#general
1 messages ยท Page 1040 of 1
I just slap on fedora and call it a day
Yeah, the archinstall script kind of annoys me too, but only because I can't be 100% sure what's going on
I can't be bothered having to manually go through a bunch of stuff or manually configure SEL
So I just throw fedora on it and it's secure by default
maybe one day ill give arch a go in vm and try to install it manually.
could be fun
do it on a cheap laptop you bought at the thrift store
I've got arch running on a partition of my blackbox pc
Then donate it back to the thrift store with barebones arch on it, let somebody else have a nightmare
why a cheap one? is there potential for damaging components if i install it wrong XD
But the main OS it's running is Fedora's security suite
its not impossible
i didnt think so lol
It's Linux, you have more access to lower systems than you do on windows
hi
Hi
hru
hello mister chicken
Tired
oh shi- thats a duck mb
hhiiiiiii
hhfgcthgcbfdtm
Lmfao
u good lol
why
Cause I did the funny at work: said it was a quiet day
And everything decided to break down
whats the funny
the 'q' word
smh
Literally
should have known
ohhh
๐ค
Ain't no way am I spending 4-5 hours doing basically nothing
I had my laptop with windows on it in storage for a little while.
Somebody picked the lock to my storage unit and stole my laptop. It had all my school stuff and passwords (I was dumber then)
Now every now and then I get login attempts on my emails from random computers all over the U.S. at least 2-3x/year.
Now I use linux, encrypt my files, and use keepass
this i why we cant have nice things
LOL
no password manager? all in notepad?!
๐ญ
I don't use a password manager that often
YUPPPP!
passwords.txt
I use it for all my mnemonic codes
๐ญ
passwords.txt goes hard lmao
But everything else is stored in my brain or on a notepad in a safe
accounts.odt
Me when password lists
usercontroll.ct
logins.docx
XD
And my giant list of millions of passwords merged into a single file because yes
my_accounts.mp3
bro recorded IT on an mp3 player
oh god.
Fr
That's how I got domain admin in highschool lmao
all my secret poems to each of my 3 simultaneous crushes at the time
"Hey guys back with another video heres all my passwords and my social security number"
Hacking? Nope!
Just installed a keylogger and mic recorder on my laptop and faked an issue in my laptop
stop giving me ideas
Vine
I stole this idea from a friend
not even. back in the day you could just use a free password recovery tool on a usb stick and recover all the passwords from every computer in the computer lab.
XD
What's hilarious about it though, is that you could see the recording icon on the screen
They didn't even think to kill the process or anything
Insane behaviour
i never said i did it...
I don't need to do that at uni
When I was in high school, I listened in on a conversation one of the techie kids was having with my spanish teacher.
MF convinced me that people could blow up computers with a virus -_-

Cause the lab PCs have the password written on the whiteboard ๐คฃ
10/10 security
And the even funnier fact of this, is that the lab PCs all have admin
i know

And there's no backing mainframe or Active Directory
all admin accounts smh
So like, you could just pwn and own the PC and no one would know ๐คฃ
Until net admins see unusual traffic
That's about the only giveaway
Yeeeeep
compter security has changed so much over the years. very satisfying.
This is the same uni, that is using AES-128-CBC for their DB encryption and SSH encryption
The same encryption that's exploitable by XOR
it team fed plants confirmed
Lmfao
only feds would go out of their way to sabotage encryption on public devices
you're also not on the IT team lmao
same
Yeah I'm the student that makes the IT team cry
all my passwords in etc/shadow are encrypted with base64 the elite encryption algorithm
ROT13
only use base64 
think about it. automated cracking software that are in for your passwords are looking for md5 hash
Nah base-65536 is the way
Security through Obscurity
lol
Time to make a password cracker that only cracks base-64
Still better than plaintext
Anything is better than plaintext
I should make a password manager that embeds my passwords into random files on my PC so only the algorithm can find it
I wrote my passwords in mspaint and saved as crush.jpg so they couldn't just cat my passwords
Amazing
lool
i do the same tactic but then change the magic bytes to make it look like a docx file
XD
whatttttttttttttt
The only encryption without a NIST backdoor frfr
but you can still read as jpg tho right?
paint doesnt recognize it as an image anymore
because the bytes say itt isnt
Paint won't but iirc the windows image viewer should be able to open it
so if you open in word, it will just show jibberish?
strongarm the ish out of that obscurity
They didn't add 3m lines of code per year for nothing
The best way to secure your passwords:
Base-65536 -> base-64 -> image -> decode the colours in the image by hex -> hex to ASCII -> Reverse ROT13 -> plaintext
^eye twitch^
Why? Just to waste someone's time in the most hilarious way possible
Use ROT26 instead, it's twice as strong as ROT13 
i cant imagine if i had to do that as like a ctf or somthing. i think id scream. id be in cyber chef for like 10 minutes

There's a CTF that I done that was similar to this
Which is where I got the idea from
id crash out
HuntressCTF2024, challenge: base-p-
That's like a guesswork challenge
I'm friends with the author of the challenge, and when she saw my initial thoughts on what we were supposed to be doing 
I should have the python file somewhere
This one should be it
It's so absolutely cursed
dear god...
jarbus... erase this from my mind and sell my left kidney
Lmfao
I had p as primes in my head when I was doing it
Completely missed the joke that it's -p-, the nmap flag
One of the challs, I ended up building an entire telnet client in C++
Before scrapping it and moving to a python library
WHA... WHY>.. LWHPIOHDPOH for whaty perpuous!!!!
THE WHAT
clever naming lol
I built it, it was mostly functional, and written in 20 minutes
Only issue it had was it had a memory leak
That takes like 30 lines at max in Python ๐ญ
this is giving my brain a memory leak
But throughout the CTF I was relying on instinct for half of it
So I shot open CLion and went at it for the most part
Before doing python towards the end
The fact that you wrote it instinctively in C++ speaks volumes 
ljbf;obf;eob ReAL
Almost all my work is in C++
undercover suckless engineer
i have never written a single line of code in c++. you wont cash me outside wit that
cout << "Hello world";
I've written more in C++ than I have anything else
that's about as much as I know

Where's std:: and std::endl; !!!
is thet like using a lib in C?
Hello everyone, I'm just starting out on TryHackMe!
๐ฆนโโ๏ธ
standard namespace
#include <library/file.h> is what you use
Or import "library"; if you're using C++23
Hello! Remember to read the documentation, and take good notes as you go!
you can do that in C++?
Latest standards yes
this is why i wont touch C++
C++23 introduced it
damn its turning into python lol
skill issue for me ig
Coroutines (basically state machines for Async code) is in C++20
does C++23 still require you to use malloc and free?
ahoy me matey
The washers came dark gold but it was good
Not sure, don't believe the full standard is out yet
Or it could be but not all compilers support it
the day I touch C++ will be the day they add auto-memory management and garbage collection
I still roll C++17 and C++20
Although the only times I've used C are pwn challenges
Once I remember there was a malloc issue with evil-winrm
Don't think that'll be until at least another standard or two
this gif was made for it
Generally you don't to use malloc and free that often
this is seg faulting my brain rn
They're moving to a more dynamic allocation mode
โฆ
try x86-64 Assembly
how about nOOOO
i saw a meme on linkdin yesterday. and it was somthing like... "i found this guys ip address. 127.0.0.1, im goona ddos him and he wont know what hit em" and i commented on it and said. "yeah, he DEFINITLY wont see it coming"
๐ Unmuted 0x1xted
@rapid merlin Don't send many messages in quick succession
๐
typical skids
Hey Everyone, firstly, I hope you are all well and are having enjoyable weekends. I am in search for a mentor within the scope of many tech based fields. Please reach out to me if there's anything you can share as I'd love to have the opportunity to connect and learn!
proper punctuation in every word. that is thbe most ai looking grammer ive ever seen diamondbeast lol
Cybersecurity & AI Professional
figures
it's just proper punctuation
not everyone who speaks properly and are perfectionists is "ai"
but welcome in @barren swallow. i hope you enjoy it here. lots of cool people to connect with and plenty to learn

I find it funny when people call themselves AI Professionals tbh
8/10 times they just know how to do prompting
idk maybe he like. makes LLM's
With little to no idea on how the model's math works
prompting as in speaking the english language ๐
or "prompt engineer"
I observe
A connoiseur
I can make an English trained LLM understand German
Token pairing

It's easier if they're using the T5 encoder
๐
in other words, you were hired for $5 on fiverr?
4$ for your information

XD
if you're going to correct me, at least make it comically impressive D:
Ah yes please include your credit checks in the box right here.
lol
$4.00000000003
$6 and a sodie
$3 and a chip
fiver description "i can do what anyone else can do but im a professional and can make your prompt look professional"
$5 and an iou
What it feels like working for the company I do, as an intern
Literally min wage but hey, the cafeteria is free
So I tend to raid the chocolates and regret it later in the day
At this point, my work pays me in chocolates /j
will generate promt for root beer
ls / -beer
find / -name beer
Verizon's subsidiary Yahoo willing to buy Chrome for 10bil is funny
this sounds made up
lol
oh my god
yeah i would double check your sources. i dont know how true any of that is
https://fixvx.com/Dexerto/status/1916177075536265435
Unsure if the price is right cause I can't confirm it atm
But Apollo/Verizon/Yahoo is on the list of people wanting to buy Chrome
OpenAI included
a twitter post. bro all this guys posts are click bait
i would do some digging on that. idk about this guy
He estimated the deal would cost tens of billions of dollars, and said Yahoo would be able to secure that funding with the backing of its owner, Apollo Global Management.
https://www.theverge.com/policy/655975/yahoo-search-web-browser-prototype-google-trial-antitrust-chrome
Would need second confirmation on another site tho
yeah, seems fishy. i would get some sources on that
would be REALLY weird if google sold Chrome to anyone lol
even for 10b
They'd be forced to
Cause it's up to the DOJ and not Google
Googles browser appears in the DOJ antitrust remedies phase, where forcing a divestiture of Chrome is one possible remedy. not a done deal.
Sites Bloomberg, but Bloomberg ofc paywalled it
Still up to the DOJ if Chrome is to be sold or not
again, i dont think its happening
Google could prematurely sell it before the case is closed
But it's up to the court if Google doesn't do anything
If it does, google doesn't have a choice but to sell 
Google has most resources, doubt they wouldn't do anything and loose their prime
It's not up to google here, it's waiting on the DOJ to decide what's going to happen
Would they loose Gemini too?
Gemini isn't Chrome
ah that would be not so bad for google
Gemini is an LLM model running their own model architecture
It's still a massive hit since they'd lose their monopoly
They did integrate gemini in Google searches?
Chrome is one of Google's primary products
GCP and Gemini following behind that
Neither of which is a monopoly
Well idc coz I stopped using chrome long ago ๐ and google search engine
Tho GCP is debatable depending on how define the scope of a monopoly
But GCP being sold off would cause MASSIVE issues for everyone
What's gcp
Only into search, afaik not the actual browser
Google Cloud Platform
what is the argument exactly? because chrome points to google as its search engine?
Ok that is surely a problem
Google's version of Azure and AWS
Chome is not search engine
not what i said
They held an illegal monopoly over search engines, and one of the remedies to it is the DOJ forcing Google to sell chrome
nvm my brain not braining sorry
Cause yk, Chrome is one of their largest assets
So that just being yeeted to someone else without a choice is just indefinitely funny
wonder if they could get around it by offering search engine choices upon install. instead of defaulting to google
im not smart enough to understand the ins and outs of this but it seems comical to force them to sell. its their browser, you think defaulting to their own search engine would make the most sense
this is why i use firefox
firefox uses google by default i think
bro...
yeah google pays mozilla for that right haha
hey man
nice bike
90% of Mozilla's revenue is this
Roughly anyway
what are we talking about rn
Yk what would be hilarious
DOJ goes: you're selling chrome, but the money you make from it goes to Mozilla
Is burpsuite free edition good enough for real world scenarios?
yes..
i found 2 cve with it
lol
yeah its definitly good enough. fantastic tool
Hayy is there any tool Which can bind payloads in .exe files
msfvenom
But windows defender can easily catch it ๐ซ like nothing
uh are u trying to use this non-ethically?
thanks
Gave +1 Rep to @queen flare (current: #222 - 36)
I just want to test it on my laptop
Yes on my laptop from my PC
i have this exact setup
laptop(linux) and pc(windows)
Mine is opposite
I know
Brok
but why not haave linux on laptop
No one here.
It kinda sounds unethical., also you said this.
๐
I spend 2 Days 1 night download 4 software all with help of chat-GPT
But nothing works ๐
I have asked so many people but no one knows what to do ๐
So if we can't even bypass this simple windows defender then I think the internet and cyber world is fully safe ๐ซ
the problem is that the way ur saying it and hows its sounding
it sounds unethical
and if u read the rules
we don't help in that factor
No one will help you bypass Windows Defender. Please don't use ChatGPT if you are a beginner it will point you in the wrong directions... And like everyone is saying your end goal feels unethical
Have u not verified your thm account?
or did you just come into this server to ask about this?
cos i remember last week you also asked this
It's just I want to do it ๐
It's on my ego now
Yeah bro I don't think anyone's gonna help you because it sounds like you're doing it for the wrong reasons.
Okk thank you all ๐
@remote rain why havent you verified your thm account
You sound like you're living in a fantasy world lol
a.) Windows Defender keeps getting updated, it's not trivial to bypass.
b.) The cyber world is never fully safe. Defender isn't a central point to digital security lol
the new dr who episode is soo good, well done RTD
This is an advanced topic and only spoken about in our advanced channels.
Hello guys
How are you doing ?
finally i have completed my pre security module .on to cyber security 101 now!
It do be
Even I struggle to bypass defender with minimal changes to the AV and that's me using windows normally ๐คฃ
What would you say your level is now? Beginner, intermediate or pro
intermediate cause i did diploma in cybersecurity
@knotty valve Hello how are you doing?
sounds awesome!!
Ohh that's nice my friend. I'm still in the university studying cybersecurity though. I would say I'm still in the beginner process because I just started learning to code in python
Tbh doesn't matter where you start or if you're a beginner or not
As long as you enjoy it and it's what you want to do, that's all that really matters
ohh thats good.. im looking to get into the the pentest path and red team
@knotty valve @rapid merlin I was hoping if you guys could be my friends. I'd like to have you guys as friends
You are definitely right about that
@knotty valve @rapid merlin Guys are you still active?
Hey everyone. I am new to the cybersecurity world and was wondering if there are any cool events on the scale of something like comic con, but for everything cyber/tech related.
I'd love to go to something like that to meet people and learn stuff.
Yeah, there are, I guess you might be looking for DEFCON right now.
Hello my friend
How are you doing?
should i get mine
DEFCON, BlackHat Asia, iirc there's one for Europe as well
im pretty sure at entry-level they look for more certs n that stuff rather than other things
Australia had one late last year iirc
Depends on where you live
In my state they want someone with both certs and degree
Mountain States
VR is so tuff
Damn discord discord make the quality shitty
i forget my actual physical body sometimes ๐
@knotty valve @rapid merlin I was hoping if you guys could be my friends. I'd like to have you guys as friends
Dang THM! -273.1 C temps. yall cooling your servers in liquid nitrogen? lol
Aws...
ARE THEY
lol
confirmed AWS servers are on pluto
AWS cools its servers using a combination of direct air cooling and evaporative cooling, depending on the weather and the need to maintain optimal server temperatures.
i had to google it cuz i was curious
No, they are in Ireland.
Shows how cold it is
Pretty sure it's meant to warm up in a couple of months
Or this week.
Hello guys I am having a problem connecting to the Labs, it always tells me that the connection file has a problem, can someone please help me?
#site-support go here and i can help you
Summer isn't until June.
Close enough
I'm already there
hello guys! did any of you recently do the adenumeration network? did you encounter slow response times from basically any machine on the network? I want to figure out if the problem is related to me or how the network works. In my case, it's basically impossible to do that network...
I'm currently living in Australia where spring, summer, and autumn are all one season basically
Well it was snowing here in Estonia yesterday...
I think it's better than when it's hot lol
That is the hot period lmfao
Winter is literally freezing
cold is better in my opinion ^^
oh yes, not at this point of course haha
I have the same problem in winter mornings, my hands and my nose lol
My nose is fine, but my hands lock up really bad
so you need hot gloves
you just have to buy a good quality that is going with you
What are you talking about? I am here in Egypt and I am running the air conditioner because of the high temperature. ๐๐
haha egypt you have a hot weather there, like dubai
M9rnib
Yes, that's true. But Egypt's climate is somewhat more moderate than that of other neighboring countries, and that's what distinguishes it.
yeah better for you ๐
Meanwhile Australian summer:
Hot, hot, freezing cold, hot and raining, hot, three days of furnace
all seasons in one season ๐
All seasons in one day fr
haha, this is like living in a dream, so be careful ^^
that sounds awesome though
make a travel lol
Can't afford to travel rn
I was in Australia last December during summer and during eveningsโฆ it was freezing as hell ๐คฃ
But I really love Melbourne more than sydney
https://tryhackme.com/room/cheesectfv10 i need help
how do you guys usually take notes? like how is a page of your notes structured specifically? i'm currently writing them down with indentations like how i write pseudo-code lol
you can devise your notes into subjct, like : networking, pentesting, osint , THM courses etc...
i'm thinking of switching from papers to an actual notebook because i keep getting water on them somehow
i just stack them under the edge of my keyboard
Just get a notebook or a diary
yes it depends on how that will help you, btw a notebook is better ๐
I mean book will be a little more organised
I use obsidian personally
yeah it is a nice one
And from there I order by field, then subject, then subtopic and build the graph links so I can visualise how they all pan together
But my actual note structure varies on the topic
nice job
@thin ingot this is a good example too
when do yall think i should jump to HTB?
not yet, at least when you're done with cybersecurity 101 path
I mainly use HTB for CTFs
i see like htb is so confusing and complex
yes it's more advanced, THM will help you to progress at a good time ๐
whats the difference between labs and ctf?
on htb
ahh okay interesting
Though I find competition to be an over expression
Labs are typically structured environments that provide a more controlled setting for users to practice their skills.
CTF challenges are more competitive and time-bound events where participants solve security-related puzzles and challenges to capture "flags"
alright understand
i will check it out once im done with the modules and labs on tryhackme
They're all pretty fun anyway imho
sure they are
Morning everyone
morning legend :p
That's a boost to the ol confidence
hi everyone
Morning
haha yesss ๐
How we all doing?
Hurting
hello, i am a new member i just joined premium and it keeps asking me to verify my email but when i click on the link in my email it directs me to a 404 not found page. Is it ok to ignore the verification?
I'd contact site support
Give it a minute or two
If it takes a day or longer
i have tried it since yesterday with no change
im not sure how to contact support as it only gives me pre made bubbles to select for my issue
oh ok thanks alot
Gave +1 Rep to @stoic quarry (current: #255 - 30)
i will ask them
hi can someone help me understand how the " view site " option is working in thm
It launches a webapp sorta thing, it should appear in the spit view
If you already have a VM open, it'll open another tab at the bottom
yes, is that site a part of the platform
Yes
Yeah, screenshot your page real quick
Everything THM launches is there's
It should either end in .thm if it's accessible over VPN or it'll be accessible in the the same view window as the VM (as Silastic said) or under THMs domain name
it's better to discuss problems on #site-support so anyone who has the same question can find it there
i want to create one like that.
Like what
as site that shows a split view like view site
Iframe ig
ohh ok
Idk what they use but it's neat
Pretty sure it is an IFrame lmao
hi
Hi
hru
neither of those
i'm fine actually

why are you tired and hurting, if i may ask that
Who isn't
hackers life lol
you too?
Just tired
how can i learn tools like John the ripper and hydra etc like i cant found any tutorials
oh didnt think of that thank you
Gave +1 Rep to @stoic quarry (current: #253 - 31)
Are there any rooms for learning reverse engineering?
if i remember correctly, i saw some basic walkthrough rooms at the end of one of the blue team pathways
it had intros to re basics
I see on modules.. there are different types. Blue,red,purple.. what do they mean?
also this one
https://tryhackme.com/room/basicmalwarere
but this one more difficult than the first one
Blue is defense.
Red is offensive.
Purple is a combination of both.
"More qualified" ?
You seem more qualified at least 
Nonsense.
Hi bro
How are you doing?
lmao
Nice โpfpโ btw
Really showing that youโre a ethical hacker
Transparency is always best.
๐ค
i aint crazy i see you glowing wizards
No politics.
this aint politics

oh i see yall also believe im crazy too
This isn't really the place for this.
๐ค
๐
Someone outside of Microsoft owns the domain microsoftrecall.com and I can just imagine the chaos this will cause 
It wont?
Microsoft will just put it under recall.microsoft.com
I say that cause not many people are going to know what the actual MS domain for it will be
So it could be used illicitly with a lot more ease
True
Same if you owned recall.com, you could subdomain it with microsoft.recall.com
The phising emails are gonna be crazy
im betting there's going to be an en masse of non technical people falling for it with how easy it is to make-up a domain for it
And just as long as your emails are signed correctly, it'll get through most filters 

um
I am lucky that my family is somewhat tech oriented
Same
?
I don't have to worry about my partner either, cause her family is at least somewhat tech oriented
Cuz tryhackme has to make money somehow!
Because THM is a company
THM need to make money to pay their employees, AWS bill etc.
You still have a lot of free lessons to check out tho
Hey
However, 50% of THM is free.
Hi, hru?
somehow surviving and not getting pissed by microsoft
I have a friend that uses AWS and the hidden fees are crazy
Only thing I wish for with THM is localised pricing 
- 1
I owe Amazon a glorious one cent
That I haven't paid for the last two years
i use azure. can't relate. all the fees are hidden. i have not for once seen the billing analysis match my actual billing
They keep emailing me for it
But once again, AWS doesn't have localized pricing either
Not sure what THM is able to do about that
Not sure what's happening here but this is never the case for me
there is always a decent amount of difference for me.
Mine has always been to the dollar, never been off
Same with google when I tried out gcp, only time my prices are off is if I need to do currency conversion
Which I'm basically adding 40-50% extra cause currencies and bank fees
thereโs free rooms
Haven't staff disclosed what region and provider THM servers run on before?
Swear I saw it mentioned earlier today
Not sure who said it though
lmao
how can i make burp suite work with firefox?
You need to use FoxyProxy.
why not use the browser it comes with?
idk i love firefox
Usually cause people have their browser of choice setup in a certain way
Or preference
If you run linpeas on a box you have a a shell on you can find them.
i guess so
in firefox i only found foxy proxy standard
will it work too?
It's an extension.
yes ik
Doesn't Firefox allow you to setup a proxy natively?
You'll find them?
it does but when i do set it up i wont be able to acces any website
Ah
so what im i supposed to do?
Use FoxyProxy extension in Firefox...
.
i use it only for burp, works
hey guys new to the discord
Welcome
thanks ๐
Gave +1 Rep to @slow cloud (current: #167 - 50)
Gave +1 Rep to @sharp citrus (current: #67 - 132)
Need to verify your account.
@sick lance the discord token is assigned to another account I lost. Is there anyway to change it?
right
somehow something broke my sudo file, updated system and after wheel group was commented
but only kernel was updated xd
How did you lose it?
I got locked out of it. I'm not sure how.
Was it banned?
You'll need to DM token to me
@sick lance No. I've not used this discord properly. Infact, its the first time I've posted on here. I tried to recover it but Discord and me don't mix. Thanks i'll DM you now
Gave +1 Rep to @sick lance (current: #2 - 3678)
morning thm
Hi guys, I am connected to TryHackMe via OpenVPN. Now what? How can I complete the rooms; I don't need to start attackbox anymore, right? If so, I am learning python basics while I am connected to its server, how can I capture the flags?
And where to write codes? Download sth on my VM?
No , we can't help you with that we don't do it here

:hammer: ijuswannastayupallnight#0 has been banned.
There shoukd be a split machine provided for that room ๐
Is there a deadline on the mod applications?
Maybe you mean I click "view site". What about other rooms like "advent of cyber 2024"; do I just need to simply connect to its server or I need to do more? It is my first time setting up a virtual kali machine on my host computer ๐
download ur config file then do sudo openvpn 'configfile' then youll be connected to the vpn
No , I think that you can do entire python basics room from that split view ๐
They will end once there are enough mods

You don't VPN at all I think ๐
You should be able to yeah
How would I text someoneโs number through instagram
@mossy river
๐ค
???
i didnt even know u could do that
Yes, but I am connecting via openVPN because I guess free users don't have an external connection. Like I am unable to complete some rooms even if they are free
Since i dont really get the texting a number through instagram
Like I want to text someoneโs number without texting their instagram
Yeah
So use instagram to gather their number
Yeah but this room is special ๐ . It should have everything provided in split view ๐
Ah
That i dont think is possible
No i want to know if it could be done
it cantt
Good to know
Okay thanks. How about other rooms? I am asking generally ๐
Gave +1 Rep to @cloud quiver (current: #1 - 4726)
Thanks
Yeah you need vpn connection if you want to use your machine ๐
usually
It really depends on the room
being 10th in gold is so scary
So simply writing "sudo openvpn my-configuation-file-name.ovpn" in my terminal enough, or I need to do more things if I want to complete some rooms?
Yeah , it usually is ๐
if u need other stuff the room would specify
If you want to use custom domains make sure to add them to hosts file ๐
But that usually is explained in the room if needed
Could you explain this more to me please?
like if u dont want to type the ip when ur doing any sort of scan like
nmap 10.10.10.10
u could just do
nmap <name of the room>
i think
Have anyone tried OSINT Tool and got valid information from it?
like you want to use some custom domain like example.thm instead of raw ip of the machine , you need to include it in hosts file ( local cache ) ๐
Check out DNS in details room if you haven't done so already
Google is the best OSINT tool
Thank you @cloud quiver
I am doing advent of cyber 2024, and trying to connect to elastic SEIM via the provided link, but my browser shows an error message of "504 Gateway Time-out" what can I do?
Gave +1 Rep to @cloud quiver (current: #1 - 4727)
nmap <domain name>
not name of the room exactly
Machine isn't up yet , please wait a bit . Press F5 from time to time to refresh that page ๐
yea lol
Thanks mate very informative
Gave +1 Rep to @mellow narwhal (current: #156 - 53)
Needs help
Depends on the tool, what u want to aquire etc
@eager raven ?
Needs help
yes
I need help
with?
If it's related to a thm room go to #room-help
cant see myself on monthly leaderboard, it says I'm 24?? help
24 is crazy
good evening
good evening
maybe bug
Sup
sup chat
john the ripper is fun
you think so?
ye it is..... coz thats the first actuall hacking stuff in THM/CyberSec 101
ahh
mhmmm
i see
i will soon go down that path :>
how do i switch user on attackbox for windows 10
Attackbox or W10?
They're two different os
finally :)
thanks 
Dedicated
how did you get the CYBR thingie next to your username? can any server do that?
It's an old feature brought back.
yep
Discord Guilds.
ah, goofy
It hard to get back then
Intentionally.
Hello, I also have a quick question.
I was enrolled in the Junior Pentester Path, but my progress was halted because I didnโt have a premium subscription (itโs been around 5 months now).
If I complete the modules now, will the certificate show the original start date, the completion date, or will the time gap affect it? Thank you!
Completion date.
Possibly with time.
I want to do some THM, but I honestly can't be bothered.
Isnโt time spent a fixed number ?
does it actually track time spent in modules ?
so in my current situation it will be like hundred of hours ?
Who knows?
it will be funny if my time to completion was 500hrs
Doesnโt matter though, not like the certs can b used for job applications anyway
alright then
thanks thanks :) I appreciate it
moar
Sheesh
solid, I'll get there in a year or so
U guys can never beat my streak of 0
....
Hi everyone, I have been doing programming for few years now and had interest in cybersecurity from beginning and after doing development all this time now I want to focus on security. I need help in how should I proceed, what I mean by this is which topics should I start from so that I have a nice base for the future.
this message is also helpful :P
Guys any idea on creating Complex custom rule set for John The Ripper ?
Like
A0"PC-[0-9]"Az"[@[0-9][0-9][0-9]" would that work??
bruh what, how do u even do that thats like 3+ years

@sand trench thankyou for the advice, I would like to ask one more question, what are the general skills anyone should be having to be able to perform well in ctfs ( like the prerequisites to be able to solve ctfs keeping experience aside)
help: Launch the AttackBox if you haven't already. After you ensure you have terminated the VM from Task 2, start the target machine for this task. On the AttackBox, run Nmap with the default scripts -sC against MACHINE_IP. You will notice that there is a service listening on port 53. What is its full version value?
is: Nmap Post Port Scans
stuffs
note taking note taking note taking note taking
also teaching your friendly pet rock or rubber ducky how to go through the steps and hack things out loud
idk why the asnwer is wrong
oops lemme delete it sorry
No you are good
i was spamming all brain ded im in way too many ctf servers
Itโs a great question
Itโs a lot
hey i have a question so i started a ctf challenge at first there was an open port at 7777 , then i restarted the machine and it was closed i tried restarting it for few times(10) and still the port is closed and its the only way to solve the challenge
Is this THM?
yess
#room-help ๐

travis hunter has officially become a jaguar
Ok
W trade
What's the pass for logging back into Ubuntu?
huh ?
heyy i have a question for you scrubz
That's not the attackbox, that's a different machine.
If you need help, #room-help
Are you going to ask now, or later? ๐
aw i was waiting for the permession to ask lol
is your full time job discord mod for thm server ?
No, it's a voluntary position.
does it require being online 24/7 or as long as you are online and you have some free time
lol
As and when you're around, there is no requirement except being active within 30 day(s).
Y would any voluntary pos require 24,7 commitment

Wait, you specialise in DF?
It is what my uni course is on.
Oh. Do you like it?
Yup, It's good.
Mind telling which region you're from?
Scotland.
Ah fair.
THM should rescind their sponsor of John Hammond since he forgot to do a give away in his Sal1 video. /s
Guys Iโm stuck on OWASP top 10 questions 21
Who developed the tomcat application.
Iโve tried couple of answered but not matching . Iโll be glad to get some help
Not the OWASP Top 10-2021
The normal OWASP 10
?
๐
Please give room advice in #room-help
Unless Iโm blind somehow but Iโve looked through their page
sorry
@sick lance are u one of those guys who create rooms in thm
No, I'm not.
Why can't I create my own room ?
Hello
You can.
I appreciate man ๐๐ฝ
Once you toggle the developer options, it will appear in your toolbar at the top.
Yea yea I see , thanks ๐ซ
Above is a room creation overview document, it could cover some questions you may have.
โ Gave the role Creators-Lounge to neoudv
#creators-lounge is a channel dedicated to room creations, there will me some questions in there you may have already answered, and a more dedicated space to ask more.
ello ello sebi
ello ๐
hey guys can someone teach me how to do better ethalic hacking (i only swas scamming scammers and get there IP
With tracking links
๐
Gave +1 Rep to @hallow hazel (current: #305 - 23)
That's not really ethical or legal
can someone help with something pls
Tracking scammers is legal as long as I only collect basic info like IP, device, and location for self-protection. Hacking or stealing personal data is illegal.
Am i right?
or not
what do you want to learn to be honest? we have to ask this
Simply collecting IP addresses and general device info that scammers send you (e.g., through an email or website visit) is usually fine... Hacking into their systems, accessing private accounts, or gathering personal data without consent crosses into illegal territory
Even when collecting basic info, you should still avoid public "doxxing" or unauthorized data sharing, s that can also have legal consequences.
my friendhas got stolen his minecraft acc and i wanna get him that back so
Iโm trying to set up a Meterpreter payload on my laptop and download it. Iโve set up a local server, but I'm having trouble getting the APK to download properly on my phone. Can someone guide me through it?
yah i will tell you secret hack method
contact microsoft support
โญ
i already did
No.
Vigilante hacking is illegal
Metasploit android shells are deprecated for modern versions of android
Phone hacking is for our advanced channels
Of course, vigilante hacking is illegal. I just meant basic tracking for self-protection, not hacking devices or accounts.
what does "tracking for self-protection" entail..?
i love helping others
so is there an up-to-date payloads compatible with modern Android versions?
why do you want to track scammer
hitman?
...how does getting an IP help you there?
By 'tracking for self-protection', I mean collecting public information like IP address, approximate location (from the IP), device type, and browser version.
.
also you wont find anything from public informations
many people use same ip
๐
i feel like im so close to getting Moebius room user.txt
yeah, ISP release and renew ips constntly
CGNAT
Getting the IP can help to confirm suspicious activity, like if the login attempts come from a country where my friend doesn't live. It can also show if the attacker is using a VPN or a proxy. It's just for gathering clues to support account recovery, not for attacking anyone.
Lol what
๐ค
Account recovery? Contact the support of the service
this^
Using a VPN or a proxy? Who cares, you're not the police
Login attempts? Use good passwords, don't share them, use 2fa
I understand, thanks. I will contact the official support instead. I just wanted to help my friend, not cause any trouble.
he got in a server and they hacked him and stole his acc
he probably verified his account via fake bot
Hii guys i need help if someone can help
I don't have access to old Instagram account no Emil no password i want to get it back is it possible
Your not really causing trouble, just going about it in a rather convoluted manner, and people are trying to figure out what it is you are actually trying to do (
There are lots of random posts on here on "pls hax my roblox back", people are weary...
Contact Instagram support
This won't help with self protection
Even Upwork has a client about this haha
Why not
And that's illegal
They will never reply back
What protection does that give you?
If i get hacked (lets say i tracked him already) then i know wehre he did that
what then?
IP addresses change all the time
i can find out info for my self or call someone that knows more
Be honest, have you tried an SMS phishing campaign with relaysms.io before?
tracking links
crime of harassment
?
This is illegal. ๐
lol
So what do you do if the IP charges?
i am ethalic and i dont wanna get in trouble with the police
trying again or get some other infos (in a tracking link are more infos then just an IP)
