal scarab]

https://tenor.com/view/good-boy-pat-on-head-stitch-gif-16763870062622428958

[limpid dock]

hi guys...new here....

[gusty inlet]

Hey, welcome.

[boreal scarab]

Hi new here, I'm Matt

[limpid dock]

just wanted to know...anyone from bug bounty background

[limpid dock]

thank you

[twin ridge]

Gave +1 Rep to @gusty inlet (current: #82 - 102)

[west root]

hi everyone

im new here, is there any way to recap after going through the learning room?

[hearty dune]

yo does anyone know any html injection test sites i whuld like to try it out

[bleak quartz]

challenges

[wide grove]

https://www.reddit.com/r/tryhackme/comments/1k70inw/osi_model_speedrun_1770/

OSI model Speedrun 17.70

[boreal scarab]

Take detailed notes using your favorite note taking app

[quaint parrot]

Mostly the tools included in Kali Linux for now, since I’m still learning the basics. But if there are some good external websites or services useful for beginners, I’m also interested!
Thanks for your help!

I’m still figuring it out, but I think I’m most interested in web pentesting and OS-level stuff for now.
OSINT also looks interesting, but I haven’t tried it yet. I’m open to exploring a bit of everything at this point.

[twin ridge]

Gave +1 Rep to @boreal scarab (current: #28 - 357)

[boreal scarab]

https://revshells.com is great for reverse shells, burpsuite would be for web. Learn metasploit for exploits.

As for OSINT, that's my specialty, for that, learn how to Google properly and how to Google dork. Pimeyes, tineyes, yandex, urlscan.io, whois, Google images, ThatsThem (for US usage) I'm not on my computer so a lot of sites are blanking on me.

https://start.me/p/DPYPMz/the-ultimate-osint-collection is also great for a bunch of OSINT stuff

[wind lake]

burpsuite, metasploit, impacket, nmap, ffuf

[dark mason]

Hi chat, how's everyone?

[hallow hazel]

Feeling quite depressed, I had this math "mock" exam to see before the real exam how we perform, and I got only a 66/100. I need minimum of 85p to study cybersecurity in uni and the exam is in a month 🥲

[dark mason]

I am sure you will do better

[hallow hazel]

I don't know man...

[dark mason]

I am guessing you are going to uni?

[hallow hazel]

I'm still in high school right now, and it's my last year

I just want to study cybersec in uni, but with this terrible math score I wouldn't even qualify as a possible student

it just feels like my whole career depends on that paper and creates such stress

[dark mason]

Isn't possible you can retake it?

[hallow hazel]

Yes, if I wait a year... but the uni offers their own kind of math exam as well, and if I get under 85 in the national math exam, I could try and attempt the universities one, which is supposed to be extremely similar.

[mossy river]

I did a math mock and got 100, but in the real exam I did terrible - 66 is pretty good, keep at it and with a little bit of luck and resilliance you'lll get what you need

[hallow hazel]

Thanks for these loving words, I really hope that I can pull this off.

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1582)

[dark mason]

my country has something very similar... try not to think too much about it, as you will be able to retake it, go there, tell yourself that you did all you could, it's important to be at peace with yourself. You also need a little luck just like Jabba said

[hallow hazel]

Thanks, for the kind words!

[solid meteor]

Is anyone using the USA-E VPN without issue right now?

[sick lance]

#site-support

[solid meteor]

I wasn't asking for support was I?

I was asking a yes or no question lol.

[sick lance]

Don't be rude.

If you want VPN questions, use the relevant channel.

[solid meteor]

I wans't being rude. I asked if I was asking for support.

[sick lance]

The tone used was rude.

[solid meteor]

I didn't realize I could project a tone through text without capitalizations or emojis, sorry you interpreted it that way.

[hallow hazel]

It's not about capitalization or emojis, but the way you replied to a mod that you weren't asking for support after he told you to switch channels 🙂

This channel isn't about the discussion of your VPN connection running with an issue or without..

[solid meteor]

Apologies, there are hundreds of people asking very short questions that does not require support and there were no issues.

[upper knoll]

Evening chat!

[solid meteor]

Good evening!

[wind lake]

aftanoon

[upper knoll]

I’m guessing an American timezone Hihi

[wind lake]

north american yes

[hazy flame]

who's ready for sal2!

[sick lance]

Sal1 has barely been released... kek

[red ibex]

Greetings

[idle mica]

Howdy! Nothing specifically. Everything you need to know is in the course content and the labs are really good. If you want, Cobalt Strike and Empire are the main C2s in use. Otherwise, it's fairly straight-forward. Keep the lab books handy when you sit for the CTF

[lime belfry]

I am waiting for upcoming red team cert

[fervent ruin]

to run nmap as priviledge user, i just need to be in sudoers file or i have to run sudo nmap ?

[loud marlin]

iir jus need sudo and then root password

[bronze osprey]

Great, thanks!

[twin ridge]

Gave +1 Rep to @idle mica (current: #290 - 25)

[loud marlin]

if you are not in sudoers file

[gritty hatch]

Hey what do u think about predator os?

[fervent ruin]

what if i am in sudoers file?

[loud marlin]

then you can use own password to execute as root

not sure of how is done 100%. iirc is like that. if not in sudoers then you need root password, if in sudoers then you can own password to do root things

[south egret]

https://tenor.com/view/what-the-what-what-the-sigma-sigma-the-gif-14652784622915837383

[echo sentinel]

If you're in sudoers, you can execute it nmap with sudo and your own password - if not then you should switch to root first

[loud marlin]

yea... smth like that goes

[subtle pawn]

Is jabba online

[fervent ruin]

i think i just need to be in sudoers file bc i run nmap with flags that need to be root, and it runs normally without asking for password

and without using sudo

[crystal mauve]

Let me check my jabba radar

One sec, plz wait

So did anyone upload the seminar from earlier today ?

[loud marlin]

@mossy river might be if you need him

[languid torrent]

hey all , I took the course on burp suite for the moment it showed me how to see the packets on my pc but is it possible to see the larger ones how for example on my networks?

[jaunty anvil]

Hi guys

[inland finch]

Try port forwarding

[jaunty anvil]

I am new to hacking and cybersecurity as a whole. I was bored and needed a new hobby, so here i am messing around on tryhackme, but also at home taking electronics apart and see how they work. I am also trying to fix old phones i have and i am having fun.
Should i start learning programming/coding? I don't understand even the easiest of the easiest on tryhackme. I don't know what i'm doing and why i'm doing it.

[inland finch]

All network traffic will forward through your machine.

[jaunty anvil]

What would be the best thing for me to do in order to understand

[mossy river]

Anything I can help with?

[uncut jackal]

Anyone know how I can make my tryhackme profile public so I can showcase badges and certs?

[mossy river]

Your profile is already public, just insert your username: https://tryhackme.com/p/your-username-here

[uncut jackal]

Thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1583)

[languid torrent]

thx bro i will try later

[twin ridge]

Gave +1 Rep to @inland finch (current: #2830 - 1)

[blissful pulsar]

https://tenor.com/view/inthehouse-martin-martinlawernce-biggie-hello-gif-13128531067958866971

[subtle pawn]

Jabba can u check if my subscription is renewed? I lost my bank card and had to block it and that caused my monthly payment to not go through. I had to pay through a different card but the payment screen crashed

[mossy river]

You will need to go through to support, as it is sensitive I cannot discuss any subscription details with you I'm afraid; [e-mail]

[bleak quartz]

Pick any language that seems fun to you, start from there. Also project based learning worked for me very well when I was still a newbie in Java

Projects add meaning to your work

[mortal ether]

As long as you're having fun with it, go for it . If you want to better understand what you're doing, you can always do the learning paths and start with the basics

[bleak quartz]

On top of that they visualise it really well

[hidden edge]

Can anyone do the 'Lookup' exercise? I can ping the server, but I can't load the website UI in my browser.

[bleak quartz]

So it's not just me!!

I had a similar problem today

[hidden edge]

I've tried many times but failed every time. :((

[bleak quartz]

Everything works expect for sering website UIs

[bleak quartz]

For me just terminating the attackbox worked, also I later on tried that it also worked just fine on my own kali vm

Different task than urs tho

[bleak quartz]

Are u using attackbox?

Or your own vm

[hidden edge]

I'm using my own Kali VM. Other exercises work fine, but I'm having trouble with the 'Lookup' exercise :((

[bleak quartz]

Odd, try on attackbox to see if it works at all

[dark mason]

I can't wait ro go to high-school

I have like 2 more months of 8th grade

[hidden edge]

Okay, I'll try. Thanks a lot! :33

[twin ridge]

Gave +1 Rep to @bleak quartz (current: #696 - 8)

[dark mason]

Then I will get to high-school, new classmates, new teachers... should be awesome

[bleak quartz]

Np, happy to help

[stoic quarry]

Good heavens

Evening one and all

[hidden edge]

High school holds some of the best memories for me :>>

[knotty pendant]

[stoic quarry]

Uh oh

Did discord break

Nevermind me

Sorry all

[mossy river]

I think it did

[stoic quarry]

Oh

Did I break rules with my good evenings? 😭

[desert dirge]

Man, Toby Mcguire really does have a personality for television doesn't he. My favorite guest so far!

https://youtu.be/WzhT5DlCuAw

[crystal mauve]

wtf

[dense minnow]

are there any easy htb like box on thm I can attempt? I just finished cyber sec 101 path. want to practice but dont wanna get hard mode right away

[stoic quarry]

Try some of the easy rooms

Don't be afraid to check a walkthrough at the top of the room to guide you a bit

If you're just starting it'll help you know what to do going forwards, plus they don't give you the answer so you have to do it yourself still 🙂

[dense minnow]

they are like htb that I do full attack path from recon to shell?

[stoic quarry]

Yeah

https://tryhackme.com/hacktivities/challenges

[dense minnow]

that's pretty cool

btw may I know how they are different from htb?

[stoic quarry]

I can't answer that, I gave up trying to do htb when I had to buy cubes to buy access to rooms lol

My pea brain got confused

[whole gazelle]

you talk about just ctfs or you talk about learning experience as a whole

[snow igloo]

maybe someone here knows or familiar with the following issue i recently had:

working on my 2025 kali for about a month suddenly there is no Seclists no gobuster , i dont know what else went wrong, why it vanished,where,how,can be fixed, what to do[delete and install new one?], is it something i was doing? i didnt do a lot just THM rooms with it.
and its on virtualbox.

and light shed on this fenomenon will aprreciated.Many Thanks!!

[dense minnow]

both I guess. I want to do it for fun and for learning as well

[knotty pendant]

https://cdn.discordapp.com/attachments/1193226238387568711/1352365863365513216/1902728959759995176.gif

[stoic quarry]

Did you go back to a snapshot?

[whole gazelle]

i personally prefer ctfs on htb, dunno why it's just my stupid prefrence but thm is my go to to learn new things. they are friendly imo

[dense minnow]

I dont want too much guidance like the pathways otherwise I will rely on them

[stoic quarry]

Maybe I'll give their CTFs a try

[whole gazelle]

fair tho

[dense minnow]

done htb before never done any thm box before

[stoic quarry]

Rooms on THM are noted as walkthroughs or challenges, so just go with Challenges if you want no hand holding

Or a little amount,

[dense minnow]

yes exactly

but i dont want to pay for htb subscription just yet

I need more practice

yeah I will do the Challenges

[stoic quarry]

iirc this one is pretty good https://tryhackme.com/room/anthem

[dense minnow]

there are 134 easy challenges. is there a list from easy to hard within "easy category"?

[stoic quarry]

Not really

[mossy river]

Difficulty is really subjective

[dense minnow]

dont want to waste the resources attempting smth i can't

true. nvm I will attempt randomly then

[stoic quarry]

Depending on the room author it depends how many hints there are

I'm trying to find one that has a pretty good mix of suggesting what you should do and not giving you a walkthrough

https://tryhackme.com/room/ctf

This one maybe

[dense minnow]

thats cool. I will do this first then. Thanks

[stoic quarry]

Good luck!

[gusty inlet]

https://tenor.com/view/good-evening-chat-kamen-rider-gif-13455067731201540897

[snow igloo]

i dont got any snapshot for this one.

[stoic quarry]

Smello 👃

It's a CTF

Um

Yeah

🙂

[snow igloo]

please excuse me for asking the same question again, i don't wish to span or annoy anybody, just find a way to ask my question in a clearer way

[stoic quarry]

Just reinstall from the Kali images

[sand trench]

https://zimit.kiwix.org/#/request/51278d3c-48d1-4fef-943e-40188d38ae58

[stoic quarry]

All you need to do is download your .ovpn

[gusty inlet]

Is this AI generated?

[sand trench]

waiting waiting waiting

[stoic quarry]

Almost definitely lol

[silver sky]

What in the ChatGPT

[stoic quarry]

DwarfFortress mentioned 🫵 😵

[silver sky]

Most definitely 😂

[gusty inlet]

Seclists and GoBuster are not natively present on Kali.

[sand trench]

yeah... trying to make an offline copy of their wiki

[stoic quarry]

Nice nice nice

[silver sky]

Seclists are

[gusty inlet]

Nope.

[stoic quarry]

Just reinstall them

¯_(ツ)_/¯

[silver sky]

Yes or maybe they've been removed 😂 it's been that long since I've used Kali

[gusty inlet]

Along many other cases.

I had the same problem.

[silver sky]

I swear they used to be, but then again, last time I used Kali was 2021

[gusty inlet]

I'm not saying you're wrong, just saying that 2024 onward, I've never seen seclists on Kali by default.

Oh well.

[snow igloo]

Yes i don't know what happened i used it yesterday nothing special i can recall regular THM marathons

[fervent ruin]

can someone help me in #room-help please

[snow igloo]

yes but it is the same machine for the last 1-1.5 months

[gusty inlet]

Well that's weird then. Files don't disappear alone.

[snow igloo]

VERY WEIRD

[steel aspen]

Is Intel i5 alright?

[crystal mauve]

For what

[mossy river]

Please don't post AI messages here as per our community guidelines

[spice otter]

depends what your using it for

[steel aspen]

Mainly learning but sometimes gaming

[crystal mauve]

What gpu do u haz

[spice otter]

for gaming i woudl say its kinda mid range

[sand trench]

YAY might have figured out how to use docker to create a offline mediawiki backup instead

[mossy river]

i5 is fine

[steel aspen]

Still looking for stuff. I'm stuck with a laptop lol.

[mossy river]

but it's the gen you want to look at

[spice otter]

^

[sand trench]

13th and 14th gen intel got bad because of oxidiation and power draw frying cpu:s

[mossy river]

I believe that's over now?

[steel aspen]

I've seen a few 12

[sand trench]

well all the already damaged cpu:s are either rma or not getting better

[steel aspen]

Is 12 alright?

[sand trench]

yeah 12th gen does not have this problem

most likely 15th gen won't either

[steel aspen]

Keep seeing 12400

[spice otter]

what gpu are you running

[sand trench]

shadow personally??? 7900xtx

[steel aspen]

I'm looking at a whole new setup so currently none

[mossy river]

I have a 12400f and it works just fine

[sand trench]

it goes BRRRRR

[crystal mauve]

U can probably play age of empires on your i5

[steel aspen]

My laptop shows an Intel and nvidia one so not sure

[mossy river]

Go to task manager

[sand trench]

yes the time stamp is wrong

because docker

[spice otter]

intel is probably integrated graphics, the nvidia one should be the actual gpu

[steel aspen]

Oh yeah

[sand trench]

^

[steel aspen]

You be right lol

[spice otter]

opening task manager should show something like this

[steel aspen]

Should I look for i7?

[crystal mauve]

I have a legion it gets rly hot wen gaming

[steel aspen]

Yeah I'm on my phone at the moment

[spice otter]

ohh

[steel aspen]

Something else I have to replace soon too aha

[crystal mauve]

Rtx 3070 is good enough for running most games on low specs

[spice otter]

medium-high

[crystal mauve]

Idk escape from tarkov is tough to run on med even for 3070

[spice otter]

oh well thats escape from tarkov 😂

[crystal mauve]

Only game worth playing :)))

[mossy river]

Balatro has my heart

[fervent ruin]

bro, u have 3070 and run games on low???

i have 1060 gtx and run games on high and ultra

full of mods

[spice otter]

the only game that i've tried that i felt the need to run low graphics on is marvel rivals and fortnite because its optimized sooo bad now

[fervent ruin]

only game i remember i couldnt play is flight simulator

everything else, i play on max settings

with 1060gtx

[crystal mauve]

Yeah most games run like shiet for me

[fervent ruin]

u are doing something wrong

how am i playing games better than you ?

[spice otter]

you sure your cpu isn't bottlenecking?

[fervent ruin]

what will not work?

[crystal mauve]

That’s what i thought but nvidia panel was showing gpu to be active

[spice otter]

and make sure your fans are running good to keep everything from over heating

[fervent ruin]

ye dont over heat ur pc

[spice otter]

cpu and gpu are both active...

[fervent ruin]

is ur HDMI cable connected to ur GPU or motherboard? xD

[spice otter]

^

that to

[crystal mauve]

Yeah it would run hot to touch so I just gave up

[spice otter]

you have a 3070?

[crystal mauve]

Yep

[fervent ruin]

did u buy this 3070 on temu?

[crystal mauve]

Costco

[fervent ruin]

i think u bought the wrong 3070

[crystal mauve]

Hmm I’ll show specs later , it runs valorant fine

[spice otter]

are the gpu's pins messed up?

[fervent ruin]

u have 2 GPU's?

[crystal mauve]

Hmm no idea, no just the 1

[fervent ruin]

maybe thats what u doing wrong, maybe ur games are using the other GPU

[crystal mauve]

N the i7 internal

[spice otter]

are you running integrated graphics instead of the 3070

[fervent ruin]

oh wait, @spice otter has 2 gpus, i was seeing wrong print

[crystal mauve]

No it’s running the 3070

[spice otter]

yeaaaa gotta love integrated graphics lol

[fervent ruin]

[spice otter]

ok wait

when running games is your gpu caping at 100?

[mossy river]

Valorant is a cpu game

[fervent ruin]

valorant anticheat is trash

[mossy river]

What? 😆 How

[fervent ruin]

making it running 24/7 on ur pc

even when u not playing

[crystal mauve]

Maybe it’s the fans are covered in lint or something

[fervent ruin]

he forgot to remove the plastic

[crystal mauve]

I do plug hdmi cable for my monitor into it

[fervent ruin]

gpu yes

not the motherboard

[spice otter]

into the gpu right?

[crystal mauve]

It only has 1 input ? In the back

O.o

[fervent ruin]

confused

[crystal mauve]

Well for hdmi

[spice otter]

your mobo didn't come with an io shield thingy??

[crystal mauve]

Hmm ?

[fervent ruin]

can u send a picture of ur computer?

the back and side

[crystal mauve]

Ya

[spice otter]

we will fix your problem lol

[fervent ruin]

xD discord it helpdesk

[spice otter]

😂

[fervent ruin]

is your computer connected to power?

you have to turn on the computer without the side door

side window idk

box open

[spice otter]

glass 🤷‍♂️

[fervent ruin]

ye

[fervent ruin]

oh

[spice otter]

oh its a laptop

[fervent ruin]

its a laptop

bruh

[spice otter]

makes so much sense now

[fervent ruin]

[crystal mauve]

lol

I said it was didn’t I ?

[fervent ruin]

do u have another monitor?

screen

[crystal mauve]

Yeah

[fervent ruin]

ok

does ur pc sounds like he is going to start flying when u playing games?

idk why im asking this, ik the answer

[spice otter]

yea it most definetely is a fan issue

not getting enough air flow

[fervent ruin]

idk about laptops, but i think if u have a 3070, u should be able to play games on high

laptops never have enough air flow

[crystal mauve]

Yes it sounds like a washing machine

[fervent ruin]

ye

laptops are for different things, not for gamming

[sand trench]

Resolve redirect
set index
[log] [2025-04-24T23:36:45.457Z] Summary of scrape actions: {
        "files": {
                "success": 8016,
                "fail": 0
        },
        "articles": {
                "success": 17799,
                "fail": 0,
                "failedArticleIds": []
        },
        "redirects": {
                "written": 5857
        }
}

[half plume]

get an extra cooler for your laptop so u can put it on top

helps w mine

[sand trench]

WOOOHOOOOO

offline copy of dwarf fortress wiki

[crystal mauve]

Hmm yeah should try that

[sand trench]

because they have public facing api

with no credentials needed

[fervent ruin]

but u still doing something wrong i think, bc with 3070, play games on low... its weird

[half plume]

yh great for gaming, doesnt overheat (as much)

[sand trench]

laptops have heat disipating issues

[fervent ruin]

extra cost and extra hardware

[half plume]

pc superior

unless u travel a lot

[fervent ruin]

ye

[sand trench]

eh... generally console is the best for affordable gaming

[fervent ruin]

buy a samsung Note and root it 🙂

[sand trench]

which feels icky to shadow but it is the truth

[crystal mauve]

Ill redownload eft n stream it this weekend so u can see how ass it is

[pine belfry]

testing

[spice otter]

$500 for switch 2 😂

[fervent ruin]

idk about that, consoles are limited

[pine belfry]

steam deck has arch linux

[fervent ruin]

and u cant upgrade them

[pine belfry]

kinda a win in my book

[sand trench]

gaming specifically not all other tasks

[fervent ruin]

🙂

[sand trench]

still shadow likes their computer and is not gonna abandon it soon

[half plume]

might as well get steamdeck, dont support nintendo 🤣

[spice otter]

i got a pc for steam lol

no need for steamdeck

[pallid lotus]

You say that...

[spice otter]

👀

[crystal mauve]

What’s the cooler you’re using ? Is it made for laptops or for beverages

[pallid lotus]

1. You'd be surprised at how often you end up using it. Some games just lend themselves to a console.
2. The amount of extra shit you can do with them is insane. Why bring a laptop travelling when you can bring a games console, connect it to a docking station + hotel TV, and work from that?

[half plume]

😭

i meant fan

[pallid lotus]

Boot from an external drive and you've got any OS you want as well lmao

[noble quiver]

@half plume what is that pfp brotha

[half plume]

mark zucky

[crystal mauve]

lol

[spice otter]

can you actually use the linux part of the steam deck lol

[noble quiver]

more like mark zucky given some sucky sucky

[half plume]

indeed

[pallid lotus]

Yeah, you can drop into desktop mode

[spice otter]

oh woah

thats actually insane

[sand trench]

hotel tv?? you think shadow travels enough to be in hotels??? ;P

[crystal mauve]

I think I see a tongue ring

[pallid lotus]

Or again, just load up another OS and you've literally got anything you want. It's a decently specced computer which happens to be in a games console format.

[sand trench]

yeah the steam deck sounds worth it

[pallid lotus]

1. No
2. That wasn't directed at you

[spice otter]

ooo ok you sold me new purchase coming soon lol

[sand trench]

just for now shadow is gonna wait

also today shadow learnt a lot of wikis being built on top of mediawiki have open api:s letting you download them for offline keeping if you want

obviously check the licenses first

[crystal mauve]

You’re a digital hoarder aren’t u shadow

[pallid lotus]

But yeah, as far as gaming goes, there are a bunch of Steam games I just... never use PC for.

[sand trench]

to a degree yes

[spice otter]

shadow how much storage do you have... your always getting something new lol

[sand trench]

this is on shadows backup drive

which is a 4TB external drive from samsung

[spice otter]

might get it just for the oblivion remaster lol

4tb 👀

[sand trench]

yes... bought it a few years ago

still holds up and is great for backups

anyways it is past 02:00 here so time to go sleep sloop to beep boop while shadow goes meep moop in their sleep

[spice otter]

good nighttt

[agile tiger]

anyone solve 25 days of christmas 2019

[crystal mauve]

What’s based cooking?

Geezus 193 gib

[pallid lotus]

Yes

[agile tiger]

day 9 and 13

[pallid lotus]

The first Advent of Cyber. Good ol' days watching Skidy and Ashu madly try to get challenges made and released on time 😆

[agile tiger]

yh

[crystal mauve]

Don’t think I’ve seen a skidy vid tbh

They on YouTube ? Or is it only on thm

[desert dirge]

May I just...

[pallid lotus]

Don't think he's ever made any video walkthroughs.
There'll be interviews and stuff online.

[pallid lotus]

What about them?

[agile tiger]

trying to access but not working

[pallid lotus]

Yeah, so, uh

[crystal mauve]

Oh wanted to see em in the christmas spirit

[pallid lotus]

And ftr, sda is in hardware RAID 50

That box has 16x 1Tb disks in it 😆

Plus one 250Gb disk

[desert dirge]

how fit?!?!?!

[pallid lotus]

For Day 9, they've probably spun those boxes down so you might be fresh out of luck.
Day 13 is Retro. That should work?

[pallid lotus]

It's an old Dell PowerEdge R720 rack server

[agile tiger]

Will try again

[cosmic pendant]

@pallid lotus what OS?

[pallid lotus]

So, space for 16 hot swappable disks.
Plus an extra one after I converted the DVD drive

[pallid lotus]

Proxmox

[sand trench]

Open source cooking recipes for food and candy

[boreal scarab]

Thems rookie numbers. Gotta pump those numbers up man

[pallid lotus]

Shush you lunatic

[boreal scarab]

[pallid lotus]

[boreal scarab]

[desert dirge]

Do I sense a smith enjoyer?

[boreal scarab]

cough

Quanta D51PH-1ULH
12x 4 TB SAS HDD
3x 1 TB SATA SSD (Cache and boot)
256 GB DDR4 ECC RDIMM
2x Xeon E5-2680-V4 (28 Cores, 56 Threads)

[desert dirge]

Now, let's see Paul Allen's specs.

[boreal gull]

does this dox you or is that not your name

oh no, u have posted ur name before a lot

oh its ur old username

ok

i am a horader

i think 1tb is just my photos and the other tb is for games 🤔

[thorny hound]

Hi

[boreal gull]

oh i have a 400gb windows vm

dont think i can call myself a hoarder when 1tb is for my own personal images lmao

so nvm

just lemme flex my terminal

[boreal scarab]

You think right

[crystal mauve]

Looks cool,

[boreal scarab]

FISH! MY BELOVED!

[boreal gull]

i like it

but i dont like how awkward it is to export variables

just use bash syntax

😦

[crystal mauve]

I have 8 ram allocated to my kali box

[boreal scarab]

but but but but, colorful text, autofill text

[boreal gull]

it is nice but i do miss copy and pasting bash export variables

[wind lake]

LAIN LAIN LAIN LAIN LAIN

[gusty inlet]

https://tenor.com/view/good-night-chat-gif-21861289

[boreal gull]

let's all lvoe Lain

it took me ages to get Japanese set up on this machine lmao

[wind lake]

https://tenor.com/view/lain-serial-experiments-lain-gangnam-style-gif-6107123719892210526

[crystal mauve]

Night dkob

[crystal mauve]

Where is that animation from ?

[wind lake]

its a fan made animation of lain

[fading pollen]

present day, present time

[cunning zenith]

why does this layout lowkey look so clean in like a digital dorky way 😂

[chilly wind]

Can someone hack a snap account for me

[grim sparrow]

:hammer: anna_beira#0 has been banned.

[sweet adder]

Umm.. was an update just pushed? I can't continue on my path, I'm being redirected to /why-subscribe, even though I'm subscribed 😑

Oh, finally allowed me in the room after 4 attempts, lol.

[molten sky]

@mossy river i found #mod-application but i can't find #admin-application anywhere - can you hook me up

also welcome back to thm post- mass resignation, lol

[molten sky]

oh man, @ Bee is a name I haven't seen in a while

[molten sky]

go to bed

[umbral rain]

hey

[boreal scarab]

https://tenor.com/view/weee-gif-22113548

[molten sky]

https://tenor.com/view/tt-gif-22612306

[noble quiver]

I run Kali Linux on a Chromebook mate

Less than 8 gigs for the whole system 😂

[molten sky]

but can it run crysis

[noble quiver]

Doubt it

[fossil otter]

does anyone know where to find the old versions of any softwares?

[noble quiver]

I don’t . Someone else may.

[fossil otter]

okay

[fossil otter]

anyone ?

[molten sky]

the internet is my go to for old software lately

[fossil otter]

I'm searching for openpanel v.0.3 4

[noble quiver]

Oldversion.com

[fossil otter]

I've scorched earth till now bro didn't find any websites that have this version

[noble quiver]

http://www.oldversion.com/

[fossil otter]

I'll search it

[noble quiver]

Okay

Website is not secure btw

I’d be cautious

[fossil otter]

no bro it doesn't have the software itself forget about old versions

[molten sky]

what for anyways
not that i can help, just curious

[fossil otter]

i got an assessment where I've got to build a lab for a specific cve

[noble quiver]

oh

damn

[fossil otter]

i got all the resources except that specified software that's vulnerable for it

i got 10 hrs

[noble quiver]

https://archive.org/details/software

i think this is what you need

they have old windows ISO's

and things like that

@fossil otter

[fossil otter]

yup

I've tried in that too

[noble quiver]

they dont have what u need huh

[fossil otter]

I tried some of them sorceforg internet archiver, wayback, oldsoftware, packet storm security , i dont know more

that's how terrible my assessment is going

[noble quiver]

that is fucked

theres gotta be some way

or else it wouldnt be an assighnment

youd think

[fossil otter]

been thinking the same

[noble quiver]

what exacly are u looking for

[fossil otter]

I've to search for it somewhere

[fossil otter]

this

[noble quiver]

ok

[fossil otter]

yeah

[noble quiver]

yehthats fucked all that shows up for me is info about the exploit, and the old page for that version with no downlaod link

[fossil otter]

i told you

darknet ? maybe...
but it's too risky

[noble quiver]

Probably end up with an unknown virus tbh 😂

Keep looking bruh

If you can’t find it explain it to your teacher or wtv man idk. Seems like a shitty situation

[fossil otter]

ofc i will

[cloud quiver]

Please don't post such content , some users may feel offended 🙂

[noble quiver]

Ok

[full wave]

how good is SOC career pathway

I heard it is like u have to work like a robot

[crystal mauve]

In binary?

[celest dirge]

I've been on and off it, mostly because of both procrastination and college classes. Learning the tooling, long and boring to read the text, so I mostly use videos to go through the path. All in all, it's pretty fun imo, and I think the path covers a good amount.

[full wave]

oh I was saying how good is SOC as a job

[heavy yew]

Yo guys how does koth work

[celest dirge]

Ohhh, then I'd def recommend #cyber-and-careers you'll definitely get a great answer there.

[crystal mauve]

people spawn in , same ctf , winner take all

[celest dirge]

From the last I've read up on KoTH, the points you gain is how long you have access to the machine?

I could be wrong

[full wave]

thanks

[twin ridge]

Gave +1 Rep to @celest dirge (current: #549 - 11)

[celest dirge]

You're very much welcome.

[crystal mauve]

Oh so they can start at different times ?

[celest dirge]

As long as you don't cheat

[crystal mauve]

I don’t think so

Cause that would give people starting first an advantage to hide flags

[celest dirge]

Yeah you're right about that

Maybe I got confused over this?

[crystal mauve]

Patch vulnerabilities?

So does that mean make flags harder to find ? O.O

[dark mason]

That doesn't rlly happen that whole much

Usually.

[crystal mauve]

Hey thief

It’s time to go to bed! GN

[celest dirge]

Goodnight!

[dark mason]

GN

[leaden tendon]

OwO

[junior wraith]

morning

[knotty valve]

Best explanation of KoTH I've read yet

Is the THM KoTH mixed between jeopardy and attack-defence, straight up A-D, or is it its own playstyle?

[junior wraith]

You have to login the machine one way or the other. Once you're in you must own a file. And then close the vulnerabilities in the machine and kick other playters who try to create that file for themselves.

If you give the manual page of chattr binary a read, you'll see that it can set immutable flags on files. That means, even root cannot make mutations in the file without removing that immutable bit.

chattr +i /root/king.txt

This is used by many players to make that king file immutable and hence persisting their name in that file.

[queen flare]

what's preventing from calling this type of SSRF to be an IDOR?

i admit this looks a little different from an IDOR example, but isn't this still just getting an object by mentioning it directly in an url?

[knotty valve]

Ah so basically just attack defence

Coolio

Might be worth getting back into A-D ctfs again

Tho I absolutely suck at the attacking part 😂

[bleak quartz]

The malicious hacker isn't directly referencing an object (like user?id=666). Instead here they're exploiting the server's behavior of making internal requests based on a user inputt (url=/../user). The server blindly forwards this to its API, which then returns unintended data.

Both vulnss. involve unauthorized data access, SSRF abuses server side request mechanisms, whereas IDOR exploits straight reference to objects without proper access checks

[knotty valve]

IDOR would be using a lack of auth to gain access to information of another account, as an example, right?

[queen flare]

got it, thank you for explaining

[twin ridge]

Gave +1 Rep to @bleak quartz (current: #639 - 9)

[runic copper]

Not sure if this is allowed here but if anyone can recommend me some classes on YouTube or online I could take to feel comfortable in the trading markets for currency and crypto I would appreciate it

[bleak quartz]

Yes

[knotty valve]

I.e. user A (or an anonymous user) being able to grab invoices of user B or C

[bleak quartz]

No problem

[knotty valve]

Whoo, I remember something to do with web security 😂

[bleak quartz]

Haha nice

[knotty valve]

I really need to get into web sec tbh

[bleak quartz]

You're so gonna get scammed by crypto bros, I recommend you to check the sources and stay very critical

[knotty valve]

I know the fundamentals of XSS and SQLi, but anything beyond that or attacking TLS/SSL or MiTM I'm not very knowledgeable rn

[bleak quartz]

THM has a bunch of rooms that you could use to prac

[knotty valve]

Yeah, I think I was going through those

But I didn't take notes so I forgot most of it 😂

[bleak quartz]

Damn, ye take notes next time

Use a software like Obsidian

It's such a lifesaver

[knotty valve]

I love Obsidian

The latex suite Plugin is mostly perfect

[bleak quartz]

I KNOWW

I love it so mich

[knotty valve]

Until it you encounter the weirdest bugs cause they don't expect you to be quantum phys equations

[rapid merlin]

Yoo question yall

[bleak quartz]

You can find support for those on comm plugins too!!

[bleak quartz]

Wsg

[rapid merlin]

I wanna get into cyber sec idk shit andd what do I do first learn a language or learn linux

[knotty valve]

I've been lazy and just found work arounds instead 😂

[bleak quartz]

Pick up any language u want and go from there or go straight to deep waters. Learning computing thinking helps a lot in the long run

Your choice

As long as you enjoy what you do

You're good

[knotty valve]

I wanna say look into the different fields of cyber security and see which one sticks out to you the most, there's also roadmap.sh along with THM's own paths

That's kinda how I went about it

[bleak quartz]

😭

[rapid merlin]

Alrrr thank you guys I'll bother u again later with some questions for now adios

[bleak quartz]

I knew Java and Kotlin very very well so learning others is kinda easy now

And still do

[knotty valve]

Initially I didn't even want to do cyber security

[bleak quartz]

For me it's still in a deciding process

[knotty valve]

I got suggested to turn my chaotic computer behaviours into being more constructive

[bleak quartz]

Do I wanna go do lawyer stuff or cybersec

I like law too

[bleak quartz]

Lmao

[knotty valve]

So I started looking into software engineering and security, then I lucked into SATCOM for a bit, and now I'm a jr. security engineer (as part of my internship)

[bleak quartz]

That's cool