general

[cosmic pendant]

no idea what htat is

[rapid merlin]

Porsche Sports Lineup

[pearl copper]

ok thanks. do you recommend a specific path?

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3700)

[rapid merlin]

https://tryhackme.com/hacktivities?tab=roadmap

[rapid merlin]

Choose your pokemon

[blissful current]

[sick lance]

Do you have a sub?

[shy vortex]

Been on a good 4 day streak ! Getting this grind in to start off my morning yu hurdddddd

[pearl copper]

yes

[rapid merlin]

If you're subscribed to THM Subscription

[rapid merlin]

Take a look at that, @pearl copper

[pearl copper]

i did but i know most of the meteiral there

in the starting rooms

[sick lance]

Then I suggest you go over it again, and take notes.

It's obviously not sticking.

[neat scaffold]

i need help every bug that i found so far got marked as a duplicate like what should i do

[pearl copper]

yeah but for example after i finish 101 roadmap, which ctf do you recommend to do?

[sick lance]

RootMe.

[rapid merlin]

I started with WhiteRose 😂

[pearl copper]

after rootme? cause i did that

[rapid merlin]

Give White Rose a try! It's a Mr. Robot cross-reference Priv. Esc. room

[pearl copper]

ok thanks

[sick lance]

https://tryhackme.com/room/basicpentestingjt
https://tryhackme.com/room/easyctf
https://tryhackme.com/room/lazyadmin

[rapid merlin]

Scrubz a quick question, if you don't mind and me getting banned. Is being a Community Moderator here paid, or no?

[sick lance]

It's voluntary with some perks.

[rapid merlin]

Beneficial Perks community and/or tryhackme platform wise?

[sick lance]

THM aimed.

[mossy river]

You get free sub, merch, access to our AWS and Azure training, and we also give you perks outside the platform, such as Amazon vouchers

We're always looking to improve and increase the perks 😄

[pearl copper]

thanks

[twin ridge]

Gave +1 Rep to @sick lance (current: #2 - 3701)

[sick lance]

👀 reeeeally

[rapid merlin]

The perks alone is hella nice! The only thing I could ever ask of that is the Amazon Vouchers! Could really use those 😄

[rapid merlin]

P.S. I don't use it for my beneficiary gains. I donate those to charity ❤️

[keen light]

:/

[gray sonnet]

Holy mother of god, that's an extensive resume

[rapid merlin]

What I most hate in this world is only two things; People who can't properly comprehend what I say and OSINT.

[lethal fog]

How do you guys deal with the problem of balancing security and convenience when it comes to password management? I want to have unique and secure passwords that I can remember somehow 🤔

[mossy river]

Password manager?

[rapid merlin]

Are you using the passwords at work or at home

[mossy river]

You can write your own passwords at store them in the manager, but it's much more convenient to just use the automatically generated password, and then autofill

[lethal fog]

At home, but if also work in terms of university-related stuff ...

[rapid merlin]

I used to have my passwords stored in keypass but it got corrupted by an attack vector. I would write them them and keep them locked up.

Or use phrases you can remember

You can also make your own rules for swapping letters for numbers eg

[lethal fog]

The problem is that I cannot remember stuff arbitrage passwords. What am I supposed to do if I want to login from another device?

[mossy river]

most password managers have multi device support

[sick lance]

^

[mossy river]

alternatively, you can just open it on your phone and type it in manually- this is what I do when I'm on Windows as I use Apple's password manager

[lethal fog]

Something like password123@Amazon or password123@Discord?

[sick lance]

Wow.

[rapid merlin]

…

[sick lance]

Now all I need to do is find that book, shouldn't be too hard.

[mossy river]

If you can remember it, an attacker can predict it
(this isn't an exactly accurate rule, but it's still something to live by)

[sick lance]

Humans are a creature of habit. 😄

[lethal fog]

Can I use that on Windows 11 too? 🤔

[rapid merlin]

Ohh what book you after ?

[sick lance]

None, yet. 😄

[rapid merlin]

Atomic habits is a great book

[mossy river]

https://support.apple.com/en-gb/guide/icloud-windows/icw2babf5e03/icloud

[naive violet]

NCSC guidance, use 3 random words

4 is easy enough to remember

[sick lance]

I seen something about that being out dated.

[severe cliff]

there are accounts i can easily reset or they don't mean much to me so i just store them in an password manager depending on the system like apple keychain or keepass. other things (and ofc passwords) maybe very important so i just store them on offline devices (encrypted). also enable 2FA 😉

[mossy river]

I don't remember my passwords, I remember my finger placement on the keyboard

It's great but means I can never type them on mobile lmao

[sick lance]

Passkey.

[crude stump]

how does that work

[sick lance]

Auto-fill the fields and use biometrics to authenticate.

[crude stump]

technically, you still remember it but with your body

[crude stump]

ah i ment to jabba

[rapid merlin]

Ohhh, I can touch type while I look away talking to other people 😛

I type fast too

[severe cliff]

yes but be carefull if they upload to cloud

[sick lance]

The only issue with biometrics is when you're in trouble with the police.

[mossy river]

I don't remember it I just remember the general location that my fingers are in and the way they move

it's why I can't reliably enter them on mobile because it's much smaller than my keyboard and has different finger placement

[sick lance]

If the device is secured with biometrics, and you don't give it up, they can charge you with what they think is on the device.

[crude stump]

i mean, if your in trouble with the police i think theres worse issues

[rapid merlin]

Don’t get in trouble with the police ✅

😆

[crude stump]

interesting

[keen light]

i would not recommend using biometrics a master password you change every couple of months is the best. without any extra hardware .

[mossy river]

Why would I need to be careful? 😄

[sick lance]

Your threat model.

[severe cliff]

expands attack surface

[crude stump]

the cloud is just servers, its not truly a cloud. yall know how it even got that name?

[lethal fog]

What the heck is that? It's rated at 2.3 😟

[mossy river]

Alternatively, platforms should implement multi-stage passwords.

Something you know, something you have, something you are

[keen light]

depends on threat model but most of the time it doesn't really matter if they upload

[mossy river]

Doesn't necessarily mean it's bad 😁

[severe cliff]

XD

[mossy river]

I know, I was fishing for an explanation

First step is prevention, but majority of people will choose convenience over security

[lethal fog]

Isn't it better to use Google Password Manager when using Google Chrome?

[crude stump]

yeah by putting there password on a obvious sticky note 🤦‍♂️

[sick lance]

I would not suggest using a browser based password manager.

[crude stump]

me too

one infostealer and its gone

[lethal fog]

What would be the better option?

[sick lance]

I use a password manager which is offline.

[lethal fog]

What is it called? Is it good enough?

[keen light]

keypassxc or bitwarden

[mossy river]

UK gov says it's fine 😆
https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/password-managers

[keen light]

the same gov which did remove ADP

😐

uk gov trust me bro.

[mossy river]

wym tried

[lethal fog]

How can I use Bitwarden if I want to login to Amazon on Google Chrome or on Discord Desktop? 🤔

[keen light]

you can add it as an extension to browser or download the app the later being the most secure and the first being more convenient.

[lethal fog]

Do I have to do both (extension and app)? Can't I just download the app itself?

[crude stump]

i would trust a external password manager more then a browser imo

[keen light]

yeah they both work by themself

[lethal fog]

Is Google really evil? 😢

[mossy river]

It's actually much worse than that, the Government wanted a backdoor to be installed which would compromise the security.

ADP only works by storing the key that encrypts your iCloud data only on your device, instead of in Apple's iCloud, which means that nobody can access your data not even Apple.

While I don't agree with the choice and reasoning, it's not as bad as media made it out to be

[sick lance]

As usual, it's blown out of the water.

[lethal fog]

So is it safe to use passwords app from Apple

[keen light]

yeah the app is fine

[mossy river]

non-tech people started to think that Apple disabled iCloud encryption which wasn't at all true

If you're that paranoid, encrypt everything yourself and then upload it to iCloud

[mossy river]

Yes perfectly safe

[crude stump]

1111 is the best password

[keen light]

It just means UK gov could force apple to give over your icloud info know but if the government are doing that then you probably have bigger problems, or if they get hacked but they have pretty good security.

[lethal fog]

Why do these sites generate different hash values?

• https://tools.keycdn.com/sha256-online-generator
• https://10015.io/tools/sha256-encrypt-decrypt

[keen light]

they generate the same for me

[mossy river]

are you putting a space before or after the string for one of them? @lethal fog

[winged nimbus]

They don’t know what they are talking about
I would rather write my passwords in a notebook

[keen light]

paper is king second only to a dedicated air gapped machine with the wifi card ripped out

best way to store crypto wallet seed phrase

[oblique needle]

guyssssssss

[blissful current]

👋

[round orbit]

Hey guys, thought this may be useful so just dropping in to say that Pearson VUE is offering a free exam retake for select certification exams. To qualify, schedule, purchase and take an exam between 1st May - 12 June 2025.

If you don't pass, you can retake the exam for free between 7th July 2025 - 20th January 2026.

This includes exams such as AZ-104 and AZ-500, but excludes the following exams:

• AI-102 and AI-900
• AZ-204 and AZ-900
• DP-100, DP-300, DP-420, DP-600, DP-700, and DP-900
• MS-102
• PL-300
• SC-200, and SC-401

Source: Pearson VUE

[lethal fog]

Yes, that was my fault 😅

[sand trench]

ripping cd:s goes brrr

[sand trench]

eh paper does not leak electromagnetic radiation like a computer does

[rapid merlin]

have a nice evening, how are you people?

[sand trench]

going to store for saturday candy/snacks soonish

[crystal mauve]

Don’t forget the cheese

[lethal fog]

What kind of password do they ask for? Is it the regular password to login? 🤔

[mossy river]

yes it's the same pin

where is this hash from

[inner bloom]

give me your password i'll tell you

[lethal fog]

But it says that the pin is wrong. How is that possible? Isn't the it the regular four-digit password on the iPhone?

[mossy river]

you're typing it in wrong? idk 😄

[inner bloom]

its the laptop pin

[lethal fog]

So it's a combination of numbers? 🤔

[mossy river]

it's the one you login to Windows with

[lethal fog]

But that's not a only-digits passwords then? 😟

[mossy river]

You set it up when you setup Windows 😄

[lethal fog]

I have to go to Settings > Accounts > Sign-in options

[wraith tusk]

boss

[rapid merlin]

--wizard

[blissful current]

🦹‍♂️

[grizzled wing]

hello. i have been spending time in another server.

[blissful current]

@grizzled wing ello Sudo Veggies, long time no see

[grizzled wing]

wow Kamany is a Legend 🎉

[hallow hazel]

new pfp 😮

[jade oar]

Some how it looks like I got Covid bc can’t taste nth nor smell

[rapid merlin]

Just kiddin

[jade oar]

Nah that’s crazy 🤣🤣🤣

That was so funny

[sick lance]

Absolutely not

[grizzled wing]

whats with this CYBER icon? thats new

[inner bloom]

[blissful current]

server tags

[grizzled wing]

ha

ok

[jade oar]

Crazy I been eating I ate pasta I ate chocolate o ate rice hey all like nth

[blissful current]

there r more sort of tags in some specific server for now

[grizzled wing]

try chili peppers

[jade oar]

Ayyy that means no uni for a weeek and more time to do rooms

Bc I haven’t been on there in these 2 days

[wraith tusk]

oh, triple eight

[grizzled wing]

try:
   spicy_food()
except:
   no_tastes()

[blissful current]

spicy food >>

[jade oar]

I tried today but I was too tired but I finished one at least search skills it’s nth but better than nth

[pallid lotus]

Tut tut, specify your exceptions!

[jade oar]

🤣🤣

I tried ramen

Bro I ate it like nth the pink one

[grizzled wing]

return 0

[sick lance]

Can I DM you?

[pallid lotus]

try:
   spicy_food()
except CouldNotTasteError:
   no_tastes()

[sick lance]

You don't.

I already know this from an action I performed.

[grizzled wing]

i got red nail polish on 💅 , think today is red team day

[blissful current]

[grizzled wing]

?

[wind barn]

can someody help me im trying to get my friends ip addres how do i do that

[thin ingot]

i think you just ask them?

[blissful current]

[wraith tusk]

да

[blissful current]

[sick lance]

Why do you want to?

[jade oar]

Icl I think I know why am not sure tho

You know when u have friends who is no IT knowledge and be like I know ur ip address bomb Ygm

[knotty pendant]

[wraith tusk]

ehh

that could be somehow scary for them, but anyways ip adress is nothing nowadays

[jade oar]

It’s fun when it’s ur close friend but I am not sure his intention nor if that is why tbh

[wraith tusk]

haha understandable

[jade oar]

It was fun when we used to do that I forgot how

[knotty pendant]

[wraith tusk]

could be much more fun to hack friend's smart light bulb via wifi

at night

[narrow flame]

Lol

[sick lance]

That wouldn't be legal.

[wraith tusk]

Actually yes, but that's all on eductional purpose, yeah?

[valid jay]

I’m thinking about hosting little king of the hill challenges with prizes. I wanna see if any one is interested

[tight trout]

howre you going to host it?

[valid jay]

On tryhackme you can host them

[sand trench]

sometimes shadow wishes they could read japanese for the music album names

[sick lance]

No?

You can't do something then think it's ok because it's either;

a) A friend
b) "Educaional circumstances".

In the eyes of the law, there is no such thing as educational circumstances.

[wraith tusk]

actually yes, but when things ain't bothering unknown people then it stays normally

[pallid lotus]

Well, you're screwed next time you go into uni then

[sick lance]

Next week for my last exam. 🥳

[pallid lotus]

Whooooo, good luck! Don't get arrested! 😁

[sick lance]

It's ok, this one is a written answer on Web app security.

[pallid lotus]

Ouch

[sick lance]

3 questions from 9 topics I'll need to discuss.

Approx 500 words per question 🤢

[pallid lotus]

Heh, wait until you need to write a pentest report

[wraith tusk]

https://tenor.com/view/shivering-dog-shiver-me-timbers-shiver-me-timbers-dog-gif-23060744

[serene ginkgo]

Hey guys

[sturdy river]

so thats 500 words for each of the 27 questions?

[sturdy river]

supp

[sick lance]

No, I'll get a selection of questions, and I only have to answer 3 of them.

[sturdy river]

pheww that's better

[serene ginkgo]

Guys I am preparing for CompTIAsec +.... any tips plss???

[sand trench]

Kara no Kyoukai "Mirai Fukuin" / "Mirai Fukuin extra chorus" Original Soundtrack
is the english version of said title... it is for the anime garden of sinners ( known as kara no kyoukai in japan of course )

[cosmic pendant]

it's easy, you got this

[wraith fjord]

AD hurts brain

ngl

[blissful current]

[pearl thicket]

👀

[polar shale]

Hi

Its saturday i was procastinating all dayy wooops

[rapid merlin]

I had to check that it was Saturday

[sick lance]

It's defiently Saturday.

It's Dr Who day.

[polar shale]

A what day?

[red peak]

Even CompTIApentest+ is supposed to easy, but is it true?🤔

[polar shale]

Depends on what you define to be easy

[naive violet]

Star wars day tomorrow

[sick lance]

And Revenge of the Fifth on Monday.

[polar shale]

Doesnt dr who rhyme about green eggs and hams

[sick lance]

No, that's Cat in the Hat.

[rapid merlin]

I dated someone once who was obsessed with doctor who, he looked like Walter white. That’s the only time I’ve watched it

[sick lance]

Dr Seuss.

[polar shale]

Ohh

[sick lance]

Sounds like a keeper.

[rapid merlin]

He once cut me with his toe nail.

[sick lance]

Sounds like he needs to cut his toe nails.

[polar shale]

Time to see other fish

For sure

[mossy river]

I’m going to make my girlfriend watch from Tenant until Capaldi

[sick lance]

smh

[rapid merlin]

He tried a comb over for years but once he met me I shaved it off. 😆 No more living in denial.

[safe oxide]

[polar shale]

Not sure what that even means

[mossy river]

Did you watch the recent Doctor Who @sick lance

[sick lance]

I haven't seen tonights episode, I've seen the rest.

[mossy river]

Actors that played the doctor

Tenant 10th, Capaldi 14

[polar shale]

Toe nail comb over

[sick lance]

New season is good, new assitant is bad.

[mossy river]

sorry the one before tonight 🤣

Planet made of diamonds

[rapid merlin]

Two weeks after the breakup, he got someone pregnant. She took away my problem. AMEN

[sick lance]

Sounds like he needs to let it go.

[sick lance]

Yeah, that was a great episode.

[mossy river]

I don’t like new who, nor have I watched any episodes but my brother told me to watch it

I got so excited when I heard that line

[polar shale]

I dont really watch much of anything besides like defcon conf, or blackhat usa shid

[mossy river]

Rest of the episode was terrible

[sick lance]

Perfect set up for a third part.

[polar shale]

Maybe one day boondock s5 will come out

Until then i will just keep being a nerd under a rock

[red peak]

In fact I still have many troubles in pentesting. That may just be true.

[polar shale]

Dr. Green Eggs and Ham

[rapid merlin]

I really want to go defcon

[polar shale]

Just keep going

[polar shale]

Come down !

Defcon is great

[sick lance]

Sounds like you think America is below England.

[polar shale]

Im not sure where they are from

[sick lance]

...England.

[rapid merlin]

I’m in England

[sick lance]

[rapid merlin]

😆

If I could I would.

[polar shale]

okay good to know i guess

I never really sought after their location or had any context 😂

[rapid merlin]

It is so far to fly

Wish it were closer

[polar shale]

48 hours or how long?

[sick lance]

With your arms anyway.

Use a plane, save energy. (your own)

[polar shale]

https://tenor.com/view/peace-out-gif-3584473422170938815

[rapid merlin]

It’s like ten hours

[rapid merlin]

With these bingo wings id cut it down to 5

https://tenor.com/view/fly-human-fly-float-human-airplane-meme-gif-10810566673801271488

[fervent ruin]

Hi, can someone help me with windows partitions ?

[sick lance]

What do you need help with?

[fervent ruin]

I just clean everything and reinstall windows , i had windows on ssd , now i installed on hdd

Wait , i think its easier to show you

Can i dm you?

[sick lance]

There is no reason to.

In here is fine.

[fervent ruin]

Ok

I want to free this 100mb in disk 0

I cant

[sick lance]

Right click delete partition?

[fervent ruin]

No option is available for me

Only help

[sick lance]

Delete Volume.

[fervent ruin]

I cant do nothing to this partition

[sick lance]

You can't use eliminar?

[fervent ruin]

No

[sick lance]

Why not?

Please translate the error code to me, I don't read the language.

[fervent ruin]

Thats what im trying to understand

But there is no error

The buttons just not working

Only button working is that "Ajuda" that means help

[sullen hearth]

U got admin rights?

[fervent ruin]

I think so, i just installed the windows now

Its fresh

Now i want to install linux in this disk 0 but it has this 100mb idk why

What if i uninstall the driver ?

[sick lance]

Oh I'm thick.

[sick lance]

No, don't delete the EFI.

[sullen hearth]

Make sure the partition isn't in use and you open it as administrator

[mossy river]

@fervent ruin send a picture of the full partition screen please

[sick lance]

The EFI is in use.

[fervent ruin]

Windows is installed on disk 1

[boreal scarab]

Hehehehe ram go brrrrt today

[fervent ruin]

And i want to free other disk, to install linux

[boreal scarab]

casually running 3 server VM's
Looks at 2x xcp-ng, 1x proxmox

[sick lance]

Light weight.

[woeful cedar]

I tried installing the NVchad Neovim config on my Kali Linux

It gave me some errors

Even though it's advertised to run easily just by running one line of code

[blissful current]

[mossy river]

How did you move Windows from the SSD to the HDD?

[fervent ruin]

I deleted everything from both drivers , when installing it from usb

[blissful current]

[fervent ruin]

When u choosing what drive u want to install, i just format both drivers and install windows on hdd

[mossy river]

Open system information and tell me what iut says for the "Boot Device"

[vestal bone]

Lol I found a way to memorise my lessons faster. I transform them into a song

[fervent ruin]

Where is it ?

[mossy river]

halfway down the page

[fervent ruin]

I think im not understanding what u asking for

[fervent ruin]

Where u get that ?

[mossy river]

on system information

[fervent ruin]

Idk where is that

[mossy river]

I don't know what it would be called on your system

[fervent ruin]

Im in settings , about

[mossy river]

Windows key + R, type msinfo32

[white crow]

https://tenor.com/view/harvey-specter-suits-suits-tv-suits-usa-gif-11039568737019300118

[mossy river]

sorry I wrote the wrong thing, msinfo32

[fervent ruin]

Ye

[mossy river]

then what does it say under boot device

[fervent ruin]

\Device\HarddiskVolume1

I think im going to put linux on usb , and install it on ssd , and when installing maybe i can delete this 100mb

[pallid lotus]

...
Oh Lordy

[blissful current]

[sick lance]

You rang?

[blissful current]

[pallid lotus]

Imposter. God left the building a long time ago

And torched the place on the way out

[sick lance]

They did not.

[keen light]

if you got neovim from apt it wont be the most up to date version so is not compatible

[pallid lotus]

https://tenor.com/view/this-is-fine-gif-24177057

[mossy river]

no don't delete it

[crystal moss]

@sick lance hey.. i have a question for you:. I guess it is not ok to ask for a test person etc for my own ARG / CTF .. It is just a fun project .. But if it is ok, can i do it in this channel ?

[sick lance]

I think Jabba may be answering you, all decision like that would need to go via them.

[fervent ruin]

Why?

[mossy river]

Sorry I didn't want to give advice without double-checking.
I'm pretty sure your Windows is using the EFI partition to boot, you should probably move it to your windows drive before doing anything.

*I am not an IT technician, and this advice is not official

[sick lance]

Windows is. 😄

[fervent ruin]

But i cant do nothing to this partition, cant delete , cant rename , cant do nothing

Even if i try to move it to hdd , i just cant

[sick lance]

cc @mossy river

[mossy river]

You should be able to create the EFI on the new device, reboot to get Windows to use it, and then delete the old one from the drive

[fervent ruin]

I have to go search how to do that

[mossy river]

However, I won't be advising how to do this as I am not able to completely see what you're doing, nor can I give advice specifically for your situation

[fervent ruin]

I understand

Thank you for you help

[keen light]

windows uses its own boot manager have to shrink one of the partitions ie the NTFS and then boot into a live iso installing grub and a ext4 partition then reconfigure grub with osprober enabled

[fervent ruin]

If i install linux on this disk, this partition can be there anyways , its just 100mb of 232gb

[mossy river]

Sorry we generally avoid allowing "test users" here as we cannot ensure the safety or of our community members 😓

[mossy river]

Just make sure Linux doesn't wipe the partition while installing lol

[pearl thicket]

damn these bots are really getting advanced

[fervent ruin]

I think im going to install kali , bc im spending all day on kali on vm , so...

[blissful current]

[fervent ruin]

What if ? 🤡

[mossy river]

I wouldn't recommend doing so, you shouldn't be pentesting without a VM anway

[fervent ruin]

Why?

[keen light]

kali is not really meant to be installed on bare metal although it probably ok unless yo are doing malware analysis

[fervent ruin]

I could install ubuntu, but i would be doing thm challanges on it

Its the same

[keen light]

i would just use ubuntu and then install the tools u need

[fervent ruin]

Yes , but why is bad to do pentest without vm?

[keen light]

but better to just use vm if yo have the power

[warped hollow]

Why? is kali not stable or what?

[fervent ruin]

Using my pc will be better , using vm is slow for me

[keen light]

if you are doing dynamic or static analysis or if someone attacks your machine

[keen light]

no its not really stable

[warped hollow]

Oh ok.

[keen light]

but its still fine to use you might just have to reinstall when it breaks

[fervent ruin]

Ill be using linux just for cybersecurity , just for tryhackme

I will use windows for daily basis

[mossy river]

It isn't recommended because:

• it is poor security hygiene to be using your host, especially if you're working for a pentesting company, you usually use fresh VMs for each client (especially if you store client data on them)
• it is not secure or safe, especially as you may be making your host vulnerable or playing with vulnerable/ malicious software
• pentesting machines are designed to be setup on the go, when you need them, not as daily drivers

If you really want a CTF machine, I usually recommend a laptop you don't mind losing

[keen light]

what are your specs ?

[fervent ruin]

I dont have laptop 🙃

[warped hollow]

I don't know, but I keep hearing that linux is not good in desktops computers. Is that even true?

[keen light]

if you really want to you could install a distro like ubuntu and then enable kvm for hardware virtualisation its much faster than running a vm on windows .

[fervent ruin]

i5 3ghz , 64gb ram , 1060 6gb gpu , 1 ssd 232gb, 1 hdd 1tb

[boreal scarab]

Om nom nom

[woeful cedar]

So how do I downloaded the most upto date version?

[keen light]

snap store or compile from github

[pearl thicket]

It is true, its not good on a host machine. It's not been designed for general daily use.

[rapid merlin]

@mossy river hello
Where to contact for discussing an interesting sponsorship opportunity with try hack me?

[crystal moss]

I understand. Thanks anyway.

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1592)

[blissful current]

[boreal scarab]

All are running at 16GB of ram each. Why? Because testing, and why not?

[mossy river]

[e-mail]

[woeful cedar]

Can I download from terminal or I'll have to download from browser

[warped hollow]

All Linux distros?

[pearl thicket]

Kali.

[keen light]

what distro are u on

[woeful cedar]

Kali in VM

[fervent ruin]

I should asked this b4 deleting everything from my pc 🤡

[warped hollow]

Do you know any good distros for Desktop?

[woeful cedar]

Linux Mint

[pearl thicket]

personal preference mostly, but Ubuntu, or Mint are probably the best for beginners.

[fervent ruin]

[boreal scarab]

https://tenor.com/view/ping-gif-20035980

*CYBR

[keen light]

i think "snapd" is a package in apt

[woeful cedar]

oh alright

thanks

[cosmic pendant]

https://tenor.com/view/lighting-a-match-buzzr-start-a-fire-light-a-fire-gif-13103463636026817566

[fervent ruin]

But ei, mr robot used kali as main os , what he knows that we dont ?

[boreal scarab]

https://tenor.com/view/pirómano-meme-jeje-odio-bomberos-gif-15722930

[cosmic pendant]

probably that they do regression testing and repo checking more than other distros

[boreal scarab]

How to read a cough SCRIPT

[keen light]

pretty sure mr robots microwaves his drives after every hack session so never has to update anything 🙂

pretty expensive but also very effective .

[cosmic pendant]

is it?

[fervent ruin]

But if i want to install kali on my pc , what are the problems ?

[fervent ruin]

I can imagine

[cosmic pendant]

Kali should be in a VM for a bunch of reasons 😄

[fervent ruin]

What about ubuntu with tools ?

[cosmic pendant]

That works too

[fervent ruin]

But what are the problems ?

[cosmic pendant]

The best hackers I know use stripped down ubunutu and run their own configure/tool scripts

[fervent ruin]

Disadvantages

[rapid merlin]

Hello
It shows address not found
Kindly provide any alternative email address sir

[cosmic pendant]

Well if it's professional there are record keeping requirements that VMs make very handy

Sepration of testing enviorements

[fervent ruin]

The only reason i still have windows is for my music production, i want to use linux only

[mossy river]

[e-mail]

[cosmic pendant]

Kali is not an everyday OS

[keen light]

its just not containerized so if anything got onto your machine they could look through your drives and access the hardware .

[cosmic pendant]

It's a I'm working here, OS

[woeful cedar]

Kali has many outdated packages

[cosmic pendant]

There are 2 big reasons for taht

https://www.kali.org/blog/new-kali-archive-signing-key/

teehee Oopsie

[fervent ruin]

I will be doing thm rooms , creating my scripts on linux, and use windows for music production

[keen light]

gotta go to arch then

or fedora

[cosmic pendant]

get a Kali VM on WInders

[gusty tiger]

guys i have an issue please help

[fervent ruin]

[woeful cedar]

If you're in pentesting, then Kali is pretty much the best choice tbh

[cosmic pendant]

oh boy

Wait, is this a popcorn thig

[fervent ruin]

Thats what i had , but its slow

[cosmic pendant]

Let's bet

[keen light]

yeah kali or parrot

[boreal scarab]

With?

[cosmic pendant]

Kali on WIndows is fine

[gusty tiger]

i have a subscription but it says that i should resume my sub when its actually active, its been like this since yesterday. whats the solution?

[cosmic pendant]

good question. #general message

[rapid merlin]

All of my friends are ignoring me

[blissful current]

then they aren't friends

[cosmic pendant]

How do you get them (friends)?

[fervent ruin]

I like edge browser interface , but brave ad blocker is so good

[warped hollow]

Anyone here having trouble with vmware tools? I can't install vmware tools for my linux virtual machines.

[mossy river]

what's the problem

[sick lance]

[e-mail]

[fervent ruin]

Thats a reason why i dont want vms ... guest aditions

[mossy river]

Security is always overshadowed by convenience

[keen light]

https://tenor.com/view/daeth-funi-periflight-dies-from-gif-22212023

[gusty tiger]

yeah i sent an email but it says they will respond in working times. i really need to practice for my quiz on thursday :/

[mossy river]

Windows I'm assuming?

[warped hollow]

Yeah.

[rapid merlin]

What?

[fervent ruin]

I think using linux may be safer than windows bc hackers know that majority of people uses windows so they create windows virus , using linux , this virus will not work 🙂
(Maybe im very dumb saying this)

[blazing granite]

Doctor Livingstone I presume 😂

[keen light]

completely true

[mossy river]

I'm pretty sure to resolve this problem all you need to do is install the VMware tools disk from broadcom, insert it into the VMware folder, then add a CD/DVD sata, iso image and select the vmtools disk

However, I'd recommend clicking on the help document they linked first

[cosmic pendant]

You can also do it from packages eh?

[fervent ruin]

Why fl studio doesnt work on linux 😭

[warped hollow]

Alright, thanks!

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1593)

[rapid merlin]

Idk, I passed the charisma check

[keen light]

my charisma is to low i put all my points into luck

[mossy river]

Yes, you should be able to install open-vm-tools from the packages

[cosmic pendant]

IIRC This is the pefered method in most guests eh?

[blazing granite]

because you want to run a window soft into a Linux system 😂 if you want to run windows soft use windows. Sometimes windows soft doesn't even work in window so go figure when you try to run it some place else 😂

@cosmic pendant how are you?

[mossy river]

I wouldn't know to be honest 😄

[cosmic pendant]

I'm good, Hyd REx?

[blazing granite]

other than being stuck in Argentina I can't complain 😂

[cosmic pendant]

There are much worse places to be stuck eh ? 😄

How far are you from the beach?

[blazing granite]

about 400 km, but it's autumn here, so it wouldn't help even if I were living in front of the beach 😂

[blazing granite]

That's why I can't complain 😉 😂

[rapid merlin]

have a nice great day

[fervent ruin]

Oh thank you for that information sherlock

[twin ridge]

Gave +1 Rep to @blazing granite (current: #52 - 172)

[blazing granite]

You're welcome Watson. If you don't want and obvious answer, don't ask an obvious questions 😂 😛

[sand trench]

some windows software actually works better on linux in wine then on windows

[blissful current]

[lime belfry]

@umbral bay Can we have an archive for hackfinity writeups?

[keen light]

that moment when windows is so bad that even with wine translation layer linux is still faster

[mossy river]

Yes it's being archived :)

[lime belfry]

I can't found it if u can send the channel please do and thanks

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1594)

[mossy river]

It will be posted in #archives when it's done

[lime belfry]

ah okay thanks!

[blazing granite]

I've never got the idea of the wine soft, the only wine I like is the one on my glass 😂

[sand trench]

it stands for:
wine is not an emulator

[sick lance]

Having the X-Wing in Fortnite is fun.

[fervent ruin]

Not fl studio 😭

[keen light]

winae

[sand trench]

yeah weird that the an is not included D:

[blazing granite]

I know the project. we actually started with Linux in the same year 😂 I've never got the idea, to bring windows into Linux. I'm in Linux because I want to get away from windows 😂

[sand trench]

well shadow basically only uses it for bad services that don't offer linux support cough cough qobuz cough cough

[keen light]

i had to do it to play fallout 1,2

[gusty inlet]

https://tenor.com/view/penguin-hello-hi-cute-gif-13905880940590312511

[sand trench]

yeah games is an obvious thingy handled by wine and proton

[rapid merlin]

hi

[blazing granite]

Actually window like we know today didn't exist when I started to use Linux so it would be more accurate to say to get away from microsoft 😂

[blazing granite]

The close it was NT which I tried back in 1993 but still wasn't happy about it.

[neat scaffold]

how can i fix the blur in burp suite community edition

[fair linden]

https://tenor.com/view/jason-voorhees-discord-jason-lives-friday-the-13th-part-vi-part-6-gif-3121958170888035744

[keen light]

time to install a bunch of vms

[blazing granite]

have fun

qemu/kvm rules 🥳

[keen light]

kvm rules hyper-v drools

[whole yew]

It is not true. I have run desktop linux distros for 10+ years, and the only time I regret it is when I have to kick up a VM for a windows program that refuses to run in a sane OS.

[whole yew]

That's not a very good threat model. With a little bit of sanity in browsing and downloading habits, the likelihood of getting a non-targeted virus is extremely low regardless of your OS.

[blazing granite]

Actually is better in desktops than in laptops, most of the issues I ran with Linux were in laptops 😂

[whole yew]

To be fair, most of those are driver problems. Pick a Lenovo, HP, or Dell enterprise lappy and those problems go away (because they upstream the hardware specific drivers as they sell packaged Ubuntu or Fedora or Red Hat pre-installed)

[keen light]

linux has always just worked for me until i install it on a old imac

then i had to add some drivers myself.

[whole yew]

I remember all the problems with broadcom wifi chips back in the day, specifically

[keen light]

i hate broadcom

[blazing granite]

who doesn't? 😂

[rapid merlin]

that looks scary

lets try it

i WONT do any rooms if i dont finish this

[sand trench]

good luck

[rapid merlin]

thanks

[sand trench]

the main part to get in took shadow hours

[rapid merlin]

looks fun

😄

[warped hollow]

Yeah, but do you use it as your main os? and what distro is more stable.

[keen light]

reminds me of cave game

[sand trench]

total time spent to beat you're in a cave == 48 hours
spread out over 2 weeks

[rapid merlin]

which game is it?

https://minecraft-archive.fandom.com/wiki/Cave_Game

[rapid merlin]

☠️

[keen light]

an old text based game

[rapid merlin]

ah, im young for this

ok, thats really a cave

[rapid merlin]

ah, i see now it looks like RPG game

[blazing granite]

that looks like one of my first computers when I was a child 😂

[rapid merlin]

hello

[fervent ruin]

I think i mess up

Now i cant run windows

😭

[rapid merlin]

Oh no

I had a moment last night I thought I accidentally deleted windows trying to get a virtual machine

[blazing granite]

you won't miss much 😛 😂

[fervent ruin]

How do i manage disks on linux ? I dont care , im going to delete windows

[blazing granite]

do you mean raid?

[heady parrot]

is anyone specialized building android os?

i have few questions if u have time

if u are reading this later u can ping me if u can add me friends it will would be well appreciated

thank you

[fervent ruin]

I have installed windows on hdd , i want to delete everthing , use this hdd for linux

[sick lance]

Just ask on here.

Get an answer faster.

[flint egret]

REDUNDANT ARRAY OF I DEPENDANT DISKS

[whole yew]

yes. I use Debian and Fedora 42 daily on workstations and work laptops.

[flint egret]

Honestly, fire

[fervent ruin]

Now i cant delete this partitions bc says its busy

😤😤😤 hate this shit

[heady parrot]

Thank u scrubz

[fervent ruin]

I could just let things the way they were

[knotty pendant]

are all these premium rooms

[austere hazel]

most of them are !

[blazing granite]

if you want to install linux don't worry about the disk, partition is part of the instalation

[austere hazel]

but you need to have basic knowledge on that or else it will not work,

[mossy river]

They have Windows' efi on the drive they want to install Linux to, I said it would probably be best to move it onto the same drive that Windows is on before installing Linux because when installing Windows, it likely saw that EFI was already on the other drive and didn't install it again (just reused the same drive)

[crystal mauve]

[mossy river]

Those are modules, not rooms

[knotty pendant]

the rooms in them

[fervent ruin]

Now im facing another problem

[blazing granite]

you have a guide part, even some distros do it almost automatic

[fervent ruin]

My hdd is not showing on linux

[mossy river]

Which page is this on?

[fervent ruin]

I couldnt

[austere hazel]

may be you need to format the partation try that

[knotty pendant]

Jr Penetration Tester

[blazing granite]

but he didn't want windows anymore so there is no need 🙂 or maybe I read it wrong

[mossy river]

Earlier they were going for a dual boot

[austere hazel]

hey any suggestion to find my first bug !!

[rapid merlin]

update

[fervent ruin]

Yes but it didnt go well, so now im just using linux , F windows.

[rapid merlin]

i give up

[fervent ruin]

I can use my friend computer to use windows

[blazing granite]

yes, if you go for dual boot you just leave a junk of disk and tell linux to use that

[fervent ruin]

I think im just going to do all of this again, and format everything again and delete everything

[austere hazel]

after linux windows are like no never

[sick lance]

I think in this case the problem is with the user, not the OS.

[fervent ruin]

May be

[blazing granite]

https://tenor.com/view/skillissue-skill-issue-gif-22125481

[austere hazel]

but windows has lot of dependancies

[sick lance]

I wouldn't even say it was a skill issue.

[mossy river]

Intro - no, not all are
Burp Suite- Yes, all are premium
Network Sec- no not all are
Vuln research- no not all are
Metasploit- no not all are
Privesc- no not all are

If you click through the rooms, you'll be able to see which ones are and are not free
I'll pass on some feedback to our team to possibly make it a little more easy to tell the room type

[blazing granite]

I didn't want to say it was skill issues, but it was skill issues 😉 😂 😛

[blazing granite]

have fun 🙂

[fervent ruin]

U could just help instead of saying im having skill issues

[austere hazel]

jsut let us know where are u facing the issue

[autumn thunder]

hello everyone i would like some recommendations on books for bug bounty consider someone like me who has no deep knowledge on hacking, i manly want to focus bug bounty on web application. Although i did ask this question in bug bounty channel i would still like some more recommendations

[fervent ruin]

Its ok, i will just try to do it alone 🤷‍♂️ as i always do

[blazing granite]

that's what she said 😛 😂

[austere hazel]

or just watch couple of youtube videos first then it will be better

[austere hazel]

😉

[blazing granite]

or he can read actual documentation and maybe can learn something 😂

[fervent ruin]

I got many warnings for being like you @blazing granite , but for some reason staff doesnt tell u shit about your behavior

[austere hazel]

😂

[austere hazel]

jsut go on and fix the problem ................

[blazing granite]

nobody is like me. I'm unique 😂

[crystal moss]

Backup.. backup the backups .. Snaps , ThimeShit...

[blazing granite]

and then backup a bit more 😂

[crystal moss]

And when ever need, just restore from snap..:)

[blazing granite]

I use timeshift, clone disk with clonezilla, and the real important files I have it in an external sdd, usb and in 2 cloud services, call me paranoid 😂

[austere hazel]

😶

[crystal moss]

Love Timeshift , and rsync to my servers...

I remember when i was young and did like the guy ööi asnwsred, when things get broken i format c: reinstall what ever os . But you leran from mistakes.. Hopefully

[blazing granite]

it's easier to burn down everything and try to figure it out the error and the solution 😂

[crystal moss]

brake it, fix it use it.... Repeat:)

[sand trench]

harder better faster stronger

[blazing granite]

not the best or most productive, but easier, most people nowadays go for the easier one 😂

[pallid lotus]

Think about that one again 😆

[crystal moss]

100% i was thinking about post the video for it:)

[pallid lotus]

Also, yeah, considering you were asking for step by step instructions for a fairly basic administrative task, I would say that was a skill issue...

[sand trench]

technically brake it fix it would be closer to technologic

[pallid lotus]

This is why we use IaC 😁

[sand trench]

Buy it, use it, break it, fix it
Trash it, change it, mail – upgrade it
Charge it, point it, zoom it, press it
Snap it, work it, quick – erase it

[crystal moss]

If you brake it and fix it manny times after some time it dont brake so often:)

[pallid lotus]

It's "break" in this context.

[crystal moss]

Love DaftPunk

[blazing granite]

people here come thinking is their private tech support line. I will point you in the right direction, and help you but I'm not going to do the work for you 🙂

[pallid lotus]

Brake is what you stick on a moving object to slow it down

[pallid lotus]

This

[blazing granite]

That's how I learned 🙂

[pallid lotus]

As relevant in 2025 as it was in 2006:
https://slash7.com/2006/12/22/vampires/

[lone thistle]

hi muiri & co 👋

[pallid lotus]

Heya Ben 👋

[lone thistle]

big same

[lone thistle]

How's tricks fella? 😄

[pallid lotus]

Meh, I spent a lot of the last week upgrading a portable proxmox cluster

[lone thistle]

portable
proxmox

[pallid lotus]

I would now like to crawl into a 6ft hole and fill it in with dirt and flowers.

[pallid lotus]

Think LAN party CTF

[lone thistle]

woof

is it ... a thinkpad?

[sand trench]

shadow will never get to see daft punk live now that they disbanded

[crystal moss]

hehe, you're right, my English can be pretty bad sometimes.. but Chinese is worse 😄

[pallid lotus]

No... Worse...
4 HP ProDesk 400 G3 Mini usff boxes.

I have, uh, thrown as much hardware as I can at them

[lone thistle]

always wanted to see daft punk. They were the first CD album I ever brought with my pocket money from my parents.

I've seen deadmau5 live twice but not quite daft punk (as much as I love deadmau5)

[lone thistle]

LMFAO

you weren't joking when you said cluster

peak

times

[pallid lotus]

They're all now on i7-7700T processors. Cluster has a total 128Gb RAM (up to the maximum 32Gb each node will support), and collectively about 4Tb disk space.

[sand trench]

took forever for shadow to realise you can buy daft punks albums on qobuz D:

[pallid lotus]

I am hoping and praying this works

[lone thistle]

oh so about 4 AD networks

gotcha

[pallid lotus]

Man, the less Windows I can put in here the happier I will be

[crystal moss]

So sad....

[lone thistle]

^ +1

[austere hazel]

which is better having a mac or windows

[lone thistle]

+1 ^

[flint egret]

i love IPS

[pallid lotus]

Will be using LXC containers as far as possible lmfao

[lone thistle]

at what point do you just do a docker cluster bmt

[blazing granite]

at least mac works 😂 😛

[lone thistle]

hmu if you wanna try my docker implementation for CTFd so that teams deploy instances in their challenges and have a challenge per team/user in a team

[pallid lotus]

Don't tempt me

[austere hazel]

not in that way will will work smoothly ?

[lone thistle]

two docker clusters

[austere hazel]

😂

[lone thistle]

100 users ezpz

[pallid lotus]

Actually, that legitimately could be cool if you've got it handy?

[lone thistle]

not handy but I can find it

lemme get on my PC and hit you up

[pallid lotus]

Definitely gonna have a few docker challenges in there

[lone thistle]

admitteldy the security kinda sucks

the whole TLS verif for docker hosts doesn't really work

sorta does sorta doesn't

[pallid lotus]

Is that a docker problem or an implementation problem?

[lone thistle]

so you gotta do password auth to exposing docker API on the hosts

both

a docker problem but an implementation in the sense I was too lazy/time pressured to fix it properly

[pallid lotus]

I feel like a reverse proxy might help with that?

[lone thistle]

lemme grab the CTFd plugin code for you

[pallid lotus]

mTLS terminated at caddy or something

[lone thistle]

yesyes

still gotta expose the docker API

I mean

you can theoretically import TLS certs genned on the docker hosts if you can fix the code

but for LAN shit I didn't really care tbh

[pallid lotus]

But yeah, if this works the way I want it to, it should be pretty cool.

Doing isolated SDNs for each team, plus a shared subnet for any challenges that aren't affected by multiple attackers.

All handled with Terraform

[lone thistle]

sorry, forgot I couldn't swear let alone breathe here

[pallid lotus]

Neat little TF module to spin up network infrastructure for each team, plus Kali, plus dedicated challenges

Then expose it with Guacamole so the lazy gits don't even need to RDP

[silent pawn]

Yo how to recover old account

[pallid lotus]

https://tenor.com/view/thats-the-neat-part-you-dont-invincible-gif-27194608

Second time today I've had a chance to use that GIF.

[crystal moss]

so you have it.. ? sat down today and started setting up an isolated environment with Proxmox and then something lightweight like a server and focker continers that are started uniquely for a player or team only for that session over SSH.. haven't built my own CTF before but am working on a project with CTF/ARG ....

[lone thistle]

the TLDR is:

1. Have one or x number of docker hosts
2. Have the challenge images on the hosts
3. When a team registers, you can set an option in CTFd to set the challenge to be a docker image and it'll deploy a container based on that image across the hosts
4. You can choose if only the team gets one container per challenge, or if each user in the team can deploy the challenge
5. Manage within CTFd amin (which is quite flaky. It's more useful for mapping users/teams -> containers than actually managing. I'd recc managing the container on the host itself...but good for identifying who deployed what) the containers i.e. kill restart etc on the admin panel of CTFd

[pallid lotus]

Nice!

[flint egret]

this yap was very informative

[crystal moss]

I don't want yours, but was just wondering in general since I'm currently doing it myself... Nice coincidence that you brought that up..

[lone thistle]

built it like 2/3 years ago for running CTFs at various events that use CTFd as the framework/frontend

The TLDR of it is here #general message

Doesn't use SSH/Proxy or Promox, though I would like to extend it to using the Proxmox API in the future so you spin up actual VMs instead of containers. Basically just deploys a container on a host for the team/user on CTFd, giving them their own instance (like a web challenge) to hack with, so if they break it, doesn't break anyone elses

Pretty much a:

1. User/team deploys challenge
2. Spins up container on host
3. CTFd gives them a domain and a port within the challenge card/modal itself
4. Container is dedicated to them

[pallid lotus]

Roughly the same idea as my terraform implementation, but runtime rather than prep time

[boreal scarab]

@lone thistle GET BACK HERE!

[lone thistle]

maybe looking to OSS it but the code is ugly and janky af

would probably do when I can get it to plugin with Proxmox

but I am lazy so

would be cool to have the same as the above for CTFd but it spins up a VM for the team etc

[pallid lotus]

Heh, dare you to integrate with AWS and GCP as well

[lone thistle]

ironically easier

I just don't want to pay for it

I think for about a 150 person CTF event

two docker hosts on 8gb & 4cpu done the trick

cheap as chips really

[pallid lotus]

Tbh, it shouldn't be too hard to abstract it up into a plugin system for the plugin, right? Like, plugin expects set API endpoints for the provider, satisfy those and it slots right in

[pallid lotus]

Tell me about it. Proxmox API is a pest.

[lone thistle]

Yeah I mean, at the end of the day, you just provide some info here to CTFd to display

what the info is is kinda up to you

if it's an IP of an EC2

A domain with a port etc

up to you and budget

I just did not feel like paying for 400+ instances on AWS when x2 2vcpu & 8gb hosts done the trick (where split between them was 200 containers at peak)

[pallid lotus]

Actually, I revise that statement.
Proxmox is a pest.
We love it anyway though.

[lone thistle]

plus docker innit

spin it up quick af do w/e you like

[pallid lotus]

Mr Docker King

[lone thistle]

spinning up vms and ec2 is a arse

[lone thistle]

oh I love proxmox

even moved from esxi to it

[pallid lotus]

Same

[lone thistle]

I love but also hate doing anything programmatically

[pallid lotus]

It's still a pest

[lone thistle]

the UI is also kinda stupid but hey ho

I love proxmox

[pallid lotus]

It's like the equivalent of Windows and Linux

[lone thistle]

the console access sucks ass gravy no matter what you choose

oh yeah put SPICE on a VM

install 40 libraries to support it

[pallid lotus]

Proxmox is to ESXi what Linux is to Windows.
Free. Equally powerful. But an absolute fucking nightmare.

[lone thistle]

still as slow and featureless as the novnc console VNC

oh yeah download the .pve file

fk off

just throw a VPN on the network and SSH/RDP directly into whatever you need

[pallid lotus]

I just enable RDP / SSH and be done with it

Yeah lmao

[lone thistle]

100000000000% sanity plus

[pallid lotus]

Guacamole is a lifesaver for that as well

[lone thistle]

aight food time

[pallid lotus]

Ditto

[lone thistle]

then I find the code for the CTFd tingy

[lone thistle]

fuckin love guac

[formal rampart]

GUYS WHO TOOK THE SAL1 EXAM CAN I USE OUTSOURCE HELP?

[pallid lotus]

Right? That's another piece of software which is a pain in the arse but so so powerful

[formal rampart]

like AI aiding me in report writing or no?

[pallid lotus]

SSO is a nightmare with it.

[lone thistle]

don't get me started on Guacamole

[pallid lotus]

I mean, if they're using AI to mark it 🤷‍♂️

[lone thistle]

it's like a stockhome syndrome thing

[pallid lotus]

Right?

[formal rampart]

Yes or no bro xd

[pallid lotus]

I spent hours trying to get it working consistently with Keycloak a while back

[lone thistle]

oh keycloack

yiiiiiikes

[blazing granite]

I've never tried to rdp/ssh guacamole 😂 😛

[pallid lotus]

Ended up with the most disgusting workaround imaginable. From memory it involved openldap and user federation.

[crystal moss]

I get it.. What I'm doing is for fun and to learn... A VM for each instance is perfect, but not what I need.. What I'm mostly concerned about is that certain things happen via SSH and then with the help of a unique docker for each service and then the environment itself, when the session is over it's gone, and a protection for the other VMs in the cluster, but of course with different jail/container break out protections etc..

[lone thistle]

Dont use anything LDAP for guac if you can really really really avoid it

[pallid lotus]

Now you tell me

[lone thistle]

I mean it fucking sucks in my experience

no no

[pallid lotus]

But yeah, from memory that worked... just

[pallid lotus]

Oh, it does.

[lone thistle]

bun the direct LDAP to Guac directly

converting the attributes and bollocks

[pallid lotus]

My memory is that it worked marginally better than trying to do it with OIDC claims

[lone thistle]

oh bestie

[pallid lotus]

Although come to think of it, that might not have worked at all lmfao

[lone thistle]

okay food

brb 20 mins

got a sweet one

£37.58 which is a few meals for the next few days for 12.43. Rider codes go crazy

pucka

[sick lance]

Cc @shell nova you need to find a vulnerable keycloak

[gusty inlet]

What vendor is this from?

[formal rampart]

???

[lone thistle]

Deliveroo in the UK as a rider

[gusty inlet]

Oh as a rider, gotcha.

I should try Deliveroo sometime. I usually only use Uber Eats.

[lone thistle]

in my experience as a rider/delivery for both as well as a consumer after, it really depends on area. Might have better offer/availabililitry for either of the areas. The one plus Uber has is that a lot of Uber drivers are also Uber Eat drivers, which expands the pool a lot

[gusty inlet]

Your best shot for an answer is to email them. They reply pretty swiftly.
[e-mail]

[lone thistle]

external help is considered cheating 🙂

[formal rampart]

aight ima consider this but i just wanted a faster answer

[formal rampart]

damnn

[lone thistle]

Deliveroo riders aren't also taxi drivers unlike Uber drivers (for the most part, as uber eats usually integrate into the "uber" ecosystem), so usually a less "availability" on that front, but they counterract that with good deals. Just depends on the area/resturants etc. Deliveroo has been super expensive in areas I've lived whereas Uber Eats / Just Eat hasn't, all of the previous is vice versa. Had areas where Uber Eats was much cheaper

[gusty inlet]

Hmmm I don't know if Just Eat exists in France.

[blazing granite]

and that's was our today's delivery tip 😂

[formal rampart]

but the exam is openbook btw

what i heard u know

[mossy river]

open book doesn't mean asking other people for the answers 😄

[formal rampart]

no no i didnt mean in that way hahah

[blazing granite]

If I know somebody call book can I ask him? 😂

[formal rampart]

i meant in organizing my report

[mossy river]

It doesn't say "call book" does it? 😁

[crystal moss]

@lone thistle
I'm thinking a little about the fact that out of nowhere I'm sitting here thinking about and currently setting up my own first ARG / CTF and have barely mentioned it to anyone and almost at the same time I'm thinking about the best solution for setting up my VMs with docker and more or less the same setup you wrote about, I look into discord for a little break and see your post.. I mean, sick coincidence ... Or.. I believe that the universe and quantum are connected to consciousness.. If that's not it, I got my money's worth when I joined "TryHackMe" and now I've been hacked by you so you see what I'm doing and my notes..:P (well, of course you haven't. Or...?:D )

[knotty pendant]

Is there a thm about page

[rapid merlin]

I’m so bored tonight

[gusty inlet]

https://tryhackme.com/about

[woeful cedar]

Do you guys ever need specialized code editors while using Kali Linux or Parrot?

[shell nova]

I should probably update that thing

[autumn thunder]

hey guys uh do you have any recommendation for bug bounty books for some one like me who have hardly any knowledge on hacking

[sick lance]

You should learn fundamentals and stuff first

Don't expect to find a bug and get rich quick.

[rapid merlin]

Aren’t most under 200

[autumn thunder]

i know but i would like to know some books to read

[boreal scarab]

https://tenor.com/view/berm-ron-ready-or-not-swat-explosion-gif-8532084739413819645

I just did a @lone thistle

[autumn thunder]

yeah i do want to learn fundamentals and all the basic stuff before going to tougher part of bug bounty but for a newbie like me i want books to start somewhere atleast im not asking for me to give some high level books and expecting that i would become a expert a bug bounty i want to start somewhere

[upper knoll]

First thing about this field you will need to learn is how to do your own research and to become as self sufficient when it comes to your education as possible people aren’t going to be able to do it for you.

[upper knoll]

An easy resource you can start with is thm itself #start-here

Will guide you through basics it’s not books but will help you grow

[autumn thunder]

i did try some of the labs which were free but i want something little bit more in dept or bit easier to understand and the most labs that i did want to study or explore where premium so i can't go through the ones i wan the most

[upper knoll]

Personally I choice thm as an investment over books because the information is already there

There is also huge live hacking tutorials, videos on basics on YouTube. As I said the best skill you’ll learn is how to find these resources yourself

[autumn thunder]

i see

[knotty pendant]

i found 1gb of cyber security books

full books too

who want them

[sturdy river]

i mean sure why not

[knotty pendant]

lemme make a media fire

[blazing loom]

😂

[sturdy river]

ayt

[sturdy river]

lololl

[blazing loom]

I am thinking about putting Debian on bare metal since my laptop processor doesn’t qualify for windows 11, and windows 10 support ends in October. Any thoughts?

[static acorn]

i use kali on bare metal along side windows. its a good way to learn. ill tell you that

[knotty pendant]

10 mins until upload is done

[sturdy river]

alrighty

[blazing loom]

Thanks for sharing

[twin ridge]

Gave +1 Rep to @static acorn (current: #600 - 10)

[blazing loom]

What does 🗡️ CYBR mean?

[sturdy river]

ah

its icon from being in a server

[blazing loom]

Ty

[static acorn]

i think the best part of installing it on metal is it forces you to fix a majority of your problems on Linux rather than just installing a new vm. sometimes its take minutes. sometimes it takes hours or days. but it really helps you grasp the components of the os and what everything is responsible for which is worth its weight in gold

[sturdy river]

honestly that sounds scary to someone new like me

[static acorn]

learning can be scary. but.. you'll get better

[sturdy river]

dats true

[rapid merlin]

does anyone know how to become a intermediate or advanced user for KOTH

[static acorn]

change it in the settings of your account

where it asks for your skill level

i had the same problem

[rapid merlin]

thankyou

[flint egret]

CYBR

[static acorn]

ofc

[autumn thunder]

i do

[simple epoch]

is this hard ?

for a beginner

[rapid merlin]

it says easy so i would do it and see lol

[sturdy river]

ehh just try and poke around

[bleak quartz]

Just use
https://easyupload.io

[knotty pendant]

thanks

[twin ridge]

Gave +1 Rep to @bleak quartz (current: #514 - 12)

[bleak quartz]

Np :)

[bleak quartz]

Do not trust THM in that shi

60mins estimated time -> 3-4hours

[rapid merlin]

yea true xd

[bleak quartz]

Also I want the books too!!

[sand trench]

naah an hour is exactly 300 mins

[bleak quartz]

So once it's done lmk

[bleak quartz]

Real thm logic right here, you must be a room developer

[autumn thunder]

me too i also wants those books

[sand trench]

yes and also a room tester

https://musicbrainz.org/release/27ff3d52-ec51-41f5-a0f2-dbb25fc3a68e

this album is a banger

[knotty pendant]

@bleak quartz @sturdy river @autumn thunder https://easyupload.io/girg1j

[sturdy river]

thank youu 🫶 🫶

[twin ridge]

Gave +1 Rep to @knotty pendant (current: #700 - 8)

[knotty pendant]

yw

[woeful rock]

😄

Happy Saturday

[whole yew]

throw it into a large peilcan case and include a router - ez pz!

[autumn thunder]

thx you 👑

[twin ridge]

Gave +1 Rep to @knotty pendant (current: #645 - 9)

[vestal bone]

https://tenor.com/view/cat-chat-cat-fall-hello-chat-cat-gif-24961178

[keen light]

:/

[cunning zenith]

yeah for me it shows up as private;-; but sounds interesting!

[modern fox]

arrives

[chilly veldt]

it's easy

[blissful pulsar]

Copying me 🤨

[vestal bone]

Yes

[vestal bone]

https://tenor.com/view/goodbye-chat-gif-22150141

[pallid lotus]

Unironically I am actually carting it in with a single backpack.
4 Proxmox Nodes, 2 switches, a wireless access point, and a huge number of cables

[blissful pulsar]

Lmaoooo

[patent falcon]

Hello evil people, i have a C program and i want to analyse with objdump. My computer is 64, but to facilitate things i compiled the program with gcc -m32 program.c, so my question is compiling him to an elf 32 bit simplify the analysis when decompiling with objdump?

[vestal bone]

Eeeeerm

[sand trench]

meep meep moop sleepity sloopity sleep sloop to the beep boop

[upper knoll]

firstly we arent evil xd. secondly what is this for?

[patent falcon]

why do you need to know the motive

i'm reading the book art of exploitation

hacking the art of exploitation i'm in the part thats we are using a legacy version of ubuntu that dont have the atual memory defenses, and trying to reverse engineer compiled elf 32 bit programs to corrupt memory

the part of the exploitation needs to be inside the vm

cuz in today computers we have a ton of memory protections

[mossy river]

Yes

[patent falcon]

thank you

finnally

but when i'm only analyzing the binary in my principial machine that is 64, if i choose the flag in gcc to compile to 32bit the output of objdump will be the same as if i compiled the program inside de 32 vm?

[echo sentinel]

If I might ask - how would it simplify it? Wouldn't compiling it to 32bit elf just change regiters to 32bit or do I miss something here?

[patent falcon]

i think maybe in the objdump in the 32 file will be easir to analyze?

[mossy river]

Yes

[bleak quartz]

I'm obv not Jabba but it's due to simpler instruction set, since x86 has fewer registers and simpler instructions than x64 it makes it easier to read at least

[mossy river]

Smaller registers, different instructions, different protections

[cunning zenith]

i swear one day ill be able to participate in convos like these and know wtf is going on 😂

[upper knoll]

reverse engineering

simply put

[bleak quartz]

One day I will be able to type a whole sentence without typos. One day...

[cunning zenith]

thank you 😂, ngl i was dying with curiousity on what the underlying principle here was

[echo sentinel]

Would different protections be something like larger ASLR range and Stack Canaries?

[cunning zenith]

nah man, if youre anywhere near gen z, we had a virus installed in us at birth to prevent proper grammar 😂

gen alpha tho ooof

they got it much worse 😂

[bleak quartz]

Yeah it would, cuz protections like that act differently

which affects both exploitability and reverse engineering

[mossy river]

Correct,

[echo sentinel]

Okay, thanks a lot

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1595)

[bleak quartz]

True

lmao

[patent falcon]

very thanks to you mr Jabba evil man

[twin ridge]

Gave +1 Rep to @mossy river (current: #6 - 1596)

[patent falcon]

maybe god forbidds your sins

[static acorn]

Ahoy everyone! hope everyone day is gooood!

[blazing granite]

maybe if you learn how to spell 😂 😛

[patent falcon]

dont respect english

only respect code

AHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUAHUAHUHAUv

[blazing granite]

English has its own code, it's call grammar 😂

[patent falcon]

if the machine dont understand so do i