general

[blissful current]

ello to u too , Bella

(i had not noticed u were online too lol)

[knotty valve]

Ohhhh nice, those are pretty fun

I find them a lot easier tbh

I've never done them officially but I have gotten into places just by dressing nicely and they think I work there 🤣

Namely the law firm my friend works at

[round onyx]

that trick always work

[chilly veldt]

Yello

[knotty valve]

Dress the part, chat up one of the employees that are on break, walk in with them, access gained

[round onyx]

also the highvis vest, hardhat and clipboard route

[knotty valve]

Also make sure to ask subtle questions and get them naturally give you details you shouldn't know, and be good at lying so you can make them feel more comfortable in thinking you're legit

How I get info that I circle back to higher chains lmao, then wonder why we always have OPSEC meetings

One such example is finding out where specific offices are by talking to certain engagement teams

[knotty valve]

A lot harder to pull off

[round onyx]

in a cybersec setting for sure

[knotty valve]

Usually staff will know if something is going on construction or repair wise

[round onyx]

yeah its kinda situational

if you know there already a renovation going on or they needing extra hands to setup some stuff why not take advantage of that?

[chilly veldt]

Due to being so young still, I pulled the "new person just started and forgot my id" play

[knotty valve]

I've gotten into areas in uni by convincing the security staff that I was helping a lecturer

[jade oar]

just slept 14 hours

[knotty valve]

I've gone other routes but I can't disclose those ones cause of rules

[knotty valve]

This works in two cases: being young, or being in your late 40s

Also knowing how to act stressed helps a lot

[chilly veldt]

Yuuuup

[round onyx]

christ what did you do yesterday?

[jade oar]

i just slept i had people calling me 200 times i was out

[jade oar]

what you guys talking about being sneaky

[round onyx]

physical pentesting

[knotty valve]

^

[jade oar]

what does that mean

let me search it up

[knotty valve]

Physically getting into a facility you're not meant to and reporting it

[jade oar]

so good sneaky in simple words type shit

[knotty valve]

Yep

How good are you at lying

[rapid merlin]

Hey guys, how can I add my tryhackme level here

[jade oar]

i forgot smth in thm its a soulution when there is alot of traffic i forgot what u do

[sharp citrus]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

May 22, 2025, 6:04 AM

[jade oar]

i will give my self a 8.5

or 7.5

[blissful current]

[chilly veldt]

One of the things that's good about a traumatic childhood

[knotty valve]

Fr

[rapid merlin]

Thanks Ash

[twin ridge]

Gave +1 Rep to @sharp citrus (current: #61 - 144)

[round onyx]

i could generally get people off of my ass if they want something so 6/10

[jade oar]

childhood was fun get ur ass beat and many shit in my opinion

[knotty valve]

Also taking a mandatory course in interrogation techniques

[jade oar]

added to the list see you tutut

[knotty valve]

It was a requirement from my time in RAN

[jade oar]

thats madnness i mean i cant hate i love you got these skills

[knotty valve]

It's a requirement for most defence workers here tbh

Taught in the hopes of you never need to be in that situation

[chilly veldt]

Time to ask my teacher if I can take the exam faster than normal

[knotty valve]

Lol

[knotty valve]

Want a little Osint challenge?

[chilly veldt]

In a bit sure

[knotty valve]

Ez, I'll open my DMs lmk when you're ready

[chilly veldt]

I would rather go back to working 1 week earlier than to do nothing but wait for an exam

[chilly veldt]

Give me like 10-20 minutes

[round onyx]

sending another person into a goosechase are we?

[knotty valve]

Should be easier than prior ones I've done

[safe oxide]

[round onyx]

anyway i gonna see what type of documents i could get my paws on in the open web :v

[slow cloud]

mornin'

[sonic blade]

mornin friend

[round onyx]

https://media.discordapp.net/stickers/1069407317541539840.png?size=160&name=やっほー

[sonic blade]

https://files.decomp.dev/IBM_PPC_Compiler_Writer's_Guide-cwg.pdf

[slow cloud]

🤔

[sonic blade]

Theres a fun document to get your hands on

[slow cloud]

So fun

A document from a person who just joined

Im not clicking that

[rapid merlin]

Security 101

[sonic blade]

Yeah that TLD is super scary

[chilly veldt]

You can just dm me, I am having to drive again now, cause I'm going home, caught some sickness

[knotty valve]

Easy, sending now

[slow cloud]

You never know

[heavy kindle]

hello, is there a package to install on kali on a raspberry pi 3b+?

[slow cloud]

https://www.kali.org/docs/arm/raspberry-pi-3/ have u checked this?

[heavy kindle]

for arm64

i need istall discord package srry

[slow cloud]

Oh

Why not use the webapp?

Might be easier

[versed veldt]

I need some assistance with linux kernal issues, if anyone has knowledge

[heavy kindle]

i need something run fast, like a command line version of discord

is this available?

a text-only discord version exists?

[sonic blade]

I guess if you don't understand trust chains. Doesnt matter. Its just a Power PC compiler guide, something I thought was interesting. It isnt relevant as of like 2005

[knotty valve]

Nope

[versed veldt]

Not technically, although, some discord servers do offer what you want. Some are linked with IRC which is command line chat only

[heavy kindle]

wt about 6cord

[sonic blade]

You can interact with the Discord API to do certain things, but you didn't explain the use case so its kind of hard to say

[knotty valve]

Using unofficial clients breaks tos

Since they don't permit you to touch user accounts

[sonic blade]

I didn't suggest anything of the sort.

[chilly veldt]

Yeah, it's called IRC

[sick lance]

Or modify the client.

[knotty valve]

Yah

I actually have that section stickied on my keyboard

You may not copy, modify, create derivative works based upon, distribute, sell, lease, or sublicense any of our software or services. You also may not reverse engineer or decompile our software or services, attempt to do so, or assist anyone in doing so, unless you have our written consent or applicable law permits it.

[heavy kindle]

can you view discord servers on irc?

[versed veldt]

Upon installation of a Linux distro, I keep getting a "killed/killing" from signal 9. Is this a memory issue?

[sonic blade]

Interacting with the Discord API is not modifying clients or touching user accounts.

[sick lance]

Nobody said it was.

[chilly veldt]

No

[knotty valve]

Interacting with user-only endpoints is indeed touching user accounts

Discord only permits you to utilise bot endpoints which are specific to registered applications

[heavy kindle]

i need client to view this conversation, so IRC no good then

[knotty valve]

Which is all described in the Discord Developer ToS

[sonic blade]

My goodness. Please just read the readily available documentation.

https://discord.com/developers/docs/intro

[knotty valve]

I've worked with discords API for years

I know what a userbot is, and what they do and don't permit

[sonic blade]

No one said anything about a userbot; or at least I didnt.

[versed veldt]

Is anyone able to assist me with my kernal issues? If not I'll work it out

[sick lance]

What is your issue exactly?

[knotty valve]

If you think you're right, why don't you go ask support (https://dis.gd/contact) and argue with them about their ToS 🩶

[versed veldt]

Keep getting kill signaling from the kernal during initial install from a "signal 9"

[sick lance]

Have you checked to make sure your installer isn't broken?

[sonic blade]

I'm sorry but I didn't even make a claim to be right or wrong about. Apologies if I offended you but I don't really understand what you think I said.

[versed veldt]

No, I got the distro directly from it's source page. Issue may lie in the fact I'm emulating. Probably not cpu related (Pentium 2) maybe a hard drive or host machine memory issue??

[sick lance]

Just because you it from then source, doesn't mean it didn't corrupt during download

[sick lance]

Which os is it?

[versed veldt]

true, I'll check again

[chilly veldt]

You cannot personally see this channel on a terminal based client without the server itself having a bit that ports the conversation to IRC, otherwise everything else would be termed as self botting

[versed veldt]

Core distro 19MB no gui variant of Tiny Core)

keep getting things like this: udevd [100]: /sbin/modprobe bu acpi: LNXSYSTM: [101] terminated by signal 9 (KI Iled)

[heavy kindle]

thats bad, that follows my opinion that today everything in it gets so advanced that u cant use it anymore lol

suddenly an error

after half hour of compiling .. there is an error

[chilly veldt]

Please do not talk about breaking ToS here, it'll get the server banned

[sonic blade]

try turning off acpi

some virtualized linux drivers dont treat acpi properly. if you turn it off in kernal boot params youll likely avoid the sig term

[versed veldt]

Could you dm me details?

[sonic blade]

No. I gave you enough to go on.

Consider it research :]

[versed veldt]

Fair enough

[sonic blade]

Here I will give you a hint: acpi - Shows battery status and other ACPI information. In a virtualized environment these parameters might not report properly during install and cause a sigterm because the installer isnt getting data from a true sensor

If you configure your virtualized boot config to ignore or disable acpi you wont hit the sigterm

[versed veldt]

appreciate your time, I'm emulating on an Android. I'll try doing your suggestions

[sonic blade]

Good luck, fam

[sinful bobcat]

[safe oxide]

Hallo kid

[atomic veldt]

hello

[granite wind]

anyone that's doing the pen testing/red teaming path. When did you start with the CTFs?

I recently got up to the junior pen tester path, should i finish the path then go ahead with doing the CTF rooms?

[safe oxide]

Hallo

[blissful current]

Just start ...don't wait for paths

F Around , Learn n Find Out

[atomic veldt]

i am beginner to and i facing some problems

[blissful current]

What's the issue

[sonic blade]

Follow the path, If you jump ahead into the CTF rooms you will likely not have the prerequisite knowledge to solve on your own, meaning you will end up looking up the answer.

[slow cloud]

do ctfs

just start with em

[atomic veldt]

i was practicing df -h, mount, umount, lsblk. but not able understand and i am worried if i did mistake i can harm my files

[slow cloud]

see what you dont know and then you can improve like karma said

[atomic veldt]

so i was thinking practice online but not found any site to practice

[slow cloud]

Are you familiar with virtual machines?

[atomic veldt]

can give me some suggestion and tips

[blissful current]

Looking out for tools , specific CVEs , solutions to a problem is a part of learn ...ITS ALL SEARCH SKILLS

Just don't directly copy paste the flags
And do make notes if u learn something new to remember for next time

[atomic veldt]

yes but my laptop is not that condition to use vm in my laptop.

[slow cloud]

ahh

full disclosure ive never used this
https://labex.io/tutorials/linux-online-linux-playground-372915

[blissful current]

Never try what you don't know what the thing can do directly on Host machine tho 😬

Try to look for online virtual labs

[granite wind]

yea i think that might be the play, sometimes i give in and look up a walkthrough but i just wanna avoid doing that....

[atomic veldt]

Thanks!

[twin ridge]

Gave +1 Rep to @slow cloud (current: #107 - 76)

[heavy kindle]

are virtual machines only used for using linux commands on a system?

[granite wind]

depends on what kind of virtual machine you have

[rose solar]

No they can be used in everyday life and also to execute suspicious files without fear

[heavy kindle]

so they kind of encapsulated and isolated arent they

[slow cloud]

You can see a virtual machine as a completely seperate machine, lets say you want to run some software which you unsure are of how legit it is, you could create an vm without internet, shared folders etc and test the program, you can run linux, windows, mac(but its difficult iirc). You can also use for getting more familiar with different OSses such as linux. if you break something you can just revert to a snapshot or create a whole new machine

[rose solar]

Yes but I had heard about that some viruses can pass on the network after I don't know if it's true but always have to be careful

[slow cloud]

certain malware can escape sandbox enviroments ive heard

[atomic veldt]

great

[heavy kindle]

so they are useless kind of

[crystal moss]

Morning! How are. We today?

[slow cloud]

They are super useful

[atomic veldt]

but my laptop will not support

[slow cloud]

i linked a site earlier did you check that?

[atomic veldt]

yes

[slow cloud]

did that work for you?

[rose solar]

Good and you

[atomic veldt]

yes but i am stuck here

lsblk -f
NAME FSTYPE FSVER LABEL UUID FSAVAIL FSUSE% MOUNTPOINTS
nvme0n1
└─nvme0n1p1
nvme1n1 82.8G 17% /etc/hosts
/etc/hostname
/etc/resolv.conf

[blissful current]

laptop specs?

[atomic veldt]

sudo mkfs.ext4 /dev/nvme0n1p1
mke2fs 1.46.5 (30-Dec-2021)
The file /dev/nvme0n1p1 does not exist and no size was specified.

what i did wrong here?

[crystal moss]

good! yeah, it's okay with me, but it's one of those days when I'm completely exhausted for no reason.. it'll get better, let's hope..

[slow cloud]

i dont know if that site will allow you to edit the filesystems of the machines

[rose solar]

Yes sometimes there are ups and downs but it passes 🙂

[atomic veldt]

yes. this is a problem.

[crystal moss]

Yes.. .. what you up to?

[atomic veldt]

that's why i was not able to full fledged practice

[slow cloud]

If you have a usb stick you could install some linux distro on there

but youll still need to be carefull

[rose solar]

A little nothing😅

[slow cloud]

morning btw Jull3

[crystal moss]

Sounds like hard work:)

[crystal moss]

Morning, how are you today?

[rose solar]

😂yes

[slow cloud]

Pretty goooood, forcing myself to work tho

otherwise nothing will happen today

[crystal moss]

Ah.. good, you push yourself:)

[atomic veldt]

OS: Ubuntu 24.04.2 LTS x86_64
Kernel: 6.11.0-26-generic
Packages: 2492 (dpkg), 22 (snap)
Shell: bash 5.2.21
Resolution: 1920x1080
DE: GNOME 46.0
Terminal: terminator
CPU: AMD Ryzen 3 3200U with Radeon Vega Mobile Gfx (4) @ 2.600GHz
GPU: AMD ATI Radeon Vega Series / Radeon Vega Mobile Series
Memory: 7042MiB / 9857MiB

[heavy kindle]

h

[slow cloud]

yeah the cpu is a bit weak but it might support a small vm, i dont know if your machine supports virtualization

[atomic veldt]

i will buy a new pc but that's need some time maybe 1 or 2 month

[crystal moss]

I'm just going to a small meeting, then I'll go home and try to get something done even though my head is like syrup...

[light shuttle]

I wanna know about bug bounty program , and what is the common vuln in low and medium ,pentesters found?

[atomic veldt]

for low spec pc i skip homelab, vm topic from my learning path

can you suggest me what topic i can learn before buying new pc?

[proven ivy]

thanks for the info

[twin ridge]

Gave +1 Rep to @mellow narwhal (current: #156 - 56)

[proven ivy]

lol

[slow cloud]

yeah now it might a bit harder

[slow cloud]

Depends, do you have knowlegde of the basics like networking etc?

[atomic veldt]

no

[blissful current]

Have u tried using VBox? How was the performance on it ?

[slow cloud]

then i would start with something like networking maybe

[blissful current]

Or maybe try KVM+Qemu?

[slow cloud]

cpu supports virtualisation

[atomic veldt]

no 😅

[slow cloud]

should you could install it and just see

You might have to enable it in your bios tho

[atomic veldt]

ok i will try.

[muted bough]

I had a problem here and kept stuck for a while when I was 100% sure my answers r correct then I refreshed and submit same answers and got the flag what was the problem tho

[atomic veldt]

which one i should try? KVM+Qemu?

[muted bough]

Real machine >>

[slow cloud]

ive heard qemu is nice on linux but havent personally used it

[slow cloud]

depends on what you wanna do

[muted bough]

Wireless attacks r most fun

[slow cloud]

🔵 team is most fun

[muted bough]

Sad...

[slow cloud]

depends on what you enjoy doing tho

red teaming has some fun things

[muted bough]

I see my self red teaming is more fun

[atomic veldt]

thanks @slow cloud @blissful current

[twin ridge]

Gave +1 Rep to @slow cloud (current: #105 - 77)

[slow cloud]

+rep @blissful current

[twin ridge]

Gave +1 Rep to @blissful current (current: #202 - 42)

[wraith tusk]

wssup chat

[slow cloud]

wassup

[muted bough]

+rep @slow cloud

[twin ridge]

Gave +1 Rep to @slow cloud (current: #103 - 78)

[slow cloud]

[blissful current]

+rep @slow cloud

[twin ridge]

Gave +1 Rep to @slow cloud (current: #99 - 79)

[muted bough]

Alr guys gtg continue my beginning learning journey cya

[slow cloud]

Goodluck!!

[muted bough]

+rep @blissful current

[wraith tusk]

GL

[blissful current]

Study well!

[muted bough]

Thx @wraith tusk @blissful current

[rapid merlin]

Hello

[slow cloud]

[rapid merlin]

Hey karma, hey Arch bot

[blissful current]

Hey

[slow cloud]

hi

[rapid merlin]

How u guys doin

[blissful current]

Fine

Wby?

[rapid merlin]

at clients data center

Nd TL Fucked up

[blissful current]

What happened?

[wet holly]

Need help guys

[blissful current]

?

[wet holly]

How can i create pdf payload for android using kali linux (installed on my phone)

[blissful current]

I don't know if I should answer it , since it's illegal and I don't know ur purpose

[wet holly]

Bhai trust me, just learning due to interest not for an evil mindset and all.

Struggling since 3-4 days for same, hope you understand

[storm storm]

Debian No Root

use that

You can google it and it will show you how to download it

[wet holly]

But can't i use kali?

[blissful current]

I don't mind but it's the rules of this server

[wet holly]

So can you tell privately?

[blissful current]

Probably No

Search online yourself is what I can say ...coz I'm not too sure either ..not into Android based hacking

[wet holly]

Fine bhai, thanks

[storm storm]

https://www.geeksforgeeks.org/how-to-install-kali-linux-in-android-without-root

Please refer to it

[wet holly]

Bro ive already install kali

On phone

(Rooted)

[chilly veldt]

well to help you more correctly, what do you need the pdf for?

[storm storm]

So what is your problem now?

[wet holly]

I want to create a pdf format payload using only kali, for android remote acess

[sick lance]

For what purpose?

[wet holly]

And i just have a phone

[modern thistle]

Bro why u been weird

[wet holly]

Its fun for me to learn these, not for anything illegal

[chilly veldt]

well you can't really do it

[sick lance]

That just screams I'm planning on doing something unethical/illegal

[wet holly]

No bro, how would i prove you

[storm storm]

Linux once learned and mastered will be a very powerful tool for attacking or doing something illegal

[sick lance]

...You can't?

[sick lance]

Literally any tool in this field can be used for unethical/illegal activity.

[chilly veldt]

hmmmm, instant noodles or ordering from out?

[deep geyser]

what type of noodles

?

[wet holly]

@chilly veldt btw why this isnt possible?

[chilly veldt]

chicken with chicken strips

[chilly veldt]

cause you can't do a remote access on a phone through metasploit using a pdf payloader

[rapid merlin]

He brought copy of higher version of database and they aren't compatible with older one

[storm storm]

I see that anyone who is good at hacking can hack a system or steal data illegally without using linux with just a few lines of code

[wet holly]

@chilly veldt so is there any effective way(without asking victim for permission)to do remote acc from my device

[chilly veldt]

no

[sick lance]

Now that would be illegal.

[deep geyser]

to much but so how to little at the same time... so many questions... but this does make thing about marinating some chicken and using it for instant ramen that sound good lol

so ramen

[sick lance]

It's outdated and been long since patched.

[blissful current]

pdf payload for learning purpose is SUS

[wet holly]

😅

But im just a random child

[chilly veldt]

I mean, then they would have to use android 10 or something

[wet holly]

Thats fine

[chilly veldt]

which is 4 major updates away

and many doesn't use

[sick lance]

6% in 2025.

[deep geyser]

just gonna keep that one for l8r actually

[wet holly]

Thats illegal but i wont do without permission becouse how would i learn hacking then, i just have this way, this device

[chilly veldt]

yeah, that 6% is most likely some android based systems and not personal phones like POS systems or something else 😄

[sick lance]

https://composables.com/android-distribution-chart

[sick lance]

We won't support your questions if they're illegal, and you have illegal intentions you're just hiding them.

We won't be assisting you.

[chilly veldt]

yeeee, I usually do min android 10 when I make apps

[storm storm]

Hacking is very difficult and not easy, but once you learn or explore it yourself, it becomes scary

[wet holly]

@sick lance No sir just a 12 grade child(not like deathnote's protagonist😅)

[sick lance]

So you're now old exactly?

[wet holly]

17.5

Can i use eaglespy or crax type tools on kali(anyone halp please)

[hearty otter]

Penguin gatekeeping the pipeline

[storm storm]

No, we are afraid you will use it for illegal purposes

[wet holly]

Im not light yagami bro, i just having urge to learn it please help

[queen flare]

if you really care about learning, start with the basics
the way you're asking this makes me think you're trying to run before learning how to walk

even if you don't have illegal intentions, which i am doubtful about

[storm storm]

Just learn about networking and slowly you will have knowledge about linux

[hearty otter]

Who's linux

[queen flare]

its an operating system

[wet holly]

Why is everyone doubtful for me here😥, btw (you are right scorpious but how can i control urge to learn it then?)

[queen flare]

well it isn't our problem if you're not willing to put in the effort to learn something

[hearty otter]

It's not an OS

[queen flare]

here it comes
linux is a kernel stuff

[hearty otter]

It's a kernel, you gotta say GNU/Linux

[queen flare]

i know lmao

[hearty otter]

Not OS

You're wrong even at joking

😭😭

[queen flare]

i thought you really didn't know anything about linux
so i said os, to not confuse you with theoretical stuff

[wet holly]

Its not i'm not willing to learn, but its to control urge of leaenig about remote acess

[hearty otter]

Surely

[storm storm]

It is a powerful operating system used to monitor and protect the system. It is often used by hackers to do illegal things

[queen flare]

but yes you're right

its technically a kernel

[hearty otter]

I was jk whole time lmao

[queen flare]

which is used to build operating systems, which you'd refer to as linux distros

[hearty otter]

Damn are you hacker

[queen flare]

[storm storm]

Understanding it will help you understand how hackers work

I'm not hacker =))))

[hearty otter]

Damn bro if you're not one, then why you talk about them

😭😭

[queen flare]

i wanna be a hacker one day

[storm storm]

I haven't even finished 4 years of college, how can I have enough knowledge to be a hacker? If I was that good, I would have become a white hat hacker already =))))

[storm storm]

sounds cool

be a legal hacker and don't do anything bad

[wet holly]

@storm storm bro pleassseeeee

Hellllpppp

Can i use eaglespy like tool in kali

[storm storm]

How can I help you when I can't even be sure you're using it for the right purpose?

[wet holly]

How would i prove broooo

[storm storm]

My honest advice is if you want to learn about linux operating system then start with the basics first after you have knowledge and professional ethics there will be people to help you

[ornate lynx]

guys how do i start to learn hacking?

[wet holly]

Same

[storm storm]

Start with the basics like networking, programming languages

U can learn at try hack me

[ornate lynx]

in programming languages i already learned python i'm not an expert but it can help

[storm storm]

Programming languages ​​are also related to tools, it will also make you understand how the source code works. This is really important when learning cybersecurity

[heavy kindle]

can i create a web server here in tryhakme and then try to hak it from outside?

[storm storm]

apparently not

[heavy kindle]

or its just about attacker and victim hosted on same tryhackme machine

[storm storm]

you don't need to do that, in try hack me it has a virtual lab to practice

[heavy kindle]

aha

and i can set up my own webserver there?

[storm storm]

if it is not enough you can also go to hack the box

[versed veldt]

However, nothing is stopping you from designing your own html/php file hosting it using Python simple server and hitting your own site you host to help learn how to defend

[blissful current]

not here but u can setup ur own labs

for that also many factors matter the Web Hosting , Domain, Network/ISP, Dedicated Server etc should be owned by you
else its pretty much illegal

making your own site and hosting it somewhere on platforms and trying doesn't count as "Owning" so be careful of that

[heavy kindle]

yes

[heavy kindle]

yes

so maybe hack my own webserver hosted on a local machine using the ip is ok

[versed veldt]

Well, you'd be hosting on your own machine, as localhost not an actual world wide host. Idk, really

There's "grey areas" in between the white and black areas. Got to be careful with the things you try

[slow cloud]

if its a local machine that you own you can do whatever you want with it

[heavy kindle]

ye

[slow cloud]

otherwise stuff like https://www.vulnhub.com/ wouldnt exist

[blissful current]

i think so ...as long as its isolated in ur network or VM and the Hardware/softwares u would use is owned by u

[versed veldt]

Yeah, that's what I was trying to get at, use python simple server to self host

[heavy kindle]

vulnhub is the same? hacking from vulnhub local machine to local vulnhub server?

[versed veldt]

Vulnhub is just a list of known exploits for services

DO NOT try attacking the vulnhub server please

[heavy kindle]

i see u can create virtual machines there

[versed veldt]

wait, I maybe thinking of the wrong site lol. Let me look

[heavy kindle]

or is the virtual machines that u download and then host them locally or what

[modest charm]

it seems so. You download vulnerable vms and play with it locally

[versed veldt]

It's basically CTFs, HackMyVm style. Download the VM, host it in your machine and then try to hack the VM

[modest charm]

I never used it though

[heavy kindle]

ahaa

[heavy kindle]

i see

thanks guys for the info

[versed veldt]

https://hackmyvm.eu/

That offers a lot of hackable VMs as well

[cerulean aurora]

How to use OTMIN Seceon AI's automated email system to send reports

[lucid maple]

Is it free

[blissful current]

probably using TLS (587) or SMTP (25) in Email Server Settings
and using the Report Automation sections
?

you'll also need a Domain

[knotty valve]

Or POP if you're an oldy

[crystal moss]

Today it is a webinar from THM "Boosting Offensive Ops with AI" who is attending ?

Hello @knotty valve Tomorrow it is time:D

[knotty valve]

Yesss

Don't think I'm gonna be sober for half of it

So it's gonna be fun

[cerulean aurora]

im unable to find this section Report Automation sections

domain like what ?

[rapid merlin]

I read that as “ pop if you’re an old lady” I just opened my eyes 😂

I’m crying

[knotty valve]

LOL

[crystal moss]

We decided to run both, some run Nahamsec and some HackOSINT, my group runs OSINT... hehe.. drunk CTF:D

[knotty valve]

Both work in this context

[crystal moss]

whare do i get a key? heheheh. Should that day come.. Then it's time to write your own...

[knotty valve]

Yeah tonight's not been the best for me

I feel like I'm one bad moment away from just yeah

Probably shouldn't express that here LOL

[blissful current]

[sick lance]

Reports of what?

[cerulean aurora]

threats

[inner tendon]

…

[round onyx]

https://tenor.com/view/pat-head-pat-comfort-anime-gif-12004190

Hope you can recover from this slump

[crystal moss]

Tip again about the Webinar that is today organized by THM with the topic "Boosting Offensive Ops with AI" starts at 04:00 EM

[knotty valve]

Enough drinks and it'll disappear

Eventually

[chilly veldt]

I am laying home sick, so most likely no ctf for me

[knotty valve]

F

[chilly veldt]

but one of my teams are playing nahamcon

[knotty valve]

Hope you get better Bella 🩶

Half my team is doing hackosint

[chilly veldt]

just some fever and a hurty throat

[stable agate]

Unable to purchase TryHackMe subscription

[crystal moss]

Not fun.. I wish you get batter!

[sharp citrus]

@stable agate

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 22, 2025, 10:43 AM

[knotty valve]

Did I beat scrubz to it

Lmao

[crystal moss]

contact support!

+rep @knotty valve

[twin ridge]

Gave +1 Rep to @knotty valve (current: #165 - 52)

[stable agate]

okk

[knotty valve]

Undeserved rep smh

[crystal moss]

Noo.. you are helpful..

[sick lance]

Nope. 😄

[knotty valve]

Damn oh well 😂

[grizzled stump]

Wsg

[round onyx]

Scrubz is the one to beat I see...

[grizzled stump]

How’s everyone this fine morn

[round onyx]

Geolocating interiors should be considered unusual torture/punishment

[knotty valve]

Lmao

There's enough evidence in the interior lol

I may be coaching this CTF then lmao

[round onyx]

I'm gonna need to take another look at it in detail?

[knotty valve]

Yep

[knotty valve]

Upsetti spaghetti today

Today went from okay to horrible

[crystal moss]

Hello.. Im just fine.. I just finished writing a small compilation of insights etc from last year's HackOsint so the team I'm in charge of this year has some good info.. How are you?

[crystal moss]

😦 i hope it gets batter !

[knotty valve]

I'll be alright

[crystal moss]

That's for the best, it'll be tough for you tomorrow otherwise..:S

[knotty valve]

Oh tomorrow is gonna be horrid lol

[crystal moss]

🙂

[knotty valve]

It'll be one hell of a hangover

[crystal moss]

hehe

[knotty valve]

About six standards deep lol

Maybe more

[crystal moss]

i do not drink at all....

[silver sky]

No alcohol for me either

Fight camp

Eating clean

[crystal moss]

I've done it before, but honestly it's not something I like. Sure, it can be nice to have a beer sometimes, or a cider. But it happens extremely rarely.

[blissful current]

[crystal moss]

I don't smoke cigarettes (anymore, not even a joint :p) but I have a huge addiction to snus!

[blissful current]

[knotty valve]

I smoke which I DO NOT recommend

It's a horrible habit

[chilly veldt]

snus is good

[blissful current]

i have never done smoking/vape/hookah thing etc
never will

[chilly veldt]

don't take snus anymore though

[blissful current]

whats snus?

[knotty valve]

Good

Don't start

[knotty valve]

Tobacco iirc

[chilly veldt]

lip pouches

zyn

[knotty valve]

God it's hard to type on a moving tram

[blissful current]

oh ok

[versed veldt]

yes

[knotty valve]

At least the one perk of my tolerance is I'm still coherent and able to walk straight even when intoxicated

[queen flare]

what ctf are we discussing

[knotty valve]

Earlier we were talking about HackOSINT and Nahamacon iirc

I think that's how the latter was spelt

[queen flare]

[crystal moss]

I know.. I often write while I'm out on the town walking or on the way to the subway, then it often goes wrong and people think I'm completely stupid hehe..

[round onyx]

You have someone to take care of you during the hangover period?

[blissful current]

go register us in them too ..idk

[kindred sinew]

GG im top 3 on worldwide monthly leaderboard

[knotty valve]

Spending tmrw alone

Like usual

[queen flare]

is it still going on?

[crystal moss]

i thik it was Nahamsec

[blissful current]

idk

[knotty valve]

Ahhh

[round onyx]

Mood

[kindred sinew]

will i get any reward from tryhackme if i will end monthly leaderboard global on 1st?

[knotty valve]

Yeah that makes more sense

[crystal moss]

🙂

[queen flare]

i don't think so

[kindred sinew]

rllyy?

[queen flare]

except for bragging rights

[kindred sinew]

not even swag?

[blissful current]

neh

MAYBE a Badge but not sure

[kindred sinew]

i will research

[queen flare]

i have never heard of someone being rewarded for their monthly rank

[crystal moss]

@knotty valve you joining the webinar by THM today?

[blissful current]

which country Leaderboard btw?

[knotty valve]

Don't think I'll be sober enough to even retain the info lol

Or awake for it

[crystal moss]

haha.. 🙂

[queen flare]

i was on the global monthly leaderboards for a short time once

[knotty valve]

What's the UTC time for it?

[crystal moss]

04:00 EM

[queen flare]

started as soon as the month started and solved a bunch of room

i was eventually surpassed by others

[round onyx]

2100 hmm I could join in

[crystal moss]

do it:D

[knotty valve]

I'll be asleep during it

F

[blissful current]

[queen flare]

wdym

i didn't join this server 9 days ago

[blissful current]

READ Properly

Not u

[queen flare]

which guy

a lot of high ranked people who grind on thm haven't joined this server yet
its not really suspicious

[blissful current]

ya thats tru too

anyways

[queen flare]

how can sequencer know and list the token name in response i am testing for, if i only sent a captured request to the login form, that only contains a cookie and no mention of the token in it

i only captured the request and didn't forward it through proxy yet, so how can burp know what things are present in the response already?

[smoky widget]

sayyy, without judgement, would tryhackme look great if they had theme collabs like how fortnite has these events and stuff

[knotty valve]

Well outside of scope imho

Ohhhh events

[blissful current]

what?

[knotty valve]

Sorry I only read half of it

I thought they meant website

[stark sequoia]

facts but they do have some rooms like the my hero academia one

[knotty valve]

And not events 😅

[blissful current]

Burp doesnt solely list or analyze based on capture request, it kinda examines the actual responses and provide the list I guess
idk maybe find some vids on how Burp actaully works in backend

[smoky widget]

thats what inspired me to ask as a matter of fact !!

[knotty valve]

Would probably be something they might do yeah

[smoky widget]

well, events might be a bit difficult to arrange but themes would for sure !

[queen flare]

yeah but i didn't yet forward the request, i captured it using proxy and intercept was on, and i didn't click "forward"

[knotty valve]

Sorry about dismissing it 😅
I only read the first half

[smoky widget]

cant wait for sure 😉

[queen flare]

i did send some requests to the same url earlier though
did it analyse those responses to be able to list the cookies and fields?

[stark sequoia]

I also think its cool if they added an AI feature for the lessons that summurizes and tells you what you covered the previous day, like what datacamp does

[knotty valve]

It's a nice use of LLMs

[blissful current]

then idk ..

[queen flare]

[queen flare]

maybe this is the case then

[knotty valve]

Yeah might be worth watching YT vids on how it works

Or read the burp docs

Idak how sequencer works either lmao

[queen flare]

hm, guess i gotta read docs
thanks

+rep @blissful current

[twin ridge]

Gave +1 Rep to @blissful current (current: #199 - 43)

[queen flare]

+rep @knotty valve

[knotty valve]

Nah I don't need the rep

It was Karma who suggested the main idea

[queen flare]

you didn't get it either, for some reason lmao

[knotty valve]

To prevent rep spam

[queen flare]

oh right

rate limit

[sick lance]

#room-help

https://www.404media.co/researchers-scrape-2-billion-discord-messages-and-publish-them-online/

The irony is the answer is in your question.

[blissful current]

exactly lol

[knotty valve]

Damn

[blissful current]

ping

is the command

[queen flare]

the syntax is ping 10.10.10.10

[knotty valve]

😂

[deft quest]

The webinar today is by 15:00 WAT right?

[knotty valve]

Me whenever I overthink things

[blissful current]

i was gonna answer but i was wondering if i got his question wrong or something lmao

[knotty valve]

I thought he meant for options

[queen flare]

same xD

[knotty valve]

And not literally ping <target>

I was gonna suggest using man ping

[blissful current]

ya

[deft quest]

@knotty valve ?

Any idea please

[knotty valve]

Idk I'm not attending it lol

[sick lance]

Where is it advertised?

[knotty valve]

I'm asleep whenever it's happening

[deft quest]

Why not?

[queen flare]

i don't think i've read ping commands manual yet lmao

[knotty valve]

Neither have I

[deft quest]

They sent a mail
But the time there is unclear

[knotty valve]

I just know ping -c <target>

[sick lance]

Screenshot?

[queen flare]

ya same

[knotty valve]

It's technically ping [-c amount] <target> but whatever

We understand what c does

[blissful current]

<t:1747922400:F>

[sick lance]

It's 3pm GMT.

[knotty valve]

I'd appreciate if autocorrect would stop capitalising me

[sick lance]

So in 2 hours and 10 mins.

[deft quest]

Is this in my time zone?

[knotty valve]

Midnight my time

Jesus

[knotty valve]

Yes

[blissful current]

yes

[sick lance]

What is your timezone?

[shut hawk]

Do you live in the UK?

[frozen charm]

I just did a quick OSINT check on the #1 player on my THM weekly leaderboard

N know what?

He's just copy pasting from the walkthroughs

[deft quest]

GMT +1
Using WAT here

[blissful current]

ikr they're busy cheating themselves

[deft quest]

😭you didn’t plan to attend anyway

[frozen charm]

Wot do they get from it?

[knotty valve]

Ik

[frozen charm]

mfs

[knotty valve]

I'll be asleep when it's on

Lol

[deft quest]

I wish
I wonder why the mail shows me London when that’s clearly my time zone

[sick lance]

How can you prove it.

[deft quest]

Thanks man

[twin ridge]

Gave +1 Rep to @blissful current (current: #197 - 44)

[blissful current]

<t:1747922400:R>

[blissful current]

np

[deft quest]

How’d you get the CYBR tag?

[frozen charm]

Have a look at his git prof, linkedin prof and also the tools which he made using gpt and claude

[blissful current]

same way you got the SP1

by joining their server

[deft quest]

Seen
How are you able to use timestamps so quickly

[shut hawk]

are you ok with your name being on there

[blissful current]

there's a site for it , i have it bookmarked on ez/quick access lol

[crystal moss]

thanx mate.. bad OPSEC from me...

[deft quest]

Oh
Makes sense now
I thought you knew how to actually type the command on discord

[shut hawk]

👌 all good

https://hammertime.cyou/en-GB

[sick lance]

That doesn't prove anything?

[deft quest]

Oh shooot😂
Phishing 101

[deft quest]

Thanks!

[sick lance]

That would be more social engineering.

[deft quest]

You’re right

[crystal moss]

normally ismy OPSEC ok, but today.. not so, apparently hehe..

[shut hawk]

It happens to us all

[round onyx]

yep

made that mistake once and never again

[kindred sinew]

global

[blissful current]

nice

[kindred sinew]

global top 3

[queen flare]

dang, congrats

[blissful current]

crazy , congratz

[frozen charm]

congo

[crystal moss]

In some situations it can be devastating, especially if you're chasing bad guys.. OPSEC is something to hold tight to! But sockpuppets have many names and faces 😄

[gusty inlet]

https://tenor.com/view/hello-chat-gif-10597036249285788881

[crystal moss]

Good job!

[sick lance]

The worst thing about finishing uni, is awaiting our results.

[carmine stream]

morning THM team

[sick lance]

Good afternoon.

[carmine stream]

3rd remote day this week, another 8 months to a year to go

not sure how i feel

I def need like a few days to just deep clean-

i got to much pto there trying to make me use it

[sick lance]

@thorny parcel

Please don't send me a DM without asking, or even letting me know what it's about.

[carmine stream]

damn straight called him out

[sick lance]

It's against our rules to DM/friend request without asking.

Although I'm a mod, some context would be nice.

[carmine stream]

Rules are rules I guess

[rapid merlin]

Rules are rules

[cursive bobcat]

rules / rules = 1

[carmine stream]

I need to level up I dont like yellow

[queen flare]

after levelling up you'd hate green

[carmine stream]

awe man

[queen flare]

because there are no other colours except blue when you're master

then green goes on again

[rapid merlin]

Greens my favourite colour

[carmine stream]

can yall just make me purple permanatly

[queen flare]

oh you levelled up
congrats

[carmine stream]

ill boost 🥲

[rapid merlin]

Thanks ☺️

[twin ridge]

Gave +1 Rep to @queen flare (current: #206 - 41)

[cursive bobcat]

outsource your account to upgrade lol

[carmine stream]

oh nah nah

[deep geyser]

Kream250?

[carmine stream]

what

[sick lance]

Green is better than pee yellow.

[sick lance]

Doing so, breaking the ToS of TryHackMe.

[carmine stream]

I didnt bust my ass for piss yellow

[queen flare]

so it is known as pee yellow

[round onyx]

i have a couple sock puppets currently

[blissful current]

[crystal moss]

Moring!

[safe oxide]

Hallo people

[carmine stream]

what up geek

[crystal moss]

hello!

[cursive bobcat]

lmao bruh it was a joke

[safe oxide]

I could be a nerd void

[safe oxide]

Hiii julle

How's it goin

[sick lance]

"bruh" jokes are supposed to be funny.

[crystal moss]

Just fine.. Preparing myself and my team for HackOSINT tomorrow.. So what about you?

[knotty valve]

What did I just come back to

[cursive bobcat]

mod crying

[safe oxide]

Yoo osint

[knotty valve]

I don't see a joke anywhere tbh

[sick lance]

Mod isn't crying, mod is doing their job and ensuring the rules are being followed.

[crystal moss]

haha, I saw I forgot to write "about you" so it just became "So what?" ..

[sick lance]

We don't, and have never allowed rules that break ToS, illegal or unethical topics

[knotty valve]

I was genuinely confused about that

[crystal moss]

understand it

[knotty valve]

Two more train stops

Then I'll be almost home

[queen flare]

i would like to see companies listing sal1 and pt1 certs in their recruitment ads

[crystal moss]

It would have seemed like I was a really nasty person if I hadn't noticed and changed it.

[knotty valve]

It'll take a while

[queen flare]

the certs have a great syllabus, but it would take a bit for recruiters to see what its worth

[sick lance]

SAL1 is being listed on one right now.

[knotty valve]

I thought someone was being super intrusive lmao

[safe oxide]

[queen flare]

that's great

[knotty valve]

Certs take a bit to popularise through employers

[crystal moss]

However, these certificates will not be able to compete with OSCP etc.

[knotty valve]

Yeah

[safe oxide]

Harder stuff is usually more safer to list

[knotty valve]

An employer will take a Pen-200 completion over PT1

[queen flare]

i reckon they might
thm's getting popular lately

than its been a couple of years ago

[knotty valve]

Completely different difficulties and one is proctored which employers prioritise first

[queen flare]

i got a couple of years till graduation anyways

so i'll be able to see how it goes before taking any cert

[crystal moss]

But these certificates from THM are not bad to have, it shows that you are committed and have a drive to learn.

[knotty valve]

Not to throw THM under or anything, but if I was giving candidates to a job, I'd take someone with OSCP over PT1 or SAL1

[sick lance]

I mean..

Duh?

They're new...

[knotty valve]

Cause I can be safe in knowing there's no copy-paste solutions with proctored exams

[crystal moss]

Yep, that's right.

[knotty valve]

Nothing to do with maturity here

[carmine stream]

the OSCP is also like double the price

[queen flare]

yeah, but do you see prioritising sal1/pt1 over OSCP in a few years?
i don't think so either

[knotty valve]

Worth it as well since it covers a lot more iirc

[crystal moss]

and more extensive

[sick lance]

I mean, OSCP isn't essential in getting a job.

It helps.

[queen flare]

but yes, i bet thm certs would be quite popular in a few years

[cursive bobcat]

yeah the certs on THM are just like doing a course on coursera

[sick lance]

But it's not

"You don't have OCSP, no job for you".

[knotty valve]

They'll be seen the same way as MS and Google certs

[queen flare]

what ms google certs?

[carmine stream]

i dont think they compare at all

[knotty valve]

It's also experience as well as studies

[sick lance]

Doesn't change my point.

[queen flare]

if you're talking about linkedin/coursera one's
i don't think its fair to compare them to thm certs

[sick lance]

It's not essential.

[knotty valve]

It kinda is for a lot of places

[crystal moss]

Maybe it's not the most important, but it's a big plus if you have OSCP and other "heavier" certificates. For example, I have a friend who is the head of security and pentesting at a large company and is currently looking for a new hire, and anyone who has OSCP or heavier is the one who has a better chance of getting the job!

[sick lance]

...No?

I've been offered two jobs that don't require it.

[knotty valve]

I can short cut it by going defence route and it'll amount to the same as an OSCP

[sick lance]

It's not even asked for.

[knotty valve]

I've seen at least 50 positions need it in two weeks

[sick lance]

Ok, just because you've seen it.

[carmine stream]

Yea HR typically doesnt know what there looking for anyways

[sick lance]

It's marked essential for a job 🤷

[carmine stream]

they also say u need a bach degree

[knotty valve]

Just because you saw two jobs without doesn't mean it's not essential

[crystal moss]

It may not be a requirement, but if they choose between two people and the one who has it is most likely that the one who has it will get it.

[gloomy sedge]

Hey

[carmine stream]

I def dont have one and dont plan to get one

[knotty valve]

You're not disproving me here

[sick lance]

Because you seem to think you're right.

So it won't change your mind.

Regardless of what you're told.

[knotty valve]

So do you?

[carmine stream]

There are plently of jobs that do and there are jobs that dont

[knotty valve]

It's gonna be back and forward lol

[cursive bobcat]

fight

[carmine stream]

whether you think your right or not doesnt matter the data is thare and you can do what you will with it

[knotty valve]

Agree to disagree

Idrc that much about who's right

[carmine stream]

some of us have landed jobs just fine without it

[crystal moss]

Of course, it also depends on what role you are looking for, what company it is and what requirements they have.

[queen flare]

i think what ashlynn wants to say is that if you're a recruiter, and have 2 candidates to choose from, one of whom has a thm cert and the other one has an oscp cert, she would choose oscp over thm

this i agree with

[sick lance]

I mean, that's given

[cursive bobcat]

well they are official certs arnt they

[carmine stream]

Yep and the landscape will change

people wont be required to drop the cash like that to specialize

[rapid merlin]

I put the cereal back the fridge

[crystal moss]

This is from the ad that my friend is the head of the department at and I think it's pretty much the same across the board: Desirable: Certifications in: GNFA, GCFE, GPEN, GREM
Desirable: Offensive Security Certified Professional (OSCP) or Organization for Security and Co-operation in Europe qualifications

[knotty valve]

I'm just gonna chalk it up to a regional moment

And agree to disagree

[queen flare]

[carmine stream]

https://tenor.com/view/the-office-clap-two-thumbs-up-thumbs-up-steve-carell-michael-scott-gif-16870560664593295488

[queen flare]

imma post another ben emote and then go grind on thm or something

[knotty valve]

It's not really worth arguing over lol

[queen flare]

[cursive bobcat]

you are both wrong anyway

[queen flare]

i actually just finished grinding on thm

imma go touch grass

[carmine stream]

https://tenor.com/view/oh-no-oh-no-anyway-gif-18887547

[crystal moss]

Everyone has different opinions and perceptions, and it can differ greatly between different companies and perhaps even in different countries.

[sick lance]

Job listings can be wishlists.

[crystal moss]

Of course, as in the ad I referred to: "desirable"

[cursive bobcat]

maybe cooler climates are more chill on the certs

[knotty valve]

Or hard requirements in cases

[crystal moss]

as said, can differ from case to case.. but as said, it is of course a boon to have heavy certificates regardless of whether it is a requirement or not..

[knotty valve]

Damn light pollution is visible af

[crystal moss]

haha, didn't even know there were fans. had to look up information about it..

[loud marlin]

ill be home in 10 days. atm in bussines trip on 2nd half of europe 🙂

[cursive bobcat]

turn the light off

[knotty valve]

Wish I could turn off the suburbs power grid

So I could see the stars

[cursive bobcat]

hack it

[crystal moss]

That would be a cool trick to show your friends 😄

[unique phoenix]

Google stars and u'll see em

[carmine stream]

dont get muted lol

[slow cloud]

so glad you dont too much light pollution here

[crystal mauve]

good morning

[crystal moss]

Apparently Light pollution is a significant issue in Sweden, particularly in urban areas, but I didn't even know it existed...

[carmine stream]

good morning

[knotty valve]

If only hijacking 3 different power junctions was that easy /j

[crystal moss]

moring.. how are you?

[knotty valve]

Afaik junctions are mostly airgapped

Or physically controlled

[blissful current]

Very WatchDogs-ful

[knotty valve]

Ikr

[crystal moss]

🙂
There was a program in Sweden many years ago where they tricked celebrities with the hidden camera and did pranks.. A friend of a celebrity showed how he "hacked" several skyscrapers that could be seen from their window where the doim was sitting, it was kind of funny..

[shy vortex]

gooodmorning

[sick lance]

Power stations have IT/OT.

They're fun to hack.

[knotty valve]

Ohhh

Maybe something I could get into one day

[crystal moss]

ban warning!

😛

[slow cloud]

Erm, that is illegal 🤓

[cursive bobcat]

call KGB lol

[sick lance]

Usually just abuse then modbus traffic.

Systems are are legacy so they're vulnerable to alot of stuff.

[knotty valve]

Surely it's only accessible internally

[sick lance]

Somethings talk to devices out on the field zone.

[crystal moss]

But not so fun when they in black suits come and knock at the door..

[carmine stream]

youd b surprised

[blissful current]

[cursive bobcat]

imagine having a little ai hacker robot that could sneak into such places

[sick lance]

Yeah, but sometimes methods of getting in can be stupidly easy.

[round onyx]

this starting to sound like the type of hacking in watch dog 2

[blissful current]

Very WatchDogs2-ful

[blissful current]

ya lol

[knotty valve]

Yeah that I'm not too surprised about

Given how oil lines in America got hacked

[crystal moss]

There are many examples where critical systems have had really stupid configurations or misconfigurations.

[knotty valve]

Checks out lol

[sick lance]

Have you seen Pablo Holmes created a laser that zapped mosquitoes carrying malaria?

[blissful current]

I'll Watch Final Destination at night ...in my VR … anxiety++

[cursive bobcat]

lol i have now

[crystal moss]

just one of many examples eg: Critical SCADA system – Password: admin/admin
Several water utilities in the US and Europe have had web-based control panels exposed to the internet, sometimes without authentication at all – or with default passwords such as admin/admin or root/root.
Example: In 2011, a group (Cyber ​​Berkut) hacked a water utility in Illinois via their exposed SCADA web interface, in part because the password had never been changed from the factory settings.

[slow cloud]

if iot is "internet of things" is OT just "of things"?

[sick lance]

Scads has a jsp backdoor issue also

OT is operational technology

[crystal moss]

or Traffic/Signal Control Systems where Telnet/FTP has been open
Sometimes traffic lights, subways and signal systems have exposed legacy systems on e.g. port 23 or 21, often without any authentication at all.
Black Hat talk 2014: “How to Hack All the Traffic Lights” showed that US traffic systems had publicly accessible consoles with default passwords

[slow cloud]

I feel like "of things" would fit better

[blissful current]

[carmine stream]

I couldnt believe the security on scada when I got in the work field

[blissful current]

so IT would also be "Internet Things"

[carmine stream]

its ridiculous

[crystal moss]

It's like I always say - people are the biggest vulnerability and threat to security...

[blissful current]

[slow cloud]

What else could it be

[sick lance]

Information technology

[cursive bobcat]

https://tenor.com/view/pennywise-clown-it2017-smile-laugh-gif-10686550

[knotty valve]

Interactive Teaching

[crystal moss]

Then regarding water purification etc., something happened about a year ago in Sweden, a small drinking water facility in a small town was broken into, there were no alarms or surveillance cameras there... luckily nothing happened, probably some meth head with a crowbar, but it's scary..

[knotty valve]

Wha-

[blissful current]

how coincidental ...i had got a Job Post Notification for OT CyberSec from GlassDoor lol

[knotty valve]

Lol

[crystal moss]

yes it is crazy

[crystal moss]

This is from a newspaper in sweden: "The day before Christmas Eve, a break-in was discovered at a raw water source in Tranemo municipality. Now another one of the municipality's water facilities has been compromised. This time there is no risk that the water is unusable."

[knotty valve]

Oof

[crystal moss]

I don't understand how they can leave it without an alarm or camera surveillance. It was also located in a remote forest area with a simple door, so they could work completely undisturbed.

[plucky ferry]

https://tenor.com/view/eat-bunny-rabbit-chewing-cute-gif-17656744

[crystal moss]

Damn. I've made the same mistake again, I've been way too active with ctfs and rooms on both THM and HTB, now my motivation is starting to drop again.. I know I shouldn't do that, I should take a few days off and do something else, but I can't keep myself away:D I also know that the motivation will come back, but I should have learned by now..

[dark mason]

This was from an OSINT challenge, the ctf was also state sponsored

[carmine stream]

lmfaooo

[carmine stream]

balance

https://tenor.com/view/thanos-perfectlybalanced-gif-18301221

[knotty valve]

Insane

[mellow narwhal]

Play a video game

or play some physical sports

listen to your fav playlist

[safe oxide]

Physical lol

Julle go run a mile

A sub 7 min mile

[knotty valve]

Doubt any of us could do that

[safe oxide]

Hmm prolly if someone is skinny enough

Ive seen skinny crossfit ppl do insane miles

[knotty valve]

I'm 50kg and I can't do it 😂

[safe oxide]

Nah that ain't skinny

[knotty valve]

For 5'10

[safe oxide]

Yes

[knotty valve]

I'm severely underweight

[safe oxide]

5 10 50 kg lol

[knotty valve]

Yes

That's underweight lol

[brisk abyss]

Just chill bro @knotty valve

[safe oxide]

I have a friend whose like 56 he's 40 and he thinks he's oversight lol

[finite basin]

yoo

[safe oxide]

Superman wearing saitama merch

[knotty valve]

Body image moment

But no, in my case, I'm medically underweight

[safe oxide]

How do you find out if you're underweight?

Bmi?

[knotty valve]

BMI and medical examinations

[safe oxide]

Hmm

[knotty valve]

BMI doesn't account for muscle mass vs fat mass, hence the need of medical evals

[brisk abyss]

Eat something nice bro, drink enough water and don't sleep late

[knotty valve]

That doesn't work for everyone, sis

There's a magical thing called metabolism

And also eating disorders

[sick lance]

CrossFit is boring.

Hyrox and OCR is better.

[safe oxide]

The crossfit in modern form is

[brisk abyss]

Maybe you need to try, or overcome it through some way I guess

[safe oxide]

But the old one was just the fire fighter training

[knotty valve]

I keep thinking of the computer vision OCR whenever I read that

[safe oxide]

Gotta fear that one

[knotty valve]

It's a pain to control

[safe oxide]

Def

[knotty valve]

Generally you're not supposed to control it cause it's going to change naturally

[safe oxide]

Sometimes it easy to gain wait you start walking a bit and now you're a bug lol

[crystal moss]

Woop Woop. Soon time for the THM Webianar.. waiting

[pine sonnet]

Hello

[stark sequoia]

hi

[slow cloud]

hi

[lucid elk]

hi

[mossy river]

#room-help

[knotty pendant]

https://tenor.com/view/protogen-protobean-burble-proto-gen-gif-5948932679344144577

[crystal moss]

Now the webinar is over.. Thanx THM.. Nothing new that I learned but always interesting..:P

[upper knoll]

You sent an email to support?

Or head over to #site-support maybe able to get some help there

[crystal moss]

Some countries it's not possible to buy because of something with banks. I don't know if that also applies to India..

[sharp citrus]

TryHackMe's Email

TryHackMe's support email address.

​

[e-mail]

TryHackMe Socials · May 22, 2025, 2:52 PM

[crystal moss]

contact support by mail.. i did post a link.

[bleak quartz]

A friend of mine has @worldly hearth, so ig he could help u?

[crystal moss]

it is just the last digtits..

[sick lance]

Let's not advise members on how to bypass restrictions.

They're placed for a reason.

[brisk abyss]

just level up, woothoot

[boreal scarab]

https://tenor.com/view/fox-hungry-butter-kit-gif-18290527340172991522

[crystal moss]

gratz

[brisk abyss]

almost 4 years on the platform kk

[crystal moss]

Good job, and you probably haven't missed a single day on your streak 😄

I personally have about 500 points left for a modest 0x9 [Mage] ..:D

[brisk abyss]

almost got 365 badges to be honest

[hearty otter]

If i have 6 eggs in the fridge, how many eggs get sold in the US each year

[slow cloud]

All the apt rooms are so fun

[sick lance]

The number of eggs in your fridge and the number sold is irrelevant. 😄

[hearty otter]

That's basically how pentesting problems are

[bleak quartz]

Using an alternative payment method because your bank doesn’t fully trust THM doesn’t violate any of Tosses.

Many banks have these security measures in place (which you can often request to have removed or made to be less strict, at least in most countries, you can google if that's the case in urs). They’re simply trying to protect users from potential risks. It’s not illegal to use alternative payment methods in such cases it’s basically just a workaround and also it removes the liability from the bank of any scams like if you buy a paysafe card and use it to buy a game on website thats turns out to br a scam, the bank is not responsible it's paysafe whos job is to help u, yes bank can too but it's not their "duty". Anymore

[silent nova]

This question is missing a lot of factors for solving.

E.g.

• How many eggs you buy on average
• Timeframe of buying eggs

[hearty otter]

Check the logs in the system, maybe you can find something

[silent nova]

I'm partaking in a Tier 2 Security Analysis-based time-attack competition soon, and I can see your general point of view when it comes to these things. When filtering through the SIEM for logs during training, me and the other members of my team kept running into issues with how exactly to look for the logs that we needed.

(In one case, what network connection was suspicious simply off of # of connections logged in the firewall)

[hearty otter]

Real

[sick lance]

There are actuall some areas TryHackMe don't offer the chance to purchase a subscription.

So using this method to bypass, would be unethical and violating the ToS of THM.

[hearty otter]

Idk much about security actually, just enough to keep things secure when I build something

[eternal roost]

Glad it was interesting nonetheless 🙂

[sick lance]

Do they even live in the US?

[hearty otter]

What if they use vpn

[sick lance]

VPN is essential to the answer of the question.

But there are ways to tell if they're using a VPN.